@theokit/sdk 4.52.1 → 4.53.1

package/dist/{inject-session-UBAQ7I3G.cjs → inject-session-AUQLBDRS.cjs}

@@ -1,17 +1,17 @@
 'use strict';
 
-var chunkCY7MIMI4_cjs = require('./chunk-CY7MIMI4.cjs');
+var chunk2D43RD5D_cjs = require('./chunk-2D43RD5D.cjs');
 var chunk4JBHSLQO_cjs = require('./chunk-4JBHSLQO.cjs');
-require('./chunk-3R4ZCQAZ.cjs');
-var chunkECPL5RV6_cjs = require('./chunk-ECPL5RV6.cjs');
-require('./chunk-2CFEET3Y.cjs');
-require('./chunk-SXSPMRSV.cjs');
+require('./chunk-D75S2X6I.cjs');
+var chunkY4AXQOT4_cjs = require('./chunk-Y4AXQOT4.cjs');
+require('./chunk-C4H6PB5J.cjs');
+require('./chunk-BM6N4KHO.cjs');
 
 // src/internal/session/inject-session.ts
 async function injectSessionTurn(opts) {
-  await chunkCY7MIMI4_cjs.enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {
+  await chunk2D43RD5D_cjs.enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {
     const prior = await opts.store.readRecords(opts.loc.agentId);
-    const transcript = chunkECPL5RV6_cjs.SessionTranscript.fromRecords(prior, {
+    const transcript = chunkY4AXQOT4_cjs.SessionTranscript.fromRecords(prior, {
       cwd: opts.loc.cwd,
       sessionId: opts.sessionId,
       model: opts.loc.model ?? "unknown"
@@ -24,5 +24,5 @@ async function injectSessionTurn(opts) {
 }
 
 exports.injectSessionTurn = injectSessionTurn;
-//# sourceMappingURL=inject-session-UBAQ7I3G.cjs.map
-//# sourceMappingURL=inject-session-UBAQ7I3G.cjs.map
+//# sourceMappingURL=inject-session-AUQLBDRS.cjs.map
+//# sourceMappingURL=inject-session-AUQLBDRS.cjs.map

package/dist/{inject-session-UBAQ7I3G.cjs.map → inject-session-AUQLBDRS.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":["enqueueSessionWrite","SessionTranscript","invalidateSessionCache"],"mappings":";;;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAMA,sCAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAaC,mCAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAAC,wCAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-UBAQ7I3G.cjs","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}
+{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":["enqueueSessionWrite","SessionTranscript","invalidateSessionCache"],"mappings":";;;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAMA,sCAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAaC,mCAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAAC,wCAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-AUQLBDRS.cjs","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}

package/dist/{inject-session-UEH5MAKU.js → inject-session-GMBMJVNZ.js}

@@ -1,9 +1,9 @@
-import { enqueueSessionWrite } from './chunk-42PLABFU.js';
+import { enqueueSessionWrite } from './chunk-GOVJO4YE.js';
 import { invalidateSessionCache } from './chunk-4QEC4CCS.js';
-import './chunk-UJ3SXRZZ.js';
-import { SessionTranscript } from './chunk-C4EU627W.js';
-import './chunk-CHVSMEKM.js';
-import './chunk-4X3SBHPK.js';
+import './chunk-BERBYXFH.js';
+import { SessionTranscript } from './chunk-N5CR3TJZ.js';
+import './chunk-6AZDM6LK.js';
+import './chunk-5F5NWKPN.js';
 
 // src/internal/session/inject-session.ts
 async function injectSessionTurn(opts) {
@@ -22,5 +22,5 @@ async function injectSessionTurn(opts) {
 }
 
 export { injectSessionTurn };
-//# sourceMappingURL=inject-session-UEH5MAKU.js.map
-//# sourceMappingURL=inject-session-UEH5MAKU.js.map
+//# sourceMappingURL=inject-session-GMBMJVNZ.js.map
+//# sourceMappingURL=inject-session-GMBMJVNZ.js.map

package/dist/{inject-session-UEH5MAKU.js.map → inject-session-GMBMJVNZ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":[],"mappings":";;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAM,oBAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAa,iBAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAA,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-UEH5MAKU.js","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}
+{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":[],"mappings":";;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAM,oBAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAa,iBAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAA,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-GMBMJVNZ.js","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}

package/dist/internal/auth/auth-types.d.ts

@@ -39,7 +39,7 @@ export interface StoredOAuthCredential {
     account_id?: string;
 }
 export type StoredCredential = StoredApiCredential | StoredOAuthCredential;
-/** A provider's OAuth endpoints + client identity. Passed in (provider-agnostic, like OpenCode). */
+/** A provider's OAuth endpoints + client identity. Passed in (provider-agnostic). */
 export interface OAuthProviderConfig {
     provider: string;
     authorizeEndpoint: string;

package/dist/internal/auth/oauth-device.d.ts

@@ -35,7 +35,7 @@ export declare function openaiDeviceLogin(config: OpenAIDeviceConfig, deps: Devi
         verificationUri: string;
     }) => void;
 }): Promise<OAuthTokens>;
-/** JWT id/access-token claims we read to attribute an account. Adapted from OpenCode's codex plugin. */
+/** JWT id/access-token claims we read to attribute an account. */
 interface IdTokenClaims {
     chatgpt_account_id?: string;
     organizations?: Array<{
@@ -47,7 +47,7 @@ interface IdTokenClaims {
 }
 /** Decode a JWT's claim set (no signature verification — used only to read a self-reported account id). */
 export declare function parseJwtClaims(token: string): IdTokenClaims | undefined;
-/** Best-effort account id from an id/access token's claims (OpenAI/ChatGPT shape). Adapted from OpenCode. */
+/** Best-effort account id from an id/access token's claims (OpenAI/ChatGPT shape). */
 export declare function extractAccountId(tokens: {
     id_token?: string;
     access_token?: string;

package/dist/internal/local-agent/mcp-pool.d.ts

@@ -2,10 +2,8 @@
  * M77 — session-scoped MCP client pool.
  *
  * `buildMcpMap` (`real-local-run.ts`) builds a fresh `McpClient` on every run, so each `send` pays
- * spawn + handshake again: 193 / 138 / 134 ms per turn, measured. The reference anchors this at the
- * session — Codex keeps its `mcp_runtime: Arc<McpRuntime>` in `SessionServices`
- * (`codex-rs/core/src/state/service.rs:51-58`), next to a field commented *"Session-scoped model
- * client shared across turns"*, and REPLACES the runtime rather than rebuilding it.
+ * spawn + handshake again: 193 / 138 / 134 ms per turn, measured. The runtime is therefore anchored at
+ * the session and REPLACED rather than rebuilt.
  *
  * theokit#155: pooling the client OBJECT was never enough — the turn also has to stop closing what
  * it does not own. See `runOwnsMcpClients` (`real-local-run.ts`) and the idempotent

package/dist/internal/mcp/oauth.d.ts

@@ -0,0 +1,14 @@
+import type { McpOAuthConfig } from "../../types/mcp.js";
+import { type OAuthTokens } from "./token-storage.js";
+/**
+ * Refresh an access token using `refresh_token`. Throws on failure.
+ *
+ */
+export declare function refreshAccessToken(serverName: string, clientId: string, refreshToken: string, oauth: McpOAuthConfig): Promise<OAuthTokens>;
+/**
+ * Run the full PKCE flow. Generates verifier+challenge+state, opens the
+ * authorization URL (browser or manual print), waits for the callback
+ * (localhost or stdin), exchanges code for tokens.
+ *
+ */
+export declare function runPkceFlow(serverName: string, clientId: string, scopes: string[] | undefined, oauth: McpOAuthConfig): Promise<OAuthTokens>;

package/dist/internal/mcp/token-storage.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Persist tokens for `serverName`. Tries keychain first, falls back to file
+ * with chmod 600 (POSIX). Idempotent.
+ *
+ */
+export declare function setTokens(serverName: string, tokens: OAuthTokens): Promise<void>;
+/**
+ * Retrieve tokens for `serverName`. Returns undefined if absent.
+ *
+ */
+export declare function getTokens(serverName: string): Promise<OAuthTokens | undefined>;
+/**
+ * Serialize concurrent refresh attempts per server (EC-9). If a refresh is
+ * already in flight for the same `serverName`, the second caller awaits
+ * the same Promise.
+ *
+ */
+export declare function lockedRefresh(serverName: string, refreshFn: () => Promise<OAuthTokens>): Promise<OAuthTokens>;

package/dist/internal/memory/adapters/index.cjs

@@ -1,21 +1,21 @@
 'use strict';
 
-var chunkADVZIC43_cjs = require('../../../chunk-ADVZIC43.cjs');
-require('../../../chunk-E3OCRJU6.cjs');
+var chunkRAHSWE5C_cjs = require('../../../chunk-RAHSWE5C.cjs');
+require('../../../chunk-SVO5WPZX.cjs');
 var chunk2RW7K6FN_cjs = require('../../../chunk-2RW7K6FN.cjs');
 require('../../../chunk-MUUQ2WFJ.cjs');
-require('../../../chunk-KNZU4YO5.cjs');
-require('../../../chunk-NFATC6ZF.cjs');
-require('../../../chunk-YTO5BRBD.cjs');
+require('../../../chunk-WQ53UQL4.cjs');
+require('../../../chunk-C5DEO6OI.cjs');
+require('../../../chunk-ZT57WTUJ.cjs');
 require('../../../chunk-VKJ7V7EB.cjs');
-require('../../../chunk-2YGIBOUH.cjs');
-require('../../../chunk-SXSPMRSV.cjs');
+require('../../../chunk-LPVIRJVF.cjs');
+require('../../../chunk-BM6N4KHO.cjs');
 
 
 
 Object.defineProperty(exports, "createOpenAiCompatibleRuntime", {
   enumerable: true,
-  get: function () { return chunkADVZIC43_cjs.createOpenAiCompatibleRuntime; }
+  get: function () { return chunkRAHSWE5C_cjs.createOpenAiCompatibleRuntime; }
 });
 Object.defineProperty(exports, "LruEmbeddingCache", {
   enumerable: true,

package/dist/internal/memory/adapters/index.js

@@ -1,12 +1,12 @@
-export { createOpenAiCompatibleRuntime } from '../../../chunk-EFXJ5C7X.js';
-import '../../../chunk-OZXPA3ME.js';
+export { createOpenAiCompatibleRuntime } from '../../../chunk-KSWHTR54.js';
+import '../../../chunk-FFM3SJTQ.js';
 export { LruEmbeddingCache, globalEmbeddingCache } from '../../../chunk-OXNYIMZZ.js';
 import '../../../chunk-FD2UT76F.js';
-import '../../../chunk-ITQ4NO4P.js';
-import '../../../chunk-ZSJPRPN7.js';
-import '../../../chunk-XWCTBGYK.js';
+import '../../../chunk-3WVMJY7F.js';
+import '../../../chunk-R5YZACGK.js';
+import '../../../chunk-SK4QLUBK.js';
 import '../../../chunk-RIAM53CP.js';
-import '../../../chunk-HI4ZW62S.js';
-import '../../../chunk-4X3SBHPK.js';
+import '../../../chunk-U4UJHOSH.js';
+import '../../../chunk-5F5NWKPN.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/internal/persistence/atomic-write.d.cts

@@ -1,3 +1,27 @@
+/**
+ * M107 — temp-file creation control, shared by `replaceFileAtomic`,
+ * `atomicWriteJson` e `atomicWriteText`.
+ *
+ * Both fields are OPTIONAL and the default is byte-identical to the behavior
+ * before M107. See `replaceFileAtomic` for why the mode reassertion
+ * is conditional.
+ *
+ */
+export interface AtomicWriteFileOptions {
+    /**
+     * Permission bits of the created file. Default: `0o600`, the previous fixed
+     * literal — filtered by the `umask`, as it always was. When provided, the mode is
+     * reasserted on the descriptor, so the `umask` cannot silently
+     * clearing bits the caller asked for.
+     */
+    mode?: number;
+    /**
+     * Create the temp file with `wx` (exclusive creation) instead of `w`. Default:
+     * `false` — the previous flag. With `true`, a pre-existing temp file becomes
+     * `EEXIST` instead of being truncated.
+     */
+    exclusive?: boolean;
+}
 /**
  * U-9 — the file a leftover temp was replacing, or `undefined` if this is not one of ours.
  *
@@ -12,3 +36,72 @@
  * deleting them.
  */
 export declare function atomicWriteTempTarget(name: string): string | undefined;
+/**
+ * Atomic file replacement: write content to a per-call unique tmp path,
+ * fsync, then rename over the target. Crash mid-write leaves either the old
+ * file intact or the new file complete — never a half-written file.
+ *
+ * The tmp suffix is `<pid>.<rand>.tmp` so parallel processes (and concurrent
+ * burst writes within one process) never collide on the same tmp path — a
+ * race that would manifest as `ENOENT` on `rename` after the rival process
+ * already moved its tmp into place.
+ *
+ * Mirrors peer-project's `replaceFileAtomic` from
+ * `reference/peer-project/packages/memory-host-sdk/src/host/fs-utils.ts` with
+ * the multi-writer robustness fix.
+ *
+ * ## M107 — `options` is optional, and the default is byte-identical
+ *
+ * The third parameter is additive: every earlier caller still compiles and
+ * writing exactly the same bytes, with the same mode, to the same path.
+ *
+ * The mode reassertion (`handle.chmod`) is **conditional on `mode !== undefined`**,
+ * and that is not cosmetic. `open`'s mode argument is filtered by the `umask`,
+ * which only CLEARS bits — measured in this codebase before the change:
+ *
+ * ```
+ * umask 0o002  ->  0o600      umask 0o022  ->  0o600      umask 0o200  ->  0o400
+ * ```
+ *
+ * An unconditional `chmod` would take the third case from `0o400` to `0o600` — a
+ * an on-disk change for every caller that asked for nothing, including external
+ * consumers. When the caller DOES ask for a mode, however, letting the `umask` decide
+ * silently is the defect this parameter exists to close; hence the reassertion.
+ *
+ * It goes on the DESCRIPTOR, before the `rename`, never after: chmod-ing the final
+ * final one would leave a window where it carries the `umask`'s mode — a known anti-pattern.
+ * The chosen shape passes the mode as an `open` argument.
+ *
+ */
+export declare function replaceFileAtomic(filePath: string, content: string, options?: AtomicWriteFileOptions): Promise<void>;
+/**
+ * Options for `atomicWriteJson`.
+ *
+ */
+export interface AtomicWriteJsonOptions extends AtomicWriteFileOptions {
+    /** Indent passed to `JSON.stringify`. Default: 2. */
+    indent?: number;
+    /** Whether to append a trailing newline (POSIX convention). Default: true. */
+    trailingNewline?: boolean;
+}
+/**
+ * Typed JSON atomic write helper.
+ *
+ * Serializes `data` to JSON, then delegates to `replaceFileAtomic`. The
+ * parent directory is auto-created (recursive `mkdir`) to make this helper
+ * safe for callers who haven't ensured the directory exists (EC-4 in the
+ * persistence-state-hardening plan).
+ *
+ * Throws `TypeError` on circular refs or `undefined` data (propagates from
+ * `JSON.stringify`).
+ *
+ */
+export declare function atomicWriteJson<T>(filePath: string, data: T, options?: AtomicWriteJsonOptions): Promise<void>;
+/**
+ * Atomic text write. Same crash-safety guarantees as `replaceFileAtomic` +
+ * auto-mkdir of the parent directory. Used by `theokit-migrate-config`
+ * (T4.1, EC-2 MUST FIX) so a crash mid-migration leaves previous MD files
+ * intact rather than corrupting them.
+ *
+ */
+export declare function atomicWriteText(filePath: string, content: string): Promise<void>;

package/dist/internal/persistence/atomic-write.d.ts

@@ -1,3 +1,27 @@
+/**
+ * M107 — temp-file creation control, shared by `replaceFileAtomic`,
+ * `atomicWriteJson` e `atomicWriteText`.
+ *
+ * Both fields are OPTIONAL and the default is byte-identical to the behavior
+ * before M107. See `replaceFileAtomic` for why the mode reassertion
+ * is conditional.
+ *
+ */
+export interface AtomicWriteFileOptions {
+    /**
+     * Permission bits of the created file. Default: `0o600`, the previous fixed
+     * literal — filtered by the `umask`, as it always was. When provided, the mode is
+     * reasserted on the descriptor, so the `umask` cannot silently
+     * clearing bits the caller asked for.
+     */
+    mode?: number;
+    /**
+     * Create the temp file with `wx` (exclusive creation) instead of `w`. Default:
+     * `false` — the previous flag. With `true`, a pre-existing temp file becomes
+     * `EEXIST` instead of being truncated.
+     */
+    exclusive?: boolean;
+}
 /**
  * U-9 — the file a leftover temp was replacing, or `undefined` if this is not one of ours.
  *
@@ -12,3 +36,72 @@
  * deleting them.
  */
 export declare function atomicWriteTempTarget(name: string): string | undefined;
+/**
+ * Atomic file replacement: write content to a per-call unique tmp path,
+ * fsync, then rename over the target. Crash mid-write leaves either the old
+ * file intact or the new file complete — never a half-written file.
+ *
+ * The tmp suffix is `<pid>.<rand>.tmp` so parallel processes (and concurrent
+ * burst writes within one process) never collide on the same tmp path — a
+ * race that would manifest as `ENOENT` on `rename` after the rival process
+ * already moved its tmp into place.
+ *
+ * Mirrors peer-project's `replaceFileAtomic` from
+ * `reference/peer-project/packages/memory-host-sdk/src/host/fs-utils.ts` with
+ * the multi-writer robustness fix.
+ *
+ * ## M107 — `options` is optional, and the default is byte-identical
+ *
+ * The third parameter is additive: every earlier caller still compiles and
+ * writing exactly the same bytes, with the same mode, to the same path.
+ *
+ * The mode reassertion (`handle.chmod`) is **conditional on `mode !== undefined`**,
+ * and that is not cosmetic. `open`'s mode argument is filtered by the `umask`,
+ * which only CLEARS bits — measured in this codebase before the change:
+ *
+ * ```
+ * umask 0o002  ->  0o600      umask 0o022  ->  0o600      umask 0o200  ->  0o400
+ * ```
+ *
+ * An unconditional `chmod` would take the third case from `0o400` to `0o600` — a
+ * an on-disk change for every caller that asked for nothing, including external
+ * consumers. When the caller DOES ask for a mode, however, letting the `umask` decide
+ * silently is the defect this parameter exists to close; hence the reassertion.
+ *
+ * It goes on the DESCRIPTOR, before the `rename`, never after: chmod-ing the final
+ * final one would leave a window where it carries the `umask`'s mode — a known anti-pattern.
+ * The chosen shape passes the mode as an `open` argument.
+ *
+ */
+export declare function replaceFileAtomic(filePath: string, content: string, options?: AtomicWriteFileOptions): Promise<void>;
+/**
+ * Options for `atomicWriteJson`.
+ *
+ */
+export interface AtomicWriteJsonOptions extends AtomicWriteFileOptions {
+    /** Indent passed to `JSON.stringify`. Default: 2. */
+    indent?: number;
+    /** Whether to append a trailing newline (POSIX convention). Default: true. */
+    trailingNewline?: boolean;
+}
+/**
+ * Typed JSON atomic write helper.
+ *
+ * Serializes `data` to JSON, then delegates to `replaceFileAtomic`. The
+ * parent directory is auto-created (recursive `mkdir`) to make this helper
+ * safe for callers who haven't ensured the directory exists (EC-4 in the
+ * persistence-state-hardening plan).
+ *
+ * Throws `TypeError` on circular refs or `undefined` data (propagates from
+ * `JSON.stringify`).
+ *
+ */
+export declare function atomicWriteJson<T>(filePath: string, data: T, options?: AtomicWriteJsonOptions): Promise<void>;
+/**
+ * Atomic text write. Same crash-safety guarantees as `replaceFileAtomic` +
+ * auto-mkdir of the parent directory. Used by `theokit-migrate-config`
+ * (T4.1, EC-2 MUST FIX) so a crash mid-migration leaves previous MD files
+ * intact rather than corrupting them.
+ *
+ */
+export declare function atomicWriteText(filePath: string, content: string): Promise<void>;

package/dist/internal/persistence/file-lock.d.cts

@@ -11,4 +11,16 @@
  *
  * @internal
  */
-export {};
+/**
+ * Run `fn` while holding an OS-level cross-process lock on `path`.
+ *
+ * If `proper-lockfile` is installed, uses it with a companion `<path>.lock`
+ * file (`realpath: false`, so target file does NOT need to exist yet).
+ * Otherwise falls back to in-process `withCwdMutex` and prints a one-shot
+ * stderr warning telling the user to install `proper-lockfile` for
+ * cross-process safety.
+ *
+ * The lock is released even when `fn` throws.
+ *
+ */
+export declare function withFileLock<T>(path: string, fn: () => Promise<T>, options?: FileLockOptions): Promise<T>;

package/dist/internal/persistence/file-lock.d.ts

@@ -11,4 +11,16 @@
  *
  * @internal
  */
-export {};
+/**
+ * Run `fn` while holding an OS-level cross-process lock on `path`.
+ *
+ * If `proper-lockfile` is installed, uses it with a companion `<path>.lock`
+ * file (`realpath: false`, so target file does NOT need to exist yet).
+ * Otherwise falls back to in-process `withCwdMutex` and prints a one-shot
+ * stderr warning telling the user to install `proper-lockfile` for
+ * cross-process safety.
+ *
+ * The lock is released even when `fn` throws.
+ *
+ */
+export declare function withFileLock<T>(path: string, fn: () => Promise<T>, options?: FileLockOptions): Promise<T>;

package/dist/internal/persistence/fts5-sanitize.d.cts

@@ -13,4 +13,12 @@
  *
  * @internal
  */
-export {};
+/**
+ * Six-step FTS5 query sanitizer. Returns a query string safe for passing
+ * to `WHERE <fts5_table> MATCH ?` as a parameter.
+ *
+ * Returns empty string when the input contains only specials (caller MUST
+ * short-circuit to avoid runtime SQL error — EC-3).
+ *
+ */
+export declare function sanitizeFts5Query(query: string): string;

package/dist/internal/persistence/fts5-sanitize.d.ts

@@ -13,4 +13,12 @@
  *
  * @internal
  */
-export {};
+/**
+ * Six-step FTS5 query sanitizer. Returns a query string safe for passing
+ * to `WHERE <fts5_table> MATCH ?` as a parameter.
+ *
+ * Returns empty string when the input contains only specials (caller MUST
+ * short-circuit to avoid runtime SQL error — EC-3).
+ *
+ */
+export declare function sanitizeFts5Query(query: string): string;

package/dist/internal/persistence/index.cjs

@@ -1,13 +1,13 @@
 'use strict';
 
 var chunkPNVDQL5Y_cjs = require('../../chunk-PNVDQL5Y.cjs');
-var chunkCZHPR2G7_cjs = require('../../chunk-CZHPR2G7.cjs');
-var chunkSDJYLCJK_cjs = require('../../chunk-SDJYLCJK.cjs');
-var chunkQLAWEGTZ_cjs = require('../../chunk-QLAWEGTZ.cjs');
+var chunkHAWE74GQ_cjs = require('../../chunk-HAWE74GQ.cjs');
+var chunkTTJ54H3E_cjs = require('../../chunk-TTJ54H3E.cjs');
+var chunkJIQRXKTA_cjs = require('../../chunk-JIQRXKTA.cjs');
 var chunkYLQQX5W2_cjs = require('../../chunk-YLQQX5W2.cjs');
-var chunk2CFEET3Y_cjs = require('../../chunk-2CFEET3Y.cjs');
-require('../../chunk-2YGIBOUH.cjs');
-require('../../chunk-SXSPMRSV.cjs');
+var chunkC4H6PB5J_cjs = require('../../chunk-C4H6PB5J.cjs');
+require('../../chunk-LPVIRJVF.cjs');
+require('../../chunk-BM6N4KHO.cjs');
 var promises = require('fs/promises');
 
 async function createExclusive(path, data, options) {
@@ -41,67 +41,67 @@ Object.defineProperty(exports, "PersistenceSchema", {
 });
 Object.defineProperty(exports, "displayTheokitHome", {
   enumerable: true,
-  get: function () { return chunkCZHPR2G7_cjs.displayTheokitHome; }
+  get: function () { return chunkHAWE74GQ_cjs.displayTheokitHome; }
 });
 Object.defineProperty(exports, "getProfilesRoot", {
   enumerable: true,
-  get: function () { return chunkCZHPR2G7_cjs.getProfilesRoot; }
+  get: function () { return chunkHAWE74GQ_cjs.getProfilesRoot; }
 });
 Object.defineProperty(exports, "getTheokitHome", {
   enumerable: true,
-  get: function () { return chunkCZHPR2G7_cjs.getTheokitHome; }
+  get: function () { return chunkHAWE74GQ_cjs.getTheokitHome; }
 });
 Object.defineProperty(exports, "migrateSchema", {
   enumerable: true,
-  get: function () { return chunkCZHPR2G7_cjs.migrateSchema; }
+  get: function () { return chunkHAWE74GQ_cjs.migrateSchema; }
 });
 Object.defineProperty(exports, "readVersionedJson", {
   enumerable: true,
-  get: function () { return chunkCZHPR2G7_cjs.readVersionedJson; }
+  get: function () { return chunkHAWE74GQ_cjs.readVersionedJson; }
 });
 Object.defineProperty(exports, "writeVersionedJson", {
   enumerable: true,
-  get: function () { return chunkCZHPR2G7_cjs.writeVersionedJson; }
+  get: function () { return chunkHAWE74GQ_cjs.writeVersionedJson; }
 });
 Object.defineProperty(exports, "JsonlParseError", {
   enumerable: true,
-  get: function () { return chunkSDJYLCJK_cjs.JsonlParseError; }
+  get: function () { return chunkTTJ54H3E_cjs.JsonlParseError; }
 });
 Object.defineProperty(exports, "appendJsonl", {
   enumerable: true,
-  get: function () { return chunkSDJYLCJK_cjs.appendJsonl; }
+  get: function () { return chunkTTJ54H3E_cjs.appendJsonl; }
 });
 Object.defineProperty(exports, "loadJsonl", {
   enumerable: true,
-  get: function () { return chunkSDJYLCJK_cjs.loadJsonl; }
+  get: function () { return chunkTTJ54H3E_cjs.loadJsonl; }
 });
 Object.defineProperty(exports, "readJsonlIds", {
   enumerable: true,
-  get: function () { return chunkSDJYLCJK_cjs.readJsonlIds; }
+  get: function () { return chunkTTJ54H3E_cjs.readJsonlIds; }
 });
 Object.defineProperty(exports, "withFileLock", {
   enumerable: true,
-  get: function () { return chunkSDJYLCJK_cjs.withFileLock; }
+  get: function () { return chunkTTJ54H3E_cjs.withFileLock; }
 });
 Object.defineProperty(exports, "applyWalWithFallback", {
   enumerable: true,
-  get: function () { return chunkQLAWEGTZ_cjs.applyWalWithFallback; }
+  get: function () { return chunkJIQRXKTA_cjs.applyWalWithFallback; }
 });
 Object.defineProperty(exports, "containsCjk", {
   enumerable: true,
-  get: function () { return chunkQLAWEGTZ_cjs.containsCjk; }
+  get: function () { return chunkJIQRXKTA_cjs.containsCjk; }
 });
 Object.defineProperty(exports, "isCorruptionError", {
   enumerable: true,
-  get: function () { return chunkQLAWEGTZ_cjs.isCorruptionError; }
+  get: function () { return chunkJIQRXKTA_cjs.isCorruptionError; }
 });
 Object.defineProperty(exports, "openSqliteResilient", {
   enumerable: true,
-  get: function () { return chunkQLAWEGTZ_cjs.openSqliteResilient; }
+  get: function () { return chunkJIQRXKTA_cjs.openSqliteResilient; }
 });
 Object.defineProperty(exports, "sanitizeFts5Query", {
   enumerable: true,
-  get: function () { return chunkQLAWEGTZ_cjs.sanitizeFts5Query; }
+  get: function () { return chunkJIQRXKTA_cjs.sanitizeFts5Query; }
 });
 Object.defineProperty(exports, "withCwdMutex", {
   enumerable: true,
@@ -109,15 +109,15 @@ Object.defineProperty(exports, "withCwdMutex", {
 });
 Object.defineProperty(exports, "atomicWriteJson", {
   enumerable: true,
-  get: function () { return chunk2CFEET3Y_cjs.atomicWriteJson; }
+  get: function () { return chunkC4H6PB5J_cjs.atomicWriteJson; }
 });
 Object.defineProperty(exports, "atomicWriteText", {
   enumerable: true,
-  get: function () { return chunk2CFEET3Y_cjs.atomicWriteText; }
+  get: function () { return chunkC4H6PB5J_cjs.atomicWriteText; }
 });
 Object.defineProperty(exports, "replaceFileAtomic", {
   enumerable: true,
-  get: function () { return chunk2CFEET3Y_cjs.replaceFileAtomic; }
+  get: function () { return chunkC4H6PB5J_cjs.replaceFileAtomic; }
 });
 exports.casUpdate = casUpdate;
 exports.createExclusive = createExclusive;

package/dist/internal/persistence/index.js

@@ -1,11 +1,11 @@
 export { PersistenceSchema } from '../../chunk-CAH3G4IS.js';
-export { displayTheokitHome, getProfilesRoot, getTheokitHome, migrateSchema, readVersionedJson, writeVersionedJson } from '../../chunk-L7EGRCKJ.js';
-export { JsonlParseError, appendJsonl, loadJsonl, readJsonlIds, withFileLock } from '../../chunk-NACDF3PK.js';
-export { applyWalWithFallback, containsCjk, isCorruptionError, openSqliteResilient, sanitizeFts5Query } from '../../chunk-W4FV7JBH.js';
+export { displayTheokitHome, getProfilesRoot, getTheokitHome, migrateSchema, readVersionedJson, writeVersionedJson } from '../../chunk-PBZ7HMBP.js';
+export { JsonlParseError, appendJsonl, loadJsonl, readJsonlIds, withFileLock } from '../../chunk-NZL4BNFQ.js';
+export { applyWalWithFallback, containsCjk, isCorruptionError, openSqliteResilient, sanitizeFts5Query } from '../../chunk-MSFLYJDY.js';
 export { withCwdMutex } from '../../chunk-2XLKLVVR.js';
-export { atomicWriteJson, atomicWriteText, replaceFileAtomic } from '../../chunk-CHVSMEKM.js';
-import '../../chunk-HI4ZW62S.js';
-import '../../chunk-4X3SBHPK.js';
+export { atomicWriteJson, atomicWriteText, replaceFileAtomic } from '../../chunk-6AZDM6LK.js';
+import '../../chunk-U4UJHOSH.js';
+import '../../chunk-5F5NWKPN.js';
 import { open } from 'fs/promises';
 
 async function createExclusive(path, data, options) {

package/dist/internal/persistence/session-dir.d.cts

@@ -0,0 +1 @@
+export {};

package/dist/internal/persistence/session-dir.d.ts

@@ -0,0 +1 @@
+export {};