@kodax-ai/kodax 0.7.72 → 0.7.74

package/dist/types-chunks/{base.d-Cz_rwpOi.d.ts → base.d-ChvpaKjZ.d.ts}

@@ -1,4 +1,4 @@
-import { q as KodaXProviderConfig, k as KodaXMessage, a1 as KodaXToolDefinition, H as KodaXReasoningRequest, y as KodaXProviderStreamOptions, N as KodaXStreamResult, a7 as KodaXVerifyCredentialResult, l as KodaXModelDescriptor, p as KodaXProviderCapabilityProfile, B as KodaXReasoningCapability, G as KodaXReasoningProfile, n as KodaXNormalizedReasoningRequest, a9 as KodaXWireReasoningEffort } from './types.d-Cqaw71Ax.js';
+import { q as KodaXProviderConfig, k as KodaXMessage, a1 as KodaXToolDefinition, H as KodaXReasoningRequest, y as KodaXProviderStreamOptions, N as KodaXStreamResult, a7 as KodaXVerifyCredentialResult, l as KodaXModelDescriptor, p as KodaXProviderCapabilityProfile, B as KodaXReasoningCapability, G as KodaXReasoningProfile, n as KodaXNormalizedReasoningRequest, a9 as KodaXWireReasoningEffort } from './types.d-CSmF0t0n.js';
 
 /**
  * Retry-After header parsing — FEATURE_130 (v0.7.36).

package/dist/types-chunks/{bash-prefix-extractor.d-CHJO5y94.d.ts → bash-prefix-extractor.d-r1beOESM.d.ts}

@@ -1,10 +1,10 @@
-import { br as KodaXGoalState, a8 as AgentMessage, du as StopHookFn, bL as KodaXSessionLineage, k as AgentActorStore, aC as AgentTurnExecutor, t as AgentBudgetPort, h as AgentActorClient, N as AgentExecutionResult, V as AgentExecutorPlaneBinding, bx as KodaXJsonValue, bl as KodaXExtensionSessionRecord, f as Agent, dR as WorkflowIsolation, bm as KodaXExtensionSessionState, bC as KodaXSessionArtifactLedgerEntry, de as SessionErrorMetadata, bT as KodaXSessionScope, bU as KodaXSessionStorage, ci as MemoryContextIdentity, cu as MemoryPack, aK as AskUserQuestionOptions, aG as AskUserAnswer, aI as AskUserMultiOptions, dO as WorkflowEventCorrelation, aS as CompactionUpdate, e3 as WorkflowProcessEvent, dN as WorkflowEvent, cI as MemoryReviewPlan, bz as KodaXMemoryOutcomeDigest, ba as Guardrail, aX as DiscoveredInstance, bv as KodaXInputArtifact, cJ as MemoryReviewRunner } from './types.d-DH1mvdcl.js';
-import { a0 as KodaXTokenUsage, k as KodaXMessage, a1 as KodaXToolDefinition, a9 as KodaXWireReasoningEffort, U as KodaXTaskRoutingDecision, V as KodaXTaskType, W as KodaXTaskWorkIntent, Q as KodaXTaskComplexity, L as KodaXRiskLevel, h as KodaXHarnessProfile, f as KodaXExecutionMode, b as KodaXChildFanoutClass, F as KodaXReasoningMode, J as KodaXReviewScale } from './types.d-Cqaw71Ax.js';
+import { bs as KodaXGoalState, a8 as AgentMessage, dv as StopHookFn, bM as KodaXSessionLineage, k as AgentActorStore, aC as AgentTurnExecutor, t as AgentBudgetPort, h as AgentActorClient, N as AgentExecutionResult, V as AgentExecutorPlaneBinding, by as KodaXJsonValue, bm as KodaXExtensionSessionRecord, f as Agent, dS as WorkflowIsolation, bn as KodaXExtensionSessionState, bD as KodaXSessionArtifactLedgerEntry, df as SessionErrorMetadata, bU as KodaXSessionScope, bV as KodaXSessionStorage, cj as MemoryContextIdentity, cv as MemoryPack, aK as AskUserQuestionOptions, aG as AskUserAnswer, aI as AskUserMultiOptions, dP as WorkflowEventCorrelation, aT as CompactionUpdate, e4 as WorkflowProcessEvent, dO as WorkflowEvent, cJ as MemoryReviewPlan, bA as KodaXMemoryOutcomeDigest, bb as Guardrail, aY as DiscoveredInstance, bw as KodaXInputArtifact, cK as MemoryReviewRunner } from './types.d-sRLugmjy.js';
+import { a0 as KodaXTokenUsage, k as KodaXMessage, a1 as KodaXToolDefinition, a9 as KodaXWireReasoningEffort, U as KodaXTaskRoutingDecision, V as KodaXTaskType, W as KodaXTaskWorkIntent, Q as KodaXTaskComplexity, L as KodaXRiskLevel, h as KodaXHarnessProfile, f as KodaXExecutionMode, b as KodaXChildFanoutClass, F as KodaXReasoningMode, J as KodaXReviewScale } from './types.d-CSmF0t0n.js';
 import { d as SkillDynamicContextExecutor, I as ISkillRegistry } from './types.d-DCQVBqVn.js';
 import { Diagnostic, Position, Location, Hover, DocumentSymbol, SymbolInformation, WorkspaceSymbol, CallHierarchyItem, CallHierarchyIncomingCall, CallHierarchyOutgoingCall } from 'vscode-languageserver-protocol';
 import { K as KodaXLlmTimeoutConfig, a as CostTracker } from './cost-tracker.d-BeaenODW.js';
 import { C as CapabilityKind, f as CapabilitySearchSnapshot, b as CapabilityResult } from './capability.d-K664nHOS.js';
-import { K as KodaXBaseProvider } from './base.d-Cz_rwpOi.js';
+import { K as KodaXBaseProvider } from './base.d-ChvpaKjZ.js';
 
 /**
  * FEATURE_192 v0.7.44 Phase C — Goal-tools execution context.
@@ -665,6 +665,7 @@ interface GoalLifecycleContext {
 interface BeforeNextTurnFnCtx {
     readonly transcript: readonly AgentMessage[];
     readonly iteration: number;
+    readonly lastTurnToolNames?: readonly string[];
 }
 type BeforeNextTurnFn = (ctx: BeforeNextTurnFnCtx) => Promise<readonly AgentMessage[]>;
 /**
@@ -869,7 +870,7 @@ declare function createExternalActorTurnExecutor(binding: AgentExecutorPlaneBind
  * configure / install / troubleshoot KodaX?" questions. Pure data + a
  * deterministic resolver — no RAG, no vector store, no network fetch.
  */
-type KodaXManualTopicId = 'overview' | 'license' | 'install' | 'quickstart' | 'providers' | 'custom-providers' | 'config' | 'permissions' | 'commands' | 'tools' | 'agents' | 'skills' | 'extensions' | 'mcp' | 'a2a' | 'repo-intelligence' | 'sessions' | 'memory' | 'doctor' | 'sdk' | 'troubleshooting';
+type KodaXManualTopicId = 'overview' | 'license' | 'install' | 'quickstart' | 'providers' | 'custom-providers' | 'config' | 'permissions' | 'commands' | 'tools' | 'agents' | 'skills' | 'extensions' | 'mcp' | 'a2a' | 'repo-intelligence' | 'sessions' | 'compaction' | 'memory' | 'doctor' | 'sdk' | 'troubleshooting';
 /** A pointer to the code/doc the topic is derived from (for traceability). */
 interface KodaXManualSource {
     readonly label: string;
@@ -1194,6 +1195,8 @@ declare function planToolExposure(input: RuntimeToolExposurePlanInput): RuntimeT
 interface CompactionAntiThrashState {
     readonly lowSavingsStreak: number;
     readonly cooldownTurnsRemaining: number;
+    readonly coveredTokensAfter?: number;
+    readonly rearmAtTokens?: number;
 }
 interface CompactionSavingsSample {
     readonly tokensBefore: number;
@@ -1210,7 +1213,7 @@ interface CompactionSavingsDecision {
     readonly lowSavings: boolean;
     readonly enteredCooldown: boolean;
 }
-type CompactionSkipReason = 'low_savings_cooldown';
+type CompactionSkipReason = 'low_savings_cooldown' | 'covered_context_unchanged';
 interface RuntimeCompactionSkippedEvent {
     readonly reason: CompactionSkipReason;
     readonly currentTokens: number;
@@ -1220,7 +1223,7 @@ interface RuntimeCompactionSkippedEvent {
     readonly lowSavingsStreak: number;
 }
 declare function createCompactionAntiThrashState(): CompactionAntiThrashState;
-declare function shouldSkipLlmCompaction(state: CompactionAntiThrashState | undefined): boolean;
+declare function shouldSkipLlmCompaction(state: CompactionAntiThrashState | undefined, currentTokens?: number): boolean;
 declare function consumeCompactionCooldown(state: CompactionAntiThrashState | undefined): CompactionAntiThrashState;
 declare function recordCompactionSavings(state: CompactionAntiThrashState | undefined, sample: CompactionSavingsSample, config?: CompactionAntiThrashConfig): CompactionSavingsDecision;
 
@@ -1598,7 +1601,14 @@ interface KodaXWorkflowEventMeta {
     readonly workflowCorrelation?: WorkflowEventCorrelation;
 }
 type KodaXTurnDeliveryKind = 'initial' | 'queued' | 'interrupt' | 'resume';
-interface KodaXLiveEventMeta {
+interface KodaXContextIdentity {
+    readonly contextId: string;
+    readonly contextKind: 'root' | 'child';
+    readonly parentContextId?: string;
+    readonly agentId?: string;
+    readonly contextRevision: number;
+}
+interface KodaXLiveEventMeta extends Partial<KodaXContextIdentity> {
     readonly sessionId: string;
     readonly seq: number;
     readonly turnId: string;
@@ -1630,6 +1640,8 @@ interface KodaXActivityEventMeta extends KodaXWorkflowEventMeta, Partial<KodaXLi
      * session. Absent on paths that do not yet thread the resolved session id.
      */
     readonly sessionId?: string;
+    /** Exact queue identities consumed by a mid-turn user-message boundary. */
+    readonly queuedMessageIds?: readonly string[];
     /**
      * FEATURE_247 (R8) — SDK-consumer agent profile that produced this event.
      * Absent ⇒ default Coding Agent (or an event emitted before a profile is known).
@@ -1650,6 +1662,21 @@ interface KodaXWorkflowAgentDigestEvent {
 interface KodaXToolEventMeta extends KodaXActivityEventMeta {
     readonly toolId?: string;
 }
+interface KodaXContextCompactionFinishedEvent extends Partial<KodaXLiveEventMeta> {
+    readonly source: 'manual' | 'automatic_threshold' | 'physical_capacity';
+    readonly tokensBefore: number;
+    readonly tokensAfter: number;
+    readonly committed: boolean;
+    readonly elapsedMs: number;
+    readonly strategy?: 'full_prefix' | 'map_reduce';
+    readonly effectiveTriggerTokens?: number;
+    readonly protectedBudgetTokens?: number;
+    readonly fixedInputTokens?: number;
+    readonly eligibleTokens?: number;
+    readonly rawTailTokens?: number;
+    readonly summaryTokens?: number;
+    readonly queryLedgerTokens?: number;
+}
 interface KodaXSidecarMessageEvent {
     readonly source: 'sidecar-verifier';
     readonly verdict: 'revise' | 'blocked';
@@ -1742,7 +1769,9 @@ interface KodaXEvents {
         tokensAfter: number;
     } & Partial<KodaXLiveEventMeta>) => void;
     /** Emitted with the rewritten message history when automatic compaction changes the context. */
-    onCompactedMessages?: (messages: KodaXMessage[], update?: CompactionUpdate, meta?: KodaXActivityEventMeta) => void;
+    onCompactedMessages?: (messages: KodaXMessage[], update?: CompactionUpdate, meta?: KodaXActivityEventMeta) => void | Promise<void>;
+    /** Canonical, post-commit compaction fact. Legacy callbacks are projections. */
+    onContextCompactionFinished?: (event: KodaXContextCompactionFinishedEvent) => void;
     /** Emitted to silently dismiss the compaction UI if compaction aborted or completed without changes */
     onCompactEnd?: (meta?: KodaXActivityEventMeta) => void;
     /** Whether the caller has queued follow-up input waiting for the next round */
@@ -2781,16 +2810,18 @@ interface KodaXSelfManualConfig {
  * over both the adaptive default and `~/.kodax/config.json`. Lets an
  * embedder that calls `runManagedTask` in-process pin the context window /
  * trigger for a model the built-in capability table doesn't cover (or that
- * it resolves through a custom provider), or disable auto-compaction for a
- * run — without writing to the user's home-dir config file. Omitted fields
+ * it resolves through a custom provider), or tune the always-on compaction
+ * policy for a run — without writing to the user's home-dir config file. Omitted fields
  * fall through to the normal resolution cascade.
  */
 interface KodaXCompactionOverride {
     /** Override the resolved provider context window, in tokens. */
     contextWindow?: number;
-    /** Override the auto-compaction trigger percentage (0-100). */
+    /** Override the auto-compaction trigger percentage (normalized to 15-90). */
     triggerPercent?: number;
-    /** Set false to disable automatic compaction for this run. */
+    /** Optional absolute token threshold. Missing/zero is inactive. */
+    triggerTokens?: number;
+    /** @deprecated Automatic large compaction is always enabled. */
     enabled?: boolean;
 }
 /**
@@ -3176,6 +3207,8 @@ interface KodaXToolExecutionContext {
         readonly content: string;
         readonly evidenceRefs: readonly string[];
     } | undefined>;
+    /** Exact persisted history loader for the current root or isolated worker Session. */
+    loadSessionHistory?: () => Promise<KodaXSessionLineage | null>;
     /** Git root directory - Git 鏍圭洰褰?*/
     gitRoot?: string;
     /**
@@ -3222,6 +3255,8 @@ interface KodaXToolExecutionContext {
     assertReadablePath?: (candidate: string) => void;
     /** Host tool visibility ceiling inherited by child agents. */
     toolVisibilityPolicy?: KodaXToolVisibilityPolicy;
+    /** Static caller exclusions applied before constructing a model-visible tool schema. */
+    excludeTools?: readonly string[];
     /** Maximum physical input capacity of the active model request. */
     maximumInputTokens?: number;
     /** Remaining capacity for the complete tool-result batch in this request. */
@@ -3294,6 +3329,7 @@ interface KodaXToolExecutionContext {
         readonly effort?: KodaXWireReasoningEffort;
         readonly repoIntelligenceMode?: KodaXRepoIntelligenceMode;
         readonly repoIntelligenceTrace?: boolean;
+        readonly compaction?: Readonly<KodaXCompactionOverride>;
     };
     /** Parent SDK/REPL callback surface used to preserve nested Agent telemetry. */
     parentEvents?: KodaXEvents;
@@ -3653,5 +3689,5 @@ interface CreateBashPrefixExtractorOptions {
  */
 declare function createBashPrefixExtractor(opts: CreateBashPrefixExtractorOptions): BashPrefixExtractor;
 
-export { ALWAYS_RESIDENT_TOOL_NAMES as A, BASH_POLICY_SPEC as B, LSP_SERVERS as aQ, LspService as aS, createExternalActorTurnExecutor as bA, createLocalCodingActorControl as bB, createRuntimeContextBudgetSnapshot as bC, decideWorkflowInvocation as bD, drainPendingSwaps as bE, estimateToolSchemaTokens as bF, extractCommandPrefix as bG, getDefaultLspService as bH, hasExplicitNaturalLanguageWorkflowIntent as bI, hasPendingSwap as bJ, makeDisabledGoalToolsContext as bK, normalizeKodaXAgentMode as bL, planToolExposure as bM, providerResilienceConfigFromTimeouts as bN, recordCompactionSavings as bO, resolveConstructedAgent as bP, shouldSkipLlmCompaction as bQ, shutdownDefaultLspService as bR, withGoalBeforeNextTurn as bS, withGoalStopHook as bT, workflowStartOutcomeConsumesTurn as bU, buildGoalRuntimeBinding as bw, consumeCompactionCooldown as bx, createBashPrefixExtractor as by, createCompactionAntiThrashState as bz, CodingActorSession as d };
-export type { KodaXOptions as $, CapabilityRuntimeContract as C, DiagnosticsRequest as D, ExtensionRuntimeContract as E, FailureStage as F, GoalBlockedResult as G, KodaXChildContextBundle as H, KodaXChildExecutionResult as I, KodaXCompactionOverride as J, KodaXActivityEventMeta as K, KodaXContextOptions as L, KodaXContextTokenSnapshot as M, KodaXEffectiveTaskConfig as N, KodaXEvents as O, KodaXLiveEventMeta as P, KodaXManagedBudgetSnapshot as Q, KodaXManagedProtocolPayload as R, KodaXManagedTask as S, KodaXManagedTaskRuntimeState as T, KodaXManagedTaskStatusEvent as U, KodaXManualIndexTopic as V, KodaXManualSource as W, KodaXManualTopic as X, KodaXManualTopicId as Y, KodaXManualTopicInput as Z, KodaXMemoryStrategy as _, BashPrefixExtractor as a, RecoveryResult as a$, KodaXOrchestrationVerdict as a0, KodaXParentReductionContract as a1, KodaXProviderPolicyHints as a2, KodaXRepoIntelligenceCapability as a3, KodaXRepoIntelligenceMode as a4, KodaXRepoIntelligenceResolvedMode as a5, KodaXRepoIntelligenceTrace as a6, KodaXRepoIntelligenceTraceEvent as a7, KodaXRepoRoutingSignals as a8, KodaXResult as a9, KodaXTaskVerificationCriterion as aA, KodaXTaskWorkItem as aB, KodaXTimeoutConfig as aC, KodaXToolEventMeta as aD, KodaXToolExecutionContext as aE, KodaXToolVisibilityMeta as aF, KodaXToolVisibilityPolicy as aG, KodaXTurnCompletedEvent as aH, KodaXTurnDeliveryKind as aI, KodaXTurnFailedEvent as aJ, KodaXTurnStartedEvent as aK, KodaXVerificationScorecard as aL, KodaXVerificationScorecardCriterion as aM, KodaXWorkflowAgentDigestEvent as aN, KodaXWorkflowEventMeta as aO, KodaXWorkflowTimeoutConfig as aP, LspServerInfo as aR, LspServiceConfig as aT, ProviderExecutionState as aU, ProviderRecoveryEvent as aV, ProviderResilienceConfig as aW, ProviderResiliencePolicy as aX, RecoveryAction as aY, RecoveryDecision as aZ, RecoveryLadderStep as a_, KodaXRoleRoundSummary as aa, KodaXRuntimeVerificationContract as ab, KodaXSelfManualConfig as ac, KodaXSessionControl as ad, KodaXSessionMutators as ae, KodaXSessionOptions as af, KodaXSidecarMessageEvent as ag, KodaXSkillDynamicContextPolicy as ah, KodaXSkillInvocationContext as ai, KodaXSkillMap as aj, KodaXSkillProjectionConfidence as ak, KodaXSkillScriptInputFile as al, KodaXSkillScriptOutputFile as am, KodaXSkillScriptRunInput as an, KodaXSkillScriptRunner as ao, KodaXTaskCapabilityHint as ap, KodaXTaskContract as aq, KodaXTaskEvidenceArtifact as ar, KodaXTaskEvidenceBundle as as, KodaXTaskEvidenceEntry as at, KodaXTaskRole as au, KodaXTaskRoleAssignment as av, KodaXTaskStatus as aw, KodaXTaskSurface as ax, KodaXTaskToolPolicy as ay, KodaXTaskVerificationContract as az, BashPrefixResult as b, ResilienceClassification as b0, ResilienceErrorClass as b1, ResolveKodaXManualInput as b2, ResolveKodaXManualOptions as b3, ResolveKodaXManualResult as b4, RuntimeCompactionSkippedEvent as b5, RuntimeContextBudgetBreakdown as b6, RuntimeContextBudgetRecommendation as b7, RuntimeContextBudgetSnapshot as b8, RuntimeContextBudgetSnapshotInput as b9, RuntimeContextOptimizationProfile as ba, RuntimeContextPressure as bb, RuntimeDefaultsSnapshot as bc, RuntimeToolExposureDecision as bd, RuntimeToolExposureMode as be, RuntimeToolExposurePlan as bf, RuntimeToolExposurePlanInput as bg, RuntimeToolExposureReason as bh, TodoItem as bi, TodoList as bj, TodoStatus as bk, ToolSideEffect as bl, WorkflowHostPolicy as bm, WorkflowInvocationAction as bn, WorkflowInvocationPolicyDecision as bo, WorkflowInvocationPolicyInput as bp, WorkflowInvocationSource as bq, WorkflowStartOutcome as br, WorkflowToolHost as bs, WorkflowToolHostInlineInput as bt, WorkflowToolHostResult as bu, WorkflowToolHostStartResult as bv, BoundExtensionRuntimeController as c, CodingActorSessionOptions as e, CompactionAntiThrashConfig as f, CompactionAntiThrashState as g, CompactionSavingsDecision as h, CompactionSavingsSample as i, CompactionSkipReason as j, CreateBashPrefixExtractorOptions as k, ExtractCommandPrefixOptions as l, GoalCompleteResult as m, GoalCreateInput as n, GoalLifecycleContext as o, GoalRuntimeBinding as p, GoalRuntimeBindingDeps as q, GoalToolsContext as r, KodaXActorHost as s, KodaXAgentMode as t, KodaXAgentProfile as u, KodaXAgentScope as v, KodaXBudgetDisclosureZone as w, KodaXBudgetExtensionRequest as x, KodaXCanonicalAgentMode as y, KodaXChildAgentResult as z };
+export { ALWAYS_RESIDENT_TOOL_NAMES as A, BASH_POLICY_SPEC as B, LSP_SERVERS as aS, LspService as aU, createBashPrefixExtractor as bA, createCompactionAntiThrashState as bB, createExternalActorTurnExecutor as bC, createLocalCodingActorControl as bD, createRuntimeContextBudgetSnapshot as bE, decideWorkflowInvocation as bF, drainPendingSwaps as bG, estimateToolSchemaTokens as bH, extractCommandPrefix as bI, getDefaultLspService as bJ, hasExplicitNaturalLanguageWorkflowIntent as bK, hasPendingSwap as bL, makeDisabledGoalToolsContext as bM, normalizeKodaXAgentMode as bN, planToolExposure as bO, providerResilienceConfigFromTimeouts as bP, recordCompactionSavings as bQ, resolveConstructedAgent as bR, shouldSkipLlmCompaction as bS, shutdownDefaultLspService as bT, withGoalBeforeNextTurn as bU, withGoalStopHook as bV, workflowStartOutcomeConsumesTurn as bW, buildGoalRuntimeBinding as by, consumeCompactionCooldown as bz, CodingActorSession as d };
+export type { KodaXManualTopicInput as $, CapabilityRuntimeContract as C, DiagnosticsRequest as D, ExtensionRuntimeContract as E, FailureStage as F, GoalBlockedResult as G, KodaXChildContextBundle as H, KodaXChildExecutionResult as I, KodaXCompactionOverride as J, KodaXActivityEventMeta as K, KodaXContextCompactionFinishedEvent as L, KodaXContextIdentity as M, KodaXContextOptions as N, KodaXContextTokenSnapshot as O, KodaXEffectiveTaskConfig as P, KodaXEvents as Q, KodaXLiveEventMeta as R, KodaXManagedBudgetSnapshot as S, KodaXManagedProtocolPayload as T, KodaXManagedTask as U, KodaXManagedTaskRuntimeState as V, KodaXManagedTaskStatusEvent as W, KodaXManualIndexTopic as X, KodaXManualSource as Y, KodaXManualTopic as Z, KodaXManualTopicId as _, BashPrefixExtractor as a, RecoveryDecision as a$, KodaXMemoryStrategy as a0, KodaXOptions as a1, KodaXOrchestrationVerdict as a2, KodaXParentReductionContract as a3, KodaXProviderPolicyHints as a4, KodaXRepoIntelligenceCapability as a5, KodaXRepoIntelligenceMode as a6, KodaXRepoIntelligenceResolvedMode as a7, KodaXRepoIntelligenceTrace as a8, KodaXRepoIntelligenceTraceEvent as a9, KodaXTaskToolPolicy as aA, KodaXTaskVerificationContract as aB, KodaXTaskVerificationCriterion as aC, KodaXTaskWorkItem as aD, KodaXTimeoutConfig as aE, KodaXToolEventMeta as aF, KodaXToolExecutionContext as aG, KodaXToolVisibilityMeta as aH, KodaXToolVisibilityPolicy as aI, KodaXTurnCompletedEvent as aJ, KodaXTurnDeliveryKind as aK, KodaXTurnFailedEvent as aL, KodaXTurnStartedEvent as aM, KodaXVerificationScorecard as aN, KodaXVerificationScorecardCriterion as aO, KodaXWorkflowAgentDigestEvent as aP, KodaXWorkflowEventMeta as aQ, KodaXWorkflowTimeoutConfig as aR, LspServerInfo as aT, LspServiceConfig as aV, ProviderExecutionState as aW, ProviderRecoveryEvent as aX, ProviderResilienceConfig as aY, ProviderResiliencePolicy as aZ, RecoveryAction as a_, KodaXRepoRoutingSignals as aa, KodaXResult as ab, KodaXRoleRoundSummary as ac, KodaXRuntimeVerificationContract as ad, KodaXSelfManualConfig as ae, KodaXSessionControl as af, KodaXSessionMutators as ag, KodaXSessionOptions as ah, KodaXSidecarMessageEvent as ai, KodaXSkillDynamicContextPolicy as aj, KodaXSkillInvocationContext as ak, KodaXSkillMap as al, KodaXSkillProjectionConfidence as am, KodaXSkillScriptInputFile as an, KodaXSkillScriptOutputFile as ao, KodaXSkillScriptRunInput as ap, KodaXSkillScriptRunner as aq, KodaXTaskCapabilityHint as ar, KodaXTaskContract as as, KodaXTaskEvidenceArtifact as at, KodaXTaskEvidenceBundle as au, KodaXTaskEvidenceEntry as av, KodaXTaskRole as aw, KodaXTaskRoleAssignment as ax, KodaXTaskStatus as ay, KodaXTaskSurface as az, BashPrefixResult as b, RecoveryLadderStep as b0, RecoveryResult as b1, ResilienceClassification as b2, ResilienceErrorClass as b3, ResolveKodaXManualInput as b4, ResolveKodaXManualOptions as b5, ResolveKodaXManualResult as b6, RuntimeCompactionSkippedEvent as b7, RuntimeContextBudgetBreakdown as b8, RuntimeContextBudgetRecommendation as b9, RuntimeContextBudgetSnapshot as ba, RuntimeContextBudgetSnapshotInput as bb, RuntimeContextOptimizationProfile as bc, RuntimeContextPressure as bd, RuntimeDefaultsSnapshot as be, RuntimeToolExposureDecision as bf, RuntimeToolExposureMode as bg, RuntimeToolExposurePlan as bh, RuntimeToolExposurePlanInput as bi, RuntimeToolExposureReason as bj, TodoItem as bk, TodoList as bl, TodoStatus as bm, ToolSideEffect as bn, WorkflowHostPolicy as bo, WorkflowInvocationAction as bp, WorkflowInvocationPolicyDecision as bq, WorkflowInvocationPolicyInput as br, WorkflowInvocationSource as bs, WorkflowStartOutcome as bt, WorkflowToolHost as bu, WorkflowToolHostInlineInput as bv, WorkflowToolHostResult as bw, WorkflowToolHostStartResult as bx, BoundExtensionRuntimeController as c, CodingActorSessionOptions as e, CompactionAntiThrashConfig as f, CompactionAntiThrashState as g, CompactionSavingsDecision as h, CompactionSavingsSample as i, CompactionSkipReason as j, CreateBashPrefixExtractorOptions as k, ExtractCommandPrefixOptions as l, GoalCompleteResult as m, GoalCreateInput as n, GoalLifecycleContext as o, GoalRuntimeBinding as p, GoalRuntimeBindingDeps as q, GoalToolsContext as r, KodaXActorHost as s, KodaXAgentMode as t, KodaXAgentProfile as u, KodaXAgentScope as v, KodaXBudgetDisclosureZone as w, KodaXBudgetExtensionRequest as x, KodaXCanonicalAgentMode as y, KodaXChildAgentResult as z };

package/dist/types-chunks/{capability-learning.d-_lR0J4iR.d.ts → capability-learning.d-DPrYxRjF.d.ts}

@@ -1,4 +1,4 @@
-import { G as KodaXReasoningProfile } from './types.d-Cqaw71Ax.js';
+import { G as KodaXReasoningProfile } from './types.d-CSmF0t0n.js';
 
 type CapabilityCacheSource = 'observed' | 'probed';
 interface CapabilityCacheEntry {

package/dist/types-chunks/{capsule.d-DxtdE-GD.d.ts → capsule.d-zeqV4IQX.d.ts}

@@ -1,5 +1,5 @@
-import { k as KodaXMessage } from './types.d-Cqaw71Ax.js';
-import { a8 as AgentMessage, dd as SessionEntry, db as Session, df as SessionExtension, bL as KodaXSessionLineage, bx as KodaXJsonValue, aP as CompactionDetails, bk as KodaXCompactMemorySeed, bH as KodaXSessionEntry, bV as KodaXSessionTreeNode, bK as KodaXSessionLabelEntry, bJ as KodaXSessionGoalEntry, bE as KodaXSessionClientNoticeEntry, bR as KodaXSessionRewindMarkerEntry, bM as KodaXSessionMemoryOutcomeDigestEntry, bN as KodaXSessionMemoryReviewReceiptEntry, bQ as KodaXSessionNavigationOptions, bC as KodaXSessionArtifactLedgerEntry, b8 as FileOperations, dU as WorkflowMeta, dV as WorkflowModelHint, dW as WorkflowModule } from './types.d-DH1mvdcl.js';
+import { k as KodaXMessage } from './types.d-CSmF0t0n.js';
+import { a8 as AgentMessage, de as SessionEntry, dc as Session, dg as SessionExtension, bM as KodaXSessionLineage, by as KodaXJsonValue, aP as CompactionDetails, bl as KodaXCompactMemorySeed, bI as KodaXSessionEntry, bW as KodaXSessionTreeNode, bL as KodaXSessionLabelEntry, bK as KodaXSessionGoalEntry, bF as KodaXSessionClientNoticeEntry, bS as KodaXSessionRewindMarkerEntry, bN as KodaXSessionMemoryOutcomeDigestEntry, bO as KodaXSessionMemoryReviewReceiptEntry, bR as KodaXSessionNavigationOptions, bD as KodaXSessionArtifactLedgerEntry, b9 as FileOperations, dV as WorkflowMeta, dW as WorkflowModelHint, dX as WorkflowModule } from './types.d-sRLugmjy.js';
 
 /**
  * @kodax-ai/agent Constants
@@ -583,6 +583,14 @@ declare function applySessionCompaction(lineage: KodaXSessionLineage | undefined
  * defines the helper; no production caller yet.
  */
 declare function applyLineageTruncation(lineage: KodaXSessionLineage | undefined, trimmedMessages: KodaXMessage[]): KodaXSessionLineage;
+/**
+ * Replace message content of entries in old islands (not the active island)
+ * with a lightweight placeholder.  This releases large tool_result payloads
+ * from memory while preserving the entry skeleton for tree structure.
+ *
+ * Hosts call this only after the exact lineage has been durably committed.
+ */
+declare function evictOldIslandMessageContent(lineage: KodaXSessionLineage): KodaXSessionLineage;
 declare function findPreviousUserEntryId(lineage: KodaXSessionLineage): string | null;
 declare function rewindSessionLineage(lineage: KodaXSessionLineage, targetEntryId: string): KodaXSessionLineage | null;
 declare function forkSessionLineage(lineage: KodaXSessionLineage, selector?: string): KodaXSessionLineage | null;
@@ -760,5 +768,5 @@ declare function buildWorkflowCapsuleIntent(manifest: {
     readonly originalRequest?: string;
 }): WorkflowCapsuleIntent;
 
-export { createSessionLineage as $, DefaultSummaryCompaction as D, KODAX_API_MIN_INTERVAL as K, LINEAGE_ENTRY_TYPES as L, actorQueueId as N, appendSessionLineageLabel as O, PROMISE_PATTERN as P, applyLineageTruncation as Q, applySessionCompaction as R, archiveOldIslands as S, assertRestrictedWorkflowQuality as T, buildSessionTree as U, buildWorkflowCapsuleIntent as V, WORKFLOW_CAPSULE_API_VERSION as W, cleanupIncompleteToolCalls as X, countActiveLineageMessages as Y, countTokens as Z, _resetActiveRootQueueRoutesForTests as _, createWorkflowCapsule as a0, createWorkflowModuleFromCapsule as a1, estimateTokens as a2, extractArtifactLedger as a3, extractFileOps as a4, extractTitleFromMessages as a5, findPreviousUserEntryId as a6, forkSessionLineage as a7, generateSessionId as a8, getAgentConfigHome as a9, getAgentConfigPath as aa, getAppDataDir as ab, getSessionLineagePath as ac, getSessionMessagesFromLineage as ad, isPathInsideDirectory as ae, lintRestrictedWorkflowSource as af, mergeArtifactLedger as ag, mergeFileOps as ah, registerActiveRootQueueRoute as ai, resolveActiveRootQueueRoute as aj, resolveExecutionPath as ak, resolveSessionLineageTarget as al, rewindSessionLineage as am, setAgentConfigHome as an, setSessionLineageActiveEntry as ao, validateAndFixToolHistory as ap, validateWorkflowCapsule as aq, validateWorkflowScriptManifest as ar, KODAX_DEFAULT_TIMEOUT as f, KODAX_HARD_TIMEOUT as g, KODAX_MAX_INCOMPLETE_RETRIES as h, KODAX_MAX_MAXTOKENS_RETRIES as i, KODAX_MAX_RETRIES as j, KODAX_MAX_TOKENS as k, KODAX_RETRY_BASE_DELAY as l, KODAX_STAGGER_DELAY as m, LineageCompaction as o, LineageExtension as r, WORKFLOW_CAPSULE_FORMAT as v, WORKFLOW_CAPSULE_VERSION as w, WORKFLOW_PATTERN_IDS as x };
+export { createSessionLineage as $, DefaultSummaryCompaction as D, KODAX_API_MIN_INTERVAL as K, LINEAGE_ENTRY_TYPES as L, actorQueueId as N, appendSessionLineageLabel as O, PROMISE_PATTERN as P, applyLineageTruncation as Q, applySessionCompaction as R, archiveOldIslands as S, assertRestrictedWorkflowQuality as T, buildSessionTree as U, buildWorkflowCapsuleIntent as V, WORKFLOW_CAPSULE_API_VERSION as W, cleanupIncompleteToolCalls as X, countActiveLineageMessages as Y, countTokens as Z, _resetActiveRootQueueRoutesForTests as _, createWorkflowCapsule as a0, createWorkflowModuleFromCapsule as a1, estimateTokens as a2, evictOldIslandMessageContent as a3, extractArtifactLedger as a4, extractFileOps as a5, extractTitleFromMessages as a6, findPreviousUserEntryId as a7, forkSessionLineage as a8, generateSessionId as a9, getAgentConfigHome as aa, getAgentConfigPath as ab, getAppDataDir as ac, getSessionLineagePath as ad, getSessionMessagesFromLineage as ae, isPathInsideDirectory as af, lintRestrictedWorkflowSource as ag, mergeArtifactLedger as ah, mergeFileOps as ai, registerActiveRootQueueRoute as aj, resolveActiveRootQueueRoute as ak, resolveExecutionPath as al, resolveSessionLineageTarget as am, rewindSessionLineage as an, setAgentConfigHome as ao, setSessionLineageActiveEntry as ap, validateAndFixToolHistory as aq, validateWorkflowCapsule as ar, validateWorkflowScriptManifest as as, KODAX_DEFAULT_TIMEOUT as f, KODAX_HARD_TIMEOUT as g, KODAX_MAX_INCOMPLETE_RETRIES as h, KODAX_MAX_MAXTOKENS_RETRIES as i, KODAX_MAX_RETRIES as j, KODAX_MAX_TOKENS as k, KODAX_RETRY_BASE_DELAY as l, KODAX_STAGGER_DELAY as m, LineageCompaction as o, LineageExtension as r, WORKFLOW_CAPSULE_FORMAT as v, WORKFLOW_CAPSULE_VERSION as w, WORKFLOW_PATTERN_IDS as x };
 export type { WorkflowCapsuleInputs as A, WorkflowCapsuleIntent as B, CompactionContext as C, WorkflowCapsuleProvenance as E, WorkflowCapsuleRequirements as F, WorkflowPatternId as G, WorkflowQualityLintFinding as H, WorkflowQualityLintOptions as I, WorkflowQualityLintSeverity as J, WorkflowScriptManifest as M, CompactionEntry as a, CompactionEntryPayload as b, CompactionPolicy as c, CreateWorkflowCapsuleInput as d, DefaultSummaryCompactionOptions as e, LineageArtifactLedgerPayload as n, LineageCompactionDelegates as p, LineageEntryType as q, LineageLabelPayload as s, LineageTreeNode as t, PolicyCompactionResult as u, WorkflowCapsule as y, WorkflowCapsuleEnvironmentRequirement as z };

package/dist/types-chunks/{commands.d-DZxHzH5-.d.ts → commands.d-DUxnK2TU.d.ts}

@@ -1,7 +1,53 @@
-import { X as SessionStorage$1, R as PermissionMode, L as LearningBinding } from './public-api.d--IDNJsu1.js';
-import { $ as KodaXOptions, a9 as KodaXResult } from './bash-prefix-extractor.d-CHJO5y94.js';
-import { n as RuntimeSurfaceStatus, b as CommandDefinition, e as CommandSource, c as CommandInfo, C as Command$1, I as InteractiveContext, a as CommandCallbacks, g as CurrentConfig, d as CommandInvocationRequest, f as CommandWorkflowInvocationRequest } from './utils.d-gmn3c5U4.js';
-import { bU as KodaXSessionStorage, bG as KodaXSessionData } from './types.d-DH1mvdcl.js';
+import { X as SessionStorage$1, R as PermissionMode, L as LearningBinding } from './public-api.d-CX4B11qY.js';
+import { a1 as KodaXOptions, ab as KodaXResult } from './bash-prefix-extractor.d-r1beOESM.js';
+import { n as ResolvedAutoModeSettings, p as RuntimeSurfaceStatus, b as CommandDefinition, e as CommandSource, c as CommandInfo, C as Command$1, I as InteractiveContext, a as CommandCallbacks, g as CurrentConfig, d as CommandInvocationRequest, f as CommandWorkflowInvocationRequest } from './utils.d-D0wPxz8y.js';
+import { bV as KodaXSessionStorage, bH as KodaXSessionData } from './types.d-sRLugmjy.js';
+import { r as AutoModeStats } from './guardrail.d-qjuKJZ31.js';
+
+interface ReplRuntimePermissionGrantSuggestion {
+    readonly id: string;
+    readonly kind: 'session' | 'persistent';
+    readonly label: string;
+}
+interface ReplRuntimePermissionRequest {
+    readonly id: string;
+    readonly toolName: string;
+    readonly toolCallId?: string;
+    readonly input: Readonly<Record<string, unknown>>;
+    readonly reason?: string;
+    readonly risk?: 'low' | 'medium' | 'high';
+    readonly executionCwd?: string;
+    readonly grantSuggestions?: readonly ReplRuntimePermissionGrantSuggestion[];
+}
+type ReplRuntimePermissionDecision = {
+    readonly type: 'allow_once';
+} | {
+    readonly type: 'allow_session';
+    readonly suggestionId: string;
+} | {
+    readonly type: 'allow_always';
+    readonly suggestionId: string;
+} | {
+    readonly type: 'reject';
+    readonly reason?: string;
+};
+type ReplRuntimePermissionPrompt = (request: ReplRuntimePermissionRequest) => Promise<ReplRuntimePermissionDecision>;
+declare const RUNTIME_PERMISSION_PENDING_NOTICE = "Runtime state: run active until this approval is resolved.";
+interface ReplRuntimeAutoModeControl {
+    getStats(sessionId: string): Promise<AutoModeStats | undefined>;
+    setEngine(sessionId: string, engine: 'llm' | 'rules'): Promise<AutoModeStats | undefined>;
+    syncSettings?(sessionId: string, permissionMode: string, settings: ReplRuntimeAutoModeSettings): Promise<AutoModeStats | undefined>;
+    subscribe?(sessionId: string, listener: (stats: AutoModeStats | undefined) => void): {
+        close(): void;
+    };
+}
+interface ReplRuntimeAutoModeSettings {
+    readonly engine: 'llm' | 'rules';
+    readonly classifierModel?: string;
+    readonly timeoutMs?: number;
+    readonly speculativeWindowMs?: number;
+}
+declare function toReplRuntimeAutoModeSettings(settings: ResolvedAutoModeSettings): ReplRuntimeAutoModeSettings;
 
 /**
  * InkREPL - Ink-based REPL Adapter
@@ -20,6 +66,10 @@ interface InkRuntimeRunnerInput {
     readonly prompt: string;
     readonly sessionId: string;
     readonly permissionMode: PermissionMode;
+    readonly autoModeSettings?: ReplRuntimeAutoModeSettings;
+    readonly requestPermission?: ReplRuntimePermissionPrompt;
+    /** Marks the callback installed by the REPL's legacy permission UI. */
+    readonly legacyPermissionHook?: true;
 }
 type InkRuntimeRunner = (input: InkRuntimeRunnerInput) => Promise<KodaXResult>;
 type InkRuntimeStatusProvider = () => Promise<RuntimeSurfaceStatus | undefined>;
@@ -27,6 +77,7 @@ interface InkREPLOptions extends KodaXOptions {
     storage?: SessionStorage$1;
     hardExitOnClose?: boolean;
     runtimeRunner?: InkRuntimeRunner;
+    runtimeAutoModeControl?: ReplRuntimeAutoModeControl;
     getRuntimeStatus?: InkRuntimeStatusProvider;
     learning?: LearningBinding;
 }
@@ -36,7 +87,10 @@ interface InkREPLOptions extends KodaXOptions {
 declare function runInkInteractiveMode(options: InkREPLOptions): Promise<void>;
 
 interface SessionStorage extends KodaXSessionStorage {
-    list(gitRoot?: string): Promise<Array<{
+    list(gitRoot?: string, options?: {
+        limit?: number;
+        includeArchived?: boolean;
+    }): Promise<Array<{
         id: string;
         title: string;
         msgCount: number;
@@ -49,17 +103,22 @@ interface ReplRuntimeRunnerInput {
     readonly prompt: string;
     readonly sessionId: string;
     readonly permissionMode: PermissionMode;
+    readonly autoModeSettings?: ReplRuntimeAutoModeSettings;
+    readonly requestPermission?: ReplRuntimePermissionPrompt;
+    /** Marks the callback installed by the REPL's legacy permission UI. */
+    readonly legacyPermissionHook?: true;
 }
 type ReplRuntimeRunner = (input: ReplRuntimeRunnerInput) => Promise<KodaXResult>;
 type ReplRuntimeStatusProvider = () => Promise<RuntimeSurfaceStatus | undefined>;
 interface RepLOptions extends KodaXOptions {
     storage?: SessionStorage;
     runtimeRunner?: ReplRuntimeRunner;
+    runtimeAutoModeControl?: ReplRuntimeAutoModeControl;
     getRuntimeStatus?: ReplRuntimeStatusProvider;
     learning?: LearningBinding;
 }
 declare function runInteractiveMode(options: RepLOptions): Promise<void>;
-declare function processSpecialSyntax(input: string): Promise<string>;
+declare function processSpecialSyntax(input: string, executionCwd?: string): Promise<string>;
 
 /**
  * Command Registry - Dynamic command registration system
@@ -211,5 +270,5 @@ declare function executeCommand(parsed: {
     };
 }, context: InteractiveContext, callbacks: CommandCallbacks, currentConfig: CurrentConfig): Promise<CommandResult>;
 
-export { BUILTIN_COMMANDS as B, executeCommand as g, getCommandRegistry as h, processSpecialSyntax as i, runInteractiveMode as j, parseCommand as p, runInkInteractiveMode as r };
-export type { Command as C, InkREPLOptions as I, RepLOptions as R, InkRuntimeRunner as a, InkRuntimeRunnerInput as b, InkRuntimeStatusProvider as c, ReplRuntimeRunner as d, ReplRuntimeRunnerInput as e, ReplRuntimeStatusProvider as f };
+export { BUILTIN_COMMANDS as B, RUNTIME_PERMISSION_PENDING_NOTICE as R, executeCommand as n, getCommandRegistry as o, parseCommand as p, processSpecialSyntax as q, runInkInteractiveMode as r, runInteractiveMode as s, toReplRuntimeAutoModeSettings as t };
+export type { Command as C, InkREPLOptions as I, InkRuntimeRunner as a, InkRuntimeRunnerInput as b, InkRuntimeStatusProvider as c, RepLOptions as d, ReplRuntimeAutoModeControl as e, ReplRuntimeAutoModeSettings as f, ReplRuntimePermissionDecision as g, ReplRuntimePermissionGrantSuggestion as h, ReplRuntimePermissionPrompt as i, ReplRuntimePermissionRequest as j, ReplRuntimeRunner as k, ReplRuntimeRunnerInput as l, ReplRuntimeStatusProvider as m };

package/dist/types-chunks/{guardrail.d-DlpMnd-Y.d.ts → guardrail.d-CWYD1bdL.d.ts}

@@ -1,4 +1,4 @@
-import { ba as Guardrail, d5 as RunnerToolCall, f as Agent, a8 as AgentMessage, d8 as RunnerToolResult, dj as Span } from './types.d-DH1mvdcl.js';
+import { bb as Guardrail, d6 as RunnerToolCall, f as Agent, a8 as AgentMessage, d9 as RunnerToolResult, dk as Span } from './types.d-sRLugmjy.js';
 
 /**
  * Guardrail Runtime — FEATURE_085 (v0.7.26).
@@ -137,6 +137,7 @@ type ToolBeforeOutcome = {
     readonly call: RunnerToolCall;
 } | {
     readonly kind: 'block';
+    readonly call: RunnerToolCall;
     readonly result: RunnerToolResult;
 };
 /**

package/dist/types-chunks/{guardrail.d-auV61_h5.d.ts → guardrail.d-qjuKJZ31.d.ts}

@@ -1,8 +1,8 @@
 import { b as McpServersConfig, M as McpConnectMode, a as McpServerConfig, c as McpTransportKind } from './config.d-CJy1WENT.js';
-import { K as KodaXBaseProvider } from './base.d-Cz_rwpOi.js';
+import { K as KodaXBaseProvider } from './base.d-ChvpaKjZ.js';
 import { a as CostTracker } from './cost-tracker.d-BeaenODW.js';
-import { d5 as RunnerToolCall } from './types.d-DH1mvdcl.js';
-import { d as ToolGuardrail } from './guardrail.d-DlpMnd-Y.js';
+import { d6 as RunnerToolCall } from './types.d-sRLugmjy.js';
+import { d as ToolGuardrail } from './guardrail.d-CWYD1bdL.js';
 
 /**
  * FEATURE_200 Phase F (v0.7.45) — MCP domain types extracted from types.ts.
@@ -365,10 +365,10 @@ declare function checkAbsoluteDeny(call: RunnerToolCall, projectRoot: string, ex
  *
  * Decision flow (per design doc "三层权限金字塔"):
  *
- *   1. Tool projection is '' (Tier 1)        → allow (zero token cost)
- *   2. Engine has been downgraded to rules   → escalate (user confirms)
- *   3. denialTracker.shouldFallback (3/20)   → engine downgrade, then escalate
- *   4. circuitBreaker.shouldFallback (5/10m) → engine downgrade, then escalate
+ *   1. Tier-0 deterministic deny             → block
+ *   2. Tool projection is '' (Tier 1)        → allow (zero token cost)
+ *   3. Engine is rules → deterministic Tier 2, otherwise user confirms
+ *   4. denial/circuit threshold              → engine downgrade, then escalate
  *   5. classify(...) sideQuery
  *        allow                               → allow (record allow → reset consecutive)
  *        block                               → block + reason (record block)
@@ -386,10 +386,10 @@ declare function checkAbsoluteDeny(call: RunnerToolCall, projectRoot: string, ex
  *   shared (per design doc "防绕阈值"). Without it each guardrail is
  *   independent.
  *
- * Capability check, Tier 2 path-shortcuts, and the explicit
- * `supportsAutoModeClassifier` provider flag are deferred to follow-up
- * phases — v1 of the guardrail relies on Tier 1 (projection==='') as the
- * structural opt-out and forwards everything else to the classifier.
+ * Provider capability checks and the explicit `supportsAutoModeClassifier`
+ * flag are deferred to follow-up phases. Tier 2 is supplied by the Runtime
+ * host because canonical filesystem and shell parsing live in @kodax/repl;
+ * the guardrail remains the single decision point.
  */
 
 type AutoModeEngine = 'llm' | 'rules';
@@ -426,10 +426,59 @@ type AutoModeAskUser = (call: RunnerToolCall, reason: string,
  * confirm dialog (replacing the input-marker path from FEATURE_066).
  */
 signals?: readonly ToolCallSignal[]) => Promise<AutoModeAskUserVerdict>;
+interface AutoModeRulesContext {
+    readonly projectRoot: string;
+    readonly executionCwd: string;
+    readonly signals: readonly ToolCallSignal[];
+}
+type AutoModePermissionBoundary = 'workspace' | 'system-temp' | 'outside-workspace' | 'protected' | 'unresolved';
+interface AutoModePermissionTarget {
+    readonly path: string;
+    readonly boundary: AutoModePermissionBoundary;
+}
+type AutoModePermissionOperation = {
+    readonly kind: 'read' | 'write' | 'create' | 'delete';
+    readonly target: AutoModePermissionTarget;
+    readonly options?: Readonly<Record<string, boolean | number | string>>;
+} | {
+    readonly kind: 'copy' | 'move' | 'rename';
+    readonly source: AutoModePermissionTarget;
+    readonly destination: AutoModePermissionTarget;
+    readonly options?: Readonly<Record<string, boolean | number | string>>;
+} | {
+    readonly kind: 'execute' | 'unknown';
+    readonly summary: string;
+    readonly options?: Readonly<Record<string, boolean | number | string>>;
+};
+/** Compact deterministic facts supplied to the permission reviewer. */
+interface AutoModePermissionReview {
+    readonly schemaVersion: 1;
+    readonly analysis: {
+        readonly status: 'complete' | 'incomplete';
+        readonly shell: 'powershell' | 'shell' | 'tool';
+        readonly binding: 'exact' | 'partial';
+        readonly reason?: string;
+    };
+    readonly operations: readonly AutoModePermissionOperation[];
+    readonly risks: readonly string[];
+}
+type AutoModeCallAnalyzer = (call: RunnerToolCall, context: AutoModeRulesContext) => AutoModePermissionReview | Promise<AutoModePermissionReview>;
+type AutoModeRulesDecision = {
+    readonly action: 'allow';
+} | {
+    readonly action: 'block';
+    readonly reason: string;
+} | {
+    readonly action: 'escalate';
+    readonly reason: string;
+};
+/** Deterministic Tier-2 evaluator used only while the rules engine is active. */
+type AutoModeRulesEvaluator = (call: RunnerToolCall, context: AutoModeRulesContext) => AutoModeRulesDecision | Promise<AutoModeRulesDecision>;
 interface AutoModeGuardrailConfig {
     readonly rules: AutoRules;
     readonly claudeMd?: string;
     /**
+     * Legacy classifier path only. Runtime compact review excludes AGENTS.md.
      * FEATURE_092 follow-up (auto-mode classifier AGENTS.md staleness fix):
      * live getter for the project AGENTS.md content. Takes precedence over the
      * static `claudeMd` string and is evaluated INSIDE the classify path on
@@ -449,11 +498,22 @@ interface AutoModeGuardrailConfig {
      * paths. See `AutoModeAskUser` for semantics.
      */
     readonly askUser?: AutoModeAskUser;
+    /**
+     * Runtime-owned deterministic Tier-2 evaluator. It is injected rather than
+     * implemented in @kodax/coding because canonical path and shell-AST helpers
+     * live in @kodax/repl. Omitting it preserves fail-closed SDK compatibility:
+     * every non-Tier-1 rules call escalates.
+     */
+    readonly evaluateRulesCall?: AutoModeRulesEvaluator;
+    /**
+     * Runtime-owned compact facts used by deterministic read admission and the
+     * LLM permission reviewer. Direct read tools fail closed when this is absent.
+     */
+    readonly analyzeCall?: AutoModeCallAnalyzer;
     /**
      * Look up a tool's `toClassifierInput` projection by tool name.
-     * Returns `undefined` when the tool isn't in the registry — guardrail
-     * treats that as "no projection ⇒ Tier 1 skip" (conservative for
-     * unknown tools is debatable; v1 favors not blocking on noise).
+     * Returns `undefined` when the tool isn't in the registry. Unknown tools
+     * receive a metadata-only fail-closed projection rather than a Tier-1 skip.
      */
     readonly getToolProjection: (toolName: string) => ((input: unknown) => string) | undefined;
     /**
@@ -505,8 +565,8 @@ interface AutoModeGuardrailConfig {
     /**
      * FEATURE_092 phase 2b.7b slice C: starting engine. Defaults to `'llm'`.
      * Set to `'rules'` to skip the classifier entirely from session start
-     * (the rules-mode escalate path runs immediately on the first non-Tier-1
-     * tool call). Resolved by the REPL from `~/.kodax/config.json`
+     * (the deterministic Tier-2 evaluator runs for non-Tier-1 calls). Resolved
+     * by the REPL from `~/.kodax/config.json`
      * `autoMode.engine` and the `KODAX_AUTO_MODE_ENGINE` env var.
      */
     readonly initialEngine?: AutoModeEngine;
@@ -585,6 +645,7 @@ interface AutoModeGuardrailConfig {
  */
 interface AutoModeStats {
     readonly engine: AutoModeEngine;
+    readonly classifierModel?: string;
     readonly denials: DenialTracker;
     readonly breaker: CircuitBreaker;
 }
@@ -609,5 +670,5 @@ interface AutoModeToolGuardrail extends ToolGuardrail {
 }
 declare function createAutoModeToolGuardrail(config: AutoModeGuardrailConfig): AutoModeToolGuardrail;
 
-export { createCircuitBreaker as B, CONSECUTIVE_THRESHOLD as C, ERROR_THRESHOLD as E, createDenialTracker as F, formatAgentsForPrompt as G, getKodaxGlobalDir as H, loadAgentsFiles as I, loadAutoRules as J, parseAutoRules as M, readTrustState as N, recordAllow as O, recordBlock as P, recordError as Q, shouldFallback$1 as U, shouldFallback as V, WINDOW_MS as W, trustProjectRules as X, CUMULATIVE_THRESHOLD as m, checkAbsoluteDeny as w, collectAllSignals as x, computeRulesFingerprint as y, createAutoModeToolGuardrail as z };
-export type { AbsoluteDenyCheck as A, DenialTracker as D, KodaXMcpConnectMode as K, LoadAgentsOptions as L, RulesLoadError as R, SignalCollector as S, TierZeroPatternId as T, AbsoluteDenyMatch as a, AbsoluteDenyMiss as b, AbsoluteDenyResult as c, AgentsFile as d, AutoModeAskUser as e, AutoModeAskUserVerdict as f, AutoModeEngine as g, AutoModeGuardrailConfig as h, AutoModeSharedState as i, AutoModeStats as j, AutoModeToolGuardrail as k, AutoRules as l, CircuitBreaker as n, KodaXMcpServerConfig as o, KodaXMcpServersConfig as p, KodaXMcpTransport as q, LoadedRulesSource as r, RulesLoadResult as s, SkippedRulesSource as t, ToolCallSignal as u, TrustState as v };
+export { recordBlock as $, CONSECUTIVE_THRESHOLD as C, ERROR_THRESHOLD as E, checkAbsoluteDeny as I, collectAllSignals as J, computeRulesFingerprint as M, createAutoModeToolGuardrail as N, createCircuitBreaker as O, createDenialTracker as P, formatAgentsForPrompt as Q, getKodaxGlobalDir as U, loadAgentsFiles as V, WINDOW_MS as W, loadAutoRules as X, parseAutoRules as Y, readTrustState as Z, recordAllow as _, recordError as a0, shouldFallback$1 as a1, shouldFallback as a2, trustProjectRules as a3, CUMULATIVE_THRESHOLD as u };
+export type { AbsoluteDenyCheck as A, RulesLoadResult as B, DenialTracker as D, SkippedRulesSource as F, ToolCallSignal as G, TrustState as H, KodaXMcpConnectMode as K, LoadAgentsOptions as L, RulesLoadError as R, SignalCollector as S, TierZeroPatternId as T, AbsoluteDenyMatch as a, AbsoluteDenyMiss as b, AbsoluteDenyResult as c, AgentsFile as d, AutoModeAskUser as e, AutoModeAskUserVerdict as f, AutoModeCallAnalyzer as g, AutoModeEngine as h, AutoModeGuardrailConfig as i, AutoModePermissionBoundary as j, AutoModePermissionOperation as k, AutoModePermissionReview as l, AutoModePermissionTarget as m, AutoModeRulesContext as n, AutoModeRulesDecision as o, AutoModeRulesEvaluator as p, AutoModeSharedState as q, AutoModeStats as r, AutoModeToolGuardrail as s, AutoRules as t, CircuitBreaker as v, KodaXMcpServerConfig as w, KodaXMcpServersConfig as x, KodaXMcpTransport as y, LoadedRulesSource as z };

package/dist/types-chunks/history-retrieval.d-BKTJIrVd.d.ts

@@ -0,0 +1,57 @@
+import { k as KodaXMessage } from './types.d-CSmF0t0n.js';
+import { bM as KodaXSessionLineage } from './types.d-sRLugmjy.js';
+
+type KodaXSessionHistoryScope = 'compacted' | 'all';
+type KodaXSessionHistorySource = 'user' | 'assistant' | 'system' | 'tool' | 'child_task';
+interface KodaXSessionHistorySearchOptions {
+    query: string;
+    limit?: number;
+    role?: KodaXMessage['role'];
+    scope?: KodaXSessionHistoryScope;
+}
+interface KodaXSessionHistoryHit {
+    entryId: string;
+    logicalId?: string;
+    sourceEntryId?: string;
+    timestamp: string;
+    role: KodaXMessage['role'];
+    source: KodaXSessionHistorySource;
+    active: boolean;
+    score: number;
+    snippet: string;
+    citation: string;
+}
+interface KodaXSessionHistorySearchResult {
+    revision: string;
+    hits: KodaXSessionHistoryHit[];
+}
+interface KodaXSessionHistoryReadOptions {
+    entryId: string;
+    revision?: string;
+    offset?: number;
+    maxChars?: number;
+}
+type KodaXSessionHistoryReadResult = {
+    status: 'not_found';
+    revision: string;
+    entryId: string;
+} | {
+    status: 'stale';
+    revision: string;
+    entryId: string;
+} | {
+    status: 'ok';
+    revision: string;
+    entryId: string;
+    content: string;
+    offset: number;
+    nextOffset: number | null;
+    totalChars: number;
+    redactedBlockCount: number;
+    citation: string;
+};
+declare function searchSessionHistory(lineage: KodaXSessionLineage, options: KodaXSessionHistorySearchOptions): KodaXSessionHistorySearchResult;
+declare function readSessionHistoryEntry(lineage: KodaXSessionLineage, options: KodaXSessionHistoryReadOptions): KodaXSessionHistoryReadResult;
+
+export { readSessionHistoryEntry as r, searchSessionHistory as s };
+export type { KodaXSessionHistoryHit as K, KodaXSessionHistoryReadOptions as a, KodaXSessionHistoryReadResult as b, KodaXSessionHistoryScope as c, KodaXSessionHistorySearchOptions as d, KodaXSessionHistorySearchResult as e, KodaXSessionHistorySource as f };