instar 1.3.486 → 1.3.488

package/dist/core/CodexCliIntelligenceProvider.js

@@ -10,15 +10,28 @@
  * implementation. Reviewers, sentinels, canaries, and JobReflector now
  * have a non-Claude path. The composition root picks the right
  * implementation based on the agent's configured framework.
+ *
+ * token-audit-completeness: by default calls run as `codex exec --json`
+ * (streaming event parse → per-call token usage via onUsage; result read
+ * ONLY from the --output-last-message file). The kill-switch
+ * `intelligence.codexExecJson: false` (or env `INSTAR_CODEX_EXEC_JSON=0`)
+ * restores the previous plain-output invocation byte-for-byte.
  */
 import { execFile } from 'node:child_process';
-import { mkdtempSync, existsSync } from 'node:fs';
+import { mkdtempSync, existsSync, readFileSync, statSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { resolveCliModelFlag } from '../providers/adapters/openai-codex/models.js';
-import { buildCodexChildEnv } from '../providers/adapters/openai-codex/transport/codexSpawn.js';
+import { buildCodexChildEnv, spawnCodexExecJson, createCodexOutDir, cleanupCodexOutDir, maybeSweepStaleCodexOutDirs, } from '../providers/adapters/openai-codex/transport/codexSpawn.js';
+import { CodexUsageAccumulator } from '../providers/adapters/openai-codex/transport/codexUsageParser.js';
 const DEFAULT_TIMEOUT_MS = 30_000;
 const INTELLIGENCE_SCRATCH_DIR_PREFIX = 'instar-codex-intel-scratch-';
+/**
+ * Fail-loudly ceiling for the --output-last-message file. The old execFile
+ * path had a 1 MB maxBuffer; with that gone, an unbounded read into a string
+ * is the replacement hazard — so the file is size-checked before read.
+ */
+const MAX_RESULT_FILE_BYTES = 16 * 1024 * 1024;
 let cachedScratchDir = null;
 /**
  * Lazily create and return an EMPTY scratch directory used as the `--cd`
@@ -45,6 +58,11 @@ let cachedScratchDir = null;
  * The dir is re-verified each call: a tmp-reaper may delete it during a
  * long-lived process, so we recreate it if it has gone missing.
  *
+ * NOTE: model output is NEVER written into or read from this dir — its
+ * `existsSync` reuse branch does not re-verify ownership/mode. The
+ * --output-last-message file lives in a fresh per-call dir instead
+ * (createCodexOutDir).
+ *
  * Bug (2026-05-26): ~1,550 such judgment spawns/day were re-injecting the
  * identity + firing session_start, causing notification spam and spawn-storm
  * delivery failures. Spec: CODEX-INTELLIGENCE-PROVIDER-CLEAN-CALL-SPEC.md.
@@ -55,53 +73,210 @@ function resolveIntelligenceScratchDir() {
     cachedScratchDir = mkdtempSync(join(tmpdir(), INTELLIGENCE_SCRATCH_DIR_PREFIX));
     return cachedScratchDir;
 }
+/** Both recovery levers, named in every unknown-flag error (the kill-switch
+ * contract: a recovery instruction that is false on the path emitting it is
+ * a broken rollback contract). */
+const EXEC_JSON_RECOVERY_LEVERS = 'If this codex CLI predates --json/--output-last-message (< 0.20), disable exec-json mode via ' +
+    '`intelligence.codexExecJson: false` in .instar/config.json or env INSTAR_CODEX_EXEC_JSON=0.';
+function unknownFlagHint(stderrTail) {
+    return /unexpected argument|unrecognized option|unknown (option|flag)/i.test(stderrTail)
+        ? ` ${EXEC_JSON_RECOVERY_LEVERS}`
+        : '';
+}
+/** Env-only default for exec-json mode (default ON). Used when no config
+ * closure was threaded (config-less construction sites keep a working
+ * rollback lever). */
+function execJsonEnvDefault() {
+    return process.env.INSTAR_CODEX_EXEC_JSON !== '0';
+}
+let warnedConfigParseFailure = false;
+/**
+ * Build the per-call kill-switch resolver for construction sites that have a
+ * project dir. Pinned closure body (spec): a TTL-cached (30 s) raw
+ * `readFileSync` + `JSON.parse` of `.instar/config.json` reading ONLY
+ * `intelligence.codexExecJson` — never `loadConfig()` (which drags a
+ * synchronous SecretStore keychain execFileSync onto every judgment call),
+ * and never a boot-time closure over the in-memory config object (no config
+ * hot-reload exists, so it would never see a disk flip).
+ *
+ * Resolution order: the config key wins when the file parses AND the key is
+ * present; otherwise — including parse/read failure — fall through to the
+ * env lever (itself default-on). An operator hand-editing config under
+ * pressure who leaves a JSON slip gets a once-per-process parse-failure
+ * warning and a still-working env lever, not a silently-ignored kill-switch.
+ * A config flip applies within 30 s, no restart.
+ */
+export function createCodexExecJsonConfigResolver(configPath = join(process.cwd(), '.instar', 'config.json'), ttlMs = 30_000) {
+    let cachedAt = 0;
+    let cached = null;
+    return () => {
+        const now = Date.now();
+        if (cached !== null && now - cachedAt < ttlMs)
+            return cached;
+        cachedAt = now;
+        let raw = null;
+        try {
+            raw = readFileSync(configPath, 'utf-8');
+        }
+        catch {
+            // @silent-fallback-ok: missing/unreadable config is NORMAL for
+            // config-less installs — resolution falls through to the env lever
+            // below, which is the designed default, not a degradation
+            raw = null;
+        }
+        if (raw !== null) {
+            try {
+                const parsed = JSON.parse(raw);
+                const v = parsed?.intelligence?.codexExecJson;
+                if (typeof v === 'boolean') {
+                    cached = v;
+                    return v;
+                }
+            }
+            catch (err) {
+                // @silent-fallback-ok: NOT silent — warns once per process; an
+                // operator JSON slip keeps a working env lever instead of a
+                // silently-ignored kill-switch (the spec's pinned resolution order)
+                if (!warnedConfigParseFailure) {
+                    warnedConfigParseFailure = true;
+                    console.warn(`[CodexCliIntelligenceProvider] .instar/config.json failed to parse (${err.message}) — ` +
+                        `intelligence.codexExecJson unavailable; falling back to env INSTAR_CODEX_EXEC_JSON`);
+                }
+            }
+        }
+        cached = execJsonEnvDefault();
+        return cached;
+    };
+}
+// ── usage-parse drift tripwire ──────────────────────────────────────────────
+//
+// Emission is gated to ONCE PER PROCESS LIFETIME (module-level flag):
+// DegradationReporter's legacy path files an external feedback report per
+// event with no feedback-side cooldown, so an hourly emission would spam the
+// maintainer webhook ~24×/day/machine forever (P17). Once-per-boot is
+// sufficient: the durable, always-current surface is usageCoverage in
+// /metrics/features, not the event. The feature string is a FIXED CONSTANT —
+// it is the Telegram dedup key, and a fixed constant prevents the P17
+// unique-source dodge.
+const CODEX_USAGE_DRIFT_FEATURE = 'codex-usage-parse-drift';
+let emittedUsageDrift = false;
+function emitUsageDriftOnce(reasons) {
+    if (emittedUsageDrift)
+        return;
+    emittedUsageDrift = true;
+    // Lazy import keeps the provider constructible in contexts where the
+    // monitoring layer isn't initialized (CLI one-shots).
+    void import('../monitoring/DegradationReporter.js')
+        .then(({ DegradationReporter }) => {
+        DegradationReporter.getInstance().report({
+            feature: CODEX_USAGE_DRIFT_FEATURE,
+            primary: 'codex exec --json per-call token usage parsed into the feature metrics ledger',
+            fallback: 'call completed but token usage was not (fully) recorded',
+            reason: reasons.join(','),
+            impact: 'codex-routed calls may be token-blind in /metrics/features (usageCoverage shows the live ratio)',
+        });
+    })
+        .catch(() => {
+        /* @silent-fallback-ok: drift reporting must never break the judgment path */
+    });
+}
+/** Test-only seam. */
+export function _resetUsageDriftEmissionForTest() {
+    emittedUsageDrift = false;
+    warnedConfigParseFailure = false;
+}
 export class CodexCliIntelligenceProvider {
     codexPath;
     sandboxMode;
+    resolveExecJson;
     constructor(options) {
         this.codexPath = options.codexPath;
         this.sandboxMode = options.sandboxMode ?? 'read-only';
+        this.resolveExecJson = options.resolveExecJson ?? execJsonEnvDefault;
         // options.workingDirectory is intentionally NOT stored: judgment calls
         // always run in an empty scratch dir (resolveIntelligenceScratchDir), so
         // the agent's project identity + hooks never load. The option is retained
         // on the type for API compatibility (the factory still forwards it).
+        try {
+            if (!this.resolveExecJson()) {
+                console.warn('[CodexCliIntelligenceProvider] codex exec-json disabled — codex calls are token-blind ' +
+                    '(usageCoverage for codex-cli will read 0)');
+            }
+        }
+        catch {
+            /* @silent-fallback-ok: a throwing resolver must never block construction; evaluate() re-reads per call */
+        }
+    }
+    /** Hygiene args shared by BOTH modes (clean-call spec; pinned by the
+     * both-modes unit test). */
+    hygieneArgs(model, scratchDir) {
+        return [
+            '--model',
+            model,
+            '--sandbox',
+            this.sandboxMode,
+            // Run judgment calls in an empty scratch dir, NOT the agent's project
+            // dir. The project dir loads the full ~26 KB AGENTS.md identity AND
+            // fires the project's .codex/hooks.json (session_start /
+            // user_prompt_submit / stop) on every call. The scratch dir is the
+            // Codex analog of ClaudeCliIntelligenceProvider's `--setting-sources
+            // user`. See resolveIntelligenceScratchDir + the spec.
+            '--cd',
+            scratchDir,
+            // Belt-and-suspenders: hard-disable project-doc (AGENTS.md) loading
+            // even if a stray doc ever lands at or above the scratch path.
+            '-c',
+            'project_doc_max_bytes=0',
+            // Reviewer/sentinel/canary calls are deterministic short prompts
+            // that don't depend on the cwd being a trusted git repo. Codex
+            // CLI's default behavior is to refuse to run when --cd points at
+            // a non-git directory (it surfaces as
+            //   "Not inside a trusted directory and --skip-git-repo-check was not specified")
+            // which breaks every Codex-based agent whose state directory
+            // isn't a git checkout. Skip the check — these calls are bounded
+            // and never modify the cwd.
+            '--skip-git-repo-check',
+        ];
     }
     async evaluate(prompt, options) {
         const model = resolveCliModelFlag(options?.model);
         // Observable Intelligence: surface the resolved provider/model up front so
-        // the metrics funnel attributes the call to codex even though codex `exec`
-        // (non-JSON) surfaces no token usage. (Per-call token parsing would require
-        // switching to `exec --json` event-stream parsing — a separate change;
-        // account-level codex cost is observable via /codex/usage.)
+        // the metrics funnel attributes the call to codex on every path (including
+        // failures and the plain mode, which surfaces no token usage).
         try {
             options?.onModel?.({ model, framework: 'codex-cli' });
         }
         catch { /* @silent-fallback-ok: onModel is pure observability — a throw must never break the LLM path */ }
+        let execJson;
+        try {
+            execJson = this.resolveExecJson();
+        }
+        catch {
+            execJson = execJsonEnvDefault(); // a throwing resolver must not take the call down
+        }
+        if (execJson) {
+            return this.evaluateExecJson(prompt, options, model);
+        }
+        return this.evaluatePlain(prompt, options, model);
+    }
+    /**
+     * Kill-switch path — the pre-exec-json invocation, byte-for-byte (result
+     * semantics included: stdout.trim(), empty answer resolves '').
+     *
+     * SECURITY NOTE (disclosed tradeoff, not a regression): this legacy path
+     * passes the prompt as a positional argv element (ps-visible to local
+     * users) and execFile's error.message embeds the full command line —
+     * including the prompt — into thrown Errors. The exec-json path fixes
+     * both (prompt via stdin; errors carry only a bounded stderr tail).
+     * Flipping the kill-switch therefore re-opens this pre-existing
+     * prompt-disclosure channel in addition to going token-blind.
+     */
+    evaluatePlain(prompt, options, model) {
         const scratchDir = resolveIntelligenceScratchDir();
         return new Promise((resolve, reject) => {
             const args = [
                 'exec',
-                '--model', model,
-                '--sandbox', this.sandboxMode,
-                // Run judgment calls in an empty scratch dir, NOT the agent's project
-                // dir. The project dir loads the full ~26 KB AGENTS.md identity AND
-                // fires the project's .codex/hooks.json (session_start /
-                // user_prompt_submit / stop) on every call. The scratch dir is the
-                // Codex analog of ClaudeCliIntelligenceProvider's `--setting-sources
-                // user`. See resolveIntelligenceScratchDir + the spec.
-                '--cd', scratchDir,
-                // Belt-and-suspenders: hard-disable project-doc (AGENTS.md) loading
-                // even if a stray doc ever lands at or above the scratch path.
-                '-c', 'project_doc_max_bytes=0',
-                // Reviewer/sentinel/canary calls are deterministic short prompts
-                // that don't depend on the cwd being a trusted git repo. Codex
-                // CLI's default behavior is to refuse to run when --cd points at
-                // a non-git directory (it surfaces as
-                //   "Not inside a trusted directory and --skip-git-repo-check was not specified")
-                // which breaks every Codex-based agent whose state directory
-                // isn't a git checkout. Skip the check — these calls are bounded
-                // and never modify the cwd.
-                '--skip-git-repo-check',
+                ...this.hygieneArgs(model, scratchDir),
                 // Pass the prompt as a positional arg. Codex CLI reads stdin
                 // for very long prompts but the positional path is fine for the
                 // narrow prompts reviewers/sentinels send (a few hundred tokens
@@ -142,5 +317,96 @@ export class CodexCliIntelligenceProvider {
             child.stdin?.end();
         });
     }
+    /**
+     * Default path — `codex exec --json` with streaming usage parse. The
+     * result is read from the --output-last-message file, AND ONLY from there
+     * (stdout events never become the result: injection surface; Signal vs
+     * Authority — events are observability signal, the file is the authority).
+     */
+    async evaluateExecJson(prompt, options, model) {
+        const scratchDir = resolveIntelligenceScratchDir();
+        const outDir = createCodexOutDir();
+        // Pinned ABSOLUTE: a relative path would resolve against --cd — i.e.
+        // into the long-lived cached scratch dir, which must never hold model
+        // output. createCodexOutDir returns an absolute mkdtemp path.
+        const outFile = join(outDir, 'last-message.txt');
+        const acc = new CodexUsageAccumulator();
+        let exitedZero = false;
+        try {
+            const args = [
+                'exec',
+                '--json',
+                '--output-last-message',
+                outFile,
+                ...this.hygieneArgs(model, scratchDir),
+                // The prompt moves OFF argv in --json mode (argv is world-readable
+                // via `ps`; macOS ARG_MAX ~1 MB would hard-fail large prompts). The
+                // positional becomes `-` and the prompt is written to stdin.
+                '-',
+            ];
+            const result = await spawnCodexExecJson(this.codexPath, args, {
+                timeoutMs: options?.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+                env: buildCodexChildEnv(), // Spec 12 Rule 1a — both modes
+                prompt,
+                onLine: (line) => acc.feedLine(line),
+                onOversizedLine: () => acc.noteOversizedDiscard(),
+            });
+            if (result.exitCode === 0)
+                exitedZero = true;
+            if (result.exitCode !== 0) {
+                // Bounded stderr tail only — JSONL payloads are never concatenated
+                // wholesale into thrown Errors.
+                throw new Error(`Codex CLI error (exec --json, exit ${result.exitCode})` +
+                    (result.stderrTail ? ` — ${result.stderrTail}` : '') +
+                    unknownFlagHint(result.stderrTail));
+            }
+            // Result extraction — file only. Missing file after exit 0 rejects:
+            // resolving '' would silently mask --output-last-message argument rot,
+            // the worse failure (documented asymmetry vs plain mode's empty '').
+            let size;
+            try {
+                size = statSync(outFile).size;
+            }
+            catch {
+                throw new Error('Codex CLI error: --output-last-message file missing after exit 0 ' +
+                    '(possible argument rot in the codex CLI).' +
+                    ` ${EXEC_JSON_RECOVERY_LEVERS}`);
+            }
+            if (size > MAX_RESULT_FILE_BYTES) {
+                throw new Error(`Codex CLI error: result file is ${size} bytes (cap ${MAX_RESULT_FILE_BYTES}) — refusing unbounded read`);
+            }
+            // Empty-after-trim with exit 0 resolves '' (mode-equivalent with plain).
+            return readFileSync(outFile, 'utf-8').trim();
+        }
+        finally {
+            // Usage accounting runs BEFORE evaluate()'s promise settles (async
+            // finally semantics), so the funnel's error row carries already-burned
+            // tokens even on timeout/reject. onUsage fires exactly once whenever
+            // usage was parsed — independent of whether the call succeeded.
+            try {
+                const { usage, driftReasons } = acc.finalize({ success: exitedZero });
+                if (usage) {
+                    try {
+                        options?.onUsage?.({
+                            inputTokens: usage.inputTokens,
+                            outputTokens: usage.outputTokens,
+                            cachedTokens: usage.cachedTokens,
+                        });
+                    }
+                    catch {
+                        /* @silent-fallback-ok: onUsage is pure observability */
+                    }
+                }
+                if (driftReasons.length > 0)
+                    emitUsageDriftOnce(driftReasons);
+            }
+            finally {
+                // finally-cleanup covers ALL outcomes; the bounded stale sweep is the
+                // crashed-process backstop. Fire-and-forget — never awaited.
+                cleanupCodexOutDir(outDir);
+                maybeSweepStaleCodexOutDirs();
+            }
+        }
+    }
 }
 //# sourceMappingURL=CodexCliIntelligenceProvider.js.map

package/dist/core/CodexCliIntelligenceProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"CodexCliIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/CodexCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAEhG,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAEtE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,SAAS,6BAA6B;IACpC,IAAI,gBAAgB,IAAI,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC9E,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC,CAAC,CAAC;IAChF,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAqBD,MAAM,OAAO,4BAA4B;IACtB,SAAS,CAAS;IAClB,WAAW,CAAyD;IAErF,YAAY,OAA4C;QACtD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;QACtD,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,qEAAqE;IACvE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClD,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,uEAAuE;QACvE,4DAA4D;QAC5D,IAAI,CAAC;YAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gGAAgG,CAAC,CAAC;QAEzK,MAAM,UAAU,GAAG,6BAA6B,EAAE,CAAC;QAEnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG;gBACX,MAAM;gBACN,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,sEAAsE;gBACtE,oEAAoE;gBACpE,yDAAyD;gBACzD,mEAAmE;gBACnE,qEAAqE;gBACrE,uDAAuD;gBACvD,MAAM,EAAE,UAAU;gBAClB,oEAAoE;gBACpE,+DAA+D;gBAC/D,IAAI,EAAE,yBAAyB;gBAC/B,iEAAiE;gBACjE,+DAA+D;gBAC/D,iEAAiE;gBACjE,sCAAsC;gBACtC,kFAAkF;gBAClF,6DAA6D;gBAC7D,iEAAiE;gBACjE,4BAA4B;gBAC5B,uBAAuB;gBACvB,6DAA6D;gBAC7D,gEAAgE;gBAChE,gEAAgE;gBAChE,YAAY;gBACZ,MAAM;aACP,CAAC;YAEF,mEAAmE;YACnE,uEAAuE;YACvE,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,qEAAqE;YACrE,2DAA2D;YAC3D,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YAEtC,MAAM,KAAK,GAAG,QAAQ,CACpB,IAAI,CAAC,SAAS,EACd,IAAI,EACJ;gBACE,2EAA2E;gBAC3E,2EAA2E;gBAC3E,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;gBACjD,SAAS,EAAE,IAAI,GAAG,IAAI;gBACtB,GAAG,EAAE,QAAQ;aACd,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,IAAI,KAAK,EAAE,CAAC;oBACV,4DAA4D;oBAC5D,oEAAoE;oBACpE,MAAM,CACJ,IAAI,KAAK,CACP,oBAAoB,KAAK,CAAC,OAAO,EAAE;wBACjC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC/C,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC,CACF,CAAC;YAEF,iEAAiE;YACjE,kEAAkE;YAClE,kEAAkE;YAClE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"CodexCliIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/CodexCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,4DAA4D,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kEAAkE,CAAC;AAEzG,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAEtE;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,SAAS,6BAA6B;IACpC,IAAI,gBAAgB,IAAI,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC9E,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC,CAAC,CAAC;IAChF,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;kCAEkC;AAClC,MAAM,yBAAyB,GAC7B,+FAA+F;IAC/F,6FAA6F,CAAC;AAEhG,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,gEAAgE,CAAC,IAAI,CAAC,UAAU,CAAC;QACtF,CAAC,CAAC,IAAI,yBAAyB,EAAE;QACjC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED;;sBAEsB;AACtB,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC;AACpD,CAAC;AAED,IAAI,wBAAwB,GAAG,KAAK,CAAC;AAErC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iCAAiC,CAC/C,aAAqB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,EAClE,QAAgB,MAAM;IAEtB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAmB,IAAI,CAAC;IAClC,OAAO,GAAG,EAAE;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,GAAG,QAAQ,GAAG,KAAK;YAAE,OAAO,MAAM,CAAC;QAC7D,QAAQ,GAAG,GAAG,CAAC;QACf,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;YAC/D,mEAAmE;YACnE,0DAA0D;YAC1D,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmD,CAAC;gBACjF,MAAM,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,aAAa,CAAC;gBAC9C,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,GAAG,CAAC,CAAC;oBACX,OAAO,CAAC,CAAC;gBACX,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,+DAA+D;gBAC/D,4DAA4D;gBAC5D,oEAAoE;gBACpE,IAAI,CAAC,wBAAwB,EAAE,CAAC;oBAC9B,wBAAwB,GAAG,IAAI,CAAC;oBAChC,OAAO,CAAC,IAAI,CACV,uEAAwE,GAAa,CAAC,OAAO,MAAM;wBACjG,oFAAoF,CACvF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,6EAA6E;AAC7E,sEAAsE;AACtE,sEAAsE;AACtE,6EAA6E;AAC7E,sEAAsE;AACtE,uBAAuB;AACvB,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAC5D,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B,SAAS,kBAAkB,CAAC,OAAiB;IAC3C,IAAI,iBAAiB;QAAE,OAAO;IAC9B,iBAAiB,GAAG,IAAI,CAAC;IACzB,qEAAqE;IACrE,sDAAsD;IACtD,KAAK,MAAM,CAAC,sCAAsC,CAAC;SAChD,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE;QAChC,mBAAmB,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;YACvC,OAAO,EAAE,yBAAyB;YAClC,OAAO,EAAE,+EAA+E;YACxF,QAAQ,EAAE,yDAAyD;YACnE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACzB,MAAM,EACJ,iGAAiG;SACpG,CAAC,CAAC;IACL,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,6EAA6E;IAC/E,CAAC,CAAC,CAAC;AACP,CAAC;AAED,sBAAsB;AACtB,MAAM,UAAU,+BAA+B;IAC7C,iBAAiB,GAAG,KAAK,CAAC;IAC1B,wBAAwB,GAAG,KAAK,CAAC;AACnC,CAAC;AA8BD,MAAM,OAAO,4BAA4B;IACtB,SAAS,CAAS;IAClB,WAAW,CAAyD;IACpE,eAAe,CAAgB;IAEhD,YAAY,OAA4C;QACtD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,kBAAkB,CAAC;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,qEAAqE;QACrE,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CACV,wFAAwF;oBACtF,2CAA2C,CAC9C,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0GAA0G;QAC5G,CAAC;IACH,CAAC;IAED;gCAC4B;IACpB,WAAW,CAAC,KAAa,EAAE,UAAkB;QACnD,OAAO;YACL,SAAS;YACT,KAAK;YACL,WAAW;YACX,IAAI,CAAC,WAAW;YAChB,sEAAsE;YACtE,oEAAoE;YACpE,yDAAyD;YACzD,mEAAmE;YACnE,qEAAqE;YACrE,uDAAuD;YACvD,MAAM;YACN,UAAU;YACV,oEAAoE;YACpE,+DAA+D;YAC/D,IAAI;YACJ,yBAAyB;YACzB,iEAAiE;YACjE,+DAA+D;YAC/D,iEAAiE;YACjE,sCAAsC;YACtC,kFAAkF;YAClF,6DAA6D;YAC7D,iEAAiE;YACjE,4BAA4B;YAC5B,uBAAuB;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClD,2EAA2E;QAC3E,2EAA2E;QAC3E,+DAA+D;QAC/D,IAAI,CAAC;YAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gGAAgG,CAAC,CAAC;QAEzK,IAAI,QAAiB,CAAC;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,kBAAkB,EAAE,CAAC,CAAC,kDAAkD;QACrF,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;OAWG;IACK,aAAa,CACnB,MAAc,EACd,OAAwC,EACxC,KAAa;QAEb,MAAM,UAAU,GAAG,6BAA6B,EAAE,CAAC;QAEnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG;gBACX,MAAM;gBACN,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC;gBACtC,6DAA6D;gBAC7D,gEAAgE;gBAChE,gEAAgE;gBAChE,YAAY;gBACZ,MAAM;aACP,CAAC;YAEF,mEAAmE;YACnE,uEAAuE;YACvE,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,qEAAqE;YACrE,2DAA2D;YAC3D,EAAE;YACF,kEAAkE;YAClE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YAEtC,MAAM,KAAK,GAAG,QAAQ,CACpB,IAAI,CAAC,SAAS,EACd,IAAI,EACJ;gBACE,2EAA2E;gBAC3E,2EAA2E;gBAC3E,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;gBACjD,SAAS,EAAE,IAAI,GAAG,IAAI;gBACtB,GAAG,EAAE,QAAQ;aACd,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,IAAI,KAAK,EAAE,CAAC;oBACV,4DAA4D;oBAC5D,oEAAoE;oBACpE,MAAM,CACJ,IAAI,KAAK,CACP,oBAAoB,KAAK,CAAC,OAAO,EAAE;wBACjC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC/C,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC,CACF,CAAC;YAEF,iEAAiE;YACjE,kEAAkE;YAClE,kEAAkE;YAClE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,gBAAgB,CAC5B,MAAc,EACd,OAAwC,EACxC,KAAa;QAEb,MAAM,UAAU,GAAG,6BAA6B,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,qEAAqE;QACrE,sEAAsE;QACtE,8DAA8D;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,MAAM;gBACN,QAAQ;gBACR,uBAAuB;gBACvB,OAAO;gBACP,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC;gBACtC,mEAAmE;gBACnE,oEAAoE;gBACpE,6DAA6D;gBAC7D,GAAG;aACJ,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE;gBAC5D,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;gBACnD,GAAG,EAAE,kBAAkB,EAAE,EAAE,+BAA+B;gBAC1D,MAAM;gBACN,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpC,eAAe,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,oBAAoB,EAAE;aAClD,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;gBAAE,UAAU,GAAG,IAAI,CAAC;YAC7C,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,mEAAmE;gBACnE,gCAAgC;gBAChC,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,CAAC,QAAQ,GAAG;oBACtD,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CACrC,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,uEAAuE;YACvE,qEAAqE;YACrE,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,mEAAmE;oBACjE,2CAA2C;oBAC3C,IAAI,yBAAyB,EAAE,CAClC,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,GAAG,qBAAqB,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,mCAAmC,IAAI,eAAe,qBAAqB,6BAA6B,CACzG,CAAC;YACJ,CAAC;YACD,yEAAyE;YACzE,OAAO,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,CAAC;gBAAS,CAAC;YACT,mEAAmE;YACnE,uEAAuE;YACvE,qEAAqE;YACrE,gEAAgE;YAChE,IAAI,CAAC;gBACH,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;gBACtE,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,OAAO,EAAE,OAAO,EAAE,CAAC;4BACjB,WAAW,EAAE,KAAK,CAAC,WAAW;4BAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;4BAChC,YAAY,EAAE,KAAK,CAAC,YAAY;yBACjC,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,wDAAwD;oBAC1D,CAAC;gBACH,CAAC;gBACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;oBAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAChE,CAAC;oBAAS,CAAC;gBACT,sEAAsE;gBACtE,6DAA6D;gBAC7D,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAC3B,2BAA2B,EAAE,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/core/GeminiCliIntelligenceProvider.d.ts

@@ -20,6 +20,14 @@
  * and the env allowlist + billing-var hard-delete live in
  * providers/adapters/gemini-cli/transport/geminiSpawn.ts, imported here so
  * the alive path and the registry adapter can never diverge on safety.
+ *
+ * CANNOT-SURFACE-USAGE (token-audit-completeness, documented exemption):
+ * this provider NEVER invokes options.onUsage — the gemini CLI's one-shot
+ * plain-text output carries no per-call token usage block, so there is
+ * nothing to parse. gemini-cli is therefore an `exempt: true` row in
+ * /metrics/features usageCoverage. If a future gemini CLI gains a usage
+ * surface, remove the exemption in FeatureMetricsLedger.USAGE_EXEMPT_FRAMEWORKS
+ * and wire the parse — the provider usage-contract test pins this contract.
  */
 import type { IntelligenceProvider, IntelligenceOptions } from './types.js';
 import { type GeminiCapacityPolicyConfig } from '../providers/adapters/gemini-cli/observability/geminiCapacityPolicy.js';

package/dist/core/GeminiCliIntelligenceProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GeminiCliIntelligenceProvider.d.ts","sourceRoot":"","sources":["../../src/core/GeminiCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAO5E,OAAO,EAIL,KAAK,0BAA0B,EAChC,MAAM,wEAAwE,CAAC;AAKhF,MAAM,WAAW,oCAAoC;IACnD,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,0BAA0B,CAAC;CAC7C;AAED,qBAAa,6BAA8B,YAAW,oBAAoB;IACxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;gBAE5D,OAAO,EAAE,oCAAoC;IAQnD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CAsE/E"}
+{"version":3,"file":"GeminiCliIntelligenceProvider.d.ts","sourceRoot":"","sources":["../../src/core/GeminiCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAO5E,OAAO,EAIL,KAAK,0BAA0B,EAChC,MAAM,wEAAwE,CAAC;AAKhF,MAAM,WAAW,oCAAoC;IACnD,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,0BAA0B,CAAC;CAC7C;AAED,qBAAa,6BAA8B,YAAW,oBAAoB;IACxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;gBAE5D,OAAO,EAAE,oCAAoC;IAQnD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CAsE/E"}

package/dist/core/GeminiCliIntelligenceProvider.js

@@ -20,6 +20,14 @@
  * and the env allowlist + billing-var hard-delete live in
  * providers/adapters/gemini-cli/transport/geminiSpawn.ts, imported here so
  * the alive path and the registry adapter can never diverge on safety.
+ *
+ * CANNOT-SURFACE-USAGE (token-audit-completeness, documented exemption):
+ * this provider NEVER invokes options.onUsage — the gemini CLI's one-shot
+ * plain-text output carries no per-call token usage block, so there is
+ * nothing to parse. gemini-cli is therefore an `exempt: true` row in
+ * /metrics/features usageCoverage. If a future gemini CLI gains a usage
+ * surface, remove the exemption in FeatureMetricsLedger.USAGE_EXEMPT_FRAMEWORKS
+ * and wire the parse — the provider usage-contract test pins this contract.
  */
 import { resolveCliModelFlag } from '../providers/adapters/gemini-cli/models.js';
 import { buildGeminiChildEnv, buildGeminiOneShotArgv, spawnGeminiAndWait, } from '../providers/adapters/gemini-cli/transport/geminiSpawn.js';

package/dist/core/GeminiCliIntelligenceProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"GeminiCliIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/GeminiCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,2DAA2D,CAAC;AACnE,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,GAE7B,MAAM,wEAAwE,CAAC;AAEhF,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAiBhF,MAAM,OAAO,6BAA6B;IACvB,UAAU,CAAS;IACnB,cAAc,CAAqB;IACnC,cAAc,CAAyC;IAExE,YAAY,OAA6C;QACvD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,2EAA2E;QAC3E,2EAA2E;IAC7E,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG;gBAC7E,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC3C,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QAEvC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,iDAAiD;QACjD,OAAO,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,sBAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAC1D,6EAA6E;YAC7E,8EAA8E;YAC9E,2CAA2C;YAC3C,IAAI,CAAC;gBAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,gGAAgG,CAAC,CAAC;YACxL,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE;gBAC7D,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;gBACnD,GAAG,EAAE,QAAQ;gBACb,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC,CAAC,KAAK,CAAC,CAAC,GAAgC,EAAE,EAAE;gBAC5C,uEAAuE;gBACvE,sEAAsE;gBACtE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClF,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,uEAAuE;gBACvE,kEAAkE;gBAClE,MAAM,OAAO,GAAG,qBAAqB,MAAM,CAAC,QAAQ,EAAE;oBACpD,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC7D,MAAM,QAAQ,GAAG,0BAA0B,CAAC;oBAC1C,YAAY,EAAE,OAAO;oBACrB,OAAO;oBACP,KAAK,EAAE,YAAY;oBACnB,MAAM,EAAE,IAAI,CAAC,cAAc;iBAC5B,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACvE,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC;oBAC9B,OAAO,IAAI,CAAC,CAAC;oBACb,MAAM,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;oBACnC,SAAS;gBACX,CAAC;gBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACvE,4BAA4B,CAAC;wBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,OAAO;wBAClC,KAAK,EAAE,YAAY;wBACnB,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,cAAc;qBACpD,CAAC,CAAC;oBACH,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,MAAM,iBAAiB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE,CAC3F,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YAED,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"GeminiCliIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/GeminiCliIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,2DAA2D,CAAC;AACnE,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,GAE7B,MAAM,wEAAwE,CAAC;AAEhF,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAiBhF,MAAM,OAAO,6BAA6B;IACvB,UAAU,CAAS;IACnB,cAAc,CAAqB;IACnC,cAAc,CAAyC;IAExE,YAAY,OAA6C;QACvD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,2EAA2E;QAC3E,2EAA2E;IAC7E,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG;gBAC7E,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC3C,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QAEvC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,iDAAiD;QACjD,OAAO,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,sBAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAC1D,6EAA6E;YAC7E,8EAA8E;YAC9E,2CAA2C;YAC3C,IAAI,CAAC;gBAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,gGAAgG,CAAC,CAAC;YACxL,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE;gBAC7D,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,kBAAkB;gBACnD,GAAG,EAAE,QAAQ;gBACb,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC,CAAC,KAAK,CAAC,CAAC,GAAgC,EAAE,EAAE;gBAC5C,uEAAuE;gBACvE,sEAAsE;gBACtE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClF,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,uEAAuE;gBACvE,kEAAkE;gBAClE,MAAM,OAAO,GAAG,qBAAqB,MAAM,CAAC,QAAQ,EAAE;oBACpD,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC7D,MAAM,QAAQ,GAAG,0BAA0B,CAAC;oBAC1C,YAAY,EAAE,OAAO;oBACrB,OAAO;oBACP,KAAK,EAAE,YAAY;oBACnB,MAAM,EAAE,IAAI,CAAC,cAAc;iBAC5B,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACvE,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC;oBAC9B,OAAO,IAAI,CAAC,CAAC;oBACb,MAAM,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;oBACnC,SAAS;gBACX,CAAC;gBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACvE,4BAA4B,CAAC;wBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,OAAO;wBAClC,KAAK,EAAE,YAAY;wBACnB,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,cAAc;qBACpD,CAAC,CAAC;oBACH,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,MAAM,iBAAiB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE,CAC3F,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YAED,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;CACF"}

package/dist/core/PostUpdateMigrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAwCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAyBjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,kBAAkB;IAO1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACH,OAAO,IAAI,eAAe;IA2E1B,OAAO,CAAC,0BAA0B;IAqElC;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,uCAAuC;IAqC/C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAmFlC,OAAO,CAAC,0BAA0B;IAmDlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kCAAkC;IAwH1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,kCAAkC;IA8C1C;;;;;;;;OAQG;IACH,OAAO,CAAC,kCAAkC;IA2B1C,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IA+CpD;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IA0BzC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oCAAoC;IAmB5C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yCAAyC;IAWjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,kCAAkC;IAW1C,OAAO,CAAC,yBAAyB;IA6FjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAoElC,OAAO,CAAC,oBAAoB;IAuH5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,4BAA4B;IAwBpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IAwB9B;;;;;;;;;OASG;IACH,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,2CAA2C;IAuBnD;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,kCAAkC;IAuB1C;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,mCAAmC;IAmK3C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAkQpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAyIhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IA+iEvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IAsK1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IAmLtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,yCAAyC;IAyDjD;;;OAGG;IACH,OAAO,CAAC,eAAe;IAqWvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wBAAwB;IAmEhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,6BAA6B;IAwDrC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsDjC,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,uBAAuB,GAAG,MAAM;IA0BxiB,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,2BAA2B;IAmFnC,OAAO,CAAC,mBAAmB;IAuf3B,OAAO,CAAC,wBAAwB;IA6JhC,OAAO,CAAC,2BAA2B;IAwEnC,OAAO,CAAC,yBAAyB;IA8IjC,OAAO,CAAC,2BAA2B;IAqKnC,OAAO,CAAC,qBAAqB;IAyU7B,OAAO,CAAC,uBAAuB;IAmS/B,OAAO,CAAC,oBAAoB;IAgG5B,OAAO,CAAC,qBAAqB;IA8H7B,OAAO,CAAC,2BAA2B;IAoHnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA0MpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CAsC1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IAwD/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,8BAA8B;IA6HtC,OAAO,CAAC,+BAA+B;IAuKvC,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,qBAAqB;IAqO7B,OAAO,CAAC,qBAAqB;IAwI7B,OAAO,CAAC,qBAAqB;IAyN7B,OAAO,CAAC,6BAA6B;IAkLrC,OAAO,CAAC,0BAA0B;IAiClC,OAAO,CAAC,0BAA0B;IA8ElC,OAAO,CAAC,0BAA0B;IA8IlC,OAAO,CAAC,gBAAgB;IAmJxB,OAAO,CAAC,6BAA6B;CAoCtC"}
+{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAwCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAyBjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,kBAAkB;IAO1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACH,OAAO,IAAI,eAAe;IA2E1B,OAAO,CAAC,0BAA0B;IAqElC;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,uCAAuC;IAqC/C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAmFlC,OAAO,CAAC,0BAA0B;IAmDlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kCAAkC;IAwH1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,kCAAkC;IA8C1C;;;;;;;;OAQG;IACH,OAAO,CAAC,kCAAkC;IA2B1C,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IA+CpD;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IA0BzC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oCAAoC;IAmB5C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yCAAyC;IAWjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,kCAAkC;IAW1C,OAAO,CAAC,yBAAyB;IA6FjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAoElC,OAAO,CAAC,oBAAoB;IAuH5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,4BAA4B;IAwBpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IAwB9B;;;;;;;;;OASG;IACH,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,2CAA2C;IAuBnD;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,kCAAkC;IAuB1C;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,mCAAmC;IAmK3C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAkQpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAyIhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAykEvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IAqL1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IAmLtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,yCAAyC;IAyDjD;;;OAGG;IACH,OAAO,CAAC,eAAe;IAqWvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wBAAwB;IAmEhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,6BAA6B;IAwDrC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsDjC,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,uBAAuB,GAAG,MAAM;IA0BxiB,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,2BAA2B;IAmFnC,OAAO,CAAC,mBAAmB;IAuf3B,OAAO,CAAC,wBAAwB;IA6JhC,OAAO,CAAC,2BAA2B;IAwEnC,OAAO,CAAC,yBAAyB;IA8IjC,OAAO,CAAC,2BAA2B;IAqKnC,OAAO,CAAC,qBAAqB;IAyU7B,OAAO,CAAC,uBAAuB;IAmS/B,OAAO,CAAC,oBAAoB;IAgG5B,OAAO,CAAC,qBAAqB;IA8H7B,OAAO,CAAC,2BAA2B;IAoHnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA0MpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CAsC1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IAwD/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,8BAA8B;IA6HtC,OAAO,CAAC,+BAA+B;IAuKvC,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,qBAAqB;IAqO7B,OAAO,CAAC,qBAAqB;IAwI7B,OAAO,CAAC,qBAAqB;IAyN7B,OAAO,CAAC,6BAA6B;IAkLrC,OAAO,CAAC,0BAA0B;IAiClC,OAAO,CAAC,0BAA0B;IA8ElC,OAAO,CAAC,0BAA0B;IA8IlC,OAAO,CAAC,gBAAgB;IAmJxB,OAAO,CAAC,6BAA6B;CAoCtC"}

package/dist/core/PostUpdateMigrator.js

@@ -3537,6 +3537,31 @@ Audit what each LLM-driven gate/sentinel actually does: WHICH provider + model r
             patched = true;
             result.upgraded.push('CLAUDE.md: added Per-Feature LLM Metrics (/metrics/features) awareness (llm-feature-metrics + observable-intelligence)');
         }
+        // token-audit-completeness (Agent Awareness + Migration Parity): existing
+        // agents must learn the per-model token breakdown, usageCoverage, and the
+        // unlabeled-spend shares. Append-only addendum (house policy — the base
+        // Per-Feature section above is never edited in place). Content-sniff on
+        // the literal `unlabeledCallShare` — a REAL field name the addendum text
+        // emits AND the updated templates.ts base section emits, so a freshly-
+        // initialized agent self-matches and is never double-patched (an earlier
+        // candidate, `unlabeledShare`, is a substring of NEITHER actual field —
+        // an addendum written with the real names would never self-match and the
+        // migration would re-append on every update run, violating idempotency).
+        if (!content.includes('unlabeledCallShare')) {
+            const tokenAuditSection = `
+### Token-Audit Completeness — per-model token breakdown & usage coverage
+
+\`/metrics/features\` answers cost questions per feature AND per model (operator directive: an unmetered LLM call is an unaccountable one — see the Token-Audit Completeness standard in the constitution):
+- Each feature row carries \`byModel\` (feature×model×framework: calls, tokensIn/tokensOut/tokensCached); \`totals.byModel\` is the cross-feature aggregate. \`tokensCached\` is the cache-read SUBSET of \`tokensIn\` (fresh cost = tokensIn − tokensCached).
+- \`totals.usageCoverage\` reports, per framework, the share of successful calls that recorded REAL token usage. Codex-routed calls report per-call tokens (exec --json); 0 coverage on a non-exempt framework is the drift alarm, not noise. gemini-cli is the documented cannot-surface exemption. Failed calls still carry their already-burned tokens (error rows record cost).
+- \`totals.unlabeledTokenShare\` + \`totals.unlabeledCallShare\` track unattributed spend — the baseline is ZERO and a lint ratchet keeps every new LLM callsite tagged with \`attribution.component\`.
+- Rollback lever for codex exec-json mode: \`intelligence.codexExecJson: false\` in \`.instar/config.json\` (or env \`INSTAR_CODEX_EXEC_JSON=0\`) restores the plain invocation — codex calls then go token-blind and \`usageCoverage\` shows it honestly.
+- **When to use** (PROACTIVE): "how many tokens did feature X spend, on which model?" / "are we audit-blind anywhere?" / before enabling any cost-bearing background feature (e.g. the cartographer freshness sweep) → read \`byModel\` + \`usageCoverage\` instead of guessing. Spec: \`docs/specs/token-audit-completeness.md\`.
+`;
+            content += '\n' + tokenAuditSection;
+            patched = true;
+            result.upgraded.push('CLAUDE.md: added Token-Audit Completeness (per-model breakdown + usageCoverage) awareness (token-audit-completeness)');
+        }
         // correction-capture-backlog (Agent Awareness + Migration Parity): existing
         // agents with the Correction & Preference Learning block need to learn that a
         // rate-limited capture is now backlogged + distilled later (not dropped), so
@@ -5126,6 +5151,21 @@ Create worktrees for collaborator repos with \`instar worktree create <branch>\`
             // KPI. A Codex/Gemini agent that never learns /metrics/learning-velocity
             // can't answer "are we actually learning?" with real numbers.
             '**Learning-Velocity Metric (EXO 3.0',
+            // Per-Feature LLM Metrics base section (token-audit-completeness): the
+            // shadow mirror never carried it. TWO tail-truncated, line-leading
+            // literals cover both deployed variants — templates' bold-block form and
+            // migrateClaudeMd's H3 form (each CLAUDE.md contains exactly one, so
+            // exactly one literal fires; the other no-ops). Tail-truncation is the
+            // list's sanctioned multi-variant trick (cf. the MTP marker); a
+            // HEAD-truncated bare phrase would anchor mid-heading and match the
+            // phrase inside OTHER sections' body prose, truncating their slices.
+            '**Per-Feature LLM Metrics',
+            '### Per-Feature LLM Metrics',
+            // Token-audit addendum (per-model breakdown + usageCoverage): a Codex/
+            // Gemini agent that never learns byModel/usageCoverage can't answer
+            // "how much did feature X spend on which model?" or spot audit-blind
+            // frameworks.
+            '### Token-Audit Completeness — per-model token breakdown & usage coverage',
         ];
         for (const shadowName of ['AGENTS.md', 'GEMINI.md']) {
             const shadowPath = path.join(this.config.projectDir, shadowName);