@kodax-ai/kodax 0.7.79 → 0.7.80

package/dist/types-chunks/{bash-prefix-extractor.d-CNSidpmv.d.ts → bash-prefix-extractor.d-DStqKIlu.d.ts}

@@ -1,4 +1,4 @@
-import { bI as KodaXGoalState, ae as AgentMessage, eq as StopHookFn, c1 as KodaXSessionLineage, o as AgentActorStore, aI as AgentTurnExecutor, x as AgentBudgetPort, j as AgentActorOwner, D as AgentControllerHealth, h as AgentActorClient, T as AgentExecutionResult, $ as AgentExecutorPlaneBinding, bO as KodaXJsonValue, bC as KodaXExtensionSessionRecord, f as Agent, eS as WorkflowIsolation, bD as KodaXExtensionSessionState, bU as KodaXSessionArtifactLedgerEntry, ea as SessionErrorMetadata, c9 as KodaXSessionScope, ca as KodaXSessionStorage, bp as GuardrailPermissionIntent, db as MemoryContextIdentity, dn as MemoryPack, aQ as AskUserQuestionOptions, aM as AskUserAnswer, aO as AskUserMultiOptions, eP as WorkflowEventCorrelation, a_ as CompactionUpdate, f4 as WorkflowProcessEvent, eO as WorkflowEvent, dC as MemoryReviewPlan, bR as KodaXMemoryOutcomeDigest, bl as Guardrail, b5 as DiscoveredInstance, bM as KodaXInputArtifact, dD as MemoryReviewRunner, eG as UnifiedLearningReviewRunner } from './controller.d-RGV7Pjv9.js';
+import { bI as KodaXGoalState, ae as AgentMessage, er as StopHookFn, c1 as KodaXSessionLineage, o as AgentActorStore, aI as AgentTurnExecutor, x as AgentBudgetPort, j as AgentActorOwner, D as AgentControllerHealth, h as AgentActorClient, T as AgentExecutionResult, $ as AgentExecutorPlaneBinding, bO as KodaXJsonValue, bC as KodaXExtensionSessionRecord, f as Agent, eT as WorkflowIsolation, bD as KodaXExtensionSessionState, bU as KodaXSessionArtifactLedgerEntry, eb as SessionErrorMetadata, c9 as KodaXSessionScope, ca as KodaXSessionStorage, bp as GuardrailPermissionIntent, db as MemoryContextIdentity, dn as MemoryPack, aQ as AskUserQuestionOptions, aM as AskUserAnswer, aO as AskUserMultiOptions, eQ as WorkflowEventCorrelation, a_ as CompactionUpdate, f5 as WorkflowProcessEvent, eP as WorkflowEvent, dC as MemoryReviewPlan, bR as KodaXMemoryOutcomeDigest, bl as Guardrail, b5 as DiscoveredInstance, bM as KodaXInputArtifact, dD as MemoryReviewRunner, eH as UnifiedLearningReviewRunner } from './controller.d-C2aHqzHj.js';
 import { Diagnostic, Position, Location, Hover, DocumentSymbol, SymbolInformation, WorkspaceSymbol, CallHierarchyItem, CallHierarchyIncomingCall, CallHierarchyOutgoingCall } from 'vscode-languageserver-protocol';
 import { a1 as KodaXTokenUsage, k as KodaXMessage, a2 as KodaXToolDefinition, aa as KodaXWireReasoningEffort, V as KodaXTaskRoutingDecision, W as KodaXTaskType, X as KodaXTaskWorkIntent, R as KodaXTaskComplexity, M as KodaXRiskLevel, h as KodaXHarnessProfile, f as KodaXExecutionMode, b as KodaXChildFanoutClass, G as KodaXReasoningMode, L as KodaXReviewScale } from './types.d-CgrXrFrq.js';
 import { d as SkillDynamicContextExecutor, I as ISkillRegistry } from './types.d-BbtGlKZu.js';
@@ -1364,7 +1364,7 @@ interface ExtensionRuntimeContract extends CapabilityRuntimeContract {
  *                            eligibility is still driven by `planModeAllowed`,
  *                            unchanged.
  *   - `'mutates-network'` — performs a network request that may mutate remote
- *                            state (web_fetch with a mutating method, mcp_call).
+ *                            state (for example mcp_call).
  *   - `'mutates-state'`   — changes internal session/agent state without
  *                            FS or shell side effects (todo_update,
  *                            send_message, spawn_agent, followup_task,
@@ -1850,10 +1850,12 @@ interface KodaXEvents {
     onTurnStarted?: (event: KodaXTurnStartedEvent) => void;
     onTurnCompleted?: (event: KodaXTurnCompletedEvent) => void;
     onTurnFailed?: (event: KodaXTurnFailedEvent) => void;
+    /** `maxIter` is the active Runner invocation's fuse, not a task-wide budget. */
     onIterationStart?: (iter: number, maxIter: number, meta?: KodaXActivityEventMeta) => void;
     /** Called after each iteration with current token count for UI updates */
     onIterationEnd?: (info: {
         iter: number;
+        /** Active Runner invocation fuse; zero is reserved for unbounded callers. */
         maxIter: number;
         tokenCount: number;
         tokenSource: 'api' | 'estimate';

package/dist/types-chunks/{capsule.d-B3q98pLQ.d.ts → capsule.d-BuFJaYxA.d.ts}

@@ -1,5 +1,5 @@
 import { k as KodaXMessage } from './types.d-CgrXrFrq.js';
-import { ae as AgentMessage, e9 as SessionEntry, e7 as Session, eb as SessionExtension, c1 as KodaXSessionLineage, bO as KodaXJsonValue, aW as CompactionDetails, bB as KodaXCompactMemorySeed, bZ as KodaXSessionEntry, cb as KodaXSessionTreeNode, c0 as KodaXSessionLabelEntry, b$ as KodaXSessionGoalEntry, bW as KodaXSessionClientNoticeEntry, c7 as KodaXSessionRewindMarkerEntry, c2 as KodaXSessionMemoryOutcomeDigestEntry, c3 as KodaXSessionMemoryReviewReceiptEntry, c6 as KodaXSessionNavigationOptions, bU as KodaXSessionArtifactLedgerEntry, bj as FileOperations, eV as WorkflowMeta, eW as WorkflowModelHint, eX as WorkflowModule } from './controller.d-RGV7Pjv9.js';
+import { ae as AgentMessage, ea as SessionEntry, e8 as Session, ec as SessionExtension, c1 as KodaXSessionLineage, bO as KodaXJsonValue, aW as CompactionDetails, bB as KodaXCompactMemorySeed, bZ as KodaXSessionEntry, cb as KodaXSessionTreeNode, c0 as KodaXSessionLabelEntry, b$ as KodaXSessionGoalEntry, bW as KodaXSessionClientNoticeEntry, c7 as KodaXSessionRewindMarkerEntry, c2 as KodaXSessionMemoryOutcomeDigestEntry, c3 as KodaXSessionMemoryReviewReceiptEntry, c6 as KodaXSessionNavigationOptions, bU as KodaXSessionArtifactLedgerEntry, bj as FileOperations, eW as WorkflowMeta, eX as WorkflowModelHint, eY as WorkflowModule } from './controller.d-C2aHqzHj.js';
 
 /**
  * @kodax-ai/agent Constants
@@ -18,24 +18,15 @@ declare const KODAX_API_MIN_INTERVAL = 0.5;
 declare const PROMISE_PATTERN: RegExp;
 
 /**
- * @kodax-ai/agent Tokenizer
+ * Provider-neutral, non-blocking token estimation.
  *
- * Token 估算 - 使用 tiktoken 进行精确计算
+ * This intentionally avoids Provider-specific BPE vocabularies on the main
+ * runtime thread. Provider usage remains the authoritative context baseline;
+ * these estimates account for new messages and enforce protective budgets.
  */
 
-/**
- * 估算消息的 token 数量
- *
- * 精确计算包括：
- * - 消息结构开销（每条约 4 tokens）
- * - 角色标识
- * - 内容文本
- * - 工具调用和结果
- */
 declare function estimateTokens(messages: readonly KodaXMessage[]): number;
-/**
- * 计算单个文本的 token 数量（便捷函数）
- */
+/** Estimate a text value without loading a BPE vocabulary or token array. */
 declare function countTokens(text: string): number;
 
 /**

package/dist/types-chunks/{controller.d-RGV7Pjv9.d.ts → controller.d-C2aHqzHj.d.ts}

@@ -2233,16 +2233,17 @@ interface RunOptions {
     readonly permissionIntent?: GuardrailPermissionIntent;
     /**
      * Per-run override for the tool-loop iteration cap. When omitted, the
-     * loop uses `MAX_TOOL_LOOP_ITERATIONS` (20) — a safe ceiling for
-     * stand-alone agent runs. Managed-task orchestration (multi-role
-     * handoff chain: Scout → Planner → Generator → Evaluator) needs a much
-     * higher cap because the iteration counter is shared across every
-     * role in the chain. Legacy `runManagedTask` gave each role its own
-     * `DEFAULT_MANAGED_WORK_BUDGET` (200) — the Runner-driven path passes
-     * that value here so long investigations don't trip the safety valve
-     * after ~20 tool calls.
+     * loop uses `MAX_TOOL_LOOP_ITERATIONS` (20), a safe ceiling for
+     * stand-alone runs. Terminal continuations may consume the Runner's small
+     * bounded continuation reserve unless `maxTotalIterations` narrows it.
      */
     readonly maxToolLoopIterations?: number;
+    /**
+     * Optional absolute per-run ceiling that continuation reserves cannot
+     * extend. Callers that omit it retain the bounded continuation reserve;
+     * managed orchestration uses it as a mechanical runaway fuse.
+     */
+    readonly maxTotalIterations?: number;
     /**
      * v0.7.26 parity: observer callbacks fired around every tool
      * invocation. Legacy `runManagedTask` emitted `events.onToolResult`
@@ -2525,6 +2526,13 @@ interface RunnerRecoveryTranscriptCarrier {
 }
 declare function attachRunnerRecoveryTranscript(error: Error, messages: readonly AgentMessage[]): void;
 declare function readRunnerRecoveryTranscript(error: unknown): readonly AgentMessage[] | undefined;
+/** Structured failure emitted when a Runner exhausts its mechanical fuse. */
+declare class RunnerIterationLimitError extends Error {
+    readonly code = "RUNNER_ITERATION_LIMIT";
+    readonly limitReached = true;
+    constructor(message: string, messages: readonly AgentMessage[]);
+}
+declare function isRunnerIterationLimitError(error: unknown): error is RunnerIterationLimitError;
 /**
  * Stream events emitted by `Runner.runStream`. The event surface is
  * intentionally small in v0.7.23; FEATURE_084 expands it to mirror the
@@ -4917,5 +4925,5 @@ declare class AgentActorController {
 }
 declare function createAgentActorController(options?: AgentControllerOptions): Promise<AgentActorController>;
 
-export { ASK_USER_BACK_SIGNAL as A, ASK_USER_CUSTOM_INPUT_SIGNAL as a, DEFAULT_SYSTEM_CAP as b2, GuardrailBlockedError as bm, GuardrailEscalateError as bo, InvariantSession as bz, MAX_TOOL_LOOP_ITERATIONS as c$, LearningCapabilityError as cK, LearnedAreaStore as cn, Runner as dY, Tracer as eC, WorkflowEventRecorder as eQ, SpanImpl as ei, exactInvokedSkillSnapshotForSession as f$, admitAndRecordLearnedSkillInvocation as fA, admitLearnedSkillBinding as fB, asSingleSelection as fC, assertLearnedCapabilityTransition as fD, attachRunnerRecoveryTranscript as fE, buildAssistantMessageFromLlmResult as fF, buildSystemPrompt as fG, buildToolResultMessage as fH, canTransitionLearnedCapability as fI, collectGuardrails as fJ, commitLearnedSkillRevision as fK, completeLearnedSkillOutcome as fL, completeLearnedSkillSessionOutcomes as fM, createAgent as fN, createAgentActorController as fO, createHandoff as fP, createInMemorySession as fQ, createInvariantSessionForAgent as fR, createLearnedCapabilityScope as fS, createLearnedSkillRecord as fT, createStateWriter as fU, createTrace as fV, createWorkflowProcessTracker as fW, defaultTracer as fX, detectInstructionsInjection as fY, discoverInstances as fZ, eventFromCapability as f_, _resetAdmittedAgentBindings as fy, _resetPresetDispatchers as fz, executeRunnerToolCall as g0, extractAssistantTextFromMessage as g1, getActiveUserInteraction as g2, getAdmittedAgentBindings as g3, hashMemoryIdentityComponent as g4, invokeLearnedSkillCanary as g5, isAskUserCustomInputAnswer as g6, isFinalWorkflowProcessStatus as g7, isLearnedCapabilityRecordV2 as g8, isRunnableTool as g9, slugifyLearnedCapabilityName as gA, stageLearnedSkillRevision as gB, validateDeclarativeSkillSpec as gC, isRunnerLlmResult as ga, isUnifiedLearningReviewModelInput as gb, learningEventIdFor as gc, learningEventKindForLifecycle as gd, listLearnedSkillUsageReceipts as ge, matchesMemoryApplicability as gf, memoryApplicabilityFingerprint as gg, normalizeHostMetadata as gh, normalizeUnifiedLearningReview as gi, quarantineLearnedSkillRevision as gj, readRunnerRecoveryTranscript as gk, reconcileLearnedSkillBindingOutcomes as gl, recordLearnedSkillOffered as gm, registerPresetDispatcher as gn, releaseLearnedSkillBinding as go, renderDeclarativeSkill as gp, resolveLearnedAreaPaths as gq, resolveProjectLearnedAreaRoot as gr, runAdmissionAudit as gs, runInputGuardrails as gt, runOutputGuardrails as gu, runToolAfterGuardrails as gv, runToolBeforeGuardrails as gw, sanitizeUnifiedLearningReviewInput as gx, setActiveUserInteraction as gy, setAdmittedAgentBindings as gz, AgentActorController as i };
-export type { AgentExecutorPlaneBinding as $, AgentCapabilityRequirements as B, AgentContinuationInput as C, AgentControllerHealth as D, AgentControllerOptions as E, AgentCredentialBroker as F, AgentDataClassification as G, AgentDetail as H, AgentDispatchContext as I, AgentDispatchPolicy as J, AgentDispatchPolicyDecision as K, AgentDispatchPolicyInput as L, AgentDispatchabilitySnapshot as M, AgentDispatchabilityStatus as N, AgentEffectDeclaration as O, AgentEvent as P, AgentEventKind as Q, AgentExecutionInput as R, AgentExecutionKind as S, AgentExecutionResult as T, AgentExecutor as U, AgentExecutorEvent as V, AgentExecutorFactory as W, AgentExecutorFactoryContext as X, AgentExecutorPlane as Y, AgentExecutorPlaneBackgroundErrorContext as Z, AgentExecutorPlaneBackgroundErrorHandler as _, CreateAgentExecutorPlaneOptions as a$, AgentExecutorPlaneStore as a0, AgentExecutorPreflightResult as a1, AgentExecutorProtocol as a2, AgentExecutorTaskReference as a3, AgentExecutorTaskSnapshot as a4, AgentFollowupResult as a5, AgentForkTurns as a6, AgentInterruptScope as a7, AgentJsonObject as a8, AgentJsonValue as a9, AgentTaskService as aA, AgentTaskSnapshot as aB, AgentTaskStartInput as aC, AgentTaskState as aD, AgentTaskUsage as aE, AgentTool as aF, AgentTreeSnapshot as aG, AgentTurn as aH, AgentTurnExecutor as aI, AgentTurnRef as aJ, AgentTurnState as aK, AgentTurnSummary as aL, AskUserAnswer as aM, AskUserCustomInputAnswer as aN, AskUserMultiOptions as aO, AskUserQuestionItem as aP, AskUserQuestionOptions as aQ, AskUserSelectionAnswer as aR, CapabilitySupport as aS, CommitLearnedSkillRevisionInput as aT, CompactionAnchor as aU, CompactionConfig as aV, CompactionDetails as aW, CompactionReport as aX, CompactionResult as aY, CompactionSpanData as aZ, CompactionUpdate as a_, AgentLimitReached as aa, AgentListEntry as ab, AgentMailboxMessage as ac, AgentManifest as ad, AgentMessage as ae, AgentMetadataValue as af, AgentMiddlewareDeclaration as ag, AgentMutationOptions as ah, AgentOutput as ai, AgentPreflightInput as aj, AgentPreflightResult as ak, AgentProgressItem as al, AgentProgressKind as am, AgentProgressUpdate as an, AgentReasoningProfile as ao, AgentRegistrationEnabledMutationOptions as ap, AgentRegistrationMutationOptions as aq, AgentRegistrationService as ar, AgentSpanData as as, AgentSpawnInput as at, AgentTaskCancellation as au, AgentTaskCorrelation as av, AgentTaskEvent as aw, AgentTaskFilter as ax, AgentTaskProgress as ay, AgentTaskRegistrationSnapshot as az, AdmissionAuditOptions as b, KodaXSessionGoalEntry as b$, CreateLearnedSkillRecordInput as b0, CurrentTodoSummary as b1, DeclarativeSkillSpec as b3, Deliverable as b4, DiscoveredInstance as b5, DiscoveryOptions as b6, DispatchableAgentDescriptor as b7, DispatchableAgentListing as b8, DispatchableAgentOrigin as b9, KodaXCompactMemoryProgress as bA, KodaXCompactMemorySeed as bB, KodaXExtensionSessionRecord as bC, KodaXExtensionSessionState as bD, KodaXExtensionStore as bE, KodaXExtensionStoreEntry as bF, KodaXFileInputArtifact as bG, KodaXGoalEventType as bH, KodaXGoalState as bI, KodaXGoalStatus as bJ, KodaXImageInputArtifact as bK, KodaXImageMediaType as bL, KodaXInputArtifact as bM, KodaXInputArtifactSource as bN, KodaXJsonValue as bO, KodaXMemoryInfluenceRef as bP, KodaXMemoryIntent as bQ, KodaXMemoryOutcomeDigest as bR, KodaXMemoryOutcomeEvidence as bS, KodaXSessionArchiveMarkerEntry as bT, KodaXSessionArtifactLedgerEntry as bU, KodaXSessionBranchSummaryEntry as bV, KodaXSessionClientNoticeEntry as bW, KodaXSessionCompactionEntry as bX, KodaXSessionData as bY, KodaXSessionEntry as bZ, KodaXSessionEntryBase as b_, DispatchableAgentQuery as ba, EvidenceSpanData as bb, ExactInvokedSkillSnapshot as bc, ExternalAgentEffectDeclaration as bd, ExternalAgentHealth as be, ExternalAgentProtocol as bf, ExternalAgentRegistration as bg, ExternalAgentRegistrationSummary as bh, FanoutSpanData as bi, FileOperations as bj, GenerationSpanData as bk, Guardrail as bl, GuardrailContext as bn, GuardrailPermissionIntent as bp, GuardrailSpanData as bq, GuardrailVerdict as br, Handoff as bs, HandoffSpanData as bt, InMemorySessionOptions as bu, InputGuardrail as bv, InstanceDiscoveryFs as bw, InvariantId as bx, InvariantResult as by, AdmissionCtx as c, KodaXSessionLabelEntry as c0, KodaXSessionLineage as c1, KodaXSessionMemoryOutcomeDigestEntry as c2, KodaXSessionMemoryReviewReceiptEntry as c3, KodaXSessionMessageEntry as c4, KodaXSessionMeta as c5, KodaXSessionNavigationOptions as c6, KodaXSessionRewindMarkerEntry as c7, KodaXSessionRuntimeInfo as c8, KodaXSessionScope as c9, LearnedSkillBindingAdmission as cA, LearnedSkillCanaryOutcome as cB, LearnedSkillDecisionDisposition as cC, LearnedSkillInvocationAdmission as cD, LearnedSkillInvokedReceipt as cE, LearnedSkillOfferedReceipt as cF, LearnedSkillOutcomeReceipt as cG, LearnedSkillUsageReceipt as cH, LearningAction as cI, LearningActionDriver as cJ, LearningCapabilityErrorCode as cL, LearningClientEventState as cM, LearningClientRecord as cN, LearningEvent as cO, LearningEventKind as cP, LearningExplicitUserAuthority as cQ, LearningNotificationState as cR, LearningPage as cS, LearningQuery as cT, LearningReviewEvidencePacket as cU, LearningReviewQualification as cV, LearningReviewVerifierFact as cW, LearningSubscribeOptions as cX, LearningSurfaceSnapshot as cY, LocalAgentTaskInput as cZ, LocalAgentTaskUpdate as c_, KodaXSessionStorage as ca, KodaXSessionTreeNode as cb, KodaXSessionUiHistoryItem as cc, KodaXSessionUiHistoryItemType as cd, KodaXSessionUiTextHistoryItem as ce, KodaXSessionUiTextHistoryItemType as cf, KodaXSessionUiToolCall as cg, KodaXSessionUiToolCallStatus as ch, KodaXSessionUiToolGroupHistoryItem as ci, KodaXSessionWorkspaceKind as cj, KodaXVideoInputArtifact as ck, KodaXVideoMediaType as cl, LearnedAreaPaths as cm, LearnedCapabilityArtifact as co, LearnedCapabilityCanary as cp, LearnedCapabilityCanaryBinding as cq, LearnedCapabilityCanaryInvocation as cr, LearnedCapabilityCarrier as cs, LearnedCapabilityLifecycle as ct, LearnedCapabilityProvenance as cu, LearnedCapabilityRecord as cv, LearnedCapabilityRecordV1 as cw, LearnedCapabilityRecordV2 as cx, LearnedCapabilityScope as cy, LearnedCapabilitySource as cz, AdmissionVerdict as d, RunnerLlmReturn as d$, ManifestPatch as d0, MemoryActionProposal as d1, MemoryApplicability as d2, MemoryApplyPreview as d3, MemoryApplyResult as d4, MemoryApproval as d5, MemoryAuthority as d6, MemoryAutoCuratorInput as d7, MemoryAutoCuratorResult as d8, MemoryBodySnapshot as d9, MemoryReviewPersistenceDecision as dA, MemoryReviewPersistenceKind as dB, MemoryReviewPlan as dC, MemoryReviewRunner as dD, MemoryReviewTrigger as dE, MemoryScope as dF, MemorySourceAdapter as dG, MemoryVisibility as dH, MessageEntry as dI, NormalizedLearnedSkillDecision as dJ, ObserveCtx as dK, OutputGuardrail as dL, PersistedSessionState as dM, PresetDispatcher as dN, PresetTracingContext as dO, QualityInvariant as dP, ReadonlyMutationTracker as dQ, ReadonlyRecorder as dR, ReasoningDepth as dS, RecentlyModifiedFile as dT, RunEvent as dU, RunOptions as dV, RunResult as dW, RunnableTool as dX, RunnerEvent as dZ, RunnerLlmResult as d_, MemoryClaimKind as da, MemoryContextIdentity as db, MemoryController as dc, MemoryCuratorInput as dd, MemoryDecisionTraceReceipt as de, MemoryEpisodeReviewResult as df, MemoryEvent as dg, MemoryGovernanceFinding as dh, MemoryGovernanceFindingKind as di, MemoryGovernanceReport as dj, MemoryItemRef as dk, MemoryLifecycle as dl, MemoryLifecycleOperationResult as dm, MemoryPack as dn, MemoryPackHint as dp, MemoryPackInput as dq, MemoryPackTraceMetadata as dr, MemoryProposalAction as ds, MemoryRefFilter as dt, MemoryRefKind as du, MemoryRejectResult as dv, MemoryReviewCandidateRef as dw, MemoryReviewDraftAction as dx, MemoryReviewInput as dy, MemoryReviewModelInput as dz, AdmittedHandle as e, WorkflowOutcomeStatus as e$, RunnerRecoveryTranscriptCarrier as e0, RunnerToolCall as e1, RunnerToolContext as e2, RunnerToolObserver as e3, RunnerToolResult as e4, RunnerToolResultBatch as e5, RunnerToolResultBatchTransform as e6, Session as e7, SessionDispatchResult as e8, SessionEntry as e9, Trace as eA, TraceOptions as eB, TracerOptions as eD, UnifiedLearningReviewModelInput as eE, UnifiedLearningReviewResult as eF, UnifiedLearningReviewRunner as eG, UserInteraction as eH, WorkflowAgentBackend as eI, WorkflowApi as eJ, WorkflowApproval as eK, WorkflowApprovalSummary as eL, WorkflowArtifactRef as eM, WorkflowBudget as eN, WorkflowEvent as eO, WorkflowEventCorrelation as eP, WorkflowEventType as eR, WorkflowIsolation as eS, WorkflowLimits as eT, WorkflowLogEvent as eU, WorkflowMeta as eV, WorkflowModelHint as eW, WorkflowModule as eX, WorkflowOutcome as eY, WorkflowOutcomeError as eZ, WorkflowOutcomeResult as e_, SessionErrorMetadata as ea, SessionExtension as eb, SessionForkOptions as ec, SessionMeta as ed, SessionStateSnapshot as ee, Span as ef, SpanData as eg, SpanError as eh, SpanImplOptions as ej, StagedLearnedSkillArtifact as ek, StartTraceOptions as el, StateWriter as em, StateWriterFs as en, StateWriterOptions as eo, StopHookContext as ep, StopHookFn as eq, StopHookResult as er, StopHookSpanData as es, SystemCap as et, TerminalCtx as eu, ToolBeforeOutcome as ev, ToolCallSpanData as ew, ToolCapability as ex, ToolGuardrail as ey, ToolPermission as ez, Agent as f, WorkflowOutcomeUsage as f0, WorkflowParallelOptions as f1, WorkflowProcessArtifact as f2, WorkflowProcessCounts as f3, WorkflowProcessEvent as f4, WorkflowProcessItem as f5, WorkflowProcessItemKind as f6, WorkflowProcessItemOrigin as f7, WorkflowProcessItemStatus as f8, WorkflowProcessProgress as f9, WorkflowProcessSnapshot as fa, WorkflowProcessSource as fb, WorkflowProcessStatus as fc, WorkflowProcessSummaryStatus as fd, WorkflowProcessTokenUsage as fe, WorkflowProcessTracker as ff, WorkflowProcessTrackerOptions as fg, WorkflowRun as fh, WorkflowRunState as fi, WorkflowRunStatus as fj, WorkflowSpawnAgentInput as fk, WorkflowSynthesis as fl, WorkflowSynthesizeInput as fm, WorkflowTaskHandle as fn, WorkflowTaskResult as fo, WorkflowTaskSnapshot as fp, WorkflowTaskStatus as fq, WorkflowTaskSummaryEventUpdate as fr, WorkflowTaskSummaryKind as fs, WorkflowTaskSummaryUpdate as ft, WorkflowTaskUsage as fu, WorkflowTaskVerification as fv, WorkflowTaskVerificationResult as fw, WorkflowWaitOptions as fx, AgentActor as g, AgentActorClient as h, AgentActorOwner as j, AgentActorSnapshot as k, AgentActorSnapshotV1 as l, AgentActorSnapshotV2 as m, AgentActorState as n, AgentActorStore as o, AgentArtifactDescriptor as p, AgentArtifactPolicy as q, AgentArtifactPolicyDecision as r, AgentArtifactPolicyInput as s, AgentArtifactReference as t, AgentBudgetAdmission as u, AgentBudgetAdmissionInput as v, AgentBudgetExhausted as w, AgentBudgetPort as x, AgentCapabilities as y, AgentCapabilityDeclaration as z };
+export { ASK_USER_BACK_SIGNAL as A, ASK_USER_CUSTOM_INPUT_SIGNAL as a, DEFAULT_SYSTEM_CAP as b2, GuardrailBlockedError as bm, GuardrailEscalateError as bo, InvariantSession as bz, MAX_TOOL_LOOP_ITERATIONS as c$, LearningCapabilityError as cK, LearnedAreaStore as cn, Runner as dY, RunnerIterationLimitError as d_, Tracer as eD, WorkflowEventRecorder as eR, SpanImpl as ej, eventFromCapability as f$, _resetPresetDispatchers as fA, admitAndRecordLearnedSkillInvocation as fB, admitLearnedSkillBinding as fC, asSingleSelection as fD, assertLearnedCapabilityTransition as fE, attachRunnerRecoveryTranscript as fF, buildAssistantMessageFromLlmResult as fG, buildSystemPrompt as fH, buildToolResultMessage as fI, canTransitionLearnedCapability as fJ, collectGuardrails as fK, commitLearnedSkillRevision as fL, completeLearnedSkillOutcome as fM, completeLearnedSkillSessionOutcomes as fN, createAgent as fO, createAgentActorController as fP, createHandoff as fQ, createInMemorySession as fR, createInvariantSessionForAgent as fS, createLearnedCapabilityScope as fT, createLearnedSkillRecord as fU, createStateWriter as fV, createTrace as fW, createWorkflowProcessTracker as fX, defaultTracer as fY, detectInstructionsInjection as fZ, discoverInstances as f_, _resetAdmittedAgentBindings as fz, exactInvokedSkillSnapshotForSession as g0, executeRunnerToolCall as g1, extractAssistantTextFromMessage as g2, getActiveUserInteraction as g3, getAdmittedAgentBindings as g4, hashMemoryIdentityComponent as g5, invokeLearnedSkillCanary as g6, isAskUserCustomInputAnswer as g7, isFinalWorkflowProcessStatus as g8, isLearnedCapabilityRecordV2 as g9, setActiveUserInteraction as gA, setAdmittedAgentBindings as gB, slugifyLearnedCapabilityName as gC, stageLearnedSkillRevision as gD, validateDeclarativeSkillSpec as gE, isRunnableTool as ga, isRunnerIterationLimitError as gb, isRunnerLlmResult as gc, isUnifiedLearningReviewModelInput as gd, learningEventIdFor as ge, learningEventKindForLifecycle as gf, listLearnedSkillUsageReceipts as gg, matchesMemoryApplicability as gh, memoryApplicabilityFingerprint as gi, normalizeHostMetadata as gj, normalizeUnifiedLearningReview as gk, quarantineLearnedSkillRevision as gl, readRunnerRecoveryTranscript as gm, reconcileLearnedSkillBindingOutcomes as gn, recordLearnedSkillOffered as go, registerPresetDispatcher as gp, releaseLearnedSkillBinding as gq, renderDeclarativeSkill as gr, resolveLearnedAreaPaths as gs, resolveProjectLearnedAreaRoot as gt, runAdmissionAudit as gu, runInputGuardrails as gv, runOutputGuardrails as gw, runToolAfterGuardrails as gx, runToolBeforeGuardrails as gy, sanitizeUnifiedLearningReviewInput as gz, AgentActorController as i };
+export type { AgentExecutorPlaneBinding as $, AgentCapabilityRequirements as B, AgentContinuationInput as C, AgentControllerHealth as D, AgentControllerOptions as E, AgentCredentialBroker as F, AgentDataClassification as G, AgentDetail as H, AgentDispatchContext as I, AgentDispatchPolicy as J, AgentDispatchPolicyDecision as K, AgentDispatchPolicyInput as L, AgentDispatchabilitySnapshot as M, AgentDispatchabilityStatus as N, AgentEffectDeclaration as O, AgentEvent as P, AgentEventKind as Q, AgentExecutionInput as R, AgentExecutionKind as S, AgentExecutionResult as T, AgentExecutor as U, AgentExecutorEvent as V, AgentExecutorFactory as W, AgentExecutorFactoryContext as X, AgentExecutorPlane as Y, AgentExecutorPlaneBackgroundErrorContext as Z, AgentExecutorPlaneBackgroundErrorHandler as _, CreateAgentExecutorPlaneOptions as a$, AgentExecutorPlaneStore as a0, AgentExecutorPreflightResult as a1, AgentExecutorProtocol as a2, AgentExecutorTaskReference as a3, AgentExecutorTaskSnapshot as a4, AgentFollowupResult as a5, AgentForkTurns as a6, AgentInterruptScope as a7, AgentJsonObject as a8, AgentJsonValue as a9, AgentTaskService as aA, AgentTaskSnapshot as aB, AgentTaskStartInput as aC, AgentTaskState as aD, AgentTaskUsage as aE, AgentTool as aF, AgentTreeSnapshot as aG, AgentTurn as aH, AgentTurnExecutor as aI, AgentTurnRef as aJ, AgentTurnState as aK, AgentTurnSummary as aL, AskUserAnswer as aM, AskUserCustomInputAnswer as aN, AskUserMultiOptions as aO, AskUserQuestionItem as aP, AskUserQuestionOptions as aQ, AskUserSelectionAnswer as aR, CapabilitySupport as aS, CommitLearnedSkillRevisionInput as aT, CompactionAnchor as aU, CompactionConfig as aV, CompactionDetails as aW, CompactionReport as aX, CompactionResult as aY, CompactionSpanData as aZ, CompactionUpdate as a_, AgentLimitReached as aa, AgentListEntry as ab, AgentMailboxMessage as ac, AgentManifest as ad, AgentMessage as ae, AgentMetadataValue as af, AgentMiddlewareDeclaration as ag, AgentMutationOptions as ah, AgentOutput as ai, AgentPreflightInput as aj, AgentPreflightResult as ak, AgentProgressItem as al, AgentProgressKind as am, AgentProgressUpdate as an, AgentReasoningProfile as ao, AgentRegistrationEnabledMutationOptions as ap, AgentRegistrationMutationOptions as aq, AgentRegistrationService as ar, AgentSpanData as as, AgentSpawnInput as at, AgentTaskCancellation as au, AgentTaskCorrelation as av, AgentTaskEvent as aw, AgentTaskFilter as ax, AgentTaskProgress as ay, AgentTaskRegistrationSnapshot as az, AdmissionAuditOptions as b, KodaXSessionGoalEntry as b$, CreateLearnedSkillRecordInput as b0, CurrentTodoSummary as b1, DeclarativeSkillSpec as b3, Deliverable as b4, DiscoveredInstance as b5, DiscoveryOptions as b6, DispatchableAgentDescriptor as b7, DispatchableAgentListing as b8, DispatchableAgentOrigin as b9, KodaXCompactMemoryProgress as bA, KodaXCompactMemorySeed as bB, KodaXExtensionSessionRecord as bC, KodaXExtensionSessionState as bD, KodaXExtensionStore as bE, KodaXExtensionStoreEntry as bF, KodaXFileInputArtifact as bG, KodaXGoalEventType as bH, KodaXGoalState as bI, KodaXGoalStatus as bJ, KodaXImageInputArtifact as bK, KodaXImageMediaType as bL, KodaXInputArtifact as bM, KodaXInputArtifactSource as bN, KodaXJsonValue as bO, KodaXMemoryInfluenceRef as bP, KodaXMemoryIntent as bQ, KodaXMemoryOutcomeDigest as bR, KodaXMemoryOutcomeEvidence as bS, KodaXSessionArchiveMarkerEntry as bT, KodaXSessionArtifactLedgerEntry as bU, KodaXSessionBranchSummaryEntry as bV, KodaXSessionClientNoticeEntry as bW, KodaXSessionCompactionEntry as bX, KodaXSessionData as bY, KodaXSessionEntry as bZ, KodaXSessionEntryBase as b_, DispatchableAgentQuery as ba, EvidenceSpanData as bb, ExactInvokedSkillSnapshot as bc, ExternalAgentEffectDeclaration as bd, ExternalAgentHealth as be, ExternalAgentProtocol as bf, ExternalAgentRegistration as bg, ExternalAgentRegistrationSummary as bh, FanoutSpanData as bi, FileOperations as bj, GenerationSpanData as bk, Guardrail as bl, GuardrailContext as bn, GuardrailPermissionIntent as bp, GuardrailSpanData as bq, GuardrailVerdict as br, Handoff as bs, HandoffSpanData as bt, InMemorySessionOptions as bu, InputGuardrail as bv, InstanceDiscoveryFs as bw, InvariantId as bx, InvariantResult as by, AdmissionCtx as c, KodaXSessionLabelEntry as c0, KodaXSessionLineage as c1, KodaXSessionMemoryOutcomeDigestEntry as c2, KodaXSessionMemoryReviewReceiptEntry as c3, KodaXSessionMessageEntry as c4, KodaXSessionMeta as c5, KodaXSessionNavigationOptions as c6, KodaXSessionRewindMarkerEntry as c7, KodaXSessionRuntimeInfo as c8, KodaXSessionScope as c9, LearnedSkillBindingAdmission as cA, LearnedSkillCanaryOutcome as cB, LearnedSkillDecisionDisposition as cC, LearnedSkillInvocationAdmission as cD, LearnedSkillInvokedReceipt as cE, LearnedSkillOfferedReceipt as cF, LearnedSkillOutcomeReceipt as cG, LearnedSkillUsageReceipt as cH, LearningAction as cI, LearningActionDriver as cJ, LearningCapabilityErrorCode as cL, LearningClientEventState as cM, LearningClientRecord as cN, LearningEvent as cO, LearningEventKind as cP, LearningExplicitUserAuthority as cQ, LearningNotificationState as cR, LearningPage as cS, LearningQuery as cT, LearningReviewEvidencePacket as cU, LearningReviewQualification as cV, LearningReviewVerifierFact as cW, LearningSubscribeOptions as cX, LearningSurfaceSnapshot as cY, LocalAgentTaskInput as cZ, LocalAgentTaskUpdate as c_, KodaXSessionStorage as ca, KodaXSessionTreeNode as cb, KodaXSessionUiHistoryItem as cc, KodaXSessionUiHistoryItemType as cd, KodaXSessionUiTextHistoryItem as ce, KodaXSessionUiTextHistoryItemType as cf, KodaXSessionUiToolCall as cg, KodaXSessionUiToolCallStatus as ch, KodaXSessionUiToolGroupHistoryItem as ci, KodaXSessionWorkspaceKind as cj, KodaXVideoInputArtifact as ck, KodaXVideoMediaType as cl, LearnedAreaPaths as cm, LearnedCapabilityArtifact as co, LearnedCapabilityCanary as cp, LearnedCapabilityCanaryBinding as cq, LearnedCapabilityCanaryInvocation as cr, LearnedCapabilityCarrier as cs, LearnedCapabilityLifecycle as ct, LearnedCapabilityProvenance as cu, LearnedCapabilityRecord as cv, LearnedCapabilityRecordV1 as cw, LearnedCapabilityRecordV2 as cx, LearnedCapabilityScope as cy, LearnedCapabilitySource as cz, AdmissionVerdict as d, RunnerLlmResult as d$, ManifestPatch as d0, MemoryActionProposal as d1, MemoryApplicability as d2, MemoryApplyPreview as d3, MemoryApplyResult as d4, MemoryApproval as d5, MemoryAuthority as d6, MemoryAutoCuratorInput as d7, MemoryAutoCuratorResult as d8, MemoryBodySnapshot as d9, MemoryReviewPersistenceDecision as dA, MemoryReviewPersistenceKind as dB, MemoryReviewPlan as dC, MemoryReviewRunner as dD, MemoryReviewTrigger as dE, MemoryScope as dF, MemorySourceAdapter as dG, MemoryVisibility as dH, MessageEntry as dI, NormalizedLearnedSkillDecision as dJ, ObserveCtx as dK, OutputGuardrail as dL, PersistedSessionState as dM, PresetDispatcher as dN, PresetTracingContext as dO, QualityInvariant as dP, ReadonlyMutationTracker as dQ, ReadonlyRecorder as dR, ReasoningDepth as dS, RecentlyModifiedFile as dT, RunEvent as dU, RunOptions as dV, RunResult as dW, RunnableTool as dX, RunnerEvent as dZ, MemoryClaimKind as da, MemoryContextIdentity as db, MemoryController as dc, MemoryCuratorInput as dd, MemoryDecisionTraceReceipt as de, MemoryEpisodeReviewResult as df, MemoryEvent as dg, MemoryGovernanceFinding as dh, MemoryGovernanceFindingKind as di, MemoryGovernanceReport as dj, MemoryItemRef as dk, MemoryLifecycle as dl, MemoryLifecycleOperationResult as dm, MemoryPack as dn, MemoryPackHint as dp, MemoryPackInput as dq, MemoryPackTraceMetadata as dr, MemoryProposalAction as ds, MemoryRefFilter as dt, MemoryRefKind as du, MemoryRejectResult as dv, MemoryReviewCandidateRef as dw, MemoryReviewDraftAction as dx, MemoryReviewInput as dy, MemoryReviewModelInput as dz, AdmittedHandle as e, WorkflowOutcomeResult as e$, RunnerLlmReturn as e0, RunnerRecoveryTranscriptCarrier as e1, RunnerToolCall as e2, RunnerToolContext as e3, RunnerToolObserver as e4, RunnerToolResult as e5, RunnerToolResultBatch as e6, RunnerToolResultBatchTransform as e7, Session as e8, SessionDispatchResult as e9, ToolPermission as eA, Trace as eB, TraceOptions as eC, TracerOptions as eE, UnifiedLearningReviewModelInput as eF, UnifiedLearningReviewResult as eG, UnifiedLearningReviewRunner as eH, UserInteraction as eI, WorkflowAgentBackend as eJ, WorkflowApi as eK, WorkflowApproval as eL, WorkflowApprovalSummary as eM, WorkflowArtifactRef as eN, WorkflowBudget as eO, WorkflowEvent as eP, WorkflowEventCorrelation as eQ, WorkflowEventType as eS, WorkflowIsolation as eT, WorkflowLimits as eU, WorkflowLogEvent as eV, WorkflowMeta as eW, WorkflowModelHint as eX, WorkflowModule as eY, WorkflowOutcome as eZ, WorkflowOutcomeError as e_, SessionEntry as ea, SessionErrorMetadata as eb, SessionExtension as ec, SessionForkOptions as ed, SessionMeta as ee, SessionStateSnapshot as ef, Span as eg, SpanData as eh, SpanError as ei, SpanImplOptions as ek, StagedLearnedSkillArtifact as el, StartTraceOptions as em, StateWriter as en, StateWriterFs as eo, StateWriterOptions as ep, StopHookContext as eq, StopHookFn as er, StopHookResult as es, StopHookSpanData as et, SystemCap as eu, TerminalCtx as ev, ToolBeforeOutcome as ew, ToolCallSpanData as ex, ToolCapability as ey, ToolGuardrail as ez, Agent as f, WorkflowOutcomeStatus as f0, WorkflowOutcomeUsage as f1, WorkflowParallelOptions as f2, WorkflowProcessArtifact as f3, WorkflowProcessCounts as f4, WorkflowProcessEvent as f5, WorkflowProcessItem as f6, WorkflowProcessItemKind as f7, WorkflowProcessItemOrigin as f8, WorkflowProcessItemStatus as f9, WorkflowProcessProgress as fa, WorkflowProcessSnapshot as fb, WorkflowProcessSource as fc, WorkflowProcessStatus as fd, WorkflowProcessSummaryStatus as fe, WorkflowProcessTokenUsage as ff, WorkflowProcessTracker as fg, WorkflowProcessTrackerOptions as fh, WorkflowRun as fi, WorkflowRunState as fj, WorkflowRunStatus as fk, WorkflowSpawnAgentInput as fl, WorkflowSynthesis as fm, WorkflowSynthesizeInput as fn, WorkflowTaskHandle as fo, WorkflowTaskResult as fp, WorkflowTaskSnapshot as fq, WorkflowTaskStatus as fr, WorkflowTaskSummaryEventUpdate as fs, WorkflowTaskSummaryKind as ft, WorkflowTaskSummaryUpdate as fu, WorkflowTaskUsage as fv, WorkflowTaskVerification as fw, WorkflowTaskVerificationResult as fx, WorkflowWaitOptions as fy, AgentActor as g, AgentActorClient as h, AgentActorOwner as j, AgentActorSnapshot as k, AgentActorSnapshotV1 as l, AgentActorSnapshotV2 as m, AgentActorState as n, AgentActorStore as o, AgentArtifactDescriptor as p, AgentArtifactPolicy as q, AgentArtifactPolicyDecision as r, AgentArtifactPolicyInput as s, AgentArtifactReference as t, AgentBudgetAdmission as u, AgentBudgetAdmissionInput as v, AgentBudgetExhausted as w, AgentBudgetPort as x, AgentCapabilities as y, AgentCapabilityDeclaration as z };

package/dist/types-chunks/{guardrail.d-1NLSFTyN.d.ts → guardrail.d-DM-OK0m3.d.ts}

@@ -1,9 +1,10 @@
 import { b as McpServersConfig, M as McpConnectMode, a as McpServerConfig, c as McpTransportKind } from './config.d-CJy1WENT.js';
 import { K as KodaXBaseProvider } from './base.d-DxG0m09Z.js';
 import { a as CostTracker } from './cost-tracker.d-BeaenODW.js';
-import { e1 as RunnerToolCall, ey as ToolGuardrail } from './controller.d-RGV7Pjv9.js';
+import { e2 as RunnerToolCall, ez as ToolGuardrail } from './controller.d-C2aHqzHj.js';
 import { k as KodaXMessage } from './types.d-CgrXrFrq.js';
 import { S as SideQueryDiagnostics } from './side-query.d-CP1LiRiH.js';
+import { by as ToolSideEffect } from './bash-prefix-extractor.d-DStqKIlu.js';
 
 /**
  * FEATURE_200 Phase F (v0.7.45) — MCP domain types extracted from types.ts.
@@ -446,59 +447,13 @@ type ClassifyDecision = ({
  * and any Retry-After/backoff handled by the provider adapter. Keep it bounded
  * so infrastructure failure reaches the configured Accept-edits fallback.
  */
-declare const DEFAULT_CLASSIFIER_TIMEOUT_MS = 30000;
+declare const DEFAULT_CLASSIFIER_TIMEOUT_MS = 45000;
+/** A retry gets a longer deadline because its expanded response budget can take longer to emit. */
+declare const DEFAULT_CLASSIFIER_RETRY_TIMEOUT_MS = 90000;
 /** The classifier returns three short XML tags; a coding-turn-sized budget is wasteful. */
 declare const CLASSIFIER_MAX_OUTPUT_TOKENS = 256;
 declare function classify(opts: ClassifyOptions): Promise<ClassifyDecision>;
 
-/**
- * Denial Tracker — FEATURE_092 Phase 2b.4 (v0.7.33).
- *
- * Tracks classifier blocks per session. When either threshold is crossed,
- * threshold state is exposed for diagnostics and does not mutate the selected
- * Auto engine.
- *
- *   - 3 consecutive blocks → likely an unproductive loop (agent not adapting)
- *   - 20 cumulative blocks → broader classifier-noise pattern in this session
- *
- * Both are session-scoped, shared with subagents (per design doc, to defend
- * against threshold-bypass via spawning).
- *
- * Pure functional API: each operation returns a new tracker. No mutation.
- */
-declare const CONSECUTIVE_THRESHOLD = 3;
-declare const CUMULATIVE_THRESHOLD = 20;
-interface DenialTracker {
-    readonly consecutive: number;
-    readonly cumulative: number;
-}
-declare function createDenialTracker(): DenialTracker;
-declare function recordBlock(t: DenialTracker): DenialTracker;
-declare function recordAllow(t: DenialTracker): DenialTracker;
-declare function shouldFallback$1(t: DenialTracker): boolean;
-
-/**
- * Circuit Breaker — FEATURE_092 Phase 2b.4 (v0.7.33).
- *
- * Sliding-window error counter for classifier failures (timeouts, 5xx, 429,
- * unparseable outputs). When ≥ 5 errors land within a 10-minute window, the
- * callers temporarily skip classifier calls and apply the Accept-edits
- * failure boundary. The selected Auto engine remains `llm`; health state is
- * diagnostic, not a mode change.
- *
- * Pure functional API: each operation returns a new breaker. No mutation.
- * Memory bound: stale timestamps are pruned on each recordError call so
- * the timestamps array never grows unbounded.
- */
-declare const ERROR_THRESHOLD = 5;
-declare const WINDOW_MS: number;
-interface CircuitBreaker {
-    readonly timestamps: readonly number[];
-}
-declare function createCircuitBreaker(): CircuitBreaker;
-declare function recordError(b: CircuitBreaker, now: number): CircuitBreaker;
-declare function shouldFallback(b: CircuitBreaker, now: number): boolean;
-
 /**
  * Historical Tier 0 high-impact pattern detector — FEATURE_158 Step 4.
  *
@@ -527,8 +482,8 @@ declare function shouldFallback(b: CircuitBreaker, now: number): boolean;
  *                        only path here is normally an LLM-emitted shell).
  *
  * Layer note: bash-level `~/.kodax/` writes (e.g. `echo x > ~/.kodax/y`)
- * require AST path-extraction which lives in `@kodax/repl`. The REPL-side
- * collector wired through `extraCollectors` (Step 7) identifies those as
+ * require AST path-extraction. The REPL-side collector wired through
+ * `extraCollectors` (Step 7) identifies those as
  * Tier 0 by emitting a synthetic `user_kodax_write` match via the same
  * `AbsoluteDenyResult` shape. This module handles the file-tool path
  * directly (the most common attack vector) and the four command-string
@@ -563,6 +518,54 @@ type AbsoluteDenyCheck = (call: RunnerToolCall, projectRoot: string, executionCw
  */
 declare function checkAbsoluteDeny(call: RunnerToolCall, projectRoot: string, executionCwd?: string): AbsoluteDenyResult;
 
+/**
+ * Circuit Breaker — FEATURE_092 Phase 2b.4 (v0.7.33).
+ *
+ * Sliding-window error counter for classifier failures (timeouts, 5xx, 429,
+ * unparseable outputs). When ≥ 5 errors land within a 10-minute window, the
+ * callers temporarily skip classifier calls and apply the Accept-edits
+ * failure boundary. The selected Auto engine remains `llm`; health state is
+ * diagnostic, not a mode change.
+ *
+ * Pure functional API: each operation returns a new breaker. No mutation.
+ * Memory bound: stale timestamps are pruned on each recordError call so
+ * the timestamps array never grows unbounded.
+ */
+declare const ERROR_THRESHOLD = 5;
+declare const WINDOW_MS: number;
+interface CircuitBreaker {
+    readonly timestamps: readonly number[];
+}
+declare function createCircuitBreaker(): CircuitBreaker;
+declare function recordError(b: CircuitBreaker, now: number): CircuitBreaker;
+declare function shouldFallback$1(b: CircuitBreaker, now: number): boolean;
+
+/**
+ * Denial Tracker — FEATURE_092 Phase 2b.4 (v0.7.33).
+ *
+ * Tracks classifier blocks per session. When either threshold is crossed,
+ * threshold state is exposed for diagnostics and does not mutate the selected
+ * Auto engine.
+ *
+ *   - 3 consecutive blocks → likely an unproductive loop (agent not adapting)
+ *   - 20 cumulative blocks → broader classifier-noise pattern in this session
+ *
+ * Both are session-scoped, shared with subagents (per design doc, to defend
+ * against threshold-bypass via spawning).
+ *
+ * Pure functional API: each operation returns a new tracker. No mutation.
+ */
+declare const CONSECUTIVE_THRESHOLD = 3;
+declare const CUMULATIVE_THRESHOLD = 20;
+interface DenialTracker {
+    readonly consecutive: number;
+    readonly cumulative: number;
+}
+declare function createDenialTracker(): DenialTracker;
+declare function recordBlock(t: DenialTracker): DenialTracker;
+declare function recordAllow(t: DenialTracker): DenialTracker;
+declare function shouldFallback(t: DenialTracker): boolean;
+
 /**
  * AutoModeToolGuardrail — FEATURE_092 Phase 2b.6 (v0.7.33).
  *
@@ -598,9 +601,8 @@ declare function checkAbsoluteDeny(call: RunnerToolCall, projectRoot: string, ex
  *   independent.
  *
  * Provider capability checks and the explicit `supportsAutoModeClassifier`
- * flag are deferred to follow-up phases. Tier 2 is supplied by the Runtime
- * host because canonical filesystem and shell parsing live in @kodax/repl;
- * the guardrail remains the single decision point.
+ * flag are deferred to follow-up phases. Coding owns the default analyzer and
+ * Tier 2 evaluator so direct SDK and REPL consumers share one decision path.
  */
 
 type AutoModeEngine = 'llm' | 'rules';
@@ -654,6 +656,8 @@ interface AutoModeRulesContext {
      * that equivalence cannot be proven.
      */
     readonly trustProcessEnvironmentPathExpansion?: boolean;
+    /** Trusted host metadata used when a tool has no path-specific analyzer. */
+    readonly toolSideEffect?: ToolSideEffect;
 }
 type AutoModePermissionBoundary = 'workspace' | 'system-temp' | 'outside-workspace' | 'protected' | 'unresolved';
 interface AutoModePermissionTarget {
@@ -686,7 +690,7 @@ interface AutoModePermissionReview {
     readonly operations: readonly AutoModePermissionOperation[];
     readonly risks: readonly string[];
 }
-type AutoModeCallAnalyzer = (call: RunnerToolCall, context: AutoModeRulesContext) => AutoModePermissionReview | Promise<AutoModePermissionReview>;
+type AutoModeCallAnalyzer = (call: RunnerToolCall, context: AutoModeRulesContext) => AutoModePermissionReview | undefined | Promise<AutoModePermissionReview | undefined>;
 type AutoModeRulesDecision = {
     readonly action: 'allow';
 } | {
@@ -732,16 +736,12 @@ interface AutoModeGuardrailConfig {
     /** Mint one exact bash call for workspace-sandboxed execution. */
     readonly admitWorkspaceSandboxCall?: (call: RunnerToolCall, review: AutoModePermissionReview) => void;
     /**
-     * Runtime-owned deterministic Tier-2 evaluator. It is injected rather than
-     * implemented in @kodax/coding because canonical path and shell-AST helpers
-     * live in @kodax/repl. Omitting it preserves fail-closed SDK compatibility:
-     * every non-Tier-1 rules call escalates.
+     * Override for the coding-owned deterministic Tier-2 evaluator.
      */
     readonly evaluateRulesCall?: AutoModeRulesEvaluator;
     /**
-     * Runtime-owned compact facts used by deterministic read admission and the
-     * LLM permission reviewer. When absent or faulty, direct read tools use a
-     * bounded metadata-only projection and remain LLM-reviewed.
+     * Override for the coding-owned compact permission analyzer. An override may
+     * return undefined to decline a call and leave it on the classifier path.
      */
     readonly analyzeCall?: AutoModeCallAnalyzer;
     /**
@@ -750,6 +750,8 @@ interface AutoModeGuardrailConfig {
      * receive a metadata-only fail-closed projection rather than a Tier-1 skip.
      */
     readonly getToolProjection: (toolName: string) => ((input: unknown) => string) | undefined;
+    /** Optional trusted side-effect metadata for analyzer-less tools. */
+    readonly getToolSideEffect?: (toolName: string) => ToolSideEffect | undefined;
     /**
      * Resolve a provider name to an instance. Returns `undefined` when
      * unconfigured / unknown — the guardrail then escalates.
@@ -805,8 +807,8 @@ interface AutoModeGuardrailConfig {
     readonly initialEngine?: AutoModeEngine;
     /**
      * FEATURE_092 phase 2b.7b slice C: classifier sideQuery timeout in ms.
-     * Defaults to 30_000. Resolved by the REPL from `~/.kodax/config.json`
-     * `autoMode.timeoutMs`.
+     * Defaults to 45_000 for the first attempt and 90_000 for the retry.
+     * A configured value applies to both attempts.
      */
     readonly timeoutMs?: number;
     /**
@@ -815,11 +817,9 @@ interface AutoModeGuardrailConfig {
      * doesn't use it (command-string-level) but threads it for uniform
      * collector contract.
      *
-     * Required by FEATURE_158: if omitted, the default coding-side
-     * collectors produce no `outside_project` signal (degrades gracefully),
-     * but **REPL-injected `extraCollectors` will likely require it**.
-     * SDK consumers without a project root should set `projectRoot: ''`
-     * and supply no `extraCollectors`.
+     * When omitted or blank, the guardrail uses `executionCwd`. If neither is
+     * available, path-bearing calls remain unresolved instead of borrowing the
+     * embedder process's ambient cwd as an authorization boundary.
      */
     readonly projectRoot?: string;
     /** Directory used to resolve relative tool paths. Defaults to projectRoot. */
@@ -841,11 +841,8 @@ interface AutoModeGuardrailConfig {
     readonly signalCollectors?: readonly SignalCollector[];
     /**
      * Additional signal collectors to merge with `signalCollectors`.
-     * Primary use: REPL injects a path-aware bash collector built on its
-     * own `extractPathsFromCommand` / `isAlwaysConfirmPath` utilities
-     * (those live in `@kodax/repl` for historical reasons; lifting them
-     * is out-of-scope for FEATURE_158 — see design doc layer-boundary
-     * decision).
+     * Primary use: REPL injects its path-aware bash signal collector. The
+     * underlying shell and path permission utilities are coding-owned.
      *
      * Order: defaults run first, then extras (preserves per-collector
      * signal order).
@@ -910,5 +907,5 @@ interface AutoModeToolGuardrail extends ToolGuardrail {
 }
 declare function createAutoModeToolGuardrail(config: AutoModeGuardrailConfig): AutoModeToolGuardrail;
 
-export { CLASSIFIER_MAX_OUTPUT_TOKENS as C, DEFAULT_CLASSIFIER_TIMEOUT_MS as M, ERROR_THRESHOLD as O, WINDOW_MS as a1, checkAbsoluteDeny as a2, classify as a3, collectAllSignals as a4, computeRulesFingerprint as a5, createAutoModeToolGuardrail as a6, createCircuitBreaker as a7, createDenialTracker as a8, formatAgentsForPrompt as a9, getKodaxGlobalDir as aa, loadAgentsFiles as ab, loadAutoRules as ac, parseAutoRules as ad, parseClassifierOutput as ae, readTrustState as af, recordAllow as ag, recordBlock as ah, recordError as ai, shouldFallback$1 as aj, shouldFallback as ak, trustProjectRules as al, CONSECUTIVE_THRESHOLD as v, CUMULATIVE_THRESHOLD as w };
-export type { ToolCallSignal as $, AbsoluteDenyCheck as A, ClassifierDecision as B, ClassifierFailureKind as D, ClassifierHazard as E, ClassifierObservedProtocol as F, ClassifierOutputWarningCode as G, ClassifierParseFailureCode as H, ClassifierProtocol as I, ClassifierToolProjectionResolver as J, ClassifyDecision as K, ClassifyOptions as L, DenialTracker as N, KodaXMcpConnectMode as P, KodaXMcpServerConfig as Q, KodaXMcpServersConfig as R, KodaXMcpTransport as S, LoadAgentsOptions as T, LoadedRulesSource as U, PermissionIntentEvidence as V, RulesLoadError as W, RulesLoadResult as X, SignalCollector as Y, SkippedRulesSource as Z, TierZeroPatternId as _, AbsoluteDenyMatch as a, TrustState as a0, AbsoluteDenyMiss as b, AbsoluteDenyResult as c, AgentsFile as d, AutoModeAskUser as e, AutoModeAskUserVerdict as f, AutoModeCallAnalyzer as g, AutoModeDecisionDiagnostics as h, AutoModeEngine as i, AutoModeGuardrailConfig as j, AutoModePermissionBoundary as k, AutoModePermissionOperation as l, AutoModePermissionReview as m, AutoModePermissionTarget as n, AutoModeRulesContext as o, AutoModeRulesDecision as p, AutoModeRulesEvaluator as q, AutoModeSharedState as r, AutoModeStats as s, AutoModeToolGuardrail as t, AutoRules as u, CircuitBreaker as x, ClassifierAttemptDiagnostics as y, ClassifierAttemptOutcome as z };
+export { CLASSIFIER_MAX_OUTPUT_TOKENS as C, DEFAULT_CLASSIFIER_RETRY_TIMEOUT_MS as M, DEFAULT_CLASSIFIER_TIMEOUT_MS as N, ERROR_THRESHOLD as P, WINDOW_MS as a2, checkAbsoluteDeny as a3, classify as a4, collectAllSignals as a5, computeRulesFingerprint as a6, createAutoModeToolGuardrail as a7, createCircuitBreaker as a8, createDenialTracker as a9, formatAgentsForPrompt as aa, getKodaxGlobalDir as ab, loadAgentsFiles as ac, loadAutoRules as ad, parseAutoRules as ae, parseClassifierOutput as af, readTrustState as ag, recordAllow as ah, recordBlock as ai, recordError as aj, shouldFallback as ak, shouldFallback$1 as al, trustProjectRules as am, CONSECUTIVE_THRESHOLD as v, CUMULATIVE_THRESHOLD as w };
+export type { TierZeroPatternId as $, AbsoluteDenyCheck as A, ClassifierDecision as B, ClassifierFailureKind as D, ClassifierHazard as E, ClassifierObservedProtocol as F, ClassifierOutputWarningCode as G, ClassifierParseFailureCode as H, ClassifierProtocol as I, ClassifierToolProjectionResolver as J, ClassifyDecision as K, ClassifyOptions as L, DenialTracker as O, KodaXMcpConnectMode as Q, KodaXMcpServerConfig as R, KodaXMcpServersConfig as S, KodaXMcpTransport as T, LoadAgentsOptions as U, LoadedRulesSource as V, PermissionIntentEvidence as W, RulesLoadError as X, RulesLoadResult as Y, SignalCollector as Z, SkippedRulesSource as _, AbsoluteDenyMatch as a, ToolCallSignal as a0, TrustState as a1, AbsoluteDenyMiss as b, AbsoluteDenyResult as c, AgentsFile as d, AutoModeAskUser as e, AutoModeAskUserVerdict as f, AutoModeCallAnalyzer as g, AutoModeDecisionDiagnostics as h, AutoModeEngine as i, AutoModeGuardrailConfig as j, AutoModePermissionBoundary as k, AutoModePermissionOperation as l, AutoModePermissionReview as m, AutoModePermissionTarget as n, AutoModeRulesContext as o, AutoModeRulesDecision as p, AutoModeRulesEvaluator as q, AutoModeSharedState as r, AutoModeStats as s, AutoModeToolGuardrail as t, AutoRules as u, CircuitBreaker as x, ClassifierAttemptDiagnostics as y, ClassifierAttemptOutcome as z };

package/dist/types-chunks/{history-retrieval.d-BAegI14A.d.ts → history-retrieval.d-DImTKgO6.d.ts}

@@ -1,5 +1,5 @@
 import { k as KodaXMessage } from './types.d-CgrXrFrq.js';
-import { c1 as KodaXSessionLineage } from './controller.d-RGV7Pjv9.js';
+import { c1 as KodaXSessionLineage } from './controller.d-C2aHqzHj.js';
 
 type KodaXSessionHistoryScope = 'compacted' | 'all';
 type KodaXSessionHistorySource = 'user' | 'assistant' | 'system' | 'tool' | 'child_task';

package/dist/types-chunks/{public-api.d-BpJhHoa7.d.ts → public-api.d-CewTvUKV.d.ts}

@@ -1,6 +1,6 @@
-import { a as BashPrefixExtractor, t as KodaXAgentMode } from './bash-prefix-extractor.d-CNSidpmv.js';
+import { a as BashPrefixExtractor, t as KodaXAgentMode } from './bash-prefix-extractor.d-DStqKIlu.js';
 import { G as KodaXReasoningMode, k as KodaXMessage, T as KodaXTaskResultMetadata } from './types.d-CgrXrFrq.js';
-import { cY as LearningSurfaceSnapshot$1, cT as LearningQuery, cS as LearningPage, cv as LearnedCapabilityRecord, cO as LearningEvent, cX as LearningSubscribeOptions, bY as KodaXSessionData, c1 as KodaXSessionLineage, c6 as KodaXSessionNavigationOptions, c8 as KodaXSessionRuntimeInfo, ca as KodaXSessionStorage, bZ as KodaXSessionEntry, bU as KodaXSessionArtifactLedgerEntry, bC as KodaXExtensionSessionRecord, cc as KodaXSessionUiHistoryItem, c9 as KodaXSessionScope, k as AgentActorSnapshot, aX as CompactionReport, bO as KodaXJsonValue } from './controller.d-RGV7Pjv9.js';
+import { cY as LearningSurfaceSnapshot$1, cT as LearningQuery, cS as LearningPage, cv as LearnedCapabilityRecord, cO as LearningEvent, cX as LearningSubscribeOptions, bY as KodaXSessionData, c1 as KodaXSessionLineage, c6 as KodaXSessionNavigationOptions, c8 as KodaXSessionRuntimeInfo, ca as KodaXSessionStorage, bZ as KodaXSessionEntry, bU as KodaXSessionArtifactLedgerEntry, bC as KodaXExtensionSessionRecord, cc as KodaXSessionUiHistoryItem, c9 as KodaXSessionScope, k as AgentActorSnapshot, aX as CompactionReport, bO as KodaXJsonValue } from './controller.d-C2aHqzHj.js';
 
 /**
  * TextBuffer - Text buffer management class - 文本缓冲区管理类
@@ -266,19 +266,7 @@ interface ConfirmResult {
     always?: boolean;
     runtimeGrantKind?: 'session' | 'persistent';
 }
-/**
- * Tools that mutate the local filesystem AND accept a `path` input.
- * Eligible for plan-mode's path-aware escape (writes to
- * `.agent/plan_mode_doc.md` or the system temp dir are permitted; all
- * other paths block).
- *
- * Derived from metadata: `sideEffect === 'mutates-fs'` AND
- * `requiredParams.includes('path')`. Tools that mutate the FS without a
- * `path` input (`undo`, `worktree_*`, construction-staircase tools) are
- * NOT in this set — their plan-mode block reason is computed elsewhere
- * via `isToolPlanModeAllowed()` instead of a path check.
- */
-declare const FILE_MODIFICATION_TOOLS: Set<string>;
+
 interface PermissionContext {
     permissionMode: PermissionMode;
     confirmTools: Set<string>;
@@ -1690,5 +1678,5 @@ declare function createSessionManager(opts?: {
     configHome?: string;
 }): SessionManager;
 
-export { DEFAULT_UI_STATE as D, FILE_MODIFICATION_TOOLS as F, KeypressHandlerPriority as G, MemorySessionStorage as O, PERMISSION_MODES as Q, watchSessions as a$, appendClientNotice as aA, archiveSession as aB, compactSession as aC, computeConfirmTools as aD, conversationHistoryFromCapture as aE, createConversationEntryChain as aF, createMemorySessionStorage as aG, createSessionConversationHistoryRevision as aH, createSessionManager as aI, deleteSession as aJ, emptyConversationEntryChain as aK, exportSessionBundle as aL, extendConversationEntryChain as aM, forkSession as aN, isPermissionMode as aO, listRunningSessions as aP, listSessions as aQ, loadFullTranscript as aR, loadSession as aS, normalizePermissionMode as aT, permissionModeDisplayName as aU, readConversationHistory as aV, readFullTranscript as aW, readSessionCapture as aX, rewindSession as aY, setActiveEntry as aZ, unarchiveSession as a_, SessionReadError as ac, StreamingState as ak, TOOL_STATUS_ICONS as am, TextBuffer as an, ToolCallStatus as at, ConversationPageCacheCapacityError as g, FileSessionStorage as k };
-export type { SessionBundleExportFile as $, AppProps as A, KeypressEvent as B, CompactSessionOptions as C, KeypressHandler as E, HistoryEntry as H, InputPromptProps as I, LearningSurfaceSnapshot as J, KeyInfo as K, LearningBinding as L, LegacyMessageListProps as M, ListSessionsOptions as N, Message as P, PastedContent as R, PermissionContext as S, PermissionMode as T, PreparedSessionAppendBaseline as U, PreparedSessionTailDelta as V, PromptEditingMode as W, PromptSubmitPayload as X, RewindSessionOptions as Y, RunningSessionInfo as Z, SessionBundleExportDiagnostic as _, AppState as a, SessionBundleExportOptions as a0, SessionBundleExportResult as a1, SessionBundleExportStatus as a2, SessionConversationHistoryData as a3, SessionConversationHistoryEntry as a4, SessionConversationHistoryIssue as a5, SessionConversationHistoryIssueCode as a6, SessionConversationHistoryStatus as a7, SessionConversationMutationBoundary as a8, SessionData as a9, SessionManager as aa, SessionReadCapture as ab, SessionReadErrorCode as ad, SessionReadOptions as ae, SessionStorage as af, SessionSummary as ag, SessionTranscriptEntry as ah, SessionTranscriptEntryType as ai, StatusBarProps as aj, Suggestion as al, TextBufferOptions as ao, Theme as ap, ThemeColors as aq, ThemeSymbols as ar, ToolCall as as, UIActions as au, UIState as av, UseTextBufferReturn as aw, VisualCursor as ax, VisualLayout as ay, WatchSessionsCallback as az, AppendClientNoticeOptions as b, CompactSessionResult as c, Completer as d, Completion as e, ConfirmResult as f, CreatableHistoryItem as h, CursorPosition as i, DeleteSessionResult as j, ForkSessionOptions as l, FullTranscriptSessionData as m, HistoryItem as n, HistoryItemAssistant as o, HistoryItemBase as p, HistoryItemError as q, HistoryItemEvent as r, HistoryItemHint as s, HistoryItemInfo as t, HistoryItemSidecar as u, HistoryItemSystem as v, HistoryItemThinking as w, HistoryItemToolGroup as x, HistoryItemType as y, HistoryItemUser as z };
+export { DEFAULT_UI_STATE as D, KeypressHandlerPriority as E, FileSessionStorage as F, MemorySessionStorage as N, PERMISSION_MODES as P, archiveSession as aA, compactSession as aB, computeConfirmTools as aC, conversationHistoryFromCapture as aD, createConversationEntryChain as aE, createMemorySessionStorage as aF, createSessionConversationHistoryRevision as aG, createSessionManager as aH, deleteSession as aI, emptyConversationEntryChain as aJ, exportSessionBundle as aK, extendConversationEntryChain as aL, forkSession as aM, isPermissionMode as aN, listRunningSessions as aO, listSessions as aP, loadFullTranscript as aQ, loadSession as aR, normalizePermissionMode as aS, permissionModeDisplayName as aT, readConversationHistory as aU, readFullTranscript as aV, readSessionCapture as aW, rewindSession as aX, setActiveEntry as aY, unarchiveSession as aZ, watchSessions as a_, SessionReadError as ab, StreamingState as aj, TOOL_STATUS_ICONS as al, TextBuffer as am, ToolCallStatus as as, appendClientNotice as az, ConversationPageCacheCapacityError as g };
+export type { SessionBundleExportOptions as $, AppProps as A, KeypressHandler as B, CompactSessionOptions as C, LearningSurfaceSnapshot as G, HistoryEntry as H, InputPromptProps as I, LegacyMessageListProps as J, KeyInfo as K, LearningBinding as L, ListSessionsOptions as M, Message as O, PastedContent as Q, PermissionContext as R, PermissionMode as S, PreparedSessionAppendBaseline as T, PreparedSessionTailDelta as U, PromptEditingMode as V, PromptSubmitPayload as W, RewindSessionOptions as X, RunningSessionInfo as Y, SessionBundleExportDiagnostic as Z, SessionBundleExportFile as _, AppState as a, SessionBundleExportResult as a0, SessionBundleExportStatus as a1, SessionConversationHistoryData as a2, SessionConversationHistoryEntry as a3, SessionConversationHistoryIssue as a4, SessionConversationHistoryIssueCode as a5, SessionConversationHistoryStatus as a6, SessionConversationMutationBoundary as a7, SessionData as a8, SessionManager as a9, SessionReadCapture as aa, SessionReadErrorCode as ac, SessionReadOptions as ad, SessionStorage as ae, SessionSummary as af, SessionTranscriptEntry as ag, SessionTranscriptEntryType as ah, StatusBarProps as ai, Suggestion as ak, TextBufferOptions as an, Theme as ao, ThemeColors as ap, ThemeSymbols as aq, ToolCall as ar, UIActions as at, UIState as au, UseTextBufferReturn as av, VisualCursor as aw, VisualLayout as ax, WatchSessionsCallback as ay, AppendClientNoticeOptions as b, CompactSessionResult as c, Completer as d, Completion as e, ConfirmResult as f, CreatableHistoryItem as h, CursorPosition as i, DeleteSessionResult as j, ForkSessionOptions as k, FullTranscriptSessionData as l, HistoryItem as m, HistoryItemAssistant as n, HistoryItemBase as o, HistoryItemError as p, HistoryItemEvent as q, HistoryItemHint as r, HistoryItemInfo as s, HistoryItemSidecar as t, HistoryItemSystem as u, HistoryItemThinking as v, HistoryItemToolGroup as w, HistoryItemType as x, HistoryItemUser as y, KeypressEvent as z };

package/dist/types-chunks/{repl.d-CZ12Ow3X.d.ts → repl.d-DvXQtgr7.d.ts}

@@ -1,8 +1,8 @@
-import { n as ResolvedAutoModeSettings, b as CommandDefinition, e as CommandSource, c as CommandInfo, C as Command$1, I as InteractiveContext, a as CommandCallbacks, g as CurrentConfig, d as CommandInvocationRequest, f as CommandWorkflowInvocationRequest, p as RuntimeSurfaceStatus } from './utils.d-CGpHavsU.js';
-import { af as SessionStorage$1, T as PermissionMode, L as LearningBinding } from './public-api.d-BpJhHoa7.js';
-import { a1 as KodaXOptions, ad as KodaXResult } from './bash-prefix-extractor.d-CNSidpmv.js';
-import { ca as KodaXSessionStorage, bY as KodaXSessionData } from './controller.d-RGV7Pjv9.js';
-import { s as AutoModeStats } from './guardrail.d-1NLSFTyN.js';
+import { n as ResolvedAutoModeSettings, b as CommandDefinition, e as CommandSource, c as CommandInfo, C as Command$1, I as InteractiveContext, a as CommandCallbacks, g as CurrentConfig, d as CommandInvocationRequest, f as CommandWorkflowInvocationRequest, p as RuntimeSurfaceStatus } from './utils.d-BpACJmzt.js';
+import { ae as SessionStorage$1, S as PermissionMode, L as LearningBinding } from './public-api.d-CewTvUKV.js';
+import { a1 as KodaXOptions, ad as KodaXResult } from './bash-prefix-extractor.d-DStqKIlu.js';
+import { ca as KodaXSessionStorage, bY as KodaXSessionData } from './controller.d-C2aHqzHj.js';
+import { s as AutoModeStats } from './guardrail.d-DM-OK0m3.js';
 
 interface ReplRuntimePermissionGrantSuggestion {
     readonly id: string;

package/dist/types-chunks/{run-manager.d-CX3AUocA.d.ts → run-manager.d-C6ahvZqK.d.ts}

@@ -1,4 +1,4 @@
-import { fg as WorkflowProcessTrackerOptions, eO as WorkflowEvent, fa as WorkflowProcessSnapshot, f4 as WorkflowProcessEvent } from './controller.d-RGV7Pjv9.js';
+import { fh as WorkflowProcessTrackerOptions, eP as WorkflowEvent, fb as WorkflowProcessSnapshot, f5 as WorkflowProcessEvent } from './controller.d-C2aHqzHj.js';
 
 /**
  * FEATURE_246 Part A0 (ADR-046) — neutral workflow run lifecycle manager.

package/dist/types-chunks/{sdk-session-B3cfJKqF.d.ts → sdk-session-C59RUrri.d.ts}

@@ -1,6 +1,6 @@
-import { h as CreatableHistoryItem, as as ToolCall } from './public-api.d-BpJhHoa7.js';
+import { h as CreatableHistoryItem, ar as ToolCall } from './public-api.d-CewTvUKV.js';
 import { k as KodaXMessage, c as KodaXContentBlock } from './types.d-CgrXrFrq.js';
-import { cc as KodaXSessionUiHistoryItem, cg as KodaXSessionUiToolCall } from './controller.d-RGV7Pjv9.js';
+import { cc as KodaXSessionUiHistoryItem, cg as KodaXSessionUiToolCall } from './controller.d-C2aHqzHj.js';
 
 interface RestoreHistoryItemsFromSessionInput {
     messages: readonly KodaXMessage[];