@theokit/sdk 4.62.0 → 4.63.1

package/dist/internal/memory/storage/wiki-loader.d.ts

@@ -1,2 +1,27 @@
-export declare function wikiDir(cwd: string): string;
-export declare function discoverWikiFiles(cwd: string): Promise<WikiFile[]>;
+import type { MemoryRoot } from "./memory-root.js";
+/**
+ * Wiki supplement discovery (ADR Phase 10 of memory-system-peer-project-parity).
+ *
+ * Wiki files live under `.theokit/memory/wiki/*.md`. They are READ-ONLY —
+ * the SDK never writes here. Each indexed chunk carries `source="wiki"` so
+ * `memory_search { corpus: "wiki" }` and `corpus: "all"` can scope hits.
+ *
+ * Shared with `@theokit/sdk-memory` through the semver-exempt `internal/memory-store`
+ * sub-path, so it carries no internal-visibility tag. `stripInternal` matches that tag as TEXT
+ * anywhere in the block, so naming it here — even in backticks, even to say it is absent — deletes
+ * this symbol from the published declarations and forces the satellite back onto a copy. Measured:
+ * the first draft of this very note did exactly that. See #430 and #463.
+ */
+export interface WikiFile {
+    absolutePath: string;
+    relPath: string;
+}
+/** `<memory root>/wiki`. Takes the RESOLVED ROOT — see `storage/memory-root.ts` (#463). */
+export declare function wikiDir(root: MemoryRoot): string;
+/**
+ * Every wiki supplement under `<memory root>/wiki`, as `{ absolutePath, relPath }` records.
+ *
+ * Returns `[]` when the directory does not exist. These are read-only supplements the indexer tags
+ * with `source="wiki"`, so `memory_search({ corpus: "wiki" })` can scope to them.
+ */
+export declare function discoverWikiFiles(root: MemoryRoot): Promise<WikiFile[]>;

package/dist/internal/memory/tools.d.ts

@@ -1,4 +1,5 @@
 import type { MemoryIndex } from "./memory-index.js";
+import type { MemoryRoot } from "./storage/memory-root.js";
 export interface MemoryTool extends MemoryToolJson {
     execute(input: Record<string, unknown>): Promise<string>;
 }
@@ -9,6 +10,12 @@ export interface MemorySearchToolOptions {
 }
 export declare function createMemorySearchTool(opts: MemorySearchToolOptions): MemoryTool;
 export interface MemoryGetToolOptions {
-    cwd: string;
+    /**
+     * The RESOLVED memory root the tool may read inside — not a cwd (#463).
+     *
+     * This guard used to derive its own root from `cwd` while `appendFact` wrote somewhere else, so
+     * a relocated memory was unreadable by the tool whose whole job is reading memory.
+     */
+    root: MemoryRoot;
 }
 export declare function createMemoryGetTool(opts: MemoryGetToolOptions): MemoryTool;

package/dist/internal/memory/types.d.ts

@@ -4,6 +4,11 @@ export interface MemoryConfig {
     userId?: string;
     scope?: "agent" | "user" | "team";
     storePath?: string;
+    /**
+     * Absolute path (or `~/`-prefixed) of the memory root. Defaults to `<cwd>/.theokit/memory`.
+     * See `storage/memory-root.ts` for why a relative value is refused rather than resolved.
+     */
+    directory?: string;
 }
 /**
  * What a fact IS, which is what decides whether it ages (#389).

package/dist/internal/persistence/index.cjs

@@ -1,15 +1,16 @@
 'use strict';
 
 var chunkVTYY7XL5_cjs = require('../../chunk-VTYY7XL5.cjs');
-var chunkJ2UROOIG_cjs = require('../../chunk-J2UROOIG.cjs');
-var chunkSKXBJ2NU_cjs = require('../../chunk-SKXBJ2NU.cjs');
-var chunk2ADR2GSO_cjs = require('../../chunk-2ADR2GSO.cjs');
+var chunk2HVF2WJY_cjs = require('../../chunk-2HVF2WJY.cjs');
+var chunkA4RAL2ER_cjs = require('../../chunk-A4RAL2ER.cjs');
+var chunk5VB22SYX_cjs = require('../../chunk-5VB22SYX.cjs');
+var chunkUU36SHFY_cjs = require('../../chunk-UU36SHFY.cjs');
 var chunkZF2LDKQQ_cjs = require('../../chunk-ZF2LDKQQ.cjs');
-var chunkI6TGFUCO_cjs = require('../../chunk-I6TGFUCO.cjs');
+var chunkUALX2J2Q_cjs = require('../../chunk-UALX2J2Q.cjs');
 var chunkAQO3NSRG_cjs = require('../../chunk-AQO3NSRG.cjs');
-require('../../chunk-K3FW2XZD.cjs');
-require('../../chunk-JTB5Q42C.cjs');
-require('../../chunk-NUKRL3I6.cjs');
+require('../../chunk-4ZHTIJNE.cjs');
+require('../../chunk-XL7Q7HB2.cjs');
+require('../../chunk-EG4QM7ZJ.cjs');
 var promises = require('fs/promises');
 
 async function createExclusive(path, data, options) {
@@ -43,55 +44,55 @@ Object.defineProperty(exports, "PersistenceSchema", {
 });
 Object.defineProperty(exports, "migrateSchema", {
   enumerable: true,
-  get: function () { return chunkJ2UROOIG_cjs.migrateSchema; }
+  get: function () { return chunk2HVF2WJY_cjs.migrateSchema; }
 });
 Object.defineProperty(exports, "readVersionedJson", {
   enumerable: true,
-  get: function () { return chunkJ2UROOIG_cjs.readVersionedJson; }
+  get: function () { return chunk2HVF2WJY_cjs.readVersionedJson; }
 });
 Object.defineProperty(exports, "writeVersionedJson", {
   enumerable: true,
-  get: function () { return chunkJ2UROOIG_cjs.writeVersionedJson; }
+  get: function () { return chunk2HVF2WJY_cjs.writeVersionedJson; }
 });
-Object.defineProperty(exports, "applyWalWithFallback", {
+Object.defineProperty(exports, "containsCjk", {
   enumerable: true,
-  get: function () { return chunkSKXBJ2NU_cjs.applyWalWithFallback; }
+  get: function () { return chunkA4RAL2ER_cjs.containsCjk; }
 });
-Object.defineProperty(exports, "containsCjk", {
+Object.defineProperty(exports, "sanitizeFts5Query", {
   enumerable: true,
-  get: function () { return chunkSKXBJ2NU_cjs.containsCjk; }
+  get: function () { return chunkA4RAL2ER_cjs.sanitizeFts5Query; }
 });
-Object.defineProperty(exports, "isCorruptionError", {
+Object.defineProperty(exports, "applyWalWithFallback", {
   enumerable: true,
-  get: function () { return chunkSKXBJ2NU_cjs.isCorruptionError; }
+  get: function () { return chunk5VB22SYX_cjs.applyWalWithFallback; }
 });
-Object.defineProperty(exports, "openSqliteResilient", {
+Object.defineProperty(exports, "isCorruptionError", {
   enumerable: true,
-  get: function () { return chunkSKXBJ2NU_cjs.openSqliteResilient; }
+  get: function () { return chunk5VB22SYX_cjs.isCorruptionError; }
 });
-Object.defineProperty(exports, "sanitizeFts5Query", {
+Object.defineProperty(exports, "openSqliteResilient", {
   enumerable: true,
-  get: function () { return chunkSKXBJ2NU_cjs.sanitizeFts5Query; }
+  get: function () { return chunk5VB22SYX_cjs.openSqliteResilient; }
 });
 Object.defineProperty(exports, "JsonlParseError", {
   enumerable: true,
-  get: function () { return chunk2ADR2GSO_cjs.JsonlParseError; }
+  get: function () { return chunkUU36SHFY_cjs.JsonlParseError; }
 });
 Object.defineProperty(exports, "appendJsonl", {
   enumerable: true,
-  get: function () { return chunk2ADR2GSO_cjs.appendJsonl; }
+  get: function () { return chunkUU36SHFY_cjs.appendJsonl; }
 });
 Object.defineProperty(exports, "loadJsonl", {
   enumerable: true,
-  get: function () { return chunk2ADR2GSO_cjs.loadJsonl; }
+  get: function () { return chunkUU36SHFY_cjs.loadJsonl; }
 });
 Object.defineProperty(exports, "readJsonlIds", {
   enumerable: true,
-  get: function () { return chunk2ADR2GSO_cjs.readJsonlIds; }
+  get: function () { return chunkUU36SHFY_cjs.readJsonlIds; }
 });
 Object.defineProperty(exports, "withFileLock", {
   enumerable: true,
-  get: function () { return chunk2ADR2GSO_cjs.withFileLock; }
+  get: function () { return chunkUU36SHFY_cjs.withFileLock; }
 });
 Object.defineProperty(exports, "withCwdMutex", {
   enumerable: true,
@@ -99,15 +100,15 @@ Object.defineProperty(exports, "withCwdMutex", {
 });
 Object.defineProperty(exports, "atomicWriteJson", {
   enumerable: true,
-  get: function () { return chunkI6TGFUCO_cjs.atomicWriteJson; }
+  get: function () { return chunkUALX2J2Q_cjs.atomicWriteJson; }
 });
 Object.defineProperty(exports, "atomicWriteText", {
   enumerable: true,
-  get: function () { return chunkI6TGFUCO_cjs.atomicWriteText; }
+  get: function () { return chunkUALX2J2Q_cjs.atomicWriteText; }
 });
 Object.defineProperty(exports, "replaceFileAtomic", {
   enumerable: true,
-  get: function () { return chunkI6TGFUCO_cjs.replaceFileAtomic; }
+  get: function () { return chunkUALX2J2Q_cjs.replaceFileAtomic; }
 });
 Object.defineProperty(exports, "displayTheokitHome", {
   enumerable: true,

package/dist/internal/persistence/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/internal/persistence/exclusive-create.ts","../../../src/internal/persistence/sqlite-cas.ts"],"names":["open"],"mappings":";;;;;;;;;;;;;;AAwDA,eAAsB,eAAA,CACpB,IAAA,EACA,IAAA,EACA,OAAA,EACkB;AAClB,EAAA,MAAM,IAAA,GAAO,SAAS,IAAA,IAAQ,GAAA;AAC9B,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAMA,aAAA,CAAK,IAAA,EAAM,MAAM,IAAI,CAAA;AAC1C,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,CAAO,UAAU,IAAI,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,SAAE;AACA,MAAA,MAAM,OAAO,KAAA,EAAM;AAAA,IACrB;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAA8B,SAAS,QAAA,EAAU;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;;;ACdO,SAAS,SAAA,CACd,EAAA,EACA,GAAA,EACA,MAAA,EACA,kBAA0B,CAAA,EACjB;AACT,EAAA,MAAM,IAAA,GAAO,EAAA,CAAG,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,GAAA,CAAI,GAAI,MAAoB,CAAA;AAChD,EAAA,OAAO,OAAO,OAAA,KAAY,eAAA;AAC5B","file":"index.cjs","sourcesContent":["/**\n * O_EXCL exclusive file creation (ADR D82).\n *\n * `createExclusive(path, data, { mode })` creates a file in a single\n * syscall (`open(path, \"wx\", mode)`). Returns `true` if created, `false`\n * if it already existed (EEXIST swallowed — caller decides). All other\n * errors propagate.\n *\n * Default mode is 0o600 (owner-only) — EC-2 fix from edge-case review:\n * token files, lockfiles, and PID files MUST NOT default to world-\n * readable 0o644 under typical umask 022. Callers writing non-sensitive\n * files can pass `mode: 0o644` explicitly.\n *\n * NFS not honoring O_EXCL is documented (D61 — same stance as\n * `withFileLock`); the SDK target is ext4/APFS/NTFS.\n *\n * @internal\n */\n\nimport { open } from \"node:fs/promises\";\n\nexport interface CreateExclusiveOptions {\n  /** Unix mode for the new file (default 0o600 — owner-only). */\n  mode?: number;\n}\n\n/**\n * Create `path` holding `data`, but only if it does not exist yet. Returns `true` when this call\n * created it, `false` when it was already there.\n *\n * The check and the create are one `open(path, \"wx\")` syscall, so of N processes racing to create\n * the same path exactly one gets `true` — no window between testing and writing. The content is\n * written after the create, so the `false` branch tells you the file exists, not that another\n * writer has finished filling it.\n *\n * Only `EEXIST` becomes `false`. Every other error propagates: a missing parent directory is\n * `ENOENT`, an unwritable one `EACCES`. This never creates directories.\n *\n * The file is created with mode 0600 unless `options.mode` says otherwise, and the mode is\n * subject to the process umask. That default is deliberate — the callers are token files,\n * lockfiles and PID files, and 0644 under a typical umask would make them world-readable.\n *\n * **Choosing between this and the locks.** `createExclusive` claims a NAME once and is the right\n * tool for first-writer-wins: seeding a config, electing a single owner, writing a credential\n * exactly once. It cannot guard repeated updates, because a file that already exists always loses.\n * For read-modify-write on a path several writers touch, take a lock instead —\n * {@link withFileLock} across processes, `withCwdMutex` when the writers are all in this one. For\n * an in-place update guarded by a version column in SQLite, `casUpdate` is the equivalent\n * primitive.\n *\n * Atomicity is the filesystem's `O_EXCL`, which NFS does not reliably honor; the SDK targets\n * ext4, APFS and NTFS.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport async function createExclusive(\n  path: string,\n  data: string | Uint8Array,\n  options?: CreateExclusiveOptions,\n): Promise<boolean> {\n  const mode = options?.mode ?? 0o600;\n  try {\n    const handle = await open(path, \"wx\", mode);\n    try {\n      await handle.writeFile(data);\n      return true;\n    } finally {\n      await handle.close();\n    }\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"EEXIST\") {\n      return false;\n    }\n    throw err;\n  }\n}\n","/**\n * SQLite optimistic compare-and-swap (ADR D83).\n *\n * `casUpdate(db, sql, params, expectedChanges)` executes a prepared\n * UPDATE and returns true if `result.changes === expectedChanges`.\n * Caller provides the full SQL (including `WHERE version = ?` predicate);\n * helper does NOT generate SQL — DRY at the level of \"wrap the\n * convention\", not \"build queries\".\n *\n * Use case canonical (Hermes `kanban_db.py:1922-1934`):\n *\n *   const won = casUpdate(\n *     db,\n *     \"UPDATE registry SET status = ?, version = version + 1 WHERE id = ? AND version = ?\",\n *     [\"running\", \"agent-foo\", 3],\n *   );\n *   if (!won) { ... re-read and retry ... }\n *\n * Helper does NOT retry — caller responsible for backoff (avoids hidden\n * loops). Helper does NOT cache prepared statements — `better-sqlite3`\n * caches internally; SDK use is one-shot per mutation, not hot loops.\n *\n * NOTE — no internal-visibility tag in this block. `tsconfig.base.json` sets `stripInternal: true`,\n * and TypeScript scans EVERY leading comment range of the declaration that follows, including the\n * import right below this one. The tag that used to sit here deleted that import from the emitted\n * `.d.ts`, leaving the types it binds unresolvable for any consumer running type-aware lint\n * (usetheodev/theokit-sdk#283 records the same trap on a declaration).\n */\n\nimport type Database from \"better-sqlite3\";\n\ntype DatabaseInstance = InstanceType<typeof Database>;\n\n/**\n * Run an UPDATE and report whether it changed exactly the number of rows you expected — the\n * optimistic-concurrency equivalent of taking a lock.\n *\n * `sql` is yours, in full, including the guard that makes it a compare-and-swap: the\n * `WHERE ... AND version = ?` predicate and the `SET version = version + 1` that closes it. This\n * function generates nothing. It prepares the statement, runs it with `params`, and compares\n * `changes` against `expectedChanges` (default 1).\n *\n * `false` means the guard did not match — someone else moved the row first, or the id does not\n * exist. Those two are indistinguishable here; if you need to tell them apart, re-read the row.\n * A `false` return means NOTHING was written, so the caller owns the re-read-and-retry, with\n * whatever backoff it wants. There is no retry loop hidden in here, by design.\n *\n * SQL errors propagate — bad syntax, a closed database, a constraint violation, a busy writer.\n * Only the row-count mismatch is reported as `false`.\n *\n * Runs as a single implicit transaction, so no explicit BEGIN is needed for one statement. Wrap\n * the call yourself when the swap has to commit together with other writes.\n *\n * **Choosing between this and the locks.** `casUpdate` never blocks and never waits: the loser\n * finds out immediately and decides what to do. Prefer it when the contended state is already a\n * row with a version column. When the contended state is a FILE, there is no version column to\n * swap on — use `withFileLock` across processes, or `withCwdMutex` within one. When the goal is\n * to create something exactly once rather than update it, `createExclusive` is the primitive.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport function casUpdate(\n  db: DatabaseInstance,\n  sql: string,\n  params: ReadonlyArray<unknown>,\n  expectedChanges: number = 1,\n): boolean {\n  const stmt = db.prepare(sql);\n  const result = stmt.run(...(params as unknown[]));\n  return result.changes === expectedChanges;\n}\n"]}
+{"version":3,"sources":["../../../src/internal/persistence/exclusive-create.ts","../../../src/internal/persistence/sqlite-cas.ts"],"names":["open"],"mappings":";;;;;;;;;;;;;;;AAwDA,eAAsB,eAAA,CACpB,IAAA,EACA,IAAA,EACA,OAAA,EACkB;AAClB,EAAA,MAAM,IAAA,GAAO,SAAS,IAAA,IAAQ,GAAA;AAC9B,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAMA,aAAA,CAAK,IAAA,EAAM,MAAM,IAAI,CAAA;AAC1C,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,CAAO,UAAU,IAAI,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,SAAE;AACA,MAAA,MAAM,OAAO,KAAA,EAAM;AAAA,IACrB;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAA8B,SAAS,QAAA,EAAU;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;;;ACdO,SAAS,SAAA,CACd,EAAA,EACA,GAAA,EACA,MAAA,EACA,kBAA0B,CAAA,EACjB;AACT,EAAA,MAAM,IAAA,GAAO,EAAA,CAAG,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,GAAA,CAAI,GAAI,MAAoB,CAAA;AAChD,EAAA,OAAO,OAAO,OAAA,KAAY,eAAA;AAC5B","file":"index.cjs","sourcesContent":["/**\n * O_EXCL exclusive file creation (ADR D82).\n *\n * `createExclusive(path, data, { mode })` creates a file in a single\n * syscall (`open(path, \"wx\", mode)`). Returns `true` if created, `false`\n * if it already existed (EEXIST swallowed — caller decides). All other\n * errors propagate.\n *\n * Default mode is 0o600 (owner-only) — EC-2 fix from edge-case review:\n * token files, lockfiles, and PID files MUST NOT default to world-\n * readable 0o644 under typical umask 022. Callers writing non-sensitive\n * files can pass `mode: 0o644` explicitly.\n *\n * NFS not honoring O_EXCL is documented (D61 — same stance as\n * `withFileLock`); the SDK target is ext4/APFS/NTFS.\n *\n * @internal\n */\n\nimport { open } from \"node:fs/promises\";\n\nexport interface CreateExclusiveOptions {\n  /** Unix mode for the new file (default 0o600 — owner-only). */\n  mode?: number;\n}\n\n/**\n * Create `path` holding `data`, but only if it does not exist yet. Returns `true` when this call\n * created it, `false` when it was already there.\n *\n * The check and the create are one `open(path, \"wx\")` syscall, so of N processes racing to create\n * the same path exactly one gets `true` — no window between testing and writing. The content is\n * written after the create, so the `false` branch tells you the file exists, not that another\n * writer has finished filling it.\n *\n * Only `EEXIST` becomes `false`. Every other error propagates: a missing parent directory is\n * `ENOENT`, an unwritable one `EACCES`. This never creates directories.\n *\n * The file is created with mode 0600 unless `options.mode` says otherwise, and the mode is\n * subject to the process umask. That default is deliberate — the callers are token files,\n * lockfiles and PID files, and 0644 under a typical umask would make them world-readable.\n *\n * **Choosing between this and the locks.** `createExclusive` claims a NAME once and is the right\n * tool for first-writer-wins: seeding a config, electing a single owner, writing a credential\n * exactly once. It cannot guard repeated updates, because a file that already exists always loses.\n * For read-modify-write on a path several writers touch, take a lock instead —\n * {@link withFileLock} across processes, `withCwdMutex` when the writers are all in this one. For\n * an in-place update guarded by a version column in SQLite, `casUpdate` is the equivalent\n * primitive.\n *\n * Atomicity is the filesystem's `O_EXCL`, which NFS does not reliably honor; the SDK targets\n * ext4, APFS and NTFS.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport async function createExclusive(\n  path: string,\n  data: string | Uint8Array,\n  options?: CreateExclusiveOptions,\n): Promise<boolean> {\n  const mode = options?.mode ?? 0o600;\n  try {\n    const handle = await open(path, \"wx\", mode);\n    try {\n      await handle.writeFile(data);\n      return true;\n    } finally {\n      await handle.close();\n    }\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"EEXIST\") {\n      return false;\n    }\n    throw err;\n  }\n}\n","/**\n * SQLite optimistic compare-and-swap (ADR D83).\n *\n * `casUpdate(db, sql, params, expectedChanges)` executes a prepared\n * UPDATE and returns true if `result.changes === expectedChanges`.\n * Caller provides the full SQL (including `WHERE version = ?` predicate);\n * helper does NOT generate SQL — DRY at the level of \"wrap the\n * convention\", not \"build queries\".\n *\n * Use case canonical (Hermes `kanban_db.py:1922-1934`):\n *\n *   const won = casUpdate(\n *     db,\n *     \"UPDATE registry SET status = ?, version = version + 1 WHERE id = ? AND version = ?\",\n *     [\"running\", \"agent-foo\", 3],\n *   );\n *   if (!won) { ... re-read and retry ... }\n *\n * Helper does NOT retry — caller responsible for backoff (avoids hidden\n * loops). Helper does NOT cache prepared statements — `better-sqlite3`\n * caches internally; SDK use is one-shot per mutation, not hot loops.\n *\n * NOTE — no internal-visibility tag in this block. `tsconfig.base.json` sets `stripInternal: true`,\n * and TypeScript scans EVERY leading comment range of the declaration that follows, including the\n * import right below this one. The tag that used to sit here deleted that import from the emitted\n * `.d.ts`, leaving the types it binds unresolvable for any consumer running type-aware lint\n * (usetheodev/theokit-sdk#283 records the same trap on a declaration).\n */\n\nimport type Database from \"better-sqlite3\";\n\ntype DatabaseInstance = InstanceType<typeof Database>;\n\n/**\n * Run an UPDATE and report whether it changed exactly the number of rows you expected — the\n * optimistic-concurrency equivalent of taking a lock.\n *\n * `sql` is yours, in full, including the guard that makes it a compare-and-swap: the\n * `WHERE ... AND version = ?` predicate and the `SET version = version + 1` that closes it. This\n * function generates nothing. It prepares the statement, runs it with `params`, and compares\n * `changes` against `expectedChanges` (default 1).\n *\n * `false` means the guard did not match — someone else moved the row first, or the id does not\n * exist. Those two are indistinguishable here; if you need to tell them apart, re-read the row.\n * A `false` return means NOTHING was written, so the caller owns the re-read-and-retry, with\n * whatever backoff it wants. There is no retry loop hidden in here, by design.\n *\n * SQL errors propagate — bad syntax, a closed database, a constraint violation, a busy writer.\n * Only the row-count mismatch is reported as `false`.\n *\n * Runs as a single implicit transaction, so no explicit BEGIN is needed for one statement. Wrap\n * the call yourself when the swap has to commit together with other writes.\n *\n * **Choosing between this and the locks.** `casUpdate` never blocks and never waits: the loser\n * finds out immediately and decides what to do. Prefer it when the contended state is already a\n * row with a version column. When the contended state is a FILE, there is no version column to\n * swap on — use `withFileLock` across processes, or `withCwdMutex` within one. When the goal is\n * to create something exactly once rather than update it, `createExclusive` is the primitive.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport function casUpdate(\n  db: DatabaseInstance,\n  sql: string,\n  params: ReadonlyArray<unknown>,\n  expectedChanges: number = 1,\n): boolean {\n  const stmt = db.prepare(sql);\n  const result = stmt.run(...(params as unknown[]));\n  return result.changes === expectedChanges;\n}\n"]}

package/dist/internal/persistence/index.js

@@ -1,13 +1,14 @@
 export { PersistenceSchema } from '../../chunk-HY66GLM6.js';
-export { migrateSchema, readVersionedJson, writeVersionedJson } from '../../chunk-UCBJBJ27.js';
-export { applyWalWithFallback, containsCjk, isCorruptionError, openSqliteResilient, sanitizeFts5Query } from '../../chunk-CQ2TQ32Y.js';
-export { JsonlParseError, appendJsonl, loadJsonl, readJsonlIds, withFileLock } from '../../chunk-CV7XMBHP.js';
+export { migrateSchema, readVersionedJson, writeVersionedJson } from '../../chunk-PUAEFLYK.js';
+export { containsCjk, sanitizeFts5Query } from '../../chunk-WE22OXQA.js';
+export { applyWalWithFallback, isCorruptionError, openSqliteResilient } from '../../chunk-LWGSI6M3.js';
+export { JsonlParseError, appendJsonl, loadJsonl, readJsonlIds, withFileLock } from '../../chunk-3O42QOMJ.js';
 export { withCwdMutex } from '../../chunk-Q5EWJPRY.js';
-export { atomicWriteJson, atomicWriteText, replaceFileAtomic } from '../../chunk-VF7EWVDG.js';
+export { atomicWriteJson, atomicWriteText, replaceFileAtomic } from '../../chunk-2GUYQR5P.js';
 export { displayTheokitHome, getProfilesRoot, getTheokitHome } from '../../chunk-UFLD2HEV.js';
-import '../../chunk-IDCKSLYH.js';
-import '../../chunk-T7XEKOVW.js';
-import '../../chunk-T7O6K6PX.js';
+import '../../chunk-ZZMZWBR6.js';
+import '../../chunk-D4CUGAKZ.js';
+import '../../chunk-XEQ3TM66.js';
 import { open } from 'fs/promises';
 
 async function createExclusive(path, data, options) {

package/dist/internal/persistence/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/internal/persistence/exclusive-create.ts","../../../src/internal/persistence/sqlite-cas.ts"],"names":[],"mappings":";;;;;;;;;;;;AAwDA,eAAsB,eAAA,CACpB,IAAA,EACA,IAAA,EACA,OAAA,EACkB;AAClB,EAAA,MAAM,IAAA,GAAO,SAAS,IAAA,IAAQ,GAAA;AAC9B,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,IAAA,EAAM,MAAM,IAAI,CAAA;AAC1C,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,CAAO,UAAU,IAAI,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,SAAE;AACA,MAAA,MAAM,OAAO,KAAA,EAAM;AAAA,IACrB;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAA8B,SAAS,QAAA,EAAU;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;;;ACdO,SAAS,SAAA,CACd,EAAA,EACA,GAAA,EACA,MAAA,EACA,kBAA0B,CAAA,EACjB;AACT,EAAA,MAAM,IAAA,GAAO,EAAA,CAAG,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,GAAA,CAAI,GAAI,MAAoB,CAAA;AAChD,EAAA,OAAO,OAAO,OAAA,KAAY,eAAA;AAC5B","file":"index.js","sourcesContent":["/**\n * O_EXCL exclusive file creation (ADR D82).\n *\n * `createExclusive(path, data, { mode })` creates a file in a single\n * syscall (`open(path, \"wx\", mode)`). Returns `true` if created, `false`\n * if it already existed (EEXIST swallowed — caller decides). All other\n * errors propagate.\n *\n * Default mode is 0o600 (owner-only) — EC-2 fix from edge-case review:\n * token files, lockfiles, and PID files MUST NOT default to world-\n * readable 0o644 under typical umask 022. Callers writing non-sensitive\n * files can pass `mode: 0o644` explicitly.\n *\n * NFS not honoring O_EXCL is documented (D61 — same stance as\n * `withFileLock`); the SDK target is ext4/APFS/NTFS.\n *\n * @internal\n */\n\nimport { open } from \"node:fs/promises\";\n\nexport interface CreateExclusiveOptions {\n  /** Unix mode for the new file (default 0o600 — owner-only). */\n  mode?: number;\n}\n\n/**\n * Create `path` holding `data`, but only if it does not exist yet. Returns `true` when this call\n * created it, `false` when it was already there.\n *\n * The check and the create are one `open(path, \"wx\")` syscall, so of N processes racing to create\n * the same path exactly one gets `true` — no window between testing and writing. The content is\n * written after the create, so the `false` branch tells you the file exists, not that another\n * writer has finished filling it.\n *\n * Only `EEXIST` becomes `false`. Every other error propagates: a missing parent directory is\n * `ENOENT`, an unwritable one `EACCES`. This never creates directories.\n *\n * The file is created with mode 0600 unless `options.mode` says otherwise, and the mode is\n * subject to the process umask. That default is deliberate — the callers are token files,\n * lockfiles and PID files, and 0644 under a typical umask would make them world-readable.\n *\n * **Choosing between this and the locks.** `createExclusive` claims a NAME once and is the right\n * tool for first-writer-wins: seeding a config, electing a single owner, writing a credential\n * exactly once. It cannot guard repeated updates, because a file that already exists always loses.\n * For read-modify-write on a path several writers touch, take a lock instead —\n * {@link withFileLock} across processes, `withCwdMutex` when the writers are all in this one. For\n * an in-place update guarded by a version column in SQLite, `casUpdate` is the equivalent\n * primitive.\n *\n * Atomicity is the filesystem's `O_EXCL`, which NFS does not reliably honor; the SDK targets\n * ext4, APFS and NTFS.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport async function createExclusive(\n  path: string,\n  data: string | Uint8Array,\n  options?: CreateExclusiveOptions,\n): Promise<boolean> {\n  const mode = options?.mode ?? 0o600;\n  try {\n    const handle = await open(path, \"wx\", mode);\n    try {\n      await handle.writeFile(data);\n      return true;\n    } finally {\n      await handle.close();\n    }\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"EEXIST\") {\n      return false;\n    }\n    throw err;\n  }\n}\n","/**\n * SQLite optimistic compare-and-swap (ADR D83).\n *\n * `casUpdate(db, sql, params, expectedChanges)` executes a prepared\n * UPDATE and returns true if `result.changes === expectedChanges`.\n * Caller provides the full SQL (including `WHERE version = ?` predicate);\n * helper does NOT generate SQL — DRY at the level of \"wrap the\n * convention\", not \"build queries\".\n *\n * Use case canonical (Hermes `kanban_db.py:1922-1934`):\n *\n *   const won = casUpdate(\n *     db,\n *     \"UPDATE registry SET status = ?, version = version + 1 WHERE id = ? AND version = ?\",\n *     [\"running\", \"agent-foo\", 3],\n *   );\n *   if (!won) { ... re-read and retry ... }\n *\n * Helper does NOT retry — caller responsible for backoff (avoids hidden\n * loops). Helper does NOT cache prepared statements — `better-sqlite3`\n * caches internally; SDK use is one-shot per mutation, not hot loops.\n *\n * NOTE — no internal-visibility tag in this block. `tsconfig.base.json` sets `stripInternal: true`,\n * and TypeScript scans EVERY leading comment range of the declaration that follows, including the\n * import right below this one. The tag that used to sit here deleted that import from the emitted\n * `.d.ts`, leaving the types it binds unresolvable for any consumer running type-aware lint\n * (usetheodev/theokit-sdk#283 records the same trap on a declaration).\n */\n\nimport type Database from \"better-sqlite3\";\n\ntype DatabaseInstance = InstanceType<typeof Database>;\n\n/**\n * Run an UPDATE and report whether it changed exactly the number of rows you expected — the\n * optimistic-concurrency equivalent of taking a lock.\n *\n * `sql` is yours, in full, including the guard that makes it a compare-and-swap: the\n * `WHERE ... AND version = ?` predicate and the `SET version = version + 1` that closes it. This\n * function generates nothing. It prepares the statement, runs it with `params`, and compares\n * `changes` against `expectedChanges` (default 1).\n *\n * `false` means the guard did not match — someone else moved the row first, or the id does not\n * exist. Those two are indistinguishable here; if you need to tell them apart, re-read the row.\n * A `false` return means NOTHING was written, so the caller owns the re-read-and-retry, with\n * whatever backoff it wants. There is no retry loop hidden in here, by design.\n *\n * SQL errors propagate — bad syntax, a closed database, a constraint violation, a busy writer.\n * Only the row-count mismatch is reported as `false`.\n *\n * Runs as a single implicit transaction, so no explicit BEGIN is needed for one statement. Wrap\n * the call yourself when the swap has to commit together with other writes.\n *\n * **Choosing between this and the locks.** `casUpdate` never blocks and never waits: the loser\n * finds out immediately and decides what to do. Prefer it when the contended state is already a\n * row with a version column. When the contended state is a FILE, there is no version column to\n * swap on — use `withFileLock` across processes, or `withCwdMutex` within one. When the goal is\n * to create something exactly once rather than update it, `createExclusive` is the primitive.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport function casUpdate(\n  db: DatabaseInstance,\n  sql: string,\n  params: ReadonlyArray<unknown>,\n  expectedChanges: number = 1,\n): boolean {\n  const stmt = db.prepare(sql);\n  const result = stmt.run(...(params as unknown[]));\n  return result.changes === expectedChanges;\n}\n"]}
+{"version":3,"sources":["../../../src/internal/persistence/exclusive-create.ts","../../../src/internal/persistence/sqlite-cas.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAwDA,eAAsB,eAAA,CACpB,IAAA,EACA,IAAA,EACA,OAAA,EACkB;AAClB,EAAA,MAAM,IAAA,GAAO,SAAS,IAAA,IAAQ,GAAA;AAC9B,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,IAAA,EAAM,MAAM,IAAI,CAAA;AAC1C,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,CAAO,UAAU,IAAI,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,SAAE;AACA,MAAA,MAAM,OAAO,KAAA,EAAM;AAAA,IACrB;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAA8B,SAAS,QAAA,EAAU;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;;;ACdO,SAAS,SAAA,CACd,EAAA,EACA,GAAA,EACA,MAAA,EACA,kBAA0B,CAAA,EACjB;AACT,EAAA,MAAM,IAAA,GAAO,EAAA,CAAG,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,GAAA,CAAI,GAAI,MAAoB,CAAA;AAChD,EAAA,OAAO,OAAO,OAAA,KAAY,eAAA;AAC5B","file":"index.js","sourcesContent":["/**\n * O_EXCL exclusive file creation (ADR D82).\n *\n * `createExclusive(path, data, { mode })` creates a file in a single\n * syscall (`open(path, \"wx\", mode)`). Returns `true` if created, `false`\n * if it already existed (EEXIST swallowed — caller decides). All other\n * errors propagate.\n *\n * Default mode is 0o600 (owner-only) — EC-2 fix from edge-case review:\n * token files, lockfiles, and PID files MUST NOT default to world-\n * readable 0o644 under typical umask 022. Callers writing non-sensitive\n * files can pass `mode: 0o644` explicitly.\n *\n * NFS not honoring O_EXCL is documented (D61 — same stance as\n * `withFileLock`); the SDK target is ext4/APFS/NTFS.\n *\n * @internal\n */\n\nimport { open } from \"node:fs/promises\";\n\nexport interface CreateExclusiveOptions {\n  /** Unix mode for the new file (default 0o600 — owner-only). */\n  mode?: number;\n}\n\n/**\n * Create `path` holding `data`, but only if it does not exist yet. Returns `true` when this call\n * created it, `false` when it was already there.\n *\n * The check and the create are one `open(path, \"wx\")` syscall, so of N processes racing to create\n * the same path exactly one gets `true` — no window between testing and writing. The content is\n * written after the create, so the `false` branch tells you the file exists, not that another\n * writer has finished filling it.\n *\n * Only `EEXIST` becomes `false`. Every other error propagates: a missing parent directory is\n * `ENOENT`, an unwritable one `EACCES`. This never creates directories.\n *\n * The file is created with mode 0600 unless `options.mode` says otherwise, and the mode is\n * subject to the process umask. That default is deliberate — the callers are token files,\n * lockfiles and PID files, and 0644 under a typical umask would make them world-readable.\n *\n * **Choosing between this and the locks.** `createExclusive` claims a NAME once and is the right\n * tool for first-writer-wins: seeding a config, electing a single owner, writing a credential\n * exactly once. It cannot guard repeated updates, because a file that already exists always loses.\n * For read-modify-write on a path several writers touch, take a lock instead —\n * {@link withFileLock} across processes, `withCwdMutex` when the writers are all in this one. For\n * an in-place update guarded by a version column in SQLite, `casUpdate` is the equivalent\n * primitive.\n *\n * Atomicity is the filesystem's `O_EXCL`, which NFS does not reliably honor; the SDK targets\n * ext4, APFS and NTFS.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport async function createExclusive(\n  path: string,\n  data: string | Uint8Array,\n  options?: CreateExclusiveOptions,\n): Promise<boolean> {\n  const mode = options?.mode ?? 0o600;\n  try {\n    const handle = await open(path, \"wx\", mode);\n    try {\n      await handle.writeFile(data);\n      return true;\n    } finally {\n      await handle.close();\n    }\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"EEXIST\") {\n      return false;\n    }\n    throw err;\n  }\n}\n","/**\n * SQLite optimistic compare-and-swap (ADR D83).\n *\n * `casUpdate(db, sql, params, expectedChanges)` executes a prepared\n * UPDATE and returns true if `result.changes === expectedChanges`.\n * Caller provides the full SQL (including `WHERE version = ?` predicate);\n * helper does NOT generate SQL — DRY at the level of \"wrap the\n * convention\", not \"build queries\".\n *\n * Use case canonical (Hermes `kanban_db.py:1922-1934`):\n *\n *   const won = casUpdate(\n *     db,\n *     \"UPDATE registry SET status = ?, version = version + 1 WHERE id = ? AND version = ?\",\n *     [\"running\", \"agent-foo\", 3],\n *   );\n *   if (!won) { ... re-read and retry ... }\n *\n * Helper does NOT retry — caller responsible for backoff (avoids hidden\n * loops). Helper does NOT cache prepared statements — `better-sqlite3`\n * caches internally; SDK use is one-shot per mutation, not hot loops.\n *\n * NOTE — no internal-visibility tag in this block. `tsconfig.base.json` sets `stripInternal: true`,\n * and TypeScript scans EVERY leading comment range of the declaration that follows, including the\n * import right below this one. The tag that used to sit here deleted that import from the emitted\n * `.d.ts`, leaving the types it binds unresolvable for any consumer running type-aware lint\n * (usetheodev/theokit-sdk#283 records the same trap on a declaration).\n */\n\nimport type Database from \"better-sqlite3\";\n\ntype DatabaseInstance = InstanceType<typeof Database>;\n\n/**\n * Run an UPDATE and report whether it changed exactly the number of rows you expected — the\n * optimistic-concurrency equivalent of taking a lock.\n *\n * `sql` is yours, in full, including the guard that makes it a compare-and-swap: the\n * `WHERE ... AND version = ?` predicate and the `SET version = version + 1` that closes it. This\n * function generates nothing. It prepares the statement, runs it with `params`, and compares\n * `changes` against `expectedChanges` (default 1).\n *\n * `false` means the guard did not match — someone else moved the row first, or the id does not\n * exist. Those two are indistinguishable here; if you need to tell them apart, re-read the row.\n * A `false` return means NOTHING was written, so the caller owns the re-read-and-retry, with\n * whatever backoff it wants. There is no retry loop hidden in here, by design.\n *\n * SQL errors propagate — bad syntax, a closed database, a constraint violation, a busy writer.\n * Only the row-count mismatch is reported as `false`.\n *\n * Runs as a single implicit transaction, so no explicit BEGIN is needed for one statement. Wrap\n * the call yourself when the swap has to commit together with other writes.\n *\n * **Choosing between this and the locks.** `casUpdate` never blocks and never waits: the loser\n * finds out immediately and decides what to do. Prefer it when the contended state is already a\n * row with a version column. When the contended state is a FILE, there is no version column to\n * swap on — use `withFileLock` across processes, or `withCwdMutex` within one. When the goal is\n * to create something exactly once rather than update it, `createExclusive` is the primitive.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport function casUpdate(\n  db: DatabaseInstance,\n  sql: string,\n  params: ReadonlyArray<unknown>,\n  expectedChanges: number = 1,\n): boolean {\n  const stmt = db.prepare(sql);\n  const result = stmt.run(...(params as unknown[]));\n  return result.changes === expectedChanges;\n}\n"]}

package/dist/internal/persistence/session-dir.d.cts

@@ -1,16 +1 @@
-/** The subset of `LocalOptions` this resolver reads. */
-interface SessionDirOptions {
-    sessionDir?: string;
-    baseDir?: string;
-}
-/**
- * The session directory the caller ASKED for, or `undefined` when they asked for nothing.
- *
- * {@link resolveSessionDir} always answers with a path, falling back to the default home — which is
- * the right answer for "where do transcripts go" and the wrong one for "did this consumer opt into
- * sharing state with the Claude Code CLI". Memory writes need the second question, and the two
- * accepted names for the option live here, so asking it anywhere else would put a copy of that
- * knowledge somewhere it can drift.
- */
-export declare function explicitSessionDir(local: SessionDirOptions | undefined): string | undefined;
 export {};

package/dist/internal/persistence/session-dir.d.ts

@@ -1,16 +1 @@
-/** The subset of `LocalOptions` this resolver reads. */
-interface SessionDirOptions {
-    sessionDir?: string;
-    baseDir?: string;
-}
-/**
- * The session directory the caller ASKED for, or `undefined` when they asked for nothing.
- *
- * {@link resolveSessionDir} always answers with a path, falling back to the default home — which is
- * the right answer for "where do transcripts go" and the wrong one for "did this consumer opt into
- * sharing state with the Claude Code CLI". Memory writes need the second question, and the two
- * accepted names for the option live here, so asking it anywhere else would put a copy of that
- * knowledge somewhere it can drift.
- */
-export declare function explicitSessionDir(local: SessionDirOptions | undefined): string | undefined;
 export {};

package/dist/internal/runtime/memory/memory-store.d.ts

@@ -1,4 +1,4 @@
 import { type MemoryConfig, type MemoryFact, redactSecrets } from "../../memory/types.js";
 export { redactSecrets };
-export declare function readMemoryFacts(cwd: string, config: MemoryConfig, memoryHome?: string): Promise<MemoryFact[]>;
-export declare function appendMemoryFact(cwd: string, config: MemoryConfig, fact: MemoryFact, memoryHome?: string): Promise<void>;
+export declare function readMemoryFacts(cwd: string, config: MemoryConfig): Promise<MemoryFact[]>;
+export declare function appendMemoryFact(cwd: string, config: MemoryConfig, fact: MemoryFact): Promise<void>;

package/dist/internal/security/index.cjs

@@ -1,53 +1,53 @@
 'use strict';
 
 require('../../chunk-MUUQ2WFJ.cjs');
-var chunkR3UPQFKK_cjs = require('../../chunk-R3UPQFKK.cjs');
+var chunkV2BOS4WF_cjs = require('../../chunk-V2BOS4WF.cjs');
 require('../../chunk-VKJ7V7EB.cjs');
-require('../../chunk-K3FW2XZD.cjs');
-var chunkJTB5Q42C_cjs = require('../../chunk-JTB5Q42C.cjs');
-require('../../chunk-NUKRL3I6.cjs');
+require('../../chunk-4ZHTIJNE.cjs');
+var chunkXL7Q7HB2_cjs = require('../../chunk-XL7Q7HB2.cjs');
+require('../../chunk-EG4QM7ZJ.cjs');
 
 
 
 Object.defineProperty(exports, "ForbiddenPathError", {
   enumerable: true,
-  get: function () { return chunkR3UPQFKK_cjs.ForbiddenPathError; }
+  get: function () { return chunkV2BOS4WF_cjs.ForbiddenPathError; }
 });
 Object.defineProperty(exports, "PathTraversalError", {
   enumerable: true,
-  get: function () { return chunkR3UPQFKK_cjs.PathTraversalError; }
+  get: function () { return chunkV2BOS4WF_cjs.PathTraversalError; }
 });
 Object.defineProperty(exports, "assertNoSymlinkEscape", {
   enumerable: true,
-  get: function () { return chunkR3UPQFKK_cjs.assertNoSymlinkEscape; }
+  get: function () { return chunkV2BOS4WF_cjs.assertNoSymlinkEscape; }
 });
 Object.defineProperty(exports, "isForbiddenPath", {
   enumerable: true,
-  get: function () { return chunkR3UPQFKK_cjs.isForbiddenPath; }
+  get: function () { return chunkV2BOS4WF_cjs.isForbiddenPath; }
 });
 Object.defineProperty(exports, "safePathJoin", {
   enumerable: true,
-  get: function () { return chunkR3UPQFKK_cjs.safePathJoin; }
+  get: function () { return chunkV2BOS4WF_cjs.safePathJoin; }
 });
 Object.defineProperty(exports, "sanitizeIdentifier", {
   enumerable: true,
-  get: function () { return chunkR3UPQFKK_cjs.sanitizeIdentifier; }
+  get: function () { return chunkV2BOS4WF_cjs.sanitizeIdentifier; }
 });
 Object.defineProperty(exports, "validateArtifactPath", {
   enumerable: true,
-  get: function () { return chunkR3UPQFKK_cjs.validateArtifactPath; }
+  get: function () { return chunkV2BOS4WF_cjs.validateArtifactPath; }
 });
 Object.defineProperty(exports, "addPattern", {
   enumerable: true,
-  get: function () { return chunkJTB5Q42C_cjs.addPattern; }
+  get: function () { return chunkXL7Q7HB2_cjs.addPattern; }
 });
 Object.defineProperty(exports, "maskToken", {
   enumerable: true,
-  get: function () { return chunkJTB5Q42C_cjs.maskToken; }
+  get: function () { return chunkXL7Q7HB2_cjs.maskToken; }
 });
 Object.defineProperty(exports, "redactSecrets", {
   enumerable: true,
-  get: function () { return chunkJTB5Q42C_cjs.redactSecrets; }
+  get: function () { return chunkXL7Q7HB2_cjs.redactSecrets; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/internal/security/index.js

@@ -1,8 +1,8 @@
 import '../../chunk-FD2UT76F.js';
-export { ForbiddenPathError, PathTraversalError, assertNoSymlinkEscape, isForbiddenPath, safePathJoin, sanitizeIdentifier, validateArtifactPath } from '../../chunk-QARJGQSA.js';
+export { ForbiddenPathError, PathTraversalError, assertNoSymlinkEscape, isForbiddenPath, safePathJoin, sanitizeIdentifier, validateArtifactPath } from '../../chunk-HS7AVXTF.js';
 import '../../chunk-RIAM53CP.js';
-import '../../chunk-IDCKSLYH.js';
-export { addPattern, maskToken, redactSecrets } from '../../chunk-T7XEKOVW.js';
-import '../../chunk-T7O6K6PX.js';
+import '../../chunk-ZZMZWBR6.js';
+export { addPattern, maskToken, redactSecrets } from '../../chunk-D4CUGAKZ.js';
+import '../../chunk-XEQ3TM66.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/judge-call-LAHMBJ57.cjs

@@ -0,0 +1,23 @@
+'use strict';
+
+var chunk3NSS2OIZ_cjs = require('./chunk-3NSS2OIZ.cjs');
+require('./chunk-4ZHTIJNE.cjs');
+require('./chunk-XL7Q7HB2.cjs');
+require('./chunk-EG4QM7ZJ.cjs');
+
+
+
+Object.defineProperty(exports, "JudgeCredentialError", {
+  enumerable: true,
+  get: function () { return chunk3NSS2OIZ_cjs.JudgeCredentialError; }
+});
+Object.defineProperty(exports, "composeJudgePrompt", {
+  enumerable: true,
+  get: function () { return chunk3NSS2OIZ_cjs.composeJudgePrompt; }
+});
+Object.defineProperty(exports, "judgeCallImpl", {
+  enumerable: true,
+  get: function () { return chunk3NSS2OIZ_cjs.judgeCallImpl; }
+});
+//# sourceMappingURL=judge-call-LAHMBJ57.cjs.map
+//# sourceMappingURL=judge-call-LAHMBJ57.cjs.map

package/dist/{judge-call-EGYRC2RE.cjs.map → judge-call-LAHMBJ57.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"judge-call-EGYRC2RE.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"judge-call-LAHMBJ57.cjs"}

package/dist/judge-call-LVXABPS3.js

@@ -0,0 +1,6 @@
+export { JudgeCredentialError, composeJudgePrompt, judgeCallImpl } from './chunk-IPYYKCRC.js';
+import './chunk-ZZMZWBR6.js';
+import './chunk-D4CUGAKZ.js';
+import './chunk-XEQ3TM66.js';
+//# sourceMappingURL=judge-call-LVXABPS3.js.map
+//# sourceMappingURL=judge-call-LVXABPS3.js.map

package/dist/{judge-call-DWHAJATE.js.map → judge-call-LVXABPS3.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"judge-call-DWHAJATE.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"judge-call-LVXABPS3.js"}

package/dist/mcp-auth.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunkI6TGFUCO_cjs = require('./chunk-I6TGFUCO.cjs');
-var chunkBVZW2B5V_cjs = require('./chunk-BVZW2B5V.cjs');
-var chunkK3FW2XZD_cjs = require('./chunk-K3FW2XZD.cjs');
-require('./chunk-JTB5Q42C.cjs');
-var chunkNUKRL3I6_cjs = require('./chunk-NUKRL3I6.cjs');
+var chunkUALX2J2Q_cjs = require('./chunk-UALX2J2Q.cjs');
+var chunkXJCXEKMD_cjs = require('./chunk-XJCXEKMD.cjs');
+var chunk4ZHTIJNE_cjs = require('./chunk-4ZHTIJNE.cjs');
+require('./chunk-XL7Q7HB2.cjs');
+var chunkEG4QM7ZJ_cjs = require('./chunk-EG4QM7ZJ.cjs');
 var crypto = require('crypto');
 var http = require('http');
 var promises = require('readline/promises');
@@ -44,7 +44,7 @@ function tryRequireKeytar() {
     cachedKeytar = r("keytar");
   } catch {
     if (!keytarWarned) {
-      chunkNUKRL3I6_cjs.diag(
+      chunkEG4QM7ZJ_cjs.diag(
         `[theokit-sdk] keytar not installed; MCP OAuth tokens will be stored in ${storeFilePath()} (chmod 600 where POSIX). Install \`keytar\` for OS keychain storage.
 `
       );
@@ -74,7 +74,7 @@ async function setTokens(serverName, tokens) {
     }
   }
   allTokens[serverName] = tokens;
-  await chunkI6TGFUCO_cjs.atomicWriteJson(filePath, allTokens);
+  await chunkUALX2J2Q_cjs.atomicWriteJson(filePath, allTokens);
   try {
     fs.chmodSync(filePath, 384);
   } catch {
@@ -93,7 +93,7 @@ async function getTokens(serverName) {
   }
   const filePath = storeFilePath();
   if (!fs.existsSync(filePath)) return void 0;
-  chunkBVZW2B5V_cjs.assertSecureModes(path.dirname(filePath), filePath);
+  chunkXJCXEKMD_cjs.assertSecureModes(path.dirname(filePath), filePath);
   try {
     const all = JSON.parse(fs.readFileSync(filePath, "utf8"));
     return all[serverName];
@@ -134,7 +134,7 @@ async function refreshAccessToken(serverName, clientId, refreshToken, oauth) {
     body: body.toString()
   });
   if (!response.ok) {
-    throw new chunkK3FW2XZD_cjs.ConfigurationError(`OAuth refresh failed: HTTP ${response.status}`, {
+    throw new chunk4ZHTIJNE_cjs.ConfigurationError(`OAuth refresh failed: HTTP ${response.status}`, {
       code: "oauth_refresh_failed"
     });
   }
@@ -180,7 +180,7 @@ async function runPkceFlow(serverName, clientId, scopes, oauth) {
     authUrl.searchParams.set("code_challenge", challenge);
     authUrl.searchParams.set("code_challenge_method", "S256");
     authUrl.searchParams.set("state", state);
-    chunkNUKRL3I6_cjs.diag(
+    chunkEG4QM7ZJ_cjs.diag(
       `
 [theokit-sdk] OAuth required for MCP server "${serverName}".
 Open this URL to authenticate:
@@ -190,7 +190,7 @@ Open this URL to authenticate:
     );
     const { code, state: returnedState } = await codeWaiter;
     if (returnedState !== state) {
-      throw new chunkK3FW2XZD_cjs.ConfigurationError(
+      throw new chunk4ZHTIJNE_cjs.ConfigurationError(
         "OAuth state mismatch \u2014 possible CSRF attempt; aborting token exchange.",
         { code: "oauth_state_mismatch" }
       );
@@ -209,7 +209,7 @@ Open this URL to authenticate:
     });
     if (!response.ok) {
       const errText = await response.text();
-      throw new chunkK3FW2XZD_cjs.ConfigurationError(
+      throw new chunk4ZHTIJNE_cjs.ConfigurationError(
         `OAuth token exchange failed: HTTP ${response.status}: ${errText.slice(0, 200)}`,
         { code: "oauth_token_exchange_failed" }
       );
@@ -255,7 +255,7 @@ async function openLocalhostCallback(expectedState, timeoutMs) {
   });
   server.listen(0, "127.0.0.1");
   const timeoutHandle = setTimeout(() => {
-    rejectCode?.(new chunkK3FW2XZD_cjs.ConfigurationError("OAuth flow timed out", { code: "oauth_timeout" }));
+    rejectCode?.(new chunk4ZHTIJNE_cjs.ConfigurationError("OAuth flow timed out", { code: "oauth_timeout" }));
   }, timeoutMs);
   await new Promise((r) => {
     if (server.listening) r();
@@ -264,7 +264,7 @@ async function openLocalhostCallback(expectedState, timeoutMs) {
   const address = server.address();
   if (typeof address !== "object" || address === null) {
     server.close();
-    throw new chunkK3FW2XZD_cjs.ConfigurationError("OAuth localhost callback failed to bind", {
+    throw new chunk4ZHTIJNE_cjs.ConfigurationError("OAuth localhost callback failed to bind", {
       code: "oauth_bind_failed"
     });
   }
@@ -300,7 +300,7 @@ async function readCodeFromStdin(expectedState, timeoutMs) {
     }).catch(reject);
     setTimeout(() => {
       rl.close();
-      reject(new chunkK3FW2XZD_cjs.ConfigurationError("OAuth manual input timed out", { code: "oauth_timeout" }));
+      reject(new chunk4ZHTIJNE_cjs.ConfigurationError("OAuth manual input timed out", { code: "oauth_timeout" }));
     }, timeoutMs);
   });
   return promise;

package/dist/mcp-auth.js

@@ -1,8 +1,8 @@
-import { atomicWriteJson } from './chunk-VF7EWVDG.js';
-import { assertSecureModes } from './chunk-UQGQFBRL.js';
-import { ConfigurationError } from './chunk-IDCKSLYH.js';
-import './chunk-T7XEKOVW.js';
-import { diag } from './chunk-T7O6K6PX.js';
+import { atomicWriteJson } from './chunk-2GUYQR5P.js';
+import { assertSecureModes } from './chunk-C3NT3PVE.js';
+import { ConfigurationError } from './chunk-ZZMZWBR6.js';
+import './chunk-D4CUGAKZ.js';
+import { diag } from './chunk-XEQ3TM66.js';
 import { randomBytes, createHash } from 'crypto';
 import { createServer } from 'http';
 import { createInterface } from 'readline/promises';