audit-tools 0.32.6 → 0.32.7

package/dist/shared/quota/codexHostConfig.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Codex's documented default concurrent-subagent ceiling: `[agents].max_threads`
+ * defaults to 6 when unset (OpenAI Codex config reference / subagents docs). This
+ * is a real product default, NOT a value we invented — but Codex Desktop exposes
+ * no environment variable for it, so when the config file is silent we fall back
+ * to this constant and label the source `known_default` (never `environment`).
+ */
+export declare const CODEX_DEFAULT_MAX_THREADS = 6;
+/** Injectable reader — returns the config file text, throws when it is absent. */
+export type ReadTextFile = (filePath: string) => string;
+/**
+ * Discover Codex's configured concurrent-subagent ceiling from its own config
+ * file: `~/.codex/config.toml` `[agents].max_threads`. This is the honest
+ * discovery source for the Codex cap — Codex does not surface it via env, but it
+ * IS a user-configurable value in Codex's config, so we read it there rather than
+ * assume. Returns null (caller applies {@link CODEX_DEFAULT_MAX_THREADS}) when the
+ * file is missing/unreadable/malformed or the key is absent or not a positive
+ * integer. Never throws — a bad config degrades to "no discovered value".
+ */
+export declare function readCodexConfiguredMaxThreads(options?: {
+    configPath?: string;
+    readText?: ReadTextFile;
+}): number | null;
+//# sourceMappingURL=codexHostConfig.d.ts.map

package/dist/shared/quota/codexHostConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexHostConfig.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/codexHostConfig.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;AAExD;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,CAAC,EAAE;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB,GAAG,MAAM,GAAG,IAAI,CA2BhB"}

package/dist/shared/quota/codexHostConfig.js

@@ -0,0 +1,49 @@
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+import { parse as parseToml } from "smol-toml";
+/**
+ * Codex's documented default concurrent-subagent ceiling: `[agents].max_threads`
+ * defaults to 6 when unset (OpenAI Codex config reference / subagents docs). This
+ * is a real product default, NOT a value we invented — but Codex Desktop exposes
+ * no environment variable for it, so when the config file is silent we fall back
+ * to this constant and label the source `known_default` (never `environment`).
+ */
+export const CODEX_DEFAULT_MAX_THREADS = 6;
+/**
+ * Discover Codex's configured concurrent-subagent ceiling from its own config
+ * file: `~/.codex/config.toml` `[agents].max_threads`. This is the honest
+ * discovery source for the Codex cap — Codex does not surface it via env, but it
+ * IS a user-configurable value in Codex's config, so we read it there rather than
+ * assume. Returns null (caller applies {@link CODEX_DEFAULT_MAX_THREADS}) when the
+ * file is missing/unreadable/malformed or the key is absent or not a positive
+ * integer. Never throws — a bad config degrades to "no discovered value".
+ */
+export function readCodexConfiguredMaxThreads(options) {
+    const configPath = options?.configPath ?? path.join(homedir(), ".codex", "config.toml");
+    const readText = options?.readText ?? ((p) => readFileSync(p, "utf8"));
+    let raw;
+    try {
+        raw = readText(configPath);
+    }
+    catch {
+        return null; // no config file → no discovered value
+    }
+    let parsed;
+    try {
+        parsed = parseToml(raw);
+    }
+    catch {
+        return null; // malformed TOML degrades to no value (never throws)
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return null;
+    const agents = parsed.agents;
+    if (!agents || typeof agents !== "object" || Array.isArray(agents))
+        return null;
+    const value = agents.max_threads;
+    return typeof value === "number" && Number.isInteger(value) && value > 0
+        ? value
+        : null;
+}
+//# sourceMappingURL=codexHostConfig.js.map

package/dist/shared/quota/codexHostConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexHostConfig.js","sourceRoot":"","sources":["../../../src/shared/quota/codexHostConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAK3C;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAG7C;IACC,MAAM,UAAU,GACd,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAE/E,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,uCAAuC;IACtD,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,qDAAqD;IACpE,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhF,MAAM,MAAM,GAAI,MAAkC,CAAC,MAAM,CAAC;IAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhF,MAAM,KAAK,GAAI,MAAkC,CAAC,WAAW,CAAC;IAC9D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACtE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/shared/quota/hostLimits.d.ts

@@ -1,16 +1,13 @@
 import type { SessionConfig } from "../types/sessionConfig.js";
 import type { HostConcurrencyLimit } from "./types.js";
-/**
- * Codex Desktop does not report its concurrency via env, so we apply this known
- * fixed active-subagent ceiling when the Codex Desktop originator override is
- * present. Exported so tests assert against the constant rather than a literal.
- */
-export declare const CODEX_DESKTOP_ACTIVE_SUBAGENT_LIMIT = 6;
-export declare function detectHostActiveSubagentLimit(envPrefix: string, env?: NodeJS.ProcessEnv): HostConcurrencyLimit | null;
+/** Reads Codex's configured `[agents].max_threads`, or null when unset. Injectable for tests. */
+export type ReadCodexMaxThreads = () => number | null;
+export declare function detectHostActiveSubagentLimit(envPrefix: string, env?: NodeJS.ProcessEnv, readCodexMaxThreads?: ReadCodexMaxThreads): HostConcurrencyLimit | null;
 export declare function resolveHostActiveSubagentLimit(options: {
     envPrefix: string;
     explicitLimit?: number | null;
     sessionConfig: SessionConfig;
     env?: NodeJS.ProcessEnv;
+    readCodexMaxThreads?: ReadCodexMaxThreads;
 }): HostConcurrencyLimit | null;
 //# sourceMappingURL=hostLimits.d.ts.map

package/dist/shared/quota/hostLimits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hostLimits.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/hostLimits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,IAAI,CAAC;AAarD,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,oBAAoB,GAAG,IAAI,CAsB7B;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,oBAAoB,GAAG,IAAI,CAsB9B"}
+{"version":3,"file":"hostLimits.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/hostLimits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAMvD,iGAAiG;AACjG,MAAM,MAAM,mBAAmB,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC;AAatD,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,mBAAmB,GAAE,mBAA2D,GAC/E,oBAAoB,GAAG,IAAI,CAkC7B;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C,GAAG,oBAAoB,GAAG,IAAI,CA0B9B"}

package/dist/shared/quota/hostLimits.js

@@ -1,9 +1,4 @@
-/**
- * Codex Desktop does not report its concurrency via env, so we apply this known
- * fixed active-subagent ceiling when the Codex Desktop originator override is
- * present. Exported so tests assert against the constant rather than a literal.
- */
-export const CODEX_DESKTOP_ACTIVE_SUBAGENT_LIMIT = 6;
+import { CODEX_DEFAULT_MAX_THREADS, readCodexConfiguredMaxThreads, } from "./codexHostConfig.js";
 function parsePositiveInteger(value) {
     if (typeof value === "number") {
         return Number.isInteger(value) && value > 0 ? value : null;
@@ -16,7 +11,7 @@ function parsePositiveInteger(value) {
     const parsed = Number(trimmed);
     return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;
 }
-export function detectHostActiveSubagentLimit(envPrefix, env = process.env) {
+export function detectHostActiveSubagentLimit(envPrefix, env = process.env, readCodexMaxThreads = () => readCodexConfiguredMaxThreads()) {
     const explicitEnvLimit = parsePositiveInteger(env[`${envPrefix}_HOST_MAX_ACTIVE_SUBAGENTS`] ??
         env.CODEX_MAX_ACTIVE_SUBAGENTS);
     if (explicitEnvLimit !== null) {
@@ -27,10 +22,22 @@ export function detectHostActiveSubagentLimit(envPrefix, env = process.env) {
         };
     }
     if (env.CODEX_INTERNAL_ORIGINATOR_OVERRIDE === "Codex Desktop") {
+        // Codex exposes no env var for its concurrency, but `[agents].max_threads`
+        // in `~/.codex/config.toml` IS its real user-configurable ceiling — discover
+        // it there. Only when that config is silent do we fall back to Codex's
+        // documented default, labelled `known_default` (not a fake env reading).
+        const discovered = readCodexMaxThreads();
+        if (discovered !== null) {
+            return {
+                active_subagents: discovered,
+                source: "discovered_config",
+                description: "Codex agents.max_threads from ~/.codex/config.toml.",
+            };
+        }
         return {
-            active_subagents: CODEX_DESKTOP_ACTIVE_SUBAGENT_LIMIT,
-            source: "environment",
-            description: "Codex Desktop active subagent limit.",
+            active_subagents: CODEX_DEFAULT_MAX_THREADS,
+            source: "known_default",
+            description: "Codex documented default agents.max_threads (config file silent).",
         };
     }
     return null;
@@ -52,6 +59,6 @@ export function resolveHostActiveSubagentLimit(options) {
             description: "Host active subagent limit from session-config.",
         };
     }
-    return detectHostActiveSubagentLimit(options.envPrefix, options.env);
+    return detectHostActiveSubagentLimit(options.envPrefix, options.env, options.readCodexMaxThreads ?? (() => readCodexConfiguredMaxThreads()));
 }
 //# sourceMappingURL=hostLimits.js.map

package/dist/shared/quota/hostLimits.js.map

@@ -1 +1 @@
-{"version":3,"file":"hostLimits.js","sourceRoot":"","sources":["../../../src/shared/quota/hostLimits.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAErD,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,gBAAgB,GAAG,oBAAoB,CAC3C,GAAG,CAAC,GAAG,SAAS,4BAA4B,CAAC;QAC3C,GAAG,CAAC,0BAA0B,CACjC,CAAC;IACF,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,gBAAgB,EAAE,gBAAgB;YAClC,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,8CAA8C;SAC5D,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,kCAAkC,KAAK,eAAe,EAAE,CAAC;QAC/D,OAAO;YACL,gBAAgB,EAAE,mCAAmC;YACrD,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,sCAAsC;SACpD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAK9C;IACC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAC1E,OAAO;YACL,gBAAgB,EAAE,OAAO,CAAC,aAAa;YACvC,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,+DAA+D;SAC7E,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,oBAAoB,CAC1C,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,0BAA0B;QACrD,OAAO,CAAC,aAAa,CAAC,gBAAgB,CACzC,CAAC;IACF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO;YACL,gBAAgB,EAAE,eAAe;YACjC,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,iDAAiD;SAC/D,CAAC;IACJ,CAAC;IAED,OAAO,6BAA6B,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"hostLimits.js","sourceRoot":"","sources":["../../../src/shared/quota/hostLimits.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAK9B,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG,EACpC,sBAA2C,GAAG,EAAE,CAAC,6BAA6B,EAAE;IAEhF,MAAM,gBAAgB,GAAG,oBAAoB,CAC3C,GAAG,CAAC,GAAG,SAAS,4BAA4B,CAAC;QAC3C,GAAG,CAAC,0BAA0B,CACjC,CAAC;IACF,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,gBAAgB,EAAE,gBAAgB;YAClC,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,8CAA8C;SAC5D,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,kCAAkC,KAAK,eAAe,EAAE,CAAC;QAC/D,2EAA2E;QAC3E,6EAA6E;QAC7E,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO;gBACL,gBAAgB,EAAE,UAAU;gBAC5B,MAAM,EAAE,mBAAmB;gBAC3B,WAAW,EAAE,qDAAqD;aACnE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,gBAAgB,EAAE,yBAAyB;YAC3C,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,mEAAmE;SACjF,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAM9C;IACC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAC1E,OAAO;YACL,gBAAgB,EAAE,OAAO,CAAC,aAAa;YACvC,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,+DAA+D;SAC7E,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,oBAAoB,CAC1C,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,0BAA0B;QACrD,OAAO,CAAC,aAAa,CAAC,gBAAgB,CACzC,CAAC;IACF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO;YACL,gBAAgB,EAAE,eAAe;YACjC,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,iDAAiD;SAC/D,CAAC;IACJ,CAAC;IAED,OAAO,6BAA6B,CAClC,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,6BAA6B,EAAE,CAAC,CACvE,CAAC;AACJ,CAAC"}

package/dist/shared/quota/types.d.ts

@@ -3,18 +3,18 @@ export declare const LimitSourceSchema: z.ZodEnum<["explicit_config", "discovere
 export type LimitSource = z.infer<typeof LimitSourceSchema>;
 export declare const LimitConfidenceSchema: z.ZodEnum<["high", "medium", "low"]>;
 export type LimitConfidence = z.infer<typeof LimitConfidenceSchema>;
-export declare const HostConcurrencyLimitSourceSchema: z.ZodEnum<["cli_flags", "host_reported", "session_config", "environment"]>;
+export declare const HostConcurrencyLimitSourceSchema: z.ZodEnum<["cli_flags", "host_reported", "session_config", "environment", "discovered_config", "known_default"]>;
 export type HostConcurrencyLimitSource = z.infer<typeof HostConcurrencyLimitSourceSchema>;
 export declare const HostConcurrencyLimitSchema: z.ZodObject<{
     active_subagents: z.ZodNumber;
-    source: z.ZodEnum<["cli_flags", "host_reported", "session_config", "environment"]>;
+    source: z.ZodEnum<["cli_flags", "host_reported", "session_config", "environment", "discovered_config", "known_default"]>;
     description: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    source: "cli_flags" | "host_reported" | "session_config" | "environment";
+    source: "cli_flags" | "host_reported" | "session_config" | "environment" | "discovered_config" | "known_default";
     active_subagents: number;
     description: string;
 }, {
-    source: "cli_flags" | "host_reported" | "session_config" | "environment";
+    source: "cli_flags" | "host_reported" | "session_config" | "environment" | "discovered_config" | "known_default";
     active_subagents: number;
     description: string;
 }>;

package/dist/shared/quota/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,iBAAiB,gHAO5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,qBAAqB,sCAAoC,CAAC;AACvE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,gCAAgC,4EAK3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;EAM5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;EAQtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC3C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC1C;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,8FAQ/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,eAAe,CAAC;IAC5B,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,EAAE,cAAc,CAAC;IAChC,sBAAsB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACpD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,qBAAqB,CAAC,EAAE,OAAO,kBAAkB,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC7E;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAMpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,OAAO,EAAE,SAAS,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC;IAC1D,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,iBAAiB,gHAO5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,qBAAqB,sCAAoC,CAAC;AACvE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,gCAAgC,kHAY3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;EAM5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;EAQtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC3C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC1C;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,8FAQ/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,eAAe,CAAC;IAC5B,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,EAAE,cAAc,CAAC;IAChC,sBAAsB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACpD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,qBAAqB,CAAC,EAAE,OAAO,kBAAkB,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC7E;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAMpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,OAAO,EAAE,SAAS,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC;IAC1D,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B"}

package/dist/shared/quota/types.js

@@ -13,6 +13,13 @@ export const HostConcurrencyLimitSourceSchema = z.enum([
     "host_reported",
     "session_config",
     "environment",
+    // Read from a host's own config file (e.g. Codex `~/.codex/config.toml`
+    // `[agents].max_threads`) — a real discovered value, not an env reading.
+    "discovered_config",
+    // A documented product default applied when the host exposes no configurable
+    // signal (e.g. Codex's default `agents.max_threads` of 6). Honestly labelled
+    // as a known constant rather than masquerading as an environment reading.
+    "known_default",
 ]);
 export const HostConcurrencyLimitSchema = z
     .object({

package/dist/shared/quota/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/shared/quota/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,iBAAiB;IACjB,uBAAuB;IACvB,WAAW;IACX,kBAAkB;IAClB,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAGvE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,IAAI,CAAC;IACrD,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,aAAa;CACd,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,EAAE,gCAAgC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC;KACD,MAAM,EAAE,CAAC;AA8BZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,KAAK;IACL,KAAK;IACL,cAAc;IACd,SAAS;IACT,UAAU;IACV,kBAAkB;IAClB,MAAM;CACP,CAAC,CAAC;AA6BH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/shared/quota/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,iBAAiB;IACjB,uBAAuB;IACvB,WAAW;IACX,kBAAkB;IAClB,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAGvE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,IAAI,CAAC;IACrD,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,wEAAwE;IACxE,yEAAyE;IACzE,mBAAmB;IACnB,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,eAAe;CAChB,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,EAAE,gCAAgC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC;KACD,MAAM,EAAE,CAAC;AA8BZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,KAAK;IACL,KAAK;IACL,cAAc;IACd,SAAS;IACT,UAAU;IACV,kBAAkB;IAClB,MAAM;CACP,CAAC,CAAC;AA6BH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/shared/types/sessionConfig.d.ts

@@ -72,6 +72,18 @@ export interface OpenAiCompatibleConfig {
      * provider retries once without it, so leaving it on is safe for any endpoint.
      */
     response_format_json?: boolean;
+    /**
+     * Plumb the worker's canonical JSON Schema into the request as a per-field
+     * emit-time constraint (`response_format: {type:"json_schema"}` for OpenAI /
+     * vLLM structured outputs, plus `guided_json` / `nvext.guided_json` for NIM /
+     * vLLM guided decoding) whenever the dispatch site supplies a schema (CE-004
+     * build lever). ON by default (nullish: enabled unless explicitly `false`) — it
+     * is ADDITIVE and degrades cleanly: if the endpoint rejects the schema form
+     * (HTTP 400/422) the provider retries with a plain `json_object`, then without
+     * any `response_format`, so leaving it on is safe for any endpoint. Set `false`
+     * to force the weaker `json_object`-only behavior.
+     */
+    guided_json?: boolean;
     /** Inline current contents of prompt-referenced files so edits are grounded. Default true. */
     include_referenced_files?: boolean;
 }

package/dist/shared/types/sessionConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionConfig.d.ts","sourceRoot":"","sources":["../../../src/shared/types/sessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,eAAO,MAAM,cAAc,qJAUjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAEjE,eAAO,MAAM,gBAAgB,kCAAmC,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;IACtE,sJAAsJ;IACtJ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8FAA8F;IAC9F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,8FAA8F;IAC9F,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,eAAO,MAAM,qBAAqB;;;;;;;;CAQxB,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,gGAMhC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,QAAQ,EAAE,0BAA0B,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,uEAAuE;IACvE,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,6DAMpB,CAAC;AACX,eAAO,MAAM,qBAAqB,+DAA4B,CAAC;AAC/D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACtC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,OAAO,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,CAAC,EAAE,wBAAwB,CAAC;IAC/C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,kEAAkE;IAClE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,mEAAmE;IACnE,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,wBAAwB,CAAC;CACpD"}
+{"version":3,"file":"sessionConfig.d.ts","sourceRoot":"","sources":["../../../src/shared/types/sessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,eAAO,MAAM,cAAc,qJAUjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAEjE,eAAO,MAAM,gBAAgB,kCAAmC,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;IACtE,sJAAsJ;IACtJ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8FAA8F;IAC9F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8FAA8F;IAC9F,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,eAAO,MAAM,qBAAqB;;;;;;;;CAQxB,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,gGAMhC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,QAAQ,EAAE,0BAA0B,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,uEAAuE;IACvE,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,6DAMpB,CAAC;AACX,eAAO,MAAM,qBAAqB,+DAA4B,CAAC;AAC/D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACtC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,OAAO,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,CAAC,EAAE,wBAAwB,CAAC;IAC/C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,kEAAkE;IAClE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,mEAAmE;IACnE,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,wBAAwB,CAAC;CACpD"}

package/dist/shared/types/sessionConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionConfig.js","sourceRoot":"","sources":["../../../src/shared/types/sessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM;IACN,kBAAkB;IAClB,qBAAqB;IACrB,aAAa;IACb,OAAO;IACP,UAAU;IACV,mBAAmB;IACnB,aAAa;IACb,aAAa;CACL,CAAC;AAIX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,UAAU,CAAU,CAAC;AA6FjE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,qBAAqB,EAAE,qBAAqB;IAC5C,aAAa,EAAE,aAAa;IAC5B,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,mBAAmB,EAAE,mBAAmB;IACxC,aAAa,EAAE,aAAa;IAC5B,WAAW,EAAE,aAAa;CAClB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,mBAAmB;IACnB,OAAO;IACP,UAAU;IACV,kBAAkB;IAClB,qBAAqB;CACb,CAAC;AAuLX;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,WAAW;IACX,WAAW;IACX,MAAM;IACN,MAAM;CACE,CAAC;AACX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"sessionConfig.js","sourceRoot":"","sources":["../../../src/shared/types/sessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM;IACN,kBAAkB;IAClB,qBAAqB;IACrB,aAAa;IACb,OAAO;IACP,UAAU;IACV,mBAAmB;IACnB,aAAa;IACb,aAAa;CACL,CAAC;AAIX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,UAAU,CAAU,CAAC;AAyGjE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,qBAAqB,EAAE,qBAAqB;IAC5C,aAAa,EAAE,aAAa;IAC5B,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,mBAAmB,EAAE,mBAAmB;IACxC,aAAa,EAAE,aAAa;IAC5B,WAAW,EAAE,aAAa;CAClB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,mBAAmB;IACnB,OAAO;IACP,UAAU;IACV,kBAAkB;IAClB,qBAAqB;CACb,CAAC;AAuLX;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,WAAW;IACX,WAAW;IACX,MAAM;IACN,MAAM;CACE,CAAC;AACX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC"}

package/docs/audit-pkg/contracts.md

@@ -116,7 +116,7 @@ artifacts are shaped by:
 Normal packet flow:
 
 ```text
-audit-code next-step --host-can-dispatch-subagents true
+audit-code next-step --host-can-dispatch-subagents
 backend prepares dispatch-plan.json
 conversation launches one worker per dispatch-plan entry
 worker reads entry.prompt_path

package/docs/audit-pkg/development.md

@@ -7,8 +7,9 @@
 - `examples/`: validated artifact examples
 - `skills/audit-code/`: canonical prompt and skill-facing instructions
 - `dispatch/`: packet-dispatch support data
-- `tests/`: Node test suite and regression coverage
-- `dist/`: checked-in compiled runtime used by packaged installs
+- `tests/`: vitest-based test suite and regression coverage
+- `dist/`: build output (gitignored, not checked in) produced by `npm run build` / the `prepack` script;
+  shipped only in the packed npm tarball
 
 ## Agent handoff
 
@@ -106,6 +107,7 @@ real host (`prepare-dispatch` → worker reviews each packet → `submit-packet`
 checkout. On Windows, runtime validation runs package-manager shims (`npm`,
 `npx`, `pnpm`, `yarn`) through the command shell so `.cmd` wrappers execute
 reliably — keep that covered when changing runtime command execution. If the
-final `audit-report.md` cannot be copied into the target repo due to local
-permissions, completion still succeeds and the artifact copy is authoritative.
+final `audit-report.md` cannot be promoted from `.audit-tools/audit/` to
+`.audit-tools/audit-report.md` due to local permissions, completion still succeeds and the
+pre-promotion copy under `.audit-tools/audit/` is authoritative.
 </content>

package/docs/audit-pkg/operator-guide.md

@@ -199,9 +199,9 @@ and `yarn` through the Windows command shell automatically. A runtime
 `not_confirmed` result can still be environmental when the target repo command
 starts but cannot write its own build output.
 
-If final report promotion to `<repo-root>/audit-report.md` is blocked by local
-permissions, the audit can still complete. Use the artifact-bundle copy of
-`audit-report.md` and run `audit-code validate`.
+If final report promotion to `.audit-tools/audit-report.md` is blocked by local
+permissions, the audit can still complete. Use the copy at `.audit-tools/audit/audit-report.md`
+and run `audit-code validate`.
 
 Run `audit-code validate` after editing session config so command-template
 issues fail before a long audit run.

package/docs/audit-pkg/product.md

@@ -30,7 +30,7 @@ The supported user-facing surfaces are:
 5. `audit-code install` for explicit repair or force refresh
 6. `audit-code` as the repo-local backend fallback
 
-Anything below `dist/index.js` is backend or development interface.
+Anything below `dist/` is backend or development interface.
 
 ## Product model
 

package/docs/audit-pkg/release.md

@@ -11,12 +11,15 @@ npm run verify:release
 
 `verify:release` covers:
 
-- TypeScript typecheck
-- full automated test suite
-- linked-install `audit-code` smoke coverage
-- packaged-install `audit-code` smoke coverage
-- tarball contract verification for shipped assets and runtime entrypoints
-- packaged and linked verification of bootstrap install behavior
+- TypeScript typecheck (`check`)
+- dead-code export gate (`check:deadcode`)
+- doc-manifest reconciliation gate (`check:doc-manifest`)
+- full automated test suite (`test`)
+- host-install verification for both bins (`verify:hosts`, `verify:remediate-hosts`)
+- packaged-install smoke coverage for both bins (`smoke:packaged-audit-code`, `smoke:packaged-remediate-code`)
+
+Linked-install smoke coverage (`smoke:linked-audit-code`, `smoke:linked-remediate-code`) is available as a
+standalone command but is not part of the `verify:release` chain.
 
 For live child-process output while debugging smoke tests:
 
@@ -75,9 +78,10 @@ Full maintainer flow:
 npm run release:patch:publish
 ```
 
-That command checks the worktree, runs the release gate, bumps the version,
-commits, tags, pushes `main` and the tag, creates the GitHub Release, waits for
-`publish-package.yml`, and confirms the new npm version resolves.
+That command checks the worktree, runs a fast local typecheck gate (`npm run check` — not the full
+`verify:release` suite, which already ran via CI/the `/ship` preflight), bumps the version, commits,
+tags, pushes `main` and the tag, creates the GitHub Release, waits for `publish-package.yml`, and
+confirms the new npm version resolves.
 
 Minor and major publish variants:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-tools",
-  "version": "0.32.6",
+  "version": "0.32.7",
   "private": false,
   "description": "Portable hybrid code auditing + remediation orchestrators for arbitrary repositories.",
   "type": "module",
@@ -40,7 +40,8 @@
     "check": "tsc -p tsconfig.json --noEmit",
     "test": "npm run build && vitest run",
     "test:single": "npm run build && vitest run",
-    "verify:release": "npm run check && npm run check:deadcode && npm run check:doc-manifest && npm test && npm run verify:hosts && npm run verify:remediate-hosts && npm run smoke:packaged-audit-code && npm run smoke:packaged-remediate-code",
+    "verify:checks": "npm run check && npm run check:deadcode && npm run check:doc-manifest && npm run build && npm run verify:hosts && npm run verify:remediate-hosts && npm run smoke:packaged-audit-code && npm run smoke:packaged-remediate-code",
+    "verify:release": "npm run verify:checks && vitest run",
     "check:deadcode": "knip --no-config-hints",
     "check:doc-manifest": "node scripts/check-doc-manifest.mjs",
     "verify:hosts": "node scripts/audit/verify-hosts.mjs",
@@ -68,7 +69,8 @@
     "commander": "^13.0.0",
     "smol-toml": "^1.6.1",
     "yaml": "^2.9.0",
-    "zod": "^3.25.76"
+    "zod": "^3.25.76",
+    "zod-to-json-schema": "^3.24.6"
   },
   "devDependencies": {
     "@types/node": "^24.3.0",
@@ -78,8 +80,7 @@
     "tsx": "^4.19.0",
     "typescript": "^5.9.2",
     "vitest": "^3.0.0",
-    "web-tree-sitter": "^0.25.10",
-    "zod-to-json-schema": "^3.24.6"
+    "web-tree-sitter": "^0.25.10"
   },
   "repository": {
     "type": "git",

package/remediate-code.mjs

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
 // Thin wrapper: locates the built dist and delegates to it.
-// Supports: run, install, ensure, validate
+// Interprets the installer verbs (install, ensure, verify-install, install-host)
+// locally via the B2 bootstrap; every other verb (e.g. next-step) is forwarded
+// to dist/remediate/index.js.
 
 import { fileURLToPath } from "url";
 import { pathToFileURL } from "url";

package/skills/audit-code/SKILL.md

@@ -66,19 +66,17 @@ can dispatch to *right now* on every `next-step` call so the backend sizes revie
 packets to your real model instead of a conservative 32k floor.
 
 ```bash
-audit-code next-step --host-max-active-subagents 4 --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
+audit-code next-step --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
 ```
 
 Or with a single dispatch model:
 
 ```bash
-audit-code next-step --host-max-active-subagents 4 --host-context-tokens 200000 --host-output-tokens 32000
+audit-code next-step --host-context-tokens 200000 --host-output-tokens 32000
 ```
 
 Key flags:
 
-- `--host-max-active-subagents` — parallel subagent capacity (via the `Agent`/`task`
-  tool). Without it the backend assumes serial dispatch.
 - `--host-models` — ordered JSON array (lowest rank first) of models you can dispatch
   subagents to *right now*, one entry per relative rank
   (`"small"`, `"standard"`, `"deep"`). Ranks are relative capability labels — never
@@ -87,6 +85,12 @@ Key flags:
 - `--host-context-tokens` / `--host-output-tokens` — single-model shorthand. When
   `--host-models` is also given, the roster wins.
 
+Do **not** report a parallel-subagent count — the backend owns concurrency (its
+token-budget gate plus any hard host cap it can detect, e.g. Codex
+`[agents].max_threads`), and runs uncapped when it detects none. An operator with
+a genuine fixed machine limit may pass `--host-max-active-subagents N` as an
+optional override; it is never a value to guess.
+
 When a step prompt tells you to continue, repeat `audit-code next-step` with the
 same capability flags and follow only the newly returned `prompt_path`. Stop when
 the current step prompt tells you to stop.

package/skills/audit-code/audit-code.prompt.md

@@ -29,9 +29,6 @@ handshake**: report what you can dispatch to *right now* on every `next-step`
 call, so the backend sizes review packets to your real model instead of a
 conservative 32k floor. Report:
 
-- `--host-max-active-subagents` — how many review subagents you can run in
-  parallel (via the `Agent`/`task` tool). Without it the backend assumes serial
-  dispatch and sizes waves to one packet at a time.
 - `--host-models` — an ordered JSON array (lowest rank first) of the models you
   can dispatch subagents to *right now*, one entry per relative rank:
   `{"rank": "small"|"standard"|"deep", "context_tokens": N, "output_tokens": N}`.
@@ -48,25 +45,31 @@ conservative 32k floor. Report:
   model. When `--host-models` is also given, the roster wins. Omit both and
   dispatch falls back to the conservative 32k default (many tiny packets).
 
+Do **not** report a parallel-subagent count. The backend owns concurrency: it
+sizes how many subagents run at once from its own token-budget gate and from any
+hard host cap it can detect (e.g. Codex's `~/.codex/config.toml`
+`[agents].max_threads`). When it detects no hard cap it runs without one — you
+never supply or guess a number. (An operator with a genuine fixed parallel limit
+for this machine may pass `--host-max-active-subagents N` as an optional
+override; it is not part of the handshake and is never something to invent.)
+
 ```bash
-audit-code next-step --host-max-active-subagents 4 --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
+audit-code next-step --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
 ```
 
 Or with a single dispatch model:
 
 ```bash
-audit-code next-step --host-max-active-subagents 4 --host-context-tokens 200000 --host-output-tokens 32000
+audit-code next-step --host-context-tokens 200000 --host-output-tokens 32000
 ```
 
-`4` is a safe concurrency default for this host; raise it for more parallelism or
-lower it under rate-limit pressure. The backend's learned quota adapts from
-there. The token values should match the window of the model(s) dispatching the
-packets (e.g. 200000 / 32000 for a 200k-context model).
+The token values should match the window of the model(s) dispatching the packets
+(e.g. 200000 / 32000 for a 200k-context model).
 
 When developing `audit-tools` itself, from the repo root use:
 
 ```bash
-node audit-code.mjs next-step --host-max-active-subagents 4 --host-context-tokens 200000 --host-output-tokens 32000
+node audit-code.mjs next-step --host-context-tokens 200000 --host-output-tokens 32000
 ```
 
 Read the returned JSON only far enough to find `prompt_path`, then read and
@@ -98,14 +101,8 @@ directory. It contains `repo_root`, `auditable_file_count`, `git_available`, and
 - If `mis_scope_smells` is empty, the echo is informational only — continue
   automatically without interrupting the workflow.
 
-Use MCP tools only as a compatibility adapter when direct shell access to
-`audit-code next-step` is unavailable. The MCP `start_audit` and
-`continue_audit` tools return the same one-step contract; they are not a
-separate orchestration path.
-
 When a step prompt tells you to continue, run `audit-code next-step` again with
-the same capability flags (`--host-max-active-subagents`, `--host-models`,
-`--host-context-tokens`, `--host-output-tokens`) and follow only the newly
-returned `prompt_path`.
+the same capability flags (`--host-models`, `--host-context-tokens`,
+`--host-output-tokens`) and follow only the newly returned `prompt_path`.
 
 Stop when the current step prompt tells you to stop.

package/skills/audit-code/opencode-command-template.txt

@@ -3,11 +3,10 @@
 Use `audit-code next-step` as the primary interface to the audit workflow.
 
 1. Run `audit-code next-step` directly when shell access is available.
-2. If MCP is your only available interface, call `start_audit` or `continue_audit`; both return the same one-step contract.
-3. Read `prompt_content` in the response and follow it.
-4. When a step completes (not blocked), run `audit-code next-step` again or call `continue_audit` as the compatibility adapter.
-5. Stop when the step instructions say to stop.
+2. Read `prompt_content` in the response and follow it.
+3. When a step completes (not blocked), run `audit-code next-step` again.
+4. Stop when the step instructions say to stop.
 
 Use the `task` tool or equivalent for subagent dispatch when the step tells you to fan out review work.
 
-If neither shell access nor `start_audit` is available, stop and report that no next-step interface is connected.
+If shell access to `audit-code next-step` is unavailable, stop and report that no next-step interface is connected.

package/skills/remediate-code/remediate-code.prompt.md

@@ -55,9 +55,13 @@ Every `next-step` call is also the **capability handshake**: report what you can
 dispatch to *right now* so the backend sizes remediation waves and per-worker
 context to your real model instead of a conservative 32k floor. Report:
 
-- `--host-can-dispatch-subagents` / `--host-max-concurrent` — whether you can run
-  callable subagents and how many in parallel. Without them the backend assumes
-  serial dispatch.
+- `--host-can-dispatch-subagents` — whether you can run callable subagents at all
+  (via the `Agent`/`task` tool). Without it the backend runs remediation serially.
+  Do **not** report a parallel-worker count: the backend owns concurrency (its
+  token-budget gate plus any hard host cap it can detect, e.g. Codex
+  `[agents].max_threads`) and runs uncapped when it detects none. An operator with
+  a genuine fixed machine limit may pass `--host-max-concurrent N` as an optional
+  override; it is never a value to guess.
 - `--host-models` — an ordered JSON array (lowest rank first) of the models you
   can dispatch workers to *right now*, one entry per relative rank:
   `{"rank": "small"|"standard"|"deep", "context_tokens": N, "output_tokens": N}`.
@@ -74,13 +78,13 @@ context to your real model instead of a conservative 32k floor. Report:
   value.
 
 ```bash
-remediate-code next-step --input <path> --host-max-concurrent 4 --host-models '[{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
+remediate-code next-step --input <path> --host-can-dispatch-subagents --host-models '[{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
 ```
 
 Or with a single dispatch model:
 
 ```bash
-remediate-code next-step --input <path> --host-max-concurrent 4 --host-context-tokens 200000 --host-output-tokens 32000
+remediate-code next-step --input <path> --host-can-dispatch-subagents --host-context-tokens 200000 --host-output-tokens 32000
 ```
 
 Read the returned JSON only far enough to find `prompt_path`, then read and

package/wrapper/audit-code-wrapper-install-hosts.mjs

@@ -104,7 +104,7 @@ function toRepoRelativePath(root, targetPath) {
   return value.length > 0 ? value : '.';
 }
 
-function buildInstallDirective(relativePromptPath) {
+export function buildInstallDirective(relativePromptPath) {
   return [
     INSTALL_MARKER_START,
     '## /audit-code',