@kodax-ai/kodax 0.7.96-beta.1 → 0.7.96-beta.3

package/CHANGELOG.md

@@ -6,6 +6,72 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+---
+
+## [0.7.96-beta.3] - 2026-09-08
+
+Third beta pre-release of the v0.7.96 line, retaining beta.2 context recovery
+and Provider fixes. npm publication remains a manual maintainer action.
+
+### Fixed
+
+- Repair Windows WFP probe allocation in KodaX doctor and ASRT 0.0.65: bind
+  bounded distinct candidates below the proxy permit range and keep successful
+  listeners alive through verification. SDK bundles, standalone binaries, and
+  npm tarballs ship the audited dependency patch, including installs with
+  `--ignore-scripts`. Build/pack rejects unexpected dependency source bytes.
+  Build/pack CLI entry detection resolves real paths so linked workspaces and
+  macOS temporary-directory aliases execute the patch and validation checks.
+  Windows allocation, installed-package, and packaged Electron gates cover
+  delivery and behavior; native protocol/setup and permission contracts stay unchanged.
+
+- Separate production and source-test TypeScript checks while retaining SDK
+  packaging and public entry points. Correct stale test contracts, await the
+  memory-review Session ID, complete A2A task-state projection, and return the
+  existing daemon-only error from embedded scoped credential methods.
+- Retire the old RPC connection and socket when the same authenticated client
+  identity takes over the credential/Host Tool reverse bridge. Clients now
+  observe a reconnectable disconnect instead of remaining RPC-connected with
+  an unusable credential channel. Reconnection can resume live scoped leases;
+  stale closes/replies cannot detach the successor or replay dispatched tools.
+
+## [0.7.96-beta.2] - 2026-09-07
+
+Second beta pre-release of the v0.7.96 line: it retains the beta.1 sandbox-
+first, trusted-text, and permission-profile feature set plus the Linux glibc
+2.28 native build fix, and adds long-session context-boundary recovery and
+Provider correctness fixes below. npm publication remains a separate manual
+maintainer action.
+
+### Fixed
+
+- Recover long coding sessions at context boundaries: parse vLLM prompt counts
+  without confusing output tokens or bounds, reclaim response reserve before
+  terminal checks, and persist recoverable tool-output previews when protected
+  recent history cannot fit. SA and AMA retry a rejected generation once after
+  actual history reduction without replaying tools. Capacity diagnostics include
+  safety margin and distinguish upstream bounds from exact token counts.
+- Keep bundled Provider credential scopes shared across SDK, Agent summaries,
+  CLI, and Runtime Worker requests, restoring keychain-only manual and managed
+  compaction. Add bundle identity checks and real daemon broker regressions
+  to CI and release gates (Issue 332).
+- Omit empty `tools` arrays from OpenAI- and Anthropic-compatible streaming and
+  non-streaming wire requests, so tool-free side queries such as Auto[LLM]
+  classification remain compatible with strict vLLM gateways (Issue 329).
+- Preserve a bounded, credential-safe structured Provider failure from Child
+  Agent execution through Actor settlement and SDK Runtime diagnostics instead
+  of replacing failures after tool execution with `failed without output`; the
+  existing no-replay child fallback boundary is unchanged (Issue 330).
+- Make custom Provider credential verification honor exact and lazy run-scoped
+  credential authority, include credential acquisition in the timeout, fail
+  closed for denied scopes, and redact opaque scoped credentials from returned
+  diagnostics (Issue 331).
+- Keep the cap-006 post-tool-result failure contract off the full-workspace
+  repo-intelligence indexing path (`repoIntelligenceMode: 'off'`, matching the
+  cap-057/cap-091/cap-095 precedent). The contract test previously indexed the
+  whole workspace before `onSessionStart` and exceeded its 30-second budget
+  under CI parallelism; the failure-shape contract is unchanged.
+
 ## [0.7.96-beta.1] - 2026-09-03
 
 The first beta pre-release of the v0.7.96 line: it retains the full alpha.7
@@ -5123,7 +5189,7 @@ repl            → coding, skills
 ### Tests
 - Added / expanded tests for `task-engine`, `reasoning`, `tool-display`, `live-streaming`, `StatusBar`, `invocation-runtime`, `types-legacy`, and `InkREPL.interrupted`
 
-<!-- last-sync: dfce6cd5 -->
+<!-- last-sync: 173418a417899899cb3757309f72d9066efd6f56 -->
 
 ### Added
 - **Repository intelligence substrate (FEATURE_018)**: Task-aware repository intelligence layer under `.agent/repo-intelligence/` with durable artifacts — `repo-overview.json`, `changed-scope.json`, `module-index.json`, `symbol-index.json`, `process-index.json`, `repo-intelligence-manifest.json` — supporting incremental refresh, freshness metadata, and language-tiered extraction (TS/JS via AST, Python, Go, Rust, Java, C++)

package/README.md

@@ -759,7 +759,9 @@ permission UI, and recovers stale prepared Session tails through an
 authoritative merge. Background persistence failures are surfaced as
 diagnostics rather than hidden.
 
-**v0.7.96-beta.1 release:** Windows shell admission now follows the
+Beta.3 repairs Windows WFP probe allocation in KodaX doctor and the bundled ASRT 0.0.65 dependency. SDK installs with `--ignore-scripts` receive the repair. Authenticated credential/Host Tool bridge takeover retires the old RPC connection so clients can reconnect and resume live scoped leases without replaying dispatched tools. Production and source-test TypeScript checks are separate; public SDK entry points remain unchanged.
+
+**v0.7.96-beta.3 release:** Windows shell admission now follows the
 Codex concurrency boundary: versioned setup performs legacy migration once,
 while ordinary admission accepts effective inherited normal-token access and
 only converges a missing exact-root restricted capability using `SET_ACCESS`
@@ -800,9 +802,15 @@ that sandbox doctor is a host control-plane operation (`/sandbox` in the REPL or
 `kodax sandbox doctor` directly in a user terminal). Linux x64/arm64 native
 text authorities compile in digest-pinned `manylinux_2_28` builders and are
 gated to `GLIBC_2.28`, restoring the supported private-deployment floor
-(Issue 328). npm publication remains a
+(Issue 328). Beta.2 also recovers long coding sessions at context capacity
+boundaries — a confirmed upstream overflow permits one generation retry after
+persisted history reduction without replaying tools — keeps bundled Provider
+credential scopes shared across SDK, Agent summaries, CLI, and Runtime Worker
+requests, preserves structured Child Agent Provider failures, honors exact
+run-scoped credential verification, and omits empty `tools` arrays for strict
+vLLM gateways (Issues 329-332). npm publication remains a
 manual maintainer action. See the
-[release checklist](docs/release.md#v0796-beta1-release-preparation).
+[release checklist](docs/release.md#v0796-beta3-release-preparation).
 
 **v0.7.96-alpha.3 release:** Provider credentials are lazy, scoped,
 revocable capabilities (ADR-068). The v2 credential broker keeps Provider

package/README_CN.md

@@ -296,7 +296,9 @@ SDK 系统代码契约更新，但没有放宽 shell/sandbox 的 fail-closed 边
 `handleRuntimePermissionRequest()` 管理 SDK 权限 UI，并在 prepared Session 尾部遇到
 `data_changed` 时通过权威 delta 合并恢复；后台持久化失败会显示为诊断，不再静默丢失。
 
-**v0.7.96-beta.1 发布**：Windows shell 准入现在遵循 Codex 的并发边界：
+beta.3 修复 KodaX doctor 和随包 ASRT 0.0.65 的 Windows WFP 探测端口分配；SDK 即使使用 `--ignore-scripts` 安装也包含修复。相同认证身份接管凭据/Host Tool 桥接时，旧 RPC 连接会断开，客户端可重连并恢复有效租约，已派发工具不会重放。生产代码与源码测试分别执行严格类型检查，SDK 公开入口保持不变。
+
+**v0.7.96-beta.3 发布**：Windows shell 准入现在遵循 Codex 的并发边界：
 版本化 setup 只执行一次 legacy 迁移；普通准入在 capability 已存在时只读，只有缺失
 精确 root restricted capability 时才用 `SET_ACCESS` 与 DACL 回读收敛，且不等待任何
 跨进程目标互斥锁。稳定 filesystem capability SID 保留在对象上，每条命令的 token
@@ -329,8 +331,12 @@ shell 内容保留为 opaque 完整 argv，由精确 Exec Policy 与正常 Edits
 才显示持续更新的等待时间。sandbox doctor 明确属于宿主控制面：REPL 内使用 `/sandbox`，或直接
 在用户终端运行 `kodax sandbox doctor`，不能通过 sandbox-first Bash 工具调用。Linux x64/arm64
 native 文本权威改在摘要固定的 `manylinux_2_28` 构建器中编译，并要求所需 `GLIBC_*` 符号不超过
-2.28，恢复了受支持的私有化部署下限（Issue 328）。npm 发布仍由
-维护者手动执行。详见 [v0.7.96-beta.1 发布清单](docs/release.md#v0796-beta1-release-preparation)。
+2.28，恢复了受支持的私有化部署下限（Issue 328）。beta.2 还能在上下文容量边界恢复长会话——
+确认的上游溢出在历史实际缩减后允许一次生成重试且不重放工具调用——并让捆绑的 Provider 凭据
+scope 在 SDK、Agent 摘要、CLI 与 Runtime Worker 请求间共享，保留结构化的 Child Agent Provider
+失败信息，精确遵循 run-scoped 凭据校验，并为严格 vLLM 网关省略空 `tools` 数组（Issues 329-332）。
+npm 发布仍由
+维护者手动执行。详见 [v0.7.96-beta.3 发布清单](docs/release.md#v0796-beta3-release-preparation)。
 
 **v0.7.96-alpha.3 发布**：Provider 凭据成为惰性、受限、可撤销的能力（ADR-068）。v2
 credential broker 将 Provider 密钥保留在 OS keychain，按每次 wire call、为单一封闭

package/dist/chunks/{agent-BWS5VN2F.js → agent-AGJEZOXZ.js}

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{Aa as f,Qa as g,Sa as h,a as c,db as i,eb as j,mb as k,ya as d,za as e}from"./chunk-PP74NCFQ.js";import"./chunk-MXJFGVTT.js";import"./chunk-SYC3G4NT.js";import"./chunk-LNPTCPLR.js";import"./chunk-ZD5NDQ53.js";import"./chunk-TD2PU67Z.js";import{Ob as a,Pb as b}from"./chunk-S5USXWS2.js";import"./chunk-7CPZTMYD.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};
+import{Aa as e,Ba as f,Ra as g,Ta as h,a as c,gb as i,hb as j,pb as k,za as d}from"./chunk-QLR3IZKV.js";import"./chunk-HK4767SO.js";import"./chunk-25LFDCMP.js";import"./chunk-IOR23YGO.js";import"./chunk-KGG5EDZN.js";import{Ob as a,Pb as b}from"./chunk-JM6QBNUM.js";import"./chunk-W764RSKQ.js";import"./chunk-SHXBOMIB.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};

package/dist/chunks/argument-completer-UH2SHQ5R.js

@@ -0,0 +1,2 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import{Ma as a,Na as b}from"./chunk-MZSC5OWE.js";import"./chunk-ZFAX6QYE.js";import"./chunk-DWLYVWFJ.js";import"./chunk-JN4BW4KX.js";import"./chunk-ZGKIV7ZU.js";import"./chunk-QLR3IZKV.js";import"./chunk-HK4767SO.js";import"./chunk-6RP5I7VG.js";import"./chunk-25LFDCMP.js";import"./chunk-IOR23YGO.js";import"./chunk-KGG5EDZN.js";import"./chunk-JM6QBNUM.js";import"./chunk-W764RSKQ.js";import"./chunk-SHXBOMIB.js";import"./chunk-ONUPGMER.js";export{a as ArgumentCompleter,b as createArgumentCompleter};