@namzu/cli 26.3.0 → 28.0.0

package/dist/integrations/providers/access.d.ts

@@ -1,7 +1,10 @@
 import type { ProviderRegistryEntry } from './registry.js';
 /** The service's public marker is not an account credential. */
 export declare function hasApiCredential(entry: ProviderRegistryEntry, apiKey: string | undefined): boolean;
-/** Anonymous Zen admission uses the driver's explicit public model catalogue. */
+/**
+ * Anonymous Zen admission uses the driver's explicit public model catalogue —
+ * the session's active one, which is the background refresh once it lands.
+ */
 export declare function requiresCredentialForModel(entry: ProviderRegistryEntry, model: string): boolean;
 export declare function canSelectModel(entry: ProviderRegistryEntry, apiKey: string | undefined, model: string): boolean;
 //# sourceMappingURL=access.d.ts.map

package/dist/integrations/providers/access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/access.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAE1D,gEAAgE;AAChE,wBAAgB,gBAAgB,CAC/B,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAKT;AAED,iFAAiF;AACjF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAK/F;AAED,wBAAgB,cAAc,CAC7B,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,MAAM,GACX,OAAO,CAET"}
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAG1D,gEAAgE;AAChE,wBAAgB,gBAAgB,CAC/B,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAKT;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAK/F;AAED,wBAAgB,cAAc,CAC7B,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,MAAM,GACX,OAAO,CAET"}

package/dist/integrations/providers/access.js

@@ -1,4 +1,4 @@
-import { findZenModel } from '@namzu/zen/models';
+import { findActiveZenModel } from './zen-catalogue.js';
 /** The service's public marker is not an account credential. */
 export function hasApiCredential(entry, apiKey) {
     if (entry.id === 'zen' || entry.id === 'zen-go') {
@@ -6,10 +6,13 @@ export function hasApiCredential(entry, apiKey) {
     }
     return Boolean(apiKey);
 }
-/** Anonymous Zen admission uses the driver's explicit public model catalogue. */
+/**
+ * Anonymous Zen admission uses the driver's explicit public model catalogue —
+ * the session's active one, which is the background refresh once it lands.
+ */
 export function requiresCredentialForModel(entry, model) {
     return (entry.requiresApiKey ||
-        (entry.id === 'zen' && findZenModel('zen', model)?.supportsAnonymousAccess !== true));
+        (entry.id === 'zen' && findActiveZenModel('zen', model)?.supportsAnonymousAccess !== true));
 }
 export function canSelectModel(entry, apiKey, model) {
     return hasApiCredential(entry, apiKey) || !requiresCredentialForModel(entry, model);

package/dist/integrations/providers/access.js.map

@@ -1 +1 @@
-{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../src/integrations/providers/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAIhD,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAC/B,KAA4B,EAC5B,MAA0B;IAE1B,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;AACvB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,0BAA0B,CAAC,KAA4B,EAAE,KAAa;IACrF,OAAO,CACN,KAAK,CAAC,cAAc;QACpB,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,uBAAuB,KAAK,IAAI,CAAC,CACpF,CAAA;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAC7B,KAA4B,EAC5B,MAA0B,EAC1B,KAAa;IAEb,OAAO,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AACpF,CAAC"}
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../src/integrations/providers/access.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAC/B,KAA4B,EAC5B,MAA0B;IAE1B,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA4B,EAAE,KAAa;IACrF,OAAO,CACN,KAAK,CAAC,cAAc;QACpB,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,uBAAuB,KAAK,IAAI,CAAC,CAC1F,CAAA;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAC7B,KAA4B,EAC5B,MAA0B,EAC1B,KAAa;IAEb,OAAO,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AACpF,CAAC"}

package/dist/integrations/providers/chain-capabilities.d.ts

@@ -1,7 +1,7 @@
 /**
  * Do the members of a provider chain agree about what they can do?
  *
- * The runtime negotiates capabilities ONCE per run, against the provider it was
+ * The runtime negotiates capabilities ONCE per turn, against the provider it was
  * handed, and that answer decides whether tool surfaces go into the prompt and
  * whether image and document attachments are mapped. A chain whose members
  * disagree therefore cannot be honoured by taking the strongest answer: if the
@@ -13,7 +13,7 @@
  * chain. That is worse, and worse in the direction that matters. An operator who
  * adds a weaker fallback to gain resilience would find their PRIMARY had quietly
  * lost tool support, permanently, with nothing saying so — a capability given up
- * on every run to guard against a failure that happens rarely. So a disagreement
+ * on every turn to guard against a failure that happens rarely. So a disagreement
  * is refused and named, and an operator who wants the intersection anyway says
  * so explicitly.
  *
@@ -28,18 +28,18 @@
  * provider IS. A check that overstates its authority is how someone later finds
  * the runtime disagreed with it and stops believing it.
  *
- * ## And it is a property of the CHAIN, not of a run
+ * ## And it is a property of the CHAIN, not of a turn
  *
  * Every sentence here says what becomes unavailable IF the chain falls over,
- * and that stays the right tense now that it does. A run negotiates
+ * and that stays the right tense now that it does. A turn negotiates
  * capabilities once, against the primary, and keeps that answer across a swap —
  * so at the moment this check runs, no degradation has happened and claiming
  * one would be a confident statement about a turn that may never come.
  *
  * The conditional is also what makes the refusal worth having. Because the
  * negotiated answer does NOT follow the swap, a chain that disagrees would put
- * a run on a member holding a request shaped for someone else. Catching that
- * here, before a run starts, is cheaper than discovering it during one.
+ * a turn on a member holding a request shaped for someone else. Catching that
+ * here, before a turn starts, is cheaper than discovering it during one.
  */
 import type { ResolvedProviderCapabilities } from '@namzu/sdk';
 import { type ProviderChoice } from './preferences.js';

package/dist/integrations/providers/chain-capabilities.js

@@ -1,7 +1,7 @@
 /**
  * Do the members of a provider chain agree about what they can do?
  *
- * The runtime negotiates capabilities ONCE per run, against the provider it was
+ * The runtime negotiates capabilities ONCE per turn, against the provider it was
  * handed, and that answer decides whether tool surfaces go into the prompt and
  * whether image and document attachments are mapped. A chain whose members
  * disagree therefore cannot be honoured by taking the strongest answer: if the
@@ -13,7 +13,7 @@
  * chain. That is worse, and worse in the direction that matters. An operator who
  * adds a weaker fallback to gain resilience would find their PRIMARY had quietly
  * lost tool support, permanently, with nothing saying so — a capability given up
- * on every run to guard against a failure that happens rarely. So a disagreement
+ * on every turn to guard against a failure that happens rarely. So a disagreement
  * is refused and named, and an operator who wants the intersection anyway says
  * so explicitly.
  *
@@ -28,18 +28,18 @@
  * provider IS. A check that overstates its authority is how someone later finds
  * the runtime disagreed with it and stops believing it.
  *
- * ## And it is a property of the CHAIN, not of a run
+ * ## And it is a property of the CHAIN, not of a turn
  *
  * Every sentence here says what becomes unavailable IF the chain falls over,
- * and that stays the right tense now that it does. A run negotiates
+ * and that stays the right tense now that it does. A turn negotiates
  * capabilities once, against the primary, and keeps that answer across a swap —
  * so at the moment this check runs, no degradation has happened and claiming
  * one would be a confident statement about a turn that may never come.
  *
  * The conditional is also what makes the refusal worth having. Because the
  * negotiated answer does NOT follow the swap, a chain that disagrees would put
- * a run on a member holding a request shaped for someone else. Catching that
- * here, before a run starts, is cheaper than discovering it during one.
+ * a turn on a member holding a request shaped for someone else. Catching that
+ * here, before a turn starts, is cheaper than discovering it during one.
  */
 import { chainPositionName } from './preferences.js';
 import { PROVIDER_REGISTRY } from './registry.js';
@@ -126,7 +126,7 @@ export function chainCapabilityDisagreements(members, resolved) {
     return out;
 }
 /**
- * A smaller output ceiling is the same problem wearing a number: a run served by
+ * A smaller output ceiling is the same problem wearing a number: a turn served by
  * that member produces shorter replies than the chain was configured for.
  * Reported against the LARGEST declared ceiling, for the reason the booleans are
  * reported against the first member that has the capability.
@@ -195,7 +195,7 @@ export function describeCapabilityRefusal(disagreements) {
         'The providers in your chain declare different capabilities, so namzu cannot honour the chain as written:',
         ...disagreements.map((d) => `  - ${d.sentence}`),
         '',
-        'Taking the strongest answer would advertise abilities a fallback does not have. Taking the weakest would cost your primary a capability on every run, to guard against a failure that happens rarely. Neither is chosen for you.',
+        'Taking the strongest answer would advertise abilities a fallback does not have. Taking the weakest would cost your primary a capability on every turn, to guard against a failure that happens rarely. Neither is chosen for you.',
         'Either drop the member that disagrees, or set "allowCapabilityMismatch": true in ~/.namzu/preferences.json to accept the limitation — it is printed on every launch.',
     ].join('\n');
 }

package/dist/integrations/providers/chain-capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"chain-capabilities.js","sourceRoot":"","sources":["../../../src/integrations/providers/chain-capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAIH,OAAO,EAAuB,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAgBjD;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAUrB;IACJ;QACC,GAAG,EAAE,eAAe;QACpB,GAAG,EAAE,mBAAmB;QACxB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,0BAA0B;KACvC;IACD;QACC,GAAG,EAAE,yBAAyB;QAC9B,GAAG,EAAE,8BAA8B;QACnC,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,sCAAsC;KACnD;IACD;QACC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,uBAAuB;QAC5B,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,wBAAwB;KACrC;IACD;QACC,GAAG,EAAE,gBAAgB;QACrB,GAAG,EAAE,+BAA+B;QACpC,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,mCAAmC;KAChD;IACD;QACC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,kCAAkC;QACvC,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,sCAAsC;KACnD;CACD,CAAA;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAsB;IACtD,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC1C,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAA;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC3C,OAAkC,EAClC,QAAuC;IAEvC,MAAM,GAAG,GAA6B,EAAE,CAAA;IAExC,KAAK,MAAM,UAAU,IAAI,oBAAoB,EAAE,CAAC;QAC/C,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CACrC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI,CAChF,CAAA;QACD,IAAI,WAAW,KAAK,CAAC,CAAC;YAAE,SAAQ;QAChC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;QAChC,IAAI,CAAC,GAAG;YAAE,SAAQ;QAElB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,KAAK,WAAW;gBAAE,SAAQ;YAC7D,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,SAAQ;YACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;YAC5B,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,GAAG,CAAC,IAAI,CAAC;gBACR,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,KAAK;gBAClB,QAAQ,EACP,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,UAAU,CAAC,KAAK,UAAU;oBAChE,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,aAAa,UAAU,CAAC,GAAG,KAAK;oBAC7D,kCAAkC,UAAU,CAAC,WAAW,GAAG;aAC5D,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;IACpD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC5B,OAAkC,EAClC,QAAuC;IAEvC,MAAM,QAAQ,GAAuC,EAAE,CAAA;IACvD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAQ;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,eAAe,CAAA;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,mEAAmE;IACnE,wDAAwD;IACxD,0CAA0C;IAC1C,IAAI,OAAqD,CAAA;IACzD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;YAAE,OAAO,GAAG,OAAO,CAAA;IACjE,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IAEvB,MAAM,GAAG,GAA6B,EAAE,CAAA;IACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;YAAE,SAAQ;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;YAAE,SAAQ;QAC5B,GAAG,CAAC,IAAI,CAAC;YACR,UAAU,EAAE,OAAO,CAAC,KAAK;YACzB,WAAW,EAAE,OAAO,CAAC,KAAK;YAC1B,QAAQ,EACP,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,iCAAiC,OAAO,CAAC,KAAK,WAAW;gBAC1F,SAAS,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK;gBAC9D,wDAAwD,OAAO,CAAC,KAAK,GAAG;SACzE,CAAC,CAAA;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAChC,OAAkC,EAClC,QAAuC;IAEvC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM;YAAE,SAAQ;QACpD,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACxC,aAAgD;IAEhD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3C,OAAO;QACN,0GAA0G;QAC1G,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChD,EAAE;QACF,kOAAkO;QAClO,sKAAsK;KACtK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CACvC,aAAgD;IAEhD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3C,OAAO;QACN,yFAAyF;QACzF,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;KAChD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC"}
+{"version":3,"file":"chain-capabilities.js","sourceRoot":"","sources":["../../../src/integrations/providers/chain-capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAIH,OAAO,EAAuB,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAgBjD;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAUrB;IACJ;QACC,GAAG,EAAE,eAAe;QACpB,GAAG,EAAE,mBAAmB;QACxB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,0BAA0B;KACvC;IACD;QACC,GAAG,EAAE,yBAAyB;QAC9B,GAAG,EAAE,8BAA8B;QACnC,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,sCAAsC;KACnD;IACD;QACC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,uBAAuB;QAC5B,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,wBAAwB;KACrC;IACD;QACC,GAAG,EAAE,gBAAgB;QACrB,GAAG,EAAE,+BAA+B;QACpC,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,mCAAmC;KAChD;IACD;QACC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,kCAAkC;QACvC,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,sCAAsC;KACnD;CACD,CAAA;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAsB;IACtD,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC1C,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAA;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC3C,OAAkC,EAClC,QAAuC;IAEvC,MAAM,GAAG,GAA6B,EAAE,CAAA;IAExC,KAAK,MAAM,UAAU,IAAI,oBAAoB,EAAE,CAAC;QAC/C,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CACrC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI,CAChF,CAAA;QACD,IAAI,WAAW,KAAK,CAAC,CAAC;YAAE,SAAQ;QAChC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;QAChC,IAAI,CAAC,GAAG;YAAE,SAAQ;QAElB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,KAAK,WAAW;gBAAE,SAAQ;YAC7D,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,SAAQ;YACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;YAC5B,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,GAAG,CAAC,IAAI,CAAC;gBACR,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,KAAK;gBAClB,QAAQ,EACP,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,UAAU,CAAC,KAAK,UAAU;oBAChE,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,aAAa,UAAU,CAAC,GAAG,KAAK;oBAC7D,kCAAkC,UAAU,CAAC,WAAW,GAAG;aAC5D,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;IACpD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC5B,OAAkC,EAClC,QAAuC;IAEvC,MAAM,QAAQ,GAAuC,EAAE,CAAA;IACvD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAQ;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,eAAe,CAAA;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,mEAAmE;IACnE,wDAAwD;IACxD,0CAA0C;IAC1C,IAAI,OAAqD,CAAA;IACzD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;YAAE,OAAO,GAAG,OAAO,CAAA;IACjE,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IAEvB,MAAM,GAAG,GAA6B,EAAE,CAAA;IACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;YAAE,SAAQ;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;YAAE,SAAQ;QAC5B,GAAG,CAAC,IAAI,CAAC;YACR,UAAU,EAAE,OAAO,CAAC,KAAK;YACzB,WAAW,EAAE,OAAO,CAAC,KAAK;YAC1B,QAAQ,EACP,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,iCAAiC,OAAO,CAAC,KAAK,WAAW;gBAC1F,SAAS,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK;gBAC9D,wDAAwD,OAAO,CAAC,KAAK,GAAG;SACzE,CAAC,CAAA;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAChC,OAAkC,EAClC,QAAuC;IAEvC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM;YAAE,SAAQ;QACpD,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACxC,aAAgD;IAEhD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3C,OAAO;QACN,0GAA0G;QAC1G,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChD,EAAE;QACF,mOAAmO;QACnO,sKAAsK;KACtK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CACvC,aAAgD;IAEhD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3C,OAAO;QACN,yFAAyF;QACzF,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;KAChD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC"}

package/dist/integrations/providers/register.d.ts

@@ -3,7 +3,7 @@
  *
  * This is the only place the wired driver packages are imported, so it decides
  * what a `namzu` invocation actually pulls in and when. The imports are dynamic
- * for that reason: a run on one provider does not load the other drivers, and a
+ * for that reason: a turn on one provider does not load the other drivers, and a
  * command that never touches a model loads none.
  *
  * ## Why it lives here rather than in the session module

package/dist/integrations/providers/register.js

@@ -3,7 +3,7 @@
  *
  * This is the only place the wired driver packages are imported, so it decides
  * what a `namzu` invocation actually pulls in and when. The imports are dynamic
- * for that reason: a run on one provider does not load the other drivers, and a
+ * for that reason: a turn on one provider does not load the other drivers, and a
  * command that never touches a model loads none.
  *
  * ## Why it lives here rather than in the session module

package/dist/integrations/providers/registry.d.ts

@@ -88,7 +88,7 @@ export interface ProviderRegistryEntry {
      * Default model when the user does not pick one in the picker.
      *
      * **These are namzu's picks, not the provider's, and they go stale.** A
-     * hardcoded default fails silently: nothing errors, the run just happens on
+     * hardcoded default fails silently: nothing errors, the turn just happens on
      * an older model than the operator assumes, and only a reader who already
      * knows the current generation would notice. One sat two generations behind
      * for exactly that reason.

package/dist/integrations/providers/zen-catalogue.d.ts

@@ -0,0 +1,100 @@
+/**
+ * The Zen and Zen Go model catalogue this CLI session routes and lists with.
+ *
+ * `@namzu/zen` ships a bundled snapshot and never fetches on its own. The CLI
+ * opts in: every launch starts one background refresh (`startZenCatalogueRefresh`)
+ * that is never awaited on the startup path, is bounded in time, and is
+ * cancelled when the command returns. Until it lands the session uses the
+ * last-good copy under the application home, or — with none — the bundled
+ * snapshot. A refresh that lands becomes the active catalogue at once and is
+ * written as the new last-good copy; a refresh that fails changes nothing and
+ * says so in one log line. There is no state in between: a catalogue is either
+ * the whole of a validated derivation or it is not used.
+ *
+ * Every Zen provider the CLI builds reads `activeZenCatalogue` at each lookup
+ * (`ZenConfig.catalogue` as a function), so a catalogue that lands mid-session
+ * reaches providers that were built before it.
+ */
+import type { Logger } from '@namzu/sdk';
+import { type ZenCatalogue, type ZenCatalogueResult } from '@namzu/zen/catalogue';
+import type { ZenModel, ZenService } from '@namzu/zen/models';
+/** Where the last-good catalogue lives, relative to the application home. */
+export declare const ZEN_CATALOGUE_CACHE_PATH: string;
+/** The whole refresh — five reads and the derivation — gets this long, then stops. */
+export declare const ZEN_CATALOGUE_REFRESH_BUDGET_MS = 30000;
+/** Which catalogue the session is using. */
+export type ZenCatalogueSource = 'bundled' | 'cache' | 'live';
+/** The runtime catalogue this session routes with, or undefined for the bundled snapshot. */
+export declare function activeZenCatalogue(): ZenCatalogue | undefined;
+/** Where the active catalogue came from. */
+export declare function activeZenCatalogueSource(): ZenCatalogueSource;
+/** Exact lookup against the active catalogue, falling back to the bundled snapshot. */
+export declare function findActiveZenModel(service: ZenService, id: string): ZenModel | undefined;
+/**
+ * Whether the CLI can offer `model` on `providerId` — false only for a Zen or
+ * Zen Go id the active catalogue lists as served with no known wire format.
+ *
+ * `ZenProvider.listModels` lists such an id so that an embedder, who can pass
+ * `protocol`, can see it. The CLI has no key or flag that names a protocol, so
+ * choosing one would fail on every turn with a remedy the operator cannot
+ * apply; the CLI's listings leave it out instead.
+ */
+export declare function isOfferableModel(providerId: string, model: string): boolean;
+/** Test seam: back to the bundled snapshot. */
+export declare function __resetZenCatalogueForTests(): void;
+/** How a refresh ended. `cancelled` is the launch ending first, which is not a failure. */
+export type ZenCatalogueRefreshOutcome = {
+    readonly kind: 'live';
+    readonly catalogue: ZenCatalogue;
+} | {
+    readonly kind: 'failed';
+    readonly using: 'cache' | 'bundled';
+    readonly reason: string;
+} | {
+    readonly kind: 'cancelled';
+};
+export interface ZenCatalogueRefresh {
+    /** Settles when the refresh does. Never rejects. */
+    readonly done: Promise<ZenCatalogueRefreshOutcome>;
+    /** Stop now. Idempotent; a refresh that already landed is kept. */
+    cancel(): void;
+}
+export interface StartZenCatalogueRefreshOptions {
+    /** The application home (`NAMZU_HOME`, default `~/.namzu`). */
+    readonly home: string;
+    /**
+     * Where the refresh's lines go. A function is called for each line, and the
+     * CLI passes `cliLogger` itself: the process logger is rebuilt when the TUI
+     * installs its ring buffer or `exec --json` its NDJSON sink, both after the
+     * refresh starts, and a logger captured at start would keep writing to the
+     * sink that was current then — raw lines under Ink, pretty lines on a
+     * machine-read stderr.
+     */
+    readonly log: Logger | (() => Logger);
+    /** Defaults to the global `fetch`. */
+    readonly fetch?: typeof fetch;
+    /** Defaults to `ZEN_CATALOGUE_REFRESH_BUDGET_MS`. */
+    readonly budgetMs?: number;
+    /** Test seam for the derivation; defaults to `@namzu/zen/catalogue`'s `fetchZenCatalogue`. */
+    readonly fetchCatalogue?: (options: {
+        readonly fetch?: typeof fetch;
+        readonly signal: AbortSignal;
+        readonly timeoutMs: number;
+    }) => Promise<ZenCatalogueResult>;
+}
+/**
+ * Start the launch's background refresh and return at once.
+ *
+ * Synchronous by contract: nothing here is awaited before the handle is
+ * returned, so the caller's startup path cannot wait on the network or the
+ * disk. The last-good copy is read first and adopted if no live catalogue has
+ * landed by then; the network result, when it lands, replaces it.
+ */
+export declare function startZenCatalogueRefresh(options: StartZenCatalogueRefreshOptions): ZenCatalogueRefresh;
+/**
+ * Write the last-good copy atomically: a sibling temp file, then a rename, so
+ * a reader — this launch's next start, or a concurrent one — sees the old copy
+ * or the new one and never a torn write.
+ */
+export declare function writeLastGood(path: string, catalogue: ZenCatalogue): Promise<void>;
+//# sourceMappingURL=zen-catalogue.d.ts.map

package/dist/integrations/providers/zen-catalogue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zen-catalogue.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/zen-catalogue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EACN,KAAK,YAAY,EACjB,KAAK,kBAAkB,EAKvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE7D,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,QAAoC,CAAA;AAEzE,sFAAsF;AACtF,eAAO,MAAM,+BAA+B,QAAS,CAAA;AAKrD,4CAA4C;AAC5C,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAA;AAK7D,6FAA6F;AAC7F,wBAAgB,kBAAkB,IAAI,YAAY,GAAG,SAAS,CAE7D;AAED,4CAA4C;AAC5C,wBAAgB,wBAAwB,IAAI,kBAAkB,CAE7D;AAED,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAExF;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI3E;AAED,+CAA+C;AAC/C,wBAAgB,2BAA2B,IAAI,IAAI,CAGlD;AAED,2FAA2F;AAC3F,MAAM,MAAM,0BAA0B,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzF;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,mBAAmB;IACnC,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAClD,mEAAmE;IACnE,MAAM,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,+BAA+B;IAC/C,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAA;IACrC,sCAAsC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;QAC7B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;QAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC1B,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAA;CACjC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,+BAA+B,GACtC,mBAAmB,CAoErB;AAiCD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBxF"}

package/dist/integrations/providers/zen-catalogue.js

@@ -0,0 +1,196 @@
+/**
+ * The Zen and Zen Go model catalogue this CLI session routes and lists with.
+ *
+ * `@namzu/zen` ships a bundled snapshot and never fetches on its own. The CLI
+ * opts in: every launch starts one background refresh (`startZenCatalogueRefresh`)
+ * that is never awaited on the startup path, is bounded in time, and is
+ * cancelled when the command returns. Until it lands the session uses the
+ * last-good copy under the application home, or — with none — the bundled
+ * snapshot. A refresh that lands becomes the active catalogue at once and is
+ * written as the new last-good copy; a refresh that fails changes nothing and
+ * says so in one log line. There is no state in between: a catalogue is either
+ * the whole of a validated derivation or it is not used.
+ *
+ * Every Zen provider the CLI builds reads `activeZenCatalogue` at each lookup
+ * (`ZenConfig.catalogue` as a function), so a catalogue that lands mid-session
+ * reaches providers that were built before it.
+ */
+import { mkdir, open, rename, rm } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { fetchZenCatalogue, findZenCatalogueModel, isUnroutedZenModel, parseZenCatalogue, } from '@namzu/zen/catalogue';
+/** Where the last-good catalogue lives, relative to the application home. */
+export const ZEN_CATALOGUE_CACHE_PATH = join('cli', 'zen-catalogue.json');
+/** The whole refresh — five reads and the derivation — gets this long, then stops. */
+export const ZEN_CATALOGUE_REFRESH_BUDGET_MS = 30_000;
+/** A stored catalogue past this is refused unread. The live one serialises to ~40 KB. */
+const MAX_CACHE_BYTES = 4 * 1024 * 1024;
+let active;
+let activeSource = 'bundled';
+/** The runtime catalogue this session routes with, or undefined for the bundled snapshot. */
+export function activeZenCatalogue() {
+    return active;
+}
+/** Where the active catalogue came from. */
+export function activeZenCatalogueSource() {
+    return activeSource;
+}
+/** Exact lookup against the active catalogue, falling back to the bundled snapshot. */
+export function findActiveZenModel(service, id) {
+    return findZenCatalogueModel(active, service, id);
+}
+/**
+ * Whether the CLI can offer `model` on `providerId` — false only for a Zen or
+ * Zen Go id the active catalogue lists as served with no known wire format.
+ *
+ * `ZenProvider.listModels` lists such an id so that an embedder, who can pass
+ * `protocol`, can see it. The CLI has no key or flag that names a protocol, so
+ * choosing one would fail on every turn with a remedy the operator cannot
+ * apply; the CLI's listings leave it out instead.
+ */
+export function isOfferableModel(providerId, model) {
+    const service = providerId === 'zen' ? 'zen' : providerId === 'zen-go' ? 'go' : undefined;
+    return service === undefined || !isUnroutedZenModel(active, service, model);
+}
+/** Test seam: back to the bundled snapshot. */
+export function __resetZenCatalogueForTests() {
+    active = undefined;
+    activeSource = 'bundled';
+}
+/**
+ * Start the launch's background refresh and return at once.
+ *
+ * Synchronous by contract: nothing here is awaited before the handle is
+ * returned, so the caller's startup path cannot wait on the network or the
+ * disk. The last-good copy is read first and adopted if no live catalogue has
+ * landed by then; the network result, when it lands, replaces it.
+ */
+export function startZenCatalogueRefresh(options) {
+    const controller = new AbortController();
+    const budget = options.budgetMs ?? ZEN_CATALOGUE_REFRESH_BUDGET_MS;
+    const signal = AbortSignal.any([controller.signal, AbortSignal.timeout(budget)]);
+    const cachePath = join(options.home, ZEN_CATALOGUE_CACHE_PATH);
+    const source = options.log;
+    const log = () => (typeof source === 'function' ? source() : source);
+    let landed = false;
+    const run = async () => {
+        // Yield before touching anything, so even the synchronous prelude of a
+        // file read or a fetch happens after the caller has its handle back.
+        await Promise.resolve();
+        const cached = readLastGood(cachePath, log).then((catalogue) => {
+            if (catalogue && !landed && !controller.signal.aborted) {
+                active = catalogue;
+                activeSource = 'cache';
+            }
+        });
+        try {
+            signal.throwIfAborted();
+            const fetchCatalogue = options.fetchCatalogue ?? fetchZenCatalogue;
+            const { catalogue } = await fetchCatalogue({
+                ...(options.fetch ? { fetch: options.fetch } : {}),
+                signal,
+                timeoutMs: Math.min(budget, 15_000),
+            });
+            signal.throwIfAborted();
+            landed = true;
+            active = catalogue;
+            activeSource = 'live';
+            await writeLastGood(cachePath, catalogue).catch((error) => {
+                log().warn('Zen model catalogue refreshed but the last-good copy was not written', {
+                    'namzu.zen_catalogue.cache_path': cachePath,
+                    'namzu.zen_catalogue.reason': errorText(error),
+                });
+            });
+            log().debug('Zen model catalogue refreshed', {
+                'namzu.zen_catalogue.zen_models': catalogue.zen.length,
+                'namzu.zen_catalogue.go_models': catalogue.go.length,
+            });
+            return { kind: 'live', catalogue };
+        }
+        catch (error) {
+            await cached;
+            if (controller.signal.aborted)
+                return { kind: 'cancelled' };
+            const using = activeSource === 'cache' ? 'cache' : 'bundled';
+            const reason = signal.aborted
+                ? `the refresh did not finish within ${budget}ms`
+                : errorText(error);
+            log().warn('Zen model catalogue refresh failed; keeping the catalogue already in use', {
+                'namzu.zen_catalogue.using': using,
+                'namzu.zen_catalogue.reason': reason,
+            });
+            return { kind: 'failed', using, reason };
+        }
+    };
+    const done = run().catch((error) => ({
+        kind: 'failed',
+        using: activeSource === 'cache' ? 'cache' : 'bundled',
+        reason: errorText(error),
+    }));
+    return {
+        done,
+        cancel: () => controller.abort(new Error('The launch ended before the Zen catalogue refresh.')),
+    };
+}
+/** The last-good copy, or undefined — one log line when one exists and is refused. */
+async function readLastGood(path, log) {
+    let text;
+    try {
+        const handle = await open(path, 'r');
+        try {
+            const { size } = await handle.stat();
+            if (size > MAX_CACHE_BYTES)
+                throw new Error(`it is ${size} bytes, past ${MAX_CACHE_BYTES}`);
+            text = await handle.readFile('utf8');
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error?.code === 'ENOENT')
+            return undefined;
+        log().warn('Zen model catalogue last-good copy could not be read; ignoring it', {
+            'namzu.zen_catalogue.cache_path': path,
+            'namzu.zen_catalogue.reason': errorText(error),
+        });
+        return undefined;
+    }
+    try {
+        return parseZenCatalogue(JSON.parse(text));
+    }
+    catch (error) {
+        log().warn('Zen model catalogue last-good copy is not a valid catalogue; ignoring it', {
+            'namzu.zen_catalogue.cache_path': path,
+            'namzu.zen_catalogue.reason': errorText(error),
+        });
+        return undefined;
+    }
+}
+/**
+ * Write the last-good copy atomically: a sibling temp file, then a rename, so
+ * a reader — this launch's next start, or a concurrent one — sees the old copy
+ * or the new one and never a torn write.
+ */
+export async function writeLastGood(path, catalogue) {
+    await mkdir(dirname(path), { recursive: true });
+    const temp = `${path}.tmp-${process.pid}-${Date.now()}`;
+    try {
+        const handle = await open(temp, 'wx', 0o600);
+        try {
+            await handle.writeFile(`${JSON.stringify(catalogue)}\n`, 'utf8');
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        await rename(temp, path);
+    }
+    catch (error) {
+        await rm(temp, { force: true }).catch(() => { });
+        throw error;
+    }
+}
+function errorText(error) {
+    return (error instanceof Error ? error.message : String(error)).slice(0, 500);
+}
+//# sourceMappingURL=zen-catalogue.js.map

package/dist/integrations/providers/zen-catalogue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zen-catalogue.js","sourceRoot":"","sources":["../../../src/integrations/providers/zen-catalogue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGzC,OAAO,EAGN,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,GACjB,MAAM,sBAAsB,CAAA;AAG7B,6EAA6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;AAEzE,sFAAsF;AACtF,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAA;AAErD,yFAAyF;AACzF,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAKvC,IAAI,MAAgC,CAAA;AACpC,IAAI,YAAY,GAAuB,SAAS,CAAA;AAEhD,6FAA6F;AAC7F,MAAM,UAAU,kBAAkB;IACjC,OAAO,MAAM,CAAA;AACd,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,wBAAwB;IACvC,OAAO,YAAY,CAAA;AACpB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,OAAmB,EAAE,EAAU;IACjE,OAAO,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,KAAa;IACjE,MAAM,OAAO,GACZ,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,OAAO,OAAO,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,2BAA2B;IAC1C,MAAM,GAAG,SAAS,CAAA;IAClB,YAAY,GAAG,SAAS,CAAA;AACzB,CAAC;AAuCD;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACvC,OAAwC;IAExC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,IAAI,+BAA+B,CAAA;IAClE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAA;IAC1B,MAAM,GAAG,GAAG,GAAW,EAAE,CAAC,CAAC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC5E,IAAI,MAAM,GAAG,KAAK,CAAA;IAElB,MAAM,GAAG,GAAG,KAAK,IAAyC,EAAE;QAC3D,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;QACvB,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YAC9D,IAAI,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxD,MAAM,GAAG,SAAS,CAAA;gBAClB,YAAY,GAAG,OAAO,CAAA;YACvB,CAAC;QACF,CAAC,CAAC,CAAA;QACF,IAAI,CAAC;YACJ,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,iBAAiB,CAAA;YAClE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC;gBAC1C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;aACnC,CAAC,CAAA;YACF,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,GAAG,IAAI,CAAA;YACb,MAAM,GAAG,SAAS,CAAA;YAClB,YAAY,GAAG,MAAM,CAAA;YACrB,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAClE,GAAG,EAAE,CAAC,IAAI,CAAC,sEAAsE,EAAE;oBAClF,gCAAgC,EAAE,SAAS;oBAC3C,4BAA4B,EAAE,SAAS,CAAC,KAAK,CAAC;iBAC9C,CAAC,CAAA;YACH,CAAC,CAAC,CAAA;YACF,GAAG,EAAE,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBAC5C,gCAAgC,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM;gBACtD,+BAA+B,EAAE,SAAS,CAAC,EAAE,CAAC,MAAM;aACpD,CAAC,CAAA;YACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,MAAM,CAAA;YACZ,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC3D,MAAM,KAAK,GAAG,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;YAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO;gBAC5B,CAAC,CAAC,qCAAqC,MAAM,IAAI;gBACjD,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YACnB,GAAG,EAAE,CAAC,IAAI,CAAC,0EAA0E,EAAE;gBACtF,2BAA2B,EAAE,KAAK;gBAClC,4BAA4B,EAAE,MAAM;aACpC,CAAC,CAAA;YACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;QACzC,CAAC;IACF,CAAC,CAAA;IAED,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,CACvB,CAAC,KAAc,EAA8B,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACrD,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC;KACxB,CAAC,CACF,CAAA;IACD,OAAO;QACN,IAAI;QACJ,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;KAC/F,CAAA;AACF,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,GAAiB;IAC1D,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC;YACJ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YACpC,IAAI,IAAI,GAAG,eAAe;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,gBAAgB,eAAe,EAAE,CAAC,CAAA;YAC3F,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;gBAAS,CAAC;YACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACrB,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA2C,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACrF,GAAG,EAAE,CAAC,IAAI,CAAC,mEAAmE,EAAE;YAC/E,gCAAgC,EAAE,IAAI;YACtC,4BAA4B,EAAE,SAAS,CAAC,KAAK,CAAC;SAC9C,CAAC,CAAA;QACF,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,GAAG,EAAE,CAAC,IAAI,CAAC,0EAA0E,EAAE;YACtF,gCAAgC,EAAE,IAAI;YACtC,4BAA4B,EAAE,SAAS,CAAC,KAAK,CAAC;SAC9C,CAAC,CAAA;QACF,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,SAAuB;IACxE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;IACvD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QAC5C,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAChE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QACpB,CAAC;gBAAS,CAAC;YACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACrB,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC/C,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAChC,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC9E,CAAC"}

package/dist/integrations/resident/inspection.d.ts

@@ -1,6 +1,9 @@
 import { type ResidentConsumptionOptions, type ResidentConsumptionReport, type ResidentConsumptionResolver } from '@namzu/sdk';
 import type { CliResident } from './storage.js';
-/** Uses only scoped attempt/run records. No provider discovery or session writes. */
+/**
+ * Uses only the attempt receipts and the step's own session log, read in
+ * bounded pieces. No provider discovery, no index, no session writes.
+ */
 export declare function residentConsumptionResolver(resident: CliResident): ResidentConsumptionResolver;
 export declare function residentInspectionText(report: ResidentConsumptionReport): string;
 export declare function inspectCliResident(resident: CliResident, throughRevision: number, options?: ResidentConsumptionOptions, signal?: AbortSignal): Promise<{

package/dist/integrations/resident/inspection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inspection.d.ts","sourceRoot":"","sources":["../../../src/integrations/resident/inspection.ts"],"names":[],"mappings":"AAEA,OAAO,EAEN,KAAK,0BAA0B,EAE/B,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAGhC,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAmF/C,qFAAqF;AACrF,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,WAAW,GAAG,2BAA2B,CAuJ9F;AAID,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,yBAAyB,GAAG,MAAM,CA2ChF;AAED,wBAAsB,kBAAkB,CACvC,QAAQ,EAAE,WAAW,EACrB,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE,0BAA0B,EACpC,MAAM,CAAC,EAAE,WAAW;;;GASpB"}
+{"version":3,"file":"inspection.d.ts","sourceRoot":"","sources":["../../../src/integrations/resident/inspection.ts"],"names":[],"mappings":"AAEA,OAAO,EAEN,KAAK,0BAA0B,EAE/B,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAKhC,MAAM,YAAY,CAAA;AAMnB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAwF/C;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,WAAW,GAAG,2BAA2B,CA4J9F;AAID,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,yBAAyB,GAAG,MAAM,CA2ChF;AAED,wBAAsB,kBAAkB,CACvC,QAAQ,EAAE,WAAW,EACrB,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE,0BAA0B,EACpC,MAAM,CAAC,EAAE,WAAW;;;GASpB"}