@moda-ai/cli 1.55.88 → 1.55.89

package/dist/{cli-y7dtztan.js → cli-gmvbapx7.js}

@@ -1,14 +1,6 @@
-import {
-  $parseDocument
-} from "./cli-9kfxkxmk.js";
-import {
-  SECRET_KEYS,
-  redactString
-} from "./cli-p5grm12t.js";
 import {
   __commonJS,
-  __require,
-  __toESM
+  __require
 } from "./cli-0v6na3yp.js";
 
 // ../../node_modules/.bun/source-map@0.6.1/node_modules/source-map/lib/base64.js
@@ -170914,1511 +170906,4 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
   } });
 });
 
-// src/prompt-sources.ts
-var import_typescript2 = __toESM(require_typescript(), 1);
-import { createHash } from "node:crypto";
-import { lstatSync as lstatSync2, readFileSync as readFileSync3, realpathSync as realpathSync3 } from "node:fs";
-import { extname as extname2, isAbsolute, relative, resolve as resolve3 } from "node:path";
-
-// src/prompt-frameworks.ts
-var PYTHON_AGENT_MODULES = [
-  "agents",
-  "agno.agent",
-  "pydantic_ai",
-  "crewai",
-  "smolagents",
-  "google.adk.agents",
-  "autogen_agentchat.agents",
-  "llama_index.core.agent"
-];
-var TYPESCRIPT_AGENT_MODULES = [
-  "@mastra/core/agent",
-  "@openai/agents",
-  "@openai/agents-core"
-];
-
-// src/prompt-source-code.ts
-var import_typescript = __toESM(require_typescript(), 1);
-import { existsSync, lstatSync, readFileSync, realpathSync } from "node:fs";
-import { dirname, extname, join, resolve } from "node:path";
-var EXTENSIONS = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
-var MAX_BYTES = 2 * 1024 * 1024;
-var MAX_DEPTH = 32;
-var MAX_FILES = 256;
-var MAX_GRAPH_BYTES = 16 * 1024 * 1024;
-function extractCodeSource(rootDir, sourcePath, symbol, forceDependencyGraph = false) {
-  const state = { root: resolve(rootDir), files: [], unresolved: [], visiting: new Set, importsVisited: new Set, parsed: new Map, assignments: new Map, bytesRead: 0 };
-  const file = safeFile(state.root, state.root, sourcePath);
-  const parsed = parseFile(file, state);
-  const target = symbol ? findSymbol(parsed, symbol) : findInstructionCandidate(parsed);
-  if (!target) {
-    if (symbol)
-      throw new Error(`${sourcePath}: symbol '${symbol}' was not found`);
-    collectLocalImports(parsed, state, 0);
-    return { sourceText: parsed.text, dynamic: true, unresolved: [`symbol '${symbol ?? "<instruction-like candidate>"}' was not found`], files: state.files };
-  }
-  const sourceText = target.getText(parsed.file);
-  const range = nodeRange(parsed.file, target);
-  const owner = symbol?.split(".")[0];
-  if (symbol?.includes(".") && owner && isBindingMutated(parsed.file, owner)) {
-    return { sourceText, range, dynamic: true, unresolved: [`binding '${owner}' is reassigned or mutated`], files: state.files };
-  }
-  if (import_typescript.default.isFunctionDeclaration(target) || import_typescript.default.isMethodDeclaration(target) || import_typescript.default.isArrowFunction(target) || import_typescript.default.isFunctionExpression(target)) {
-    collectLocalImports(parsed, state, 0);
-    return { sourceText, range, dynamic: true, unresolved: ["function/builder source requires runtime inputs", ...state.unresolved], files: state.files };
-  }
-  if (import_typescript.default.isVariableDeclaration(target) && import_typescript.default.isIdentifier(target.name) && isBindingMutated(parsed.file, target.name.text)) {
-    return { sourceText, range, dynamic: true, unresolved: [`binding '${target.name.text}' is reassigned or mutated`], files: state.files };
-  }
-  const value = evaluate(target, parsed, state, 0);
-  if (forceDependencyGraph || !value.ok)
-    collectLocalImports(parsed, state, 0);
-  return { value: value.ok ? value.value : undefined, sourceText, range, ...import_typescript.default.isClassDeclaration(target) ? { declarationKind: "class" } : {}, dynamic: !value.ok, unresolved: [...new Set([...state.unresolved, ...value.unresolved])], files: state.files };
-}
-function parseFile(filePath, state) {
-  const path = safeFile(state.root, state.root, filePath);
-  const cached = state.parsed.get(path);
-  if (cached)
-    return cached;
-  const text = readFileSync(path, "utf8");
-  state.bytesRead += Buffer.byteLength(text);
-  state.files.push(path);
-  const scriptKind = extname(path) === ".json" ? import_typescript.default.ScriptKind.JSON : /\.tsx?$/.test(extname(path)) ? import_typescript.default.ScriptKind.TSX : import_typescript.default.ScriptKind.JSX;
-  const file = import_typescript.default.createSourceFile(path, text, import_typescript.default.ScriptTarget.Latest, true, scriptKind);
-  const diagnostics = file.parseDiagnostics ?? [];
-  if (diagnostics.length)
-    throw new Error(`${path}: syntax error in source (${import_typescript.default.flattenDiagnosticMessageText(diagnostics[0].messageText, " ")})`);
-  const parsed = { file, text, path };
-  state.parsed.set(path, parsed);
-  return parsed;
-}
-function safeFile(root, base, requested) {
-  if (requested.includes("\x00"))
-    throw new Error(`Prompt source path contains NUL: ${requested}`);
-  const candidate = resolve(base, requested);
-  let cursor = candidate;
-  while (cursor !== root) {
-    let stat2;
-    try {
-      stat2 = lstatSync(cursor);
-    } catch {
-      break;
-    }
-    if (stat2.isSymbolicLink())
-      throw new Error(`Prompt source uses a symlink: ${requested}`);
-    const next = cursor.slice(0, cursor.lastIndexOf("/")) || "/";
-    if (next === cursor)
-      break;
-    cursor = next;
-  }
-  const rootReal = resolve(root);
-  let real;
-  try {
-    real = requireRealpath(candidate);
-  } catch {
-    throw new Error(`Prompt source file not found: ${requested}`);
-  }
-  if (!within(rootReal, real))
-    throw new Error(`Prompt source escapes repository root: ${requested}`);
-  const stat = lstatSync(real);
-  if (!stat.isFile() || stat.size > MAX_BYTES)
-    throw new Error(`Prompt source is not a bounded regular file: ${requested}`);
-  return real;
-}
-function requireRealpath(path) {
-  return realpathSync(path);
-}
-function within(root, child) {
-  return child === root || child.startsWith(`${root}/`);
-}
-function findSymbol(parsed, symbol) {
-  const names = symbol.split(".");
-  const matches = [];
-  const visit = (n) => {
-    if (import_typescript.default.isVariableDeclaration(n) && import_typescript.default.isIdentifier(n.name) && n.name.text === names[0])
-      matches.push(n);
-    else if (import_typescript.default.isFunctionDeclaration(n) && n.name?.text === names[0])
-      matches.push(n);
-    else if (import_typescript.default.isClassDeclaration(n) && n.name?.text === names[0])
-      matches.push(n);
-    import_typescript.default.forEachChild(n, visit);
-  };
-  visit(parsed.file);
-  if (matches.length > 1)
-    throw new Error(`${parsed.path}: symbol '${symbol}' is ambiguous (${matches.length} definitions)`);
-  const node = matches[0];
-  if (!node || names.length === 1)
-    return node;
-  let current = node;
-  for (const part of names.slice(1)) {
-    if (current && import_typescript.default.isClassDeclaration(current)) {
-      const members = current.members.filter((member) => propertyName(member.name) === part);
-      if (members.length > 1)
-        throw new Error(`${parsed.path}: symbol '${symbol}' is ambiguous`);
-      current = members[0];
-      if (!current)
-        return;
-      continue;
-    }
-    const initializer = current && import_typescript.default.isVariableDeclaration(current) ? current.initializer : undefined;
-    const object = initializer && import_typescript.default.isObjectLiteralExpression(initializer) ? initializer : initializer && import_typescript.default.isCallExpression(initializer) ? initializer.arguments.find(import_typescript.default.isObjectLiteralExpression) : initializer && import_typescript.default.isNewExpression(initializer) ? initializer.arguments?.find(import_typescript.default.isObjectLiteralExpression) : undefined;
-    const property = object?.properties.find((p) => import_typescript.default.isPropertyAssignment(p) && propertyName(p.name) === part);
-    if (!property)
-      return;
-    current = property;
-  }
-  return current;
-}
-function collectLocalImports(parsed, state, depth) {
-  if (depth > MAX_DEPTH) {
-    state.unresolved.push("local import graph exceeded depth bound");
-    return;
-  }
-  if (state.importsVisited.has(parsed.path))
-    return;
-  state.importsVisited.add(parsed.path);
-  parsed.file.forEachChild((node) => {
-    if (!import_typescript.default.isImportDeclaration(node) || !import_typescript.default.isStringLiteral(node.moduleSpecifier))
-      return;
-    const resolved = moduleSpecifier(parsed.path, node.moduleSpecifier.text);
-    if (!resolved) {
-      if (node.moduleSpecifier.text.startsWith("."))
-        state.unresolved.push(`unresolved local import '${node.moduleSpecifier.text}'`);
-      return;
-    }
-    if (state.files.length >= MAX_FILES || state.bytesRead >= MAX_GRAPH_BYTES) {
-      state.unresolved.push("local dependency graph exceeded file or byte bound");
-      return;
-    }
-    const imported = parseFile(resolved, state);
-    collectLocalImports(imported, state, depth + 1);
-  });
-  const scan = (node) => {
-    if (import_typescript.default.isCallExpression(node) && node.expression.kind === import_typescript.default.SyntaxKind.ImportKeyword) {
-      const argument = node.arguments[0];
-      if (argument && import_typescript.default.isStringLiteral(argument)) {
-        const resolved = moduleSpecifier(parsed.path, argument.text);
-        if (resolved) {
-          if (state.files.length >= MAX_FILES || state.bytesRead >= MAX_GRAPH_BYTES)
-            state.unresolved.push("local dependency graph exceeded file or byte bound");
-          else
-            collectLocalImports(parseFile(resolved, state), state, depth + 1);
-        } else if (argument.text.startsWith("."))
-          state.unresolved.push(`unresolved local dynamic import '${argument.text}'`);
-      } else
-        state.unresolved.push("dynamic import path is unresolved");
-    }
-    import_typescript.default.forEachChild(node, scan);
-  };
-  scan(parsed.file);
-}
-function findInstructionCandidate(parsed) {
-  const candidates = [];
-  const terms = /prompt|instruction|system|message|template/i;
-  const visit = (n) => {
-    if (import_typescript.default.isVariableDeclaration(n) && import_typescript.default.isIdentifier(n.name) && terms.test(n.name.text) && isCandidateInitializer(n.initializer))
-      candidates.push(n);
-    else if (import_typescript.default.isPropertyAssignment(n) && propertyName(n.name) && terms.test(propertyName(n.name)) && isCandidateInitializer(n.initializer))
-      candidates.push(n);
-    import_typescript.default.forEachChild(n, visit);
-  };
-  visit(parsed.file);
-  if (candidates.length > 1)
-    throw new Error(`${parsed.path}: instruction-like symbols are ambiguous; provide a selector`);
-  return candidates[0];
-}
-function isPromptName(name) {
-  return /prompt|instruction|system|message|template/i.test(name);
-}
-function isCandidateInitializer(initializer) {
-  if (!initializer)
-    return false;
-  return import_typescript.default.isStringLiteral(initializer) || import_typescript.default.isNoSubstitutionTemplateLiteral(initializer) || import_typescript.default.isTemplateExpression(initializer) || import_typescript.default.isBinaryExpression(initializer) && initializer.operatorToken.kind === import_typescript.default.SyntaxKind.PlusToken || import_typescript.default.isFunctionExpression(initializer) || import_typescript.default.isArrowFunction(initializer) || import_typescript.default.isIdentifier(initializer) && isPromptName(initializer.text) || import_typescript.default.isCallExpression(initializer) && import_typescript.default.isPropertyAccessExpression(initializer.expression) && initializer.expression.name.text === "join" || import_typescript.default.isArrayLiteralExpression(initializer) && initializer.elements.some((item) => import_typescript.default.isObjectLiteralExpression(item) || import_typescript.default.isStringLiteral(item));
-}
-function propertyName(name) {
-  if (!name)
-    return;
-  return import_typescript.default.isIdentifier(name) || import_typescript.default.isStringLiteral(name) || import_typescript.default.isNumericLiteral(name) ? name.text : undefined;
-}
-function evaluate(node, parsed, state, depth) {
-  if (depth > MAX_DEPTH)
-    return fail("static evaluation depth exceeded");
-  let expr;
-  if (import_typescript.default.isVariableDeclaration(node))
-    expr = node.initializer;
-  else if (import_typescript.default.isPropertyAssignment(node) || import_typescript.default.isPropertyDeclaration(node))
-    expr = node.initializer;
-  else if (import_typescript.default.isExpression(node))
-    expr = node;
-  if (!expr)
-    return fail("selected symbol has no static initializer");
-  return evalExpression(expr, parsed, state, depth);
-}
-function evalExpression(expr, parsed, state, depth) {
-  if (import_typescript.default.isStringLiteral(expr) || import_typescript.default.isNoSubstitutionTemplateLiteral(expr))
-    return ok(expr.text);
-  if (expr.kind === import_typescript.default.SyntaxKind.TrueKeyword)
-    return ok(true);
-  if (expr.kind === import_typescript.default.SyntaxKind.FalseKeyword)
-    return ok(false);
-  if (expr.kind === import_typescript.default.SyntaxKind.NullKeyword)
-    return ok(null);
-  if (import_typescript.default.isNumericLiteral(expr))
-    return ok(Number(expr.text));
-  if (import_typescript.default.isParenthesizedExpression(expr) || import_typescript.default.isAsExpression(expr) || import_typescript.default.isTypeAssertionExpression(expr))
-    return evalExpression(expr.expression, parsed, state, depth + 1);
-  if (import_typescript.default.isArrayLiteralExpression(expr)) {
-    const values = [];
-    for (const item of expr.elements) {
-      if (import_typescript.default.isSpreadElement(item))
-        return fail("spread elements are dynamic");
-      const result = evalExpression(item, parsed, state, depth + 1);
-      if (!result.ok)
-        return result;
-      values.push(result.value);
-    }
-    return ok(values);
-  }
-  if (import_typescript.default.isObjectLiteralExpression(expr)) {
-    const value = {};
-    for (const item of expr.properties) {
-      if (!import_typescript.default.isPropertyAssignment(item))
-        return fail("methods/getters in object literals are dynamic");
-      const name = propertyName(item.name);
-      if (!name)
-        return fail("computed object property is dynamic");
-      const result = evalExpression(item.initializer, parsed, state, depth + 1);
-      if (!result.ok)
-        return result;
-      value[name] = result.value;
-    }
-    return ok(value);
-  }
-  if (import_typescript.default.isBinaryExpression(expr) && expr.operatorToken.kind === import_typescript.default.SyntaxKind.PlusToken) {
-    const left = evalExpression(expr.left, parsed, state, depth + 1);
-    const right = evalExpression(expr.right, parsed, state, depth + 1);
-    if (!left.ok || !right.ok || typeof left.value !== "string" && typeof right.value !== "string")
-      return fail("concatenation contains a dynamic or non-string value");
-    return ok(String(left.value) + String(right.value));
-  }
-  if (import_typescript.default.isTemplateExpression(expr)) {
-    let value = expr.head.text;
-    for (const span of expr.templateSpans) {
-      const part = evalExpression(span.expression, parsed, state, depth + 1);
-      if (!part.ok || !["string", "number", "boolean"].includes(typeof part.value))
-        return fail("template interpolation contains runtime expressions");
-      value += String(part.value) + span.literal.text;
-    }
-    return ok(value);
-  }
-  if (import_typescript.default.isCallExpression(expr)) {
-    if (import_typescript.default.isPropertyAccessExpression(expr.expression) && expr.expression.name.text === "join") {
-      const receiver = evalExpression(expr.expression.expression, parsed, state, depth + 1);
-      const separator = expr.arguments.length ? evalExpression(expr.arguments[0], parsed, state, depth + 1) : ok(",");
-      if (receiver.ok && Array.isArray(receiver.value) && separator.ok && typeof separator.value === "string" && receiver.value.every((v) => typeof v === "string"))
-        return ok(receiver.value.join(separator.value));
-    }
-    return fail("function calls other than static Array.join are dynamic");
-  }
-  if (import_typescript.default.isIdentifier(expr))
-    return resolveIdentifier(expr.text, parsed, state, depth + 1);
-  return fail(`unsupported expression '${import_typescript.default.SyntaxKind[expr.kind] ?? "unknown"}'`);
-}
-function resolveIdentifier(name, parsed, state, depth) {
-  const key = `${parsed.path}:${name}`;
-  if (state.visiting.has(key))
-    return fail(`cyclic binding '${name}'`);
-  state.visiting.add(key);
-  try {
-    const declarations = [];
-    const imports = [];
-    parsed.file.forEachChild(function visit(n) {
-      if (import_typescript.default.isVariableDeclaration(n) && import_typescript.default.isIdentifier(n.name) && n.name.text === name)
-        declarations.push(n);
-      if (import_typescript.default.isImportDeclaration(n))
-        imports.push(n);
-      import_typescript.default.forEachChild(n, visit);
-    });
-    if (declarations.length !== 1) {
-      if (isBindingMutated(parsed.file, name))
-        return fail(`binding '${name}' is reassigned or mutated`);
-      const imported = imports.find((i) => {
-        const bindings = i.importClause?.namedBindings;
-        return Boolean(bindings && import_typescript.default.isNamedImports(bindings) && bindings.elements.some((e) => e.name.text === name || e.propertyName?.text === name));
-      });
-      const importedBindings = imported?.importClause?.namedBindings;
-      if (imported && importedBindings && import_typescript.default.isNamedImports(importedBindings)) {
-        const spec = importedBindings.elements.find((e) => e.name.text === name || e.propertyName?.text === name);
-        const moduleName = import_typescript.default.isStringLiteral(imported.moduleSpecifier) ? imported.moduleSpecifier.text : undefined;
-        const modulePath = moduleName ? moduleSpecifier(parsed.path, moduleName) : undefined;
-        if (!modulePath)
-          return fail(`unresolved local import for '${name}'`);
-        if (state.files.length >= MAX_FILES || state.bytesRead >= MAX_GRAPH_BYTES)
-          return fail("local dependency graph exceeded file or byte bound");
-        const importedParsed = parseFile(modulePath, state);
-        const importedNode = findSymbol(importedParsed, spec.propertyName?.text ?? spec.name.text);
-        if (!importedNode)
-          return fail(`imported symbol '${name}' was not found`);
-        if (import_typescript.default.isVariableDeclaration(importedNode) && import_typescript.default.isIdentifier(importedNode.name) && isBindingMutated(importedParsed.file, importedNode.name.text))
-          return fail(`binding '${name}' is reassigned or mutated`);
-        return evaluate(importedNode, importedParsed, state, depth + 1);
-      }
-      return fail(declarations.length ? `shadowed binding '${name}' is ambiguous` : `binding '${name}' was not found`);
-    }
-    if (isBindingMutated(parsed.file, name))
-      return fail(`binding '${name}' is reassigned or mutated`);
-    return evaluate(declarations[0], parsed, state, depth + 1);
-  } finally {
-    state.visiting.delete(key);
-  }
-}
-function isBindingMutated(file, name) {
-  const aliases = new Map;
-  const mutated = new Set;
-  const mutableBindings = new Set;
-  const escaped = new Set;
-  const mutatingMethods = new Set(["copyWithin", "fill", "pop", "push", "reverse", "shift", "sort", "splice", "unshift"]);
-  const assignments = new Set([
-    import_typescript.default.SyntaxKind.EqualsToken,
-    import_typescript.default.SyntaxKind.PlusEqualsToken,
-    import_typescript.default.SyntaxKind.MinusEqualsToken,
-    import_typescript.default.SyntaxKind.AsteriskEqualsToken,
-    import_typescript.default.SyntaxKind.SlashEqualsToken,
-    import_typescript.default.SyntaxKind.PercentEqualsToken,
-    import_typescript.default.SyntaxKind.AmpersandEqualsToken,
-    import_typescript.default.SyntaxKind.BarEqualsToken,
-    import_typescript.default.SyntaxKind.CaretEqualsToken,
-    import_typescript.default.SyntaxKind.LessThanLessThanEqualsToken,
-    import_typescript.default.SyntaxKind.GreaterThanGreaterThanEqualsToken,
-    import_typescript.default.SyntaxKind.GreaterThanGreaterThanGreaterThanEqualsToken,
-    import_typescript.default.SyntaxKind.QuestionQuestionEqualsToken,
-    import_typescript.default.SyntaxKind.BarBarEqualsToken,
-    import_typescript.default.SyntaxKind.AmpersandAmpersandEqualsToken
-  ]);
-  const walk = (n) => {
-    if (import_typescript.default.isVariableDeclaration(n) && import_typescript.default.isIdentifier(n.name) && n.initializer && import_typescript.default.isIdentifier(n.initializer))
-      aliases.set(n.name.text, n.initializer.text);
-    if (import_typescript.default.isVariableDeclaration(n) && import_typescript.default.isIdentifier(n.name) && n.initializer && (import_typescript.default.isArrayLiteralExpression(n.initializer) || import_typescript.default.isObjectLiteralExpression(n.initializer)))
-      mutableBindings.add(n.name.text);
-    if (import_typescript.default.isBinaryExpression(n) && (assignments.has(n.operatorToken.kind) || n.operatorToken.getText().endsWith("=")) && import_typescript.default.isIdentifier(n.left))
-      mutated.add(n.left.text);
-    if (import_typescript.default.isBinaryExpression(n) && (assignments.has(n.operatorToken.kind) || n.operatorToken.getText().endsWith("=")) && (import_typescript.default.isPropertyAccessExpression(n.left) || import_typescript.default.isElementAccessExpression(n.left))) {
-      const receiver = import_typescript.default.isPropertyAccessExpression(n.left) ? n.left.expression : n.left.expression;
-      if (import_typescript.default.isIdentifier(receiver))
-        mutated.add(receiver.text);
-    }
-    if ((import_typescript.default.isPrefixUnaryExpression(n) || import_typescript.default.isPostfixUnaryExpression(n)) && import_typescript.default.isIdentifier(n.operand))
-      mutated.add(n.operand.text);
-    if (import_typescript.default.isCallExpression(n)) {
-      if (import_typescript.default.isPropertyAccessExpression(n.expression) && mutatingMethods.has(n.expression.name.text) && import_typescript.default.isIdentifier(n.expression.expression))
-        mutated.add(n.expression.expression.text);
-      const knownStaticJoin = import_typescript.default.isPropertyAccessExpression(n.expression) && n.expression.name.text === "join";
-      if (!knownStaticJoin) {
-        for (const argument of n.arguments)
-          if (import_typescript.default.isIdentifier(argument))
-            escaped.add(argument.text);
-      }
-    }
-    import_typescript.default.forEachChild(n, walk);
-  };
-  walk(file);
-  let changed = true;
-  while (changed) {
-    changed = false;
-    for (const [alias, original] of aliases)
-      if (mutableBindings.has(original) && !mutableBindings.has(alias)) {
-        mutableBindings.add(alias);
-        changed = true;
-      }
-  }
-  for (const binding of escaped)
-    if (mutableBindings.has(binding))
-      mutated.add(binding);
-  changed = true;
-  while (changed) {
-    changed = false;
-    for (const [alias, original] of aliases)
-      if (mutated.has(alias) && !mutated.has(original)) {
-        mutated.add(original);
-        changed = true;
-      }
-  }
-  return mutated.has(name);
-}
-function moduleSpecifier(from, specifier) {
-  if (!specifier.startsWith("."))
-    return;
-  const base = resolve(dirname(from), specifier);
-  const stripped = /\.(?:js|jsx|mjs|cjs)$/.test(base) ? base.slice(0, base.lastIndexOf(".")) : base;
-  for (const candidate of [base, stripped, ...EXTENSIONS.map((ext) => `${base}${ext}`), ...EXTENSIONS.map((ext) => `${stripped}${ext}`), ...EXTENSIONS.map((ext) => join(base, `index${ext}`)), ...EXTENSIONS.map((ext) => join(stripped, `index${ext}`))])
-    if (existsSync(candidate) && lstatSync(candidate).isFile())
-      return candidate;
-  return;
-}
-function ok(value) {
-  return { ok: true, value, unresolved: [] };
-}
-function fail(reason) {
-  return { ok: false, unresolved: [reason] };
-}
-function nodeRange(file, node) {
-  return {
-    line: file.getLineAndCharacterOfPosition(node.getStart(file)).line + 1,
-    endLine: file.getLineAndCharacterOfPosition(Math.max(node.getStart(file), node.getEnd() - 1)).line + 1
-  };
-}
-function inspectCodeSelectors(rootDir, sourcePath, symbol) {
-  const state = { root: resolve(rootDir), files: [], unresolved: [], visiting: new Set, importsVisited: new Set, parsed: new Map, assignments: new Map, bytesRead: 0 };
-  const parsed = parseFile(safeFile(state.root, state.root, sourcePath), state);
-  if (symbol) {
-    const node = findSymbol(parsed, symbol);
-    if (!node)
-      throw new Error(`Symbol '${symbol}' was not found`);
-    return [{ symbol, ...nodeRange(parsed.file, node), references: referenceNames(node), unresolved: [] }];
-  }
-  const entries = [];
-  const add = (name, node) => {
-    let unresolved = [];
-    try {
-      if (!findSymbol(parsed, name))
-        unresolved = ["Selector is not addressable by the source resolver"];
-    } catch (error) {
-      unresolved = [error instanceof Error ? error.message : String(error)];
-    }
-    entries.push({ symbol: name, ...nodeRange(parsed.file, node), references: referenceNames(node), unresolved });
-  };
-  const visit = (node) => {
-    if (import_typescript.default.isVariableDeclaration(node) && import_typescript.default.isIdentifier(node.name))
-      add(node.name.text, node);
-    if (import_typescript.default.isFunctionDeclaration(node) && node.name)
-      add(node.name.text, node);
-    if (import_typescript.default.isClassDeclaration(node) && node.name) {
-      add(node.name.text, node);
-      for (const member of node.members) {
-        const name = propertyName(member.name);
-        if (name)
-          add(`${node.name.text}.${name}`, member);
-      }
-    }
-    import_typescript.default.forEachChild(node, visit);
-  };
-  visit(parsed.file);
-  return entries;
-}
-function referenceNames(node) {
-  const names = new Set;
-  const visit = (child) => {
-    if (import_typescript.default.isIdentifier(child))
-      names.add(child.text);
-    import_typescript.default.forEachChild(child, visit);
-  };
-  visit(node);
-  return [...names].sort();
-}
-
-// src/prompt-source-python.ts
-import { spawnSync } from "node:child_process";
-import { readFileSync as readFileSync2, realpathSync as realpathSync2 } from "node:fs";
-import { resolve as resolve2 } from "node:path";
-var PYTHON_AGENT_MODULES_LITERAL = JSON.stringify(PYTHON_AGENT_MODULES);
-var SELECTOR_HELPER = String.raw`import ast,json,os,sys
-request=json.loads(sys.stdin.read()); root=os.path.realpath(request['root']); path=os.path.abspath(request['path']); wanted=request.get('symbol')
-def inside(p): return p==root or p.startswith(root+os.sep)
-def fail(message): print(json.dumps({'candidates':[],'error':message})); raise SystemExit
-if not inside(path): fail('source path escapes repository root')
-cursor=path
-while cursor != root:
-  if os.path.islink(cursor): fail('source path uses a symlink')
-  parent=os.path.dirname(cursor)
-  if parent==cursor: break
-  cursor=parent
-if os.path.islink(path) or not os.path.isfile(path): fail('source path is unavailable or symlinked')
-if os.path.getsize(path)>2*1024*1024: fail('source exceeds byte bound')
-try:
-  source=open(path,encoding='utf-8').read(); tree=ast.parse(source,filename=path)
-except SyntaxError as error: fail('syntax error: '+str(error))
-except OSError as error: fail('source could not be read: '+str(error))
-def static_string(node):
-  return isinstance(node,ast.Constant) and isinstance(node.value,str) or isinstance(node,ast.BinOp) and isinstance(node.op,ast.Add) and static_string(node.left) and static_string(node.right)
-def segment(node): return ast.get_source_segment(source,node) or ''
-def target_names(node):
-  if isinstance(node,ast.Name): return [node.id]
-  if isinstance(node,(ast.Tuple,ast.List)):
-    out=[]
-    for item in node.elts: out.extend(target_names(item))
-    return out
-  return []
-found=[]
-def add(symbol,node,definition):
-  dynamic=definition is None or not static_string(definition)
-  found.append({'symbol':symbol,'kind':'builder' if dynamic else 'text','coverage':'partial' if dynamic else 'complete','sourceText':segment(node),'references':sorted({item.id for item in ast.walk(node) if isinstance(item,ast.Name)}),'line':getattr(node,'lineno',1),'endLine':getattr(node,'end_lineno',getattr(node,'lineno',1)),'unresolved':[] if not dynamic else ['definition contains runtime expressions or callable behavior']})
-def visit(statements,prefix):
-  for node in statements:
-    if isinstance(node,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)):
-      current=prefix+[node.name]; add('.'.join(current),node,None); visit(node.body,current); continue
-    if isinstance(node,ast.Assign):
-      for target in node.targets:
-        for name in target_names(target): add('.'.join(prefix+[name]),node,node.value)
-    elif isinstance(node,ast.AnnAssign):
-      for name in target_names(node.target): add('.'.join(prefix+[name]),node,node.value)
-    elif isinstance(node,ast.NamedExpr):
-      for name in target_names(node.target): add('.'.join(prefix+[name]),node,node.value)
-    for child in ast.iter_child_nodes(node):
-      if isinstance(child,ast.stmt): visit([child],prefix)
-visit(tree.body,[])
-if wanted:
-  exact=[item for item in found if item['symbol']==wanted] if '.' in wanted else [item for item in found if item['symbol'].split('.')[-1]==wanted]
-  if len(exact)>1: fail("ambiguous symbol '%s'; provide a qualified lexical selector" % wanted)
-  if not exact: fail("symbol '%s' was not found" % wanted)
-  print(json.dumps({'candidates':exact},ensure_ascii=False))
-else:
-  counts={}
-  for item in found: counts[item['symbol']]=counts.get(item['symbol'],0)+1
-  for item in found:
-    if counts[item['symbol']]>1:
-      item['coverage']='partial'; item['unresolved']=list(item['unresolved'])+['qualified symbol is reassigned or duplicated']
-  print(json.dumps({'candidates':found},ensure_ascii=False))`;
-function inspectPythonSelectors(rootDir, sourcePath, symbol) {
-  const root = realpathSync2(rootDir);
-  const absolute = resolve2(root, sourcePath);
-  const result = spawnSync("python3", ["-I", "-c", SELECTOR_HELPER], {
-    input: JSON.stringify({ root, path: absolute, ...symbol ? { symbol } : {} }),
-    encoding: "utf8",
-    maxBuffer: 4 * 1024 * 1024,
-    timeout: 1e4
-  });
-  if (result.error || result.status !== 0)
-    throw new Error(`python3 unavailable: ${result.error?.message ?? result.stderr ?? "helper failed"}`);
-  let parsed;
-  try {
-    parsed = JSON.parse(result.stdout.trim());
-  } catch {
-    throw new Error("Python AST selector helper returned invalid output");
-  }
-  if (parsed.error)
-    throw new Error(parsed.error);
-  return parsed.candidates ?? [];
-}
-var DISCOVERY_HELPER = String.raw`import ast,json,os,sys
-req=json.loads(sys.stdin.read()); root=os.path.realpath(req['root']); path=os.path.abspath(req['path'])
-def inside(p): return p==root or p.startswith(root+os.sep)
-def fail(message): print(json.dumps({'candidates':[],'error':message})); raise SystemExit
-try:
-  if not inside(path): fail('source path escapes repository root')
-  cursor=path
-  while cursor != root:
-    if os.path.islink(cursor): fail('source path uses a symlink')
-    parent=os.path.dirname(cursor)
-    if parent==cursor: break
-    cursor=parent
-  if os.path.islink(path) or not os.path.isfile(path): fail('source path is unavailable or symlinked')
-  if os.path.getsize(path)>2*1024*1024: fail('source exceeds byte bound')
-  text=open(path,encoding='utf-8').read(); tree=ast.parse(text,filename=path)
-  parents={child:node for node in ast.walk(tree) for child in ast.iter_child_nodes(node)}
-  bindings={}; binding_counts={}
-  # Bare Agent(...) is only trusted when Agent came from a known agent
-  # framework. Local classes and arbitrary SDKs must not become prompt sources.
-  allowed_modules=set(${PYTHON_AGENT_MODULES_LITERAL})
-  agent_names=set(); agent_modules=set(); shadowed=set(); shadowed_modules=set()
-  for node in tree.body:
-    if isinstance(node,ast.ImportFrom) and node.level==0:
-      for alias in node.names:
-        if alias.name=='Agent' and node.level==0 and node.module in allowed_modules: agent_names.add(alias.asname or alias.name)
-    if isinstance(node,ast.Import):
-      for alias in node.names:
-        module=alias.name
-        # A dotted import without an explicit alias binds its top-level
-        # package (for example, import agno.agent binds agno), so it must
-        # not silently authorize agno.Agent.
-        if module in allowed_modules and (alias.asname or '.' not in module): agent_modules.add(alias.asname or module)
-    if isinstance(node,(ast.ClassDef,ast.FunctionDef,ast.AsyncFunctionDef)) and node.name in agent_names: shadowed.add(node.name)
-    if isinstance(node,(ast.Assign,ast.AnnAssign)):
-      targets=node.targets if isinstance(node,ast.Assign) else [node.target]
-      for target in targets:
-        if isinstance(target,ast.Name):
-          binding_counts[target.id]=binding_counts.get(target.id,0)+1
-          bindings[target.id]=node.value
-          if target.id in agent_names: shadowed.add(target.id)
-          if target.id in agent_modules: shadowed_modules.add(target.id)
-    if isinstance(node,ast.AugAssign) and isinstance(node.target,ast.Name):
-      if node.target.id in agent_names: shadowed.add(node.target.id)
-      if node.target.id in agent_modules: shadowed_modules.add(node.target.id)
-  agent_names-=shadowed
-  agent_modules-=shadowed_modules
-  def literal(node, seen=None):
-    seen=seen or set()
-    if isinstance(node,ast.Constant) and isinstance(node.value,str): return (True,node.value,'')
-    if isinstance(node,ast.Name) and node.id in bindings and node.id not in seen:
-      return literal(bindings[node.id], seen|{node.id})
-    if isinstance(node,ast.BinOp) and isinstance(node.op,ast.Add):
-      left=literal(node.left,seen); right=literal(node.right,seen)
-      if left[0] and right[0]: return (True,left[1]+right[1],'')
-      return (False,None,'concatenation contains a dynamic value')
-    return (False,None,'unsupported Python expression '+type(node).__name__)
-  def context(node):
-    current=parents.get(node); cls=None; fn=None
-    while current is not None:
-      if isinstance(current,ast.ClassDef) and cls is None: cls=current.name
-      if isinstance(current,(ast.FunctionDef,ast.AsyncFunctionDef)) and fn is None: fn=current.name
-      current=parents.get(current)
-    return cls,fn
-  def assignment_target(node):
-    parent=parents.get(node)
-    if isinstance(parent,ast.Assign) and parent.value is node:
-      names=[target.id for target in parent.targets if isinstance(target,ast.Name)]
-      return names[0] if len(names)==1 else None
-    if isinstance(parent,ast.AnnAssign) and parent.value is node and isinstance(parent.target,ast.Name): return parent.target.id
-    return None
-  calls=[]
-  for node in ast.walk(tree):
-    if not isinstance(node,ast.Call): continue
-    fn=node.func.id if isinstance(node.func,ast.Name) else node.func.attr if isinstance(node.func,ast.Attribute) else None
-    trusted=(isinstance(node.func,ast.Name) and fn in agent_names) or (isinstance(node.func,ast.Attribute) and isinstance(node.func.value,ast.Name) and node.func.value.id in agent_modules and fn=='Agent')
-    if not trusted: continue
-    fields=[keyword for keyword in node.keywords if keyword.arg in ('instructions','system_prompt','systemPrompt')]
-    if len(fields)!=1: continue
-    field=fields[0]; cls,method=context(node); target=assignment_target(node)
-    if cls and method: symbol=cls+'.'+method
-    elif method: symbol=method
-    elif target: symbol=target+'.'+field.arg
-    else: continue
-    calls.append((symbol,field,node,cls,method))
-  by_symbol={}
-  for item in calls: by_symbol.setdefault(item[0],[]).append(item)
-  out=[]
-  for symbol,items in sorted(by_symbol.items()):
-    if len(items)!=1: continue
-    _,field,node,cls,method=items[0]
-    source=ast.get_source_segment(text,field.value) or ast.get_source_segment(text,node) or ''
-    ok,value,reason=literal(field.value)
-    out.append({'symbol':symbol,'field':field.arg,'kind':'text' if ok else 'builder','content':value if ok else None,'sourceText':source,'line':getattr(field,'lineno',getattr(node,'lineno',1)),'knownBuilder':bool(method),'unresolved':[] if ok else [reason]})
-  # A local system message can identify its owning builder without inventing
-  # a module-level selector for the local variable. Only directly addressable
-  # functions/class methods are eligible; nested functions stay unresolved.
-  seen_symbols={item['symbol'] for item in out}
-  for node in ast.walk(tree):
-    if not isinstance(node,ast.Call): continue
-    fn=node.func.id if isinstance(node.func,ast.Name) else node.func.attr if isinstance(node.func,ast.Attribute) else None
-    if fn!='SystemMessage': continue
-    current=parents.get(node)
-    while current is not None and not isinstance(current,(ast.FunctionDef,ast.AsyncFunctionDef)): current=parents.get(current)
-    if current is None: continue
-    parent=parents.get(current)
-    if parent is tree: symbol=current.name
-    elif isinstance(parent,ast.ClassDef) and parents.get(parent) is tree: symbol=parent.name+'.'+current.name
-    else: continue
-    if symbol in seen_symbols: continue
-    seen_symbols.add(symbol)
-    out.append({'symbol':symbol,'field':'instructions','kind':'builder','knownBuilder':True,'sourceText':ast.get_source_segment(text,current) or '', 'line':current.lineno,'unresolved':['system message is assembled inside a callable']})
-  for cls in tree.body:
-    if not isinstance(cls,ast.ClassDef): continue
-    for child in cls.body:
-      targets=child.targets if isinstance(child,ast.Assign) else [child.target] if isinstance(child,ast.AnnAssign) else []
-      for item in targets:
-        if not isinstance(item,ast.Name) or not any(term in item.id.lower() for term in ('prompt','instruction','system','template')): continue
-        if child.value is None: continue
-        ok,value,reason=literal(child.value)
-        out.append({'symbol':cls.name+'.'+item.id,'field':'instructions','kind':'text' if ok else 'builder','content':value if ok else None,'sourceText':ast.get_source_segment(text,child) or '', 'line':child.lineno,'unresolved':[] if ok else [reason]})
-  print(json.dumps({'candidates':out},ensure_ascii=False))
-except SyntaxError as error: print(json.dumps({'candidates':[],'error':'syntax error: '+str(error)}))
-except SystemExit: pass
-except Exception as error: print(json.dumps({'candidates':[],'error':str(error)}))`;
-function discoverPythonPromptSources(rootDir, sourcePath) {
-  const result = spawnSync("python3", ["-I", "-c", DISCOVERY_HELPER], {
-    input: JSON.stringify({ root: rootDir, path: resolve2(rootDir, sourcePath) }),
-    encoding: "utf8",
-    maxBuffer: 4 * 1024 * 1024,
-    timeout: 1e4
-  });
-  if (result.error || result.status !== 0)
-    throw new Error(`python3 unavailable: ${result.error?.message ?? result.stderr ?? "helper failed"}`);
-  let parsed;
-  try {
-    parsed = JSON.parse(result.stdout.trim());
-  } catch {
-    throw new Error("Python AST discovery returned invalid output");
-  }
-  if (parsed.error)
-    throw new Error(parsed.error);
-  return parsed.candidates ?? [];
-}
-var HELPER = String.raw`import ast,json,os,sys
-req=json.loads(sys.stdin.read()); root=os.path.realpath(req['root']); path=os.path.abspath(req['path']); symbol=req.get('symbol'); force=req.get('force',False)
-def inside(p): return p==root or p.startswith(root+os.sep)
-files=[]; seen=set(); sum_bytes=0
-def load(p):
-  global sum_bytes
-  p=os.path.abspath(p)
-  if not inside(p): raise ValueError('local import escapes repository root')
-  cursor=p
-  while cursor != root:
-    if os.path.islink(cursor): raise ValueError('local import uses a symlink')
-    parent=os.path.dirname(cursor)
-    if parent == cursor: break
-    cursor=parent
-  p=os.path.realpath(p)
-  if not inside(p): raise ValueError('local import escapes repository root')
-  if p in seen: return None,''
-  if not os.path.isfile(p): raise ValueError('local import not found')
-  size=os.path.getsize(p)
-  if size>2*1024*1024: raise ValueError('source exceeds byte bound')
-  if len(files)>=256 or sum_bytes+size>16*1024*1024: raise ValueError('local dependency graph exceeded file or byte bound')
-  seen.add(p); files.append(p); sum_bytes+=size; text=open(p,encoding='utf-8').read(); return ast.parse(text,filename=p),text
-def fail(msg,src=''): return {'sourceText':src,'dynamic':True,'unresolved':[msg],'files':files, 'range':selected_range}
-selected_range=None
-try:
-  tree,text=load(path)
-  trusted_template_names=set()
-  allowed_agent_modules=set(${PYTHON_AGENT_MODULES_LITERAL})
-  agent_names=set(); agent_modules=set(); shadowed_agents=set(); shadowed_modules=set()
-  for item in tree.body:
-    if isinstance(item,ast.ImportFrom) and item.level==0:
-      for alias in item.names:
-        if alias.name=='Agent' and item.level==0 and item.module in allowed_agent_modules: agent_names.add(alias.asname or alias.name)
-        if item.module=='llama_index.core.prompts' and alias.name in ('RichPromptTemplate','PromptTemplate'):
-          trusted_template_names.add(alias.asname or alias.name)
-    if isinstance(item,ast.Import):
-      for alias in item.names:
-        if alias.name in allowed_agent_modules and (alias.asname or '.' not in alias.name): agent_modules.add(alias.asname or alias.name)
-    if isinstance(item,(ast.ClassDef,ast.FunctionDef,ast.AsyncFunctionDef)) and item.name in agent_names:
-      shadowed_agents.add(item.name)
-    if isinstance(item,(ast.Assign,ast.AnnAssign)):
-      targets=item.targets if isinstance(item,ast.Assign) else [item.target]
-      if any(isinstance(target,ast.Name) and target.id in agent_names for target in targets):
-        shadowed_agents.update(target.id for target in targets if isinstance(target,ast.Name) and target.id in agent_names)
-      if any(isinstance(target,ast.Name) and target.id in agent_modules for target in targets):
-        shadowed_modules.update(target.id for target in targets if isinstance(target,ast.Name) and target.id in agent_modules)
-    if isinstance(item,ast.AugAssign) and isinstance(item.target,ast.Name):
-      if item.target.id in agent_names: shadowed_agents.add(item.target.id)
-      if item.target.id in agent_modules: shadowed_modules.add(item.target.id)
-  agent_names-=shadowed_agents; agent_modules-=shadowed_modules
-  def imported_path(current, node):
-    if not isinstance(node,ast.ImportFrom) or node.level < 1:return None
-    base=os.path.dirname(current)
-    for _ in range(node.level-1): base=os.path.dirname(base)
-    stem=os.path.join(base, *(node.module or '').split('.'))
-    for candidate in (stem+'.py',os.path.join(stem,'__init__.py')):
-      if os.path.isfile(candidate):return candidate
-    return None
-  def target(t,n):
-    if n and '.' in n:
-      parts=n.split('.'); matches=[]
-      def walk(statements, wanted):
-        for x in statements:
-          name=x.name if isinstance(x,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)) else None
-          targets=x.targets if isinstance(x,ast.Assign) else [x.target] if isinstance(x,ast.AnnAssign) else []
-          names=[y.id for y in targets if isinstance(y,ast.Name)]
-          if wanted[0] in ([name] if name else []) or wanted[0] in names:
-            if len(wanted)==1: matches.append(x)
-            elif isinstance(x,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)):
-              walk(x.body,wanted[1:])
-            elif isinstance(x,(ast.Assign,ast.AnnAssign)) and isinstance(x.value,ast.Call):
-              constructor=x.value.func.id if isinstance(x.value.func,ast.Name) else x.value.func.attr if isinstance(x.value.func,ast.Attribute) else None
-              trusted_constructor=(isinstance(x.value.func,ast.Name) and constructor in agent_names) or (isinstance(x.value.func,ast.Attribute) and isinstance(x.value.func.value,ast.Name) and x.value.func.value.id in agent_modules and constructor=='Agent')
-              if trusted_constructor:
-                fields=[keyword.value for keyword in x.value.keywords if keyword.arg==wanted[1]]
-                if len(wanted)==2 and len(fields)==1: matches.append(fields[0])
-          for child in ast.iter_child_nodes(x):
-            if isinstance(child,ast.stmt) and not isinstance(x,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)): walk([child],wanted)
-      walk(t.body,parts)
-      if len(matches)>1: raise ValueError("ambiguous symbol '"+n+"'; provide a selector with a unique definition")
-      return matches[0] if matches else None
-    matches=[]
-    for x in t.body:
-      if isinstance(x,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)) and x.name==n:matches.append(x)
-      if isinstance(x,ast.Assign):
-        if any(isinstance(y,ast.Name) and y.id==n for y in x.targets):matches.append(x)
-      if isinstance(x,ast.AnnAssign) and isinstance(x.target,ast.Name) and x.target.id==n:matches.append(x)
-    if len(matches)>1: raise ValueError("ambiguous symbol '"+n+"'; provide a selector with a unique definition")
-    return matches[0] if matches else None
-  chosen=target(tree,symbol) if symbol else None
-  if chosen is None and symbol:
-    print(json.dumps(fail("symbol '"+symbol+"' was not found",text))); raise SystemExit
-  if chosen is None:
-    terms=('prompt','instruction','system','message','template')
-    candidates=[]
-    def candidate_value(v):
-      return isinstance(v,(ast.JoinedStr,ast.BinOp,ast.List,ast.Tuple,ast.Dict,ast.Call)) or isinstance(v,ast.Constant) and isinstance(v.value,str)
-    for x in tree.body:
-      names=[]
-      if isinstance(x,ast.Assign):names=[y.id for y in x.targets if isinstance(y,ast.Name)]
-      if isinstance(x,ast.AnnAssign) and isinstance(x.target,ast.Name):names=[x.target.id]
-      if any(any(t in n.lower() for t in terms) for n in names) and (isinstance(x,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)) or candidate_value(x.value if isinstance(x,(ast.Assign,ast.AnnAssign)) else None)):candidates.append(x)
-    if len(candidates)>1: raise ValueError('ambiguous instruction-like symbols; provide a selector')
-    if candidates: chosen=candidates[0]
-  needs_imports=force or isinstance(chosen,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)) or (chosen is not None and any(isinstance(n,ast.Name) for n in ast.walk(chosen)))
-  module_scopes={os.path.realpath(path):tree}; queue=[(path,tree)] if needs_imports else []
-  while queue:
-    current,current_tree=queue.pop()
-    for item in current_tree.body:
-      candidate=imported_path(current,item)
-      if candidate and os.path.realpath(candidate) not in seen:
-        loaded=load(candidate)
-        if loaded[0] is not None:
-          module_scopes[os.path.realpath(candidate)]=loaded[0]; queue.append((candidate,loaded[0]))
-  template_seen={'value':False}
-  def value(node, scope, depth=0):
-    if depth>32:return (False,None,'static evaluation depth exceeded')
-    if isinstance(node,ast.Constant) and isinstance(node.value,(str,int,float,bool,type(None))):return True,node.value,''
-    if isinstance(node,ast.JoinedStr):return False,None,'f-string interpolation contains runtime expressions'
-    if isinstance(node,ast.BinOp) and isinstance(node.op,ast.Add):
-      a=value(node.left,scope,depth+1); b=value(node.right,scope,depth+1)
-      if a[0] and b[0] and isinstance(a[1],str) and isinstance(b[1],str):return True,a[1]+b[1],''
-      return False,None,'concatenation contains a dynamic or non-string value'
-    if isinstance(node,(ast.List,ast.Tuple)):
-      out=[]
-      for e in node.elts:
-        v=value(e,scope,depth+1)
-        if not v[0]:return v
-        out.append(v[1])
-      return True,out,''
-    if isinstance(node,ast.Dict):
-      out={}
-      for k,vn in zip(node.keys,node.values):
-        if k is None:return False,None,'dictionary unpacking is dynamic'
-        kv=value(k,scope,depth+1); vv=value(vn,scope,depth+1)
-        if not kv[0] or not vv[0]:return (False,None,kv[2] or vv[2])
-        if not isinstance(kv[1],str):return False,None,'non-string dictionary key'
-        if kv[1] in out:return False,None,'duplicate dictionary key'
-        out[kv[1]]=vv[1]
-      return True,out,''
-    if isinstance(node,ast.Name):
-      if node.id in mutated:return False,None,"binding '"+node.id+"' is reassigned or mutated"
-      if node.id in scope:return value(scope[node.id],scope,depth+1)
-      return False,None,"binding '"+node.id+"' was not found"
-    if isinstance(node,ast.Call) and isinstance(node.func,ast.Name) and node.func.id in trusted_template_names:
-      if len(node.args)==1 and not node.keywords:
-        literal_value=value(node.args[0],scope,depth+1)
-        if literal_value[0] and isinstance(literal_value[1],str):
-          template_seen['value']=True
-          return literal_value
-      template_keyword=[keyword.value for keyword in node.keywords if keyword.arg=='template']
-      if len(template_keyword)==1 and len(node.args)==0 and len(node.keywords)==1:
-        literal_value=value(template_keyword[0],scope,depth+1)
-        if literal_value[0] and isinstance(literal_value[1],str):
-          template_seen['value']=True
-          return literal_value
-      return False,None,'template constructor has unsupported or dynamic arguments'
-    if isinstance(node,ast.Call) and isinstance(node.func,ast.Attribute) and node.func.attr=='join' and len(node.args)==1:
-      sep=value(node.func.value,scope,depth+1); items=value(node.args[0],scope,depth+1)
-      if sep[0] and items[0] and isinstance(sep[1],str) and isinstance(items[1],list) and all(isinstance(x,str) for x in items[1]):return True,sep[1].join(items[1]),''
-      return False,None,'join contains a dynamic or non-string value'
-    return False,None,'unsupported Python expression '+type(node).__name__
-  if chosen is None: print(json.dumps(fail("symbol '"+(symbol or '<instruction-like candidate>')+"' was not found",text))); raise SystemExit
-  selected_range={'line':chosen.lineno,'endLine':getattr(chosen,'end_lineno',chosen.lineno)}
-  source=ast.get_source_segment(text,chosen) or text
-  if isinstance(chosen,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)):
-    result=fail('function/builder source requires runtime inputs',source)
-    if isinstance(chosen,ast.ClassDef): result['declarationKind']='class'
-    print(json.dumps(result)); raise SystemExit
-  scope={}
-  for x in tree.body:
-    if isinstance(x,ast.Assign):
-      for y in x.targets:
-        if isinstance(y,ast.Name):
-          if y.id in scope: raise ValueError("binding '"+y.id+"' is reassigned or mutated")
-          scope[y.id]=x.value
-    if isinstance(x,ast.AnnAssign) and isinstance(x.target,ast.Name):
-      if x.target.id in scope: raise ValueError("binding '"+x.target.id+"' is reassigned or mutated")
-      scope[x.target.id]=x.value
-  for item in tree.body:
-    candidate=imported_path(path,item)
-    imported_tree=module_scopes.get(os.path.realpath(candidate)) if candidate else None
-    if imported_tree is not None and isinstance(item,ast.ImportFrom):
-      imported_values={}
-      for statement in imported_tree.body:
-        if isinstance(statement,ast.Assign):
-          for target_name in statement.targets:
-            if isinstance(target_name,ast.Name):imported_values[target_name.id]=statement.value
-        if isinstance(statement,ast.AnnAssign) and isinstance(statement.target,ast.Name):imported_values[statement.target.id]=statement.value
-      for alias in item.names:
-        if alias.name in imported_values:scope[alias.asname or alias.name]=imported_values[alias.name]
-    if isinstance(item,ast.AugAssign) and isinstance(item.target,ast.Name):
-      raise ValueError("binding '"+item.target.id+"' is reassigned or mutated")
-  aliases={}; mutated=set(); mutable=set(); escaped=set(); methods={'append','clear','extend','insert','pop','remove','reverse','sort'}
-  def mutation_scan(node):
-    if isinstance(node,ast.Assign):
-      for target_name in node.targets:
-        if isinstance(target_name,ast.Name) and isinstance(node.value,ast.Name):aliases[target_name.id]=node.value.id
-        if isinstance(target_name,ast.Name) and isinstance(node.value,(ast.List,ast.Dict)):mutable.add(target_name.id)
-        if isinstance(target_name,ast.Subscript) and isinstance(target_name.value,ast.Name):mutated.add(target_name.value.id)
-        if isinstance(target_name,ast.Attribute) and isinstance(target_name.value,ast.Name):mutated.add(target_name.value.id+'.'+target_name.attr)
-    if isinstance(node,ast.AugAssign) and isinstance(node.target,ast.Name):mutated.add(node.target.id)
-    if isinstance(node,ast.AugAssign) and isinstance(node.target,ast.Subscript) and isinstance(node.target.value,ast.Name):mutated.add(node.target.value.id)
-    if isinstance(node,ast.AugAssign) and isinstance(node.target,ast.Attribute) and isinstance(node.target.value,ast.Name):mutated.add(node.target.value.id+'.'+node.target.attr)
-    if isinstance(node,ast.Delete) and any(isinstance(target_name,ast.Subscript) and isinstance(target_name.value,ast.Name) for target_name in node.targets):
-      for target_name in node.targets: 
-        if isinstance(target_name,ast.Subscript) and isinstance(target_name.value,ast.Name):mutated.add(target_name.value.id)
-    if isinstance(node,ast.Call):
-      if isinstance(node.func,ast.Attribute) and node.func.attr in methods and isinstance(node.func.value,ast.Name):mutated.add(node.func.value.id)
-      for argument in node.args:
-        if isinstance(argument,ast.Name):escaped.add(argument.id)
-    for child in ast.iter_child_nodes(node):mutation_scan(child)
-  mutation_scan(tree)
-  for imported_tree in module_scopes.values():
-    if imported_tree is not tree: mutation_scan(imported_tree)
-  changed=True
-  while changed:
-    changed=False
-    for alias,original in aliases.items():
-      if original in mutable and alias not in mutable:mutable.add(alias);changed=True
-  for binding in escaped:
-    if binding in mutable:mutated.add(binding)
-  changed=True
-  while changed:
-    changed=False
-    for alias,original in aliases.items():
-      if alias in mutated and original not in mutated:mutated.add(original);changed=True
-  selected_name = symbol if isinstance(chosen,ast.expr) and symbol and '.' in symbol else chosen.name if isinstance(chosen,(ast.FunctionDef,ast.AsyncFunctionDef,ast.ClassDef)) else (chosen.targets[0].id if isinstance(chosen,ast.Assign) and chosen.targets and isinstance(chosen.targets[0],ast.Name) else chosen.target.id if isinstance(chosen,ast.AnnAssign) and isinstance(chosen.target,ast.Name) else None)
-  if selected_name in mutated:
-    raise ValueError("binding '"+str(selected_name)+"' is reassigned or mutated")
-  node=chosen.value if isinstance(chosen,(ast.Assign,ast.AnnAssign)) else chosen if isinstance(chosen,ast.expr) else None
-  if node is None: print(json.dumps(fail('selected symbol has no static initializer',source))); raise SystemExit
-  good,val,reason=value(node,scope)
-  print(json.dumps({'value':val,'sourceText':source,'range':selected_range,'dynamic':not good,'template':template_seen['value'],'unresolved':[] if good else [reason],'files':files},ensure_ascii=False))
-except SystemExit: pass
-except SyntaxError as e: print(json.dumps({'sourceText':'','dynamic':True,'error':'syntax error: '+str(e),'unresolved':['Python source could not be parsed'],'files':files}))
-except Exception as e:
-  message=str(e)
-  if message.startswith('ambiguous '): print(json.dumps({'sourceText':text if 'text' in locals() else '', 'dynamic':True, 'error':message, 'unresolved':[message], 'files':files}))
-  else: print(json.dumps(fail(message,source if selected_range is not None and 'source' in locals() else '')))`;
-function extractPythonSource(rootDir, sourcePath, symbol, _forceDependencyGraph = false) {
-  let raw = "";
-  try {
-    raw = readFileSync2(sourcePath, "utf8");
-  } catch {}
-  const result = spawnSync("python3", ["-I", "-c", HELPER], {
-    input: JSON.stringify({ root: rootDir, path: sourcePath, symbol, force: _forceDependencyGraph }),
-    encoding: "utf8",
-    maxBuffer: 4 * 1024 * 1024,
-    timeout: 1e4
-  });
-  if (result.error || result.status !== 0)
-    throw new Error(`python3 unavailable: ${result.error?.message ?? result.stderr ?? "helper failed"}`);
-  let parsed;
-  try {
-    parsed = JSON.parse(result.stdout.trim());
-  } catch {
-    return { sourceText: raw, dynamic: true, unresolved: ["Python AST helper returned invalid output"], files: [sourcePath] };
-  }
-  if (parsed.error)
-    throw new Error(`${sourcePath}: ${parsed.error}`);
-  if (symbol && parsed.dynamic && parsed.unresolved.some((reason) => reason.includes("was not found")))
-    throw new Error(`${sourcePath}: symbol '${symbol}' was not found`);
-  return { ...parsed, sourceText: parsed.sourceText || raw, files: parsed.files?.length ? parsed.files : [sourcePath] };
-}
-
-// src/prompt-sources.ts
-var MAX_BYTES2 = 2 * 1024 * 1024;
-var CODE_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".py"]);
-var TEMPLATE_EXTENSIONS = new Set([".jinja", ".j2", ".jinja2", ".mustache", ".hbs", ".handlebars"]);
-function resolvePromptSource(rootDir, source) {
-  validatePromptSource(source);
-  const root = safeRoot(rootDir);
-  const sourceAbs = safePath(root, source.path);
-  const sourcePath = relative(root, sourceAbs).replaceAll("\\", "/");
-  if (selectorNamesAreSensitive(source.selector)) {
-    throw new Error(`${sourcePath}: selected prompt field name is sensitive credential material and was rejected`);
-  }
-  const ext = extname2(sourceAbs).toLowerCase();
-  let kind = source.kind ?? (TEMPLATE_EXTENSIONS.has(ext) ? "template" : "text");
-  let content = "";
-  let systemPrompt;
-  let messages;
-  let unresolved = [];
-  let complete = true;
-  const files = new Set([sourceAbs]);
-  const hasPointer = typeof source.selector?.pointer === "string";
-  if (CODE_EXTENSIONS.has(ext) && hasPointer) {
-    throw new Error(`${sourcePath}: pointer selectors require a JSON or YAML source`);
-  }
-  if (hasPointer && ![".json", ".yaml", ".yml"].includes(ext)) {
-    throw new Error(`${sourcePath}: pointer selectors require a JSON or YAML source`);
-  }
-  if (CODE_EXTENSIONS.has(ext) && !hasPointer) {
-    const extraction = ext === ".py" ? extractPythonSource(root, sourceAbs, source.selector?.symbol, source.kind === "builder") : extractCodeSource(root, sourceAbs, source.selector?.symbol, source.kind === "builder");
-    extraction.files.forEach((file) => files.add(safePath(root, file)));
-    unresolved = extraction.unresolved;
-    if (source.kind === "builder" || extraction.dynamic) {
-      kind = "builder";
-      content = extraction.sourceText;
-      complete = false;
-    } else if (typeof extraction.value === "string") {
-      content = extraction.value;
-      kind = source.kind === "template" || "template" in extraction && extraction.template === true || ext === ".py" && hasPythonFormatFields(extraction.value) ? "template" : "text";
-    } else if (Array.isArray(extraction.value)) {
-      if (isMessageArray(extraction.value)) {
-        messages = extraction.value;
-        content = JSON.stringify(messages);
-        kind = source.kind === "template" ? "template" : "messages";
-      } else {
-        kind = "builder";
-        content = extraction.sourceText;
-        complete = false;
-        unresolved = [...unresolved, "static array is not a role/content message array"];
-      }
-    } else if (extraction.value && typeof extraction.value === "object") {
-      const object = extraction.value;
-      if (!["content", "template", "systemPrompt", "system_prompt", "messages", "prompt"].some((field) => (field in object))) {
-        kind = "builder";
-        content = extraction.sourceText;
-        complete = false;
-        unresolved = [...unresolved, "static object is not a rendered prompt; retained selected source for semantic review"];
-      } else {
-        const structured = fromStructured(extraction.value, source.kind);
-        content = structured.content;
-        systemPrompt = structured.systemPrompt;
-        messages = structured.messages;
-        kind = structured.kind;
-      }
-    } else {
-      kind = "builder";
-      content = extraction.sourceText;
-      complete = false;
-    }
-  } else if (source.selector?.symbol) {
-    throw new Error(`${sourcePath}: symbol selectors require a JavaScript, TypeScript, or Python source file`);
-  } else if (ext === ".json" || ext === ".yaml" || ext === ".yml" || hasPointer || source.kind === "messages") {
-    const parsed = parseStructured(readFileSync3(sourceAbs, "utf8"), sourcePath, ext);
-    const selected = hasPointer ? jsonPointer(parsed, source.selector.pointer, sourcePath) : parsed;
-    const selectedField = source.selector?.pointer?.split("/").at(-1)?.replaceAll("~1", "/").replaceAll("~0", "~");
-    const inferredKind = !source.kind && selectedField && /^(?:template|system_template|instance_template)$/.test(selectedField) ? "template" : source.kind;
-    const structured = fromStructured(selected, inferredKind);
-    content = structured.content;
-    systemPrompt = structured.systemPrompt;
-    messages = structured.messages;
-    kind = structured.kind;
-  } else {
-    const raw = readFileSync3(sourceAbs, "utf8");
-    if (ext === ".md" && /\.prompt\.md$/i.test(sourcePath)) {
-      const legacy = parseLegacyMarkdown(raw);
-      content = legacy.content;
-      systemPrompt = legacy.systemPrompt;
-    } else
-      content = raw;
-    kind = source.kind === "builder" ? "builder" : source.kind === "template" ? "template" : kind;
-    if (kind === "builder")
-      complete = false;
-  }
-  if (kind === "text" && !source.kind && [".json", ".yaml", ".yml"].includes(ext) && /\{\{[\s\S]+?\}\}|\{%[\s\S]+?%\}/.test(content))
-    kind = "template";
-  if (kind === "builder")
-    complete = false;
-  if (kind === "builder" && !unresolved.some((reason) => reason.includes("dependency graph is not exhaustive"))) {
-    unresolved.push("dynamic dependency graph is not exhaustive; source hashes cover only resolved local files");
-  }
-  if (source.dependencies) {
-    for (const dependency of source.dependencies) {
-      const depAbs = safePath(root, dependency.path);
-      files.add(depAbs);
-      if (typeof dependency.selector?.pointer === "string") {
-        const parsed = parseStructured(readFileSync3(depAbs, "utf8"), dependency.path, extname2(depAbs).toLowerCase());
-        jsonPointer(parsed, dependency.selector.pointer, dependency.path);
-      } else if (dependency.selector?.symbol && CODE_EXTENSIONS.has(extname2(depAbs).toLowerCase())) {
-        const dep = extname2(depAbs).toLowerCase() === ".py" ? extractPythonSource(root, depAbs, dependency.selector.symbol) : extractCodeSource(root, depAbs, dependency.selector.symbol);
-        dep.files.forEach((file) => files.add(safePath(root, file)));
-        if (dep.dynamic) {
-          complete = false;
-          unresolved.push(...dep.unresolved);
-        }
-      }
-    }
-  }
-  if (!content && kind !== "builder")
-    throw new Error(`${sourcePath}: selected prompt source is empty`);
-  if (source.kind && source.kind !== kind) {
-    throw new Error(`${sourcePath}: declared source kind '${source.kind}' does not match resolved kind '${kind}'`);
-  }
-  const materialized = [content, systemPrompt ?? "", messages ? JSON.stringify(messages) : ""].join(`
-`);
-  if (kind === "builder")
-    assertSafeMaterializedContent(content, sourcePath);
-  else
-    assertSafeMaterializedContent(materialized, sourcePath);
-  const dependencies = [...files].sort().map((path) => ({ path: relative(root, path).replaceAll("\\", "/"), contentHash: sha256(readFileSync3(path)) }));
-  const sourceHash = sha256(JSON.stringify({ kind, content, systemPrompt: systemPrompt ?? null, messages: messages ?? null }));
-  const sourceDefinition = {
-    schemaVersion: 1,
-    kind,
-    source,
-    dependencies,
-    coverage: complete && unresolved.length === 0 ? "complete" : "partial",
-    unresolved: [...new Set(unresolved)],
-    sourceHash
-  };
-  return { key: source.key, name: source.key, sourcePath, content, systemPrompt, messages, sourceDefinition };
-}
-function assertSafeMaterializedContent(value, sourcePath) {
-  if (redactString(value) !== value || /-----BEGIN [A-Z ]*PRIVATE KEY-----/.test(value)) {
-    throw new Error(`${sourcePath}: selected prompt material looks like a credential and was rejected`);
-  }
-}
-function selectorNamesAreSensitive(selector) {
-  if (!selector)
-    return false;
-  const names = selector.symbol ? selector.symbol.split(".") : (selector.pointer ?? "").split("/").slice(1).map((part) => part.replaceAll("~1", "/").replaceAll("~0", "~"));
-  return names.some((name) => {
-    const normalized = name.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/[-\s]/g, "_").toLowerCase();
-    return SECRET_KEYS.has(normalized) || normalized === "auth" || normalized === "credentials";
-  });
-}
-function validatePromptSource(value) {
-  if (!value || typeof value !== "object")
-    throw new Error("Prompt source must be an object");
-  const source = value;
-  if (Object.keys(source).some((key) => !["key", "path", "selector", "kind", "dependencies"].includes(key)))
-    throw new Error("Prompt source contains an unknown field");
-  if (typeof source.key !== "string" || !source.key.trim())
-    throw new Error("Prompt source key must be a non-empty string");
-  if (typeof source.path !== "string" || !source.path.trim() || source.path.includes("\x00") || isAbsolute(source.path) || source.path.split(/[\\/]/).includes(".."))
-    throw new Error(`${source.key}: source path must be a repository-relative safe string`);
-  if (source.kind !== undefined && !["text", "messages", "template", "builder"].includes(source.kind))
-    throw new Error(`${source.key}: unsupported source kind`);
-  if (source.selector && typeof source.selector === "object" && Object.keys(source.selector).some((key) => !["symbol", "pointer"].includes(key)))
-    throw new Error(`${source.key}: selector contains an unknown field`);
-  if (source.selector && (source.selector.symbol !== undefined && typeof source.selector.symbol !== "string" || source.selector.pointer !== undefined && typeof source.selector.pointer !== "string"))
-    throw new Error(`${source.key}: selector fields must be strings`);
-  if (source.selector) {
-    const hasSymbol = typeof source.selector.symbol === "string" && source.selector.symbol.trim().length > 0;
-    const hasPointer = typeof source.selector.pointer === "string";
-    if (hasSymbol === hasPointer)
-      throw new Error(`${source.key}: selector must contain exactly one of symbol or pointer`);
-  }
-  if (source.dependencies && (!Array.isArray(source.dependencies) || source.dependencies.some((dep) => {
-    if (!dep || typeof dep !== "object" || Object.keys(dep).some((key) => !["path", "selector"].includes(key)) || typeof dep.path !== "string" || !dep.path.trim() || isAbsolute(dep.path) || dep.path.split(/[\\/]/).includes(".."))
-      return true;
-    const selector = dep.selector;
-    if (!selector)
-      return false;
-    if (typeof selector !== "object" || Object.keys(selector).some((key) => !["symbol", "pointer"].includes(key)))
-      return true;
-    const hasSymbol = typeof selector.symbol === "string" && selector.symbol.trim().length > 0;
-    const hasPointer = typeof selector.pointer === "string";
-    return selector.symbol !== undefined && typeof selector.symbol !== "string" || selector.pointer !== undefined && typeof selector.pointer !== "string" || hasSymbol === hasPointer;
-  })))
-    throw new Error(`${source.key}: dependencies must contain safe paths and unambiguous selectors`);
-  return source;
-}
-function discoverStructuredPromptSources(rootDir, sourcePath) {
-  const root = safeRoot(rootDir);
-  const file = safePath(root, sourcePath);
-  const ext = extname2(file).toLowerCase();
-  if (![".json", ".yaml", ".yml"].includes(ext))
-    return [];
-  const value = parseStructured(readFileSync3(file, "utf8"), sourcePath, ext);
-  const sources = [];
-  const base = sourcePath.replace(/\.[^.]+$/, "").replace(/[^A-Za-z0-9_.-]+/g, ".");
-  const dedicatedPath = /(^|\/)prompts?(?:\/|\.[^/]+$)|\.prompt\.[^.]+$/i.test(sourcePath);
-  const modelKeys = /^(?:model|llm|model_name|modelName|model_id|modelId|model_config)$/i;
-  const hasModelContext = (objects) => objects.some((object) => Object.keys(object).some((key) => modelKeys.test(key)) || object.client_config && typeof object.client_config === "object" && Object.keys(object.client_config).some((key) => modelKeys.test(key)));
-  const hasToolAgentContext = (parts, objects) => parts.includes("agent") && objects.some((object) => {
-    const templates = object.templates;
-    return templates && typeof templates === "object" && !Array.isArray(templates) && typeof templates.system_template === "string" && object.tools && typeof object.tools === "object" && !Array.isArray(object.tools);
-  });
-  let visited = 0;
-  const walk = (node, parts, depth, ancestors) => {
-    if (++visited > 1e4 || depth > 32)
-      throw new Error("Structured prompt discovery exceeded node or depth bound");
-    if (!node || typeof node !== "object")
-      return;
-    const object = node;
-    const contextObjects = [...ancestors, object];
-    const nestedPromptContext = parts.some((part) => /^(?:agent|agents|prompt|prompts|template|templates|llm|model)$/i.test(part));
-    const contextual = dedicatedPath || hasModelContext([object]) || nestedPromptContext && hasModelContext(ancestors) || hasToolAgentContext(parts, contextObjects);
-    for (const [name, child] of Object.entries(node)) {
-      const path = [...parts, name];
-      const promptText = /^(?:system|system_prompt|systemPrompt|system_message|system_template|instance_template|instructions|prompt|backstory|template)$/.test(name) && typeof child === "string" && child.trim();
-      const promptMessages = name === "messages" && Array.isArray(child) && isMessageArray(child) && child.some((item) => ["system", "developer"].includes(String(item.role)));
-      if (promptText || promptMessages) {
-        const crewBackstory = name === "backstory" && "role" in object && "goal" in object;
-        if (!contextual && !crewBackstory)
-          continue;
-        if (name === "system" && !(("model" in object) || ("tools" in object)) && !contextual)
-          continue;
-        const pointer = "/" + path.map((part) => part.replaceAll("~", "~0").replaceAll("/", "~1")).join("/");
-        sources.push({ key: `${base}.${path.map((part) => part.replace(/[^A-Za-z0-9_-]/g, "_")).join(".")}`, path: sourcePath, selector: { pointer }, .../template$/.test(name) ? { kind: "template" } : {} });
-      } else if (child && typeof child === "object")
-        walk(child, path, depth + 1, contextObjects);
-    }
-  };
-  walk(value, [], 0, []);
-  return sources;
-}
-function backfillPromptSource(rootDir, artifact) {
-  if (artifact.promptSource)
-    return artifact.promptSource;
-  if (!artifact.sourcePath)
-    return;
-  if (/\.(?:[cm]?[jt]sx?|py)$/.test(artifact.sourcePath)) {
-    const candidates = discoverCodePromptSources(rootDir, artifact.sourcePath);
-    const name = (artifact.name ?? "").replace(/[^a-z0-9]/gi, "").toLowerCase();
-    const matching = candidates.filter((source) => source.selector?.symbol?.replace(/[^a-z0-9]/gi, "").toLowerCase() === name);
-    return matching.length === 1 ? matching[0] : undefined;
-  }
-  return { key: artifact.id, path: artifact.sourcePath };
-}
-function discoverCodePromptSources(rootDir, sourcePath) {
-  return discoverCodePromptCandidates(rootDir, sourcePath).map((candidate) => candidate.source);
-}
-function discoverCodePromptCandidates(rootDir, sourcePath) {
-  const root = safeRoot(rootDir);
-  const file = safePath(root, sourcePath);
-  const ext = extname2(file).toLowerCase();
-  if (!CODE_EXTENSIONS.has(ext))
-    return [];
-  const rel = relative(root, file).replaceAll("\\", "/");
-  const base = rel.replace(/\.[^.]+$/, "").replace(/[^A-Za-z0-9_.-]+/g, ".").replace(/[.-]+/g, ".");
-  const names = new Set;
-  const modelInputs = new Set;
-  const knownBuilders = new Set;
-  const addName = (name, knownBuilder = false) => {
-    names.add(name);
-    if (knownBuilder)
-      knownBuilders.add(name);
-  };
-  if (ext === ".py") {
-    for (const candidate of discoverPythonPromptSources(root, file)) {
-      addName(candidate.symbol, candidate.knownBuilder === true);
-      modelInputs.add(candidate.symbol);
-    }
-    for (const match of readFileSync3(file, "utf8").matchAll(/^(?:(?:async\s+)?def\s+([A-Za-z_]\w*)|([A-Za-z_]\w*)\s*=\s*([^\n#]+))/gm)) {
-      const name = match[1] ?? match[2];
-      const rhs = match[3] ?? "";
-      if (name && isPromptName2(name) && (match[1] || /['"`\[({+]/.test(rhs) || /^[A-Za-z_]\w*\s*$/.test(rhs)))
-        addName(name, Boolean(match[1]));
-    }
-  } else {
-    const sf = import_typescript2.default.createSourceFile(file, readFileSync3(file, "utf8"), import_typescript2.default.ScriptTarget.Latest, true, import_typescript2.default.ScriptKind.TSX);
-    const agentConstructors = new Set;
-    for (const statement of sf.statements) {
-      if (!import_typescript2.default.isImportDeclaration(statement) || !import_typescript2.default.isStringLiteral(statement.moduleSpecifier) || !TYPESCRIPT_AGENT_MODULES.includes(statement.moduleSpecifier.text))
-        continue;
-      const bindings = statement.importClause?.namedBindings;
-      if (bindings && import_typescript2.default.isNamedImports(bindings)) {
-        for (const binding of bindings.elements) {
-          if ((binding.propertyName ?? binding.name).text === "Agent")
-            agentConstructors.add(binding.name.text);
-        }
-      }
-    }
-    for (const statement of sf.statements) {
-      if (import_typescript2.default.isVariableStatement(statement)) {
-        for (const node of statement.declarationList.declarations) {
-          if (import_typescript2.default.isIdentifier(node.name) && isPromptName2(node.name.text) && isCandidateInitializer2(node.initializer)) {
-            addName(node.name.text, Boolean(node.initializer && (import_typescript2.default.isFunctionExpression(node.initializer) || import_typescript2.default.isArrowFunction(node.initializer))));
-          }
-          if (import_typescript2.default.isIdentifier(node.name) && node.initializer) {
-            const initializer = node.initializer;
-            const objects = import_typescript2.default.isObjectLiteralExpression(initializer) && isPromptName2(node.name.text) ? [initializer] : (import_typescript2.default.isCallExpression(initializer) || import_typescript2.default.isNewExpression(initializer)) && import_typescript2.default.isIdentifier(initializer.expression) && agentConstructors.has(initializer.expression.text) ? [...initializer.arguments ?? []].filter(import_typescript2.default.isObjectLiteralExpression) : [];
-            for (const object of objects) {
-              for (const property of object.properties) {
-                if (!import_typescript2.default.isPropertyAssignment(property) || !import_typescript2.default.isIdentifier(property.name))
-                  continue;
-                if (!/^(?:instructions|systemPrompt|system_prompt|prompt|messages)$/.test(property.name.text))
-                  continue;
-                if (isCandidateInitializer2(property.initializer) || import_typescript2.default.isIdentifier(property.initializer))
-                  addName(`${node.name.text}.${property.name.text}`);
-              }
-            }
-          }
-        }
-      } else if (import_typescript2.default.isFunctionDeclaration(statement) && statement.name && isPromptName2(statement.name.text)) {
-        addName(statement.name.text, true);
-      } else if (import_typescript2.default.isClassDeclaration(statement) && statement.name) {
-        for (const member of statement.members) {
-          if (import_typescript2.default.isMethodDeclaration(member) && member.name && import_typescript2.default.isIdentifier(member.name) && isPromptName2(member.name.text)) {
-            addName(`${statement.name.text}.${member.name.text}`, true);
-          }
-        }
-      }
-    }
-    const visitModelCall = (node) => {
-      if (import_typescript2.default.isCallExpression(node)) {
-        const callee = node.expression.getText(sf).replace(/\s/g, "");
-        if (/(?:^|\.)(?:generateText|streamText)$|\.(?:messages|chat\.completions|responses)\.create$/.test(callee)) {
-          for (const argument of node.arguments) {
-            if (!import_typescript2.default.isObjectLiteralExpression(argument))
-              continue;
-            for (const property of argument.properties) {
-              if (!import_typescript2.default.isPropertyAssignment(property) || !import_typescript2.default.isIdentifier(property.name))
-                continue;
-              if (/^(?:system|instructions|systemPrompt|system_prompt)$/.test(property.name.text) && import_typescript2.default.isIdentifier(property.initializer)) {
-                addName(property.initializer.text, knownBuilders.has(property.initializer.text));
-                modelInputs.add(property.initializer.text);
-              }
-            }
-          }
-        }
-      }
-      import_typescript2.default.forEachChild(node, visitModelCall);
-    };
-    visitModelCall(sf);
-  }
-  return [...names].sort().map((name) => ({ source: { key: `${base}.${name}`, path: rel, selector: { symbol: name } }, modelInput: modelInputs.has(name), ...knownBuilders.has(name) ? { knownBuilder: true } : {} }));
-}
-function isPromptName2(name) {
-  return /prompt|instruction|system|message|template/i.test(name);
-}
-function isCandidateInitializer2(initializer) {
-  if (!initializer)
-    return false;
-  return import_typescript2.default.isStringLiteral(initializer) || import_typescript2.default.isNoSubstitutionTemplateLiteral(initializer) || import_typescript2.default.isTemplateExpression(initializer) || import_typescript2.default.isBinaryExpression(initializer) && initializer.operatorToken.kind === import_typescript2.default.SyntaxKind.PlusToken || import_typescript2.default.isFunctionExpression(initializer) || import_typescript2.default.isArrowFunction(initializer) || import_typescript2.default.isIdentifier(initializer) || import_typescript2.default.isCallExpression(initializer) && import_typescript2.default.isPropertyAccessExpression(initializer.expression) && initializer.expression.name.text === "join" || import_typescript2.default.isArrayLiteralExpression(initializer) && initializer.elements.some((item) => import_typescript2.default.isObjectLiteralExpression(item) || import_typescript2.default.isStringLiteral(item));
-}
-function fromStructured(value, requestedKind) {
-  if (typeof value === "string") {
-    if (requestedKind === "messages")
-      throw new Error("A messages source must resolve to a role/content array");
-    return { kind: requestedKind === "template" || requestedKind === "builder" ? requestedKind : "text", content: value };
-  }
-  if (Array.isArray(value)) {
-    if (requestedKind === "text")
-      throw new Error("A text source cannot resolve to a message array");
-    if (!isMessageArray(value))
-      throw new Error("Structured prompt array must contain role/content messages");
-    return { kind: requestedKind === "template" || requestedKind === "builder" ? requestedKind : "messages", content: JSON.stringify(value), messages: value };
-  }
-  if (!value || typeof value !== "object")
-    throw new Error("Selected structured prompt value must be text, object, or message array");
-  const object = value;
-  const hasMessages = object.messages !== undefined;
-  if (hasMessages && (!Array.isArray(object.messages) || !isMessageArray(object.messages))) {
-    throw new Error("Structured prompt messages must contain role/content messages");
-  }
-  const objectMessages = hasMessages ? object.messages : undefined;
-  if (requestedKind === "messages" && !objectMessages)
-    throw new Error("A messages source must resolve to a role/content array");
-  const standaloneSystemPrompt = typeof object.systemPrompt === "string" && object.systemPrompt.trim() ? object.systemPrompt : typeof object.system_prompt === "string" && object.system_prompt.trim() ? object.system_prompt : undefined;
-  const replayKind = requestedKind === "template" || requestedKind === "builder" ? requestedKind : undefined;
-  const contentKind = replayKind ?? (requestedKind === "text" ? "text" : objectMessages ? "messages" : "text");
-  if (typeof object.content === "string" && object.content.trim())
-    return { kind: contentKind, content: object.content, systemPrompt: standaloneSystemPrompt, messages: objectMessages };
-  if (standaloneSystemPrompt)
-    return { kind: contentKind, content: standaloneSystemPrompt, systemPrompt: standaloneSystemPrompt, messages: objectMessages };
-  if (objectMessages)
-    return { kind: replayKind ?? "messages", content: JSON.stringify(objectMessages), messages: objectMessages, systemPrompt: standaloneSystemPrompt };
-  if (typeof object.prompt === "string" && object.prompt.trim())
-    return { kind: replayKind ?? "text", content: object.prompt, systemPrompt: standaloneSystemPrompt };
-  if (typeof object.template === "string") {
-    if (requestedKind === "text" || requestedKind === "messages")
-      throw new Error(`A ${requestedKind} source cannot resolve from a template field`);
-    return { kind: requestedKind === "builder" ? "builder" : "template", content: object.template };
-  }
-  if (requestedKind === "messages")
-    throw new Error("A messages source must resolve to a role/content array");
-  throw new Error("Structured prompt object requires content, template, systemPrompt, messages, or prompt");
-}
-function isMessageArray(value) {
-  return value.length > 0 && value.every((item) => {
-    if (!item || typeof item !== "object")
-      return false;
-    const message = item;
-    return typeof message.role === "string" && ["system", "developer", "user", "assistant", "tool"].includes(message.role) && "content" in message;
-  });
-}
-function hasPythonFormatFields(value) {
-  return /(?<!\{)\{[A-Za-z_]\w*(?:\.[A-Za-z_]\w*)?(?:![rsa])?(?::[^{}]*)?\}(?!\})/.test(value);
-}
-function parseLegacyMarkdown(raw) {
-  if (!raw.startsWith("---"))
-    return { content: raw.trim() };
-  const end = raw.indexOf(`
----`, 3);
-  if (end < 0)
-    return { content: raw.trim() };
-  const frontmatter = {};
-  for (const line of raw.slice(3, end).trim().split(`
-`)) {
-    const match = line.match(/^([A-Za-z0-9_-]+):\s*(.*)$/);
-    if (match)
-      frontmatter[match[1]] = match[2].replace(/^["']|["']$/g, "");
-  }
-  return { content: raw.slice(end + 4).trim(), systemPrompt: frontmatter.system_prompt || frontmatter.systemPrompt };
-}
-function parseStructured(raw, path, ext) {
-  try {
-    if (ext === ".json") {
-      JSON.parse(raw);
-      const document2 = $parseDocument(raw, { uniqueKeys: true, json: true });
-      if (document2.errors.length)
-        throw document2.errors[0];
-      return document2.toJS();
-    }
-    const document = $parseDocument(raw, { uniqueKeys: true, logLevel: "silent" });
-    if (document.errors.length || document.warnings.length)
-      throw document.errors[0] ?? document.warnings[0];
-    return document.toJS({ maxAliasCount: 100 });
-  } catch (error) {
-    throw new Error(`${path}: malformed structured source (${error instanceof Error ? error.message : String(error)})`);
-  }
-}
-function jsonPointer(value, pointer, path) {
-  if (pointer === "")
-    return value;
-  if (!pointer.startsWith("/"))
-    throw new Error(`${path}: JSON Pointer must start with '/'`);
-  let current = value;
-  for (const token of pointer.slice(1).split("/").map((part) => part.replaceAll("~1", "/").replaceAll("~0", "~"))) {
-    if (Array.isArray(current) && /^0$|^[1-9]\d*$/.test(token))
-      current = current[Number(token)];
-    else if (current && typeof current === "object" && token in current)
-      current = current[token];
-    else
-      throw new Error(`${path}: JSON Pointer '${pointer}' did not resolve`);
-    if (current === undefined)
-      throw new Error(`${path}: JSON Pointer '${pointer}' did not resolve`);
-  }
-  return current;
-}
-function safeRoot(dir) {
-  const root = realpathSync3(resolve3(dir));
-  if (!lstatSync2(root).isDirectory())
-    throw new Error(`Prompt source root is not a directory: ${dir}`);
-  return root;
-}
-function safePath(root, requested) {
-  const candidate = resolve3(root, requested);
-  rejectSymlinkPath(root, candidate, requested);
-  const real = realpathSync3(candidate);
-  if (!(real === root || real.startsWith(`${root}/`)))
-    throw new Error(`Prompt source escapes repository root: ${requested}`);
-  const rel = relative(root, real).replaceAll("\\", "/");
-  if (isSensitiveSourcePath(rel))
-    throw new Error(`Prompt source path is excluded as sensitive: ${requested}`);
-  const stat = lstatSync2(real);
-  if (!stat.isFile() || stat.size > MAX_BYTES2)
-    throw new Error(`Prompt source is not a bounded regular file: ${requested}`);
-  return real;
-}
-function isSensitiveSourcePath(path) {
-  const normalized = path.toLowerCase();
-  const name = normalized.split("/").at(-1) ?? normalized;
-  if (/^\.env\.(?:example|sample|template|defaults)$/.test(name))
-    return false;
-  if (name === ".env" || name.startsWith(".env."))
-    return true;
-  if (normalized.split("/").some((part) => part === "secrets" || part === "credentials"))
-    return true;
-  return /(?:secrets?|credentials?|private[-_]?keys?|passwords?|passwd|api[-_]?keys?|access[-_]?tokens?|auth[-_]?tokens?|tokens?)\b/.test(name) || /\.(?:pem|key|p12|pfx)$/i.test(name);
-}
-function rejectSymlinkPath(root, candidate, requested) {
-  let cursor = candidate;
-  while (cursor !== root) {
-    let stat;
-    try {
-      stat = lstatSync2(cursor);
-    } catch {
-      break;
-    }
-    if (stat.isSymbolicLink())
-      throw new Error(`Prompt source uses a symlink: ${requested}`);
-    const next = cursor.slice(0, cursor.lastIndexOf("/")) || "/";
-    if (next === cursor)
-      break;
-    cursor = next;
-  }
-}
-function sha256(input) {
-  return createHash("sha256").update(input).digest("hex");
-}
-
-export { require_typescript, PYTHON_AGENT_MODULES, TYPESCRIPT_AGENT_MODULES, extractCodeSource, inspectCodeSelectors, inspectPythonSelectors, extractPythonSource, resolvePromptSource, validatePromptSource, discoverStructuredPromptSources, backfillPromptSource, discoverCodePromptSources, discoverCodePromptCandidates };
+export { require_typescript };