@kodax-ai/kodax 0.7.95 → 0.7.96-alpha.2

package/dist/sandbox-workspace-session.js

@@ -1,1705 +0,0 @@
-// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-var lo=Object.defineProperty;var o=(e,t)=>lo(e,"name",{value:t,configurable:!0});import{createHash as t$,randomUUID as fu}from"node:crypto";import{closeSync as r$,constants as o$,existsSync as i$,lstatSync as s$,mkdirSync as a$,openSync as c$,readFileSync as d$,readSync as l$,readdirSync as u$,realpathSync as f$,renameSync as p$,rmSync as m$,statSync as h$,writeFileSync as g$,writeSync as pu}from"node:fs";import{copyFile as w$,lstat as v$,mkdir as b$,readFile as mu,realpath as k$,rename as S$,rm as hu,rmdir as E$,stat as x$,writeFile as R$}from"node:fs/promises";import{createRequire as gu}from"node:module";import v from"node:path";import yu from"node:readline";import{fileURLToPath as P$,pathToFileURL as wu}from"node:url";import{AsyncLocalStorage as uo}from"node:async_hooks";var fo=new uo;function me(e){let t=fo.getStore()?.credential;return t?ee(e,t,new WeakMap):e}o(me,"redactScopedProviderCredential");function ee(e,t,n){if(typeof e=="string")return e.split(t).join("[REDACTED_CREDENTIAL]");if(e===null||typeof e!="object")return e;let r=n.get(e);if(r!==void 0)return r;if(e instanceof Error){let s=new Error(ee(e.message,t,n));return n.set(e,s),s.name=e.name,e.stack!==void 0&&(s.stack=ee(e.stack,t,n)),s}if(Array.isArray(e)){let s=[];n.set(e,s);for(let a of e)s.push(ee(a,t,n));return s}let i={};n.set(e,i);for(let[s,a]of Object.entries(Object.getOwnPropertyDescriptors(e))){if(!a.enumerable||!("value"in a))continue;let c=s.split(t).join("[REDACTED_CREDENTIAL]");i[c]=ee(a.value,t,n)}return i}o(ee,"redactCredentialValue");import{AsyncLocalStorage as po}from"node:async_hooks";var Zu=new po;var te={transport:"native-api",conversationSemantics:"full-history",mcpSupport:"none",contextFidelity:"full",toolCallingFidelity:"full",sessionSupport:"full",longRunningSupport:"full",multimodalSupport:"none",evidenceSupport:"full"},_t={...te,multimodalSupport:"image-input"},he={transport:"cli-bridge",conversationSemantics:"last-user-message",mcpSupport:"none",contextFidelity:"lossy",toolCallingFidelity:"limited",sessionSupport:"stateless",longRunningSupport:"limited",multimodalSupport:"none",evidenceSupport:"limited"},Mt={...he,multimodalSupport:"image-input"};import{parse as wf}from"partial-json";var np=Object.freeze({status:"terminated"}),rp=Object.freeze({status:"already-exited"}),op=Object.freeze({status:"unknown"}),ip=String.raw`
-using System;
-using System.Runtime.InteropServices;
-using System.Text;
-public static class KodaXNativeProcessSnapshot {
-  [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Auto)]
-  private struct ProcessEntry32 {
-    public uint dwSize;
-    public uint cntUsage;
-    public uint th32ProcessID;
-    public IntPtr th32DefaultHeapID;
-    public uint th32ModuleID;
-    public uint cntThreads;
-    public uint th32ParentProcessID;
-    public int pcPriClassBase;
-    public uint dwFlags;
-    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 260)]
-    public string szExeFile;
-  }
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern IntPtr CreateToolhelp32Snapshot(uint flags, uint processId);
-  [DllImport("kernel32.dll", CharSet = CharSet.Auto, SetLastError = true)]
-  private static extern bool Process32First(IntPtr snapshot, ref ProcessEntry32 entry);
-  [DllImport("kernel32.dll", CharSet = CharSet.Auto, SetLastError = true)]
-  private static extern bool Process32Next(IntPtr snapshot, ref ProcessEntry32 entry);
-  [StructLayout(LayoutKind.Sequential)]
-  private struct FileTime {
-    public uint Low;
-    public uint High;
-  }
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern IntPtr OpenProcess(uint access, bool inheritHandle, uint processId);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool GetProcessTimes(IntPtr process, out FileTime creation, out FileTime exit, out FileTime kernel, out FileTime user);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool TerminateProcess(IntPtr process, uint exitCode);
-  [DllImport("kernel32.dll")]
-  private static extern void GetSystemTimeAsFileTime(out FileTime systemTime);
-  [DllImport("kernel32.dll")]
-  private static extern bool CloseHandle(IntPtr handle);
-  private static ulong ReadCreationTime(uint processId) {
-    var process = OpenProcess(0x1000, false, processId);
-    if (process == IntPtr.Zero) return 0;
-    try {
-      FileTime creation, exit, kernel, user;
-      if (!GetProcessTimes(process, out creation, out exit, out kernel, out user)) return 0;
-      return ((ulong)creation.High << 32) | creation.Low;
-    } finally {
-      CloseHandle(process);
-    }
-  }
-  public static int TerminateExact(uint processId, ulong expectedCreationTime) {
-    var process = OpenProcess(0x1001, false, processId);
-    if (process == IntPtr.Zero) return 0;
-    try {
-      FileTime creation, exit, kernel, user;
-      if (!GetProcessTimes(process, out creation, out exit, out kernel, out user)) return 0;
-      var actual = (((ulong)creation.High << 32) | creation.Low) / 10000;
-      if (actual != expectedCreationTime) return 2;
-      return TerminateProcess(process, 1) ? 1 : 0;
-    } finally {
-      CloseHandle(process);
-    }
-  }
-  public static string ReadRows() {
-    FileTime cutoffTime;
-    GetSystemTimeAsFileTime(out cutoffTime);
-    var cutoff = (((ulong)cutoffTime.High << 32) | cutoffTime.Low) / 10000;
-    var snapshot = CreateToolhelp32Snapshot(2, 0);
-    if (snapshot == new IntPtr(-1)) return string.Empty;
-    var rows = new StringBuilder();
-    var entry = new ProcessEntry32();
-    entry.dwSize = (uint)Marshal.SizeOf(entry);
-    try {
-      if (!Process32First(snapshot, ref entry)) return string.Empty;
-      do {
-        var creationTime = ReadCreationTime(entry.th32ProcessID) / 10000;
-        if (creationTime == 0 || creationTime <= cutoff) {
-          rows.Append(entry.th32ProcessID).Append(',').Append(entry.th32ParentProcessID).Append(',').Append(creationTime).Append('\n');
-        }
-        entry.dwSize = (uint)Marshal.SizeOf(entry);
-      } while (Process32Next(snapshot, ref entry));
-      return rows.ToString();
-    } finally {
-      CloseHandle(snapshot);
-    }
-  }
-}`;import jt from"node:fs";import Kt from"node:os";import Wt from"node:path";var Lo="gpt-5.4",No="auto-gemini-3",Fo=["gpt-5.4","gpt-5.3-codex","gpt-5.3-codex-spark"],jo=["auto-gemini-3","gemini-3.1-pro-preview","gemini-3-flash-preview","gemini-2.5-pro","gemini-2.5-flash"];function Bt(e){let t=new Set,n=[];for(let r of e){let i=r.trim();if(!i)continue;let s=i.toLowerCase();t.has(s)||(t.add(s),n.push(i))}return n}o(Bt,"dedupePreserveOrder");function Ko(){let e=Wt.join(Kt.homedir(),".codex","config.toml");try{return jt.readFileSync(e,"utf8").match(/^\s*model\s*=\s*"([^"]+)"/m)?.[1]?.trim()||null}catch{return null}}o(Ko,"readCodexConfiguredModel");function Wo(){let e=Wt.join(Kt.homedir(),".gemini","settings.json");try{let t=JSON.parse(jt.readFileSync(e,"utf8")),n=typeof t.model=="string"?t.model.trim():"";return n||(typeof t.general?.model=="string"?t.general.model.trim():"")||null}catch{return null}}o(Wo,"readGeminiConfiguredModel");function q(){return Ko()||Lo}o(q,"getCodexCliDefaultModel");function z(){return Wo()||No}o(z,"getGeminiCliDefaultModel");function ne(){return Bt([q(),...Fo])}o(ne,"getCodexCliKnownModels");function re(){return Bt([z(),...jo])}o(re,"getGeminiCliKnownModels");var Wp=z(),Bp=re();var em=q(),tm=ne();import{existsSync as Qo,readFileSync as Zo}from"node:fs";import G from"node:path";import{fileURLToPath as ei}from"node:url";var Xt=["none","prompt-only","native-effort","native-budget","native-toggle","native-adaptive","unknown"],Ut=["openai-responses-effort","openai-chat-effort","codex-cli-config","anthropic-output-effort","anthropic-reasoning-effort","provider-budget","provider-toggle","prompt-only","none"],qt=["anthropic-adaptive","anthropic-budget","provider-budget","provider-toggle","none"],zt=["zai-glm-5.3","zai-glm-5.2","zai-glm-toggle","deepseek-v4-flash-openai","deepseek-v4-pro-openai","deepseek-v4-openai","deepseek-v4-anthropic","deepseek-toggle","kimi-k3","kimi-k2.7-code","kimi-hybrid-toggle","minimax-m3","minimax-m2-always","mimo-v2.5-toggle","qwen-hybrid-thinking","openai-chat-reasoning","openai-responses-reasoning","codex-cli-effort","claude-adaptive-xhigh","claude-adaptive-max","anthropic-budget","generic-thinking-toggle","none"],Ht=["max_tokens","max_completion_tokens"],Gt=["native","image-input-native","cli-bridge","image-input-cli-bridge"],Vt=["count-tokens","models-list","minimal-message","unsupported"];function O(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}o(O,"isPlainObject");function W(e,t){if(typeof e!="string"||e.length===0)throw new Error(`provider-capabilities.json: ${t} must be a non-empty string`);return e}o(W,"requireString");function H(e,t){if(e!==void 0)return W(e,t)}o(H,"optionalString");function Qt(e,t){if(e!==void 0){if(typeof e!="string"||!Ht.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${Ht.join(", ")}, got ${JSON.stringify(e)}`);return e}}o(Qt,"optionalMaxOutputTokensField");function N(e,t){if(e!==void 0){if(typeof e!="number"||!Number.isFinite(e)||e<0)throw new Error(`provider-capabilities.json: ${t} must be a non-negative finite number`);return e}}o(N,"optionalNumber");function R(e,t){if(e!==void 0){if(typeof e!="boolean")throw new Error(`provider-capabilities.json: ${t} must be a boolean`);return e}}o(R,"optionalBoolean");function Jt(e,t){if(e!==void 0){if(!Array.isArray(e))throw new Error(`provider-capabilities.json: ${t} must be an array`);return e.map((n,r)=>W(n,`${t}[${r}]`))}}o(Jt,"optionalStringArray");function Xo(e,t){if(e===void 0)return;if(!O(e))throw new Error(`provider-capabilities.json: ${t} must be an object`);let n={};for(let[r,i]of Object.entries(e))n[r]=W(i,`${t}.${r}`);return n}o(Xo,"optionalStringMap");function Uo(e,t){if(e!==void 0){if(typeof e!="string"||!zt.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${zt.join(", ")}, got ${JSON.stringify(e)}`);return e}}o(Uo,"optionalReasoningPreset");function We(e,t){if(typeof e!="string"||!Xt.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${Xt.join(", ")}, got ${JSON.stringify(e)}`);return e}o(We,"requireReasoningCapability");function qo(e,t){if(typeof e!="string"||!Ut.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${Ut.join(", ")}, got ${JSON.stringify(e)}`);return e}o(qo,"requireEffortStrategy");function zo(e,t){if(e!==void 0){if(typeof e!="string"||!qt.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${qt.join(", ")}, got ${JSON.stringify(e)}`);return e}}o(zo,"optionalThinkingStrategy");function Yt(e,t){if(e===void 0)return;if(!O(e))throw new Error(`provider-capabilities.json: ${t} must be an object`);let n=qo(e.effortStrategy,`${t}.effortStrategy`),r=Uo(e.reasoningPreset,`${t}.reasoningPreset`),i=zo(e.thinkingStrategy,`${t}.thinkingStrategy`),s=H(e.defaultEffort,`${t}.defaultEffort`),a=Xo(e.effortAliases,`${t}.effortAliases`),c=Jt(e.disabledEfforts,`${t}.disabledEfforts`),d=Jt(e.localRejectEfforts,`${t}.localRejectEfforts`),l=R(e.allowCustomEffort,`${t}.allowCustomEffort`),u=R(e.supportsReasoningEffort,`${t}.supportsReasoningEffort`),p=R(e.supportsReasoningSummary,`${t}.supportsReasoningSummary`),h=R(e.supportsEncryptedReasoningReplay,`${t}.supportsEncryptedReasoningReplay`),f=R(e.supportsAdaptiveThinking,`${t}.supportsAdaptiveThinking`),m=R(e.supportsManualThinkingBudget,`${t}.supportsManualThinkingBudget`),y=R(e.supportsDisabledThinking,`${t}.supportsDisabledThinking`),w=R(e.requiresEffortBetaHeader,`${t}.requiresEffortBetaHeader`),g={effortStrategy:n};if(r!==void 0&&(g.reasoningPreset=r),i!==void 0&&(g.thinkingStrategy=i),s!==void 0&&(g.defaultEffort=s),a!==void 0&&(g.effortAliases=a),c!==void 0&&(g.disabledEfforts=c),d!==void 0&&(g.localRejectEfforts=d),e.supportedEfforts!==void 0){if(!Array.isArray(e.supportedEfforts))throw new Error(`provider-capabilities.json: ${t}.supportedEfforts must be an array`);g.supportedEfforts=e.supportedEfforts.map((E,b)=>{if(!O(E))throw new Error(`provider-capabilities.json: ${t}.supportedEfforts[${b}] must be an object`);return{value:W(E.value,`${t}.supportedEfforts[${b}].value`),...H(E.description,`${t}.supportedEfforts[${b}].description`)!==void 0?{description:H(E.description,`${t}.supportedEfforts[${b}].description`)}:{},...R(E.isDefault,`${t}.supportedEfforts[${b}].isDefault`)!==void 0?{isDefault:R(E.isDefault,`${t}.supportedEfforts[${b}].isDefault`)}:{},...R(E.isUserVisible,`${t}.supportedEfforts[${b}].isUserVisible`)!==void 0?{isUserVisible:R(E.isUserVisible,`${t}.supportedEfforts[${b}].isUserVisible`)}:{}}})}if(e.budgetByEffort!==void 0){if(!O(e.budgetByEffort))throw new Error(`provider-capabilities.json: ${t}.budgetByEffort must be an object`);let E={};for(let[b,Pt]of Object.entries(e.budgetByEffort))E[b]=N(Pt,`${t}.budgetByEffort.${b}`)??0;g.budgetByEffort=E}return l!==void 0&&(g.allowCustomEffort=l),u!==void 0&&(g.supportsReasoningEffort=u),p!==void 0&&(g.supportsReasoningSummary=p),h!==void 0&&(g.supportsEncryptedReasoningReplay=h),f!==void 0&&(g.supportsAdaptiveThinking=f),m!==void 0&&(g.supportsManualThinkingBudget=m),y!==void 0&&(g.supportsDisabledThinking=y),w!==void 0&&(g.requiresEffortBetaHeader=w),g}o(Yt,"validateReasoningProfile");function Zt(e,t){let n=e.reasoningProfile,r=e.reasoningCapabilityV2;if(n!==void 0&&r!==void 0)throw new Error(`provider-capabilities.json: ${t} must not define both reasoningProfile and deprecated reasoningCapabilityV2`);return n!==void 0?Yt(n,`${t}.reasoningProfile`):Yt(r,`${t}.reasoningCapabilityV2`)}o(Zt,"validateReasoningProfileField");function Ho(e,t){if(typeof e!="string"||!Gt.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${Gt.join(", ")}, got ${JSON.stringify(e)}`);return e}o(Ho,"requireProfileName");function Go(e,t){if(typeof e!="string"||!Vt.includes(e))throw new Error(`provider-capabilities.json: ${t} must be one of ${Vt.join(", ")}, got ${JSON.stringify(e)}`);return e}o(Go,"requireVerifyStrategy");function Vo(e,t){if(!O(e))throw new Error(`provider-capabilities.json: ${t} must be an object`);let n=W(e.id,`${t}.id`),r=H(e.wireModel,`${t}.wireModel`),i=H(e.displayName,`${t}.displayName`),s=N(e.contextWindow,`${t}.contextWindow`),a=N(e.maxOutputTokens,`${t}.maxOutputTokens`),c=Qt(e.maxOutputTokensField,`${t}.maxOutputTokensField`),d=N(e.thinkingBudgetCap,`${t}.thinkingBudgetCap`),l=R(e.replayReasoningContent,`${t}.replayReasoningContent`),u=R(e.strictThinkingSignature,`${t}.strictThinkingSignature`),p=N(e.streamMaxDurationMs,`${t}.streamMaxDurationMs`),h=e.reasoningCapability===void 0?void 0:We(e.reasoningCapability,`${t}.reasoningCapability`),f=Zt(e,t),m={id:n};return r!==void 0&&(m.wireModel=r),i!==void 0&&(m.displayName=i),s!==void 0&&(m.contextWindow=s),a!==void 0&&(m.maxOutputTokens=a),c!==void 0&&(m.maxOutputTokensField=c),d!==void 0&&(m.thinkingBudgetCap=d),h!==void 0&&(m.reasoningCapability=h),f!==void 0&&(m.reasoningProfile=f),l!==void 0&&(m.replayReasoningContent=l),u!==void 0&&(m.strictThinkingSignature=u),p!==void 0&&(m.streamMaxDurationMs=p),m}o(Vo,"validateModelDescriptor");function Jo(e,t){if(e===void 0)return;if(!O(e))throw new Error(`provider-capabilities.json: ${t} must be an object`);let n={};for(let[r,i]of Object.entries(e))n[r]=We(i,`${t}.${r}`);return n}o(Jo,"validateModelReasoningCapabilities");function Yo(e,t){if(!O(e))throw new Error(`provider-capabilities.json: providers.${t} must be an object`);let n=R(e.cliBridge,`providers.${t}.cliBridge`),r=W(e.apiKeyEnv,`providers.${t}.apiKeyEnv`),i=We(e.reasoningCapability,`providers.${t}.reasoningCapability`),s=Zt(e,`providers.${t}`),a=Ho(e.capabilityProfile,`providers.${t}.capabilityProfile`),c=Go(e.verifyStrategy,`providers.${t}.verifyStrategy`);if(n&&c!=="unsupported")throw new Error(`provider-capabilities.json: providers.${t} is a cliBridge entry but verifyStrategy="${c}" \u2014 must be "unsupported" (CLI binary owns credentials)`);let d=N(e.contextWindow,`providers.${t}.contextWindow`),l=N(e.maxOutputTokens,`providers.${t}.maxOutputTokens`),u=Qt(e.maxOutputTokensField,`providers.${t}.maxOutputTokensField`),p=N(e.thinkingBudgetCap,`providers.${t}.thinkingBudgetCap`),h=R(e.supportsThinking,`providers.${t}.supportsThinking`),f=Jo(e.modelReasoningCapabilities,`providers.${t}.modelReasoningCapabilities`),m=H(e.model,`providers.${t}.model`);if(n&&(m!==void 0||e.models!==void 0))throw new Error(`provider-capabilities.json: providers.${t} is a cliBridge entry but defines model/models \u2014 must be omitted (filled at load time)`);if(!n&&m===void 0)throw new Error(`provider-capabilities.json: providers.${t}.model is required (only cliBridge entries may omit)`);let y;if(e.models!==void 0){if(!Array.isArray(e.models))throw new Error(`provider-capabilities.json: providers.${t}.models must be an array`);y=e.models.map((E,b)=>Vo(E,`providers.${t}.models[${b}]`));let g=new Set([...m===void 0?[]:[m],...y.map(E=>E.id)]);for(let[E,b]of y.entries())if(b.wireModel!==void 0&&!g.has(b.wireModel))throw new Error(`provider-capabilities.json: providers.${t}.models[${E}].wireModel must reference a declared model, got ${JSON.stringify(b.wireModel)}`)}let w={apiKeyEnv:r,reasoningCapability:i,capabilityProfile:a,verifyStrategy:c};return s!==void 0&&(w.reasoningProfile=s),m!==void 0&&(w.model=m),y!==void 0&&(w.models=y),d!==void 0&&(w.contextWindow=d),l!==void 0&&(w.maxOutputTokens=l),u!==void 0&&(w.maxOutputTokensField=u),p!==void 0&&(w.thinkingBudgetCap=p),h!==void 0&&(w.supportsThinking=h),f!==void 0&&(w.modelReasoningCapabilities=f),n&&(w.cliBridge=!0),w}o(Yo,"validateProviderEntry");function en(e){if(!O(e))throw new Error("provider-capabilities.json: root must be an object");if(e.version!==1)throw new Error(`provider-capabilities.json: version must be 1, got ${JSON.stringify(e.version)}`);let t=W(e.updatedAt,"updatedAt");if(!O(e.providers))throw new Error("provider-capabilities.json: providers must be an object");let n={};for(let[r,i]of Object.entries(e.providers))n[r]=Yo(i,r);return{version:1,updatedAt:t,providers:n}}o(en,"validateProviderCapabilitiesJson");var ti=Object.freeze({native:te,"image-input-native":_t,"cli-bridge":he,"image-input-cli-bridge":Mt}),ve=null;function ni(){if(process.env.KODAX_BUNDLED==="true")return G.join(G.dirname(process.execPath),"provider-capabilities.json");let e=G.dirname(ei(import.meta.url)),t=[G.join(e,"provider-capabilities.json"),G.join(G.dirname(e),"provider-capabilities.json")];for(let n of t)if(Qo(n))return n;return t[0]}o(ni,"resolveJsonPath");function ri(e){if(e.models){for(let t of e.models)t.reasoningProfile&&tn(t.reasoningProfile);for(let t of e.models)Object.freeze(t);Object.freeze(e.models)}return e.reasoningProfile&&tn(e.reasoningProfile),e.modelReasoningCapabilities&&Object.freeze(e.modelReasoningCapabilities),Object.freeze(e)}o(ri,"deepFreezeSnapshot");function tn(e){if(e.supportedEfforts){for(let t of e.supportedEfforts)Object.freeze(t);Object.freeze(e.supportedEfforts)}e.budgetByEffort&&Object.freeze(e.budgetByEffort),e.effortAliases&&Object.freeze(e.effortAliases),e.disabledEfforts&&Object.freeze(e.disabledEfforts),e.localRejectEfforts&&Object.freeze(e.localRejectEfforts),Object.freeze(e)}o(tn,"freezeReasoningProfile");function oi(e){if(e==="gemini-cli"){let t=z();return{model:t,models:re().filter(n=>n!==t).map(n=>({id:n}))}}if(e==="codex-cli"){let t=q();return{model:t,models:ne().filter(n=>n!==t).map(n=>({id:n}))}}throw new Error(`provider-capabilities loader: unknown cliBridge provider '${e}'`)}o(oi,"resolveCliBridgeModels");function ii(e,t){let n=ti[t.capabilityProfile];if(!n)throw new Error(`provider-capabilities loader: unknown capabilityProfile '${t.capabilityProfile}' for provider '${e}'`);if(t.cliBridge){let i=oi(e),s={model:i.model,models:i.models,apiKeyEnv:t.apiKeyEnv,reasoningCapability:t.reasoningCapability,capabilityProfile:n,verifyStrategy:t.verifyStrategy};return t.reasoningProfile!==void 0&&(s.reasoningProfile=t.reasoningProfile),t.supportsThinking!==void 0&&(s.supportsThinking=t.supportsThinking),s}let r={model:t.model,apiKeyEnv:t.apiKeyEnv,reasoningCapability:t.reasoningCapability,capabilityProfile:n,verifyStrategy:t.verifyStrategy};return t.reasoningProfile!==void 0&&(r.reasoningProfile=t.reasoningProfile),t.models!==void 0&&(r.models=t.models),t.modelReasoningCapabilities!==void 0&&(r.modelReasoningCapabilities=t.modelReasoningCapabilities),t.contextWindow!==void 0&&(r.contextWindow=t.contextWindow),t.maxOutputTokens!==void 0&&(r.maxOutputTokens=t.maxOutputTokens),t.maxOutputTokensField!==void 0&&(r.maxOutputTokensField=t.maxOutputTokensField),t.thinkingBudgetCap!==void 0&&(r.thinkingBudgetCap=t.thinkingBudgetCap),t.supportsThinking!==void 0&&(r.supportsThinking=t.supportsThinking),r}o(ii,"buildSnapshot");function nn(){if(ve)return ve;let e=ni(),t;try{let i=Zo(e,"utf8");t=JSON.parse(i)}catch(i){let s=i instanceof Error?i.message:String(i);throw new Error(`provider-capabilities loader: failed to read ${e}: ${s}`)}let n=en(t),r={};for(let[i,s]of Object.entries(n.providers))r[i]=ri(ii(i,s));return ve=Object.freeze(r),ve}o(nn,"getProviderSnapshots");var be=nn();var rn=process.env.KODAX_PROVIDER??"zhipu-coding";var Ni=[];function I(e){let t=me(e),n=Ni.at(-1)?.sink;if(n){try{n(t)}catch{}return}if(process.env.KODAX_DIAGNOSTICS_STDERR==="1")try{process.stderr.write(`${kn(t)}
-`)}catch{}}o(I,"emitKodaXDiagnostic");function kn(e){let t=me(e),n=Fi(t.detail);return`[${t.source}] ${t.level}: ${t.message}${n?` ${n}`:""}`}o(kn,"formatKodaXDiagnostic");function Fi(e){if(e===void 0)return"";if(e instanceof Error)return e.stack??e.message;if(typeof e=="string")return e;try{return JSON.stringify(e)}catch{return String(e)}}o(Fi,"formatDiagnosticDetail");var oe=class e{static{o(this,"SpanImpl")}id;traceId;parentId;name;data;startedAt;_endedAt;_error;_children=[];now;nextSpanId;onChildCreated;onSpanEnd;_ended=!1;constructor(t){this.id=t.id,this.traceId=t.traceId,this.parentId=t.parentId,this.name=t.name,this.data=t.data,this.now=t.now??(()=>Date.now()),this.startedAt=t.startedAt??this.now(),this.nextSpanId=t.nextSpanId??ji,this.onChildCreated=t.onChildCreated,this.onSpanEnd=t.onSpanEnd}get endedAt(){return this._endedAt}get error(){return this._error}get children(){return this._children}addChild(t,n){let r=new e({id:this.nextSpanId(),traceId:this.traceId,parentId:this.id,name:t,data:n,now:this.now,nextSpanId:this.nextSpanId,onChildCreated:this.onChildCreated,onSpanEnd:this.onSpanEnd});return this._children.push(r),this.onChildCreated&&this.onChildCreated(r),r}setError(t){t instanceof Error?this._error={message:t.message,stack:t.stack}:this._error=t}end(){this._ended||(this._ended=!0,this._endedAt=this.now(),this.onSpanEnd&&this.onSpanEnd(this))}},Sn=0;function ji(){Sn+=1;let e=Math.random().toString(36).slice(2,8);return`span-${Date.now()}-${Sn}-${e}`}o(ji,"defaultNextSpanId");var En=0;function Ki(){En+=1;let e=Math.random().toString(36).slice(2,8);return`trace-${Date.now()}-${En}-${e}`}o(Ki,"defaultNextTraceId");function Ge(e={}){let t=e.now??(()=>Date.now()),n=e.id??(e.nextTraceId??Ki)(),r=t(),i=e.name??"trace",s=e.metadata??new Map,a=e.rootSpanData??{kind:"agent",agentName:i},c=!1,d,l,u=new oe({id:`${n}-root`,traceId:n,name:i,data:a,startedAt:r,now:t,nextSpanId:e.nextSpanId,onChildCreated:e.onSpanStart,onSpanEnd:e.onSpanEnd});e.onSpanStart&&e.onSpanStart(u);let p={id:n,startedAt:r,rootSpan:u,metadata:s,get endedAt(){return d},get error(){return l??u.error},end(){c||(c=!0,d=t(),u.end(),e.onTraceEnd&&e.onTraceEnd(p))}};return p}o(Ge,"createTrace");var Ve=[];function Je(e){for(let t of Ve)try{t.onSpanStart(e)}catch{}}o(Je,"_emitSpanStart");function Ye(e){for(let t of Ve)try{t.onSpanEnd(e)}catch{}}o(Ye,"_emitSpanEnd");function Qe(e){for(let t of Ve)try{t.onTraceEnd(e)}catch{}}o(Qe,"_emitTraceEnd");var ke=class{static{o(this,"Tracer")}options;constructor(t={}){this.options=t}startTrace(t={}){return Ge({id:t.id,name:t.name,rootSpanData:t.rootSpanData,metadata:t.metadata,now:this.options.now,nextSpanId:this.options.nextSpanId,nextTraceId:this.options.nextTraceId,onSpanStart:Je,onSpanEnd:Ye,onTraceEnd:Qe})}},xn=new ke;var zi=["read","edit","bash:test","bash:read-only","bash:mutating","bash:network","subagent"];var uy=new Set(zi);var Se="ELECTRON_RUN_AS_NODE";var Ee="data:text/javascript,delete%20process.env.ELECTRON_RUN_AS_NODE";var nw=String.raw`
-using System;
-using System.Runtime.InteropServices;
-public static class KodaXWindowsJobMembership {
-  [StructLayout(LayoutKind.Sequential)]
-  private struct BasicLimitInformation {
-    public long PerProcessUserTimeLimit;
-    public long PerJobUserTimeLimit;
-    public uint LimitFlags;
-    public UIntPtr MinimumWorkingSetSize;
-    public UIntPtr MaximumWorkingSetSize;
-    public uint ActiveProcessLimit;
-    public UIntPtr Affinity;
-    public uint PriorityClass;
-    public uint SchedulingClass;
-  }
-  [StructLayout(LayoutKind.Sequential)]
-  private struct IoCounters {
-    public ulong ReadOperationCount;
-    public ulong WriteOperationCount;
-    public ulong OtherOperationCount;
-    public ulong ReadTransferCount;
-    public ulong WriteTransferCount;
-    public ulong OtherTransferCount;
-  }
-  [StructLayout(LayoutKind.Sequential)]
-  private struct ExtendedLimitInformation {
-    public BasicLimitInformation BasicLimitInformation;
-    public IoCounters IoInfo;
-    public UIntPtr ProcessMemoryLimit;
-    public UIntPtr JobMemoryLimit;
-    public UIntPtr PeakProcessMemoryUsed;
-    public UIntPtr PeakJobMemoryUsed;
-  }
-  [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-  private static extern IntPtr OpenJobObjectW(uint desiredAccess, bool inheritHandle, string name);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool IsProcessInJob(IntPtr process, IntPtr job, out bool result);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool QueryInformationJobObject(
-    IntPtr job,
-    int informationClass,
-    out ExtendedLimitInformation information,
-    uint informationLength,
-    IntPtr returnLength);
-  [DllImport("kernel32.dll")]
-  private static extern IntPtr GetCurrentProcess();
-  [DllImport("kernel32.dll")]
-  private static extern bool CloseHandle(IntPtr handle);
-  public static bool IsCurrentProcessContained(string name) {
-    var job = OpenJobObjectW(4, false, name);
-    if (job == IntPtr.Zero) return false;
-    try {
-      bool inJob;
-      if (!IsProcessInJob(GetCurrentProcess(), job, out inJob) || !inJob) return false;
-      ExtendedLimitInformation limits;
-      if (!QueryInformationJobObject(
-        job,
-        9,
-        out limits,
-        (uint)Marshal.SizeOf(typeof(ExtendedLimitInformation)),
-        IntPtr.Zero)) return false;
-      return (limits.BasicLimitInformation.LimitFlags & 0x00002000) != 0;
-    } finally {
-      CloseHandle(job);
-    }
-  }
-}`,rw=String.raw`
-$ErrorActionPreference = 'Stop'
-$source = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($env:KODAX_INTERNAL_JOB_QUERY_SOURCE))
-Add-Type -TypeDefinition $source
-if ([KodaXWindowsJobMembership]::IsCurrentProcessContained($env:KODAX_DAEMON_JOB_NAME)) {
-  [Console]::Out.Write('1')
-} else {
-  [Console]::Out.Write('0')
-}`,ow=String.raw`
-using System;
-using System.Runtime.InteropServices;
-using System.Text;
-public static class KodaXNativeProcessSnapshot {
-  [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Auto)]
-  private struct ProcessEntry32 {
-    public uint dwSize;
-    public uint cntUsage;
-    public uint th32ProcessID;
-    public IntPtr th32DefaultHeapID;
-    public uint th32ModuleID;
-    public uint cntThreads;
-    public uint th32ParentProcessID;
-    public int pcPriClassBase;
-    public uint dwFlags;
-    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 260)]
-    public string szExeFile;
-  }
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern IntPtr CreateToolhelp32Snapshot(uint flags, uint processId);
-  [DllImport("kernel32.dll", CharSet = CharSet.Auto, SetLastError = true)]
-  private static extern bool Process32First(IntPtr snapshot, ref ProcessEntry32 entry);
-  [DllImport("kernel32.dll", CharSet = CharSet.Auto, SetLastError = true)]
-  private static extern bool Process32Next(IntPtr snapshot, ref ProcessEntry32 entry);
-  [StructLayout(LayoutKind.Sequential)]
-  private struct FileTime {
-    public uint Low;
-    public uint High;
-  }
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern IntPtr OpenProcess(uint access, bool inheritHandle, uint processId);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool GetProcessTimes(IntPtr process, out FileTime creation, out FileTime exit, out FileTime kernel, out FileTime user);
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool TerminateProcess(IntPtr process, uint exitCode);
-  [DllImport("kernel32.dll")]
-  private static extern void GetSystemTimeAsFileTime(out FileTime systemTime);
-  [DllImport("kernel32.dll")]
-  private static extern bool CloseHandle(IntPtr handle);
-  private static ulong ReadCreationTime(uint processId) {
-    var process = OpenProcess(0x1000, false, processId);
-    if (process == IntPtr.Zero) return 0;
-    try {
-      FileTime creation, exit, kernel, user;
-      if (!GetProcessTimes(process, out creation, out exit, out kernel, out user)) return 0;
-      return ((ulong)creation.High << 32) | creation.Low;
-    } finally {
-      CloseHandle(process);
-    }
-  }
-  public static int TerminateExact(uint processId, ulong expectedCreationTime) {
-    var process = OpenProcess(0x1001, false, processId);
-    if (process == IntPtr.Zero) return 0;
-    try {
-      FileTime creation, exit, kernel, user;
-      if (!GetProcessTimes(process, out creation, out exit, out kernel, out user)) return 0;
-      var actual = (((ulong)creation.High << 32) | creation.Low) / 10000;
-      if (actual != expectedCreationTime) return 2;
-      return TerminateProcess(process, 1) ? 1 : 0;
-    } finally {
-      CloseHandle(process);
-    }
-  }
-  public static string ReadRows() {
-    FileTime cutoffTime;
-    GetSystemTimeAsFileTime(out cutoffTime);
-    var cutoff = (((ulong)cutoffTime.High << 32) | cutoffTime.Low) / 10000;
-    var snapshot = CreateToolhelp32Snapshot(2, 0);
-    if (snapshot == new IntPtr(-1)) return string.Empty;
-    var rows = new StringBuilder();
-    var entry = new ProcessEntry32();
-    entry.dwSize = (uint)Marshal.SizeOf(entry);
-    try {
-      if (!Process32First(snapshot, ref entry)) return string.Empty;
-      do {
-        var creationTime = ReadCreationTime(entry.th32ProcessID) / 10000;
-        if (creationTime == 0 || creationTime <= cutoff) {
-          rows.Append(entry.th32ProcessID).Append(',').Append(entry.th32ParentProcessID).Append(',').Append(creationTime).Append('\n');
-        }
-        entry.dwSize = (uint)Marshal.SizeOf(entry);
-      } while (Process32Next(snapshot, ref entry));
-      return rows.ToString();
-    } finally {
-      CloseHandle(snapshot);
-    }
-  }
-}`,iw=Object.freeze({status:"terminated"}),sw=Object.freeze({status:"already-exited"}),aw=Object.freeze({status:"unknown"});var Re="KODAX_EFFECT_JOB_PAYLOAD";var ms=String.raw`
-using System;
-using System.IO;
-using System.Runtime.InteropServices;
-using System.Threading;
-
-public static class KodaXEffectJob {
-  [StructLayout(LayoutKind.Sequential)]
-  private struct IoCounters {
-    public ulong ReadOperationCount;
-    public ulong WriteOperationCount;
-    public ulong OtherOperationCount;
-    public ulong ReadTransferCount;
-    public ulong WriteTransferCount;
-    public ulong OtherTransferCount;
-  }
-
-  [StructLayout(LayoutKind.Sequential)]
-  private struct BasicLimitInformation {
-    public long PerProcessUserTimeLimit;
-    public long PerJobUserTimeLimit;
-    public uint LimitFlags;
-    public UIntPtr MinimumWorkingSetSize;
-    public UIntPtr MaximumWorkingSetSize;
-    public uint ActiveProcessLimit;
-    public UIntPtr Affinity;
-    public uint PriorityClass;
-    public uint SchedulingClass;
-  }
-
-  [StructLayout(LayoutKind.Sequential)]
-  private struct ExtendedLimitInformation {
-    public BasicLimitInformation BasicLimitInformation;
-    public IoCounters IoInfo;
-    public UIntPtr ProcessMemoryLimit;
-    public UIntPtr JobMemoryLimit;
-    public UIntPtr PeakProcessMemoryUsed;
-    public UIntPtr PeakJobMemoryUsed;
-  }
-
-  [StructLayout(LayoutKind.Sequential)]
-  private struct BasicAccountingInformation {
-    public long TotalUserTime;
-    public long TotalKernelTime;
-    public long ThisPeriodTotalUserTime;
-    public long ThisPeriodTotalKernelTime;
-    public uint TotalPageFaultCount;
-    public uint TotalProcesses;
-    public uint ActiveProcesses;
-    public uint TotalTerminatedProcesses;
-  }
-
-  [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-  private static extern IntPtr CreateJobObjectW(IntPtr attributes, string name);
-
-  [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-  private static extern IntPtr OpenJobObjectW(uint desiredAccess, bool inheritHandle, string name);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool SetInformationJobObject(
-    IntPtr job,
-    int infoClass,
-    ref ExtendedLimitInformation info,
-    uint length);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool QueryInformationJobObject(
-    IntPtr job,
-    int infoClass,
-    out BasicAccountingInformation info,
-    uint length,
-    IntPtr returnLength);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern IntPtr OpenProcess(uint access, bool inheritHandle, uint processId);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool AssignProcessToJobObject(IntPtr job, IntPtr process);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern uint WaitForSingleObject(IntPtr handle, uint milliseconds);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool GetExitCodeProcess(IntPtr process, out uint exitCode);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool TerminateJobObject(IntPtr job, uint exitCode);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool CloseHandle(IntPtr handle);
-
-  private const uint Synchronize = 0x00100000;
-  private const uint ProcessTerminate = 0x0001;
-  private const uint ProcessSetQuota = 0x0100;
-  private const uint ProcessQueryLimitedInformation = 0x1000;
-  private const uint JobObjectTerminate = 0x0008;
-  private const uint JobObjectQuery = 0x0004;
-  private const uint JobObjectLimitKillOnJobClose = 0x00002000;
-  private const uint WaitObject0 = 0;
-
-  private static void Require(bool result, string operation) {
-    if (!result) throw new InvalidOperationException(
-      operation + " failed with Win32 error " + Marshal.GetLastWin32Error());
-  }
-
-  private static void PublishReady() {
-    Console.Out.WriteLine("READY");
-    Console.Out.Flush();
-  }
-
-  public static void Run(uint targetPid, uint ownerPid, string jobName) {
-    var job = CreateJobObjectW(IntPtr.Zero, jobName);
-    if (job == IntPtr.Zero) throw new InvalidOperationException(
-      "CreateJobObject failed with Win32 error " + Marshal.GetLastWin32Error());
-    var processAccess = Synchronize | ProcessTerminate | ProcessSetQuota | ProcessQueryLimitedInformation;
-    var target = OpenProcess(processAccess, false, targetPid);
-    var owner = OpenProcess(Synchronize, false, ownerPid);
-    if (target == IntPtr.Zero || owner == IntPtr.Zero) {
-      if (target != IntPtr.Zero) CloseHandle(target);
-      if (owner != IntPtr.Zero) CloseHandle(owner);
-      CloseHandle(job);
-      throw new InvalidOperationException(
-        "OpenProcess failed with Win32 error " + Marshal.GetLastWin32Error());
-    }
-    try {
-      var limits = new ExtendedLimitInformation();
-      limits.BasicLimitInformation.LimitFlags = JobObjectLimitKillOnJobClose;
-      Require(SetInformationJobObject(
-        job,
-        9,
-        ref limits,
-        (uint)Marshal.SizeOf(typeof(ExtendedLimitInformation))),
-        "SetInformationJobObject");
-      Require(AssignProcessToJobObject(job, target), "AssignProcessToJobObject");
-      PublishReady();
-
-      uint targetExitCode = 1;
-      while (true) {
-        if (WaitForSingleObject(owner, 0) == WaitObject0) break;
-        if (WaitForSingleObject(target, 0) == WaitObject0) {
-          GetExitCodeProcess(target, out targetExitCode);
-          break;
-        }
-        Thread.Sleep(20);
-      }
-
-      Require(TerminateJobObject(job, targetExitCode), "TerminateJobObject");
-      while (true) {
-        BasicAccountingInformation accounting;
-        Require(QueryInformationJobObject(
-          job,
-          1,
-          out accounting,
-          (uint)Marshal.SizeOf(typeof(BasicAccountingInformation)),
-          IntPtr.Zero),
-          "QueryInformationJobObject");
-        if (accounting.ActiveProcesses == 0) return;
-        Thread.Sleep(10);
-      }
-    } finally {
-      CloseHandle(owner);
-      CloseHandle(target);
-      CloseHandle(job);
-    }
-  }
-
-  public static bool TerminateAndDrain(string jobName) {
-    var job = OpenJobObjectW(JobObjectTerminate | JobObjectQuery, false, jobName);
-    if (job == IntPtr.Zero) {
-      var error = Marshal.GetLastWin32Error();
-      if (error == 2) return false;
-      throw new InvalidOperationException(
-        "OpenJobObject failed with Win32 error " + error);
-    }
-    try {
-      Require(TerminateJobObject(job, 1), "TerminateJobObject");
-      while (true) {
-        BasicAccountingInformation accounting;
-        Require(QueryInformationJobObject(
-          job,
-          1,
-          out accounting,
-          (uint)Marshal.SizeOf(typeof(BasicAccountingInformation)),
-          IntPtr.Zero),
-          "QueryInformationJobObject");
-        if (accounting.ActiveProcesses == 0) return true;
-        Thread.Sleep(10);
-      }
-    } finally {
-      CloseHandle(job);
-    }
-  }
-
-}`,hs=String.raw`
-using System;
-using System.Collections.Generic;
-using System.Diagnostics;
-using System.Runtime.InteropServices;
-using System.Security.Principal;
-
-public static class KodaXSidProbe {
-  [StructLayout(LayoutKind.Sequential)]
-  private struct WtsProcessInformation {
-    public uint SessionId;
-    public uint ProcessId;
-    public IntPtr ProcessName;
-    public IntPtr UserSid;
-  }
-
-  [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
-  private struct ProcessEntry32 {
-    public uint Size;
-    public uint Usage;
-    public uint ProcessId;
-    public UIntPtr DefaultHeapId;
-    public uint ModuleId;
-    public uint Threads;
-    public uint ParentProcessId;
-    public int PriorityClassBase;
-    public uint Flags;
-    [MarshalAs(UnmanagedType.ByValTStr, SizeConst = 260)]
-    public string ExecutableFile;
-  }
-
-  [DllImport("wtsapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-  private static extern bool WTSEnumerateProcessesW(
-    IntPtr server,
-    uint reserved,
-    uint version,
-    out IntPtr processInformation,
-    out uint count);
-
-  [DllImport("wtsapi32.dll")]
-  private static extern void WTSFreeMemory(IntPtr memory);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern IntPtr CreateToolhelp32Snapshot(uint flags, uint processId);
-
-  [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-  private static extern bool Process32FirstW(IntPtr snapshot, ref ProcessEntry32 entry);
-
-  [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-  private static extern bool Process32NextW(IntPtr snapshot, ref ProcessEntry32 entry);
-
-  [DllImport("kernel32.dll", SetLastError = true)]
-  private static extern bool CloseHandle(IntPtr handle);
-
-  private static Dictionary<uint, uint> ProcessParents() {
-    var parents = new Dictionary<uint, uint>();
-    var snapshot = CreateToolhelp32Snapshot(0x00000002, 0);
-    if (snapshot == new IntPtr(-1)) throw new InvalidOperationException(
-      "CreateToolhelp32Snapshot failed with Win32 error " + Marshal.GetLastWin32Error());
-    try {
-      var entry = new ProcessEntry32();
-      entry.Size = (uint)Marshal.SizeOf(typeof(ProcessEntry32));
-      if (!Process32FirstW(snapshot, ref entry)) throw new InvalidOperationException(
-        "Process32First failed with Win32 error " + Marshal.GetLastWin32Error());
-      do {
-        parents[entry.ProcessId] = entry.ParentProcessId;
-        entry.Size = (uint)Marshal.SizeOf(typeof(ProcessEntry32));
-      } while (Process32NextW(snapshot, ref entry));
-    } finally {
-      CloseHandle(snapshot);
-    }
-    return parents;
-  }
-
-  private static HashSet<uint> MatchingProcesses(SecurityIdentifier expected) {
-    var matches = new HashSet<uint>();
-    IntPtr processes;
-    uint count;
-    if (!WTSEnumerateProcessesW(IntPtr.Zero, 0, 1, out processes, out count)) {
-      throw new InvalidOperationException(
-        "WTSEnumerateProcesses failed with Win32 error " + Marshal.GetLastWin32Error());
-    }
-    try {
-      var entrySize = Marshal.SizeOf(typeof(WtsProcessInformation));
-      for (uint index = 0; index < count; index++) {
-        var address = new IntPtr(processes.ToInt64() + ((long)index * entrySize));
-        var entry = (WtsProcessInformation)Marshal.PtrToStructure(
-          address,
-          typeof(WtsProcessInformation));
-        if (entry.UserSid == IntPtr.Zero) continue;
-        if (new SecurityIdentifier(entry.UserSid).Equals(expected)) matches.Add(entry.ProcessId);
-      }
-    } finally {
-      WTSFreeMemory(processes);
-    }
-    return matches;
-  }
-
-  private static bool DescendsFrom(
-    uint process,
-    uint root,
-    Dictionary<uint, uint> parents
-  ) {
-    var visited = new HashSet<uint>();
-    while (process != 0 && visited.Add(process)) {
-      if (process == root) return true;
-      if (!parents.ContainsKey(process)) return false;
-      process = parents[process];
-    }
-    return false;
-  }
-
-  public static bool HasOtherProcessWithSid(string expectedSid, bool ignoreProbeTree) {
-    var expected = new SecurityIdentifier(expectedSid);
-    using (var identity = WindowsIdentity.GetCurrent()) {
-      var sameUser = identity.User != null && identity.User.Equals(expected);
-      var administrator = new WindowsPrincipal(identity)
-        .IsInRole(WindowsBuiltInRole.Administrator);
-      if (ignoreProbeTree && !sameUser) {
-        throw new InvalidOperationException("Process-tree SID probe must run as the expected sandbox user");
-      }
-      if (!ignoreProbeTree && !sameUser && !administrator) {
-        throw new InvalidOperationException(
-          "Machine-wide inspection of a foreign Windows SID requires an elevated administrator token");
-      }
-    }
-    var matches = MatchingProcesses(expected);
-    if (!ignoreProbeTree) return matches.Count > 0;
-    var current = (uint)Process.GetCurrentProcess().Id;
-    if (!matches.Contains(current)) throw new InvalidOperationException(
-      "SID probe could not observe its own process");
-    var parents = ProcessParents();
-    var root = parents.ContainsKey(current) ? parents[current] : current;
-    foreach (var process in matches) {
-      if (!DescendsFrom(process, root, parents)) return true;
-    }
-    return false;
-  }
-}`,gs=String.raw`
-$ErrorActionPreference = 'Stop'
-try {
-  $payload = [Text.Encoding]::UTF8.GetString(
-    [Convert]::FromBase64String($env:${Re})) | ConvertFrom-Json
-  Remove-Item Env:${Re} -ErrorAction SilentlyContinue
-  $source = @'
-${ms}
-'@
-  Add-Type -TypeDefinition $source
-  if ($payload.action -eq 'recover') {
-    $drained = [KodaXEffectJob]::TerminateAndDrain([string]$payload.jobName)
-    [Console]::Out.WriteLine($(if ($drained) { 'DRAINED' } else { 'NOT_FOUND' }))
-    [Console]::Out.Flush()
-  } else {
-    [KodaXEffectJob]::Run(
-      [uint32]$payload.targetPid,
-      [uint32]$payload.ownerPid,
-      [string]$payload.jobName)
-  }
-  exit 0
-} catch {
-  [Console]::Out.WriteLine('ERROR:' + $_.Exception.Message)
-  [Console]::Out.Flush()
-  exit 1
-}`,ww=Buffer.from(gs,"utf16le").toString("base64"),ys=String.raw`
-$ErrorActionPreference = 'Stop'
-try {
-  $payload = [Text.Encoding]::UTF8.GetString(
-    [Convert]::FromBase64String($env:${Re})) | ConvertFrom-Json
-  Remove-Item Env:${Re} -ErrorAction SilentlyContinue
-  $source = @'
-${hs}
-'@
-  Add-Type -TypeDefinition $source
-  $active = [KodaXSidProbe]::HasOtherProcessWithSid(
-    [string]$payload.sid,
-    [bool]$payload.ignoreCurrentProcessTree)
-  [Console]::Out.WriteLine($(if ($active) { 'ACTIVE' } else { 'CLEAR' }))
-  [Console]::Out.Flush()
-  exit 0
-} catch {
-  [Console]::Out.WriteLine('ERROR:' + $_.Exception.Message)
-  [Console]::Out.Flush()
-  exit 1
-}`,vw=Buffer.from(ys,"utf16le").toString("base64");var Is=Math.floor(3.75*1024*1024);var As=1440*60*1e3;import{fileURLToPath as ta}from"url";import{dirname as na}from"path";var ra=ta(import.meta.url),zb=na(ra);import{readFile as ca,readdir as da}from"fs/promises";import{join as B,relative as la}from"path";import Ln from"yaml";var oa=["SessionStart","UserPromptSubmit","PreToolUse","PostToolUse","Stop","SubagentStop","Notification"];function ia(e){let t=e.split(`
-`),n=[];for(let r of t){let i=r.indexOf(":");if(i>0){let s=r.slice(0,i).trim(),a=r.slice(i+1).trim();if(a.includes(":")&&!a.startsWith('"')&&!a.startsWith("'")&&!a.startsWith("[")&&!a.startsWith("|")&&!a.startsWith(">")){n.push(`${s}: |-`),n.push(`  ${a}`);continue}}n.push(r)}return n.join(`
-`)}o(ia,"sanitizeYaml");function Nn(e,t={}){let n=e.replace(/^/,"").replace(/\r\n/g,`
-`).replace(/\r/g,`
-`).trimStart();if(!n.startsWith(`---
-`)){if(t.throwOnMissing)throw new Error("Invalid markdown: missing YAML frontmatter");return[null,e]}let r=n.indexOf(`
----
-`,4);if(r===-1){let c=n.indexOf(`
----`,4);c!==-1&&c===n.length-4&&(r=c)}if(r===-1){if(t.throwOnMissing)throw new Error("Invalid markdown: unclosed YAML frontmatter");return[null,e]}let i=n.slice(4,r),s=n.slice(r+5).trim(),a;try{a=Ln.parse(i)??{}}catch{a=Ln.parse(ia(i))??{}}if(a==null||typeof a!="object"||Array.isArray(a)){if(t.throwOnMissing)throw new Error("Invalid markdown: YAML frontmatter must be an object");return[null,s]}return[a,s]}o(Nn,"parseYamlFrontmatter");function Fn(e){if(typeof e=="string"){let t=e.trim();return t.length>0?t:void 0}if(Array.isArray(e)){let t=e.map(n=>String(n).trim()).filter(n=>n.length>0);return t.length>0?t.join(", "):void 0}}o(Fn,"normalizeAllowedToolsString");function sa(e){if(typeof e=="string"){let t=e.trim();return t?{command:t}:void 0}if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e,n=typeof t.command=="string"?t.command.trim():"";if(!n)return;let r=typeof t.matcher=="string"&&t.matcher.trim()?t.matcher.trim():void 0;return{command:n,matcher:r}}}o(sa,"normalizeYamlHookEntry");function aa(e){if(e==null)return;let n=(Array.isArray(e)?e:[e]).map(r=>sa(r)).filter(r=>r!==void 0);return n.length>0?n:void 0}o(aa,"normalizeYamlHookEntryList");function jn(e){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,n={};for(let r of oa){let i=aa(t[r]);i&&(n[r]=i)}return Object.keys(n).length>0?n:void 0}o(jn,"normalizeYamlHookMap");function Kn(e){let[t,n]=Nn(e,{throwOnMissing:!0});if(!t)throw new Error("Invalid SKILL.md: YAML frontmatter must be an object");if(!t.name||typeof t.name!="string")throw new Error('Invalid SKILL.md: missing required "name" field');if(!t.description||typeof t.description!="string")throw new Error('Invalid SKILL.md: missing required "description" field');return{frontmatter:{name:t.name,description:t.description,disableModelInvocation:t["disable-model-invocation"]===!0,userInvocable:t["user-invocable"]!==!1,allowedTools:Fn(t["allowed-tools"]),context:t.context==="fork"?"fork":void 0,agent:typeof t.agent=="string"?t.agent:void 0,argumentHint:typeof t["argument-hint"]=="string"?t["argument-hint"]:void 0,model:typeof t.model=="string"?t.model:void 0,hooks:jn(t.hooks),license:typeof t.license=="string"?t.license:void 0,compatibility:typeof t.compatibility=="string"?t.compatibility:void 0,metadata:t.metadata&&typeof t.metadata=="object"&&!Array.isArray(t.metadata)?t.metadata:void 0},body:n}}o(Kn,"parseSkillMarkdown");async function Ie(e,t){let n=B(e,"SKILL.md");try{let r=await ca(n,"utf-8"),{frontmatter:i,body:s}=Kn(r),[a,c,d,l,u]=await Promise.all([V(B(e,"scripts")),V(B(e,"references")),V(B(e,"assets")),V(B(e,"templates")),V(B(e,"resources"))]);return{...i,userInvocable:!0,path:e,skillFilePath:n,content:s,rawContent:s,loaded:!0,source:t,...a.length>0&&{scripts:a},...c.length>0&&{references:c},...d.length>0&&{assets:d},...l.length>0&&{templates:l},...u.length>0&&{resources:u}}}catch(r){return I({source:"agent:skills",level:"error",message:`Failed to load skill from ${e}.`,detail:r}),null}}o(Ie,"loadFullSkill");async function V(e,t=e){let n=[];try{let r=await da(e,{withFileTypes:!0});r.sort((i,s)=>i.name.localeCompare(s.name));for(let i of r){let s=B(e,i.name);if(i.isDirectory()){n.push(...await V(s,t));continue}i.isFile()&&n.push({name:i.name,path:s,relativePath:la(t,s).replace(/\\/g,"/")})}}catch{}return n}o(V,"loadSkillFiles");var Wn=64*1024,Bn=256*1024;var Lk=1024*1024;var pS=16*1024;var SS=16*1024;import{execSync as za}from"child_process";import Ha from"path";var Ga=new Set(["ls","cat","pwd","echo","whoami","date","which","whereis","tree","dir","type","get-childitem","get-content","select-string","get-location","grep","find","awk","sed","head","tail","less","more","wc","git status","git diff","git log","git show","git branch","git remote","git ls-files","git rev-parse","git grep","node","npm","yarn","pnpm","tsc","python","pip","go","cargo","rustc"]);function rr(e){if(!e||!e.trim())return!1;let t=e.trim().replace(/\s+/g," ").toLowerCase();for(let n of Ga)if(t===n||t.startsWith(`${n} `)){if(n==="sed"&&t.split(/\s+/).some(s=>s.startsWith("-i")||s==="--in-place"))return!1;if(n==="awk"){let i=t.split(/\s+/);if(i.includes("-f")||i.includes("--file"))return!1}if(["node","npm","yarn","pnpm","tsc","python","pip","go","cargo","rustc"].includes(n)){let i=t.split(/\s+/).slice(1);if(i.length>0&&!i.every(s=>/^(-v|--version|-h|--help)$/.test(s)))return!1}return!0}return!1}o(rr,"isSingleSafeDynamicContextCommand");function Va(e){if(!e||!e.trim())return!1;let t=e.trim().replace(/\\\r?\n/g," ");if(/[<>|;`]|\$\(|(?<!&)&(?!&)/.test(t)||t.includes("\\")&&Ha.sep!=="\\"&&t.replace(/\\ /g,"").includes("\\"))return!1;let r=t.split(/\s*&&\s*/);if(r.length===1)return rr(r[0]);for(let i of r){let s=i?.trim();if(s&&!/^cd\s+/.test(s.toLowerCase())&&!rr(s))return!1}return!0}o(Va,"isSafeDynamicContextCommand");function or(e){let t=[],n="",r=!1,i="";for(let s=0;s<e.length;s++){let a=e[s];r?a===i?r=!1:n+=a:a==='"'||a==="'"?(r=!0,i=a):a===" "?n&&(t.push(n),n=""):n+=a}return n&&t.push(n),t}o(or,"parseArguments");var _e=class{static{o(this,"VariableResolver")}context;constructor(t){this.context=t}async resolve(t,n){let r=t,i=or(n);return r=this.resolvePositionalArgs(r,i),r=this.resolveArguments(r,n),r=this.resolveEnvVars(r),r=await this.resolveDynamicContext(r),r}resolvePositionalArgs(t,n){return t.replace(/\$(\d+)(?![a-zA-Z0-9_])/g,(r,i)=>{let s=parseInt(i,10);return n[s]??""})}resolveArguments(t,n){return t.replace(/\$ARGUMENTS/g,n)}resolveEnvVars(t){let n={...this.context.environment,CLAUDE_SESSION_ID:this.context.sessionId??"",KODAX_SESSION_ID:this.context.sessionId??"",KODAX_WORKING_DIR:this.context.workingDirectory};return t.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g,(r,i)=>n[i]??r)}async resolveDynamicContext(t){let n=/!`([^`]+)`/g,r=[],i;for(;(i=n.exec(t))!==null;)r.push({match:i[0],command:i[1]});if(r.length===0)return t;let s=t;for(let{match:a,command:c}of r)try{let d=await this.executeDynamicCommand(c);s=s.replace(a,d)}catch(d){let l=d instanceof Error?d.message:String(d);s=s.replace(a,`[Error: ${l}]`)}return s}async executeDynamicCommand(t){if(this.context.disableDynamicContext)throw new Error("Dynamic context disabled by host. Skill `!`cmd`` blocks are not allowed in this environment.");if(this.context.executeDynamicContext){let n=await this.context.executeDynamicContext(t,this.context.workingDirectory);return typeof n=="string"?n.trim():""}if(!Va(t))throw new Error("Unsafe dynamic context command blocked. Only simple read-only commands are allowed in !`...` blocks.");try{return za(t,{cwd:this.context.workingDirectory,encoding:"utf-8",timeout:5e3,maxBuffer:1048576,windowsHide:!0}).trim()}catch(n){throw n instanceof Error?new Error(`Command failed: ${n.message}`):n}}};async function ae(e,t,n){return new _e(n).resolve(e,t)}o(ae,"resolveSkillContent");function ir(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}o(ir,"escapeXml");var ct=120;function Me(e){return e.replace(/\\/g,"/")}o(Me,"formatDisplayPath");function Qa(e){return[...(e.references??[]).map(t=>({folder:"references",file:t})),...(e.scripts??[]).map(t=>({folder:"scripts",file:t})),...(e.assets??[]).map(t=>({folder:"assets",file:t})),...(e.templates??[]).map(t=>({folder:"templates",file:t})),...(e.resources??[]).map(t=>({folder:"resources",file:t}))]}o(Qa,"collectSupportFiles");function Za(e){let t=Qa(e);if(t.length===0)return[];let n=[["references",e.references],["scripts",e.scripts],["assets",e.assets],["templates",e.templates],["resources",e.resources]],r=["Skill support files are rooted at the skill root above. When the skill references `references/...`, `assets/...`, `scripts/...`, `templates/...`, or `resources/...`, read it from this skill root.","","Support roots:"];for(let[i,s]of n)s?.length&&r.push(`- ${i}/: ${Me(`${e.path}/${i}`)} (${s.length} files)`);r.push("","Support file inventory:");for(let{folder:i,file:s}of t.slice(0,ct))r.push(`- ${i}/${s.relativePath}: ${Me(s.path)}`);return t.length>ct&&r.push(`- ... ${t.length-ct} more files under ${Me(e.path)}`),r}o(Za,"buildSupportFileContext");function ec(e,t,n){let r=[];r.push(`<skill name="${ir(e.name)}" location="${ir(e.path)}">`),r.push(""),r.push(`Skill root: ${Me(e.path)}`),e.source==="builtin"?r.push("This is a built-in KodaX skill."):e.source==="project"?r.push("This is a project-defined skill. Project work paths are relative to the project root; skill support files are relative to the skill root above."):e.source==="user"&&r.push("This is a user-defined skill."),r.push("");let i=Za(e);return i.length>0&&(r.push(...i),r.push("")),r.push(t),n.trim()&&(r.push(""),r.push(`User provided arguments: ${n}`)),r.push(""),r.push("</skill>"),r.join(`
-`)}o(ec,"buildSkillBlock");async function dt(e,t,n){let r=await ae(e.content,t,n);return{content:ec(e,r,t),disableModelInvocation:e.disableModelInvocation??!1,skill:e}}o(dt,"expandSkillForLLM");import{writeFile as lr}from"node:fs/promises";import j from"node:path";import{existsSync as tc}from"node:fs";import{mkdir as nc,readFile as lt,readdir as rc,stat as ar,writeFile as bE}from"node:fs/promises";import oc from"node:os";import $ from"node:path";import{fileURLToPath as cr,pathToFileURL as ic}from"node:url";import sc from"yaml";var Y=null;async function F(){if(Y)return Y;let e=$.dirname(cr(import.meta.url)),t=[],n=$.resolve(e,"../../../index.js");if(tc(n))return Y=await import(ic(n).href),Y;t.push(`relative SDK path not found: ${n}`);try{return Y=await import(["@kodax-ai","kodax"].join("/")),Y}catch(r){t.push(`bare-name @kodax-ai/kodax failed: ${r?.code??r?.message}`)}throw new Error(`Cannot locate KodaX SDK from helper script ${import.meta.url}.
-Attempted:
-  - ${t.join(`
-  - `)}`)}o(F,"loadKodaXSDK");function ac(e){let t=e.replace(/^\uFEFF/,"").replace(/\r\n/g,`
-`).replace(/\r/g,`
-`).trimStart();if(!t.startsWith(`---
-`))throw new Error("SKILL.md missing YAML frontmatter");let n=t.indexOf(`
----
-`,4);if(n===-1)throw new Error("SKILL.md has unclosed YAML frontmatter");return{yamlText:t.slice(4,n),body:t.slice(n+5).trim()}}o(ac,"extractFrontmatter");function Oe(e){let{yamlText:t,body:n}=ac(e),r=sc.parse(t);if(!r||typeof r!="object"||Array.isArray(r))throw new Error("Frontmatter must be a YAML object");return{frontmatter:r,body:n}}o(Oe,"parseSkillMarkdown");async function de(e){let t=$.join(e,"SKILL.md");if(!(await ar(t).catch(()=>null))?.isFile())throw new Error(`SKILL.md not found in ${e}`);let r=await lt(t,"utf8"),{frontmatter:i,body:s}=Oe(r);return{skillDir:$.resolve(e),skillMdPath:t,rawContent:r,body:s,frontmatter:i}}o(de,"loadSkill");async function le(e){try{return await ar(e),!0}catch{return!1}}o(le,"pathExists");function $e(e){if(!e.length)return{mean:0,stddev:0,min:0,max:0};let t=e.reduce((r,i)=>r+i,0)/e.length,n=e.length>1?e.reduce((r,i)=>r+(i-t)**2,0)/(e.length-1):0;return{mean:ce(t),stddev:ce(Math.sqrt(n)),min:ce(Math.min(...e)),max:ce(Math.max(...e))}}o($e,"calculateStats");function ce(e,t=4){return Number(e.toFixed(t))}o(ce,"roundNumber");function De(e){return e>=0?`+${e.toFixed(4)}`:e.toFixed(4)}o(De,"formatDelta");function sr(e){try{return JSON.parse(e)}catch{return null}}o(sr,"safeJsonParse");function Q(e){let t=sr(e.trim());if(t&&typeof t=="object")return t;let n=e.indexOf("{"),r=e.lastIndexOf("}");return n===-1||r===-1||r<=n?null:sr(e.slice(n,r+1))}o(Q,"extractJsonObject");async function _(e,t=null){try{return JSON.parse(await lt(e,"utf8"))}catch{return t}}o(_,"readJsonFile");async function Z(e,t){let n=$.dirname(cr(e));return lt($.resolve(n,t),"utf8")}o(Z,"loadRelativeText");function T(e,t=12e3){let n=typeof e=="string"?e:String(e??"");if(n.length<=t)return n;let r=n.length-t;return`${n.slice(0,t)}
-
-[truncated ${r} chars]`}o(T,"truncateText");function dr(e){let t=Array.isArray(e)?e.length:0,n=Array.isArray(e)?e.filter(i=>i?.passed===!0).length:0,r=Math.max(t-n,0);return{passed:n,failed:r,total:t,pass_rate:t>0?ce(n/t):0}}o(dr,"computePassSummary");async function ut(e,t=e,n=[]){let r=await rc(t,{withFileTypes:!0}).catch(()=>[]);for(let i of r.sort((s,a)=>s.name.localeCompare(a.name))){let s=$.join(t,i.name);if(i.isDirectory()){await ut(e,s,n);continue}i.isFile()&&n.push({absolutePath:s,relativePath:$.relative(e,s).replace(/\\/g,"/")})}return n}o(ut,"collectFiles");function ue(){return $.join(oc.homedir(),".kodax","skills")}o(ue,"getDefaultSkillsDir");async function A(e){return await nc(e,{recursive:!0}),e}o(A,"ensureDirectory");function cc(e){return e.split("-").filter(Boolean).map(t=>t[0]?.toUpperCase()+t.slice(1)).join(" ")}o(cc,"titleFromSlug");function dc(e,t){let n=cc(e);return`---
-name: ${e}
-description: ${t}
-user-invocable: true
-disable-model-invocation: false
-allowed-tools: "Read, Grep, Glob"
-compatibility: "Optimized for KodaX and Agent Skills style directories."
----
-
-# ${n}
-
-Describe the task this skill handles, the trigger boundary, and the expected outcome.
-
-## When to use
-
-- Use this skill when the user asks for ${n.toLowerCase()}.
-- Do not use this skill when the request only needs a short explanation or is out of scope.
-
-## Workflow
-
-1. Restate the task boundary in one sentence.
-2. Gather the minimum context needed to do the work well.
-3. Execute the task, preferring small, verifiable steps.
-4. Summarize what changed, what was validated, and any remaining risks.
-
-## References
-
-- Put deeper guidance in \`references/\`.
-- Put reusable templates or static files in \`assets/\`.
-- Put repeatable helper scripts in \`scripts/\`.
-`}o(dc,"renderSkillTemplate");function lc(e){return JSON.stringify({skill_name:e,evals:[{id:1,prompt:"TODO: Add a realistic user request to evaluate this skill.",expected_output:"Describe what a successful result should accomplish.",files:[],assertions:[]}]},null,2)}o(lc,"renderEvalTemplate");async function uc(e){let t=j.resolve(e.baseDir??ue()),n=j.join(t,e.name),r=e.description??`Describe what ${e.name} does and when it should be used.`;if(await le(n)&&!e.force)throw new Error(`Skill directory already exists: ${n}`);return await A(n),await A(j.join(n,"references")),await A(j.join(n,"assets")),await A(j.join(n,"scripts")),await lr(j.join(n,"SKILL.md"),dc(e.name,r),"utf8"),e.includeEvals!==!1&&(await A(j.join(n,"evals")),await lr(j.join(n,"evals","evals.json"),`${lc(e.name)}
-`,"utf8")),{skillDir:n,created:["SKILL.md",...e.includeEvals!==!1?["evals/evals.json"]:[],"references/","assets/","scripts/"]}}o(uc,"initSkill");function fc(e){let t={name:e[2],baseDir:void 0,description:void 0,force:!1,includeEvals:!0};for(let n=3;n<e.length;n+=1){let r=e[n];(r==="--path"||r==="--dest")&&e[n+1]?t.baseDir=e[++n]:r==="--description"&&e[n+1]?t.description=e[++n]:r==="--force"?t.force=!0:r==="--no-evals"&&(t.includeEvals=!1)}return t}o(fc,"parseArgs");async function ur(e=process.argv){let t=fc(e);t.name||(console.error("Usage: node scripts/init-skill.js <skill-name> [--path <skills-dir>] [--description <text>] [--force] [--no-evals]"),process.exit(1));let n=await uc(t);console.log(`Initialized ${n.skillDir}`)}o(ur,"main");var pc=!1;pc&&ur().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exit(1)});import fr from"node:path";var mc=new Set(["name","description","license","compatibility","metadata","allowed-tools","disable-model-invocation","user-invocable","argument-hint","context","agent","model","hooks"]);async function fe(e){let t={valid:!1,errors:[],warnings:[],frontmatter:null},n;try{n=await de(e)}catch(d){return t.errors.push(d instanceof Error?d.message:String(d)),t}let{frontmatter:r,body:i}=n;t.frontmatter=r;let s=Object.keys(r).filter(d=>!mc.has(d));s.length>0&&t.errors.push(`Unexpected frontmatter keys: ${s.sort().join(", ")}`);let a=typeof r.name=="string"?r.name.trim():"",c=typeof r.description=="string"?r.description.trim():"";if(!a)t.errors.push("Missing required frontmatter field: name");else{/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(a)||t.errors.push(`Invalid skill name "${a}". Use lowercase kebab-case and avoid consecutive hyphens.`),a.length>64&&t.errors.push(`Skill name is too long (${a.length}/64).`);let d=fr.basename(fr.resolve(e));d!==a&&t.warnings.push(`Skill directory name "${d}" does not match frontmatter name "${a}".`)}if(c?(c.length>1024&&t.errors.push(`Description is too long (${c.length}/1024).`),/[<>]/.test(c)&&t.errors.push("Description cannot contain angle brackets."),/[。.!?]/.test(c)||t.warnings.push("Description may be too terse; consider making the trigger conditions clearer.")):t.errors.push("Missing required frontmatter field: description"),i.trim()||t.errors.push("SKILL.md body is empty."),r.compatibility!=null&&(typeof r.compatibility!="string"?t.errors.push("compatibility must be a string if provided."):r.compatibility.length>500&&t.errors.push(`compatibility is too long (${r.compatibility.length}/500).`)),r["allowed-tools"]!=null){let d=r["allowed-tools"];typeof d=="string"||Array.isArray(d)&&d.every(u=>typeof u=="string")||t.errors.push("allowed-tools must be a string or string array.")}return r["disable-model-invocation"]!=null&&typeof r["disable-model-invocation"]!="boolean"&&t.errors.push("disable-model-invocation must be a boolean."),r["user-invocable"]!=null&&typeof r["user-invocable"]!="boolean"&&t.errors.push("user-invocable must be a boolean."),r.context!=null&&r.context!=="fork"&&t.errors.push('context must be "fork" when provided.'),r.hooks!=null&&(typeof r.hooks!="object"||Array.isArray(r.hooks))&&t.errors.push("hooks must be an object when provided."),t.valid=t.errors.length===0,t}o(fe,"validateSkillDirectory");async function pr(e=process.argv){let t=e[2];t||(console.error("Usage: node scripts/quick-validate.js <skill-directory>"),process.exit(1));let n=await fe(t);if(n.errors.length===0)console.log("Skill is valid.");else{console.error("Skill validation failed:");for(let r of n.errors)console.error(`- ${r}`)}if(n.warnings.length>0){console.log("Warnings:");for(let r of n.warnings)console.log(`- ${r}`)}process.exit(n.valid?0:1)}o(pr,"main");var hc=!1;hc&&pr().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exit(1)});import{readFile as ft,writeFile as D}from"node:fs/promises";import k from"node:path";function gc(e){return typeof e=="string"?{text:e}:e&&typeof e=="object"&&typeof e.text=="string"?{text:e.text}:null}o(gc,"normalizeAssertion");function yc(e){return e.reduce((t,n)=>Array.isArray(n.content)?t+n.content.filter(r=>r?.type==="tool_use").length:t,0)}o(yc,"countToolCalls");function wc(e){return e.reduce((t,n)=>Array.isArray(n.content)?t+n.content.filter(r=>r?.type==="tool_result"&&r.is_error===!0).length:t,0)}o(wc,"countToolErrors");function vc(e,t){return`${["# Skill Eval Transcript","","## Eval Prompt","",e,"","## Final Response","",t.lastText||"(No final text)","","## Result Flags","",`- success: ${t.success}`,`- signal: ${t.signal??"none"}`,`- interrupted: ${t.interrupted===!0}`,`- limit_reached: ${t.limitReached===!0}`].join(`
-`)}
-`}o(vc,"renderTranscript");async function bc(e,t){let n=k.dirname(k.resolve(t.evalsPath)),r=k.resolve(t.cwd??process.cwd()),i=[];for(let s of e??[]){let a=k.isAbsolute(s)?s:k.resolve(n,s),c=k.resolve(r,s),d=null,l=a;try{d=await ft(a,"utf8")}catch{d=await ft(c,"utf8").catch(()=>null),l=c}if(d==null)throw new Error(`Input file not found for eval: ${s}`);i.push(`### ${s}
-\`\`\`
-${d}
-\`\`\`
-(Resolved from ${l})`)}return i.length===0?"":`## Input Files
-
-${i.join(`
-
-`)}
-
-`}o(bc,"readInputFiles");async function kc(e,t){let n=String(e.prompt??e.query??"").trim();return`${await bc(e.files,t)}${n}`.trim()}o(kc,"buildEvalPrompt");async function Sc(e,t){let{runKodaX:n,estimateTokens:r}=await F(),i=Date.now(),s=await n({provider:t.provider??"anthropic",model:t.model,maxIter:t.maxIter??30,reasoningMode:t.reasoningMode??"off",thinking:t.reasoningMode?t.reasoningMode!=="off":!1,context:{gitRoot:k.resolve(t.cwd??process.cwd())}},e);return{result:s,totalTokens:r(s.messages),durationMs:Date.now()-i}}o(Sc,"defaultRunAgent");async function Ec(e,t,n,r){return e==="with_skill"?(await dt(t,n,{workingDirectory:k.resolve(r.cwd??process.cwd()),projectRoot:k.resolve(r.cwd??process.cwd()),sessionId:"skill-eval",environment:{}})).content:n}o(Ec,"prepareConfigPrompt");async function xc(e,t,n,r,i){let s=k.join(e,"outputs");await A(s);let a={total_tool_calls:yc(i.result.messages),errors_encountered:wc(i.result.messages),output_chars:i.result.lastText.length};await D(k.join(s,"result.md"),`${i.result.lastText}
-`,"utf8"),await D(k.join(s,"prompt.txt"),`${r}
-`,"utf8"),await D(k.join(e,"transcript.md"),vc(r,i.result),"utf8"),await D(k.join(s,"metrics.json"),`${JSON.stringify({config:t,eval_id:n.id??null,session_id:i.result.sessionId,...a},null,2)}
-`,"utf8"),await D(k.join(s,"messages.json"),`${JSON.stringify(i.result.messages,null,2)}
-`,"utf8"),await D(k.join(e,"timing.json"),`${JSON.stringify({total_tokens:i.totalTokens,duration_ms:i.durationMs,total_duration_seconds:Number((i.durationMs/1e3).toFixed(4))},null,2)}
-`,"utf8"),await D(k.join(e,"result.json"),`${JSON.stringify({success:i.result.success,signal:i.result.signal??null,signal_reason:i.result.signalReason??null,interrupted:i.result.interrupted===!0,limit_reached:i.result.limitReached===!0,session_id:i.result.sessionId,execution_metrics:a},null,2)}
-`,"utf8")}o(xc,"writeRunArtifacts");async function Rc(e,t=Sc){let n=await Ie(k.resolve(e.skillPath),"user");if(!n)throw new Error(`Failed to load skill from ${e.skillPath}`);let r=k.resolve(e.workspaceDir);await A(r);let i=JSON.parse(await ft(e.evalsPath,"utf8")),s=Array.isArray(i.evals)?i.evals:[],a=e.configs?.length?e.configs:["with_skill","without_skill"],c=Number.isFinite(e.runsPerConfig)&&e.runsPerConfig>0?Math.floor(e.runsPerConfig):1,d=[];for(let l=0;l<s.length;l+=1){let u=s[l],p=k.join(r,`eval-${l}`);await A(p),await D(k.join(p,"eval_metadata.json"),`${JSON.stringify({eval_id:u.id??l,eval_name:u.name??`eval-${l}`,prompt:u.prompt??u.query??"",expected_output:u.expected_output??"",assertions:(Array.isArray(u.assertions)?u.assertions:[]).map(gc).filter(Boolean)},null,2)}
-`,"utf8");let h=await kc(u,e),f={};for(let m of a){let y=k.join(p,m);await A(y),f[m]=[];for(let w=1;w<=c;w+=1){let g=k.join(y,`run-${w}`);await A(g);let E=await Ec(m,n,h,e),b=await t(E,{...e,configName:m,evalItem:u,runIndex:w});await xc(g,m,u,E,b),f[m].push({run_id:`run-${w}`,session_id:b.result.sessionId,success:b.result.success,total_tokens:b.totalTokens,duration_ms:b.durationMs,output_chars:b.result.lastText.length})}}d.push({eval_id:u.id??l,prompt:u.prompt??u.query??"",configs:f})}return{workspace:r,skill_name:n.name,eval_count:s.length,configs:a,runs_per_config:c,reports:d}}o(Rc,"runEvalWorkspace");function Ic(e){let t={skillPath:"",evalsPath:"",workspaceDir:"",provider:"anthropic",model:void 0,runsPerConfig:1,maxIter:30,reasoningMode:"off",cwd:process.cwd(),configs:["with_skill","without_skill"],output:void 0};for(let n=2;n<e.length;n+=1){let r=e[n];r==="--skill-path"&&e[n+1]?t.skillPath=e[++n]:r==="--evals"&&e[n+1]?t.evalsPath=e[++n]:r==="--workspace"&&e[n+1]?t.workspaceDir=e[++n]:r==="--provider"&&e[n+1]?t.provider=e[++n]:r==="--model"&&e[n+1]?t.model=e[++n]:r==="--runs"&&e[n+1]?t.runsPerConfig=Number(e[++n]):r==="--max-iter"&&e[n+1]?t.maxIter=Number(e[++n]):r==="--reasoning"&&e[n+1]?t.reasoningMode=e[++n]:r==="--cwd"&&e[n+1]?t.cwd=e[++n]:r==="--configs"&&e[n+1]?t.configs=e[++n].split(",").map(i=>i.trim()).filter(Boolean):r==="--output"&&e[n+1]&&(t.output=e[++n])}return t}o(Ic,"parseArgs");async function mr(e=process.argv){let t=Ic(e);(!t.skillPath||!t.evalsPath||!t.workspaceDir)&&(console.error("Usage: node scripts/run-eval.js --skill-path <dir> --evals <evals.json> --workspace <dir> [--provider anthropic] [--runs 1]"),process.exit(1));let n=await Rc(t),r=`${JSON.stringify(n,null,2)}
-`;t.output?(await D(t.output,r,"utf8"),console.log(`Wrote ${k.resolve(t.output)}`)):process.stdout.write(r)}o(mr,"main");var Tc=!1;Tc&&mr().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exit(1)});import{readdir as Ac,readFile as pt,writeFile as gr}from"node:fs/promises";import S from"node:path";function U(e){return String(e??"").trim()}o(U,"normalizeExpectationText");function yr(e){let n=(Array.isArray(e?.assertions)?e.assertions:[]).map(i=>typeof i=="string"?U(i):i&&typeof i=="object"&&typeof i.text=="string"?U(i.text):"").filter(Boolean);if(n.length>0)return n;let r=U(e?.expected_output);return r?[r]:[]}o(yr,"normalizeExpectedRubric");function mt(e){return Array.isArray(e)?e.map(t=>String(t??"").trim()).filter(Boolean):[]}o(mt,"normalizeStringArray");function hr(e,t){return{text:U(e?.text??t),passed:e?.passed===!0,evidence:U(e?.evidence)}}o(hr,"normalizeExpectationEntry");function Cc(e,t){let n=Q(e)??{},r=Array.isArray(n.expectations)?n.expectations:[],i=[],s=new Set;for(let a of t){let c=r.findIndex((d,l)=>s.has(l)?!1:U(d?.text).toLowerCase()===a.toLowerCase());if(c===-1){i.push({text:a,passed:!1,evidence:""});continue}s.add(c),i.push(hr(r[c],a))}if(t.length===0)for(let a of r){let c=hr(a,"");c.text&&i.push(c)}return{overall_summary:U(n.overall_summary),expectations:i,user_notes_summary:{uncertainties:mt(n.user_notes_summary?.uncertainties),needs_review:mt(n.user_notes_summary?.needs_review),workarounds:mt(n.user_notes_summary?.workarounds)}}}o(Cc,"normalizeParsedGrading");async function ht(e){return(await Ac(e,{withFileTypes:!0}).catch(()=>[])).filter(n=>n.isDirectory()).map(n=>S.join(e,n.name)).sort((n,r)=>n.localeCompare(r))}o(ht,"listDirectories");async function Pc(e){let t=S.dirname(e),n=S.dirname(t),r=S.basename(t),i=S.basename(e),s=S.join(e,"outputs"),a=await _(S.join(n,"eval_metadata.json"),{}),c=await pt(S.join(s,"result.md"),"utf8").catch(()=>""),d=await pt(S.join(s,"prompt.txt"),"utf8").catch(()=>""),l=await pt(S.join(e,"transcript.md"),"utf8").catch(()=>""),u=await _(S.join(s,"metrics.json"),{}),p=await _(S.join(e,"result.json"),{}),h=await _(S.join(e,"timing.json"),{});return{evalDir:n,runDir:e,runId:i,configName:r,evalMetadata:a,outputsDir:s,resultText:c,promptText:d,transcript:l,metrics:u,result:p,timing:h}}o(Pc,"loadRunContext");function _c(e){let t=yr(e.evalMetadata),n=t.length>0?t.map((r,i)=>`${i+1}. ${r}`).join(`
-`):"(No explicit assertions; infer one expectation from expected_output if present.)";return`${e.agentInstructions.trim()}
-
-Return JSON with this shape:
-{
-  "overall_summary": "short summary",
-  "expectations": [
-    {
-      "text": "expectation text",
-      "passed": true,
-      "evidence": "short evidence grounded in the output"
-    }
-  ],
-  "user_notes_summary": {
-    "uncertainties": [],
-    "needs_review": [],
-    "workarounds": []
-  }
-}
-
-## Run Metadata
-- eval_id: ${e.evalMetadata.eval_id??"unknown"}
-- eval_name: ${e.evalMetadata.eval_name??"unknown"}
-- config: ${e.configName}
-- run_id: ${e.runId}
-
-## Eval Prompt
-${T(e.evalMetadata.prompt??e.promptText,4e3)}
-
-## Expected Outcome
-${T(e.evalMetadata.expected_output??"",2e3)}
-
-## Assertions
-${n}
-
-## Final Output
-${T(e.resultText,12e3)}
-
-## Result Flags
-${JSON.stringify({success:e.result.success??null,signal:e.result.signal??null,interrupted:e.result.interrupted??!1,limit_reached:e.result.limit_reached??e.result.limitReached??!1},null,2)}
-
-## Execution Metrics
-${JSON.stringify({total_tool_calls:e.metrics.total_tool_calls??e.result.execution_metrics?.total_tool_calls??0,errors_encountered:e.metrics.errors_encountered??e.result.execution_metrics?.errors_encountered??0,output_chars:e.metrics.output_chars??e.result.execution_metrics?.output_chars??e.resultText.length,total_tokens:e.timing.total_tokens??0,total_duration_seconds:e.timing.total_duration_seconds??0},null,2)}
-
-## Transcript Excerpt
-${T(e.transcript,5e3)}
-`}o(_c,"buildGradingPrompt");async function wr(e,t){let{runKodaX:n}=await F();return(await n({provider:t.provider??"anthropic",model:t.model,maxIter:t.maxIter??20,reasoningMode:t.reasoningMode??"balanced",thinking:t.reasoningMode?t.reasoningMode!=="off":!0,context:{gitRoot:S.resolve(t.cwd??t.workspaceDir??process.cwd())}},e)).lastText}o(wr,"defaultRunJudge");async function Mc(e,t,n=wr){let r=await Pc(S.resolve(e)),i=yr(r.evalMetadata),s=await Z(import.meta.url,"../agents/grader.md"),a=_c({...r,agentInstructions:s}),c=await n(a,{...t,runDir:r.runDir,configName:r.configName,evalMetadata:r.evalMetadata,runId:r.runId}),d=Cc(c,i),l={total_tool_calls:r.metrics.total_tool_calls??r.result.execution_metrics?.total_tool_calls??0,errors_encountered:r.metrics.errors_encountered??r.result.execution_metrics?.errors_encountered??0,output_chars:r.metrics.output_chars??r.result.execution_metrics?.output_chars??r.resultText.length},u={summary:dr(d.expectations),expectations:d.expectations,execution_metrics:l,user_notes_summary:d.user_notes_summary,overall_summary:d.overall_summary,timing:{total_tokens:r.timing.total_tokens??0,total_duration_seconds:r.timing.total_duration_seconds??0},meta:{generated_at:new Date().toISOString(),eval_id:r.evalMetadata.eval_id??null,eval_name:r.evalMetadata.eval_name??null,config:r.configName,run_id:r.runId}};return await gr(S.join(r.runDir,"grading.json"),`${JSON.stringify(u,null,2)}
-`,"utf8"),{runDir:r.runDir,grading:u,prompt:a,rawResponse:c}}o(Mc,"gradeRun");async function Oc(e,t=wr){let n=S.resolve(e.workspaceDir);await A(n);let r=new Set((e.configs??[]).map(c=>String(c).trim()).filter(Boolean)),i=[],s=[];for(let c of await ht(n))if(S.basename(c).startsWith("eval-"))for(let d of await ht(c)){let l=S.basename(d);if(!(r.size>0&&!r.has(l)))for(let u of await ht(d)){if(!S.basename(u).startsWith("run-"))continue;let p=S.join(u,"grading.json");if(await _(p,null)&&e.overwrite!==!0){s.push(S.relative(n,u).replace(/\\/g,"/"));continue}let f=await Mc(u,e,t);i.push({run:S.relative(n,u).replace(/\\/g,"/"),summary:f.grading.summary,config:f.grading.meta.config,eval_id:f.grading.meta.eval_id})}}let a={workspace:n,generated_at:new Date().toISOString(),processed:i.length,skipped:s.length,processed_runs:i,skipped_runs:s};return await gr(S.join(n,"grading-summary.json"),`${JSON.stringify(a,null,2)}
-`,"utf8"),a}o(Oc,"gradeWorkspace");function $c(e){let t={workspaceDir:e[2]??"",provider:"anthropic",model:void 0,reasoningMode:"balanced",maxIter:20,cwd:process.cwd(),overwrite:!1,configs:[]};for(let n=3;n<e.length;n+=1){let r=e[n];r==="--provider"&&e[n+1]?t.provider=e[++n]:r==="--model"&&e[n+1]?t.model=e[++n]:r==="--reasoning"&&e[n+1]?t.reasoningMode=e[++n]:r==="--max-iter"&&e[n+1]?t.maxIter=Number(e[++n]):r==="--cwd"&&e[n+1]?t.cwd=e[++n]:r==="--overwrite"?t.overwrite=!0:r==="--configs"&&e[n+1]&&(t.configs=e[++n].split(",").map(i=>i.trim()).filter(Boolean))}return t}o($c,"parseArgs");async function vr(e=process.argv){let t=$c(e);t.workspaceDir||(console.error("Usage: node scripts/grade-evals.js <workspace> [--provider anthropic] [--configs with_skill,without_skill] [--overwrite]"),process.exit(1));let n=await Oc(t);process.stdout.write(`${JSON.stringify(n,null,2)}
-`)}o(vr,"main");var Dc=!1;Dc&&vr().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exit(1)});import{writeFile as vt}from"node:fs/promises";import L from"node:path";import{readFile as Lc,readdir as Nc,stat as Fc,writeFile as br}from"node:fs/promises";import C from"node:path";async function gt(e){return JSON.parse(await Lc(e,"utf8"))}o(gt,"readJson");async function jc(e){try{return await Fc(e),!0}catch{return!1}}o(jc,"pathExists");async function yt(e){return(await Nc(e,{withFileTypes:!0}).catch(()=>[])).filter(n=>n.isDirectory()).map(n=>C.join(e,n.name)).sort((n,r)=>n.localeCompare(r))}o(yt,"listDirectories");async function Le(e){let t=await jc(C.join(e,"runs"))?C.join(e,"runs"):e,n=(await yt(t)).filter(i=>C.basename(i).startsWith("eval-")),r={};for(let i of n){let s=C.join(i,"eval_metadata.json"),c=(await gt(s).catch(()=>({}))).eval_id??C.basename(i);for(let d of await yt(i)){let l=C.basename(d),u=(await yt(d)).filter(p=>C.basename(p).startsWith("run-"));if(u.length!==0){r[l]??=[];for(let p of u){let h=await gt(C.join(p,"grading.json")).catch(()=>null);if(!h)continue;let f=await gt(C.join(p,"timing.json")).catch(()=>({}));r[l].push({eval_id:c,run_id:C.basename(p),pass_rate:h.summary?.pass_rate??0,passed:h.summary?.passed??0,failed:h.summary?.failed??0,total:h.summary?.total??0,time_seconds:f.total_duration_seconds??h.timing?.total_duration_seconds??0,tokens:f.total_tokens??h.execution_metrics?.output_chars??0,tool_calls:h.execution_metrics?.total_tool_calls??0,errors:h.execution_metrics?.errors_encountered??0,expectations:Array.isArray(h.expectations)?h.expectations:[],notes:[...h.user_notes_summary?.uncertainties??[],...h.user_notes_summary?.needs_review??[],...h.user_notes_summary?.workarounds??[]]})}}}}return r}o(Le,"loadRunResults");function Kc(e){let t={};for(let[s,a]of Object.entries(e))t[s]={pass_rate:$e(a.map(c=>Number(c.pass_rate??0))),time_seconds:$e(a.map(c=>Number(c.time_seconds??0))),tokens:$e(a.map(c=>Number(c.tokens??0)))};let n=Object.keys(t),r=t[n[0]]??{pass_rate:{mean:0},time_seconds:{mean:0},tokens:{mean:0}},i=t[n[1]]??{pass_rate:{mean:0},time_seconds:{mean:0},tokens:{mean:0}};return{configs:t,delta:{pass_rate:De(r.pass_rate.mean-i.pass_rate.mean),time_seconds:De(r.time_seconds.mean-i.time_seconds.mean),tokens:De(r.tokens.mean-i.tokens.mean)}}}o(Kc,"summarizeConfigs");function wt(e,t,n){let r=Kc(n);return{skill_name:t,generated_at:new Date().toISOString(),workspace:C.resolve(e),configs:r.configs,delta:r.delta,runs:n}}o(wt,"buildBenchmarkDocument");function Wc(e){let t=[`# Benchmark: ${e.skill_name}`,"",`Generated: ${e.generated_at}`,"","| Config | Pass Rate | Time (s) | Tokens |","| --- | --- | --- | --- |"];for(let[n,r]of Object.entries(e.configs))t.push(`| ${n} | ${r.pass_rate.mean} \xB1 ${r.pass_rate.stddev} | ${r.time_seconds.mean} \xB1 ${r.time_seconds.stddev} | ${r.tokens.mean} \xB1 ${r.tokens.stddev} |`);return t.push(""),t.push("## Delta"),t.push(""),t.push(`- Pass rate: ${e.delta.pass_rate}`),t.push(`- Time (s): ${e.delta.time_seconds}`),t.push(`- Tokens: ${e.delta.tokens}`),t.join(`
-`)}o(Wc,"renderBenchmarkMarkdown");function Bc(e){let t={iterationDir:e[2],skillName:"unknown-skill"};for(let n=3;n<e.length;n+=1)e[n]==="--skill-name"&&e[n+1]&&(t.skillName=e[n+1],n+=1);return t}o(Bc,"parseArgs");async function Xc(){let{iterationDir:e,skillName:t}=Bc(process.argv);e||(console.error("Usage: node scripts/aggregate-benchmark.js <iteration-dir> --skill-name <name>"),process.exit(1));let n=await Le(e);Object.keys(n).length===0&&(console.error(`No benchmark runs found in ${e}`),process.exit(1));let r=wt(e,t,n),i=C.join(e,"benchmark.json"),s=C.join(e,"benchmark.md");await br(i,JSON.stringify(r,null,2)),await br(s,`${Wc(r)}
-`),console.log(`Wrote ${i}`),console.log(`Wrote ${s}`)}o(Xc,"main");var Uc=!1;Uc&&Xc().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exit(1)});function Ne(e){return Array.isArray(e)?e.map(t=>String(t??"").trim()).filter(Boolean):[]}o(Ne,"normalizeStringArray");function qc(e){let t={};for(let[n,r]of Object.entries(e)){let i=new Map,s=[];for(let a of r){for(let c of a.expectations??[]){if(c?.passed===!0)continue;let d=String(c?.text??"").trim();d&&i.set(d,(i.get(d)??0)+1)}for(let c of a.notes??[]){let d=String(c??"").trim();d&&s.push(d)}}t[n]={repeated_failures:Array.from(i.entries()).sort((a,c)=>c[1]-a[1]).slice(0,10).map(([a,c])=>({text:a,count:c})),notes:s.slice(0,10)}}return t}o(qc,"summarizeFailureClusters");function zc(e,t,n){let r=Q(e)??{};return{skill_name:t.skill_name,generated_at:new Date().toISOString(),workspace:t.workspace,verdict:["improves","regresses","mixed","inconclusive"].includes(r.verdict)?r.verdict:"inconclusive",release_readiness:["ready","needs_iteration","needs_manual_review"].includes(r.release_readiness)?r.release_readiness:"needs_manual_review",recommendation:String(r.recommendation??"").trim(),key_findings:Ne(r.key_findings),variance_hotspots:Ne(r.variance_hotspots),suggested_actions:Ne(r.suggested_actions),watchouts:Ne(r.watchouts),supporting_metrics:{pass_rate_delta:t.delta?.pass_rate??"n/a",time_seconds_delta:t.delta?.time_seconds??"n/a",tokens_delta:t.delta?.tokens??"n/a"},failure_clusters:n}}o(zc,"normalizeAnalysisResult");function Hc(e){return`${e.agentInstructions.trim()}
-
-Return JSON with this shape:
-{
-  "verdict": "improves | regresses | mixed | inconclusive",
-  "release_readiness": "ready | needs_iteration | needs_manual_review",
-  "recommendation": "short recommendation",
-  "key_findings": [],
-  "variance_hotspots": [],
-  "suggested_actions": [],
-  "watchouts": []
-}
-
-## Benchmark Summary
-${T(JSON.stringify({skill_name:e.benchmark.skill_name,configs:e.benchmark.configs,delta:e.benchmark.delta},null,2),12e3)}
-
-## Failure Clusters
-${T(JSON.stringify(e.failureClusters,null,2),8e3)}
-`}o(Hc,"buildAnalysisPrompt");async function Gc(e,t){let{runKodaX:n}=await F();return(await n({provider:t.provider??"anthropic",model:t.model,maxIter:t.maxIter??20,reasoningMode:t.reasoningMode??"balanced",thinking:t.reasoningMode?t.reasoningMode!=="off":!0,context:{gitRoot:L.resolve(t.cwd??t.workspaceDir??process.cwd())}},e)).lastText}o(Gc,"defaultRunAnalyst");function Vc(e){let t=[`# Benchmark Analysis: ${e.skill_name}`,"",`Generated: ${e.generated_at}`,"",`- Verdict: ${e.verdict}`,`- Release readiness: ${e.release_readiness}`,`- Recommendation: ${e.recommendation||"n/a"}`,""],n=[["key_findings","Key Findings"],["variance_hotspots","Variance Hotspots"],["suggested_actions","Suggested Actions"],["watchouts","Watchouts"]];for(let[r,i]of n){t.push(`## ${i}`),t.push("");let s=Array.isArray(e[r])?e[r]:[];if(s.length===0)t.push("- None");else for(let a of s)t.push(`- ${a}`);t.push("")}return t.push("## Supporting Metrics"),t.push(""),t.push(`- Pass rate delta: ${e.supporting_metrics.pass_rate_delta}`),t.push(`- Time delta: ${e.supporting_metrics.time_seconds_delta}`),t.push(`- Tokens delta: ${e.supporting_metrics.tokens_delta}`),`${t.join(`
-`)}
-`}o(Vc,"renderAnalysisMarkdown");async function Jc(e,t=Gc){let n=L.resolve(e.workspaceDir),r=L.resolve(e.benchmarkPath??L.join(n,"benchmark.json")),i=await _(r,null);if(!i){let f=await Le(n);if(Object.keys(f).length===0)throw new Error(`No benchmark data found in ${n}`);i=wt(n,e.skillName??L.basename(n),f),await vt(r,`${JSON.stringify(i,null,2)}
-`,"utf8")}let s=await Le(n),a=qc(s),c=await Z(import.meta.url,"../agents/analyzer.md"),d=Hc({agentInstructions:c,benchmark:i,failureClusters:a}),l=await t(d,{...e,workspaceDir:n,benchmarkPath:r,benchmark:i}),u=zc(l,i,a),p=L.resolve(e.outputPath??L.join(n,"analysis.json")),h=L.resolve(e.markdownPath??L.join(n,"analysis.md"));return await vt(p,`${JSON.stringify(u,null,2)}
-`,"utf8"),await vt(h,Vc(u),"utf8"),{analysis:u,prompt:d,rawResponse:l,analysisJsonPath:p,analysisMdPath:h}}o(Jc,"analyzeBenchmark");function Yc(e){let t={workspaceDir:e[2]??"",benchmarkPath:void 0,outputPath:void 0,markdownPath:void 0,skillName:void 0,provider:"anthropic",model:void 0,reasoningMode:"balanced",maxIter:20,cwd:process.cwd()};for(let n=3;n<e.length;n+=1){let r=e[n];r==="--benchmark"&&e[n+1]?t.benchmarkPath=e[++n]:r==="--output"&&e[n+1]?t.outputPath=e[++n]:r==="--markdown"&&e[n+1]?t.markdownPath=e[++n]:r==="--skill-name"&&e[n+1]?t.skillName=e[++n]:r==="--provider"&&e[n+1]?t.provider=e[++n]:r==="--model"&&e[n+1]?t.model=e[++n]:r==="--reasoning"&&e[n+1]?t.reasoningMode=e[++n]:r==="--max-iter"&&e[n+1]?t.maxIter=Number(e[++n]):r==="--cwd"&&e[n+1]&&(t.cwd=e[++n])}return t}o(Yc,"parseArgs");async function kr(e=process.argv){let t=Yc(e);t.workspaceDir||(console.error("Usage: node scripts/analyze-benchmark.js <workspace> [--benchmark benchmark.json] [--output analysis.json] [--markdown analysis.md]"),process.exit(1));let n=await Jc(t);process.stdout.write(`${JSON.stringify({analysis:n.analysis,analysis_json:n.analysisJsonPath,analysis_md:n.analysisMdPath},null,2)}
-`)}o(kr,"main");var Qc=!1;Qc&&kr().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exit(1)});import{readdir as Zc,readFile as Sr,writeFile as Er}from"node:fs/promises";import x from"node:path";async function kt(e){return(await Zc(e,{withFileTypes:!0}).catch(()=>[])).filter(n=>n.isDirectory()).map(n=>x.join(e,n.name)).sort((n,r)=>n.localeCompare(r))}o(kt,"listDirectories");function bt(e){return Array.isArray(e)?e.map(t=>String(t??"").trim()).filter(Boolean):[]}o(bt,"normalizeStringArray");function ed(e){let t=Q(e)??{},n=["A","B","tie","inconclusive"].includes(t.winner)?t.winner:"inconclusive",r=Number(t.confidence);return{winner:n,confidence:Number.isFinite(r)?Math.max(0,Math.min(1,Number(r.toFixed(4)))):0,rationale:String(t.rationale??"").trim(),strengths_a:bt(t.strengths_a),strengths_b:bt(t.strengths_b),risks:bt(t.risks)}}o(ed,"normalizeComparisonResult");async function td(e,t,n,r){let i=(await kt(x.join(e,t))).filter(p=>x.basename(p).startsWith("run-")),s=(await kt(x.join(e,n))).filter(p=>x.basename(p).startsWith("run-")),a=i[r],c=s[r];if(!a||!c)return null;let d=await _(x.join(e,"eval_metadata.json"),{}),l=await Sr(x.join(a,"outputs","result.md"),"utf8").catch(()=>""),u=await Sr(x.join(c,"outputs","result.md"),"utf8").catch(()=>"");return{evalDir:e,evalMetadata:d,runA:{runDir:a,runId:x.basename(a),configName:t,output:l},runB:{runDir:c,runId:x.basename(c),configName:n,output:u}}}o(td,"loadComparisonPair");function nd(e){let t=e.presentPrimaryFirst?{A:e.runA,B:e.runB}:{A:e.runB,B:e.runA};return`${e.agentInstructions.trim()}
-
-Return JSON with this shape:
-{
-  "winner": "A | B | tie | inconclusive",
-  "confidence": 0.0,
-  "rationale": "short explanation",
-  "strengths_a": [],
-  "strengths_b": [],
-  "risks": []
-}
-
-Judge only the visible outputs. Do not mention hidden config names in the rationale.
-
-## Eval Prompt
-${T(e.evalMetadata.prompt??"",4e3)}
-
-## Expected Outcome
-${T(e.evalMetadata.expected_output??"",2e3)}
-
-## Assertions
-${T(JSON.stringify(e.evalMetadata.assertions??[],null,2),4e3)}
-
-## Candidate A
-${T(t.A.output,12e3)}
-
-## Candidate B
-${T(t.B.output,12e3)}
-`}o(nd,"buildComparisonPrompt");async function rd(e,t){let{runKodaX:n}=await F();return(await n({provider:t.provider??"anthropic",model:t.model,maxIter:t.maxIter??20,reasoningMode:t.reasoningMode??"balanced",thinking:t.reasoningMode?t.reasoningMode!=="off":!0,context:{gitRoot:x.resolve(t.cwd??t.workspaceDir??process.cwd())}},e)).lastText}o(rd,"defaultRunComparator");function od(e,t,n,r){return e==="A"?t?n:r:e==="B"?t?r:n:e}o(od,"mapWinnerToConfig");function id(e){let t=[`# Blind Comparison: ${e.config_a} vs ${e.config_b}`,"",`Generated: ${e.generated_at}`,"",`- ${e.config_a} wins: ${e.summary.config_a_wins}`,`- ${e.config_b} wins: ${e.summary.config_b_wins}`,`- ties: ${e.summary.ties}`,`- inconclusive: ${e.summary.inconclusive}`,""];for(let n of e.comparisons)t.push(`## Eval ${n.eval_id??n.eval_name??n.index}`),t.push(""),t.push(`- Winner: ${n.winner_config}`),t.push(`- Confidence: ${n.confidence}`),t.push(`- Rationale: ${n.rationale||"n/a"}`),t.push("");return`${t.join(`
-`)}
-`}o(id,"renderComparisonMarkdown");async function sd(e,t=rd){let n=x.resolve(e.workspaceDir),r=e.configA??"with_skill",i=e.configB??"without_skill",s=Number.isFinite(e.maxPairs)&&e.maxPairs>0?Math.floor(e.maxPairs):Number.POSITIVE_INFINITY,a=await Z(import.meta.url,"../agents/comparator.md"),c=[];for(let p of await kt(n))if(x.basename(p).startsWith("eval-"))for(let h=0;h<s;h+=1){let f=await td(p,r,i,h);if(!f)break;let m=c.length%2===0,y=nd({agentInstructions:a,evalMetadata:f.evalMetadata,runA:f.runA,runB:f.runB,presentPrimaryFirst:m}),w=await t(y,{...e,workspaceDir:n,evalDir:p,pairIndex:h,configA:r,configB:i}),g=ed(w),E=od(g.winner,m,r,i);c.push({index:c.length+1,eval_id:f.evalMetadata.eval_id??null,eval_name:f.evalMetadata.eval_name??null,run_a:x.relative(n,f.runA.runDir).replace(/\\/g,"/"),run_b:x.relative(n,f.runB.runDir).replace(/\\/g,"/"),presented_as:m?{A:r,B:i}:{A:i,B:r},winner_label:g.winner,winner_config:E,confidence:g.confidence,rationale:g.rationale,strengths_a:g.strengths_a,strengths_b:g.strengths_b,risks:g.risks})}if(c.length===0)throw new Error(`No comparable run pairs found for ${r} vs ${i} in ${n}`);let d={workspace:n,generated_at:new Date().toISOString(),config_a:r,config_b:i,summary:{total_pairs:c.length,config_a_wins:c.filter(p=>p.winner_config===r).length,config_b_wins:c.filter(p=>p.winner_config===i).length,ties:c.filter(p=>p.winner_config==="tie").length,inconclusive:c.filter(p=>p.winner_config==="inconclusive").length},comparisons:c},l=x.resolve(e.outputPath??x.join(n,"comparison.json")),u=x.resolve(e.markdownPath??x.join(n,"comparison.md"));return await Er(l,`${JSON.stringify(d,null,2)}
-`,"utf8"),await Er(u,id(d),"utf8"),{document:d,outputPath:l,markdownPath:u}}o(sd,"compareWorkspace");function ad(e){let t={workspaceDir:e[2]??"",configA:"with_skill",configB:"without_skill",outputPath:void 0,markdownPath:void 0,provider:"anthropic",model:void 0,reasoningMode:"balanced",maxIter:20,maxPairs:void 0,cwd:process.cwd()};for(let n=3;n<e.length;n+=1){let r=e[n];r==="--config-a"&&e[n+1]?t.configA=e[++n]:r==="--config-b"&&e[n+1]?t.configB=e[++n]:r==="--output"&&e[n+1]?t.outputPath=e[++n]:r==="--markdown"&&e[n+1]?t.markdownPath=e[++n]:r==="--provider"&&e[n+1]?t.provider=e[++n]:r==="--model"&&e[n+1]?t.model=e[++n]:r==="--reasoning"&&e[n+1]?t.reasoningMode=e[++n]:r==="--max-iter"&&e[n+1]?t.maxIter=Number(e[++n]):r==="--max-pairs"&&e[n+1]?t.maxPairs=Number(e[++n]):r==="--cwd"&&e[n+1]&&(t.cwd=e[++n])}return t}o(ad,"parseArgs");async function xr(e=process.argv){let t=ad(e);t.workspaceDir||(console.error("Usage: node scripts/compare-runs.js <workspace> [--config-a with_skill] [--config-b without_skill] [--output comparison.json]"),process.exit(1));let n=await sd(t);process.stdout.write(`${JSON.stringify({comparison:n.document.summary,output:n.outputPath,markdown:n.markdownPath},null,2)}
-`)}o(xr,"main");var cd=!1;cd&&xr().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exit(1)});import{readFile as dd,writeFile as ld}from"node:fs/promises";import{createHash as ud}from"node:crypto";import St from"node:path";import{zipSync as fd,strToU8 as pd}from"fflate";var md=".kodax-package.json";function hd(e){return e instanceof Uint8Array?e:new Uint8Array(e)}o(hd,"toUint8Array");function gd(e){return ud("sha256").update(e).digest("hex")}o(gd,"sha256");function yd(e,t,n={}){return{format:"kodax-skill-package",version:1,created_at:n.createdAt??new Date().toISOString(),entrypoint:"SKILL.md",skill:{name:e.frontmatter.name,description:e.frontmatter.description,compatibility:e.frontmatter.compatibility??null,user_invocable:e.frontmatter["user-invocable"]??!0,disable_model_invocation:e.frontmatter["disable-model-invocation"]??!1},files:t.map(r=>({path:r.relativePath,size:r.bytes.length,sha256:r.sha256})),note:"This archive is a zip file with a .skill extension. Compatible agents can extract and install the included skill directory."}}o(yd,"createPackageManifest");async function wd(e,t={}){let n=await fe(e);if(!n.valid)throw new Error(`Cannot package invalid skill:
-- ${n.errors.join(`
-- `)}`);let r=await de(e),i=await ut(e),s=[];for(let d of i){if(d.relativePath.endsWith(".skill"))continue;let l=hd(await dd(d.absolutePath));s.push({...d,bytes:l,sha256:gd(l)})}let a=yd(r,s,t),c={[md]:pd(JSON.stringify(a,null,2))};for(let d of s)c[d.relativePath]=d.bytes;return{manifest:a,bytes:fd(c,{level:6})}}o(wd,"buildSkillPackage");async function vd(e,t,n={}){let r=await wd(e,n);return await ld(t,r.bytes),{...r,outputPath:St.resolve(t)}}o(vd,"writeSkillPackage");function bd(e){let t={skillDir:e[2],output:void 0};for(let n=3;n<e.length;n+=1)e[n]==="--output"&&e[n+1]&&(t.output=e[++n]);return t}o(bd,"parseArgs");async function Rr(e=process.argv){let t=bd(e);t.skillDir||(console.error("Usage: node scripts/package-skill.js <skill-dir> [--output <file.skill>]"),process.exit(1));let n=await de(t.skillDir),r=t.output??St.join(St.dirname(t.skillDir),`${n.frontmatter.name}.skill`),i=await vd(t.skillDir,r);console.log(`Wrote ${i.outputPath}`)}o(Rr,"main");var kd=!1;kd&&Rr().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exit(1)});import{cp as Sd,mkdir as Et,readFile as Ar,rm as Cr,stat as Ed,writeFile as xd}from"node:fs/promises";import M from"node:path";import{strFromU8 as Ir,unzipSync as Rd}from"fflate";var Tr=".kodax-package.json";function Id(e){return e.replace(/\\/g,"/").replace(/^\.?\//,"")}o(Id,"normalizeArchivePath");function Td(e){let t=Id(e);if(!t||t.startsWith("/")||t.includes("../"))throw new Error(`Unsafe archive entry path: ${e}`);return t}o(Td,"assertSafeArchivePath");function Ad(e){return/\.(skill|zip)$/i.test(e)}o(Ad,"isZipLike");function Cd(e){let t=Rd(e),n=Object.entries(t).map(([l,u])=>({relativePath:Td(l),bytes:u})),r=n.find(l=>l.relativePath==="SKILL.md");if(!r)throw new Error("Archive is missing SKILL.md");let i=Oe(Ir(r.bytes)),s=typeof i.frontmatter.name=="string"?i.frontmatter.name.trim():"",a=typeof i.frontmatter.description=="string"?i.frontmatter.description.trim():"";if(!s||!a)throw new Error("Archive SKILL.md is missing required frontmatter fields.");let c=n.find(l=>l.relativePath===Tr),d=c?JSON.parse(Ir(c.bytes)):null;return{skillName:s,manifest:d,entries:n.filter(l=>l.relativePath!==Tr)}}o(Cd,"readSkillPackageBuffer");async function Pd(e,t){if(await le(e)){if(!t)throw new Error(`Target skill already exists: ${e}`);await Cr(e,{recursive:!0,force:!0})}await Et(e,{recursive:!0})}o(Pd,"ensureInstallTarget");async function _d(e,t={}){let n=M.resolve(t.skillsDir??ue()),r=Cd(await Ar(e)),i=M.join(n,r.skillName);await Pd(i,t.force===!0);for(let s of r.entries){let a=M.join(i,s.relativePath);await Et(M.dirname(a),{recursive:!0}),await xd(a,s.bytes)}return{skillName:r.skillName,installedTo:i,source:M.resolve(e),manifest:r.manifest}}o(_d,"installSkillArchive");async function Md(e,t={}){let n=await fe(e);if(!n.valid)throw new Error(`Cannot install invalid skill:
-- ${n.errors.join(`
-- `)}`);let r=M.join(e,"SKILL.md"),i=Oe(await Ar(r,"utf8")),s=M.resolve(t.skillsDir??ue()),a=M.join(s,i.frontmatter.name);if(await le(a)){if(!t.force)throw new Error(`Target skill already exists: ${a}`);await Cr(a,{recursive:!0,force:!0})}return await Et(s,{recursive:!0}),await Sd(e,a,{recursive:!0}),{skillName:i.frontmatter.name,installedTo:a,source:M.resolve(e),manifest:null}}o(Md,"installSkillDirectory");async function Od(e,t={}){let n=M.resolve(e),r=await Ed(n).catch(()=>null);if(!r)throw new Error(`Input not found: ${n}`);if(r.isDirectory())return Md(n,t);if(r.isFile()&&Ad(n))return _d(n,t);throw new Error("Input must be a skill directory or a .skill/.zip archive.")}o(Od,"installSkill");function $d(e){let t={input:e[2],skillsDir:void 0,force:!1};for(let n=3;n<e.length;n+=1){let r=e[n];r==="--dest"&&e[n+1]?t.skillsDir=e[++n]:r==="--force"&&(t.force=!0)}return t}o($d,"parseArgs");async function Pr(e=process.argv){let t=$d(e);t.input||(console.error("Usage: node scripts/install-skill.js <skill-dir-or-archive> [--dest <skills-dir>] [--force]"),process.exit(1));let n=await Od(t.input,t);console.log(`Installed ${n.skillName} to ${n.installedTo}`)}o(Pr,"main");var Dd=!1;Dd&&Pr().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exit(1)});var _R=1440*60*1e3;var FR=5*6e4;var CI=new Intl.Segmenter("zh-CN",{granularity:"word"});var MT=String.raw`const TOOL_NAME = 'echo_tool';
-const RESOURCE_URI = 'memory://guide';
-const PROMPT_NAME = 'draft_prompt';
-let buffer = '';
-
-function writeMessage(payload) {
-  process.stdout.write(JSON.stringify(payload) + '\n');
-}
-
-function handleRequest(message) {
-  const id = message.id;
-  const method = message.method;
-  const params = message.params || {};
-  if (method === 'initialize') {
-    writeMessage({
-      jsonrpc: '2.0',
-      id,
-      result: {
-        protocolVersion: '2025-11-25',
-        capabilities: {
-          tools: {},
-          resources: {},
-          prompts: {},
-        },
-        serverInfo: {
-          name: 'kodax-mcp-test-server',
-          version: '1.0.0',
-        },
-      },
-    });
-    return;
-  }
-  if (method === 'tools/list') {
-    writeMessage({
-      jsonrpc: '2.0',
-      id,
-      result: {
-        tools: [{
-          name: TOOL_NAME,
-          title: 'Echo Tool',
-          description: 'Echo text back from the MCP test server.',
-          inputSchema: {
-            type: 'object',
-            properties: {
-              text: { type: 'string' },
-              mode: { type: 'string' },
-            },
-            required: ['text'],
-          },
-          annotations: {
-            destructive: false,
-          },
-        }],
-      },
-    });
-    return;
-  }
-  if (method === 'resources/list') {
-    writeMessage({
-      jsonrpc: '2.0',
-      id,
-      result: {
-        resources: [{
-          uri: RESOURCE_URI,
-          title: 'Guide Resource',
-          description: 'Provides guide text.',
-          mimeType: 'text/plain',
-        }],
-      },
-    });
-    return;
-  }
-  if (method === 'prompts/list') {
-    writeMessage({
-      jsonrpc: '2.0',
-      id,
-      result: {
-        prompts: [{
-          name: PROMPT_NAME,
-          title: 'Draft Prompt',
-          description: 'A simple prompt from the MCP test server.',
-        }],
-      },
-    });
-    return;
-  }
-  if (method === 'tools/call') {
-    const args = params.arguments || params.args || {};
-    writeMessage({
-      jsonrpc: '2.0',
-      id,
-      result: {
-        content: [{
-          type: 'text',
-          text: 'echo:' + String(args.text || ''),
-        }],
-        structuredContent: {
-          echo: args.text || '',
-          mode: args.mode || null,
-        },
-      },
-    });
-    return;
-  }
-  if (method === 'resources/read') {
-    const uri = params.uri || params.name || RESOURCE_URI;
-    writeMessage({
-      jsonrpc: '2.0',
-      id,
-      result: {
-        contents: [{
-          uri,
-          mimeType: 'text/plain',
-          text: 'resource:' + String(uri),
-        }],
-      },
-    });
-    return;
-  }
-  if (method === 'prompts/get') {
-    const args = params.arguments || params.args || {};
-    const topic = args.topic || 'none';
-    writeMessage({
-      jsonrpc: '2.0',
-      id,
-      result: {
-        description: 'Prompt result for ' + String(params.name || PROMPT_NAME),
-        messages: [{
-          role: 'user',
-          content: {
-            type: 'text',
-            text: 'prompt:' + String(params.name || PROMPT_NAME) + ':' + String(topic),
-          },
-        }],
-      },
-    });
-    return;
-  }
-
-  writeMessage({
-    jsonrpc: '2.0',
-    id,
-    error: {
-      code: -32601,
-      message: 'Method not found: ' + String(method),
-    },
-  });
-}
-
-function handleFrame(raw) {
-  let message;
-  try {
-    message = JSON.parse(raw);
-  } catch (error) {
-    process.stderr.write('bad json: ' + String(error) + '\n');
-    return;
-  }
-  if (message.id !== undefined) {
-    handleRequest(message);
-  }
-}
-
-process.stdin.setEncoding('utf8');
-process.stdin.on('data', (chunk) => {
-  buffer += chunk;
-  while (true) {
-    const lineEnd = buffer.indexOf('\n');
-    if (lineEnd < 0) {
-      return;
-    }
-    const line = buffer.slice(0, lineEnd).replace(/\r$/, '').trim();
-    buffer = buffer.slice(lineEnd + 1);
-    if (line) {
-      handleFrame(line);
-    }
-  }
-});
-
-process.on('SIGTERM', () => process.exit(0));
-process.on('SIGINT', () => process.exit(0));
-`;var $r=Object.freeze(["message","label","compaction","branch_summary","archive_marker","rewind_marker","artifact_ledger","memory_outcome_digest","memory_review_receipt"]),rl=0,ol=0,Dr=o(e=>{let t=e==="label"?++rl:++ol,n=Math.random().toString(36).slice(2,8);return`${e}-${Date.now()}-${t}-${n}`},"nextId");async function il(e,t,n){let r=Dr("label");return await e.append({id:r,ts:Date.now(),type:"label",payload:{targetId:t,label:n}}),r}o(il,"appendLabel");async function sl(e,t,n){let r=Dr("artifact");return await e.append({id:r,ts:Date.now(),type:"artifact_ledger",payload:{ref:t,summary:n}}),r}o(sl,"appendArtifact");function al(e){let t=[],n=new Map,r=[],i=null;for(let s of e){if(s.type==="label"){let c=s.payload;c?.targetId&&r.push({targetId:c.targetId,label:c.label});continue}let a={entry:s,children:[]};if(s.type==="message"){t.push(a),n.set(s.id,a),i=a;continue}i?i.children.push(a):t.push(a)}for(let{targetId:s,label:a}of r){let c=n.get(s);c&&a!==void 0&&(c.label=a)}return t}o(al,"buildLineageTree");var cl=Object.freeze({name:"lineage",entryTypes:$r,operators:Object.freeze({label:o((async(e,...t)=>{let[n,r]=t;return il(e,n,r)}),"label"),attachArtifact:o((async(e,...t)=>{let[n,r]=t;return sl(e,n,r)}),"attachArtifact")}),reducers:Object.freeze({buildLineageTree:o(e=>al(e),"buildLineageTree")})});var yl=new Set(["skill","ask_user_question","exit_plan_mode","spawn_agent","send_message","followup_task","wait_agent","interrupt_agent","list_agents","agent_output","tool_search","get_goal","create_goal","update_goal","todo_create","todo_update","todo_list","todo_get","worktree_create","worktree_remove","undo","mcp_search","mcp_describe","mcp_call","mcp_read_resource","mcp_get_prompt","repo_overview","changed_scope","changed_diff","changed_diff_bundle","module_context","symbol_context","process_context","impact_estimate","relationship_scan","cyclic_dependencies","semantic_lookup"]),Rt=yl,Fe=`[\u5BF9\u8BDD\u5386\u53F2\u6458\u8981]
-
-`;var JA=Fe.trimEnd();var YA=16*1024;var Sl={enabled:!1,maxAge:20,protectedTools:Array.from(Rt)};import{createRequire as Al}from"node:module";var Cl=Al(import.meta.url),Wr,i_=new Proxy({},{get(e,t){return Wr??=Cl("typescript"),Reflect.get(Wr,t)}});var k0=new Intl.Segmenter("en",{granularity:"grapheme"});var qO=process.env.VITEST_WORKER_ID===void 0?void 0:`${process.env.VITEST_WORKER_ID}-${process.pid}`.replace(/[^a-z0-9_-]/gi,"_");import{realpathSync as su,statSync as au}from"node:fs";import cu from"node:path";function Tt(e){let t=e.code;return t==="ENOENT"||t==="ENOTDIR"}o(Tt,"isMissingGitTrustPath");function Ur(e,t,n){try{let r=t(e).replaceAll("\\","/").replace(/\/+$/,"");return r===""?void 0:/^[A-Za-z]:$/.test(r)?`${r}/`:r}catch(r){if(n(r))return;throw r}}o(Ur,"normalizeGitSafeDirectoryRootImplementation");function du(e){return Ur(e,su,Tt)}o(du,"normalizeGitSafeDirectoryRoot");function qr(e,t,n,r){try{let s=t(n.join(e,".git"));if(s.isDirectory()||s.isFile())return!0}catch(s){if(!r(s))throw s}if(!(n.basename(e).toLowerCase()===".git"||/[/\\]\.git[/\\]modules[/\\]/i.test(e)))return!1;try{return t(n.join(e,"HEAD")).isFile()}catch(s){if(r(s))return!1;throw s}}o(qr,"isRepoBearingGitReadRootImplementation");function lu(e){return qr(e,au,cu,Tt)}o(lu,"isRepoBearingGitReadRoot");function zr(e,t,n,r,i){let s=[];typeof e=="string"&&e!==""&&s.push(e);for(let d of n??[])i(d)&&s.push(d);s.push(...t??[]);let a=[],c=new Set;for(let d of s){if(a.length>=8)break;let l=r(d);if(l===void 0)continue;let u=l.toLowerCase();c.has(u)||(c.add(u),a.push(l))}return a}o(zr,"windowsGitTrustRootsImplementation");function Hr(e,t,n){return zr(e,t,n,du,lu)}o(Hr,"windowsGitTrustRoots");function Gr(e){if(e==="git_config_count")return"count";if(/^git_config_key_\d+$/.test(e))return"key";if(/^git_config_value_\d+$/.test(e))return"value"}o(Gr,"gitConfigEnvKind");function Vr(e,t,n,r,i){let s=new Map,a=[],c,d=!1;for(let l=0;l<t;l+=1){if(e[l]!=="--env"||l+1>=t)continue;let u=e[l+1],p=u.indexOf("="),h=(p<0?u:u.slice(0,p)).toLowerCase(),f=n(h);if(f===void 0)continue;d=!0,a.push(l);let m=p<0?"":u.slice(p+1);if(f==="count"){let g=Number.parseInt(m,10);(c!==void 0||!Number.isSafeInteger(g)||g<0||String(g)!==m)&&r(),c=g;continue}let y=Number.parseInt(h.slice(`git_config_${f}_`.length),10),w=s.get(y)??{};(!Number.isSafeInteger(y)||y<0||w[f]!==void 0)&&r(),w[f]=m,s.set(y,w)}return i(s,a,c,d,r)}o(Vr,"parseGitConfigEnvironmentImplementation");function Jr(){throw new Error("ASRT GIT_CONFIG environment has an unexpected shape.")}o(Jr,"throwUnexpectedGitConfigShape");function Yr(e,t,n,r,i){!r||n!==void 0&&e.size===n&&[...e].every(([c,d])=>c<n&&d.key!==void 0&&d.value!==void 0)||i();let a=[...e].map(([c,d])=>({slot:c,key:d.key,value:d.value}));return{argumentIndices:t,pairs:a,sawAny:r}}o(Yr,"finishParsedGitConfigEnvironment");function uu(e,t){return Vr(e,t,Gr,Jr,Yr)}o(uu,"parseGitConfigEnvironment");function Qr(e,t){let n=[];for(let i of e)n.push({key:"safe.directory",value:i},{key:"safe.directory",value:`${i}/*`});n.push(...t);let r=n.flatMap((i,s)=>[`GIT_CONFIG_KEY_${s}=${i.key}`,`GIT_CONFIG_VALUE_${s}=${i.value}`]);return r.push(`GIT_CONFIG_COUNT=${n.length}`),r}o(Qr,"gitSafeDirectoryAssignments");function Zr(e,t,n,r){let i=new Set(n.argumentIndices),s=[],a=!1;for(let c=0;c<e.length;c+=1)if(i.has(c)){if(!a){for(let d of r)s.push("--env",d);a=!0}c+=1}else s.push(e[c]);return n.sawAny||s.splice(t,0,...r.flatMap(c=>["--env",c])),s}o(Zr,"replaceGitConfigEnvironment");function eo(e,t,n,r,i){let s=e.lastIndexOf("--");if(s<0)throw new Error("ASRT Windows wrapper omitted its child separator.");let a=n(e,s),c=a.pairs.filter(l=>l.key.toLowerCase()!=="safe.directory").sort((l,u)=>l.slot-u.slot),d=r(t,c);return i(e,s,a,d)}o(eo,"rewriteWindowsGitSafeDirectoryArgvImplementation");function to(e,t){return eo(e,t,uu,Qr,Zr)}o(to,"rewriteWindowsGitSafeDirectoryArgv");function no(){return String.raw`
-const isMissingGitTrustPath = ${Tt.toString()};
-const normalizeGitSafeDirectoryRootImplementation = ${Ur.toString()};
-const normalizeGitSafeDirectoryRoot = (root) => (
-  normalizeGitSafeDirectoryRootImplementation(root, realpathSync, isMissingGitTrustPath)
-);
-const isRepoBearingGitReadRootImplementation = ${qr.toString()};
-const isRepoBearingGitReadRoot = (root) => (
-  isRepoBearingGitReadRootImplementation(root, statSync, path, isMissingGitTrustPath)
-);
-const windowsGitTrustRootsImplementation = ${zr.toString()};
-const windowsGitTrustRoots = (input) => {
-  const filesystem = (input.config && input.config.filesystem) || {};
-  return windowsGitTrustRootsImplementation(
-    input.cwd,
-    filesystem.allowWrite,
-    filesystem.allowRead,
-    normalizeGitSafeDirectoryRoot,
-    isRepoBearingGitReadRoot,
-  );
-};
-const gitConfigEnvKind = ${Gr.toString()};
-const throwUnexpectedGitConfigShape = ${Jr.toString()};
-const finishParsedGitConfigEnvironment = ${Yr.toString()};
-const parseGitConfigEnvironmentImplementation = ${Vr.toString()};
-const parseGitConfigEnvironment = (argv, separator) => (
-  parseGitConfigEnvironmentImplementation(
-    argv,
-    separator,
-    gitConfigEnvKind,
-    throwUnexpectedGitConfigShape,
-    finishParsedGitConfigEnvironment,
-  )
-);
-const gitSafeDirectoryAssignments = ${Qr.toString()};
-const replaceGitConfigEnvironment = ${Zr.toString()};
-const rewriteWindowsGitSafeDirectoryArgvImplementation = ${eo.toString()};
-const rewriteWindowsGitSafeDirectoryArgv = (argv, trustRoots) => (
-  rewriteWindowsGitSafeDirectoryArgvImplementation(
-    argv,
-    trustRoots,
-    parseGitConfigEnvironment,
-    gitSafeDirectoryAssignments,
-    replaceGitConfigEnvironment,
-  )
-);
-`}o(no,"windowsGitBrokerHelpersSource");var{DEFAULT_WINDOWS_PROXY_PORT_RANGE:$$,SandboxManager:K,getSrtWinPath:D$,getWindowsSandboxUserStatus:L$,grantWindowsAcl:N$,installWindowsSandbox:F$,resolveSrtWin:j$,revokeWindowsAcl:K$}=await import("@anthropic-ai/sandbox-runtime");var vu=gu(import.meta.url),W$=process.env.KODAX_BUNDLED==="true"?void 0:wu(vu.resolve("@anthropic-ai/sandbox-runtime")).href;var B$=[".ssh",".aws",".azure",".gnupg",".kube",".docker",".kodax",".agents",".codex",".claude",".gemini",".direnv",".terraform.d",v.join(".cargo","credentials.toml"),v.join(".config","gcloud"),v.join(".config","gh"),v.join(".config","openai"),v.join(".config","anthropic"),".gitconfig",v.join(".config","git","config"),".terraformrc",v.join(".config","pypoetry","auth.toml"),".condarc",".bashrc",".bash_profile",".zshrc",".zprofile",".profile",v.join(".config","fish","config.fish"),v.join(".config","fish","fish_variables"),".bash_history",".zsh_history",v.join(".m2","settings.xml"),v.join(".m2","settings-security.xml"),v.join(".gradle","gradle.properties"),v.join(".nuget","NuGet","NuGet.Config"),v.join(".pip","pip.conf"),v.join(".config","pip","pip.conf"),v.join(".cache","huggingface","token"),v.join(".huggingface","token"),v.join(".config","rclone","rclone.conf"),v.join(".local","share","keyrings"),v.join("Library","Keychains"),v.join("AppData","Roaming","Microsoft","Protect"),v.join("AppData","Roaming","Microsoft","Credentials"),v.join("AppData","Roaming","Microsoft","Vault"),v.join("AppData","Local","Microsoft","Credentials"),v.join("AppData","Local","Microsoft","Protect"),v.join("AppData","Local","Microsoft","Vault"),".password-store",".env",".envrc",".pgpass",".env.local",".env.development",".env.production",".env.test",".env.staging",".npmrc",".pypirc",".netrc",".git-credentials","credentials","credentials.json","application_default_credentials.json","id_rsa","id_dsa","id_ecdsa","id_ed25519"];var X$=String.raw`
-$ErrorActionPreference = 'Stop'
-$payload = [Console]::In.ReadToEnd() | ConvertFrom-Json
-$mutex = [System.Threading.Mutex]::new($false, 'Local\KodaXAsrtAclGuard-v1')
-$held = $false
-$missing = [System.Collections.Generic.List[string]]::new()
-function Test-KodaXAsrtAclRule($acl, $sidValue, $rights, $inheritance) {
-  foreach ($rule in $acl.Access) {
-    try {
-      $ruleSid = $rule.IdentityReference.Translate(
-        [System.Security.Principal.SecurityIdentifier]
-      ).Value
-    } catch {
-      continue
-    }
-    if (
-      $ruleSid -eq $sidValue -and
-      $rule.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Deny -and
-      -not $rule.IsInherited -and
-      $rule.InheritanceFlags -eq $inheritance -and
-      $rule.PropagationFlags -eq [System.Security.AccessControl.PropagationFlags]::None -and
-      (([int]$rule.FileSystemRights -band [int]$rights) -eq [int]$rights)
-    ) {
-      return $true
-    }
-  }
-  return $false
-}
-function Test-KodaXParentDeleteChildSafe($acl, $tokenSidValues) {
-  foreach ($rule in $acl.Access) {
-    try {
-      $ruleSid = $rule.IdentityReference.Translate(
-        [System.Security.Principal.SecurityIdentifier]
-      ).Value
-    } catch {
-      continue
-    }
-    if (
-      $tokenSidValues -contains $ruleSid -and
-      $rule.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Deny -and
-      ($rule.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0 -and
-      (([int]$rule.FileSystemRights -band [int][System.Security.AccessControl.FileSystemRights]::DeleteSubdirectoriesAndFiles) -ne 0)
-    ) {
-      return $true
-    }
-  }
-  foreach ($rule in $acl.Access) {
-    try {
-      $ruleSid = $rule.IdentityReference.Translate(
-        [System.Security.Principal.SecurityIdentifier]
-      ).Value
-    } catch {
-      continue
-    }
-    if (
-      $tokenSidValues -contains $ruleSid -and
-      $rule.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Allow -and
-      ($rule.PropagationFlags -band [System.Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0 -and
-      (([int]$rule.FileSystemRights -band [int][System.Security.AccessControl.FileSystemRights]::DeleteSubdirectoriesAndFiles) -ne 0)
-    ) {
-      return $false
-    }
-  }
-  return $true
-}
-function Test-KodaXAsrtAclRuleReadsData($acl, $sidValue) {
-  foreach ($rule in $acl.Access) {
-    try {
-      $ruleSid = $rule.IdentityReference.Translate(
-        [System.Security.Principal.SecurityIdentifier]
-      ).Value
-    } catch {
-      continue
-    }
-    if (
-      $ruleSid -eq $sidValue -and
-      $rule.AccessControlType -eq [System.Security.AccessControl.AccessControlType]::Deny -and
-      -not $rule.IsInherited -and
-      $rule.PropagationFlags -eq [System.Security.AccessControl.PropagationFlags]::None -and
-      (([int]$rule.FileSystemRights -band ([int][System.Security.AccessControl.FileSystemRights]::ReadAndExecute -bor [int][System.Security.AccessControl.FileSystemRights]::Synchronize)) -ne 0)
-    ) {
-      return $true
-    }
-  }
-  return $false
-}
-function Add-KodaXAsrtAclRule($target, $sid, $rights, $inheritance, $ruleText) {
-  $acl = Get-Acl -LiteralPath $target
-  if (Test-KodaXAsrtAclRule $acl $sid.Value $rights $inheritance) {
-    return
-  }
-  $principal = '*' + $sid.Value
-  & "$env:SystemRoot\System32\icacls.exe" $target '/deny' "$($principal):$ruleText" | Out-Null
-  if ($LASTEXITCODE -ne 0) {
-    throw "icacls failed to install a KodaX sandbox guard on $target."
-  }
-}
-function Add-KodaXAsrtWriteAclRule($target, $sid, $rights, $inheritance) {
-  $acl = Get-Acl -LiteralPath $target
-  if (Test-KodaXAsrtAclRule $acl $sid.Value $rights $inheritance) {
-    return
-  }
-  $rule = [System.Security.AccessControl.FileSystemAccessRule]::new(
-    $sid,
-    $rights,
-    $inheritance,
-    [System.Security.AccessControl.PropagationFlags]::None,
-    [System.Security.AccessControl.AccessControlType]::Deny
-  )
-  [void]$acl.AddAccessRule($rule)
-  Set-Acl -LiteralPath $target -AclObject $acl
-}
-try {
-  try {
-    $held = $mutex.WaitOne(10000)
-  } catch [System.Threading.AbandonedMutexException] {
-    $held = $true
-  }
-  if (-not $held) {
-    throw 'Timed out waiting for the KodaX ASRT ACL guard mutex.'
-  }
-  $sid = [System.Security.Principal.SecurityIdentifier]::new([string]$payload.sid)
-  $tokenSidValues = @($payload.tokenSids | ForEach-Object { [string]$_ })
-  foreach ($entry in $payload.paths) {
-    $target = [System.IO.Path]::GetFullPath([string]$entry.path)
-    if (-not (Test-Path -LiteralPath $target)) {
-      throw "ACL guard target disappeared before it could be protected: $target"
-    }
-    $inheritance = if ([bool]$entry.directory) {
-      [System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor
-        [System.Security.AccessControl.InheritanceFlags]::ObjectInherit
-    } else {
-      [System.Security.AccessControl.InheritanceFlags]::None
-    }
-    $writeRights = [System.Security.AccessControl.FileSystemRights]::Write -bor
-      [System.Security.AccessControl.FileSystemRights]::Delete -bor
-      [System.Security.AccessControl.FileSystemRights]::ChangePermissions -bor
-      [System.Security.AccessControl.FileSystemRights]::TakeOwnership
-    if ([bool]$entry.directory) {
-      $writeRights = $writeRights -bor [System.Security.AccessControl.FileSystemRights]::DeleteSubdirectoriesAndFiles
-    }
-    $targetRights = if ([string]$entry.mode -eq 'write') {
-      $writeRights
-    } else {
-      [System.Security.AccessControl.FileSystemRights]::FullControl
-    }
-    $parent = [System.IO.Path]::GetDirectoryName($target)
-    $targetAcl = Get-Acl -LiteralPath $target
-    $targetReady = Test-KodaXAsrtAclRule $targetAcl $sid.Value $targetRights $inheritance
-    $targetTooBroad = [string]$entry.mode -eq 'write' -and (Test-KodaXAsrtAclRuleReadsData $targetAcl $sid.Value)
-    if ($targetTooBroad) {
-      $targetReady = $false
-    }
-    $parentReady = -not $parent -or $parent -eq $target -or -not (Test-Path -LiteralPath $parent)
-    if (-not $parentReady) {
-      $parentAcl = Get-Acl -LiteralPath $parent
-      $parentReady = (Test-KodaXAsrtAclRule $parentAcl $sid.Value ([System.Security.AccessControl.FileSystemRights]::DeleteSubdirectoriesAndFiles) ([System.Security.AccessControl.InheritanceFlags]::None)) -or (Test-KodaXParentDeleteChildSafe $parentAcl $tokenSidValues)
-    }
-    if (-not [bool]$payload.install) {
-      if (-not $targetReady -or -not $parentReady) {
-        [void]$missing.Add($target)
-      }
-      continue
-    }
-    if ($targetTooBroad) {
-      $principal = '*' + $sid.Value
-      & "$env:SystemRoot\System32\icacls.exe" $target '/remove:d' $principal | Out-Null
-      if ($LASTEXITCODE -ne 0) {
-        throw "icacls failed to remove an obsolete KodaX sandbox guard from $target."
-      }
-    }
-    if (-not $targetReady) {
-      if ([string]$entry.mode -eq 'write') {
-        Add-KodaXAsrtWriteAclRule $target $sid $targetRights $inheritance
-      } else {
-        $targetRule = if ([bool]$entry.directory) { '(OI)(CI)(F)' } else { '(F)' }
-        Add-KodaXAsrtAclRule $target $sid $targetRights $inheritance $targetRule
-      }
-    }
-    if (-not $parentReady) {
-      Add-KodaXAsrtAclRule $parent $sid ([System.Security.AccessControl.FileSystemRights]::DeleteSubdirectoriesAndFiles) ([System.Security.AccessControl.InheritanceFlags]::None) '(DC)'
-    }
-  }
-  [Console]::Out.Write((@{ missing = @($missing) } | ConvertTo-Json -Compress))
-} finally {
-  if ($held) {
-    [void]$mutex.ReleaseMutex()
-  }
-  $mutex.Dispose()
-}
-`;var ro=JSON.stringify(Ee),At=JSON.stringify(Se),bu=String.raw`
-const { spawn } = require('node:child_process');
-const { writeSync } = require('node:fs');
-const input = JSON.parse(Buffer.from(process.argv[2], 'base64').toString('utf8'));
-const childEnv = { ...process.env };
-for (const name of Object.keys(childEnv)) {
-  if (name.toLowerCase() === 'electron_run_as_node') delete childEnv[name];
-}
-if (input.electronRunAsNode === true) childEnv.ELECTRON_RUN_AS_NODE = '1';
-const child = spawn(input.command, input.args, {
-  cwd: input.cwd,
-  env: childEnv,
-  shell: false,
-  stdio: ['inherit', 'inherit', 'pipe'],
-  windowsHide: true,
-  windowsVerbatimArguments: input.windowsVerbatimArguments === true,
-});
-const stop = (signal) => child.kill(signal);
-process.once('SIGINT', () => stop('SIGINT'));
-process.once('SIGTERM', () => stop('SIGTERM'));
-child.once('spawn', () => {
-  writeSync(2, input.targetStartedMarker);
-  child.stderr.pipe(process.stderr);
-});
-child.once('error', (error) => {
-  process.stderr.write((error instanceof Error ? error.message : String(error)) + '\n');
-  process.exitCode = 1;
-});
-child.once('exit', (code, signal) => {
-  process.exitCode = signal ? 1 : code ?? 1;
-});
-`,io="eval(Buffer.from(process.argv[1],'base64').toString('utf8'))",ku=JSON.stringify(io),so=Buffer.from(bu,"utf8").toString("base64"),Su=JSON.stringify(so),Eu=no(),U$=String.raw`
-const { spawn } = require('node:child_process');
-const { createWriteStream } = require('node:fs');
-const { readFile, rm } = require('node:fs/promises');
-const readline = require('node:readline');
-const input = readline.createInterface({ input: process.stdin, terminal: false });
-input.once('line', async (gate) => {
-  input.close();
-  if (gate !== 'go') { process.exitCode = 125; return; }
-  const launchFile = process.argv[1];
-  const launch = JSON.parse(await readFile(launchFile, 'utf8'));
-  await rm(launchFile, { force: true });
-  const child = spawn(launch.command, launch.args, {
-    cwd: launch.cwd,
-    env: launch.env,
-    shell: false,
-    stdio: launch.controlPipe === true
-      ? ['pipe', 'pipe', 'pipe', 'pipe']
-      : ['pipe', 'pipe', 'pipe'],
-    windowsHide: true,
-  });
-  process.stdin.pipe(child.stdin);
-  child.stdout.pipe(process.stdout);
-  child.stderr.pipe(process.stderr);
-  if (launch.controlPipe === true && child.stdio[3]) {
-    child.stdio[3].pipe(createWriteStream(null, { fd: 3, autoClose: false }));
-  }
-  child.once('error', (error) => {
-    process.stderr.write(String(error?.message ?? error));
-    process.exitCode = 1;
-  });
-  child.once('close', (code) => { process.exitCode = Number.isInteger(code) ? code : 1; });
-});
-`,q$=String.raw`
-import { spawn } from 'node:child_process';
-import { randomUUID } from 'node:crypto';
-import { readFile, rm, writeFile } from 'node:fs/promises';
-import { realpathSync, statSync } from 'node:fs';
-import path from 'node:path';
-let SandboxManager;
-const request = JSON.parse(await readFile(process.argv[2], 'utf8'));
-await rm(process.argv[2], { force: true });
-const targetStartedMarker = request.targetStartedMarker
-  ?? '\u0000KODAX_ASRT_TARGET_STARTED:' + randomUUID() + '\u0000\n';
-const endpoints = new Set(request.endpoints.map((item) => item.host.toLowerCase() + ':' + item.port));
-const callback = request.allowAllNetwork === true
-  ? async () => true
-  : request.endpoints.length === 0
-    ? undefined
-    : async ({ host, port }) => endpoints.has(host.toLowerCase() + ':' + port);
-${Eu}
-const withWindowsChildEnvironment = (argv, environment, gitTrustRoots) => {
-  const separator = argv.lastIndexOf('--');
-  if (separator < 0) throw new Error('ASRT Windows wrapper omitted its child separator.');
-  const requested = [];
-  const requestedNames = new Set();
-  for (const [name, value] of Object.entries(environment ?? {})) {
-    if (value === undefined) continue;
-    if (!name || name.includes('=') || name.includes('\0') || value.includes('\0')) {
-      throw new Error('Invalid environment entry for ASRT Windows child.');
-    }
-    const normalized = name.toLowerCase();
-    if (requestedNames.has(normalized)) {
-      throw new Error('Ambiguous Windows child environment variable: ' + name + '.');
-    }
-    requestedNames.add(normalized);
-    requested.push([name, value]);
-  }
-  const requestedOverrides = new Set(requested.flatMap(([name]) => (
-    ['path', 'pathext'].includes(name.toLowerCase()) ? [name.toLowerCase()] : []
-  )));
-  const controlled = new Set();
-  const prefix = [];
-  for (let index = 0; index < separator; index += 1) {
-    if (argv[index] !== '--env' || index + 1 >= separator) {
-      prefix.push(argv[index]);
-      continue;
-    }
-    const assignment = argv[index + 1];
-    const name = assignment.split('=', 1)[0]?.toLowerCase();
-    if (name) controlled.add(name);
-    if (!name || !requestedOverrides.has(name)) prefix.push(argv[index], assignment);
-    index += 1;
-  }
-  const injected = [];
-  for (const [name, value] of requested) {
-    const normalized = name.toLowerCase();
-    if (controlled.has(normalized) && normalized !== 'path' && normalized !== 'pathext') continue;
-    injected.push('--env', name + '=' + value);
-  }
-  const result = [...prefix, ...injected, ...argv.slice(separator)];
-  const withGitTrust = rewriteWindowsGitSafeDirectoryArgv(result, gitTrustRoots);
-  const estimate = withGitTrust.reduce((size, value) => size + value.length + 3, 0);
-  if (estimate > 30000) throw new Error('ASRT Windows child environment exceeds the CreateProcess command-line limit.');
-  return withGitTrust;
-};
-const writeObservation = async (observation) => {
-  if (typeof request.observationFile !== 'string') return;
-  await writeFile(request.observationFile, JSON.stringify(observation), { mode: 0o600 });
-};
-const waitForTarget = (target, observation) => {
-  const marker = Buffer.from(targetStartedMarker, 'utf8');
-  let pending = Buffer.alloc(0);
-  let diagnostic = Buffer.alloc(0);
-  let processError;
-  let wrapperSpawned = false;
-  let targetStarted = false;
-  let observationWrite = Promise.resolve();
-  return new Promise((resolve, reject) => {
-    let settled = false;
-    target.once('spawn', () => {
-      wrapperSpawned = true;
-    });
-    const finish = (result) => {
-      if (settled) return;
-      settled = true;
-      void observationWrite.then(() => resolve(result), reject);
-    };
-    target.stderr.on('data', (chunk) => {
-      if (targetStarted) {
-        process.stderr.write(chunk);
-        return;
-      }
-      pending = Buffer.concat([pending, Buffer.from(chunk)]);
-      const markerOffset = pending.indexOf(marker);
-      if (markerOffset >= 0) {
-        targetStarted = true;
-        const suffix = pending.subarray(markerOffset + marker.length);
-        pending = Buffer.alloc(0);
-        diagnostic = Buffer.alloc(0);
-        observationWrite = writeObservation(observation).catch(() => undefined);
-        if (suffix.length > 0) process.stderr.write(suffix);
-        return;
-      }
-      const retained = Math.max(0, marker.length - 1);
-      if (pending.length > retained) {
-        diagnostic = Buffer.concat([
-          diagnostic,
-          pending.subarray(0, pending.length - retained),
-        ]).subarray(-65536);
-        pending = pending.subarray(pending.length - retained);
-      }
-    });
-    target.once('error', (error) => {
-      processError = error instanceof Error ? error.message : String(error);
-    });
-    target.once('close', (exitCode, signal) => {
-      const preTarget = Buffer.concat([diagnostic, pending]).toString('utf8').trim();
-      finish({
-        exitCode: signal ? 1 : exitCode ?? 1,
-        targetStarted,
-        spawnFailedBeforeSpawn: processError !== undefined && !wrapperSpawned,
-        diagnostic: preTarget || processError || undefined,
-      });
-    });
-  });
-};
-let child;
-let targetStarted = false;
-let normalFallbackAttempted = false;
-const runDirect = async () => {
-  const internalElectronNode = request.command === process.execPath && process.versions.electron !== undefined;
-  const directArgs = internalElectronNode
-    ? ['--import', ${ro}, ...request.args]
-    : request.args;
-  const directEnv = internalElectronNode
-    ? { ...request.env, [${At}]: '1' }
-    : request.env;
-  child = spawn(request.command, directArgs, {
-    cwd: request.cwd,
-    env: directEnv,
-    shell: false,
-    stdio: 'inherit',
-    windowsHide: true,
-    windowsVerbatimArguments: request.windowsVerbatimArguments === true,
-  });
-  return await new Promise((resolve, reject) => {
-    child.once('error', reject);
-    child.once('exit', (exitCode, signal) => resolve(signal ? 1 : exitCode ?? 1));
-  });
-};
-const runNormalFallback = async () => {
-  if (
-    request.fallbackToNormalExecution !== true
-    || targetStarted
-    || normalFallbackAttempted
-  ) return false;
-  await writeObservation({
-    version: 1,
-    state: 'fallback',
-    reason: 'backend_failed',
-    execution: 'normal_permission_policy',
-  }).catch(() => undefined);
-  normalFallbackAttempted = true;
-  process.exitCode = await runDirect();
-  return true;
-};
-try {
-  if (request.wrappedInvocation) {
-    const wrapped = request.wrappedInvocation;
-    child = spawn(wrapped.executable, wrapped.args, {
-      cwd: request.cwd,
-      env: wrapped.env,
-      shell: wrapped.shell,
-      stdio: ['inherit', 'inherit', 'pipe'],
-      windowsHide: true,
-    });
-    const result = await waitForTarget(child, {
-      version: 1,
-      state: 'applied',
-      backend: request.observationBackend ?? 'unsupported',
-      policyId: 'kodax-workspace-shell-v1',
-    });
-    targetStarted = result.targetStarted;
-    const fellBack = result.spawnFailedBeforeSpawn
-      ? await runNormalFallback()
-      : false;
-    if (!targetStarted && !fellBack) {
-      process.stderr.write((result.diagnostic || 'Sandbox target launch could not be attested.') + '\n');
-    }
-    if (!fellBack) process.exitCode = targetStarted ? result.exitCode : 1;
-  } else {
-  ({ SandboxManager } = await import(process.argv[1]));
-  const bootstrap = request.bootstrapCommand ?? 'node';
-  const bootstrapIsAbsolute = /^(?:[A-Za-z]:[\\/]|\\\\)/.test(bootstrap);
-  const bootstrapIsElectronNode = bootstrap === process.execPath
-    && process.versions.electron !== undefined;
-  const config = process.platform === 'win32' && bootstrapIsAbsolute
-    ? {
-        ...request.config,
-        filesystem: {
-          ...request.config.filesystem,
-          allowRead: [...new Set([
-            ...request.config.filesystem.allowRead,
-            bootstrap,
-            path.dirname(bootstrap),
-          ])],
-        },
-      }
-    : request.config;
-  await SandboxManager.initialize(config, callback);
-  const quote = (value) => process.platform === 'win32'
-    ? '"' + value.replaceAll('"', '""') + '"'
-    : "'" + value.replaceAll("'", "'\"'\"'") + "'";
-  const internalElectronNode = request.command === process.execPath && process.versions.electron !== undefined;
-  const childArgs = internalElectronNode
-    ? ['--import', ${ro}, ...request.args]
-    : request.args;
-  const command = [
-    quote(bootstrap),
-    '-e',
-    quote(${ku}),
-    ${Su},
-    Buffer.from(JSON.stringify({
-      command: request.command,
-      args: childArgs,
-      windowsVerbatimArguments: request.windowsVerbatimArguments === true,
-      cwd: request.cwd,
-      targetStartedMarker,
-      electronRunAsNode: internalElectronNode,
-    }), 'utf8').toString('base64'),
-  ].join(' ');
-  if (process.platform === 'win32') {
-    const wrapped = await SandboxManager.wrapWithSandboxArgv(command, 'cmd', undefined, undefined, request.cwd);
-    const requestedEnv = internalElectronNode || bootstrapIsElectronNode
-      ? { ...request.env, [${At}]: '1' }
-      : request.env;
-    const childArgv = withWindowsChildEnvironment(wrapped.argv, requestedEnv, windowsGitTrustRoots(request));
-    child = spawn(childArgv[0], childArgv.slice(1), {
-      cwd: request.cwd,
-      env: wrapped.env,
-      shell: false,
-      stdio: ['inherit', 'inherit', 'pipe'],
-      windowsHide: true,
-    });
-  } else {
-    const wrapped = await SandboxManager.wrapWithSandbox(command);
-    const childEnv = internalElectronNode || bootstrapIsElectronNode
-      ? { ...request.env, [${At}]: '1' }
-      : request.env;
-    child = spawn(wrapped, {
-      cwd: request.cwd,
-      env: childEnv,
-      shell: true,
-      stdio: ['inherit', 'inherit', 'pipe'],
-    });
-  }
-  const stop = () => child?.kill('SIGTERM');
-  process.once('SIGINT', stop);
-  process.once('SIGTERM', stop);
-  const result = await waitForTarget(child, {
-    version: 1,
-    state: 'applied',
-    backend: request.observationBackend ?? 'unsupported',
-    policyId: 'kodax-workspace-shell-v1',
-  });
-  targetStarted = result.targetStarted;
-  try { SandboxManager.cleanupAfterCommand(); } catch {}
-  await SandboxManager.reset().catch(() => undefined);
-  const fellBack = result.spawnFailedBeforeSpawn
-    ? await runNormalFallback()
-    : false;
-  if (!targetStarted && !fellBack) {
-    process.stderr.write((result.diagnostic || 'Sandbox target launch could not be attested.') + '\n');
-  }
-  if (!fellBack) process.exitCode = targetStarted ? result.exitCode : 1;
-  }
-} catch (error) {
-  await SandboxManager?.reset().catch(() => undefined);
-  if (
-    request.fallbackToNormalExecution === true
-    && !targetStarted
-    && !normalFallbackAttempted
-    && child === undefined
-  ) {
-    try {
-      await runNormalFallback();
-    } catch (fallbackError) {
-      process.stderr.write((fallbackError instanceof Error ? fallbackError.message : String(fallbackError)) + '\n');
-      process.exitCode = 1;
-    }
-  } else {
-    process.stderr.write((error instanceof Error ? error.message : String(error)) + '\n');
-    process.exitCode = 1;
-  }
-}
-`;function Ct(e){return e instanceof Error?e.message:String(e)}o(Ct,"errorText");function xu(){return process.env.KODAX_A2A_NODE!==void 0?process.env.KODAX_A2A_NODE:process.versions.electron!==void 0?process.execPath:process.env.KODAX_BUNDLED==="true"?"node":process.execPath}o(xu,"sandboxJavaScriptCommand");var z$=5*6e4;var H$=String.raw`
-const { createHash } = require('node:crypto');
-const fs = require('node:fs/promises');
-const path = require('node:path');
-const chunks = [];
-process.stdin.on('data', (chunk) => chunks.push(Buffer.from(chunk)));
-process.stdin.once('end', async () => {
-  const assertSingleLink = (stat) => {
-    if (stat.nlink !== 1n) throw new Error('Text mutation target must not be hard-linked.');
-  };
-  const revision = (content, stat) => 'present:' + createHash('sha256')
-    .update(stat.dev.toString())
-    .update(':')
-    .update(stat.ino.toString())
-    .update(':')
-    .update(stat.nlink.toString())
-    .update('\0')
-    .update(content)
-    .digest('hex');
-  const backupPath = async (target, openedStat) => {
-    const canonical = await fs.realpath(target);
-    let canonicalHandle;
-    try {
-      canonicalHandle = await fs.open(canonical, 'r');
-      const canonicalStat = await canonicalHandle.stat({ bigint: true });
-      assertSingleLink(canonicalStat);
-      if (canonicalStat.dev !== openedStat.dev || canonicalStat.ino !== openedStat.ino) {
-        throw new Error('Text mutation target identity changed while reading.');
-      }
-      return canonical;
-    } finally {
-      await canonicalHandle?.close();
-    }
-  };
-  const snapshot = async (target) => {
-    let handle;
-    try {
-      handle = await fs.open(target, 'r');
-    } catch (error) {
-      if (error && error.code === 'ENOENT') {
-        return { state: 'missing', content: '', revision: 'missing', backupPath: path.resolve(target) };
-      }
-      throw error;
-    }
-    try {
-      const [content, stat] = await Promise.all([
-        handle.readFile('utf8'),
-        handle.stat({ bigint: true }),
-      ]);
-      assertSingleLink(stat);
-      return {
-        state: 'present',
-        content,
-        revision: revision(content, stat),
-        backupPath: await backupPath(target, stat),
-      };
-    } finally {
-      await handle?.close();
-    }
-  };
-  const writeFully = async (handle, content) => {
-    const encoded = Buffer.from(content, 'utf8');
-    let written = 0;
-    while (written < encoded.length) {
-      const result = await handle.write(encoded, written, encoded.length - written, written);
-      if (result.bytesWritten === 0) throw new Error('Text mutation write made no progress.');
-      written += result.bytesWritten;
-    }
-    await handle.truncate(encoded.length);
-  };
-  try {
-    const input = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-    if (!input || typeof input.path !== 'string' || !path.isAbsolute(input.path)) {
-      throw new Error('Text mutation target must be an absolute path.');
-    }
-    if (input.action === 'read') {
-      process.stdout.write(JSON.stringify({ status: 'ok', snapshot: await snapshot(input.path) }));
-      return;
-    }
-    if (
-      input.action !== 'write'
-      || typeof input.content !== 'string'
-      || typeof input.expectedRevision !== 'string'
-      || typeof input.createParentDirectories !== 'boolean'
-    ) throw new Error('Invalid text mutation request.');
-    if (input.createParentDirectories) await fs.mkdir(path.dirname(input.path), { recursive: true });
-    let handle;
-    try {
-      if (input.expectedRevision === 'missing') {
-        handle = await fs.open(input.path, 'wx');
-        assertSingleLink(await handle.stat({ bigint: true }));
-      } else {
-        handle = await fs.open(input.path, 'r+');
-        const [content, stat] = await Promise.all([
-          handle.readFile('utf8'),
-          handle.stat({ bigint: true }),
-        ]);
-        assertSingleLink(stat);
-        if (revision(content, stat) !== input.expectedRevision) {
-          process.stdout.write(JSON.stringify({ status: 'conflict' }));
-          return;
-        }
-      }
-      await writeFully(handle, input.content);
-      process.stdout.write(JSON.stringify({ status: 'written' }));
-    } catch (error) {
-      if (input.expectedRevision === 'missing' && error && error.code === 'EEXIST') {
-        process.stdout.write(JSON.stringify({ status: 'conflict' }));
-        return;
-      }
-      throw error;
-    } finally {
-      await handle?.close();
-    }
-  } catch (error) {
-    process.stderr.write((error instanceof Error ? error.message : String(error)) + '\n');
-    process.exitCode = 1;
-  }
-});
-`,G$=64*1024*1024;var oo=!1;function Ru(){oo||(oo=!0,I({source:"sandbox:git-safe-directory",level:"warn",message:"ASRT git env block had an unexpected shape; execution was rejected."}))}o(Ru,"warnUnexpectedAsrtGitEnvShape");function Iu(e,t,n){let r=e.lastIndexOf("--");if(r<0)throw new Error("ASRT Windows wrapper omitted its child separator.");let i=[],s=new Set;for(let[f,m]of Object.entries(t)){if(m===void 0)continue;if(!f||f.includes("=")||f.includes("\0")||m.includes("\0"))throw new Error("Invalid environment entry for ASRT Windows child.");let y=f.toLowerCase();if(s.has(y))throw new Error(`Ambiguous Windows child environment variable: ${f}.`);s.add(y),i.push([f,m])}let a=new Set,c=new Set(i.flatMap(([f])=>["path","pathext"].includes(f.toLowerCase())?[f.toLowerCase()]:[])),d=[];for(let f=0;f<r;f+=1){if(e[f]!=="--env"||f+1>=r){d.push(e[f]);continue}let m=e[f+1],y=m.split("=",1)[0]?.toLowerCase();y&&a.add(y),(!y||!c.has(y))&&d.push(e[f],m),f+=1}let l=[];for(let[f,m]of i){let y=f.toLowerCase();a.has(y)&&y!=="path"&&y!=="pathext"||l.push("--env",`${f}=${m}`)}let u=[...d,...l,...e.slice(r)],p=u;if(n!==void 0)try{p=to(u,n)}catch(f){throw Ru(),f}if(p.reduce((f,m)=>f+m.length+3,0)>3e4)throw new Error("ASRT Windows child environment exceeds the CreateProcess command-line limit.");return p}o(Iu,"withWindowsSandboxChildEnvironment");async function Tu(e,t){let n=e.bootstrapCommand??xu(),r=n===process.execPath&&process.versions.electron!==void 0,i=e.command===process.execPath&&process.versions.electron!==void 0,s=i?["--import",Ee,...e.args]:e.args,a=i||r?{...e.env,[Se]:"1"}:e.env,c=o(l=>process.platform==="win32"?`"${l.replaceAll('"','""')}"`:`'${l.replaceAll("'",`'"'"'`)}'`,"quote"),d=[c(n),"-e",c(io),so,Buffer.from(JSON.stringify({command:e.command,args:s,windowsVerbatimArguments:e.windowsVerbatimArguments===!0,cwd:e.cwd,targetStartedMarker:t,electronRunAsNode:i}),"utf8").toString("base64")].join(" ");if(process.platform==="win32"){let l={filesystem:{denyRead:e.config.filesystem.denyRead,allowRead:[],allowWrite:[],denyWrite:e.config.filesystem.denyWrite}},u=await K.wrapWithSandboxArgv(d,"cmd",l,void 0,e.cwd),p=Iu(u.argv,a,process.platform==="win32"?Hr(e.cwd,e.config.filesystem.allowWrite,e.config.filesystem.allowRead):void 0);return{executable:p[0],args:p.slice(1),env:u.env,shell:!1}}return{executable:await K.wrapWithSandbox(d),args:[],env:a,shell:!0}}o(Tu,"wrapSandboxTarget");async function Au(){try{K.cleanupAfterCommand()}catch{}await K.reset().catch(()=>{})}o(Au,"resetSandboxManagerBestEffort");async function Cu(){try{K.cleanupAfterCommand()}catch(e){I({source:"sandbox:workspace-session",level:"warn",message:"Workspace sandbox command cleanup reported an error before ACL reset.",detail:e})}await K.reset()}o(Cu,"resetWorkspaceSessionSandboxManager");function pe(e){pu(3,`${JSON.stringify(e)}
-`)}o(pe,"writeWorkspaceSessionResponse");async function ao(e){try{let t=JSON.parse(await mu(e,"utf8"));await hu(e,{force:!0}),await K.initialize(t.config,async()=>!0),pe({type:"ready",ok:!0});let n=yu.createInterface({input:process.stdin}),r=Promise.resolve();for await(let i of n){let s=JSON.parse(i);r=r.then(async()=>{try{if(s.type==="cleanup"){K.cleanupAfterCommand(),pe({id:s.id,type:"result",ok:!0});return}if(!s.request)throw new Error("Missing workspace wrap request.");let a=s.request.targetStartedMarker??`\0KODAX_ASRT_TARGET_STARTED:${fu()}\0
-`,c=await Tu(s.request,a);pe({id:s.id,type:"result",ok:!0,invocation:c})}catch(a){pe({id:s.id,type:"result",ok:!1,error:Ct(a)})}})}return await r,await Cu(),0}catch(t){try{pe({type:"ready",ok:!1,error:Ct(t)})}catch(n){process.stderr.write(`ASRT workspace session could not report startup failure: ${Ct(n)}
-`)}return await Au(),1}}o(ao,"runAsrtWorkspaceSessionProcess");var co=process.argv[2];if(!co)throw new Error("Missing ASRT workspace session initialization file.");process.exitCode=await ao(co);