@kodax-ai/kodax 0.7.96-beta.2 → 0.7.96-beta.4

package/CHANGELOG.md

@@ -6,6 +6,69 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+---
+
+## [0.7.96-beta.4] - 2026-09-08
+
+Fourth beta pre-release of the v0.7.96 line, retaining the beta.3 Windows WFP
+probe repair, credential-bridge retirement, and all earlier sandbox-first,
+trusted-text, permission-profile, context-recovery, and Provider fixes. npm
+publication remains a manual maintainer action.
+
+### Fixed
+
+- Share manual and automatic compaction summary policy: `compaction.reasoning`
+  applies to both summary paths independent of the main turn's effort. The
+  default disables thinking where supported; always-thinking models use the
+  existing side-query low-effort resolver. In-process callers set
+  `KodaXOptions.compaction.reasoning`; Runtime hosts persist the same policy
+  for `runs.start()` and `sessions.compact()` through `compactionReasoning`
+  (`false` requests disabled thinking, `null` removes the Session override).
+  Message/tool/system prefixes and routing affinity stay stable.
+- Record bounded summary request metrics: successful compaction reports and
+  `context.compaction.finished` optionally carry `summaryRequests` (one record
+  per physical summary call, including map/reduce) and `commitMs` (durable
+  save/callback duration). Each request records provider, model, requested
+  reasoning, prepare/credential/provider timings, an optional first-delta
+  offset, adapter-reported retries and wait, usage, and stop reason, and never
+  includes prompt or output text.
+- Manual compaction uses the effective Session provider/model unless
+  explicitly overridden, never carries the previous provider's model into a
+  switched request, restores the same budgeted ledger/file attachments, and
+  records lineage `reason: 'manual'`. REPL `/compact` publishes success and
+  clears the UI only after a durable save; a failed save restores the previous
+  live context. Eligible-prefix coverage, protected atomic groups, the query
+  ledger, and the summary prompt text remain unchanged.
+
+---
+
+## [0.7.96-beta.3] - 2026-09-08
+
+Third beta pre-release of the v0.7.96 line, retaining beta.2 context recovery
+and Provider fixes. npm publication remains a manual maintainer action.
+
+### Fixed
+
+- Repair Windows WFP probe allocation in KodaX doctor and ASRT 0.0.65: bind
+  bounded distinct candidates below the proxy permit range and keep successful
+  listeners alive through verification. SDK bundles, standalone binaries, and
+  npm tarballs ship the audited dependency patch, including installs with
+  `--ignore-scripts`. Build/pack rejects unexpected dependency source bytes.
+  Build/pack CLI entry detection resolves real paths so linked workspaces and
+  macOS temporary-directory aliases execute the patch and validation checks.
+  Windows allocation, installed-package, and packaged Electron gates cover
+  delivery and behavior; native protocol/setup and permission contracts stay unchanged.
+
+- Separate production and source-test TypeScript checks while retaining SDK
+  packaging and public entry points. Correct stale test contracts, await the
+  memory-review Session ID, complete A2A task-state projection, and return the
+  existing daemon-only error from embedded scoped credential methods.
+- Retire the old RPC connection and socket when the same authenticated client
+  identity takes over the credential/Host Tool reverse bridge. Clients now
+  observe a reconnectable disconnect instead of remaining RPC-connected with
+  an unusable credential channel. Reconnection can resume live scoped leases;
+  stale closes/replies cannot detach the successor or replay dispatched tools.
+
 ## [0.7.96-beta.2] - 2026-09-07
 
 Second beta pre-release of the v0.7.96 line: it retains the beta.1 sandbox-
@@ -5160,7 +5223,7 @@ repl            → coding, skills
 ### Tests
 - Added / expanded tests for `task-engine`, `reasoning`, `tool-display`, `live-streaming`, `StatusBar`, `invocation-runtime`, `types-legacy`, and `InkREPL.interrupted`
 
-<!-- last-sync: dfce6cd5 -->
+<!-- last-sync: 173418a417899899cb3757309f72d9066efd6f56 -->
 
 ### Added
 - **Repository intelligence substrate (FEATURE_018)**: Task-aware repository intelligence layer under `.agent/repo-intelligence/` with durable artifacts — `repo-overview.json`, `changed-scope.json`, `module-index.json`, `symbol-index.json`, `process-index.json`, `repo-intelligence-manifest.json` — supporting incremental refresh, freshness metadata, and language-tiered extraction (TS/JS via AST, Python, Go, Rust, Java, C++)

package/README.md

@@ -759,7 +759,15 @@ permission UI, and recovers stale prepared Session tails through an
 authoritative merge. Background persistence failures are surfaced as
 diagnostics rather than hidden.
 
-**v0.7.96-beta.2 release:** Windows shell admission now follows the
+Beta.4 shares manual and automatic compaction summary policy:
+`compaction.reasoning` applies to both paths independent of the main turn's
+effort, defaulting to disabled thinking where supported. Manual compaction
+honors the effective Session provider/model without carrying a switched
+provider's model, REPL `/compact` clears the UI only after a durable save, and
+successful reports carry bounded `summaryRequests` plus `commitMs` per
+physical summary call.
+
+**v0.7.96-beta.4 release:** Windows shell admission now follows the
 Codex concurrency boundary: versioned setup performs legacy migration once,
 while ordinary admission accepts effective inherited normal-token access and
 only converges a missing exact-root restricted capability using `SET_ACCESS`
@@ -808,7 +816,7 @@ requests, preserves structured Child Agent Provider failures, honors exact
 run-scoped credential verification, and omits empty `tools` arrays for strict
 vLLM gateways (Issues 329-332). npm publication remains a
 manual maintainer action. See the
-[release checklist](docs/release.md#v0796-beta2-release-preparation).
+[release checklist](docs/release.md#v0796-beta4-release-preparation).
 
 **v0.7.96-alpha.3 release:** Provider credentials are lazy, scoped,
 revocable capabilities (ADR-068). The v2 credential broker keeps Provider

package/README_CN.md

@@ -296,7 +296,9 @@ SDK 系统代码契约更新，但没有放宽 shell/sandbox 的 fail-closed 边
 `handleRuntimePermissionRequest()` 管理 SDK 权限 UI，并在 prepared Session 尾部遇到
 `data_changed` 时通过权威 delta 合并恢复；后台持久化失败会显示为诊断，不再静默丢失。
 
-**v0.7.96-beta.2 发布**：Windows shell 准入现在遵循 Codex 的并发边界：
+beta.4 统一了手动与自动压缩的摘要策略：`compaction.reasoning` 同时作用于两条路径，与主回合 effort 无关（默认在支持时关闭思考）。手动压缩遵循生效的 Session provider/model，不会把切换前 provider 的 model 带入请求；REPL `/compact` 仅在持久化保存成功后清空 UI；成功报告按每次物理摘要调用记录有界 `summaryRequests` 与 `commitMs`。
+
+**v0.7.96-beta.4 发布**：Windows shell 准入现在遵循 Codex 的并发边界：
 版本化 setup 只执行一次 legacy 迁移；普通准入在 capability 已存在时只读，只有缺失
 精确 root restricted capability 时才用 `SET_ACCESS` 与 DACL 回读收敛，且不等待任何
 跨进程目标互斥锁。稳定 filesystem capability SID 保留在对象上，每条命令的 token
@@ -334,7 +336,8 @@ native 文本权威改在摘要固定的 `manylinux_2_28` 构建器中编译，
 scope 在 SDK、Agent 摘要、CLI 与 Runtime Worker 请求间共享，保留结构化的 Child Agent Provider
 失败信息，精确遵循 run-scoped 凭据校验，并为严格 vLLM 网关省略空 `tools` 数组（Issues 329-332）。
 npm 发布仍由
-维护者手动执行。详见 [v0.7.96-beta.2 发布清单](docs/release.md#v0796-beta2-release-preparation)。
+npm 发布仍由
+维护者手动执行。详见 [v0.7.96-beta.4 发布清单](docs/release.md#v0796-beta4-release-preparation)。
 
 **v0.7.96-alpha.3 发布**：Provider 凭据成为惰性、受限、可撤销的能力（ADR-068）。v2
 credential broker 将 Provider 密钥保留在 OS keychain，按每次 wire call、为单一封闭

package/dist/chunks/{agent-QGVCIM5U.js → agent-MNDAK2RR.js}

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{Aa as e,Ba as f,Ra as g,Ta as h,a as c,gb as i,hb as j,pb as k,za as d}from"./chunk-HV4L23QZ.js";import"./chunk-HK4767SO.js";import"./chunk-TWXMMQ26.js";import"./chunk-IOR23YGO.js";import"./chunk-KGG5EDZN.js";import{Ob as a,Pb as b}from"./chunk-JM6QBNUM.js";import"./chunk-W764RSKQ.js";import"./chunk-SHXBOMIB.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};
+import{Aa as e,Ba as f,Ra as g,Ta as h,a as c,hb as i,ib as j,qb as k,za as d}from"./chunk-EFNU5LXL.js";import"./chunk-SR3TFWQX.js";import"./chunk-GGRVYK4Z.js";import"./chunk-WXWFHOHS.js";import"./chunk-XR4BBXXB.js";import{Ob as a,Pb as b}from"./chunk-7K7RYMWX.js";import"./chunk-VIFNL7HA.js";import"./chunk-HT65FRF4.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};

package/dist/chunks/argument-completer-QDHL2RIP.js

@@ -0,0 +1,2 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import{Ma as a,Na as b}from"./chunk-NX5ZZQJU.js";import"./chunk-OWJR36UP.js";import"./chunk-5DXLNGQB.js";import"./chunk-6XKCJFA4.js";import"./chunk-B6ODREOI.js";import"./chunk-EFNU5LXL.js";import"./chunk-SR3TFWQX.js";import"./chunk-F4WBMJ7S.js";import"./chunk-GGRVYK4Z.js";import"./chunk-WXWFHOHS.js";import"./chunk-XR4BBXXB.js";import"./chunk-7K7RYMWX.js";import"./chunk-VIFNL7HA.js";import"./chunk-HT65FRF4.js";import"./chunk-ONUPGMER.js";export{a as ArgumentCompleter,b as createArgumentCompleter};

package/dist/chunks/{chunk-DWLYVWFJ.js → chunk-5DXLNGQB.js}

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{La as c,lf as o}from"./chunk-JM6QBNUM.js";import{a as n}from"./chunk-ONUPGMER.js";import{readFile as a}from"fs/promises";var i={enabled:!0,triggerPercent:75};async function s(r){let t=c("config.json");try{let e=await f(t);if(e?.compaction)return o({...i,...e.compaction})}catch{}return o(i)}n(s,"loadCompactionConfig");async function f(r){try{let t=await a(r,"utf-8");return JSON.parse(t)}catch{return null}}n(f,"readConfigFile");export{s as a};
+import{La as c,lf as o}from"./chunk-7K7RYMWX.js";import{a as n}from"./chunk-ONUPGMER.js";import{readFile as a}from"fs/promises";var i={enabled:!0,triggerPercent:75};async function s(r){let t=c("config.json");try{let e=await f(t);if(e?.compaction)return o({...i,...e.compaction})}catch{}return o(i)}n(s,"loadCompactionConfig");async function f(r){try{let t=await a(r,"utf-8");return JSON.parse(t)}catch{return null}}n(f,"readConfigFile");export{s as a};