@kodax-ai/kodax 0.7.72 → 0.7.73

package/docs/SDK_EMBEDDER_GUIDE.md

@@ -1905,12 +1905,12 @@ Each provider has one `verifyStrategy` value baked into `provider-capabilities.j
 
 | Strategy | What runs | Cost | Used by built-ins |
 |---|---|---|---|
-| `count-tokens` | `client.messages.countTokens({ messages: [{role:'user',content:'hi'}] })` | 0 token | `anthropic`, `zhipu-coding`, `kimi-code`, `minimax-coding`, `ark-coding` |
+| `count-tokens` | `client.messages.countTokens({ messages: [{role:'user',content:'hi'}] })` | 0 token | `anthropic`, `kimi-code`, `qwen-token-plan`, `zhipu-coding`, `zai-coding`, `minimax-coding`, `ark-coding` |
 | `models-list` | `client.models.list()` | 0 token | `openai`, `deepseek`, `kimi`, `qwen` |
 | `minimal-message` | `chat.completions.create({max_tokens:1, content:'hi'})` (or Anthropic equivalent) | ~6–7 token | `zhipu`, `mimo`, `mimo-coding` |
 | `unsupported` | nothing — short-circuits | — | `gemini-cli`, `codex-cli` (cli-bridge: credentials live in CLI binary) |
 
-`models-list` is NOT used as a universal default because (a) some providers' `/v1/models` is publicly accessible (so a bad key returns 200 — false positive), and (b) some compat layers don't implement it (404) or 401 even for valid keys (false negative). The 2026-05-28 provider probe matrix captured these empirically (12 providers at the time; 15 built-in aliases as of 2026-06-28); opencode's `setup-recording-env.ts` makes the same per-provider decision across its 20+ providers.
+`models-list` is NOT used as a universal default because (a) some providers' `/v1/models` is publicly accessible (so a bad key returns 200 — false positive), and (b) some compat layers don't implement it (404) or 401 even for valid keys (false negative). The 2026-05-28 provider probe matrix captured the original per-provider evidence (12 providers at the time; 15 built-in aliases as of 2026-06-28). The current capability catalog has 16 aliases, including `qwen-token-plan` with `count-tokens`; opencode's `setup-recording-env.ts` makes the same per-provider decision across its 20+ providers.
 
 ### Custom providers
 
@@ -2656,8 +2656,14 @@ sub.close();
 
 `runs.start({ options })` is a DTO boundary in Worker and daemon forms. Do not
 pass process-local objects such as `extensionRuntime`, callbacks, `AbortSignal`,
-LSP services, class instances, or cyclic structures. KodaX rejects them before
-transport instead of silently dropping fields.
+LSP services, class instances, or cyclic structures. KodaX rejects them before
+transport instead of silently dropping fields.
+
+`events.beforeToolExecute` is an executable policy hook, not an observation
+callback. It is preserved in embedded mode and rejected in daemon mode; install
+the equivalent policy in the daemon owner instead. The KodaX REPL explicitly
+marks and removes only its own legacy approval hook because Runtime-owned
+permission brokering replaces that hook.
 
 Use the runtime APIs for cross-boundary behavior:
 
@@ -2703,8 +2709,27 @@ await sub.ready;
 Await `ready` before another client starts work that may request permission;
 this creates an explicit cross-connection ordering boundary. Only the first
 valid response wins. Wrong-run or stale responses are rejected.
-Abort, runtime close, daemon stop, and timeout reject unresolved permission
-requests so tool approval promises do not hang forever.
+Abort, runtime close, daemon stop, and timeout reject unresolved permission
+requests so tool approval promises do not hang forever.
+
+SDK clients that create a concrete request may pass `toolInput` and
+`executionCwd` to `runtime.permissions.request(...)` in both embedded and
+daemon mode. The Runtime removes raw `toolInput` before publishing the pending
+request, derives the bounded/redacted preview from that concrete input,
+canonicalizes it into a matcher, and returns only opaque `grantSuggestions`.
+A caller-supplied `inputPreview` cannot override this trusted summary.
+`projectRoot`, classifier signals, and other owner-only safety context are
+deliberately not client request fields.
+
+Grant administration is typed through `RuntimePermissionScope` and the
+exported `RuntimePermissionMatcher` union (`exact-command`, `exact-path`, and
+`exact-call`). These types are available from both the package root and
+`@kodax-ai/kodax/runtime`; matcher construction remains Runtime-owned.
+Legacy `allow_always.scope` responses remain accepted for 0.7.x clients, but
+the Runtime narrows them to its concrete candidate and never persists the
+client-provided coarse scope. Legacy persisted grants that lack a Runtime
+matcher remain inspectable and revocable, but never authorize a concrete tool
+call; the user must approve a fresh Runtime-issued exact suggestion.
 
 ### Config, catalogs, MCP, and Space-style admin APIs
 
@@ -3721,7 +3746,7 @@ const runtime = await connectKodaXRuntime({
     sharedSessionSettings: 1,
     durableRecoveryQueries: 1,
     daemonManagement: 1,
-    runtimeAutoModeGuardrail: 1,
+    runtimeAutoModeGuardrail: 3,
   },
 });
 ```
@@ -3733,17 +3758,21 @@ Coder. FEATURE_269 does not advertise `interruptInput`, so an interrupt-only
 product must require `{ interruptInput: 1 }` and fail connection. The supported
 fallback is `delivery: 'after_turn'` only when that is the user's intent.
 
-The final v0.7.72 SDK requires `runtimeAutoModeGuardrail:1` automatically for
+The v0.7.73 SDK requires `runtimeAutoModeGuardrail:3` automatically for
 `autoStart: true`, even when the caller omits it from `requirements`. If the healthy
-profile daemon is older, the SDK first requires `daemonManagement:1`, takes a
-revision/owner-policy fenced preflight, and replaces it only when no active or
-queued run, Workflow, Agent turn, pending permission/user input, or other
-logical client exists. A busy or still-older daemon is never stopped: the
+profile daemon advertises v1 or v2, the SDK first requires `daemonManagement:1`,
+takes a revision/owner-policy fenced preflight, and replaces it only when no
+active or queued run, Workflow, Agent turn, pending permission/user input, or
+other logical client exists. A busy or still-older daemon is never stopped: the
 connection rejects with `RuntimeDaemonCapabilityUpgradeError`, whose
 `recoverable` and `restartRequired` fields are `true` and whose optional
 `preflight` explains the blockers. Attach-only connections never mutate daemon
 ownership and must request `runtimeAutoModeGuardrail:1` explicitly when they
-depend on this contract.
+depend only on the v1 owner contract, v2 for bounded input, effective-default
+metadata, structured diagnostics, and speculative-window parity, or v3 for
+opaque exact grant suggestions and concrete permission matchers. Capability
+requirements are minimum versions: v3 satisfies v1/v2, v2 satisfies v1, and an
+older daemon never satisfies a newer requirement.
 
 The `coderFeatureMatrix` capability reports daemon availability for managed
 runs, transcript/session operations, Todo projection, managed tasks, Workflow,
@@ -3866,7 +3895,8 @@ create another run. Settings use compare-and-swap; a stale revision returns a
 structured conflict and must be reloaded, never silently overwritten. The
 shared settings keys are `provider`, `model`, `effort`, `thinking`,
 `reasoningMode`, `permissionMode`, `executionCwd`, `agentMode`, and
-`autoModeEngine`.
+`autoModeEngine`, `autoModeClassifierModel`, `autoModeTimeoutMs`, and
+`autoModeSpeculativeWindowMs`.
 
 ```ts
 const queued = await runtime.runs.submitInput({
@@ -3909,9 +3939,13 @@ for (const request of await runtime.userInputs.listPending({ sessionId })) {
 }
 
 for (const request of await runtime.permissions.listPending({ sessionId })) {
+  const sessionScope = request.grantSuggestions
+    ?.find((candidate) => candidate.kind === 'session');
   const accepted = await runtime.permissions.respond(
     request.id,
-    { type: 'allow_once' },
+    sessionScope
+      ? { type: 'allow_session', suggestionId: sessionScope.id }
+      : { type: 'allow_once' },
     { runId: request.runId },
   );
   if (!accepted) refreshPendingInteractions();
@@ -3921,7 +3955,19 @@ for (const request of await runtime.permissions.listPending({ sessionId })) {
 Persistent `allow_always` grants are owned by the daemon and require
 `permission:grant-admin`. Use `permissions.listGrants()` and
 `revokeGrant(grantId, expectedRevision)` for revision-safe administration.
-Clients must not keep separate persistent permission rule stores.
+Clients must return one opaque `grantSuggestions[].id` from the pending request;
+they must not infer, construct, or widen a scope from the display label or input
+preview. A safe request can offer `allow_session` and `allow_always`; a risky or
+dynamic shell request deliberately omits the persistent candidate. Command
+grants match one exact normalized command/cwd/shell/background combination,
+while path grants match one tool and normalized absolute path (the future
+Write/Edit content may differ). Generic extension calls can receive only an
+exact in-memory Session grant. Raw command/argv data is not stored in the
+matcher; grants and audit contain only its fingerprint plus a bounded,
+secret-redacted operator label. Clients must not keep separate persistent
+permission rule stores. Runtime capability `runtimeAutoModeGuardrail` v3 advertises this
+opaque concrete-grant contract; restart or upgrade an older daemon instead of
+falling back to a client-side alias.
 
 ### Broker a Space keychain credential
 
@@ -4132,7 +4178,7 @@ tool arguments.
 
 ---
 
-## 24. Runtime-owned Auto Mode and plan-approval bridges (v0.7.72)
+## 24. Runtime-owned Auto Mode and plan-approval bridges (v0.7.72–v0.7.73)
 
 Auto Mode is a Runtime session contract, including in shared-daemon mode. Do
 not implement a second classifier or decide permissions from a client-side
@@ -4146,14 +4192,54 @@ await runtime.sessions.updateSettings(session.id, {
   autoModeEngine: 'llm',
   autoModeClassifierModel: 'zhipu:glm-5.2', // optional; otherwise follow the run model
   autoModeTimeoutMs: 20_000,                // positive safe integer, optional
+  autoModeSpeculativeWindowMs: 0,           // non-negative safe integer, optional
   executionCwd: projectDirectory,
 });
 ```
 
-`autoModeClassifierModel` and `autoModeTimeoutMs` are durable session settings
-in inline, Worker, and daemon forms. A `null` patch removes either optional
-override; a zero, negative, fractional, or unsafe timeout is rejected. Daemon
-capability discovery advertises both fields in `sharedSessionSettings.keys`.
+All three Auto fields are durable session settings in inline, Worker, and
+daemon forms. A `null` patch removes an optional override. Timeout must be a
+positive safe integer; speculative window must be non-negative, so `0` is a
+valid request to wait for the actual verdict. Daemon capability discovery
+advertises all fields in `sharedSessionSettings.keys`.
+
+SDK hosts that need config precedence without creating a REPL can reuse the
+same typed resolver as KodaX:
+
+```ts
+import {
+  loadAutoModeSettings,
+  resolveAutoModeSettings,
+  type ResolveAutoModeSettingsInput,
+} from '@kodax-ai/kodax/repl';
+
+const persisted = loadAutoModeSettings(process.env);
+const preview = resolveAutoModeSettings({
+  settings: { engine: 'llm', speculativeWindowMs: 0 },
+  env: process.env,
+});
+```
+
+`resolveAutoModeSettings()` is pure. `loadAutoModeSettings()` reads the KodaX
+config once and delegates to that resolver; `loadConfig()` declares and
+returns the same optional `autoMode` object.
+
+Starting with the v0.7.73 patch, `permissionMode: 'auto'` with an omitted
+`autoModeEngine` still means the documented `llm` default and is still owned by
+Runtime. If neither `autoModeClassifierModel` nor the effective run/session/
+Runtime model exists, `runs.start()` rejects with
+`RuntimeAutoModeConfigurationError` (`code:
+'auto_mode_classifier_model_required'`, `recoverable: true`) before provider
+construction, a classifier call, or a pending permission. Blank and malformed
+classifier model specs are rejected by the same typed configuration boundary;
+a live rules-to-LLM switch is blocked rather than converted into approval work.
+
+Direct consumers of `createAutoModeToolGuardrail()` receive the same terminal
+model boundary. After resolving CLI/env/session/settings/live-default
+precedence, an empty effective model returns a local configuration `block`
+before provider lookup. It does not call `askUser`, mutate the denial or
+circuit-breaker trackers, or change the engine to rules. An explicit non-empty
+classifier override remains valid even when the main-session model is empty.
 
 The Runtime owns one serialized permission-settings stream and one shared
 engine/denial/breaker state per Session. It reuses bounded context-specific
@@ -4179,6 +4265,27 @@ spurious approval prompt. A real `escalate` uses the existing shared
 it. Hosts should subscribe to permission events to display such a request, but
 must not treat a missing request as an error for a safe tool call.
 
+The classifier deadline remains 20 seconds by default and includes connection
+setup, provider Retry-After/backoff, inference, and stream completion. KodaX
+does not solve timeouts by extending that deadline indefinitely. Before the
+provider call it removes assistant prose/thinking and image paths, limits each
+tool result to 2 KiB and the serialized permission-relevant transcript to
+8 KiB, then enforces 16 KiB action and 32 KiB total-prompt ceilings plus a
+256-token output cap. An oversized action or prompt escalates without a
+provider call; it is never truncated into an automatic allow. These limits are
+owned by `classify()` itself, so custom callers cannot accidentally bypass the
+session-history boundary.
+
+`ClassifyDecision.diagnostics` and the lower-level
+`SideQueryResult.diagnostics` expose provider, model, effective timeout,
+elapsed time, retry count/wait, and a coarse terminal phase without including
+the prompt, action, messages, or response text. `pre_output` means no non-empty
+text delta was observed; `streaming` means output began before termination.
+`firstOutputMs` and `streamMs` are present only when the provider adapter emits
+a text delta. The current provider API cannot honestly separate DNS/connect,
+TLS, provider queueing, and inference, so embedders must not infer those stages
+from `pre_output`.
+
 The permission event's `inputPreview` is a display-safe diagnostic projection:
 it is bounded, credential-redacted, valid JSON, and includes the effective
 execution directory. Use the Runtime owner’s typed tool input for execution;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kodax-ai/kodax",
-  "version": "0.7.72",
-  "description": "KodaX lightweight coding agent - TypeScript implementation with 15 built-in LLM provider aliases, published as a Node-free single-file CLI and SDK",
+  "version": "0.7.73",
+  "description": "KodaX lightweight coding agent - TypeScript implementation with 16 built-in LLM provider aliases, published as a Node-free single-file CLI and SDK",
   "type": "module",
   "private": false,
   "publishConfig": {

package/dist/chunks/argument-completer-QZETLNAB.js

@@ -1,2 +0,0 @@
-// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{Da as a,Ea as b}from"./chunk-PKQOEDHJ.js";import"./chunk-WIBLZK4G.js";import"./chunk-2RI252RN.js";import"./chunk-VVE3UM4F.js";import"./chunk-IR5KIK7E.js";import"./chunk-MVARIMQV.js";import"./chunk-VDGCGOQH.js";import"./chunk-SQODXBLX.js";import"./chunk-44QXPEEE.js";import"./chunk-GIK4SGAT.js";import"./chunk-ZJIMT5I3.js";import"./chunk-JSDLBXME.js";import"./chunk-E27LHEIP.js";import"./chunk-EDZ5KJFT.js";import"./chunk-23X6REO4.js";import"./chunk-ONUPGMER.js";export{a as ArgumentCompleter,b as createArgumentCompleter};

package/dist/chunks/chunk-23X6REO4.js

@@ -1,46 +0,0 @@
-// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{a as o}from"./chunk-ONUPGMER.js";import{AsyncLocalStorage as Be}from"node:async_hooks";var Ne=new Be;function Le(e){let t=Ne.getStore()?.credential;return t?M(e,t,new WeakMap):e}o(Le,"redactScopedProviderCredential");function M(e,t,n){if(typeof e=="string")return e.split(t).join("[REDACTED_CREDENTIAL]");if(e===null||typeof e!="object")return e;let r=n.get(e);if(r!==void 0)return r;if(e instanceof Error){let s=new Error(M(e.message,t,n));return n.set(e,s),s.name=e.name,e.stack!==void 0&&(s.stack=M(e.stack,t,n)),s}if(Array.isArray(e)){let s=[];n.set(e,s);for(let l of e)s.push(M(l,t,n));return s}let i={};n.set(e,i);for(let[s,l]of Object.entries(Object.getOwnPropertyDescriptors(e))){if(!l.enumerable||!("value"in l))continue;let u=s.split(t).join("[REDACTED_CREDENTIAL]");i[u]=M(l.value,t,n)}return i}o(M,"redactCredentialValue");function A(e,t){return`${e}/${t??""}`}o(A,"capabilityCacheKey");function je(e,t,n){return e[A(t,n)]?.rejected??[]}o(je,"getRejectedEfforts");function $e(e,t,n,r,i,s){let l=A(t,n),u=e[l],g=u?.rejected.includes(r)?u.rejected:[...u?.rejected??[],r];return{...e,[l]:{rejected:g,source:i,updatedAt:s}}}o($e,"addRejectedEffort");function Fe(e,t,n){if(!t)return{};let r={...e};return delete r[A(t,n)],r}o(Fe,"removeCacheEntry");function Ue(e){if(!e||typeof e!="object")return{};let t={};for(let[n,r]of Object.entries(e)){if(!r||typeof r!="object")continue;let i=r,s=Array.isArray(i.rejected)?i.rejected.filter(g=>typeof g=="string"):[],l=i.source==="probed"?"probed":"observed",u=typeof i.updatedAt=="string"?i.updatedAt:"";t[n]={rejected:s,source:l,updatedAt:u}}return t}o(Ue,"sanitizeCapabilityCache");import{AsyncLocalStorage as We}from"node:async_hooks";var Ve=new We,J=8,Y=32;function ze(e){if(e===void 0)return;let t=Number.parseInt(e,10);return Number.isInteger(t)&&t>0?t:void 0}o(ze,"parsePositiveInt");function qe(){let e=I()?.workflow?.maxConcurrency,t=typeof e=="number"&&Number.isInteger(e)&&e>0?e:ze(process.env.KODAX_WORKFLOW_MAX_CONCURRENCY)??J;return Math.max(1,Math.min(Y,t))}o(qe,"resolveWorkflowMaxConcurrency");function I(){return Ve.getStore()}o(I,"getRunScopedConfig");var K={transport:"native-api",conversationSemantics:"full-history",mcpSupport:"none",contextFidelity:"full",toolCallingFidelity:"full",sessionSupport:"full",longRunningSupport:"full",multimodalSupport:"none",evidenceSupport:"full"},Q={...K,multimodalSupport:"image-input"},O={transport:"cli-bridge",conversationSemantics:"last-user-message",mcpSupport:"none",contextFidelity:"lossy",toolCallingFidelity:"limited",sessionSupport:"stateless",longRunningSupport:"limited",multimodalSupport:"none",evidenceSupport:"limited"},Z={...O,multimodalSupport:"image-input"};function j(e){return{transport:e.transport,conversationSemantics:e.conversationSemantics,mcpSupport:e.mcpSupport,contextFidelity:e.contextFidelity??"full",toolCallingFidelity:e.toolCallingFidelity??"full",sessionSupport:e.sessionSupport??"full",longRunningSupport:e.longRunningSupport??"full",multimodalSupport:e.multimodalSupport??"none",evidenceSupport:e.evidenceSupport??"full"}}o(j,"normalizeCapabilityProfile");import tn from"@anthropic-ai/sdk";import{parse as $o}from"partial-json";import hn from"openai";import{ClientSideConnection as _n,PROTOCOL_VERSION as Xn,ndJsonStream as An}from"@agentclientprotocol/sdk";var Sn=String.raw`
-using System;
-using System.Runtime.InteropServices;
-using System.Text;
-public static class KodaXNativeProcessSnapshot {
-  [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Auto)]
-  private struct ProcessEntry32 {
-    public uint dwSize;
-    public uint cntUsage;
-    public uint th32ProcessID;
-    public IntPtr th32DefaultHeapID;
-    public uint th32ModuleID;
-    public uint cntThreads;
-    public uint th32ParentProcessID;
-    public int pcPriClassBase;
-    public uint dwFlags;
-    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 260)]
-    public string szExeFile;
-  }
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern IntPtr CreateToolhelp32Snapshot(uint flags, uint processId);
-  [DllImport("kernel32.dll", CharSet = CharSet.Auto, SetLastError = true)]
-  private static extern bool Process32First(IntPtr snapshot, ref ProcessEntry32 entry);
-  [DllImport("kernel32.dll", CharSet = CharSet.Auto, SetLastError = true)]
-  private static extern bool Process32Next(IntPtr snapshot, ref ProcessEntry32 entry);
-  [DllImport("kernel32.dll")]
-  private static extern bool CloseHandle(IntPtr handle);
-  public static string ReadRows() {
-    var snapshot = CreateToolhelp32Snapshot(2, 0);
-    if (snapshot == new IntPtr(-1)) return string.Empty;
-    var rows = new StringBuilder();
-    var entry = new ProcessEntry32();
-    entry.dwSize = (uint)Marshal.SizeOf(entry);
-    try {
-      if (!Process32First(snapshot, ref entry)) return string.Empty;
-      do {
-        rows.Append(entry.th32ProcessID).Append(',').Append(entry.th32ParentProcessID).Append('\n');
-        entry.dwSize = (uint)Marshal.SizeOf(entry);
-      } while (Process32Next(snapshot, ref entry));
-      return rows.ToString();
-    } finally {
-      CloseHandle(snapshot);
-    }
-  }
-}`;import ie from"node:fs";import se from"node:os";import ae from"node:path";var pt="gpt-5.4",gt="auto-gemini-3",mt=["gpt-5.4","gpt-5.3-codex","gpt-5.3-codex-spark"],ht=["auto-gemini-3","gemini-3.1-pro-preview","gemini-3-flash-preview","gemini-2.5-pro","gemini-2.5-flash"];function de(e){let t=new Set,n=[];for(let r of e){let i=r.trim();if(!i)continue;let s=i.toLowerCase();t.has(s)||(t.add(s),n.push(i))}return n}o(de,"dedupePreserveOrder");function yt(){let e=ae.join(se.homedir(),".codex","config.toml");try{return ie.readFileSync(e,"utf8").match(/^\s*model\s*=\s*"([^"]+)"/m)?.[1]?.trim()||null}catch{return null}}o(yt,"readCodexConfiguredModel");function bt(){let e=ae.join(se.homedir(),".gemini","settings.json");try{let t=JSON.parse(ie.readFileSync(e,"utf8")),n=typeof t.model=="string"?t.model.trim():"";return n||(typeof t.general?.model=="string"?t.general.model.trim():"")||null}catch{return null}}o(bt,"readGeminiConfiguredModel");function E(){return yt()||pt}o(E,"getCodexCliDefaultModel");function T(){return bt()||gt}o(T,"getGeminiCliDefaultModel");function w(){return de([E(),...mt])}o(w,"getCodexCliKnownModels");function _(){return de([T(),...ht])}o(_,"getGeminiCliKnownModels");var pr=T(),gr=_();var xr=E(),Sr=w();import{existsSync as wt,readFileSync as _t}from"node:fs";import S from"node:path";import{fileURLToPath as Xt}from"node:url";var le=["none","prompt-only","native-effort","native-budget","native-toggle","native-adaptive","unknown"],ue=["openai-responses-effort","openai-chat-effort","codex-cli-config","anthropic-output-effort","provider-budget","provider-toggle","prompt-only","none"],ce=["anthropic-adaptive","anthropic-budget","provider-budget","provider-toggle","none"],fe=["zai-glm-5.2","zai-glm-toggle","deepseek-v4-openai","deepseek-v4-anthropic","deepseek-toggle","kimi-k3","kimi-k2.7-code","kimi-hybrid-toggle","minimax-m3","minimax-m2-always","mimo-v2.5-toggle","qwen-hybrid-thinking","openai-chat-reasoning","openai-responses-reasoning","codex-cli-effort","claude-adaptive-xhigh","claude-adaptive-max","anthropic-budget","generic-thinking-toggle","none"],pe=["native","image-input-native","cli-bridge","image-input-cli-bridge"],ge=["count-tokens","models-list","minimal-message","unsupported"];function h(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}o(h,"isPlainObject");function R(e,t){if(typeof e!="string"||e.length===0)throw new Error(`provider-capabilities.json: ${t} must be a non-empty string`);return e}o(R,"requireString");function x(e,t){if(e!==void 0)return R(e,t)}o(x,"optionalString");function P(e,t){if(e!==void 0){if(typeof e!="number"||!Number.isFinite(e)||e<0)throw new Error(`provider-capabilities.json: ${t} must be a non-negative finite number`);return e}}o(P,"optionalNumber");function f(e,t){if(e!==void 0){if(typeof e!="boolean")throw new Error(`provider-capabilities.json: ${t} must be a boolean`);return e}}o(f,"optionalBoolean");function me(e,t){if(e!==void 0){if(!Array.isArray(e))throw new Error(`provider-capabilities.json: ${t} must be an array`);return e.map((n,r)=>R(n,`${t}[${r}]`))}}o(me,"optionalStringArray");function Ct(e,t){if(e===void 0)return;if(!h(e))throw new Error(`provider-capabilities.json: ${t} must be an object`);let n={};for(let[r,i]of Object.entries(e))n[r]=R(i,`${t}.${r}`);return n}o(Ct,"optionalStringMap");function Pt(e,t){if(e!==void 0){if(typeof e!="string"||!fe.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${fe.join(", ")}, got ${JSON.stringify(e)}`);return e}}o(Pt,"optionalReasoningPreset");function F(e,t){if(typeof e!="string"||!le.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${le.join(", ")}, got ${JSON.stringify(e)}`);return e}o(F,"requireReasoningCapability");function Rt(e,t){if(typeof e!="string"||!ue.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${ue.join(", ")}, got ${JSON.stringify(e)}`);return e}o(Rt,"requireEffortStrategy");function Et(e,t){if(e!==void 0){if(typeof e!="string"||!ce.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${ce.join(", ")}, got ${JSON.stringify(e)}`);return e}}o(Et,"optionalThinkingStrategy");function he(e,t){if(e===void 0)return;if(!h(e))throw new Error(`provider-capabilities.json: ${t} must be an object`);let n=Rt(e.effortStrategy,`${t}.effortStrategy`),r=Pt(e.reasoningPreset,`${t}.reasoningPreset`),i=Et(e.thinkingStrategy,`${t}.thinkingStrategy`),s=x(e.defaultEffort,`${t}.defaultEffort`),l=Ct(e.effortAliases,`${t}.effortAliases`),u=me(e.disabledEfforts,`${t}.disabledEfforts`),g=me(e.localRejectEfforts,`${t}.localRejectEfforts`),y=f(e.allowCustomEffort,`${t}.allowCustomEffort`),b=f(e.supportsReasoningEffort,`${t}.supportsReasoningEffort`),v=f(e.supportsReasoningSummary,`${t}.supportsReasoningSummary`),k=f(e.supportsEncryptedReasoningReplay,`${t}.supportsEncryptedReasoningReplay`),d=f(e.supportsAdaptiveThinking,`${t}.supportsAdaptiveThinking`),C=f(e.supportsManualThinkingBudget,`${t}.supportsManualThinkingBudget`),p=f(e.supportsDisabledThinking,`${t}.supportsDisabledThinking`),X=f(e.requiresEffortBetaHeader,`${t}.requiresEffortBetaHeader`),a={effortStrategy:n};if(r!==void 0&&(a.reasoningPreset=r),i!==void 0&&(a.thinkingStrategy=i),s!==void 0&&(a.defaultEffort=s),l!==void 0&&(a.effortAliases=l),u!==void 0&&(a.disabledEfforts=u),g!==void 0&&(a.localRejectEfforts=g),e.supportedEfforts!==void 0){if(!Array.isArray(e.supportedEfforts))throw new Error(`provider-capabilities.json: ${t}.supportedEfforts must be an array`);a.supportedEfforts=e.supportedEfforts.map((c,m)=>{if(!h(c))throw new Error(`provider-capabilities.json: ${t}.supportedEfforts[${m}] must be an object`);return{value:R(c.value,`${t}.supportedEfforts[${m}].value`),...x(c.description,`${t}.supportedEfforts[${m}].description`)!==void 0?{description:x(c.description,`${t}.supportedEfforts[${m}].description`)}:{},...f(c.isDefault,`${t}.supportedEfforts[${m}].isDefault`)!==void 0?{isDefault:f(c.isDefault,`${t}.supportedEfforts[${m}].isDefault`)}:{},...f(c.isUserVisible,`${t}.supportedEfforts[${m}].isUserVisible`)!==void 0?{isUserVisible:f(c.isUserVisible,`${t}.supportedEfforts[${m}].isUserVisible`)}:{}}})}if(e.budgetByEffort!==void 0){if(!h(e.budgetByEffort))throw new Error(`provider-capabilities.json: ${t}.budgetByEffort must be an object`);let c={};for(let[m,G]of Object.entries(e.budgetByEffort))c[m]=P(G,`${t}.budgetByEffort.${m}`)??0;a.budgetByEffort=c}return y!==void 0&&(a.allowCustomEffort=y),b!==void 0&&(a.supportsReasoningEffort=b),v!==void 0&&(a.supportsReasoningSummary=v),k!==void 0&&(a.supportsEncryptedReasoningReplay=k),d!==void 0&&(a.supportsAdaptiveThinking=d),C!==void 0&&(a.supportsManualThinkingBudget=C),p!==void 0&&(a.supportsDisabledThinking=p),X!==void 0&&(a.requiresEffortBetaHeader=X),a}o(he,"validateReasoningProfile");function ye(e,t){let n=e.reasoningProfile,r=e.reasoningCapabilityV2;if(n!==void 0&&r!==void 0)throw new Error(`provider-capabilities.json: ${t} must not define both reasoningProfile and deprecated reasoningCapabilityV2`);return n!==void 0?he(n,`${t}.reasoningProfile`):he(r,`${t}.reasoningCapabilityV2`)}o(ye,"validateReasoningProfileField");function Tt(e,t){if(typeof e!="string"||!pe.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${pe.join(", ")}, got ${JSON.stringify(e)}`);return e}o(Tt,"requireProfileName");function xt(e,t){if(typeof e!="string"||!ge.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${ge.join(", ")}, got ${JSON.stringify(e)}`);return e}o(xt,"requireVerifyStrategy");function St(e,t){if(!h(e))throw new Error(`provider-capabilities.json: ${t} must be an object`);let n=R(e.id,`${t}.id`),r=x(e.wireModel,`${t}.wireModel`),i=x(e.displayName,`${t}.displayName`),s=P(e.contextWindow,`${t}.contextWindow`),l=P(e.maxOutputTokens,`${t}.maxOutputTokens`),u=P(e.thinkingBudgetCap,`${t}.thinkingBudgetCap`),g=f(e.replayReasoningContent,`${t}.replayReasoningContent`),y=f(e.strictThinkingSignature,`${t}.strictThinkingSignature`),b=P(e.streamMaxDurationMs,`${t}.streamMaxDurationMs`),v=e.reasoningCapability===void 0?void 0:F(e.reasoningCapability,`${t}.reasoningCapability`),k=ye(e,t),d={id:n};return r!==void 0&&(d.wireModel=r),i!==void 0&&(d.displayName=i),s!==void 0&&(d.contextWindow=s),l!==void 0&&(d.maxOutputTokens=l),u!==void 0&&(d.thinkingBudgetCap=u),v!==void 0&&(d.reasoningCapability=v),k!==void 0&&(d.reasoningProfile=k),g!==void 0&&(d.replayReasoningContent=g),y!==void 0&&(d.strictThinkingSignature=y),b!==void 0&&(d.streamMaxDurationMs=b),d}o(St,"validateModelDescriptor");function Mt(e,t){if(e===void 0)return;if(!h(e))throw new Error(`provider-capabilities.json: ${t} must be an object`);let n={};for(let[r,i]of Object.entries(e))n[r]=F(i,`${t}.${r}`);return n}o(Mt,"validateModelReasoningCapabilities");function Kt(e,t){if(!h(e))throw new Error(`provider-capabilities.json: providers.${t} must be an object`);let n=f(e.cliBridge,`providers.${t}.cliBridge`),r=R(e.apiKeyEnv,`providers.${t}.apiKeyEnv`),i=F(e.reasoningCapability,`providers.${t}.reasoningCapability`),s=ye(e,`providers.${t}`),l=Tt(e.capabilityProfile,`providers.${t}.capabilityProfile`),u=xt(e.verifyStrategy,`providers.${t}.verifyStrategy`);if(n&&u!=="unsupported")throw new Error(`provider-capabilities.json: providers.${t} is a cliBridge entry but verifyStrategy="${u}" \u2014 must be "unsupported" (CLI binary owns credentials)`);let g=P(e.contextWindow,`providers.${t}.contextWindow`),y=P(e.maxOutputTokens,`providers.${t}.maxOutputTokens`),b=P(e.thinkingBudgetCap,`providers.${t}.thinkingBudgetCap`),v=f(e.supportsThinking,`providers.${t}.supportsThinking`),k=Mt(e.modelReasoningCapabilities,`providers.${t}.modelReasoningCapabilities`),d=x(e.model,`providers.${t}.model`);if(n&&(d!==void 0||e.models!==void 0))throw new Error(`provider-capabilities.json: providers.${t} is a cliBridge entry but defines model/models \u2014 must be omitted (filled at load time)`);if(!n&&d===void 0)throw new Error(`provider-capabilities.json: providers.${t}.model is required (only cliBridge entries may omit)`);let C;if(e.models!==void 0){if(!Array.isArray(e.models))throw new Error(`provider-capabilities.json: providers.${t}.models must be an array`);C=e.models.map((a,c)=>St(a,`providers.${t}.models[${c}]`));let X=new Set([...d===void 0?[]:[d],...C.map(a=>a.id)]);for(let[a,c]of C.entries())if(c.wireModel!==void 0&&!X.has(c.wireModel))throw new Error(`provider-capabilities.json: providers.${t}.models[${a}].wireModel must reference a declared model, got ${JSON.stringify(c.wireModel)}`)}let p={apiKeyEnv:r,reasoningCapability:i,capabilityProfile:l,verifyStrategy:u};return s!==void 0&&(p.reasoningProfile=s),d!==void 0&&(p.model=d),C!==void 0&&(p.models=C),g!==void 0&&(p.contextWindow=g),y!==void 0&&(p.maxOutputTokens=y),b!==void 0&&(p.thinkingBudgetCap=b),v!==void 0&&(p.supportsThinking=v),k!==void 0&&(p.modelReasoningCapabilities=k),n&&(p.cliBridge=!0),p}o(Kt,"validateProviderEntry");function be(e){if(!h(e))throw new Error("provider-capabilities.json: root must be an object");if(e.version!==1)throw new Error(`provider-capabilities.json: version must be 1, got ${JSON.stringify(e.version)}`);let t=R(e.updatedAt,"updatedAt");if(!h(e.providers))throw new Error("provider-capabilities.json: providers must be an object");let n={};for(let[r,i]of Object.entries(e.providers))n[r]=Kt(i,r);return{version:1,updatedAt:t,providers:n}}o(be,"validateProviderCapabilitiesJson");var At=Object.freeze({native:K,"image-input-native":Q,"cli-bridge":O,"image-input-cli-bridge":Z}),L=null;function It(){if(process.env.KODAX_BUNDLED==="true")return S.join(S.dirname(process.execPath),"provider-capabilities.json");let e=S.dirname(Xt(import.meta.url)),t=[S.join(e,"provider-capabilities.json"),S.join(S.dirname(e),"provider-capabilities.json")];for(let n of t)if(wt(n))return n;return t[0]}o(It,"resolveJsonPath");function Ot(e){if(e.models){for(let t of e.models)t.reasoningProfile&&ve(t.reasoningProfile);for(let t of e.models)Object.freeze(t);Object.freeze(e.models)}return e.reasoningProfile&&ve(e.reasoningProfile),e.modelReasoningCapabilities&&Object.freeze(e.modelReasoningCapabilities),Object.freeze(e)}o(Ot,"deepFreezeSnapshot");function ve(e){if(e.supportedEfforts){for(let t of e.supportedEfforts)Object.freeze(t);Object.freeze(e.supportedEfforts)}e.budgetByEffort&&Object.freeze(e.budgetByEffort),e.effortAliases&&Object.freeze(e.effortAliases),e.disabledEfforts&&Object.freeze(e.disabledEfforts),e.localRejectEfforts&&Object.freeze(e.localRejectEfforts),Object.freeze(e)}o(ve,"freezeReasoningProfile");function Dt(e){if(e==="gemini-cli"){let t=T();return{model:t,models:_().filter(n=>n!==t).map(n=>({id:n}))}}if(e==="codex-cli"){let t=E();return{model:t,models:w().filter(n=>n!==t).map(n=>({id:n}))}}throw new Error(`provider-capabilities loader: unknown cliBridge provider '${e}'`)}o(Dt,"resolveCliBridgeModels");function Bt(e,t){let n=At[t.capabilityProfile];if(!n)throw new Error(`provider-capabilities loader: unknown capabilityProfile '${t.capabilityProfile}' for provider '${e}'`);if(t.cliBridge){let i=Dt(e),s={model:i.model,models:i.models,apiKeyEnv:t.apiKeyEnv,reasoningCapability:t.reasoningCapability,capabilityProfile:n,verifyStrategy:t.verifyStrategy};return t.reasoningProfile!==void 0&&(s.reasoningProfile=t.reasoningProfile),t.supportsThinking!==void 0&&(s.supportsThinking=t.supportsThinking),s}let r={model:t.model,apiKeyEnv:t.apiKeyEnv,reasoningCapability:t.reasoningCapability,capabilityProfile:n,verifyStrategy:t.verifyStrategy};return t.reasoningProfile!==void 0&&(r.reasoningProfile=t.reasoningProfile),t.models!==void 0&&(r.models=t.models),t.modelReasoningCapabilities!==void 0&&(r.modelReasoningCapabilities=t.modelReasoningCapabilities),t.contextWindow!==void 0&&(r.contextWindow=t.contextWindow),t.maxOutputTokens!==void 0&&(r.maxOutputTokens=t.maxOutputTokens),t.thinkingBudgetCap!==void 0&&(r.thinkingBudgetCap=t.thinkingBudgetCap),t.supportsThinking!==void 0&&(r.supportsThinking=t.supportsThinking),r}o(Bt,"buildSnapshot");function ke(){if(L)return L;let e=It(),t;try{let i=_t(e,"utf8");t=JSON.parse(i)}catch(i){let s=i instanceof Error?i.message:String(i);throw new Error(`provider-capabilities loader: failed to read ${e}: ${s}`)}let n=be(t),r={};for(let[i,s]of Object.entries(n.providers))r[i]=Ot(Bt(i,s));return L=Object.freeze(r),L}o(ke,"getProviderSnapshots");import Yr from"@anthropic-ai/sdk";var V=ke();var Ce=process.env.KODAX_PROVIDER??"zhipu-coding";export{Le as a,je as b,$e as c,Fe as d,Ue as e,qe as f,j as g,V as h};