@xenosystem/agent-sdk 0.9.8 → 0.9.9

package/dist/utils/metafile-cjs.json

@@ -1 +1 @@
-{"inputs":{"src/utils/fs.ts":{"bytes":9993,"imports":[{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs/promises","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/json.ts":{"bytes":804,"imports":[],"format":"esm"},"src/utils/yaml.ts":{"bytes":5506,"imports":[],"format":"esm"},"src/utils/path-security.ts":{"bytes":993,"imports":[{"path":"path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/platform.ts":{"bytes":973,"imports":[{"path":"node:os","kind":"import-statement","external":true},{"path":"node:child_process","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/validation.ts":{"bytes":5336,"imports":[],"format":"esm"},"src/utils/logger.ts":{"bytes":3719,"imports":[],"format":"esm"},"src/utils/retry.ts":{"bytes":9045,"imports":[],"format":"esm"},"src/utils/tokens.ts":{"bytes":3207,"imports":[],"format":"esm"},"src/utils/cost.ts":{"bytes":1826,"imports":[],"format":"esm"},"src/utils/clipboard.ts":{"bytes":1156,"imports":[{"path":"node:child_process","kind":"import-statement","external":true}],"format":"esm"},"src/utils/benchmark-safety.ts":{"bytes":6542,"imports":[],"format":"esm"},"src/utils/tool-result-content.ts":{"bytes":4750,"imports":[],"format":"esm"},"src/utils/text-security.ts":{"bytes":809,"imports":[],"format":"esm"},"src/utils/index.ts":{"bytes":1453,"imports":[{"path":"src/utils/fs.ts","kind":"import-statement","original":"./fs.js"},{"path":"src/utils/json.ts","kind":"import-statement","original":"./json.js"},{"path":"src/utils/yaml.ts","kind":"import-statement","original":"./yaml.js"},{"path":"src/utils/path-security.ts","kind":"import-statement","original":"./path-security.js"},{"path":"src/utils/platform.ts","kind":"import-statement","original":"./platform.js"},{"path":"src/utils/validation.ts","kind":"import-statement","original":"./validation.js"},{"path":"src/utils/logger.ts","kind":"import-statement","original":"./logger.js"},{"path":"src/utils/retry.ts","kind":"import-statement","original":"./retry.js"},{"path":"src/utils/tokens.ts","kind":"import-statement","original":"./tokens.js"},{"path":"src/utils/cost.ts","kind":"import-statement","original":"./cost.js"},{"path":"src/utils/clipboard.ts","kind":"import-statement","original":"./clipboard.js"},{"path":"src/utils/benchmark-safety.ts","kind":"import-statement","original":"./benchmark-safety.js"},{"path":"src/utils/tool-result-content.ts","kind":"import-statement","original":"./tool-result-content.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"./text-security.js"}],"format":"esm"}},"outputs":{"dist/utils/index.cjs":{"imports":[{"path":"node:fs","kind":"require-call","external":true},{"path":"node:fs","kind":"require-call","external":true},{"path":"node:fs/promises","kind":"require-call","external":true},{"path":"node:path","kind":"require-call","external":true},{"path":"path","kind":"require-call","external":true},{"path":"node:os","kind":"require-call","external":true},{"path":"node:child_process","kind":"require-call","external":true},{"path":"node:path","kind":"require-call","external":true},{"path":"node:child_process","kind":"require-call","external":true}],"exports":[],"entryPoint":"src/utils/index.ts","inputs":{"src/utils/index.ts":{"bytesInOutput":1866},"src/utils/fs.ts":{"bytesInOutput":4051},"src/utils/json.ts":{"bytesInOutput":239},"src/utils/yaml.ts":{"bytesInOutput":2639},"src/utils/path-security.ts":{"bytesInOutput":313},"src/utils/platform.ts":{"bytesInOutput":483},"src/utils/validation.ts":{"bytesInOutput":1423},"src/utils/logger.ts":{"bytesInOutput":913},"src/utils/retry.ts":{"bytesInOutput":2918},"src/utils/tokens.ts":{"bytesInOutput":904},"src/utils/cost.ts":{"bytesInOutput":933},"src/utils/clipboard.ts":{"bytesInOutput":604},"src/utils/benchmark-safety.ts":{"bytesInOutput":3108},"src/utils/tool-result-content.ts":{"bytesInOutput":2072},"src/utils/text-security.ts":{"bytesInOutput":180}},"bytes":24527}}}
+{"inputs":{"src/utils/fs.ts":{"bytes":10330,"imports":[{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs/promises","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/json.ts":{"bytes":842,"imports":[],"format":"esm"},"src/utils/yaml.ts":{"bytes":5668,"imports":[],"format":"esm"},"src/utils/path-security.ts":{"bytes":1024,"imports":[{"path":"path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/platform.ts":{"bytes":1012,"imports":[{"path":"node:os","kind":"import-statement","external":true},{"path":"node:child_process","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/validation.ts":{"bytes":5519,"imports":[],"format":"esm"},"src/utils/logger.ts":{"bytes":3873,"imports":[],"format":"esm"},"src/utils/retry.ts":{"bytes":9294,"imports":[],"format":"esm"},"src/utils/tokens.ts":{"bytes":3306,"imports":[],"format":"esm"},"src/utils/cost.ts":{"bytes":1876,"imports":[],"format":"esm"},"src/utils/clipboard.ts":{"bytes":1196,"imports":[{"path":"node:child_process","kind":"import-statement","external":true}],"format":"esm"},"src/utils/benchmark-safety.ts":{"bytes":6703,"imports":[],"format":"esm"},"src/utils/tool-result-content.ts":{"bytes":4887,"imports":[],"format":"esm"},"src/utils/text-security.ts":{"bytes":833,"imports":[],"format":"esm"},"src/utils/index.ts":{"bytes":1490,"imports":[{"path":"src/utils/fs.ts","kind":"import-statement","original":"./fs.js"},{"path":"src/utils/json.ts","kind":"import-statement","original":"./json.js"},{"path":"src/utils/yaml.ts","kind":"import-statement","original":"./yaml.js"},{"path":"src/utils/path-security.ts","kind":"import-statement","original":"./path-security.js"},{"path":"src/utils/platform.ts","kind":"import-statement","original":"./platform.js"},{"path":"src/utils/validation.ts","kind":"import-statement","original":"./validation.js"},{"path":"src/utils/logger.ts","kind":"import-statement","original":"./logger.js"},{"path":"src/utils/retry.ts","kind":"import-statement","original":"./retry.js"},{"path":"src/utils/tokens.ts","kind":"import-statement","original":"./tokens.js"},{"path":"src/utils/cost.ts","kind":"import-statement","original":"./cost.js"},{"path":"src/utils/clipboard.ts","kind":"import-statement","original":"./clipboard.js"},{"path":"src/utils/benchmark-safety.ts","kind":"import-statement","original":"./benchmark-safety.js"},{"path":"src/utils/tool-result-content.ts","kind":"import-statement","original":"./tool-result-content.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"./text-security.js"}],"format":"esm"}},"outputs":{"dist/utils/index.cjs":{"imports":[{"path":"node:fs","kind":"require-call","external":true},{"path":"node:fs","kind":"require-call","external":true},{"path":"node:fs/promises","kind":"require-call","external":true},{"path":"node:path","kind":"require-call","external":true},{"path":"path","kind":"require-call","external":true},{"path":"node:os","kind":"require-call","external":true},{"path":"node:child_process","kind":"require-call","external":true},{"path":"node:path","kind":"require-call","external":true},{"path":"node:child_process","kind":"require-call","external":true}],"exports":[],"entryPoint":"src/utils/index.ts","inputs":{"src/utils/index.ts":{"bytesInOutput":1866},"src/utils/fs.ts":{"bytesInOutput":4051},"src/utils/json.ts":{"bytesInOutput":239},"src/utils/yaml.ts":{"bytesInOutput":2639},"src/utils/path-security.ts":{"bytesInOutput":313},"src/utils/platform.ts":{"bytesInOutput":483},"src/utils/validation.ts":{"bytesInOutput":1423},"src/utils/logger.ts":{"bytesInOutput":913},"src/utils/retry.ts":{"bytesInOutput":2918},"src/utils/tokens.ts":{"bytesInOutput":904},"src/utils/cost.ts":{"bytesInOutput":933},"src/utils/clipboard.ts":{"bytesInOutput":604},"src/utils/benchmark-safety.ts":{"bytesInOutput":3108},"src/utils/tool-result-content.ts":{"bytesInOutput":2072},"src/utils/text-security.ts":{"bytesInOutput":180}},"bytes":24527}}}

package/dist/utils/metafile-esm.json

@@ -1 +1 @@
-{"inputs":{"src/utils/fs.ts":{"bytes":9993,"imports":[{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs/promises","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/json.ts":{"bytes":804,"imports":[],"format":"esm"},"src/utils/yaml.ts":{"bytes":5506,"imports":[],"format":"esm"},"src/utils/path-security.ts":{"bytes":993,"imports":[{"path":"path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/platform.ts":{"bytes":973,"imports":[{"path":"node:os","kind":"import-statement","external":true},{"path":"node:child_process","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/validation.ts":{"bytes":5336,"imports":[],"format":"esm"},"src/utils/logger.ts":{"bytes":3719,"imports":[],"format":"esm"},"src/utils/retry.ts":{"bytes":9045,"imports":[],"format":"esm"},"src/utils/tokens.ts":{"bytes":3207,"imports":[],"format":"esm"},"src/utils/cost.ts":{"bytes":1826,"imports":[],"format":"esm"},"src/utils/clipboard.ts":{"bytes":1156,"imports":[{"path":"node:child_process","kind":"import-statement","external":true}],"format":"esm"},"src/utils/benchmark-safety.ts":{"bytes":6542,"imports":[],"format":"esm"},"src/utils/tool-result-content.ts":{"bytes":4750,"imports":[],"format":"esm"},"src/utils/text-security.ts":{"bytes":809,"imports":[],"format":"esm"},"src/utils/index.ts":{"bytes":1453,"imports":[{"path":"src/utils/fs.ts","kind":"import-statement","original":"./fs.js"},{"path":"src/utils/json.ts","kind":"import-statement","original":"./json.js"},{"path":"src/utils/yaml.ts","kind":"import-statement","original":"./yaml.js"},{"path":"src/utils/path-security.ts","kind":"import-statement","original":"./path-security.js"},{"path":"src/utils/platform.ts","kind":"import-statement","original":"./platform.js"},{"path":"src/utils/validation.ts","kind":"import-statement","original":"./validation.js"},{"path":"src/utils/logger.ts","kind":"import-statement","original":"./logger.js"},{"path":"src/utils/retry.ts","kind":"import-statement","original":"./retry.js"},{"path":"src/utils/tokens.ts","kind":"import-statement","original":"./tokens.js"},{"path":"src/utils/cost.ts","kind":"import-statement","original":"./cost.js"},{"path":"src/utils/clipboard.ts","kind":"import-statement","original":"./clipboard.js"},{"path":"src/utils/benchmark-safety.ts","kind":"import-statement","original":"./benchmark-safety.js"},{"path":"src/utils/tool-result-content.ts","kind":"import-statement","original":"./tool-result-content.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"./text-security.js"}],"format":"esm"}},"outputs":{"dist/utils/index.js":{"imports":[{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs/promises","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true},{"path":"path","kind":"import-statement","external":true},{"path":"node:os","kind":"import-statement","external":true},{"path":"node:child_process","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true},{"path":"node:child_process","kind":"import-statement","external":true}],"exports":["ApiTransientError","HOME_DIR","IS_LINUX","IS_MAC","IS_WINDOWS","LogLevel","OS_VERSION","PLATFORM","accountTextTokens","appendLine","benchmarkLeakError","buildToolResultBlock","buildToolResultText","calculateCost","commandMentionsBenchmarkLeak","conservativeTokenAccountingAdapter","copyTextToClipboard","createSafeRegex","debug","decodeTextBuffer","deleteDir","deleteFile","detectLineEnding","detectPreferredLineEnding","detectTextEncoding","encodeTextBuffer","ensureDir","error","estimateTokens","estimateTokensForModel","existsSync","filterBenchmarkLeakPaths","findSimilarFile","fitsInBudget","formatCost","getBenchmarkReferenceOverwriteHint","getBoolean","getConfigDir","getLogLevel","getNumber","getProjectConfigDir","getRetryErrorContext","getShellName","getString","getToolResultTransportContent","hasDir","hasDisallowedAsciiControlCharacter","hasFile","hasFrontmatter","hasNonTextToolResultContent","info","isBenchmarkLeakPath","isBenchmarkMode","isGitRepo","isPathSafe","isRetryableError","listDirs","listFiles","normalizeLineEndings","parseDocument","parseJsonLines","readFileSafe","readIfExists","readTextFile","remainingBudget","safeJsonParse","safeJsonStringify","safeRegexTest","safeResolvePath","setLogLevel","stringifyDocument","toTransportAssistantBlocks","toolAssistantContentToText","toolResultContentToText","truncateToTokens","validateRegexPattern","validateRequired","warn","withRetry","writeAtomic","writeTextFile"],"entryPoint":"src/utils/index.ts","inputs":{"src/utils/fs.ts":{"bytesInOutput":3994},"src/utils/index.ts":{"bytesInOutput":0},"src/utils/json.ts":{"bytesInOutput":239},"src/utils/yaml.ts":{"bytesInOutput":2639},"src/utils/path-security.ts":{"bytesInOutput":311},"src/utils/platform.ts":{"bytesInOutput":491},"src/utils/validation.ts":{"bytesInOutput":1425},"src/utils/logger.ts":{"bytesInOutput":915},"src/utils/retry.ts":{"bytesInOutput":2918},"src/utils/tokens.ts":{"bytesInOutput":904},"src/utils/cost.ts":{"bytesInOutput":933},"src/utils/clipboard.ts":{"bytesInOutput":601},"src/utils/benchmark-safety.ts":{"bytesInOutput":3090},"src/utils/tool-result-content.ts":{"bytesInOutput":2069},"src/utils/text-security.ts":{"bytesInOutput":180}},"bytes":22467}}}
+{"inputs":{"src/utils/fs.ts":{"bytes":10330,"imports":[{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs/promises","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/json.ts":{"bytes":842,"imports":[],"format":"esm"},"src/utils/yaml.ts":{"bytes":5668,"imports":[],"format":"esm"},"src/utils/path-security.ts":{"bytes":1024,"imports":[{"path":"path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/platform.ts":{"bytes":1012,"imports":[{"path":"node:os","kind":"import-statement","external":true},{"path":"node:child_process","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true}],"format":"esm"},"src/utils/validation.ts":{"bytes":5519,"imports":[],"format":"esm"},"src/utils/logger.ts":{"bytes":3873,"imports":[],"format":"esm"},"src/utils/retry.ts":{"bytes":9294,"imports":[],"format":"esm"},"src/utils/tokens.ts":{"bytes":3306,"imports":[],"format":"esm"},"src/utils/cost.ts":{"bytes":1876,"imports":[],"format":"esm"},"src/utils/clipboard.ts":{"bytes":1196,"imports":[{"path":"node:child_process","kind":"import-statement","external":true}],"format":"esm"},"src/utils/benchmark-safety.ts":{"bytes":6703,"imports":[],"format":"esm"},"src/utils/tool-result-content.ts":{"bytes":4887,"imports":[],"format":"esm"},"src/utils/text-security.ts":{"bytes":833,"imports":[],"format":"esm"},"src/utils/index.ts":{"bytes":1490,"imports":[{"path":"src/utils/fs.ts","kind":"import-statement","original":"./fs.js"},{"path":"src/utils/json.ts","kind":"import-statement","original":"./json.js"},{"path":"src/utils/yaml.ts","kind":"import-statement","original":"./yaml.js"},{"path":"src/utils/path-security.ts","kind":"import-statement","original":"./path-security.js"},{"path":"src/utils/platform.ts","kind":"import-statement","original":"./platform.js"},{"path":"src/utils/validation.ts","kind":"import-statement","original":"./validation.js"},{"path":"src/utils/logger.ts","kind":"import-statement","original":"./logger.js"},{"path":"src/utils/retry.ts","kind":"import-statement","original":"./retry.js"},{"path":"src/utils/tokens.ts","kind":"import-statement","original":"./tokens.js"},{"path":"src/utils/cost.ts","kind":"import-statement","original":"./cost.js"},{"path":"src/utils/clipboard.ts","kind":"import-statement","original":"./clipboard.js"},{"path":"src/utils/benchmark-safety.ts","kind":"import-statement","original":"./benchmark-safety.js"},{"path":"src/utils/tool-result-content.ts","kind":"import-statement","original":"./tool-result-content.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"./text-security.js"}],"format":"esm"}},"outputs":{"dist/utils/index.js":{"imports":[{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:fs/promises","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true},{"path":"path","kind":"import-statement","external":true},{"path":"node:os","kind":"import-statement","external":true},{"path":"node:child_process","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true},{"path":"node:child_process","kind":"import-statement","external":true}],"exports":["ApiTransientError","HOME_DIR","IS_LINUX","IS_MAC","IS_WINDOWS","LogLevel","OS_VERSION","PLATFORM","accountTextTokens","appendLine","benchmarkLeakError","buildToolResultBlock","buildToolResultText","calculateCost","commandMentionsBenchmarkLeak","conservativeTokenAccountingAdapter","copyTextToClipboard","createSafeRegex","debug","decodeTextBuffer","deleteDir","deleteFile","detectLineEnding","detectPreferredLineEnding","detectTextEncoding","encodeTextBuffer","ensureDir","error","estimateTokens","estimateTokensForModel","existsSync","filterBenchmarkLeakPaths","findSimilarFile","fitsInBudget","formatCost","getBenchmarkReferenceOverwriteHint","getBoolean","getConfigDir","getLogLevel","getNumber","getProjectConfigDir","getRetryErrorContext","getShellName","getString","getToolResultTransportContent","hasDir","hasDisallowedAsciiControlCharacter","hasFile","hasFrontmatter","hasNonTextToolResultContent","info","isBenchmarkLeakPath","isBenchmarkMode","isGitRepo","isPathSafe","isRetryableError","listDirs","listFiles","normalizeLineEndings","parseDocument","parseJsonLines","readFileSafe","readIfExists","readTextFile","remainingBudget","safeJsonParse","safeJsonStringify","safeRegexTest","safeResolvePath","setLogLevel","stringifyDocument","toTransportAssistantBlocks","toolAssistantContentToText","toolResultContentToText","truncateToTokens","validateRegexPattern","validateRequired","warn","withRetry","writeAtomic","writeTextFile"],"entryPoint":"src/utils/index.ts","inputs":{"src/utils/fs.ts":{"bytesInOutput":3994},"src/utils/index.ts":{"bytesInOutput":0},"src/utils/json.ts":{"bytesInOutput":239},"src/utils/yaml.ts":{"bytesInOutput":2639},"src/utils/path-security.ts":{"bytesInOutput":311},"src/utils/platform.ts":{"bytesInOutput":491},"src/utils/validation.ts":{"bytesInOutput":1425},"src/utils/logger.ts":{"bytesInOutput":915},"src/utils/retry.ts":{"bytesInOutput":2918},"src/utils/tokens.ts":{"bytesInOutput":904},"src/utils/cost.ts":{"bytesInOutput":933},"src/utils/clipboard.ts":{"bytesInOutput":601},"src/utils/benchmark-safety.ts":{"bytesInOutput":3090},"src/utils/tool-result-content.ts":{"bytesInOutput":2069},"src/utils/text-security.ts":{"bytesInOutput":180}},"bytes":22467}}}

package/native/mxc/LICENSE.microsoft-mxc-sdk.md

@@ -1,21 +1,21 @@
-    MIT License
-
-    Copyright (c) Microsoft Corporation.
-
-    Permission is hereby granted, free of charge, to any person obtaining a copy
-    of this software and associated documentation files (the "Software"), to deal
-    in the Software without restriction, including without limitation the rights
-    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-    copies of the Software, and to permit persons to whom the Software is
-    furnished to do so, subject to the following conditions:
-
-    The above copyright notice and this permission notice shall be included in all
-    copies or substantial portions of the Software.
-
-    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    MIT License
+
+    Copyright (c) Microsoft Corporation.
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
     SOFTWARE

package/native/mxc/README.md

@@ -1,25 +1,25 @@
-# Microsoft MXC native assets
-
-This directory contains only the seven release-reviewed executables needed by
-XENO's containment adapter and Windows host preparation. They were extracted from the integrity-pinned
-`@microsoft/mxc-sdk@0.7.0` npm artifact recorded in `package.json`.
-
-XENO does not execute or redistribute that package's JavaScript wrapper or its
-`node-pty`, `node-addon-api`, or `semver` dependency graph. Every executable is
-checked against both this manifest and the compiled XENO trust table before it
-can be probed or launched.
-
-The two `wxc-host-prep.exe` assets are invoked only by the explicit
-`prepareMxcWindowsHost()` setup API. They apply MXC's idempotent
-`prepare-system-drive` and `prepare-null-device` operations from an elevated
-host setup context; normal agent execution never attempts to elevate. Windows
-11 on Arm runs the reviewed x64 host-preparation helper through the operating
-system's x64 emulation layer because these operations are architecture-neutral
-and MXC's ARM64 helper can stall while applying the system-drive metadata ACEs.
-The containment runtime itself remains the native ARM64 `wxc-exec.exe`.
-
-The original Microsoft MIT license is preserved in
-`LICENSE.microsoft-mxc-sdk.md`. Presence of these assets is not containment
-certification: XENO still requires a candidate-bound, platform-bound, signed
-certification and independent reviewer approval before advertising or using
-`contained` execution.
+# Microsoft MXC native assets
+
+This directory contains only the seven release-reviewed executables needed by
+XENO's containment adapter and Windows host preparation. They were extracted from the integrity-pinned
+`@microsoft/mxc-sdk@0.7.0` npm artifact recorded in `package.json`.
+
+XENO does not execute or redistribute that package's JavaScript wrapper or its
+`node-pty`, `node-addon-api`, or `semver` dependency graph. Every executable is
+checked against both this manifest and the compiled XENO trust table before it
+can be probed or launched.
+
+The two `wxc-host-prep.exe` assets are invoked only by the explicit
+`prepareMxcWindowsHost()` setup API. They apply MXC's idempotent
+`prepare-system-drive` and `prepare-null-device` operations from an elevated
+host setup context; normal agent execution never attempts to elevate. Windows
+11 on Arm runs the reviewed x64 host-preparation helper through the operating
+system's x64 emulation layer because these operations are architecture-neutral
+and MXC's ARM64 helper can stall while applying the system-drive metadata ACEs.
+The containment runtime itself remains the native ARM64 `wxc-exec.exe`.
+
+The original Microsoft MIT license is preserved in
+`LICENSE.microsoft-mxc-sdk.md`. Presence of these assets is not containment
+certification: XENO still requires a candidate-bound, platform-bound, signed
+certification and independent reviewer approval before advertising or using
+`contained` execution.

package/native/mxc/package.json

@@ -1,58 +1,58 @@
-{
-  "name": "microsoft-mxc-native-assets",
-  "version": "0.7.0",
-  "private": true,
-  "license": "MIT",
-  "sourcePackage": {
-    "name": "@microsoft/mxc-sdk",
-    "version": "0.7.0",
-    "integrity": "sha512-EWhz2pKkcPluZHAOI1yneV+JK0NO/3hdh7nABBb0x4PjyUWMeSWPTBAjtIu+BhtMYOqlaijSPZMZ0Hs/J4ZL4A==",
-    "shasum": "561a269b8cb5a4eb7e71fc9158ffd0f74760b640"
-  },
-  "assets": [
-    {
-      "platform": "win32",
-      "arch": "x64",
-      "path": "bin/x64/wxc-exec.exe",
-      "sha256": "db0a3422be9e1b396cc1b2547c70ff16b27412438a31c10a45abf370cac86ae2"
-    },
-    {
-      "platform": "win32",
-      "arch": "arm64",
-      "path": "bin/arm64/wxc-exec.exe",
-      "sha256": "e430d0e4f44f616e91db684f8d825a6dc93e06a1262b8d00bcaac7522a317aab"
-    },
-    {
-      "platform": "win32",
-      "arch": "x64",
-      "purpose": "host-preparation",
-      "path": "bin/x64/wxc-host-prep.exe",
-      "sha256": "531fb3cdb4b0c964908fd71b71d40961417afb399cbab72f92a25e95309a6416"
-    },
-    {
-      "platform": "win32",
-      "arch": "arm64",
-      "purpose": "host-preparation",
-      "path": "bin/arm64/wxc-host-prep.exe",
-      "sha256": "3ef702332286a39153fc259310b5021e3de3c191751d7522684f6475f73af5ef"
-    },
-    {
-      "platform": "linux",
-      "arch": "x64",
-      "path": "bin/x64/lxc-exec",
-      "sha256": "1efe3f817f5ae9ba9f9f2fd59142e79b2dde7a4dd024576b0ddb635fc87edeb5"
-    },
-    {
-      "platform": "linux",
-      "arch": "arm64",
-      "path": "bin/arm64/lxc-exec",
-      "sha256": "fdc00ccecf362ae3ddd8ccad93fd7c8b5b1f03c68897ab05ef1c9f1d327ea3fe"
-    },
-    {
-      "platform": "darwin",
-      "arch": "arm64",
-      "path": "bin/arm64/mxc-exec-mac",
-      "sha256": "77c07a86f483ed91dd5be290cd77878ac0c56fe113cdb8c764e7e5201c744ad2"
-    }
-  ]
-}
+{
+  "name": "microsoft-mxc-native-assets",
+  "version": "0.7.0",
+  "private": true,
+  "license": "MIT",
+  "sourcePackage": {
+    "name": "@microsoft/mxc-sdk",
+    "version": "0.7.0",
+    "integrity": "sha512-EWhz2pKkcPluZHAOI1yneV+JK0NO/3hdh7nABBb0x4PjyUWMeSWPTBAjtIu+BhtMYOqlaijSPZMZ0Hs/J4ZL4A==",
+    "shasum": "561a269b8cb5a4eb7e71fc9158ffd0f74760b640"
+  },
+  "assets": [
+    {
+      "platform": "win32",
+      "arch": "x64",
+      "path": "bin/x64/wxc-exec.exe",
+      "sha256": "db0a3422be9e1b396cc1b2547c70ff16b27412438a31c10a45abf370cac86ae2"
+    },
+    {
+      "platform": "win32",
+      "arch": "arm64",
+      "path": "bin/arm64/wxc-exec.exe",
+      "sha256": "e430d0e4f44f616e91db684f8d825a6dc93e06a1262b8d00bcaac7522a317aab"
+    },
+    {
+      "platform": "win32",
+      "arch": "x64",
+      "purpose": "host-preparation",
+      "path": "bin/x64/wxc-host-prep.exe",
+      "sha256": "531fb3cdb4b0c964908fd71b71d40961417afb399cbab72f92a25e95309a6416"
+    },
+    {
+      "platform": "win32",
+      "arch": "arm64",
+      "purpose": "host-preparation",
+      "path": "bin/arm64/wxc-host-prep.exe",
+      "sha256": "3ef702332286a39153fc259310b5021e3de3c191751d7522684f6475f73af5ef"
+    },
+    {
+      "platform": "linux",
+      "arch": "x64",
+      "path": "bin/x64/lxc-exec",
+      "sha256": "1efe3f817f5ae9ba9f9f2fd59142e79b2dde7a4dd024576b0ddb635fc87edeb5"
+    },
+    {
+      "platform": "linux",
+      "arch": "arm64",
+      "path": "bin/arm64/lxc-exec",
+      "sha256": "fdc00ccecf362ae3ddd8ccad93fd7c8b5b1f03c68897ab05ef1c9f1d327ea3fe"
+    },
+    {
+      "platform": "darwin",
+      "arch": "arm64",
+      "path": "bin/arm64/mxc-exec-mac",
+      "sha256": "77c07a86f483ed91dd5be290cd77878ac0c56fe113cdb8c764e7e5201c744ad2"
+    }
+  ]
+}

package/ownership/CLEAN_ROOM_CONTRIBUTOR_GUIDE.md

@@ -1,63 +1,63 @@
-# Xeno Clean-Room Contributor Guide
-
-Status: engineering control draft. Legal counsel approval is required before Xeno makes a public clean-room or proprietary-ownership claim.
-
-## Purpose
-
-This guide governs replacement of third-party implementation code with independently authored Xeno code. It is an engineering provenance control, not legal advice and not proof by itself that a replacement is clean-room work.
-
-## Required roles
-
-- The contract author records behavior from Xeno-owned tests, public standards, public API documentation, and black-box observations.
-- The implementer writes the replacement from the approved contract and declared normative sources.
-- The provenance reviewer independently reviews the implementation, evidence, and contributor disclosures.
-- Counsel determines whether contributor separation or additional review is required for a specific component.
-
-One person may not approve their own provenance review. High-risk native, codec, parser, and cryptographic work also requires a domain reviewer.
-
-## Before implementation
-
-1. Create a clean-room implementation record from `templates/clean-room-implementation-record.md`.
-2. Freeze the required behavior and compatibility fixtures before reading implementation source from the component being replaced.
-3. List every normative standard, public API document, Xeno-owned test, and black-box observation used.
-4. Disclose whether each contributor previously inspected the replaced implementation source and when.
-5. Obtain a written role/separation decision for contributors who inspected that source.
-6. Record patents, trademarks, specification licenses, and export-control questions for counsel.
-
-## Allowed inputs
-
-- Published standards whose terms permit the intended use.
-- Public API and user documentation used only to define observable behavior.
-- Xeno-owned requirements, tests, fixtures, traces, and interoperability captures.
-- Black-box behavior measured through a documented harness.
-- Operating-system and language-host API documentation for approved platform boundaries.
-
-## Prohibited inputs and actions
-
-- Copying third-party source, comments, tests, identifiers, non-normative constants, or internal architecture.
-- Asking an AI model to translate, rewrite, disguise, or recreate third-party source.
-- Including third-party source in prompts, tickets, implementation records, fixtures, or generated-code context.
-- Claiming clean-room status when source-exposure disclosures or counsel review are incomplete.
-- Using a compatibility result as evidence of independent authorship.
-
-## During implementation
-
-1. Keep the implementation record current with design decisions and source citations.
-2. Add conformance, malformed-input, resource-limit, and fuzz tests appropriate to the surface.
-3. Record any behavior that differs from the frozen contract and obtain an explicit versioning decision.
-4. Keep generated artifacts traceable to Xeno-owned source and the approved build process.
-5. Stop and escalate if an undeclared source, copied fragment, or provenance ambiguity is discovered.
-
-AI-generated contributions follow the same rules. Prompts must request independent, standards-based implementation and must be retained or summarized in the implementation record without sensitive user data.
-
-## Required completion evidence
-
-- Completed clean-room implementation record.
-- Completed independent provenance review.
-- Contributor source-exposure disclosures and counsel disposition.
-- Contract fixtures and conformance results.
-- Fuzz and security evidence where required.
-- Ownership inventory, bundle graph, native hashes, SBOM, and clean-install report for the candidate release.
-- Commit or source revision and reviewer identities.
-
-The ownership capability gate remains false until all required evidence exists and the designated reviewer signs the provenance record. Public ownership language additionally requires counsel and product approval.
+# Xeno Clean-Room Contributor Guide
+
+Status: engineering control draft. Legal counsel approval is required before Xeno makes a public clean-room or proprietary-ownership claim.
+
+## Purpose
+
+This guide governs replacement of third-party implementation code with independently authored Xeno code. It is an engineering provenance control, not legal advice and not proof by itself that a replacement is clean-room work.
+
+## Required roles
+
+- The contract author records behavior from Xeno-owned tests, public standards, public API documentation, and black-box observations.
+- The implementer writes the replacement from the approved contract and declared normative sources.
+- The provenance reviewer independently reviews the implementation, evidence, and contributor disclosures.
+- Counsel determines whether contributor separation or additional review is required for a specific component.
+
+One person may not approve their own provenance review. High-risk native, codec, parser, and cryptographic work also requires a domain reviewer.
+
+## Before implementation
+
+1. Create a clean-room implementation record from `templates/clean-room-implementation-record.md`.
+2. Freeze the required behavior and compatibility fixtures before reading implementation source from the component being replaced.
+3. List every normative standard, public API document, Xeno-owned test, and black-box observation used.
+4. Disclose whether each contributor previously inspected the replaced implementation source and when.
+5. Obtain a written role/separation decision for contributors who inspected that source.
+6. Record patents, trademarks, specification licenses, and export-control questions for counsel.
+
+## Allowed inputs
+
+- Published standards whose terms permit the intended use.
+- Public API and user documentation used only to define observable behavior.
+- Xeno-owned requirements, tests, fixtures, traces, and interoperability captures.
+- Black-box behavior measured through a documented harness.
+- Operating-system and language-host API documentation for approved platform boundaries.
+
+## Prohibited inputs and actions
+
+- Copying third-party source, comments, tests, identifiers, non-normative constants, or internal architecture.
+- Asking an AI model to translate, rewrite, disguise, or recreate third-party source.
+- Including third-party source in prompts, tickets, implementation records, fixtures, or generated-code context.
+- Claiming clean-room status when source-exposure disclosures or counsel review are incomplete.
+- Using a compatibility result as evidence of independent authorship.
+
+## During implementation
+
+1. Keep the implementation record current with design decisions and source citations.
+2. Add conformance, malformed-input, resource-limit, and fuzz tests appropriate to the surface.
+3. Record any behavior that differs from the frozen contract and obtain an explicit versioning decision.
+4. Keep generated artifacts traceable to Xeno-owned source and the approved build process.
+5. Stop and escalate if an undeclared source, copied fragment, or provenance ambiguity is discovered.
+
+AI-generated contributions follow the same rules. Prompts must request independent, standards-based implementation and must be retained or summarized in the implementation record without sensitive user data.
+
+## Required completion evidence
+
+- Completed clean-room implementation record.
+- Completed independent provenance review.
+- Contributor source-exposure disclosures and counsel disposition.
+- Contract fixtures and conformance results.
+- Fuzz and security evidence where required.
+- Ownership inventory, bundle graph, native hashes, SBOM, and clean-install report for the candidate release.
+- Commit or source revision and reviewer identities.
+
+The ownership capability gate remains false until all required evidence exists and the designated reviewer signs the provenance record. Public ownership language additionally requires counsel and product approval.

package/ownership/audit.mjs

@@ -7,11 +7,12 @@ import {
   mkdirSync,
   readFileSync,
   readdirSync,
+  realpathSync,
   writeFileSync,
 } from "node:fs";
 import { builtinModules } from "node:module";
 import { dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
+import { fileURLToPath } from "node:url";
 
 const CLASSIFICATIONS = new Set([
   "xeno-owned",
@@ -718,8 +719,38 @@ async function main() {
   if (report.violations.length > 0) process.exitCode = 1;
 }
 
-const invokedPath = process.argv[1] ? pathToFileURL(resolve(process.argv[1])).href : undefined;
-if (invokedPath === import.meta.url) {
+/**
+ * 🔴 Compare REAL paths. `resolve` normalises; it does not follow symlinks.
+ *
+ * This file SHIPS: `files` in package.json lists `ownership`, in BOTH packages that carry it. So
+ * the lexical form is the idiom that made `@xenosystem/agent-cli` 0.5.17 exit 0 for every command
+ * on Linux and macOS — and stayed shipped for a full release — sitting in code that reaches users.
+ *
+ * It is not broken today because nothing symlinks this path, which is precisely the state the
+ * 0.5.17 entry was in until npm made its bin a symlink.
+ *
+ * ⚠️ Resolution can throw — the invoked path may be gone, and some mounts refuse it — so failure
+ * falls back to the LEXICAL comparison, never to `false`. Returning false on error would
+ * reintroduce the silent no-op through a different door.
+ *
+ * Reference: `xeno-agent-cli/apps/xeno-agent-cli/src/cli/direct-invocation.ts`, the tested version.
+ *
+ * ⚠️ This comment is deliberately generic. The first fix wrote a repo-specific note into each
+ * copy and broke the byte-identical rule stated at the top of this file within minutes of applying
+ * it — which is the drift that rule exists to prevent.
+ */
+function isDirectInvocation() {
+  const invoked = process.argv[1];
+  if (!invoked) return false;
+  const modulePath = fileURLToPath(import.meta.url);
+  try {
+    return realpathSync(resolve(invoked)) === realpathSync(modulePath);
+  } catch {
+    return resolve(invoked) === resolve(modulePath);
+  }
+}
+
+if (isDirectInvocation()) {
   main().catch((error) => {
     console.error(error instanceof Error ? error.message : String(error));
     process.exitCode = 1;