@kodax-ai/kodax 0.7.92 → 0.7.94

package/dist/types-chunks/{bash-prefix-extractor.d-BMi_TJIY.d.ts → bash-prefix-extractor.d-AOJdvO4r.d.ts}

@@ -2,7 +2,7 @@ import { ai as KodaXGoalState, K as KodaXSessionLineage, aj as AgentActorStore,
 import { Diagnostic, Position, Location, Hover, DocumentSymbol, SymbolInformation, WorkspaceSymbol, CallHierarchyItem, CallHierarchyIncomingCall, CallHierarchyOutgoingCall } from 'vscode-languageserver-protocol';
 import { d as KodaXTokenUsage, b as KodaXMessage, f as KodaXToolDefinition, n as KodaXWireReasoningEffort, H as KodaXTaskRoutingDecision, I as KodaXTaskType, a8 as KodaXTaskWorkIntent, a6 as KodaXTaskComplexity, D as KodaXRiskLevel, Z as KodaXHarnessProfile, s as KodaXExecutionMode, p as KodaXChildFanoutClass, o as KodaXReasoningMode, C as KodaXReviewScale } from './types.d-Cv09EdJR.js';
 import { d as AgentMessage, ag as StopHookFn, ah as AgentControllerHealth, ai as AgentExecutorPlaneBinding, A as Agent, aj as WorkflowIsolation, ak as GuardrailPermissionIntent, k as AskUserQuestionOptions, g as AskUserAnswer, i as AskUserMultiOptions, D as WorkflowEventCorrelation, n as CompactionUpdate, c as WorkflowProcessEvent, a as WorkflowEvent, G as Guardrail, al as DiscoveredInstance, K as KodaXInputArtifact, am as UnifiedLearningReviewRunner } from './controller.d-Bm1i9RVj.js';
-import { a as SkillDynamicContextExecutor, I as ISkillRegistry } from './types.d-BEMcUOng.js';
+import { a as SkillDynamicContextExecutor, I as ISkillRegistry } from './types.d-ssh6zRaf.js';
 import { K as KodaXLlmTimeoutConfig, C as CostTracker } from './cost-tracker.d-MTAt6N7b.js';
 import { p as MemoryRecallRunner } from './types-D8OiIEwA.js';
 import { C as CapabilityKind, f as CapabilitySearchSnapshot, b as CapabilityResult } from './capability.d-K664nHOS.js';
@@ -180,6 +180,8 @@ interface ContentHashCache {
      * a new file, deferring to the soft-warning layer, etc.).
      */
     checkStale(filePath: string): StaleCheckResult;
+    /** Compare against content already read through a narrower filesystem capability. */
+    checkStaleContent(filePath: string, currentContent: string | undefined): StaleCheckResult;
     /** Record the post-edit hash so subsequent self-edits do not false-alarm. */
     recordWrite(filePath: string, newContent: string): void;
     /** Drop the recorded hash. Use on delete or when the LLM explicitly forgets. */
@@ -2392,6 +2394,9 @@ interface KodaXAgentProfile {
     readonly verification?: KodaXTaskVerificationContract;
 }
 type KodaXSkillProjectionConfidence = 'high' | 'medium' | 'low';
+interface KodaXSkillInvocationRuntimePolicy {
+    readonly enforceAtRuntime?: boolean;
+}
 interface KodaXSkillInvocationContext {
     name: string;
     path: string;
@@ -2403,6 +2408,8 @@ interface KodaXSkillInvocationContext {
     argumentHint?: string;
     model?: string;
     hookEvents?: string[];
+    /** Marker requesting trusted policy rehydration inside daemon/worker transports. */
+    runtimePolicy?: KodaXSkillInvocationRuntimePolicy;
     expandedContent: string;
 }
 interface KodaXSkillMap {
@@ -2907,6 +2914,8 @@ interface KodaXShellSandboxPrepareInput {
     readonly cwd: string;
     readonly env: NodeJS.ProcessEnv;
     readonly windowsVerbatimArguments?: boolean;
+    /** Internal callers may forbid the broker's ordinary host fallback. */
+    readonly fallbackToNormalExecution?: boolean;
     /** Caller cancellation while waiting for sandbox admission/preparation. */
     readonly signal?: AbortSignal;
     /** Absolute wall-clock deadline shared with the command timeout. */
@@ -2945,6 +2954,43 @@ interface KodaXShellSandbox {
     readonly processTreeContainment?: 'root-exit-drains';
     prepare(input: KodaXShellSandboxPrepareInput): Promise<KodaXPreparedShellSandboxInvocation | undefined>;
 }
+interface KodaXTextFileSnapshot {
+    readonly state: 'missing' | 'present';
+    readonly content: string;
+    /** Opaque identity for an optimistic compare-and-write conflict check. */
+    readonly revision: string;
+    /** Canonical backup authority bound to the opened snapshot identity. */
+    readonly backupPath: string;
+}
+interface KodaXTextFileMutationRequest {
+    readonly toolCallId?: string;
+    readonly toolName: 'edit' | 'insert_after_anchor' | 'multi_edit' | 'undo' | 'write';
+    readonly toolInput: Readonly<Record<string, unknown>>;
+    readonly path: string;
+    readonly signal?: AbortSignal;
+}
+/** Runtime-owned narrow filesystem capability for direct text mutation tools. */
+interface KodaXTextFileMutationSandbox {
+    /** Whether this capability covers the path; uncovered paths use the legacy host fence. */
+    canHandlePath?(filePath: string): boolean;
+    read(input: KodaXTextFileMutationRequest): Promise<{
+        readonly status: 'ok';
+        readonly snapshot: KodaXTextFileSnapshot;
+    } | {
+        readonly status: 'unavailable';
+    }>;
+    write(input: KodaXTextFileMutationRequest & {
+        readonly content: string;
+        readonly createParentDirectories: boolean;
+        readonly expectedRevision: string;
+    }): Promise<{
+        readonly status: 'written';
+    } | {
+        readonly status: 'conflict';
+    } | {
+        readonly status: 'unavailable';
+    }>;
+}
 interface KodaXContextOptions {
     /**
      * Runtime-authenticated authority for permission review. Child runtimes must
@@ -3013,6 +3059,8 @@ interface KodaXContextOptions {
     shellExecution?: KodaXShellExecutionContract;
     /** Runtime-owned OS sandbox broker; never accepted from serialized model input. */
     shellSandbox?: KodaXShellSandbox;
+    /** Runtime-owned OS-sandboxed optimistic compare-and-write path for direct text mutations. */
+    textFileMutationSandbox?: KodaXTextFileMutationSandbox;
     /** Fail-closed host policy applied to every concrete file a read tool opens. */
     assertReadablePath?: (candidate: string) => void;
     /**
@@ -3766,6 +3814,8 @@ interface KodaXToolExecutionContext {
     sandbox?: KodaXSandboxOptions;
     /** Runtime-owned OS sandbox broker for selected concrete shell calls. */
     shellSandbox?: KodaXShellSandbox;
+    /** Runtime-owned OS-sandboxed read/compare/write path for direct text mutations. */
+    textFileMutationSandbox?: KodaXTextFileMutationSandbox;
     /** Structured containment metadata; never model-visible or persisted as conversation text. */
     reportToolSandboxObservation?: (observation: KodaXShellSandboxObservation) => void;
     /**
@@ -4218,5 +4268,5 @@ interface CreateBashPrefixExtractorOptions {
  */
 declare function createBashPrefixExtractor(opts: CreateBashPrefixExtractorOptions): BashPrefixExtractor;
 
-export { ALWAYS_RESIDENT_TOOL_NAMES as A, BASH_POLICY_SPEC as a, drainPendingSwaps as b$, buildGoalRuntimeBinding as bS, consumeCompactionCooldown as bT, createBashPrefixExtractor as bU, createCompactionAntiThrashState as bV, createExternalActorTurnExecutor as bW, createLocalCodingActorControl as bX, createOutputSegmentProjection as bY, createRuntimeContextBudgetSnapshot as bZ, decideWorkflowInvocation as b_, LSP_SERVERS as ba, LspService as bc, effectiveOutputSegmentText as c0, estimateToolSchemaTokens as c1, extractCommandPrefix as c2, getDefaultLspService as c3, hasExplicitNaturalLanguageWorkflowIntent as c4, hasPendingSwap as c5, makeDisabledGoalToolsContext as c6, normalizeKodaXAgentMode as c7, planToolExposure as c8, providerResilienceConfigFromTimeouts as c9, recordCompactionSavings as ca, reduceOutputSegmentProjection as cb, resolveConstructedAgent as cc, shouldSkipLlmCompaction as cd, shutdownDefaultLspService as ce, withGoalBeforeNextTurn as cf, withGoalStopHook as cg, workflowStartOutcomeConsumesTurn as ch, CodingActorSession as d };
-export type { KodaXManualTopicId as $, BashPrefixExtractor as B, CapabilityRuntimeContract as C, DiagnosticsRequest as D, ExtensionRuntimeContract as E, FailureStage as F, GoalBlockedResult as G, KodaXCompactionEndResult as H, KodaXCompactionFailureReason as I, KodaXCompactionOverride as J, KodaXActivityEventMeta as K, KodaXContextCompactionFinishedEvent as L, KodaXContextIdentity as M, KodaXContextOptions as N, KodaXContextTokenSnapshot as O, KodaXEffectiveTaskConfig as P, KodaXEvents as Q, RunScopedToolDefinition as R, KodaXFileSystemEffectLease as S, KodaXLiveEventMeta as T, KodaXManagedBudgetSnapshot as U, KodaXManagedTask as V, KodaXManagedTaskRuntimeState as W, KodaXManagedTaskStatusEvent as X, KodaXManualIndexTopic as Y, KodaXManualSource as Z, KodaXManualTopic as _, KodaXToolVisibilityPolicy as a$, KodaXManualTopicInput as a0, KodaXMemoryStrategy as a1, KodaXOptions as a2, KodaXOrchestrationVerdict as a3, KodaXOutputSegmentActiveState as a4, KodaXOutputSegmentDelta as a5, KodaXOutputSegmentMode as a6, KodaXOutputSegmentProjection as a7, KodaXOutputSegmentProjectionEvent as a8, KodaXOutputSegmentProjectionResult as a9, KodaXSidecarMessageEvent as aA, KodaXSkillDynamicContextPolicy as aB, KodaXSkillInvocationContext as aC, KodaXSkillMap as aD, KodaXSkillProjectionConfidence as aE, KodaXSkillScriptInputFile as aF, KodaXSkillScriptOutputFile as aG, KodaXSkillScriptRunInput as aH, KodaXSkillScriptRunner as aI, KodaXTaskCapabilityHint as aJ, KodaXTaskContract as aK, KodaXTaskEvidenceArtifact as aL, KodaXTaskEvidenceBundle as aM, KodaXTaskEvidenceEntry as aN, KodaXTaskRole as aO, KodaXTaskRoleAssignment as aP, KodaXTaskStatus as aQ, KodaXTaskSurface as aR, KodaXTaskToolPolicy as aS, KodaXTaskVerificationContract as aT, KodaXTaskVerificationCriterion as aU, KodaXTaskWorkItem as aV, KodaXTimeoutConfig as aW, KodaXToolEventMeta as aX, KodaXToolExecutionContext as aY, KodaXToolSandboxObservationUpdate as aZ, KodaXToolVisibilityMeta as a_, KodaXOutputSegmentStarted as aa, KodaXParentReductionContract as ab, KodaXPreparedShellSandboxInvocation as ac, KodaXPromptCacheDiagnosticEvent as ad, KodaXProviderPolicyHints as ae, KodaXRepoIntelligenceCapability as af, KodaXRepoIntelligenceMode as ag, KodaXRepoIntelligenceResolvedMode as ah, KodaXRepoIntelligenceTrace as ai, KodaXRepoIntelligenceTraceEvent as aj, KodaXRepoRoutingSignals as ak, KodaXResult as al, KodaXRoleRoundSummary as am, KodaXRuntimeVerificationContract as an, KodaXSandboxOptions as ao, KodaXSelfManualConfig as ap, KodaXSessionControl as aq, KodaXSessionMutators as ar, KodaXSessionOptions as as, KodaXShellExecutionContract as at, KodaXShellKind as au, KodaXShellProfileMode as av, KodaXShellSandbox as aw, KodaXShellSandboxBackend as ax, KodaXShellSandboxObservation as ay, KodaXShellSandboxPrepareInput as az, BashPrefixResult as b, KodaXTurnCompletedEvent as b0, KodaXTurnDeliveryKind as b1, KodaXTurnFailedEvent as b2, KodaXTurnStartedEvent as b3, KodaXUserInputPromptContext as b4, KodaXVerificationScorecard as b5, KodaXVerificationScorecardCriterion as b6, KodaXWorkflowAgentDigestEvent as b7, KodaXWorkflowEventMeta as b8, KodaXWorkflowTimeoutConfig as b9, RuntimeToolExposureMode as bA, RuntimeToolExposurePlan as bB, RuntimeToolExposurePlanInput as bC, RuntimeToolExposureReason as bD, TodoItem as bE, TodoList as bF, TodoStatus as bG, ToolSideEffect as bH, WorkflowHostPolicy as bI, WorkflowInvocationAction as bJ, WorkflowInvocationPolicyDecision as bK, WorkflowInvocationPolicyInput as bL, WorkflowInvocationSource as bM, WorkflowStartOutcome as bN, WorkflowToolHost as bO, WorkflowToolHostInlineInput as bP, WorkflowToolHostResult as bQ, WorkflowToolHostStartResult as bR, LspServerInfo as bb, LspServiceConfig as bd, ProviderExecutionState as be, ProviderRecoveryEvent as bf, ProviderResilienceConfig as bg, ProviderResiliencePolicy as bh, RecoveryAction as bi, RecoveryDecision as bj, RecoveryLadderStep as bk, RecoveryResult as bl, ResilienceClassification as bm, ResilienceErrorClass as bn, ResolveKodaXManualInput as bo, ResolveKodaXManualOptions as bp, ResolveKodaXManualResult as bq, RuntimeCompactionSkippedEvent as br, RuntimeContextBudgetBreakdown as bs, RuntimeContextBudgetRecommendation as bt, RuntimeContextBudgetSnapshot as bu, RuntimeContextBudgetSnapshotInput as bv, RuntimeContextOptimizationProfile as bw, RuntimeContextPressure as bx, RuntimeDefaultsSnapshot as by, RuntimeToolExposureDecision as bz, BoundExtensionRuntimeController as c, KodaXManagedProtocolPayload as ci, KodaXActorHost as cj, KodaXChildExecutionResult as ck, CodingActorSessionOptions as e, CompactionAntiThrashConfig as f, CompactionAntiThrashState as g, CompactionSavingsDecision as h, CompactionSavingsSample as i, CompactionSkipReason as j, CreateBashPrefixExtractorOptions as k, ExtractCommandPrefixOptions as l, GoalCompleteResult as m, GoalCreateInput as n, GoalLifecycleContext as o, GoalRuntimeBinding as p, GoalRuntimeBindingDeps as q, GoalToolsContext as r, KodaXAgentMode as s, KodaXAgentProfile as t, KodaXAgentScope as u, KodaXBudgetDisclosureZone as v, KodaXBudgetExtensionRequest as w, KodaXCanonicalAgentMode as x, KodaXChildAgentResult as y, KodaXChildContextBundle as z };
+export { ALWAYS_RESIDENT_TOOL_NAMES as A, BASH_POLICY_SPEC as a, createOutputSegmentProjection as b$, buildGoalRuntimeBinding as bV, consumeCompactionCooldown as bW, createBashPrefixExtractor as bX, createCompactionAntiThrashState as bY, createExternalActorTurnExecutor as bZ, createLocalCodingActorControl as b_, LSP_SERVERS as bd, LspService as bf, createRuntimeContextBudgetSnapshot as c0, decideWorkflowInvocation as c1, drainPendingSwaps as c2, effectiveOutputSegmentText as c3, estimateToolSchemaTokens as c4, extractCommandPrefix as c5, getDefaultLspService as c6, hasExplicitNaturalLanguageWorkflowIntent as c7, hasPendingSwap as c8, makeDisabledGoalToolsContext as c9, normalizeKodaXAgentMode as ca, planToolExposure as cb, providerResilienceConfigFromTimeouts as cc, recordCompactionSavings as cd, reduceOutputSegmentProjection as ce, resolveConstructedAgent as cf, shouldSkipLlmCompaction as cg, shutdownDefaultLspService as ch, withGoalBeforeNextTurn as ci, withGoalStopHook as cj, workflowStartOutcomeConsumesTurn as ck, CodingActorSession as d };
+export type { KodaXManualTopicId as $, BashPrefixExtractor as B, CapabilityRuntimeContract as C, DiagnosticsRequest as D, ExtensionRuntimeContract as E, FailureStage as F, GoalBlockedResult as G, KodaXCompactionEndResult as H, KodaXCompactionFailureReason as I, KodaXCompactionOverride as J, KodaXActivityEventMeta as K, KodaXContextCompactionFinishedEvent as L, KodaXContextIdentity as M, KodaXContextOptions as N, KodaXContextTokenSnapshot as O, KodaXEffectiveTaskConfig as P, KodaXEvents as Q, RunScopedToolDefinition as R, KodaXFileSystemEffectLease as S, KodaXLiveEventMeta as T, KodaXManagedBudgetSnapshot as U, KodaXManagedTask as V, KodaXManagedTaskRuntimeState as W, KodaXManagedTaskStatusEvent as X, KodaXManualIndexTopic as Y, KodaXManualSource as Z, KodaXManualTopic as _, KodaXToolExecutionContext as a$, KodaXManualTopicInput as a0, KodaXMemoryStrategy as a1, KodaXOptions as a2, KodaXOrchestrationVerdict as a3, KodaXOutputSegmentActiveState as a4, KodaXOutputSegmentDelta as a5, KodaXOutputSegmentMode as a6, KodaXOutputSegmentProjection as a7, KodaXOutputSegmentProjectionEvent as a8, KodaXOutputSegmentProjectionResult as a9, KodaXSidecarMessageEvent as aA, KodaXSkillDynamicContextPolicy as aB, KodaXSkillInvocationContext as aC, KodaXSkillMap as aD, KodaXSkillProjectionConfidence as aE, KodaXSkillScriptInputFile as aF, KodaXSkillScriptOutputFile as aG, KodaXSkillScriptRunInput as aH, KodaXSkillScriptRunner as aI, KodaXTaskCapabilityHint as aJ, KodaXTaskContract as aK, KodaXTaskEvidenceArtifact as aL, KodaXTaskEvidenceBundle as aM, KodaXTaskEvidenceEntry as aN, KodaXTaskRole as aO, KodaXTaskRoleAssignment as aP, KodaXTaskStatus as aQ, KodaXTaskSurface as aR, KodaXTaskToolPolicy as aS, KodaXTaskVerificationContract as aT, KodaXTaskVerificationCriterion as aU, KodaXTaskWorkItem as aV, KodaXTextFileMutationRequest as aW, KodaXTextFileMutationSandbox as aX, KodaXTextFileSnapshot as aY, KodaXTimeoutConfig as aZ, KodaXToolEventMeta as a_, KodaXOutputSegmentStarted as aa, KodaXParentReductionContract as ab, KodaXPreparedShellSandboxInvocation as ac, KodaXPromptCacheDiagnosticEvent as ad, KodaXProviderPolicyHints as ae, KodaXRepoIntelligenceCapability as af, KodaXRepoIntelligenceMode as ag, KodaXRepoIntelligenceResolvedMode as ah, KodaXRepoIntelligenceTrace as ai, KodaXRepoIntelligenceTraceEvent as aj, KodaXRepoRoutingSignals as ak, KodaXResult as al, KodaXRoleRoundSummary as am, KodaXRuntimeVerificationContract as an, KodaXSandboxOptions as ao, KodaXSelfManualConfig as ap, KodaXSessionControl as aq, KodaXSessionMutators as ar, KodaXSessionOptions as as, KodaXShellExecutionContract as at, KodaXShellKind as au, KodaXShellProfileMode as av, KodaXShellSandbox as aw, KodaXShellSandboxBackend as ax, KodaXShellSandboxObservation as ay, KodaXShellSandboxPrepareInput as az, BashPrefixResult as b, KodaXToolSandboxObservationUpdate as b0, KodaXToolVisibilityMeta as b1, KodaXToolVisibilityPolicy as b2, KodaXTurnCompletedEvent as b3, KodaXTurnDeliveryKind as b4, KodaXTurnFailedEvent as b5, KodaXTurnStartedEvent as b6, KodaXUserInputPromptContext as b7, KodaXVerificationScorecard as b8, KodaXVerificationScorecardCriterion as b9, RuntimeContextPressure as bA, RuntimeDefaultsSnapshot as bB, RuntimeToolExposureDecision as bC, RuntimeToolExposureMode as bD, RuntimeToolExposurePlan as bE, RuntimeToolExposurePlanInput as bF, RuntimeToolExposureReason as bG, TodoItem as bH, TodoList as bI, TodoStatus as bJ, ToolSideEffect as bK, WorkflowHostPolicy as bL, WorkflowInvocationAction as bM, WorkflowInvocationPolicyDecision as bN, WorkflowInvocationPolicyInput as bO, WorkflowInvocationSource as bP, WorkflowStartOutcome as bQ, WorkflowToolHost as bR, WorkflowToolHostInlineInput as bS, WorkflowToolHostResult as bT, WorkflowToolHostStartResult as bU, KodaXWorkflowAgentDigestEvent as ba, KodaXWorkflowEventMeta as bb, KodaXWorkflowTimeoutConfig as bc, LspServerInfo as be, LspServiceConfig as bg, ProviderExecutionState as bh, ProviderRecoveryEvent as bi, ProviderResilienceConfig as bj, ProviderResiliencePolicy as bk, RecoveryAction as bl, RecoveryDecision as bm, RecoveryLadderStep as bn, RecoveryResult as bo, ResilienceClassification as bp, ResilienceErrorClass as bq, ResolveKodaXManualInput as br, ResolveKodaXManualOptions as bs, ResolveKodaXManualResult as bt, RuntimeCompactionSkippedEvent as bu, RuntimeContextBudgetBreakdown as bv, RuntimeContextBudgetRecommendation as bw, RuntimeContextBudgetSnapshot as bx, RuntimeContextBudgetSnapshotInput as by, RuntimeContextOptimizationProfile as bz, BoundExtensionRuntimeController as c, KodaXManagedProtocolPayload as cl, KodaXActorHost as cm, KodaXChildExecutionResult as cn, CodingActorSessionOptions as e, CompactionAntiThrashConfig as f, CompactionAntiThrashState as g, CompactionSavingsDecision as h, CompactionSavingsSample as i, CompactionSkipReason as j, CreateBashPrefixExtractorOptions as k, ExtractCommandPrefixOptions as l, GoalCompleteResult as m, GoalCreateInput as n, GoalLifecycleContext as o, GoalRuntimeBinding as p, GoalRuntimeBindingDeps as q, GoalToolsContext as r, KodaXAgentMode as s, KodaXAgentProfile as t, KodaXAgentScope as u, KodaXBudgetDisclosureZone as v, KodaXBudgetExtensionRequest as w, KodaXCanonicalAgentMode as x, KodaXChildAgentResult as y, KodaXChildContextBundle as z };

package/dist/types-chunks/{guardrail.d-CKkoea7y.d.ts → guardrail.d-D8RyuTrv.d.ts}

@@ -4,7 +4,7 @@ import { C as CostTracker } from './cost-tracker.d-MTAt6N7b.js';
 import { Z as RunnerToolCall, _ as ToolGuardrail } from './controller.d-Bm1i9RVj.js';
 import { b as KodaXMessage } from './types.d-Cv09EdJR.js';
 import { S as SideQueryDiagnostics } from './side-query.d-DNes6rHA.js';
-import { bH as ToolSideEffect } from './bash-prefix-extractor.d-BMi_TJIY.js';
+import { bK as ToolSideEffect } from './bash-prefix-extractor.d-AOJdvO4r.js';
 
 /**
  * FEATURE_200 Phase F (v0.7.45) — MCP domain types extracted from types.ts.

package/dist/types-chunks/{public-api.d-BsZWOq3P.d.ts → public-api.d-BNmLxGnR.d.ts}

@@ -1,4 +1,4 @@
-import { B as BashPrefixExtractor, s as KodaXAgentMode } from './bash-prefix-extractor.d-BMi_TJIY.js';
+import { B as BashPrefixExtractor, s as KodaXAgentMode } from './bash-prefix-extractor.d-AOJdvO4r.js';
 import { o as KodaXReasoningMode, b as KodaXMessage, a as KodaXTaskResultMetadata } from './types.d-Cv09EdJR.js';
 import { O as LearningSurfaceSnapshot$1, Q as LearningQuery, T as LearningPage, U as LearnedCapabilityRecord, V as LearningEvent, X as LearningSubscribeOptions, Y as CompactionReport } from './controller.d-Bm1i9RVj.js';
 import { F as KodaXSessionData, K as KodaXSessionLineage, N as KodaXSessionNavigationOptions, O as KodaXSessionRuntimeInfo, Q as KodaXSessionStorage, G as KodaXSessionEntry, b as KodaXSessionArtifactLedgerEntry, A as KodaXExtensionSessionRecord, S as KodaXSessionUiHistoryItem, P as KodaXSessionScope, a2 as AgentActorSnapshot, a3 as AgentActorSaveAttempt, C as KodaXJsonValue } from './types.d-EjZTEEVu.js';

package/dist/types-chunks/{repl.d-DxD0Olm0.d.ts → repl.d-Q6Z3lV2-.d.ts}

@@ -1,8 +1,8 @@
-import { e as ResolvedAutoModeSettings, u as CommandDefinition, v as CommandSource, w as CommandInfo, x as Command$1, I as InteractiveContext, C as CommandCallbacks, a as CurrentConfig, y as CommandInvocationRequest, z as CommandWorkflowInvocationRequest, B as RuntimeSurfaceStatus } from './utils.d-50Q24Few.js';
-import { S as SessionStorage$1, b as PermissionMode, L as LearningBinding } from './public-api.d-BsZWOq3P.js';
-import { a2 as KodaXOptions, al as KodaXResult } from './bash-prefix-extractor.d-BMi_TJIY.js';
+import { e as ResolvedAutoModeSettings, u as CommandDefinition, v as CommandSource, w as CommandInfo, x as Command$1, I as InteractiveContext, C as CommandCallbacks, a as CurrentConfig, y as CommandInvocationRequest, z as CommandWorkflowInvocationRequest, B as RuntimeSurfaceStatus } from './utils.d-Buv_Gxhi.js';
+import { S as SessionStorage$1, b as PermissionMode, L as LearningBinding } from './public-api.d-BNmLxGnR.js';
+import { a2 as KodaXOptions, al as KodaXResult } from './bash-prefix-extractor.d-AOJdvO4r.js';
 import { Q as KodaXSessionStorage, F as KodaXSessionData } from './types.d-EjZTEEVu.js';
-import { u as AutoModeStats } from './guardrail.d-CKkoea7y.js';
+import { u as AutoModeStats } from './guardrail.d-D8RyuTrv.js';
 
 interface ReplRuntimePermissionGrantSuggestion {
     readonly id: string;

package/dist/types-chunks/{sdk-session-BTzblJTQ.d.ts → sdk-session-BwC_i6JB.d.ts}

@@ -1,4 +1,4 @@
-import { j as CreatableHistoryItem, T as ToolCall } from './public-api.d-BsZWOq3P.js';
+import { j as CreatableHistoryItem, T as ToolCall } from './public-api.d-BNmLxGnR.js';
 import { b as KodaXMessage, q as KodaXContentBlock } from './types.d-Cv09EdJR.js';
 import { S as KodaXSessionUiHistoryItem, W as KodaXSessionUiToolCall } from './types.d-EjZTEEVu.js';
 

package/dist/types-chunks/sdk-skills-Bg1yL4i4.d.ts

@@ -0,0 +1,335 @@
+import { R as ResolvedSkillSource, d as Skill, f as SkillFile, S as SkillMetadata, g as SkillFrontmatter, j as SkillPathsConfig, c as IVariableResolver, b as SkillContext, I as ISkillRegistry, k as SkillResult } from './types.d-ssh6zRaf.js';
+
+declare function registerPluginSkillPath(skillPath: string): () => void;
+declare function unregisterPluginSkillPath(skillPath: string): boolean;
+declare function listPluginSkillPaths(): string[];
+declare function clearPluginSkillPaths(): void;
+
+/**
+ * Skill Loader - YAML Frontmatter Parsing and Skill Loading
+ *
+ * Parses SKILL.md files with YAML frontmatter and loads skill content.
+ * Implements fallback sanitization for non-standard YAML formats.
+ */
+
+/**
+ * Parse SKILL.md file with YAML frontmatter
+ */
+declare function parseSkillMarkdown(content: string): {
+    frontmatter: SkillFrontmatter;
+    body: string;
+};
+/**
+ * Load skill metadata from SKILL.md file
+ */
+declare function loadSkillMetadata(skillDir: string, source: ResolvedSkillSource): Promise<SkillMetadata | null>;
+/**
+ * Load full skill content
+ */
+declare function loadFullSkill(skillDir: string, source: ResolvedSkillSource): Promise<Skill | null>;
+/**
+ * Load a specific support file's content
+ */
+declare function loadSkillFileContent(file: SkillFile): Promise<string>;
+
+/**
+ * Skill Discovery - Multi-path skill scanning
+ *
+ * Discovers skills from multiple paths with priority handling.
+ * Supports nested directory discovery for monorepos.
+ */
+
+/**
+ * Result of skill discovery
+ */
+interface DiscoveryResult {
+    skills: Map<string, SkillMetadata>;
+    errors: Array<{
+        path: string;
+        error: string;
+    }>;
+}
+/**
+ * Discover all skills from configured paths
+ */
+declare function discoverSkills(projectRoot?: string, customPaths?: Partial<SkillPathsConfig>): Promise<DiscoveryResult>;
+/**
+ * Get nested skill paths for monorepo support
+ * When in a subdirectory, also check parent directories for skills
+ */
+declare function getNestedSkillPaths(currentDir: string, projectRoot: string): string[];
+/**
+ * Discover skills with monorepo support
+ */
+declare function discoverSkillsWithMonorepo(currentDir: string, projectRoot: string): Promise<DiscoveryResult>;
+
+/**
+ * Skill Resolver - Variable Replacement System
+ *
+ * Handles variable replacement in skill content:
+ * - $ARGUMENTS - All arguments
+ * - $0, $1, $2... - Positional arguments
+ * - ${VAR_NAME} - Environment variables
+ * - !`command` - Dynamic context injection
+ */
+
+/**
+ * Split arguments string into positional arguments
+ * Handles quoted strings correctly
+ */
+declare function parseArguments(args: string): string[];
+/**
+ * Variable resolver implementation
+ */
+declare class VariableResolver implements IVariableResolver {
+    private context;
+    constructor(context: SkillContext);
+    /**
+     * Resolve all variables in content
+     */
+    resolve(content: string, args: string): Promise<string>;
+    /**
+     * Replace $0, $1, $2... with positional arguments
+     */
+    private resolvePositionalArgs;
+    /**
+     * Replace $ARGUMENTS with all arguments
+     */
+    private resolveArguments;
+    /**
+     * Replace ${VAR_NAME} with environment variables
+     */
+    private resolveEnvVars;
+    /**
+     * Replace !`command` with command output (dynamic context).
+     *
+     * Three-tier dispatch (v0.7.42):
+     *   1. `context.disableDynamicContext === true` → throw immediately,
+     *      surfaced to the LLM as `[Error: …]`. Host-level kill switch.
+     *   2. `context.executeDynamicContext` provided → route there. Embedder
+     *      mediates shell execution (broker, audit, deny).
+     *   3. else → legacy built-in path (`isSafeDynamicContextCommand`
+     *      whitelist + `execSync` with 5s timeout).
+     *
+     * The resolver inlines an `[Error: …]` placeholder for any thrown
+     * exception so a single bad token doesn't poison the whole skill load.
+     */
+    private resolveDynamicContext;
+    /**
+     * Execute a dynamic context command via the appropriate dispatch tier.
+     * See `resolveDynamicContext` JSDoc for the 3-tier ordering rationale.
+     */
+    private executeDynamicCommand;
+}
+/**
+ * Create a variable resolver for a given context
+ */
+declare function createResolver(context: SkillContext): IVariableResolver;
+/**
+ * Resolve skill content with arguments and context
+ */
+declare function resolveSkillContent(content: string, args: string, context: SkillContext): Promise<string>;
+
+/**
+ * Skill Registry - Progressive Disclosure and Skill Management
+ *
+ * Manages skill discovery, loading, and invocation with progressive disclosure:
+ * - Level 1: Metadata preloaded at startup (name, description)
+ * - Level 2: Full content loaded on invoke
+ * - Level 3: Support files loaded on demand
+ */
+
+/** Format the model-visible Skill catalog from an arbitrary trusted registry. */
+declare function formatSkillsSystemPrompt(skills: readonly SkillMetadata[]): string;
+/**
+ * Skill Registry implementation
+ */
+declare class SkillRegistry implements ISkillRegistry {
+    private readonly skillsByName;
+    private readonly fullSkillsByName;
+    private readonly projectRoot?;
+    private readonly customPaths?;
+    constructor(projectRoot?: string, customPaths?: Partial<SkillPathsConfig>);
+    /**
+     * Discover skills from all configured paths
+     */
+    discover(): Promise<void>;
+    /**
+     * Get skill metadata by name
+     */
+    get skills(): ReadonlyMap<string, SkillMetadata>;
+    /**
+     * Get skill metadata by name
+     */
+    get(name: string): SkillMetadata | undefined;
+    /**
+     * Load full skill content
+     */
+    loadFull(name: string): Promise<Skill>;
+    /**
+     * Explicitly invoke a skill with arguments. Model tool admission is enforced
+     * by the coding-layer `skill` tool before it reaches this SDK primitive.
+     */
+    invoke(name: string, args: string, context: SkillContext): Promise<SkillResult>;
+    /**
+     * Reload skills from disk
+     */
+    reload(): Promise<void>;
+    /**
+     * List all available skills
+     */
+    list(): SkillMetadata[];
+    /**
+     * List user-invocable skills (for / menu)
+     */
+    listUserInvocable(): SkillMetadata[];
+    /**
+     * Get skills formatted for system prompt injection.
+     *
+     * FEATURE_143 (v0.7.36): manifest wording hardened toward Claude
+     * Code-style strong constraints. The previous wording ("when a user
+     * request matches a skill description, use read to load the skill")
+     * was too soft — the LLM treated skill invocation as one option among
+     * many and frequently authored its own answer instead of loading the
+     * SKILL.md instructions. Aligns with the
+     * `c:/Works/claudecode/src/tools/SkillTool/prompt.ts` ruleset:
+     * BLOCKING REQUIREMENT to load the relevant skill BEFORE generating
+     * any other response when a skill matches.
+     *
+     * Filters out skills with disableModelInvocation=true (Issue 056).
+     */
+    getSystemPromptSnippet(): string;
+    /**
+     * Check if a name is a valid skill
+     */
+    has(name: string): boolean;
+    /**
+     * Get the count of discovered skills
+     */
+    get size(): number;
+}
+/**
+ * Get the global skill registry instance
+ *
+ * IMPORTANT: If projectRoot is undefined, returns existing instance without reset.
+ * This prevents accidental singleton reset when called without arguments.
+ */
+declare function getSkillRegistry(projectRoot?: string, customPaths?: Partial<SkillPathsConfig>): SkillRegistry;
+/**
+ * Initialize the skill registry and discover skills
+ */
+declare function initializeSkillRegistry(projectRoot?: string, customPaths?: Partial<SkillPathsConfig>): Promise<SkillRegistry>;
+/**
+ * Reset the global registry (for testing or hot reload)
+ */
+declare function resetSkillRegistry(): void;
+
+/**
+ * Skill Executor - Execution Engine
+ *
+ * Handles skill execution with support for:
+ * - Inline execution (default)
+ * - Fork execution (sub-agent)
+ * - Tool restrictions
+ */
+
+/**
+ * Execution mode
+ */
+type ExecutionMode = 'inline' | 'fork';
+/**
+ * Execution options
+ */
+interface ExecutionOptions {
+    /** Force a specific execution mode */
+    mode?: ExecutionMode;
+    /** Override model */
+    model?: string;
+    /** Override agent type (for fork mode) */
+    agent?: string;
+    /** Override allowed tools */
+    allowedTools?: string[];
+    /** Callback for inline execution */
+    onExecute?: (content: string, skill: Skill) => Promise<string>;
+}
+/**
+ * Skill executor class
+ */
+declare class SkillExecutor {
+    private context;
+    constructor(context: SkillContext);
+    /**
+     * Execute a skill
+     */
+    execute(skillName: string, args: string, options?: ExecutionOptions): Promise<SkillResult>;
+    /**
+     * Execute skill inline (in current context)
+     */
+    private executeInline;
+    /**
+     * Execute skill in fork mode (sub-agent)
+     */
+    private executeFork;
+    /**
+     * Build the execution prompt
+     */
+    private buildPrompt;
+    /**
+     * Parse allowed tools string into array
+     */
+    private parseAllowedTools;
+}
+/**
+ * Create a skill executor
+ */
+declare function createExecutor(context: SkillContext): SkillExecutor;
+/**
+ * Execute a skill with default context
+ */
+declare function executeSkill(skillName: string, args: string, context: SkillContext, options?: ExecutionOptions): Promise<SkillResult>;
+
+/**
+ * Skill Expander - Expand skill commands for LLM context injection
+ *
+ * Takes a skill invocation and produces content that can be injected
+ * into the user message for LLM execution.
+ *
+ * Design based on pi-mono's _expandSkillCommand:
+ * - Wraps content in XML blocks for clear context
+ * - Includes skill metadata (name, location)
+ * - Resolves all variables ($ARGUMENTS, $0, etc.)
+ * - Handles dynamic context (!`command`)
+ */
+
+/**
+ * Result of skill expansion
+ */
+interface SkillExpansionResult {
+    /** The expanded skill content ready for LLM injection */
+    content: string;
+    /** Whether the skill has model invocation disabled */
+    disableModelInvocation: boolean;
+    /** Original skill metadata */
+    skill: Skill;
+}
+/**
+ * Expand a skill into LLM-ready content
+ *
+ * This function:
+ * 1. Resolves all variables in the skill content ($ARGUMENTS, $0, $1, etc.)
+ * 2. Executes dynamic context commands (!`command`)
+ * 3. Wraps the content in an XML block for clear context boundaries
+ *
+ * @param skill - The full skill object with content
+ * @param args - Raw arguments string from user input
+ * @param context - Execution context (working directory, session ID, etc.)
+ * @returns Expansion result with content ready for LLM injection
+ */
+declare function expandSkillForLLM(skill: Skill, args: string, context: SkillContext): Promise<SkillExpansionResult>;
+/**
+ * Format skill activation message for user display
+ */
+declare function formatSkillActivationMessage(skillName: string, args: string): string;
+
+export { SkillExecutor as S, VariableResolver as V, SkillRegistry as c, clearPluginSkillPaths as d, createExecutor as e, createResolver as f, discoverSkills as g, discoverSkillsWithMonorepo as h, executeSkill as i, expandSkillForLLM as j, formatSkillActivationMessage as k, formatSkillsSystemPrompt as l, getNestedSkillPaths as m, getSkillRegistry as n, initializeSkillRegistry as o, listPluginSkillPaths as p, loadFullSkill as q, loadSkillFileContent as r, loadSkillMetadata as s, parseArguments as t, parseSkillMarkdown as u, registerPluginSkillPath as v, resetSkillRegistry as w, resolveSkillContent as x, unregisterPluginSkillPath as y };
+export type { DiscoveryResult as D, ExecutionMode as E, ExecutionOptions as a, SkillExpansionResult as b };

package/dist/types-chunks/{shell-command-sets.d-C2cc9Hwi.d.ts → shell-command-sets.d-hkYPr4Dy.d.ts}

@@ -1,4 +1,4 @@
-import { R as RunScopedToolDefinition, B as BashPrefixExtractor } from './bash-prefix-extractor.d-BMi_TJIY.js';
+import { R as RunScopedToolDefinition, B as BashPrefixExtractor } from './bash-prefix-extractor.d-AOJdvO4r.js';
 
 /**
  * Permission Utilities

package/dist/types-chunks/{types.d-Dc3kwcjC.d.ts → types.d-Bdv2JoiC.d.ts}

@@ -17,6 +17,13 @@ import { a as KodaXTaskResultMetadata } from './types.d-Cv09EdJR.js';
  */
 
 type MessagePriority = 'user' | 'background';
+/**
+ * Delivery owner for user prompts. Ordinary messages are runtime-deliverable.
+ * `host` is reserved for prompts that must re-enter a trusted host command
+ * pipeline (for example an explicit user Skill invocation) before any model
+ * can observe them.
+ */
+type MessageDelivery = 'runtime' | 'host';
 /**
  * Delivery semantics, independent of priority:
  * - `prompt`: user-authored input; delivered as a real user turn.
@@ -40,6 +47,8 @@ interface QueuedMessage {
      */
     readonly agentId?: string;
     readonly mode: MessageMode;
+    /** Omitted means `runtime`; `host` messages must not be spliced into a model turn. */
+    readonly delivery?: MessageDelivery;
     readonly content: string;
     readonly inputArtifacts?: readonly QueuedInputArtifact[];
     readonly taskResult?: KodaXTaskResultMetadata;
@@ -126,10 +135,12 @@ type QueueEventListener = (event: QueueEvent) => void;
 interface EnqueueInput {
     readonly priority: MessagePriority;
     readonly mode: MessageMode;
+    /** Omitted means `runtime`; use `host` for command-pipeline-owned prompts. */
+    readonly delivery?: MessageDelivery;
     readonly content: string;
     readonly agentId?: string;
     readonly inputArtifacts?: readonly QueuedInputArtifact[];
     readonly taskResult?: KodaXTaskResultMetadata;
 }
 
-export type { DequeueFilter as D, EnqueueInput as E, MessagePriority as M, QueuedMessage as Q, QueueEventListener as a, QueuedInputArtifact as b, MessageMode as c };
+export type { DequeueFilter as D, EnqueueInput as E, MessageDelivery as M, QueuedMessage as Q, QueueEventListener as a, MessagePriority as b, QueuedInputArtifact as c, MessageMode as d };

package/dist/types-chunks/{types.d-DrtP1ceI.d.ts → types.d-CzrUifXB.d.ts}

@@ -2,7 +2,7 @@ import { n as KodaXWireReasoningEffort, f as KodaXToolDefinition, R as KodaXTool
 import { K as KodaXBaseProvider } from './base.d-JjF6aKsh.js';
 import { C as CapabilityKind, a as CapabilityProvider } from './capability.d-K664nHOS.js';
 import { C as KodaXJsonValue, A as KodaXExtensionSessionRecord, a1 as KodaXExtensionStore } from './types.d-EjZTEEVu.js';
-import { aY as KodaXToolExecutionContext, bH as ToolSideEffect } from './bash-prefix-extractor.d-BMi_TJIY.js';
+import { a$ as KodaXToolExecutionContext, bK as ToolSideEffect } from './bash-prefix-extractor.d-AOJdvO4r.js';
 
 /**
  * KodaX Constructed-World types (FEATURE_087, v0.7.28).

package/dist/types-chunks/{types.d-BEMcUOng.d.ts → types.d-ssh6zRaf.d.ts}

@@ -14,7 +14,7 @@ interface SkillFrontmatter {
     description: string;
     /** Whether to disable automatic model invocation (default: false) */
     disableModelInvocation?: boolean;
-    /** Whether skill appears in / menu (default: true) */
+    /** @deprecated Enabled skills are always explicitly user-invocable. */
     userInvocable?: boolean;
     /** Tool restrictions, e.g., "Read, Grep, Bash(python:*)" */
     allowedTools?: string;
@@ -52,6 +52,7 @@ interface SkillHooks {
 interface SkillMetadata {
     name: string;
     description: string;
+    /** @deprecated Enabled skills always report true and support explicit invocation. */
     userInvocable: boolean;
     argumentHint?: string;
     path: string;
@@ -110,13 +111,13 @@ interface ISkillRegistry {
     get(name: string): SkillMetadata | undefined;
     /** Load full skill content */
     loadFull(name: string): Promise<Skill>;
-    /** Invoke a skill with arguments */
+    /** Explicitly invoke a skill with arguments; model admission is a caller concern. */
     invoke(name: string, args: string, context: SkillContext): Promise<SkillResult>;
     /** Reload skills from disk */
     reload(): Promise<void>;
     /** List all discovered skills */
     list(): ReadonlyArray<SkillMetadata>;
-    /** List skills that can be invoked directly by users */
+    /** List enabled skills available for explicit user invocation. */
     listUserInvocable(): ReadonlyArray<SkillMetadata>;
     /** Check whether a skill exists */
     has(name: string): boolean;
@@ -275,4 +276,4 @@ declare function getSkillPathsFlat(config: SkillPathsConfig): Array<{
 }>;
 
 export { getDefaultSkillPaths as m, getSkillPathsFlat as n };
-export type { ISkillRegistry as I, LearnedSkillDiscoveryConfig as L, ResolvedSkillSource as R, SkillMetadata as S, SkillDynamicContextExecutor as a, IVariableResolver as b, Skill as c, SkillArtifact as d, SkillContext as e, SkillFile as f, SkillFrontmatter as g, SkillHook as h, SkillHooks as i, SkillPathsConfig as j, SkillResult as k, SkillSource as l };
+export type { ISkillRegistry as I, LearnedSkillDiscoveryConfig as L, ResolvedSkillSource as R, SkillMetadata as S, SkillDynamicContextExecutor as a, SkillContext as b, IVariableResolver as c, Skill as d, SkillArtifact as e, SkillFile as f, SkillFrontmatter as g, SkillHook as h, SkillHooks as i, SkillPathsConfig as j, SkillResult as k, SkillSource as l };

package/dist/types-chunks/{utils.d-50Q24Few.d.ts → utils.d-Buv_Gxhi.d.ts}

@@ -1,10 +1,10 @@
 import { b as KodaXMessage, o as KodaXReasoningMode, r as KodaXCustomProviderConfig, k as KodaXProviderCapabilityProfile } from './types.d-Cv09EdJR.js';
 import { N as WorkflowProcessSource } from './controller.d-Bm1i9RVj.js';
-import { O as KodaXContextTokenSnapshot, aB as KodaXSkillDynamicContextPolicy, s as KodaXAgentMode, ag as KodaXRepoIntelligenceMode, a2 as KodaXOptions, aC as KodaXSkillInvocationContext } from './bash-prefix-extractor.d-BMi_TJIY.js';
-import { f as AgentsFile, u as AutoModeStats, S as KodaXMcpServersConfig } from './guardrail.d-CKkoea7y.js';
+import { O as KodaXContextTokenSnapshot, aB as KodaXSkillDynamicContextPolicy, s as KodaXAgentMode, ag as KodaXRepoIntelligenceMode, a2 as KodaXOptions, aC as KodaXSkillInvocationContext } from './bash-prefix-extractor.d-AOJdvO4r.js';
+import { f as AgentsFile, u as AutoModeStats, S as KodaXMcpServersConfig } from './guardrail.d-D8RyuTrv.js';
 import * as readline from 'readline';
 import { S as KodaXSessionUiHistoryItem, K as KodaXSessionLineage, b as KodaXSessionArtifactLedgerEntry, B as KodaXExtensionSessionState, A as KodaXExtensionSessionRecord, O as KodaXSessionRuntimeInfo } from './types.d-EjZTEEVu.js';
-import { b as PermissionMode, L as LearningBinding, c as LearningSurfaceSnapshot } from './public-api.d-BsZWOq3P.js';
+import { b as PermissionMode, L as LearningBinding, c as LearningSurfaceSnapshot } from './public-api.d-BNmLxGnR.js';
 import { SpawnSyncReturns } from 'child_process';
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kodax-ai/kodax",
-  "version": "0.7.92",
+  "version": "0.7.94",
   "description": "KodaX lightweight coding agent - TypeScript implementation with 16 built-in LLM provider aliases, published as a Node-free single-file CLI and SDK",
   "type": "module",
   "private": false,

package/dist/chunks/argument-completer-6ZTRBNZM.js

@@ -1,2 +0,0 @@
-// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{Ha as a,Ia as b}from"./chunk-PKPBII4F.js";import"./chunk-5CIKWSCA.js";import"./chunk-GRWUC6H7.js";import"./chunk-OSQIYUGD.js";import"./chunk-THZVJ6R7.js";import"./chunk-RJIYXB62.js";import"./chunk-X75UGXP3.js";import"./chunk-QPBN3J4E.js";import"./chunk-AGZNXFHZ.js";import"./chunk-GH3KBC2H.js";import"./chunk-YVG6OKN7.js";import"./chunk-FBL7IVMK.js";import"./chunk-7XSZVOG7.js";import"./chunk-QFV6YCIH.js";import"./chunk-ONUPGMER.js";export{a as ArgumentCompleter,b as createArgumentCompleter};