@skrr-ai/cli 0.1.67 → 0.1.69

package/dist/commands/agents/releases/rollback.js

@@ -13,8 +13,7 @@ class AgentsReleasesRollback extends base_command_1.BaseCommand {
     async run() {
         this.requireAuth();
         const { args, flags } = await this.parse(AgentsReleasesRollback);
-        // Through handleApiError so a refusal says why — in particular
-        // STEP_UP_REQUIRED (OSK-12275), whose remedy is `step-up`, not a retry.
+        // Through handleApiError so a release or permission refusal says why.
         let result;
         try {
             result = await data_provider_1.dataService.rollbackAgentRelease({

package/dist/commands/agents/visibility.js

@@ -36,7 +36,9 @@ function parseReleaseDependencies(entries) {
     for (const entry of entries) {
         const match = /^(skill|action):([^@]+)@(store_release_[A-Za-z0-9_-]+)$/.exec(entry);
         if (!match) {
-            return { error: `--dependency expects skill:<id>@<store-release-id> or action:<id>@<store-release-id>, got "${entry}".` };
+            return {
+                error: `--dependency expects skill:<id>@<store-release-id> or action:<id>@<store-release-id>, got "${entry}".`,
+            };
         }
         dependencies.push({
             entityType: match[1],
@@ -47,10 +49,9 @@ function parseReleaseDependencies(entries) {
     return { dependencies };
 }
 class AgentsVisibility extends base_command_1.BaseCommand {
-    static description = 'Set the visibility of an agent (accounts with 2FA need recent step-up for public publishing)';
+    static description = 'Set the visibility of an agent';
     static examples = [
         '<%= config.bin %> agents visibility <agent-id> --public',
-        '<%= config.bin %> step-up # required before public publishing when 2FA is enabled',
         '<%= config.bin %> agents visibility <agent-id> --private',
         '<%= config.bin %> agents visibility <agent-id> --public --json',
         '<%= config.bin %> agents visibility <agent-id> --public --capability-rationale "network:*=Looks up flight prices on the web"',
@@ -111,7 +112,9 @@ class AgentsVisibility extends base_command_1.BaseCommand {
         if (dependencyError)
             this.error(dependencyError, { exit: 1 });
         if (dependencies && !isPublic) {
-            this.error('--dependency declares pins on a public release; pass it with --public.', { exit: 1 });
+            this.error('--dependency declares pins on a public release; pass it with --public.', {
+                exit: 1,
+            });
         }
         if (capabilityRationales && !isPublic) {
             this.error('--capability-rationale applies only when publishing with --public.', {
@@ -125,29 +128,6 @@ class AgentsVisibility extends base_command_1.BaseCommand {
                 exit: 1,
             });
         }
-        // A public release reaches buyers. Accounts with 2FA need a recent
-        // second-factor proof; accounts without 2FA can publish from a verified
-        // sign-in session. Read that state before the publish write so the
-        // remedy is visible in the normal CLI flow instead of only after a 403.
-        // The server remains authoritative: this is user guidance, not a bypass.
-        if (isPublic) {
-            let stepUp;
-            try {
-                stepUp = await data_provider_1.dataService.getStepUpStatus(data_provider_1.STORE_PUBLISH_STEP_UP_PURPOSE);
-            }
-            catch (err) {
-                this.handleApiError(err);
-            }
-            if (!stepUp.active) {
-                const bin = this.config.bin;
-                if (!stepUp.sessionBound) {
-                    this.error(`This credential is not tied to a sign-in session. Run \`${bin} login\` before publishing, then \`${bin} step-up\` if your account has 2FA enabled.`, { code: 'STEP_UP_SESSION_UNBOUND', exit: 2 });
-                }
-                if (stepUp.methods.length > 0) {
-                    this.error(`Public publishing needs a recent two-factor verification. Run \`${bin} step-up\`, then retry this command.`, { code: 'STEP_UP_PROOF_REQUIRED', exit: 2 });
-                }
-            }
-        }
         let result;
         try {
             result = await data_provider_1.dataService.setAgentVisibility({

package/dist/commands/step-up.d.ts

@@ -1,11 +1,10 @@
 import { BaseCommand } from '../base-command';
 /**
- * `skrr step-up` — confirm it is you before publishing to the Store
+ * `skrr step-up` — confirm it is you for a gated Store administration action
  * (OSK-12275).
  *
- * Making a release public, rolling the public listing back, or publishing a
- * governed release all reach buyers, so the server refuses them from a login
- * that has not recently proved a second factor. This command proves one — the
+ * Governed release administration may ask for a recent second factor.
+ * Self-service Agent publishing and rollback do not. This command proves one — the
  * code from the account's authenticator app, or an unused backup code — and
  * the verification is bound to THIS login only, for a few minutes. A token
  * stolen from another device, or a browser session, is not covered by it.

package/dist/commands/step-up.js

@@ -6,18 +6,17 @@ const base_command_1 = require("../base-command");
 const prompt_1 = require("../lib/prompt");
 const step_up_1 = require("../lib/step-up");
 /**
- * `skrr step-up` — confirm it is you before publishing to the Store
+ * `skrr step-up` — confirm it is you for a gated Store administration action
  * (OSK-12275).
  *
- * Making a release public, rolling the public listing back, or publishing a
- * governed release all reach buyers, so the server refuses them from a login
- * that has not recently proved a second factor. This command proves one — the
+ * Governed release administration may ask for a recent second factor.
+ * Self-service Agent publishing and rollback do not. This command proves one — the
  * code from the account's authenticator app, or an unused backup code — and
  * the verification is bound to THIS login only, for a few minutes. A token
  * stolen from another device, or a browser session, is not covered by it.
  */
 class StepUp extends base_command_1.BaseCommand {
-    static description = 'Confirm it is you with an authenticator code before publishing to the Store';
+    static description = 'Confirm it is you with an authenticator code for gated Store administration';
     static examples = [
         '<%= config.bin %> step-up',
         '<%= config.bin %> step-up --otp 123456',
@@ -34,7 +33,7 @@ class StepUp extends base_command_1.BaseCommand {
             exclusive: ['otp', 'status'],
         }),
         status: core_1.Flags.boolean({
-            description: 'Show whether this login is verified for publishing, without verifying',
+            description: 'Show whether this login has a recent second-factor proof',
         }),
         json: core_1.Flags.boolean({ description: 'Output the result as JSON' }),
     };
@@ -56,15 +55,15 @@ class StepUp extends base_command_1.BaseCommand {
                 return;
             }
             this.log(status.active
-                ? `Verified for publishing from this login until ${(0, step_up_1.formatStepUpExpiry)(status.expiresAt)}.`
-                : `Not verified for publishing from this login. Run \`${bin} step-up\` to verify.`);
+                ? `Verified for gated Store actions from this login until ${(0, step_up_1.formatStepUpExpiry)(status.expiresAt)}.`
+                : `No recent second-factor proof for this login. Run \`${bin} step-up\` to verify.`);
             return;
         }
         if (!status.sessionBound) {
-            this.error(`This credential is not tied to a sign-in session, so it cannot be verified for publishing. Run \`${bin} login\`, then \`${bin} step-up\`.`, { code: 'STEP_UP_SESSION_UNBOUND', exit: 2 });
+            this.error(`This credential is not tied to a sign-in session, so it cannot record a second-factor proof. Run \`${bin} login\`, then \`${bin} step-up\`.`, { code: 'STEP_UP_SESSION_UNBOUND', exit: 2 });
         }
         if (status.methods.length === 0) {
-            this.error('Publishing to the Store needs two-factor authentication, and this account has none. ' +
+            this.error('A second-factor proof needs two-factor authentication, and this account has none. ' +
                 `Turn it on in the web app (Settings → Account → Two-factor authentication), then run \`${bin} step-up\`.`, { code: 'STEP_UP_TWO_FACTOR_REQUIRED', exit: 2 });
         }
         let token = flags.otp?.trim();
@@ -90,7 +89,7 @@ class StepUp extends base_command_1.BaseCommand {
             return;
         }
         const via = result.method === 'backup_code' ? 'a backup code' : 'your authenticator app';
-        this.log(`Verified with ${via}. Store publishing from this login is allowed until ${(0, step_up_1.formatStepUpExpiry)(result.expiresAt)}.`);
+        this.log(`Verified with ${via}. Gated Store actions from this login are allowed until ${(0, step_up_1.formatStepUpExpiry)(result.expiresAt)}.`);
     }
 }
 exports.default = StepUp;

package/dist/lib/file-mime.js

@@ -63,6 +63,10 @@ const MIME_TYPES = {
     '.jpg': 'image/jpeg',
     '.js': 'text/javascript',
     '.json': 'application/json',
+    // A stream of JSON values is text evidence, not one JSON document.
+    // Preserve the original bytes and filename rather than forcing an array.
+    '.jsonl': 'text/plain',
+    '.ndjson': 'text/plain',
     '.log': 'text/plain',
     '.m4a': 'audio/m4a',
     '.m4v': 'video/m4v',

package/dist/lib/harnesses.d.ts

@@ -134,6 +134,11 @@ export interface HarnessLease {
     billing?: {
         billableState?: string;
         monthlySpendLimitCents?: number | null;
+        /** Monthly total shared by all machines of this product in the billing account. */
+        spendScope?: {
+            kind: 'owner_product' | 'workspace_product';
+            machineProduct: string;
+        };
         currentMonthSpendCents?: number;
         openUsageEstimateCents?: number;
         projectedCurrentMonthSpendCents?: number;

package/dist/lib/step-up.d.ts

@@ -1,14 +1,12 @@
 /**
- * What the CLI says about step-up authentication before Store publishing
+ * What the CLI says about step-up authentication for gated Store actions
  * (OSK-12275).
  *
- * A public release reaches everyone who installs it, so the server refuses to
- * publish one, or to move the release buyers are served, on the strength of a
- * CLI token alone: it answers `STEP_UP_REQUIRED` until this same login has
- * proved a second factor through `skrr step-up`. The vocabulary (the code, the
+ * An explicitly gated Store action answers `STEP_UP_REQUIRED` until this login
+ * has proved a second factor through `skrr step-up`. The vocabulary (the code, the
  * reasons, the window) is `@skrr-ai/data-provider`'s; only the sentences live
  * here, because each reason has a different next step and a refusal that says
- * "forbidden" would leave a publisher guessing which one applies.
+ * "forbidden" would leave the caller guessing which one applies.
  */
 import type { TStepUpChallenge } from '@skrr-ai/data-provider';
 /**

package/dist/lib/step-up.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.describeStepUpRequired = describeStepUpRequired;
 exports.formatStepUpExpiry = formatStepUpExpiry;
-const NOTHING_CHANGED = 'Nothing was published or changed.';
+const NOTHING_CHANGED = 'Nothing changed.';
 function windowPhrase(windowSeconds) {
     const minutes = Math.max(1, Math.round((windowSeconds ?? 600) / 60));
     return `${minutes} minute${minutes === 1 ? '' : 's'}`;
@@ -17,18 +17,18 @@ function describeStepUpRequired(challenge, bin) {
     switch (challenge?.reason) {
         case 'two_factor_not_enabled':
             return [
-                `Publishing to the Store needs two-factor authentication, and this account has none. ${NOTHING_CHANGED}`,
+                `This action needs two-factor authentication, and this account has none. ${NOTHING_CHANGED}`,
                 'Turn it on in the web app (Settings → Account → Two-factor authentication),',
                 `then run \`${bin} step-up\` and run this command again within ${window}.`,
             ].join('\n');
         case 'credential_not_session_bound':
             return [
-                `This credential is not tied to a sign-in session, so it cannot be verified for publishing. ${NOTHING_CHANGED}`,
+                `This credential is not tied to a sign-in session, so it cannot record a second-factor proof. ${NOTHING_CHANGED}`,
                 `Run \`${bin} login\`, then \`${bin} step-up\`, and run this command again within ${window}.`,
             ].join('\n');
         default:
             return [
-                `Publishing needs a fresh identity check: a public release reaches everyone who installs it, so this login alone is not enough. ${NOTHING_CHANGED}`,
+                `This action needs a fresh identity check; this login alone is not enough. ${NOTHING_CHANGED}`,
                 `Run \`${bin} step-up\` and enter the code from your authenticator app, then run this command again within ${window}.`,
             ].join('\n');
     }

package/dist/node_modules/@skrr-ai/auth-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skrr-ai/auth-core",
-  "version": "0.4.8",
+  "version": "0.4.9",
   "main": "dist/cjs/index.js",
   "types": "dist/esm/index.d.ts",
   "exports": {

package/dist/node_modules/@skrr-ai/data-provider/index.js

@@ -41840,15 +41840,16 @@ function zE(e2, t2) {
 function FE(e2, t2, n2, o2, r2) {
   switch (t2.t) {
     case "text":
-      return (function(e3, t3, n3, o3) {
-        var r3 = "thinking" === mE(t3), a2 = e3.parts.length - 1, i2 = a2 >= 0 ? e3.parts[a2] : void 0;
+      var a2 = (function(e3, t3, n3, o3) {
+        var r3 = "thinking" === mE(t3), a3 = e3.parts.length - 1, i2 = a3 >= 0 ? e3.parts[a3] : void 0;
         if (i2 && ("text" === i2.kind || "thinking" === i2.kind) && "streaming" === i2.status && (r3 ? "thinking" === i2.kind : "text" === i2.kind)) {
-          var s2 = S(S({}, i2), { text: i2.text + t3.text }), c2 = QE(e3.parts, a2, s2);
+          var s2 = S(S({}, i2), { text: i2.text + t3.text }), c2 = QE(e3.parts, a3, s2);
           return S(S({}, e3), { parts: c2, updatedAt: o3 });
         }
         var l2 = WE(e3.parts), u2 = r3 ? { id: n3(), kind: "thinking", text: t3.text, status: "streaming" } : { id: n3(), kind: "text", text: t3.text, status: "streaming" };
         return S(S({}, e3), { parts: w(w([], l2, true), [u2], false), updatedAt: o3 });
       })(e2, t2, o2, r2);
+      return e2.pending ? a2 : S(S({}, a2), { parts: WE(a2.parts) });
     case "service":
     case "session-handoff":
     case "slash-commands-available":
@@ -41862,11 +41863,11 @@ function FE(e2, t2, n2, o2, r2) {
       return S(S({}, e2), { updatedAt: r2 });
     case "tool-call-start":
       return (function(e3, t3, n3, o3, r3) {
-        var a2, i2, s2 = WE(e3.parts), c2 = s2.findIndex(function(e4) {
+        var a3, i2, s2 = WE(e3.parts), c2 = s2.findIndex(function(e4) {
           return "tool" === e4.kind && e4.callId === t3.call;
         }), l2 = { id: o3(), kind: "tool", callId: t3.call, name: t3.name, state: "running", input: t3.args, startedAt: r3, executionTarget: XE(n3) };
         if (c2 >= 0) {
-          var u2 = s2[c2], d2 = S(S({}, u2), { input: t3.args, name: t3.name, startedAt: r3, executionTarget: null !== (a2 = u2.executionTarget) && void 0 !== a2 ? a2 : l2.executionTarget, state: qE(u2.state) ? u2.state : "running", permission: "pending" === (null === (i2 = u2.permission) || void 0 === i2 ? void 0 : i2.status) ? S(S({}, u2.permission), { status: "approved", decidedAt: r3 }) : u2.permission });
+          var u2 = s2[c2], d2 = S(S({}, u2), { input: t3.args, name: t3.name, startedAt: r3, executionTarget: null !== (a3 = u2.executionTarget) && void 0 !== a3 ? a3 : l2.executionTarget, state: qE(u2.state) ? u2.state : "running", permission: "pending" === (null === (i2 = u2.permission) || void 0 === i2 ? void 0 : i2.status) ? S(S({}, u2.permission), { status: "approved", decidedAt: r3 }) : u2.permission });
           return S(S({}, e3), { parts: QE(s2, c2, d2), updatedAt: r3 });
         }
         return S(S({}, e3), { parts: w(w([], s2, true), [l2], false), pending: true, updatedAt: r3 });
@@ -41877,20 +41878,20 @@ function FE(e2, t2, n2, o2, r2) {
           return "tool" === e4.kind && e4.callId === t3.call;
         });
         if (r3 < 0) {
-          var a2 = { id: n3(), kind: "tool", callId: t3.call, name: "tool", state: YE(t3.status), input: void 0, output: t3.output, completedAt: o3 };
-          return S(S({}, e3), { parts: w(w([], e3.parts, true), [a2], false), pending: BE(e3.parts.concat(a2)), updatedAt: o3 });
+          var a3 = { id: n3(), kind: "tool", callId: t3.call, name: "tool", state: YE(t3.status), input: void 0, output: t3.output, completedAt: o3 };
+          return S(S({}, e3), { parts: w(w([], e3.parts, true), [a3], false), pending: BE(e3.parts.concat(a3)), updatedAt: o3 });
         }
         var i2 = e3.parts[r3], s2 = S(S({}, i2), { state: YE(t3.status), output: t3.output, completedAt: o3 }), c2 = QE(e3.parts, r3, s2);
         return S(S({}, e3), { parts: c2, pending: BE(c2), updatedAt: o3 });
       })(e2, t2, o2, r2);
     case "permission-ask":
       return (function(e3, t3, n3, o3, r3) {
-        var a2, i2, s2, c2 = WE(e3.parts), l2 = (function(e4) {
+        var a3, i2, s2, c2 = WE(e3.parts), l2 = (function(e4) {
           var t4;
           return null !== (t4 = e4.toolUseId) && void 0 !== t4 ? t4 : e4.requestId;
         })(t3), u2 = KE(c2, l2, t3.requestId), d2 = S(S(S({ status: "pending", requestId: t3.requestId }, t3.toolUseId ? { toolUseId: t3.toolUseId } : {}), { requestedAt: r3 }), t3.inputPreview ? { reason: t3.inputPreview } : {});
         if (u2 >= 0) {
-          var p2 = c2[u2], m2 = QE(c2, u2, S(S({}, p2), { name: null !== (a2 = t3.toolName) && void 0 !== a2 ? a2 : p2.name, input: VE(p2.input) ? p2.input : GE(t3), executionTarget: null !== (i2 = p2.executionTarget) && void 0 !== i2 ? i2 : XE(n3), permission: d2, state: HE(p2.state) }));
+          var p2 = c2[u2], m2 = QE(c2, u2, S(S({}, p2), { name: null !== (a3 = t3.toolName) && void 0 !== a3 ? a3 : p2.name, input: VE(p2.input) ? p2.input : GE(t3), executionTarget: null !== (i2 = p2.executionTarget) && void 0 !== i2 ? i2 : XE(n3), permission: d2, state: HE(p2.state) }));
           return S(S({}, e3), { parts: m2, pending: BE(m2), updatedAt: r3 });
         }
         var f2 = { id: o3(), kind: "tool", callId: l2, name: null !== (s2 = t3.toolName) && void 0 !== s2 ? s2 : "tool", state: "pending", input: GE(t3), permission: d2, executionTarget: XE(n3) }, g2 = w(w([], c2, true), [f2], false);
@@ -41898,12 +41899,12 @@ function FE(e2, t2, n2, o2, r2) {
       })(e2, t2, n2, o2, r2);
     case "permission-resolved":
       return (function(e3, t3, n3, o3) {
-        var r3, a2, i2, s2, c2 = KE(e3.parts, t3.requestId, t3.requestId), l2 = "allow" === t3.decision ? "approved" : "denied";
+        var r3, a3, i2, s2, c2 = KE(e3.parts, t3.requestId, t3.requestId), l2 = "allow" === t3.decision ? "approved" : "denied";
         if (c2 < 0) {
           var u2 = S({ id: n3(), kind: "tool", callId: t3.requestId, name: "tool", state: "approved" === l2 ? "pending" : "cancelled", input: {}, permission: S({ status: l2, requestId: t3.requestId, requestedAt: o3, decidedAt: o3, decidedBy: t3.by }, jE(t3)) }, "denied" === l2 ? { completedAt: o3, errorMessage: "Permission denied." } : {}), d2 = w(w([], e3.parts, true), [u2], false);
           return S(S({}, e3), { parts: d2, pending: BE(d2), updatedAt: o3 });
         }
-        var p2 = e3.parts[c2], m2 = "denied" === l2 && !qE(p2.state), f2 = S(S(S({}, p2), { state: m2 ? "cancelled" : p2.state, permission: S(S(S({}, p2.permission), { status: l2, requestId: null !== (a2 = null === (r3 = p2.permission) || void 0 === r3 ? void 0 : r3.requestId) && void 0 !== a2 ? a2 : t3.requestId, requestedAt: null !== (s2 = null === (i2 = p2.permission) || void 0 === i2 ? void 0 : i2.requestedAt) && void 0 !== s2 ? s2 : o3, decidedAt: o3, decidedBy: t3.by }), jE(t3)) }), m2 ? { completedAt: o3, errorMessage: "Permission denied." } : {}), g2 = QE(e3.parts, c2, f2);
+        var p2 = e3.parts[c2], m2 = "denied" === l2 && !qE(p2.state), f2 = S(S(S({}, p2), { state: m2 ? "cancelled" : p2.state, permission: S(S(S({}, p2.permission), { status: l2, requestId: null !== (a3 = null === (r3 = p2.permission) || void 0 === r3 ? void 0 : r3.requestId) && void 0 !== a3 ? a3 : t3.requestId, requestedAt: null !== (s2 = null === (i2 = p2.permission) || void 0 === i2 ? void 0 : i2.requestedAt) && void 0 !== s2 ? s2 : o3, decidedAt: o3, decidedBy: t3.by }), jE(t3)) }), m2 ? { completedAt: o3, errorMessage: "Permission denied." } : {}), g2 = QE(e3.parts, c2, f2);
         return S(S({}, e3), { parts: g2, pending: BE(g2), updatedAt: o3 });
       })(e2, t2, o2, r2);
     case "turn-start":
@@ -41912,8 +41913,8 @@ function FE(e2, t2, n2, o2, r2) {
       return (function(e3, t3, n3) {
         var o3 = (function(e4, t4, n4) {
           var o4 = false, r3 = e4.map(function(e5) {
-            var r4, a2;
-            return "tool" !== e5.kind || "pending" !== e5.state && "running" !== e5.state ? e5 : (o4 = true, S(S({}, e5), "cancelled" === t4 ? { state: "cancelled", completedAt: n4, errorMessage: null !== (r4 = e5.errorMessage) && void 0 !== r4 ? r4 : "Tool was cancelled before completion." } : { state: "error", completedAt: n4, errorMessage: null !== (a2 = e5.errorMessage) && void 0 !== a2 ? a2 : "failed" === t4 ? "Tool did not complete before the turn failed." : "Tool did not emit a completion event before the turn ended." }));
+            var r4, a3;
+            return "tool" !== e5.kind || "pending" !== e5.state && "running" !== e5.state ? e5 : (o4 = true, S(S({}, e5), "cancelled" === t4 ? { state: "cancelled", completedAt: n4, errorMessage: null !== (r4 = e5.errorMessage) && void 0 !== r4 ? r4 : "Tool was cancelled before completion." } : { state: "error", completedAt: n4, errorMessage: null !== (a3 = e5.errorMessage) && void 0 !== a3 ? a3 : "failed" === t4 ? "Tool did not complete before the turn failed." : "Tool did not emit a completion event before the turn ended." }));
           });
           return o4 ? r3 : e4;
         })(WE(e3.parts), t3.status, n3);
@@ -49587,7 +49588,53 @@ exports.describeStoreReleaseAdvisoryStatus = function(e2) {
   return 0 === t2.length ? { min: e2.legacy.holdDays, max: e2.legacy.holdDays } : { min: Math.min.apply(Math, t2), max: Math.max.apply(Math, t2) };
 }, exports.matchesSeries = kh, exports.matchesViewCycleFilter = function(e2, t2, n2) {
   return !(null == t2 ? void 0 : t2.length) || !!e2 && k_(t2, n2).has(e2);
-}, exports.matchingEnvelopeClasses = hA, exports.mayLiftCommitmentStop = function(e2, t2) {
+}, exports.matchingEnvelopeClasses = hA, exports.materializeAnswerTextReferences = function(e2, t2) {
+  return A(this, arguments, void 0, function(e3, t3, n2) {
+    var o2, r2, a2, i2, s2, c2, l2, u2, d2 = this;
+    return void 0 === n2 && (n2 = function(e4) {
+      return A(d2, void 0, void 0, function() {
+        var t4;
+        return E(this, function(n3) {
+          switch (n3.label) {
+            case 0:
+              return [4, globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(e4))];
+            case 1:
+              return t4 = n3.sent(), [2, Array.from(new Uint8Array(t4), function(e5) {
+                return e5.toString(16).padStart(2, "0");
+              }).join("")];
+          }
+        });
+      });
+    }), E(this, function(d3) {
+      switch (d3.label) {
+        case 0:
+          if (o2 = function() {
+            return { envelopes: e3.filter(function(e4) {
+              return !e4.__answerTextRange;
+            }), complete: false };
+          }, r2 = e3.filter(function(e4) {
+            return e4.__answerTextRange;
+          }), !r2.length || !t3) return [2, o2()];
+          d3.label = 1;
+        case 1:
+          return d3.trys.push([1, 3, , 4]), [4, n2(t3)];
+        case 2:
+          return a2 = d3.sent(), [3, 4];
+        case 3:
+          return d3.sent(), [2, o2()];
+        case 4:
+          for (i2 = 0, s2 = 0, c2 = r2; s2 < c2.length; s2++) {
+            if (l2 = c2[s2], u2 = l2.__answerTextRange, "agent" !== l2.role || l2.subagent || "text" !== l2.ev.t || true === l2.ev.thinking || !Number.isInteger(u2.start) || !Number.isInteger(u2.end) || u2.start !== i2 || u2.end <= u2.start || u2.end > t3.length || u2.length !== t3.length || u2.sha256 !== a2) return [2, o2()];
+            i2 = u2.end;
+          }
+          return i2 !== t3.length ? [2, o2()] : [2, { complete: true, envelopes: e3.map(function(e4) {
+            var n3 = e4.__answerTextRange;
+            return n3 ? S(S({}, e4), { ev: S(S({}, e4.ev), { t: "text", text: t3.slice(n3.start, n3.end) }) }) : e4;
+          }) }];
+      }
+    });
+  });
+}, exports.mayLiftCommitmentStop = function(e2, t2) {
   return "user" === t2 || !(!e2 || !jk(e2.kind)) && "user" !== e2.kind;
 }, exports.mbToBytes = Lt, exports.measureTaskOutputBudget = function(e2) {
   var t2 = Vh(e2).length, n2 = Math.max(0, t2 - Kh);