@theokit/sdk 4.35.0 → 4.37.0

package/dist/persistence.cjs

@@ -1,17 +1,17 @@
 'use strict';
 
 var chunkPNVDQL5Y_cjs = require('./chunk-PNVDQL5Y.cjs');
-var chunkYRXTIESB_cjs = require('./chunk-YRXTIESB.cjs');
-var chunkCJVMDRQB_cjs = require('./chunk-CJVMDRQB.cjs');
-var chunkJD74LN7R_cjs = require('./chunk-JD74LN7R.cjs');
+var chunkP34DHHYQ_cjs = require('./chunk-P34DHHYQ.cjs');
+var chunkTQI3KRXZ_cjs = require('./chunk-TQI3KRXZ.cjs');
+var chunkFK4EJD2I_cjs = require('./chunk-FK4EJD2I.cjs');
 var chunkYLQQX5W2_cjs = require('./chunk-YLQQX5W2.cjs');
-var chunk2DYI7MIF_cjs = require('./chunk-2DYI7MIF.cjs');
-var chunkTIZ4TS5V_cjs = require('./chunk-TIZ4TS5V.cjs');
-var chunkA44COQJJ_cjs = require('./chunk-A44COQJJ.cjs');
-require('./chunk-BEURCLDV.cjs');
+var chunkIEUDKUPM_cjs = require('./chunk-IEUDKUPM.cjs');
+var chunkICYBIC6N_cjs = require('./chunk-ICYBIC6N.cjs');
+var chunkMHCKWQR3_cjs = require('./chunk-MHCKWQR3.cjs');
+require('./chunk-LTCOPATU.cjs');
 var fs = require('fs');
 
-var LiveSessionError = class extends chunkA44COQJJ_cjs.TheokitAgentError {
+var LiveSessionError = class extends chunkMHCKWQR3_cjs.TheokitAgentError {
   constructor(path) {
     super(
       `refusing to write over a live session transcript: ${path}. Fork to a new id instead \u2014 the live pointer, the most recent transcript and any active registry entry are never overwritten (audit-trail rotation, M60).`,
@@ -30,7 +30,7 @@ function forkTranscript(src, dst, options = {}) {
   const kept = options.beforeRecordIndex === void 0 ? lines : lines.slice(0, options.beforeRecordIndex);
   const body = kept.length > 0 ? `${kept.join("\n")}
 ` : "";
-  const fd = fs.openSync(dst, "wx");
+  const fd = fs.openSync(dst, "wx", options.mode ?? 384);
   try {
     fs.writeSync(fd, body);
   } finally {
@@ -83,51 +83,51 @@ Object.defineProperty(exports, "PersistenceSchema", {
 });
 Object.defineProperty(exports, "SessionBusyError", {
   enumerable: true,
-  get: function () { return chunkYRXTIESB_cjs.SessionBusyError; }
+  get: function () { return chunkP34DHHYQ_cjs.SessionBusyError; }
 });
 Object.defineProperty(exports, "acquireSessionWriter", {
   enumerable: true,
-  get: function () { return chunkYRXTIESB_cjs.acquireSessionWriter; }
+  get: function () { return chunkP34DHHYQ_cjs.acquireSessionWriter; }
 });
 Object.defineProperty(exports, "sessaoTemEscritor", {
   enumerable: true,
-  get: function () { return chunkYRXTIESB_cjs.sessaoTemEscritor; }
+  get: function () { return chunkP34DHHYQ_cjs.sessaoTemEscritor; }
 });
 Object.defineProperty(exports, "JsonlParseError", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.JsonlParseError; }
+  get: function () { return chunkTQI3KRXZ_cjs.JsonlParseError; }
 });
 Object.defineProperty(exports, "appendJsonl", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.appendJsonl; }
+  get: function () { return chunkTQI3KRXZ_cjs.appendJsonl; }
 });
 Object.defineProperty(exports, "loadJsonl", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.loadJsonl; }
+  get: function () { return chunkTQI3KRXZ_cjs.loadJsonl; }
 });
 Object.defineProperty(exports, "readJsonlIds", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.readJsonlIds; }
+  get: function () { return chunkTQI3KRXZ_cjs.readJsonlIds; }
 });
 Object.defineProperty(exports, "withFileLock", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.withFileLock; }
+  get: function () { return chunkTQI3KRXZ_cjs.withFileLock; }
 });
 Object.defineProperty(exports, "applyWalWithFallback", {
   enumerable: true,
-  get: function () { return chunkJD74LN7R_cjs.applyWalWithFallback; }
+  get: function () { return chunkFK4EJD2I_cjs.applyWalWithFallback; }
 });
 Object.defineProperty(exports, "isCorruptionError", {
   enumerable: true,
-  get: function () { return chunkJD74LN7R_cjs.isCorruptionError; }
+  get: function () { return chunkFK4EJD2I_cjs.isCorruptionError; }
 });
 Object.defineProperty(exports, "openSqliteResilient", {
   enumerable: true,
-  get: function () { return chunkJD74LN7R_cjs.openSqliteResilient; }
+  get: function () { return chunkFK4EJD2I_cjs.openSqliteResilient; }
 });
 Object.defineProperty(exports, "sanitizeFts5Query", {
   enumerable: true,
-  get: function () { return chunkJD74LN7R_cjs.sanitizeFts5Query; }
+  get: function () { return chunkFK4EJD2I_cjs.sanitizeFts5Query; }
 });
 Object.defineProperty(exports, "withCwdMutex", {
   enumerable: true,
@@ -135,27 +135,27 @@ Object.defineProperty(exports, "withCwdMutex", {
 });
 Object.defineProperty(exports, "encodeProjectDir", {
   enumerable: true,
-  get: function () { return chunk2DYI7MIF_cjs.encodeProjectDir; }
+  get: function () { return chunkIEUDKUPM_cjs.encodeProjectDir; }
 });
 Object.defineProperty(exports, "transcriptPath", {
   enumerable: true,
-  get: function () { return chunk2DYI7MIF_cjs.transcriptPath; }
+  get: function () { return chunkIEUDKUPM_cjs.transcriptPath; }
 });
 Object.defineProperty(exports, "transcriptRoot", {
   enumerable: true,
-  get: function () { return chunk2DYI7MIF_cjs.transcriptRoot; }
+  get: function () { return chunkIEUDKUPM_cjs.transcriptRoot; }
 });
 Object.defineProperty(exports, "atomicWriteJson", {
   enumerable: true,
-  get: function () { return chunkTIZ4TS5V_cjs.atomicWriteJson; }
+  get: function () { return chunkICYBIC6N_cjs.atomicWriteJson; }
 });
 Object.defineProperty(exports, "atomicWriteText", {
   enumerable: true,
-  get: function () { return chunkTIZ4TS5V_cjs.atomicWriteText; }
+  get: function () { return chunkICYBIC6N_cjs.atomicWriteText; }
 });
 Object.defineProperty(exports, "replaceFileAtomic", {
   enumerable: true,
-  get: function () { return chunkTIZ4TS5V_cjs.replaceFileAtomic; }
+  get: function () { return chunkICYBIC6N_cjs.replaceFileAtomic; }
 });
 exports.LiveSessionError = LiveSessionError;
 exports.forkTranscript = forkTranscript;

package/dist/persistence.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/persistence/transcript-ops.ts"],"names":["TheokitAgentError","readFileSync","openSync","writeSync","closeSync","statSync","readSync"],"mappings":";;;;;;;;;;;;;AAkCO,IAAM,gBAAA,GAAN,cAA+BA,mCAAA,CAAkB;AAAA,EAGtD,YAAqB,IAAA,EAAc;AACjC,IAAA,KAAA;AAAA,MACE,qDAAqD,IAAI,CAAA,+JAAA,CAAA;AAAA,MAGzD,EAAE,IAAA,EAAM,wBAAA,EAA0B,WAAA,EAAa,KAAA;AAAM,KACvD;AANmB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAOrB;AAAA,EAPqB,IAAA;AAAA,EAFH,IAAA,GAAO,kBAAA;AAU3B;AAqBO,SAAS,cAAA,CACd,GAAA,EACA,GAAA,EACA,OAAA,GAAiC,EAAC,EAC5B;AACN,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAA,CAAQ,gBAAA,IAAoB,EAAC,EAAG;AACjD,IAAA,IAAI,IAAA,KAAS,GAAA,EAAK,MAAM,IAAI,iBAAiB,GAAG,CAAA;AAAA,EAClD;AAEA,EAAA,MAAM,KAAA,GAAQC,eAAA,CAAa,GAAA,EAAK,MAAM,EACnC,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,CAAE,SAAS,CAAC,CAAA;AACpC,EAAA,MAAM,IAAA,GACJ,QAAQ,iBAAA,KAAsB,MAAA,GAAY,QAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,iBAAiB,CAAA;AAC5F,EAAA,MAAM,IAAA,GAAO,KAAK,MAAA,GAAS,CAAA,GAAI,GAAG,IAAA,CAAK,IAAA,CAAK,IAAI,CAAC;AAAA,CAAA,GAAO,EAAA;AAGxD,EAAA,MAAM,EAAA,GAAKC,WAAA,CAAS,GAAA,EAAK,IAAI,CAAA;AAC7B,EAAA,IAAI;AACF,IAAAC,YAAA,CAAU,IAAI,IAAI,CAAA;AAAA,EACpB,CAAA,SAAE;AACA,IAAAC,YAAA,CAAU,EAAE,CAAA;AAAA,EACd;AACF;AAYA,IAAM,aAAa,EAAA,GAAK,IAAA;AASxB,SAAS,aAAA,CAAc,MAAc,IAAA,EAAuD;AAC1F,EAAA,MAAM,IAAA,GAAOC,WAAA,CAAS,IAAI,CAAA,CAAE,IAAA;AAC5B,EAAA,MAAM,EAAA,GAAKH,WAAA,CAAS,IAAA,EAAM,GAAG,CAAA;AAC7B,EAAA,IAAI,SAAA,GAAY,CAAA;AAChB,EAAA,IAAI,IAAA,GAAO,EAAA;AACX,EAAA,IAAI,GAAA,GAAM,IAAA;AACV,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,CAAA,EAAG;AACd,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACpC,MAAA,GAAA,IAAO,GAAA;AACP,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA;AAC5B,MAAAI,WAAA,CAAS,EAAA,EAAI,GAAA,EAAK,CAAA,EAAG,GAAA,EAAK,GAAG,CAAA;AAC7B,MAAA,SAAA,IAAa,GAAA;AACb,MAAA,IAAA,GAAO,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,GAAI,IAAA;AAC9B,MAAA,IAAI,SAAA,CAAU,IAAI,CAAA,CAAE,MAAA,GAAS,IAAA,EAAM;AAAA,IACrC;AAAA,EACF,CAAA,SAAE;AACA,IAAAF,YAAA,CAAU,EAAE,CAAA;AAAA,EACd;AACA,EAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,EAAA,OAAO,EAAE,QAAQ,GAAA,GAAM,CAAA,GAAI,OAAO,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,EAAQ,SAAA,EAAU;AACjE;AAGA,SAAS,UAAU,KAAA,EAAyB;AAC1C,EAAA,OAAO,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,CAAE,MAAA,GAAS,CAAC,CAAA;AAC5D;AASO,SAAS,aAAA,CACd,IAAA,EACA,OAAA,GAAgC,EAAC,EAC5B;AACL,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,UAAA,IAAc,MAAA,CAAO,iBAAA;AAC1C,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,aAAA,CAAc,MAAM,IAAI,CAAA;AAEtD,EAAA,IAAI,GAAA,GAAM,MAAA;AACV,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,MAAM,WAAW,OAAA,CAAQ,WAAA;AACzB,IAAA,MAAM,GAAA,GAAM,IAAI,aAAA,CAAc,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAC,CAAA;AACzD,IAAA,IAAI,OAAO,CAAA,EAAG,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,EACvC;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,IAAI,CAAA,QAAS,GAAA,CAAI,KAAA,CAAM,CAAC,IAAI,CAAA;AAEhD,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAC,MAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAM,CAAA;AAC7C,EAAA,OAAO,OAAA,CAAQ,WAAW,IAAA,GAAQ,MAAA,CAAO,OAAO,GAAA,EAAK,EAAE,SAAA,EAAW,CAAA,GAAY,GAAA;AAChF","file":"persistence.cjs","sourcesContent":["/**\n * M81 — transcript operations the consumer was doing by hand INSIDE the framework's own store.\n *\n * ## What this replaces\n *\n * `agents/lib/session/backtrack.ts:188` (agent-builder) wrote straight into the session store with a\n * bare `writeFileSync` — no atomicity, no lock, no API. 243 lines re-implementing parse, cut and\n * write for a format the framework owns. The consumer is not at fault: nothing here was reachable.\n *\n * ## The rule that travels WITH the operation\n *\n * `rules/audit-trail-rotation.md § Session transcripts (M60)` defines a NEVER-delete list — the live\n * pointer, the most recent transcript, and any active registry entry. That rule lived in the\n * CONSUMER. Moving the operation here without moving the rule would ship an API able to destroy\n * exactly what the rule protects — the same shape of defect as M80's `reconcileUpdateGoalStatus`:\n * critical knowledge outside the module that needs it, applied by convention.\n *\n * So `forkTranscript` takes `liveSessionPaths` and refuses, with a TYPED error, to write over any of\n * them. The caller supplies the list because only the caller knows which session is live; the\n * enforcement lives here because that is where the write happens.\n *\n * @internal\n */\n\nimport { closeSync, openSync, readFileSync, readSync, statSync, writeSync } from \"node:fs\";\n\nimport { TheokitAgentError } from \"../../errors.js\";\n\n/**\n * M81 — the target is a protected session (live pointer / most-recent transcript / active entry).\n *\n * Typed rather than a bare `Error` because the caller must distinguish \"this session is protected\"\n * from \"the disk is full\": the first is a correct refusal, the second is an incident.\n */\nexport class LiveSessionError extends TheokitAgentError {\n  override readonly name = \"LiveSessionError\";\n\n  constructor(readonly path: string) {\n    super(\n      `refusing to write over a live session transcript: ${path}. ` +\n        \"Fork to a new id instead — the live pointer, the most recent transcript and any active \" +\n        \"registry entry are never overwritten (audit-trail rotation, M60).\",\n      { code: \"live_session_protected\", isRetryable: false },\n    );\n  }\n}\n\n/** Options for {@link forkTranscript}. */\nexport interface ForkTranscriptOptions {\n  /** Keep records `[0, beforeRecordIndex)`. Omit to copy the whole transcript. */\n  readonly beforeRecordIndex?: number;\n  /**\n   * Paths that must never be written over — the live pointer, the most recent transcript, any active\n   * registry entry. The caller supplies them because only the caller knows which session is live.\n   */\n  readonly liveSessionPaths?: readonly string[];\n}\n\n/**\n * Copy `src` into `dst`, keeping the first `beforeRecordIndex` records. The SOURCE is never touched.\n *\n * Atomicity comes from `wx` (exclusive create): two concurrent forks to the same destination cannot\n * both succeed — the loser gets `EEXIST` rather than writing over a half-written file. That is also\n * why an existing destination is a refusal, not a silent overwrite: losing a transcript without an\n * error is the worst failure mode for an operation that touches user sessions.\n */\nexport function forkTranscript(\n  src: string,\n  dst: string,\n  options: ForkTranscriptOptions = {},\n): void {\n  for (const live of options.liveSessionPaths ?? []) {\n    if (live === dst) throw new LiveSessionError(dst);\n  }\n\n  const lines = readFileSync(src, \"utf8\")\n    .split(\"\\n\")\n    .filter((l) => l.trim().length > 0);\n  const kept =\n    options.beforeRecordIndex === undefined ? lines : lines.slice(0, options.beforeRecordIndex);\n  const body = kept.length > 0 ? `${kept.join(\"\\n\")}\\n` : \"\";\n\n  // `wx` — fails with EEXIST instead of truncating. The exclusivity IS the concurrency guarantee.\n  const fd = openSync(dst, \"wx\");\n  try {\n    writeSync(fd, body);\n  } finally {\n    closeSync(fd);\n  }\n}\n\n/** Options for {@link readJsonlTail}. */\nexport interface ReadJsonlTailOptions {\n  /** Maximum records to return, counted from the END. */\n  readonly maxRecords?: number;\n  /** Stop once a line contains this marker (exclusive). */\n  readonly sinceMarker?: string;\n  /** Test-only: also report how many bytes were read, to prove the read is not whole-file. */\n  readonly _stats?: boolean;\n}\n\nconst TAIL_CHUNK = 64 * 1024;\n\n/**\n * Lê chunks de trás para frente até acumular linhas completas suficientes.\n *\n * Extraído de `readJsonlTail` porque o laço de leitura e a seleção de registros são duas\n * responsabilidades — e juntas passavam do teto de complexidade. A primeira linha do buffer pode\n * estar cortada ao meio quando a leitura parou antes do início do arquivo; por isso ela é descartada.\n */\nfunction lerCaudaBruta(path: string, want: number): { linhas: string[]; bytesRead: number } {\n  const size = statSync(path).size;\n  const fd = openSync(path, \"r\");\n  let bytesRead = 0;\n  let tail = \"\";\n  let pos = size;\n  try {\n    while (pos > 0) {\n      const len = Math.min(TAIL_CHUNK, pos);\n      pos -= len;\n      const buf = Buffer.alloc(len);\n      readSync(fd, buf, 0, len, pos);\n      bytesRead += len;\n      tail = buf.toString(\"utf8\") + tail;\n      if (naoVazias(tail).length > want) break;\n    }\n  } finally {\n    closeSync(fd);\n  }\n  const linhas = naoVazias(tail);\n  return { linhas: pos > 0 ? linhas.slice(1) : linhas, bytesRead };\n}\n\n/** Linhas com conteúdo, na ordem do arquivo. */\nfunction naoVazias(texto: string): string[] {\n  return texto.split(\"\\n\").filter((l) => l.trim().length > 0);\n}\n\n/**\n * Read the LAST records of a JSONL file without loading the whole thing.\n *\n * Reads fixed-size chunks backwards from EOF until enough newlines have been seen. A session\n * transcript grows without bound; loading megabytes to show the last three turns is the cost this\n * exists to avoid — and a `slice` over a full read would be that same cost with a better name.\n */\nexport function readJsonlTail<T = Record<string, unknown>>(\n  path: string,\n  options: ReadJsonlTailOptions = {},\n): T[] {\n  const want = options.maxRecords ?? Number.POSITIVE_INFINITY;\n  const { linhas, bytesRead } = lerCaudaBruta(path, want);\n\n  let sel = linhas;\n  if (options.sinceMarker !== undefined) {\n    const marcador = options.sinceMarker;\n    const idx = sel.findLastIndex((l) => l.includes(marcador));\n    if (idx >= 0) sel = sel.slice(idx + 1);\n  }\n  if (Number.isFinite(want)) sel = sel.slice(-want);\n\n  const out = sel.map((l) => JSON.parse(l) as T);\n  return options._stats === true ? (Object.assign(out, { bytesRead }) as T[]) : out;\n}\n"]}
+{"version":3,"sources":["../src/internal/persistence/transcript-ops.ts"],"names":["TheokitAgentError","readFileSync","openSync","writeSync","closeSync","statSync","readSync"],"mappings":";;;;;;;;;;;;;AAkCO,IAAM,gBAAA,GAAN,cAA+BA,mCAAA,CAAkB;AAAA,EAGtD,YAAqB,IAAA,EAAc;AACjC,IAAA,KAAA;AAAA,MACE,qDAAqD,IAAI,CAAA,+JAAA,CAAA;AAAA,MAGzD,EAAE,IAAA,EAAM,wBAAA,EAA0B,WAAA,EAAa,KAAA;AAAM,KACvD;AANmB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAOrB;AAAA,EAPqB,IAAA;AAAA,EAFH,IAAA,GAAO,kBAAA;AAU3B;AAmCO,SAAS,cAAA,CACd,GAAA,EACA,GAAA,EACA,OAAA,GAAiC,EAAC,EAC5B;AACN,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAA,CAAQ,gBAAA,IAAoB,EAAC,EAAG;AACjD,IAAA,IAAI,IAAA,KAAS,GAAA,EAAK,MAAM,IAAI,iBAAiB,GAAG,CAAA;AAAA,EAClD;AAEA,EAAA,MAAM,KAAA,GAAQC,eAAA,CAAa,GAAA,EAAK,MAAM,EACnC,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,CAAE,SAAS,CAAC,CAAA;AACpC,EAAA,MAAM,IAAA,GACJ,QAAQ,iBAAA,KAAsB,MAAA,GAAY,QAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,iBAAiB,CAAA;AAC5F,EAAA,MAAM,IAAA,GAAO,KAAK,MAAA,GAAS,CAAA,GAAI,GAAG,IAAA,CAAK,IAAA,CAAK,IAAI,CAAC;AAAA,CAAA,GAAO,EAAA;AAIxD,EAAA,MAAM,KAAKC,WAAA,CAAS,GAAA,EAAK,IAAA,EAAM,OAAA,CAAQ,QAAQ,GAAK,CAAA;AACpD,EAAA,IAAI;AACF,IAAAC,YAAA,CAAU,IAAI,IAAI,CAAA;AAAA,EACpB,CAAA,SAAE;AACA,IAAAC,YAAA,CAAU,EAAE,CAAA;AAAA,EACd;AACF;AAYA,IAAM,aAAa,EAAA,GAAK,IAAA;AASxB,SAAS,aAAA,CAAc,MAAc,IAAA,EAAuD;AAC1F,EAAA,MAAM,IAAA,GAAOC,WAAA,CAAS,IAAI,CAAA,CAAE,IAAA;AAC5B,EAAA,MAAM,EAAA,GAAKH,WAAA,CAAS,IAAA,EAAM,GAAG,CAAA;AAC7B,EAAA,IAAI,SAAA,GAAY,CAAA;AAChB,EAAA,IAAI,IAAA,GAAO,EAAA;AACX,EAAA,IAAI,GAAA,GAAM,IAAA;AACV,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,CAAA,EAAG;AACd,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACpC,MAAA,GAAA,IAAO,GAAA;AACP,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA;AAC5B,MAAAI,WAAA,CAAS,EAAA,EAAI,GAAA,EAAK,CAAA,EAAG,GAAA,EAAK,GAAG,CAAA;AAC7B,MAAA,SAAA,IAAa,GAAA;AACb,MAAA,IAAA,GAAO,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,GAAI,IAAA;AAC9B,MAAA,IAAI,SAAA,CAAU,IAAI,CAAA,CAAE,MAAA,GAAS,IAAA,EAAM;AAAA,IACrC;AAAA,EACF,CAAA,SAAE;AACA,IAAAF,YAAA,CAAU,EAAE,CAAA;AAAA,EACd;AACA,EAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,EAAA,OAAO,EAAE,QAAQ,GAAA,GAAM,CAAA,GAAI,OAAO,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,EAAQ,SAAA,EAAU;AACjE;AAGA,SAAS,UAAU,KAAA,EAAyB;AAC1C,EAAA,OAAO,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,CAAE,MAAA,GAAS,CAAC,CAAA;AAC5D;AASO,SAAS,aAAA,CACd,IAAA,EACA,OAAA,GAAgC,EAAC,EAC5B;AACL,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,UAAA,IAAc,MAAA,CAAO,iBAAA;AAC1C,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,aAAA,CAAc,MAAM,IAAI,CAAA;AAEtD,EAAA,IAAI,GAAA,GAAM,MAAA;AACV,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,MAAM,WAAW,OAAA,CAAQ,WAAA;AACzB,IAAA,MAAM,GAAA,GAAM,IAAI,aAAA,CAAc,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAC,CAAA;AACzD,IAAA,IAAI,OAAO,CAAA,EAAG,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,EACvC;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,IAAI,CAAA,QAAS,GAAA,CAAI,KAAA,CAAM,CAAC,IAAI,CAAA;AAEhD,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAC,MAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAM,CAAA;AAC7C,EAAA,OAAO,OAAA,CAAQ,WAAW,IAAA,GAAQ,MAAA,CAAO,OAAO,GAAA,EAAK,EAAE,SAAA,EAAW,CAAA,GAAY,GAAA;AAChF","file":"persistence.cjs","sourcesContent":["/**\n * M81 — transcript operations the consumer was doing by hand INSIDE the framework's own store.\n *\n * ## What this replaces\n *\n * `agents/lib/session/backtrack.ts:188` (agent-builder) wrote straight into the session store with a\n * bare `writeFileSync` — no atomicity, no lock, no API. 243 lines re-implementing parse, cut and\n * write for a format the framework owns. The consumer is not at fault: nothing here was reachable.\n *\n * ## The rule that travels WITH the operation\n *\n * `rules/audit-trail-rotation.md § Session transcripts (M60)` defines a NEVER-delete list — the live\n * pointer, the most recent transcript, and any active registry entry. That rule lived in the\n * CONSUMER. Moving the operation here without moving the rule would ship an API able to destroy\n * exactly what the rule protects — the same shape of defect as M80's `reconcileUpdateGoalStatus`:\n * critical knowledge outside the module that needs it, applied by convention.\n *\n * So `forkTranscript` takes `liveSessionPaths` and refuses, with a TYPED error, to write over any of\n * them. The caller supplies the list because only the caller knows which session is live; the\n * enforcement lives here because that is where the write happens.\n *\n * @internal\n */\n\nimport { closeSync, openSync, readFileSync, readSync, statSync, writeSync } from \"node:fs\";\n\nimport { TheokitAgentError } from \"../../errors.js\";\n\n/**\n * M81 — the target is a protected session (live pointer / most-recent transcript / active entry).\n *\n * Typed rather than a bare `Error` because the caller must distinguish \"this session is protected\"\n * from \"the disk is full\": the first is a correct refusal, the second is an incident.\n */\nexport class LiveSessionError extends TheokitAgentError {\n  override readonly name = \"LiveSessionError\";\n\n  constructor(readonly path: string) {\n    super(\n      `refusing to write over a live session transcript: ${path}. ` +\n        \"Fork to a new id instead — the live pointer, the most recent transcript and any active \" +\n        \"registry entry are never overwritten (audit-trail rotation, M60).\",\n      { code: \"live_session_protected\", isRetryable: false },\n    );\n  }\n}\n\n/** Options for {@link forkTranscript}. */\nexport interface ForkTranscriptOptions {\n  /** Keep records `[0, beforeRecordIndex)`. Omit to copy the whole transcript. */\n  readonly beforeRecordIndex?: number;\n  /**\n   * Paths that must never be written over — the live pointer, the most recent transcript, any active\n   * registry entry. The caller supplies them because only the caller knows which session is live.\n   */\n  readonly liveSessionPaths?: readonly string[];\n  /**\n   * M107 — permission bits for the created destination. Default: `0o600`.\n   *\n   * A transcript carries the conversation. Before M107 no mode was passed at all, so the file was\n   * born `0o666 & ~umask` — measured `0o664` (group-WRITABLE) on a `umask 002` machine, `0o644` on\n   * `umask 022`, `0o466` on `umask 0200`. This is a DEFAULT and not a required knob on purpose: a\n   * knob would reach zero consumers by omission, which is the failure mode that matters.\n   *\n   * As with any `open` mode, the `umask` may still CLEAR bits — under `umask 0200` the result is\n   * `0o400`. That is accepted: the invariant bought here is \"neither group nor others\", and `0o400`\n   * satisfies it more strictly. The SDK deliberately does not `fchmod` the default back, because\n   * that would hand back a bit the operator asked to remove.\n   */\n  readonly mode?: number;\n}\n\n/**\n * Copy `src` into `dst`, keeping the first `beforeRecordIndex` records. The SOURCE is never touched.\n *\n * Atomicity comes from `wx` (exclusive create): two concurrent forks to the same destination cannot\n * both succeed — the loser gets `EEXIST` rather than writing over a half-written file. That is also\n * why an existing destination is a refusal, not a silent overwrite: losing a transcript without an\n * error is the worst failure mode for an operation that touches user sessions.\n */\nexport function forkTranscript(\n  src: string,\n  dst: string,\n  options: ForkTranscriptOptions = {},\n): void {\n  for (const live of options.liveSessionPaths ?? []) {\n    if (live === dst) throw new LiveSessionError(dst);\n  }\n\n  const lines = readFileSync(src, \"utf8\")\n    .split(\"\\n\")\n    .filter((l) => l.trim().length > 0);\n  const kept =\n    options.beforeRecordIndex === undefined ? lines : lines.slice(0, options.beforeRecordIndex);\n  const body = kept.length > 0 ? `${kept.join(\"\\n\")}\\n` : \"\";\n\n  // `wx` — fails with EEXIST instead of truncating. The exclusivity IS the concurrency guarantee,\n  // and M107 only added the third argument: the mode. See `ForkTranscriptOptions.mode`.\n  const fd = openSync(dst, \"wx\", options.mode ?? 0o600);\n  try {\n    writeSync(fd, body);\n  } finally {\n    closeSync(fd);\n  }\n}\n\n/** Options for {@link readJsonlTail}. */\nexport interface ReadJsonlTailOptions {\n  /** Maximum records to return, counted from the END. */\n  readonly maxRecords?: number;\n  /** Stop once a line contains this marker (exclusive). */\n  readonly sinceMarker?: string;\n  /** Test-only: also report how many bytes were read, to prove the read is not whole-file. */\n  readonly _stats?: boolean;\n}\n\nconst TAIL_CHUNK = 64 * 1024;\n\n/**\n * Lê chunks de trás para frente até acumular linhas completas suficientes.\n *\n * Extraído de `readJsonlTail` porque o laço de leitura e a seleção de registros são duas\n * responsabilidades — e juntas passavam do teto de complexidade. A primeira linha do buffer pode\n * estar cortada ao meio quando a leitura parou antes do início do arquivo; por isso ela é descartada.\n */\nfunction lerCaudaBruta(path: string, want: number): { linhas: string[]; bytesRead: number } {\n  const size = statSync(path).size;\n  const fd = openSync(path, \"r\");\n  let bytesRead = 0;\n  let tail = \"\";\n  let pos = size;\n  try {\n    while (pos > 0) {\n      const len = Math.min(TAIL_CHUNK, pos);\n      pos -= len;\n      const buf = Buffer.alloc(len);\n      readSync(fd, buf, 0, len, pos);\n      bytesRead += len;\n      tail = buf.toString(\"utf8\") + tail;\n      if (naoVazias(tail).length > want) break;\n    }\n  } finally {\n    closeSync(fd);\n  }\n  const linhas = naoVazias(tail);\n  return { linhas: pos > 0 ? linhas.slice(1) : linhas, bytesRead };\n}\n\n/** Linhas com conteúdo, na ordem do arquivo. */\nfunction naoVazias(texto: string): string[] {\n  return texto.split(\"\\n\").filter((l) => l.trim().length > 0);\n}\n\n/**\n * Read the LAST records of a JSONL file without loading the whole thing.\n *\n * Reads fixed-size chunks backwards from EOF until enough newlines have been seen. A session\n * transcript grows without bound; loading megabytes to show the last three turns is the cost this\n * exists to avoid — and a `slice` over a full read would be that same cost with a better name.\n */\nexport function readJsonlTail<T = Record<string, unknown>>(\n  path: string,\n  options: ReadJsonlTailOptions = {},\n): T[] {\n  const want = options.maxRecords ?? Number.POSITIVE_INFINITY;\n  const { linhas, bytesRead } = lerCaudaBruta(path, want);\n\n  let sel = linhas;\n  if (options.sinceMarker !== undefined) {\n    const marcador = options.sinceMarker;\n    const idx = sel.findLastIndex((l) => l.includes(marcador));\n    if (idx >= 0) sel = sel.slice(idx + 1);\n  }\n  if (Number.isFinite(want)) sel = sel.slice(-want);\n\n  const out = sel.map((l) => JSON.parse(l) as T);\n  return options._stats === true ? (Object.assign(out, { bytesRead }) as T[]) : out;\n}\n"]}

package/dist/persistence.js

@@ -1,12 +1,12 @@
 export { PersistenceSchema } from './chunk-CAH3G4IS.js';
-export { SessionBusyError, acquireSessionWriter, sessaoTemEscritor } from './chunk-BOTK6ZUP.js';
-export { JsonlParseError, appendJsonl, loadJsonl, readJsonlIds, withFileLock } from './chunk-UAYYNWYJ.js';
-export { applyWalWithFallback, isCorruptionError, openSqliteResilient, sanitizeFts5Query } from './chunk-77FOZCOT.js';
+export { SessionBusyError, acquireSessionWriter, sessaoTemEscritor } from './chunk-MXSMAGDU.js';
+export { JsonlParseError, appendJsonl, loadJsonl, readJsonlIds, withFileLock } from './chunk-YHZXBDAW.js';
+export { applyWalWithFallback, isCorruptionError, openSqliteResilient, sanitizeFts5Query } from './chunk-GLUWH6JO.js';
 export { withCwdMutex } from './chunk-2XLKLVVR.js';
-export { encodeProjectDir, transcriptPath, transcriptRoot } from './chunk-Q56IYTBZ.js';
-export { atomicWriteJson, atomicWriteText, replaceFileAtomic } from './chunk-S2BBRVQX.js';
-import { TheokitAgentError } from './chunk-WLKFWQSJ.js';
-import './chunk-JTFYYKDT.js';
+export { encodeProjectDir, transcriptPath, transcriptRoot } from './chunk-XAEAMI5H.js';
+export { atomicWriteJson, atomicWriteText, replaceFileAtomic } from './chunk-56OXYUZE.js';
+import { TheokitAgentError } from './chunk-CD73YHEH.js';
+import './chunk-TAPQWDW2.js';
 import { readFileSync, openSync, writeSync, closeSync, statSync, readSync } from 'fs';
 
 var LiveSessionError = class extends TheokitAgentError {
@@ -28,7 +28,7 @@ function forkTranscript(src, dst, options = {}) {
   const kept = options.beforeRecordIndex === void 0 ? lines : lines.slice(0, options.beforeRecordIndex);
   const body = kept.length > 0 ? `${kept.join("\n")}
 ` : "";
-  const fd = openSync(dst, "wx");
+  const fd = openSync(dst, "wx", options.mode ?? 384);
   try {
     writeSync(fd, body);
   } finally {

package/dist/persistence.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/persistence/transcript-ops.ts"],"names":[],"mappings":";;;;;;;;;;;AAkCO,IAAM,gBAAA,GAAN,cAA+B,iBAAA,CAAkB;AAAA,EAGtD,YAAqB,IAAA,EAAc;AACjC,IAAA,KAAA;AAAA,MACE,qDAAqD,IAAI,CAAA,+JAAA,CAAA;AAAA,MAGzD,EAAE,IAAA,EAAM,wBAAA,EAA0B,WAAA,EAAa,KAAA;AAAM,KACvD;AANmB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAOrB;AAAA,EAPqB,IAAA;AAAA,EAFH,IAAA,GAAO,kBAAA;AAU3B;AAqBO,SAAS,cAAA,CACd,GAAA,EACA,GAAA,EACA,OAAA,GAAiC,EAAC,EAC5B;AACN,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAA,CAAQ,gBAAA,IAAoB,EAAC,EAAG;AACjD,IAAA,IAAI,IAAA,KAAS,GAAA,EAAK,MAAM,IAAI,iBAAiB,GAAG,CAAA;AAAA,EAClD;AAEA,EAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,EAAK,MAAM,EACnC,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,CAAE,SAAS,CAAC,CAAA;AACpC,EAAA,MAAM,IAAA,GACJ,QAAQ,iBAAA,KAAsB,MAAA,GAAY,QAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,iBAAiB,CAAA;AAC5F,EAAA,MAAM,IAAA,GAAO,KAAK,MAAA,GAAS,CAAA,GAAI,GAAG,IAAA,CAAK,IAAA,CAAK,IAAI,CAAC;AAAA,CAAA,GAAO,EAAA;AAGxD,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,GAAA,EAAK,IAAI,CAAA;AAC7B,EAAA,IAAI;AACF,IAAA,SAAA,CAAU,IAAI,IAAI,CAAA;AAAA,EACpB,CAAA,SAAE;AACA,IAAA,SAAA,CAAU,EAAE,CAAA;AAAA,EACd;AACF;AAYA,IAAM,aAAa,EAAA,GAAK,IAAA;AASxB,SAAS,aAAA,CAAc,MAAc,IAAA,EAAuD;AAC1F,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,IAAI,CAAA,CAAE,IAAA;AAC5B,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,IAAA,EAAM,GAAG,CAAA;AAC7B,EAAA,IAAI,SAAA,GAAY,CAAA;AAChB,EAAA,IAAI,IAAA,GAAO,EAAA;AACX,EAAA,IAAI,GAAA,GAAM,IAAA;AACV,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,CAAA,EAAG;AACd,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACpC,MAAA,GAAA,IAAO,GAAA;AACP,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA;AAC5B,MAAA,QAAA,CAAS,EAAA,EAAI,GAAA,EAAK,CAAA,EAAG,GAAA,EAAK,GAAG,CAAA;AAC7B,MAAA,SAAA,IAAa,GAAA;AACb,MAAA,IAAA,GAAO,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,GAAI,IAAA;AAC9B,MAAA,IAAI,SAAA,CAAU,IAAI,CAAA,CAAE,MAAA,GAAS,IAAA,EAAM;AAAA,IACrC;AAAA,EACF,CAAA,SAAE;AACA,IAAA,SAAA,CAAU,EAAE,CAAA;AAAA,EACd;AACA,EAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,EAAA,OAAO,EAAE,QAAQ,GAAA,GAAM,CAAA,GAAI,OAAO,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,EAAQ,SAAA,EAAU;AACjE;AAGA,SAAS,UAAU,KAAA,EAAyB;AAC1C,EAAA,OAAO,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,CAAE,MAAA,GAAS,CAAC,CAAA;AAC5D;AASO,SAAS,aAAA,CACd,IAAA,EACA,OAAA,GAAgC,EAAC,EAC5B;AACL,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,UAAA,IAAc,MAAA,CAAO,iBAAA;AAC1C,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,aAAA,CAAc,MAAM,IAAI,CAAA;AAEtD,EAAA,IAAI,GAAA,GAAM,MAAA;AACV,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,MAAM,WAAW,OAAA,CAAQ,WAAA;AACzB,IAAA,MAAM,GAAA,GAAM,IAAI,aAAA,CAAc,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAC,CAAA;AACzD,IAAA,IAAI,OAAO,CAAA,EAAG,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,EACvC;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,IAAI,CAAA,QAAS,GAAA,CAAI,KAAA,CAAM,CAAC,IAAI,CAAA;AAEhD,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAC,MAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAM,CAAA;AAC7C,EAAA,OAAO,OAAA,CAAQ,WAAW,IAAA,GAAQ,MAAA,CAAO,OAAO,GAAA,EAAK,EAAE,SAAA,EAAW,CAAA,GAAY,GAAA;AAChF","file":"persistence.js","sourcesContent":["/**\n * M81 — transcript operations the consumer was doing by hand INSIDE the framework's own store.\n *\n * ## What this replaces\n *\n * `agents/lib/session/backtrack.ts:188` (agent-builder) wrote straight into the session store with a\n * bare `writeFileSync` — no atomicity, no lock, no API. 243 lines re-implementing parse, cut and\n * write for a format the framework owns. The consumer is not at fault: nothing here was reachable.\n *\n * ## The rule that travels WITH the operation\n *\n * `rules/audit-trail-rotation.md § Session transcripts (M60)` defines a NEVER-delete list — the live\n * pointer, the most recent transcript, and any active registry entry. That rule lived in the\n * CONSUMER. Moving the operation here without moving the rule would ship an API able to destroy\n * exactly what the rule protects — the same shape of defect as M80's `reconcileUpdateGoalStatus`:\n * critical knowledge outside the module that needs it, applied by convention.\n *\n * So `forkTranscript` takes `liveSessionPaths` and refuses, with a TYPED error, to write over any of\n * them. The caller supplies the list because only the caller knows which session is live; the\n * enforcement lives here because that is where the write happens.\n *\n * @internal\n */\n\nimport { closeSync, openSync, readFileSync, readSync, statSync, writeSync } from \"node:fs\";\n\nimport { TheokitAgentError } from \"../../errors.js\";\n\n/**\n * M81 — the target is a protected session (live pointer / most-recent transcript / active entry).\n *\n * Typed rather than a bare `Error` because the caller must distinguish \"this session is protected\"\n * from \"the disk is full\": the first is a correct refusal, the second is an incident.\n */\nexport class LiveSessionError extends TheokitAgentError {\n  override readonly name = \"LiveSessionError\";\n\n  constructor(readonly path: string) {\n    super(\n      `refusing to write over a live session transcript: ${path}. ` +\n        \"Fork to a new id instead — the live pointer, the most recent transcript and any active \" +\n        \"registry entry are never overwritten (audit-trail rotation, M60).\",\n      { code: \"live_session_protected\", isRetryable: false },\n    );\n  }\n}\n\n/** Options for {@link forkTranscript}. */\nexport interface ForkTranscriptOptions {\n  /** Keep records `[0, beforeRecordIndex)`. Omit to copy the whole transcript. */\n  readonly beforeRecordIndex?: number;\n  /**\n   * Paths that must never be written over — the live pointer, the most recent transcript, any active\n   * registry entry. The caller supplies them because only the caller knows which session is live.\n   */\n  readonly liveSessionPaths?: readonly string[];\n}\n\n/**\n * Copy `src` into `dst`, keeping the first `beforeRecordIndex` records. The SOURCE is never touched.\n *\n * Atomicity comes from `wx` (exclusive create): two concurrent forks to the same destination cannot\n * both succeed — the loser gets `EEXIST` rather than writing over a half-written file. That is also\n * why an existing destination is a refusal, not a silent overwrite: losing a transcript without an\n * error is the worst failure mode for an operation that touches user sessions.\n */\nexport function forkTranscript(\n  src: string,\n  dst: string,\n  options: ForkTranscriptOptions = {},\n): void {\n  for (const live of options.liveSessionPaths ?? []) {\n    if (live === dst) throw new LiveSessionError(dst);\n  }\n\n  const lines = readFileSync(src, \"utf8\")\n    .split(\"\\n\")\n    .filter((l) => l.trim().length > 0);\n  const kept =\n    options.beforeRecordIndex === undefined ? lines : lines.slice(0, options.beforeRecordIndex);\n  const body = kept.length > 0 ? `${kept.join(\"\\n\")}\\n` : \"\";\n\n  // `wx` — fails with EEXIST instead of truncating. The exclusivity IS the concurrency guarantee.\n  const fd = openSync(dst, \"wx\");\n  try {\n    writeSync(fd, body);\n  } finally {\n    closeSync(fd);\n  }\n}\n\n/** Options for {@link readJsonlTail}. */\nexport interface ReadJsonlTailOptions {\n  /** Maximum records to return, counted from the END. */\n  readonly maxRecords?: number;\n  /** Stop once a line contains this marker (exclusive). */\n  readonly sinceMarker?: string;\n  /** Test-only: also report how many bytes were read, to prove the read is not whole-file. */\n  readonly _stats?: boolean;\n}\n\nconst TAIL_CHUNK = 64 * 1024;\n\n/**\n * Lê chunks de trás para frente até acumular linhas completas suficientes.\n *\n * Extraído de `readJsonlTail` porque o laço de leitura e a seleção de registros são duas\n * responsabilidades — e juntas passavam do teto de complexidade. A primeira linha do buffer pode\n * estar cortada ao meio quando a leitura parou antes do início do arquivo; por isso ela é descartada.\n */\nfunction lerCaudaBruta(path: string, want: number): { linhas: string[]; bytesRead: number } {\n  const size = statSync(path).size;\n  const fd = openSync(path, \"r\");\n  let bytesRead = 0;\n  let tail = \"\";\n  let pos = size;\n  try {\n    while (pos > 0) {\n      const len = Math.min(TAIL_CHUNK, pos);\n      pos -= len;\n      const buf = Buffer.alloc(len);\n      readSync(fd, buf, 0, len, pos);\n      bytesRead += len;\n      tail = buf.toString(\"utf8\") + tail;\n      if (naoVazias(tail).length > want) break;\n    }\n  } finally {\n    closeSync(fd);\n  }\n  const linhas = naoVazias(tail);\n  return { linhas: pos > 0 ? linhas.slice(1) : linhas, bytesRead };\n}\n\n/** Linhas com conteúdo, na ordem do arquivo. */\nfunction naoVazias(texto: string): string[] {\n  return texto.split(\"\\n\").filter((l) => l.trim().length > 0);\n}\n\n/**\n * Read the LAST records of a JSONL file without loading the whole thing.\n *\n * Reads fixed-size chunks backwards from EOF until enough newlines have been seen. A session\n * transcript grows without bound; loading megabytes to show the last three turns is the cost this\n * exists to avoid — and a `slice` over a full read would be that same cost with a better name.\n */\nexport function readJsonlTail<T = Record<string, unknown>>(\n  path: string,\n  options: ReadJsonlTailOptions = {},\n): T[] {\n  const want = options.maxRecords ?? Number.POSITIVE_INFINITY;\n  const { linhas, bytesRead } = lerCaudaBruta(path, want);\n\n  let sel = linhas;\n  if (options.sinceMarker !== undefined) {\n    const marcador = options.sinceMarker;\n    const idx = sel.findLastIndex((l) => l.includes(marcador));\n    if (idx >= 0) sel = sel.slice(idx + 1);\n  }\n  if (Number.isFinite(want)) sel = sel.slice(-want);\n\n  const out = sel.map((l) => JSON.parse(l) as T);\n  return options._stats === true ? (Object.assign(out, { bytesRead }) as T[]) : out;\n}\n"]}
+{"version":3,"sources":["../src/internal/persistence/transcript-ops.ts"],"names":[],"mappings":";;;;;;;;;;;AAkCO,IAAM,gBAAA,GAAN,cAA+B,iBAAA,CAAkB;AAAA,EAGtD,YAAqB,IAAA,EAAc;AACjC,IAAA,KAAA;AAAA,MACE,qDAAqD,IAAI,CAAA,+JAAA,CAAA;AAAA,MAGzD,EAAE,IAAA,EAAM,wBAAA,EAA0B,WAAA,EAAa,KAAA;AAAM,KACvD;AANmB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAOrB;AAAA,EAPqB,IAAA;AAAA,EAFH,IAAA,GAAO,kBAAA;AAU3B;AAmCO,SAAS,cAAA,CACd,GAAA,EACA,GAAA,EACA,OAAA,GAAiC,EAAC,EAC5B;AACN,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAA,CAAQ,gBAAA,IAAoB,EAAC,EAAG;AACjD,IAAA,IAAI,IAAA,KAAS,GAAA,EAAK,MAAM,IAAI,iBAAiB,GAAG,CAAA;AAAA,EAClD;AAEA,EAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,EAAK,MAAM,EACnC,KAAA,CAAM,IAAI,CAAA,CACV,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,CAAE,SAAS,CAAC,CAAA;AACpC,EAAA,MAAM,IAAA,GACJ,QAAQ,iBAAA,KAAsB,MAAA,GAAY,QAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,iBAAiB,CAAA;AAC5F,EAAA,MAAM,IAAA,GAAO,KAAK,MAAA,GAAS,CAAA,GAAI,GAAG,IAAA,CAAK,IAAA,CAAK,IAAI,CAAC;AAAA,CAAA,GAAO,EAAA;AAIxD,EAAA,MAAM,KAAK,QAAA,CAAS,GAAA,EAAK,IAAA,EAAM,OAAA,CAAQ,QAAQ,GAAK,CAAA;AACpD,EAAA,IAAI;AACF,IAAA,SAAA,CAAU,IAAI,IAAI,CAAA;AAAA,EACpB,CAAA,SAAE;AACA,IAAA,SAAA,CAAU,EAAE,CAAA;AAAA,EACd;AACF;AAYA,IAAM,aAAa,EAAA,GAAK,IAAA;AASxB,SAAS,aAAA,CAAc,MAAc,IAAA,EAAuD;AAC1F,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,IAAI,CAAA,CAAE,IAAA;AAC5B,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,IAAA,EAAM,GAAG,CAAA;AAC7B,EAAA,IAAI,SAAA,GAAY,CAAA;AAChB,EAAA,IAAI,IAAA,GAAO,EAAA;AACX,EAAA,IAAI,GAAA,GAAM,IAAA;AACV,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,CAAA,EAAG;AACd,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACpC,MAAA,GAAA,IAAO,GAAA;AACP,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA;AAC5B,MAAA,QAAA,CAAS,EAAA,EAAI,GAAA,EAAK,CAAA,EAAG,GAAA,EAAK,GAAG,CAAA;AAC7B,MAAA,SAAA,IAAa,GAAA;AACb,MAAA,IAAA,GAAO,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,GAAI,IAAA;AAC9B,MAAA,IAAI,SAAA,CAAU,IAAI,CAAA,CAAE,MAAA,GAAS,IAAA,EAAM;AAAA,IACrC;AAAA,EACF,CAAA,SAAE;AACA,IAAA,SAAA,CAAU,EAAE,CAAA;AAAA,EACd;AACA,EAAA,MAAM,MAAA,GAAS,UAAU,IAAI,CAAA;AAC7B,EAAA,OAAO,EAAE,QAAQ,GAAA,GAAM,CAAA,GAAI,OAAO,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,EAAQ,SAAA,EAAU;AACjE;AAGA,SAAS,UAAU,KAAA,EAAyB;AAC1C,EAAA,OAAO,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,CAAE,MAAA,GAAS,CAAC,CAAA;AAC5D;AASO,SAAS,aAAA,CACd,IAAA,EACA,OAAA,GAAgC,EAAC,EAC5B;AACL,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,UAAA,IAAc,MAAA,CAAO,iBAAA;AAC1C,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,aAAA,CAAc,MAAM,IAAI,CAAA;AAEtD,EAAA,IAAI,GAAA,GAAM,MAAA;AACV,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,MAAM,WAAW,OAAA,CAAQ,WAAA;AACzB,IAAA,MAAM,GAAA,GAAM,IAAI,aAAA,CAAc,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAC,CAAA;AACzD,IAAA,IAAI,OAAO,CAAA,EAAG,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,EACvC;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,IAAI,CAAA,QAAS,GAAA,CAAI,KAAA,CAAM,CAAC,IAAI,CAAA;AAEhD,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAC,MAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAM,CAAA;AAC7C,EAAA,OAAO,OAAA,CAAQ,WAAW,IAAA,GAAQ,MAAA,CAAO,OAAO,GAAA,EAAK,EAAE,SAAA,EAAW,CAAA,GAAY,GAAA;AAChF","file":"persistence.js","sourcesContent":["/**\n * M81 — transcript operations the consumer was doing by hand INSIDE the framework's own store.\n *\n * ## What this replaces\n *\n * `agents/lib/session/backtrack.ts:188` (agent-builder) wrote straight into the session store with a\n * bare `writeFileSync` — no atomicity, no lock, no API. 243 lines re-implementing parse, cut and\n * write for a format the framework owns. The consumer is not at fault: nothing here was reachable.\n *\n * ## The rule that travels WITH the operation\n *\n * `rules/audit-trail-rotation.md § Session transcripts (M60)` defines a NEVER-delete list — the live\n * pointer, the most recent transcript, and any active registry entry. That rule lived in the\n * CONSUMER. Moving the operation here without moving the rule would ship an API able to destroy\n * exactly what the rule protects — the same shape of defect as M80's `reconcileUpdateGoalStatus`:\n * critical knowledge outside the module that needs it, applied by convention.\n *\n * So `forkTranscript` takes `liveSessionPaths` and refuses, with a TYPED error, to write over any of\n * them. The caller supplies the list because only the caller knows which session is live; the\n * enforcement lives here because that is where the write happens.\n *\n * @internal\n */\n\nimport { closeSync, openSync, readFileSync, readSync, statSync, writeSync } from \"node:fs\";\n\nimport { TheokitAgentError } from \"../../errors.js\";\n\n/**\n * M81 — the target is a protected session (live pointer / most-recent transcript / active entry).\n *\n * Typed rather than a bare `Error` because the caller must distinguish \"this session is protected\"\n * from \"the disk is full\": the first is a correct refusal, the second is an incident.\n */\nexport class LiveSessionError extends TheokitAgentError {\n  override readonly name = \"LiveSessionError\";\n\n  constructor(readonly path: string) {\n    super(\n      `refusing to write over a live session transcript: ${path}. ` +\n        \"Fork to a new id instead — the live pointer, the most recent transcript and any active \" +\n        \"registry entry are never overwritten (audit-trail rotation, M60).\",\n      { code: \"live_session_protected\", isRetryable: false },\n    );\n  }\n}\n\n/** Options for {@link forkTranscript}. */\nexport interface ForkTranscriptOptions {\n  /** Keep records `[0, beforeRecordIndex)`. Omit to copy the whole transcript. */\n  readonly beforeRecordIndex?: number;\n  /**\n   * Paths that must never be written over — the live pointer, the most recent transcript, any active\n   * registry entry. The caller supplies them because only the caller knows which session is live.\n   */\n  readonly liveSessionPaths?: readonly string[];\n  /**\n   * M107 — permission bits for the created destination. Default: `0o600`.\n   *\n   * A transcript carries the conversation. Before M107 no mode was passed at all, so the file was\n   * born `0o666 & ~umask` — measured `0o664` (group-WRITABLE) on a `umask 002` machine, `0o644` on\n   * `umask 022`, `0o466` on `umask 0200`. This is a DEFAULT and not a required knob on purpose: a\n   * knob would reach zero consumers by omission, which is the failure mode that matters.\n   *\n   * As with any `open` mode, the `umask` may still CLEAR bits — under `umask 0200` the result is\n   * `0o400`. That is accepted: the invariant bought here is \"neither group nor others\", and `0o400`\n   * satisfies it more strictly. The SDK deliberately does not `fchmod` the default back, because\n   * that would hand back a bit the operator asked to remove.\n   */\n  readonly mode?: number;\n}\n\n/**\n * Copy `src` into `dst`, keeping the first `beforeRecordIndex` records. The SOURCE is never touched.\n *\n * Atomicity comes from `wx` (exclusive create): two concurrent forks to the same destination cannot\n * both succeed — the loser gets `EEXIST` rather than writing over a half-written file. That is also\n * why an existing destination is a refusal, not a silent overwrite: losing a transcript without an\n * error is the worst failure mode for an operation that touches user sessions.\n */\nexport function forkTranscript(\n  src: string,\n  dst: string,\n  options: ForkTranscriptOptions = {},\n): void {\n  for (const live of options.liveSessionPaths ?? []) {\n    if (live === dst) throw new LiveSessionError(dst);\n  }\n\n  const lines = readFileSync(src, \"utf8\")\n    .split(\"\\n\")\n    .filter((l) => l.trim().length > 0);\n  const kept =\n    options.beforeRecordIndex === undefined ? lines : lines.slice(0, options.beforeRecordIndex);\n  const body = kept.length > 0 ? `${kept.join(\"\\n\")}\\n` : \"\";\n\n  // `wx` — fails with EEXIST instead of truncating. The exclusivity IS the concurrency guarantee,\n  // and M107 only added the third argument: the mode. See `ForkTranscriptOptions.mode`.\n  const fd = openSync(dst, \"wx\", options.mode ?? 0o600);\n  try {\n    writeSync(fd, body);\n  } finally {\n    closeSync(fd);\n  }\n}\n\n/** Options for {@link readJsonlTail}. */\nexport interface ReadJsonlTailOptions {\n  /** Maximum records to return, counted from the END. */\n  readonly maxRecords?: number;\n  /** Stop once a line contains this marker (exclusive). */\n  readonly sinceMarker?: string;\n  /** Test-only: also report how many bytes were read, to prove the read is not whole-file. */\n  readonly _stats?: boolean;\n}\n\nconst TAIL_CHUNK = 64 * 1024;\n\n/**\n * Lê chunks de trás para frente até acumular linhas completas suficientes.\n *\n * Extraído de `readJsonlTail` porque o laço de leitura e a seleção de registros são duas\n * responsabilidades — e juntas passavam do teto de complexidade. A primeira linha do buffer pode\n * estar cortada ao meio quando a leitura parou antes do início do arquivo; por isso ela é descartada.\n */\nfunction lerCaudaBruta(path: string, want: number): { linhas: string[]; bytesRead: number } {\n  const size = statSync(path).size;\n  const fd = openSync(path, \"r\");\n  let bytesRead = 0;\n  let tail = \"\";\n  let pos = size;\n  try {\n    while (pos > 0) {\n      const len = Math.min(TAIL_CHUNK, pos);\n      pos -= len;\n      const buf = Buffer.alloc(len);\n      readSync(fd, buf, 0, len, pos);\n      bytesRead += len;\n      tail = buf.toString(\"utf8\") + tail;\n      if (naoVazias(tail).length > want) break;\n    }\n  } finally {\n    closeSync(fd);\n  }\n  const linhas = naoVazias(tail);\n  return { linhas: pos > 0 ? linhas.slice(1) : linhas, bytesRead };\n}\n\n/** Linhas com conteúdo, na ordem do arquivo. */\nfunction naoVazias(texto: string): string[] {\n  return texto.split(\"\\n\").filter((l) => l.trim().length > 0);\n}\n\n/**\n * Read the LAST records of a JSONL file without loading the whole thing.\n *\n * Reads fixed-size chunks backwards from EOF until enough newlines have been seen. A session\n * transcript grows without bound; loading megabytes to show the last three turns is the cost this\n * exists to avoid — and a `slice` over a full read would be that same cost with a better name.\n */\nexport function readJsonlTail<T = Record<string, unknown>>(\n  path: string,\n  options: ReadJsonlTailOptions = {},\n): T[] {\n  const want = options.maxRecords ?? Number.POSITIVE_INFINITY;\n  const { linhas, bytesRead } = lerCaudaBruta(path, want);\n\n  let sel = linhas;\n  if (options.sinceMarker !== undefined) {\n    const marcador = options.sinceMarker;\n    const idx = sel.findLastIndex((l) => l.includes(marcador));\n    if (idx >= 0) sel = sel.slice(idx + 1);\n  }\n  if (Number.isFinite(want)) sel = sel.slice(-want);\n\n  const out = sel.map((l) => JSON.parse(l) as T);\n  return options._stats === true ? (Object.assign(out, { bytesRead }) as T[]) : out;\n}\n"]}

package/dist/project.cjs

@@ -1,9 +1,9 @@
 'use strict';
 
 var chunkYPEPCZHF_cjs = require('./chunk-YPEPCZHF.cjs');
-var chunkTIZ4TS5V_cjs = require('./chunk-TIZ4TS5V.cjs');
-var chunkA44COQJJ_cjs = require('./chunk-A44COQJJ.cjs');
-require('./chunk-BEURCLDV.cjs');
+var chunkICYBIC6N_cjs = require('./chunk-ICYBIC6N.cjs');
+var chunkMHCKWQR3_cjs = require('./chunk-MHCKWQR3.cjs');
+require('./chunk-LTCOPATU.cjs');
 var promises = require('fs/promises');
 var path = require('path');
 
@@ -31,12 +31,12 @@ function reduceContent(files, scope) {
 async function writeProjectInstructions(cwd, content, options) {
   const filename = options?.filename ?? DEFAULT_FILENAME;
   if (!chunkYPEPCZHF_cjs.isSafePattern(filename)) {
-    throw new chunkA44COQJJ_cjs.ConfigurationError(
+    throw new chunkMHCKWQR3_cjs.ConfigurationError(
       `writeProjectInstructions: unsafe filename ${JSON.stringify(filename)} (no path traversal, separators, or absolute paths)`,
       { code: "unsafe_filename" }
     );
   }
-  await chunkTIZ4TS5V_cjs.replaceFileAtomic(path.join(cwd, filename), content);
+  await chunkICYBIC6N_cjs.replaceFileAtomic(path.join(cwd, filename), content);
 }
 
 exports.readProjectInstructions = readProjectInstructions;

package/dist/project.js

@@ -1,7 +1,7 @@
 import { walkUpForFile, isSafePattern } from './chunk-UJ7IQJAG.js';
-import { replaceFileAtomic } from './chunk-S2BBRVQX.js';
-import { ConfigurationError } from './chunk-WLKFWQSJ.js';
-import './chunk-JTFYYKDT.js';
+import { replaceFileAtomic } from './chunk-56OXYUZE.js';
+import { ConfigurationError } from './chunk-CD73YHEH.js';
+import './chunk-TAPQWDW2.js';
 import { readFile } from 'fs/promises';
 import { join } from 'path';
 

package/dist/registry-N3GTKYCI.cjs

@@ -0,0 +1,46 @@
+'use strict';
+
+var chunk6EDQBX7U_cjs = require('./chunk-6EDQBX7U.cjs');
+require('./chunk-BUUUWQMB.cjs');
+require('./chunk-MRODLUGY.cjs');
+require('./chunk-W4QN5CMG.cjs');
+require('./chunk-ICYBIC6N.cjs');
+require('./chunk-MHCKWQR3.cjs');
+require('./chunk-LTCOPATU.cjs');
+
+
+
+Object.defineProperty(exports, "__getSubscribersCountForTests", {
+  enumerable: true,
+  get: function () { return chunk6EDQBX7U_cjs.__getSubscribersCountForTests; }
+});
+Object.defineProperty(exports, "__resetTaskRegistryForTests", {
+  enumerable: true,
+  get: function () { return chunk6EDQBX7U_cjs.__resetTaskRegistryForTests; }
+});
+Object.defineProperty(exports, "cancel", {
+  enumerable: true,
+  get: function () { return chunk6EDQBX7U_cjs.cancel; }
+});
+Object.defineProperty(exports, "configure", {
+  enumerable: true,
+  get: function () { return chunk6EDQBX7U_cjs.configure; }
+});
+Object.defineProperty(exports, "get", {
+  enumerable: true,
+  get: function () { return chunk6EDQBX7U_cjs.get; }
+});
+Object.defineProperty(exports, "list", {
+  enumerable: true,
+  get: function () { return chunk6EDQBX7U_cjs.list; }
+});
+Object.defineProperty(exports, "submit", {
+  enumerable: true,
+  get: function () { return chunk6EDQBX7U_cjs.submit; }
+});
+Object.defineProperty(exports, "subscribe", {
+  enumerable: true,
+  get: function () { return chunk6EDQBX7U_cjs.subscribe; }
+});
+//# sourceMappingURL=registry-N3GTKYCI.cjs.map
+//# sourceMappingURL=registry-N3GTKYCI.cjs.map

package/dist/{registry-APYDISL6.cjs.map → registry-N3GTKYCI.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"registry-APYDISL6.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"registry-N3GTKYCI.cjs"}

package/dist/registry-SOXE4RY6.js

@@ -0,0 +1,9 @@
+export { __getSubscribersCountForTests, __resetTaskRegistryForTests, cancel, configure, get, list, submit, subscribe } from './chunk-HEN5WXXI.js';
+import './chunk-K2BQQ445.js';
+import './chunk-NFCKEBHI.js';
+import './chunk-CSZRJ4RE.js';
+import './chunk-56OXYUZE.js';
+import './chunk-CD73YHEH.js';
+import './chunk-TAPQWDW2.js';
+//# sourceMappingURL=registry-SOXE4RY6.js.map
+//# sourceMappingURL=registry-SOXE4RY6.js.map

package/dist/{registry-34IWWDQQ.js.map → registry-SOXE4RY6.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"registry-34IWWDQQ.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"registry-SOXE4RY6.js"}

package/dist/retry.cjs

@@ -1,14 +1,14 @@
 'use strict';
 
-var chunkKSKU6JY6_cjs = require('./chunk-KSKU6JY6.cjs');
-require('./chunk-A44COQJJ.cjs');
-require('./chunk-BEURCLDV.cjs');
+var chunk3O2ELBST_cjs = require('./chunk-3O2ELBST.cjs');
+require('./chunk-MHCKWQR3.cjs');
+require('./chunk-LTCOPATU.cjs');
 
 
 
 Object.defineProperty(exports, "Retry", {
   enumerable: true,
-  get: function () { return chunkKSKU6JY6_cjs.Retry; }
+  get: function () { return chunk3O2ELBST_cjs.Retry; }
 });
 //# sourceMappingURL=retry.cjs.map
 //# sourceMappingURL=retry.cjs.map

package/dist/retry.js

@@ -1,5 +1,5 @@
-export { Retry } from './chunk-M72RJVPC.js';
-import './chunk-WLKFWQSJ.js';
-import './chunk-JTFYYKDT.js';
+export { Retry } from './chunk-JNIWFCKI.js';
+import './chunk-CD73YHEH.js';
+import './chunk-TAPQWDW2.js';
 //# sourceMappingURL=retry.js.map
 //# sourceMappingURL=retry.js.map

package/dist/sandbox/index.cjs

@@ -2,8 +2,8 @@
 
 var chunkS7OEXQMI_cjs = require('../chunk-S7OEXQMI.cjs');
 require('../chunk-WPZTYOUX.cjs');
-var chunkA44COQJJ_cjs = require('../chunk-A44COQJJ.cjs');
-var chunkBEURCLDV_cjs = require('../chunk-BEURCLDV.cjs');
+var chunkMHCKWQR3_cjs = require('../chunk-MHCKWQR3.cjs');
+var chunkLTCOPATU_cjs = require('../chunk-LTCOPATU.cjs');
 var child_process = require('child_process');
 var fs = require('fs');
 var path = require('path');
@@ -319,7 +319,7 @@ function seccompPathForArch(arch, warn) {
 var seccompFilterPath;
 function restrictedSeccompPath() {
   if (seccompFilterPath !== void 0) return seccompFilterPath ?? void 0;
-  const path2 = seccompPathForArch(process.arch, (m) => console.warn(chunkBEURCLDV_cjs.redactSecrets(m)));
+  const path2 = seccompPathForArch(process.arch, (m) => console.warn(chunkLTCOPATU_cjs.redactSecrets(m)));
   seccompFilterPath = path2 ?? null;
   return path2;
 }
@@ -344,7 +344,7 @@ function createSandboxBackend(opts) {
   if (!detection.ok) {
     if (!warnedUnavailable) {
       warnedUnavailable = true;
-      const warn = opts.warn ?? ((m) => console.warn(chunkBEURCLDV_cjs.redactSecrets(m)));
+      const warn = opts.warn ?? ((m) => console.warn(chunkLTCOPATU_cjs.redactSecrets(m)));
       warn(
         `[sandbox] OS-level enforcement unavailable (${detection.reason}) \u2014 falling back to tool-level gating only (sandbox_mode=${opts.mode}).`
       );
@@ -366,7 +366,7 @@ function decidirConfinamento(opts) {
   if (detection.ok) return detection.bin;
   if (!avisouInterativo) {
     avisouInterativo = true;
-    const warn = opts.warn ?? ((m) => console.warn(chunkBEURCLDV_cjs.redactSecrets(m)));
+    const warn = opts.warn ?? ((m) => console.warn(chunkLTCOPATU_cjs.redactSecrets(m)));
     warn(
       `[sandbox] OS-level enforcement unavailable (${detection.reason}) \u2014 interactive session runs WITHOUT kernel confinement (sandbox_mode=${opts.mode}).`
     );
@@ -392,7 +392,7 @@ function interactiveWrapCommand(opts) {
 }
 
 // src/sandbox/provision.ts
-var RepoProvisionError = class extends chunkA44COQJJ_cjs.TheokitAgentError {
+var RepoProvisionError = class extends chunkMHCKWQR3_cjs.TheokitAgentError {
   constructor(instanceId, message, options = {}) {
     super(`[${instanceId}] ${message}`, {
       code: "repo_provision_failed",

package/dist/sandbox/index.js

@@ -1,8 +1,8 @@
 import { LocalSandbox, shellEscapePosix } from '../chunk-SKWVAQAY.js';
 export { LocalSandbox, SandboxBackend, SandboxNotAvailableError, SandboxSecurityError, resolveSandbox } from '../chunk-SKWVAQAY.js';
 import '../chunk-7GFX45DD.js';
-import { TheokitAgentError } from '../chunk-WLKFWQSJ.js';
-import { redactSecrets } from '../chunk-JTFYYKDT.js';
+import { TheokitAgentError } from '../chunk-CD73YHEH.js';
+import { redactSecrets } from '../chunk-TAPQWDW2.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdtempSync, writeFileSync, rmSync } from 'fs';
 import path, { dirname, join } from 'path';

package/dist/server/errors-envelope.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkA44COQJJ_cjs = require('../chunk-A44COQJJ.cjs');
-require('../chunk-BEURCLDV.cjs');
+var chunkMHCKWQR3_cjs = require('../chunk-MHCKWQR3.cjs');
+require('../chunk-LTCOPATU.cjs');
 
 // src/server/errors-envelope.ts
 var NAME_TO_CODE = /* @__PURE__ */ new Map([
@@ -37,7 +37,7 @@ function toEnvelope(value) {
 }
 function buildMeta(name, err) {
   const meta = { sdkErrorName: name };
-  if (err instanceof chunkA44COQJJ_cjs.TheokitAgentError && err.metadata !== void 0) {
+  if (err instanceof chunkMHCKWQR3_cjs.TheokitAgentError && err.metadata !== void 0) {
     meta.provider = err.metadata.provider;
     meta.endpoint = err.metadata.endpoint;
     if (err.metadata.statusCode !== void 0) {
@@ -47,13 +47,13 @@ function buildMeta(name, err) {
   return meta;
 }
 function buildExt(err) {
-  if (err instanceof chunkA44COQJJ_cjs.RateLimitError && err.metadata?.retryAfter !== void 0) {
+  if (err instanceof chunkMHCKWQR3_cjs.RateLimitError && err.metadata?.retryAfter !== void 0) {
     return {
       retryable: true,
       retryAfterMs: err.metadata.retryAfter * 1e3
     };
   }
-  if (err instanceof chunkA44COQJJ_cjs.CredentialPoolExhaustedError && err.nextRetryAt !== void 0) {
+  if (err instanceof chunkMHCKWQR3_cjs.CredentialPoolExhaustedError && err.nextRetryAt !== void 0) {
     const delayMs = Math.max(0, err.nextRetryAt - Date.now());
     return {
       retryable: true,
@@ -63,22 +63,22 @@ function buildExt(err) {
   return void 0;
 }
 var CODE_TO_RECONSTRUCTOR = /* @__PURE__ */ new Map([
-  ["UNAUTHORIZED", (env) => new chunkA44COQJJ_cjs.AuthenticationError(env.message)],
+  ["UNAUTHORIZED", (env) => new chunkMHCKWQR3_cjs.AuthenticationError(env.message)],
   [
     "RATE_LIMITED",
-    (env) => new chunkA44COQJJ_cjs.RateLimitError(env.message, env.cause !== void 0 ? { cause: env.cause } : {})
+    (env) => new chunkMHCKWQR3_cjs.RateLimitError(env.message, env.cause !== void 0 ? { cause: env.cause } : {})
   ],
-  ["PROVIDER_KEY_MISSING", (env) => new chunkA44COQJJ_cjs.ConfigurationError(env.message)],
-  ["SERVICE_UNAVAILABLE", (env) => new chunkA44COQJJ_cjs.NetworkError(env.message)],
-  ["GATEWAY_TIMEOUT", (env) => new chunkA44COQJJ_cjs.NetworkError(env.message)],
+  ["PROVIDER_KEY_MISSING", (env) => new chunkMHCKWQR3_cjs.ConfigurationError(env.message)],
+  ["SERVICE_UNAVAILABLE", (env) => new chunkMHCKWQR3_cjs.NetworkError(env.message)],
+  ["GATEWAY_TIMEOUT", (env) => new chunkMHCKWQR3_cjs.NetworkError(env.message)],
   [
     "AGENT_RUN_ERROR",
-    (env) => new chunkA44COQJJ_cjs.AgentRunError(env.message, {
+    (env) => new chunkMHCKWQR3_cjs.AgentRunError(env.message, {
       code: "unknown",
       ...env.cause !== void 0 ? { cause: env.cause } : {}
     })
   ],
-  ["INTERNAL_SERVER_ERROR", (env) => new chunkA44COQJJ_cjs.UnknownAgentError(env.message)]
+  ["INTERNAL_SERVER_ERROR", (env) => new chunkMHCKWQR3_cjs.UnknownAgentError(env.message)]
   // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require
   // domain-specific args (budgetName, provider) that the envelope doesn't
   // always carry. Fall back to UnknownAgentError when those fields are
@@ -88,12 +88,12 @@ var CODE_TO_RECONSTRUCTOR = /* @__PURE__ */ new Map([
 function fromEnvelope(env) {
   const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);
   if (reconstructor) return reconstructor(env);
-  return new chunkA44COQJJ_cjs.UnknownAgentError(env.message);
+  return new chunkMHCKWQR3_cjs.UnknownAgentError(env.message);
 }
 
 Object.defineProperty(exports, "MemoryAdapterError", {
   enumerable: true,
-  get: function () { return chunkA44COQJJ_cjs.MemoryAdapterError; }
+  get: function () { return chunkMHCKWQR3_cjs.MemoryAdapterError; }
 });
 exports.fromEnvelope = fromEnvelope;
 exports.toEnvelope = toEnvelope;

package/dist/server/errors-envelope.js

@@ -1,6 +1,6 @@
-import { TheokitAgentError, RateLimitError, CredentialPoolExhaustedError, UnknownAgentError, AuthenticationError, ConfigurationError, NetworkError, AgentRunError } from '../chunk-WLKFWQSJ.js';
-export { MemoryAdapterError } from '../chunk-WLKFWQSJ.js';
-import '../chunk-JTFYYKDT.js';
+import { TheokitAgentError, RateLimitError, CredentialPoolExhaustedError, UnknownAgentError, AuthenticationError, ConfigurationError, NetworkError, AgentRunError } from '../chunk-CD73YHEH.js';
+export { MemoryAdapterError } from '../chunk-CD73YHEH.js';
+import '../chunk-TAPQWDW2.js';
 
 // src/server/errors-envelope.ts
 var NAME_TO_CODE = /* @__PURE__ */ new Map([

package/dist/session-transcript-6WKLYIN4.js

@@ -0,0 +1,5 @@
+export { SessionTranscript, defaultBaseDir, encodeProjectDir, expandTilde, readTranscript, reconstructMessages, safeSessionId, transcriptPath, transcriptRoot, writeTranscript } from './chunk-XAEAMI5H.js';
+import './chunk-56OXYUZE.js';
+import './chunk-TAPQWDW2.js';
+//# sourceMappingURL=session-transcript-6WKLYIN4.js.map
+//# sourceMappingURL=session-transcript-6WKLYIN4.js.map

package/dist/{session-transcript-F2ANTA2M.js.map → session-transcript-6WKLYIN4.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-F2ANTA2M.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-6WKLYIN4.js"}

package/dist/session-transcript-EAKR4D2W.cjs

@@ -0,0 +1,50 @@
+'use strict';
+
+var chunkIEUDKUPM_cjs = require('./chunk-IEUDKUPM.cjs');
+require('./chunk-ICYBIC6N.cjs');
+require('./chunk-LTCOPATU.cjs');
+
+
+
+Object.defineProperty(exports, "SessionTranscript", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.SessionTranscript; }
+});
+Object.defineProperty(exports, "defaultBaseDir", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.defaultBaseDir; }
+});
+Object.defineProperty(exports, "encodeProjectDir", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.encodeProjectDir; }
+});
+Object.defineProperty(exports, "expandTilde", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.expandTilde; }
+});
+Object.defineProperty(exports, "readTranscript", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.readTranscript; }
+});
+Object.defineProperty(exports, "reconstructMessages", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.reconstructMessages; }
+});
+Object.defineProperty(exports, "safeSessionId", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.safeSessionId; }
+});
+Object.defineProperty(exports, "transcriptPath", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.transcriptPath; }
+});
+Object.defineProperty(exports, "transcriptRoot", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.transcriptRoot; }
+});
+Object.defineProperty(exports, "writeTranscript", {
+  enumerable: true,
+  get: function () { return chunkIEUDKUPM_cjs.writeTranscript; }
+});
+//# sourceMappingURL=session-transcript-EAKR4D2W.cjs.map
+//# sourceMappingURL=session-transcript-EAKR4D2W.cjs.map

package/dist/{session-transcript-JXFMPLOT.cjs.map → session-transcript-EAKR4D2W.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-JXFMPLOT.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-EAKR4D2W.cjs"}