kimi-plugin-cc 2.0.7 → 2.0.8

package/docs/registry-releases.md

@@ -4,6 +4,19 @@ The npm package `kimi-plugin-cc` ships the Claude plugin at its root and the
 self-contained Codex plugin under `plugins/kimi-codex`. GitHub marketplaces
 remain available. The package has no install scripts and no separate CLI.
 
+## Publishing status
+
+As of September 26, 2026, [2.0.7 is live on npm](https://www.npmjs.com/package/kimi-plugin-cc/v/2.0.7).
+The first upload used the validated GitHub Actions artifact and interactive npm
+authentication. Its public tarball matched that artifact byte-for-byte, and a
+fresh registry install passed isolated setup/check for both hosts.
+
+The trusted publisher is configured for `linxule/kimi-plugin-cc`, workflow
+`publish.yml`, environment `npm`, with direct publishing allowed.
+`NPM_TRUSTED_PUBLISHING=true` is enabled in GitHub Actions. Future GitHub releases
+use short-lived OIDC credentials, without a stored npm token or interactive 2FA.
+The first npm OIDC publication will be the next release; do not republish 2.0.7.
+
 ## Validation
 
 Use the repository's normal version bump and generated-surface procedure in
@@ -25,7 +38,7 @@ vendored licenses, and installs/checks the safety hook in isolated homes for
 both hosts. It also exercises unsupported-version refusal using a fake CLI.
 It does not invoke a model or read the maintainer's Kimi configuration.
 
-## First publication
+## First publication (completed bootstrap reference)
 
 The package must first exist on npm before its package settings can be configured.
 After the release commit passes CI, create its immutable version tag and GitHub

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kimi-plugin-cc",
-  "version": "2.0.7",
+  "version": "2.0.8",
   "description": "Kimi for Claude Code and Codex: code questions, reviews, fixes, and parallel tasks through the local Kimi Code CLI.",
   "type": "module",
   "engines": {
@@ -19,7 +19,7 @@
   "devDependencies": {
     "@types/bun": "^1.4.2",
     "@types/node": "^26.5.1",
-    "smol-toml": "1.8.0",
+    "smol-toml": "1.9.1",
     "tsx": "^4.23.13",
     "typescript": "^7.0.2"
   },

package/plugins/kimi-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "kimi",
-  "version": "2.0.7",
+  "version": "2.0.8",
   "description": "Codex plugin that delegates review, challenge, ask, rescue, pursue, and swarm workflows to the local kimi-code CLI through the kimi-plugin-cc companion runtime.",
   "author": {
     "name": "linxule"

package/plugins/kimi-codex/dist/cli-client.js

@@ -656,6 +656,25 @@ export function requireSessionId(result, context) {
         },
     });
 }
+/** Settled timeout data; stream records are deliberately non-serializable. */
+export class ResponseTimeoutError extends RuntimeError {
+    constructor(budgetMs, stage, commandLabel, partialResult, cause) {
+        super("RESPONSE_TIMEOUT", `${stage} timed out after ${budgetMs}ms.`, stage, {
+            ...(cause instanceof Error ? { cause } : {}),
+            details: {
+                budget_ms: budgetMs,
+                command_label: commandLabel ?? null,
+                record_count: partialResult?.records.length ?? 0,
+                partial_output_chars: partialResult?.records.reduce((count, record) => count + (record.role === "assistant" && typeof record.content === "string" ? record.content.length : 0), 0) ?? 0,
+                aborted: true,
+                ...(partialResult ? { settled_post_abort: true } : {}),
+            },
+        });
+        this.name = "ResponseTimeoutError";
+        // Never serialize stream records into job error details or error envelopes.
+        Object.defineProperty(this, "partialResult", { value: partialResult, enumerable: false });
+    }
+}
 /**
  * Run `kimi -p` under a budget that also tells the subprocess to die
  * when the budget expires.
@@ -682,7 +701,8 @@ export function requireSessionId(result, context) {
  *     subprocess/tree teardown, then reject with
  *     `RuntimeError("RESPONSE_TIMEOUT", …)` matching the legacy
  *     `withTimeout` code shape.
- *   - Result success path is unchanged from `runCliPrompt`.
+ *   - A clean non-aborted exit-0 result wins same-tick budget expiry.
+ *     Otherwise a settled result on timeout is carried as partial output.
  */
 export async function runCliPromptWithBudget(opts, budgetMs, stage) {
     const controller = new AbortController();
@@ -698,12 +718,7 @@ export async function runCliPromptWithBudget(opts, budgetMs, stage) {
         controller.abort();
     }, budgetMs);
     timer.unref();
-    const timeoutError = (raceDetected = false) => new RuntimeError("RESPONSE_TIMEOUT", `${stage} timed out after ${budgetMs}ms${raceDetected ? " (race detected post-result)" : ""}.`, stage, {
-        details: {
-            budget_ms: budgetMs,
-            command_label: opts.commandLabel ?? null,
-        },
-    });
+    const timeoutError = (partialResult, cause) => new ResponseTimeoutError(budgetMs, stage, opts.commandLabel, partialResult, cause);
     try {
         let result;
         try {
@@ -714,13 +729,13 @@ export async function runCliPromptWithBudget(opts, budgetMs, stage) {
         }
         catch (error) {
             if (timeoutFired)
-                throw timeoutError();
+                throw timeoutError(undefined, error);
             throw error;
         }
-        if (timeoutFired) {
-            // The timer and close can become runnable in the same event-loop turn.
-            // Teardown has still completed because runCliPrompt settled first.
-            throw timeoutError(true);
+        if (timeoutFired && (result.aborted || result.exitCode !== 0)) {
+            // A clean, non-aborted result won the settle/timeout boundary and is success.
+            // Budget aborts normally resolve with records, after owned teardown settles.
+            throw timeoutError(result);
         }
         return result;
     }
@@ -770,6 +785,8 @@ function buildArgs(opts) {
 }
 function buildEnv(opts) {
     const env = { ...opts.env };
+    // 2.2.0 audit: ambient trust starts project MCP stdio servers outside PreToolUse.
+    delete env.KIMI_CODE_TRUST_WORKSPACE;
     // kimi-code 0.33.0 inverted its CLI engine default: an unflagged `kimi -p`
     // now selects native agent-core-v2, while this upstream-documented flag pins
     // the legacy-v1 path. Native v2 still has a final-allow plan-file path that

package/plugins/kimi-codex/dist/commands/ask.js

@@ -1,3 +1,4 @@
+import { companionHelp } from "../help.js";
 import { randomUUID } from "node:crypto";
 import path from "node:path";
 import { createCliCancellationHandlers } from "../cli-cancellation.js";
@@ -16,7 +17,7 @@ import { readArtifact, renderManagedJobOutput, writeArtifact } from "../render.j
 import { classifyManagedCommandFailure } from "../kimi-errors.js";
 import { startBackgroundJob } from "../background-spawn.js";
 import { hookRefusalDetails, hookRefusalRetryProtocol, maybeWarnHookMissing, verifyHookInstalled, } from "../hooks/install.js";
-import { assertCliResultSuccess, reassembleProseFromRecords, warnIfSessionIdMissing } from "./cli-helpers.js";
+import { captureTimeoutPartialOutput, assertCliResultSuccess, reassembleProseFromRecords, warnIfSessionIdMissing } from "./cli-helpers.js";
 import { buildKimiSessionTitle, syncKimiSessionTitle } from "../session-title.js";
 // v1.0 cutover note (PR 2):
 //
@@ -46,6 +47,8 @@ const ASK_PROMPT_PREFIX = [
 ].join("\n");
 export async function runAsk(argv, context) {
     const parsed = parseAskArgs(argv);
+    if (parsed.help)
+        return companionHelp(["ask", ...argv]);
     if (context.env.KIMI_PLUGIN_CC_SKIP_HOOK_CHECK !== "1") {
         await requireAskHookInstalled(context);
     }
@@ -76,6 +79,7 @@ export async function runAsk(argv, context) {
             model: parsed.model ?? null,
             thinking: parsed.thinking ?? null,
             background: parsed.background,
+            budget_ms: parsed.budgetMs ?? (sessionResolution.sourceJob?.operation_kind === "ask" ? sessionResolution.sourceJob.budget_ms : null) ?? null,
             pid: parsed.background ? null : process.pid,
             kimi_pid: null,
             status: "running",
@@ -169,7 +173,7 @@ export async function executeAskJob(jobId, prompt, context, options) {
             resumeSessionId: job.kimi_session_id ?? undefined,
             logPath: job.stream_log_path,
             signal: handlers.signal,
-        }, KIMI_ASK_PROMPT_TIMEOUT_MS, "ask.prompt");
+        }, job.budget_ms ?? KIMI_ASK_PROMPT_TIMEOUT_MS, "ask.prompt");
         store.updateRunningJob(job.job_id, observedExecutionFields(result));
         if (handlers.cancelling) {
             throw new RuntimeError(cancel.errorCodes.cancelled, cancel.cancelMessages.afterPrompt, "ask.runtime");
@@ -227,8 +231,9 @@ export async function executeAskJob(jobId, prompt, context, options) {
             await markJobFailed(store, paths, job, error, cancel.failedSummary, { phase: "failed" });
             throw error;
         }
-        const classified = classifyManagedCommandFailure(error, "ask", job.job_id);
-        await markJobFailed(store, paths, job, classified, cancel.failedSummary, { phase: "failed" });
+        const classified = classifyManagedCommandFailure(error, "ask", job.job_id, { background: job.background, budgetMs: job.budget_ms ?? KIMI_ASK_PROMPT_TIMEOUT_MS });
+        const partialOutput = captureTimeoutPartialOutput(classified, store, job);
+        await markJobFailed(store, paths, job, classified, cancel.failedSummary, { phase: "failed", partialOutput });
         throw classified;
     }
     finally {

package/plugins/kimi-codex/dist/commands/cli-helpers.js

@@ -1,4 +1,6 @@
 import { RuntimeError } from "../errors.js";
+import { ResponseTimeoutError } from "../cli-client.js";
+import { observedExecutionFields } from "../kimi-engine.js";
 /**
  * Reassemble prose final text from cli-client records.
  *
@@ -110,3 +112,32 @@ export function assertCliResultSuccess(result, stage) {
         });
     }
 }
+/** Timeout-only capture, called after cancellation has taken precedence. No title sync on failure. */
+export function captureTimeoutPartialOutput(classified, store, job) {
+    const timeout = classified.cause;
+    if (!(timeout instanceof ResponseTimeoutError) || !timeout.partialResult)
+        return undefined;
+    const result = timeout.partialResult;
+    // Best-effort metadata only. The row is still `running`, and a session id
+    // written here can collide with `jobs_running_session_idx` when a resume of
+    // the same session was started while this job ran. A store error must never
+    // prevent markJobFailed from running — the partial artifact matters more
+    // than the metadata, so swallow and fall through.
+    try {
+        store.updateRunningJob(job.job_id, observedExecutionFields(result));
+        if (result.sessionId !== undefined && result.sessionId.length > 0 && result.sessionId !== job.kimi_session_id) {
+            store.updateRunningJob(job.job_id, { kimi_session_id: result.sessionId });
+        }
+    }
+    catch {
+        // Diagnostics stay in the stream log; the failure transition proceeds.
+    }
+    return {
+        text: reassembleProseFromRecords(result.records),
+        toolCalls: result.records.some((record) => record.role === "tool" ||
+            (record.role === "assistant" && Array.isArray(record.tool_calls) &&
+                record.tool_calls.length > 0)),
+        recordCount: result.records.length,
+        budgetMs: timeout.details.budget_ms,
+    };
+}

package/plugins/kimi-codex/dist/commands/pursue.js

@@ -143,6 +143,7 @@ export async function runPursue(argv, context) {
             model: parsed.model ?? null,
             thinking: parsed.thinking ?? null,
             background: false,
+            budget_ms: parsed.budgetMs ?? KIMI_PURSUE_DEFAULT_BUDGET_MS,
             pid: process.pid,
             kimi_pid: null,
             status: "running",
@@ -168,7 +169,7 @@ export async function runPursue(argv, context) {
             await markJobFailed(store, paths, job, classified, "Pursue failed.", { phase: "failed" });
             throw classified;
         }
-        const completed = await executePursueJob(job.job_id, prompt, objective, parsed.budgetMs ?? KIMI_PURSUE_DEFAULT_BUDGET_MS, context);
+        const completed = await executePursueJob(job.job_id, prompt, objective, job.budget_ms, context);
         if (!completed.final_output_path) {
             throw new RuntimeError("PURSUE_RESULT_MISSING", "Pursue finished without a rendered result.", "pursue.result");
         }

package/plugins/kimi-codex/dist/commands/repair-sessions.js

@@ -1,3 +1,4 @@
+import { REPAIR_SESSIONS_SUPPORTED_FLAGS } from "../parsing.js";
 import { constants } from "node:fs";
 import { lstat, open } from "node:fs/promises";
 import { createRequire } from "node:module";
@@ -15,7 +16,7 @@ export async function runRepairSessions(argv, context) {
     const seen = new Set();
     for (const arg of argv) {
         if ((arg !== "--apply" && arg !== "--all") || seen.has(arg)) {
-            throw new RuntimeError("INVALID_ARGS", "Usage: repair-sessions [--apply] [--all]", "repair-sessions.args");
+            throw new RuntimeError("INVALID_ARGS", `Usage: repair-sessions. Supported flags: ${REPAIR_SESSIONS_SUPPORTED_FLAGS}.`, "repair-sessions.args");
         }
         seen.add(arg);
     }

package/plugins/kimi-codex/dist/commands/replay.js

@@ -1,3 +1,4 @@
+import { REPLAY_SUPPORTED_FLAGS } from "../parsing.js";
 import { access, stat, readFile } from "node:fs/promises";
 import { constants as fsConstants } from "node:fs";
 import { RuntimeError } from "../errors.js";
@@ -9,8 +10,8 @@ import { sweepStaleJobs } from "../jobs.js";
 const MAX_REPLAY_LOG_BYTES = 32 * 1024 * 1024;
 export async function runReplay(argv, context) {
     const [jobId, ...rest] = argv;
-    if (!jobId || rest.length > 0) {
-        throw new RuntimeError("INVALID_ARGS", "replay expects exactly one job id: replay <job-id>.", "replay.parse");
+    if (!jobId || jobId.startsWith("-") || rest.length > 0) {
+        throw new RuntimeError("INVALID_ARGS", `replay expects exactly one job id: replay <job-id>. Supported flags: ${REPLAY_SUPPORTED_FLAGS}.`, "replay.parse");
     }
     const paths = resolvePluginPaths(context.env);
     await ensurePluginPaths(paths);

package/plugins/kimi-codex/dist/commands/rescue.js

@@ -1,3 +1,4 @@
+import { companionHelp } from "../help.js";
 import { randomUUID } from "node:crypto";
 import path from "node:path";
 import { createCliCancellationHandlers } from "../cli-cancellation.js";
@@ -16,7 +17,7 @@ import { parseRescueArgs } from "../parsing.js";
 import { readArtifact, renderManagedJobOutput, writeArtifact } from "../render.js";
 import { startBackgroundJob } from "../background-spawn.js";
 import { hookRefusalDetails, hookRefusalRetryProtocol, maybeWarnHookMissing, verifyHookInstalled, } from "../hooks/install.js";
-import { assertCliResultSuccess, reassembleProseFromRecords, warnIfSessionIdMissing } from "./cli-helpers.js";
+import { captureTimeoutPartialOutput, assertCliResultSuccess, reassembleProseFromRecords, warnIfSessionIdMissing } from "./cli-helpers.js";
 import { buildKimiSessionTitle, syncKimiSessionTitle } from "../session-title.js";
 export { describeMissingResult } from "../background-spawn.js";
 // v1.0 cutover note (PR 3):
@@ -41,6 +42,8 @@ const RESCUE_SUMMARY_MAX = 120;
 const RESCUE_AGENT_PROFILE_PLACEHOLDER = "<cli-client>";
 export async function runRescue(argv, context) {
     const parsed = parseRescueArgs(argv);
+    if (parsed.help)
+        return companionHelp(["task", "rescue", ...argv]);
     const paths = resolvePluginPaths(context.env);
     await ensurePluginPaths(paths);
     const repoIdentity = await resolveRepoIdentity(context.cwd);
@@ -68,6 +71,7 @@ export async function runRescue(argv, context) {
             model: parsed.model ?? null,
             thinking: parsed.thinking ?? null,
             background: parsed.background,
+            budget_ms: parsed.budgetMs ?? (sessionResolution.sourceJob?.operation_kind === "rescue" ? sessionResolution.sourceJob.budget_ms : null) ?? null,
             pid: parsed.background ? null : process.pid,
             kimi_pid: null,
             status: "running",
@@ -185,7 +189,7 @@ export async function executeRescueJob(jobId, prompt, context, options) {
             signal: handlers.signal,
             // SIGKILL escalation defaults to 1500ms inside cli-client —
             // matches v0.4's cancellation.ts behavior for the wire client.
-        }, KIMI_RESCUE_PROMPT_TIMEOUT_MS, "rescue.prompt");
+        }, job.budget_ms ?? KIMI_RESCUE_PROMPT_TIMEOUT_MS, "rescue.prompt");
         store.updateRunningJob(job.job_id, observedExecutionFields(result));
         if (handlers.cancelling) {
             throw new RuntimeError(cancel.errorCodes.cancelled, cancel.cancelMessages.afterPrompt, "rescue.runtime");
@@ -248,8 +252,11 @@ export async function executeRescueJob(jobId, prompt, context, options) {
         }
         const classified = classifyManagedCommandFailure(error, "rescue", job.job_id, {
             preserveStage: true,
+            background: job.background,
+            budgetMs: job.budget_ms ?? KIMI_RESCUE_PROMPT_TIMEOUT_MS,
         });
-        return await markJobFailed(store, paths, job, classified, cancel.failedSummary, { phase: "failed" });
+        const partialOutput = captureTimeoutPartialOutput(classified, store, job);
+        return await markJobFailed(store, paths, job, classified, cancel.failedSummary, { phase: "failed", partialOutput });
     }
     finally {
         handlers.dispose();

package/plugins/kimi-codex/dist/commands/result.js

@@ -42,6 +42,10 @@ function renderResultEnvelope(job, artifactPath, body) {
         job_id: job.job_id,
         kind: job.command_type,
         status: job.status,
+        budget_ms: job.budget_ms,
+        kimi_session_id: job.kimi_session_id,
+        // True when a budget timeout preserved assistant prose in the artifact.
+        partial_output: job.status === "failed" && Number(job.error?.details?.partial_output_chars ?? 0) > 0,
         summary: job.summary,
         error: job.error,
         artifact_path: artifactPath,

package/plugins/kimi-codex/dist/commands/review.js

@@ -17,7 +17,7 @@ import { renderManagedJobOutput, writeArtifact } from "../render.js";
 import { RuntimeError } from "../errors.js";
 import { resolveRepoIdentity } from "../git.js";
 import { hookRefusalDetails, hookRefusalRetryProtocol, maybeWarnHookMissing, verifyHookInstalled, } from "../hooks/install.js";
-import { assertCliResultSuccess, reassembleProseFromRecords, warnIfSessionIdMissing } from "./cli-helpers.js";
+import { captureTimeoutPartialOutput, assertCliResultSuccess, reassembleProseFromRecords, warnIfSessionIdMissing } from "./cli-helpers.js";
 import { buildKimiSessionTitle, syncKimiSessionTitle } from "../session-title.js";
 // v1.0 cutover note (PR 2):
 //
@@ -81,6 +81,7 @@ export async function runReview(argv, context, commandType) {
         model: parsed.model ?? null,
         thinking: parsed.thinking ?? null,
         background: false,
+        budget_ms: parsed.budgetMs ?? null,
         pid: process.pid,
         kimi_pid: null,
         status: "running",
@@ -113,7 +114,7 @@ export async function runReview(argv, context, commandType) {
             model: parsed.model,
             logPath,
             signal: handlers.signal,
-        }, KIMI_REVIEW_PROMPT_TIMEOUT_MS, `${commandType}.prompt`);
+        }, job.budget_ms ?? KIMI_REVIEW_PROMPT_TIMEOUT_MS, `${commandType}.prompt`);
         store.updateRunningJob(job.job_id, observedExecutionFields(result));
         if (handlers.cancelling) {
             throw new RuntimeError(cancel.errorCodes.cancelled, cancel.cancelMessages.afterPrompt, `${commandType}.runtime`);
@@ -163,8 +164,9 @@ export async function runReview(argv, context, commandType) {
             await markJobCancelled(store, paths, job, cancel.cancelledSummary, cancelledError);
             throw cancelledError;
         }
-        const classified = classifyManagedCommandFailure(error, commandType, job.job_id);
-        await markJobFailed(store, paths, job, classified, cancel.failedSummary);
+        const classified = classifyManagedCommandFailure(error, commandType, job.job_id, { background: job.background, budgetMs: job.budget_ms ?? KIMI_REVIEW_PROMPT_TIMEOUT_MS });
+        const partialOutput = captureTimeoutPartialOutput(classified, store, job);
+        await markJobFailed(store, paths, job, classified, cancel.failedSummary, { partialOutput });
         throw classified;
     }
     finally {

package/plugins/kimi-codex/dist/commands/setup.js

@@ -1,3 +1,4 @@
+import { SETUP_SUPPORTED_FLAGS } from "../parsing.js";
 // Managed-block installer for the kimi-code PreToolUse hook.
 //
 // Replaces the v0.4 Wire-based setup probe. In v1.0 the load-bearing
@@ -127,7 +128,7 @@ function parseArgs(argv) {
                 disableReviewGate = true;
                 break;
             default:
-                throw new RuntimeError("INVALID_ARGS", `Unknown setup flag ${token}. Supported flags: --check, --uninstall, --all (with --uninstall), --enable-review-gate, --disable-review-gate.`, "setup.parse");
+                throw new RuntimeError("INVALID_ARGS", `Unknown setup flag ${token}. Supported flags: ${SETUP_SUPPORTED_FLAGS}.`, "setup.parse");
         }
     }
     if (enableReviewGate && disableReviewGate) {

package/plugins/kimi-codex/dist/commands/swarm.js

@@ -210,6 +210,7 @@ async function runReadSwarm(parsed, objective, context) {
             model: parsed.model ?? null,
             thinking: parsed.thinking ?? null,
             background: false,
+            budget_ms: parsed.budgetMs ?? KIMI_SWARM_DEFAULT_BUDGET_MS,
             pid: process.pid,
             kimi_pid: null,
             status: "running",
@@ -235,7 +236,7 @@ async function runReadSwarm(parsed, objective, context) {
             await markJobFailed(store, paths, job, classified, "Swarm failed.", { phase: "failed" });
             throw classified;
         }
-        const completed = await executeSwarmJob(job.job_id, prompt, objective, parsed.budgetMs ?? KIMI_SWARM_DEFAULT_BUDGET_MS, resolveSwarmMaxConcurrency(parsed.maxConcurrency), context);
+        const completed = await executeSwarmJob(job.job_id, prompt, objective, job.budget_ms, resolveSwarmMaxConcurrency(parsed.maxConcurrency), context);
         if (!completed.final_output_path) {
             throw new RuntimeError("SWARM_RESULT_MISSING", "Swarm finished without a rendered result.", "swarm.result");
         }
@@ -308,6 +309,7 @@ async function runWriteSwarm(parsed, objective, context) {
                 model: parsed.model ?? null,
                 thinking: parsed.thinking ?? null,
                 background: false,
+                budget_ms: parsed.budgetMs ?? KIMI_SWARM_DEFAULT_BUDGET_MS,
                 pid: process.pid,
                 kimi_pid: null,
                 status: "running",
@@ -335,7 +337,7 @@ async function runWriteSwarm(parsed, objective, context) {
                 });
                 throw classified;
             }
-            const completed = await executeSwarmJob(job.job_id, prompt, objective, parsed.budgetMs ?? KIMI_SWARM_DEFAULT_BUDGET_MS, resolveSwarmWriteMaxConcurrency(parsed.maxConcurrency), context, { spawnCwd: worktreePath, workspaceRoot: worktreePath });
+            const completed = await executeSwarmJob(job.job_id, prompt, objective, job.budget_ms, resolveSwarmWriteMaxConcurrency(parsed.maxConcurrency), context, { spawnCwd: worktreePath, workspaceRoot: worktreePath });
             if (!completed.final_output_path) {
                 throw new RuntimeError("SWARM_RESULT_MISSING", "Swarm (write) finished without a rendered result.", "swarm.result");
             }

package/plugins/kimi-codex/dist/companion.js

@@ -1,3 +1,4 @@
+import { companionHelp } from "./help.js";
 import { runAsk } from "./commands/ask.js";
 import { runModelInventory } from "./commands/models.js";
 import { runCancel } from "./commands/cancel.js";
@@ -15,6 +16,11 @@ import { runWorker } from "./commands/worker.js";
 import { formatError, RuntimeError } from "./errors.js";
 import { resolveKimiHome } from "./kimi-home.js";
 async function main(argv) {
+    const help = companionHelp(argv);
+    if (help !== undefined) {
+        process.stdout.write(`${help}\n`);
+        return;
+    }
     const [command, ...rest] = argv;
     const cwd = process.env.KIMI_PLUGIN_CC_WORKSPACE_CWD || process.cwd();
     const context = {

package/plugins/kimi-codex/dist/help.js

@@ -0,0 +1,40 @@
+import { hasHelpFlag, ASK_SUPPORTED_FLAGS, RESCUE_SUPPORTED_FLAGS, REVIEW_SUPPORTED_FLAGS, PURSUE_SUPPORTED_FLAGS, SWARM_SUPPORTED_FLAGS, JOB_LOOKUP_SUPPORTED_FLAGS, SETUP_SUPPORTED_FLAGS, REPAIR_SESSIONS_SUPPORTED_FLAGS, REPLAY_SUPPORTED_FLAGS, } from "./parsing.js";
+const SUBCOMMANDS = "setup, review, task, ask, status, result, cancel, replay, repair-sessions";
+const TASK_KINDS = "rescue, challenge, pursue, swarm";
+/** Help is a dispatch-only, side-effect-free exception to normal argument parsing. */
+export function companionHelp(argv) {
+    const [command, kind] = argv;
+    // Scan only the argument region: the subcommand (and a task kind) are
+    // positional names, not prose, so they must not end the flag region.
+    const argumentStart = command === "--help" || command === "-h" ? 0
+        : command === "task" && kind !== undefined && !kind.startsWith("-") ? 2
+            : 1;
+    if (!hasHelpFlag(argv.slice(argumentStart)))
+        return undefined;
+    const suffix = " Use --help or -h among the leading flags (before any prompt text or --) to show this usage.";
+    const usage = (name, positionals, flags, description) => `Usage: companion.sh ${name}${positionals ? ` ${positionals}` : ""}. ${description} Supported flags: ${flags}.${suffix}`;
+    switch (command) {
+        case "--help":
+        case "-h":
+            return `Usage: companion.sh <subcommand> [arguments]. Subcommands: ${SUBCOMMANDS}. Use <subcommand> --help for usage.`;
+        case "task":
+            switch (kind) {
+                case "rescue": return usage("task rescue", "[options] [--] <task>", RESCUE_SUPPORTED_FLAGS, "Write-capable task; default budget 45m. Backgrounding does not extend the budget.");
+                case "challenge": return usage("task challenge", "[options] [--] [focus]", REVIEW_SUPPORTED_FLAGS, "Read-only challenge; default budget 30m. Foreground-only (no --background/--wait).");
+                case "pursue": return usage("task pursue", "[options] [--] <objective>", PURSUE_SUPPORTED_FLAGS, "Autonomous goal; default budget 45m. Runtime foreground-only.");
+                case "swarm": return usage("task swarm", "[options] [--] <objective>", SWARM_SUPPORTED_FLAGS, "Parallel task; default budget 30m. Runtime foreground-only; --write produces a patch.");
+                default: return `Usage: companion.sh task <kind> [arguments]. Task kinds: ${TASK_KINDS}. Use task <kind> --help for usage.`;
+            }
+        case "ask": return usage(command, "[options] [--] [prompt]", ASK_SUPPORTED_FLAGS, "Read-only question; default budget 30m. Backgrounding does not extend the budget.");
+        case "review": return usage(command, "[options] [--] [focus]", REVIEW_SUPPORTED_FLAGS, "Read-only review; default budget 30m. Foreground-only (no --background/--wait).");
+        case "setup": return usage(command, "[options]", SETUP_SUPPORTED_FLAGS, "Install, check, or remove this host's managed hook, or list configured models.");
+        case "status":
+        case "result":
+        case "cancel":
+            return usage(command, "[job-id] [options]", JOB_LOOKUP_SUPPORTED_FLAGS, command === "status" ? "Show job state as JSON." : command === "result" ? "Read a terminal artifact, optionally in a JSON envelope." : "Cancel a running job; without an id, target the repository's latest running job.");
+        case "replay": return usage(command, "<job-id>", REPLAY_SUPPORTED_FLAGS, "Replay a completed job's persisted stream log.");
+        case "repair-sessions": return usage(command, "[options]", REPAIR_SESSIONS_SUPPORTED_FLAGS, "Preview session metadata repair; --apply writes, --all selects all host-owned repositories.");
+        case "worker": return "Usage: companion.sh worker <ask|rescue> <job-id>. Internal detached-worker entry point; launched by ask/rescue, not manually.";
+        default: return undefined;
+    }
+}

package/plugins/kimi-codex/dist/hooks/config-safety.js

@@ -585,14 +585,15 @@ function validateVersionSensitiveEvents(events, version) {
         return invalidHookSet(`version-sensitive event ${JSON.stringify(first.event)} requires a verified kimi-code version`, first.entry, first.line);
     }
     // Exact schemas reviewed at 2.0.0 (1b89e4b0), 2.0.1 (caf7d4e2),
-    // 2.0.2 (9d07f634), 2.1.0 (52437299), and 2.1.1 (f67e6398):
+    // 2.0.2 (9d07f634), 2.1.0 (52437299), 2.1.1 (f67e6398) and 2.2.0 (472192c3):
     // the additive events and HookDefSchema are unchanged. Require the full
     // version string AND matching components; no inferred 2.x compatibility.
     if (version.major === 2 && ((version.minor === 0 && ((version.version === "2.0.0" && version.patch === 0) ||
         (version.version === "2.0.1" && version.patch === 1) ||
         (version.version === "2.0.2" && version.patch === 2))) ||
         (version.minor === 1 && ((version.version === "2.1.0" && version.patch === 0) ||
-            (version.version === "2.1.1" && version.patch === 1))))) {
+            (version.version === "2.1.1" && version.patch === 1))) ||
+        (version.minor === 2 && ((version.version === "2.2.0" && version.patch === 0))))) {
         return { valid: true };
     }
     if (version.major !== 0) {

package/plugins/kimi-codex/dist/job-store.js

@@ -58,6 +58,7 @@ export class JobStore {
         prompt_digest TEXT NOT NULL,
         summary TEXT NOT NULL,
         phase TEXT,
+        budget_ms INTEGER,
         final_output_path TEXT,
         stream_log_path TEXT NOT NULL,
         error TEXT
@@ -66,6 +67,9 @@ export class JobStore {
             if (!tableHasColumn(this.db, "phase")) {
                 this.db.exec(`ALTER TABLE jobs ADD COLUMN phase TEXT;`);
             }
+            if (!tableHasColumn(this.db, "budget_ms")) {
+                this.db.exec(`ALTER TABLE jobs ADD COLUMN budget_ms INTEGER;`);
+            }
             // Additive provenance migration. Existing rows deliberately remain NULL:
             // v1.9.5 plus kimi-code 0.33/0.34 could have routed to native v2 before the
             // legacy pin landed, so a blanket historical v1 backfill would invent fact.
@@ -162,14 +166,14 @@ export class JobStore {
             background, pid, kimi_pid, status, kimi_session_id,
             operation_kind, intended_engine, observed_engine, kimi_version, system_version,
             kimi_command, kimi_prefix_args, plan_certification, resumed_from_job_id, safety_profile,
-            agent_profile, prompt_digest, summary, phase, final_output_path, stream_log_path, error
+            agent_profile, prompt_digest, summary, phase, budget_ms, final_output_path, stream_log_path, error
           )
           VALUES (
             @job_id, @repo_id, @command_type, @created_at, @updated_at, @cwd, @model, @thinking,
             @background, @pid, @kimi_pid, @status, @kimi_session_id,
             @operation_kind, @intended_engine, @observed_engine, @kimi_version, @system_version,
             @kimi_command, @kimi_prefix_args, @plan_certification, @resumed_from_job_id, @safety_profile,
-            @agent_profile, @prompt_digest, @summary, @phase, @final_output_path, @stream_log_path, @error
+            @agent_profile, @prompt_digest, @summary, @phase, @budget_ms, @final_output_path, @stream_log_path, @error
           )
         `, {
                 ...serializeRecord(input),
@@ -276,7 +280,7 @@ export class JobStore {
         return this.updateWhere(jobId, { ...patch, status: "cancelled", pid: null, kimi_pid: null }, "status = 'running'");
     }
     static JOBS_COLUMNS = new Set([
-        "status", "summary", "phase", "pid", "kimi_pid",
+        "status", "summary", "phase", "budget_ms", "pid", "kimi_pid",
         "final_output_path", "stream_log_path", "kimi_session_id",
         "error", "command_type", "prompt_digest", "repo_id",
         "cwd", "model", "thinking", "background", "agent_profile",
@@ -320,6 +324,7 @@ function serializeRecord(record) {
     return {
         ...record,
         phase: record.phase ?? null,
+        budget_ms: record.budget_ms ?? null,
         operation_kind: record.operation_kind ?? null,
         intended_engine: record.intended_engine ?? null,
         observed_engine: record.observed_engine ?? null,

package/plugins/kimi-codex/dist/jobs.js

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
 import { RuntimeError } from "./errors.js";
-import { renderTerminalJobArtifact, writeArtifact } from "./render.js";
+import { formatBudgetDuration, renderTerminalJobArtifact, writeArtifact } from "./render.js";
 export function digestPrompt(prompt) {
     return createHash("sha256").update(prompt).digest("hex");
 }
@@ -30,10 +30,14 @@ export function normalizeJobError(error) {
     };
 }
 export async function markJobFailed(store, paths, job, error, summary = "Job failed.", options) {
+    if (options?.partialOutput) {
+        const label = job.command_type[0].toUpperCase() + job.command_type.slice(1);
+        summary = `${label} timed out after ${formatBudgetDuration(options.partialOutput.budgetMs)}; partial output captured (${options.partialOutput.text.trim().length} chars).`;
+    }
     const normalized = normalizeJobError(error);
     const phase = options?.phase;
     const artifactJob = {
-        ...job,
+        ...(store.getJob(job.job_id) ?? job),
         status: "failed",
         summary,
         error: normalized,
@@ -42,7 +46,7 @@ export async function markJobFailed(store, paths, job, error, summary = "Job fai
         kimi_pid: null,
         ...(phase !== undefined ? { phase } : {}),
     };
-    const artifactPath = await writeArtifact(paths, artifactJob, renderTerminalJobArtifact(artifactJob));
+    const artifactPath = await writeArtifact(paths, artifactJob, renderTerminalJobArtifact(artifactJob, options?.partialOutput));
     return (store.markFailed(job.job_id, {
         summary,
         error: normalized,

package/plugins/kimi-codex/dist/kimi-engine.js

@@ -38,6 +38,7 @@ export const NATIVE_V2_CERTIFIED_VERSIONS = Object.freeze([
     "2.0.2",
     "2.1.0",
     "2.1.1",
+    "2.2.0",
 ]);
 /** Per-operation native-v2 certification. One green operation never certifies another. */
 export const NATIVE_V2_CERTIFIED = new Map([