@kodax-ai/kodax 0.7.74 → 0.7.76

package/docs/SDK_EMBEDDER_GUIDE.md

@@ -29,11 +29,12 @@ are NOT obvious from inspecting the type definitions alone:
 19. [Session surface filtering and cursor pagination](#19-session-surface-filtering-and-cursor-pagination-feature_261-v0767)
 20. [Cost-disciplined workflow routing and telemetry](#20-cost-disciplined-workflow-routing-and-telemetry-feature_259-v0767)
 21. [Experimental governed memory — `/experimental-memory`](#21-experimental-governed-memory--experimental-memory-feature_260-v0768)
-22. [Bidirectional A2A 1.0 — `/a2a`](#22-bidirectional-a2a-10--a2a-feature_267-v0769)
-23. [Shared Coder daemon for Space and IDE hosts](#23-shared-coder-daemon-for-space-and-ide-hosts-feature_269-v0769)
-24. [Runtime-owned Auto Mode and plan-approval bridges](#24-runtime-owned-auto-mode-and-plan-approval-bridges-v0772v0773)
+22. [Bidirectional A2A 1.0 — `/a2a`](#22-bidirectional-a2a-10--a2a-feature_267-v0769)
+23. [Shared Coder daemon for Space and IDE hosts](#23-shared-coder-daemon-for-space-and-ide-hosts-feature_269-v0769)
+24. [Runtime-owned Auto Mode and plan-approval bridges](#24-runtime-owned-auto-mode-and-plan-approval-bridges-v0772v0773)
 25. [Always-on context compaction and bounded transcript recovery](#25-always-on-context-compaction-and-bounded-transcript-recovery-v0774)
 26. [Agent mailbox control versus SDK event telemetry](#26-agent-mailbox-control-versus-sdk-event-telemetry-v0774)
+27. [Windows GUI background subprocess visibility](#27-windows-gui-background-subprocess-visibility-v0775)
 
 §1–§3 (and the Phase-7/8 MCP-popout surface in §1) land in v0.7.42
 under FEATURE_186 (see [ADR-032](ADR.md#adr-032-sdk-embedder-surface-closure-feature_186-v0742)).
@@ -717,28 +718,28 @@ const replay = await loadSession('s_my_chat');
 const scrollback = await loadFullTranscript('s_my_chat');
 const compacted = await compactSession('s_my_chat', { dryRun: true });
 
-await appendClientNotice('s_my_chat', {
-  source: 'space',
-  content: '/doctor ok',
-});
-```
-
-### Auto-resume selection in v0.7.74
-
-With `session.autoResume: true` (or `resume: true`) and no explicit ID, KodaX
-calls `storage.list(context.gitRoot, { limit: 1000 })` and chooses the first
-newest-first summary whose `msgCount > 0`. This prevents newer zero-message
-ACP/bootstrap placeholders from shadowing a real conversation. An explicit
-`session.id` always wins. Custom `KodaXSessionStorage` implementations should
-therefore honor the optional `limit` argument and return `msgCount` accurately;
-they may return fewer than 1000 records.
-
-The standalone interactive CLI additionally restores the persisted
-workspace/runtime identity before the next turn. SDK embedders still own
-`context.gitRoot`, `context.executionCwd`, and storage construction; do not rely
-on process cwd as a substitute for host-owned runtime context.
-
-### What `createSessionManager()` returns (v0.7.43+)
+await appendClientNotice('s_my_chat', {
+  source: 'space',
+  content: '/doctor ok',
+});
+```
+
+### Auto-resume selection in v0.7.74
+
+With `session.autoResume: true` (or `resume: true`) and no explicit ID, KodaX
+calls `storage.list(context.gitRoot, { limit: 1000 })` and chooses the first
+newest-first summary whose `msgCount > 0`. This prevents newer zero-message
+ACP/bootstrap placeholders from shadowing a real conversation. An explicit
+`session.id` always wins. Custom `KodaXSessionStorage` implementations should
+therefore honor the optional `limit` argument and return `msgCount` accurately;
+they may return fewer than 1000 records.
+
+The standalone interactive CLI additionally restores the persisted
+workspace/runtime identity before the next turn. SDK embedders still own
+`context.gitRoot`, `context.executionCwd`, and storage construction; do not rely
+on process cwd as a substitute for host-owned runtime context.
+
+### What `createSessionManager()` returns (v0.7.43+)
 
 ```ts
 interface SessionManager {
@@ -3929,10 +3930,10 @@ const queued = await runtime.runs.submitInput({
   operation: { operationId: loadOrCreatePendingOperationId('space-input-17') },
 });
 
-if (!queued.accepted) {
-  // stale_run, unsupported_capability, or interrupt_window_closed:
-  // show the factual result and preserve the user's unsent input.
-}
+if (!queued.accepted) {
+  // stale_run, unsupported_capability, or interrupt_window_closed:
+  // show the factual result and preserve the user's unsent input.
+}
 ```
 
 For input that must join the current active Run, submit `delivery:'interrupt'`.
@@ -3941,19 +3942,19 @@ owning Run's `interruptInputs`. At the next safe boundary, all accumulated
 interrupts are drained FIFO, remain separate user messages in one next LLM
 request, and produce one `run.input.delivered` event whose `inputs` array is the
 complete ordered batch. Exact operation retries return the same `inputId`.
-The accepted result's `runId` is the existing owning Run (equal to
-`afterRunId`), not a newly created continuation.
-
-Interrupt admission closes when the Runner publishes its final completion or
-terminal error signal, or when the Run's supplied `abortSignal` aborts, even if
-the outer Run is still settling. Non-terminal observer diagnostics do not close
-the window. A submission after closure returns `accepted:false` with
-`reason:'interrupt_window_closed'` and is not queued. Keep the original input
-available for retry after the Run ends; do not silently change its delivery to
-`after_turn`. As a final race/recovery
-guard, inspect terminal Run status: any `interruptInputs` entry whose state is
-`terminal` was not delivered. Reconcile it by `inputId` and present a visible
-non-delivery outcome rather than leaving a pending queue indicator.
+The accepted result's `runId` is the existing owning Run (equal to
+`afterRunId`), not a newly created continuation.
+
+Interrupt admission closes when the Runner publishes its final completion or
+terminal error signal, or when the Run's supplied `abortSignal` aborts, even if
+the outer Run is still settling. Non-terminal observer diagnostics do not close
+the window. A submission after closure returns `accepted:false` with
+`reason:'interrupt_window_closed'` and is not queued. Keep the original input
+available for retry after the Run ends; do not silently change its delivery to
+`after_turn`. As a final race/recovery
+guard, inspect terminal Run status: any `interruptInputs` entry whose state is
+`terminal` was not delivered. Reconcile it by `inputId` and present a visible
+non-delivery outcome rather than leaving a pending queue indicator.
 
 ```ts
 const interrupted = await runtime.runs.submitInput({
@@ -3967,11 +3968,13 @@ const interrupted = await runtime.runs.submitInput({
 
 Run status exposes acceptance/start/queue times, authenticated origin,
 `sessionOrder`, and a single terminal fact. Important terminal codes include
-`runtime_restarted`, `daemon_crashed`, `credential_unavailable`,
-`host_not_dispatched`, `host_outcome_unknown`, and
-`control_history_untrusted`. Respect `effectOutcome`; `unknown` must never be
-presented as success or automatically retried. After a lost response, query
-`runtime.operations.get({ operationId, journalEpoch })`; applied receipts
+`runtime_restarted`, `daemon_crashed`, `credential_unavailable`,
+`host_not_dispatched`, `host_outcome_unknown`, and
+`control_history_untrusted`. Managed tasks that require user input use
+`terminal.code = 'blocked'`; surface `terminal.message` when present instead of
+replacing it with a generic run failure. Respect `effectOutcome`; `unknown` must
+never be presented as success or automatically retried. After a lost response,
+query `runtime.operations.get({ operationId, journalEpoch })`; applied receipts
 include the canonical result. Permission grants remain daemon-owned and
 revisioned.
 
@@ -4541,74 +4544,104 @@ for (const hit of found.hits) {
 }
 ```
 
-Search is deterministic Unicode lexical/metadata ranking, not an embedding or
-background-model index. The Action LLM gets the corresponding
-`session_history_search` and `session_history_read` pair only when its current
-Run owns full-lineage-capable Session storage. A root Run reads its root
-lineage. A persistent child Run gets a separately minted hidden
-`managed-task-worker` Session and can recover only that child's compacted
-history; it is never given root-history access. Storage-less Runs and a tool
-visibility policy that hides either member expose neither member. Results are
-low-authority historical evidence; current instructions and freshly verified
-workspace state take precedence. System/control entries, hidden-only content,
-synthetic current or legacy `[对话历史摘要]` checkpoints, and `[compacted]`
-placeholders are neither searchable nor directly readable. Short ordinary
-terms do not gain a metadata match merely because they occur inside a random
-entry ID; direct identifier lookup is reserved for a sufficiently specific ID
-query. Sessions compacted by older builds without an exact main/sidecar copy
-cannot reconstruct bytes that were already discarded.
-
-Clients that depend on these guarantees should require
-`contextCompaction: 3`, `transcriptPaging: 1`, and `transcriptSearch: 1` during
-connection.
+Search is deterministic Unicode lexical/metadata ranking, not an embedding or
+background-model index. The Action LLM gets the corresponding
+`session_history_search` and `session_history_read` pair only when its current
+Run owns full-lineage-capable Session storage. A root Run reads its root
+lineage. A persistent child Run gets a separately minted hidden
+`managed-task-worker` Session and can recover only that child's compacted
+history; it is never given root-history access. Storage-less Runs and a tool
+visibility policy that hides either member expose neither member. Results are
+low-authority historical evidence; current instructions and freshly verified
+workspace state take precedence. System/control entries, hidden-only content,
+synthetic current or legacy `[对话历史摘要]` checkpoints, and `[compacted]`
+placeholders are neither searchable nor directly readable. Short ordinary
+terms do not gain a metadata match merely because they occur inside a random
+entry ID; direct identifier lookup is reserved for a sufficiently specific ID
+query. Sessions compacted by older builds without an exact main/sidecar copy
+cannot reconstruct bytes that were already discarded.
+
+Clients that depend on these guarantees should require
+`contextCompaction: 3`, `transcriptPaging: 1`, and `transcriptSearch: 1` during
+connection.
+
+---
+
+## 26. Agent mailbox control versus SDK event telemetry (v0.7.74)
+
+The model-visible `wait_agent` tool and the public Runtime Actor event APIs have
+different jobs. Do not expose `runtime.agents.wait()` to the model as though it
+were the same operation.
+
+| Need | API | Wake/data contract |
+|---|---|---|
+| Let the action model yield until useful coordination evidence exists | `wait_agent({ timeout_ms })` | Caller-scoped Agent mailbox, root user input, interruption, or timeout; returns only a small acknowledgement. |
+| Render or diagnose Actor activity | `runtime.agents.events(sessionId, afterSequence?)` | Bounded event snapshot/replay, including progress and terminal events. |
+| Long-poll Actor telemetry from a host | `runtime.agents.wait(sessionId, afterSequence?, timeoutMs?)` | Returns the next sequenced Actor event, including progress. |
+| Read one known result | `runtime.agents.output(sessionId, actorPath, turnId?)` | Bounded current/terminal output and structured artifact metadata. |
+| Deliver a real user follow-up to the active root Run | `runtime.runs.submitInput(...)` | Ordered active-run input delivered at the next safe Runner boundary; requires `interruptInput:1`. |
+
+For example, a host activity view can replay the current tail and then wait
+from its last sequence without causing another action-model request:
+
+```ts
+const snapshot = await runtime.agents.events(session.id);
+for (const event of snapshot) renderActorEvent(event);
+
+const afterSequence = snapshot.at(-1)?.sequence;
+const next = await runtime.agents.wait(session.id, afterSequence, 30_000);
+if (next) renderActorEvent(next);
+```
+
+Model `wait_agent` has only `timeout_ms` in its schema (10,000 to 3,600,000 ms,
+default 120,000). Actor progress and Runtime `system-reminder` messages do not
+end that wait. A scoped Agent message/completion produces `mailbox`; queued root
+input produces `user_input_pending`; cancellation and expiry produce
+`interrupted` and `wait_expired`. Authenticated Agent evidence is drained at the
+next safe Runner boundary as synthetic context, while root input remains a real
+user turn. The acknowledgement itself never carries raw event batches.
+
+Completion delivery is post-transcript and crash-recoverable. The Actor snapshot
+persists the explicit root completion turn IDs that still await transcript
+acknowledgement. A hard restart republishes only those IDs; a same-process
+Runtime rebuild deduplicates the projected queue by child turn ID. Once the
+parent transcript commits and acknowledges the completion, later restores do
+not replay it. Legacy snapshots without the explicit pending set do not infer
+replay work from historical mailbox content.
+
+This separation changes no Actor event capability or daemon version: existing
+SDK snapshot, replay, and long-poll clients keep their telemetry surface. It
+only prevents high-frequency progress from becoming a model control signal.
 
 ---
 
-## 26. Agent mailbox control versus SDK event telemetry (v0.7.74)
-
-The model-visible `wait_agent` tool and the public Runtime Actor event APIs have
-different jobs. Do not expose `runtime.agents.wait()` to the model as though it
-were the same operation.
-
-| Need | API | Wake/data contract |
-|---|---|---|
-| Let the action model yield until useful coordination evidence exists | `wait_agent({ timeout_ms })` | Caller-scoped Agent mailbox, root user input, interruption, or timeout; returns only a small acknowledgement. |
-| Render or diagnose Actor activity | `runtime.agents.events(sessionId, afterSequence?)` | Bounded event snapshot/replay, including progress and terminal events. |
-| Long-poll Actor telemetry from a host | `runtime.agents.wait(sessionId, afterSequence?, timeoutMs?)` | Returns the next sequenced Actor event, including progress. |
-| Read one known result | `runtime.agents.output(sessionId, actorPath, turnId?)` | Bounded current/terminal output and structured artifact metadata. |
-| Deliver a real user follow-up to the active root Run | `runtime.runs.submitInput(...)` | Ordered active-run input delivered at the next safe Runner boundary; requires `interruptInput:1`. |
-
-For example, a host activity view can replay the current tail and then wait
-from its last sequence without causing another action-model request:
+## 27. Windows GUI background subprocess visibility (v0.7.75)
 
-```ts
-const snapshot = await runtime.agents.events(session.id);
-for (const event of snapshot) renderActorEvent(event);
+KodaX SDK hosts do not need to add process-wide console suppression around the
+Runtime. In the v0.7.75 release candidate, Runtime Worker-reachable
+non-interactive/background child processes request `windowsHide: true` at their
+own spawn boundary. The covered paths include:
 
-const afterSequence = snapshot.at(-1)?.sequence;
-const next = await runtime.agents.wait(session.id, afterSequence, 30_000);
-if (next) renderActorEvent(next);
-```
+- memory and Git metadata probes;
+- provider CLI execution and ACP servers;
+- LSP acquisition and language servers;
+- clipboard helpers, worktrees, review commands, and extension commands;
+- managed-task checkpoints and sandbox helpers.
 
-Model `wait_agent` has only `timeout_ms` in its schema (10,000 to 3,600,000 ms,
-default 120,000). Actor progress and Runtime `system-reminder` messages do not
-end that wait. A scoped Agent message/completion produces `mailbox`; queued root
-input produces `user_input_pending`; cancellation and expiry produce
-`interrupted` and `wait_expired`. Authenticated Agent evidence is drained at the
-next safe Runner boundary as synthetic context, while root input remains a real
-user turn. The acknowledgement itself never carries raw event batches.
+The contract is intentionally narrow. Explicit external editors, terminal
+commands, and PTY sessions remain interactive. POSIX-only `ps`, `tmux`, and
+sandbox branches are reviewed bundle-audit exceptions rather than Windows
+visibility paths.
 
-Completion delivery is post-transcript and crash-recoverable. The Actor snapshot
-persists the explicit root completion turn IDs that still await transcript
-acknowledgement. A hard restart republishes only those IDs; a same-process
-Runtime rebuild deduplicates the projected queue by child turn ID. Once the
-parent transcript commits and acknowledges the completion, later restores do
-not replay it. Legacy snapshots without the explicit pending set do not infer
-replay work from historical mailbox content.
-
-This separation changes no Actor event capability or daemon version: existing
-SDK snapshot, replay, and long-poll clients keep their telemetry surface. It
-only prevents high-frequency progress from becoming a model control signal.
+`npm run build:bundle` audits every statically identifiable child-process call
+reachable from `dist/runtime-worker.js`. The packaged Electron daemon smoke then
+runs 20 ordinary queries with a Win32 probe and checks that the expected Git
+children never own a visible console window. These checks validate the SDK
+boundary, but they do not replace product-level validation in the packaged host.
+KodaX Space should install the exact v0.7.75 tarball and complete
+[`ISSUE_205_v0.7.75_REGRESSION_GUIDE.md`](test-guides/ISSUE_205_v0.7.75_REGRESSION_GUIDE.md)
+on Windows 10 and Windows 11 as a non-blocking product validation follow-up.
+This follow-up does not gate SDK packaging, tagging, or publication.
 
 ---
 
@@ -4616,8 +4649,9 @@ only prevents high-frequency progress from becoming a model control signal.
 
 - [README.md](../README.md) — end-user CLI quick start
 - [docs/ADR.md ADR-024](ADR.md#adr-024-npm-发布物正名-kodax-aikodax--sdk-subpath-exports-形式化-v0739) — SDK subpath architecture rationale
-- [docs/ADR.md ADR-032](ADR.md#adr-032-sdk-embedder-surface-closure-feature_186-v0742) — FEATURE_186 design record (all 8 phases)
-- [docs/ADR.md ADR-057](ADR.md#adr-057-large-compaction-is-an-always-on-context-scoped-full-coverage-transaction) — v0.7.74 compaction and exact-history ownership
+- [docs/ADR.md ADR-032](ADR.md#adr-032-sdk-embedder-surface-closure-feature_186-v0742) — FEATURE_186 design record (all 8 phases)
+- [docs/ADR.md ADR-057](ADR.md#adr-057-large-compaction-is-an-always-on-context-scoped-full-coverage-transaction) — v0.7.74 compaction and exact-history ownership
 - [docs/ADR.md ADR-058](ADR.md#adr-058-model-agent-wait-is-mailbox-control-not-event-telemetry) — mailbox control versus Actor telemetry
 - [docs/features/v0.7.42.md FEATURE_186](features/v0.7.42.md#feature_186-sdk-embedder-surface-closure--kodax-space-gap-list--mcp-popout) — gap-by-gap landing matrix
 - [docs/features/v0.7.74.md](features/v0.7.74.md) — v0.7.74 release-candidate design and verification record
+- [docs/features/v0.7.75.md](features/v0.7.75.md) — v0.7.75 Windows GUI and Sidecar/Runtime stabilization candidate

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kodax-ai/kodax",
-  "version": "0.7.74",
+  "version": "0.7.76",
   "description": "KodaX lightweight coding agent - TypeScript implementation with 16 built-in LLM provider aliases, published as a Node-free single-file CLI and SDK",
   "type": "module",
   "private": false,

package/dist/chunks/argument-completer-C45DEO34.js

@@ -1,2 +0,0 @@
-// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{Ja as a,Ka as b}from"./chunk-7W6KYJU2.js";import"./chunk-XMP66YWG.js";import"./chunk-QH56WEHK.js";import"./chunk-VPURXE2F.js";import"./chunk-MVCAFD6M.js";import"./chunk-VK5QTHS6.js";import"./chunk-XM724XAA.js";import"./chunk-64M5HOCA.js";import"./chunk-MBAPT2R5.js";import"./chunk-C7TZAT3S.js";import"./chunk-XXQLPTAN.js";import"./chunk-UJS7JAO6.js";import"./chunk-GAFFYJU3.js";import"./chunk-PP53SIIL.js";import"./chunk-F7AIEHSS.js";import"./chunk-ONUPGMER.js";export{a as ArgumentCompleter,b as createArgumentCompleter};

package/dist/chunks/chunk-PP53SIIL.js

@@ -1,5 +0,0 @@
-// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{g as R,h as _}from"./chunk-F7AIEHSS.js";import{a as r}from"./chunk-ONUPGMER.js";var u=class extends Error{static{r(this,"KodaXMediaError")}code;detail;cause;constructor(e,i,o={}){super(i),this.name="KodaXMediaError",this.code=e,this.detail=o.detail,this.cause=o.cause}},p=class extends u{static{r(this,"ImageResizeError")}constructor(e,i={}){super(i.code??"IMAGE_TOO_LARGE",e,i),this.name="ImageResizeError"}};import O from"node:path";var Z={".gif":"image/gif",".jpeg":"image/jpeg",".jpg":"image/jpeg",".png":"image/png",".webp":"image/webp"},ee={".3gp":"video/3gpp",".3gpp":"video/3gpp",".avi":"video/x-msvideo",".flv":"video/x-flv",".mov":"video/quicktime",".mp4":"video/mp4",".mpeg":"video/mpeg",".mpg":"video/mpeg",".webm":"video/webm",".wmv":"video/x-ms-wmv"};function N(t){return Z[O.extname(t).toLowerCase()]}r(N,"inferImageMediaType");function $(t){return ee[O.extname(t).toLowerCase()]}r($,"inferVideoMediaType");function te(t,e={}){let i=e.mediaType??N(t);return{kind:"image",path:t,...i?{mediaType:i}:{},...e.source?{source:e.source}:{},...e.description?{description:e.description}:{}}}r(te,"createImageArtifactFromPath");function ie(t,e={}){if(e.mediaType!==void 0&&e.mimeType!==void 0&&e.mediaType!==e.mimeType)throw new u("UNSUPPORTED_MEDIA_TYPE",`File artifact mediaType and mimeType disagree: ${e.mediaType} != ${e.mimeType}.`);return{kind:"file",path:t,...e.mediaType?{mediaType:e.mediaType}:{},...e.mimeType?{mimeType:e.mimeType}:{},...e.name?{name:e.name}:{},...e.source?{source:e.source}:{},...e.description?{description:e.description}:{}}}r(ie,"createFileArtifactFromPath");function re(t,e={}){let i=e.mediaType??$(t);if(!i)throw new u("UNSUPPORTED_MEDIA_TYPE",`Cannot infer video media type from path: ${t}.`);return{kind:"video",path:t,mediaType:i,...e.name?{name:e.name}:{},...e.source?{source:e.source}:{},...e.description?{description:e.description}:{}}}r(re,"createVideoArtifactFromPath");import{Jimp as ne}from"jimp";var F=2e3,C=Math.floor(3.75*1024*1024),oe=[80,60,40];async function A(t,e={}){let i=e.maxDimension??F,o=e.targetBytes??C;if(t.length===0)throw new p("Empty image buffer.",{code:"IMAGE_DECODE_FAILED"});let n;try{n=await ne.read(t)}catch(c){let I=c instanceof Error?c.message:String(c);throw new p(`Failed to decode image: ${I}`,{code:"IMAGE_DECODE_FAILED",cause:c})}let{width:a,height:d}=n.bitmap,s=Math.max(a,d);if(s>i){let c=i/s;n.resize({w:Math.max(1,Math.round(a*c)),h:Math.max(1,Math.round(d*c))})}let m=n.bitmap.width,l=n.bitmap.height;if(e.preferMediaType!=="image/jpeg"){let c=await n.getBuffer("image/png");if(c.length<=o)return{buffer:Buffer.from(c),mediaType:"image/png",width:m,height:l}}for(let c of oe){let I=await n.getBuffer("image/jpeg",{quality:c});if(I.length<=o)return{buffer:Buffer.from(I),mediaType:"image/jpeg",width:m,height:l}}if(e.preferMediaType==="image/jpeg"){let c=await n.getBuffer("image/png");if(c.length<=o)return{buffer:Buffer.from(c),mediaType:"image/png",width:m,height:l}}throw new p(`Image still exceeds budget (${o} bytes raw) after PNG and JPEG q40 compression. Try a smaller image or take a fresh screenshot of a smaller region.`,{code:"IMAGE_TOO_LARGE"})}r(A,"normalizePastedImage");import{spawn as L}from"node:child_process";import{mkdtemp as ae,readFile as se,rm as de}from"node:fs/promises";import{tmpdir as me}from"node:os";import U from"node:path";var q=5e3;async function X(){switch(process.platform){case"darwin":return ce();case"win32":return fe();case"linux":return pe();default:throw new u("UNSUPPORTED_PLATFORM",`Clipboard image fallback is not supported on platform "${process.platform}".`)}}r(X,"readClipboardImage");async function ue(t={}){let e=await X();return e?A(e,t):null}r(ue,"readAndNormalizeClipboardImage");async function j(t){let e=await ae(U.join(me(),"kodax-clip-")),i=U.join(e,"clip.png");try{return await t(i)}finally{await de(e,{recursive:!0,force:!0}).catch(o=>{})}}r(j,"runWithTempPng");async function ce(){return j(async t=>{let e=`set png_data to (the clipboard as \xABclass PNGf\xBB)
-set fh to open for access POSIX file "${t.replace(/"/g,'\\"')}" with write permission
-write png_data to fh
-close access fh`;return await G("osascript",["-e",e])?B(t):null})}r(ce,"readMacClipboard");async function fe(){return j(async t=>{let e=["Add-Type -AssemblyName System.Drawing | Out-Null","$img = Get-Clipboard -Format Image","if ($null -eq $img) { exit 1 }",`$img.Save('${t.replace(/'/g,"''")}', [System.Drawing.Imaging.ImageFormat]::Png)`].join("; ");return await G("powershell",["-NoProfile","-Command",e])?B(t):null})}r(fe,"readWinClipboard");async function pe(){return await K("wl-paste",["--type","image/png"])??K("xclip",["-selection","clipboard","-t","image/png","-o"])}r(pe,"readLinuxClipboard");async function B(t){try{let e=await se(t);return e.length>0?e:null}catch(e){return null}}r(B,"readNonEmptyFile");function G(t,e){return new Promise(i=>{let o=!1,n=L(t,[...e],{stdio:"ignore"}),a=setTimeout(()=>{o||(o=!0,n.kill(),i(!1))},q);n.once("error",()=>{o||(o=!0,clearTimeout(a),i(!1))}),n.once("exit",d=>{o||(o=!0,clearTimeout(a),i(d===0))})})}r(G,"runCommand");function K(t,e){return new Promise(i=>{let o=!1,n=[],a=L(t,[...e],{stdio:["ignore","pipe","ignore"]}),d=setTimeout(()=>{o||(o=!0,a.kill(),i(null))},q);a.stdout?.on("data",s=>n.push(s)),a.once("error",()=>{o||(o=!0,clearTimeout(d),i(null))}),a.once("exit",s=>{if(o)return;if(o=!0,clearTimeout(d),s!==0){i(null);return}let m=Buffer.concat(n);i(m.length>0?m:null)})})}r(K,"collectStdoutBytes");import{createHash as le}from"node:crypto";import{mkdir as ge,readdir as he,stat as Te,unlink as ye,writeFile as Ie}from"node:fs/promises";import{tmpdir as Ee}from"node:os";import x from"node:path";var Y="KODAX_PASTE_TMP_DIR",z=1440*60*1e3;function Q(){return process.env[Y]??x.join(Ee(),"kodax-paste")}r(Q,"resolvePasteTmpDir");function we(t){let e=t?.trim().replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"");return e&&e.length>0?e:"paste"}r(we,"sanitizeFileNamePrefix");async function _e(t,e={}){let i=e.directory??Q();await ge(i,{recursive:!0});let o=t.mediaType==="image/jpeg"?".jpg":".png",n=le("sha256").update(t.buffer).digest("hex").slice(0,16),a=`${we(e.fileNamePrefix)}-${n}${o}`,d=x.join(i,a);return await Ie(d,t.buffer),{type:"image",path:d,mediaType:t.mediaType}}r(_e,"persistImageAsBlock");async function Ae(t=Date.now()){let e=Q(),i;try{i=await he(e)}catch(a){return 0}let o=t-z,n=0;return await Promise.all(i.filter(a=>/-[0-9a-f]{16}\.(?:png|jpg)$/.test(a)).map(async a=>{let d=x.join(e,a);try{(await Te(d)).mtimeMs<o&&(await ye(d),n+=1)}catch(s){}})),n}r(Ae,"prunePasteTmpDir");var h=["image/png","image/jpeg","image/webp","image/gif"],T=["video/mp4","video/mpeg","video/quicktime","video/x-msvideo","video/x-flv","video/webm","video/x-ms-wmv","video/3gpp"],xe=[],ke=new Set(["anthropic","openai"]),Me=new Set(["ark-coding/doubao-seed-2.0-code","ark-coding/doubao-seed-2.0-pro","ark-coding/kimi-k2.6","ark-coding/kimi-k2.7-code","ark-coding/minimax-m3","qwen-token-plan/qwen3.8-max-preview","qwen-token-plan/qwen3.7-plus","qwen-token-plan/qwen3.6-flash"]),De=new Set(["kimi-code/kimi-for-coding","kimi-code/kimi-for-coding-highspeed","kimi-code/k3","kimi/kimi-k2.5","kimi/kimi-k2.6","kimi/kimi-k2.7-code","kimi/kimi-k2.7-code-highspeed","minimax-coding/minimax-m3","minimax/minimax-m3","mimo-coding/mimo-v2.5","mimo/mimo-v2.5"]);function k(t){return{nativeSupported:!1,sdkSupported:!1,status:"unsupported",mediaTypes:[],maxCount:0,reason:t}}r(k,"unsupported");function Pe(t){return{nativeSupported:!0,sdkSupported:!0,status:"supported",mediaTypes:h,nativeMediaTypes:h,reason:t}}r(Pe,"supportedImage");function ve(t){return{nativeSupported:!0,sdkSupported:!1,status:"provider-native-unwired",mediaTypes:[],nativeMediaTypes:T,maxCount:0,reason:t}}r(ve,"nativeVideoUnwired");function Se(t){return t.trim().toLowerCase()}r(Se,"normalizeProvider");function be(t){return _[t]?.model}r(be,"resolveProviderDefaultModel");function V(t,e){if(!e)return;let i=e.trim().toLowerCase();if(t==="kimi"){if(i==="k2.5")return"kimi-k2.5";if(i==="k2.6")return"kimi-k2.6";if(i==="k2.7-code")return"kimi-k2.7-code";if(i==="k2.7-code-highspeed")return"kimi-k2.7-code-highspeed"}return t==="kimi-code"&&i==="k3-256k"?"k3":(t==="minimax-coding"||t==="minimax")&&i==="minimax-m3"?"minimax-m3":i}r(V,"normalizeModel");function Re(t){if(!ke.has(t))return!1;let e=_[t];return e?R(e.capabilityProfile).multimodalSupport!=="none":!1}r(Re,"hasOfficialImageSupport");function Oe(t,e){let i=V(t,e);if(!i)return!1;let o=`${t}/${i}`;return De.has(o)}r(Oe,"hasSourceBackedNativeMedia");function Ne(t,e){let i=V(t,e);return i?Me.has(`${t}/${i}`):!1}r(Ne,"hasSourceBackedImage");function $e(t,e,i){if(i)return"source-backed";if(e){if(t==="openai")return"openai-official";if(t==="anthropic")return"anthropic-official"}}r($e,"resolveImageCapabilityRoute");function Fe(t){switch(t){case"openai-official":return"Model route supports KodaX image input. Direct-path image/gif is sent as image/gif, but OpenAI requires non-animated GIF semantics.";case"anthropic-official":return"Model route supports KodaX image input. Direct-path image/gif is sent as image/gif, but Anthropic uses only the first frame of animated GIFs.";case"source-backed":return"Model route supports KodaX image input. Direct-path image/gif is sent as image/gif; animated-GIF interpretation is provider-owned."}}r(Fe,"imageCapabilityReason");function M(t){let e=Se(t.provider),i=t.model?.trim()||be(e),o=Re(e),n=Oe(e,i),a=n||Ne(e,i),d=$e(e,o,a),s=d!==void 0,m=n;return{text:!0,image:s?Pe(Fe(d)):k("No verified KodaX image-input route for this provider/model."),video:m?ve("Model route is native-video capable, but KodaX SDK video sending is not wired yet. Reject or downgrade before send."):k("No verified native video route for this provider/model."),file:k("File artifact contract is stable, but KodaX SDK file sending/extraction is not wired yet. Reject or downgrade before send.")}}r(M,"getModelInputCapabilities");function Ce(t){return h.includes(t)}r(Ce,"isKnownImageMediaType");function Ue(t){return T.includes(t)}r(Ue,"isKnownVideoMediaType");function D(t){return`${t.provider}${t.model?`/${t.model}`:""}`}r(D,"routeLabel");function P(t){return t.reason?`${t.status}: ${t.reason}`:t.status}r(P,"capabilityDetail");function v(t,e){if(t.length===0)return;let i=M(e);for(let o of t){let n=o;if(n.kind==="image"){if(!i.image.nativeSupported||!i.image.sdkSupported)throw new u("MODEL_INPUT_UNSUPPORTED",`Provider/model cannot consume image artifacts: ${D(e)}.`,{detail:P(i.image)});if(typeof n.mediaType=="string"&&!Ce(n.mediaType))throw new u("UNSUPPORTED_MEDIA_TYPE",`Unsupported image media type: ${n.mediaType}.`);continue}throw n.kind==="video"?typeof n.mediaType!="string"||!Ue(n.mediaType)?new u("UNSUPPORTED_MEDIA_TYPE",`Unsupported video media type: ${String(n.mediaType)}.`,{detail:`Supported video media types: ${T.join(", ")}`}):new u("MODEL_INPUT_UNSUPPORTED",`Provider/model cannot consume video artifacts through this SDK runtime: ${D(e)}.`,{detail:P(i.video)}):n.kind==="file"?typeof n.mediaType=="string"&&typeof n.mimeType=="string"&&n.mediaType!==n.mimeType?new u("UNSUPPORTED_MEDIA_TYPE",`File artifact mediaType and mimeType disagree: ${n.mediaType} != ${n.mimeType}.`):new u("MODEL_INPUT_UNSUPPORTED",`Provider/model cannot consume file artifacts through this SDK runtime: ${D(e)}.`,{detail:P(i.file)}):new u("MODEL_INPUT_UNSUPPORTED",`Unsupported input artifact kind: ${String(n.kind)}.`)}}r(v,"validateInputArtifactsForModel");var g={user:0,background:1};function Ke(t,e){return g[t]<=g[e]}r(Ke,"priorityWithinMax");function W(t,e){return!(t.agentId!==e.agentId||!Ke(t.priority,e.maxPriority)||e.mode!==void 0&&t.mode!==e.mode||e.id!==void 0&&t.id!==e.id||e.predicate&&!e.predicate(t))}r(W,"matchesFilter");var w=class{static{r(this,"MessageQueue")}messages=[];nextSeq=1;listeners=new Set;snapshotRef=Object.freeze([]);notify(e){this.snapshotRef=Object.freeze([...this.messages]);for(let i of this.listeners)try{i(e)}catch{}}subscribe=r(e=>(this.listeners.add(e),()=>{this.listeners.delete(e)}),"subscribe");getSnapshot=r(()=>this.snapshotRef,"getSnapshot");enqueue(e){let i=`msg-${this.nextSeq++}`,o={id:i,priority:e.priority,mode:e.mode,content:e.content,agentId:e.agentId,inputArtifacts:e.inputArtifacts,taskResult:e.taskResult,enqueuedAt:Date.now()};return this.messages=[...this.messages,o],this.notify({kind:"enqueued",message:o}),i}dequeue(e){let i=[];for(let s=0;s<this.messages.length;s++){let m=this.messages[s];m&&W(m,e)&&i.push({originalIndex:s,message:m})}i.sort((s,m)=>{let l=g[s.message.priority]-g[m.message.priority];return l!==0?l:s.originalIndex-m.originalIndex});let o=e.limit,n=typeof o=="number"&&i.length>o?i.slice(0,o):i;if(n.length===0)return[];let a=new Set(n.map(s=>s.originalIndex));this.messages=this.messages.filter((s,m)=>!a.has(m));let d=n.map(s=>s.message);return this.notify({kind:"dequeued",messages:d}),d}peek(e){let i=[];for(let a=0;a<this.messages.length;a++){let d=this.messages[a];d&&W(d,e)&&i.push({originalIndex:a,message:d})}i.sort((a,d)=>{let s=g[a.message.priority]-g[d.message.priority];return s!==0?s:a.originalIndex-d.originalIndex});let o=e.limit;return(typeof o=="number"&&i.length>o?i.slice(0,o):i).map(a=>a.message)}size(){return this.messages.length}count(e){return this.peek(e).length}has(e){return this.count(e)>0}clear(){if(this.messages.length===0)return;let e=this.messages;this.messages=[],this.notify({kind:"cleared",messages:e})}},E;function y(){return E||(E=new w),E}r(y,"getMessageQueue");function Le(){E=void 0}r(Le,"_resetMessageQueueForTests");function S(t,e){return t?`actor:${t}:${e}`:e==="/root"?void 0:e}r(S,"actorQueueId");var f=new Map;function qe(t){f.set(t,(f.get(t)??0)+1);let e=!1;return()=>{if(e)return;e=!0;let i=f.get(t);i===void 0||i<=1?f.delete(t):f.set(t,i-1)}}r(qe,"registerActiveRootQueueRoute");function b(){if(f.size!==0){if(f.size===1)return f.keys().next().value;throw new Error("Cannot infer queued follow-up target: multiple Actor root sessions are active. Pass sessionId or agentId explicitly.")}}r(b,"resolveActiveRootQueueRoute");function Xe(){f.clear()}r(Xe,"_resetActiveRootQueueRoutesForTests");var H=new Set(["wait_agent"]);function J(t){return t.some(i=>H.has(i))?"background":"user"}r(J,"midTurnDrainPriority");function je(t){let e=J(t.lastTurnToolNames);return y().dequeue({agentId:t.agentId,maxPriority:e,limit:t.limit})}r(je,"maybeDrainMidTurn");function Be(t){if(v(t.inputArtifacts??[],t),t.agentId!==void 0&&t.sessionId!==void 0)throw new Error("enqueueWithArtifacts accepts either agentId or sessionId, not both.");if(t.sessionId!==void 0&&t.sessionId.trim().length===0)throw new Error("enqueueWithArtifacts sessionId must not be empty.");let e=t.agentId??(t.sessionId!==void 0?S(t.sessionId,"/root"):b());return y().enqueue({priority:t.priority??"user",mode:"prompt",content:t.content,agentId:e,inputArtifacts:t.inputArtifacts})}r(Be,"enqueueWithArtifacts");export{u as a,p as b,N as c,$ as d,te as e,ie as f,re as g,F as h,C as i,A as j,X as k,ue as l,Y as m,z as n,_e as o,Ae as p,h as q,T as r,xe as s,M as t,v as u,w as v,y as w,Le as x,S as y,qe as z,b as A,Xe as B,H as C,J as D,je as E,Be as F};

package/dist/chunks/compaction-config-QYCDOW3Q.js

@@ -1,2 +0,0 @@
-// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{a}from"./chunk-QH56WEHK.js";import"./chunk-UJS7JAO6.js";import"./chunk-GAFFYJU3.js";import"./chunk-PP53SIIL.js";import"./chunk-F7AIEHSS.js";import"./chunk-ONUPGMER.js";export{a as loadCompactionConfig};

package/dist/chunks/host-KS4TJKWQ.js

@@ -1,2 +0,0 @@
-// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{j as a}from"./chunk-MVCAFD6M.js";import"./chunk-VK5QTHS6.js";import"./chunk-MBAPT2R5.js";import"./chunk-C7TZAT3S.js";import"./chunk-XXQLPTAN.js";import"./chunk-UJS7JAO6.js";import"./chunk-GAFFYJU3.js";import"./chunk-PP53SIIL.js";import"./chunk-F7AIEHSS.js";import"./chunk-ONUPGMER.js";export{a as startManagedWorkflow};

package/dist/chunks/run-manager-L7MKGQNX.js

@@ -1,2 +0,0 @@
-// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{I as a,J as b}from"./chunk-VK5QTHS6.js";import"./chunk-C7TZAT3S.js";import"./chunk-XXQLPTAN.js";import"./chunk-UJS7JAO6.js";import"./chunk-GAFFYJU3.js";import"./chunk-PP53SIIL.js";import"./chunk-F7AIEHSS.js";import"./chunk-ONUPGMER.js";export{a as createWorkflowRunManager,b as getDefaultWorkflowRunManager};