@theokit/sdk 4.56.0 → 4.58.0

package/dist/chunk-BUIK7GUA.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/persistence/session-transcript.ts"],"names":["redactSecrets","randomUUID","join","homedir","createHash","path","mkdir","dirname","replaceFileAtomic","readFile"],"mappings":";;;;;;;;;AAkDO,SAAS,iBAAiB,GAAA,EAAqB;AACpD,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,eAAA,EAAiB,GAAG,CAAA;AACzC;AAGO,SAAS,cAAc,EAAA,EAAoB;AAChD,EAAA,OAAO,EAAA,CAAG,OAAA,CAAQ,iBAAA,EAAmB,GAAG,CAAA;AAC1C;AAEA,IAAM,GAAA,GAAM,CAAC,CAAA,KAAsBA,+BAAA,CAAc,CAAC,CAAA;AAGlD,SAAS,YAAY,KAAA,EAAyB;AAC5C,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAMA,+BAAA,CAAc,IAAA,CAAK,UAAU,KAAA,IAAS,IAAI,CAAC,CAAC,CAAA;AAAA,EAChE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAOA,+BAAA,CAAc,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EACpC;AACF;AAWO,IAAM,iBAAA,GAAN,MAAM,kBAAA,CAAkB;AAAA,EAC7B,WAA4B,EAAC;AAAA,EAC7B,KAAA,GAAuB,IAAA;AAAA,EACvB,KAAA;AAAA,EAEA,YAAY,IAAA,EAAgC;AAC1C,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,WAAA,CACL,KAAA,EACA,IAAA,EACmB;AACnB,IAAA,MAAM,CAAA,GAAI,IAAI,kBAAA,CAAkB,IAAI,CAAA;AACpC,IAAA,CAAA,CAAE,QAAA,GAAW,CAAC,GAAG,KAAK,CAAA;AACtB,IAAA,CAAA,CAAE,KAAA,GAAQ,KAAA,CAAM,MAAA,GAAS,CAAA,GAAK,KAAA,CAAM,MAAM,MAAA,GAAS,CAAC,CAAA,EAAG,IAAA,IAAQ,IAAA,GAAQ,IAAA;AACvE,IAAA,OAAO,CAAA;AAAA,EACT;AAAA,EAEA,MACE,GAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAsB;AAAA,MAC1B,GAAG,GAAA;AAAA,MACH,MAAMC,iBAAA,EAAW;AAAA,MACjB,YAAY,IAAA,CAAK,KAAA;AAAA,MACjB,SAAA,EAAW,KAAK,KAAA,CAAM,SAAA;AAAA,MACtB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MAClC,WAAA,EAAa,KAAA;AAAA,MACb,QAAA,EAAU,UAAA;AAAA,MACV,GAAA,EAAK,KAAK,KAAA,CAAM,GAAA;AAAA,MAChB,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,OAAA,IAAW;AAAA,KACjC;AACA,IAAA,IAAA,CAAK,QAAA,CAAS,KAAK,IAAI,CAAA;AACvB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,IAAA;AAClB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,eAAe,IAAA,EAA6B;AAC1C,IAAA,OAAO,KAAK,KAAA,CAAM;AAAA,MAChB,IAAA,EAAM,MAAA;AAAA,MACN,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,GAAA,CAAI,IAAI,CAAA,EAAG,CAAA;AAAE,KACvE,CAAA;AAAA,EACH;AAAA,EAEA,oBAAoB,IAAA,EAAoC;AACtD,IAAA,MAAM,UAAmB,EAAC;AAC1B,IAAA,IAAI,KAAK,QAAA,EAAU;AAYjB,MAAA,MAAM,gBAAA,GAAmB,GAAA,CAAI,IAAA,CAAK,QAAQ,CAAA;AAC1C,MAAA,MAAM,mBAAA,GACJ,IAAA,CAAK,iBAAA,KAAsB,MAAA,IAAa,qBAAqB,IAAA,CAAK,QAAA;AACpE,MAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,QACX,IAAA,EAAM,UAAA;AAAA,QACN,QAAA,EAAU,gBAAA;AAAA,QACV,GAAI,mBAAA,GAAsB,EAAE,WAAW,IAAA,CAAK,iBAAA,KAAsB;AAAC,OACpE,CAAA;AAAA,IACH;AACA,IAAA,IAAI,IAAA,CAAK,IAAA,EAAM,OAAA,CAAQ,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA,EAAG,CAAA;AAClE,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,SAAA,IAAa,EAAC,EAAG;AACpC,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,IAAA,EAAM,UAAA,EAAY,IAAI,CAAA,CAAE,EAAA,EAAI,IAAA,EAAM,CAAA,CAAE,MAAM,KAAA,EAAO,WAAA,CAAY,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA,IACxF;AACA,IAAA,OAAO,KAAK,KAAA,CAAM;AAAA,MAChB,IAAA,EAAM,WAAA;AAAA,MACN,OAAA,EAAS;AAAA,QACP,IAAIA,iBAAA,EAAW;AAAA,QACf,IAAA,EAAM,SAAA;AAAA,QACN,IAAA,EAAM,WAAA;AAAA,QACN,KAAA,EAAO,KAAK,KAAA,CAAM,KAAA;AAAA,QAClB;AAAA;AACF,KACD,CAAA;AAAA,EACH;AAAA,EAEA,kBACE,OAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAmB,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MAC3C,IAAA,EAAM,aAAA;AAAA,MACN,aAAa,CAAA,CAAE,SAAA;AAAA,MACf,OAAA,EAAS,GAAA,CAAI,CAAA,CAAE,OAAO,CAAA;AAAA,MACtB,QAAA,EAAU,EAAE,OAAA,KAAY;AAAA,KAC1B,CAAE,CAAA;AACF,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAA,EAAQ,EAAG,CAAA;AAAA,EACxE;AAAA;AAAA,EAGA,sBAAsB,IAAA,EAA6D;AACjF,IAAA,MAAM,GAAA,GAAqB;AAAA,MACzB,IAAA,EAAM,QAAA;AAAA,MACN,MAAMA,iBAAA,EAAW;AAAA,MACjB,UAAA,EAAY,IAAA;AAAA,MACZ,SAAA,EAAW,KAAK,KAAA,CAAM,SAAA;AAAA,MACtB,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MAClC,OAAA,EAAS,kBAAA;AAAA,MACT,eAAA,EAAiB,IAAA;AAAA,MACjB,WAAA,EAAa,KAAA;AAAA,MACb,QAAA,EAAU,UAAA;AAAA,MACV,GAAA,EAAK,KAAK,KAAA,CAAM,GAAA;AAAA,MAChB,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,OAAA,IAAW;AAAA,KACjC;AACA,IAAA,IAAA,CAAK,QAAA,CAAS,KAAK,GAAG,CAAA;AACtB,IAAA,IAAA,CAAK,QAAQ,GAAA,CAAI,IAAA;AACjB,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEA,OAAA,GAAoC;AAClC,IAAA,OAAO,IAAA,CAAK,QAAA;AAAA,EACd;AACF;AAKA,SAAS,uBAAuB,OAAA,EAAwD;AACtF,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAoB;AACtC,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAA,CAAI,CAAA,CAAE,SAAS,CAAA;AACjC,IAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,CAAA,CAAE,SAAA,GAAY,GAAA,QAAW,GAAA,CAAI,CAAA,CAAE,SAAA,EAAW,CAAA,CAAE,SAAS,CAAA;AAAA,EAChF;AACA,EAAA,OAAO,KAAA;AACT;AAGA,SAAS,YAAY,OAAA,EAA+D;AAClF,EAAA,MAAM,OAAA,GAAU,uBAAuB,OAAO,CAAA;AAC9C,EAAA,MAAM,MAAA,uBAAa,GAAA,EAA2B;AAC9C,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA;AAClC,IAAA,MAAM,IAAA,GACJ,QAAA,KAAa,MAAA,IAAA,CACZ,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,SAAS,CAAA,IAAK,EAAA,KAAO,OAAA,CAAQ,GAAA,CAAI,QAAA,CAAS,SAAS,CAAA,IAAK,EAAA,CAAA;AACzE,IAAA,IAAI,IAAA,EAAM,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,MAAM,CAAC,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,MAAA;AACT;AAUA,SAAS,oBAAoB,CAAA,EAAyD;AACpF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IACN,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,QAAA,IAAY,EAAE,CAAA;AAAA,IAC7B,GAAI,CAAA,CAAE,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,MAAA,CAAO,CAAA,CAAE,SAAS,CAAA,EAAE,GAAI;AAAC,GACxE;AACF;AAEA,SAAS,YAAY,CAAA,EAAsC;AACzD,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,MAAA,EAAQ,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA,EAAE;AACzE,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,UAAA,EAAY,OAAO,oBAAoB,CAAC,CAAA;AACvD,EAAA,IAAI,CAAA,CAAE,SAAS,UAAA,EAAY;AACzB,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,UAAA;AAAA,MACN,EAAA,EAAI,MAAA,CAAO,CAAA,CAAE,EAAE,CAAA;AAAA,MACf,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAI,CAAA;AAAA,MACnB,KAAA,EAAQ,CAAA,CAAE,KAAA,IAAqC;AAAC,KAClD;AAAA,EACF;AACA,EAAA,IAAI,CAAA,CAAE,SAAS,aAAA,EAAe;AAC5B,IAAA,MAAM,EAAA,GAAwB;AAAA,MAC5B,IAAA,EAAM,aAAA;AAAA,MACN,SAAA,EAAW,MAAA,CAAO,CAAA,CAAE,WAAW,CAAA;AAAA,MAC/B,OAAA,EAAS,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,GAAW,EAAE,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,CAAA,CAAE,OAAO,CAAA;AAAA,MAC7E,OAAA,EAAS,EAAE,QAAA,KAAa;AAAA,KAC1B;AACA,IAAA,OAAO,EAAA;AAAA,EACT;AACA,EAAA,OAAO,MAAA;AACT;AAGA,SAAS,gBAAgB,GAAA,EAA4C;AACnE,EAAA,IAAI,IAAI,IAAA,KAAS,MAAA,IAAU,GAAA,CAAI,IAAA,KAAS,aAAa,OAAO,MAAA;AAC5D,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,OAAA,EAAS,OAAA,IAAW,EAAC;AACxC,EAAA,MAAM,KAAA,GAAQ,OAAO,GAAA,CAAI,WAAW,EAAE,MAAA,CAAO,CAAC,CAAA,KAA2B,CAAA,KAAM,MAAS,CAAA;AACxF,EAAA,OAAO,EAAE,IAAA,EAAM,GAAA,CAAI,IAAA,EAAM,SAAS,KAAA,EAAM;AAC1C;AAGA,SAAS,cAAA,CACP,OAAA,EACA,MAAA,EACA,OAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA;AACJ,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,IAAA,IAAI,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,KAAM,CAAA,IAAK,CAAC,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,EAAG,IAAA,GAAO,CAAA;AAAA,EAC/D;AACA,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,UAAA,CAAW,MAAqB,MAAA,EAAqD;AAC5F,EAAA,MAAM,QAAyB,EAAC;AAChC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,IAAI,GAAA,GAAiC,IAAA;AACrC,EAAA,OAAO,QAAQ,MAAA,IAAa,CAAC,KAAK,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA,EAAG;AAC/C,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,IAAI,CAAA;AACjB,IAAA,KAAA,CAAM,KAAK,GAAG,CAAA;AACd,IAAA,GAAA,GAAM,IAAI,UAAA,KAAe,IAAA,GAAO,OAAO,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA,GAAI,MAAA;AAAA,EAC/D;AACA,EAAA,OAAO,MAAM,OAAA,EAAQ;AACvB;AAOO,SAAS,oBAAoB,OAAA,EAAiD;AACnF,EAAA,MAAM,MAAA,GAAS,YAAY,OAAO,CAAA;AAClC,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAChC,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,MAAA,EAAO,EAAG,IAAI,EAAE,UAAA,EAAY,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,UAAU,CAAA;AAC3E,EAAA,MAAM,IAAA,GAAO,cAAA,CAAe,OAAA,EAAS,MAAA,EAAQ,OAAO,CAAA;AACpD,EAAA,IAAI,IAAA,KAAS,MAAA,EAAW,OAAO,EAAC;AAEhC,EAAA,MAAM,OAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,GAAA,IAAO,UAAA,CAAW,IAAA,EAAM,MAAM,CAAA,EAAG;AAC1C,IAAA,MAAM,CAAA,GAAI,gBAAgB,GAAG,CAAA;AAC7B,IAAA,IAAI,CAAA,KAAM,MAAA,EAAW,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA;AAAA,EAClC;AACA,EAAA,OAAO,IAAA;AACT;AAeO,SAAS,cAAA,GAAyB;AACvC,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,YAAA,EAAc,IAAA,EAAK;AAChD,EAAA,IAAI,QAAA,KAAa,MAAA,IAAa,QAAA,CAAS,MAAA,GAAS,GAAG,OAAO,QAAA;AAC1D,EAAA,OAAOC,SAAA,CAAKC,UAAA,EAAQ,EAAG,UAAU,CAAA;AACnC;AAGO,SAAS,cAAA,GAAyB;AACvC,EAAA,OAAO,cAAA,EAAe;AACxB;AAQO,SAAS,YAAY,CAAA,EAAmB;AAC7C,EAAA,IAAI,CAAA,KAAM,GAAA,EAAK,OAAOA,UAAA,EAAQ;AAC9B,EAAA,IAAI,CAAA,CAAE,UAAA,CAAW,IAAI,CAAA,EAAG,OAAOD,SAAA,CAAKC,UAAA,EAAQ,EAAG,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA;AACzD,EAAA,OAAO,CAAA;AACT;AASA,IAAM,iBAAA,GAAoB,MAAA,CAAO,IAAA,CAAK,kCAAA,EAAoC,KAAK,CAAA;AAE/E,IAAM,UAAA,GAAa,iEAAA;AAGZ,SAAS,cAAc,EAAA,EAAqB;AACjD,EAAA,OAAO,UAAA,CAAW,KAAK,EAAE,CAAA;AAC3B;AA8BO,SAAS,eAAe,EAAA,EAAoB;AACjD,EAAA,IAAI,aAAA,CAAc,EAAE,CAAA,EAAG,OAAO,GAAG,WAAA,EAAY;AAC7C,EAAA,MAAM,OAAOC,iBAAA,CAAW,QAAQ,CAAA,CAC7B,MAAA,CAAO,OAAO,MAAA,CAAO,CAAC,iBAAA,EAAmB,MAAA,CAAO,KAAK,EAAA,EAAI,MAAM,CAAC,CAAC,CAAC,EAClE,MAAA,EAAO;AACV,EAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,KAAK,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAA;AAC9C,EAAA,KAAA,CAAM,CAAC,CAAA,GAAM,KAAA,CAAM,CAAC,IAAe,EAAA,GAAQ,GAAA;AAC3C,EAAA,KAAA,CAAM,CAAC,CAAA,GAAM,KAAA,CAAM,CAAC,IAAe,EAAA,GAAQ,GAAA;AAC3C,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,QAAA,CAAS,KAAK,CAAA;AAChC,EAAA,OAAO,CAAA,EAAG,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAC1G;AAGO,SAAS,cAAA,CAAe,OAAA,EAAiB,GAAA,EAAa,SAAA,EAA2B;AACtF,EAAA,OAAOF,SAAA,CAAK,OAAA,EAAS,UAAA,EAAY,gBAAA,CAAiB,GAAG,GAAG,CAAA,EAAG,cAAA,CAAe,SAAS,CAAC,CAAA,MAAA,CAAQ,CAAA;AAC9F;AASO,SAAS,oBAAA,CAAqB,OAAA,EAAiB,GAAA,EAAa,SAAA,EAA2B;AAC5F,EAAA,OAAOA,SAAA,CAAK,OAAA,EAAS,UAAA,EAAY,gBAAA,CAAiB,GAAG,GAAG,CAAA,EAAG,aAAA,CAAc,SAAS,CAAC,CAAA,MAAA,CAAQ,CAAA;AAC7F;AAGA,eAAsB,eAAA,CACpBG,QACA,OAAA,EACiB;AACjB,EAAA,MAAMC,eAAMC,YAAA,CAAQF,MAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,IAAA,CAAK,SAAA,CAAU,CAAC,CAAC,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AAC5D,EAAA,MAAMG,oCAAkBH,MAAA,EAAM,OAAA,CAAQ,MAAA,GAAS,CAAA,GAAI,GAAG,IAAI;AAAA,CAAA,GAAO,EAAE,CAAA;AACnE,EAAA,OAAOA,MAAA;AACT;AAGA,SAAS,gBAAgB,IAAA,EAAyC;AAChE,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,MAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC9B,IAAA,OAAO,OAAO,IAAI,IAAA,KAAS,QAAA,IAAY,OAAO,GAAA,CAAI,IAAA,KAAS,WAAW,GAAA,GAAM,KAAA,CAAA;AAAA,EAC9E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAGA,eAAsB,eAAe,IAAA,EAAwC;AAC3E,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAMI,iBAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AAAA,EACnC,SAAS,KAAA,EAAO;AACd,IAAA,IAAK,KAAA,CAAgC,IAAA,KAAS,QAAA,EAAU,OAAO,EAAC;AAChE,IAAA,MAAM,KAAA;AAAA,EACR;AACA,EAAA,OAAO,GAAA,CACJ,KAAA,CAAM,IAAI,CAAA,CACV,GAAA,CAAI,eAAe,CAAA,CACnB,MAAA,CAAO,CAAC,CAAA,KAA0B,CAAA,KAAM,MAAS,CAAA;AACtD","file":"chunk-BUIK7GUA.cjs","sourcesContent":["/**\n * SE40 — native session transcript (Claude-Code-compatible on-disk shape, theokit-native names).\n *\n * The theokit session format IS the Claude Code record shape (a `uuid`/`parentUuid` DAG of records with\n * structured `text`/`tool_use`/`tool_result`/`thinking` blocks) — so the ecosystem's read-side tools\n * parse our sessions AND, pointed at `~/.claude`, the Claude Code CLI can `--continue` them. This module\n * is the PURE core: append-per-turn record builders + the DAG reader that rebuilds `LlmMessage[]` for\n * resume. File I/O + loop wiring + append-only compaction live in the FS store.\n *\n * Reader mirrors `claude-code-log` dag.py: leaf = a uuid never used as a parentUuid; walk parentUuid to a\n * root (cycle-break); dedup a uuid across sessions keeping the earliest; a `compact_boundary` root\n * terminates the walk so a resume-after-compaction replays only the post-boundary continuation.\n *\n * reference: knowledge-base/references/claude-code-log/claude_code_log/dag.py + models.py\n */\nimport { createHash, randomUUID } from \"node:crypto\";\nimport { mkdir, readFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nimport type { SessionRecord, TranscriptBlock } from \"../../types/session-record.js\";\nimport type { LlmContentPart, LlmMessage, LlmToolResultPart } from \"../llm/types.js\";\nimport { redactSecrets } from \"../security/redact.js\";\nimport { replaceFileAtomic } from \"./atomic-write.js\";\n\n// The `SessionRecord` contract now lives in the domain `types/` layer (SE46 DIP\n// direction). Re-exported here so existing importers of this DAG-core module\n// keep resolving the same name.\nexport type { SessionRecord } from \"../../types/session-record.js\";\n\nexport interface SessionTranscriptOptions {\n  cwd: string;\n  sessionId: string;\n  model: string;\n  version?: string;\n}\n\nexport interface AssistantTurn {\n  text?: string;\n  thinking?: string;\n  /**\n   * theokit#122 — the provider's signature for the thinking block. Written into the `thinking`\n   * record block (`Block` already declared `signature?`), so a resumed session can replay the block\n   * exactly as the provider issued it.\n   */\n  thinkingSignature?: string;\n  toolCalls?: Array<{ id: string; name: string; input: Record<string, unknown> }>;\n}\n\n/** Claude Code path convention: cwd with every non-alphanumeric replaced by `-`. */\nexport function encodeProjectDir(cwd: string): string {\n  return cwd.replace(/[^a-zA-Z0-9]/g, \"-\");\n}\n\n/** Make a caller-supplied session id safe as a path component (no traversal). */\nexport function safeSessionId(id: string): string {\n  return id.replace(/[^a-zA-Z0-9_-]/g, \"-\");\n}\n\nconst red = (s: string): string => redactSecrets(s);\n\n/** Deep-redact a structured value (tool input) preserving object shape. */\nfunction redactValue(value: unknown): unknown {\n  try {\n    return JSON.parse(redactSecrets(JSON.stringify(value ?? null)));\n  } catch {\n    return redactSecrets(String(value));\n  }\n}\n\n// M94 — it was `Record<string, unknown>`. The published type describes the same shape this file\n// has always produced; the local alias now points at it so writer and reader cannot\n// diverge silently.\ntype Block = TranscriptBlock;\n\n/**\n * Builds a session transcript append-by-append, maintaining the `parentUuid` chain. Each turn mints a\n * fresh `uuid` and parents on the previous record; `appendCompactBoundary` starts a NEW ROOT.\n */\nexport class SessionTranscript {\n  #records: SessionRecord[] = [];\n  #last: string | null = null;\n  #opts: SessionTranscriptOptions;\n\n  constructor(opts: SessionTranscriptOptions) {\n    this.#opts = opts;\n  }\n\n  /**\n   * Seed a transcript from records already on disk so a subsequent append parents\n   * on the existing DAG leaf (the last record in file order). Prior records are\n   * re-emitted verbatim by {@link records}, so the whole file rewrites atomically\n   * as one append-only line set — never shrinking (SE40 compaction is append-only).\n   */\n  static fromRecords(\n    prior: readonly SessionRecord[],\n    opts: SessionTranscriptOptions,\n  ): SessionTranscript {\n    const t = new SessionTranscript(opts);\n    t.#records = [...prior];\n    t.#last = prior.length > 0 ? (prior[prior.length - 1]?.uuid ?? null) : null;\n    return t;\n  }\n\n  #push(\n    rec: Omit<SessionRecord, \"uuid\" | \"parentUuid\" | \"sessionId\" | \"timestamp\">,\n  ): SessionRecord {\n    const full: SessionRecord = {\n      ...rec,\n      uuid: randomUUID(),\n      parentUuid: this.#last,\n      sessionId: this.#opts.sessionId,\n      timestamp: new Date().toISOString(),\n      isSidechain: false,\n      userType: \"external\",\n      cwd: this.#opts.cwd,\n      version: this.#opts.version ?? \"1.0.0-theokit\",\n    };\n    this.#records.push(full);\n    this.#last = full.uuid;\n    return full;\n  }\n\n  appendUserTurn(text: string): SessionRecord {\n    return this.#push({\n      type: \"user\",\n      message: { role: \"user\", content: [{ type: \"text\", text: red(text) }] },\n    });\n  }\n\n  appendAssistantTurn(turn: AssistantTurn): SessionRecord {\n    const content: Block[] = [];\n    if (turn.thinking) {\n      // theokit#122 — the signature is computed by the provider over the ORIGINAL text, so it is\n      // only valid while the text is byte-identical. Redaction rewrites the text; keeping the\n      // signature next to a masked body persists a pair that Anthropic rejects with\n      // `400 \"thinking blocks cannot be modified\"` — the very failure this issue exists to remove.\n      //\n      // So redaction WINS and the signature is dropped. The block survives as display-only history\n      // (`thinkingToWireBlock` already refuses to replay an unsigned block), which loses one block\n      // of context; keeping a signature that cannot verify would lose the whole turn.\n      //\n      // The signature itself is never redacted — it is an opaque provider token with no user\n      // content — but that was only half the reasoning the first version of this fix wrote down.\n      const redactedThinking = red(turn.thinking);\n      const signatureStillValid =\n        turn.thinkingSignature !== undefined && redactedThinking === turn.thinking;\n      content.push({\n        type: \"thinking\",\n        thinking: redactedThinking,\n        ...(signatureStillValid ? { signature: turn.thinkingSignature } : {}),\n      });\n    }\n    if (turn.text) content.push({ type: \"text\", text: red(turn.text) });\n    for (const c of turn.toolCalls ?? []) {\n      content.push({ type: \"tool_use\", id: c.id, name: c.name, input: redactValue(c.input) });\n    }\n    return this.#push({\n      type: \"assistant\",\n      message: {\n        id: randomUUID(),\n        type: \"message\",\n        role: \"assistant\",\n        model: this.#opts.model,\n        content,\n      },\n    });\n  }\n\n  appendToolResults(\n    results: Array<{ toolUseId: string; content: string; isError?: boolean }>,\n  ): SessionRecord {\n    const content: Block[] = results.map((r) => ({\n      type: \"tool_result\",\n      tool_use_id: r.toolUseId,\n      content: red(r.content),\n      is_error: r.isError === true,\n    }));\n    return this.#push({ type: \"user\", message: { role: \"user\", content } });\n  }\n\n  /** Append-only compaction: a `compact_boundary` system record becomes a NEW ROOT (parentUuid null). */\n  appendCompactBoundary(meta: { preTokens: number; trigger: string }): SessionRecord {\n    const rec: SessionRecord = {\n      type: \"system\",\n      uuid: randomUUID(),\n      parentUuid: null,\n      sessionId: this.#opts.sessionId,\n      timestamp: new Date().toISOString(),\n      subtype: \"compact_boundary\",\n      compactMetadata: meta,\n      isSidechain: false,\n      userType: \"external\",\n      cwd: this.#opts.cwd,\n      version: this.#opts.version ?? \"1.0.0-theokit\",\n    };\n    this.#records.push(rec);\n    this.#last = rec.uuid;\n    return rec;\n  }\n\n  records(): readonly SessionRecord[] {\n    return this.#records;\n  }\n}\n\n// ─── Reader (DAG → LlmMessage[]) ──────────────────────────────────────────────────────────────────\n\n/** Earliest timestamp seen per session id. */\nfunction sessionFirstTimestamps(records: readonly SessionRecord[]): Map<string, string> {\n  const first = new Map<string, string>();\n  for (const r of records) {\n    const cur = first.get(r.sessionId);\n    if (cur === undefined || r.timestamp < cur) first.set(r.sessionId, r.timestamp);\n  }\n  return first;\n}\n\n/** Dedup a uuid across sessions: keep the record whose session's earliest timestamp is smallest. */\nfunction dedupByUuid(records: readonly SessionRecord[]): Map<string, SessionRecord> {\n  const firstTs = sessionFirstTimestamps(records);\n  const byUuid = new Map<string, SessionRecord>();\n  for (const r of records) {\n    const existing = byUuid.get(r.uuid);\n    const wins =\n      existing === undefined ||\n      (firstTs.get(r.sessionId) ?? \"\") < (firstTs.get(existing.sessionId) ?? \"\");\n    if (wins) byUuid.set(r.uuid, r);\n  }\n  return byUuid;\n}\n\n/**\n * Map one structured block to an `LlmContentPart`.\n *\n * theokit#122 — thinking blocks used to be DROPPED here, which is why an extended-thinking session\n * could not be resumed: the block never made it back into the replayed messages, so the provider saw\n * a conversation whose assistant turn had lost its thinking. They are now reconstructed with their\n * signature; the Anthropic wire re-serializes signed blocks and skips unsigned ones.\n */\nfunction thinkingBlockToPart(b: Extract<Block, { type: \"thinking\" }>): LlmContentPart {\n  return {\n    type: \"thinking\",\n    text: String(b.thinking ?? \"\"),\n    ...(b.signature !== undefined ? { signature: String(b.signature) } : {}),\n  };\n}\n\nfunction blockToPart(b: Block): LlmContentPart | undefined {\n  if (b.type === \"text\") return { type: \"text\", text: String(b.text ?? \"\") };\n  if (b.type === \"thinking\") return thinkingBlockToPart(b);\n  if (b.type === \"tool_use\") {\n    return {\n      type: \"tool_use\",\n      id: String(b.id),\n      name: String(b.name),\n      input: (b.input as Record<string, unknown>) ?? {},\n    };\n  }\n  if (b.type === \"tool_result\") {\n    const tr: LlmToolResultPart = {\n      type: \"tool_result\",\n      toolUseId: String(b.tool_use_id),\n      content: typeof b.content === \"string\" ? b.content : JSON.stringify(b.content),\n      isError: b.is_error === true,\n    };\n    return tr;\n  }\n  return undefined;\n}\n\n/** Map one record to an LlmMessage; `undefined` for non-conversational (system) records. */\nfunction recordToMessage(rec: SessionRecord): LlmMessage | undefined {\n  if (rec.type !== \"user\" && rec.type !== \"assistant\") return undefined;\n  const blocks = rec.message?.content ?? [];\n  const parts = blocks.map(blockToPart).filter((p): p is LlmContentPart => p !== undefined);\n  return { role: rec.type, content: parts };\n}\n\n/** The most-recent leaf: the LAST record (in input order) whose uuid is never used as a parentUuid. */\nfunction findLatestLeaf(\n  records: readonly SessionRecord[],\n  byUuid: Map<string, SessionRecord>,\n  parents: Set<string>,\n): SessionRecord | undefined {\n  let leaf: SessionRecord | undefined;\n  for (const r of records) {\n    if (byUuid.get(r.uuid) === r && !parents.has(r.uuid)) leaf = r;\n  }\n  return leaf;\n}\n\n/** Walk parentUuid from a leaf to a root (cycle-safe), returning root→leaf order. */\nfunction walkToRoot(leaf: SessionRecord, byUuid: Map<string, SessionRecord>): SessionRecord[] {\n  const chain: SessionRecord[] = [];\n  const seen = new Set<string>();\n  let cur: SessionRecord | undefined = leaf;\n  while (cur !== undefined && !seen.has(cur.uuid)) {\n    seen.add(cur.uuid);\n    chain.push(cur);\n    cur = cur.parentUuid !== null ? byUuid.get(cur.parentUuid) : undefined;\n  }\n  return chain.reverse();\n}\n\n/**\n * Rebuild the resumable `LlmMessage[]` from transcript records: dedup → find the most-recent leaf →\n * walk `parentUuid` to a root (a `compact_boundary` root terminates the walk) → map to LlmMessages.\n * Returns them in root→leaf (chronological replay) order.\n */\nexport function reconstructMessages(records: readonly SessionRecord[]): LlmMessage[] {\n  const byUuid = dedupByUuid(records);\n  const parents = new Set<string>();\n  for (const r of byUuid.values()) if (r.parentUuid) parents.add(r.parentUuid);\n  const leaf = findLatestLeaf(records, byUuid, parents);\n  if (leaf === undefined) return [];\n\n  const msgs: LlmMessage[] = [];\n  for (const rec of walkToRoot(leaf, byUuid)) {\n    const m = recordToMessage(rec);\n    if (m !== undefined) msgs.push(m);\n  }\n  return msgs;\n}\n\n// ─── File I/O (the on-disk Claude layout) ─────────────────────────────────────────────────────────\n\n/**\n * Root of the transcript state.\n *\n * `THEOKIT_HOME` wins; the fallback is `~/.theokit`. Home-anchored on purpose, and NOT\n * `paths.ts`'s `getTheokitHome(cwd)`: that one falls back to `<cwd>/.theokit`, and switching\n * by it would move the transcript of everyone who does **not** set the variable. The sibling with the\n * right shape is `catalog-source-models-dev.ts` (M94 ADR-2).\n *\n * Before M94 this function ignored the env var, so whoever set it had their state split in\n * two silently — sessions stayed in `~/.theokit` while the rest of the SDK migrated.\n */\nexport function transcriptRoot(): string {\n  const override = process.env.THEOKIT_HOME?.trim();\n  if (override !== undefined && override.length > 0) return override;\n  return join(homedir(), \".theokit\");\n}\n\n/** @deprecated Use {@link transcriptRoot}. Kept as an alias — same value. */\nexport function defaultBaseDir(): string {\n  return transcriptRoot();\n}\n\n/**\n * Expand a leading `~` / `~/` to the user's home dir. `node:path` does NOT expand `~`, so a\n * `baseDir: \"~/.claude\"` (the documented Claude Code CLI interop path) would otherwise resolve to a\n * literal `./~/.claude` under cwd and the CLI would never find the session. Absolute or relative\n * paths without a leading tilde pass through untouched.\n */\nexport function expandTilde(p: string): string {\n  if (p === \"~\") return homedir();\n  if (p.startsWith(\"~/\")) return join(homedir(), p.slice(2));\n  return p;\n}\n\n/**\n * The fixed namespace for deriving a session UUID from an agent id (RFC 9562 § 5.8, version 8).\n *\n * A constant, because the derivation must be STABLE FOREVER: it is what lets the SDK find the\n * session it wrote last week without storing an id-to-filename map anywhere. Changing this value\n * orphans every transcript ever written.\n */\nconst SESSION_NAMESPACE = Buffer.from(\"b7a1f0c94e3d4a1b8f26d05c3a91e7d2\", \"hex\");\n\nconst UUID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Is this id already a canonical UUID, and therefore usable as a filename verbatim? */\nexport function isSessionUuid(id: string): boolean {\n  return UUID_SHAPE.test(id);\n}\n\n/**\n * The transcript filename for an agent id — always a UUID.\n *\n * #400: the Claude Code CLI resumes a transcript ONLY when its basename is a UUID. Measured against\n * CLI 2.1.236: `<uuid>.jsonl` resumes; `agent-<uuid>.jsonl` and `billing-bot.jsonl` are both ignored,\n * with no error — the session simply is not offered. So a session written under a human-readable\n * agent id was invisible to `claude --continue`, which is the interoperability this project claims\n * as its difference from a proprietary session store.\n *\n * An id that is ALREADY a UUID passes through verbatim, so a transcript Claude Code wrote keeps its\n * own name and the two directions stay symmetric. Anything else is derived with a UUIDv8, which is\n * deterministic: the same agent id always yields the same filename, so nothing has to be persisted\n * to map one back to the other.\n *\n * A DERIVED name is version 8 — RFC 9562's slot for a UUID whose bits come from an\n * implementation-defined scheme, which is exactly what this is. The obvious alternative was v5, but\n * RFC 4122 fixes v5's hash to SHA-1, and reaching for SHA-1 in 2026 means either shipping a weak\n * primitive or arguing with every scanner that flags it, forever. v8 lets the hash be SHA-256 and\n * lets the version nibble say honestly that this is our scheme rather than a standard one.\n *\n * There is no security claim here either way — no secret, no signature, and nothing an attacker\n * gains by colliding two agent ids inside one consumer's own directory. The hash is a naming\n * function. The point of preferring SHA-256 is not that SHA-1 was exploitable here; it is that a\n * weak primitive in the tree costs a permanent argument with every scanner that sees it.\n *\n * The version nibble was measured, not assumed: CLI 2.1.236 resumes a v8-named transcript exactly as\n * it does a v4 one.\n */\nexport function sessionUuidFor(id: string): string {\n  if (isSessionUuid(id)) return id.toLowerCase();\n  const hash = createHash(\"sha256\")\n    .update(Buffer.concat([SESSION_NAMESPACE, Buffer.from(id, \"utf8\")]))\n    .digest();\n  const bytes = Buffer.from(hash.subarray(0, 16));\n  bytes[6] = ((bytes[6] as number) & 0x0f) | 0x80; // version 8 — RFC 9562 custom\n  bytes[8] = ((bytes[8] as number) & 0x3f) | 0x80; // RFC 9562 variant\n  const hex = bytes.toString(\"hex\");\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n\n/** The `.jsonl` path for a session: `<baseDir>/projects/<encoded-cwd>/<session-uuid>.jsonl`. */\nexport function transcriptPath(baseDir: string, cwd: string, sessionId: string): string {\n  return join(baseDir, \"projects\", encodeProjectDir(cwd), `${sessionUuidFor(sessionId)}.jsonl`);\n}\n\n/**\n * The path this session used BEFORE #400 made transcript filenames UUIDs.\n *\n * Kept so an existing transcript is never orphaned: {@link FsSessionStore} prefers this file when it\n * exists, so history written under the old scheme keeps accumulating in the same file instead of\n * being silently abandoned for a fresh one under the new name.\n */\nexport function legacyTranscriptPath(baseDir: string, cwd: string, sessionId: string): string {\n  return join(baseDir, \"projects\", encodeProjectDir(cwd), `${safeSessionId(sessionId)}.jsonl`);\n}\n\n/** Write records as one JSONL line each (atomic; parent dir created). Returns the path. */\nexport async function writeTranscript(\n  path: string,\n  records: readonly SessionRecord[],\n): Promise<string> {\n  await mkdir(dirname(path), { recursive: true });\n  const body = records.map((r) => JSON.stringify(r)).join(\"\\n\");\n  await replaceFileAtomic(path, records.length > 0 ? `${body}\\n` : \"\");\n  return path;\n}\n\n/** Parse one JSONL line to a record; `undefined` for blank/torn/invalid lines (skipped on read). */\nfunction parseRecordLine(line: string): SessionRecord | undefined {\n  const trimmed = line.trim();\n  if (trimmed.length === 0) return undefined;\n  try {\n    const rec = JSON.parse(trimmed) as SessionRecord;\n    return typeof rec.uuid === \"string\" && typeof rec.type === \"string\" ? rec : undefined;\n  } catch {\n    return undefined; // a torn last line (crash mid-write) — the rest of the DAG still reconstructs\n  }\n}\n\n/** Parse a transcript `.jsonl` into records; a missing file yields `[]`; malformed lines are skipped. */\nexport async function readTranscript(path: string): Promise<SessionRecord[]> {\n  let raw: string;\n  try {\n    raw = await readFile(path, \"utf8\");\n  } catch (cause) {\n    if ((cause as NodeJS.ErrnoException).code === \"ENOENT\") return [];\n    throw cause;\n  }\n  return raw\n    .split(\"\\n\")\n    .map(parseRecordLine)\n    .filter((r): r is SessionRecord => r !== undefined);\n}\n"]}

package/dist/{chunk-KBXWEWKS.js → chunk-CF5OMCZG.js}

@@ -1,14 +1,14 @@
-import { enqueueSessionWrite, hydrateSession, persistTurnToTranscript, flushSessionWrites, appendSessionMessage, getSessionMessages, discardSession, clearSession } from './chunk-OHBIUXKM.js';
-import { IndexManager, writeSessionSummary, memoryDir, appendFact, readFacts, legacyMemoryJsonPath, memoryMdPath, appendFactToMarkdown } from './chunk-ODTZ7HX3.js';
-import { loadHookConfig, warnOnce, currentPersonalityContext, warnPersonalitySwitchInsideFork } from './chunk-YMA4S2WO.js';
+import { enqueueSessionWrite, hydrateSession, persistTurnToTranscript, flushSessionWrites, appendSessionMessage, getSessionMessages, discardSession, clearSession } from './chunk-WG7R5W6R.js';
+import { IndexManager, writeSessionSummary, memoryDir, MEMORY_KINDS, appendFact, readFacts, legacyMemoryJsonPath, memoryMdPath, appendFactToMarkdown } from './chunk-WLZ7XRWH.js';
+import { loadHookConfig, warnOnce, currentPersonalityContext, warnPersonalitySwitchInsideFork } from './chunk-MZ2FGBLZ.js';
 import { extractCodePlugins } from './chunk-2SFBB54R.js';
 import { submit, emitRunEvent } from './chunk-SUKXXLWD.js';
 import { createOpenAiCompatibleRuntime } from './chunk-XN7NOENA.js';
-import { FsSessionStore } from './chunk-GJ6RK75E.js';
-import { discoverProviderPlugins, getConfiguredBaseUrl, httpRequest, isFixtureApiKey, presentProviderCredentialEnvVars, CircuitBreaker, buildDefaultSummarizer, shouldUseRealLocalRuntime, parseSseStream, resolveProviderChain, inferProviderFromApiKey, detectPrimaryProvider, warnProviderPrecedenceOnce, tryFirstEvent, relayStream, renderToolResultContentText } from './chunk-MVAPK2BX.js';
+import { FsSessionStore } from './chunk-YJDH3CKG.js';
+import { discoverProviderPlugins, getConfiguredBaseUrl, httpRequest, isFixtureApiKey, presentProviderCredentialEnvVars, CircuitBreaker, buildDefaultSummarizer, shouldUseRealLocalRuntime, parseSseStream, resolveProviderChain, inferProviderFromApiKey, detectPrimaryProvider, warnProviderPrecedenceOnce, tryFirstEvent, relayStream, renderToolResultContentText } from './chunk-IACR5LEM.js';
 import { resolveChildEnv } from './chunk-HKCKOAIO.js';
-import { DEFAULT_MAX_BYTES_PER_FILE, runDiscovery, truncateWithMarker } from './chunk-7FHZ4VQX.js';
-import { readVersionedJson, getTheokitHome, writeVersionedJson } from './chunk-UPRJR6IP.js';
+import { DEFAULT_MAX_BYTES_PER_FILE, runDiscovery, truncateWithMarker } from './chunk-SAVIWMZB.js';
+import { readVersionedJson, writeVersionedJson } from './chunk-UCBJBJ27.js';
 import { toJsonSchema } from './chunk-4VPXM6UU.js';
 import { sanitizeToolInput } from './chunk-U54XCYG3.js';
 import { withInheritedSubAgentCredentials, subAgentToolsFromDefinitions } from './chunk-RNB4APBZ.js';
@@ -18,11 +18,12 @@ import { withToolWhitelist, checkToolWhitelist } from './chunk-7AD3ZTZL.js';
 import { validateArtifactPath, PathTraversalError, safePathJoin } from './chunk-QARJGQSA.js';
 import { insideRoot, atOrInsideRoot } from './chunk-RIAM53CP.js';
 import { mapWithConcurrency } from './chunk-UC3HT2S4.js';
-import { expandTilde, defaultBaseDir } from './chunk-DZBSJX6J.js';
+import { expandTilde, defaultBaseDir } from './chunk-FKMUFNQE.js';
 import { withFileLock } from './chunk-CV7XMBHP.js';
 import { withCwdMutex } from './chunk-Q5EWJPRY.js';
 import { atomicWriteJson } from './chunk-VF7EWVDG.js';
-import { loadSubagents } from './chunk-2QKTVKH3.js';
+import { loadSubagents, pluginBundleDirs } from './chunk-ZHPWGIUX.js';
+import { getTheokitHome, projectConfigRoots, pluginBundleRoots } from './chunk-UFLD2HEV.js';
 import { readWorkspaceDir, parseSimpleYaml } from './chunk-AG5JPQIY.js';
 import { resolveEffectiveContextWindow, CONTEXT_WINDOW_FLOOR, CONTEXT_WINDOW_MARGIN } from './chunk-F7AQV62G.js';
 import { parseModelId } from './chunk-R7WIIPUR.js';
@@ -915,14 +916,21 @@ async function migrateLegacyJson(cwd, config) {
 }
 
 // src/internal/runtime/memory/memory-store.ts
-var REMEMBER_PATTERN = /^\s*Remember(?:\s+this\s+durable\s+preference)?\s*:\s*(.+)$/i;
+var REMEMBER_PATTERN = /^\s*Remember(?:\s+this\s+durable\s+preference)?\s*(?:\((user|feedback|project|reference)\))?\s*:\s*(.+)$/i;
 function isMemoryWritePrompt(message) {
   return REMEMBER_PATTERN.test(message) || message.includes("Remember this durable");
 }
 function extractMemoryFact(message) {
   const match = REMEMBER_PATTERN.exec(message);
-  if (match === null || match[1] === void 0) return "";
-  return match[1].trim().replace(/\.$/, "");
+  if (match === null || match[2] === void 0) return "";
+  return match[2].trim().replace(/\.$/, "");
+}
+function extractMemoryKind(message) {
+  const match = REMEMBER_PATTERN.exec(message);
+  const declared = match?.[1];
+  if (declared === void 0) return void 0;
+  const lowered = declared.toLowerCase();
+  return MEMORY_KINDS.includes(lowered) ? lowered : void 0;
 }
 async function readMemoryFacts(cwd, config) {
   if (!config.enabled) return [];
@@ -932,7 +940,10 @@ async function readMemoryFacts(cwd, config) {
 async function appendMemoryFact(cwd, config, fact) {
   if (!config.enabled) return;
   await migrateLegacyJson(cwd, config);
-  const sanitized = { text: redactSecrets(fact.text) };
+  const sanitized = {
+    text: redactSecrets(fact.text),
+    ...fact.kind === void 0 ? {} : { kind: fact.kind }
+  };
   await appendFact(cwd, config, sanitized);
 }
 
@@ -2913,13 +2924,24 @@ var SkillsManager = class {
     await this.refresh();
   }
   async refresh() {
-    const skillsRoot = this.skillsDir ?? join(this.cwd, ".theokit", "skills");
-    const discovered = await discoverSkills(skillsRoot, {
-      onInvalidSkill: (info) => {
-        diag(`[theokit-sdk] skill ${info.name} skipped (${info.code}): ${info.message}
+    const roots = this.skillsDir === void 0 ? [
+      ...projectConfigRoots(this.cwd).map((root) => join(root, "skills")),
+      ...(await pluginBundleDirs(this.cwd)).map((bundle) => join(bundle, "skills"))
+    ] : [this.skillsDir];
+    const discovered = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const root of roots) {
+      for (const skill of await discoverSkills(root, {
+        onInvalidSkill: (info) => {
+          diag(`[theokit-sdk] skill ${info.name} skipped (${info.code}): ${info.message}
 `);
+        }
+      })) {
+        if (seen.has(skill.name)) continue;
+        seen.add(skill.name);
+        discovered.push(skill);
       }
-    });
+    }
     this.skills = this.mergeInline(discovered);
   }
   /** M22 — merge inline skills over discovered ones; inline wins on a name conflict. */
@@ -4235,14 +4257,26 @@ var PluginsManager = class {
     }
     await this.refresh();
   }
-  // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: MD-first + JSON fallback + both-present detection per plugin folder — branch table is clearer inlined.
   async refresh() {
     this.plugins = [];
-    const pluginsRoot = join(this.cwd, ".theokit", "plugins");
+    for (const pluginsRoot of pluginBundleRoots(this.cwd)) {
+      await this.refreshRoot(pluginsRoot);
+    }
+  }
+  // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: MD-first + JSON fallback + CLI location + both-present detection per plugin folder — branch table is clearer inlined.
+  async refreshRoot(pluginsRoot) {
     const entries = await readWorkspaceDir(pluginsRoot, "plugins_read_error", "plugins directory");
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
       const folderName = entry.name;
+      const cliPath = join(pluginsRoot, folderName, ".claude-plugin", "plugin.json");
+      if (existsSync(cliPath)) {
+        const cliMetadata = await loadPluginManifestFromJson(cliPath, folderName);
+        if (this.enabled === void 0 || this.enabled.includes(cliMetadata.name)) {
+          this.plugins.push(cliMetadata);
+        }
+        continue;
+      }
       const mdPath = join(pluginsRoot, folderName, "PLUGIN.md");
       const jsonPath = join(pluginsRoot, folderName, "plugin.json");
       const metadata = existsSync(mdPath) ? await loadPluginManifestFromMarkdown(pluginsRoot, folderName) : await loadPluginManifestFromJson(jsonPath, folderName);
@@ -8952,7 +8986,7 @@ async function* localAgentStreamToCompletion(agent, message, options) {
 async function localAgentFork(parent, options) {
   const { forkAgentImpl } = await import('./fork-agent-RSV4E3EA.js');
   const { getAgentFacade } = await import('./agent-factory-registry-ZVTABLEY.js');
-  const { withPersonalityContext } = await import('./context-FDOON2DB.js');
+  const { withPersonalityContext } = await import('./context-MZSKGKYR.js');
   const create = getAgentFacade().create;
   return withPersonalityContext(
     { slug: parent.personalitySlugSnapshot, isFork: true },
@@ -8964,8 +8998,12 @@ async function persistMemoryFactIfWritePrompt(workspaceCwd, memoryConfig, userTe
   if (!isMemoryWritePrompt(userText)) return;
   const fact = extractMemoryFact(userText);
   if (fact.length === 0) return;
+  const kind = extractMemoryKind(userText);
   await safeCall(
-    () => appendMemoryFact(workspaceCwd, memoryConfig, { text: fact }),
+    () => appendMemoryFact(workspaceCwd, memoryConfig, {
+      text: fact,
+      ...kind === void 0 ? {} : { kind }
+    }),
     void 0,
     "memory write"
   );
@@ -9844,22 +9882,28 @@ function missingApiKeyMessage() {
   if (present.length === 0) return `${base}.`;
   return `${base}. ${present.join(" and ")} ${present.length === 1 ? "is" : "are"} set, but a provider credential is not read from the environment automatically \u2014 pass it explicitly, e.g. \`Agent.create({ apiKey: process.env.${present[0]}, ... })\`.`;
 }
+function providerNeedsCallerKey(provider) {
+  if (provider === void 0) return true;
+  const profile = getProviderProfile(provider);
+  if (profile === void 0) return true;
+  return profile.authType === "api_key";
+}
 async function createLocalAgent(options) {
+  const provider = providerFromModelId(normalizeModel(options.model)?.id);
   const apiKey = resolveApiKey(options.apiKey);
   if (apiKey === void 0) {
-    throw new AuthenticationError(missingApiKeyMessage(), { code: "missing_api_key" });
-  }
-  const provider = providerFromModelId(normalizeModel(options.model)?.id);
-  const willFlowToProvider = keyWillFlowToProvider(apiKey, provider);
-  const shape = validateApiKeyShape(apiKey, {
-    strict: willFlowToProvider,
-    // `options.model` is already normalized by `runCreateUnderSpan`; `normalizeModel`
-    // here is the idempotent narrowing of the widened public type (`{id}` passes
-    // through by reference) — cleaner than an `as` cast.
-    ...willFlowToProvider ? { provider } : {}
-  });
-  if (shape.malformed) {
-    throw new AuthenticationError(shape.message, { code: "malformed_api_key" });
+    if (providerNeedsCallerKey(provider)) {
+      throw new AuthenticationError(missingApiKeyMessage(), { code: "missing_api_key" });
+    }
+  } else {
+    const willFlowToProvider = keyWillFlowToProvider(apiKey, provider);
+    const shape = validateApiKeyShape(apiKey, {
+      strict: willFlowToProvider,
+      ...willFlowToProvider ? { provider } : {}
+    });
+    if (shape.malformed) {
+      throw new AuthenticationError(shape.message, { code: "malformed_api_key" });
+    }
   }
   const agent = new LocalAgent(options);
   await agent.initialize();
@@ -10356,7 +10400,7 @@ var Agent = class _Agent {
         `No local agent "${agentId}" registered \u2014 compact targets local sessions.`
       );
     }
-    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-FUJDVF7B.js');
+    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-QGDNP45U.js');
     const { cwd, model, store } = await openLocalStore(reg);
     return enqueueSessionWrite(
       cwd,
@@ -10392,7 +10436,7 @@ var Agent = class _Agent {
         `No local agent "${agentId}" registered \u2014 injectSessionTurn targets local sessions.`
       );
     }
-    const { injectSessionTurn } = await import('./inject-session-BJMJH5BX.js');
+    const { injectSessionTurn } = await import('./inject-session-RBQZ45UM.js');
     const { cwd, model, store } = await openLocalStore(reg);
     await injectSessionTurn({
       store,
@@ -10431,7 +10475,7 @@ var Agent = class _Agent {
         `No local agent "${agentId}" registered \u2014 transcript targets local sessions.`
       );
     }
-    const { readSessionMessages } = await import('./agent-session-store-P6V3FINW.js');
+    const { readSessionMessages } = await import('./agent-session-store-G2BMUZQV.js');
     const { store } = await openLocalStore(reg);
     return readSessionMessages(store, agentId);
   }
@@ -10452,7 +10496,7 @@ var Agent = class _Agent {
    */
   static async describe(agentId) {
     const agent = await getRegisteredAgentOrThrow(agentId);
-    const { loadSubagents: loadSubagents2 } = await import('./subagents-loader-J54ESLDV.js');
+    const { loadSubagents: loadSubagents2 } = await import('./subagents-loader-6ATCDEKN.js');
     const settingSources = agent.options.local?.settingSources;
     const subagents = await loadSubagents2(
       agent.cwd ?? process.cwd(),
@@ -10519,13 +10563,13 @@ async function openLocalStore(reg) {
   const cwd = reg.cwd ?? process.cwd();
   const optModel = reg.options.model;
   const model = reg.model?.id ?? (typeof optModel === "string" ? optModel : optModel?.id) ?? "unknown";
-  const { FsSessionStore: FsSessionStore2 } = await import('./fs-session-store-IN7JTTXD.js');
-  const { defaultBaseDir: defaultBaseDir2, expandTilde: expandTilde2 } = await import('./session-transcript-AKDYYGXQ.js');
+  const { FsSessionStore: FsSessionStore2 } = await import('./fs-session-store-4BHGIWRE.js');
+  const { defaultBaseDir: defaultBaseDir2, expandTilde: expandTilde2 } = await import('./session-transcript-P462ZRHX.js');
   const configuredSessionDir = reg.options.local?.sessionDir ?? reg.options.local?.baseDir;
   const baseDir = configuredSessionDir !== void 0 ? expandTilde2(configuredSessionDir) : defaultBaseDir2();
   return { cwd, model, store: new FsSessionStore2({ baseDir, cwd }) };
 }
 
 export { Agent, AgentBuilder, DEFAULT_AGENTIC_MODEL_ID, MEMORY_EMBEDDING_ADAPTERS, Tool, ToolError, UsageAccumulator, computeCost, generateCronId, getPricingEntry, openRouterMemoryEmbeddingProviderAdapter };
-//# sourceMappingURL=chunk-KBXWEWKS.js.map
-//# sourceMappingURL=chunk-KBXWEWKS.js.map
+//# sourceMappingURL=chunk-CF5OMCZG.js.map
+//# sourceMappingURL=chunk-CF5OMCZG.js.map