@platless/axom-cli 0.6.36 → 0.6.52

package/dist/axom-patch/cli/qoder/dist/axom-acp-compat.mjs

@@ -223,10 +223,10 @@ var TerminalRepairFold = class {
 };
 
 // src/background/poller.ts
-import { isAbsolute, join as join4, resolve as resolve2 } from "node:path";
+import { isAbsolute as isAbsolute2, join as join4, resolve as resolve2 } from "node:path";
 
 // src/history.ts
-import { dirname as dirname2, join as join2 } from "node:path";
+import { dirname as dirname2, isAbsolute, join as join2, relative, sep as sep2 } from "node:path";
 import { TextDecoder as TextDecoder2 } from "node:util";
 
 // src/subwork.ts
@@ -645,20 +645,65 @@ async function readHistorySnapshot(path) {
   });
   return { ...snapshot, rows, completeBytes };
 }
+var absoluteDirectory = (value) => typeof value === "string" && isAbsolute(value) && !/[\x00-\x1f\x7f]/.test(value);
+var HistoryDirectory = class {
+  constructor(homeCwd) {
+    this.homeCwd = homeCwd;
+    this.cwd = homeCwd;
+  }
+  homeCwd;
+  cwd;
+  worktree(value) {
+    if (value === null) {
+      this.cwd = this.homeCwd;
+      return;
+    }
+    const state = object(value);
+    refuse(state.originalCwd === this.homeCwd, "metadata worktree original directory mismatch");
+    this.cwd = state.pendingExit === true ? this.homeCwd : state.worktreeCwd ?? state.worktreePath;
+  }
+};
+function validateWorktree(value, root) {
+  if (value === null) return;
+  const state = object(value), path = state.worktreePath, cwd = state.worktreeCwd;
+  refuse(absoluteDirectory(state.originalCwd) && absoluteDirectory(path) && (cwd === void 0 || absoluteDirectory(cwd)) && typeof state.worktreeName === "string" && !!state.worktreeName && address(state.sessionId) && (state.lifecycle === void 0 || state.lifecycle === "owner" || state.lifecycle === "attached") && (state.lifecycle === "attached" || state.sessionId === root), "metadata worktree malformed");
+  if (cwd !== void 0) {
+    const inside = relative(path, cwd);
+    refuse(inside !== ".." && !inside.startsWith(".." + sep2) && !isAbsolute(inside), "metadata worktree cwd outside path");
+  }
+  for (const key of ["preEnterOriginalCwd", "pendingOwnerReleasePath"])
+    refuse(state[key] === void 0 || absoluteDirectory(state[key]), "metadata worktree directory malformed");
+  for (const key of ["worktreeBranch", "originalBranch", "originalHeadCommit"])
+    refuse(state[key] === void 0 || typeof state[key] === "string", "metadata worktree branch malformed");
+  for (const key of ["hookBased", "enteredExisting"])
+    refuse(state[key] === void 0 || typeof state[key] === "boolean", "metadata worktree flag malformed");
+  refuse(state.pendingExit === void 0 || state.pendingExit === true, "metadata worktree pending exit malformed");
+}
 function metadata(row, root) {
   const type = row.type;
+  if (type === "file-history-snapshot") {
+    refuse(typeof row.messageId === "string" && !!row.snapshot && typeof row.snapshot === "object" && !Array.isArray(row.snapshot) && typeof row.isSnapshotUpdate === "boolean", "metadata file history snapshot malformed");
+    return true;
+  }
   if (!["active-leaf", "workspace-directories", "worktree-state", "last-prompt"].includes(String(type))) return false;
   refuse(row.sessionId === root, "metadata identity mismatch");
   if (type === "active-leaf") refuse((row.leafUuid === null || address(row.leafUuid)) && typeof row.explicit === "boolean" && Number.isSafeInteger(row.timestamp), "metadata active-leaf malformed");
   if (type === "workspace-directories") refuse(Array.isArray(row.directories) && row.directories.length <= 4096 && row.directories.every((x) => typeof x === "string"), "metadata directories malformed");
-  if (type === "worktree-state") refuse(row.worktreeSession === null || !!row.worktreeSession && typeof row.worktreeSession === "object" && !Array.isArray(row.worktreeSession), "metadata worktree malformed");
+  if (type === "worktree-state") {
+    refuse(row.discardLegacyFileHistorySnapshots === void 0 || row.discardLegacyFileHistorySnapshots === true, "metadata worktree snapshot flag malformed");
+    validateWorktree(row.worktreeSession, root);
+  }
   if (type === "last-prompt") refuse(typeof row.lastPrompt === "string", "metadata last-prompt malformed");
   return true;
 }
 function validateHistoryRow(row, context) {
-  const { root, cwd, historyVersions, child } = context;
-  if (metadata(row, root)) return false;
-  refuse(row.sessionId === root && row.cwd === cwd && row.isSidechain === (child !== void 0) && (!child || row.agentId === child.agentId && row.parent_tool_use_id === child.toolUseId), "identity mismatch");
+  const { root, cwd, historyVersions, child, directory } = context;
+  if (metadata(row, root)) {
+    if (row.type === "worktree-state" && directory && !child) directory.worktree(row.worktreeSession);
+    return false;
+  }
+  const parent = row.type === "user" || row.type === "assistant" || row.parent_tool_use_id != null ? row.parent_tool_use_id : child?.toolUseId;
+  refuse(row.sessionId === root && row.cwd === (directory?.cwd ?? cwd) && row.isSidechain === (child !== void 0) && (!child || row.agentId === child.agentId && parent === child.toolUseId), "identity mismatch");
   refuse(typeof row.version === "string" && historyVersions.includes(row.version), "version incompatible");
   refuse(address(row.uuid), "UUID identity invalid");
   if (row.isMeta === true && object(row.origin).kind === "task-notification") {
@@ -671,6 +716,20 @@ function validateHistoryRow(row, context) {
   }
   return true;
 }
+function rememberChildCwds(row, calls) {
+  if (row.type !== "assistant") return;
+  const content = object(row.message).content;
+  if (!Array.isArray(content)) return;
+  for (const block of content.map(object)) {
+    const id3 = address(block.id), input = object(block.input);
+    if (block.type !== "tool_use" || block.name !== "Agent" || !id3) continue;
+    const cwd = input.cwd ?? row.cwd;
+    refuse(absoluteDirectory(cwd), "child launch directory invalid");
+    refuse(!calls.has(id3) || calls.get(id3) === cwd, "child launch directory mismatch");
+    refuse(calls.has(id3) || calls.size < 4096, "subwork call bound");
+    calls.set(id3, cwd);
+  }
+}
 var own2 = (record2, key) => Object.hasOwn(record2, key);
 function admitRecoveryEvent(data, event) {
   if (event.acpSessionId && event.acpSessionId !== data.root || !["tool_call", "tool_call_update"].includes(event.eventName)) return;
@@ -709,19 +768,24 @@ async function bootstrapHistory(options) {
   const path = historyPath(home, cwd, root);
   refuse(path, "identity path invalid");
   const rootSnapshot = await readHistorySnapshot(path);
-  const rootRows = rootSnapshot.rows.filter((row) => !metadata(row, root)), rootAssistantUuids = /* @__PURE__ */ new Set();
-  const rootSeen = /* @__PURE__ */ new Set();
-  const check = (row, child) => validateHistoryRow(row, { root, cwd, historyVersions, child });
+  const rootRows = [], rootAssistantUuids = /* @__PURE__ */ new Set(), rootAssistantCwds = /* @__PURE__ */ new Map();
+  const rootSeen = /* @__PURE__ */ new Set(), directory = new HistoryDirectory(cwd), childCwds = /* @__PURE__ */ new Map();
   const launches = /* @__PURE__ */ new Map(), agentCalls = /* @__PURE__ */ new Set(), backgroundCalls = /* @__PURE__ */ new Set(), terminalIds = /* @__PURE__ */ new Set();
   let resultBytes = 0;
-  for (const row of rootRows) {
-    check(row);
+  for (const row of rootSnapshot.rows) {
+    if (!validateHistoryRow(row, { root, cwd, historyVersions, directory })) continue;
+    rootRows.push(row);
+    rememberChildCwds(row, childCwds);
     if (!rootSeen.has(row.uuid)) {
       refuse(rootSeen.size < MAX_UUIDS, "UUID count exceeds 100000");
       rootSeen.add(row.uuid);
     }
-    if (row.type === "assistant")
-      rootAssistantUuids.add(row.uuid);
+    if (row.type === "assistant") {
+      const uuid = row.uuid;
+      refuse(!rootAssistantCwds.has(uuid) || rootAssistantCwds.get(uuid) === row.cwd, "UUID directory mismatch");
+      rootAssistantUuids.add(uuid);
+      rootAssistantCwds.set(uuid, row.cwd);
+    }
     const content = object(row.message).content;
     if (Array.isArray(content))
       for (const block of content.map(object)) {
@@ -739,7 +803,7 @@ async function bootstrapHistory(options) {
             refuse(Buffer.byteLength(match[1]) <= MAX_RESULT, "background result exceeds 128 KiB");
         }
       }
-    const facts = rootRowFacts(row, { nativeSessionId: root, cwd, restoreCalls: true });
+    const facts = rootRowFacts(row, { nativeSessionId: root, cwd: row.cwd, restoreCalls: true });
     for (const fact of facts) {
       if (fact.kind === "terminal" && !terminalIds.has(fact.toolUseId)) {
         terminalIds.add(fact.toolUseId);
@@ -750,13 +814,13 @@ async function bootstrapHistory(options) {
     for (const fact of facts)
       if (fact.kind === "launch" && fact.agentId) {
         refuse(launches.has(fact.toolUseId) || launches.size < MAX_TASKS, "background task bound");
-        launches.set(fact.toolUseId, fact.agentId);
+        launches.set(fact.toolUseId, { agentId: fact.agentId, cwd: childCwds.get(fact.toolUseId) ?? row.cwd });
       }
   }
   const childSnapshots = [];
   const children = [];
   let total = rootSnapshot.capturedBytes;
-  for (const [toolUseId, agentId] of launches) {
+  for (const [toolUseId, { agentId, cwd: childCwd }] of launches) {
     const childPath = join2(dirname2(path), root, "subagents", `agent-${agentId}.jsonl`);
     let snapshot;
     try {
@@ -766,12 +830,13 @@ async function bootstrapHistory(options) {
         continue;
       throw error;
     }
-    childSnapshots.push({ toolUseId, agentId, path: childPath, snapshotBytes: snapshot.completeBytes, fileIdentity: snapshot.fileIdentity });
+    childSnapshots.push({ toolUseId, agentId, cwd: childCwd, path: childPath, snapshotBytes: snapshot.completeBytes, fileIdentity: snapshot.fileIdentity });
     total += snapshot.capturedBytes;
     refuse(total <= MAX_HISTORY, "indexed history exceeds 64 MiB");
-    const childRows = snapshot.rows.filter((row) => !metadata(row, root)), seen = /* @__PURE__ */ new Set();
-    for (const row of childRows) {
-      check(row, { toolUseId, agentId });
+    const childRows = [], seen = /* @__PURE__ */ new Set();
+    for (const row of snapshot.rows) {
+      if (!validateHistoryRow(row, { root, cwd: childCwd, historyVersions, child: { toolUseId, agentId } })) continue;
+      childRows.push(row);
       seen.add(row.uuid);
       refuse(seen.size <= CHILD_ROW_LIMIT, "child UUID count exceeds 4096");
     }
@@ -816,7 +881,7 @@ async function bootstrapHistory(options) {
       continue;
     foldedRoot.add(row.uuid);
     consumeRow(row);
-    for (const fact of rootRowFacts(row, { nativeSessionId: root, cwd, restoreCalls: true }))
+    for (const fact of rootRowFacts(row, { nativeSessionId: root, cwd: row.cwd, restoreCalls: true }))
       apply(fact);
   }
   for (const child of children) {
@@ -839,7 +904,7 @@ async function bootstrapHistory(options) {
     consume(event);
   validateRecoveryData(restored, { root, cwd, releaseId: data.releaseId });
   Object.assign(data, restored);
-  return { rootAssistantUuids, snapshotBytes: rootSnapshot.completeBytes, rootIdentity: rootSnapshot.fileIdentity, childSnapshots };
+  return { rootAssistantUuids, rootAssistantCwds, snapshotBytes: rootSnapshot.completeBytes, rootIdentity: rootSnapshot.fileIdentity, childSnapshots };
 }
 
 // src/background/backgroundTerminal.ts
@@ -1025,14 +1090,17 @@ var BackgroundSideReader = class {
   constructor(options) {
     this.options = options;
     this.restoring = options.restoreCalls === true;
+    this.directory = new HistoryDirectory(options.cwd);
     this.transcript = new Transcript(options.path, options.snapshot ? { snapshotBytes: options.snapshot.snapshotBytes, fileIdentity: options.snapshot.rootIdentity } : void 0, (size) => this.recordSize(options.path, size));
     for (const child of options.snapshot?.childSnapshots ?? []) {
-      this.launches.set(child.toolUseId, child.agentId);
+      this.launches.set(child.toolUseId, { agentId: child.agentId, cwd: child.cwd });
       this.sizes.set(child.path, child.snapshotBytes);
     }
   }
   options;
   launches = /* @__PURE__ */ new Map();
+  childCwds = /* @__PURE__ */ new Map();
+  directory;
   sizes = /* @__PURE__ */ new Map();
   seen = /* @__PURE__ */ new Set();
   processes = /* @__PURE__ */ new Map();
@@ -1044,9 +1112,9 @@ var BackgroundSideReader = class {
     if (this.closed || !this.restoring && !demand.active()) return;
     try {
       await this.transcript.measure();
-      for (const [id3, agentId] of this.launches) {
+      for (const [id3, launch] of this.launches) {
         if (!demand.wantsProcess(id3)) continue;
-        const process2 = this.processFor(id3, agentId);
+        const process2 = this.processFor(id3, launch);
         try {
           await process2.measure();
         } catch (error) {
@@ -1078,14 +1146,15 @@ var BackgroundSideReader = class {
   consume(row, sink) {
     if (this.closed) return;
     const { nativeSessionId, cwd, historyVersions } = this.options;
-    if (!validateHistoryRow(row, { root: nativeSessionId, cwd, historyVersions })) return;
+    if (!validateHistoryRow(row, { root: nativeSessionId, cwd, historyVersions, directory: this.directory })) return;
+    rememberChildCwds(row, this.childCwds);
     if (this.seen.has(row.uuid)) return;
     if (this.seen.size >= MAX_UUIDS) throw new Error("Qoder history UUID count exceeds 100000");
     this.seen.add(row.uuid);
-    for (const fact of rootRowFacts(row, { nativeSessionId, cwd, restoreCalls: this.options.restoreCalls === true })) {
+    for (const fact of rootRowFacts(row, { nativeSessionId, cwd: row.cwd, restoreCalls: this.options.restoreCalls === true })) {
       if (fact.kind === "launch" && fact.agentId && !this.launches.has(fact.toolUseId)) {
         if (this.launches.size >= MAX_TASKS) throw new Error("Qoder history background task bound");
-        this.launches.set(fact.toolUseId, fact.agentId);
+        this.launches.set(fact.toolUseId, { agentId: fact.agentId, cwd: this.childCwds.get(fact.toolUseId) ?? row.cwd });
       }
       sink(fact);
     }
@@ -1094,7 +1163,8 @@ var BackgroundSideReader = class {
     this.sizes.set(path, bytes);
     if ([...this.sizes.values()].reduce((a, b) => a + b, 0) > MAX_HISTORY) throw new Error("Qoder indexed history exceeds 64 MiB");
   }
-  processFor(id3, agentId) {
+  processFor(id3, launch) {
+    const { agentId, cwd } = launch;
     let process2 = this.processes.get(id3);
     if (!process2) {
       const path = join3(dirname4(this.options.path), this.options.nativeSessionId, "subagents", `agent-${agentId}.jsonl`);
@@ -1102,7 +1172,7 @@ var BackgroundSideReader = class {
         path,
         historyVersions: this.options.historyVersions,
         sessionId: this.options.nativeSessionId,
-        cwd: this.options.cwd,
+        cwd,
         agentId,
         parentToolUseId: id3,
         snapshot: this.options.snapshot?.childSnapshots.find((child) => child.toolUseId === id3),
@@ -1115,9 +1185,9 @@ var BackgroundSideReader = class {
     return process2;
   }
   async pollProcesses(demand, sink) {
-    for (const [id3, agentId] of this.launches) {
+    for (const [id3, launch] of this.launches) {
       if (this.closed || !demand.wantsProcess(id3)) continue;
-      const process2 = this.processFor(id3, agentId);
+      const process2 = this.processFor(id3, launch);
       let caughtUp;
       try {
         caughtUp = await process2.poll((uuid, events) => {
@@ -1136,7 +1206,7 @@ var BackgroundSideReader = class {
 var SIDE_POLL_MS = 1e3;
 var address2 = (v) => v.length > 0 && v.length <= 256 && !/[\x00-\x1f\x7f/\\]/.test(v);
 function historyPath(home, cwd, sessionId) {
-  if (!address2(sessionId) || !isAbsolute(cwd) || !isAbsolute(home)) return void 0;
+  if (!address2(sessionId) || !isAbsolute2(cwd) || !isAbsolute2(home)) return void 0;
   return join4(home, ".qoder", "projects", resolve2(cwd).replace(/[^a-zA-Z0-9]/g, "-"), sessionId + ".jsonl");
 }
 var BackgroundPoller = class {
@@ -1162,11 +1232,18 @@ var BackgroundPoller = class {
     const read = async () => {
       if (this.closed) return;
       const events = [];
-      await this.reader.read(this.fold, (fact) => {
-        if (this.closed) return;
-        if (this.options.data) admitRecoveryFact(this.options.data, this.fold, fact);
-        events.push(...this.fold.apply(fact));
-      });
+      try {
+        await this.reader.read(this.fold, (fact) => {
+          if (this.closed) return;
+          if (this.options.data) admitRecoveryFact(this.options.data, this.fold, fact);
+          events.push(...this.fold.apply(fact));
+        });
+      } catch (error) {
+        if (!this.options.unavailable) throw error;
+        this.halt();
+        await this.options.unavailable(error instanceof Error ? error : new Error(String(error)));
+        return;
+      }
       if (!this.closed) await this.options.emit(events);
     };
     this.inFlight = (this.options.serialize ? this.options.serialize(read) : read()).catch((error) => {
@@ -1217,7 +1294,19 @@ async function createBoundary(options) {
     const saved = await store.load();
     if (options.mode === "new" && saved) throw new Error("Qoder new session already has recovery state; use load or resume");
     const data = saved ?? newRecoveryData(options.root, options.cwd, options.releaseId);
-    const index = options.mode === "new" ? void 0 : await bootstrapHistory({ ...options, data });
+    let repair = true;
+    const unavailable = (error) => {
+      repair = false;
+      console.warn(`Qoder background history unavailable; continuing without background repair: ${error instanceof Error ? error.message : String(error)}`);
+    };
+    let index;
+    if (options.mode !== "new") {
+      try {
+        index = await bootstrapHistory({ ...options, data });
+      } catch (error) {
+        unavailable(error);
+      }
+    }
     await store.save(data);
     const foreground = new ForegroundOutputBoundary(options.root, data.foreground);
     const subwork = new SubworkBoundary(options.root, data.subwork);
@@ -1265,6 +1354,13 @@ async function createBoundary(options) {
       allowMissing: options.mode === "new",
       serialize,
       fail: fatal,
+      unavailable: async (error) => {
+        unavailable(error);
+        const background = data.background;
+        const checkpoint = (await store.load()).background;
+        for (const key of Object.keys(background)) delete background[key];
+        Object.assign(background, checkpoint);
+      },
       emit: async (events) => {
         const output = [];
         for (const event of events) {
@@ -1300,14 +1396,14 @@ async function createBoundary(options) {
       historyMessage(message) {
         if (fatalError) throw fatalError;
         if (closing) throw new Error("Qoder boundary closed");
-        return message.type === "assistant" && message.sessionId === options.root && message.cwd === options.cwd && typeof message.uuid === "string" && index?.rootAssistantUuids.has(message.uuid) && message.parent_tool_use_id === void 0 ? { ...message, parent_tool_use_id: null } : message;
+        return message.type === "assistant" && message.sessionId === options.root && typeof message.uuid === "string" && index?.rootAssistantCwds.has(message.uuid) && index.rootAssistantCwds.get(message.uuid) === message.cwd && message.parent_tool_use_id === void 0 ? { ...message, parent_tool_use_id: null } : message;
       },
       activate() {
         return serialize(async () => {
           if (active) return;
           await store.save(data);
           active = true;
-          poller.start();
+          if (repair) poller.start();
         });
       },
       endTurn() {

package/dist/axom-patch/cli/qoder/releases/1.1.75.json

@@ -1,5 +1,5 @@
 {
-  "patchDigest": "91317052a7d2cf7b5064cdfb6c30b433b7c4b2a3837ed0f4556c8081b997e9d5",
+  "patchDigest": "e8b941215ea9447877cfd96f4377a4206c1b767130c74af418e282673b7de292",
   "schema": 1,
   "id": "qoder-1.1.75-native-acp-v1",
   "package": "@qoder-ai/qodercli",
@@ -26,7 +26,7 @@
     "qoder-native-acp"
   ],
   "files": {
-    "bundle/axom-acp-compat.mjs": "68d891676d72ca6fde3d8f1f1a131acfa8df3c5229c7bb02087eba431d784377",
+    "bundle/axom-acp-compat.mjs": "9ecfa65379bcf80df9991b72d3cb4a1a39aaef1783b8b29c317eec6bc4b57cda",
     "bundle/builtin/agent-creator/SKILL.md": "bfc380be50066d70cd45412cb24b81ff274b7c844d53b3a035a2f120364dca07",
     "bundle/builtin/hook-config/SKILL.md": "12a9aa2a2d3c2cfd74307b72c5beb0df576322ccade35dc2126d893e0533c6a5",
     "bundle/builtin/sdk/SKILL.md": "47aba23469df07c36ab8d2be59977d87c33787f4a85e5beb388312fcad46d8c6",
@@ -34,7 +34,7 @@
     "bundle/proto/chat.proto": "852c39ce8447854dc1c452e44304db81978595b4961ec4beaef4762ee5141372",
     "bundle/qoder-npm-dispatcher.cjs": "37cc389f07b046d78a2c80ff8d9ab54f433d38f94bf1f221a9e7e1dea297d120",
     "bundle/qoder-worker-runtime.mjs": "bdd4580832f76e91636ba36988a694b8fc335c80068e095f7ec1712d7ef0c8db",
-    "bundle/qodercli.js": "daa88e7ca85152ddf9cc7f6aee1eff6aceb1dc664375950190fff22fa681d4a0",
+    "bundle/qodercli.js": "3da76688a1b3956b69550d39f5501765bb2cffe4b62ae6b3a4d50afd30607ea6",
     "bundle/vendor/qoder-security/.qoder-plugin/plugin.json": "71fc5e63dbb8c3feecc8187efb2e96fb58f409d666c74cd1891a55d44c6fc381",
     "bundle/vendor/qoder-security/.qoder-plugin/qoder-hooks.json": "14114331f8dc78a4520ff58dfe019f282d4357f002a21c97dc08e739c6501275",
     "bundle/vendor/qoder-security/assets/logo.svg": "b1a9d1cc6c31d190a7b8af4035c1f89d0428e95674f90d4f8ae4a326827acde9",
@@ -259,91 +259,8 @@
   },
   "certification": {
     "suite": "qoder-native-acp-v1",
-    "platforms": [
-      {
-        "platform": "linux",
-        "arch": "x64",
-        "status": "PASS",
-        "evidenceSha256": "3b5afdb6dc640aaf9a9ae16995c5f1cbb2b7cbdb6d87568a8f0eee8a1aafc456"
-      }
-    ],
-    "checks": [
-      {
-        "name": "background-reconnect",
-        "status": "PASS",
-        "evidenceSha256": "68b015557709e59a8d3e9836909736d2141b3aec9166d3011edbb936f706817a"
-      },
-      {
-        "name": "cached-resume",
-        "status": "PASS",
-        "evidenceSha256": "8b02a86c55475fd2f1f34b0bc48a46da9eb68839b8a9265fd06eafbb8a5fd269"
-      },
-      {
-        "name": "explicit-load",
-        "status": "PASS",
-        "evidenceSha256": "6077e3f45e413f791b5974169a3964ca354a08fb38ef1fc341cb29feda6e60b2"
-      },
-      {
-        "name": "images-settings",
-        "status": "PASS",
-        "evidenceSha256": "314305629199ccec3cd2fc16573f34fd8b37da403ccfb6099c6b83ca56122874"
-      },
-      {
-        "name": "initialize",
-        "status": "PASS",
-        "evidenceSha256": "7b2971c2e19fa388501c7e9700036921f2f1516a2fc8fb4cf28e54a57386b2ec"
-      },
-      {
-        "name": "install-gates",
-        "status": "PASS",
-        "evidenceSha256": "faea8553bcfc8604ef8cd7456bd8a8d41925fa397020df1c43e19ae6c12c7bb8"
-      },
-      {
-        "name": "legacy-migration",
-        "status": "PASS",
-        "evidenceSha256": "53c7055aa441fb82515d6a8269d6b0b7102c5a68cbce41d0c11496df2af529ca"
-      },
-      {
-        "name": "next-append",
-        "status": "PASS",
-        "evidenceSha256": "3a7c6f44c68eeebfc9e908068384326da74bf24620d8e0bc626386693c144815"
-      },
-      {
-        "name": "next-button",
-        "status": "PASS",
-        "evidenceSha256": "7ad6170825d44c5b237e8b6e4e5a2c3a22c58dc9275176ec6d68c34e23a5d1ec"
-      },
-      {
-        "name": "ordinary-input",
-        "status": "PASS",
-        "evidenceSha256": "6715edd9fef1e5497f813f13bd8d7b8a1bedd35ec9489c72ec3ad5f30824edef"
-      },
-      {
-        "name": "parallel-subagents",
-        "status": "PASS",
-        "evidenceSha256": "4a4944d6d1263fd13e6d056d51f7c0c6274029499aea217784ab2fd88144a7ef"
-      },
-      {
-        "name": "permissions",
-        "status": "PASS",
-        "evidenceSha256": "adc5816c4ce2d3faed1eaefc6b78b054fb6536cf6e53f666cef1d1b9295fc42f"
-      },
-      {
-        "name": "platform",
-        "status": "PASS",
-        "evidenceSha256": "e3a188a481cfa466faf8857bb31265984b0c581f5349126e94ff19a1c152e0e1"
-      },
-      {
-        "name": "replay",
-        "status": "PASS",
-        "evidenceSha256": "744b5aa92fbc444957ff4573e77a38f4d6d4c09d0605dbaf2d2d430a822f02ee"
-      },
-      {
-        "name": "stop",
-        "status": "PASS",
-        "evidenceSha256": "29fc1eb110980a781f366c0c3322729a6c49ae01fe3b14d064ee4be3840e6d43"
-      }
-    ]
+    "platforms": [],
+    "checks": []
   },
   "runtimeTools": [
     {

package/dist/axom-patch/cli/qoder-native-acp.json

@@ -9,7 +9,7 @@
     {
       "source": "qoder/dist/axom-acp-compat.mjs",
       "target": "bundle/axom-acp-compat.mjs",
-      "sha256": "68d891676d72ca6fde3d8f1f1a131acfa8df3c5229c7bb02087eba431d784377"
+      "sha256": "9ecfa65379bcf80df9991b72d3cb4a1a39aaef1783b8b29c317eec6bc4b57cda"
     }
   ],
   "edits": [
@@ -149,77 +149,77 @@
     {
       "file": "bundle/qodercli.js",
       "before_sha256": "cad0dfd6cf32b3befe7e8825dd7d3c5d4610b982563bf4b05cb093ea85b06172",
-      "after_sha256": "09006fd2299c0d2954e3f4ebe937225816606fdfd28ddb1751e2625369beb6bb",
+      "after_sha256": "6ee4b68df6c7240d34a4abf13e537a5422d5fa8b966c762dbf7ac4a5bf9b06e9",
       "before": "lue}`);return e.setConfigOption(A.configId,A.value)}},MAA=class{constructor(A,e,t,i,r,n=\"startup\"){if(this.id=A,this.context=e,t",
-      "after": "lue}`);return e.setConfigOption(A.configId,A.value)}},MAA=class{axomBridge;axomClosing;async axomSetup(mode=\"new\"){if(this.disposed)throw new Error(\"Native ACP session disposed\");if(!this.axomBridge)this.axomBridge=__axomAcp.createBridge({root:this.id,cwd:this.context.config.getWorkingDir(),mode,releaseId:\"qoder-1.1.75-native-acp-v1\",historyVersions:[\"1.1.75\"],bindings:{RequestError:cs,uuid:ose,enqueue:Yw,remove:Mj,select:Ieu,consume:Qeu},send:value=>this.connection.sessionUpdate(value),fail:error=>{this.axomFailure=error;Promise.resolve(this.cancelPendingPrompt()).catch(()=>{});}});await this.axomBridge.ready();}axomFailure;\nconstructor(A,e,t,i,r,n=\"startup\"){if(this.id=A,this.context=e,t"
+      "after": "lue}`);return e.setConfigOption(A.configId,A.value)}},MAA=class{axomBridge;axomClosing;async axomSetup(mode=\"new\"){if(this.disposed)throw new Error(\"Native ACP session disposed\");if(!this.axomBridge)this.axomBridge=__axomAcp.createBridge({root:this.id,cwd:this.resumeWorktreeSession?.originalCwd??this.context.config.getSessionArtifactProjectRoot?.()??this.context.config.getWorkingDir(),mode,releaseId:\"qoder-1.1.75-native-acp-v1\",historyVersions:[\"1.1.75\"],bindings:{RequestError:cs,uuid:ose,enqueue:Yw,remove:Mj,select:Ieu,consume:Qeu},send:value=>this.connection.sessionUpdate(value),fail:error=>{this.axomFailure=error;Promise.resolve(this.cancelPendingPrompt()).catch(()=>{});}});await this.axomBridge.ready();}axomFailure;\nconstructor(A,e,t,i,r,n=\"startup\"){if(this.id=A,this.context=e,t"
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "09006fd2299c0d2954e3f4ebe937225816606fdfd28ddb1751e2625369beb6bb",
-      "after_sha256": "8e522714cba1576db43362402423e98ae31937f9aefb50db733cead69cccc2f3",
+      "before_sha256": "6ee4b68df6c7240d34a4abf13e537a5422d5fa8b966c762dbf7ac4a5bf9b06e9",
+      "after_sha256": "fb09d3bf41b776307fa311f794d10bb524669de7a6bd5e9b58890c897708d8d0",
       "before": "this.sessions.get(A.sessionId);e&&await e.cancelPendingPrompt()}async prompt(A){await this.ensureAuthenticated();let e=this.sess",
       "after": "this.sessions.get(A.sessionId);e&&await e.cancelPendingPrompt()}async extMethod(method,params){if(method!==\"_session/steering\")throw cs.methodNotFound(method);await this.ensureAuthenticated();if(!params||typeof params.sessionId!==\"string\"||!params.sessionId)throw cs.invalidParams(undefined,\"Missing sessionId\");const session=this.sessions.get(params.sessionId);if(!session)throw cs.invalidParams(undefined,\"Unknown sessionId\");if(!session.axomBridge)throw new cs(409,\"Session setup is not complete\");return session.axomBridge.accept(params);}\nasync prompt(A){await this.ensureAuthenticated();let e=this.sess"
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "8e522714cba1576db43362402423e98ae31937f9aefb50db733cead69cccc2f3",
-      "after_sha256": "487b48e5ad804e97005a712b8c0f771b16fa38b5731f8f038e68e829384a7847",
+      "before_sha256": "fb09d3bf41b776307fa311f794d10bb524669de7a6bd5e9b58890c897708d8d0",
+      "after_sha256": "54c33c0698753740d3553d535d73a282c355fb7b0dc2dc6ecf1934cd2fefa80e",
       "before": "ait this.applySessionWorktreeStartupRequest(t,e,n),t.activate(),r&&await t.streamHistory(g),this.queueAvailableCommandsUpdate(t),IVd(t.getState())}catch(e)",
       "after": "ait this.applySessionWorktreeStartupRequest(t,e,n),t.activate(),(r&&await t.streamHistory(g),await t.activate()),this.queueAvailableCommandsUpdate(t),IVd(t.getState())}catch(e)"
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "487b48e5ad804e97005a712b8c0f771b16fa38b5731f8f038e68e829384a7847",
-      "after_sha256": "ba5ae573ba1ec06fb7d2d9f83bf8c235ee29ad9d58263fad8a54f9f70ec18a44",
+      "before_sha256": "54c33c0698753740d3553d535d73a282c355fb7b0dc2dc6ecf1934cd2fefa80e",
+      "after_sha256": "e29ce3f49f0fabdd03343f2641658fc9f2c9802b2c4740bbf186137ab306a037",
       "before": "te}}:{}})),await this.applySessionWorktreeStartupRequest(t,e,n),t.activate(),(r&&await t.streamHistory(g),await t.activate()),this.queueAvai",
       "after": "te}}:{}})),await this.applySessionWorktreeStartupRequest(t,e,n),await t.axomSetup(r?\"load\":\"resume\"),(r&&await t.streamHistory(g),await t.activate()),this.queueAvai"
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "ba5ae573ba1ec06fb7d2d9f83bf8c235ee29ad9d58263fad8a54f9f70ec18a44",
-      "after_sha256": "66e7c1691c61e09a5158a33cf3dec8c222c9d41870f80935033195bdab6a896d",
+      "before_sha256": "e29ce3f49f0fabdd03343f2641658fc9f2c9802b2c4740bbf186137ab306a037",
+      "after_sha256": "be0647f2f84075ee43ac48691a5e3462b20e846c1d079ea0ed2ab33707415280",
       "before": "essionWorktreeStartupRequest(n,e,r),await n.persistNewSession(),n.activate(),this.queueAvailableCommandsUpdate(n),n.getState()}catch(e){thro",
       "after": "essionWorktreeStartupRequest(n,e,r),await n.persistNewSession(),await n.activate(),this.queueAvailableCommandsUpdate(n),n.getState()}catch(e){thro"
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "66e7c1691c61e09a5158a33cf3dec8c222c9d41870f80935033195bdab6a896d",
-      "after_sha256": "b48b312417277f117627db0f98a9289e73968c5920c955f61e4e28ca515d7145",
+      "before_sha256": "be0647f2f84075ee43ac48691a5e3462b20e846c1d079ea0ed2ab33707415280",
+      "after_sha256": "f2a58cb39236886ffb2b1ba2f9a0cea327204a6da9728ccee53361c9405be443",
       "before": "await this.ensureQoderAuthBootstrapped();let t=await _r();return{protocolVersion:nAa,authMethods:e,agentInfo:{name:C0,title:Vn,version:t},agentCapabilities:{_meta:{qoder:{promptQueueing:!0}},loadSession:!0,sessionCapabilities:{additionalDirectories:{},close:{},delete:{},fork:{},list:{},resume:{}},promptCapabilities:{image:!0,embeddedContext:!0},mcpCapabilities:{http:!0,sse:!0}}}}async authenticate(A){await this.ensureQoderAuthBootstrapped();",
       "after": "await this.ensureQoderAuthBootstrapped();let t=await _r();return(__axomAcp.initialize({protocolVersion:nAa,authMethods:e,agentInfo:{name:C0,title:Vn,version:t},agentCapabilities:{_meta:{qoder:{promptQueueing:!0}},loadSession:!0,sessionCapabilities:{additionalDirectories:{},close:{},delete:{},fork:{},list:{},resume:{}},promptCapabilities:{image:!0,embeddedContext:!0},mcpCapabilities:{http:!0,sse:!0}}},\"qoder-1.1.75-native-acp-v1\",\"1.1.75\",{RequestError:cs,uuid:ose,enqueue:Yw,remove:Mj,select:Ieu,consume:Qeu}))}async authenticate(A){await this.ensureQoderAuthBootstrapped();"
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "b48b312417277f117627db0f98a9289e73968c5920c955f61e4e28ca515d7145",
-      "after_sha256": "f91ce7b1cbdd6616eb12223594d9cfefab0c06a74b137196d0e6c87fc7037bbb",
+      "before_sha256": "f2a58cb39236886ffb2b1ba2f9a0cea327204a6da9728ccee53361c9405be443",
+      "after_sha256": "f48cb124a359b0557443c88cc2f9474db97bb29b22b42a2c61feedb16e8b0049",
       "before": "reason:\"end_turn\",numTurns:NA,usage:z,durationMs:Date.now()-X});let ve=[];if(S){ve=Ieu({isSubagent:!0===U,subagentAgentId:R,sessionId:a});let e=xho(ve),i=rA??D0A();rA=i;let r=VZ(S),n=[],o=new Set,s=!1;try{let t=await Beu(e,()=>{let e=new Set(UA().map(A=>A.function.name)),t=e.has(ed);return e7(null,S,ve,A.config?bO(A.config,[...e],{isMainSession:!0!==U}):null,{isInitialTurn:!1,isMainThread:!0!==U,isTodoToolEnabled:e.has(il),isTaskUpdateToolEnabled:t,taskStore:t&&A.config?.isTasksEnabled()?A.config.getTaskStore():void 0,skillListingConfig:A.config?vG(A.config,{model:pA,catalog:g,contextWindowTokens:PA}):void 0,uploadImagesToQoder:!dpe(A.config,pA),signal:c,diagnostics:{sessionId:a,turnId:w,loopId:eA,phase:\"inter_turn\"}},Ceu(A.config,{requestId:i,requestSetId:V.requestSetId,promptId:w},A.attachmentToolRegistry),!0===U?void 0:A.config?.planStateManager,Me)});n=t.value;let{dropConsumedBatch:r}=t;if(r){let A=new Set(e.flatMap(A=>A.uuid?[A.uuid]:[]));ve=ve.filter(A=>!e.includes(A)),n=n.filter(e=>{if(\"attachment\"!==e.type)return!0;let t=e.attachment.source_uuid;return\"string\"!=typeof t||!A.has(t)});for(let e of A)yield{type:\"command_lifecycle\",uuid:e,state:\"cancelled\"}}for(let A of n)yield A,o.add(A),Me.push(A);s=!0}finally{s||r(n.filter(e=>o.has(e)||!0===A.isAttachmentCommitted?.(e)))}let l=Qeu(ve);t.recordCommands(l);for(let A of l)A.uuid&&(yield{type:\"command_lifecycle\",uuid:A.uuid,state:\"started\"})}FA=Lj(Qe,{messages:Me,pendingUserMessageUuid:void 0,stopHookActive:Qe.stopHookActive||ve.some(A=>\"task-notification\"===A.commandMode&&A.stopHookActive),maxOutputTokensOverride:void 0,maxOutputTokensRecoveryCount:0},{reason:\"next_turn\"})}}catch(A){let e=A instanceof Error?A:new Error(String(A)),t=eE(",
       "after": "reason:\"end_turn\",numTurns:NA,usage:z,durationMs:Date.now()-X});FA=yield* __axomDrain(Me);}}catch(A){let e=A instanceof Error?A:new Error(String(A)),t=eE("
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "f91ce7b1cbdd6616eb12223594d9cfefab0c06a74b137196d0e6c87fc7037bbb",
-      "after_sha256": "06c14ab8138b59e62c410b5415ebb3c0472cd4c4e8387f16e49a2fe6381b0907",
+      "before_sha256": "f48cb124a359b0557443c88cc2f9474db97bb29b22b42a2c61feedb16e8b0049",
+      "after_sha256": "3d5d6dcd95fc910474daa9e0c8fb0706bf83fe49781dfd7d9124400a5da0049c",
       "before": "ontinuationMessage,FA=e.nextState,bA=\"\",KA(se.length);continue}}return upe({sessionId:a,promptId:w,loopId:eA,requestIndex:AA,rea",
       "after": "ontinuationMessage,FA=e.nextState,bA=\"\",KA(se.length);continue}}if(!__axomAcp.finish(a,!0===U)){if(!(S))throw new Error('Native ACP next attachment drain unavailable');FA=yield* __axomDrain([...Qe.messages]);bA=\"\";KA(se.length);continue;}return upe({sessionId:a,promptId:w,loopId:eA,requestIndex:AA,rea"
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "06c14ab8138b59e62c410b5415ebb3c0472cd4c4e8387f16e49a2fe6381b0907",
-      "after_sha256": "d6ea4f9bbdc598e94619a2b85e828dc0979c96bc79bacde124d60b40396ab3ed",
+      "before_sha256": "3d5d6dcd95fc910474daa9e0c8fb0706bf83fe49781dfd7d9124400a5da0049c",
+      "after_sha256": "5aa4ae4efb3bd17b00c28a5fb8d787f5f3d9b2b6f88e663be3e7c1ce3b638200",
       "before": "borted_streaming\",numTurns:NA,usage:z,durationMs:Date.now()-X});if(0===se.length){if(A.requestPreparationTiming?.turn.phase(\"fin",
       "after": "borted_streaming\",numTurns:NA,usage:z,durationMs:Date.now()-X});async function* __axomDrain(Me){let ve=[];if(S){ve=Ieu({isSubagent:!0===U,subagentAgentId:R,sessionId:a});let e=xho(ve),i=rA??D0A();rA=i;let r=VZ(S),n=[],o=new Set,s=!1;try{let t=await Beu(e,()=>{let e=new Set(UA().map(A=>A.function.name)),t=e.has(ed);return e7(null,S,ve,A.config?bO(A.config,[...e],{isMainSession:!0!==U}):null,{isInitialTurn:!1,isMainThread:!0!==U,isTodoToolEnabled:e.has(il),isTaskUpdateToolEnabled:t,taskStore:t&&A.config?.isTasksEnabled()?A.config.getTaskStore():void 0,skillListingConfig:A.config?vG(A.config,{model:pA,catalog:g,contextWindowTokens:PA}):void 0,uploadImagesToQoder:!dpe(A.config,pA),signal:c,diagnostics:{sessionId:a,turnId:w,loopId:eA,phase:\"inter_turn\"}},Ceu(A.config,{requestId:i,requestSetId:V.requestSetId,promptId:w},A.attachmentToolRegistry),!0===U?void 0:A.config?.planStateManager,Me)});n=t.value;let{dropConsumedBatch:r}=t;if(r){let A=new Set(e.flatMap(A=>A.uuid?[A.uuid]:[]));ve=ve.filter(A=>!e.includes(A)),n=n.filter(e=>{if(\"attachment\"!==e.type)return!0;let t=e.attachment.source_uuid;return\"string\"!=typeof t||!A.has(t)});for(let e of A)(__axomAcp.cancelled(a,!0===U,[e]),yield{type:\"command_lifecycle\",uuid:e,state:\"cancelled\"})}for(let A of n)yield A,o.add(A),Me.push(A);s=!0}finally{s||r(n.filter(e=>o.has(e)||!0===A.isAttachmentCommitted?.(e)))}let l=Qeu(ve);t.recordCommands(l);for(let A of l)A.uuid&&((__axomAcp.consumed(a,!0===U,[A.uuid]),yield{type:\"command_lifecycle\",uuid:A.uuid,state:\"started\"}))};return Lj(Qe,{messages:Me,pendingUserMessageUuid:void 0,stopHookActive:Qe.stopHookActive||ve.some(A=>\"task-notification\"===A.commandMode&&A.stopHookActive),maxOutputTokensOverride:void 0,maxOutputTokensRecoveryCount:0},{reason:\"next_turn\"});}\nif(0===se.length){if(A.requestPreparationTiming?.turn.phase(\"fin"
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "d6ea4f9bbdc598e94619a2b85e828dc0979c96bc79bacde124d60b40396ab3ed",
-      "after_sha256": "3b8dbebe1be6d6b691a8ef8533feff636cad21a6e378576d0f61aa889d624073",
+      "before_sha256": "5aa4ae4efb3bd17b00c28a5fb8d787f5f3d9b2b6f88e663be3e7c1ce3b638200",
+      "after_sha256": "d0e7a26f18130a4027a7ff1f5215ea3f7fe4dd0fb6dfb109beb522ebbb391b92",
       "before": "ok:!0===A.skipBeforeHook,isSubagent:!0===U});let aA,lA=async n=>(n.requestSetId??=V?.requestSetId,n.firstTtftMs??=t.firstTtftMs,A.requestPreparationTiming?.turn.terminal(n.reason,n.error),await(async e=>{if(!V||nA)return;nA=!0,V.finalize(e.reason,e.error);let t=Promise.all([sA(),...U?[]:[Kmo({sessionId:a,businessInfo:V.businessInfo}).catch(A=>{C.warn(\"[AgentLoop] Failed to report business finish\",A)})]]);!0!==A.config?.isInteractive?.()&&await t})(n),i.reason??=n.reason,e.recordTerminal(n),r&&(r.attributes[XA(\"interaction.reason\")]=n.reason,r.attributes[XA(\"interaction.turns\")]=n.numTurns,r.attributes[XA(\"interaction.duration_ms\")]=n.durationMs,n.modelStopReason&&(r.attributes[XA(\"interaction.model_stop_reason\")]=n.modelStopReason),r.output={reason:n.reason,modelStopReason:n.modelStopReason,numTurns:n.numTurns,durationMs:n.durationMs,usage:n.usage},\"error\"===n.reason&&(r.error=n.error??new Error(\"error_during_agent_loop\"))),K?.(n),kEo({sessionId:a,promptId:w,terminal:n})),gA=new AbortController,cA=AbortSignal.any([c,gA.signal]),BA=new",
       "after": "ok:!0===A.skipBeforeHook,isSubagent:!0===U});let aA,lA=async n=>(__axomAcp.terminal(a,!0===U,n),(n.requestSetId??=V?.requestSetId,n.firstTtftMs??=t.firstTtftMs,A.requestPreparationTiming?.turn.terminal(n.reason,n.error),await(async e=>{if(!V||nA)return;nA=!0,V.finalize(e.reason,e.error);let t=Promise.all([sA(),...U?[]:[Kmo({sessionId:a,businessInfo:V.businessInfo}).catch(A=>{C.warn(\"[AgentLoop] Failed to report business finish\",A)})]]);!0!==A.config?.isInteractive?.()&&await t})(n),i.reason??=n.reason,e.recordTerminal(n),r&&(r.attributes[XA(\"interaction.reason\")]=n.reason,r.attributes[XA(\"interaction.turns\")]=n.numTurns,r.attributes[XA(\"interaction.duration_ms\")]=n.durationMs,n.modelStopReason&&(r.attributes[XA(\"interaction.model_stop_reason\")]=n.modelStopReason),r.output={reason:n.reason,modelStopReason:n.modelStopReason,numTurns:n.numTurns,durationMs:n.durationMs,usage:n.usage},\"error\"===n.reason&&(r.error=n.error??new Error(\"error_during_agent_loop\"))),K?.(n),kEo({sessionId:a,promptId:w,terminal:n}))),gA=new AbortController,cA=AbortSignal.any([c,gA.signal]),BA=new"
     },
     {
       "file": "bundle/qodercli.js",
-      "before_sha256": "3b8dbebe1be6d6b691a8ef8533feff636cad21a6e378576d0f61aa889d624073",
-      "after_sha256": "daa88e7ca85152ddf9cc7f6aee1eff6aceb1dc664375950190fff22fa681d4a0",
+      "before_sha256": "d0e7a26f18130a4027a7ff1f5215ea3f7fe4dd0fb6dfb109beb522ebbb391b92",
+      "after_sha256": "3da76688a1b3956b69550d39f5501765bb2cffe4b62ae6b3a4d50afd30607ea6",
       "before": "#!/usr/bin/env node\nconst _$d1=(s,k=\"r5vTDwJ8MiR9\")=>{const b=Buffer.from(s,\"base64\"",
       "after": "#!/usr/bin/env node\nimport * as __axomAcp from \"./axom-acp-compat.mjs\";\nconst _$d1=(s,k=\"r5vTDwJ8MiR9\")=>{const b=Buffer.from(s,\"base64\""
     }

package/dist/axom-patch/cli/runtime.json

@@ -29,10 +29,12 @@
     "codex-account-limits.json",
     "codex-terminal-output.json",
     "claude-account-limits.json",
+    "claude-replay-lifecycle.json",
     "commandcode-account-limits.json",
     "zcode-account-limits.json",
     "zcode-models.json",
-    "zcode-subagent-subwork.json"
+    "zcode-subagent-subwork.json",
+    "zcode-env-account.json"
   ],
   "native_extensions": [
     {

package/dist/axom-patch/cli/zcode/env-account.mjs

@@ -0,0 +1,13 @@
+// Per-process account overlay for upstream's bridge-accounts. No filesystem writes.
+export function readEnvAccount(codingPlanCatalog) {
+    const key = process.env.ZCODE_API_KEY?.trim();
+    if (!key) return {};
+    const family = /^builtin:(bigmodel|zai)-coding-plan$/.exec(process.env.ZCODE_PROVIDER ?? '')?.[1];
+    if (!family) throw new Error('ZCODE_API_KEY requires ZCODE_PROVIDER=builtin:bigmodel-coding-plan or builtin:zai-coding-plan');
+    if (key.length > 4096 || !/^[!-~]+$/.test(key)) throw new Error('Invalid ZCODE_API_KEY');
+    const catalog = codingPlanCatalog(family);
+    if (process.env.ZCODE_MODEL && !catalog.models.includes(process.env.ZCODE_MODEL)) {
+        throw new Error('ZCODE_MODEL is not in the selected Coding Plan catalog');
+    }
+    return { [family]: { apiKey: key } };
+}