@theokit/sdk 4.53.0 → 4.53.1

package/dist/subagents-loader.js

@@ -1,7 +1,7 @@
-import { loadSubagents } from './chunk-XGYI2KQH.js';
-import './chunk-5XXUYU3M.js';
-import { ConfigurationError } from './chunk-HI4ZW62S.js';
-import './chunk-4X3SBHPK.js';
+import { loadSubagents } from './chunk-UFIXH26P.js';
+import './chunk-DGOG5NXR.js';
+import { ConfigurationError } from './chunk-U4UJHOSH.js';
+import './chunk-5F5NWKPN.js';
 
 // src/subagents-loader.ts
 var ACCEPTED_SOURCES = ["project"];

package/dist/subscription/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunk2YGIBOUH_cjs = require('../chunk-2YGIBOUH.cjs');
-require('../chunk-SXSPMRSV.cjs');
+var chunkLPVIRJVF_cjs = require('../chunk-LPVIRJVF.cjs');
+require('../chunk-BM6N4KHO.cjs');
 
 // src/subscription/define-subscription.ts
 function defineSubscription(opts) {
@@ -138,7 +138,7 @@ function tracked(id, payload) {
   }
   return [id, payload];
 }
-var SubscriptionError = class extends chunk2YGIBOUH_cjs.TheokitAgentError {
+var SubscriptionError = class extends chunkLPVIRJVF_cjs.TheokitAgentError {
   name = "SubscriptionError";
   constructor(message, options = {}) {
     super(message, { ...options, isRetryable: false });

package/dist/subscription/index.js

@@ -1,5 +1,5 @@
-import { TheokitAgentError } from '../chunk-HI4ZW62S.js';
-import '../chunk-4X3SBHPK.js';
+import { TheokitAgentError } from '../chunk-U4UJHOSH.js';
+import '../chunk-5F5NWKPN.js';
 
 // src/subscription/define-subscription.ts
 function defineSubscription(opts) {

package/dist/task-store.cjs

@@ -1,23 +1,23 @@
 'use strict';
 
-var chunk7HQVDLFI_cjs = require('./chunk-7HQVDLFI.cjs');
-require('./chunk-2CFEET3Y.cjs');
-require('./chunk-2YGIBOUH.cjs');
-require('./chunk-SXSPMRSV.cjs');
+var chunkVGPXHHF3_cjs = require('./chunk-VGPXHHF3.cjs');
+require('./chunk-C4H6PB5J.cjs');
+require('./chunk-LPVIRJVF.cjs');
+require('./chunk-BM6N4KHO.cjs');
 
 
 
 Object.defineProperty(exports, "InMemoryTaskStore", {
   enumerable: true,
-  get: function () { return chunk7HQVDLFI_cjs.InMemoryTaskStore; }
+  get: function () { return chunkVGPXHHF3_cjs.InMemoryTaskStore; }
 });
 Object.defineProperty(exports, "JsonFileTaskStore", {
   enumerable: true,
-  get: function () { return chunk7HQVDLFI_cjs.JsonFileTaskStore; }
+  get: function () { return chunkVGPXHHF3_cjs.JsonFileTaskStore; }
 });
 Object.defineProperty(exports, "getTaskStoreFor", {
   enumerable: true,
-  get: function () { return chunk7HQVDLFI_cjs.getTaskStoreFor; }
+  get: function () { return chunkVGPXHHF3_cjs.getTaskStoreFor; }
 });
 //# sourceMappingURL=task-store.cjs.map
 //# sourceMappingURL=task-store.cjs.map

package/dist/task-store.js

@@ -1,6 +1,6 @@
-export { InMemoryTaskStore, JsonFileTaskStore, getTaskStoreFor } from './chunk-JJZ4NIAG.js';
-import './chunk-CHVSMEKM.js';
-import './chunk-HI4ZW62S.js';
-import './chunk-4X3SBHPK.js';
+export { InMemoryTaskStore, JsonFileTaskStore, getTaskStoreFor } from './chunk-V26QVGUG.js';
+import './chunk-6AZDM6LK.js';
+import './chunk-U4UJHOSH.js';
+import './chunk-5F5NWKPN.js';
 //# sourceMappingURL=task-store.js.map
 //# sourceMappingURL=task-store.js.map

package/dist/types/agent.d.ts

@@ -27,9 +27,25 @@ export interface LocalOptions {
         enabled: boolean;
     };
     /**
-     * SE40 — base directory for the native Claude-shaped session transcript
-     * (`<baseDir>/projects/<encoded-cwd>/<agentId>.jsonl`). Default `~/.theokit`.
+     * Directory for the native Claude-shaped session transcript
+     * (`<sessionDir>/projects/<encoded-cwd>/<agentId>.jsonl`). Default `~/.theokit`.
      * Set to `~/.claude` to write sessions the Claude Code CLI can `--continue`.
+     *
+     * **This is not the working directory** — that is {@link LocalOptions.cwd},
+     * four lines above. Only transcripts are written here.
+     *
+     * Introduced in #301 as the unambiguous name for what `baseDir` always meant.
+     */
+    sessionDir?: string;
+    /**
+     * @deprecated Renamed to {@link LocalOptions.sessionDir} (#301). Still honoured,
+     * and `sessionDir` wins when both are set.
+     *
+     * "Base directory" reads as the directory the agent works in, sitting in an
+     * interface whose `cwd` is the one that actually means that. Setting it to
+     * `"./"` — which is what the name invites — runs without error and writes
+     * `./projects/<encoded-cwd>/<agentId>.jsonl` into the caller's repository root.
+     * Nothing warns, because nothing is wrong from the code's point of view.
      */
     baseDir?: string;
     /**
@@ -337,10 +353,7 @@ export interface AgentOptions {
      *
      * `'run'` (DEFAULT, and the historical behaviour) spawns a client per `send` and drops it when the
      * run ends. `'session'` pools clients per `(agentId, server, config)` and keeps them across turns,
-     * which is what the reference does — Codex holds its MCP runtime in `SessionServices`
-     * (`codex-rs/core/src/state/service.rs:51-58`; theokit#155 corrected the earlier
-     * `core/src/state/service.rs:116`, which named a parameter of `install_mcp_runtime`, not the
-     * owning field). Measured cost of the per-run path: 193 / 138 / 134 ms of spawn + handshake on
+     * which keeps the MCP runtime alive across turns. Measured cost of the per-run path: 193 / 138 / 134 ms of spawn + handshake on
      * every turn.
      *
      * Opt-in rather than default because it changes the FAILURE model: a server that dies mid-session

package/dist/types/provider-profile.d.ts

@@ -27,8 +27,8 @@ export interface ProviderTransformContext {
  * M41 — the one OPTIONAL behavior seam on a provider profile. It lets a provider own its per-request auth:
  * `fetch` is the universal seam (a provider that returns its own fetch fully controls headers + refresh, for
  * every transport that accepts a fetch); `headers` is a convenience merged over `extraHeaders` on transports
- * that carry them (responses_api). This is the CONTRACT-shape adaptation of OpenCode's provider `auth.loader`
- * (MIT © 2025 opencode — `packages/core/src/plugin/provider/*.ts`), retargeted to theokit's transport model.
+ * that carry them (responses_api). A provider owns its per-request auth material plus transparent token
+ * refresh, expressed against theokit's transport model.
  * Closes the gap where a `ProviderProfile` could only declare STATIC headers.
  *
  * @public

package/dist/workflow.cjs

@@ -1,100 +1,100 @@
 'use strict';
 
-var chunkZ5U2JGEK_cjs = require('./chunk-Z5U2JGEK.cjs');
-var chunkFBZMSLDC_cjs = require('./chunk-FBZMSLDC.cjs');
+var chunkFOXKFTVZ_cjs = require('./chunk-FOXKFTVZ.cjs');
+var chunkEZ2YEF4F_cjs = require('./chunk-EZ2YEF4F.cjs');
 require('./chunk-PNVDQL5Y.cjs');
 require('./chunk-WJVHMTKB.cjs');
-require('./chunk-2CFEET3Y.cjs');
-require('./chunk-YTO5BRBD.cjs');
+require('./chunk-C4H6PB5J.cjs');
+require('./chunk-ZT57WTUJ.cjs');
 require('./chunk-VKJ7V7EB.cjs');
-require('./chunk-2YGIBOUH.cjs');
-require('./chunk-SXSPMRSV.cjs');
+require('./chunk-LPVIRJVF.cjs');
+require('./chunk-BM6N4KHO.cjs');
 
 
 
 Object.defineProperty(exports, "Workflow", {
   enumerable: true,
-  get: function () { return chunkZ5U2JGEK_cjs.Workflow; }
+  get: function () { return chunkFOXKFTVZ_cjs.Workflow; }
 });
 Object.defineProperty(exports, "WorkflowBuilder", {
   enumerable: true,
-  get: function () { return chunkZ5U2JGEK_cjs.WorkflowBuilder; }
+  get: function () { return chunkFOXKFTVZ_cjs.WorkflowBuilder; }
 });
 Object.defineProperty(exports, "WorkflowToolError", {
   enumerable: true,
-  get: function () { return chunkZ5U2JGEK_cjs.WorkflowToolError; }
+  get: function () { return chunkFOXKFTVZ_cjs.WorkflowToolError; }
 });
 Object.defineProperty(exports, "agentStep", {
   enumerable: true,
-  get: function () { return chunkZ5U2JGEK_cjs.agentStep; }
+  get: function () { return chunkFOXKFTVZ_cjs.agentStep; }
 });
 Object.defineProperty(exports, "cloneWorkflow", {
   enumerable: true,
-  get: function () { return chunkZ5U2JGEK_cjs.cloneWorkflow; }
+  get: function () { return chunkFOXKFTVZ_cjs.cloneWorkflow; }
 });
 Object.defineProperty(exports, "fn", {
   enumerable: true,
-  get: function () { return chunkZ5U2JGEK_cjs.fn; }
+  get: function () { return chunkFOXKFTVZ_cjs.fn; }
 });
 Object.defineProperty(exports, "workflowAsTool", {
   enumerable: true,
-  get: function () { return chunkZ5U2JGEK_cjs.workflowAsTool; }
+  get: function () { return chunkFOXKFTVZ_cjs.workflowAsTool; }
 });
 Object.defineProperty(exports, "workflowStep", {
   enumerable: true,
-  get: function () { return chunkZ5U2JGEK_cjs.workflowStep; }
+  get: function () { return chunkFOXKFTVZ_cjs.workflowStep; }
 });
 Object.defineProperty(exports, "WorkflowAlreadyRunningError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowAlreadyRunningError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowAlreadyRunningError; }
 });
 Object.defineProperty(exports, "WorkflowCompensateNotImplementedError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowCompensateNotImplementedError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowCompensateNotImplementedError; }
 });
 Object.defineProperty(exports, "WorkflowDuplicateStepIdError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowDuplicateStepIdError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowDuplicateStepIdError; }
 });
 Object.defineProperty(exports, "WorkflowInputError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowInputError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowInputError; }
 });
 Object.defineProperty(exports, "WorkflowMaxIterationsExceededError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowMaxIterationsExceededError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowMaxIterationsExceededError; }
 });
 Object.defineProperty(exports, "WorkflowNestedError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowNestedError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowNestedError; }
 });
 Object.defineProperty(exports, "WorkflowNotSerializableError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowNotSerializableError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowNotSerializableError; }
 });
 Object.defineProperty(exports, "WorkflowOutputError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowOutputError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowOutputError; }
 });
 Object.defineProperty(exports, "WorkflowParallelError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowParallelError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowParallelError; }
 });
 Object.defineProperty(exports, "WorkflowResumeStepNotFoundError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowResumeStepNotFoundError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowResumeStepNotFoundError; }
 });
 Object.defineProperty(exports, "WorkflowSnapshotNotFoundError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowSnapshotNotFoundError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowSnapshotNotFoundError; }
 });
 Object.defineProperty(exports, "WorkflowStateError", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.WorkflowStateError; }
+  get: function () { return chunkEZ2YEF4F_cjs.WorkflowStateError; }
 });
 Object.defineProperty(exports, "__resetSnapshotStoresForTests", {
   enumerable: true,
-  get: function () { return chunkFBZMSLDC_cjs.__resetSnapshotStoresForTests; }
+  get: function () { return chunkEZ2YEF4F_cjs.__resetSnapshotStoresForTests; }
 });
 //# sourceMappingURL=workflow.cjs.map
 //# sourceMappingURL=workflow.cjs.map

package/dist/workflow.js

@@ -1,11 +1,11 @@
-export { Workflow, WorkflowBuilder, WorkflowToolError, agentStep, cloneWorkflow, fn, workflowAsTool, workflowStep } from './chunk-6PTCKXD3.js';
-export { WorkflowAlreadyRunningError, WorkflowCompensateNotImplementedError, WorkflowDuplicateStepIdError, WorkflowInputError, WorkflowMaxIterationsExceededError, WorkflowNestedError, WorkflowNotSerializableError, WorkflowOutputError, WorkflowParallelError, WorkflowResumeStepNotFoundError, WorkflowSnapshotNotFoundError, WorkflowStateError, __resetSnapshotStoresForTests } from './chunk-KZBB4YKU.js';
+export { Workflow, WorkflowBuilder, WorkflowToolError, agentStep, cloneWorkflow, fn, workflowAsTool, workflowStep } from './chunk-LD4MOBFX.js';
+export { WorkflowAlreadyRunningError, WorkflowCompensateNotImplementedError, WorkflowDuplicateStepIdError, WorkflowInputError, WorkflowMaxIterationsExceededError, WorkflowNestedError, WorkflowNotSerializableError, WorkflowOutputError, WorkflowParallelError, WorkflowResumeStepNotFoundError, WorkflowSnapshotNotFoundError, WorkflowStateError, __resetSnapshotStoresForTests } from './chunk-BFYGJGC5.js';
 import './chunk-CAH3G4IS.js';
 import './chunk-4VPXM6UU.js';
-import './chunk-CHVSMEKM.js';
-import './chunk-XWCTBGYK.js';
+import './chunk-6AZDM6LK.js';
+import './chunk-SK4QLUBK.js';
 import './chunk-RIAM53CP.js';
-import './chunk-HI4ZW62S.js';
-import './chunk-4X3SBHPK.js';
+import './chunk-U4UJHOSH.js';
+import './chunk-5F5NWKPN.js';
 //# sourceMappingURL=workflow.js.map
 //# sourceMappingURL=workflow.js.map

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@theokit/sdk",
-  "version": "4.53.0",
-  "description": "TypeScript SDK for the Theo agent harness — same surface, local or cloud.",
+  "version": "4.53.1",
+  "description": "TypeScript SDK for the Theo agent harness \u2014 same surface, local or cloud.",
   "license": "Apache-2.0",
-  "homepage": "https://github.com/usetheodev/theokit-sdk#readme",
-  "bugs": "https://github.com/usetheodev/theokit-sdk/issues",
+  "homepage": "https://github.com/usetheokit/theokit-sdk#readme",
+  "bugs": "https://github.com/usetheokit/theokit-sdk/issues",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/usetheodev/theokit-sdk.git",
+    "url": "git+https://github.com/usetheokit/theokit-sdk.git",
     "directory": "packages/sdk"
   },
   "type": "module",
@@ -344,7 +344,6 @@
     "dist",
     "bin",
     "claude-template",
-    "docs",
     "README.md",
     "CHANGELOG.md",
     "LICENSE"
@@ -359,6 +358,17 @@
     "**/agent.js",
     "**/agent.cjs"
   ],
+  "scripts": {
+    "build": "tsup && cp src/internal/providers/provider-catalog.json dist/provider-catalog.json",
+    "test": "vitest run --no-file-parallelism",
+    "test:watch": "vitest",
+    "eval": "vitest run --no-file-parallelism tests/eval/suites",
+    "test:contract": "vitest run --no-file-parallelism tests/theokit-consumer-contract.test.ts",
+    "prepublishOnly": "pnpm build && pnpm test:contract && node ../../tools/check-publish-no-workspace.mjs .",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist",
+    "docs:json": "typedoc --options typedoc.json"
+  },
   "peerDependencies": {
     "@lancedb/lancedb": "^0.30.0",
     "@types/ws": ">=8.0.0",
@@ -415,7 +425,7 @@
   },
   "devDependencies": {
     "@opentelemetry/api": "^1.9.1",
-    "@opentelemetry/sdk-trace-base": "^1.30.1",
+    "@opentelemetry/sdk-trace-base": "^2.10.0",
     "@types/better-sqlite3": "^7.6.13",
     "@types/proper-lockfile": "^4.1.4",
     "@types/ws": "^8.18.0",
@@ -426,15 +436,5 @@
     "typedoc": "^0.28.19",
     "ws": "^8.18.0",
     "zod": "^4.0.0"
-  },
-  "scripts": {
-    "build": "tsup && cp src/internal/providers/provider-catalog.json dist/provider-catalog.json && node scripts/copy-docs.mjs",
-    "test": "vitest run --no-file-parallelism",
-    "test:watch": "vitest",
-    "eval": "vitest run --no-file-parallelism tests/eval/suites",
-    "test:contract": "vitest run --no-file-parallelism tests/theokit-consumer-contract.test.ts",
-    "typecheck": "tsc --noEmit",
-    "clean": "rm -rf dist",
-    "docs:json": "typedoc --options typedoc.json"
   }
-}
+}

package/dist/agent-JX5SBYDE.cjs

@@ -1,59 +0,0 @@
-'use strict';
-
-var chunk2VFZQEDW_cjs = require('./chunk-2VFZQEDW.cjs');
-require('./chunk-2QMK627M.cjs');
-require('./chunk-3YYDHUNH.cjs');
-require('./chunk-BV2MWEMV.cjs');
-require('./chunk-6DCTL32L.cjs');
-require('./chunk-BUUUWQMB.cjs');
-require('./chunk-T5ZWI3MC.cjs');
-require('./chunk-DM6Y5B2G.cjs');
-require('./chunk-RAACTJ7C.cjs');
-require('./chunk-4JBHSLQO.cjs');
-require('./chunk-3R4ZCQAZ.cjs');
-require('./chunk-EQMLJ52C.cjs');
-require('./chunk-BBZYXVLZ.cjs');
-require('./chunk-OKLYRPKL.cjs');
-require('./chunk-CZHPR2G7.cjs');
-require('./chunk-ADVZIC43.cjs');
-require('./chunk-E3OCRJU6.cjs');
-require('./chunk-2RW7K6FN.cjs');
-require('./chunk-MUUQ2WFJ.cjs');
-require('./chunk-6JSIEDKL.cjs');
-require('./chunk-FRITRLZQ.cjs');
-require('./chunk-B4YA6BRS.cjs');
-require('./chunk-NINIJCHU.cjs');
-require('./chunk-L5YO6PWL.cjs');
-require('./chunk-VJ26EKGJ.cjs');
-require('./chunk-KNZU4YO5.cjs');
-require('./chunk-NFATC6ZF.cjs');
-require('./chunk-T6QUCG7L.cjs');
-require('./chunk-ECPL5RV6.cjs');
-require('./chunk-TR4V2LHV.cjs');
-require('./chunk-QLAWEGTZ.cjs');
-require('./chunk-YLQQX5W2.cjs');
-require('./chunk-7HQVDLFI.cjs');
-require('./chunk-WJVHMTKB.cjs');
-require('./chunk-2CFEET3Y.cjs');
-require('./chunk-RTLUZKDL.cjs');
-require('./chunk-AMYY3JHQ.cjs');
-require('./chunk-VYHJZVL5.cjs');
-require('./chunk-BC5EUG7R.cjs');
-require('./chunk-33L2NVTJ.cjs');
-require('./chunk-NUEL6RCZ.cjs');
-require('./chunk-C6Y6CWYD.cjs');
-require('./chunk-FUASIT3E.cjs');
-require('./chunk-YTO5BRBD.cjs');
-require('./chunk-VKJ7V7EB.cjs');
-require('./chunk-44IISBRZ.cjs');
-require('./chunk-2YGIBOUH.cjs');
-require('./chunk-SXSPMRSV.cjs');
-
-
-
-Object.defineProperty(exports, "Agent", {
-  enumerable: true,
-  get: function () { return chunk2VFZQEDW_cjs.Agent; }
-});
-//# sourceMappingURL=agent-JX5SBYDE.cjs.map
-//# sourceMappingURL=agent-JX5SBYDE.cjs.map

package/dist/agent-ZAGG6ZBS.js

@@ -1,50 +0,0 @@
-export { Agent } from './chunk-NZOR3N4E.js';
-import './chunk-I5OTK2RP.js';
-import './chunk-OIBHY6JQ.js';
-import './chunk-2SFBB54R.js';
-import './chunk-7TB5U7RK.js';
-import './chunk-K2BQQ445.js';
-import './chunk-634YVZLU.js';
-import './chunk-2Y5NO2SY.js';
-import './chunk-DHVNJYTO.js';
-import './chunk-4QEC4CCS.js';
-import './chunk-UJ3SXRZZ.js';
-import './chunk-NOS7PTKP.js';
-import './chunk-AM2CNBKE.js';
-import './chunk-34XOCZJO.js';
-import './chunk-L7EGRCKJ.js';
-import './chunk-EFXJ5C7X.js';
-import './chunk-OZXPA3ME.js';
-import './chunk-OXNYIMZZ.js';
-import './chunk-FD2UT76F.js';
-import './chunk-U54XCYG3.js';
-import './chunk-NAF4L3T6.js';
-import './chunk-RP5HQVLD.js';
-import './chunk-6X6ID4MO.js';
-import './chunk-4NAKHID5.js';
-import './chunk-7AD3ZTZL.js';
-import './chunk-ITQ4NO4P.js';
-import './chunk-ZSJPRPN7.js';
-import './chunk-R7TKOQMJ.js';
-import './chunk-C4EU627W.js';
-import './chunk-HTK54K2J.js';
-import './chunk-W4FV7JBH.js';
-import './chunk-2XLKLVVR.js';
-import './chunk-JJZ4NIAG.js';
-import './chunk-4VPXM6UU.js';
-import './chunk-CHVSMEKM.js';
-import './chunk-XGYI2KQH.js';
-import './chunk-KIX45IKP.js';
-import './chunk-X2FR4OIT.js';
-import './chunk-2YWWPCGX.js';
-import './chunk-XRI6DXPZ.js';
-import './chunk-23VZBRDQ.js';
-import './chunk-5NBUH3NO.js';
-import './chunk-BXVSBYGW.js';
-import './chunk-XWCTBGYK.js';
-import './chunk-RIAM53CP.js';
-import './chunk-5XXUYU3M.js';
-import './chunk-HI4ZW62S.js';
-import './chunk-4X3SBHPK.js';
-//# sourceMappingURL=agent-ZAGG6ZBS.js.map
-//# sourceMappingURL=agent-ZAGG6ZBS.js.map

package/dist/agent-session-store-EPX2WQI4.cjs

@@ -1,23 +0,0 @@
-'use strict';
-
-var chunk3R4ZCQAZ_cjs = require('./chunk-3R4ZCQAZ.cjs');
-require('./chunk-ECPL5RV6.cjs');
-require('./chunk-2CFEET3Y.cjs');
-require('./chunk-SXSPMRSV.cjs');
-
-
-
-Object.defineProperty(exports, "appendCompactBoundaryRecord", {
-  enumerable: true,
-  get: function () { return chunk3R4ZCQAZ_cjs.appendCompactBoundaryRecord; }
-});
-Object.defineProperty(exports, "persistTurn", {
-  enumerable: true,
-  get: function () { return chunk3R4ZCQAZ_cjs.persistTurn; }
-});
-Object.defineProperty(exports, "readSessionMessages", {
-  enumerable: true,
-  get: function () { return chunk3R4ZCQAZ_cjs.readSessionMessages; }
-});
-//# sourceMappingURL=agent-session-store-EPX2WQI4.cjs.map
-//# sourceMappingURL=agent-session-store-EPX2WQI4.cjs.map

package/dist/agent-session-store-JMU7ASDB.js

@@ -1,6 +0,0 @@
-export { appendCompactBoundaryRecord, persistTurn, readSessionMessages } from './chunk-UJ3SXRZZ.js';
-import './chunk-C4EU627W.js';
-import './chunk-CHVSMEKM.js';
-import './chunk-4X3SBHPK.js';
-//# sourceMappingURL=agent-session-store-JMU7ASDB.js.map
-//# sourceMappingURL=agent-session-store-JMU7ASDB.js.map

package/dist/chunk-23VZBRDQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/internal/auth/credential-store.ts"],"names":[],"mappings":";;;;;;AAwCO,SAAS,cAAA,CACd,MAAA,EACA,GAAA,GAA0C,EAAC,EACnC;AACR,EAAA,MAAM,QAAA,GAAW,OAAO,UAAA,KAAe,MAAA,GAAY,IAAI,MAAA,CAAO,UAAU,CAAA,EAAG,IAAA,EAAK,GAAI,MAAA;AACpF,EAAA,OAAO,QAAA,KAAa,MAAA,IAAa,QAAA,CAAS,MAAA,GAAS,CAAA,GAC/C,WACA,IAAA,CAAK,MAAA,CAAO,IAAA,EAAM,MAAA,CAAO,OAAO,CAAA;AACtC;AAGO,SAAS,YAAA,CACd,MAAA,EACA,GAAA,GAA0C,EAAC,EACnC;AACR,EAAA,OAAO,KAAK,cAAA,CAAe,MAAA,EAAQ,GAAG,CAAA,EAAG,OAAO,QAAQ,CAAA;AAC1D;AAmBO,IAAM,eAAA,GAAN,cAA8B,mBAAA,CAAoB;AAAA;AAAA;AAAA;AAAA,EAIrC,IAAA,GAAe,iBAAA;AACnC;AAOA,IAAM,aAAA,GAAgB,EACnB,MAAA,CAAO;AAAA,EACN,IAAA,EAAM,CAAA,CAAE,OAAA,CAAQ,KAAK,EAAE,QAAA,EAAS;AAAA,EAChC,UAAU,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACrC,OAAA,EAAS,EAAE,MAAA;AACb,CAAC,EACA,MAAA,EAAO;AAEV,IAAM,eAAA,GAAkB,EACrB,MAAA,CAAO;AAAA,EACN,IAAA,EAAM,CAAA,CAAE,OAAA,CAAQ,OAAO,CAAA;AAAA,EACvB,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACxB,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACzB,OAAA,EAAS,EAAE,MAAA,EAAO;AAAA,EAClB,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACzB,CAAC,EACA,MAAA,EAAO;AAGV,IAAM,aAAa,CAAA,CAAE,KAAA,CAAM,CAAC,eAAA,EAAiB,aAAa,CAAC,CAAA;AAcpD,SAAS,iBAAA,CAAkB,SAAiB,IAAA,EAAoB;AAMrE,EAAA,IAAI,OAAA,CAAQ,aAAa,OAAA,EAAS;AAElC,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,OAAO,CAAA,CAAE,IAAA,GAAO,GAAA;AACzC,EAAA,IAAA,CAAK,OAAA,GAAU,QAAW,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,eAAA;AAAA,MACR,CAAA,EAAG,OAAO,CAAA,kCAAA,EAAqC,OAAA,CAAQ,SAAS,CAAC,CAAC,gFACV,OAAO,CAAA;AAAA,KACjE;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,IAAI,CAAA,CAAE,IAAA,GAAO,GAAA;AACnC,EAAA,IAAA,CAAK,IAAA,GAAO,QAAW,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,eAAA;AAAA,MACR,CAAA,EAAG,IAAI,CAAA,kCAAA,EAAqC,IAAA,CAAK,SAAS,CAAC,CAAC,6DACA,IAAI,CAAA;AAAA,KAClE;AAAA,EACF;AACF;AAMA,SAAS,kBAAA,CAAmB,MAAA,EAAiB,GAAA,EAAc,IAAA,EAA+B;AACxF,EAAA,MAAM,aACJ,OAAO,MAAA,KAAW,YAClB,MAAA,KAAW,IAAA,IACV,OAA8B,IAAA,KAAS,OAAA;AAC1C,EAAA,MAAM,QAAA,GAAW,aAAa,eAAA,CAAgB,SAAA,CAAU,MAAM,CAAA,GAAI,aAAA,CAAc,UAAU,MAAM,CAAA;AAChG,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,CAAC,SAAS,OAAA,EAAS;AACrB,IAAA,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA;AAAA,EACjC,CAAA,MAAA,IAAW,GAAA,YAAe,CAAA,CAAE,QAAA,EAAU;AACpC,IAAA,KAAA,GAAQ,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EACtB;AACA,EAAA,OAAO,IAAI,eAAA;AAAA,IACT,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,KAAA,EAAO,WAAW,MAAA,CAAO,GAAG,CAAC,CAAA,EAAA,EAAK,KAAA,EAAO,IAAA,CAAK,IAAA,CAAK,GAAG,KAAK,MAAM,CAAA,CAAA;AAAA,GAC/E;AACF;AAGA,SAAS,eAAA,CAAgB,KAAa,IAAA,EAAgC;AACpE,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACzB,CAAA,CAAA,MAAQ;AAGN,IAAA,MAAM,IAAI,eAAA;AAAA,MACR,GAAG,IAAI,CAAA,uEAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,IAAI;AACF,IAAA,OAAO,UAAA,CAAW,MAAM,MAAM,CAAA;AAAA,EAChC,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,kBAAA,CAAmB,MAAA,EAAQ,GAAA,EAAK,IAAI,CAAA;AAAA,EAC5C;AACF;AAEO,SAAS,YAAA,CACd,MAAA,EACA,GAAA,GAA0C,EAAC,EACb;AAC9B,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,MAAA,EAAQ,GAAG,CAAA;AAErC,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,YAAA,CAAa,MAAM,MAAM,CAAA;AAAA,EACjC,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAA8B,IAAA,KAAS,QAAA,EAAU,OAAO,MAAA;AAC7D,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,YAAA,EAAe,IAAI,CAAA,EAAA,EAAM,GAAA,CAAc,OAAO,CAAA,CAAE,CAAA;AAAA,EAC5E;AAEA,EAAA,iBAAA,CAAkB,cAAA,CAAe,MAAA,EAAQ,GAAG,CAAA,EAAG,IAAI,CAAA;AACnD,EAAA,OAAO,eAAA,CAAgB,KAAK,IAAI,CAAA;AAClC;AAOO,SAAS,eAAA,CACd,MAAA,EACA,GAAA,GAA0C,EAAC,EACR;AACnC,EAAA,MAAM,MAAA,GAAS,YAAA,CAAa,MAAA,EAAQ,GAAG,CAAA;AACvC,EAAA,OAAO,MAAA,KAAW,MAAA,IAAa,MAAA,CAAO,IAAA,KAAS,UAAU,MAAA,GAAS,MAAA;AACpE;AAGA,SAAS,aACP,CAAA,EAC4B;AAC5B,EAAA,OAAO,MAAA,IAAU,CAAA,IAAK,CAAA,CAAE,IAAA,KAAS,OAAA;AACnC;AAUA,SAAS,kBACP,IAAA,EACyB;AACzB,EAAA,IAAI,YAAA,CAAa,IAAI,CAAA,EAAG;AACtB,IAAA,IAAI,KAAK,MAAA,CAAO,MAAA,KAAW,KAAK,IAAA,CAAK,OAAA,CAAQ,WAAW,CAAA,EAAG;AACzD,MAAA,MAAM,IAAI,eAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,OAAA;AAAA,MACN,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,GAAI,KAAK,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,IAAA,CAAK,UAAA,EAAW,GAAI;AAAC,KACzE;AAAA,EACF;AACA,EAAA,IAAI,OAAO,IAAA,CAAK,MAAA,KAAW,YAAY,IAAA,CAAK,MAAA,CAAO,WAAW,CAAA,EAAG;AAC/D,IAAA,MAAM,IAAI,gBAAgB,oCAAoC,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,OAAA,EAAS,KAAK,MAAA,EAAO;AACzD;AAEO,SAAS,eAAA,CACd,IAAA,EACA,MAAA,EACA,GAAA,GAA0C,EAAC,EACnC;AACR,EAAA,MAAM,OAAA,GAAU,kBAAkB,IAAI,CAAA;AAEtC,EAAA,MAAM,GAAA,GAAM,cAAA,CAAe,MAAA,EAAQ,GAAG,CAAA;AACtC,EAAA,SAAA,CAAU,KAAK,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAC/C,EAAA,SAAA,CAAU,KAAK,GAAK,CAAA;AAEpB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,MAAA,EAAQ,GAAG,CAAA;AAIrC,EAAA,MAAM,GAAA,GAAM,GAAG,IAAI,CAAA,KAAA,EAAQ,YAAY,CAAC,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA,CAAA;AACzD,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,GAAA,EAAK,IAAA,EAAM,GAAK,CAAA;AACpC,IAAA,IAAI;AACF,MAAA,aAAA,CAAc,IAAI,CAAA,EAAG,IAAA,CAAK,UAAU,OAAA,EAAS,IAAA,EAAM,CAAC,CAAC;AAAA,CAAI,CAAA;AACzD,MAAA,SAAA,CAAU,EAAE,CAAA;AAAA,IACd,CAAA,SAAE;AACA,MAAA,SAAA,CAAU,EAAE,CAAA;AAAA,IACd;AACA,IAAA,SAAA,CAAU,KAAK,GAAK,CAAA;AACpB,IAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AAAA,EACtB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI;AACF,MAAA,UAAA,CAAW,GAAG,CAAA;AAAA,IAChB,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,aAAA,EAAgB,IAAI,CAAA,EAAA,EAAM,GAAA,CAAc,OAAO,CAAA,CAAE,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,IAAA;AACT","file":"chunk-23VZBRDQ.js","sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport {\n  chmodSync,\n  closeSync,\n  fsyncSync,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  renameSync,\n  statSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { join } from \"node:path\";\n\nimport { z } from \"zod\";\n\nimport { AuthenticationError } from \"../../errors.js\";\n\n/**\n * M42 — the SDK credential store. Promoted DOWN from agent-builder's hardened `agents/lib/credentials.ts`\n * (M37), generalized from a closed `openrouter|anthropic|openai` union to an open `provider: string` and\n * driven by a caller-supplied {@link CredentialStoreConfig} (no hardcoded `.agent-builder`/`auth.json` /\n * `AGENT_BUILDER_HOME`). The security-critical file mechanics are ported VERBATIM (ADR D3 of the M42 plan):\n * atomic O_EXCL + rename + fsync write, 0700/0600 mode gates, `env` is always a PARAMETER (never an ambient\n * `process.env` read). Contract SHAPE adapted from OpenCode's provider `auth.loader` (MIT © 2025 opencode).\n *\n * The env-precedence + key-prefix-inference + declared-provider rungs of the agent-builder resolver are\n * APP POLICY and deliberately stay UP in the consumer; this module owns only the on-disk store + the\n * `api|oauth` discriminated union. See {@link resolveCredential} (SDK) for the store-read + refresh path.\n *\n * @internal\n */\nimport type {\n  CredentialStoreConfig,\n  StoredCredential,\n  StoredOAuthCredential,\n} from \"./auth-types.js\";\n\n/** The store directory, honoring an optional `homeEnvVar` override. */\nexport function credentialHome(\n  config: CredentialStoreConfig,\n  env: Record<string, string | undefined> = {},\n): string {\n  const override = config.homeEnvVar !== undefined ? env[config.homeEnvVar]?.trim() : undefined;\n  return override !== undefined && override.length > 0\n    ? override\n    : join(config.home, config.dirName);\n}\n\n/** The credential file path inside the (possibly overridden) store directory. */\nexport function authFilePath(\n  config: CredentialStoreConfig,\n  env: Record<string, string | undefined> = {},\n): string {\n  return join(credentialHome(config, env), config.fileName);\n}\n\n/**\n * A credential problem the caller can act on. Never carries the key value.\n *\n * M78 — this used to extend bare `Error`, which quietly disabled classification for the entire auth\n * path: `isTransientError` is `err instanceof TheokitAgentError && err.isRetryable === true`\n * (`errors.ts:443`), so a credential failure could never be judged transient OR permanent. The\n * predicate was not \"forgotten\" downstream — it was unusable there by construction.\n *\n * Extending `AuthenticationError` is ADDITIVE: the class still exists, still reports\n * `name: \"CredentialError\"`, and every existing `instanceof CredentialError` stays true. It only\n * gains ancestors. `AuthenticationError` pins `isRetryable: false`, so gaining the ability to be\n * classified does NOT turn a revoked credential into a retry loop.\n *\n * The single reference does the same thing with one root type: Codex routes every domain failure\n * through `CodexErr` with `is_retryable()` as a method (`protocol/src/error.rs:176`), rather than\n * parallel classes extending the language's `Error`.\n */\nexport class CredentialError extends AuthenticationError {\n  // Field, not an assignment in the constructor: `AuthenticationError.name` is `override readonly`\n  // (`errors.ts:174`), so `this.name = …` does not compile. Caught by `tsc`, not by vitest — the\n  // suite was green with the broken assignment because the transpiler strips the type.\n  override readonly name: string = \"CredentialError\";\n}\n\n/**\n * The on-disk store — a discriminated union on `type` (OpenCode `Info` shape). A legacy file with NO\n * `type` (or `type: 'api'`) is the API-key variant — read unchanged, no migration. The `oauth` variant\n * carries the token pair + expiry.\n */\nconst apiFileSchema = z\n  .object({\n    type: z.literal(\"api\").optional(),\n    provider: z.string().min(1).optional(),\n    api_key: z.string(),\n  })\n  .strict();\n\nconst oauthFileSchema = z\n  .object({\n    type: z.literal(\"oauth\"),\n    provider: z.string().min(1),\n    access: z.string().min(1),\n    refresh: z.string().min(1),\n    expires: z.number(),\n    account_id: z.string().optional(),\n  })\n  .strict();\n\n// oauth first (it requires `type: 'oauth'`); a legacy `{provider?, api_key}` falls through to api.\nconst fileSchema = z.union([oauthFileSchema, apiFileSchema]);\n\n/**\n * Read the credential file. Absent ⇒ `undefined` (the normal case). Present-but-wrong is a typed error\n * naming the file: a malformed credential store must not surface as a raw parse crash. Enforces the\n * 0700 dir / 0600 file mode gates (ported verbatim — a writable dir lets an attacker swap the file for a\n * symlink to their own account).\n */\n/**\n * The 0700-dir / 0600-file mode gates (ported verbatim). The DIRECTORY matters as much as the file:\n * `mkdirSync(mode)` applies only at creation, so a pre-existing store dir keeps whatever mode it had, and a\n * writable dir lets an attacker replace the credential file with a symlink to their own 0600 file — the\n * agent then runs on THEIR account.\n */\nexport function assertSecureModes(dirPath: string, path: string): void {\n  // Windows has no POSIX mode bits. `statSync().mode` there is SYNTHETIC — 0666 for any writable\n  // entry, whatever the ACLs actually say — so `mode & 0o022` was non-zero for every valid store and\n  // this gate refused all of them, which made the credential path unreadable on that platform\n  // rather than protected. A check that cannot observe the real permission system must not report a\n  // verdict about it; ACL enforcement is a separate mechanism and not one this function can fake.\n  if (process.platform === \"win32\") return;\n\n  const dirMode = statSync(dirPath).mode & 0o777;\n  if ((dirMode & 0o022) !== 0) {\n    throw new CredentialError(\n      `${dirPath} is writable by other users (mode ${dirMode.toString(8)}), so the credential file ` +\n        `inside it can be replaced. Fix it with:  chmod 700 ${dirPath}`,\n    );\n  }\n  const mode = statSync(path).mode & 0o777;\n  if ((mode & 0o077) !== 0) {\n    throw new CredentialError(\n      `${path} is readable by other users (mode ${mode.toString(8)}). ` +\n        `A credential file must not be. Fix it with:  chmod 600 ${path}`,\n    );\n  }\n}\n\n/**\n * A `z.union` reports a generic \"Invalid input\" at the root, hiding WHAT is wrong. Pick the sub-schema the\n * file was CLEARLY aiming at (by its `type` discriminant) and surface that schema's specific issue.\n */\nfunction describeUnionError(parsed: unknown, err: unknown, path: string): CredentialError {\n  const looksOAuth =\n    typeof parsed === \"object\" &&\n    parsed !== null &&\n    (parsed as { type?: unknown }).type === \"oauth\";\n  const specific = looksOAuth ? oauthFileSchema.safeParse(parsed) : apiFileSchema.safeParse(parsed);\n  let issue: z.ZodIssue | undefined;\n  if (!specific.success) {\n    issue = specific.error.issues[0];\n  } else if (err instanceof z.ZodError) {\n    issue = err.issues[0];\n  }\n  return new CredentialError(\n    `${path}: ${issue?.message ?? String(err)} [${issue?.path.join(\".\") || \"root\"}]`,\n  );\n}\n\n/** Parse the raw file into the store union, surfacing the SPECIFIC sub-schema issue (not a generic union error). */\nfunction parseStoredFile(raw: string, path: string): StoredCredential {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    // The parser's message embeds a snippet of the INPUT — up to the raw key when a user pastes the bare\n    // key instead of JSON. The position is not actionable anyway, so the expected shape is more useful.\n    throw new CredentialError(\n      `${path} is not valid JSON. Expected:  {\"provider\": \"<name>\", \"api_key\": \"...\"}`,\n    );\n  }\n  try {\n    return fileSchema.parse(parsed);\n  } catch (err) {\n    throw describeUnionError(parsed, err, path);\n  }\n}\n\nexport function readAuthFile(\n  config: CredentialStoreConfig,\n  env: Record<string, string | undefined> = {},\n): StoredCredential | undefined {\n  const path = authFilePath(config, env);\n\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf8\");\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n    throw new CredentialError(`cannot read ${path}: ${(err as Error).message}`);\n  }\n\n  assertSecureModes(credentialHome(config, env), path);\n  return parseStoredFile(raw, path);\n}\n\n/**\n * Read the stored OAuth credential (with its refresh token), or `undefined` when the store is absent or\n * holds an api credential. The oauth engine needs the refresh token, which the resolved bearer does not\n * carry. Enforces the same 0600/0700 gates as every other read.\n */\nexport function readStoredOAuth(\n  config: CredentialStoreConfig,\n  env: Record<string, string | undefined> = {},\n): StoredOAuthCredential | undefined {\n  const stored = readAuthFile(config, env);\n  return stored !== undefined && stored.type === \"oauth\" ? stored : undefined;\n}\n\n/** Narrows a writable credential to the oauth variant. */\nfunction isOAuthWrite(\n  c: { provider: string; apiKey: string } | StoredOAuthCredential,\n): c is StoredOAuthCredential {\n  return \"type\" in c && c.type === \"oauth\";\n}\n\n/**\n * Persist a credential atomically at mode `0600`. Ported VERBATIM (ADR D3): write to a random-named temp\n * file in the same directory with `wx` (O_EXCL), fsync, close, chmod, then `rename` (atomic on POSIX) —\n * so a crash mid-write leaves whatever was there untouched, and a pre-planted symlink cannot capture the\n * key. The api variant persists the unchanged `{provider, api_key}` (back-compat, no `type` key); the\n * oauth variant persists `{type:'oauth', provider, access, refresh, expires, account_id?}`.\n */\n/** Build the on-disk JSON payload for the credential variant, validating non-empty tokens. */\nfunction buildStorePayload(\n  cred: { provider: string; apiKey: string } | StoredOAuthCredential,\n): Record<string, unknown> {\n  if (isOAuthWrite(cred)) {\n    if (cred.access.length === 0 || cred.refresh.length === 0) {\n      throw new CredentialError(\n        \"refusing to write an oauth credential with an empty access/refresh token\",\n      );\n    }\n    return {\n      type: \"oauth\",\n      provider: cred.provider,\n      access: cred.access,\n      refresh: cred.refresh,\n      expires: cred.expires,\n      ...(cred.account_id !== undefined ? { account_id: cred.account_id } : {}),\n    };\n  }\n  if (typeof cred.apiKey !== \"string\" || cred.apiKey.length === 0) {\n    throw new CredentialError(\"refusing to write an empty API key\");\n  }\n  return { provider: cred.provider, api_key: cred.apiKey };\n}\n\nexport function writeCredential(\n  cred: { provider: string; apiKey: string } | StoredOAuthCredential,\n  config: CredentialStoreConfig,\n  env: Record<string, string | undefined> = {},\n): string {\n  const payload = buildStorePayload(cred);\n\n  const dir = credentialHome(config, env);\n  mkdirSync(dir, { recursive: true, mode: 0o700 });\n  chmodSync(dir, 0o700); // unconditional: mkdirSync's mode applies only at creation\n\n  const path = authFilePath(config, env);\n  // RANDOM name + `wx` (O_EXCL): a predictable temp name with a plain write follows a pre-planted SYMLINK,\n  // landing the key in an attacker's file while reporting success. O_EXCL refuses any pre-existing file or\n  // link; the random suffix also removes the pid collision two containers sharing a bind-mounted home make.\n  const tmp = `${path}.tmp-${randomBytes(8).toString(\"hex\")}`;\n  try {\n    const fd = openSync(tmp, \"wx\", 0o600);\n    try {\n      writeFileSync(fd, `${JSON.stringify(payload, null, 2)}\\n`);\n      fsyncSync(fd);\n    } finally {\n      closeSync(fd);\n    }\n    chmodSync(tmp, 0o600); // explicit: the mode argument is subject to umask\n    renameSync(tmp, path);\n  } catch (err) {\n    try {\n      unlinkSync(tmp);\n    } catch {\n      // the temp file may not exist; its absence is not a failure of the write\n    }\n    throw new CredentialError(`cannot write ${path}: ${(err as Error).message}`);\n  }\n  return path;\n}\n"]}

package/dist/chunk-2CFEET3Y.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/internal/persistence/atomic-write.ts"],"names":["statfs","diag","dirname","randomBytes","open","rename","unlink","mkdir"],"mappings":";;;;;;;AAUA,IAAM,gBAAA,uBAAoD,GAAA,CAAI;AAAA,EAC5D,CAAC,OAAQ,KAAK,CAAA;AAAA,EACd,CAAC,OAAQ,KAAK,CAAA;AAAA,EACd,CAAC,YAAY,MAAM,CAAA;AAAA,EACnB,CAAC,YAAY,MAAM;AACrB,CAAC,CAAA;AAUD,SAAS,oBAAoB,SAAA,EAAkC;AAC7D,EAAA,OAAO,gBAAA,CAAiB,GAAA,CAAI,SAAS,CAAA,IAAK,IAAA;AAC5C;AAEA,IAAM,aAAA,uBAAoB,GAAA,EAAY;AAWtC,eAAe,mBAAA,CAAoB,SAAiB,KAAA,EAA8B;AAChF,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,OAAO,CAAA,EAAA,EAAK,KAAK,CAAA,CAAA;AAChC,EAAA,IAAI,aAAA,CAAc,GAAA,CAAI,GAAG,CAAA,EAAG;AAC5B,EAAA,aAAA,CAAc,IAAI,GAAG,CAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,MAAMA,eAAA,CAAO,OAAO,CAAA;AACjC,IAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,IAAA,CAAK,IAAI,CAAA;AAC5C,IAAA,IAAI,WAAW,IAAA,EAAM;AACrB,IAAAC,sBAAA;AAAA,MACE,CAAA,cAAA,EAAiB,KAAK,CAAA,uBAAA,EAA0B,MAAM,QAAQ,OAAO,CAAA;AAAA;AAAA,KAEvE;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAGR;AACF;AAkDA,SAAS,mBAAA,CAAoB,QAAA,EAAkB,GAAA,EAAa,MAAA,EAAwB;AAClF,EAAA,OAAO,GAAG,QAAQ,CAAA,CAAA,EAAI,OAAO,GAAG,CAAC,IAAI,MAAM,CAAA,IAAA,CAAA;AAC7C;AAGA,IAAM,YAAA,GAAe,gCAAA;AAed,SAAS,sBAAsB,IAAA,EAAkC;AACtE,EAAA,OAAO,YAAA,CAAa,IAAA,CAAK,IAAI,CAAA,GAAI,CAAC,CAAA;AACpC;AAyCA,eAAsB,iBAAA,CACpB,QAAA,EACA,OAAA,EACA,OAAA,EACe;AAKf,EAAA,MAAM,mBAAA,CAAoBC,YAAA,CAAQ,QAAQ,CAAA,EAAG,cAAc,CAAA;AAK3D,EAAA,MAAM,MAAA,GAASC,kBAAA,CAAY,CAAC,CAAA,CAAE,SAAS,KAAK,CAAA;AAC5C,EAAA,MAAM,GAAA,GAAM,mBAAA,CAAoB,QAAA,EAAU,OAAA,CAAQ,KAAK,MAAM,CAAA;AAO7D,EAAA,MAAM,MAAA,GAAS,MAAMC,aAAA,CAAK,GAAA,EAAK,OAAA,EAAS,SAAA,KAAc,IAAA,GAAO,IAAA,GAAO,GAAA,EAAK,OAAA,EAAS,IAAA,IAAQ,GAAK,CAAA;AAC/F,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,CAAO,SAAA,CAAU,OAAA,EAAS,MAAM,CAAA;AACtC,IAAA,MAAM,OAAO,IAAA,EAAK;AAElB,IAAA,IAAI,SAAS,IAAA,KAAS,KAAA,CAAA,QAAiB,MAAA,CAAO,KAAA,CAAM,QAAQ,IAAI,CAAA;AAAA,EAClE,CAAA,SAAE;AACA,IAAA,MAAM,OAAO,KAAA,EAAM;AAAA,EACrB;AACA,EAAA,IAAI;AACF,IAAA,MAAMC,eAAA,CAAO,KAAK,QAAQ,CAAA;AAAA,EAC5B,SAAS,KAAA,EAAO;AAEd,IAAA,MAAMC,eAAA,CAAO,GAAG,CAAA,CAAE,KAAA,CAAM,MAAM,MAAS,CAAA;AACvC,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AA2BA,eAAsB,eAAA,CACpB,QAAA,EACA,IAAA,EACA,OAAA,EACe;AACf,EAAA,MAAM,MAAA,GAAS,SAAS,MAAA,IAAU,CAAA;AAClC,EAAA,MAAM,eAAA,GAAkB,SAAS,eAAA,IAAmB,IAAA;AACpD,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,MAAM,MAAM,CAAA;AAC9C,EAAA,IAAI,SAAS,MAAA,EAAW;AACtB,IAAA,MAAM,IAAI,UAAU,6CAA6C,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,OAAA,GAAU,eAAA,GAAkB,CAAA,EAAG,IAAI;AAAA,CAAA,GAAO,IAAA;AAChD,EAAA,MAAMC,eAAML,YAAA,CAAQ,QAAQ,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAClD,EAAA,MAAM,iBAAA,CAAkB,QAAA,EAAU,OAAA,EAAS,OAAO,CAAA;AACpD;AAUA,eAAsB,eAAA,CAAgB,UAAkB,OAAA,EAAgC;AACtF,EAAA,MAAMK,eAAML,YAAA,CAAQ,QAAQ,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAClD,EAAA,MAAM,iBAAA,CAAkB,UAAU,OAAO,CAAA;AAC3C","file":"chunk-2CFEET3Y.cjs","sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport { mkdir, open, rename, statfs, unlink } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\nimport { diag } from \"../diagnostics.js\";\n\n// T5.8 — Linux filesystem magic numbers (from `<linux/magic.h>`).\n// Used by `detectNetworkFsName` to identify the parent directory's\n// filesystem type from a `statfs()` return value. The four entries\n// below cover the network/FUSE cases where `rename()` is best-effort\n// rather than strictly atomic; everything else is treated as local.\nconst NETWORK_FS_MAGIC: ReadonlyMap<number, string> = new Map([\n  [0x6969, \"nfs\"],\n  [0x517b, \"smb\"],\n  [0xff534d42, \"cifs\"],\n  [0x65735546, \"fuse\"],\n]);\n\n/**\n * T5.8 — Map a `statfs().type` magic number to a network-FS label, or\n * `null` for local filesystems. Pure function — exported via the\n * `__TESTING__` seam so unit tests can drive the parse logic without\n * needing a network mount.\n *\n * @internal\n */\nfunction detectNetworkFsName(typeMagic: number): string | null {\n  return NETWORK_FS_MAGIC.get(typeMagic) ?? null;\n}\n\nconst warnedNfsDirs = new Set<string>();\n\n/**\n * T5.8 — Best-effort one-shot stderr warning when `dirPath` lives on a\n * network/FUSE filesystem. Silent no-op on local filesystems, on\n * statfs failure (Windows / Node < 18.15 / EACCES), or after the\n * first warning per (dir + label) pair. Mirrors the `sqlite-wal.ts`\n * warn-once-per-label pattern (D63).\n *\n * @internal\n */\nasync function warnOnNetworkFsOnce(dirPath: string, label: string): Promise<void> {\n  const key = `${dirPath}\\0${label}`;\n  if (warnedNfsDirs.has(key)) return;\n  warnedNfsDirs.add(key);\n  try {\n    const info = await statfs(dirPath);\n    const fsName = detectNetworkFsName(info.type);\n    if (fsName === null) return;\n    diag(\n      `[theokit-sdk] ${label}: detected network fs (${fsName}) at ${dirPath} — ` +\n        \"rename() atomicity guarantees may be weaker than expected.\\n\",\n    );\n  } catch {\n    // statfs unavailable (Windows / Node < 18.15) or unreadable —\n    // silent fallback. The warning is purely informational.\n  }\n}\n\n/**\n * T5.8 — Test seam exposing the pure detection function so unit tests\n * can assert magic-number coverage without spinning up a network FS.\n * NOT included in the public barrel.\n *\n * @internal\n */\nexport function __TESTING__detectNetworkFsName(typeMagic: number): string | null {\n  return detectNetworkFsName(typeMagic);\n}\n\n/**\n * T5.8 — Test seam: clear the per-directory warn-once registry between\n * tests so warning-emission tests stay deterministic.\n *\n * @internal\n */\nexport function __TESTING__resetNfsWarnings(): void {\n  warnedNfsDirs.clear();\n}\n\n/**\n * M107 — temp-file creation control, shared by `replaceFileAtomic`,\n * `atomicWriteJson` e `atomicWriteText`.\n *\n * Both fields are OPTIONAL and the default is byte-identical to the behavior\n * before M107. See `replaceFileAtomic` for why the mode reassertion\n * is conditional.\n *\n * @internal\n */\nexport interface AtomicWriteFileOptions {\n  /**\n   * Permission bits of the created file. Default: `0o600`, the previous fixed\n   * literal — filtered by the `umask`, as it always was. When provided, the mode is\n   * reasserted on the descriptor, so the `umask` cannot silently\n   * clearing bits the caller asked for.\n   */\n  mode?: number;\n  /**\n   * Create the temp file with `wx` (exclusive creation) instead of `w`. Default:\n   * `false` — the previous flag. With `true`, a pre-existing temp file becomes\n   * `EEXIST` instead of being truncated.\n   */\n  exclusive?: boolean;\n}\n\n/** The one place the temp-path format is written. `atomicWriteTempTarget` reverses it. */\nfunction atomicWriteTempPath(filePath: string, pid: number, suffix: string): string {\n  return `${filePath}.${String(pid)}.${suffix}.tmp`;\n}\n\n/** Reverses {@link atomicWriteTempPath}: `<file>.<pid>.<hex>.tmp` → `<file>`. */\nconst TEMP_PATTERN = /^(.+)\\.\\d+\\.[0-9a-f]{16}\\.tmp$/;\n\n/**\n * U-9 — the file a leftover temp was replacing, or `undefined` if this is not one of ours.\n *\n * A crash between the open and the rename leaves `<file>.<pid>.<hex>.tmp` behind, and nothing here\n * collects it: this module creates temps and has no opinion about sweeping them. A consumer that\n * wants to has to know the format — which lived only in the implementation, so one copied it out of\n * a compiled chunk as a regex. That copy would have gone on reporting \"nothing to collect\" the day\n * the format changed, which is the quietest possible way for a cleanup to stop working.\n *\n * Deliberately strict: the pid must be digits and the suffix exactly 16 hex characters. Matching any\n * `.tmp` would claim editors' swap files and other tools' scratch, on a path whose purpose is\n * deleting them.\n */\nexport function atomicWriteTempTarget(name: string): string | undefined {\n  return TEMP_PATTERN.exec(name)?.[1];\n}\n\n/**\n * Atomic file replacement: write content to a per-call unique tmp path,\n * fsync, then rename over the target. Crash mid-write leaves either the old\n * file intact or the new file complete — never a half-written file.\n *\n * The tmp suffix is `<pid>.<rand>.tmp` so parallel processes (and concurrent\n * burst writes within one process) never collide on the same tmp path — a\n * race that would manifest as `ENOENT` on `rename` after the rival process\n * already moved its tmp into place.\n *\n * Mirrors peer-project's `replaceFileAtomic` from\n * `reference/peer-project/packages/memory-host-sdk/src/host/fs-utils.ts` with\n * the multi-writer robustness fix.\n *\n * ## M107 — `options` is optional, and the default is byte-identical\n *\n * The third parameter is additive: every earlier caller still compiles and\n * writing exactly the same bytes, with the same mode, to the same path.\n *\n * The mode reassertion (`handle.chmod`) is **conditional on `mode !== undefined`**,\n * and that is not cosmetic. `open`'s mode argument is filtered by the `umask`,\n * which only CLEARS bits — measured in this codebase before the change:\n *\n * ```\n * umask 0o002  ->  0o600      umask 0o022  ->  0o600      umask 0o200  ->  0o400\n * ```\n *\n * An unconditional `chmod` would take the third case from `0o400` to `0o600` — a\n * an on-disk change for every caller that asked for nothing, including external\n * consumers. When the caller DOES ask for a mode, however, letting the `umask` decide\n * silently is the defect this parameter exists to close; hence the reassertion.\n *\n * It goes on the DESCRIPTOR, before the `rename`, never after: chmod-ing the final\n * final one would leave a window where it carries the `umask`'s mode — the anti-pattern\n * from `opencode/packages/core/src/fs-util.ts:110-114`. The chosen shape (mode as\n * `open` argument) is that of `codex-rs/network-proxy/src/certs.rs:687,783-791`.\n *\n * @internal\n */\nexport async function replaceFileAtomic(\n  filePath: string,\n  content: string,\n  options?: AtomicWriteFileOptions,\n): Promise<void> {\n  // T5.8 — warn once per parent directory if it lives on a network /\n  // FUSE filesystem where `rename()` atomicity is best-effort. The\n  // write proceeds unchanged; the warning is purely informational so\n  // operators can spot the case in stderr / log aggregators.\n  await warnOnNetworkFsOnce(dirname(filePath), \"atomic-write\");\n  // T5.7 — crypto-random tmp suffix (CSPRNG, 64 bits of entropy)\n  // replaces the predictable `Math.random().toString(36)` source. An\n  // attacker observing the process can no longer predict the next\n  // tmp path and pre-stage a hostile file to be renamed into place.\n  const suffix = randomBytes(8).toString(\"hex\");\n  const tmp = atomicWriteTempPath(filePath, process.pid, suffix);\n  // T5.7 — mode 0o600 on the tmp file (owner read+write only). The\n  // tmp file holds the FULL in-flight content (credential snapshots,\n  // OAuth tokens) before the rename. World-readable default would\n  // expose secrets during the ms-window between open and rename\n  // (TOCTOU). On modern Linux the post-rename target inherits the\n  // tmp's permission bits, so the final file is also 0o600.\n  const handle = await open(tmp, options?.exclusive === true ? \"wx\" : \"w\", options?.mode ?? 0o600);\n  try {\n    await handle.writeFile(content, \"utf8\");\n    await handle.sync();\n    // Conditional by measurement, not by taste — see this function's docblock.\n    if (options?.mode !== undefined) await handle.chmod(options.mode);\n  } finally {\n    await handle.close();\n  }\n  try {\n    await rename(tmp, filePath);\n  } catch (cause) {\n    // Cleanup tmp on rename failure so we don't leak stale .tmp files.\n    await unlink(tmp).catch(() => undefined);\n    throw cause;\n  }\n}\n\n/**\n * Options for `atomicWriteJson`.\n *\n * @internal\n */\nexport interface AtomicWriteJsonOptions extends AtomicWriteFileOptions {\n  /** Indent passed to `JSON.stringify`. Default: 2. */\n  indent?: number;\n  /** Whether to append a trailing newline (POSIX convention). Default: true. */\n  trailingNewline?: boolean;\n}\n\n/**\n * Typed JSON atomic write helper.\n *\n * Serializes `data` to JSON, then delegates to `replaceFileAtomic`. The\n * parent directory is auto-created (recursive `mkdir`) to make this helper\n * safe for callers who haven't ensured the directory exists (EC-4 in the\n * persistence-state-hardening plan).\n *\n * Throws `TypeError` on circular refs or `undefined` data (propagates from\n * `JSON.stringify`).\n *\n * @internal\n */\nexport async function atomicWriteJson<T>(\n  filePath: string,\n  data: T,\n  options?: AtomicWriteJsonOptions,\n): Promise<void> {\n  const indent = options?.indent ?? 2;\n  const trailingNewline = options?.trailingNewline ?? true;\n  const json = JSON.stringify(data, null, indent);\n  if (json === undefined) {\n    throw new TypeError(\"atomicWriteJson: cannot serialize undefined\");\n  }\n  const content = trailingNewline ? `${json}\\n` : json;\n  await mkdir(dirname(filePath), { recursive: true });\n  await replaceFileAtomic(filePath, content, options);\n}\n\n/**\n * Atomic text write. Same crash-safety guarantees as `replaceFileAtomic` +\n * auto-mkdir of the parent directory. Used by `theokit-migrate-config`\n * (T4.1, EC-2 MUST FIX) so a crash mid-migration leaves previous MD files\n * intact rather than corrupting them.\n *\n * @internal\n */\nexport async function atomicWriteText(filePath: string, content: string): Promise<void> {\n  await mkdir(dirname(filePath), { recursive: true });\n  await replaceFileAtomic(filePath, content);\n}\n"]}