@kodax-ai/kodax 0.7.45 → 0.7.46

package/dist/sdk-repl.js

@@ -1,3 +1,3 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{$ as Lt,$a as Wn,$b as Fo,A as Q,Aa as pn,Ab as lo,B as T,Ba as ln,Bb as uo,C as U,Ca as un,Cb as fo,D as V,Da as fn,Db as go,E as Y,Ea as gn,Eb as Co,F as Z,Fa as Cn,Fb as xo,G as tt,Ga as xn,Gb as yo,H as nt,Ha as yn,Hb as Ko,I as ot,Ia as Kn,Ib as Xo,J as et,Ja as Xn,Jb as ho,K as rt,Ka as hn,Kb as Do,L as at,La as Dn,Lb as Po,M as mt,Ma as Pn,Mb as Mo,N as it,Na as Mn,Nb as wo,O as st,Oa as wn,Ob as No,P as ct,Pa as Nn,Pb as _o,Q as dt,Qa as _n,Qb as bo,R as pt,Ra as bn,Rb as jo,S as lt,Sa as jn,Sb as ko,T as ut,Ta as kn,Tb as Ao,U as ft,Ua as An,Ub as Oo,V as gt,Va as On,Vb as Ro,W as Ct,Wa as Rn,Wb as So,X as xt,Xa as Sn,Xb as vo,Y as yt,Ya as vn,Yb as Io,Z as Kt,Za as In,Zb as Lo,_ as It,_a as Ln,_b as Wo,a as D,aa as Wt,ab as Fn,ac as $o,b as P,ba as Ft,bb as $n,bc as qo,c as M,ca as $t,cb as qn,cc as zo,d as w,da as qt,db as zn,dc as Bo,e as N,ea as zt,eb as Bn,ec as Eo,f as _,fa as Bt,fb as En,fc as Go,g as b,ga as Et,gb as Gn,gc as Ho,h as j,ha as Gt,hb as Hn,hc as Jo,i as k,ia as Ht,ib as Jn,ic as Qo,j as A,ja as Jt,jb as Qn,jc as To,k as O,ka as Qt,kb as Tn,l as R,la as Tt,lb as Un,m as S,ma as Ut,mb as Vn,n as v,na as Vt,nb as Yn,o as I,oa as Yt,ob as Zn,p as L,pa as Zt,pb as to,q as W,qa as tn,qb as no,r as F,ra as nn,rb as oo,s as $,sa as on,sb as eo,t as q,ta as en,tb as ro,u as z,ua as rn,ub as ao,v as B,va as an,vb as mo,w as E,wa as mn,wb as io,x as G,xa as sn,xb as so,y as H,ya as cn,yb as co,z as J,za as dn,zb as po}from"./chunks/chunk-CZHIUJQS.js";import{D as vt,b as Xt,c as ht,d as Dt,e as Pt,f as Mt,h as wt,i as Nt,j as _t,k as bt,u as jt,v as kt,w as At,x as Ot,y as Rt,z as St}from"./chunks/chunk-FT2XFFNP.js";import"./chunks/chunk-FKB7BWQT.js";import"./chunks/chunk-EVIDQWMF.js";import"./chunks/chunk-X6EHEQWP.js";import"./chunks/chunk-PGF5EZ7C.js";import"./chunks/chunk-IJUB7QXG.js";import{a}from"./chunks/chunk-V4WSBIXB.js";import l from"fs/promises";import c from"path";import x from"os";var u=c.join(x.homedir(),".kodax","commands");function y(){return u}a(y,"getDefaultCommandDir");async function K(e){let n=new Map,o=e??u;try{await l.mkdir(o,{recursive:!0});let r=await l.readdir(o);for(let t of r){let m=c.extname(t),f=t.replace(m,"");if(m===".md"){try{let d=await l.readFile(c.join(o,t),"utf-8"),i=(d.split(`
-`)[0]?.replace(/^#\s*/,"").trim()??"").slice(0,60)||"(prompt command)";n.set(f,{name:f,description:i,content:d,type:"prompt"})}catch{}continue}if(m===".js"||m===".ts")try{let g=await import(c.join(o,t));for(let[i,p]of Object.entries(g))if(i.startsWith("command_")&&typeof p=="function"){let s=i.replace("command_",""),C=p.description??s;n.set(s,{name:s,description:String(C).slice(0,60),content:`[Programmable command: ${s}]`,type:"programmable",execute:p})}}catch{}}}catch{}return n}a(K,"loadCommands");async function X(e,n,o,r){let t=o.get(e);return t?t.type==="prompt"?n?t.content.replace(/{args}/g,n):t.content:t.type==="programmable"&&t.execute?t.execute({args:n,runAgent:r}):null:null}a(X,"processCommandCall");function h(e){if(!e.startsWith("/"))return null;let n=e.slice(1).split(/\s+/,2);if(n.length===0)return null;let[o,r]=n;return o?[o,r]:null}a(h,"parseCommandCall");export{Cn as App,Vt as AutocompleteContextProvider,Qt as BUILTIN_COMMANDS,qn as BackgroundTaskBar,No as ConsoleCapturer,dt as DEFAULT_UI_STATE,In as DialogSurface,mn as DotsIndicator,$o as FileSessionStorage,yn as FullscreenTranscriptLayout,pn as HistoryItemRenderer,en as InputPrompt,u as KODAX_COMMANDS_DIR,Dt as KODAX_CONFIG_FILE,Xt as KODAX_DIR,ht as KODAX_SESSIONS_DIR,_t as KODAX_VERSION,ft as KeyMatchers,ct as KeypressHandlerPriority,ot as KeypressParser,lt as KeypressProvider,L as LRUCache,dn as LoadingIndicator,no as MemorySessionStorage,Kn as MessageActions,ln as MessageList,Xn as MessageSelector,Wn as NotificationsSurface,gt as PERMISSION_MODES,Pt as PREVIEW_MAX_LENGTH,yo as PendingInputsIndicator,sn as ProgressIndicator,Dn as PromptComposer,wn as PromptFooter,Pn as PromptFooterLeftSide,Mn as PromptFooterRightSide,Nn as PromptHelpMenu,vn as PromptSuggestionsSurface,Ln as QueuedCommandsSurface,xn as SimpleApp,rn as SimpleInputPrompt,un as SimpleMessageDisplay,gn as SimpleStatusBar,tt as SingleLineTextInput,an as Spinner,$n as StashNotice,fn as StatusBar,Fn as StatusNoticesSurface,Bn as StreamingProvider,mt as StreamingState,Sn as SuggestionsDisplay,st as TOOL_STATUS_ICONS,nn as TextBuffer,Z as TextInput,cn as ThinkingIndicator,Co as ToolCallDisplay,it as ToolCallStatus,xo as ToolGroup,go as ToolProgressBar,fo as ToolStatusBadge,hn as TranscriptViewport,kn as UIStateProvider,Vn as _resetQueuedPromptsCacheForTests,to as bootstrapAutoMode,J as calculateVisualCursorFromLayout,H as calculateVisualLayout,zt as collectBashWriteTargets,xt as computeConfirmTools,lo as createCliEvents,bn as createHistoryItem,Yn as createInteractiveContext,uo as createJsonEvents,Qn as createKeyMatcher,pt as createKeypressManager,oo as createMemorySessionStorage,so as createRecoveryHistoryItem,mo as createRetryHistoryItem,To as createSessionManager,zn as createStreamingManager,jn as createToolCall,Q as darkTheme,Jo as deleteSession,wo as detectTerminalCapabilities,j as detectTerminalHostProfile,b as detectTerminalRenderHost,co as emitRecoveryHistoryItem,io as emitRetryHistoryItem,Ut as executeCommand,eo as executeShellCommand,Gt as extractTextContent,Ht as extractTitle,Bo as forkSession,Jt as formatMessagePreview,_n as generateId,Ft as generateSavePattern,Bt as getBashOutsideProjectWriteRisk,q as getCharAtCodePoint,W as getCodePointLength,Oo as getCustomProviderConfig,y as getDefaultCommandDir,St as getGitRoot,at as getKeyDisplayName,Io as getMcpServerConfig,Et as getPlanModeBlockReason,jt as getProviderList,bt as getProviderModel,S as getTerminalHostCapabilities,Po as getTerminalWidth,V as getTheme,Y as getThemeNames,Nt as getVersion,$ as getVisualWidth,G as getVisualWidthCached,P as hasCursorUpViewportYankRisk,w as hasMainScreenRenderScrollRisk,Mt as hydrateProcessEnvFromShell,$t as isAlwaysConfirmPath,It as isBashReadCommand,Lt as isBashWriteCommand,I as isClassicReplForced,et as isFunctionKey,v as isOwnedRendererPreferred,qt as isPathInsideProject,yt as isPermissionMode,rt as isPrintable,kt as isProviderConfigured,M as isRemoteConptyHost,Mo as isScreenReader,ro as isShellCommand,ao as isShellCommandSuccess,N as isTmuxControlMode,Wt as isToolCallAllowed,D as isVsCodeTerminalHostEnv,F as isWideChar,Ao as listCustomProviders,vo as listMcpServers,Ho as listRunningSessions,qo as listSessions,K as loadCommands,At as loadConfig,zo as loadSession,T as minimalTheme,Kt as normalizePermissionMode,Tt as parseCommand,h as parseCommandCall,nt as parseKeypress,Ct as permissionModeDisplayName,Ot as prepareRuntimeConfig,X as processCommandCall,ko as processSpecialSyntax,vt as rateLimitedCall,wt as registerConfiguredCustomProviders,So as removeCustomProvider,Wo as removeMcpServer,_ as resetTmuxControlModeProbeForTesting,k as resolveConfiguredTuiRendererMode,A as resolveEffectiveTuiRendererMode,R as resolveFullscreenPolicy,O as resolveInteractiveSurfacePreference,Eo as rewindSession,po as runInkInteractiveMode,jo as runInteractiveMode,Rt as saveConfig,Go as setActiveEntry,z as splitByCodePoints,Xo as supports256Colors,Do as supportsEmoji,Ko as supportsTrueColor,ho as supportsUnicode,U as themes,Zn as touchContext,B as truncateByVisualWidth,Ro as upsertCustomProvider,Lo as upsertMcpServer,Zt as useAutocomplete,Yt as useAutocompleteContext,tn as useInputHistory,Jn as useKeypress,ut as useKeypressManager,Un as useQueuedPromptContents,Tn as useQueuedPrompts,Hn as useStreaming,Gn as useStreamingActions,En as useStreamingState,on as useTextBuffer,Rn as useUI,On as useUIActions,An as useUIState,Fo as validateMcpServerConfig,E as visualWidthCache,Qo as watchSessions,_o as withCapture,bo as withCaptureSync};
+import{$ as Lt,$a as Wn,$b as Fo,A as Q,Aa as pn,Ab as lo,B as T,Ba as ln,Bb as uo,C as U,Ca as un,Cb as fo,D as V,Da as fn,Db as go,E as Y,Ea as gn,Eb as Co,F as Z,Fa as Cn,Fb as xo,G as tt,Ga as xn,Gb as yo,H as nt,Ha as yn,Hb as Ko,I as ot,Ia as Kn,Ib as Xo,J as et,Ja as Xn,Jb as ho,K as rt,Ka as hn,Kb as Do,L as at,La as Dn,Lb as Po,M as mt,Ma as Pn,Mb as Mo,N as it,Na as Mn,Nb as wo,O as st,Oa as wn,Ob as No,P as ct,Pa as Nn,Pb as _o,Q as dt,Qa as _n,Qb as bo,R as pt,Ra as bn,Rb as jo,S as lt,Sa as jn,Sb as ko,T as ut,Ta as kn,Tb as Ao,U as ft,Ua as An,Ub as Oo,V as gt,Va as On,Vb as Ro,W as Ct,Wa as Rn,Wb as So,X as xt,Xa as Sn,Xb as vo,Y as yt,Ya as vn,Yb as Io,Z as Kt,Za as In,Zb as Lo,_ as It,_a as Ln,_b as Wo,a as D,aa as Wt,ab as Fn,ac as $o,b as P,ba as Ft,bb as $n,bc as qo,c as M,ca as $t,cb as qn,cc as zo,d as w,da as qt,db as zn,dc as Bo,e as N,ea as zt,eb as Bn,ec as Eo,f as _,fa as Bt,fb as En,fc as Go,g as b,ga as Et,gb as Gn,gc as Ho,h as j,ha as Gt,hb as Hn,hc as Jo,i as k,ia as Ht,ib as Jn,ic as Qo,j as A,ja as Jt,jb as Qn,jc as To,k as O,ka as Qt,kb as Tn,kc as Uo,l as R,la as Tt,lb as Un,lc as Vo,m as S,ma as Ut,mb as Vn,n as v,na as Vt,nb as Yn,o as I,oa as Yt,ob as Zn,p as L,pa as Zt,pb as to,q as W,qa as tn,qb as no,r as F,ra as nn,rb as oo,s as $,sa as on,sb as eo,t as q,ta as en,tb as ro,u as z,ua as rn,ub as ao,v as B,va as an,vb as mo,w as E,wa as mn,wb as io,x as G,xa as sn,xb as so,y as H,ya as cn,yb as co,z as J,za as dn,zb as po}from"./chunks/chunk-JRT447X5.js";import{D as vt,b as Xt,c as ht,d as Dt,e as Pt,f as Mt,h as wt,i as Nt,j as _t,k as bt,u as jt,v as kt,w as At,x as Ot,y as Rt,z as St}from"./chunks/chunk-K4RBLNSY.js";import"./chunks/chunk-Z4UT32NN.js";import"./chunks/chunk-EVIDQWMF.js";import"./chunks/chunk-XUEINS3X.js";import"./chunks/chunk-2GEKCIIW.js";import"./chunks/chunk-VBIVZOSD.js";import{a}from"./chunks/chunk-V4WSBIXB.js";import l from"fs/promises";import c from"path";import x from"os";var u=c.join(x.homedir(),".kodax","commands");function y(){return u}a(y,"getDefaultCommandDir");async function K(e){let n=new Map,o=e??u;try{await l.mkdir(o,{recursive:!0});let r=await l.readdir(o);for(let t of r){let m=c.extname(t),f=t.replace(m,"");if(m===".md"){try{let d=await l.readFile(c.join(o,t),"utf-8"),i=(d.split(`
+`)[0]?.replace(/^#\s*/,"").trim()??"").slice(0,60)||"(prompt command)";n.set(f,{name:f,description:i,content:d,type:"prompt"})}catch{}continue}if(m===".js"||m===".ts")try{let g=await import(c.join(o,t));for(let[i,p]of Object.entries(g))if(i.startsWith("command_")&&typeof p=="function"){let s=i.replace("command_",""),C=p.description??s;n.set(s,{name:s,description:String(C).slice(0,60),content:`[Programmable command: ${s}]`,type:"programmable",execute:p})}}catch{}}}catch{}return n}a(K,"loadCommands");async function X(e,n,o,r){let t=o.get(e);return t?t.type==="prompt"?n?t.content.replace(/{args}/g,n):t.content:t.type==="programmable"&&t.execute?t.execute({args:n,runAgent:r}):null:null}a(X,"processCommandCall");function h(e){if(!e.startsWith("/"))return null;let n=e.slice(1).split(/\s+/,2);if(n.length===0)return null;let[o,r]=n;return o?[o,r]:null}a(h,"parseCommandCall");export{Cn as App,Vt as AutocompleteContextProvider,Qt as BUILTIN_COMMANDS,qn as BackgroundTaskBar,No as ConsoleCapturer,dt as DEFAULT_UI_STATE,In as DialogSurface,mn as DotsIndicator,$o as FileSessionStorage,yn as FullscreenTranscriptLayout,pn as HistoryItemRenderer,en as InputPrompt,u as KODAX_COMMANDS_DIR,Dt as KODAX_CONFIG_FILE,Xt as KODAX_DIR,ht as KODAX_SESSIONS_DIR,_t as KODAX_VERSION,ft as KeyMatchers,ct as KeypressHandlerPriority,ot as KeypressParser,lt as KeypressProvider,L as LRUCache,dn as LoadingIndicator,no as MemorySessionStorage,Kn as MessageActions,ln as MessageList,Xn as MessageSelector,Wn as NotificationsSurface,gt as PERMISSION_MODES,Pt as PREVIEW_MAX_LENGTH,yo as PendingInputsIndicator,sn as ProgressIndicator,Dn as PromptComposer,wn as PromptFooter,Pn as PromptFooterLeftSide,Mn as PromptFooterRightSide,Nn as PromptHelpMenu,vn as PromptSuggestionsSurface,Ln as QueuedCommandsSurface,xn as SimpleApp,rn as SimpleInputPrompt,un as SimpleMessageDisplay,gn as SimpleStatusBar,tt as SingleLineTextInput,an as Spinner,$n as StashNotice,fn as StatusBar,Fn as StatusNoticesSurface,Bn as StreamingProvider,mt as StreamingState,Sn as SuggestionsDisplay,st as TOOL_STATUS_ICONS,nn as TextBuffer,Z as TextInput,cn as ThinkingIndicator,Co as ToolCallDisplay,it as ToolCallStatus,xo as ToolGroup,go as ToolProgressBar,fo as ToolStatusBadge,hn as TranscriptViewport,kn as UIStateProvider,Vn as _resetQueuedPromptsCacheForTests,Qo as archiveSession,to as bootstrapAutoMode,J as calculateVisualCursorFromLayout,H as calculateVisualLayout,zt as collectBashWriteTargets,xt as computeConfirmTools,lo as createCliEvents,bn as createHistoryItem,Yn as createInteractiveContext,uo as createJsonEvents,Qn as createKeyMatcher,pt as createKeypressManager,oo as createMemorySessionStorage,so as createRecoveryHistoryItem,mo as createRetryHistoryItem,Vo as createSessionManager,zn as createStreamingManager,jn as createToolCall,Q as darkTheme,Jo as deleteSession,wo as detectTerminalCapabilities,j as detectTerminalHostProfile,b as detectTerminalRenderHost,co as emitRecoveryHistoryItem,io as emitRetryHistoryItem,Ut as executeCommand,eo as executeShellCommand,Gt as extractTextContent,Ht as extractTitle,Bo as forkSession,Jt as formatMessagePreview,_n as generateId,Ft as generateSavePattern,Bt as getBashOutsideProjectWriteRisk,q as getCharAtCodePoint,W as getCodePointLength,Oo as getCustomProviderConfig,y as getDefaultCommandDir,St as getGitRoot,at as getKeyDisplayName,Io as getMcpServerConfig,Et as getPlanModeBlockReason,jt as getProviderList,bt as getProviderModel,S as getTerminalHostCapabilities,Po as getTerminalWidth,V as getTheme,Y as getThemeNames,Nt as getVersion,$ as getVisualWidth,G as getVisualWidthCached,P as hasCursorUpViewportYankRisk,w as hasMainScreenRenderScrollRisk,Mt as hydrateProcessEnvFromShell,$t as isAlwaysConfirmPath,It as isBashReadCommand,Lt as isBashWriteCommand,I as isClassicReplForced,et as isFunctionKey,v as isOwnedRendererPreferred,qt as isPathInsideProject,yt as isPermissionMode,rt as isPrintable,kt as isProviderConfigured,M as isRemoteConptyHost,Mo as isScreenReader,ro as isShellCommand,ao as isShellCommandSuccess,N as isTmuxControlMode,Wt as isToolCallAllowed,D as isVsCodeTerminalHostEnv,F as isWideChar,Ao as listCustomProviders,vo as listMcpServers,Ho as listRunningSessions,qo as listSessions,K as loadCommands,At as loadConfig,zo as loadSession,T as minimalTheme,Kt as normalizePermissionMode,Tt as parseCommand,h as parseCommandCall,nt as parseKeypress,Ct as permissionModeDisplayName,Ot as prepareRuntimeConfig,X as processCommandCall,ko as processSpecialSyntax,vt as rateLimitedCall,wt as registerConfiguredCustomProviders,So as removeCustomProvider,Wo as removeMcpServer,_ as resetTmuxControlModeProbeForTesting,k as resolveConfiguredTuiRendererMode,A as resolveEffectiveTuiRendererMode,R as resolveFullscreenPolicy,O as resolveInteractiveSurfacePreference,Eo as rewindSession,po as runInkInteractiveMode,jo as runInteractiveMode,Rt as saveConfig,Go as setActiveEntry,z as splitByCodePoints,Xo as supports256Colors,Do as supportsEmoji,Ko as supportsTrueColor,ho as supportsUnicode,U as themes,Zn as touchContext,B as truncateByVisualWidth,To as unarchiveSession,Ro as upsertCustomProvider,Lo as upsertMcpServer,Zt as useAutocomplete,Yt as useAutocompleteContext,tn as useInputHistory,Jn as useKeypress,ut as useKeypressManager,Un as useQueuedPromptContents,Tn as useQueuedPrompts,Hn as useStreaming,Gn as useStreamingActions,En as useStreamingState,on as useTextBuffer,Rn as useUI,On as useUIActions,An as useUIState,Fo as validateMcpServerConfig,E as visualWidthCache,Uo as watchSessions,_o as withCapture,bo as withCaptureSync};

package/dist/sdk-session.d.ts

@@ -1,6 +1,6 @@
-import { S as SessionData, F as FileSessionStorage } from './types-chunks/storage.d-BvTdjYQF.js';
-import './types-chunks/types.d-HBbWT-iA.js';
-import './types-chunks/types.d-B1uGoVTE.js';
+import { S as SessionData, F as FileSessionStorage } from './types-chunks/storage.d-B1Jk6ryM.js';
+import './types-chunks/types.d-B_MIIApc.js';
+import './types-chunks/types.d-Cf-GCzac.js';
 
 /**
  * FEATURE_173 Part B (v0.7.42) — Session Management Public SDK.
@@ -22,6 +22,15 @@ interface SessionSummary {
         workspaceRoot?: string;
         gitRoot?: string;
     };
+    /**
+     * FEATURE_219 (v0.7.46) — the per-project directory key this session lives
+     * under (ADR-038 §7). A backward-compatible hint: consumers may pass it back
+     * for precise disambiguation, but `loadSession(id)` works without it.
+     */
+    readonly projectKey?: string;
+    /** FEATURE_219 — true when the session is whole-session archived (only ever
+     * surfaced when `includeArchived` is set). */
+    readonly archived?: boolean;
 }
 interface ListSessionsOptions {
     /**
@@ -37,8 +46,9 @@ interface ListSessionsOptions {
      */
     readonly scope?: 'user' | 'managed-task-worker' | 'all';
     /**
-     * Whether to include archived sessions (filename starts with `archived-`).
-     * Default false — no archived sessions exist today; reserved for future use.
+     * Whether to include whole-session-archived sessions. FEATURE_219 (v0.7.46):
+     * archived sessions live in `<projectKey>/archived/` (see `archiveSession`);
+     * also still hides the legacy `archived-` filename prefix. Default false.
      */
     readonly includeArchived?: boolean;
     /** Maximum number of sessions to return. Default 50. */
@@ -60,6 +70,8 @@ interface SessionManager {
     rewindSession: typeof rewindSession;
     setActiveEntry: typeof setActiveEntry;
     deleteSession: typeof deleteSession;
+    archiveSession: typeof archiveSession;
+    unarchiveSession: typeof unarchiveSession;
     listRunningSessions: typeof listRunningSessions;
     watchSessions: typeof watchSessions;
     /**
@@ -145,6 +157,15 @@ type DeleteSessionResult = {
  * NEVER throws.
  */
 declare function deleteSession(id: string): Promise<DeleteSessionResult>;
+/**
+ * FEATURE_219 (v0.7.46) — whole-session archive. Moves the session (and its
+ * island sidecar) into `<projectKey>/archived/`. Returns false for a missing
+ * session. NEVER throws. Archived sessions are hidden from the default listing
+ * and resurface only with `listSessions({ includeArchived: true })`.
+ */
+declare function archiveSession(id: string): Promise<boolean>;
+/** Restore an archived session back into its project directory. NEVER throws. */
+declare function unarchiveSession(id: string): Promise<boolean>;
 /**
  * Watch the sessions directory for changes.
  * Returns { close() } that stops the watcher / poll interval.
@@ -172,5 +193,5 @@ declare function createSessionManager(opts?: {
     sessionsDir?: string;
 }): SessionManager;
 
-export { createSessionManager, deleteSession, forkSession, listRunningSessions, listSessions, loadSession, rewindSession, setActiveEntry, watchSessions };
+export { archiveSession, createSessionManager, deleteSession, forkSession, listRunningSessions, listSessions, loadSession, rewindSession, setActiveEntry, unarchiveSession, watchSessions };
 export type { DeleteSessionResult, ListSessionsOptions, RunningSessionInfo, SessionManager, SessionSummary, WatchSessionsCallback };

package/dist/sdk-session.js

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{bc as s,cc as e,dc as n,ec as i,fc as o,gc as t,hc as S,ic as a,jc as r}from"./chunks/chunk-CZHIUJQS.js";import"./chunks/chunk-FT2XFFNP.js";import"./chunks/chunk-FKB7BWQT.js";import"./chunks/chunk-EVIDQWMF.js";import"./chunks/chunk-X6EHEQWP.js";import"./chunks/chunk-PGF5EZ7C.js";import"./chunks/chunk-IJUB7QXG.js";import"./chunks/chunk-V4WSBIXB.js";export{r as createSessionManager,S as deleteSession,n as forkSession,t as listRunningSessions,s as listSessions,e as loadSession,i as rewindSession,o as setActiveEntry,a as watchSessions};
+import{bc as s,cc as e,dc as n,ec as i,fc as o,gc as S,hc as t,ic as a,jc as r,kc as l,lc as c}from"./chunks/chunk-JRT447X5.js";import"./chunks/chunk-K4RBLNSY.js";import"./chunks/chunk-Z4UT32NN.js";import"./chunks/chunk-EVIDQWMF.js";import"./chunks/chunk-XUEINS3X.js";import"./chunks/chunk-2GEKCIIW.js";import"./chunks/chunk-VBIVZOSD.js";import"./chunks/chunk-V4WSBIXB.js";export{a as archiveSession,c as createSessionManager,t as deleteSession,n as forkSession,S as listRunningSessions,s as listSessions,e as loadSession,i as rewindSession,o as setActiveEntry,r as unarchiveSession,l as watchSessions};

package/dist/sdk-skills.js

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{$b as E,Ab as e,Bb as i,Cb as t,Db as a,Eb as o,Ib as k,Jb as r,Kb as S,Lb as s,Mb as n,Nb as g,Ob as u,Pb as c,Qb as x,Rb as d,Sb as P,Tb as R,Ub as h,Vb as p,Wb as v,Xb as y,Yb as M,Zb as f,_b as m,zb as l}from"./chunks/chunk-IJUB7QXG.js";import"./chunks/chunk-V4WSBIXB.js";export{y as SkillExecutor,R as SkillRegistry,x as VariableResolver,t as clearPluginSkillPaths,M as createExecutor,d as createResolver,n as discoverSkills,u as discoverSkillsWithMonorepo,f as executeSkill,m as expandSkillForLLM,E as formatSkillActivationMessage,a as getDefaultSkillPaths,g as getNestedSkillPaths,o as getSkillPathsFlat,h as getSkillRegistry,p as initializeSkillRegistry,i as listPluginSkillPaths,S as loadFullSkill,s as loadSkillFileContent,r as loadSkillMetadata,c as parseArguments,k as parseSkillMarkdown,l as registerPluginSkillPath,v as resetSkillRegistry,P as resolveSkillContent,e as unregisterPluginSkillPath};
+import{$b as E,Ab as e,Bb as i,Cb as t,Db as a,Eb as o,Ib as k,Jb as r,Kb as S,Lb as s,Mb as n,Nb as g,Ob as u,Pb as c,Qb as x,Rb as d,Sb as P,Tb as R,Ub as h,Vb as p,Wb as v,Xb as y,Yb as M,Zb as f,_b as m,zb as l}from"./chunks/chunk-VBIVZOSD.js";import"./chunks/chunk-V4WSBIXB.js";export{y as SkillExecutor,R as SkillRegistry,x as VariableResolver,t as clearPluginSkillPaths,M as createExecutor,d as createResolver,n as discoverSkills,u as discoverSkillsWithMonorepo,f as executeSkill,m as expandSkillForLLM,E as formatSkillActivationMessage,a as getDefaultSkillPaths,g as getNestedSkillPaths,o as getSkillPathsFlat,h as getSkillRegistry,p as initializeSkillRegistry,i as listPluginSkillPaths,S as loadFullSkill,s as loadSkillFileContent,r as loadSkillMetadata,c as parseArguments,k as parseSkillMarkdown,l as registerPluginSkillPath,v as resetSkillRegistry,P as resolveSkillContent,e as unregisterPluginSkillPath};

package/dist/types-chunks/{base.d-FUJahC0i.d.ts → base.d-BdJKSPO2.d.ts}

@@ -1,4 +1,4 @@
-import { r as KodaXProviderConfig, m as KodaXMessage, X as KodaXToolDefinition, F as KodaXReasoningRequest, z as KodaXProviderStreamOptions, J as KodaXStreamResult, n as KodaXModelDescriptor, q as KodaXProviderCapabilityProfile, C as KodaXReasoningCapability, E as KodaXReasoningOverride } from './types.d-B1uGoVTE.js';
+import { s as KodaXProviderConfig, n as KodaXMessage, Y as KodaXToolDefinition, G as KodaXReasoningRequest, A as KodaXProviderStreamOptions, L as KodaXStreamResult, a2 as KodaXVerifyCredentialResult, o as KodaXModelDescriptor, r as KodaXProviderCapabilityProfile, D as KodaXReasoningCapability, F as KodaXReasoningOverride } from './types.d-Cf-GCzac.js';
 
 /**
  * Retry-After header parsing — FEATURE_130 (v0.7.36).
@@ -169,6 +169,23 @@ declare abstract class KodaXBaseProvider {
     supportsNonStreamingFallback(): boolean;
     complete(_messages: KodaXMessage[], _tools: KodaXToolDefinition[], _system: string, _reasoning?: boolean | KodaXReasoningRequest, _streamOptions?: KodaXProviderStreamOptions, _signal?: AbortSignal): Promise<KodaXStreamResult>;
     isConfigured(): boolean;
+    /**
+     * FEATURE_216 v0.7.45 — Lightweight credential verification. Returns
+     * a never-throws envelope with `ok` + categorized `error`. Concrete
+     * compat base classes (`KodaXAnthropicCompatProvider`,
+     * `KodaXOpenAICompatProvider`) override this to dispatch by the
+     * `verifyStrategy` field. The default here returns `unsupported` so
+     * Provider classes that don't extend a compat base — or future ones
+     * yet to be wired — fail safely instead of throwing.
+     *
+     * Distinct from `isConfigured()`: that one is env-only (no network);
+     * this one hits the wire (zero or ~7 tokens depending on strategy)
+     * and verifies the key is actually accepted by the upstream.
+     */
+    verifyCredential(_opts?: {
+        timeoutMs?: number;
+        signal?: AbortSignal;
+    }): Promise<KodaXVerifyCredentialResult>;
     getModel(): string;
     getAvailableModels(): string[];
     getModelDescriptor(modelId?: string): KodaXModelDescriptor | undefined;

package/dist/types-chunks/{bash-prefix-extractor.d-HrTUwtV7.d.ts → bash-prefix-extractor.d-BICYx8pt.d.ts}

@@ -1,9 +1,9 @@
 import { M as McpConnectMode, a as McpServerConfig, b as McpServersConfig, c as McpTransportKind } from './config.d-BfJUXxC0.js';
-import { g as KodaXGoalState, s as KodaXSessionLineage, x as KodaXSessionScope, y as KodaXSessionStorage, i as KodaXJsonValue, k as KodaXSessionArtifactLedgerEntry, S as SessionErrorMetadata } from './types.d-HBbWT-iA.js';
-import { W as KodaXTokenUsage, m as KodaXMessage, D as KodaXReasoningMode, k as KodaXHarnessProfile, R as KodaXTaskWorkIntent, H as KodaXReviewScale, N as KodaXTaskComplexity, a as KodaXAmaFanoutClass, P as KodaXTaskRoutingDecision, Q as KodaXTaskType, I as KodaXRiskLevel, i as KodaXExecutionMode, c as KodaXAmaProfile, d as KodaXAmaTactic, b as KodaXAmaFanoutPolicy } from './types.d-B1uGoVTE.js';
-import { f as AgentMessage, av as StopHookFn, C as ChildTaskRegistry, p as CompactionUpdate, v as Guardrail, s as DiscoveredInstance, az as TaskAbortRegistry, aa as RunnerToolCall, aE as ToolGuardrail } from './types.d-DM8zEJgF.js';
+import { g as KodaXGoalState, s as KodaXSessionLineage, x as KodaXSessionScope, y as KodaXSessionStorage, i as KodaXJsonValue, k as KodaXSessionArtifactLedgerEntry, S as SessionErrorMetadata } from './types.d-B_MIIApc.js';
+import { X as KodaXTokenUsage, n as KodaXMessage, E as KodaXReasoningMode, k as KodaXHarnessProfile, S as KodaXTaskWorkIntent, I as KodaXReviewScale, O as KodaXTaskComplexity, a as KodaXAmaFanoutClass, Q as KodaXTaskRoutingDecision, R as KodaXTaskType, J as KodaXRiskLevel, i as KodaXExecutionMode, c as KodaXAmaProfile, d as KodaXAmaTactic, b as KodaXAmaFanoutPolicy } from './types.d-Cf-GCzac.js';
+import { f as AgentMessage, av as StopHookFn, C as ChildTaskRegistry, p as CompactionUpdate, v as Guardrail, s as DiscoveredInstance, az as TaskAbortRegistry, aa as RunnerToolCall, aE as ToolGuardrail } from './types.d-D2RNa5Y7.js';
 import { C as CapabilityKind, b as CapabilityResult } from './capability.d-3C62G8Eq.js';
-import { K as KodaXBaseProvider } from './base.d-FUJahC0i.js';
+import { K as KodaXBaseProvider } from './base.d-BdJKSPO2.js';
 import { a as CostTracker } from './cost-tracker.d-wRtyEW9d.js';
 
 /**

package/dist/types-chunks/{file-tracker.d-DOfaoCbJ.d.ts → file-tracker.d-BNTIvsdb.d.ts}

@@ -1,6 +1,6 @@
-import { m as KodaXMessage } from './types.d-B1uGoVTE.js';
-import { f as AgentMessage, ag as SessionEntry, ae as Session, ah as SessionExtension, m as CompactionDetails, u as FileOperations } from './types.d-DM8zEJgF.js';
-import { s as KodaXSessionLineage, i as KodaXJsonValue, a as KodaXCompactMemorySeed, o as KodaXSessionEntry, z as KodaXSessionTreeNode, r as KodaXSessionLabelEntry, q as KodaXSessionGoalEntry, v as KodaXSessionNavigationOptions, k as KodaXSessionArtifactLedgerEntry } from './types.d-HBbWT-iA.js';
+import { n as KodaXMessage } from './types.d-Cf-GCzac.js';
+import { f as AgentMessage, ag as SessionEntry, ae as Session, ah as SessionExtension, m as CompactionDetails, u as FileOperations } from './types.d-D2RNa5Y7.js';
+import { s as KodaXSessionLineage, i as KodaXJsonValue, a as KodaXCompactMemorySeed, o as KodaXSessionEntry, z as KodaXSessionTreeNode, r as KodaXSessionLabelEntry, q as KodaXSessionGoalEntry, v as KodaXSessionNavigationOptions, k as KodaXSessionArtifactLedgerEntry } from './types.d-B_MIIApc.js';
 
 /**
  * @kodax-ai/agent Constants
@@ -457,7 +457,14 @@ declare class LineageCompaction implements CompactionPolicy {
 
 /**
  * 生成会话 ID
- * 格式: YYYYMMDD_HHMMSS
+ * 格式: YYYYMMDD_HHMMSS_<suffix>  (suffix = ms 低位 + 随机, base36)
+ *
+ * FEATURE_219 (v0.7.46): the date-prefix is preserved (sortable +
+ * human-readable), but a per-call suffix makes the id GLOBALLY unique.
+ * Under the pre-FEATURE_219 flat layout the filename collision silently
+ * masked two same-second sessions (overwrite risk); under the per-project
+ * directory layout the same id could otherwise exist in two project folders
+ * and make `loadSession(id)` ambiguous. See ADR-038 §7.
  */
 declare function generateSessionId(): Promise<string>;
 /**

package/dist/types-chunks/{resolver.d-OMwxURit.d.ts → resolver.d-DkgJlEzr.d.ts}

@@ -1,6 +1,6 @@
-import { D as KodaXReasoningMode, U as KodaXThinkingBudgetMap, V as KodaXThinkingDepth, r as KodaXProviderConfig, C as KodaXReasoningCapability, F as KodaXReasoningRequest, Q as KodaXTaskType, E as KodaXReasoningOverride, X as KodaXToolDefinition, m as KodaXMessage, z as KodaXProviderStreamOptions, J as KodaXStreamResult, n as KodaXModelDescriptor, q as KodaXProviderCapabilityProfile, h as KodaXCustomProviderConfig } from './types.d-B1uGoVTE.js';
+import { E as KodaXReasoningMode, V as KodaXThinkingBudgetMap, W as KodaXThinkingDepth, s as KodaXProviderConfig, D as KodaXReasoningCapability, G as KodaXReasoningRequest, R as KodaXTaskType, F as KodaXReasoningOverride, a2 as KodaXVerifyCredentialResult, Y as KodaXToolDefinition, n as KodaXMessage, A as KodaXProviderStreamOptions, L as KodaXStreamResult, o as KodaXModelDescriptor, r as KodaXProviderCapabilityProfile, a3 as KodaXVerifyStrategy, h as KodaXCustomProviderConfig, m as KodaXListModelsResult } from './types.d-Cf-GCzac.js';
 import Anthropic from '@anthropic-ai/sdk';
-import { K as KodaXBaseProvider } from './base.d-FUJahC0i.js';
+import { K as KodaXBaseProvider } from './base.d-BdJKSPO2.js';
 import OpenAI from 'openai';
 
 /**
@@ -64,6 +64,24 @@ declare abstract class KodaXAnthropicCompatProvider extends KodaXBaseProvider {
     protected client: Anthropic;
     protected initClient(): void;
     protected onStaleConnection(): void;
+    /**
+     * FEATURE_216 v0.7.45 — Lightweight credential verification.
+     * Dispatches by `this.config.verifyStrategy`:
+     *   - `count-tokens` (default for Anthropic protocol): 0-token
+     *     `messages.countTokens()` — empirically reliable across 5/5
+     *     Anthropic-compat providers tested (anthropic / zhipu-coding /
+     *     kimi-code / minimax-coding / ark-coding).
+     *   - `models-list`: 0-token `models.list()` — supported by Anthropic
+     *     SDK 0.80+; not used by any Anthropic built-in but available
+     *     for custom providers that explicitly opt-in.
+     *   - `minimal-message`: ~7-token `messages.create({max_tokens:1})`
+     *     fallback for Anthropic-compat providers whose `count_tokens`
+     *     endpoint returns 404 (mimo / mimo-coding empirically).
+     */
+    verifyCredential(opts?: {
+        timeoutMs?: number;
+        signal?: AbortSignal;
+    }): Promise<KodaXVerifyCredentialResult>;
     /**
      * FEATURE_116 (v0.7.37) — Wrap a string `system` prompt as a single
      * cacheable text block. v1 treats the entire system prompt as one cache
@@ -107,6 +125,26 @@ declare abstract class KodaXOpenAICompatProvider extends KodaXBaseProvider {
     protected client: OpenAI;
     protected initClient(): void;
     protected onStaleConnection(): void;
+    /**
+     * FEATURE_216 v0.7.45 — Lightweight credential verification.
+     * Dispatches by `this.config.verifyStrategy`:
+     *   - `models-list` (default for OpenAI protocol): 0-token
+     *     `models.list()` — empirically reliable for openai-compat
+     *     providers where `/v1/models` gates on auth (kimi / qwen /
+     *     deepseek confirmed). Verified by opencode `setup-recording-env.ts`
+     *     for OPENAI_API_KEY proper.
+     *   - `minimal-message`: ~6-token `chat.completions.create({max_tokens:1})`
+     *     fallback for OpenAI-compat providers whose `/v1/models` is
+     *     publicly accessible (zhipu — false-positive risk).
+     *   - `count-tokens`: NOT supported on OpenAI protocol. Custom provider
+     *     validator rejects this combo at config time; built-in providers
+     *     never declare it. Orchestrator returns `unsupported` if it slips
+     *     through, surfacing the misconfiguration.
+     */
+    verifyCredential(opts?: {
+        timeoutMs?: number;
+        signal?: AbortSignal;
+    }): Promise<KodaXVerifyCredentialResult>;
     /**
      * FEATURE_116 (v0.7.37) — Strip any `cache-boundary` markers from
      * KodaXMessage content arrays before they reach OpenAI wire
@@ -193,6 +231,12 @@ type ProviderSnapshot = {
     readonly thinkingBudgetCap?: number;
     /** Whether the provider supports `thinking_budget` / native reasoning. */
     readonly supportsThinking?: boolean;
+    /**
+     * FEATURE_216 v0.7.45 — Which verify primitive this provider supports
+     * for credential checks. Mirrors `provider-capabilities.types.ts`
+     * ProviderSnapshot's required field.
+     */
+    readonly verifyStrategy: KodaXVerifyStrategy;
 };
 declare const KODAX_PROVIDER_SNAPSHOTS: Record<ProviderName, ProviderSnapshot>;
 declare const KODAX_PROVIDERS: Record<string, () => KodaXBaseProvider>;
@@ -405,6 +449,38 @@ declare function resolveModelCapabilities(providerName: string, modelId: string)
  * checking `process.env[snapshot.apiKeyEnv]` if they care.
  */
 declare function listAllModelCapabilities(): KodaXModelCapabilities[];
+/**
+ * FEATURE_216 v0.7.45 — Top-level lightweight credential verification
+ * for any registered provider (built-in / custom / runtime).
+ *
+ * Never throws. Short-circuits before hitting the provider ctor for:
+ *   - unknown provider name → `unsupported`
+ *   - cli-bridge / `verifyStrategy='unsupported'` → `unsupported`
+ *   - env var missing → `unconfigured`  (avoids the `getApiKey()` throw)
+ *
+ * Otherwise instantiates via `resolveProvider(name)` and delegates to
+ * `provider.verifyCredential(opts)`. Cost: 0 tokens (count-tokens /
+ * models-list strategies) or ~6-7 tokens (minimal-message strategy).
+ */
+declare function verifyProviderCredential(name: string, opts?: {
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}): Promise<KodaXVerifyCredentialResult>;
+/**
+ * FEATURE_216 v0.7.45 — Returns the static model list KodaX maintains
+ * for a provider. Distinct from credential verification: this is for
+ * model-picker UIs in SDK consumers. Sourced from
+ * `provider-capabilities.json` for built-in providers + the custom
+ * registry for user-configured ones. Always `source: 'static'` in
+ * v0.7.45 — KodaX-curated list is the authoritative source per
+ * FEATURE_198 ("KodaX self-maintained snapshot is the only reliable
+ * source" — upstream `/v1/models` is noisy/inconsistent across
+ * providers). Future versions may add an opt-in upstream refresh.
+ */
+declare function listProviderModels(name: string, _opts?: {
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}): Promise<KodaXListModelsResult>;
 
-export { registerCustomProviders as $, getModelCapabilities as A, getProvider as B, getProviderConfiguredCapabilityProfile as C, getProviderConfiguredReasoningCapability as D, getProviderList as E, getProviderModel as F, getProviderModelDescriptors as G, getProviderModels as H, getReasoningCapability as I, getRuntimeModelProvider as J, KODAX_DEFAULT_PROVIDER as K, getRuntimeModelProviderNames as L, isCustomProviderName as M, isKnownProvider as N, isProviderConfigured as O, isProviderName as Q, isReasoningEnabled as R, isRuntimeModelProviderName as S, listAllModelCapabilities as T, listBuiltinModelCapabilities as U, listCustomProviderModelCapabilities as V, loadReasoningOverride as W, mapDepthToOpenAIReasoningEffort as X, normalizeReasoningRequest as Y, reasoningCapabilityToOverride as Z, reasoningOverrideToCapability as _, KODAX_DEFAULT_THINKING_BUDGETS as a, registerModelProvider as a0, resolveModelCapabilities as a1, resolveProvider as a2, resolveProviderModelDescriptors as a3, resolveThinkingBudget as a4, saveReasoningOverride as a5, validateCustomProviderConfig as a6, KODAX_PROVIDERS as b, KODAX_PROVIDER_SNAPSHOTS as c, KODAX_REASONING_MODE_SEQUENCE as d, KODAX_REASONING_SAFETY_RESERVE as e, KodaXAnthropicCompatProvider as f, KodaXError as g, KodaXNetworkError as i, KodaXOpenAICompatProvider as j, KodaXProviderError as k, KodaXRateLimitError as l, KodaXToolCallIdError as m, buildReasoningOverrideKey as n, clampThinkingBudget as o, clearReasoningOverride as p, clearRuntimeModelProviders as q, createCustomProvider as r, getAvailableProviderNames as s, getCustomModelCapabilities as t, getCustomProvider as u, getCustomProviderList as v, getCustomProviderModelDescriptors as w, getCustomProviderModels as x, getCustomProviderNames as y, getDefaultThinkingDepthForMode as z };
+export { reasoningOverrideToCapability as $, getModelCapabilities as A, getProvider as B, getProviderConfiguredCapabilityProfile as C, getProviderConfiguredReasoningCapability as D, getProviderList as E, getProviderModel as F, getProviderModelDescriptors as G, getProviderModels as H, getReasoningCapability as I, getRuntimeModelProvider as J, KODAX_DEFAULT_PROVIDER as K, getRuntimeModelProviderNames as L, isCustomProviderName as M, isKnownProvider as N, isProviderConfigured as O, isProviderName as Q, isReasoningEnabled as R, isRuntimeModelProviderName as S, listAllModelCapabilities as T, listBuiltinModelCapabilities as U, listCustomProviderModelCapabilities as V, listProviderModels as W, loadReasoningOverride as X, mapDepthToOpenAIReasoningEffort as Y, normalizeReasoningRequest as Z, reasoningCapabilityToOverride as _, KODAX_DEFAULT_THINKING_BUDGETS as a, registerCustomProviders as a0, registerModelProvider as a1, resolveModelCapabilities as a2, resolveProvider as a3, resolveProviderModelDescriptors as a4, resolveThinkingBudget as a5, saveReasoningOverride as a6, validateCustomProviderConfig as a7, verifyProviderCredential as a8, KODAX_PROVIDERS as b, KODAX_PROVIDER_SNAPSHOTS as c, KODAX_REASONING_MODE_SEQUENCE as d, KODAX_REASONING_SAFETY_RESERVE as e, KodaXAnthropicCompatProvider as f, KodaXError as g, KodaXNetworkError as i, KodaXOpenAICompatProvider as j, KodaXProviderError as k, KodaXRateLimitError as l, KodaXToolCallIdError as m, buildReasoningOverrideKey as n, clampThinkingBudget as o, clearReasoningOverride as p, clearRuntimeModelProviders as q, createCustomProvider as r, getAvailableProviderNames as s, getCustomModelCapabilities as t, getCustomProvider as u, getCustomProviderList as v, getCustomProviderModelDescriptors as w, getCustomProviderModels as x, getCustomProviderNames as y, getDefaultThinkingDepthForMode as z };
 export type { ProviderName as P, KodaXModelCapabilities as h };

package/dist/types-chunks/{storage.d-BvTdjYQF.d.ts → storage.d-B1Jk6ryM.d.ts}

@@ -1,4 +1,4 @@
-import { n as KodaXSessionData, s as KodaXSessionLineage, v as KodaXSessionNavigationOptions, w as KodaXSessionRuntimeInfo, y as KodaXSessionStorage } from './types.d-HBbWT-iA.js';
+import { n as KodaXSessionData, s as KodaXSessionLineage, v as KodaXSessionNavigationOptions, w as KodaXSessionRuntimeInfo, y as KodaXSessionStorage } from './types.d-B_MIIApc.js';
 
 /**
  * Session Storage - Session storage abstraction layer
@@ -70,17 +70,61 @@ declare function createMemorySessionStorage(): SessionStorage;
 
 declare class FileSessionStorage implements KodaXSessionStorage {
     private readonly sessionsDir;
+    /**
+     * v0.7.46 — optional explicit project cwd for in-process embedders
+     * (KodaX Space) serving multiple projects from a single runtime.
+     * Threaded through `getGitRoot(this.hostCwd)` and `inspectWorkspaceRuntime({cwd: this.hostCwd})`
+     * so the workspace-mismatch check in `load()` compares against the
+     * project the embedder opened, NOT the embedder's startup directory.
+     * Unset → all paths behave identically to the pre-v0.7.46 form.
+     */
+    private readonly hostCwd?;
+    /**
+     * v0.7.46 F7 — explicit opt-in for the CLI-style "[Warning] Session
+     * project mismatch" stderr notice emitted from `load()`. Pre-v0.7.46
+     * the gate was `!this.hostCwd` which fired whenever the embedder
+     * hadn't supplied a cwd — but that ALSO matched SDK consumers who
+     * don't set cwd (e.g. KodaX Space), bleeding the yellow warning into
+     * their stdout/stderr UI channels on every cross-project load. The
+     * v0.7.46 default is `false` — silent. CLI surfaces that want the
+     * old behavior (warn when user resumes a session from outside its
+     * original project) can pass `emitMismatchWarnings: true`.
+     */
+    private readonly emitMismatchWarnings;
     constructor(opts?: {
         sessionsDir?: string;
+        cwd?: string;
+        emitMismatchWarnings?: boolean;
     });
     private writeQueues;
     private serializedWrite;
     private appendState;
+    private sessionDirCache;
+    private projectJsonWritten;
+    private migrationPromise?;
+    private ensureMigrated;
     /** Update watermarks. Only overwrites fields the caller actually provided. */
     private syncAppendState;
-    private getSessionFilePath;
-    private getArchiveFilePath;
+    private legacyFlatPath;
+    private legacyFlatArchivePath;
+    private projectDir;
+    /** Resolve (and cache) the project directory a write for `id` should land in. */
+    private resolveWriteDir;
+    private writeFilePath;
+    /**
+     * id-only locator (ADR-038 §7). Resolution order:
+     *   1. cached project dir for this id
+     *   2. bounded scan of project dirs:  <key>/<id>.jsonl
+     *   3. bounded scan of archived:      <key>/archived/<id>.jsonl
+     *   4. legacy flat:                   <sessionsDir>/<id>.jsonl
+     * On multiple matches (only possible for pre-FEATURE_219 same-second
+     * duplicate ids) it prefers the current process's project dir, else
+     * returns null with a warning rather than guessing.
+     */
+    private resolveSessionLocation;
     private readSession;
+    /** Write `<dir>/project.json` once per process per directory (best-effort). */
+    private ensureProjectJson;
     private writeSessionInternal;
     private mergeAndWriteInternal;
     appendSessionDelta(id: string, data: SessionData): Promise<void>;
@@ -101,12 +145,43 @@ declare class FileSessionStorage implements KodaXSessionStorage {
         sessionId: string;
         data: SessionData;
     } | null>;
-    list(gitRoot?: string): Promise<Array<{
+    /**
+     * v0.7.46 — `opts.limit` added so SDK consumers can request more than
+     * the legacy 10-entry cap. Default stays at 10 to preserve the
+     * interactive REPL picker's behavior. The `public-api.ts` fast path
+     * forwards the caller's `limit`; `deleteAll()` passes a large value
+     * so it can enumerate ALL sessions for the gitRoot.
+     *
+     * v0.7.46 — return now carries `createdAt` so the fast path in
+     * `public-api.ts` no longer silently strips it. Pre-v0.7.46 callers
+     * that only destructured `{id, title, msgCount, runtimeInfo}` are
+     * unaffected (extra fields are ignored).
+     */
+    list(gitRoot?: string, opts?: {
+        limit?: number;
+        includeArchived?: boolean;
+    }): Promise<Array<{
         id: string;
         title: string;
         msgCount: number;
         runtimeInfo?: KodaXSessionRuntimeInfo;
+        archived?: boolean;
+        createdAt?: string;
     }>>;
+    /**
+     * FEATURE_219 Phase 4 — whole-session archive (ADR-038 §4). Moves the session
+     * file together with its island sidecar into `<projectKey>/archived/`. Paired
+     * (never orphans the sidecar). No-op + returns false for a missing session.
+     */
+    archive(id: string): Promise<boolean>;
+    /** Restore an archived session back into its project directory. */
+    unarchive(id: string): Promise<boolean>;
+    /**
+     * Move a session + its island sidecar between two directories. Propagates a
+     * non-ENOENT rename error (e.g. Windows file-in-use) so a partial move is
+     * surfaced as a failure instead of silently splitting main + sidecar.
+     */
+    private movePair;
     delete(id: string): Promise<void>;
     deleteAll(gitRoot?: string): Promise<void>;
     /**

package/dist/types-chunks/{types.d-HBbWT-iA.d.ts → types.d-B_MIIApc.d.ts}

@@ -1,4 +1,4 @@
-import { m as KodaXMessage } from './types.d-B1uGoVTE.js';
+import { n as KodaXMessage } from './types.d-Cf-GCzac.js';
 
 /**
  * @kodax-ai/agent Types

package/dist/types-chunks/{types.d-B1uGoVTE.d.ts → types.d-Cf-GCzac.d.ts}

@@ -240,6 +240,69 @@ interface KodaXModelDescriptor {
 }
 type KodaXProtocolFamily = 'anthropic' | 'openai';
 type KodaXProviderUserAgentMode = 'compat' | 'sdk';
+/**
+ * FEATURE_216 v0.7.45 — Strategy KodaX uses to verify a provider's API
+ * credentials. Per-provider data-driven (set in `provider-capabilities.json`)
+ * because the 14 providers KodaX ships do not share a single zero-token
+ * verify primitive — empirically 3 distinct strategies are needed:
+ *
+ *   - `count-tokens`: Anthropic-protocol `messages.countTokens()` —
+ *     true 0-token (input_tokens reported but no model invocation).
+ *     Use for Anthropic-compat providers whose upstream implements
+ *     `/v1/messages/count_tokens`.
+ *   - `models-list`: `models.list()` — 0-token, authenticated GET.
+ *     Use ONLY when the provider's `/v1/models` endpoint actually
+ *     gates on auth (some compat layers expose it publicly → false
+ *     positives; others 401 even for valid keys → false negatives).
+ *   - `minimal-message`: `{messages,chat.completions}.create({max_tokens:1})`
+ *     — ~6-7 tokens / call. Universal fallback for providers where
+ *     the above two are unreliable. Cost is trivial for UI-button
+ *     "test connection" use cases (≈ $0.00001 per verify).
+ *   - `unsupported`: Provider has no verify primitive (CLI bridges
+ *     own credentials in their own subprocess token store; the SDK
+ *     does not enter that surface).
+ */
+type KodaXVerifyStrategy = 'count-tokens' | 'models-list' | 'minimal-message' | 'unsupported';
+/**
+ * FEATURE_216 v0.7.45 — Never-throws result envelope for
+ * `provider.verifyCredential()` / `verifyProviderCredential(name)`.
+ * Mirrors `side-query.ts` `SideQueryResult` pattern: every failure
+ * mode is captured in the returned object — no rejection, no throw.
+ */
+interface KodaXVerifyCredentialResult {
+    readonly ok: boolean;
+    /** HTTP status when applicable (verify primitives that hit the wire). */
+    readonly status?: number;
+    /**
+     * Error category. Stable for UI consumers to map to user-facing
+     * states ("invalid key", "no network", "provider doesn't support
+     * verification", etc.). `unconfigured` is set by the top-level
+     * helper when env var is missing — avoids the provider ctor throw
+     * (per FEATURE_198 model-capabilities exposure pattern).
+     */
+    readonly error?: 'unauthorized' | 'network' | 'timeout' | 'unsupported' | 'unconfigured' | 'server_error' | 'rate_limited' | 'unknown';
+    /** Upstream error body or short diagnostic, capped to 240 chars. */
+    readonly message?: string;
+    readonly durationMs: number;
+    /** Estimated token cost: 0 (count-tokens / models-list) or ~6-7 (minimal-message). */
+    readonly approxTokensSpent: number;
+    /** Which strategy ran (or 'unsupported' if no primitive was attempted). */
+    readonly strategy: KodaXVerifyStrategy;
+}
+/**
+ * FEATURE_216 v0.7.45 — Best-effort upstream model listing. Distinct from
+ * credential verification: this is for "model picker" UIs. Mixes upstream
+ * `/v1/models` data with static `provider-capabilities.json` fallback when
+ * the upstream endpoint is unreliable. NOT a cred test — for that, call
+ * `verifyProviderCredential()`.
+ */
+interface KodaXListModelsResult {
+    readonly ok: boolean;
+    readonly source: 'upstream' | 'static' | 'failed';
+    readonly models?: readonly string[];
+    readonly error?: string;
+    readonly durationMs: number;
+}
 interface KodaXCustomProviderConfig {
     name: string;
     protocol: KodaXProtocolFamily;
@@ -287,6 +350,15 @@ interface KodaXCustomProviderConfig {
      * override.
      */
     streamMaxDurationMs?: number;
+    /**
+     * FEATURE_216 v0.7.45 — Which verify primitive this provider supports.
+     * Optional: when unset, the SDK derives a default from `protocol`
+     * (anthropic → count-tokens / openai → models-list). Set explicitly when
+     * the upstream `/v1/models` is public (false-positive risk) or the
+     * `messages.count_tokens` endpoint is unimplemented (404), in which
+     * case `minimal-message` is the only safe fallback.
+     */
+    verifyStrategy?: KodaXVerifyStrategy;
 }
 interface KodaXProviderConfig {
     apiKeyEnv: string;
@@ -349,6 +421,15 @@ interface KodaXProviderConfig {
      * the ~RTT margin between client send and server kill timestamp).
      */
     streamMaxDurationMs?: number;
+    /**
+     * FEATURE_216 v0.7.45 — Which verify primitive this provider's compat
+     * base class uses for `verifyCredential()`. Sourced from
+     * `provider-capabilities.json` for built-in providers; for custom
+     * providers, falls back to a protocol-derived default
+     * (anthropic → count-tokens / openai → models-list) when the custom
+     * config does not set it explicitly.
+     */
+    verifyStrategy?: KodaXVerifyStrategy;
 }
 interface KodaXProviderStreamOptions {
     onTextDelta?: (text: string) => void;
@@ -397,4 +478,4 @@ interface KodaXProviderStreamOptions {
     signal?: AbortSignal;
 }
 
-export type { KodaXToolResultTextItem as $, KodaXProviderToolCallingFidelity as A, KodaXProviderTransport as B, KodaXReasoningCapability as C, KodaXReasoningMode as D, KodaXReasoningOverride as E, KodaXReasoningRequest as F, KodaXRedactedThinkingBlock as G, KodaXReviewScale as H, KodaXRiskLevel as I, KodaXStreamResult as J, KodaXAmaControllerDecision as K, KodaXTaskActionability as L, KodaXTaskBudgetOverrides as M, KodaXTaskComplexity as N, KodaXTaskFamily as O, KodaXTaskRoutingDecision as P, KodaXTaskType as Q, KodaXTaskWorkIntent as R, KodaXTextBlock as S, KodaXThinkingBlock as T, KodaXThinkingBudgetMap as U, KodaXThinkingDepth as V, KodaXTokenUsage as W, KodaXToolDefinition as X, KodaXToolResultBlock as Y, KodaXToolResultContentItem as Z, KodaXToolResultImageItem as _, KodaXAmaFanoutClass as a, KodaXToolUseBlock as a0, KodaXAmaFanoutPolicy as b, KodaXAmaProfile as c, KodaXAmaTactic as d, KodaXAssuranceIntent as e, KodaXCacheBoundary as f, KodaXContentBlock as g, KodaXCustomProviderConfig as h, KodaXExecutionMode as i, KodaXExecutionPattern as j, KodaXHarnessProfile as k, KodaXImageBlock as l, KodaXMessage as m, KodaXModelDescriptor as n, KodaXMutationSurface as o, KodaXProtocolFamily as p, KodaXProviderCapabilityProfile as q, KodaXProviderConfig as r, KodaXProviderContextFidelity as s, KodaXProviderConversationSemantics as t, KodaXProviderEvidenceSupport as u, KodaXProviderLongRunningSupport as v, KodaXProviderMcpSupport as w, KodaXProviderMultimodalSupport as x, KodaXProviderSessionSupport as y, KodaXProviderStreamOptions as z };
+export type { KodaXToolResultImageItem as $, KodaXProviderStreamOptions as A, KodaXProviderToolCallingFidelity as B, KodaXProviderTransport as C, KodaXReasoningCapability as D, KodaXReasoningMode as E, KodaXReasoningOverride as F, KodaXReasoningRequest as G, KodaXRedactedThinkingBlock as H, KodaXReviewScale as I, KodaXRiskLevel as J, KodaXAmaControllerDecision as K, KodaXStreamResult as L, KodaXTaskActionability as M, KodaXTaskBudgetOverrides as N, KodaXTaskComplexity as O, KodaXTaskFamily as P, KodaXTaskRoutingDecision as Q, KodaXTaskType as R, KodaXTaskWorkIntent as S, KodaXTextBlock as T, KodaXThinkingBlock as U, KodaXThinkingBudgetMap as V, KodaXThinkingDepth as W, KodaXTokenUsage as X, KodaXToolDefinition as Y, KodaXToolResultBlock as Z, KodaXToolResultContentItem as _, KodaXAmaFanoutClass as a, KodaXToolResultTextItem as a0, KodaXToolUseBlock as a1, KodaXVerifyCredentialResult as a2, KodaXVerifyStrategy as a3, KodaXAmaFanoutPolicy as b, KodaXAmaProfile as c, KodaXAmaTactic as d, KodaXAssuranceIntent as e, KodaXCacheBoundary as f, KodaXContentBlock as g, KodaXCustomProviderConfig as h, KodaXExecutionMode as i, KodaXExecutionPattern as j, KodaXHarnessProfile as k, KodaXImageBlock as l, KodaXListModelsResult as m, KodaXMessage as n, KodaXModelDescriptor as o, KodaXMutationSurface as p, KodaXProtocolFamily as q, KodaXProviderCapabilityProfile as r, KodaXProviderConfig as s, KodaXProviderContextFidelity as t, KodaXProviderConversationSemantics as u, KodaXProviderEvidenceSupport as v, KodaXProviderLongRunningSupport as w, KodaXProviderMcpSupport as x, KodaXProviderMultimodalSupport as y, KodaXProviderSessionSupport as z };

package/dist/types-chunks/{types.d-DM8zEJgF.d.ts → types.d-D2RNa5Y7.d.ts}

@@ -1,5 +1,5 @@
-import { X as KodaXToolDefinition, m as KodaXMessage, D as KodaXReasoningMode, Z as KodaXToolResultContentItem, T as KodaXThinkingBlock, G as KodaXRedactedThinkingBlock } from './types.d-B1uGoVTE.js';
-import { a as KodaXCompactMemorySeed, k as KodaXSessionArtifactLedgerEntry } from './types.d-HBbWT-iA.js';
+import { Y as KodaXToolDefinition, n as KodaXMessage, E as KodaXReasoningMode, _ as KodaXToolResultContentItem, U as KodaXThinkingBlock, H as KodaXRedactedThinkingBlock } from './types.d-Cf-GCzac.js';
+import { a as KodaXCompactMemorySeed, k as KodaXSessionArtifactLedgerEntry } from './types.d-B_MIIApc.js';
 
 /**
  * Layer A Primitive: Agent / Handoff / Guardrail / AgentReasoningProfile

package/dist/types-chunks/{utils.d-DSEX6Rq1.d.ts → utils.d-pzHPkrb8.d.ts}

@@ -1,7 +1,7 @@
-import { l as BashPrefixExtractor, a1 as KodaXOptions, L as KodaXContextTokenSnapshot, K as KodaXAgentMode, a6 as KodaXRepoIntelligenceMode, A as AgentsFile, i as AutoModeStats, ah as KodaXSkillInvocationContext, _ as KodaXMcpServersConfig } from './bash-prefix-extractor.d-HrTUwtV7.js';
-import { a as SessionStorage$1 } from './storage.d-BvTdjYQF.js';
-import { y as KodaXSessionStorage, n as KodaXSessionData, A as KodaXSessionUiHistoryItem, s as KodaXSessionLineage, k as KodaXSessionArtifactLedgerEntry, w as KodaXSessionRuntimeInfo } from './types.d-HBbWT-iA.js';
-import { m as KodaXMessage, D as KodaXReasoningMode, q as KodaXProviderCapabilityProfile, E as KodaXReasoningOverride, h as KodaXCustomProviderConfig } from './types.d-B1uGoVTE.js';
+import { l as BashPrefixExtractor, a1 as KodaXOptions, L as KodaXContextTokenSnapshot, K as KodaXAgentMode, a6 as KodaXRepoIntelligenceMode, A as AgentsFile, i as AutoModeStats, ah as KodaXSkillInvocationContext, _ as KodaXMcpServersConfig } from './bash-prefix-extractor.d-BICYx8pt.js';
+import { a as SessionStorage$1 } from './storage.d-B1Jk6ryM.js';
+import { y as KodaXSessionStorage, n as KodaXSessionData, A as KodaXSessionUiHistoryItem, s as KodaXSessionLineage, k as KodaXSessionArtifactLedgerEntry, w as KodaXSessionRuntimeInfo } from './types.d-B_MIIApc.js';
+import { n as KodaXMessage, E as KodaXReasoningMode, r as KodaXProviderCapabilityProfile, F as KodaXReasoningOverride, h as KodaXCustomProviderConfig } from './types.d-Cf-GCzac.js';
 import * as readline from 'readline';
 import { SpawnSyncReturns } from 'child_process';
 
@@ -515,7 +515,21 @@ declare function saveConfig(config: {
     /** FEATURE_102 Phase 3 — cross-provider child fallback chain. */
     fallbackProviders?: string[];
 }): void;
-declare function getGitRoot(): Promise<string | null>;
+/**
+ * Get git root directory.
+ *
+ * v0.7.46 fix — accepts optional `cwd` so in-process SDK embedders (KodaX
+ * Space) that serve multiple projects from a single runtime can resolve
+ * the git root of the project the user opened, NOT the embedder's
+ * startup directory. Without `cwd`, `git rev-parse --show-toplevel`
+ * inherits the host process's cwd, which mis-tags storage operations
+ * for multi-project embedders (the same root cause as the
+ * `saveSessionSnapshot` gitRoot bug in agent-runtime/middleware/ shipped in v0.7.45).
+ *
+ * No `cwd` arg → behaves identically to the pre-v0.7.46 form
+ * (process.cwd() of the host).
+ */
+declare function getGitRoot(cwd?: string): Promise<string | null>;
 declare function rateLimitedCall<T>(fn: () => Promise<T>): Promise<T>;
 
 export { processSpecialSyntax as A, BUILTIN_COMMANDS as B, rateLimitedCall as D, registerConfiguredCustomProviders as E, runInkInteractiveMode as F, runInteractiveMode as G, saveConfig as H, touchContext as J, KODAX_CONFIG_FILE as K, PERMISSION_MODES as P, KODAX_DIR as f, KODAX_SESSIONS_DIR as g, KODAX_VERSION as h, PREVIEW_MAX_LENGTH as i, computeConfirmTools as l, createInteractiveContext as m, executeCommand as n, getGitRoot as o, getProviderList as p, getProviderModel as q, getVersion as r, hydrateProcessEnvFromShell as s, isPermissionMode as t, isProviderConfigured as u, loadConfig as v, normalizePermissionMode as w, parseCommand as x, permissionModeDisplayName as y, prepareRuntimeConfig as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kodax-ai/kodax",
-  "version": "0.7.45",
+  "version": "0.7.46",
   "description": "极致轻量化 Coding Agent - TypeScript 实现，支持 12 个 LLM 提供商，可发布为免 Node 单文件二进制",
   "type": "module",
   "private": false,