@theokit/sdk 5.15.1 → 5.15.2

package/dist/{chunk-YQ3XC6C2.cjs → chunk-JVH3NNJ3.cjs}

@@ -1,9 +1,9 @@
 'use strict';
 
 var chunkRNXXYF22_cjs = require('./chunk-RNXXYF22.cjs');
-var os = require('os');
-var path = require('path');
-var fs = require('fs');
+var node_os = require('node:os');
+var node_path = require('node:path');
+var node_fs = require('node:fs');
 
 var THEOKIT_DIR_LITERAL = ".theokit";
 var CLAUDE_DIR_NAME = ".claude";
@@ -79,8 +79,8 @@ function reportUndeclaredSources(cwd, declared) {
   );
   for (const adapter of FOREIGN_SOURCES) {
     if (declaredKinds.has(adapter.kind)) continue;
-    const dir = path.join(cwd, adapter.dirName);
-    if (!fs.existsSync(dir)) continue;
+    const dir = node_path.join(cwd, adapter.dirName);
+    if (!node_fs.existsSync(dir)) continue;
     if (reported.has(dir)) continue;
     reported.add(dir);
     chunkRNXXYF22_cjs.diagFailure(
@@ -96,16 +96,16 @@ function getTheokitHome(cwd) {
   if (override !== void 0 && override.length > 0) {
     return override;
   }
-  return path.join(cwd, THEOKIT_DIR_LITERAL);
+  return node_path.join(cwd, THEOKIT_DIR_LITERAL);
 }
 function theokitConfigRoot(cwd) {
-  return path.join(cwd, THEOKIT_DIR_LITERAL);
+  return node_path.join(cwd, THEOKIT_DIR_LITERAL);
 }
 function projectConfigRoots(cwd, sources, surface) {
   const own = nativeAdmitsSurface(sources, surface) ? [theokitConfigRoot(cwd)] : [];
   return [
     ...own,
-    ...adaptersForSurface(foreignOnly(sources), surface).map((a) => path.join(cwd, a.dirName))
+    ...adaptersForSurface(foreignOnly(sources), surface).map((a) => node_path.join(cwd, a.dirName))
   ];
 }
 var NATIVE_KIND = "theokit";
@@ -118,14 +118,14 @@ function foreignOnly(sources) {
   return sources.filter((s) => (typeof s === "string" ? s : s.kind) !== NATIVE_KIND);
 }
 function pluginBundleRoots(cwd, sources) {
-  return projectConfigRoots(cwd, sources, "plugins").map((root) => path.join(root, "plugins"));
+  return projectConfigRoots(cwd, sources, "plugins").map((root) => node_path.join(root, "plugins"));
 }
 function getProfilesRoot() {
-  return path.join(os.homedir(), THEOKIT_DIR_LITERAL, "profiles");
+  return node_path.join(node_os.homedir(), THEOKIT_DIR_LITERAL, "profiles");
 }
 function displayTheokitHome(cwd) {
   const resolved = getTheokitHome(cwd);
-  const home = os.homedir();
+  const home = node_os.homedir();
   if (resolved === home) return "~";
   if (resolved.startsWith(`${home}/`)) {
     return `~${resolved.slice(home.length)}`;
@@ -145,5 +145,5 @@ exports.projectConfigRoots = projectConfigRoots;
 exports.reportUndeclaredSources = reportUndeclaredSources;
 exports.theokitConfigRoot = theokitConfigRoot;
 exports.undefinedVariablesIn = undefinedVariablesIn;
-//# sourceMappingURL=chunk-YQ3XC6C2.cjs.map
-//# sourceMappingURL=chunk-YQ3XC6C2.cjs.map
+//# sourceMappingURL=chunk-JVH3NNJ3.cjs.map
+//# sourceMappingURL=chunk-JVH3NNJ3.cjs.map

package/dist/chunk-JVH3NNJ3.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/runtime/compat/foreign-config-sources.ts","../src/internal/persistence/paths.ts"],"names":["join","existsSync","diagFailure","homedir"],"mappings":";;;;;;;AAmDO,IAAM,mBAAA,GAAsB;AAG5B,IAAM,eAAA,GAAkB;AA+BxB,IAAM,aAAA,GAAqC;AAAA,EAChD,IAAA,EAAM,SAAA;AAAA,EACN,OAAA,EAAS,mBAAA;AAAA,EACT,UAAA,EAAY,CAAC,GAAA,MAAS,EAAE,qBAAqB,GAAA,EAAI;AACnD,CAAA;AAWO,IAAM,kBAAA,GAA0C;AAAA,EACrD,IAAA,EAAM,aAAA;AAAA,EACN,OAAA,EAAS,eAAA;AAAA,EACT,UAAA,EAAY,CAAC,GAAA,MAAS,EAAE,oBAAoB,GAAA,EAAI;AAClD,CAAA;AAEA,IAAM,eAAA,GAAkD,CAAC,kBAAkB,CAAA;AAE3E,IAAM,cAAwD,IAAI,GAAA;AAAA,EAChE,CAAC,aAAA,EAAe,GAAG,eAAe,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,OAAA,EAAS,CAAC,CAAC;AAC/D,CAAA;AASO,SAAS,YAAY,KAAA,EAAiD;AAC3E,EAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,eAAA,CAAgB,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,EAAM,CAAC,CAAC,CAAC,CAAA;AAC9D,EAAA,MAAM,MAA6B,EAAC;AACpC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA;AAC/B,IAAA,IAAI,OAAA,KAAY,UAAa,CAAC,GAAA,CAAI,SAAS,OAAO,CAAA,EAAG,GAAA,CAAI,IAAA,CAAK,OAAO,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,GAAA;AACT;AAgCA,IAAM,eAAA,GAAkB;AAAA,EACtB,SAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAA;AAkCO,SAAS,kBAAA,CACd,SACA,OAAA,EACuB;AACvB,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI,OAAO,WAAW,QAAA,EAAU;AAC9B,MAAA,QAAA,CAAS,KAAK,MAAM,CAAA;AACpB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,IAAU,EAAC;AACjC,IAAA,IAAI,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,KAAM,WAAW,eAAA,CAAgB,QAAA,CAAS,CAAkB,CAAC,CAAA,EAAG;AACrF,MAAA,QAAA,CAAS,IAAA,CAAK,OAAO,IAAI,CAAA;AAAA,IAC3B;AAAA,EACF;AACA,EAAA,OAAO,YAAY,QAAQ,CAAA;AAC7B;AASO,SAAS,qBAAqB,IAAA,EAA+C;AAClF,EAAA,KAAA,MAAW,OAAA,IAAW,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,EAAG;AACzC,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,GAAA,CAAI,OAAO,CAAA;AACvC,IAAA,IAAI,OAAA,KAAY,QAAW,OAAO,OAAA;AAAA,EACpC;AACA,EAAA,OAAO,MAAA;AACT;AAuBO,SAAS,oBAAA,CACd,OAAA,EACA,QAAA,EACA,GAAA,GAAoD,QAAQ,GAAA,EAClD;AAEV,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,UAAA,EAAY,GAAG,CAAA;AAChD,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,KAAA,MAAW,SAAS,QAAA,CAAS,QAAA;AAAA,IAC3B;AAAA,GACF,EAAG;AACD,IAAA,MAAM,IAAA,GAAO,KAAA,CAAM,CAAC,CAAA,IAAK,MAAM,CAAC,CAAA;AAChC,IAAA,IAAI,SAAS,MAAA,EAAW;AACxB,IAAA,IAAI,QAAQ,QAAA,EAAU;AACtB,IAAA,IAAI,GAAA,CAAI,IAAI,CAAA,KAAM,MAAA,EAAW;AAC7B,IAAA,KAAA,CAAM,IAAI,IAAI,CAAA;AAAA,EAChB;AACA,EAAA,OAAO,CAAC,GAAG,KAAK,CAAA;AAClB;AAQA,IAAM,QAAA,uBAAe,GAAA,EAAY;AA4C1B,SAAS,uBAAA,CACd,KACA,QAAA,EACM;AAKN,EAAA,MAAM,gBAAgB,IAAI,GAAA;AAAA,IACxB,YAAY,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAO,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,CAAA,CAAE,IAAK,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,EAAE,IAAI;AAAA,GAC1F;AACA,EAAA,KAAA,MAAW,WAAW,eAAA,EAAiB;AACrC,IAAA,IAAI,aAAA,CAAc,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,EAAG;AACrC,IAAA,MAAM,GAAA,GAAMA,cAAA,CAAK,GAAA,EAAK,OAAA,CAAQ,OAAO,CAAA;AACrC,IAAA,IAAI,CAACC,kBAAA,CAAW,GAAG,CAAA,EAAG;AACtB,IAAA,IAAI,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA,EAAG;AACvB,IAAA,QAAA,CAAS,IAAI,GAAG,CAAA;AAyBhB,IAAAC,6BAAA;AAAA,MACE,CAAA,UAAA,EAAa,QAAQ,OAAO,CAAA,uIAAA,EAEC,QAAQ,IAAI,CAAA,8FAAA,EACK,QAAQ,IAAI,CAAA;AAAA;AAAA,KAE5D;AAAA,EACF;AACF;;;ACpTO,SAAS,eAAe,GAAA,EAAqB;AAClD,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,YAAA,EAAc,IAAA,EAAK;AAChD,EAAA,IAAI,QAAA,KAAa,MAAA,IAAa,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG;AACjD,IAAA,OAAO,QAAA;AAAA,EACT;AACA,EAAA,OAAOF,cAAAA,CAAK,KAAK,mBAAmB,CAAA;AACtC;AAmBO,SAAS,kBAAkB,GAAA,EAAqB;AACrD,EAAA,OAAOA,cAAAA,CAAK,KAAK,mBAAmB,CAAA;AACtC;AAuBO,SAAS,kBAAA,CACd,GAAA,EACA,OAAA,EACA,OAAA,EACU;AACV,EAAA,MAAM,GAAA,GAAM,mBAAA,CAAoB,OAAA,EAAS,OAAO,CAAA,GAAI,CAAC,iBAAA,CAAkB,GAAG,CAAC,CAAA,GAAI,EAAC;AAChF,EAAA,OAAO;AAAA,IACL,GAAG,GAAA;AAAA,IACH,GAAG,kBAAA,CAAmB,WAAA,CAAY,OAAO,GAAG,OAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAMA,cAAAA,CAAK,GAAA,EAAK,CAAA,CAAE,OAAO,CAAC;AAAA,GACtF;AACF;AAGA,IAAM,WAAA,GAAc,SAAA;AAiBpB,SAAS,mBAAA,CACP,SACA,OAAA,EACS;AACT,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA,KAAA,CAAO,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,CAAA,CAAE,IAAA,MAAU,WAAW,CAAA;AAC3F,EAAA,IAAI,QAAA,CAAS,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAClC,EAAA,OAAO,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAO,OAAO,CAAA,KAAM,QAAA,GAAW,IAAA,GAAA,CAAQ,CAAA,CAAE,MAAA,IAAU,EAAC,EAAG,QAAA,CAAS,OAAO,CAAE,CAAA;AACjG;AAQA,SAAS,YACP,OAAA,EACoC;AACpC,EAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA,KAAA,CAAO,OAAO,MAAM,QAAA,GAAW,CAAA,GAAI,CAAA,CAAE,IAAA,MAAU,WAAW,CAAA;AACnF;AAeO,SAAS,iBAAA,CACd,KACA,OAAA,EACU;AAMV,EAAA,OAAO,kBAAA,CAAmB,GAAA,EAAK,OAAA,EAAS,SAAS,CAAA,CAAE,GAAA,CAAI,CAAC,IAAA,KAASA,cAAAA,CAAK,IAAA,EAAM,SAAS,CAAC,CAAA;AACxF;AAeO,SAAS,eAAA,GAA0B;AACxC,EAAA,OAAOA,cAAAA,CAAKG,eAAA,EAAQ,EAAG,mBAAA,EAAqB,UAAU,CAAA;AACxD;AAmBO,SAAS,mBAAmB,GAAA,EAAqB;AACtD,EAAA,MAAM,QAAA,GAAW,eAAe,GAAG,CAAA;AACnC,EAAA,MAAM,OAAOA,eAAA,EAAQ;AACrB,EAAA,IAAI,QAAA,KAAa,MAAM,OAAO,GAAA;AAC9B,EAAA,IAAI,QAAA,CAAS,UAAA,CAAW,CAAA,EAAG,IAAI,GAAG,CAAA,EAAG;AACnC,IAAA,OAAO,CAAA,CAAA,EAAI,QAAA,CAAS,KAAA,CAAM,IAAA,CAAK,MAAM,CAAC,CAAA,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,QAAA;AACT","file":"chunk-JVH3NNJ3.cjs","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { CompatSurface } from \"../../../types/agent.js\";\nimport { diagFailure } from \"../../diagnostics.js\";\n\n/*\n * The foreign configuration dialects this SDK can read, and what each one PRESUMES.\n *\n * ## Why a registry and not a list of directory names\n *\n * `projectConfigRoots` returned `[\".theokit\", \".claude\"]` — two paths — and that shape is what\n * usetheokit/theokit-sdk#522 fell through. A path says WHERE a file lives. It does not say how the\n * file is parsed, and it does not say what runtime the commands inside it were written against.\n *\n * Claude Code defines `$CLAUDE_PROJECT_DIR` for the hook commands in its `settings.json`, and its\n * documentation tells authors to reach project files through it — an absolute path would break for\n * every other person on the team, so the shape that failed here is the shape upstream recommends.\n * This SDK read the file and ran the command without the variable. `sh` expands an unset variable to\n * the empty string, so\n *\n *     bash \"$CLAUDE_PROJECT_DIR/.claude/hooks/guard.sh\"   became   bash \"/.claude/hooks/guard.sh\"\n *\n * which does not exist, which a hook runner correctly reads as a refusal. Every turn denied, in any\n * repository that also had Claude Code set up, with a message naming a file that was present and\n * executable all along.\n *\n * Importing a format means accepting the contract that format presumes. An adapter is where that\n * contract is written down, so the next dialect (`.codex/` is the obvious one) declares its own\n * instead of inheriting a hole.\n *\n * ## What an adapter deliberately does NOT do\n *\n * It does not make the foreign source trusted, and it does not make its hooks permissive: a script\n * that exits non-zero is still a refusal. It supplies the variables the format's authors were\n * entitled to assume, and nothing else — `env` here is merged over the scrubbed inherit policy by\n * `spawnAndCollect`, so it adds names rather than widening what a child can see.\n *\n * @internal\n */\n\n/**\n * The project config directory literal.\n *\n * Renamed from `THEOKIT_DIR_NAME` in #410. Sharing a name with the (now removed) sovereign env var\n * was the MECHANISM of that defect, not scenery: every grep for the variable landed on that const\n * and looked answered, so \"is it read?\" returned five hits and nobody checked what they were.\n *\n * Lives here rather than in `persistence/paths.ts` because a directory name is one third of what a\n * dialect is — the other two being how it parses and what it presumes — and splitting the three\n * across two modules is what let the third go unwritten.\n */\nexport const THEOKIT_DIR_LITERAL = \".theokit\";\n\n/** The Claude Code CLI's project configuration directory. */\nexport const CLAUDE_DIR_NAME = \".claude\";\n\n/** A configuration dialect this SDK understands. `theokit` is native; the rest are foreign. */\nexport interface ConfigSourceAdapter {\n  /** Stable identifier, and what a consumer names to opt in. */\n  readonly kind: string;\n  /** The project-relative directory the dialect keeps its configuration in. */\n  readonly dirName: string;\n  /**\n   * Variables the dialect's own runtime defines for commands it executes, under the dialect's own\n   * documented spellings.\n   *\n   * Every dialect gets a project-directory variable, because none of them can locate a\n   * project-relative script without one — the inherited environment says where the PROCESS is, and\n   * a hook that has to depend on the process cwd is the dependency #522 removed for the foreign\n   * side. Fixing one dialect and leaving the other different was the half-fix.\n   *\n   * The SPELLINGS differ on purpose: a ported script reaches for the name its own docs use, and a\n   * native one for this runtime's.\n   */\n  runtimeEnv(cwd: string): Record<string, string>;\n}\n\n/**\n * The native source. Always read, never opted into, always first for precedence.\n *\n * `THEOKIT_PROJECT_DIR` is the native counterpart of `CLAUDE_PROJECT_DIR` below. This used to be\n * `{}`, on the reasoning that a `.theokit/` hook \"is written against THIS runtime and inherits it\n * already\" — true of the runtime's BEHAVIOUR and not of a project PATH. Nothing in the inherited\n * environment says where the project is, so a native hook had to depend on the process cwd.\n */\nexport const NATIVE_SOURCE: ConfigSourceAdapter = {\n  kind: \"theokit\",\n  dirName: THEOKIT_DIR_LITERAL,\n  runtimeEnv: (cwd) => ({ THEOKIT_PROJECT_DIR: cwd }),\n};\n\n/**\n * Claude Code.\n *\n * `CLAUDE_PROJECT_DIR` is the documented way for a hook command in `settings.json` to reach a file\n * in the project. Only that one variable is supplied: `$CLAUDE_PLUGIN_ROOT` and the rest of that\n * runtime's surface are NOT defined here, because supplying a name whose value this SDK would have\n * to invent is worse than leaving it unset — an invented root sends a script somewhere real and\n * wrong, where an unset one fails loudly.\n */\nexport const CLAUDE_CODE_SOURCE: ConfigSourceAdapter = {\n  kind: \"claude-code\",\n  dirName: CLAUDE_DIR_NAME,\n  runtimeEnv: (cwd) => ({ CLAUDE_PROJECT_DIR: cwd }),\n};\n\nconst FOREIGN_SOURCES: readonly ConfigSourceAdapter[] = [CLAUDE_CODE_SOURCE];\n\nconst BY_DIR_NAME: ReadonlyMap<string, ConfigSourceAdapter> = new Map(\n  [NATIVE_SOURCE, ...FOREIGN_SOURCES].map((a) => [a.dirName, a]),\n);\n\n/**\n * The adapters a caller declared, in declaration order, skipping any name that names no adapter.\n *\n * An unknown name is DROPPED rather than turned into `<cwd>/<name>`: a typo must fail closed. Making\n * a directory out of an unrecognised string would import a dialect nothing knows how to parse — and\n * the whole reason this exists is that a directory name was never enough to describe a dialect.\n */\nexport function adaptersFor(kinds: readonly string[]): ConfigSourceAdapter[] {\n  const byKind = new Map(FOREIGN_SOURCES.map((a) => [a.kind, a]));\n  const out: ConfigSourceAdapter[] = [];\n  for (const kind of kinds) {\n    const adapter = byKind.get(kind);\n    if (adapter !== undefined && !out.includes(adapter)) out.push(adapter);\n  }\n  return out;\n}\n\n/**\n * #586 — re-exported from `types/agent.ts` rather than declared here, which is what it used to be.\n *\n * Two independent declarations of one public contract: `AgentOptions.local.compatSources` was typed\n * by the public one, `persistence/paths.ts` by this one, and neither imported the other. Measured:\n * adding a member to one alone produced ZERO type errors, because structurally-identical unions\n * compare equal and the two halves would simply stop agreeing about which surfaces exist.\n *\n * Neither direction of that drift raises anything. Widen the public type and a caller declares a\n * surface the admission logic ignores; widen this one and the loader admits a surface no public\n * caller can name. Both produce a declaration that reads as honoured and is not — the failure #524\n * exists to prevent, one layer down.\n *\n * `types/` is a leaf by design (theokit#146), so the public declaration is the one that stays and\n * this module imports it. The docblock that lived here — a skill is text entering the system prompt,\n * a hook is command execution, a plugin is code loading — is on the declaration in `types/agent.ts`.\n */\nexport type { CompatSurface };\n\n/**\n * The runtime list. A type cannot be enumerated at runtime, so this is the one place the members are\n * written twice by necessity — and {@link assertCompatSurfacesExhaustive} below is what stops that\n * second copy from being a second source of truth.\n *\n * `as const satisfies` rather than an annotation, and the difference is the whole guard: annotating\n * it `readonly CompatSurface[]` widens each entry back to `CompatSurface`, so the check below\n * compares a type against itself and passes on any drift. Measured on the first attempt — a member\n * added to the public type alone produced zero errors. `satisfies` keeps the literals while still\n * rejecting an entry that is not a surface, which is both directions at once.\n */\nconst COMPAT_SURFACES = [\n  \"context\",\n  \"hooks\",\n  \"plugins\",\n  \"skills\",\n  \"subagents\",\n] as const satisfies readonly CompatSurface[];\n\n/**\n * Compile-time guard: adding a member to {@link CompatSurface} without adding it to\n * {@link COMPAT_SURFACES} fails `tsc` here.\n *\n * Never called. It exists so the pairing is checked by the compiler rather than by whoever\n * remembers — which is the entire lesson of #586, applied to the copy that could not be removed.\n */\nfunction assertCompatSurfacesExhaustive(surface: CompatSurface): (typeof COMPAT_SURFACES)[number] {\n  return surface;\n}\nvoid assertCompatSurfacesExhaustive;\n\n/**\n * A declared foreign source: a bare kind, or a kind with the surfaces it may be read for.\n */\nexport type CompatSourceDeclaration =\n  | string\n  | { readonly kind: string; readonly import?: readonly string[] };\n\n/**\n * The adapters admitted to ONE surface.\n *\n * Three rules, and each one fails closed:\n *\n * - A bare string admits every surface. It is what `5.0.0-next.1` published, so narrowing it\n *   silently would turn a working opt-in into a no-op — the exact defect #524 is about, one level\n *   up.\n * - An object with no `import` admits nothing. The issue's own rule, and safe to apply strictly\n *   because the object form is new and nobody can be depending on it.\n * - An unrecognised surface name is dropped rather than matched loosely, for the same reason an\n *   unrecognised KIND is dropped in {@link adaptersFor}: a typo must not silently widen access.\n */\nexport function adaptersForSurface(\n  sources: readonly CompatSourceDeclaration[],\n  surface: CompatSurface,\n): ConfigSourceAdapter[] {\n  const admitted: string[] = [];\n  for (const source of sources) {\n    if (typeof source === \"string\") {\n      admitted.push(source);\n      continue;\n    }\n    const wanted = source.import ?? [];\n    if (wanted.some((s) => s === surface && COMPAT_SURFACES.includes(s as CompatSurface))) {\n      admitted.push(source.kind);\n    }\n  }\n  return adaptersFor(admitted);\n}\n\n/**\n * The adapter whose directory an absolute config path sits under, or `undefined` for a path that\n * belongs to no registered dialect.\n *\n * Matched on the path SEGMENT rather than with `includes`, so a workspace that happens to live under\n * `/home/me/.claude-backups/repo` does not read as a Claude Code source.\n */\nexport function adapterForConfigPath(path: string): ConfigSourceAdapter | undefined {\n  for (const segment of path.split(/[\\\\/]/)) {\n    const adapter = BY_DIR_NAME.get(segment);\n    if (adapter !== undefined) return adapter;\n  }\n  return undefined;\n}\n\n/**\n * Variable references in a shell command that nothing will define.\n *\n * The second half of #522, and the half that cost the debugging session. `sh` expands an unset\n * variable to the empty string and says nothing, so the failure surfaces ten characters later as a\n * path: `bash: /.claude/hooks/guard.sh: No such file or directory` — which reads as \"your script is\n * missing\" while the script is present and executable. Nothing in that message contains the name of\n * the variable that was actually missing, so the reader looks in the wrong place.\n *\n * Checked against BOTH the process environment and the variables the dialect supplies, because\n * either is a legitimate source: a hook may reasonably use `$HOME`.\n *\n * ## What it deliberately does not try to be\n *\n * This is not a shell parser. It finds `$NAME` and `${NAME}` outside single quotes, which is the\n * shape a config file's hook commands take. It does NOT understand `${NAME:-default}` (a default\n * makes the variable optional, so it is not reported), assignments earlier in the same command, or\n * variables a sourced script exports. A false NEGATIVE there costs the old behaviour — the confusing\n * path error — and a false positive would deny a hook that would have worked, so the parse errs\n * toward silence and the check only ever ADDS a name to a failure that already happened.\n */\nexport function undefinedVariablesIn(\n  command: string,\n  supplied: Readonly<Record<string, string>>,\n  env: Readonly<Record<string, string | undefined>> = process.env,\n): string[] {\n  // Single-quoted spans are literal in `sh`: `echo '$FOO'` prints the dollar sign.\n  const unquoted = command.replace(/'[^']*'/g, \" \");\n  const names = new Set<string>();\n  for (const match of unquoted.matchAll(\n    /\\$\\{([A-Za-z_][A-Za-z0-9_]*)\\}|\\$([A-Za-z_][A-Za-z0-9_]*)/g,\n  )) {\n    const name = match[1] ?? match[2];\n    if (name === undefined) continue;\n    if (name in supplied) continue;\n    if (env[name] !== undefined) continue;\n    names.add(name);\n  }\n  return [...names];\n}\n\n/**\n * Workspaces already reported, so repeated agent construction in one process says it once.\n *\n * Keyed by the resolved directory rather than by dialect kind, so a long-lived host that drives\n * several workspaces still reports each of them.\n */\nconst reported = new Set<string>();\n\n/**\n * Reports a foreign configuration directory that exists in the workspace and was not declared.\n *\n * ## Why the flip needs a voice\n *\n * Before #524 a `.claude/` was read with no opt-in; after it, the same directory is ignored. From\n * inside the repository the two states are indistinguishable — the hook file is there, it is\n * executable, and it does not run. The only remaining way to learn why is a CHANGELOG entry for a\n * version the reader may not know they crossed.\n *\n * ## Why `diagFailure` rather than `diag` (#563)\n *\n * This used `diag`, on the reasoning that ignoring an undeclared directory is not a failure and\n * that a repository which does NOT want the import should not pay a stderr line for behaving as\n * instructed. The reasoning was sound and rested on a premise nobody checked: that a host would\n * have installed a sink.\n *\n * Measured against the published `5.0.0`. `diag` returns without doing anything when no sink is\n * installed. The SDK installs none — `currentSink()` reads a `globalThis` slot only\n * `setDiagnosticsSink` fills. Neither observable host installs one either: `theocode` renamed the\n * key, and `theokit` exports `installDiagnosticSink` and never calls it. Two hosts out of two, and\n * the SDK itself. So the message the CHANGELOG promised — \"says so once, on the diagnostics\n * channel\" — reached nobody, while the consumer lost hooks, skills, subagents and plugins.\n *\n * A mitigation announced in release notes for a silent loss of capability is not a diagnostic. It\n * is the error path of the breaking change itself, and `diagFailure` exists for exactly the message\n * that must not be swallowed.\n *\n * The cost the old reasoning named is real and is now paid: a repository that wants the directory\n * ignored sees a line. What makes that acceptable — ONCE per directory per process, not per turn\n * (`reported` below); and before #524 that repository was having `.claude/` imported anyway, so the\n * line it now sees confirms the fix it wanted. The asymmetry is one line of text against silently\n * losing four subsystems.\n *\n * A host that installs a sink still owns its render surface: `diagFailure` prefers the sink and\n * only falls back to stderr when there is none.\n *\n * NOT solved here: there is no way to say \"I know, and I want none\". `compatSources: []` would be\n * the natural spelling, but `resolveCompatSources` collapses it into the same `[]` an absent option\n * produces, so this function cannot tell them apart. If the noise turns out to matter, threading\n * that distinction through is the shape of the fix.\n */\nexport function reportUndeclaredSources(\n  cwd: string,\n  declared: readonly CompatSourceDeclaration[],\n): void {\n  // A kind named with a NARROW import list has still been declared: the consumer knows the\n  // directory is there and chose which surfaces to admit. Warning them anyway would be the noise\n  // that gets a warning ignored, and this one has exactly one job — telling somebody who does NOT\n  // know the directory is being skipped.\n  const declaredKinds = new Set(\n    adaptersFor(declared.map((d) => (typeof d === \"string\" ? d : d.kind))).map((a) => a.kind),\n  );\n  for (const adapter of FOREIGN_SOURCES) {\n    if (declaredKinds.has(adapter.kind)) continue;\n    const dir = join(cwd, adapter.dirName);\n    if (!existsSync(dir)) continue;\n    if (reported.has(dir)) continue;\n    reported.add(dir);\n    // THE FILE IS NAMED FIRST because it is the entry point this message's reader can use.\n    //\n    // #524 gives the declaration two entry points for one shape: `.theokit/config.json`'s\n    // `compat.adapters`, and `local.compatSources` in code. Until this change the warning named\n    // only the second — and `local` is an argument the SDK's EMBEDDER passes, not something the\n    // person reading the line can reach. Reported by the `theocode` session against 5.0.1: a user\n    // of a host that embeds this SDK is told to pass an option that does not exist on their\n    // surface, which is advice that is true about the mechanism and unusable as an action.\n    //\n    // The file is writable by anyone holding the workspace, which is exactly who sees this line.\n    //\n    // WHAT THIS LINE CANNOT KNOW, and it is a real limit rather than a caveat for form's sake. It\n    // reports one fact: this SDK is ignoring the directory because nothing declared it. A HOST\n    // embedding the SDK may be withholding the same directory for its own reasons — `theocode`\n    // gates repository configuration on a trust posture — and the SDK cannot see that gate.\n    //\n    // So in a host that is also withholding, following this advice makes the warning stop and\n    // changes nothing the user can do. That silence is honest about the SDK (it did stop ignoring\n    // the directory) and uninformative about the outcome. Measured by the `theocode` session with\n    // the control that settles it: a NATIVE `.theokit/` hook does not fire there either, so the\n    // host's gate — not this declaration — is what holds the capability back.\n    //\n    // Nothing here can fix that. If a host ever gains a way to say \"I am withholding this too\",\n    // this is the line where that belongs.\n    diagFailure(\n      `[theokit] ${adapter.dirName}/ is present but not declared, so its hooks, skills, subagents, ` +\n        `plugins and rules are ignored. To read it, add ` +\n        `{\"compat\":{\"adapters\":[\"${adapter.kind}\"]}} to .theokit/config.json — or, if you embed ` +\n        `this SDK, pass local: { compatSources: [\"${adapter.kind}\"] } ` +\n        `(usetheokit/theokit-sdk#524).\\n`,\n    );\n  }\n}\n","/**\n * Path resolution for SDK state files (ADR D60).\n *\n * Theokit anchors state at `<cwd>/.theokit/` by default (per-cwd). An\n * optional `THEOKIT_HOME` environment variable overrides this, enabling\n * test isolation, profile switching, and multi-tenant deployments.\n *\n * Rules:\n *   - `getTheokitHome(cwd)` is the canonical resolver **for cwd-anchored state**. Never hardcode\n *     `path.join(cwd, \".theokit\")` in callers — use this function so tests\n *     and overrides stay consistent.\n *\n *     M94 — this comment said \"the ONLY canonical resolver\", and stopped being true: the\n *     transcript gained `transcriptRoot()`, which is **home-anchored** (`~/.theokit`) with the same\n *     `THEOKIT_HOME` override. The two defaults differ on purpose — unifying would move the\n *     transcript of everyone who does NOT set the variable, which is a data migration and not a\n *     re-export.\n *\n *     A consequence worth writing down: **without `THEOKIT_HOME` the state stays split in two**\n *     — registry in `<cwd>/.theokit`, transcript in `~/.theokit`. M94 unifies only for those who set\n *     the variable. Unifying both defaults is another milestone's work.\n *   - `getProfilesRoot()` is intentionally home-anchored (not affected by\n *     `THEOKIT_HOME`) so `theokit profile list` discovers all profiles\n *     regardless of which is active.\n *   - `displayTheokitHome(cwd)` returns a human-readable path for logs.\n *\n * @internal\n */\n\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nimport {\n  adaptersForSurface,\n  type CompatSourceDeclaration,\n  type CompatSurface,\n  THEOKIT_DIR_LITERAL,\n} from \"../runtime/compat/foreign-config-sources.js\";\n\n// The directory names live with the dialect registry that owns them — a name is one third of what a\n// configuration dialect is, and keeping the three together is what stops the next one shipping\n// without its runtime contract (#522).\n\n/**\n * Resolve the directory cwd-anchored SDK state lives in.\n *\n * `THEOKIT_HOME` wins when it is set and not blank after trimming; the trimmed value is used, and\n * it is used VERBATIM — it is not resolved against `cwd`, so a relative value stays relative and\n * `.theokit` is not appended to it. Otherwise the answer is `<cwd>/.theokit`.\n *\n * The environment is read on every call, so a change to the variable takes effect immediately\n * rather than being frozen at import.\n *\n * This creates nothing and checks nothing: the returned path may not exist, and the caller owns\n * the `mkdir`. Call it instead of writing `join(cwd, \".theokit\")` by hand, or the override stops\n * working for that one call site and tests silently touch the real home.\n *\n * Not the whole story about where state lives — the transcript is home-anchored via\n * `transcriptRoot()`, honoring the same variable but defaulting to `~/.theokit`. With\n * `THEOKIT_HOME` unset, state is genuinely split between two roots.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport function getTheokitHome(cwd: string): string {\n  const override = process.env.THEOKIT_HOME?.trim();\n  if (override !== undefined && override.length > 0) {\n    return override;\n  }\n  return join(cwd, THEOKIT_DIR_LITERAL);\n}\n\n/**\n * The project's own configuration root: `<cwd>/.theokit`, always — never `THEOKIT_HOME`.\n *\n * `THEOKIT_HOME` relocates cwd-anchored SDK STATE (sessions, credentials). A project's\n * CONFIGURATION belongs to the repository: hooks, MCP servers, context sources, subagents, the\n * personality a project declares, all committed to git and shared by a team. Following the\n * override for any of them would move where a project's declared capabilities come from — a\n * behaviour change wearing the costume of a refactor, which is exactly what this function exists\n * to make impossible to do by accident: every config-class reader calls this instead of writing\n * `join(cwd, \".theokit\")` by hand.\n *\n * NOT for the `.claude/`-style foreign roots {@link adaptersForSurface} adds — those are additive,\n * opt-in, and each has its own directory name.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport function theokitConfigRoot(cwd: string): string {\n  return join(cwd, THEOKIT_DIR_LITERAL);\n}\n\n/**\n * Every directory a project's configuration may be read from, in precedence order.\n *\n * `.theokit` first — via {@link theokitConfigRoot}, so it is NEVER affected by `THEOKIT_HOME` for\n * the reason documented there — then `.claude`. The order is the whole contract: a project that\n * declares a skill, agent or rule in both means the explicit namespace to win, and a caller merging\n * these roots must therefore keep the FIRST occurrence of a name rather than the last.\n *\n * `.claude` is read because the formats already agree and only the location did not. Measured\n * 2026-08-26: the SKILL.md frontmatter this SDK requires (`name` + `description`) is exactly what\n * the CLI writes, its hook config is the same JSON shape, and 59 of the CLI's agent declarations\n * parse here unchanged. A repository set up for the CLI was failing on the directory name alone.\n *\n * NOT a rename of `.theokit`, and not a migration. Both are read, so nothing that works today stops\n * working — which is why this returns a LIST and not a single resolved answer.\n *\n * Creates nothing and checks nothing; either path may not exist, and the caller owns that.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport function projectConfigRoots(\n  cwd: string,\n  sources: readonly CompatSourceDeclaration[],\n  surface: CompatSurface,\n): string[] {\n  const own = nativeAdmitsSurface(sources, surface) ? [theokitConfigRoot(cwd)] : [];\n  return [\n    ...own,\n    ...adaptersForSurface(foreignOnly(sources), surface).map((a) => join(cwd, a.dirName)),\n  ];\n}\n\n/** The kind a consumer names to declare THIS package's own root. */\nconst NATIVE_KIND = \"theokit\";\n\n/**\n * #631 — whether the native root contributes `surface`.\n *\n * Undeclared means every surface, which is what this function returned unconditionally before and\n * is what every existing caller gets. A consumer that names the kind is opting into the same\n * per-surface contract a foreign dialect already has, and the defaults match on purpose: a bare\n * string admits everything, an object admits exactly what its `import` lists. Two vocabularies that\n * look identical and disagree about the default would be worse than one.\n *\n * The asymmetry this closes had a measured cost. `hookConfigCandidates` reads `settings.json` from\n * every root, so a consumer keeping its own configuration in `.theokit/settings.json` had that\n * file's `hooks` key executed by this package, and `settingSources` gave it no way to decline: it\n * grants a foreign dialect per SOURCE, not per surface, so dropping `claude-code` to avoid its\n * hooks would also drop its skills, agents and rules.\n */\nfunction nativeAdmitsSurface(\n  sources: readonly CompatSourceDeclaration[],\n  surface: CompatSurface,\n): boolean {\n  const declared = sources.filter((s) => (typeof s === \"string\" ? s : s.kind) === NATIVE_KIND);\n  if (declared.length === 0) return true;\n  return declared.some((s) => (typeof s === \"string\" ? true : (s.import ?? []).includes(surface)));\n}\n\n/**\n * The native declaration is consumed here and must not reach `adaptersForSurface`, which resolves\n * kinds to FOREIGN adapters. It would be dropped there as unrecognised — harmlessly, today — but\n * relying on that would make this behaviour depend on another function failing to find something,\n * which is the kind of coupling that breaks the moment an adapter of that name is added.\n */\nfunction foreignOnly(\n  sources: readonly CompatSourceDeclaration[],\n): readonly CompatSourceDeclaration[] {\n  return sources.filter((s) => (typeof s === \"string\" ? s : s.kind) !== NATIVE_KIND);\n}\n\n/**\n * Every directory that may hold a plugin BUNDLE contributed by the Claude Code CLI.\n *\n * A CLI plugin is not a JS entry point — it is a folder whose `skills/` and `agents/` are what it\n * exists to provide. Measured 2026-08-26 on an installed one: seven agents and three skills beside\n * a manifest in `.claude-plugin/plugin.json`. Parsing that manifest and stopping there produced a\n * plugin that loaded and did nothing.\n *\n * Project-scoped deliberately. The CLI also keeps plugins under `~/.claude/plugins/cache`, behind\n * its own installer and enable/disable state — reproducing that is an installation system, not\n * reading a project's configuration, and guessing at someone's enablement would run code they\n * turned off.\n */\nexport function pluginBundleRoots(\n  cwd: string,\n  sources: readonly CompatSourceDeclaration[],\n): string[] {\n  // Always the `plugins` surface, including when the caller wants the SKILLS a bundle carries.\n  // A bundle is code, and its skills arrive attached to it: admitting `skills` alone must not\n  // reach inside a foreign plugin directory, or the narrower permission would silently grant the\n  // wider one. `skills-manager` and `subagents-loader` both read bundle contents and both go\n  // through here, so the rule holds in one place rather than three.\n  return projectConfigRoots(cwd, sources, \"plugins\").map((root) => join(root, \"plugins\"));\n}\n\n/**\n * The directory holding every profile: always `~/.theokit/profiles`, from `os.homedir()`.\n *\n * Deliberately NOT affected by `THEOKIT_HOME`, which is the one thing to remember about it. If it\n * followed the override, a session pointed at one profile would only be able to see that profile,\n * and `theokit profile list` could never enumerate the rest. Profiles are the thing the override\n * switches between, so their index cannot live behind it.\n *\n * Takes no `cwd` for the same reason. Creates nothing; the path may not exist.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport function getProfilesRoot(): string {\n  return join(homedir(), THEOKIT_DIR_LITERAL, \"profiles\");\n}\n\n/**\n * The same path `getTheokitHome(cwd)` returns, shortened for display: the home directory prefix\n * collapses to `~`, so `/home/ada/.theokit` prints as `~/.theokit`.\n *\n * For humans only — log lines, CLI output, error messages. The result is NOT a usable path: `~`\n * is a shell convention that `fs` does not expand, so passing this to a filesystem call resolves\n * a literal directory named `~` relative to the process cwd. Use `getTheokitHome` for anything\n * that touches disk.\n *\n * Collapsing is a prefix match on the home directory followed by a literal `/`, so a sibling like\n * `/home/adalovelace` is left alone even though `/home/ada` is a string prefix of it. A path\n * outside the home directory comes back unchanged — and so does a Windows path, where the\n * separator is a backslash and the prefix test therefore never matches.\n *\n * Semver-exempt: reachable via the `@theokit/sdk/internal/persistence` sub-path, which the package\n * declares in `exports` but does NOT cover with its semver contract.\n */\nexport function displayTheokitHome(cwd: string): string {\n  const resolved = getTheokitHome(cwd);\n  const home = homedir();\n  if (resolved === home) return \"~\";\n  if (resolved.startsWith(`${home}/`)) {\n    return `~${resolved.slice(home.length)}`;\n  }\n  return resolved;\n}\n"]}

package/dist/{chunk-VWYFGE27.cjs → chunk-KC2HKUPT.cjs}

@@ -1,21 +1,21 @@
 'use strict';
 
 var chunkKRD3GQAA_cjs = require('./chunk-KRD3GQAA.cjs');
-var chunkSWALPLFQ_cjs = require('./chunk-SWALPLFQ.cjs');
-var chunk3KIUY67P_cjs = require('./chunk-3KIUY67P.cjs');
-var chunk3WKWBYPO_cjs = require('./chunk-3WKWBYPO.cjs');
-var chunkAT2PESXB_cjs = require('./chunk-AT2PESXB.cjs');
+var chunkRTCO3USA_cjs = require('./chunk-RTCO3USA.cjs');
+var chunkVHY6NVCJ_cjs = require('./chunk-VHY6NVCJ.cjs');
+var chunk6EHOJLJ3_cjs = require('./chunk-6EHOJLJ3.cjs');
+var chunk2UYAL4N7_cjs = require('./chunk-2UYAL4N7.cjs');
 var chunkMHUOVS5I_cjs = require('./chunk-MHUOVS5I.cjs');
 var chunkU3DW3WDE_cjs = require('./chunk-U3DW3WDE.cjs');
-var chunkZOFRNNZD_cjs = require('./chunk-ZOFRNNZD.cjs');
+var chunkIZV72OEI_cjs = require('./chunk-IZV72OEI.cjs');
 var chunkCEGU5AVD_cjs = require('./chunk-CEGU5AVD.cjs');
 var chunkRNXXYF22_cjs = require('./chunk-RNXXYF22.cjs');
-var os = require('os');
-var path = require('path');
-var promises = require('fs/promises');
-var crypto = require('crypto');
-var fs = require('fs');
-var module$1 = require('module');
+var node_os = require('node:os');
+var node_path = require('node:path');
+var promises = require('node:fs/promises');
+var node_crypto = require('node:crypto');
+var node_fs = require('node:fs');
+var node_module = require('node:module');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
 // src/internal/memory/storage/fact-ceiling.ts
@@ -40,19 +40,19 @@ function asMemoryRoot(dir) {
   return dir;
 }
 function projectMemoryDir(cwd) {
-  return path.join(cwd, ...DEFAULT_SUBPATH);
+  return node_path.join(cwd, ...DEFAULT_SUBPATH);
 }
 function claudeProjectMemoryDir(cwd) {
   const home = process.env.CLAUDE_CONFIG_DIR?.trim();
-  const root = home !== void 0 && home.length > 0 ? home : path.join(os.homedir(), ".claude");
-  return path.join(root, "projects", chunk3WKWBYPO_cjs.encodeProjectDir(chunkSWALPLFQ_cjs.findGitRoot(cwd) ?? cwd), "memory");
+  const root = home !== void 0 && home.length > 0 ? home : node_path.join(node_os.homedir(), ".claude");
+  return node_path.join(root, "projects", chunk6EHOJLJ3_cjs.encodeProjectDir(chunkRTCO3USA_cjs.findGitRoot(cwd) ?? cwd), "memory");
 }
 function resolveMemoryRoot(cwd, config) {
   const declared = config?.directory;
   if (declared === void 0) return projectMemoryDir(cwd);
   const trimmed = declared.trim();
-  if (trimmed.startsWith("~/")) return path.join(os.homedir(), trimmed.slice(2));
-  if (trimmed.length === 0 || !path.isAbsolute(trimmed)) {
+  if (trimmed.startsWith("~/")) return node_path.join(node_os.homedir(), trimmed.slice(2));
+  if (trimmed.length === 0 || !node_path.isAbsolute(trimmed)) {
     throw new chunkCEGU5AVD_cjs.ConfigurationError(
       `memory.directory must be an absolute path or start with "~/". Received: ${JSON.stringify(declared)}`,
       { code: "invalid_memory_directory" }
@@ -76,10 +76,10 @@ function indexBudgetWarning(index, root) {
 }
 function claudeProjectMemoryDirFor(root) {
   const home = process.env.CLAUDE_CONFIG_DIR?.trim();
-  const claudeHome = home !== void 0 && home.length > 0 ? home : path.join(os.homedir(), ".claude");
-  const prefix = path.join(claudeHome, "projects");
-  const isUnderProjects = root.startsWith(`${prefix}${path.sep}`);
-  return isUnderProjects && root.endsWith(`${path.sep}memory`) ? root : "";
+  const claudeHome = home !== void 0 && home.length > 0 ? home : node_path.join(node_os.homedir(), ".claude");
+  const prefix = node_path.join(claudeHome, "projects");
+  const isUnderProjects = root.startsWith(`${prefix}${node_path.sep}`);
+  return isUnderProjects && root.endsWith(`${node_path.sep}memory`) ? root : "";
 }
 function memoryIndexRoot(cwd, store) {
   return claudeProjectMemoryDirFor(store) === "" ? store : projectMemoryDir(cwd);
@@ -96,12 +96,12 @@ function memoryReadRoots(cwd, config) {
 var MEMORY_KINDS = ["user", "feedback", "project", "reference"];
 function legacyMemoryJsonPath(cwd, config) {
   if (config.storePath !== void 0) {
-    return path.resolve(cwd, config.storePath);
+    return node_path.resolve(cwd, config.storePath);
   }
-  const namespace = chunk3KIUY67P_cjs.sanitizeIdentifier(config.namespace ?? "default");
-  const scope = chunk3KIUY67P_cjs.sanitizeIdentifier(config.scope ?? "agent", { maxLen: 16 });
-  const userId = chunk3KIUY67P_cjs.sanitizeIdentifier(config.userId ?? "default");
-  return chunk3KIUY67P_cjs.safePathJoin(cwd, ".theokit", "memory", namespace, `${scope}-${userId}.json`);
+  const namespace = chunkVHY6NVCJ_cjs.sanitizeIdentifier(config.namespace ?? "default");
+  const scope = chunkVHY6NVCJ_cjs.sanitizeIdentifier(config.scope ?? "agent", { maxLen: 16 });
+  const userId = chunkVHY6NVCJ_cjs.sanitizeIdentifier(config.userId ?? "default");
+  return chunkVHY6NVCJ_cjs.safePathJoin(cwd, ".theokit", "memory", namespace, `${scope}-${userId}.json`);
 }
 
 // src/internal/memory/storage/memory-file.ts
@@ -220,7 +220,7 @@ function slugForFact(text) {
   if (slug.length === 0) {
     slug = text.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, MAX_SLUG_LENGTH).replace(/-+$/, "");
   }
-  return SAFE_SLUG.test(slug) ? slug : chunk3KIUY67P_cjs.safeFilenameForId(text);
+  return SAFE_SLUG.test(slug) ? slug : chunkVHY6NVCJ_cjs.safeFilenameForId(text);
 }
 function titleForFact(text) {
   const words = topicWords(text);
@@ -356,10 +356,10 @@ var MEMORY_MD_HEADER = "# Memory Index\n";
 var FACTS_HEADING = "## Facts";
 var MAX_NAME_VARIANTS = 50;
 function memoryMdPath(root) {
-  return path.join(root, "MEMORY.md");
+  return node_path.join(root, "MEMORY.md");
 }
 function notesDir(root) {
-  return path.join(root, "notes");
+  return node_path.join(root, "notes");
 }
 function byNaturalName(a, b) {
   const split = (f) => {
@@ -395,7 +395,7 @@ async function readMemoryFilesIn(dir) {
 }
 async function readLegacyFactsSectionIn(dir) {
   try {
-    return parseFactsSection(await promises.readFile(path.join(dir, "MEMORY.md"), "utf8"));
+    return parseFactsSection(await promises.readFile(node_path.join(dir, "MEMORY.md"), "utf8"));
   } catch {
     return [];
   }
@@ -405,10 +405,10 @@ async function countFactsIn(dir) {
   let count = 0;
   for (const entry of entries) {
     if (!entry.endsWith(".md") || entry === "MEMORY.md") continue;
-    const raw = await unlessMissing(promises.readFile(path.join(dir, entry), "utf8"));
+    const raw = await unlessMissing(promises.readFile(node_path.join(dir, entry), "utf8"));
     if (raw !== void 0 && parseMemoryFile(raw) !== void 0) count += 1;
   }
-  const index = await unlessMissing(promises.readFile(path.join(dir, "MEMORY.md"), "utf8"));
+  const index = await unlessMissing(promises.readFile(node_path.join(dir, "MEMORY.md"), "utf8"));
   return index === void 0 ? count : count + parseFactsSection(index).length;
 }
 async function unlessMissing(read) {
@@ -432,7 +432,7 @@ async function readMemoryFileIn(dir, entry) {
   if (!entry.endsWith(".md") || entry === "MEMORY.md") return void 0;
   let raw;
   try {
-    raw = await promises.readFile(path.join(dir, entry), "utf8");
+    raw = await promises.readFile(node_path.join(dir, entry), "utf8");
   } catch {
     return void 0;
   }
@@ -472,8 +472,8 @@ function appendFactToMarkdown(cwd, fact, targetDir = projectMemoryDir(cwd), opti
 }
 var CEILING_LOCK = { retries: 10 };
 async function withCeilingLock(targetDir, fn) {
-  const lockTarget = path.resolve(targetDir);
-  await promises.mkdir(path.dirname(lockTarget), { recursive: true });
+  const lockTarget = node_path.resolve(targetDir);
+  await promises.mkdir(node_path.dirname(lockTarget), { recursive: true });
   return chunkMHUOVS5I_cjs.withFileLock(lockTarget, fn, CEILING_LOCK);
 }
 async function writeFactFile(targetDir, fact, text, maxFacts) {
@@ -484,8 +484,8 @@ async function writeFactFile(targetDir, fact, text, maxFacts) {
   await assertRoomForNewFact(targetDir, maxFacts, observations);
   await promises.mkdir(targetDir, { recursive: true });
   const description = fact.description?.trim() ?? text;
-  await chunkZOFRNNZD_cjs.replaceFileAtomic(
-    path.join(targetDir, `${name}.md`),
+  await chunkIZV72OEI_cjs.replaceFileAtomic(
+    node_path.join(targetDir, `${name}.md`),
     renderMemoryFile({
       name,
       description,
@@ -496,7 +496,7 @@ async function writeFactFile(targetDir, fact, text, maxFacts) {
     })
   );
   const index = await nextIndex(targetDir, description, name, title);
-  await chunkZOFRNNZD_cjs.replaceFileAtomic(path.join(targetDir, "MEMORY.md"), index);
+  await chunkIZV72OEI_cjs.replaceFileAtomic(node_path.join(targetDir, "MEMORY.md"), index);
   const warning = indexBudgetWarning(index, targetDir);
   if (warning !== void 0) chunkRNXXYF22_cjs.diag(`[theokit-sdk] ${warning}
 `);
@@ -507,7 +507,7 @@ async function resolveName(dir, base, text) {
     const candidate = i === 1 ? base : `${base}-${i}`;
     let existing;
     try {
-      existing = await promises.readFile(path.join(dir, `${candidate}.md`), "utf8");
+      existing = await promises.readFile(node_path.join(dir, `${candidate}.md`), "utf8");
     } catch {
       return candidate;
     }
@@ -515,12 +515,12 @@ async function resolveName(dir, base, text) {
     if (parsed === void 0) return candidate;
     if (normalizeFactText(parsed.body) === wanted) return candidate;
   }
-  return slugForFact(text) === base ? chunk3KIUY67P_cjs.safeFilenameForId(text) : slugForFact(text);
+  return slugForFact(text) === base ? chunkVHY6NVCJ_cjs.safeFilenameForId(text) : slugForFact(text);
 }
 async function nextObservationCount(dir, name, text) {
   let existing;
   try {
-    existing = await promises.readFile(path.join(dir, `${name}.md`), "utf8");
+    existing = await promises.readFile(node_path.join(dir, `${name}.md`), "utf8");
   } catch {
     return 1;
   }
@@ -536,7 +536,7 @@ function normalizeFactText(text) {
 async function nextIndex(dir, text, name, title) {
   let existing = "";
   try {
-    existing = await promises.readFile(path.join(dir, "MEMORY.md"), "utf8");
+    existing = await promises.readFile(node_path.join(dir, "MEMORY.md"), "utf8");
   } catch {
     existing = "";
   }
@@ -570,10 +570,10 @@ async function appendFact(cwd, config, fact) {
 }
 var MAX_TURN_CHARS = 2e3;
 function sessionsDir(root) {
-  return path.join(root, "sessions");
+  return node_path.join(root, "sessions");
 }
 function sessionSummaryPath(root, runId) {
-  return path.join(sessionsDir(root), `${chunk3KIUY67P_cjs.safeFilenameForId(runId, { maxLen: 128 })}.md`);
+  return node_path.join(sessionsDir(root), `${chunkVHY6NVCJ_cjs.safeFilenameForId(runId, { maxLen: 128 })}.md`);
 }
 function truncate(text) {
   if (text.length <= MAX_TURN_CHARS) return text;
@@ -603,7 +603,7 @@ async function writeSessionSummary(input) {
     safeAssistant,
     ""
   ].join("\n");
-  await chunkZOFRNNZD_cjs.replaceFileAtomic(path, body);
+  await chunkIZV72OEI_cjs.replaceFileAtomic(path, body);
 }
 async function listMarkdownIn(dir, root, options = {}) {
   let entries;
@@ -615,8 +615,8 @@ async function listMarkdownIn(dir, root, options = {}) {
   }
   const skip = options.skip ?? [];
   return entries.filter((entry) => entry.endsWith(".md") && !skip.includes(entry)).map((entry) => {
-    const absolutePath = path.join(dir, entry);
-    return { absolutePath, relPath: path.relative(root, absolutePath) };
+    const absolutePath = node_path.join(dir, entry);
+    return { absolutePath, relPath: node_path.relative(root, absolutePath) };
   });
 }
 
@@ -625,7 +625,7 @@ async function discoverSessionFiles(root) {
   return await listMarkdownIn(sessionsDir(root), root);
 }
 function wikiDir(root) {
-  return path.join(root, "wiki");
+  return node_path.join(root, "wiki");
 }
 async function discoverWikiFiles(root) {
   return await listMarkdownIn(wikiDir(root), root);
@@ -660,7 +660,7 @@ async function collectMarkdownFiles(root) {
     await promises.stat(memoryMdPath(root));
     results.push({
       absolutePath: memoryMdPath(root),
-      relPath: path.relative(root, memoryMdPath(root)),
+      relPath: node_path.relative(root, memoryMdPath(root)),
       source: "memory"
     });
   } catch {
@@ -686,7 +686,7 @@ async function collectMarkdownFiles(root) {
   return results;
 }
 function sha256(text) {
-  return crypto.createHash("sha256").update(text).digest("hex");
+  return node_crypto.createHash("sha256").update(text).digest("hex");
 }
 function truncateSnippet(text) {
   const max = 500;
@@ -736,7 +736,7 @@ var PRAGMA_STATEMENTS = [
 
 // src/internal/memory/index-db.ts
 async function openMemoryDb(opts) {
-  return chunkAT2PESXB_cjs.openSqliteResilient({
+  return chunk2UYAL4N7_cjs.openSqliteResilient({
     filePath: opts.filePath,
     label: "memory-index",
     recoverCorrupt: opts.recoverCorrupt,
@@ -747,11 +747,11 @@ async function openMemoryDb(opts) {
   });
 }
 function defaultIndexPath(root) {
-  return path.join(root, ".index", "memory.sqlite");
+  return node_path.join(root, ".index", "memory.sqlite");
 }
 function requireLance() {
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-VWYFGE27.cjs', document.baseURI).href)));
+    const r = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-KC2HKUPT.cjs', document.baseURI).href)));
     return r("@lancedb/lancedb");
   } catch (cause) {
     throw new chunkCEGU5AVD_cjs.ConfigurationError(
@@ -772,7 +772,7 @@ var LanceIndex = class _LanceIndex {
   static async open(opts) {
     const lance = requireLance();
     const storagePath = opts.storagePath ?? lanceStoragePath(opts.memoryRoot ?? resolveMemoryRoot(opts.cwd));
-    fs.mkdirSync(storagePath, { recursive: true });
+    node_fs.mkdirSync(storagePath, { recursive: true });
     const conn = await lance.connect(storagePath);
     const dim = opts.embedding.dimension;
     const tableName = "facts";
@@ -864,7 +864,7 @@ function escapeSqlValue(value) {
   return value.replace(/\\/g, "\\\\").replace(/'/g, "''");
 }
 function lanceStoragePath(root) {
-  return path.join(root, "lance");
+  return node_path.join(root, "lance");
 }
 
 exports.LanceIndex = LanceIndex;
@@ -901,5 +901,5 @@ exports.sha256 = sha256;
 exports.truncateSnippet = truncateSnippet;
 exports.wikiDir = wikiDir;
 exports.writeSessionSummary = writeSessionSummary;
-//# sourceMappingURL=chunk-VWYFGE27.cjs.map
-//# sourceMappingURL=chunk-VWYFGE27.cjs.map
+//# sourceMappingURL=chunk-KC2HKUPT.cjs.map
+//# sourceMappingURL=chunk-KC2HKUPT.cjs.map