@kyo-so/cli 0.16.1 → 0.16.2

package/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.16.2] - 2026-08-01
+
+### Changed
+
+- Promote the Marketplace Plugin to `0.7.9` and pin its Codex and Claude Code
+  MCP definitions and Skill fallbacks to `@kyo-so/cli@0.16.1`.
+- Update the default Claude ACP adapter to
+  `@agentclientprotocol/claude-agent-acp@0.63.0`.
+- Update `smol-toml` to `1.7.1` and `@modelcontextprotocol/server` to the
+  stable `2.0.0` release.
+
 ## [0.16.1] - 2026-07-28
 
 ### Changed

package/README.ja.md

@@ -154,7 +154,7 @@ Use Kyoso diff_review on the current diff. I need a second opinion before mergin
 
 ## CLI
 
-package-runner の実行経路では、package と executable を必ず別指定します: `npx -y --package=@kyo-so/cli kyoso` と `bunx --package @kyo-so/cli kyoso` です。workflowで固定する場合は、`@kyo-so/cli@0.16.0` のようにpackage名へcomplete SemVer pinを付けます。以下の例の `kyoso` は、すでにインストールされた executable の省略形です。Naming note: npm パッケージは `@kyo-so/cli` (製品名 Kyo-so に対応) で、インストールされる CLI コマンドは短い `kyoso` です。
+package-runner の実行経路では、package と executable を必ず別指定します: `npx -y --package=@kyo-so/cli kyoso` と `bunx --package @kyo-so/cli kyoso` です。workflowで固定する場合は、`@kyo-so/cli@0.16.1` のようにpackage名へcomplete SemVer pinを付けます。以下の例の `kyoso` は、すでにインストールされた executable の省略形です。Naming note: npm パッケージは `@kyo-so/cli` (製品名 Kyo-so に対応) で、インストールされる CLI コマンドは短い `kyoso` です。
 
 Bun fallback は Bun `1.3.14` で検証済みです。古い Bun では npx 形式またはインストール済みの `kyoso` を使い、複数bin packageからの Bun のbinary推論に依存しないでください。
 

package/README.md

@@ -152,7 +152,7 @@ Manual setup examples are kept in `examples/codex-config.toml` and `examples/cla
 
 ## CLI
 
-The package-runner execution paths always select the package and executable separately: `npx -y --package=@kyo-so/cli kyoso` and `bunx --package @kyo-so/cli kyoso`. Add a complete SemVer pin after the package name when a workflow needs one, for example `@kyo-so/cli@0.16.0`. The examples below abbreviate an already installed executable as `kyoso`. Naming note: the npm package is `@kyo-so/cli` (matching the product name Kyo-so), while the installed CLI command is the shorter `kyoso`.
+The package-runner execution paths always select the package and executable separately: `npx -y --package=@kyo-so/cli kyoso` and `bunx --package @kyo-so/cli kyoso`. Add a complete SemVer pin after the package name when a workflow needs one, for example `@kyo-so/cli@0.16.1`. The examples below abbreviate an already installed executable as `kyoso`. Naming note: the npm package is `@kyo-so/cli` (matching the product name Kyo-so), while the installed CLI command is the shorter `kyoso`.
 
 The Bun fallback is verified on Bun `1.3.14`. On an older Bun, use the npx form or an installed `kyoso`; do not rely on Bun inferring a binary from a multi-bin package.
 

package/README.zh-CN.md

@@ -154,7 +154,7 @@ Use Kyoso diff_review on the current diff. I need a second opinion before mergin
 
 ## CLI
 
-package-runner 执行路径始终分别指定 package 和 executable：`npx -y --package=@kyo-so/cli kyoso` 与 `bunx --package @kyo-so/cli kyoso`。需要固定 workflow 时，在 package 名后加 complete SemVer pin，例如 `@kyo-so/cli@0.16.0`。下面的示例把已安装 executable 简写为 `kyoso`。Naming note: npm package 是 `@kyo-so/cli` (对应产品名 Kyo-so)，安装后的 CLI command 是更短的 `kyoso`。
+package-runner 执行路径始终分别指定 package 和 executable：`npx -y --package=@kyo-so/cli kyoso` 与 `bunx --package @kyo-so/cli kyoso`。需要固定 workflow 时，在 package 名后加 complete SemVer pin，例如 `@kyo-so/cli@0.16.1`。下面的示例把已安装 executable 简写为 `kyoso`。Naming note: npm package 是 `@kyo-so/cli` (对应产品名 Kyo-so)，安装后的 CLI command 是更短的 `kyoso`。
 
 Bun fallback 已在 Bun `1.3.14` 上验证。旧版 Bun 请使用 npx 形式或已安装的 `kyoso`，不要依赖 Bun 从多 bin package 推断 binary。
 

package/dist/bin/kyoso.js

@@ -183964,7 +183964,7 @@ var JUDGE_MAX_OUTPUT_TOKENS = 4096;
 var RAW_OUTPUT_MAX_CHARS = 16384;
 var TRACE_DIR = ".kyoso/traces";
 var KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-var KYOSO_VERSION = "0.16.1";
+var KYOSO_VERSION = "0.16.2";
 
 // src/utils/pathContainment.ts
 import { resolve, sep as sep2 } from "node:path";
@@ -184294,7 +184294,7 @@ var defaultConfig = {
       enabled: true,
       type: "acp",
       command: "npx",
-      args: ["-y", "@agentclientprotocol/claude-agent-acp@0.62.0"],
+      args: ["-y", "@agentclientprotocol/claude-agent-acp@0.63.0"],
       role: "architecture_security_reviewer",
       timeoutMs: DEFAULT_AGENT_TIMEOUT_MS,
       env: {
@@ -185460,6 +185460,8 @@ function skipUntil(str, ptr, sep3, end, banNewLines = false) {
     let c = str[i];
     if (c === "#") {
       i = indexOfNewline(str, i);
+      if (i < 0)
+        break;
     } else if (c === sep3) {
       return i + 1;
     } else if (c === end || banNewLines && (c === `
@@ -187305,9 +187307,9 @@ var PLUGIN_RUNTIME_COMPATIBILITY_SCHEMA_VERSION = 2;
 var MINIMUM_SUPPORTED_CODEX_VERSION = "0.144.0-alpha.4";
 var PLUGIN_RUNTIME_EXPECTED_CONTRACT = {
   distribution: {
-    pluginVersion: "0.7.8",
+    pluginVersion: "0.7.9",
     mcpCommand: "npx",
-    mcpPackagePin: "@kyo-so/cli@0.16.0",
+    mcpPackagePin: "@kyo-so/cli@0.16.1",
     mcpExecutable: "kyoso"
   },
   marketplace: {
@@ -197148,6 +197150,27 @@ var __toESM2 = (mod, isNodeMode, target) => (target = mod != null ? __create2(__
   enumerable: true
 }) : target, mod));
 
+// node_modules/@modelcontextprotocol/server/dist/dialects-DoSzNhcb.mjs
+var DRAFT_2020_12_URIS = new Set(["https://json-schema.org/draft/2020-12/schema", "http://json-schema.org/draft/2020-12/schema"]);
+var DRAFT_2019_09_URIS = new Set(["https://json-schema.org/draft/2019-09/schema", "http://json-schema.org/draft/2019-09/schema"]);
+var DRAFT_07_URIS = new Set(["https://json-schema.org/draft-07/schema", "http://json-schema.org/draft-07/schema"]);
+var DRAFT_06_URIS = new Set(["https://json-schema.org/draft-06/schema", "http://json-schema.org/draft-06/schema"]);
+function declares2019Dialect($schema) {
+  return typeof $schema === "string" && DRAFT_2019_09_URIS.has($schema.replace(/#$/, ""));
+}
+function declaredDialect(schema, remedy) {
+  if (!("$schema" in schema) || typeof schema.$schema !== "string")
+    return "2020-12";
+  const declared = schema.$schema.replace(/#$/, "");
+  if (DRAFT_2020_12_URIS.has(declared))
+    return "2020-12";
+  if (DRAFT_2019_09_URIS.has(declared))
+    return "2019-09";
+  if (DRAFT_07_URIS.has(declared) || DRAFT_06_URIS.has(declared))
+    return "draft-7";
+  throw new Error(`JSON Schema declares an unsupported dialect ("$schema": "${schema.$schema.slice(0, 200)}"). The default validator supports JSON Schema 2020-12, 2019-09, draft-07, and draft-06; ${remedy}`);
+}
+
 // node_modules/@modelcontextprotocol/core/dist/auth-CUe6YdwF.mjs
 var LATEST_PROTOCOL_VERSION = "2025-11-25";
 var SUPPORTED_PROTOCOL_VERSIONS = [
@@ -198089,7 +198112,7 @@ var OAuthTokenRevocationRequestSchema = object({
   token_type_hint: string2().optional()
 }).strip();
 
-// node_modules/@modelcontextprotocol/server/dist/src-D86MbS1I.mjs
+// node_modules/@modelcontextprotocol/server/dist/src-CX2iR2pK.mjs
 var BRANDS = Symbol.for("mcp.sdk.errorBrands");
 function stampErrorBrands(instance, ctor) {
   const brands = /* @__PURE__ */ new Set;
@@ -199186,36 +199209,49 @@ var REF_REWRITE_NAME_MAP_KEYS = new Set([
   "patternProperties",
   "$defs",
   "definitions",
-  "dependentSchemas"
+  "dependentSchemas",
+  "dependencies"
 ]);
+function establishesNewBase(id) {
+  return id !== undefined && !(typeof id === "string" && id.startsWith("#"));
+}
 function wrapOutputSchemaForLegacy(natural) {
   const $schema = typeof natural["$schema"] === "string" ? natural["$schema"] : undefined;
-  if (natural["$id"] !== undefined)
+  if (establishesNewBase(natural["$id"]))
     return {
       ...$schema !== undefined && { $schema },
       type: "object",
       properties: { result: natural },
       required: ["result"]
     };
+  const convertRecursiveRefs = declares2019Dialect(natural["$schema"]) && natural["$recursiveAnchor"] !== true;
   const rewriteRefs = (node, parentIsNameMap) => {
     if (Array.isArray(node))
       return node.map((item) => rewriteRefs(item, false));
     if (node === null || typeof node !== "object")
       return node;
-    if (!parentIsNameMap && node["$id"] !== undefined)
+    if (!parentIsNameMap && establishesNewBase(node["$id"]))
       return node;
     const out = {};
+    let convertedRecursion = false;
     for (const [k, v] of Object.entries(node))
       if (parentIsNameMap)
         out[k] = rewriteRefs(v, false);
       else if ((k === "$ref" || k === "$dynamicRef") && typeof v === "string")
         out[k] = v === "#" ? "#/properties/result" : v.startsWith("#/") ? `#/properties/result${v.slice(1)}` : v;
+      else if (k === "$recursiveRef" && v === "#" && convertRecursiveRefs)
+        convertedRecursion = true;
       else if (REF_REWRITE_DATA_POSITION_KEYS.has(k))
         out[k] = v;
       else if (REF_REWRITE_NAME_MAP_KEYS.has(k))
         out[k] = rewriteRefs(v, true);
       else
         out[k] = rewriteRefs(v, false);
+    if (convertedRecursion)
+      if ("$ref" in out)
+        out["allOf"] = [...Array.isArray(out["allOf"]) ? out["allOf"] : [], { $ref: "#/properties/result" }];
+      else
+        out["$ref"] = "#/properties/result";
     return out;
   };
   return {
@@ -202635,7 +202671,7 @@ function normalizeRawShapeSchema(schema) {
   return schema;
 }
 
-// node_modules/@modelcontextprotocol/server/dist/ajvProvider-CplOkyLC.mjs
+// node_modules/@modelcontextprotocol/server/dist/ajvProvider-CEoC__sr.mjs
 var require_code$1 = /* @__PURE__ */ __commonJSMin((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.regexpCode = exports.getEsmExportName = exports.getProperty = exports.safeStringify = exports.stringify = exports.strConcat = exports.addCodeArg = exports.str = exports._ = exports.nil = exports._Code = exports.Name = exports.IDENTIFIER = exports._CodeOrName = undefined;
@@ -206233,7 +206269,7 @@ var require_uri = /* @__PURE__ */ __commonJSMin((exports) => {
   uri.code = 'require("ajv/dist/runtime/uri").default';
   exports.default = uri;
 });
-var require_core$2 = /* @__PURE__ */ __commonJSMin((exports) => {
+var require_core$3 = /* @__PURE__ */ __commonJSMin((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CodeGen = exports.Name = exports.nil = exports.stringify = exports.str = exports._ = exports.KeywordCxt = undefined;
   var validate_1 = require_validate();
@@ -206990,7 +207026,7 @@ var require_ref = /* @__PURE__ */ __commonJSMin((exports) => {
   exports.callRef = callRef;
   exports.default = def;
 });
-var require_core$1 = /* @__PURE__ */ __commonJSMin((exports) => {
+var require_core$2 = /* @__PURE__ */ __commonJSMin((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const id_1 = require_id();
   const ref_1 = require_ref();
@@ -207401,7 +207437,7 @@ var require_enum = /* @__PURE__ */ __commonJSMin((exports) => {
   };
   exports.default = def;
 });
-var require_validation$1 = /* @__PURE__ */ __commonJSMin((exports) => {
+var require_validation$2 = /* @__PURE__ */ __commonJSMin((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const limitNumber_1 = require_limitNumber();
   const multipleOf_1 = require_multipleOf();
@@ -208190,7 +208226,7 @@ var require_thenElse = /* @__PURE__ */ __commonJSMin((exports) => {
   };
   exports.default = def;
 });
-var require_applicator$1 = /* @__PURE__ */ __commonJSMin((exports) => {
+var require_applicator$2 = /* @__PURE__ */ __commonJSMin((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const additionalItems_1 = require_additionalItems();
   const prefixItems_1 = require_prefixItems();
@@ -208231,7 +208267,7 @@ var require_applicator$1 = /* @__PURE__ */ __commonJSMin((exports) => {
   }
   exports.default = getApplicator;
 });
-var require_format$1 = /* @__PURE__ */ __commonJSMin((exports) => {
+var require_format$2 = /* @__PURE__ */ __commonJSMin((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   const codegen_1 = require_codegen();
   const def = {
@@ -208326,9 +208362,9 @@ var require_format$1 = /* @__PURE__ */ __commonJSMin((exports) => {
   };
   exports.default = def;
 });
-var require_format = /* @__PURE__ */ __commonJSMin((exports) => {
+var require_format$1 = /* @__PURE__ */ __commonJSMin((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  const format = [require_format$1().default];
+  const format = [require_format$2().default];
   exports.default = format;
 });
 var require_metadata = /* @__PURE__ */ __commonJSMin((exports) => {
@@ -208351,10 +208387,10 @@ var require_metadata = /* @__PURE__ */ __commonJSMin((exports) => {
 });
 var require_draft7 = /* @__PURE__ */ __commonJSMin((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  const core_1 = require_core$1();
-  const validation_1 = require_validation$1();
-  const applicator_1 = require_applicator$1();
-  const format_1 = require_format();
+  const core_1 = require_core$2();
+  const validation_1 = require_validation$2();
+  const applicator_1 = require_applicator$2();
+  const format_1 = require_format$1();
   const metadata_1 = require_metadata();
   const draft7Vocabularies = [
     core_1.default,
@@ -208619,7 +208655,7 @@ var require_json_schema_draft_07 = /* @__PURE__ */ __commonJSMin((exports, modul
 var require_ajv = /* @__PURE__ */ __commonJSMin((exports, module) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.MissingRefError = exports.ValidationError = exports.CodeGen = exports.Name = exports.nil = exports.stringify = exports.str = exports._ = exports.KeywordCxt = exports.Ajv = undefined;
-  const core_1 = require_core$2();
+  const core_1 = require_core$3();
   const draft7_1 = require_draft7();
   const discriminator_1 = require_discriminator();
   const draft7MetaSchema = require_json_schema_draft_07();
@@ -208981,15 +209017,420 @@ var require_unevaluated$1 = /* @__PURE__ */ __commonJSMin((exports) => {
   const unevaluated = [unevaluatedProperties_1.default, unevaluatedItems_1.default];
   exports.default = unevaluated;
 });
+var require_schema$1 = /* @__PURE__ */ __commonJSMin((exports, module) => {
+  module.exports = {
+    $schema: "https://json-schema.org/draft/2019-09/schema",
+    $id: "https://json-schema.org/draft/2019-09/schema",
+    $vocabulary: {
+      "https://json-schema.org/draft/2019-09/vocab/core": true,
+      "https://json-schema.org/draft/2019-09/vocab/applicator": true,
+      "https://json-schema.org/draft/2019-09/vocab/validation": true,
+      "https://json-schema.org/draft/2019-09/vocab/meta-data": true,
+      "https://json-schema.org/draft/2019-09/vocab/format": false,
+      "https://json-schema.org/draft/2019-09/vocab/content": true
+    },
+    $recursiveAnchor: true,
+    title: "Core and Validation specifications meta-schema",
+    allOf: [
+      { $ref: "meta/core" },
+      { $ref: "meta/applicator" },
+      { $ref: "meta/validation" },
+      { $ref: "meta/meta-data" },
+      { $ref: "meta/format" },
+      { $ref: "meta/content" }
+    ],
+    type: ["object", "boolean"],
+    properties: {
+      definitions: {
+        $comment: "While no longer an official keyword as it is replaced by $defs, this keyword is retained in the meta-schema to prevent incompatible extensions as it remains in common use.",
+        type: "object",
+        additionalProperties: { $recursiveRef: "#" },
+        default: {}
+      },
+      dependencies: {
+        $comment: '"dependencies" is no longer a keyword, but schema authors should avoid redefining it to facilitate a smooth transition to "dependentSchemas" and "dependentRequired"',
+        type: "object",
+        additionalProperties: { anyOf: [{ $recursiveRef: "#" }, { $ref: "meta/validation#/$defs/stringArray" }] }
+      }
+    }
+  };
+});
+var require_applicator$1 = /* @__PURE__ */ __commonJSMin((exports, module) => {
+  module.exports = {
+    $schema: "https://json-schema.org/draft/2019-09/schema",
+    $id: "https://json-schema.org/draft/2019-09/meta/applicator",
+    $vocabulary: { "https://json-schema.org/draft/2019-09/vocab/applicator": true },
+    $recursiveAnchor: true,
+    title: "Applicator vocabulary meta-schema",
+    type: ["object", "boolean"],
+    properties: {
+      additionalItems: { $recursiveRef: "#" },
+      unevaluatedItems: { $recursiveRef: "#" },
+      items: { anyOf: [{ $recursiveRef: "#" }, { $ref: "#/$defs/schemaArray" }] },
+      contains: { $recursiveRef: "#" },
+      additionalProperties: { $recursiveRef: "#" },
+      unevaluatedProperties: { $recursiveRef: "#" },
+      properties: {
+        type: "object",
+        additionalProperties: { $recursiveRef: "#" },
+        default: {}
+      },
+      patternProperties: {
+        type: "object",
+        additionalProperties: { $recursiveRef: "#" },
+        propertyNames: { format: "regex" },
+        default: {}
+      },
+      dependentSchemas: {
+        type: "object",
+        additionalProperties: { $recursiveRef: "#" }
+      },
+      propertyNames: { $recursiveRef: "#" },
+      if: { $recursiveRef: "#" },
+      then: { $recursiveRef: "#" },
+      else: { $recursiveRef: "#" },
+      allOf: { $ref: "#/$defs/schemaArray" },
+      anyOf: { $ref: "#/$defs/schemaArray" },
+      oneOf: { $ref: "#/$defs/schemaArray" },
+      not: { $recursiveRef: "#" }
+    },
+    $defs: { schemaArray: {
+      type: "array",
+      minItems: 1,
+      items: { $recursiveRef: "#" }
+    } }
+  };
+});
+var require_content$1 = /* @__PURE__ */ __commonJSMin((exports, module) => {
+  module.exports = {
+    $schema: "https://json-schema.org/draft/2019-09/schema",
+    $id: "https://json-schema.org/draft/2019-09/meta/content",
+    $vocabulary: { "https://json-schema.org/draft/2019-09/vocab/content": true },
+    $recursiveAnchor: true,
+    title: "Content vocabulary meta-schema",
+    type: ["object", "boolean"],
+    properties: {
+      contentMediaType: { type: "string" },
+      contentEncoding: { type: "string" },
+      contentSchema: { $recursiveRef: "#" }
+    }
+  };
+});
+var require_core$1 = /* @__PURE__ */ __commonJSMin((exports, module) => {
+  module.exports = {
+    $schema: "https://json-schema.org/draft/2019-09/schema",
+    $id: "https://json-schema.org/draft/2019-09/meta/core",
+    $vocabulary: { "https://json-schema.org/draft/2019-09/vocab/core": true },
+    $recursiveAnchor: true,
+    title: "Core vocabulary meta-schema",
+    type: ["object", "boolean"],
+    properties: {
+      $id: {
+        type: "string",
+        format: "uri-reference",
+        $comment: "Non-empty fragments not allowed.",
+        pattern: "^[^#]*#?$"
+      },
+      $schema: {
+        type: "string",
+        format: "uri"
+      },
+      $anchor: {
+        type: "string",
+        pattern: "^[A-Za-z][-A-Za-z0-9.:_]*$"
+      },
+      $ref: {
+        type: "string",
+        format: "uri-reference"
+      },
+      $recursiveRef: {
+        type: "string",
+        format: "uri-reference"
+      },
+      $recursiveAnchor: {
+        type: "boolean",
+        default: false
+      },
+      $vocabulary: {
+        type: "object",
+        propertyNames: {
+          type: "string",
+          format: "uri"
+        },
+        additionalProperties: { type: "boolean" }
+      },
+      $comment: { type: "string" },
+      $defs: {
+        type: "object",
+        additionalProperties: { $recursiveRef: "#" },
+        default: {}
+      }
+    }
+  };
+});
+var require_format = /* @__PURE__ */ __commonJSMin((exports, module) => {
+  module.exports = {
+    $schema: "https://json-schema.org/draft/2019-09/schema",
+    $id: "https://json-schema.org/draft/2019-09/meta/format",
+    $vocabulary: { "https://json-schema.org/draft/2019-09/vocab/format": true },
+    $recursiveAnchor: true,
+    title: "Format vocabulary meta-schema",
+    type: ["object", "boolean"],
+    properties: { format: { type: "string" } }
+  };
+});
+var require_meta_data$1 = /* @__PURE__ */ __commonJSMin((exports, module) => {
+  module.exports = {
+    $schema: "https://json-schema.org/draft/2019-09/schema",
+    $id: "https://json-schema.org/draft/2019-09/meta/meta-data",
+    $vocabulary: { "https://json-schema.org/draft/2019-09/vocab/meta-data": true },
+    $recursiveAnchor: true,
+    title: "Meta-data vocabulary meta-schema",
+    type: ["object", "boolean"],
+    properties: {
+      title: { type: "string" },
+      description: { type: "string" },
+      default: true,
+      deprecated: {
+        type: "boolean",
+        default: false
+      },
+      readOnly: {
+        type: "boolean",
+        default: false
+      },
+      writeOnly: {
+        type: "boolean",
+        default: false
+      },
+      examples: {
+        type: "array",
+        items: true
+      }
+    }
+  };
+});
+var require_validation$1 = /* @__PURE__ */ __commonJSMin((exports, module) => {
+  module.exports = {
+    $schema: "https://json-schema.org/draft/2019-09/schema",
+    $id: "https://json-schema.org/draft/2019-09/meta/validation",
+    $vocabulary: { "https://json-schema.org/draft/2019-09/vocab/validation": true },
+    $recursiveAnchor: true,
+    title: "Validation vocabulary meta-schema",
+    type: ["object", "boolean"],
+    properties: {
+      multipleOf: {
+        type: "number",
+        exclusiveMinimum: 0
+      },
+      maximum: { type: "number" },
+      exclusiveMaximum: { type: "number" },
+      minimum: { type: "number" },
+      exclusiveMinimum: { type: "number" },
+      maxLength: { $ref: "#/$defs/nonNegativeInteger" },
+      minLength: { $ref: "#/$defs/nonNegativeIntegerDefault0" },
+      pattern: {
+        type: "string",
+        format: "regex"
+      },
+      maxItems: { $ref: "#/$defs/nonNegativeInteger" },
+      minItems: { $ref: "#/$defs/nonNegativeIntegerDefault0" },
+      uniqueItems: {
+        type: "boolean",
+        default: false
+      },
+      maxContains: { $ref: "#/$defs/nonNegativeInteger" },
+      minContains: {
+        $ref: "#/$defs/nonNegativeInteger",
+        default: 1
+      },
+      maxProperties: { $ref: "#/$defs/nonNegativeInteger" },
+      minProperties: { $ref: "#/$defs/nonNegativeIntegerDefault0" },
+      required: { $ref: "#/$defs/stringArray" },
+      dependentRequired: {
+        type: "object",
+        additionalProperties: { $ref: "#/$defs/stringArray" }
+      },
+      const: true,
+      enum: {
+        type: "array",
+        items: true
+      },
+      type: { anyOf: [{ $ref: "#/$defs/simpleTypes" }, {
+        type: "array",
+        items: { $ref: "#/$defs/simpleTypes" },
+        minItems: 1,
+        uniqueItems: true
+      }] }
+    },
+    $defs: {
+      nonNegativeInteger: {
+        type: "integer",
+        minimum: 0
+      },
+      nonNegativeIntegerDefault0: {
+        $ref: "#/$defs/nonNegativeInteger",
+        default: 0
+      },
+      simpleTypes: { enum: [
+        "array",
+        "boolean",
+        "integer",
+        "null",
+        "number",
+        "object",
+        "string"
+      ] },
+      stringArray: {
+        type: "array",
+        items: { type: "string" },
+        uniqueItems: true,
+        default: []
+      }
+    }
+  };
+});
+var require_json_schema_2019_09 = /* @__PURE__ */ __commonJSMin((exports) => {
+  Object.defineProperty(exports, "__esModule", { value: true });
+  const metaSchema = require_schema$1();
+  const applicator = require_applicator$1();
+  const content = require_content$1();
+  const core2 = require_core$1();
+  const format = require_format();
+  const metadata = require_meta_data$1();
+  const validation = require_validation$1();
+  const META_SUPPORT_DATA = ["/properties"];
+  function addMetaSchema2019($data) {
+    [
+      metaSchema,
+      applicator,
+      content,
+      core2,
+      with$data(this, format),
+      metadata,
+      with$data(this, validation)
+    ].forEach((sch) => this.addMetaSchema(sch, undefined, false));
+    return this;
+    function with$data(ajv, sch) {
+      return $data ? ajv.$dataMetaSchema(sch, META_SUPPORT_DATA) : sch;
+    }
+  }
+  exports.default = addMetaSchema2019;
+});
+var require__2019 = /* @__PURE__ */ __commonJSMin((exports, module) => {
+  Object.defineProperty(exports, "__esModule", { value: true });
+  exports.MissingRefError = exports.ValidationError = exports.CodeGen = exports.Name = exports.nil = exports.stringify = exports.str = exports._ = exports.KeywordCxt = exports.Ajv2019 = undefined;
+  const core_1 = require_core$3();
+  const draft7_1 = require_draft7();
+  const dynamic_1 = require_dynamic();
+  const next_1 = require_next();
+  const unevaluated_1 = require_unevaluated$1();
+  const discriminator_1 = require_discriminator();
+  const json_schema_2019_09_1 = require_json_schema_2019_09();
+  const META_SCHEMA_ID = "https://json-schema.org/draft/2019-09/schema";
+  var Ajv2019 = class extends core_1.default {
+    constructor(opts = {}) {
+      super({
+        ...opts,
+        dynamicRef: true,
+        next: true,
+        unevaluated: true
+      });
+    }
+    _addVocabularies() {
+      super._addVocabularies();
+      this.addVocabulary(dynamic_1.default);
+      draft7_1.default.forEach((v) => this.addVocabulary(v));
+      this.addVocabulary(next_1.default);
+      this.addVocabulary(unevaluated_1.default);
+      if (this.opts.discriminator)
+        this.addKeyword(discriminator_1.default);
+    }
+    _addDefaultMetaSchema() {
+      super._addDefaultMetaSchema();
+      const { $data, meta: meta3 } = this.opts;
+      if (!meta3)
+        return;
+      json_schema_2019_09_1.default.call(this, $data);
+      this.refs["http://json-schema.org/schema"] = META_SCHEMA_ID;
+    }
+    defaultMeta() {
+      return this.opts.defaultMeta = super.defaultMeta() || (this.getSchema(META_SCHEMA_ID) ? META_SCHEMA_ID : undefined);
+    }
+  };
+  exports.Ajv2019 = Ajv2019;
+  module.exports = exports = Ajv2019;
+  module.exports.Ajv2019 = Ajv2019;
+  Object.defineProperty(exports, "__esModule", { value: true });
+  exports.default = Ajv2019;
+  var validate_1 = require_validate();
+  Object.defineProperty(exports, "KeywordCxt", {
+    enumerable: true,
+    get: function() {
+      return validate_1.KeywordCxt;
+    }
+  });
+  var codegen_1 = require_codegen();
+  Object.defineProperty(exports, "_", {
+    enumerable: true,
+    get: function() {
+      return codegen_1._;
+    }
+  });
+  Object.defineProperty(exports, "str", {
+    enumerable: true,
+    get: function() {
+      return codegen_1.str;
+    }
+  });
+  Object.defineProperty(exports, "stringify", {
+    enumerable: true,
+    get: function() {
+      return codegen_1.stringify;
+    }
+  });
+  Object.defineProperty(exports, "nil", {
+    enumerable: true,
+    get: function() {
+      return codegen_1.nil;
+    }
+  });
+  Object.defineProperty(exports, "Name", {
+    enumerable: true,
+    get: function() {
+      return codegen_1.Name;
+    }
+  });
+  Object.defineProperty(exports, "CodeGen", {
+    enumerable: true,
+    get: function() {
+      return codegen_1.CodeGen;
+    }
+  });
+  var validation_error_1 = require_validation_error();
+  Object.defineProperty(exports, "ValidationError", {
+    enumerable: true,
+    get: function() {
+      return validation_error_1.default;
+    }
+  });
+  var ref_error_1 = require_ref_error();
+  Object.defineProperty(exports, "MissingRefError", {
+    enumerable: true,
+    get: function() {
+      return ref_error_1.default;
+    }
+  });
+});
 var require_draft2020 = /* @__PURE__ */ __commonJSMin((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
-  const core_1 = require_core$1();
-  const validation_1 = require_validation$1();
-  const applicator_1 = require_applicator$1();
+  const core_1 = require_core$2();
+  const validation_1 = require_validation$2();
+  const applicator_1 = require_applicator$2();
   const dynamic_1 = require_dynamic();
   const next_1 = require_next();
   const unevaluated_1 = require_unevaluated$1();
-  const format_1 = require_format();
+  const format_1 = require_format$1();
   const metadata_1 = require_metadata();
   const draft2020Vocabularies = [
     dynamic_1.default,
@@ -209332,7 +209773,7 @@ var require_json_schema_2020_12 = /* @__PURE__ */ __commonJSMin((exports) => {
 var require__2020 = /* @__PURE__ */ __commonJSMin((exports, module) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.MissingRefError = exports.ValidationError = exports.CodeGen = exports.Name = exports.nil = exports.stringify = exports.str = exports._ = exports.KeywordCxt = exports.Ajv2020 = undefined;
-  const core_1 = require_core$2();
+  const core_1 = require_core$3();
   const draft2020_1 = require_draft2020();
   const discriminator_1 = require_discriminator();
   const json_schema_2020_12_1 = require_json_schema_2020_12();
@@ -209750,12 +210191,12 @@ var require_dist = /* @__PURE__ */ __commonJSMin((exports, module) => {
   exports.default = formatsPlugin;
 });
 var import_ajv = require_ajv();
+var import__2019 = require__2019();
 var import__2020 = require__2020();
 var import_dist = /* @__PURE__ */ __toESM2(require_dist(), 1);
-var DRAFT_2020_12_URIS = new Set(["https://json-schema.org/draft/2020-12/schema", "http://json-schema.org/draft/2020-12/schema"]);
 var addFormats = import_dist.default;
-function createDefaultAjvInstance() {
-  const ajv = new import__2020.Ajv2020({
+function createDefaultAjvInstance(engineClass) {
+  const ajv = new engineClass({
     strict: false,
     validateFormats: true,
     validateSchema: false,
@@ -209766,20 +210207,28 @@ function createDefaultAjvInstance() {
 }
 var AjvJsonSchemaValidator = class {
   _ajv;
+  _ajvDraft7;
+  _ajv2019;
   _userAjv;
   constructor(ajv) {
     this._userAjv = ajv !== undefined;
     this._ajv = ajv;
   }
   get ajv() {
-    return this._ajv ??= createDefaultAjvInstance();
+    return this._ajv ??= createDefaultAjvInstance(import__2020.Ajv2020);
+  }
+  _engineFor(schema) {
+    if (this._userAjv)
+      return this.ajv;
+    const dialect = declaredDialect(schema, "pass a pre-configured Ajv instance to AjvJsonSchemaValidator(ajv) to validate other dialects.");
+    if (dialect === "2020-12")
+      return this.ajv;
+    if (dialect === "2019-09")
+      return this._ajv2019 ??= createDefaultAjvInstance(import__2019.Ajv2019);
+    return this._ajvDraft7 ??= createDefaultAjvInstance(import_ajv.Ajv);
   }
   getValidator(schema) {
-    if (!this._userAjv && "$schema" in schema && typeof schema.$schema === "string" && !DRAFT_2020_12_URIS.has(schema.$schema.replace(/#$/, ""))) {
-      const declared = schema.$schema.slice(0, 200);
-      throw new Error(`JSON Schema declares an unsupported dialect ("$schema": "${declared}"). The default validator supports JSON Schema 2020-12 only; pass a pre-configured Ajv instance to AjvJsonSchemaValidator(ajv) to validate other dialects.`);
-    }
-    const engine = this.ajv;
+    const engine = this._engineFor(schema);
     const ajvValidator = "$id" in schema && typeof schema.$id === "string" ? engine.getSchema(schema.$id) ?? engine.compile(schema) : engine.compile(schema);
     return (input2) => {
       return ajvValidator(input2) ? {
@@ -209799,7 +210248,7 @@ var Ajv = import_ajv.Ajv;
 // node_modules/@modelcontextprotocol/server/dist/shimsNode.mjs
 import process3 from "node:process";
 
-// node_modules/@modelcontextprotocol/server/dist/mcp-IJurDZVN.mjs
+// node_modules/@modelcontextprotocol/server/dist/mcp-DXXb3Vv3.mjs
 var COMPLETABLE_SYMBOL = Symbol.for("mcp.completable");
 function isCompletable(schema) {
   return !!schema && typeof schema === "object" && COMPLETABLE_SYMBOL in schema;
@@ -209807,6 +210256,7 @@ function isCompletable(schema) {
 function getCompleter(schema) {
   return schema[COMPLETABLE_SYMBOL]?.complete;
 }
+var MAX_TIMER_DELAY_MS = 2 ** 31 - 1;
 var CHANGE_NOTIFICATION_METHODS = new Set([
   "notifications/tools/list_changed",
   "notifications/prompts/list_changed",

package/dist/cli/pluginRuntimeContract.d.ts

@@ -10,9 +10,9 @@ export declare const PLUGIN_RUNTIME_COMPATIBILITY_SCHEMA_VERSION = 2;
 export declare const MINIMUM_SUPPORTED_CODEX_VERSION = "0.144.0-alpha.4";
 export declare const PLUGIN_RUNTIME_EXPECTED_CONTRACT: {
     readonly distribution: {
-        readonly pluginVersion: "0.7.8";
+        readonly pluginVersion: "0.7.9";
         readonly mcpCommand: "npx";
-        readonly mcpPackagePin: "@kyo-so/cli@0.16.0";
+        readonly mcpPackagePin: "@kyo-so/cli@0.16.1";
         readonly mcpExecutable: "kyoso";
     };
     readonly marketplace: {
@@ -131,9 +131,9 @@ export declare const pluginRuntimeContract: {
     readonly pluginListTopLevelKeys: readonly ["installed", "available"];
     readonly expectedContract: {
         readonly distribution: {
-            readonly pluginVersion: "0.7.8";
+            readonly pluginVersion: "0.7.9";
             readonly mcpCommand: "npx";
-            readonly mcpPackagePin: "@kyo-so/cli@0.16.0";
+            readonly mcpPackagePin: "@kyo-so/cli@0.16.1";
             readonly mcpExecutable: "kyoso";
         };
         readonly marketplace: {

package/dist/core/constants.d.ts

@@ -7,4 +7,4 @@ export declare const JUDGE_MAX_OUTPUT_TOKENS = 4096;
 export declare const RAW_OUTPUT_MAX_CHARS = 16384;
 export declare const TRACE_DIR = ".kyoso/traces";
 export declare const KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-export declare const KYOSO_VERSION = "0.16.1";
+export declare const KYOSO_VERSION = "0.16.2";

package/dist/index.js

@@ -184207,7 +184207,7 @@ var defaultConfig = {
       enabled: true,
       type: "acp",
       command: "npx",
-      args: ["-y", "@agentclientprotocol/claude-agent-acp@0.62.0"],
+      args: ["-y", "@agentclientprotocol/claude-agent-acp@0.63.0"],
       role: "architecture_security_reviewer",
       timeoutMs: DEFAULT_AGENT_TIMEOUT_MS,
       env: {
@@ -185001,6 +185001,8 @@ function skipUntil(str, ptr, sep, end, banNewLines = false) {
     let c = str[i];
     if (c === "#") {
       i = indexOfNewline(str, i);
+      if (i < 0)
+        break;
     } else if (c === sep) {
       return i + 1;
     } else if (c === end || banNewLines && (c === `

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kyo-so/cli",
-  "version": "0.16.1",
+  "version": "0.16.2",
   "description": "Kyo-so: MCP-native, ACP-powered multi-agent review gates for AI coding workflows.",
   "license": "AGPL-3.0-or-later",
   "repository": {
@@ -62,8 +62,8 @@
   },
   "dependencies": {
     "@agentclientprotocol/sdk": "1.3.0",
-    "@modelcontextprotocol/server": "2.0.0-beta.5",
-    "smol-toml": "1.7.0",
+    "@modelcontextprotocol/server": "2.0.0",
+    "smol-toml": "1.7.1",
     "typescript": "6.0.3",
     "zod": "4.4.3"
   },