@kodax-ai/kodax 0.7.97-alpha.11 → 0.7.97-alpha.12

package/CHANGELOG.md

@@ -6,6 +6,151 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+### Fixed
+
+- Preserve lexical and physical protected paths across Windows short names;
+  keep missing SSH identities excluded and native cache anchors free of reparse
+  aliases. Replace credential staging DACLs without retaining explicit broad
+  grants. Preserve Undo's native identity and CAS fences while correcting
+  canonical test fixtures and retaining failed sandbox bootstrap diagnostics.
+
+---
+
+## [0.7.97-alpha.12] - 2026-11-01
+
+Twelfth alpha of the v0.7.97 line: public product execution converges on the
+independent shared Host with retired embedded/default construction, inline
+owner switching and function-based external-agent Hosts, plus abandoned-owner
+policy migration with a one-way fence; FEATURE_302 lands native
+provider/OAuth credential parity across the Responses transport, ordered
+history, native cloud protocols, Mistral Pi, native media classification,
+shared file credentials and hidden API-key setup; Claude 5.5 history fragments
+and per-message effort controls join the LLM layer; and the 2026-11-01
+full-chain audit's Windows recovery, credential and permission hardening
+ships. Every v0.7.96 stable and v0.7.97-alpha.1 through alpha.11 contract is
+retained. npm publication remains a manual maintainer action.
+
+### Changed
+
+- Store execution statistics in append-only, Session-root-scoped journals;
+  retain legacy projections and expire pagination cursors after projection
+  recovery. Keep unknown outcomes non-authoritative for execution.
+- Load optional Node CLI auth, doctor, storage maintenance and one-shot
+  components on demand within the existing size reserve; standalone binaries
+  embed those components and public SDK entry points remain unchanged.
+- Add native Claude 5.5 history fragments, ordered thinking/tool blocks,
+  inline tool/system updates and per-message effort controls. Preserve
+  admitted images across restore and keep cache policy out of tool arguments.
+
+- Converge public Runtime ownership on the independent shared Host. Retire
+  embedded/default construction, inline owner switching and function-based
+  in-process external-agent Hosts. Keep the explicit daemon launcher and its
+  new-owner policy bootstrap; independent libraries remain usable.
+- Migrate eligible abandoned owner policies under profile and real Session-root
+  ownership checks. Persist a one-way policy that verified old readers reject,
+  preventing inline rollback after Host idle exit. Live/unknown owners and
+  unsafe Run recovery remain protected; old private unfenced writers must stop
+  and upgrade before sharing data. See the SDK migration guide for breaking
+  API and downgrade limits.
+
+### Fixed
+
+- Refresh rejected OAuth credential generations through the existing broker
+  without replaying the failed request or changing the selected account.
+  Preserve trusted account identity across refresh and fence revoked leases.
+- Publish migration/OAuth/storage lock owners completely; add explicit local
+  inspection, retained backups, repair fences and separately attested recovery
+  for supported damaged ledgers/snapshots and unidentified historical locks.
+- Prevent ambient Anthropic SDK headers from replacing the selected credential;
+  keep unsupported Claude sampling/prefill and hook effort overrides off wire.
+- Preserve explicit non-retryable provider facts through returned child
+  failures while retaining configured fallback for transient HTTP failures.
+- Prevent terminal quota, authentication and explicitly non-retryable child
+  failures from triggering cross-provider fallback. Diagnose retained Session
+  writer locks and lock-record syntax without disclosing owner fields or
+  reclaiming unknown ownership; add a Windows streaming-history PTY CI gate.
+- Keep help, version and read-only doctor available with corrupt configuration;
+  retain execution/write fencing and diagnose exact lock locations without
+  exposing config contents or following directory aliases.
+- Pin Windows CLI-provider child birth identities through delayed exit events
+  and retain captured descendants across intermediate-parent exit.
+- Preserve explicit SDK Skill catalogs, including empty overrides, across SA/AMA
+  learned bindings and compaction. Keep the stricter CLI size reserve using an
+  audited, lazily assembled broker program resource with identical emitted bytes.
+
+- Restore AMA Root learned Skill admission and owned finalization; explicit SDK
+  Skill calls now settle the existing policy and hooks without a model request.
+  Keep empty learned stores off foreground initialization and discover protected
+  formal names when a review actually commits a Skill.
+- Correct verified model ceilings, generic Skill aliases, cache pricing and Kimi
+  cache-write usage; retain default output budgets, fixed IDs and account choices.
+  Project unsupported historical images explicitly without rewriting history.
+- Derive SDK build/type entries from package exports and compile published examples.
+  Share current Runtime guardrail facts while retaining independent minimums.
+  Add explicit storage-capacity inspection and isolate cleanup state by directory.
+- Discover Windows source regressions automatically and retain the native OS gate.
+  Publish complete config/Host lock records, recover verified dead owners without
+  TTL stealing, and retry completed migration/release cleanup. Config and extension
+  publication failures retain original bytes, including legacy credential fields.
+- Isolate corrupt execution statistics, pending inputs and agent event ledgers
+  without replaying unknown effects or discarding queued intent. Retry failed CLI
+  credential bootstrap and load linked OAuth registrations only when selected;
+  preserve profile/account binding, revocation and Host replacement fences.
+- Reject unreadable or invalid existing core configuration in CLI and SDK
+  execution instead of selecting default credentials. Retain the original bytes,
+  permit first-use missing configuration, and retry after explicit repair.
+- Prevent native Anthropic API-key requests from inheriting ambient Bearer auth,
+  and omit unsigned foreign thinking on native Anthropic OAuth tool history.
+  Constrain SDK shell prefix fallback and protect governed Memory mutation at
+  sandbox and obvious direct Host targets. Plan recovery names the actual
+  `exit_plan_mode` approval flow.
+- Ship configuration templates, static prompts and audited native scripts in standalone
+  archives; load the byte-identical native programs lazily within the CLI budget.
+
+- Resolve explicit and queued Skill references against the executing Host's
+  config home, keeping separate Hosts' user Skills and registries isolated.
+- Keep admitted Skill catalogs available under Markdown Agent and SDK profile instructions across Solo, Adaptive and public Runner entries; reuse the bounded catalog formatter for Runtime bindings while preserving complete caller prompt overrides and pinned authorization.
+- Restore already-authorized tool evidence to the next model request when an actual Host/guardrail refusal or failed read makes its saved preview unrecoverable; retain read denials and Run isolation. Unknown Skill errors no longer enumerate hidden or budget-omitted registry entries.
+- Preserve complete MCP/tool results inline when active Skill restrictions or read hooks could block recovery, without speculative hook execution or permission bypasses.
+- Discover project `.agents/skills` and nested Skill collections with native-source precedence, support-directory boundaries and cycle protection; report shadowed sources and bound model Skill catalogs with visible shortening/omission diagnostics.
+- Stabilize executor registration revision fingerprints using normalized JSON
+  content, including persisted and rediscovered registrations.
+- Distinguish POSIX sandbox dependency, interpreter and seccomp diagnostics while
+  preserving authorized once-only host fallback and its actual isolation state.
+- Put standalone Windows Shell commands and environment probes behind a registered
+  Job gate. Verify descendant drain before retiring recovery records; fail cleanup
+  acceptance instead of only warning when verification is unavailable.
+- Compare checkpoint write times at millisecond precision so a filesystem's
+  fractional timestamp cannot discard fresh recovery state as future-dated.
+- Drain admitted Session view and item reads before Host-owner disposal completes,
+  preventing released reads from recreating storage indexes after shutdown.
+
+- Give Partner the selected generic Agent surface without persona-based restrictions.
+  Evaluate explicit policies against the Host catalog, retain metadata ceilings across
+  native/MCP/child routes, and keep allowed Actor lease calls working. Persist and
+  expose actual executable/model tool scopes, including after Host restart.
+  Repeated root recovery preserves original tool ceilings, persona and verification
+  while intersecting fresh authority; arbitrary callbacks still require rebinding.
+
+- Support Partner on the unified Host through trusted Main execution-profile
+  snapshots, intersecting Agent mode with existing profile/tool/lease ceilings.
+  Expose actual Run workMode and honor extension activeTools in effective scope;
+  keep standalone profile compatibility and specialist child declarations.
+- Preserve Actor checkpoint followup across daemon IPC and restart, and route
+  SA Script through its managed executor. Apply live plan effort to actual
+  Provider requests as well as the view.
+- Keep numeric token configuration typed, capture saved output/cache/LSP/tier
+  defaults for new Runs, and expose per-field application boundaries. Clearing
+  defaults cannot revive old bootstrap projections or remove external env values;
+  older Hosts retain unknown application support.
+- Refresh `kodax_manual` topic guidance for retired verification/journal paths,
+  work modes, original tool results, token estimates, task reports, question
+  deadlines, Skill policy and sandbox readiness. Exact query IDs/aliases now
+  take precedence over keyword ranking, preserving custom SDK manual topics.
+- Keep trusted-text, POSIX sandbox and storage-repair test fixtures on
+  canonical temporary roots so macOS runner paths under the `/var` symbolic
+  link satisfy the hardened agent-home and filesystem-alias fences.
+
 ---
 
 ## [0.7.97-alpha.11] - 2026-10-29

package/README.md

@@ -38,15 +38,26 @@
 
 ## Current development after alpha.10
 
-The unreleased source adds Agent / Coding / experimental Script work modes,
-with Coding as the default. Select them with `--work-mode`, `/work-mode`, or
-Product Client Session `workMode`; this is independent of permissions and model
-choice. SDK/Host paths now share the corresponding settings, question outcomes,
-saved original tool reads, structured task reports and estimated-token progress.
-See the [SDK alignment and migration checklist](docs/SDK_MIGRATION.md#2026-10-29-未发布改动对齐)
+The unified Host cutover shipped in the `v0.7.97-alpha.12` tag retires
+`runtimeExitSettlement` and `settleKodaXRuntimeExit()`. Version-labelled
+paragraphs below describe their historical releases; use the [current SDK
+migration guide](docs/SDK_MIGRATION.md) for supported interfaces and
+[provider contracts](docs/LLM_INTEGRATION.md) for credential/account-preserving
+upgrades. Existing SDK/config/API_KEY entries remain.
+
+Agent / Coding / experimental Script work modes ship with Coding as the
+default. Select them with `--work-mode`, `/work-mode`, or Product Client
+Session `workMode`; this is independent of permissions and model choice.
+SDK/Host paths now share the corresponding settings, question outcomes,
+saved original tool reads, structured task reports and estimated-token
+progress. See the [SDK alignment and migration checklist](docs/SDK_MIGRATION.md#2026-10-29-未发布改动对齐)
 and [English integration guide](public_docs/sdk/embedder-guide.md#post-alpha10-sdk-alignment).
-These source additions shipped in the `v0.7.97-alpha.11` tag. Issue 371's
-historical first-read latency and Script model-efficiency acceptance remain open.
+These source additions shipped in the `v0.7.97-alpha.11` tag; the
+`v0.7.97-alpha.12` tag ships the unified shared-Host cutover, the
+FEATURE_302 provider/OAuth credential parity stack, and the 2026-11-01
+full-chain audit's Windows recovery, credential and permission fixes.
+Issue 371's historical first-read latency and Script model-efficiency
+acceptance remain open.
 
 ## Install in 30 seconds
 
@@ -306,10 +317,12 @@ name, not an API key value. Put the custom provider's actual API key in the
 `MY_LLM_API_KEY` environment variable, then close the current terminal and open
 a new one before running `kodax`.
 
+For native OpenAI Responses, add `"api": "responses"` to the custom provider. Omitted `api` keeps Chat Completions. Responses uses client-managed history and preserves ordered output; see [configuration and scope](public_docs/configuration/custom-providers.md#native-responses-api).
+
 `userAgentMode` defaults to `"compat"`, which sends `KodaX` instead of the official SDK User-Agent. Switch it to `"sdk"` only when your gateway expects the upstream SDK header.
 For custom reasoning models, `reasoning: { efforts, default }` is the preferred v0.7.57 shape; use `"reasoning": "none"` for models without thinking capability. SDK hosts should render effort pickers from `reasoningProfile.supportedEfforts` / `defaultEffort` rather than assuming a fixed five-option ladder.
 
-An undeclared OpenAI-compatible reasoning profile means capability is unknown. Omitted effort uses `auto`: the declared default wins, otherwise KodaX tries `max` and lowers only after explicit parameter/value rejection. `none` attempts to disable reasoning, then tries the lowest available thinking effort if disabling is rejected. SDK hosts receive `onReasoningResolved` with the requested effort, sent effort, fallback reasons, and `verified: false`; request acceptance does not prove that the model honored the strength. See [reasoning negotiation](docs/DD.md#23-custom-openai-compatible-reasoning) for cache and replay contracts.
+For the default Chat Completions API, an undeclared OpenAI-compatible reasoning profile means capability is unknown. Omitted effort uses `auto`: the declared default wins, otherwise KodaX tries `max` and lowers only after explicit parameter/value rejection. `none` attempts to disable reasoning, then tries the lowest available thinking effort if disabling is rejected. SDK hosts receive `onReasoningResolved` with the requested effort, sent effort, fallback reasons, and `verified: false`; request acceptance does not prove that the model honored the strength. See [reasoning negotiation](docs/DD.md#23-custom-openai-compatible-reasoning) for cache and replay contracts.
 
 #### OpenAI-compatible reasoning providers
 
@@ -455,7 +468,7 @@ try {
 
 `connectKodaXClient` attaches without starting or replacing a Host. The Node
 connector does not provide browser HTTP/WebSocket transport. The retained
-`/runtime` inline/daemon APIs are for explicit low-level Host integration;
+`/runtime` APIs connect trusted integrations to the same shared Host;
 Worker-hosted embedded Runtime is removed. The following structured-failure
 reference is scoped to that low-level API, not fields promised by Product Client.
 
@@ -497,8 +510,10 @@ See [Structured Runtime failures](public_docs/sdk/embedder-guide.md#structured-c
 for the field contract, taxonomy, migration guidance, and security boundary.
 
 The product CLI uses the shared Host; `--runtime-mode`, `KODAX_RUNTIME_MODE`
-and the `runtimeMode` config key are removed. Explicit low-level inline
-embedding retains private ownership, while daemon clients detach independently.
+and the `runtimeMode` config key are removed. The unreleased Host-only SDK
+cutover also retires public embedded construction and inline owner switching.
+Use `/client` for product execution; daemon clients detach independently.
+See [migration and downgrade limits](docs/SDK_MIGRATION.md#统一-host-sdk-收口未发布).
 Worker-hosted embedded Runtime is no longer an option.
 
 ```bash
@@ -807,6 +822,24 @@ starts, upgrades, or waits. See
 Every v0.7.96 stable and v0.7.97-alpha.1/alpha.2/alpha.3 contract is
 retained.
 
+**v0.7.97-alpha.12 release:** Public product execution converges on the
+independent shared Host — embedded/default Runtime construction, inline
+owner switching and function-based in-process external-agent Hosts are
+retired behind an explicit daemon launcher with one-way abandoned-owner
+policy migration, and `runtimeExitSettlement`/`settleKodaXRuntimeExit()`
+retire. FEATURE_302 provider/OAuth credential parity lands the native
+Responses transport, ordered history, native cloud protocols with scoped
+authentication, Mistral Pi, native media classification, shared file
+credentials bound to actual provider connections and hidden API-key setup;
+Claude 5.5 history fragments and per-message effort controls join the LLM
+layer; manual data moves out of the CLI JavaScript budget; and the
+2026-11-01 full-chain audit's Windows recovery, credential and permission
+hardening ships with lock diagnostics and a Windows streaming-history PTY
+CI gate. Tagging and publication remain separate. See the
+[v0.7.97-alpha.12 release notes](docs/release.md#v0797-alpha12-release-preparation).
+Every v0.7.96 stable and v0.7.97-alpha.1 through alpha.11 contract is
+retained.
+
 **v0.7.97-alpha.11 release:** Explicit Agent, Coding and experimental Script
 work modes land through the CLI, `/work-mode` and managed SDK/Session paths —
 Coding stays the default and Script runs supported leaf tools through the
@@ -1559,7 +1592,7 @@ KodaX has two layers that consumers should understand separately:
 | `packages/repl`   | `@kodax-ai/kodax/repl`    | Full package | Ink TUI + permission modes + commands (217 exports) | Terminal-UI consumers |
 | `packages/repl`   | `@kodax-ai/kodax/session` | **Narrow subset** | Session management only — `listSessions` / `loadFullTranscript` / `appendClientNotice` / `forkSession` / `compactSession` / `watchSessions` / ... (17 exports) | IDE plugins and desktop hosts reading session history |
 | `src`             | `@kodax-ai/kodax/client` | Product API | Shared Host connection and `KodaXProductClient` contract | TUI, desktop/IDE and automation applications |
-| `src`             | `@kodax-ai/kodax/runtime` | Host API | Explicit inline/daemon runtime facade, sessions/runs/events/permissions/catalog/MCP/artifacts/diagnostics/external agents, daemon protocol schema (10 exports) | Trusted Host integration |
+| `src`             | `@kodax-ai/kodax/runtime` | Host API | Shared-Host runtime facade, sessions/runs/events/permissions/catalog/MCP/artifacts/diagnostics/external agents, daemon protocol schema (10 exports) | Trusted Host integration |
 | `src`             | `@kodax-ai/kodax/sandbox` | Host API | Explicit ASRT capability/doctor/setup and host-owned contained command execution; unavailability never means silent ordinary execution | SDK hosts that need standalone process containment |
 | `src`             | `@kodax-ai/kodax/a2a` | Integration edge | A2A 1.0 Agent Card discovery, JSON-RPC/SSE F258 executor, safe fetch policy, and authenticated Runtime-backed Agent server | Agent orchestrators and KodaX hosts |
 
@@ -1585,7 +1618,7 @@ KodaX has two layers that consumers should understand separately:
 
 **Active-Run Interrupt Input (v0.7.74)**: embedded Runtime and the shared daemon advertise `interruptInput:1`. `runtime.runs.submitInput()` queues an immutable, ordered input for the current active Actor Run; all inputs admitted before one safe Runner boundary are delivered FIFO as separate user messages in the next LLM request, without creating continuation Runs. Queued/delivered state is visible in typed Run snapshots/events, delivery is acknowledged against the exact consumed IDs, and terminal cleanup prevents undelivered input from leaking into later Runs.
 
-**External Agent SDK Plane (FEATURE_258, v0.7.67)**: `/agent` exports the protocol-neutral executor, registration, policy, credential-broker, artifact-policy, catalog, and durable task contracts. `/runtime` exposes the installed plane through `admin.agentRegistrations`, `agents`, and `agentTasks`, with the same DTO service methods over embedded and daemon clients. Executor factories are host functions: install them in an inline owner or while creating a new in-process daemon owner; they cannot be injected through an existing daemon connection or across a Runtime Worker boundary. Plane shutdown is terminal: pending waits and all later service calls reject. Restricted Workflow scripts preserve validated `phase` and external `target` routing. See the [complete owner/consumer recipes and safety contract](public_docs/sdk/embedder-guide.md#18-external-agent-executor-plane-feature_258-v0767).
+**External Agent SDK Plane (FEATURE_258, v0.7.67)**: `/agent` exports the protocol-neutral executor, registration, policy, credential-broker, artifact-policy, catalog, and durable task contracts. `/runtime` exposes the installed plane through `admin.agentRegistrations`, `agents`, and `agentTasks`, through the shared Host DTO services. The unified Host cutover retires public executor-factory injection and in-process owner construction. Configure supported A2A agents in the Host; arbitrary executor functions remain a standalone library integration and have no transparent product Host equivalent. Plane shutdown is terminal: pending waits and all later service calls reject. Restricted Workflow scripts preserve validated `phase` and external `target` routing. See the [complete owner/consumer recipes and safety contract](public_docs/sdk/embedder-guide.md#18-external-agent-executor-plane-feature_258-v0767).
 
 **Cost-Disciplined Workflow SDK (FEATURE_259, v0.7.67)**: SDK callers configure run-scoped `modelTiers` and `workflow.maxConcurrency`, while workflow authors express semantic `fast` / `balanced` / `deep` intent. Terminal workflow events expose resolved tier/source/fallback/usage/duration facts, and each durable `run.json` contains an `efficiencyReport` with token coverage, role/tier starts, packet-read topology, review waves, and quality-gate outcomes. See the [routing and telemetry contract](public_docs/sdk/embedder-guide.md#20-cost-disciplined-workflow-routing-and-telemetry-feature_259-v0767).
 
@@ -1593,7 +1626,7 @@ KodaX has two layers that consumers should understand separately:
 
 **Experimental Memory Agent SDK (FEATURE_260 + FEATURE_292)**: `/experimental-memory` exposes the source-compatible `MemoryAgent`/`MemorySession` lifecycle plus the additive `MemoryManagementAgent` facade when `createMemoryAgent()` receives a `MemoryManagementController`. That facade provides governed `list()`, `remember()`, and `forget()` through the same plane used by the conversation-first product surface. Passive recall is zero-wait; `query()` is read-only and deliberate; recalled content stays low-authority, and safety/scope gates remain deterministic. See the [direct session and boundary guide](public_docs/sdk/embedder-guide.md#21-experimental-governed-memory--experimental-memory-feature_260--feature_275--feature_292-v0768v0785).
 
-**Bidirectional A2A 1.0 (FEATURE_267, v0.7.69)**: `/a2a` discovers allowed Agent Cards and installs a JSON-RPC/SSE executor through the existing F258 plane. Configured outbound Agents are also registered automatically as `external:<name>` in embedded CLI and user-daemon Runtimes, so the main Agent can orchestrate them without host code. One `a2a.json` may hold many outbound registrations and at most one inbound server, which publishes either the Runtime default or one validated `~/.kodax/agents/*.md` Agent behind an authenticated Runtime facade. The built-in listener is loopback-only and will not return a port blocked by Fetch-compatible clients; public deployment uses `handle()` behind host-owned TLS and authorization. A2A 0.3, gRPC, HTTP+JSON, push notifications, and automatic public exposure are not advertised. See the [client/server recipes and security boundaries](public_docs/sdk/embedder-guide.md#22-bidirectional-a2a-10--a2a-feature_267-v0769).
+**Bidirectional A2A 1.0 (FEATURE_267, v0.7.69)**: `/a2a` discovers allowed Agent Cards and installs a JSON-RPC/SSE executor through the existing F258 plane. Configured outbound Agents are also registered automatically as `external:<name>` in the shared Host, so the main Agent can orchestrate them without host code. One `a2a.json` may hold many outbound registrations and at most one inbound server, which publishes either the Runtime default or one validated `~/.kodax/agents/*.md` Agent behind an authenticated Runtime facade. The built-in listener is loopback-only and will not return a port blocked by Fetch-compatible clients; public deployment uses `handle()` behind host-owned TLS and authorization. A2A 0.3, gRPC, HTTP+JSON, push notifications, and automatic public exposure are not advertised. See the [client/server recipes and security boundaries](public_docs/sdk/embedder-guide.md#22-bidirectional-a2a-10--a2a-feature_267-v0769).
 
 **A2A interoperability and authentication hardening** keeps a discovered
 interface on the trusted Agent Card origin and sends credentials only when one
@@ -1682,11 +1715,11 @@ later re-enable. Private-address access and non-loopback plaintext HTTP are
 independent, persisted, default-deny permissions (`--allow-private` and
 `--allow-insecure-http`); exact loopback HTTP remains available without either.
 OAuth token endpoints retain their stricter HTTPS-or-exact-loopback rule.
-SDK hosts load this same configured plane by wiring
-`createConfiguredA2ARuntimeIntegration({ configHome })` and passing its
-`runtimeOptions` as `externalAgents` — the CLI does this for its embedded
-sessions and the daemon Host it launches, and the `worker.configuredA2A` opt-in
-was removed with the Worker facade in v0.7.97. `a2a serve` loads
+The shared Host loads this configured plane through its internal
+`createConfiguredA2ARuntimeIntegration({ configHome })` wiring. SDK clients
+connect to that Host; public `externalAgents` function injection is retired.
+The `worker.configuredA2A` opt-in was removed with the Worker facade in v0.7.97.
+`a2a serve` loads
 its configured MCP/Extension capability surface before listening and pins that
 execution authority; it hot-reloads publication, authentication, and limits.
 
@@ -1824,7 +1857,7 @@ import { SkillRegistry } from '@kodax-ai/kodax/skills';         // zero-dep skil
 import { loadConfig } from '@kodax-ai/kodax/repl';              // REPL config / session helpers
 import { createMcpManager } from '@kodax-ai/kodax/mcp';         // MCP popout manager (v0.7.42)
 import { listSessions } from '@kodax-ai/kodax/session';         // session history helpers
-import { createKodaXRuntime } from '@kodax-ai/kodax/runtime';   // embedded/daemon runtime API
+import { ensureKodaXRuntime } from '@kodax-ai/kodax/runtime';   // shared Host runtime API
 import { runKodaXSandboxed } from '@kodax-ai/kodax/sandbox';    // standalone ASRT containment
 import { createKodaXA2AServer } from '@kodax-ai/kodax/a2a';    // A2A 1.0 client/server edge
 import { createMemoryAgent } from '@kodax-ai/kodax/experimental-memory'; // opt-in memory SDK
@@ -1832,7 +1865,7 @@ import { createMemoryAgent } from '@kodax-ai/kodax/experimental-memory'; // opt-
 
 All 14 SDK entries (root + 13 subpaths, including `/client`) share internal code via ESM chunk splitting — importing from `/agent` does not pull in `/repl`'s Ink + React surface.
 
-For the product contract and separate low-level inline/daemon ownership,
+For the product contract and low-level shared Host connections,
 external-agent registration and task control, session cursor pagination, workflow
 model-tier routing, and efficiency telemetry — see the
 [SDK Embedder Integration Guide](public_docs/sdk/embedder-guide.md).
@@ -2156,7 +2189,7 @@ This development tree exposes 17 SDK subpaths plus the root. Shared product
 applications use `@kodax-ai/kodax/client`; independent libraries and trusted Host
 APIs remain available through the other subpaths. See the [Client contract](docs/CLIENT_CONTRACT.md)
 and [SDK migration guide](docs/SDK_MIGRATION.md). This documentation was checked
-against package version `0.7.97-alpha.11`; npm publication is separate from
+against package version `0.7.97-alpha.12`; npm publication is separate from
 the current development-tree contract.
 
 ```bash
@@ -2174,7 +2207,7 @@ import { runInkInteractiveMode } from '@kodax-ai/kodax/repl';     // Ink TUI ent
 import { SkillRegistry } from '@kodax-ai/kodax/skills';           // zero-dep skill loader
 import { createMcpManager } from '@kodax-ai/kodax/mcp';           // MCP popout manager (v0.7.42)
 import { listSessions } from '@kodax-ai/kodax/session';           // session history helpers
-import { createKodaXRuntime } from '@kodax-ai/kodax/runtime';     // embedded/daemon runtime API
+import { ensureKodaXRuntime } from '@kodax-ai/kodax/runtime';     // shared Host runtime API
 import { runKodaXSandboxed } from '@kodax-ai/kodax/sandbox';      // explicit standalone containment
 import { createKodaXA2AServer } from '@kodax-ai/kodax/a2a';      // A2A 1.0 client/server edge
 import { createMemoryAgent } from '@kodax-ai/kodax/experimental-memory'; // opt-in experimental memory SDK

package/README_CN.md

@@ -38,12 +38,18 @@
 
 ## alpha.10 之后的当前开发
 
-未发布源码新增 Agent / Coding / 实验性 Script 工作模式，默认 Coding。
+随 `v0.7.97-alpha.12` 标签发布的统一 Host 收口已退役 `runtimeExitSettlement` 与
+`settleKodaXRuntimeExit()`。下文带版本的发布记录保留历史事实；当前接口以
+[SDK 迁移指南](docs/SDK_MIGRATION.md)为准，凭证与账号保持见
+[接入契约](docs/LLM_INTEGRATION.md)。既有 SDK、配置与 API_KEY 环境入口继续有效。
+
+Agent / Coding / 实验性 Script 工作模式已随 `v0.7.97-alpha.11` 标签发布,默认 Coding。
 CLI 使用 `--work-mode`，REPL 使用 `/work-mode`，Product Client 使用 Session
 `workMode`；它与权限、模型选择独立。SDK/Host 的相关设置、问题结算、工具原文读取、
 结构化任务报告和 token 估算进度已接入对应契约，见
 [SDK 一致性与迁移清单](docs/SDK_MIGRATION.md#2026-10-29-未发布改动对齐)。
-这些源码变更已随 `v0.7.97-alpha.11` 标签发布。
+`v0.7.97-alpha.12` 标签发布统一共享 Host 收口、FEATURE_302 供应商/OAuth 凭据
+对齐栈，以及 2026-11-01 全链路审计的 Windows 恢复、凭据与权限修复。
 Issue 371 的历史首次读取延迟及 Script 模型效率验收仍未关闭。
 
 ## 30 秒上手
@@ -110,7 +116,7 @@ try {
 
 两个产品入口均支持可选 `onStartupProgress` 和共享 `ClientStartupProgress` 类型；新 Host 通过 `initializing/phase` 报告内部初始化步骤，不增加额外探测或等待。启动 `ready` 表示 Client 接口可用；Session 加载与 UI 渲染仍有独立完成边界。详见[启动进度示例](public_docs/sdk/embedder-guide.md#show-local-startup-progress)。
 
-底层 `/runtime` 仍支持显式 inline embedded 与 daemon，供受信任宿主处理凭据桥、Host Tools、启动和诊断；Worker-hosted embedded、通用 operation receipt/journal 已移除。不能在产品连接失败时退回私有 Runtime。下方结构化 Runtime 错误说明仅属于底层接口，不能假定 Product Client 暴露相同字段。
+底层 `/runtime` 连接唯一共享 Host，供受信任客户端处理凭据桥、Host Tools、启动和诊断；Worker-hosted embedded、通用 operation receipt/journal 已移除。不能在产品连接失败时退回私有 Runtime。下方结构化 Runtime 错误说明仅属于底层接口，不能假定 Product Client 暴露相同字段。
 
 ### 结构化且凭据安全的 Runtime 错误
 
@@ -324,6 +330,19 @@ SDK 系统代码契约更新，但没有放宽 shell/sandbox 的 fail-closed 边
 [v0.7.97-alpha.4 发布清单](docs/release.md#v0797-alpha4-release-preparation)。
 所有 v0.7.96 稳定与 v0.7.97-alpha.1/alpha.2/alpha.3 契约全部保留。
 
+**v0.7.97-alpha.12 发布**：公开产品执行收口到独立共享 Host——内嵌/默认
+Runtime 构造、内联 owner 切换与函数式进程内外部 Agent Host 退役，由显式
+daemon 启动器接管，并对废弃 owner 策略做单向迁移;`runtimeExitSettlement`
+与 `settleKodaXRuntimeExit()` 退役。FEATURE_302 供应商/OAuth 凭据对齐落地
+原生 Responses 传输、有序历史、带作用域认证的原生云协议、Mistral Pi、
+原生媒体分类、绑定实际供应商连接的共享文件凭据与隐藏 API Key 配置;
+Claude 5.5 历史片段与逐消息 effort 控制进入 LLM 层;manual 数据移出 CLI
+JavaScript 预算;2026-11-01 全链路审计的 Windows 恢复、凭据与权限加固
+随锁诊断与 Windows 流式历史 PTY CI 门禁一并发布。代码提交、版本标签与
+实际发布分别判断。
+详见 [v0.7.97-alpha.12 发布清单](docs/release.md#v0797-alpha12-release-preparation)。
+所有 v0.7.96 稳定与 v0.7.97-alpha.1 至 alpha.11 契约全部保留。
+
 **v0.7.97-alpha.11 发布**：显式 Agent、Coding 与实验性 Script 工作模式通过
 CLI、`/work-mode` 与托管 SDK/Session 路径落地——Coding 保持默认，Script 在既有
 权限与回执边界内执行受支持的叶子工具。Ark、MiMo、MiniMax 目录刷新推理与容量
@@ -1027,7 +1046,7 @@ import { SkillRegistry } from '@kodax-ai/kodax/skills';         // 零依赖 ski
 import { loadConfig } from '@kodax-ai/kodax/repl';              // REPL 配置 / session 工具
 import { createMcpManager } from '@kodax-ai/kodax/mcp';         // MCP popout manager（v0.7.42 起）
 import { listSessions } from '@kodax-ai/kodax/session';         // session 历史工具
-import { createKodaXRuntime } from '@kodax-ai/kodax/runtime';   // inline/daemon 宿主 API
+import { createKodaXRuntime } from '@kodax-ai/kodax/runtime';   // 共享 Host 连接 API
 import { runKodaXSandboxed } from '@kodax-ai/kodax/sandbox';    // 独立 ASRT 受控执行
 import { createKodaXA2AServer } from '@kodax-ai/kodax/a2a';    // A2A 1.0 双向接入
 import { createMemoryAgent } from '@kodax-ai/kodax/experimental-memory'; // opt-in 实验性记忆 SDK
@@ -1067,11 +1086,13 @@ import { createMemoryAgent } from '@kodax-ai/kodax/experimental-memory'; // opt-
 请把自定义 provider 的真实 API Key 设置到 `MY_LLM_API_KEY` 环境变量中，然后关闭
 当前终端、打开新终端，再运行 `kodax`。
 
+原生 OpenAI Responses 可在自定义 provider 中设置 `"api": "responses"`；省略时保持 Chat Completions。Responses 使用客户端历史并保留输出块顺序；配置方式、离线验证及当前范围见 [Custom Providers](public_docs/configuration/custom-providers.md#native-responses-api)。
+
 `userAgentMode` 默认 `"compat"`（发送 `KodaX` 而非上游 SDK 的 User-Agent）；如果你的网关要求原生 SDK header，再切到 `"sdk"`。
 
 自定义 reasoning 模型优先使用 v0.7.57 的 `reasoning: { efforts, default }`；无 thinking 能力的模型使用 `"reasoning": "none"`。SDK 宿主的 effort 选择器应从 `reasoningProfile.supportedEfforts` / `defaultEffort` 动态生成，不要假定固定五档。
 
-OpenAI-compatible provider 未声明 reasoning profile 表示能力未知。未设置 effort 时使用 `auto`：优先采用已声明默认档，否则从 `max` 开始，仅在明确的参数／档位拒绝后逐档降低。`none` 会尝试关闭；关闭被拒绝后尝试最低可用思考档。SDK 宿主通过 `onReasoningResolved` 收到用户意图、实际发送档位、回退原因和 `verified: false`；请求成功不代表模型已按该强度执行。缓存和推理数据回传规则见[详细设计](docs/DD.md#23-custom-openai-compatible-reasoning)。
+默认 Chat Completions 路径下，OpenAI-compatible provider 未声明 reasoning profile 表示能力未知。未设置 effort 时使用 `auto`：优先采用已声明默认档，否则从 `max` 开始，仅在明确的参数／档位拒绝后逐档降低。`none` 会尝试关闭；关闭被拒绝后尝试最低可用思考档。SDK 宿主通过 `onReasoningResolved` 收到用户意图、实际发送档位、回退原因和 `verified: false`；请求成功不代表模型已按该强度执行。缓存和推理数据回传规则见[详细设计](docs/DD.md#23-custom-openai-compatible-reasoning)。
 
 #### OpenAI 兼容推理模型
 
@@ -1176,7 +1197,7 @@ kodax daemon stop --profile default
 
 daemon 可承载多个 Session；不同 Session 可以并发，同一 Session 的交付由 Host 串行协调。`after_turn` 可在当前 Run 的安全点交付，不必等整个长任务结束。客户端关闭观察或断开连接不会停止 Run。停止任务使用 `runs.stop` 或 `sessions.cancel`；关闭空闲 Host 才使用 `host.shutdown`/daemon stop。
 
-显式独立库嵌入仍可使用 `/runtime` 的 `createKodaXRuntime({mode:'embedded'})`，其 owner 和退出责任属于调用者。这不是 CLI 的可选运行模式，也不是产品客户端的连接失败回退。当前包版本与发布状态见[SDK 迁移指南](docs/SDK_MIGRATION.md)。
+未发布的统一 Host 收口已退役公开 embedded 构造与 inline 所有权切换；完整产品能力统一使用 `/client`。独立 llm/agent/coding 库仍可单独使用。旧状态自动迁移与降级限制见 SDK 迁移指南。当前包版本与发布状态见[SDK 迁移指南](docs/SDK_MIGRATION.md)。
 
 普通 CLI 自动拉起的 Host 在最后一个客户端断开、后台工作持续空闲 30 秒后退出；重新连接会取消空闲退出。显式 `kodax daemon start` 会保留当前 Host，即使它原先是临时 Host；承载已配置 A2A 服务的 Host 也会在没有 CLI 客户端时继续常驻。
 
@@ -1360,7 +1381,7 @@ KodaX 有两层结构，SDK 用户需要分开理解：
 | `packages/repl`   | `@kodax-ai/kodax/repl`    | 完整包 | Ink TUI + 权限模式 + 命令系统 (217 exports) | 终端 UI 消费者 |
 | `packages/repl`   | `@kodax-ai/kodax/session` | **窄子集** | 仅会话管理 —— `listSessions` / `loadFullTranscript` / `appendClientNotice` / `forkSession` / `compactSession` / `watchSessions` 等 (17 exports) | 读取 session 历史的 IDE 插件和桌面宿主 |
 | `src`             | `@kodax-ai/kodax/client` | 产品 API | 共享 Host 连接与 `KodaXProductClient` 统一契约 | TUI、桌面/IDE 和自动化应用 |
-| `src`             | `@kodax-ai/kodax/runtime` | 宿主 API | Explicit inline/daemon facade，含 sessions/runs/events/permissions/catalog/MCP/artifacts/diagnostics/外部 Agent 和 daemon schema (10 exports) | 受信任宿主集成 |
+| `src`             | `@kodax-ai/kodax/runtime` | 宿主 API | Shared-Host facade，含 sessions/runs/events/permissions/catalog/MCP/artifacts/diagnostics/外部 Agent 和 daemon schema (10 exports) | 受信任宿主集成 |
 | `src`             | `@kodax-ai/kodax/sandbox` | 宿主 API | 显式 ASRT capability/doctor/setup 与宿主自有受控命令执行；不可用时绝不静默普通执行 | 需要独立进程 containment 的 SDK 宿主 |
 | `src`             | `@kodax-ai/kodax/a2a` | 集成边界 | A2A 1.0 Agent Card 发现、JSON-RPC/SSE F258 executor、安全 fetch 与鉴权 Runtime Agent server | Agent 编排器和 KodaX 宿主 |
 
@@ -1455,9 +1476,9 @@ MCP、A2A、Extension 分别使用 `~/.kodax/integrations/` 下的一个用户
 停用条目可随时重新启用。私网地址访问与非 loopback 明文 HTTP 是两项独立、
 持久化且默认拒绝的权限（`--allow-private` 与 `--allow-insecure-http`）；精确
 loopback HTTP 无需这两项授权。OAuth token endpoint 仍保持更严格的
-HTTPS 或精确 loopback 规则。SDK 宿主通过 `createConfiguredA2ARuntimeIntegration({ configHome })` 装载同一
-配置执行平面，并把其 `runtimeOptions` 作为 `externalAgents` 传入——CLI 为其嵌入式
-会话和它启动的 daemon Host 完成同样的接线；`worker.configuredA2A` 选项已随
+HTTPS 或精确 loopback 规则。共享 Host 在内部通过 `createConfiguredA2ARuntimeIntegration({ configHome })`
+装载配置执行平面；SDK 客户端连接这个 Host，公开 `externalAgents` 函数注入已退役。
+`worker.configuredA2A` 选项已随
 Worker facade 在 v0.7.97 移除。
 `a2a serve` 会在监听前装载已配置的 MCP/Extension 能力并固定执行权威，同时热加载
 公开信息、鉴权和限额。Agent、Skill、Extension 工具权威、工作区、tool policy
@@ -1483,7 +1504,7 @@ REPL 显示、唤醒或消费。
 
 当前源码中，`kodax -r` 按最近真实对话消息排序并显示对应时间，旧记录缺少可靠消息时间时回退创建时间。SDK 的 `lastMessageAt`、Host 列表与选择器共用规则；标题、设置、Actor 保存和压缩不刷新对话时间。共享 Host 在取得所有权后统一恢复历史进程，连接客户端不重复清扫；加载提示继续使用统一启动进度契约。
 
-**外部 Agent SDK plane（FEATURE_258，v0.7.67）**：`/agent` 导出协议中立的 executor、registration、policy、credential broker、artifact policy、catalog 和 durable task 契约；`/runtime` 通过 `admin.agentRegistrations`、`agents`、`agentTasks` 向 embedded 与 daemon client 提供同一组 DTO API。Executor factory 是宿主函数，只能装入 inline owner，或在创建新的 in-process daemon owner 时装入；不能通过既有 daemon 连接或 Runtime Worker 边界注入。Plane 关闭后是终态：未完成的 wait 和后续所有服务调用都会拒绝；受限 Workflow 脚本会完整校验并传递 `phase` 与外部 `target`。完整所有权、注册、preflight、启动/等待/继续/取消/对账和安全边界见 [SDK Embedder Guide §18](public_docs/sdk/embedder-guide.md#18-external-agent-executor-plane-feature_258-v0767)。
+**外部 Agent SDK plane（FEATURE_258，v0.7.67）**：`/agent` 导出协议中立的 executor、registration、policy、credential broker、artifact policy、catalog 和 durable task 契约；`/runtime` 通过 `admin.agentRegistrations`、`agents`、`agentTasks` 向共享 Host 客户端提供 DTO API。统一 Host 收口退役公开 executor factory 注入和进程内 owner 构造；支持的 A2A Agent 通过 Host 配置接入。任意 executor 函数仍可用于独立库，但没有透明等价的产品 Host API。Plane 关闭后是终态：未完成的 wait 和后续所有服务调用都会拒绝；受限 Workflow 脚本会完整校验并传递 `phase` 与外部 `target`。完整所有权、注册、preflight、启动/等待/继续/取消/对账和安全边界见 [SDK Embedder Guide §18](public_docs/sdk/embedder-guide.md#18-external-agent-executor-plane-feature_258-v0767)。
 
 **成本受控 Workflow SDK（FEATURE_259，v0.7.67）**：SDK 调用方用 run-scoped `modelTiers` 与 `workflow.maxConcurrency` 配置路由和并发，workflow 作者只表达 `fast` / `balanced` / `deep` 语义意图。terminal workflow event 回显 tier/source/fallback/usage/duration，持久化 `run.json.efficiencyReport` 给出 token coverage、role/tier 启动数、packet-read 拓扑、review wave 和 quality gate 结果。完整配置与遥测读取方式见 [SDK Embedder Guide §20](public_docs/sdk/embedder-guide.md#20-cost-disciplined-workflow-routing-and-telemetry-feature_259-v0767)。
 

package/dist/builtin/skill-creator/scripts/analyze-benchmark.d.ts

@@ -6,6 +6,8 @@ export interface AnalyzeBenchmarkOptions {
   skillName?: string;
   provider?: string;
   model?: string;
+  effort?: string;
+  /** @deprecated Use effort. */
   reasoningMode?: string;
   maxIter?: number;
   cwd?: string;

package/dist/builtin/skill-creator/scripts/analyze-benchmark.js

@@ -123,8 +123,8 @@ async function defaultRunAnalyst(prompt, options) {
       provider: options.provider ?? 'anthropic',
       model: options.model,
       maxIter: options.maxIter ?? 20,
-      reasoningMode: options.reasoningMode ?? 'balanced',
-      thinking: options.reasoningMode ? options.reasoningMode !== 'off' : true,
+      effort: options.effort ?? (options.reasoningMode ? undefined : 'medium'),
+      reasoningMode: options.reasoningMode,
       context: {
         gitRoot: path.resolve(options.cwd ?? options.workspaceDir ?? process.cwd()),
       },
@@ -232,7 +232,8 @@ function parseArgs(argv) {
     skillName: undefined,
     provider: 'anthropic',
     model: undefined,
-    reasoningMode: 'balanced',
+    effort: undefined,
+    reasoningMode: undefined,
     maxIter: 20,
     cwd: process.cwd(),
   };
@@ -251,6 +252,8 @@ function parseArgs(argv) {
       args.provider = argv[++index];
     } else if (token === '--model' && argv[index + 1]) {
       args.model = argv[++index];
+    } else if (token === '--effort' && argv[index + 1]) {
+      args.effort = argv[++index];
     } else if (token === '--reasoning' && argv[index + 1]) {
       args.reasoningMode = argv[++index];
     } else if (token === '--max-iter' && argv[index + 1]) {

package/dist/builtin/skill-creator/scripts/compare-runs.d.ts

@@ -6,6 +6,8 @@ export interface CompareWorkspaceOptions {
   markdownPath?: string;
   provider?: string;
   model?: string;
+  effort?: string;
+  /** @deprecated Use effort. */
   reasoningMode?: string;
   maxIter?: number;
   maxPairs?: number;

package/dist/builtin/skill-creator/scripts/compare-runs.js

@@ -124,8 +124,8 @@ async function defaultRunComparator(prompt, options) {
       provider: options.provider ?? 'anthropic',
       model: options.model,
       maxIter: options.maxIter ?? 20,
-      reasoningMode: options.reasoningMode ?? 'balanced',
-      thinking: options.reasoningMode ? options.reasoningMode !== 'off' : true,
+      effort: options.effort ?? (options.reasoningMode ? undefined : 'medium'),
+      reasoningMode: options.reasoningMode,
       context: {
         gitRoot: path.resolve(options.cwd ?? options.workspaceDir ?? process.cwd()),
       },
@@ -273,7 +273,8 @@ function parseArgs(argv) {
     markdownPath: undefined,
     provider: 'anthropic',
     model: undefined,
-    reasoningMode: 'balanced',
+    effort: undefined,
+    reasoningMode: undefined,
     maxIter: 20,
     maxPairs: undefined,
     cwd: process.cwd(),
@@ -293,6 +294,8 @@ function parseArgs(argv) {
       args.provider = argv[++index];
     } else if (token === '--model' && argv[index + 1]) {
       args.model = argv[++index];
+    } else if (token === '--effort' && argv[index + 1]) {
+      args.effort = argv[++index];
     } else if (token === '--reasoning' && argv[index + 1]) {
       args.reasoningMode = argv[++index];
     } else if (token === '--max-iter' && argv[index + 1]) {

package/dist/builtin/skill-creator/scripts/grade-evals.d.ts

@@ -2,6 +2,8 @@ export interface GradeWorkspaceOptions {
   workspaceDir: string;
   provider?: string;
   model?: string;
+  effort?: string;
+  /** @deprecated Use effort. */
   reasoningMode?: string;
   maxIter?: number;
   cwd?: string;

package/dist/builtin/skill-creator/scripts/grade-evals.js

@@ -216,8 +216,8 @@ async function defaultRunJudge(prompt, options) {
       provider: options.provider ?? 'anthropic',
       model: options.model,
       maxIter: options.maxIter ?? 20,
-      reasoningMode: options.reasoningMode ?? 'balanced',
-      thinking: options.reasoningMode ? options.reasoningMode !== 'off' : true,
+      effort: options.effort ?? (options.reasoningMode ? undefined : 'medium'),
+      reasoningMode: options.reasoningMode,
       context: {
         gitRoot: path.resolve(options.cwd ?? options.workspaceDir ?? process.cwd()),
       },
@@ -351,7 +351,8 @@ function parseArgs(argv) {
     workspaceDir: argv[2] ?? '',
     provider: 'anthropic',
     model: undefined,
-    reasoningMode: 'balanced',
+    effort: undefined,
+    reasoningMode: undefined,
     maxIter: 20,
     cwd: process.cwd(),
     overwrite: false,
@@ -364,6 +365,8 @@ function parseArgs(argv) {
       args.provider = argv[++index];
     } else if (token === '--model' && argv[index + 1]) {
       args.model = argv[++index];
+    } else if (token === '--effort' && argv[index + 1]) {
+      args.effort = argv[++index];
     } else if (token === '--reasoning' && argv[index + 1]) {
       args.reasoningMode = argv[++index];
     } else if (token === '--max-iter' && argv[index + 1]) {

package/dist/builtin/skill-creator/scripts/utils.d.ts

@@ -1,3 +1,3 @@
 export declare function setKodaXSDKForSkillCreator(
-  sdk: Readonly<Record<string, unknown>>,
+  sdk: Readonly<Record<string, unknown>> | null,
 ): void;

package/dist/chunks/agent-B67Z5NYD.js

@@ -0,0 +1,2 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import{Ba as d,Ca as e,Da as f,Fb as k,_a as g,ab as h,xb as i,yb as j}from"./chunk-NDPUJYIV.js";import"./chunk-HA4IKFUK.js";import"./chunk-2SID5SIQ.js";import"./chunk-TPVXGOHR.js";import"./chunk-4Y6U7AH4.js";import{a as c}from"./chunk-NHIPHFUQ.js";import"./chunk-ISLK6R2P.js";import"./chunk-CONB6PL7.js";import"./chunk-IIRJKNYL.js";import"./chunk-MJ4IGUD4.js";import"./chunk-GZUWQZJD.js";import"./chunk-ED7D73C3.js";import"./chunk-65652LR4.js";import"./chunk-SVVOSPL5.js";import{Jb as a,Kb as b}from"./chunk-XJ5SZVDT.js";import"./chunk-E2Z754K5.js";import"./chunk-A3SLNYBB.js";import"./chunk-4KR4VUZK.js";import"./chunk-52EN2777.js";import"./chunk-WMMESRP3.js";import"./chunk-UF3GZ5PO.js";import"./chunk-QP47JIWP.js";import"./chunk-KE2NBMAP.js";import"./chunk-V5RCDBKU.js";import"./chunk-KDLOPBFZ.js";import"./chunk-V4WSBIXB.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};

package/dist/chunks/agent-adapter-QTR7T3R3.js

@@ -0,0 +1,2 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import{a,b}from"./chunk-GVL7KINO.js";import"./chunk-TPVXGOHR.js";import"./chunk-CONB6PL7.js";import"./chunk-GZUWQZJD.js";import"./chunk-65652LR4.js";import"./chunk-SVVOSPL5.js";import"./chunk-XJ5SZVDT.js";import"./chunk-E2Z754K5.js";import"./chunk-A3SLNYBB.js";import"./chunk-4KR4VUZK.js";import"./chunk-52EN2777.js";import"./chunk-WMMESRP3.js";import"./chunk-UF3GZ5PO.js";import"./chunk-QP47JIWP.js";import"./chunk-KE2NBMAP.js";import"./chunk-V5RCDBKU.js";import"./chunk-KDLOPBFZ.js";import"./chunk-V4WSBIXB.js";export{b as createCodingWorkflowBackend,a as resumeWorkflowGenerationTurn};

package/dist/chunks/argument-completer-GHXAPEBM.js

@@ -0,0 +1,2 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import{ab as a,bb as b}from"./chunk-JW3IVTSG.js";import"./chunk-ZQYWDI4O.js";import"./chunk-3QRPXPPK.js";import"./chunk-FAXYF5MT.js";import"./chunk-5I6ONBH5.js";import"./chunk-SBZE5D4C.js";import"./chunk-S2Y2YCOQ.js";import"./chunk-GVL7KINO.js";import"./chunk-NB43CHZ4.js";import"./chunk-ZQNRD3KD.js";import"./chunk-NDPUJYIV.js";import"./chunk-HA4IKFUK.js";import"./chunk-2SID5SIQ.js";import"./chunk-TPVXGOHR.js";import"./chunk-4Y6U7AH4.js";import"./chunk-NHIPHFUQ.js";import"./chunk-ISLK6R2P.js";import"./chunk-CONB6PL7.js";import"./chunk-IIRJKNYL.js";import"./chunk-MJ4IGUD4.js";import"./chunk-GZUWQZJD.js";import"./chunk-ED7D73C3.js";import"./chunk-65652LR4.js";import"./chunk-SVVOSPL5.js";import"./chunk-XJ5SZVDT.js";import"./chunk-E2Z754K5.js";import"./chunk-A3SLNYBB.js";import"./chunk-4KR4VUZK.js";import"./chunk-52EN2777.js";import"./chunk-WMMESRP3.js";import"./chunk-UF3GZ5PO.js";import"./chunk-QP47JIWP.js";import"./chunk-KE2NBMAP.js";import"./chunk-V5RCDBKU.js";import"./chunk-KDLOPBFZ.js";import"./chunk-V4WSBIXB.js";export{a as ArgumentCompleter,b as createArgumentCompleter};