zidane 5.4.1 → 5.4.3

package/dist/types-IcokUOyC.js.map

@@ -1 +1 @@
-{"version":3,"file":"types-IcokUOyC.js","names":[],"sources":["../src/types.ts"],"sourcesContent":["/**\n * Shared types for the agent system.\n */\n\nimport type { ToolDef } from './tools/types'\nimport { Buffer } from 'node:buffer'\n\n// ---------------------------------------------------------------------------\n// Thinking / Reasoning\n// ---------------------------------------------------------------------------\n\n/**\n * Thinking / extended-reasoning configuration.\n *\n * - `'off'` — no thinking.\n * - `'minimal' | 'low' | 'medium' | 'high'` — explicit token budget. Maps to\n *   provider-specific reasoning controls (Anthropic `thinking.type='enabled'`\n *   with a budget; OpenAI `reasoning_effort`).\n * - `'adaptive'` — let the model decide per-turn whether and how much to think.\n *   Anthropic-only (`thinking.type='adaptive'`). Other providers fall back to\n *   no reasoning when this value is supplied.\n */\nexport type ThinkingLevel = 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'adaptive'\n\n// ---------------------------------------------------------------------------\n// MCP server configuration\n// ---------------------------------------------------------------------------\n\n/**\n * Slim shape of an upstream MCP tool descriptor — what `client.listTools()`\n * returns per entry. Exposed publicly so hosts can persist the schemas\n * between runs and feed them back via {@link McpServerConfig.cachedTools}\n * to skip the `tools/list` round-trip on subsequent bootstraps.\n */\nexport interface McpToolSchema {\n  name: string\n  description?: string | null\n  inputSchema?: unknown\n}\n\nexport interface McpServerConfig {\n  /** Display name (used for tool namespacing) */\n  name: string\n  /** Transport type */\n  transport: 'stdio' | 'sse' | 'streamable-http'\n  /** For stdio: command to run */\n  command?: string\n  /** For stdio: command arguments */\n  args?: string[]\n  /**\n   * For stdio: environment variables to pass to the server process.\n   *\n   * Merged on top of the MCP SDK's default inherited environment — a safety\n   * whitelist (`PATH`, `HOME`, `LANG`, `SHELL`, `USER` on POSIX; `APPDATA`,\n   * `PATH`, ... on Win32). Setting this to `{}` no longer strips `PATH` from\n   * the child process. Set {@link McpServerConfig.strictEnv} to `true` to\n   * pass `env` verbatim with no inherited defaults.\n   */\n  env?: Record<string, string>\n  /**\n   * When true, {@link McpServerConfig.env} is passed verbatim to the spawned\n   * process — the MCP SDK's default inherited environment (`PATH`, `HOME`, ...)\n   * is NOT merged in. Most consumers should leave this off; the default merge\n   * prevents `spawn ENOENT` when a stdio server declares an `env` without\n   * restating `PATH`.\n   */\n  strictEnv?: boolean\n  /** For sse/streamable-http: server URL */\n  url?: string\n  /** Optional headers for HTTP transports */\n  headers?: Record<string, string>\n  /**\n   * OAuth 2.1 authentication (sse / streamable-http only).\n   *\n   * - `'oauth'` — enables the SDK's OAuth flow with RFC 9728 protected-resource\n   *   metadata discovery, RFC 8414 / OIDC authorization-server metadata, RFC 7591\n   *   dynamic client registration, PKCE, and refresh-token rotation. Tokens persist\n   *   between runs via the host's credential store.\n   * - `undefined` (default) — no OAuth. The host may still auto-promote a server\n   *   to OAuth on `UnauthorizedError` IF no static `Authorization` header is set\n   *   (the headers check stops us from second-guessing user-managed bearer tokens).\n   *\n   * Recognized aliases at parse time: Cursor's `authMethod: 'mcpOAuth'` maps to\n   * `auth: 'oauth'` so `~/.cursor/mcp.json` pastes work unchanged.\n   */\n  auth?: 'oauth'\n  /**\n   * Timeout in milliseconds for MCP server bootstrap (connect + tool discovery).\n   *\n   * Zidane connects MCP servers lazily on the first `run()`. Without a\n   * bootstrap timeout, a slow or hung server can delay the first provider call\n   * for an arbitrarily long time even when that MCP server is never used.\n   *\n   * Default: `10000`.\n   */\n  bootstrapTimeout?: number\n  /** Timeout in milliseconds for MCP tool calls (default: 30000) */\n  toolTimeout?: number\n  /**\n   * Allow-list of tool names to expose. Names match the upstream tool name\n   * (NOT the namespaced `mcp_{server}_{tool}` form). Tools not in the list are\n   * dropped before registration — the model never sees them in its catalog and\n   * the wire cost of advertising them is avoided.\n   *\n   * Mutually exclusive with {@link McpServerConfig.disabledTools} — passing both\n   * throws at bootstrap time.\n   *\n   * Composes with {@link McpServerConfig.toolFilter}: allow-list applies first,\n   * then the predicate. Composes with the `mcp:tools:filter` hook: config-side\n   * filters apply first, then the hook can further narrow the list.\n   */\n  enabledTools?: string[]\n  /**\n   * Deny-list of tool names. Tools matching are dropped before registration.\n   * Same matching semantics as {@link McpServerConfig.enabledTools}.\n   */\n  disabledTools?: string[]\n  /**\n   * Custom predicate run on each upstream tool. Return `true` to keep, `false`\n   * to drop. Receives the raw `listTools()` payload — useful for filtering by\n   * description, schema shape, or other metadata that an allow/deny list can't\n   * express.\n   *\n   * Runs after the allow/deny filter but before the `mcp:tools:filter` hook.\n   */\n  toolFilter?: (tool: { name: string, description?: string | null, inputSchema?: unknown }) => boolean\n  /**\n   * Per-server override for {@link AgentBehavior.toolDisclosure}. When set,\n   * this server's tools follow this disclosure mode regardless of the\n   * agent-wide default. Useful when one big MCP server (200+ tools) should\n   * stay lazy while smaller servers stay eager.\n   *\n   * Default: inherits from `behavior.toolDisclosure`.\n   */\n  disclosure?: 'eager' | 'lazy'\n  /**\n   * Pre-cached tool schemas to advertise without issuing `tools/list` at\n   * bootstrap. The connection is still established (the SDK's `connect()`\n   * is needed for `tools/call`) — only the discovery round-trip is\n   * skipped. Schemas are trusted as-is; the host owns invalidation\n   * (typical cache key: `(server identity, server version)`). If the\n   * server later returns `MethodNotFound` for a cached tool, the host\n   * should drop the entry from its cache so the next bootstrap re-lists.\n   *\n   * Compatible with every transport, every auth mode, and with\n   * {@link McpServerConfig.lazyConnect}. Composes with the existing\n   * `enabledTools` / `disabledTools` / `toolFilter` filters — those run\n   * over the cached schemas exactly as they would over `listTools()`\n   * output.\n   */\n  cachedTools?: McpToolSchema[]\n  /**\n   * Defer the `client.connect(transport)` call until the first\n   * `tools/call` reaches this server. Bootstrap registers the server's\n   * tools using {@link McpServerConfig.cachedTools} without touching\n   * the network, taking MCP setup off the critical path of\n   * `agent.run()`. The first invocation pays the connect cost\n   * (~200-500ms typically); every subsequent call reuses the live\n   * client.\n   *\n   * Requires {@link McpServerConfig.cachedTools} — without schemas in\n   * hand there is nothing to advertise to the model, so deferring the\n   * connection has no purpose. Bootstrap rejects the config otherwise.\n   *\n   * **Incompatible with `auth: 'oauth'`**: the OAuth handshake (token\n   * refresh / RFC 9728 metadata discovery) can fail in ways that today\n   * fire `mcp:auth:required` at bootstrap so the host can surface a\n   * login affordance *before* the model commits to calling a tool.\n   * Deferring that to first call means an auth failure surfaces mid-run\n   * as a tool-result error, which the model can't recover from without\n   * a fresh prompt. Bootstrap rejects the combination so the error is\n   * loud and proximate to the misconfiguration. Use OAuth servers\n   * without `lazyConnect` (with `cachedTools` alone, if you want to\n   * skip the `tools/list` round-trip).\n   *\n   * On connect failure (network error, transport refused), the cached\n   * promise is dropped so the next `tools/call` retries. The model\n   * sees the failure as a normal tool error. Subsequent calls remain\n   * eligible to succeed once the upstream is reachable again.\n   */\n  lazyConnect?: boolean\n}\n\n// ---------------------------------------------------------------------------\n// Tool execution\n// ---------------------------------------------------------------------------\n\nexport interface AgentBehavior {\n  /**\n   * Maximum number of tools that may be in flight concurrently within a\n   * single assistant turn. The scheduler dispatches concurrency-safe tools\n   * (`ToolDef.isConcurrencySafe`) in parallel up to this cap; unsafe tools\n   * act as barriers (wait for the fleet to drain, then run alone).\n   *\n   * Default: `10`. Set to `1` to force fully sequential dispatch regardless\n   * of per-tool flags — useful for deterministic debugging / eval-grade\n   * runs. Values `< 1` are clamped to `1`.\n   */\n  maxConcurrentTools?: number\n  /**\n   * Max agent loop iterations.\n   *\n   * Default: unlimited (Infinity). The loop runs until the model signals\n   * completion (no tool calls / `end_turn`), the abort signal fires, or this\n   * cap is hit. Set a finite value as a safety net for runaway loops.\n   */\n  maxTurns?: number\n  /** Max tokens per LLM response (default: 16384) */\n  maxTokens?: number\n  /** Thinking token budget — overrides the level-based default when set */\n  thinkingBudget?: number\n  /** JSON Schema for structured output enforcement */\n  schema?: Record<string, unknown>\n  /**\n   * Enable provider prompt caching. When on (default), the provider marks the\n   * system prompt, tools, and the last stable message with cache breakpoints so\n   * the shared prefix is served from cache across turns.\n   *\n   * - Anthropic: `cache_control: { type: 'ephemeral' }` on the last `system`\n   *   content part, the last tool, and the last message content part.\n   * - OpenAI-compatible / OpenRouter: same shape — honored by Anthropic-backed\n   *   OpenRouter routes and by Gemini; ignored (no-op) by providers that cache\n   *   automatically (OpenAI, DeepSeek, Grok, Groq, Moonshot).\n   *\n   * Usage is surfaced via `TurnUsage.cacheRead` / `TurnUsage.cacheCreation`.\n   *\n   * Default: `true`.\n   */\n  cache?: boolean\n  /**\n   * Soft per-turn cap on total tool-output bytes. When the sum of `outputBytes`\n   * across a turn's tool results exceeds this value, the loop injects a\n   * synthetic user message instructing the model to summarize before calling\n   * more tools, and fires the `budget:exceeded` hook.\n   *\n   * Measured **post-`tool:transform`** so consumer truncation counts toward the\n   * budget. Off by default (undefined / `0` disables the check). A reasonable\n   * starting value for OSS-model integrations is `32768`.\n   */\n  toolOutputBudget?: number\n  /**\n   * Deduplicate identical re-reads of the same file in `read_file`. When the\n   * model re-reads a file with the same slice and the bytes haven't changed\n   * since the last read in this session, the tool returns a short stub\n   * instead of re-emitting the full content. Pairs with the read-before-edit\n   * guard in `edit` / `multi_edit`.\n   *\n   * Requires a session (set via `createSession()`); without one, the flag is\n   * a no-op since per-session state has nowhere to live.\n   *\n   * Default: `true`.\n   */\n  dedupReads?: boolean\n  /**\n   * Taper the thinking budget over the course of a run. Late turns are\n   * usually checkpoint / cleanup work where reasoning rarely pays for\n   * itself; early turns benefit most. Two forms:\n   *\n   * - **Struct** — geometric decay starting after `afterTurn`, multiplying by\n   *   `factor` each subsequent turn, clamped to `floor`. Example\n   *   `{ afterTurn: 5, factor: 0.5, floor: 1024 }` with a base budget of 8192:\n   *   turns 1-5 = 8192, turn 6 = 4096, turn 7 = 2048, turn 8+ = 1024.\n   * - **Function** — `(runTurn, baseBudget) => number`. Arbitrary curves;\n   *   `runTurn` is 1-indexed, run-relative (resumed sessions reset).\n   *\n   * No-op when `thinkingBudget` is unset. Honored by every provider that\n   * respects `thinkingBudget` (anthropic explicit-budget `enabled` path,\n   * adaptive `maxTokensCap`, openai-compat `max_tokens` padding).\n   *\n   * Default: `undefined` (no decay).\n   */\n  thinkingDecay?: { afterTurn: number, factor: number, floor: number } | ((runTurn: number, baseBudget: number) => number)\n  /**\n   * Per-tool soft call budget for this run. Keyed by **canonical** tool name.\n   * On the first call after the run-cumulative dispatched count for that tool\n   * reaches `max`, the framework fires `onExceed`:\n   *\n   * - `'steer'` (default) — let the call execute, but emit a synthetic user\n   *   message after the turn that nudges the model away from re-calling the\n   *   tool. Reuses the existing post-turn steer pathway used by\n   *   `toolOutputBudget`. Fires `tool-budget:exceeded` with `mode: 'steer'`.\n   * - `'block'` — refuse the call via `tool:gate` `block`. The model sees a\n   *   `Blocked: <reason>` tool result. Fires `tool-budget:exceeded` with\n   *   `mode: 'block'`.\n   * - **Function** — `(ctx) => { mode, message }`. The consumer supplies the\n   *   steering / refusal text and chooses the mode dynamically.\n   *\n   * Counts include both real dispatches and dedup substitutes (Z19 hits).\n   * Excludes calls already blocked by an earlier gate (skill allow-list,\n   * consumer hook). Tool dispatched by spawned subagents has its own per-run\n   * counter — child counts never charge the parent.\n   *\n   * For MCP tools, key by the namespaced wire name (`mcp_<server>_<tool>`).\n   *\n   * Atomic in parallel mode: the middleware tracks its own per-tool\n   * approval counter, incremented synchronously at gate-time. A\n   * 4-call parallel batch against `max: 2` will let the first 2 through\n   * and refuse the rest, even though the loop's `runToolCounts` only\n   * propagates between calls (not within a single batch's gate fan-out).\n   *\n   * Default: `undefined` (no budget enforcement).\n   */\n  toolBudgets?: Record<string, {\n    max: number\n    onExceed?: 'steer' | 'block' | ((ctx: {\n      tool: string\n      count: number\n      max: number\n    }) => { mode: 'steer' | 'block', message: string })\n  }>\n  /**\n   * Generic per-tool argument deduplication. Keyed by the tool's **canonical**\n   * name (alias-stable). Each entry is a hasher: `(input) => string | undefined`.\n   *\n   * **Hasher contract** — three return values, three meanings:\n   *\n   * | Return                  | Meaning                                                                |\n   * |-------------------------|------------------------------------------------------------------------|\n   * | a non-empty string      | Cache key for this call. Equal keys (most-recent-only, this session)   |\n   * |                         | replay the prior recorded result without re-dispatching the tool.      |\n   * | `undefined`             | **Skip dedup for this call.** The tool runs normally; nothing recorded.|\n   * | `''` / non-string       | Treated identically to `undefined` (defensive: no dedup, no error).    |\n   *\n   * The `undefined` opt-out is the way to say *\"this specific call is not\n   * cacheable\"* (timestamps in input, randomness baked in, debug flags). It\n   * is **not** the same as `JSON.stringify(input)` — that would dedup against\n   * the verbatim input. Pick one explicitly:\n   *\n   * ```ts\n   * // Always cache by full input — every identical re-call dedups.\n   * dedupTools: { my_pure_tool: input => JSON.stringify(input) }\n   *\n   * // Cache by a normalized subset; non-cacheable shapes opt out.\n   * dedupTools: {\n   *   execute_sql: (input) => {\n   *     const q = typeof input.query === 'string' ? input.query.trim().toLowerCase() : undefined\n   *     if (!q || q.includes('now()') || q.includes('random()')) return undefined\n   *     return q\n   *   },\n   * }\n   * ```\n   *\n   * On a hit, the previously-recorded result is replayed as the tool_result\n   * without dispatching the tool. The substitution flows through `tool:gate`\n   * `result` (Z20), so `tool:after` and `tool:transform` still fire.\n   *\n   * Requires a session (`createSession()`); without one, the map is a silent\n   * no-op since per-session state has nowhere to live. Tools with side\n   * effects or non-deterministic outputs (network, time, randomness) MUST\n   * NOT be listed — there is no safety net beyond the consumer's hasher.\n   *\n   * For MCP tools, key by the namespaced wire name (`mcp_<server>_<tool>`).\n   * Concurrency-safe siblings ({@link ToolDef.isConcurrencySafe}) in the\n   * SAME assistant turn race against each other — none can dedup against\n   * a sibling that started in the same batch. Unsafe tools act as barriers\n   * and honor submission order within a turn, so an unsafe-but-listed tool\n   * follows the cache cleanly.\n   *\n   * **Cache policy**: only the most recent `(hash, result)` per tool is\n   * retained. Interleaved patterns (input A, input B, input A) miss on the\n   * second A because B overwrote it. Sufficient for the common spam-the-\n   * same-call loop; consumers needing a richer cache should hook\n   * `tool:gate` directly.\n   *\n   * Default: `undefined` (no per-tool dedup).\n   */\n  dedupTools?: Record<string, (input: Record<string, unknown>) => string | undefined>\n  /**\n   * Require `read_file` before `edit` / `multi_edit` on the same path, and\n   * reject edits when the file has changed on disk since the last read in\n   * this session. Eliminates the silent-corruption failure mode where a\n   * model \"remembers\" stale content and applies a substring edit against\n   * bytes that have moved.\n   *\n   * Requires a session. Off by default; turn it on for stricter eval-grade\n   * runs where silent edit corruption would invalidate the result.\n   *\n   * Default: `false`.\n   */\n  requireReadBeforeEdit?: boolean\n  /**\n   * Client-side context compaction strategy. Use this for non-Anthropic\n   * providers (OSS via cerebras / openai-compat / openrouter) that don't\n   * have a server-side equivalent. Anthropic users should prefer the\n   * server-side `context-management-2025-06-27` beta — see\n   * `AnthropicParams.contextManagement`.\n   *\n   * - `'off'` (default) — no client-side compaction.\n   * - `'tail'` — when total tool-output bytes in the persisted history\n   *   exceed `compactThreshold`, replace older `tool_result` outputs with a\n   *   short stub, keeping the newest `compactKeepTurns` turns intact. The\n   *   compaction is applied to the wire-level message list only; the\n   *   underlying session turns are not modified.\n   *\n   * Default: `'off'`.\n   */\n  compactStrategy?: 'off' | 'tail'\n  /**\n   * Soft byte threshold that triggers tail compaction when\n   * `compactStrategy === 'tail'`. Counts the post-`context:transform` bytes\n   * of `tool_result` outputs across all messages. Default: `131_072` (128\n   * KiB). Ignored when compaction is off.\n   */\n  compactThreshold?: number\n  /**\n   * Number of trailing turns to leave untouched during tail compaction. The\n   * most-recent `compactKeepTurns` user/assistant messages are not eligible\n   * for elision so the model keeps the freshest tool context. Default: `4`.\n   */\n  compactKeepTurns?: number\n  /**\n   * Prefix every line of `read_file` output with its 1-indexed line number\n   * followed by a tab (`<N>\\t<content>`) — the compact `cat -n`-style\n   * format Claude Code emits. The `edit` tool strips the prefix from\n   * `old_string` / `new_string` so the model can paste back a numbered\n   * chunk verbatim without breaking the match.\n   *\n   * Set `false` to opt out — useful for callers piping `read_file` into\n   * downstream parsers that don't recognize the prefix. Per-call\n   * `read_file({ lineNumbers: false })` overrides this default.\n   *\n   * Default: `true`.\n   */\n  readLineNumbers?: boolean\n  /**\n   * Replace older `read_file` `tool_result` blocks with a short stub when\n   * a successful `edit` / `multi_edit` / `write_file` later in the same\n   * run modified the same path. The replacement is applied to the\n   * wire-level message list only — persisted session turns keep the\n   * original content.\n   *\n   * Eliminates the common waste pattern where the model carries the\n   * pre-edit file body forward across many turns \"in case it needs it\".\n   * Pairs cleanly with `compactStrategy: 'tail'`: stale reads shrink\n   * first, then the byte-threshold compaction fires if anything's left.\n   *\n   * Detection is conservative — only triggers when the corresponding\n   * tool_result confirms success (`Edited …`, `Created …`, `Updated …`).\n   * Failed edits and `No change needed` write_file calls do NOT\n   * invalidate prior reads.\n   *\n   * Default: `false`.\n   */\n  elideStaleReads?: boolean\n  /**\n   * Tool disclosure strategy. Controls whether the model sees every tool's\n   * full `inputSchema` in its tool list every turn (\"eager\") or whether MCP\n   * tools are advertised as a name+description catalog in the system prompt\n   * and only get full schemas after being surfaced via the `tool_search`\n   * native tool (\"lazy\" / progressive disclosure).\n   *\n   * Native tools (those passed to `createAgent({ tools })`) and skill tools\n   * are always eager — they are core to the agent and cheap. Only MCP tools\n   * are eligible for lazy disclosure.\n   *\n   * When `'lazy'`, the agent:\n   * - Appends a `<searchable_tools>` section to the system prompt listing\n   *   every MCP tool by `name` + `description` only (no `inputSchema`).\n   * - Auto-injects a `tool_search` native tool (opt out via\n   *   {@link AgentBehavior.toolSearch}) the model uses to load schemas on\n   *   demand. Surfaced tools persist for the rest of the run.\n   * - Rebuilds the wire-level tool list each turn, appending newly-unlocked\n   *   tools at the end so the prefix-cache breakpoint advances cleanly.\n   *\n   * Trade-off: every `tool_search` invocation expands the tool list and\n   * invalidates the tool-list cache breakpoint for one turn. With many\n   * MCP servers, the savings on cold turns (fewer schemas in context) are\n   * substantial; with one tiny MCP server, the overhead may not pay back.\n   *\n   * Default: `'eager'`.\n   */\n  toolDisclosure?: 'eager' | 'lazy'\n  /**\n   * Fine-grained config for the `tool_search` tool auto-injected when\n   * {@link AgentBehavior.toolDisclosure} is `'lazy'`. No-op in eager mode.\n   *\n   * - `tool: false` — opt out of the auto-injection entirely. Use when the\n   *   host wants to ship a custom discovery tool. Note that the catalog\n   *   text drops the call-to-action prose in this case so the model isn't\n   *   pointed at a non-existent tool.\n   * - `limit` — default cap on results returned per `tool_search` call when\n   *   the model omits the parameter. Default: `20`.\n   *\n   * Note on host-defined `tool_search`: a tool the host registers under the\n   * name `tool_search` (or under any alias whose canonical is `tool_search`)\n   * will shadow the auto-injected one — the catalog text will point at the\n   * host's wire name, but driving the unlock flow requires either using\n   * `createToolSearchTool({ catalog, unlocked })` from `tools/tool-search`\n   * (which internally mutates the unlock set) or fully opting out via\n   * `toolSearch.tool: false` and treating discovery as a host-side concern.\n   * A bare host tool that doesn't touch the unlock set will not advance the\n   * lazy disclosure state and the hard gate will keep refusing lazy calls.\n   *\n   * Default: `undefined` (auto-inject with the default limit).\n   */\n  toolSearch?: {\n    tool?: false\n    limit?: number\n  }\n  /**\n   * Persist large `tool_result` outputs to disk and replace the in-message\n   * content with a `<persisted-output>` stub (preview + filesystem path).\n   * When the post-`tool:transform` byte size of a tool's result exceeds\n   * this threshold, the framework writes the full payload to\n   * `<persistDir>/<callId>.txt` and substitutes a fixed-format stub so the\n   * model sees a 2 KiB preview plus the path it can `read_file`.\n   *\n   * The substitution happens at emit time (just after `tool:transform` runs)\n   * and the stub flows into `session.turns` directly — so every subsequent\n   * turn re-emits the same bytes, keeping the prompt-cache prefix stable.\n   *\n   * Set `0` / `undefined` to disable. Built-in chat profiles default to\n   * `8192`. Tools listed in {@link AgentBehavior.persistExcludeTools} bypass\n   * regardless of size — typically because their output is intentionally\n   * short or persisting would be circular (e.g. `read_file`).\n   *\n   * Requires {@link AgentBehavior.persistDir} to be set; without a target\n   * directory the framework silently skips persistence (no throw, no\n   * substitution) since there's nowhere to write the blob.\n   *\n   * Default: `undefined` (off).\n   */\n  persistThreshold?: number\n  /**\n   * Canonical tool names to exclude from disk persistence regardless of\n   * output size. The framework bypasses persistence for any tool whose\n   * canonical name appears in this list — useful for tools whose results\n   * are intentionally part of the prompt (`skills_use`), short envelopes\n   * (`tool_search`, `present_plan`, `ask_user`), or where persistence\n   * would be circular (`read_file`, whose pagination already serves the\n   * same use case).\n   *\n   * Default: `undefined` (no exclusions). The chat-layer built-in profiles\n   * set their own list — see `src/chat/agents.ts`.\n   */\n  persistExcludeTools?: readonly string[]\n  /**\n   * Directory under which persisted tool-result blobs land. Each call's\n   * payload is written to `<persistDir>/<callId>.txt` (one file per\n   * `tool_use` id, atomic via write-then-rename).\n   *\n   * The chat layer resolves this to `<userDir>/tool-results/<sessionId>/`\n   * at session activation; SDK consumers pass an absolute path. Required\n   * when {@link AgentBehavior.persistThreshold} is non-zero — when unset\n   * the framework treats persistence as disabled.\n   *\n   * Default: `undefined`.\n   */\n  persistDir?: string\n  /**\n   * Fail-fast instead of repair when the pre-send pairing pass detects\n   * corruption (orphan `tool_use` / `tool_result`, duplicate ids,\n   * compaction-stranded blocks). Throws {@link AgentToolPairingError} from\n   * the next `agent.run()` turn carrying the structured repair list the\n   * loop would have performed.\n   *\n   * Use case: training-data collectors that must reject any transcript\n   * containing the synthetic `SYNTHETIC_TOOL_RESULT_PLACEHOLDER` rather\n   * than ship poisoned data to the fine-tuning pipeline. User-facing chat\n   * sessions should leave this off (the repair-on-the-fly behavior is the\n   * point of the pass).\n   *\n   * Telemetry note: `pairing:repair` still fires for every repair before\n   * the throw, so observability handlers see exactly what would have\n   * happened.\n   *\n   * Default: `false`.\n   */\n  strictToolPairing?: boolean\n}\n\n// ---------------------------------------------------------------------------\n// Prompt parts (multimodal input)\n// ---------------------------------------------------------------------------\n\n/**\n * One block of a multimodal user prompt.\n *\n * `agent.run({ prompt })` accepts either a plain string (treated as a single\n * text part) or an array of these parts for multimodal inputs.\n *\n * `document` parts are routed per provider: PDF-style mime types are sent as\n * native document blocks when the provider supports them; text documents are\n * inlined as text with an attachment header. Providers that cannot handle an\n * image or document throw early.\n */\nexport type PromptPart\n  = | PromptTextPart\n    | PromptImagePart\n    | PromptDocumentPart\n\nexport interface PromptTextPart {\n  type: 'text'\n  text: string\n}\n\nexport interface PromptImagePart {\n  type: 'image'\n  /** IANA media type (e.g. `image/png`, `image/jpeg`) */\n  mediaType: string\n  /** Base64-encoded payload */\n  data: string\n  /** Optional display name */\n  name?: string\n}\n\nexport interface PromptDocumentPart {\n  type: 'document'\n  /** IANA media type (e.g. `application/pdf`, `text/plain`) */\n  mediaType: string\n  /** Either a base64-encoded payload (`encoding: 'base64'`) or raw text (`encoding: 'text'`) */\n  data: string\n  encoding: 'base64' | 'text'\n  /** Optional display name used in attachment headers */\n  name?: string\n}\n\n// ---------------------------------------------------------------------------\n// Canonical message format (used throughout the agent system)\n// ---------------------------------------------------------------------------\n\n/**\n * A single block of structured tool-result content.\n *\n * MCP servers can return a mix of text, image, resource, and audio blocks. Tools\n * return `string` for the common text-only case or `ToolResultContent[]` when they\n * need to preserve non-text content (e.g. screenshots from a browser MCP).\n *\n * Providers that support native multi-part tool results (Anthropic, OpenAI Codex via\n * pi-ai) route image blocks into their wire format verbatim; OpenAI-compat providers\n * route them via a companion-user-message fallback when the underlying model/endpoint\n * does not accept images inside tool-role messages.\n */\nexport type ToolResultContent\n  = | ToolResultTextContent\n    | ToolResultImageContent\n\nexport interface ToolResultTextContent {\n  type: 'text'\n  text: string\n}\n\nexport interface ToolResultImageContent {\n  type: 'image'\n  /** IANA media type (e.g. `image/png`, `image/jpeg`) */\n  mediaType: string\n  /** Base64-encoded payload */\n  data: string\n}\n\n/**\n * Lossy flattener — converts `ToolResultContent[]` (or a plain string) to a single\n * string. Image blocks are replaced with `[image: <media> — <n> b64 bytes]` markers.\n *\n * Use at UI boundaries where a string is required; providers that understand\n * structured content should route the array through without flattening.\n */\nexport function toolResultToText(content: string | ToolResultContent[]): string {\n  if (typeof content === 'string')\n    return content\n  return content\n    .map((block) => {\n      if (block.type === 'text')\n        return block.text\n      return `[image: ${block.mediaType} — ${block.data.length} b64 bytes]`\n    })\n    .join('\\n')\n}\n\n/**\n * Approximate **wire payload size** of a tool output, in bytes.\n *\n * - Plain text: UTF-8 byte length.\n * - Structured content: text blocks contribute their UTF-8 byte length; image\n *   blocks contribute their **base64 character length** — a proxy for the\n *   serialized request-body footprint, NOT for tokens. Vision encoders\n *   tokenize decoded pixels (geometry-dependent; e.g. Anthropic ≈ `w·h/750`,\n *   OpenAI ≈ 85 + 170/tile), which has no meaningful relationship to base64\n *   length.\n *\n * Used by the agent loop to populate `outputBytes` on `tool:after`,\n * `tool:transform`, `mcp:tool:after`, and `mcp:tool:transform` hooks so\n * consumers can size-budget tool output without re-counting bytes themselves.\n * Suitable for byte-budget heuristics (`toolOutputBudget`, tail compaction);\n * NOT a substitute for provider-side context-window accounting — defer to\n * server-side context management (e.g. Anthropic's `context-management-*`\n * beta) when token accuracy matters.\n */\nexport function toolOutputByteLength(content: string | ToolResultContent[]): number {\n  if (typeof content === 'string')\n    return Buffer.byteLength(content)\n  let total = 0\n  for (const block of content) {\n    if (block.type === 'text')\n      total += Buffer.byteLength(block.text)\n    else\n      total += block.data.length\n  }\n  return total\n}\n\nexport type SessionContentBlock\n  = | { type: 'text', text: string }\n    | { type: 'image', mediaType: string, data: string }\n    | { type: 'tool_call', id: string, name: string, input: Record<string, unknown> }\n    | {\n      type: 'tool_result'\n      callId: string\n      /**\n       * Tool output — either a plain string (text-only, the common case) or a structured\n       * array of content blocks (text + image for multimodal tools such as screenshots).\n       */\n      output: string | ToolResultContent[]\n      isError?: boolean\n    }\n    | {\n      type: 'thinking'\n      text: string\n      signature?: string\n      /**\n       * Provider that minted `signature`. Signatures are provider-bound (Anthropic\n       * HMAC vs. OpenAI `encrypted_content`) and are dropped on cross-provider\n       * hops to avoid 400s. Unset means legacy/unknown — forwarded as-is.\n       */\n      signatureProducer?: 'anthropic' | 'openai'\n    }\n    | { type: 'redacted_thinking', data: string }\n    | {\n      /**\n       * Opaque round-trip envelope for reasoning state minted by an OpenAI-compat\n       * gateway (currently OpenRouter). The gateway expects its own\n       * `reasoning_details` array echoed back verbatim on the next turn so the\n       * upstream model can resume an extended-reasoning chain across tool calls.\n       *\n       * Stored opaquely because the items are provider-bound (Anthropic HMAC\n       * signatures, OpenAI `encrypted_content`, model-specific summary formats\n       * — all flowing through the gateway's normalized envelope).\n       */\n      type: 'provider_reasoning'\n      producer: 'openrouter'\n      details: unknown[]\n      /**\n       * Model id that produced the details. Reasoning is bound to a specific\n       * upstream route — a model switch on the next turn invalidates the\n       * embedded signatures, so the sender drops the block on mismatch.\n       */\n      model?: string\n    }\n    | {\n      /**\n       * Compaction marker. Inserted by `compactConversation()` to replace a\n       * prefix of turns with an LLM-generated summary.\n       *\n       * The marker lives in `session.turns` and renders in the transcript —\n       * the user can still scroll back to see the original turns. From the\n       * agent loop's wire-level perspective, every turn whose id appears in\n       * `replacesTurnIds` is dropped, and this block's `summary` text is\n       * sent to the model as a single user message in their place.\n       *\n       * The marker turn carries `role: 'user'` so it sits naturally at a\n       * conversational boundary. Only the latest `compact-summary` block in\n       * the session is honored — earlier markers are subsumed by later\n       * ones (their `replacesTurnIds` are a strict prefix).\n       */\n      type: 'compact-summary'\n      /** Turn ids the summary replaces, in chronological order. */\n      replacesTurnIds: readonly string[]\n      /** The summary text sent to the model in place of the elided turns. */\n      summary: string\n      /** Model id used to produce the summary. */\n      model: string\n      /** Token usage from the summary call. */\n      usage: TurnUsage\n      /** Unix-ms when compaction completed. */\n      compactedAt: number\n    }\n\nexport interface SessionMessage {\n  role: 'user' | 'assistant'\n  content: SessionContentBlock[]\n}\n\nexport interface SessionTurn {\n  /** UUID — generated by the store if it provides generateTurnId, else crypto.randomUUID() */\n  id: string\n  /** Run that produced this turn (e.g. 'run_1') */\n  runId?: string\n  role: 'user' | 'assistant' | 'system'\n  content: SessionContentBlock[]\n  /** Token usage — only present on assistant turns */\n  usage?: TurnUsage\n  /** Unix timestamp (Date.now()) when the turn was created */\n  createdAt: number\n}\n\n// ---------------------------------------------------------------------------\n// Agent run options\n// ---------------------------------------------------------------------------\n\n/**\n * Per-run hook registrations. Each entry can be a single handler or an array of handlers.\n * Keys are `AgentHooks` event names (loose-typed here to avoid a circular import; agent.ts\n * narrows it to the strongly-typed map).\n */\nexport type RunHookMap = Record<string, ((ctx: any) => unknown) | ((ctx: any) => unknown)[]>\n\nexport interface AgentRunOptions {\n  model?: string\n  /**\n   * User prompt. Optional when resuming a session with existing turns.\n   *\n   * Accepts either a plain string (single text part) or an array of `PromptPart`s for\n   * multimodal inputs (text, images, documents). See {@link PromptPart}.\n   */\n  prompt?: string | PromptPart[]\n  system?: string\n  thinking?: ThinkingLevel\n  /** Abort signal — when triggered, the agent stops after the current turn */\n  signal?: AbortSignal\n  /** Behavior overrides for this run (overrides agent defaults) */\n  behavior?: AgentBehavior\n  /** Tool overrides for this run. Pass {} for no tools. Omit to use agent tools. */\n  tools?: Record<string, ToolDef>\n  /**\n   * Per-run hook registrations. Each hook is attached before the run starts and\n   * detached in a finally block so handlers never leak across runs.\n   *\n   * Accepts either a single handler or an array (all handlers register).\n   */\n  hooks?: RunHookMap\n  /**\n   * Parent run id. Populated automatically by the `spawn` tool when the child\n   * shares the parent's session; recorded on the resulting `SessionRun` so the\n   * parent↔child run tree can be reconstructed from a persisted session.\n   */\n  parentRunId?: string\n  /**\n   * Zero-based subagent depth. 0 = top-level `agent.run()`, 1 = first-level\n   * child spawned by a parent agent, and so on. Used by the spawn tool to\n   * enforce `maxDepth` and to stamp `child:*` forwarded hook payloads.\n   */\n  depth?: number\n}\n\n// ---------------------------------------------------------------------------\n// Agent stats\n// ---------------------------------------------------------------------------\n\n/**\n * Reason the provider gave for stopping the turn.\n *\n * - `'stop'` — natural turn end (`end_turn` / `stop_sequence`).\n * - `'tool-calls'` — model emitted tool_use blocks.\n * - `'length'` — `max_tokens` reached, or (Anthropic 4.6+) the response bumped\n *   against the model's context window mid-stream\n *   (`model_context_window_exceeded`). The partial response is preserved; the\n *   loop emits this reason so consumers can prune/retry.\n * - `'content-filter'` — model refused.\n * - `'pause'` — Anthropic `pause_turn`: a server-side mid-turn pause for very\n *   long thinking. The loop continues with a synthetic \"Please continue.\"\n *   user message rather than terminating; consumers see the pause via this\n *   finish reason on the prior assistant turn.\n * - `'error'` — provider classified the turn as failed.\n * - `'other'` — unknown / unmapped.\n */\nexport type TurnFinishReason = 'stop' | 'tool-calls' | 'length' | 'content-filter' | 'pause' | 'error' | 'other'\n\nexport interface TurnUsage {\n  input: number\n  output: number\n  /** Tokens written to cache (Anthropic) */\n  cacheCreation?: number\n  /** Tokens read from cache (Anthropic) */\n  cacheRead?: number\n  /** Thinking/reasoning tokens used */\n  thinking?: number\n  /**\n   * Cost in USD for this turn. Provider-reported when available\n   * (OpenRouter, OpenAI via pi-ai); otherwise estimated from `modelId` ×\n   * pi-ai's bundled price registry by `fillEstimatedCost` in\n   * `src/providers/cost.ts`. Absent only when neither path could resolve\n   * a price (unknown / unbundled model).\n   */\n  cost?: number\n  /**\n   * Why the model stopped this turn. Providers normalize native stop reasons to this union.\n   * Absent when the provider did not surface a reason (e.g. mock turns).\n   */\n  finishReason?: TurnFinishReason\n  /**\n   * The model ID the provider ultimately used. May differ from the requested model when the\n   * provider remaps aliases. Absent for providers that do not echo a model ID.\n   */\n  modelId?: string\n}\n\nexport interface AgentStats {\n  /**\n   * Cumulative input tokens across the parent agent loop **and** every\n   * recursively-spawned sub-agent. Use this for billing / token-ledger\n   * consumption.\n   */\n  totalIn: number\n  /** Cumulative output tokens. Same semantics as {@link AgentStats.totalIn}. */\n  totalOut: number\n  /**\n   * Cumulative cache-read tokens across the parent agent loop and every\n   * recursively-spawned sub-agent. Surfaced at the top level (rather than\n   * only per-`TurnUsage`) because Anthropic prices cache reads at a separate\n   * line-item rate from regular input — billing-correct cost computation\n   * needs this number directly. Always `0` for providers that don't report\n   * cache usage.\n   */\n  totalCacheRead: number\n  /**\n   * Cumulative cache-creation tokens across the parent agent loop and every\n   * recursively-spawned sub-agent. Same rationale as\n   * {@link AgentStats.totalCacheRead} — separate Anthropic billing rate.\n   * Always `0` for providers that don't report cache usage.\n   */\n  totalCacheCreation: number\n  /**\n   * Number of parent agent-loop turns. Children's turn counts live under\n   * `children[].stats.turns` and are NOT folded in here — a single \"turns\"\n   * number for the whole tree would conflate two different measures\n   * (parent-loop iterations vs. tree-wide tool-call rounds).\n   *\n   * Tree-wide turn count: `flattenTurns(stats).length`.\n   */\n  turns: number\n  /**\n   * Wall-clock duration of the top-level `agent.run()` call, in milliseconds.\n   * Children run during parent tool calls so this naturally subsumes child\n   * wall time — sequential children inflate it, parallel children compress\n   * into the parent's window.\n   */\n  elapsed: number\n  /**\n   * Per-turn usage breakdown for the **parent loop only**. Children's per-turn\n   * usages live under `children[].stats.turnUsage`. Use {@link flattenTurns}\n   * to walk the full tree.\n   */\n  turnUsage?: TurnUsage[]\n  /**\n   * Cumulative cost in USD — parent loop plus every recursively-spawned\n   * sub-agent. Sums per-turn `TurnUsage.cost` reported by the provider.\n   * Absent when neither parent nor any descendant reported a non-zero cost.\n   */\n  cost?: number\n  /** Stats from child agents spawned during this run, in completion order. Recursive. */\n  children?: ChildRunStats[]\n  /** Structured output from schema enforcement (only present when behavior.schema is set) */\n  output?: Record<string, unknown>\n  /**\n   * Milliseconds from the start of `agent.run()` to the first observable signal from the\n   * provider (first `stream:text`, `stream:thinking`, or `tool:before` event).\n   *\n   * Absent when the run produced no observable signals (e.g. aborted before any stream event).\n   */\n  timeTillFirstTokenMs?: number\n}\n\nexport interface ChildRunStats {\n  id: string\n  task: string\n  /**\n   * The child agent's full {@link AgentStats}. Cumulative for that child's\n   * own subtree (child loop + its grandchildren). Do **not** sum\n   * `ctx.stats.totalIn` across `spawn:complete` events to derive top-level\n   * totals — `agent.run()`'s return value is the canonical cumulative root.\n   */\n  stats: AgentStats\n  /**\n   * Subagent depth when this child ran. 1 = direct child of the top-level\n   * agent, 2 = grandchild, etc. Useful for telemetry that wants to group\n   * runs by depth.\n   */\n  depth?: number\n  /**\n   * Terminal state of the child run. `'completed'` is the default. Exposed so\n   * a parent reading `stats.children` can distinguish aborted/timed-out\n   * children without re-parsing the returned string.\n   */\n  status?: 'completed' | 'aborted' | 'timeout' | 'error'\n  /**\n   * Final structured output when the child was run with `behavior.schema`.\n   * Mirrors `AgentStats.output` but is surfaced here so the parent can read\n   * it without peeking at the nested `stats` bag.\n   */\n  output?: Record<string, unknown>\n}\n\n// ---------------------------------------------------------------------------\n// Hook context types\n// ---------------------------------------------------------------------------\n\n/**\n * Base context for tool execution hooks.\n *\n * `name` is the canonical tool identity — the spec name registered on the agent (or the\n * `mcp_{server}_{tool}` name for MCP tools). Hooks should policy-match against `name`.\n *\n * `displayName` is the outward-facing name — the alias surfaced to the LLM when\n * `AgentOptions.toolAliases` maps the canonical name; otherwise equal to `name`.\n * UI/telemetry adapters should emit `displayName`.\n *\n * Canonical vs. alias matters on session resume: `session.turns` persists canonical\n * names only, so renaming an alias cannot desync history.\n */\nexport interface ToolHookContext {\n  turnId: string\n  callId: string\n  /** Canonical tool name (spec name). Stable across alias-map changes. */\n  name: string\n  /** Aliased (wire) name — equal to `name` when no alias is defined. */\n  displayName: string\n  input: Record<string, unknown>\n  /**\n   * The run this tool call belongs to (the `SessionRun.id`). Lets a single\n   * `tool:*` listener disambiguate calls across parallel runs / subagent\n   * trees without subscribing to the `child:tool:*` bubble events.\n   */\n  runId?: string\n  /**\n   * Parent run id when this tool call's agent is a subagent — i.e. the\n   * `SessionRun.parentRunId` of the run that owns the call. Absent on\n   * top-level runs. Useful for observability stitching: a UI grouping\n   * subagent-scoped state (e.g. todowrite, edit batches) by parent\n   * run can read this directly off `tool:before` / `tool:after`\n   * without resolving the run row.\n   */\n  parentRunId?: string\n  /**\n   * Subagent depth for this tool call. 0 = top-level, 1 = first-level\n   * child, etc. Mirrors `ToolContext.depth` so hook consumers don't\n   * have to cross-reference the tool context. Omitted on top-level\n   * runs (treated as 0).\n   */\n  depth?: number\n}\n\n/**\n * Base context for MCP tool hooks.\n *\n * `tool` is the native tool name on the MCP server. `server` is the configured server\n * name. The canonical zidane-namespaced identity is `mcp_{server}_{tool}`.\n *\n * `displayName` equals the canonical namespaced name unless the agent has aliased\n * this MCP tool via `AgentOptions.toolAliases`; in which case `displayName` is the\n * alias that the LLM sees.\n */\nexport interface McpToolHookContext {\n  turnId: string\n  callId: string\n  server: string\n  tool: string\n  /** Aliased wire name for this MCP tool, or the canonical `mcp_{server}_{tool}` name. */\n  displayName: string\n  input: Record<string, unknown>\n  /** Owning run id — same semantics as `ToolHookContext.runId`. */\n  runId?: string\n  /** Parent run id when this tool call's agent is a subagent — see `ToolHookContext.parentRunId`. */\n  parentRunId?: string\n  /** Subagent depth — see `ToolHookContext.depth`. */\n  depth?: number\n}\n\n/** Base context for session hooks */\nexport interface SessionHookContext {\n  sessionId: string\n}\n\n/** Base context for spawn hooks */\nexport interface SpawnHookContext {\n  id: string\n  task: string\n  /**\n   * Subagent depth for the spawn. 1 = direct child of the top-level agent.\n   * Present on spawn:before/complete/error. Absent for grandchild spawns that\n   * bubble through `child:*` events (which carry their own `depth`).\n   */\n  depth?: number\n}\n\n/** Context for stream hooks */\nexport interface StreamHookContext {\n  turnId: string\n}\n\n/** Context for OAuth refresh hooks */\nexport interface OAuthRefreshHookContext {\n  provider: string\n  providerId: string\n  source: 'params' | 'file'\n  previousCredentials: Record<string, unknown> & { access: string, refresh: string, expires: number }\n  credentials: Record<string, unknown> & { access: string, refresh: string, expires: number }\n}\n\nexport type SessionEndStatus = 'completed' | 'aborted' | 'error'\n"],"mappings":";;;;;;;;;AAipBA,SAAgB,iBAAiB,SAA+C;CAC9E,IAAI,OAAO,YAAY,UACrB,OAAO;CACT,OAAO,QACJ,KAAK,UAAU;EACd,IAAI,MAAM,SAAS,QACjB,OAAO,MAAM;EACf,OAAO,WAAW,MAAM,UAAU,KAAK,MAAM,KAAK,OAAO;GACzD,CACD,KAAK,KAAK;;;;;;;;;;;;;;;;;;;;;AAsBf,SAAgB,qBAAqB,SAA+C;CAClF,IAAI,OAAO,YAAY,UACrB,OAAO,OAAO,WAAW,QAAQ;CACnC,IAAI,QAAQ;CACZ,KAAK,MAAM,SAAS,SAClB,IAAI,MAAM,SAAS,QACjB,SAAS,OAAO,WAAW,MAAM,KAAK;MAEtC,SAAS,MAAM,KAAK;CAExB,OAAO"}
+{"version":3,"file":"types-IcokUOyC.js","names":[],"sources":["../src/types.ts"],"sourcesContent":["/**\n * Shared types for the agent system.\n */\n\nimport type { ToolDef } from './tools/types'\nimport { Buffer } from 'node:buffer'\n\n// ---------------------------------------------------------------------------\n// Thinking / Reasoning\n// ---------------------------------------------------------------------------\n\n/**\n * Thinking / extended-reasoning configuration.\n *\n * - `'off'` — no thinking.\n * - `'minimal' | 'low' | 'medium' | 'high'` — explicit token budget. Maps to\n *   provider-specific reasoning controls (Anthropic `thinking.type='enabled'`\n *   with a budget; OpenAI `reasoning_effort`).\n * - `'adaptive'` — let the model decide per-turn whether and how much to think.\n *   Anthropic-only (`thinking.type='adaptive'`). Other providers fall back to\n *   no reasoning when this value is supplied.\n */\nexport type ThinkingLevel = 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'adaptive'\n\n// ---------------------------------------------------------------------------\n// MCP server configuration\n// ---------------------------------------------------------------------------\n\n/**\n * Slim shape of an upstream MCP tool descriptor — what `client.listTools()`\n * returns per entry. Exposed publicly so hosts can persist the schemas\n * between runs and feed them back via {@link McpServerConfig.cachedTools}\n * to skip the `tools/list` round-trip on subsequent bootstraps.\n */\nexport interface McpToolSchema {\n  name: string\n  description?: string | null\n  inputSchema?: unknown\n}\n\nexport interface McpServerConfig {\n  /** Display name (used for tool namespacing) */\n  name: string\n  /** Transport type */\n  transport: 'stdio' | 'sse' | 'streamable-http'\n  /** For stdio: command to run */\n  command?: string\n  /** For stdio: command arguments */\n  args?: string[]\n  /**\n   * For stdio: environment variables to pass to the server process.\n   *\n   * Merged on top of the MCP SDK's default inherited environment — a safety\n   * whitelist (`PATH`, `HOME`, `LANG`, `SHELL`, `USER` on POSIX; `APPDATA`,\n   * `PATH`, ... on Win32). Setting this to `{}` no longer strips `PATH` from\n   * the child process. Set {@link McpServerConfig.strictEnv} to `true` to\n   * pass `env` verbatim with no inherited defaults.\n   */\n  env?: Record<string, string>\n  /**\n   * When true, {@link McpServerConfig.env} is passed verbatim to the spawned\n   * process — the MCP SDK's default inherited environment (`PATH`, `HOME`, ...)\n   * is NOT merged in. Most consumers should leave this off; the default merge\n   * prevents `spawn ENOENT` when a stdio server declares an `env` without\n   * restating `PATH`.\n   */\n  strictEnv?: boolean\n  /** For sse/streamable-http: server URL */\n  url?: string\n  /** Optional headers for HTTP transports */\n  headers?: Record<string, string>\n  /**\n   * OAuth 2.1 authentication (sse / streamable-http only).\n   *\n   * - `'oauth'` — enables the SDK's OAuth flow with RFC 9728 protected-resource\n   *   metadata discovery, RFC 8414 / OIDC authorization-server metadata, RFC 7591\n   *   dynamic client registration, PKCE, and refresh-token rotation. Tokens persist\n   *   between runs via the host's credential store.\n   * - `undefined` (default) — no OAuth. The host may still auto-promote a server\n   *   to OAuth on `UnauthorizedError` IF no static `Authorization` header is set\n   *   (the headers check stops us from second-guessing user-managed bearer tokens).\n   *\n   * Recognized aliases at parse time: Cursor's `authMethod: 'mcpOAuth'` maps to\n   * `auth: 'oauth'` so `~/.cursor/mcp.json` pastes work unchanged.\n   */\n  auth?: 'oauth'\n  /**\n   * Timeout in milliseconds for MCP server bootstrap (connect + tool discovery).\n   *\n   * Zidane connects MCP servers lazily on the first `run()`. Without a\n   * bootstrap timeout, a slow or hung server can delay the first provider call\n   * for an arbitrarily long time even when that MCP server is never used.\n   *\n   * Default: `10000`.\n   */\n  bootstrapTimeout?: number\n  /** Timeout in milliseconds for MCP tool calls (default: 30000) */\n  toolTimeout?: number\n  /**\n   * Allow-list of tool names to expose. Names match the upstream tool name\n   * (NOT the namespaced `mcp_{server}_{tool}` form). Tools not in the list are\n   * dropped before registration — the model never sees them in its catalog and\n   * the wire cost of advertising them is avoided.\n   *\n   * Mutually exclusive with {@link McpServerConfig.disabledTools} — passing both\n   * throws at bootstrap time.\n   *\n   * Composes with {@link McpServerConfig.toolFilter}: allow-list applies first,\n   * then the predicate. Composes with the `mcp:tools:filter` hook: config-side\n   * filters apply first, then the hook can further narrow the list.\n   */\n  enabledTools?: string[]\n  /**\n   * Deny-list of tool names. Tools matching are dropped before registration.\n   * Same matching semantics as {@link McpServerConfig.enabledTools}.\n   */\n  disabledTools?: string[]\n  /**\n   * Custom predicate run on each upstream tool. Return `true` to keep, `false`\n   * to drop. Receives the raw `listTools()` payload — useful for filtering by\n   * description, schema shape, or other metadata that an allow/deny list can't\n   * express.\n   *\n   * Runs after the allow/deny filter but before the `mcp:tools:filter` hook.\n   */\n  toolFilter?: (tool: { name: string, description?: string | null, inputSchema?: unknown }) => boolean\n  /**\n   * Per-server override for {@link AgentBehavior.toolDisclosure}. When set,\n   * this server's tools follow this disclosure mode regardless of the\n   * agent-wide default. Useful when one big MCP server (200+ tools) should\n   * stay lazy while smaller servers stay eager.\n   *\n   * Default: inherits from `behavior.toolDisclosure`.\n   */\n  disclosure?: 'eager' | 'lazy'\n  /**\n   * Pre-cached tool schemas to advertise without issuing `tools/list` at\n   * bootstrap. The connection is still established (the SDK's `connect()`\n   * is needed for `tools/call`) — only the discovery round-trip is\n   * skipped. Schemas are trusted as-is; the host owns invalidation\n   * (typical cache key: `(server identity, server version)`). If the\n   * server later returns `MethodNotFound` for a cached tool, the host\n   * should drop the entry from its cache so the next bootstrap re-lists.\n   *\n   * Compatible with every transport, every auth mode, and with\n   * {@link McpServerConfig.lazyConnect}. Composes with the existing\n   * `enabledTools` / `disabledTools` / `toolFilter` filters — those run\n   * over the cached schemas exactly as they would over `listTools()`\n   * output.\n   */\n  cachedTools?: McpToolSchema[]\n  /**\n   * Defer the `client.connect(transport)` call until the first\n   * `tools/call` reaches this server. Bootstrap registers the server's\n   * tools using {@link McpServerConfig.cachedTools} without touching\n   * the network, taking MCP setup off the critical path of\n   * `agent.run()`. The first invocation pays the connect cost\n   * (~200-500ms typically); every subsequent call reuses the live\n   * client.\n   *\n   * Requires {@link McpServerConfig.cachedTools} — without schemas in\n   * hand there is nothing to advertise to the model, so deferring the\n   * connection has no purpose. Bootstrap rejects the config otherwise.\n   *\n   * **Incompatible with `auth: 'oauth'`**: the OAuth handshake (token\n   * refresh / RFC 9728 metadata discovery) can fail in ways that today\n   * fire `mcp:auth:required` at bootstrap so the host can surface a\n   * login affordance *before* the model commits to calling a tool.\n   * Deferring that to first call means an auth failure surfaces mid-run\n   * as a tool-result error, which the model can't recover from without\n   * a fresh prompt. Bootstrap rejects the combination so the error is\n   * loud and proximate to the misconfiguration. Use OAuth servers\n   * without `lazyConnect` (with `cachedTools` alone, if you want to\n   * skip the `tools/list` round-trip).\n   *\n   * On connect failure (network error, transport refused), the cached\n   * promise is dropped so the next `tools/call` retries. The model\n   * sees the failure as a normal tool error. Subsequent calls remain\n   * eligible to succeed once the upstream is reachable again.\n   */\n  lazyConnect?: boolean\n}\n\n// ---------------------------------------------------------------------------\n// Tool execution\n// ---------------------------------------------------------------------------\n\nexport interface AgentBehavior {\n  /**\n   * Maximum number of tools that may be in flight concurrently within a\n   * single assistant turn. The scheduler dispatches concurrency-safe tools\n   * (`ToolDef.isConcurrencySafe`) in parallel up to this cap; unsafe tools\n   * act as barriers (wait for the fleet to drain, then run alone).\n   *\n   * Default: `10`. Set to `1` to force fully sequential dispatch regardless\n   * of per-tool flags — useful for deterministic debugging / eval-grade\n   * runs. Values `< 1` are clamped to `1`.\n   */\n  maxConcurrentTools?: number\n  /**\n   * Max agent loop iterations.\n   *\n   * Default: unlimited (Infinity). The loop runs until the model signals\n   * completion (no tool calls / `end_turn`), the abort signal fires, or this\n   * cap is hit. Set a finite value as a safety net for runaway loops.\n   */\n  maxTurns?: number\n  /** Max tokens per LLM response (default: 16384) */\n  maxTokens?: number\n  /** Thinking token budget — overrides the level-based default when set */\n  thinkingBudget?: number\n  /** JSON Schema for structured output enforcement */\n  schema?: Record<string, unknown>\n  /**\n   * Enable provider prompt caching. When on (default), the provider marks the\n   * system prompt, tools, and the last stable message with cache breakpoints so\n   * the shared prefix is served from cache across turns.\n   *\n   * - Anthropic: `cache_control: { type: 'ephemeral' }` on the last `system`\n   *   content part, the last tool, and the last message content part.\n   * - OpenAI-compatible / OpenRouter: same shape — honored by Anthropic-backed\n   *   OpenRouter routes and by Gemini; ignored (no-op) by providers that cache\n   *   automatically (OpenAI, DeepSeek, Grok, Groq, Moonshot).\n   *\n   * Usage is surfaced via `TurnUsage.cacheRead` / `TurnUsage.cacheCreation`.\n   *\n   * Default: `true`.\n   */\n  cache?: boolean\n  /**\n   * Soft per-turn cap on total tool-output bytes. When the sum of `outputBytes`\n   * across a turn's tool results exceeds this value, the loop injects a\n   * synthetic user message instructing the model to summarize before calling\n   * more tools, and fires the `budget:exceeded` hook.\n   *\n   * Measured **post-`tool:transform`** so consumer truncation counts toward the\n   * budget. Off by default (undefined / `0` disables the check). A reasonable\n   * starting value for OSS-model integrations is `32768`.\n   */\n  toolOutputBudget?: number\n  /**\n   * Deduplicate identical re-reads of the same file in `read_file`. When the\n   * model re-reads a file with the same slice and the bytes haven't changed\n   * since the last read in this session, the tool returns a short stub\n   * instead of re-emitting the full content. Pairs with the read-before-edit\n   * guard in `edit` / `multi_edit`.\n   *\n   * Requires a session (set via `createSession()`); without one, the flag is\n   * a no-op since per-session state has nowhere to live.\n   *\n   * Default: `true`.\n   */\n  dedupReads?: boolean\n  /**\n   * Taper the thinking budget over the course of a run. Late turns are\n   * usually checkpoint / cleanup work where reasoning rarely pays for\n   * itself; early turns benefit most. Two forms:\n   *\n   * - **Struct** — geometric decay starting after `afterTurn`, multiplying by\n   *   `factor` each subsequent turn, clamped to `floor`. Example\n   *   `{ afterTurn: 5, factor: 0.5, floor: 1024 }` with a base budget of 8192:\n   *   turns 1-5 = 8192, turn 6 = 4096, turn 7 = 2048, turn 8+ = 1024.\n   * - **Function** — `(runTurn, baseBudget) => number`. Arbitrary curves;\n   *   `runTurn` is 1-indexed, run-relative (resumed sessions reset).\n   *\n   * No-op when `thinkingBudget` is unset. Honored by every provider that\n   * respects `thinkingBudget` (anthropic explicit-budget `enabled` path,\n   * adaptive `maxTokensCap`, openai-compat `max_tokens` padding).\n   *\n   * Default: `undefined` (no decay).\n   */\n  thinkingDecay?: { afterTurn: number, factor: number, floor: number } | ((runTurn: number, baseBudget: number) => number)\n  /**\n   * Per-tool soft call budget for this run. Keyed by **canonical** tool name.\n   * On the first call after the run-cumulative dispatched count for that tool\n   * reaches `max`, the framework fires `onExceed`:\n   *\n   * - `'steer'` (default) — let the call execute, but emit a synthetic user\n   *   message after the turn that nudges the model away from re-calling the\n   *   tool. Reuses the existing post-turn steer pathway used by\n   *   `toolOutputBudget`. Fires `tool-budget:exceeded` with `mode: 'steer'`.\n   * - `'block'` — refuse the call via `tool:gate` `block`. The model sees a\n   *   `Blocked: <reason>` tool result. Fires `tool-budget:exceeded` with\n   *   `mode: 'block'`.\n   * - **Function** — `(ctx) => { mode, message }`. The consumer supplies the\n   *   steering / refusal text and chooses the mode dynamically.\n   *\n   * Counts include both real dispatches and dedup substitutes (Z19 hits).\n   * Excludes calls already blocked by an earlier gate (skill allow-list,\n   * consumer hook). Tool dispatched by spawned subagents has its own per-run\n   * counter — child counts never charge the parent.\n   *\n   * For MCP tools, key by the namespaced wire name (`mcp_<server>_<tool>`).\n   *\n   * Atomic in parallel mode: the middleware tracks its own per-tool\n   * approval counter, incremented synchronously at gate-time. A\n   * 4-call parallel batch against `max: 2` will let the first 2 through\n   * and refuse the rest, even though the loop's `runToolCounts` only\n   * propagates between calls (not within a single batch's gate fan-out).\n   *\n   * Default: `undefined` (no budget enforcement).\n   */\n  toolBudgets?: Record<string, {\n    max: number\n    onExceed?: 'steer' | 'block' | ((ctx: {\n      tool: string\n      count: number\n      max: number\n    }) => { mode: 'steer' | 'block', message: string })\n  }>\n  /**\n   * Generic per-tool argument deduplication. Keyed by the tool's **canonical**\n   * name (alias-stable). Each entry is a hasher: `(input) => string | undefined`.\n   *\n   * **Hasher contract** — three return values, three meanings:\n   *\n   * | Return                  | Meaning                                                                |\n   * |-------------------------|------------------------------------------------------------------------|\n   * | a non-empty string      | Cache key for this call. Equal keys (most-recent-only, this session)   |\n   * |                         | replay the prior recorded result without re-dispatching the tool.      |\n   * | `undefined`             | **Skip dedup for this call.** The tool runs normally; nothing recorded.|\n   * | `''` / non-string       | Treated identically to `undefined` (defensive: no dedup, no error).    |\n   *\n   * The `undefined` opt-out is the way to say *\"this specific call is not\n   * cacheable\"* (timestamps in input, randomness baked in, debug flags). It\n   * is **not** the same as `JSON.stringify(input)` — that would dedup against\n   * the verbatim input. Pick one explicitly:\n   *\n   * ```ts\n   * // Always cache by full input — every identical re-call dedups.\n   * dedupTools: { my_pure_tool: input => JSON.stringify(input) }\n   *\n   * // Cache by a normalized subset; non-cacheable shapes opt out.\n   * dedupTools: {\n   *   execute_sql: (input) => {\n   *     const q = typeof input.query === 'string' ? input.query.trim().toLowerCase() : undefined\n   *     if (!q || q.includes('now()') || q.includes('random()')) return undefined\n   *     return q\n   *   },\n   * }\n   * ```\n   *\n   * On a hit, the previously-recorded result is replayed as the tool_result\n   * without dispatching the tool. The substitution flows through `tool:gate`\n   * `result` (Z20), so `tool:after` and `tool:transform` still fire.\n   *\n   * Requires a session (`createSession()`); without one, the map is a silent\n   * no-op since per-session state has nowhere to live. Tools with side\n   * effects or non-deterministic outputs (network, time, randomness) MUST\n   * NOT be listed — there is no safety net beyond the consumer's hasher.\n   *\n   * For MCP tools, key by the namespaced wire name (`mcp_<server>_<tool>`).\n   * Concurrency-safe siblings ({@link ToolDef.isConcurrencySafe}) in the\n   * SAME assistant turn race against each other — none can dedup against\n   * a sibling that started in the same batch. Unsafe tools act as barriers\n   * and honor submission order within a turn, so an unsafe-but-listed tool\n   * follows the cache cleanly.\n   *\n   * **Cache policy**: only the most recent `(hash, result)` per tool is\n   * retained. Interleaved patterns (input A, input B, input A) miss on the\n   * second A because B overwrote it. Sufficient for the common spam-the-\n   * same-call loop; consumers needing a richer cache should hook\n   * `tool:gate` directly.\n   *\n   * Default: `undefined` (no per-tool dedup).\n   */\n  dedupTools?: Record<string, (input: Record<string, unknown>) => string | undefined>\n  /**\n   * Require `read_file` before `edit` / `multi_edit` on the same path, and\n   * reject edits when the file has changed on disk since the last read in\n   * this session. Eliminates the silent-corruption failure mode where a\n   * model \"remembers\" stale content and applies a substring edit against\n   * bytes that have moved.\n   *\n   * Requires a session. Off by default; turn it on for stricter eval-grade\n   * runs where silent edit corruption would invalidate the result.\n   *\n   * Default: `false`.\n   */\n  requireReadBeforeEdit?: boolean\n  /**\n   * Client-side context compaction strategy. Use this for non-Anthropic\n   * providers (OSS via cerebras / openai-compat / openrouter) that don't\n   * have a server-side equivalent. Anthropic users should prefer the\n   * server-side `context-management-2025-06-27` beta — see\n   * `AnthropicParams.contextManagement`.\n   *\n   * - `'off'` (default) — no client-side compaction.\n   * - `'tail'` — when total tool-output bytes in the persisted history\n   *   exceed `compactThreshold`, replace older `tool_result` outputs with a\n   *   short stub, keeping the newest `compactKeepTurns` turns intact. The\n   *   compaction is applied to the wire-level message list only; the\n   *   underlying session turns are not modified.\n   *\n   * Default: `'off'`.\n   */\n  compactStrategy?: 'off' | 'tail'\n  /**\n   * Soft byte threshold that triggers tail compaction when\n   * `compactStrategy === 'tail'`. Counts the post-`context:transform` bytes\n   * of `tool_result` outputs across all messages. Default: `131_072` (128\n   * KiB). Ignored when compaction is off.\n   */\n  compactThreshold?: number\n  /**\n   * Number of trailing turns to leave untouched during tail compaction. The\n   * most-recent `compactKeepTurns` user/assistant messages are not eligible\n   * for elision so the model keeps the freshest tool context. Default: `4`.\n   */\n  compactKeepTurns?: number\n  /**\n   * Prefix every line of `read_file` output with its 1-indexed line number\n   * followed by a tab (`<N>\\t<content>`) — the compact `cat -n`-style\n   * format Claude Code emits. The `edit` tool strips the prefix from\n   * `old_string` / `new_string` so the model can paste back a numbered\n   * chunk verbatim without breaking the match.\n   *\n   * Set `false` to opt out — useful for callers piping `read_file` into\n   * downstream parsers that don't recognize the prefix. Per-call\n   * `read_file({ lineNumbers: false })` overrides this default.\n   *\n   * Default: `true`.\n   */\n  readLineNumbers?: boolean\n  /**\n   * Replace older `read_file` `tool_result` blocks with a short stub when\n   * a successful `edit` / `multi_edit` / `write_file` later in the same\n   * run modified the same path. The replacement is applied to the\n   * wire-level message list only — persisted session turns keep the\n   * original content.\n   *\n   * Eliminates the common waste pattern where the model carries the\n   * pre-edit file body forward across many turns \"in case it needs it\".\n   * Pairs cleanly with `compactStrategy: 'tail'`: stale reads shrink\n   * first, then the byte-threshold compaction fires if anything's left.\n   *\n   * Detection is conservative — only triggers when the corresponding\n   * tool_result confirms success (`Edited …`, `Created …`, `Updated …`).\n   * Failed edits and `No change needed` write_file calls do NOT\n   * invalidate prior reads.\n   *\n   * Default: `false`.\n   */\n  elideStaleReads?: boolean\n  /**\n   * Tool disclosure strategy. Controls whether the model sees every tool's\n   * full `inputSchema` in its tool list every turn (\"eager\") or whether MCP\n   * tools are advertised as a name+description catalog in the system prompt\n   * and only get full schemas after being surfaced via the `tool_search`\n   * native tool (\"lazy\" / progressive disclosure).\n   *\n   * Native tools (those passed to `createAgent({ tools })`) and skill tools\n   * are always eager — they are core to the agent and cheap. Only MCP tools\n   * are eligible for lazy disclosure.\n   *\n   * When `'lazy'`, the agent:\n   * - Appends a `<searchable_tools>` section to the system prompt listing\n   *   every MCP tool by `name` + `description` only (no `inputSchema`).\n   * - Auto-injects a `tool_search` native tool (opt out via\n   *   {@link AgentBehavior.toolSearch}) the model uses to load schemas on\n   *   demand. Surfaced tools persist for the rest of the run.\n   * - Rebuilds the wire-level tool list each turn, appending newly-unlocked\n   *   tools at the end so the prefix-cache breakpoint advances cleanly.\n   *\n   * Trade-off: every `tool_search` invocation expands the tool list and\n   * invalidates the tool-list cache breakpoint for one turn. With many\n   * MCP servers, the savings on cold turns (fewer schemas in context) are\n   * substantial; with one tiny MCP server, the overhead may not pay back.\n   *\n   * Default: `'eager'`.\n   */\n  toolDisclosure?: 'eager' | 'lazy'\n  /**\n   * Fine-grained config for the `tool_search` tool auto-injected when\n   * {@link AgentBehavior.toolDisclosure} is `'lazy'`. No-op in eager mode.\n   *\n   * - `tool: false` — opt out of the auto-injection entirely. Use when the\n   *   host wants to ship a custom discovery tool. Note that the catalog\n   *   text drops the call-to-action prose in this case so the model isn't\n   *   pointed at a non-existent tool.\n   * - `limit` — default cap on results returned per `tool_search` call when\n   *   the model omits the parameter. Default: `20`.\n   *\n   * Note on host-defined `tool_search`: a tool the host registers under the\n   * name `tool_search` (or under any alias whose canonical is `tool_search`)\n   * will shadow the auto-injected one — the catalog text will point at the\n   * host's wire name, but driving the unlock flow requires either using\n   * `createToolSearchTool({ catalog, unlocked })` from `tools/tool-search`\n   * (which internally mutates the unlock set) or fully opting out via\n   * `toolSearch.tool: false` and treating discovery as a host-side concern.\n   * A bare host tool that doesn't touch the unlock set will not advance the\n   * lazy disclosure state and the hard gate will keep refusing lazy calls.\n   *\n   * Default: `undefined` (auto-inject with the default limit).\n   */\n  toolSearch?: {\n    tool?: false\n    limit?: number\n  }\n  /**\n   * Persist large `tool_result` outputs to disk and replace the in-message\n   * content with a `<persisted-output>` stub (preview + filesystem path).\n   * When the post-`tool:transform` byte size of a tool's result exceeds\n   * this threshold, the framework writes the full payload to\n   * `<persistDir>/<callId>.txt` and substitutes a fixed-format stub so the\n   * model sees a 2 KiB preview plus the path it can `read_file`.\n   *\n   * The substitution happens at emit time (just after `tool:transform` runs)\n   * and the stub flows into `session.turns` directly — so every subsequent\n   * turn re-emits the same bytes, keeping the prompt-cache prefix stable.\n   *\n   * Set `0` / `undefined` to disable. Built-in chat profiles default to\n   * `8192`. Tools listed in {@link AgentBehavior.persistExcludeTools} bypass\n   * regardless of size — typically because their output is intentionally\n   * short or persisting would be circular (e.g. `read_file`).\n   *\n   * Requires {@link AgentBehavior.persistDir} to be set; without a target\n   * directory the framework silently skips persistence (no throw, no\n   * substitution) since there's nowhere to write the blob.\n   *\n   * Default: `undefined` (off).\n   */\n  persistThreshold?: number\n  /**\n   * Canonical tool names to exclude from disk persistence regardless of\n   * output size. The framework bypasses persistence for any tool whose\n   * canonical name appears in this list — useful for tools whose results\n   * are intentionally part of the prompt (`skills_use`), short envelopes\n   * (`tool_search`, `present_plan`, `ask_user`), or where persistence\n   * would be circular (`read_file`, whose pagination already serves the\n   * same use case).\n   *\n   * Default: `undefined` (no exclusions). The chat-layer built-in profiles\n   * set their own list — see `src/chat/agents.ts`.\n   */\n  persistExcludeTools?: readonly string[]\n  /**\n   * Directory under which persisted tool-result blobs land. Each call's\n   * payload is written to `<persistDir>/<callId>.txt` (one file per\n   * `tool_use` id, atomic via write-then-rename).\n   *\n   * The chat layer resolves this to `<userDir>/tool-results/<sessionId>/`\n   * at session activation; SDK consumers pass an absolute path. Required\n   * when {@link AgentBehavior.persistThreshold} is non-zero — when unset\n   * the framework treats persistence as disabled.\n   *\n   * Default: `undefined`.\n   */\n  persistDir?: string\n  /**\n   * Fail-fast instead of repair when the pre-send pairing pass detects\n   * corruption (orphan `tool_use` / `tool_result`, duplicate ids,\n   * compaction-stranded blocks). Throws {@link AgentToolPairingError} from\n   * the next `agent.run()` turn carrying the structured repair list the\n   * loop would have performed.\n   *\n   * Use case: training-data collectors that must reject any transcript\n   * containing the synthetic `SYNTHETIC_TOOL_RESULT_PLACEHOLDER` rather\n   * than ship poisoned data to the fine-tuning pipeline. User-facing chat\n   * sessions should leave this off (the repair-on-the-fly behavior is the\n   * point of the pass).\n   *\n   * Telemetry note: `pairing:repair` still fires for every repair before\n   * the throw, so observability handlers see exactly what would have\n   * happened.\n   *\n   * Default: `false`.\n   */\n  strictToolPairing?: boolean\n}\n\n// ---------------------------------------------------------------------------\n// Prompt parts (multimodal input)\n// ---------------------------------------------------------------------------\n\n/**\n * One block of a multimodal user prompt.\n *\n * `agent.run({ prompt })` accepts either a plain string (treated as a single\n * text part) or an array of these parts for multimodal inputs.\n *\n * `document` parts are routed per provider: PDF-style mime types are sent as\n * native document blocks when the provider supports them; text documents are\n * inlined as text with an attachment header. Providers that cannot handle an\n * image or document throw early.\n */\nexport type PromptPart\n  = | PromptTextPart\n    | PromptImagePart\n    | PromptDocumentPart\n\nexport interface PromptTextPart {\n  type: 'text'\n  text: string\n}\n\nexport interface PromptImagePart {\n  type: 'image'\n  /** IANA media type (e.g. `image/png`, `image/jpeg`) */\n  mediaType: string\n  /** Base64-encoded payload */\n  data: string\n  /** Optional display name */\n  name?: string\n}\n\nexport interface PromptDocumentPart {\n  type: 'document'\n  /** IANA media type (e.g. `application/pdf`, `text/plain`) */\n  mediaType: string\n  /** Either a base64-encoded payload (`encoding: 'base64'`) or raw text (`encoding: 'text'`) */\n  data: string\n  encoding: 'base64' | 'text'\n  /** Optional display name used in attachment headers */\n  name?: string\n}\n\n// ---------------------------------------------------------------------------\n// Canonical message format (used throughout the agent system)\n// ---------------------------------------------------------------------------\n\n/**\n * A single block of structured tool-result content.\n *\n * MCP servers can return a mix of text, image, resource, and audio blocks. Tools\n * return `string` for the common text-only case or `ToolResultContent[]` when they\n * need to preserve non-text content (e.g. screenshots from a browser MCP).\n *\n * Providers that support native multi-part tool results (Anthropic, OpenAI Codex via\n * pi-ai) route image blocks into their wire format verbatim; OpenAI-compat providers\n * route them via a companion-user-message fallback when the underlying model/endpoint\n * does not accept images inside tool-role messages.\n */\nexport type ToolResultContent\n  = | ToolResultTextContent\n    | ToolResultImageContent\n\nexport interface ToolResultTextContent {\n  type: 'text'\n  text: string\n}\n\nexport interface ToolResultImageContent {\n  type: 'image'\n  /** IANA media type (e.g. `image/png`, `image/jpeg`) */\n  mediaType: string\n  /** Base64-encoded payload */\n  data: string\n}\n\n/**\n * Lossy flattener — converts `ToolResultContent[]` (or a plain string) to a single\n * string. Image blocks are replaced with `[image: <media> — <n> b64 bytes]` markers.\n *\n * Use at UI boundaries where a string is required; providers that understand\n * structured content should route the array through without flattening.\n */\nexport function toolResultToText(content: string | ToolResultContent[]): string {\n  if (typeof content === 'string')\n    return content\n  return content\n    .map((block) => {\n      if (block.type === 'text')\n        return block.text\n      return `[image: ${block.mediaType} — ${block.data.length} b64 bytes]`\n    })\n    .join('\\n')\n}\n\n/**\n * Approximate **wire payload size** of a tool output, in bytes.\n *\n * - Plain text: UTF-8 byte length.\n * - Structured content: text blocks contribute their UTF-8 byte length; image\n *   blocks contribute their **base64 character length** — a proxy for the\n *   serialized request-body footprint, NOT for tokens. Vision encoders\n *   tokenize decoded pixels (geometry-dependent; e.g. Anthropic ≈ `w·h/750`,\n *   OpenAI ≈ 85 + 170/tile), which has no meaningful relationship to base64\n *   length.\n *\n * Used by the agent loop to populate `outputBytes` on `tool:after`,\n * `tool:transform`, `mcp:tool:after`, and `mcp:tool:transform` hooks so\n * consumers can size-budget tool output without re-counting bytes themselves.\n * Suitable for byte-budget heuristics (`toolOutputBudget`, tail compaction);\n * NOT a substitute for provider-side context-window accounting — defer to\n * server-side context management (e.g. Anthropic's `context-management-*`\n * beta) when token accuracy matters.\n */\nexport function toolOutputByteLength(content: string | ToolResultContent[]): number {\n  if (typeof content === 'string')\n    return Buffer.byteLength(content)\n  let total = 0\n  for (const block of content) {\n    if (block.type === 'text')\n      total += Buffer.byteLength(block.text)\n    else\n      total += block.data.length\n  }\n  return total\n}\n\nexport type SessionContentBlock\n  = | { type: 'text', text: string }\n    | { type: 'image', mediaType: string, data: string }\n    | { type: 'tool_call', id: string, name: string, input: Record<string, unknown> }\n    | {\n      type: 'tool_result'\n      callId: string\n      /**\n       * Tool output — either a plain string (text-only, the common case) or a structured\n       * array of content blocks (text + image for multimodal tools such as screenshots).\n       */\n      output: string | ToolResultContent[]\n      isError?: boolean\n    }\n    | {\n      type: 'thinking'\n      text: string\n      signature?: string\n      /**\n       * Provider that minted `signature`. Signatures are provider-bound (Anthropic\n       * HMAC vs. OpenAI `encrypted_content`) and are dropped on cross-provider\n       * hops to avoid 400s. Unset means legacy/unknown — forwarded as-is.\n       */\n      signatureProducer?: 'anthropic' | 'openai'\n    }\n    | { type: 'redacted_thinking', data: string }\n    | {\n      /**\n       * Opaque round-trip envelope for reasoning state minted by an OpenAI-compat\n       * gateway (currently OpenRouter). The gateway expects its own\n       * `reasoning_details` array echoed back verbatim on the next turn so the\n       * upstream model can resume an extended-reasoning chain across tool calls.\n       *\n       * Stored opaquely because the items are provider-bound (Anthropic HMAC\n       * signatures, OpenAI `encrypted_content`, model-specific summary formats\n       * — all flowing through the gateway's normalized envelope).\n       */\n      type: 'provider_reasoning'\n      producer: 'openrouter'\n      details: unknown[]\n      /**\n       * Model id that produced the details. Reasoning is bound to a specific\n       * upstream route — a model switch on the next turn invalidates the\n       * embedded signatures, so the sender drops the block on mismatch.\n       */\n      model?: string\n    }\n    | {\n      /**\n       * Compaction marker. Inserted by `compactConversation()` to replace a\n       * prefix of turns with an LLM-generated summary.\n       *\n       * The marker lives in `session.turns` and renders in the transcript —\n       * the user can still scroll back to see the original turns. From the\n       * agent loop's wire-level perspective, every turn whose id appears in\n       * `replacesTurnIds` is dropped, and this block's `summary` text is\n       * sent to the model as a single user message in their place.\n       *\n       * The marker turn carries `role: 'user'` so it sits naturally at a\n       * conversational boundary. Only the latest `compact-summary` block in\n       * the session is honored — earlier markers are subsumed by later\n       * ones (their `replacesTurnIds` are a strict prefix).\n       */\n      type: 'compact-summary'\n      /** Turn ids the summary replaces, in chronological order. */\n      replacesTurnIds: readonly string[]\n      /** The summary text sent to the model in place of the elided turns. */\n      summary: string\n      /** Model id used to produce the summary. */\n      model: string\n      /** Token usage from the summary call. */\n      usage: TurnUsage\n      /** Unix-ms when compaction completed. */\n      compactedAt: number\n    }\n\nexport interface SessionMessage {\n  role: 'user' | 'assistant'\n  content: SessionContentBlock[]\n}\n\nexport interface SessionTurn {\n  /** UUID — generated by the store if it provides generateTurnId, else crypto.randomUUID() */\n  id: string\n  /** Run that produced this turn (e.g. 'run_1') */\n  runId?: string\n  role: 'user' | 'assistant' | 'system'\n  content: SessionContentBlock[]\n  /** Token usage — only present on assistant turns */\n  usage?: TurnUsage\n  /** Unix timestamp (Date.now()) when the turn was created */\n  createdAt: number\n}\n\n// ---------------------------------------------------------------------------\n// Agent run options\n// ---------------------------------------------------------------------------\n\n/**\n * Per-run hook registrations. Each entry can be a single handler or an array of handlers.\n * Keys are `AgentHooks` event names (loose-typed here to avoid a circular import; agent.ts\n * narrows it to the strongly-typed map).\n */\nexport type RunHookMap = Record<string, ((ctx: any) => unknown) | ((ctx: any) => unknown)[]>\n\nexport interface AgentRunOptions {\n  model?: string\n  /**\n   * User prompt. Optional when resuming a session with existing turns.\n   *\n   * Accepts either a plain string (single text part) or an array of `PromptPart`s for\n   * multimodal inputs (text, images, documents). See {@link PromptPart}.\n   */\n  prompt?: string | PromptPart[]\n  system?: string\n  thinking?: ThinkingLevel\n  /** Abort signal — when triggered, the agent stops after the current turn */\n  signal?: AbortSignal\n  /** Behavior overrides for this run (overrides agent defaults) */\n  behavior?: AgentBehavior\n  /** Tool overrides for this run. Pass {} for no tools. Omit to use agent tools. */\n  tools?: Record<string, ToolDef>\n  /**\n   * Per-run hook registrations. Each hook is attached before the run starts and\n   * detached in a finally block so handlers never leak across runs.\n   *\n   * Accepts either a single handler or an array (all handlers register).\n   */\n  hooks?: RunHookMap\n  /**\n   * Parent run id. Populated automatically by the `spawn` tool when the child\n   * shares the parent's session; recorded on the resulting `SessionRun` so the\n   * parent↔child run tree can be reconstructed from a persisted session.\n   */\n  parentRunId?: string\n  /**\n   * Zero-based subagent depth. 0 = top-level `agent.run()`, 1 = first-level\n   * child spawned by a parent agent, and so on. Used by the spawn tool to\n   * enforce `maxDepth` and to stamp `child:*` forwarded hook payloads.\n   */\n  depth?: number\n  /**\n   * Opaque trace-context carrier propagated from the parent agent's\n   * tracer (typically a W3C `{ traceparent, tracestate }` map). The\n   * child's `agent.run()` re-emits it on the `agent:start` hook so the\n   * child's tracer can stitch its root span as a continuation of the\n   * parent's spawn span. Empty / absent on top-level runs.\n   *\n   * Set automatically by the `spawn` tool when a parent's tracer wrote\n   * into `SpawnHookContext.tracingContext` on `spawn:before`. SDK\n   * consumers that drive subagents manually can populate this directly.\n   */\n  tracingContext?: Readonly<Record<string, string>>\n}\n\n// ---------------------------------------------------------------------------\n// Agent stats\n// ---------------------------------------------------------------------------\n\n/**\n * Reason the provider gave for stopping the turn.\n *\n * - `'stop'` — natural turn end (`end_turn` / `stop_sequence`).\n * - `'tool-calls'` — model emitted tool_use blocks.\n * - `'length'` — `max_tokens` reached, or (Anthropic 4.6+) the response bumped\n *   against the model's context window mid-stream\n *   (`model_context_window_exceeded`). The partial response is preserved; the\n *   loop emits this reason so consumers can prune/retry.\n * - `'content-filter'` — model refused.\n * - `'pause'` — Anthropic `pause_turn`: a server-side mid-turn pause for very\n *   long thinking. The loop continues with a synthetic \"Please continue.\"\n *   user message rather than terminating; consumers see the pause via this\n *   finish reason on the prior assistant turn.\n * - `'error'` — provider classified the turn as failed.\n * - `'other'` — unknown / unmapped.\n */\nexport type TurnFinishReason = 'stop' | 'tool-calls' | 'length' | 'content-filter' | 'pause' | 'error' | 'other'\n\nexport interface TurnUsage {\n  input: number\n  output: number\n  /** Tokens written to cache (Anthropic) */\n  cacheCreation?: number\n  /** Tokens read from cache (Anthropic) */\n  cacheRead?: number\n  /** Thinking/reasoning tokens used */\n  thinking?: number\n  /**\n   * Cost in USD for this turn. Provider-reported when available\n   * (OpenRouter, OpenAI via pi-ai); otherwise estimated from `modelId` ×\n   * pi-ai's bundled price registry by `fillEstimatedCost` in\n   * `src/providers/cost.ts`. Absent only when neither path could resolve\n   * a price (unknown / unbundled model).\n   */\n  cost?: number\n  /**\n   * Why the model stopped this turn. Providers normalize native stop reasons to this union.\n   * Absent when the provider did not surface a reason (e.g. mock turns).\n   */\n  finishReason?: TurnFinishReason\n  /**\n   * The model ID the provider ultimately used. May differ from the requested model when the\n   * provider remaps aliases. Absent for providers that do not echo a model ID.\n   */\n  modelId?: string\n  /**\n   * Milliseconds from the moment the loop dispatched `provider.stream()`\n   * (the `stream:start` hook firing) to the first observable byte of this\n   * turn — earliest of `stream:text`, `stream:thinking`, or a tool_use\n   * block. Captures the per-turn TTFT independently of run-relative TTFT\n   * ({@link AgentStats.timeTillFirstTokenMs}, which only marks the first\n   * turn).\n   *\n   * Useful for metrics histograms (`gen_ai.client.time_to_first_token`)\n   * across long multi-turn runs where the run-level metric collapses to\n   * the cold turn only. Absent for empty-stream turns and turns that\n   * errored before any byte landed.\n   */\n  timeToFirstTokenMs?: number\n}\n\nexport interface AgentStats {\n  /**\n   * Cumulative input tokens across the parent agent loop **and** every\n   * recursively-spawned sub-agent. Use this for billing / token-ledger\n   * consumption.\n   */\n  totalIn: number\n  /** Cumulative output tokens. Same semantics as {@link AgentStats.totalIn}. */\n  totalOut: number\n  /**\n   * Cumulative cache-read tokens across the parent agent loop and every\n   * recursively-spawned sub-agent. Surfaced at the top level (rather than\n   * only per-`TurnUsage`) because Anthropic prices cache reads at a separate\n   * line-item rate from regular input — billing-correct cost computation\n   * needs this number directly. Always `0` for providers that don't report\n   * cache usage.\n   */\n  totalCacheRead: number\n  /**\n   * Cumulative cache-creation tokens across the parent agent loop and every\n   * recursively-spawned sub-agent. Same rationale as\n   * {@link AgentStats.totalCacheRead} — separate Anthropic billing rate.\n   * Always `0` for providers that don't report cache usage.\n   */\n  totalCacheCreation: number\n  /**\n   * Number of parent agent-loop turns. Children's turn counts live under\n   * `children[].stats.turns` and are NOT folded in here — a single \"turns\"\n   * number for the whole tree would conflate two different measures\n   * (parent-loop iterations vs. tree-wide tool-call rounds).\n   *\n   * Tree-wide turn count: `flattenTurns(stats).length`.\n   */\n  turns: number\n  /**\n   * Wall-clock duration of the top-level `agent.run()` call, in milliseconds.\n   * Children run during parent tool calls so this naturally subsumes child\n   * wall time — sequential children inflate it, parallel children compress\n   * into the parent's window.\n   */\n  elapsed: number\n  /**\n   * Per-turn usage breakdown for the **parent loop only**. Children's per-turn\n   * usages live under `children[].stats.turnUsage`. Use {@link flattenTurns}\n   * to walk the full tree.\n   */\n  turnUsage?: TurnUsage[]\n  /**\n   * Cumulative cost in USD — parent loop plus every recursively-spawned\n   * sub-agent. Sums per-turn `TurnUsage.cost` reported by the provider.\n   * Absent when neither parent nor any descendant reported a non-zero cost.\n   */\n  cost?: number\n  /** Stats from child agents spawned during this run, in completion order. Recursive. */\n  children?: ChildRunStats[]\n  /** Structured output from schema enforcement (only present when behavior.schema is set) */\n  output?: Record<string, unknown>\n  /**\n   * Milliseconds from the start of `agent.run()` to the first observable signal from the\n   * provider (first `stream:text`, `stream:thinking`, or `tool:before` event).\n   *\n   * Absent when the run produced no observable signals (e.g. aborted before any stream event).\n   */\n  timeTillFirstTokenMs?: number\n}\n\nexport interface ChildRunStats {\n  id: string\n  task: string\n  /**\n   * The child agent's full {@link AgentStats}. Cumulative for that child's\n   * own subtree (child loop + its grandchildren). Do **not** sum\n   * `ctx.stats.totalIn` across `spawn:complete` events to derive top-level\n   * totals — `agent.run()`'s return value is the canonical cumulative root.\n   */\n  stats: AgentStats\n  /**\n   * Subagent depth when this child ran. 1 = direct child of the top-level\n   * agent, 2 = grandchild, etc. Useful for telemetry that wants to group\n   * runs by depth.\n   */\n  depth?: number\n  /**\n   * Terminal state of the child run. `'completed'` is the default. Exposed so\n   * a parent reading `stats.children` can distinguish aborted/timed-out\n   * children without re-parsing the returned string.\n   */\n  status?: 'completed' | 'aborted' | 'timeout' | 'error'\n  /**\n   * Final structured output when the child was run with `behavior.schema`.\n   * Mirrors `AgentStats.output` but is surfaced here so the parent can read\n   * it without peeking at the nested `stats` bag.\n   */\n  output?: Record<string, unknown>\n}\n\n// ---------------------------------------------------------------------------\n// Hook context types\n// ---------------------------------------------------------------------------\n\n/**\n * Base context for tool execution hooks.\n *\n * `name` is the canonical tool identity — the spec name registered on the agent (or the\n * `mcp_{server}_{tool}` name for MCP tools). Hooks should policy-match against `name`.\n *\n * `displayName` is the outward-facing name — the alias surfaced to the LLM when\n * `AgentOptions.toolAliases` maps the canonical name; otherwise equal to `name`.\n * UI/telemetry adapters should emit `displayName`.\n *\n * Canonical vs. alias matters on session resume: `session.turns` persists canonical\n * names only, so renaming an alias cannot desync history.\n */\nexport interface ToolHookContext {\n  turnId: string\n  callId: string\n  /** Canonical tool name (spec name). Stable across alias-map changes. */\n  name: string\n  /** Aliased (wire) name — equal to `name` when no alias is defined. */\n  displayName: string\n  input: Record<string, unknown>\n  /**\n   * The run this tool call belongs to (the `SessionRun.id`). Lets a single\n   * `tool:*` listener disambiguate calls across parallel runs / subagent\n   * trees without subscribing to the `child:tool:*` bubble events.\n   */\n  runId?: string\n  /**\n   * Parent run id when this tool call's agent is a subagent — i.e. the\n   * `SessionRun.parentRunId` of the run that owns the call. Absent on\n   * top-level runs. Useful for observability stitching: a UI grouping\n   * subagent-scoped state (e.g. todowrite, edit batches) by parent\n   * run can read this directly off `tool:before` / `tool:after`\n   * without resolving the run row.\n   */\n  parentRunId?: string\n  /**\n   * Subagent depth for this tool call. 0 = top-level, 1 = first-level\n   * child, etc. Mirrors `ToolContext.depth` so hook consumers don't\n   * have to cross-reference the tool context. Omitted on top-level\n   * runs (treated as 0).\n   */\n  depth?: number\n}\n\n/**\n * Base context for MCP tool hooks.\n *\n * `tool` is the native tool name on the MCP server. `server` is the configured server\n * name. The canonical zidane-namespaced identity is `mcp_{server}_{tool}`.\n *\n * `displayName` equals the canonical namespaced name unless the agent has aliased\n * this MCP tool via `AgentOptions.toolAliases`; in which case `displayName` is the\n * alias that the LLM sees.\n */\nexport interface McpToolHookContext {\n  turnId: string\n  callId: string\n  server: string\n  tool: string\n  /** Aliased wire name for this MCP tool, or the canonical `mcp_{server}_{tool}` name. */\n  displayName: string\n  input: Record<string, unknown>\n  /** Owning run id — same semantics as `ToolHookContext.runId`. */\n  runId?: string\n  /** Parent run id when this tool call's agent is a subagent — see `ToolHookContext.parentRunId`. */\n  parentRunId?: string\n  /** Subagent depth — see `ToolHookContext.depth`. */\n  depth?: number\n}\n\n/** Base context for session hooks */\nexport interface SessionHookContext {\n  sessionId: string\n}\n\n/** Base context for spawn hooks */\nexport interface SpawnHookContext {\n  id: string\n  task: string\n  /**\n   * Subagent depth for the spawn. 1 = direct child of the top-level agent.\n   * Present on spawn:before/complete/error. Absent for grandchild spawns that\n   * bubble through `child:*` events (which carry their own `depth`).\n   */\n  depth?: number\n  /**\n   * Mutable trace-context carrier for parent → child span linkage. Empty\n   * object by default; a parent tracer mutates it on `spawn:before` (e.g.\n   * `ctx.tracingContext.traceparent = '00-…-…-01'`) and the `spawn` tool\n   * forwards the populated object to the child via\n   * `AgentRunOptions.tracingContext`. The child's tracer re-emits it on\n   * `agent:start` so it can be used as parent context when opening the\n   * child's root span.\n   *\n   * Opaque to the harness — keys / values are tracer-defined. Standard\n   * choice is W3C Trace Context (`traceparent` + optional `tracestate`),\n   * but Datadog / Sentry / B3 carriers work too.\n   */\n  tracingContext?: Record<string, string>\n}\n\n/** Context for stream hooks */\nexport interface StreamHookContext {\n  turnId: string\n}\n\n/** Context for OAuth refresh hooks */\nexport interface OAuthRefreshHookContext {\n  provider: string\n  providerId: string\n  source: 'params' | 'file'\n  previousCredentials: Record<string, unknown> & { access: string, refresh: string, expires: number }\n  credentials: Record<string, unknown> & { access: string, refresh: string, expires: number }\n}\n\nexport type SessionEndStatus = 'completed' | 'aborted' | 'error'\n"],"mappings":";;;;;;;;;AAipBA,SAAgB,iBAAiB,SAA+C;CAC9E,IAAI,OAAO,YAAY,UACrB,OAAO;CACT,OAAO,QACJ,KAAK,UAAU;EACd,IAAI,MAAM,SAAS,QACjB,OAAO,MAAM;EACf,OAAO,WAAW,MAAM,UAAU,KAAK,MAAM,KAAK,OAAO;GACzD,CACD,KAAK,KAAK;;;;;;;;;;;;;;;;;;;;;AAsBf,SAAgB,qBAAqB,SAA+C;CAClF,IAAI,OAAO,YAAY,UACrB,OAAO,OAAO,WAAW,QAAQ;CACnC,IAAI,QAAQ;CACZ,KAAK,MAAM,SAAS,SAClB,IAAI,MAAM,SAAS,QACjB,SAAS,OAAO,WAAW,MAAM,KAAK;MAEtC,SAAS,MAAM,KAAK;CAExB,OAAO"}

package/dist/types.d.ts

@@ -1,5 +1,5 @@
 import { a as ExecutionHandle, i as ExecutionContext, n as ContextType, o as SpawnConfig, r as ExecResult, t as ContextCapabilities } from "./types-Ce78ds4h.js";
 import { t as SandboxProvider } from "./index-BiO_5Hm4.js";
-import { $t as ThinkingLevel, Bt as OAuthRefreshHookContext, D as SkillConfig, Dt as OpenAIParams, F as SessionRun, Ft as AgentStats, Gt as RunHookMap, Ht as PromptImagePart, I as SessionStore, It as ChildRunStats, Jt as SessionHookContext, Kt as SessionContentBlock, Lt as McpServerConfig, M as CreateSessionOptions, N as Session, Nt as AgentBehavior, P as SessionData, Pt as AgentRunOptions, Qt as StreamHookContext, Rt as McpToolHookContext, S as ReadStateMap, Ut as PromptPart, Vt as PromptDocumentPart, Wt as PromptTextPart, Xt as SessionTurn, Yt as SessionMessage, Zt as SpawnHookContext, _n as matchesContextExceeded, an as TurnUsage, b as ToolMap, cn as AgentAbortedError, ct as StreamCallbacks, dn as AgentToolNotAllowedError, dt as ToolResult, en as ToolHookContext, ft as ToolSpec, hn as ClassifiedErrorKind, i as AgentOptions, in as TurnFinishReason, j as SkillsConfig, jt as AnthropicParams, k as SkillResource, kt as CerebrasParams, ln as AgentContextExceededError, lt as StreamOptions, mn as ClassifiedError, nn as ToolResultImageContent, on as toolOutputByteLength, ot as Provider, p as McpConnection, pn as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, pt as TurnResult, qt as SessionEndStatus, r as AgentHooks, rn as ToolResultTextContent, sn as toolResultToText, st as ProviderCapabilities, t as Agent, tn as ToolResultContent, un as AgentProviderError, ut as ToolCall, v as ToolContext, x as ReadStateEntry, y as ToolDef, yt as OpenRouterParams, z as RemoteStoreOptions } from "./agent-DHQAsdj6.js";
-import { I as ModelUsage, L as flattenTurns, R as statsByModel, _ as ChildAgent, f as ValidationResult, j as InteractionToolOptions, t as Preset, v as SpawnToolOptions, y as SpawnToolState } from "./index-CrqFoaQA.js";
+import { $t as ThinkingLevel, Bt as OAuthRefreshHookContext, D as SkillConfig, Dt as OpenAIParams, F as SessionRun, Ft as AgentStats, Gt as RunHookMap, Ht as PromptImagePart, I as SessionStore, It as ChildRunStats, Jt as SessionHookContext, Kt as SessionContentBlock, Lt as McpServerConfig, M as CreateSessionOptions, N as Session, Nt as AgentBehavior, P as SessionData, Pt as AgentRunOptions, Qt as StreamHookContext, Rt as McpToolHookContext, S as ReadStateMap, Ut as PromptPart, Vt as PromptDocumentPart, Wt as PromptTextPart, Xt as SessionTurn, Yt as SessionMessage, Zt as SpawnHookContext, _n as matchesContextExceeded, an as TurnUsage, b as ToolMap, cn as AgentAbortedError, ct as StreamCallbacks, dn as AgentToolNotAllowedError, dt as ToolResult, en as ToolHookContext, ft as ToolSpec, hn as ClassifiedErrorKind, i as AgentOptions, in as TurnFinishReason, j as SkillsConfig, jt as AnthropicParams, k as SkillResource, kt as CerebrasParams, ln as AgentContextExceededError, lt as StreamOptions, mn as ClassifiedError, nn as ToolResultImageContent, on as toolOutputByteLength, ot as Provider, p as McpConnection, pn as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, pt as TurnResult, qt as SessionEndStatus, r as AgentHooks, rn as ToolResultTextContent, sn as toolResultToText, st as ProviderCapabilities, t as Agent, tn as ToolResultContent, un as AgentProviderError, ut as ToolCall, v as ToolContext, x as ReadStateEntry, y as ToolDef, yt as OpenRouterParams, z as RemoteStoreOptions } from "./agent-Yu8uhpy-.js";
+import { B as flattenTurns, P as InteractionToolOptions, S as SpawnToolState, V as statsByModel, b as ChildAgent, h as ValidationResult, t as Preset, x as SpawnToolOptions, z as ModelUsage } from "./index-j9tY28ah.js";
 export { type Agent, AgentAbortedError, type AgentBehavior, AgentContextExceededError, type AgentHooks, type AgentOptions, AgentProviderError, type AgentRunOptions, type AgentStats, AgentToolNotAllowedError, type AnthropicParams, CONTEXT_EXCEEDED_MESSAGE_PATTERNS, type CerebrasParams, type ChildAgent, type ChildRunStats, type ClassifiedError, type ClassifiedErrorKind, type ContextCapabilities, type ContextType, type CreateSessionOptions, type ExecResult, type ExecutionContext, type ExecutionHandle, type InteractionToolOptions, type McpConnection, type McpServerConfig, type McpToolHookContext, type ModelUsage, type OAuthRefreshHookContext, type OpenAIParams, type OpenRouterParams, type Preset, type PromptDocumentPart, type PromptImagePart, type PromptPart, type PromptTextPart, type Provider, type ProviderCapabilities, type ReadStateEntry, type ReadStateMap, type RemoteStoreOptions, type RunHookMap, type SandboxProvider, type Session, type SessionContentBlock, type SessionData, type SessionEndStatus, type SessionHookContext, type SessionMessage, type SessionRun, type SessionStore, type SessionTurn, type SkillConfig, type SkillResource, type SkillsConfig, type SpawnConfig, type SpawnHookContext, type SpawnToolOptions, type SpawnToolState, type StreamCallbacks, type StreamHookContext, type StreamOptions, type ThinkingLevel, type ToolCall, type ToolContext, type ToolDef, type ToolHookContext, type ToolMap, type ToolResult, type ToolResultContent, type ToolResultImageContent, type ToolResultTextContent, type ToolSpec, type TurnFinishReason, type TurnResult, type TurnUsage, type ValidationResult, flattenTurns, matchesContextExceeded, statsByModel, toolOutputByteLength, toolResultToText };

package/dist/types.js

@@ -1,4 +1,4 @@
-import { c as matchesContextExceeded, i as AgentToolNotAllowedError, n as AgentContextExceededError, o as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, r as AgentProviderError, t as AgentAbortedError } from "./errors-Byb0F8B9.js";
+import { c as matchesContextExceeded, i as AgentToolNotAllowedError, n as AgentContextExceededError, o as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, r as AgentProviderError, t as AgentAbortedError } from "./errors-CDwtPIMX.js";
 import { n as toolResultToText, t as toolOutputByteLength } from "./types-IcokUOyC.js";
 import { r as statsByModel, t as flattenTurns } from "./stats-DgOvY7wd.js";
 export { AgentAbortedError, AgentContextExceededError, AgentProviderError, AgentToolNotAllowedError, CONTEXT_EXCEEDED_MESSAGE_PATTERNS, flattenTurns, matchesContextExceeded, statsByModel, toolOutputByteLength, toolResultToText };

package/docs/ARCHITECTURE.md

@@ -142,7 +142,9 @@ flowchart TB
     VC -->|yes| VCH["validation:coerce hook\n(observational)"]
     VC -->|no| T7
     VCH --> T7["tool:before hook\n(ctx.coercions when present, runToolCounts)"]
-    T7 --> T8["toolDef.execute(coercedInput, ctx)"]
+    T7 --> T8["toolDef.execute(coercedInput, ctx)\nracing against perCallAbort.signal"]
+    T8 -->|cancelled by\nagent.cancelTool| TC["tool:cancelled hook\n(reason, runToolCounts)"]
+    TC --> TCR["Return TOOL_USE_CANCELLED_MESSAGE\n(isError: true; skips tool:transform/after)"]
     T8 -->|error| T9["tool:error hook\n(can substitute result)"]
     T8 -->|ok| T10["tool:transform hook\n(can mutate result;\nctx.outputBytes pre-mutation)"]
     T9 --> T10
@@ -158,6 +160,8 @@ flowchart TB
 
 **`tool:gate` mutations.** Set `block` to refuse (`Blocked: reason`), `result` to substitute and skip execute, or neither to run normally. `block` wins over `result` so a policy gate always beats a consumer cache. The substitute path skips `tool:before` + validate + execute but fires `tool:transform` + `tool:after` — budgets and telemetry stay consistent with executed calls.
 
+**Per-call cancellation.** Each dispatch registers an `AbortController` in `LoopContext.pendingToolCancels` keyed by `callId`; the tool body's `ctx.signal` is `AbortSignal.any([ctx.signal, perCallAbort.signal])`. `agent.cancelTool(callId, reason?)` flips the per-call signal, the body promise races against the cancellation, the loop emits `tool:cancelled`, and the wire result becomes `TOOL_USE_CANCELLED_MESSAGE` with `isError: true`. Other in-flight tools in the same batch keep running — distinct from `agent.abort()` (whole-run abort → `INTERRUPT_MESSAGE_FOR_TOOL_USE` at the batch layer) and `TOOL_USE_SKIPPED_MESSAGE` (steered out before dispatch). The map entry is removed in a `finally` so it only ever holds currently-dispatching calls; the body promise gets a no-op `.catch` so misbehaving tools that ignore the signal can't surface as unhandled rejections after the loop has moved on.
+
 **`runToolCounts`** is a frozen pre-call snapshot, scoped to `runId`. Includes dedup + gate-`result` substitutes; excludes blocked calls. Resumed sessions reset the counter. Concurrent fleets see the same pre-batch snapshot — built-in budget/dedup middleware uses its own gate-time reservation counter so `behavior.toolBudgets` stays atomic across the fleet.
 
 **Output shape.** `string | ToolResultContent[]`. Text tools return strings; multimodal tools (MCP browsers, screenshots) return `[{ type: 'text' }, { type: 'image', mediaType, data }]`. Providers with `capabilities.imageInToolResult: true` (Anthropic, OpenAI Codex) route arrays natively; OpenAI-compat emits a companion `user` message with `image_url` parts. Non-vision providers swap image blocks for a text marker before the hook fires.
@@ -359,15 +363,22 @@ per run():
     skills_use({ name })                   → state.activate(skill, 'model')
                                              → skills:activate (via: 'model')
                                              → <skill_content> wrapper
+    skills_use({ name, mode: 'deactivate' }) → state.deactivate(skill)
+                                             → skills:deactivate (reason: 'model')
+                                             → "Skill X deactivated" confirmation
     skills_read / skills_run_script        → gated on state.isActive + path sandbox
   run end: deactivateAllSkills()           → skills:deactivate (reason: 'run-end')
 
 agent.activateSkill(name)                  → skills:activate (via: 'explicit')
 agent.deactivateSkill(name)                → skills:deactivate (reason: 'explicit')
 agent.reset()                              → skills:deactivate (reason: 'reset')
+
+session-resume rehydration:
+  last-mode-wins per skill across history's skills_use blocks
+  → trailing mode:'deactivate' STAYS deactivated; activate/deactivate/activate ends active
 ```
 
-**allowed-tools.** When any active skill declares `allowed-tools`, a `tool:gate` handler blocks calls outside the union (the three skills tools are always implicitly allowed).
+**allowed-tools.** When any active skill declares `allowed-tools`, a `tool:gate` handler blocks calls outside the union (the three skills tools are always implicitly allowed). Block-list (`- entry`) and flow-list (`[a, b]`) authoring shapes both normalize to `string[]` via the frontmatter parser's array-aware path; `AgentToolNotAllowedError.message` carries a recovery hint pointing the model at `skills_use({ mode: 'deactivate', name })` to release the offending skill without waiting for a run boundary.
 
 **Body-only delivery.** `skills_use` returns the body (frontmatter stripped) wrapped in `<skill_content>` for host-SDK context protection. Body includes shell-interpolated instructions (`` !`cmd` ``, fresh per activation), the skill directory, the resource listing (not eagerly loaded), and compatibility + allowed-tools when present.
 
@@ -420,7 +431,7 @@ run end: uninstallLazyDisclosureGate; unlocked GC-eligible on next run()
 skills:resolve                               ← once per agent, after discovery (warmup / run / activateSkill — first wins)
 skills:catalog    [mutable: catalog]         ← once per agent, after system-prompt catalog built (same trigger)
 skills:activate                              ← per activation; { skill, via: 'model' | 'explicit' | 'resume' }
-skills:deactivate                            ← per deactivation; { skill, reason: 'run-end' | 'explicit' | 'reset' }
+skills:deactivate                            ← per deactivation; { skill, reason: 'run-end' | 'explicit' | 'reset' | 'model' }
 ```
 
 Every run ends with an implicit deactivate-all pass (`reason: 'run-end'`); activation state never leaks across runs unless re-asserted via `agent.activateSkill()`.
@@ -453,6 +464,7 @@ turn:after                                       ← always fires (incl. errors)
   tool:transform      [mutable: result, isError] ← + outputBytes pre-mutation
   tool:after                                     ← + outputBytes post-mutation
   tool:error          [mutable: result?]         ← on execute throw; ctx.result substitutes
+  tool:cancelled                                 ← agent.cancelTool(callId); skips transform/after; wire = TOOL_USE_CANCELLED_MESSAGE
 tool-results:after                               ← after the tool-results user turn is pushed (persistence seam)
 usage                                            ← running totals
 output                                           ← when behavior.schema set
@@ -509,6 +521,7 @@ The child's lifecycle also bubbles to the parent hook surface with `childId` + `
 ```
 child:stream:text / child:stream:thinking / child:stream:end / child:stream:error
 child:tool:gate / child:mcp:tool:gate          ← share the child's ctx — parent mutations propagate
+child:tool:cancelled                           ← bubbled per-call cancel from a subagent's tool
 child:tool:transform                           ← share the child's ctx — parent mutations propagate
 child:tool:before / child:tool:after / child:tool:error
 child:turn:after

package/docs/CHAT.md

@@ -419,7 +419,7 @@ type ChipColorMap = { default: ChipColor } & Partial<Record<string, ChipColor>>
 
 Per-tool approval gate with a per-project safelist. The agent emits a `tool:gate` hook; the chat layer's wired handler:
 
-1. If `IMPLICITLY_SAFE_TOOLS` covers the call → allow.
+1. If `IMPLICITLY_SAFE_TOOLS` covers the call → allow. The list is `['read_file', 'list_files', 'glob', 'grep', 'ask_user', 'present_plan', 'todowrite', 'todoread', 'skills_use']` — pure reads, interaction prompts (the picker IS the gate), todo metadata, and skill activation (mutates a per-agent Map; no shell/disk/network — gating it would also break the model's recovery path when it deactivates a skill after an `AgentToolNotAllowedError`). `skills_read` (touches disk) and `skills_run_script` (executes scripts) are intentionally NOT on the list.
 2. If the project safelist (`~/.zidane/projects.json`) matches → allow.
 3. Else push an `ApprovalRequest` onto `SafeModeProvider`'s queue and await.
 

package/docs/SKILL.md

@@ -298,7 +298,7 @@ Hooks fire at every lifecycle point via [hookable](https://github.com/unjs/hooka
 | `skills:resolve` | Once per agent, after discovery (lazy on first `warmup()` / `run()` / `activateSkill()`, eager when `eager: true`) | — | `skills` |
 | `skills:catalog` | Once per agent, after catalog build (same timing as `skills:resolve`) | **yes** (`catalog`) | `catalog, skills` |
 | `skills:activate` | Skill activated (via `skills_use` / `activateSkill` / session resume) | — | `skill, via` (`'model' \| 'explicit' \| 'resume'`) |
-| `skills:deactivate` | Skill deactivated | — | `skill, reason` (`'run-end' \| 'explicit' \| 'reset'`) |
+| `skills:deactivate` | Skill deactivated | — | `skill, reason` (`'run-end' \| 'explicit' \| 'reset' \| 'model'`) — `'model'` fires when the model calls `skills_use({ mode: 'deactivate' })` to release an `allowed-tools` restriction it ran into |
 | `mcp:bootstrap:start` | Per MCP server, before connect + listTools | — | `name, transport` |
 | `mcp:bootstrap:end` | Per MCP server, after connect attempt (always fires) | — | `name, transport, durationMs, ok` + (`toolCount, lazy?, cached?` \| `error`) |
 | `mcp:connect` | Per MCP server after successful bootstrap (lazy-connect: after first call) | — | `name, transport, tools, lazy?` |
@@ -329,6 +329,7 @@ Hooks fire at every lifecycle point via [hookable](https://github.com/unjs/hooka
 | `tool:transform` | After tool result | **yes** (`result`, `isError`) | `+ result: string \| ToolResultContent[], isError, outputBytes: number` |
 | `tool:after` | Tool complete | — | `+ result: string \| ToolResultContent[], outputBytes: number, runToolCounts` |
 | `tool:error` | Tool error | **yes** (`result?`) | `+ error` — mutate `result` to substitute the payload sent back to the model |
+| `tool:cancelled` | Per-call cancel via `agent.cancelTool(callId, reason?)` (typically a TUI "cancel this tool" affordance) | — | `+ reason: string, runToolCounts` — wire result is the canonical `TOOL_USE_CANCELLED_MESSAGE` with `isError: true`; `tool:transform` + `tool:after` do **not** fire for the cancelled call |
 | `usage` | Per-turn usage | — | `turn, turnId, usage, totalIn, totalOut` |
 | `output` | Structured output extracted | — | `output, schema` |
 | `budget:exceeded` | Per-turn tool-output bytes over `behavior.toolOutputBudget` | — | `turn, turnId, bytes, budget` |
@@ -366,7 +367,7 @@ Same three fields land on `ToolContext` (visible to the tool body via `ctx.runId
 child:stream:text / child:stream:thinking / child:stream:end
 child:tool:gate / child:mcp:tool:gate    ← mutable: block/reason/result propagate to the child
 child:tool:transform                     ← mutable: parent can rewrite the child's tool_result
-child:tool:before / child:tool:after / child:tool:error
+child:tool:before / child:tool:after / child:tool:error / child:tool:cancelled
 child:turn:after
 ```
 
@@ -408,17 +409,20 @@ agent.hooks.hook('context:transform', (ctx) => {
 ## Agent State and Control
 
 ```ts
-agent.isRunning           // boolean
-agent.turns               // SessionTurn[]
-agent.steer('new focus')  // mid-run, between tool calls
-agent.followUp('next')    // queue after current run
-agent.abort()             // cancel
-agent.reset()             // clear turns + queues
-await agent.warmup()      // pre-connect MCP (idempotent)
+agent.isRunning             // boolean
+agent.turns                 // SessionTurn[]
+agent.steer('new focus')    // mid-run, between tool calls
+agent.followUp('next')      // queue after current run
+agent.abort()               // cancel the whole run
+agent.cancelTool(callId)    // cancel a single in-flight tool; siblings keep running
+agent.reset()               // clear turns + queues
+await agent.warmup()        // pre-connect MCP (idempotent)
 await agent.waitForIdle()
-await agent.destroy()     // clean up execution + MCP
+await agent.destroy()       // clean up execution + MCP
 ```
 
+`cancelTool` returns `true` when a live call was flipped, `false` otherwise (idempotent). The matching call's `ctx.signal` aborts, `tool:cancelled` fires, and the wire result becomes `TOOL_USE_CANCELLED_MESSAGE` with `isError: true` — other parallel calls in the same batch keep running, and the assistant turn closes normally on the next batch boundary. Distinguished from `abort()` (whole-run abort, batch-layer `INTERRUPT_MESSAGE_FOR_TOOL_USE`) and `TOOL_USE_SKIPPED_MESSAGE` (steered out) so consumers can split the three causes by string match.
+
 ## Sessions
 
 ```ts
@@ -614,7 +618,7 @@ When the catalog is non-empty and `tool !== false`, three tools auto-inject:
 
 | Tool | Purpose |
 |---|---|
-| `skills_use` | Activate a skill by name. Idempotent. Wraps body + resources in `<skill_content spec_version="0.1">`. |
+| `skills_use` | Activate or deactivate a skill by name. `mode: 'activate'` (default, spec-mandated) loads the skill body and wraps it in `<skill_content spec_version="0.1">`; `mode: 'deactivate'` (zidane extension) releases an active skill so its `allowed-tools` restrictions stop applying — fires `skills:deactivate` with `reason: 'model'`. Idempotent in both directions. |
 | `skills_read` | Read a bundled resource (`references/`, `assets/`) of an active skill. |
 | `skills_run_script` | Run `scripts/*.sh` / `*.py` with args. Returns `{ exitCode, stdout, stderr }`. |
 
@@ -632,15 +636,21 @@ await agent.deactivateSkill('pdf-processing') // skills:deactivate, reason: 'exp
 
 ### Enforcement + resume
 
-When any active skill declares `allowed-tools`, a `tool:gate` middleware blocks calls outside the union (the three skills tools are always implicitly allowed). Matching uses `displayName`, supports exact names (`Read`) and patterns (`Bash(git:*)`). Blocked calls throw `AgentToolNotAllowedError`.
+When any active skill declares `allowed-tools`, a `tool:gate` middleware blocks calls outside the union (the three skills tools are always implicitly allowed). Matching uses `displayName`, supports exact names (`Read`) and patterns (`Bash(git:*)`). Blocked calls throw `AgentToolNotAllowedError`, whose `.message` ends with a recovery hint pointing the model at `skills_use({ mode: 'deactivate', name })` — without this the model tends to invent folk theories about "sticky restrictions" instead of releasing the skill itself.
+
+`allowed-tools` accepts three authoring shapes (all normalize to `string[]`): spec-canonical space-separated string (`allowed-tools: Read Bash(git:*)`), YAML block list (`- Read` lines), and YAML flow list (`[Read, Bash(git:*)]`). Earlier zidane builds only handled the first; the others silently mangled the union and opened the gate. The lenient parser is in `src/skills/discovery.ts` — malformed shapes drop the field with a diagnostic instead of coercing to garbage.
+
+The parser also tolerates **`allowedTools`** (camelCase) and **`allowed_tools`** (snake_case) as alt-spellings of the canonical `allowed-tools` key — the value is migrated to the canonical slot and a `frontmatter-key-alt-spelling` diagnostic is attached. This is a courtesy for authors used to JS / Python idioms; the spec mandates kebab-case and the diagnostic is the nudge to rename. The canonical key wins when both are present.
+
+On session resume, `skills_use` calls in the turn history rebuild the active set with **last-mode-wins per skill**: a trailing `mode: 'deactivate'` block correctly STAYS inactive on the next run (without this, the rehydrator would silently re-activate skills the model just released, defeating the recovery path). Activations fire with `via: 'resume'`; `skills:deactivate` does NOT fire during rehydration — the state started empty so there's nothing to deactivate.
 
-On session resume, prior `skills_use` calls in the turn history are re-activated with `via: 'resume'` so `skills_read` / `skills_run_script` keep working.
+Programmatic host-side activations (`agent.activateSkill(name)`) do NOT produce a `skills_use` block in history, so they don't survive the run-end deactivate-all pass automatically. Hosts that want persistence across runs (TUI slash-commands, for example) must re-activate before each `agent.run()`; the TUI does this via a pinned-skills set persisted in `session.metadata['zidane.activeSkills']` — see `docs/TUI.md`.
 
 ### Lenient load, strict authoring
 
 Third-party skills with minor deviations load anyway via `parseSkillFile` (warnings in `SkillConfig.diagnostics`). `defineSkill` / `writeSkillToDisk` run `validateSkillForWrite` — spec-strict.
 
-Hooks: `skills:resolve` (`{ skills }`), `skills:catalog` (`{ catalog, skills }`), `skills:activate` (`{ skill, via: 'model'|'explicit'|'resume' }`), `skills:deactivate` (`{ skill, reason: 'run-end'|'explicit'|'reset' }`).
+Hooks: `skills:resolve` (`{ skills }`), `skills:catalog` (`{ catalog, skills }`), `skills:activate` (`{ skill, via: 'model'|'explicit'|'resume' }`), `skills:deactivate` (`{ skill, reason: 'run-end'|'explicit'|'reset'|'model' }`).
 
 ## Structured Output
 

package/docs/TUI.md

@@ -194,6 +194,7 @@ Every customizable shortcut routes through `<userDir>/keybindings.json` and is p
 | `ctrl+l` | `openEffortPicker` | chat (idle, model has reasoning) | open reasoning-effort picker |
 | `ctrl+s` | `enterSelectTurnMode` | chat (idle) | enter select-turn mode (transcript navigation) |
 | `ctrl+t` | `openTodos` | chat (session attached) | open the active run's `todowrite` checkpoints (read-only) |
+| `ctrl+k` | `cancelToolCall` | chat (busy, ≥1 in-flight call) | open the cancel-tool picker — pick one call to flip via `agent.cancelTool(callId)`, or press `a` to cancel every in-flight call. Distinct from `esc abort` (whole-run abort); siblings keep running |
 | `shift+tab` | `cycleAgent` | chat (idle, ≥2 profiles) | cycle to next agent profile |
 | `ctrl+↵` | `pushQueuedMessage` | queue-selection mode | push selected queued message into the live run |
 | `backspace` | `dropQueuedMessage` | queue-selection mode | drop selected queued message |
@@ -306,6 +307,29 @@ File-edit tools (`edit` / `multi_edit` / `write_file`) get their own approval su
 
 `isFileEditTool(tool)` (exported from `file-edit-approval-modal.tsx`) is the gate routing predicate. The set is `{'edit', 'multi_edit', 'write_file'}`; everything else stays on the inline `ApprovalBlock` path. For a fully-denied file-edit call, `applyGate` skips the substitute path entirely — sets `ctx.block = true` + emits a synthetic `tool-result` event with body `[fully denied] <edit-outcomes>…</edit-outcomes>` for live display. The persisted result stays the terse `Blocked: User denied this tool call` the harness writes.
 
+### Tool-call cancellation
+
+`CancelToolModal` (`src/tui/cancel-tool-modal.tsx`) surfaces the in-flight tool registry maintained by `App.tsx` and routes the user's pick to `agent.cancelTool(callId)`. The shortcut is `ctrl+k` (`cancelToolCall`), gated on `busy && !pendingApproval && inFlightTools.length > 0` so it never opens on a dead-empty state.
+
+In-flight tracking is hook-driven: `App.tsx` listens on `tool:before` / `child:tool:before` to add an entry, drains on `tool:after` / `tool:error` / `tool:cancelled` (mirrored for `child:*`). The Map is keyed by `callId` and the modal opens with a snapshot of the live set — auto-dismisses 500 ms after the list empties so the user isn't left staring at "nothing in flight".
+
+Modal row layout: `›` cursor glyph, tool name, truncated `callId`, optional `· child-N` attribution for subagent-issued calls, right-aligned elapsed time (`0.3s` / `2m12s` format). Keys: `↑` / `↓` navigate, `↵` cancels the focused row, `a` cancels every call in the snapshot, `esc` dismisses.
+
+Distinct from the run-wide `esc abort`: the cancelled call's wire result is the canonical `TOOL_USE_CANCELLED_MESSAGE` with `isError: true`, the assistant turn closes normally on the next batch boundary, and other in-flight tools keep running. The session teardown path also clears `inFlightTools` so a switched session doesn't try to cancel calls on an agent that no longer owns them.
+
+### Active skills — footer chip + pinned-skills persistence
+
+When at least one skill is active, the footer hint row gets a passive `✦ N skill(s)` chip (`COLOR.brand` accent). The chip is purely informational — no shortcut wired — but it gives the user a passive surface for "tool restrictions are in effect" without having to scroll back through the transcript looking for a `skills_use` call. Driven by `activeSkillNames: ReadonlySet<string>` in `App.tsx`, fed by the agent's `skills:activate` / `skills:deactivate` hooks.
+
+Slash-command activations (`/skill-name`) call `agent.activateSkill()` programmatically, BEFORE `agent.run()`. The framework deactivates every active skill at run-end (`reason: 'run-end'`) and the session-resume rehydrator only scans for `skills_use` `tool_call` blocks — so a slash activation would silently lose its `allowed-tools` enforcement on the next prompt. The TUI fixes this with a **pinned-skills set persisted to session metadata** under `zidane.activeSkills`:
+
+- The `skills:deactivate` listener filters by reason — `'run-end'` keeps the entry, `'model'` / `'explicit'` / `'reset'` drain it. So a user-driven `/skill-name` stays pinned across the framework's per-run cleanup; a model-driven `skills_use({ mode: 'deactivate' })` correctly releases the pin.
+- `onSubmitPrompt` activates the union of the current prompt's `/skill` refs AND every name in the pinned set before `agent.run()`. So a `/read-only` typed once stays in force across every subsequent message in the session.
+- `activateSession` seeds the React state from `session.metadata['zidane.activeSkills']` on session open — so the pin survives a TUI restart. `readPinnedSkills` is tolerant (older sessions, hand-edited metadata degrade to "no pins" rather than throwing).
+- `persistPinnedSkills` mirrors every state change back into metadata via `session.setMeta(...)`, sorted for stable on-disk ordering.
+
+The teardown path also clears the in-memory pinned set on session swap (`setActiveSkillNames(new Set())`) so the next session starts from its own persisted state, not the previous one's residue.
+
 ### Todos surface — indicator + modal
 
 Two thin chrome layers on top of the renderer-agnostic `useActiveTodos` hook (see [Todos in CHAT.md](./CHAT.md#todos) for the data contract — the keying rule, the auto-clear behavior, and the legacy-bag migration). Both surfaces share `TODO_STATUS_GLYPHS` so a row in the modal and the inline indicator read as the same visual language.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zidane",
-  "version": "5.4.1",
+  "version": "5.4.3",
   "description": "an agent that goes straight to the goal",
   "type": "module",
   "private": false,
@@ -100,8 +100,8 @@
   "peerDependencies": {
     "@anthropic-ai/sdk": "^0.90.0",
     "@modelcontextprotocol/sdk": ">=1.11.0",
-    "@opentui/core": "^0.2.6",
-    "@opentui/react": "^0.2.6",
+    "@opentui/core": "^0.2.15",
+    "@opentui/react": "^0.2.15",
     "dockerode": "^4.0.0",
     "react": "^19.0.0",
     "zod": ">=4.0.0"

package/dist/agent-DHQAsdj6.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-DHQAsdj6.d.ts","names":[],"sources":["../src/errors.ts","../src/types.ts","../src/providers/anthropic.ts","../src/providers/cerebras.ts","../src/providers/openai.ts","../src/providers/openai-compat.ts","../src/providers/openrouter.ts","../src/providers/schema-sanitize.ts","../src/providers/index.ts","../src/session/file-map.ts","../src/session/memory.ts","../src/session/messages.ts","../src/session/remote.ts","../src/session/index.ts","../src/skills/types.ts","../src/tools/read-state.ts","../src/tools/types.ts","../src/mcp/index.ts","../src/skills/activation.ts","../src/agent.ts"],"mappings":";;;;;;;;;;;;AAYA;;;;KAAY,mBAAA;AAGZ;AAAA,UAAiB,eAAA;EACf,IAAA,EAAM,mBAAA;EAAmB;EAEzB,YAAA;EAFM;EAIN,OAAA;EAAA;;;;AAQD;;EADC,SAAA;AAAA;AAAA,UAGQ,iBAAA;EAIR;EAFA,QAAA;EAMA;EAJA,YAAA;EAIS;EAFT,KAAA;EASqC;EAPrC,SAAA;AAAA;;;;;cAOW,yBAAA,SAAkC,KAAA;EAAA,SACpC,IAAA;EAAA,SACA,QAAA;EAAA,SACA,YAAA;cAEG,OAAA,UAAiB,OAAA,EAAS,iBAAA;AAAA;AAYxC;;;;AAAA,cAAa,kBAAA,SAA2B,KAAA;EAAA,SAC7B,IAAA;EAAA,SACA,QAAA;EAAA,SACA,YAAA;EAMA;;;;;EAAA,SAAA,SAAA;cAEG,OAAA,UAAiB,OAAA,EAAS,iBAAA;AAAA;;;;cAY3B,iBAAA,SAA0B,KAAA;EAAA,SAC5B,IAAA;cAEG,OAAA,WAA+B,OAAA;IAAY,KAAA;EAAA;AAAA;;;AAoBzD;;;;;;;;;;;;cAAa,qBAAA,SAA8B,KAAA;EAAA,SAChC,IAAA;EAYP;EAAA,SAVO,QAAA;EAYP;EAAA,SAVO,YAAA;EAcP;;;;;;EAAA,SAPO,OAAA,EAAS,aAAA;IAChB,IAAA;IACA,MAAA;IACA,YAAA;EAAA;cAGU,OAAA;IACV,OAAA;IACA,QAAA;IACA,YAAA;IACA,OAAA,EAAS,aAAA;MAAgB,IAAA;MAAc,MAAA;MAAiB,YAAA;IAAA;IACxD,KAAA;EAAA;AAAA;;;;;;;;;cAkBS,wBAAA,SAAiC,KAAA;EAAA,SACnC,IAAA;;WAEA,QAAA;EAkCoD;EAAA,SAhCpD,WAAA;EA2C2B;EAAA,SAzC3B,YAAA;EAyC4B;EAAA,SAvC5B,YAAA;cAEG,OAAA;IACV,QAAA;IACA,WAAA;IACA,YAAA;IACA,YAAA;IACA,KAAA;EAAA;AAAA;;;;;;;cAqBS,iCAAA,WAA4C,MAAA;;;;;iBAWzC,sBAAA,CAAuB,OAAA;;;;;;;iBAYvB,YAAA,CAAa,GAAA;;AC3L7B;;iBDoMgB,YAAA,CACd,cAAA,EAAgB,eAAA,EAChB,QAAA,UACA,KAAA,YACC,yBAAA,GAA4B,kBAAA,GAAqB,iBAAA,GAAoB,qBAAA;;;;;;AAlNxE;;;;;AAGA;;;KCOY,aAAA;;;;;;;UAYK,aAAA;EACf,IAAA;EACA,WAAA;EACA,WAAA;AAAA;AAAA,UAGe,eAAA;EDNf;ECQA,IAAA;EDJA;ECMA,SAAA;EDNS;ECQT,OAAA;EDDqC;ECGrC,IAAA;EDHkD;;;;;;;;;ECalD,GAAA,GAAM,MAAA;EDRiD;AAYzD;;;;;;ECIE,SAAA;EDDS;ECGT,GAAA;;EAEA,OAAA,GAAU,MAAA;EDG4B;;;;AAYxC;;;;;;;;;;ECAE,IAAA;EDGwE;AAoB1E;;;;;;;;ECbE,gBAAA;EDcS;ECZT,WAAA;EDgBS;;;;;;;;;;;;;ECFT,YAAA;EDmB0D;;;;ECd1D,aAAA;EDiCW;;;;;;;;ECxBX,UAAA,IAAc,IAAA;IAAQ,IAAA;IAAc,WAAA;IAA6B,WAAA;EAAA;EDsC/D;;;;;;AAuBJ;;ECpDE,UAAA;EDoDuD;;AAWzD;;;;;AAYA;;;;;AASA;;;ECpEE,WAAA,GAAc,aAAA;EDwEb;;;;;;;;;;;;;;;;;;;ACxMH;;;;;AAYA;;;;;EAkJE,WAAA;AAAA;AAAA,UAOe,aAAA;EAtJJ;AAGb;;;;;;;;;EA8JE,kBAAA;EAxJA;;;;;;;EAgKA,QAAA;EAzHA;EA2HA,SAAA;EA/GA;EAiHA,cAAA;EA9FA;EAgGA,MAAA,GAAS,MAAA;EAvFa;;;;;;;;;;AA8DxB;;;;;EAyCE,KAAA;EA0Ia;;;;;;;;;;EA/Hb,gBAAA;EAaA;;;;;;;;;;;;EAAA,UAAA;EAuDI;;;;;;;;;;;;;;;;;;EApCJ,aAAA;IAAkB,SAAA;IAAmB,MAAA;IAAgB,KAAA;EAAA,MAAoB,OAAA,UAAiB,UAAA;EAySzE;AAkBnB;;;;;;;;;;;;;AAKA;;;;;AAKA;;;;;;;;;;AAUA;EAhTE,WAAA,GAAc,MAAA;IACZ,GAAA;IACA,QAAA,yBAAiC,GAAA;MAC/B,IAAA;MACA,KAAA;MACA,GAAA;IAAA;MACM,IAAA;MAAyB,OAAA;IAAA;EAAA;EAqUR;;;;AAI7B;;;;;AAKA;;;;;;;;;AAeA;;;;;AA+BA;;;;;AAaA;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA/UE,UAAA,GAAa,MAAA,UAAgB,KAAA,EAAO,MAAA;EAoXhC;;;;;;;;;;;;EAvWJ,qBAAA;EA8Ye;;;;;;;;;AAKjB;;;;;;;EAlYE,eAAA;EAwYS;;;;;;EAjYT,gBAAA;EAiZoB;;;;;EA3YpB,gBAAA;EA2Y0E;;AAE5E;;;;;;;;;;;EA/XE,eAAA;EAgYA;;;;;;;;;;;;;;;;;;;EA5WA,eAAA;EAsa0B;;;;AAE5B;;;;;;;;;;;;;;;AA6BA;;;;;;;;EAzaE,cAAA;EAibA;;;;;;;;;;;;;;;AA0DF;;;;;;;;EAndE,UAAA;IACE,IAAA;IACA,KAAA;EAAA;EA4ea;;AAoBjB;;;;;;;;;;;;;;;AA0CA;;;;;;EAjhBE,gBAAA;EAqhBA;;;;;;;;;AAaF;;;EArhBE,mBAAA;EAshBS;AAIX;;;;;;;;;AAYA;;EAzhBE,UAAA;EA0hBA;;AAIF;;;;;;;;;;;;;;;;;EA1gBE,iBAAA;AAAA;AAkhBF;;;;;;;;AC1hCA;;;AD0hCA,KAhgBY,UAAA,GACN,cAAA,GACA,eAAA,GACA,kBAAA;AAAA,UAEW,cAAA;EACf,IAAA;EACA,IAAA;AAAA;AAAA,UAGe,eAAA;EACf,IAAA;EChiBe;EDkiBf,SAAA;;EAEA,IAAA;ECniBA;EDqiBA,IAAA;AAAA;AAAA,UAGe,kBAAA;EACf,IAAA;EC/hBA;EDiiBA,SAAA;EC5fA;ED8fA,IAAA;EACA,QAAA;ECnfkB;EDqflB,IAAA;AAAA;ACzDF;;;;;;;;;;;;AAAA,KD4EY,iBAAA,GACN,qBAAA,GACA,sBAAA;AAAA,UAEW,qBAAA;EACf,IAAA;EACA,IAAA;AAAA;AAAA,UAGe,sBAAA;EACf,IAAA;EEtnBe;EFwnBf,SAAA;EExnBmC;EF0nBnC,IAAA;AAAA;;;;;;;;iBAUc,gBAAA,CAAiB,OAAA,WAAkB,iBAAA;;;AGrnBnD;;;;;;;;;;;;;AA+OA;;;;iBHqagB,oBAAA,CAAqB,OAAA,WAAkB,iBAAA;AAAA,KAa3C,mBAAA;EACJ,IAAA;EAAc,IAAA;AAAA;EACd,IAAA;EAAe,SAAA;EAAmB,IAAA;AAAA;EAClC,IAAA;EAAmB,EAAA;EAAY,IAAA;EAAc,KAAA,EAAO,MAAA;AAAA;EAEtD,IAAA;EACA,MAAA;;;;;EAKA,MAAA,WAAiB,iBAAA;EACjB,OAAA;AAAA;EAGA,IAAA;EACA,IAAA;EACA,SAAA;EItBU;;;;;EJ4BV,iBAAA;AAAA;EAEE,IAAA;EAA2B,IAAA;AAAA;EIOlB;;;;;;;;;;EJKX,IAAA;EACA,QAAA;EACA,OAAA;EIGJ;;;;;EJGI,KAAA;AAAA;EIyCJ;;;;;AAwDF;;;;;;;;;;EJ/EM,IAAA;EAEA,eAAA,qBKzvB2B;EL2vB3B,OAAA,UK/uB+B;ELivB/B,KAAA,UK3vBJ;EL6vBI,KAAA,EAAO,SAAA,EKnvBI;ELqvBX,WAAA;AAAA;AAAA,UAGW,cAAA;EACf,IAAA;EACA,OAAA,EAAS,mBAAA;AAAA;AAAA,UAGM,WAAA;EKxuBU;EL0uBzB,EAAA;EK1uB6D;EL4uB7D,KAAA;EACA,IAAA;EACA,OAAA,EAAS,mBAAA;;EAET,KAAA,GAAQ,SAAA;EMzuBuB;EN2uB/B,SAAA;AAAA;;AMzuBF;;;;KNqvBY,UAAA,GAAa,MAAA,WAAiB,GAAA,uBAA0B,GAAA;AAAA,UAEnD,eAAA;EACf,KAAA;EMjvBQ;;AAGV;;;;ENqvBE,MAAA,YAAkB,UAAA;EAClB,MAAA;EACA,QAAA,GAAW,aAAA;EM/uBH;ENivBR,MAAA,GAAS,WAAA;EM3bK;EN6bd,QAAA,GAAW,aAAA;;EAEX,KAAA,GAAQ,MAAA,SAAe,OAAA;EM9bvB;;;;;;ENqcA,KAAA,GAAQ,UAAA;EM5ZuB;;;;;ENka/B,WAAA;EM/ZE;;;;;ENqaF,KAAA;AAAA;;;;;;;;;;;AOt0BF;;;;;;;KP81BY,gBAAA;AAAA,UAEK,SAAA;EACf,KAAA;EACA,MAAA;EO51BuB;EP81BvB,aAAA;EO31Ba;EP61Bb,SAAA;EO91BA;EPg2BA,QAAA;EO/1BO;;;AAGT;;;;EPo2BE,IAAA;EO31BA;;;;EPg2BA,YAAA,GAAe,gBAAA;EOl0BA;;;;EPu0Bf,OAAA;AAAA;AAAA,UAGe,UAAA;;;;;;EAMf,OAAA;EOtzBA;EPwzBA,QAAA;EOxzBkB;;;;AAGpB;;;;EP8zBE,cAAA;EOrzBO;;;;;;EP4zBP,kBAAA;EO/zBW;;;;;;AAMb;;EPk0BE,KAAA;EO9zBU;;;;;;EPq0BV,OAAA;EOt0BA;;;;;EP40BA,SAAA,GAAY,SAAA;EOt0BZ;;;;;EP40BA,IAAA;EOh0BS;EPk0BT,QAAA,GAAW,aAAA;EOl0BS;EPo0BpB,MAAA,GAAS,MAAA;EOj0Bc;;;;;;EPw0BvB,oBAAA;AAAA;AAAA,UAGe,aAAA;EACf,EAAA;EACA,IAAA;EOxzBwE;;;;;;EP+zBxE,KAAA,EAAO,UAAA;EOn1BE;;;;;EPy1BT,KAAA;EOj1BA;;;;;EPu1BA,MAAA;EOj1BA;;;;;EPu1BA,MAAA,GAAS,MAAA;AAAA;;;;;;;;;;;;;;UAoBM,eAAA;EACf,MAAA;EACA,MAAA;;EAEA,IAAA;;EAEA,WAAA;EACA,KAAA,EAAO,MAAA;;;;;;EAMP,KAAA;EQn9BqB;;;;;;;;ER49BrB,WAAA;EQ99ByC;;;;;AAK3C;ERg+BE,KAAA;AAAA;;;AQp5BF;;;;;;;;URi6BiB,kBAAA;EACf,MAAA;EACA,MAAA;EACA,MAAA;EACA,IAAA;EQl6Ba;ERo6Bb,WAAA;EACA,KAAA,EAAO,MAAA;;EAEP,KAAA;ES5hCc;ET8hCd,WAAA;;EAEA,KAAA;AAAA;;UAIe,kBAAA;EACf,SAAA;AAAA;;UAIe,gBAAA;EACf,EAAA;EACA,IAAA;EUl+BiD;;;;;EVw+BjD,KAAA;AAAA;;UAIe,iBAAA;EACf,MAAA;AAAA;;UAIe,uBAAA;EACf,QAAA;EACA,UAAA;EACA,MAAA;EACA,mBAAA,EAAqB,MAAA;IAA4B,MAAA;IAAgB,OAAA;IAAiB,OAAA;EAAA;EAClF,WAAA,EAAa,MAAA;IAA4B,MAAA;IAAgB,OAAA;IAAiB,OAAA;EAAA;AAAA;AAAA,KAGhE,gBAAA;;;;;;AD9jCZ;;;;;UEoCiB,0BAAA;EACf,KAAA,GAAQ,KAAA,CAAM,MAAA;EAAA,CACb,GAAA;AAAA;AAAA,UAGc,eAAA;EACf,MAAA;EACA,MAAA;EACA,OAAA;EACA,OAAA;EACA,YAAA;EF/BS;AACV;;;;EEoCC,OAAA;EF9BA;;;;;AAWF;;;;;;;;;;;EEoCE,UAAA;EF/BuD;;AAYzD;;;;;;;;;;;;;;;AAuBA;;EEgBE,iBAAA,GAAoB,0BAAA;EFhBsB;;;;;;;;;AAuB5C;;EEKE,eAAA,GAAkB,MAAA;AAAA;AAAA,iBA4bJ,SAAA,CACd,eAAA,GAAkB,eAAA,GACjB,QAAA;;;UC1iBc,cAAA;EACf,MAAA;EACA,YAAA;;;;AHKF;;EGCE,YAAA,GAAe,oBAAA;AAAA;;AHEjB;;;;;iBGqBgB,QAAA,CAAS,MAAA,GAAS,cAAA,GAAiB,QAAA;;;UCRlC,YAAA;;EAEf,MAAA;;EAEA,MAAA;EACA,OAAA;EACA,OAAA;EACA,SAAA;EACA,YAAA;EACA,SAAA;AAAA;AAAA,iBAsOc,MAAA,CAAO,MAAA,GAAS,YAAA,GAAe,QAAA;;;AJjF/C;;;;;AAWA;AAXA,cK+Za,qBAAA,SAA8B,KAAA;EAAA,SAChC,MAAA;EAAA,SACA,YAAA;EAAA,SACA,QAAA;cAEG,MAAA,UAAgB,QAAA;AAAA;;;;ALpY9B;;;;;;;iBKmagB,yBAAA,CAA0B,GAAA,YAAe,eAAA;;;;iBA2DzC,kBAAA,CAAmB,MAAA,8BAAoC,gBAAA;;;;;;;;;;;UAgCtD,sBAAA;EACf,IAAA;EACA,MAAA;AAAA;AAAA,UAGe,kBAAA;EJvsBQ;EIysBvB,MAAA;EJ7rB4B;EI+rB5B,OAAA;EJ/rB4B;EIisB5B,YAAA;EJ/rBA;EIisBA,IAAA;EJhsBW;EIksBX,UAAA,GAAa,sBAAA;EJ/rBE;EIisBf,YAAA,GAAe,MAAA;;;;;;;;;;;EAWf,YAAA,GAAe,oBAAA;EJ1rBT;;;;;;;;;;;;;EIwsBN,gBAAA;EJroBc;;;;;;;AA8DhB;;;;;;;;;EIwlBE,iBAAA;EJrkBA;;;;;;;;;;EIglBA,eAAA,GAAkB,MAAA;AAAA;;;;;;;;;;;;;;;;;iBA6CJ,YAAA,CAAa,MAAA,EAAQ,kBAAA,GAAqB,QAAA;;;UCt0BzC,gBAAA;EACf,MAAA;EACA,YAAA;;;;ANKF;;;;;AAGA;EMEE,YAAA,GAAe,oBAAA;AAAA;;;;;;;iBAqBD,UAAA,CAAW,MAAA,GAAS,gBAAA,GAAmB,QAAA;;;;;;;;;;AN1BvD;;;;;AAGA;;;;;;;;;;;AAaC;;;;;;;;;;AAiBD;;;;;;;;;;;KOAY,qBAAA;AAAA,UAEK,qBAAA;EPGwC;EODvD,OAAA,GAAU,qBAAA;EPaoB;;;;EOR9B,QAAA;AAAA;AAAA,UAGe,oBAAA;EPcN;EOZT,MAAA,EAAQ,MAAA;EPcI;;;;;EORZ,QAAA;AAAA;;;;;;;;;;;iBAsTc,kBAAA,CACd,KAAA,WACA,OAAA,GAAS,qBAAA,GACR,oBAAA;;;;;;;;;;;iBAuCa,iBAAA;EAA8B,IAAA;EAAc,WAAA;AAAA,EAAA,CAC1D,KAAA,WAAgB,CAAA,IAChB,OAAA;EAAW,OAAA,GAAU,qBAAA;EAAuB,SAAA,IAAa,IAAA;AAAA,IACxD,CAAA;;;UCjac,QAAA;EACf,IAAA;EACA,WAAA;EACA,WAAA,EAAa,MAAA;AAAA;AAAA,UAGE,QAAA;EACf,EAAA;EACA,IAAA;EACA,KAAA,EAAO,MAAA;AAAA;AAAA,UAGQ,UAAA;EACf,EAAA;;;;;;;;EAQA,OAAA,WAAkB,iBAAA;ERGT;AACV;;;;;;;;;;AAiBD;;;;;;;EQFE,OAAA;AAAA;;;;;;ARmBF;;;UQRiB,oBAAA;ERQuB;;;;;;;;EQCtC,MAAA;ERUuD;;AAYzD;;;;;;;;EQXE,iBAAA;AAAA;AAAA,UAGe,eAAA;EACf,MAAA,GAAS,KAAA;EACT,UAAA,IAAc,KAAA;EACd,cAAA,IAAkB,GAAA,EAAK,uBAAA,YAAmC,OAAA;AAAA;AAAA,UAG3C,UAAA;ER+CJ;EQ7CX,gBAAA,EAAkB,cAAA;ERuB4B;EQrB9C,IAAA;ERqByC;EQnBzC,SAAA,EAAW,QAAA;ERsBF;EQpBT,IAAA;EACA,KAAA,EAAO,SAAA;AAAA;AAAA,UAGQ,aAAA;EACf,KAAA;EACA,MAAA;EACA,KAAA;EACA,QAAA,EAAU,cAAA;EACV,SAAA;ER6BE;EQ3BF,QAAA,GAAW,aAAA;ER4BA;EQ1BX,cAAA;ER0ByC;EQxBzC,UAAA;IAAe,IAAA;IAAoC,IAAA;EAAA;ER0BlD;AAiBH;;;;;;EQnCE,KAAA;ERwCS;EQtCT,MAAA,GAAS,WAAA;AAAA;AAAA,UAGM,QAAA;EAAA,SACN,IAAA;EAAA,SACA,IAAA;IACP,YAAA,UR0CA;IQxCA,YAAA,GAAe,oBAAA;EAAA,IACb,MAAA;ERyCH;EQtCD,WAAA,GAAc,KAAA,EAAO,QAAA;ER0DV;EQvDX,WAAA,GAAc,OAAA,aAAoB,cAAA;;EAGlC,gBAAA,GAAmB,OAAA,aAAoB,cAAA;ERoDsB;EQjD7D,kBAAA,GAAqB,OAAA,EAAS,UAAA,OAAiB,cAAA;ER4DX;EQzDpC,MAAA,GAAS,OAAA,EAAS,aAAA,EAAe,SAAA,EAAW,eAAA,KAAoB,OAAA,CAAQ,UAAA;ERyDnC;;AAYvC;;;;;AASA;EQpEE,aAAA,IAAiB,KAAA,EAAO,UAAA,OAAiB,cAAA;;;;;;;;EASzC,aAAA,IAAiB,GAAA,cAAiB,eAAA;AAAA;;;;;;ARlHpC;USRiB,cAAA;;EAEf,GAAA,QAAW,OAAA;IAAU,KAAA,EAAO,MAAA;EAAA;ETQnB;ESNT,IAAA,GAAO,KAAA,EAAO,MAAA,qBAA2B,OAAA;;EAEzC,MAAA,QAAc,OAAA;AAAA;AAAA,UAGC,mBAAA;ETIwC;ESFvD,SAAA;ETcW;ESZX,QAAA;AAAA;;;;;;;;;;;iBAwEc,kBAAA,CACd,OAAA,EAAS,cAAA,EACT,OAAA,GAAS,mBAAA,GACR,YAAA;;;iBCrHa,iBAAA,CAAA,GAAqB,YAAA;;;iBCyErB,aAAA,CAAc,GAAA;EAAO,IAAA;EAAc,OAAA;AAAA,IAAqB,cAAA;AAAA,iBAkExD,UAAA,CAAW,GAAA;EAAO,IAAA;EAAc,OAAA;AAAA,IAAqB,cAAA;AAAA,iBAmFrD,WAAA,CAAY,GAAA,EAAK,cAAA;EAAmB,IAAA;EAAc,OAAA;AAAA;AAAA,iBAwElD,QAAA,CAAS,GAAA,EAAK,cAAA;EAAmB,IAAA;EAAc,OAAA;AAAA;;;;AXlR9D;;;;cWyVY,iCAAA;;;;;;AXxUb;;cWiVa,2BAAA;;;;;;;cAQA,2BAAA;;;;;AXxUb;;;;;KWmVY,iBAAA;AAAA,UAQK,aAAA;EACf,IAAA,EAAM,iBAAA;EXnVG;EWqVT,MAAA;EXnVY;EWqVZ,YAAA;AAAA;AAAA,UAGe,8BAAA;EXxVwC;AAYzD;;;;;EWmVE,QAAA,IAAY,MAAA,EAAQ,aAAA;AAAA;;;;;;AX5TtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA;;;;;;iBW+TgB,uBAAA,CACd,QAAA,EAAU,cAAA,IACV,OAAA,GAAS,8BAAA,GACR,cAAA;;;;;;;;;;;;;AX7RH;;;;;AAWA;;;iBWujBgB,wBAAA;EAAqC,IAAA;EAAc,OAAA,EAAS,mBAAA;AAAA,EAAA,CAC1E,KAAA,EAAO,CAAA,KACN,CAAA;;;;AXpiBH;;;;;;;;;;;;;;KWylBY,qBAAA;;;;;;;;;iBAUI,sBAAA;EAAmC,IAAA;EAAc,OAAA,EAAS,mBAAA;AAAA,EAAA,CACxE,KAAA,EAAO,CAAA,KACN,qBAAA;AAAA,iBAwBa,oBAAA,CAAqB,GAAA;EAAO,IAAA;EAAc,OAAA;AAAA,IAAqB,cAAA;;;UCr0B9D,kBAAA;EZFf;EYIA,GAAA;EZFA;EYIA,OAAA,GAAU,MAAA;AAAA;AAAA,iBAKI,iBAAA,CAAkB,OAAA,EAAS,kBAAA,GAAqB,YAAA;;;UCV/C,UAAA;EACf,EAAA;EACA,SAAA;EACA,OAAA;EACA,MAAA;EACA,MAAA;EACA,KAAA;EACA,QAAA;EACA,SAAA;EACA,KAAA;EbCA;EaCA,SAAA,GAAY,SAAA;EbDH;EaGT,UAAA,GAAa,SAAA;EbAY;EaEzB,IAAA;EbFyB;;;;;EaQzB,WAAA;EbAS;AAOX;;;EaFE,KAAA;AAAA;AAAA,UAGe,WAAA;EACf,EAAA;EACA,OAAA;;;;;;;AbcF;;;;;;;;EaCE,WAAA;EACA,KAAA,EAAO,WAAA;EACP,IAAA,EAAM,UAAA;EACN,MAAA;EACA,QAAA,EAAU,MAAA;EACV,SAAA;EACA,SAAA;AAAA;AAAA,UAOe,YAAA;;EAEf,iBAAA,kBAAmC,OAAA;EbOE;EaJrC,cAAA,kBAAgC,OAAA;;EAGhC,IAAA,GAAO,SAAA,aAAsB,OAAA,CAAQ,WAAA;EbIkB;EaDvD,IAAA,GAAO,OAAA,EAAS,WAAA,KAAgB,OAAA;EbCwC;EaExE,MAAA,GAAS,SAAA,aAAsB,OAAA;EbkBpB;;;;;;;;EaRX,IAAA,GAAO,MAAA;IAAW,OAAA;IAAkB,KAAA;IAAgB,WAAA;EAAA,MAAkC,OAAA;EboBpE;EajBlB,WAAA,GAAc,SAAA,UAAmB,KAAA,EAAO,WAAA,OAAkB,OAAA;EbmBxD;EahBF,QAAA,GAAW,SAAA,UAAmB,IAAA,WAAe,KAAA,cAAmB,OAAA,CAAQ,WAAA;;EAGxE,SAAA,GAAY,SAAA,UAAmB,GAAA,EAAK,UAAA,KAAe,OAAA;EbmBjD;EahBF,YAAA,GAAe,SAAA,UAAmB,MAAA,EAAQ,WAAA,eAA0B,OAAA;AAAA;AAAA,UAOrD,OAAA;EbWY;EAAA,SaTlB,EAAA;EbSiD;EAAA,SaNjD,OAAA;EbEG;;;AAuBd;EAvBc,SaIH,WAAA;;WAGA,KAAA,EAAO,WAAA;EbgB4B;;;;;;EAAA,SaRnC,OAAA;EboBP;EAAA,SajBO,MAAA,EAAQ,WAAA;EbmBf;EAAA,SahBO,IAAA,EAAM,UAAA;EbkBb;EAAA,SafO,QAAA,EAAU,MAAA;EbgBlB;;AAoBH;;;Ea7BE,QAAA,GAAW,KAAA,UAAe,MAAA,WAAiB,MAAA;IAAW,WAAA;IAAsB,KAAA;EAAA;;EAG5E,WAAA,GAAc,KAAA,UAAe,KAAA;IAAS,KAAA;IAAe,QAAA;IAAkB,SAAA;IAAmB,SAAA,GAAY,SAAA;IAAa,IAAA;EAAA;Eb0DrG;EAAY;;;;;;;;Ea/C1B,QAAA,GAAW,KAAA,UAAe,KAAA;IAAU,KAAA;IAAe,QAAA;IAAkB,SAAA;IAAmB,SAAA,GAAY,SAAA;IAAa,IAAA;EAAA;EbmD/D;EAAoB;Ea/CtE,QAAA,GAAW,KAAA,UAAe,KAAA,UAAe,KAAA;IAAU,KAAA;IAAe,QAAA;IAAkB,SAAA;IAAmB,SAAA,GAAY,SAAA;IAAa,IAAA;EAAA;;EAGhI,WAAA,GAAc,KAAA,EAAO,WAAA,OAAkB,OAAA;EZ5JhB;EY+JvB,QAAA,GAAW,KAAA,EAAO,WAAA;EZnJU;;;;;;;;AAM9B;EYwJE,OAAA,GAAU,IAAA,EAAM,UAAA;;EAGhB,YAAA,GAAe,MAAA,EAAQ,WAAA,eAA0B,OAAA;EZ7HvC;EYgIV,SAAA,GAAY,GAAA,EAAK,UAAA,KAAe,OAAA;EZhDL;EYmD3B,cAAA,iBAA+B,OAAA;EZ/J/B;EYkKA,OAAA,GAAU,GAAA,UAAa,KAAA;EZ9JvB;EYiKA,IAAA,QAAY,OAAA;EZrJZ;EYwJA,MAAA,QAAc,WAAA;AAAA;AAAA,UAOC,oBAAA;EZnJf;EYqJA,EAAA;EZtIA;EYwIA,OAAA;EZ5HA;;;;;;;EYoIA,WAAA;EZ/FA;EYiGA,QAAA,GAAW,MAAA;EZjFG;EYmFd,KAAA,GAAQ,YAAA;EAER,KAAA,GAAQ,WAAA;AAAA;AZhDV;;;;AAAA,iBYuDsB,aAAA,CAAc,OAAA,GAAS,oBAAA,GAA4B,OAAA,CAAQ,OAAA;;;;iBA4L3D,WAAA,CAAY,KAAA,EAAO,YAAA,EAAc,SAAA,WAAoB,OAAA,CAAQ,OAAA;;;;;;;;;;UClalE,aAAA;EdAc;EcE7B,IAAA;EdF6B;EcI7B,IAAA;AAAA;;;;;KAWU,WAAA;;UAGK,eAAA;EACf,QAAA;EdJS;EcMT,IAAA;EdHQ;EcKR,OAAA;;EAEA,KAAA;AAAA;AAAA,UAOe,WAAA;EdRf;EcUA,IAAA;EdRS;EcUT,WAAA;EdHW;EcKX,YAAA;;;;;;EAMA,MAAA,GAAS,WAAA;;EAET,QAAA;EdRsC;EcUtC,OAAA;EdVuD;EcYvD,OAAA;EdAW;EcEX,aAAA;;;;;EAKA,QAAA,GAAW,MAAA;EdJF;EcMT,YAAA;;EAEA,SAAA,GAAY,aAAA;EdA0B;;;;EcKtC,WAAA,GAAc,eAAA;AAAA;AAAA,UAOC,YAAA;EdA2B;;;;;;EcO1C,OAAA;EdJwE;EcMxE,IAAA;EdcW;EcZX,KAAA,GAAQ,WAAA;;EAER,OAAA;EdgCW;Ec9BX,gBAAA;EdQ8C;;;;;;EcD9C,IAAA;EdakB;;;;EcRlB,SAAA;EdeE;EcbF,eAAA;EdeE;;;;;EcTF,kBAAA;AAAA;;;UC1Ee,cAAA;EACf,WAAA;;EAEA,MAAA;EACA,KAAA;EACA,QAAA;EfDuD;;AAYzD;;;;EeJE,WAAA;EfKS;EeHT,OAAA;AAAA;AAAA,KAGU,YAAA,GAAe,GAAA,SAAY,cAAA;;;;;;;AfsBvC;;;;;iBePgB,YAAA,CAAa,OAAA,EAAS,OAAA,eAAsB,YAAA;;;;;;;Af8B5D;;;iBeVgB,mBAAA,CAAoB,GAAA;EAClC,OAAA,GAAU,OAAA;EACV,SAAA,GAAY,YAAA;AAAA,IACV,YAAA;;;;;;;;;;;;;;;;;;;iBAsBY,YAAA,CAAa,GAAA,UAAa,IAAA;;;;;Af0B1C;;iBehBgB,WAAA,CAAY,IAAA;;;;;;;AftH5B;;;UgBCiB,WAAA;EhBAf;EgBEA,QAAA,EAAU,QAAA;EhBAV;EgBEA,MAAA,EAAQ,WAAA;EhBOR;EgBLA,SAAA,EAAW,gBAAA;EhBKF;EgBHT,MAAA,EAAQ,eAAA;EhBMiB;EgBJzB,KAAA,EAAO,QAAA,CAAS,UAAA;EhBIS;EgBFzB,IAAA;EhBMA;EgBJA,MAAA;EhBQA;EgBNA,KAAA,EAAO,MAAA,SAAe,OAAA;EhBMb;AAOX;;;;;;;;;EgBFE,WAAA,GAAc,MAAA;EhBOwB;EgBLtC,UAAA,GAAa,eAAA;EhBK0C;EgBHvD,MAAA,GAAS,YAAA;EhBeE;EgBbX,QAAA,GAAW,aAAA;;EAEX,MAAA;EhBWsC;EgBTtC,MAAA;EhBWS;;;;;;;;EgBFT,KAAA;EhBuBW;;;;;;;EgBfX,WAAA;EhBkBuD;;;;AAoBzD;EgBhCE,OAAA,GAAU,OAAA;;;;;;;;;;EAUV,SAAA,GAAY,YAAA;EhBkCH;;;;;EgB5BT,KAAA;AAAA;AAAA,UAGe,OAAA;EACf,IAAA,EAAM,QAAA;EhBkCJ;;;;;;;;;EgBxBF,OAAA,GAAU,KAAA,EAAO,MAAA,mBAAyB,GAAA,EAAK,WAAA,KAAgB,OAAA,UAAiB,iBAAA;EhB2C5C;;;;;;;;;;;;;;;;;;AAqCtC;;;;;AAWA;EgBlEE,iBAAA,eAAgC,KAAA,EAAO,MAAA;AAAA;AAAA,KAG7B,OAAA,GAAU,GAAA,SAAY,OAAA;;;UCzGjB,aAAA;EACf,KAAA,EAAO,MAAA,SAAe,OAAA;EACtB,KAAA,QAAa,OAAA;AAAA;;;;;;;AjBHd;;;;;;iBiB4Ge,mBAAA,CAAoB,KAAA,YAAiB,eAAA;;;;AjB3FrD;;;;;;iBiBiIgB,cAAA,CAAe,OAAA;;;;;;;;AjBhH/B;;;;;;iBiB4IgB,kBAAA,CAAmB,OAAA,YAAmB,iBAAA;;;;;;UAyKrC,wBAAA;EjB1SwC;;AAYzD;;;;;;;;;;;EiB4SE,iBAAA,IAAqB,MAAA,EAAQ,eAAA,KAAoB,mBAAA;AAAA;;;;;;;;;;;;iBAc7B,iBAAA,CACpB,OAAA,EAAS,eAAA,IACT,cAAA,SAAuB,MAAA,EACvB,KAAA,GAAQ,QAAA,CAAS,UAAA,GACjB,OAAA,GAAU,wBAAA,GACT,OAAA,CAAQ,aAAA;;;AjBxXV;AAAA,KkBEW,aAAA;;KAGA,kBAAA;;UAGK,WAAA;EACf,KAAA,EAAO,WAAA;EACP,WAAA;EACA,YAAA,EAAc,aAAA;AAAA;AlBMhB;;;;AAAA,UkBCiB,oBAAA;ElBAN;EkBET,MAAA,iBAAuB,WAAA;ElBAd;EkBET,QAAA,GAAW,IAAA;ElBAC;EkBEZ,GAAA,GAAM,IAAA,aAAiB,WAAA;ElBFM;;;AAY/B;;;EkBHE,QAAA,GAAW,KAAA,EAAO,WAAA,EAAa,GAAA,EAAK,aAAA;ElBGE;;;;EkBEtC,UAAA,GAAa,IAAA,aAAiB,WAAA;;EAE9B,KAAA,iBAAsB,WAAA;AAAA;AAAA,UAGP,2BAAA;ElBIwC;;AAYzD;;EkBXE,SAAA;AAAA;AAAA,iBAOc,0BAAA,CACd,OAAA,GAAS,2BAAA,GACR,oBAAA;;;UC1Cc,UAAA;EAEf,eAAA,GAAkB,GAAA;IAAO,MAAA;EAAA;EAGzB,aAAA,GAAgB,GAAA;IAAO,IAAA;IAAc,MAAA;IAAgB,OAAA,EAAS,aAAA;EAAA;EnBhBtD;;;;;;;;;;AAeV;;;;;;;;;EmBqBE,YAAA,GAAe,GAAA;IACb,IAAA;IACA,MAAA;IACA,KAAA,EAAO,SAAA;IACP,OAAA,EAAS,WAAA;IACT,UAAA;MACE,IAAA,EAAM,QAAA,CAAS,MAAA;MACf,GAAA,EAAK,QAAA,CAAS,MAAA;IAAA;EAAA;EnBVT;;;;;;;;;;AAsBX;;EmBIE,oBAAA,GAAuB,GAAA;IACrB,IAAA;IACA,MAAA;IACA,OAAA,EAAS,WAAA;IAET,OAAA,WAAkB,UAAA;EAAA;EAIpB,aAAA,GAAgB,GAAA,EAAK,iBAAA;IAAsB,KAAA;IAAe,IAAA;EAAA;EAC1D,YAAA,GAAe,GAAA,EAAK,iBAAA;IAAsB,IAAA;EAAA;EAC1C,iBAAA,GAAoB,GAAA,EAAK,iBAAA;IAAsB,KAAA;IAAe,QAAA;EAAA;EnBQrB;;;;;;;;;;;;;;EmBOzC,cAAA,GAAiB,GAAA,EAAK,iBAAA;IAAsB,GAAA;EAAA;EAC5C,eAAA,GAAkB,GAAA,EAAK,uBAAA;EnBerB;;;;AAkBJ;;;;;;;;;;;;;;;;;;;AAqCA;;;;;AAWA;;EmBhDE,WAAA,GAAc,GAAA,EAAK,eAAA;IACjB,KAAA;IACA,MAAA;IACA,MAAA,YAAkB,iBAAA;IAClB,aAAA,EAAe,QAAA,CAAS,MAAA;EAAA;EAE1B,aAAA,GAAgB,GAAA,EAAK,eAAA;IACnB,SAAA;IACA,aAAA,EAAe,QAAA,CAAS,MAAA;InB6DA;;;;;;;ImBrDxB,YAAA;EAAA;EnBsDc;;;;;;;;;;;;;ACrMlB;;;;;AAYA;;;;;EkB4JE,iBAAA,GAAoB,GAAA,EAAK,eAAA;IACvB,OAAA;IACA,MAAA;IACA,aAAA,EAAe,QAAA,CAAS,MAAA;EAAA;ElBzJI;;;;;;;;;;;;;;;;;;;;EkB+K9B,YAAA,GAAe,GAAA,EAAK,eAAA;IAClB,MAAA,WAAiB,iBAAA;IACjB,WAAA;IACA,SAAA;IACA,aAAA,EAAe,QAAA,CAAS,MAAA;EAAA;ElB9FZ;;;;;;;AA8DhB;;EkB2CE,YAAA,GAAe,GAAA,EAAK,eAAA;IAAoB,KAAA,EAAO,KAAA;IAAO,MAAA,YAAkB,iBAAA;EAAA;EACxE,gBAAA,GAAmB,GAAA,EAAK,eAAA;IAAoB,MAAA,WAAiB,iBAAA;IAAqB,OAAA;IAAkB,WAAA;IAAqB,SAAA;EAAA;ElBrBzH;;;;;;;;;EkB+BA,cAAA,GAAiB,GAAA,EAAK,eAAA;IACpB,MAAA,YAAkB,iBAAA;IAClB,aAAA;EAAA;ElB2DY;;;;;;EkBnDd,mBAAA,GAAsB,GAAA,EAAK,eAAA;IACzB,MAAA;IACA,MAAA,EAAQ,MAAA;EAAA;ElBiHG;;;;;;;;;;EkBrGb,mBAAA,GAAsB,GAAA,EAAK,eAAA;IACzB,SAAA;IACA,MAAA,EAAQ,MAAA;EAAA;EAIV,mBAAA,GAAsB,GAAA;IAAO,QAAA,EAAU,cAAA;EAAA;ElByStB;;AAkBnB;;;;;;;;;;;;EkB5SE,kBAAA,GAAqB,GAAA;IAAO,MAAA;IAAgB,QAAA,WAAmB,cAAA;IAAkB,IAAA;IAAc,MAAA;IAAgB,OAAA,GAAU,OAAA;EAAA;EACzH,cAAA,GAAiB,GAAA;IAAO,OAAA;EAAA;EAGxB,cAAA,GAAiB,GAAA,EAAK,gBAAA;EACtB,gBAAA,GAAmB,GAAA,EAAK,aAAA;EACxB,aAAA,GAAgB,GAAA,EAAK,gBAAA;IAAqB,KAAA,EAAO,KAAA;EAAA;EAQjD,mBAAA,GAAsB,GAAA,EAAK,iBAAA;IAAsB,KAAA;IAAe,IAAA;IAAc,OAAA;IAAiB,KAAA;EAAA;EAC/F,uBAAA,GAA0B,GAAA,EAAK,iBAAA;IAAsB,KAAA;IAAe,QAAA;IAAkB,OAAA;IAAiB,KAAA;EAAA;EACvG,kBAAA,GAAqB,GAAA,EAAK,iBAAA;IAAsB,IAAA;IAAc,OAAA;IAAiB,KAAA;EAAA;ElB+UhE;EkB7Uf,oBAAA,GAAuB,GAAA,EAAK,iBAAA;IAAsB,GAAA;IAAc,OAAA;IAAiB,KAAA;EAAA;ElBkV5C;;;;;;;;AAevC;;;EkBrVE,iBAAA,GAAoB,GAAA,EAAK,eAAA;IACvB,KAAA;IACA,MAAA;IACA,MAAA,YAAkB,iBAAA;IAClB,aAAA,EAAe,QAAA,CAAS,MAAA;IACxB,OAAA;IACA,KAAA;EAAA;EAEF,qBAAA,GAAwB,GAAA,EAAK,kBAAA;IAC3B,KAAA;IACA,MAAA;IACA,MAAA,YAAkB,iBAAA;IAClB,OAAA;IACA,KAAA;EAAA;EAEF,mBAAA,GAAsB,GAAA,EAAK,eAAA;IACzB,SAAA;IACA,aAAA,EAAe,QAAA,CAAS,MAAA;IACxB,OAAA;IACA,KAAA;IlBiXI;;;;;;;;IkBxWJ,YAAA;EAAA;ElBoXE;;;;;;EkB5WJ,uBAAA,GAA0B,GAAA,EAAK,eAAA;IAC7B,OAAA;IACA,MAAA;IACA,aAAA,EAAe,QAAA,CAAS,MAAA;IACxB,OAAA;IACA,KAAA;EAAA;EAEF,kBAAA,GAAqB,GAAA,EAAK,eAAA;IACxB,MAAA,WAAiB,iBAAA;IACjB,WAAA;IACA,SAAA;IACA,aAAA,EAAe,QAAA,CAAS,MAAA;IACxB,OAAA;IACA,KAAA;EAAA;;;;;;;;AlBiaJ;EkBvZE,sBAAA,GAAyB,GAAA,EAAK,eAAA;IAC5B,MAAA,WAAiB,iBAAA;IACjB,OAAA;IACA,WAAA;IACA,SAAA;IACA,OAAA;IACA,KAAA;EAAA;EAEF,kBAAA,GAAqB,GAAA,EAAK,eAAA;IAAoB,KAAA,EAAO,KAAA;IAAO,OAAA;IAAiB,KAAA;EAAA;EAC7E,kBAAA,GAAqB,GAAA;IACnB,IAAA;IACA,MAAA;IACA,KAAA,EAAO,SAAA;IACP,OAAA,EAAS,WAAA;IACT,UAAA;MAAc,IAAA,EAAM,QAAA,CAAS,MAAA;MAAyB,GAAA,EAAK,QAAA,CAAS,MAAA;IAAA;IACpE,OAAA;IACA,KAAA;EAAA;ElBuagB;;;;;;EkB7ZlB,aAAA,GAAgB,GAAA;IAAO,IAAA;IAAc,SAAA;IAAmB,KAAA;IAAiB,IAAA;EAAA;EACzE,WAAA,GAAc,GAAA;IAAO,IAAA;IAAc,KAAA,EAAO,KAAA;EAAA;EAC1C,WAAA,GAAc,GAAA;IAAO,IAAA;EAAA;ElBmarB;;;;EkB9ZA,qBAAA,GAAwB,GAAA;IAAO,IAAA;IAAc,SAAA;EAAA;ElBibxC;AAwBP;;;;;AAEA;;;;;;EkB9bE,mBAAA,GAAsB,GAAA;IAAO,IAAA;IAAc,SAAA;IAAmB,UAAA;EAAA;IAA0B,EAAA;IAAU,SAAA;IAAmB,IAAA;IAAgB,MAAA;EAAA;IAAuB,EAAA;IAAW,KAAA,EAAO,KAAA;EAAA;ElBihBnK;;;;;;;;;;;;;;EkBlgBX,mBAAA,GAAsB,GAAA;IACpB,IAAA;IACA,SAAA;IACA,MAAA;EAAA;ElBwgBkB;AAGtB;;;;;;EkBlgBE,cAAA,GAAiB,GAAA;IAAO,IAAA;IAAc,GAAA;EAAA;ElB6hBtC;EkB3hBA,kBAAA,GAAqB,GAAA;IAAO,IAAA;EAAA;ElB+iBb;EkB7iBf,gBAAA,GAAmB,GAAA;IAAO,IAAA;IAAc,KAAA,EAAO,KAAA;EAAA;ElB+iB/C;;;;;;;;;;AAwCF;;EkB1kBE,kBAAA,GAAqB,GAAA;IACnB,MAAA;IACA,SAAA;IACA,KAAA,EAAO,KAAA;MAAQ,IAAA;MAAc,WAAA;MAA6B,WAAA;IAAA;EAAA;ElBglB5D;;;;;AAQF;;;;;AAKA;;EkB7kBE,eAAA,GAAkB,GAAA,EAAK,kBAAA;IACrB,KAAA;IACA,MAAA;IACA,MAAA,YAAkB,iBAAA;EAAA;EAEpB,iBAAA,GAAoB,GAAA,EAAK,kBAAA;EACzB,gBAAA,GAAmB,GAAA,EAAK,kBAAA;IAAuB,MAAA,WAAiB,iBAAA;IAAqB,WAAA;EAAA;EACrF,oBAAA,GAAuB,GAAA,EAAK,kBAAA;IAAuB,MAAA,WAAiB,iBAAA;IAAqB,WAAA;EAAA;EACzF,gBAAA,GAAmB,GAAA,EAAK,kBAAA;IAAuB,KAAA,EAAO,KAAA;EAAA;EAGtD,gBAAA,GAAmB,GAAA;IAAO,MAAA,EAAQ,WAAA;EAAA;EAClC,gBAAA,GAAmB,GAAA;IAAO,OAAA;IAAiB,MAAA,EAAQ,WAAA;EAAA;EACnD,iBAAA,GAAoB,GAAA;IAAO,KAAA,EAAO,WAAA;IAAa,GAAA,EAAK,aAAA;EAAA;EACpD,mBAAA,GAAsB,GAAA;IAAO,KAAA,EAAO,WAAA;IAAa,MAAA,EAAQ,kBAAA;EAAA;ElBwlB/B;;;;;;;AC1hC5B;;;;;;;;;;EiBsdE,gBAAA,GAAmB,GAAA,EAAK,aAAA;IAAkB,MAAA;EAAA;EAG1C,OAAA,GAAU,GAAA;IAAO,IAAA;IAAc,MAAA;IAAgB,KAAA,EAAO,SAAA;IAAW,OAAA;IAAiB,QAAA;EAAA;EAClF,QAAA,GAAW,GAAA;IAAO,MAAA,EAAQ,MAAA;IAAyB,MAAA,EAAQ,MAAA;EAAA;EjBzZzC;;;AA4bpB;;EiB7BE,iBAAA,GAAoB,GAAA;IAAO,IAAA;IAAc,MAAA;IAAgB,KAAA;IAAe,MAAA;EAAA;EjB+B/D;;;;AC1iBX;;;;;;;EgBuhBE,sBAAA,GAAyB,GAAA;IACvB,IAAA;IACA,KAAA;IACA,GAAA;IACA,MAAA;IACA,IAAA;EAAA;EAIF,aAAA,GAAgB,GAAA;EhBjgBO;;;;;;;ACRzB;;EemhBE,YAAA,GAAe,GAAA,EAAK,UAAA;EAGpB,eAAA,GAAkB,GAAA,EAAK,kBAAA;IAAuB,KAAA;IAAe,MAAA;EAAA;EAC7D,aAAA,GAAgB,GAAA,EAAK,kBAAA;IAAuB,KAAA;IAAe,MAAA,EAAQ,gBAAA;IAAkB,SAAA;EAAA;EACrF,eAAA,GAAkB,GAAA,EAAK,kBAAA;IAAuB,KAAA,EAAO,WAAA;IAAe,KAAA;EAAA;EACpE,cAAA,GAAiB,GAAA,EAAK,kBAAA;IAAuB,GAAA;IAAa,KAAA;EAAA;EAC1D,cAAA,GAAiB,GAAA,EAAK,kBAAA;AAAA;;;;AdmCxB;;;;;;;;Kc2DY,YAAA,GAAe,OAAA,eACb,UAAA,GAAa,UAAA,CAAW,CAAA,IAAK,UAAA,CAAW,CAAA;AAAA,UAsFrC,YAAA;EACf,QAAA,EAAU,QAAA;Ed/GI;EciHd,IAAA;;EAEA,MAAA;EdnHsE;EcqHtE,KAAA,GAAQ,MAAA,SAAe,OAAA;Ed1DS;;;;AAgClC;;;EckCE,WAAA,GAAc,MAAA;EdhCR;EckCN,QAAA,GAAW,aAAA;Ed/BsB;EciCjC,SAAA,GAAY,gBAAA;EdvBC;EcyBb,UAAA,GAAa,eAAA;EdZE;Eccf,OAAA,GAAU,OAAA;Ed4Bc;;;;;;;;;EclBxB,SAAA,GAAY,YAAA;EdxBZ;Ec0BA,MAAA,GAAS,YAAA;EdZT;;;;;;AAyEF;;;;;;;;Ec9CE,KAAA,GAAQ,YAAA;;;;AbxxBV;;;;;EaiyBE,YAAA,IAAgB,OAAA,EAAS,eAAA,OAAsB,OAAA,CAAQ,aAAA;EbrxBvD;;;;AAqBF;;;;;;;;Ea6wBE,KAAA;AAAA;AAAA,UAGe,KAAA;EACf,KAAA,EAAO,QAAA,CAAS,UAAA;EAChB,GAAA,GAAM,OAAA,EAAS,eAAA,KAAoB,OAAA,CAAQ,UAAA;EAC3C,KAAA;EACA,KAAA,GAAQ,OAAA;EACR,QAAA,GAAW,OAAA;EACX,WAAA,QAAmB,OAAA;EZ7wBJ;;;;;EYmxBf,KAAA,QAAa,OAAA;EZ5wBb;;;AAGF;EY8wBE,OAAA,QAAe,OAAA;;;;;;;EAOf,aAAA,GAAgB,IAAA,aAAiB,OAAA;EZvdnB;;;;EY4dd,eAAA,GAAkB,IAAA,aAAiB,OAAA;EZ1d1B;;;;;AAwCX;;;;;EY6bE,MAAA,QAAc,OAAA;EAAA,SACL,SAAA;EAAA,SACA,KAAA,EAAO,WAAA;EAAA,SACP,SAAA,EAAW,gBAAA;EAAA,SACX,MAAA,EAAQ,eAAA;EAAA,SACR,OAAA,EAAS,OAAA;EZjcF;EAAA,SYmcP,YAAA,WAAuB,WAAA;EZlcrB;;;;;;EAAA,SYycF,IAAA,EAAM,QAAA,CAAS,MAAA;AAAA;AAAA,iBA4QV,WAAA,CAAA;EAAc,QAAA;EAAU,IAAA,EAAM,SAAA;EAAW,MAAA,EAAQ,WAAA;EAAa,KAAA,EAAO,UAAA;EAAY,WAAA;EAAa,QAAA,EAAU,aAAA;EAAe,SAAA;EAAW,UAAA;EAAY,OAAA;EAAS,SAAA,EAAW,cAAA;EAAgB,MAAA,EAAQ,WAAA;EAAa,YAAA;EAAc,KAAA;EAAO,KAAA,EAAO;AAAA,GAAgB,YAAA,GAAe,KAAA"}

package/dist/index-CHSaLab5.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-CHSaLab5.d.ts","names":[],"sources":["../src/skills/allowed-tools.ts","../src/skills/catalog.ts","../src/skills/discovery.ts","../src/skills/interpolate.ts","../src/skills/resolve.ts","../src/skills/validate.ts","../src/skills/writer.ts","../src/skills/index.ts"],"mappings":";;;;;;cAuBa,8BAAA;;;;;;;;;;ACHb;iBDmBgB,uBAAA,CACd,KAAA,EAAO,QAAA,CAAS,UAAA,GAChB,KAAA,EAAO,oBAAA;;;UCrBQ,mBAAA;EDoBR;;;;;ECdP,oBAAA;EDe2B;;;;ECV3B,YAAA;AAAA;;;;iBAMc,YAAA,CACd,MAAA,EAAQ,WAAA,IACR,OAAA,GAAS,mBAAA;;;UCCD,eAAA;EACR,WAAA,EAAa,MAAA;EACb,IAAA;EACA,WAAA,EAAa,eAAA;AAAA;;;;;;;;;;;iBAaC,gBAAA,CAAiB,OAAA,WAAkB,eAAA;AAAA,UA0MzC,iBAAA;ED9O0B;ECgPlC,MAAA,GAAS,WAAA;AAAA;;AD/NX;;;;;;;;;;iBC6OsB,cAAA,CACpB,QAAA,UACA,OAAA,GAAS,iBAAA,GACR,OAAA,CAAQ,WAAA;;UA0MM,eAAA;EACf,IAAA;EACA,MAAA,EAAQ,WAAA;AAAA;;;;;;iBAQM,mBAAA,CAAA,GAAuB,eAAA;;;AAjbvC;;iBAkcgB,WAAA,CAAY,IAAA,WAAe,WAAA;;;AArY1C;;;;;AA6JD;;;iBA0PsB,cAAA,CACpB,KAAA,EAAO,eAAA,IACP,MAAA,GAAS,WAAA,GACR,OAAA,CAAQ,WAAA;;;;;;;;;;;;;;;iBCjfW,wBAAA,CACpB,YAAA,UACA,SAAA,EAAW,gBAAA,EACX,MAAA,EAAQ,eAAA,GACP,OAAA;;;AHXH;;;;;AAgBA;;;;AAhBA,UIGiB,oBAAA;EACf,MAAA,EAAQ,WAAA;EACR,OAAA;AAAA;;;;;;;;;;;AHRF;;;iBGwBsB,aAAA,CAAc,MAAA,EAAQ,YAAA,GAAe,OAAA,CAAQ,oBAAA;;;;;;AJLnE;;UKCiB,oBAAA;ELAC;EKEhB,IAAA;ELDO;EKGP,OAAA;ELH2B;EKK3B,KAAA;AAAA;AAAA,UAGe,qBAAA;EACf,KAAA;EACA,MAAA,EAAQ,oBAAA;AAAA;;;;;AJ/BV;;;;;AAiBA;iBI+BgB,iBAAA,CAAkB,IAAA;;;;;;iBAmBlB,qBAAA,CAAsB,KAAA,EAAO,WAAA,GAAc,qBAAA;;;;;;AH3E4B;;;;;;iBGiLvE,oBAAA,CACd,OAAA,UACA,OAAA;EACG,KAAA;EAAa,YAAA;AAAA;EAA2B,KAAA;EAAc,KAAA;AAAA;;;;AH3E1D;;;;iBG0He,uBAAA,CAAwB,KAAA;EAAkB,IAAA;EAAc,SAAA;AAAA;;;;;;;;;;;;;AHgPxE;;iBGnNgB,kBAAA,CACd,WAAA,UACA,KAAA,EAAO,MAAA,mBACP,OAAA;;;;;;iBAyBc,oBAAA,CACd,WAAA,UACA,KAAA,EAAO,MAAA,mBACP,KAAA;;;;;;ALpQF;;;;;iBM8BgB,gBAAA,CAAiB,KAAA,EAAO,WAAA,EAAa,SAAA;;;;;;iBAoCrC,iBAAA,CAAkB,MAAA,EAAQ,WAAA,IAAe,SAAA;;;;;;;;;iBCnDzC,WAAA,CAAY,MAAA,EAAQ,IAAA,CAAK,WAAA;EAA2B,MAAA,GAAS,WAAA;AAAA,IAA0B,WAAA"}