oh-my-knowledge 0.33.0 → 0.35.0

package/dist/executors/codex-cli.d.ts

@@ -15,4 +15,3 @@ export declare function buildCodexArgs({ model, cwd, prompt }: {
     prompt: string;
 }): string[];
 export declare function codexCliExecutor({ model, system, prompt, cwd, skillDir, timeoutMs, allowedSkills, verbose }: ExecutorInput): Promise<ExecResult>;
-//# sourceMappingURL=codex-cli.d.ts.map

package/dist/executors/codex-cli.js

@@ -251,4 +251,3 @@ export async function codexCliExecutor({ model, system, prompt, cwd, skillDir, t
         };
     }
 }
-//# sourceMappingURL=codex-cli.js.map

package/dist/executors/codex-sdk.d.ts

@@ -15,4 +15,3 @@ export declare function buildCodexSdkThreadOptions({ model, cwd }: {
 export declare function buildCodexSdkClientOptions(env: NodeJS.ProcessEnv): CodexOptions;
 export declare function createCodexSdkClient(env: NodeJS.ProcessEnv): Promise<Codex>;
 export declare function codexSdkExecutor({ model, system, prompt, cwd, skillDir, timeoutMs, allowedSkills, verbose }: ExecutorInput): Promise<ExecResult>;
-//# sourceMappingURL=codex-sdk.d.ts.map

package/dist/executors/codex-sdk.js

@@ -211,4 +211,3 @@ export async function codexSdkExecutor({ model, system, prompt, cwd, skillDir, t
         process.removeListener('SIGINT', sigintListener);
     }
 }
-//# sourceMappingURL=codex-sdk.js.map

package/dist/executors/gemini.d.ts

@@ -1,3 +1,2 @@
 import type { ExecResult, ExecutorInput } from '../types/index.js';
 export declare function geminiExecutor({ model, system, prompt, timeoutMs }: ExecutorInput): Promise<ExecResult>;
-//# sourceMappingURL=gemini.d.ts.map

package/dist/executors/gemini.js

@@ -79,4 +79,3 @@ export async function geminiExecutor({ model, system, prompt, timeoutMs = DEFAUL
         };
     }
 }
-//# sourceMappingURL=gemini.js.map

package/dist/executors/index.d.ts

@@ -4,4 +4,3 @@ import { createScriptExecutor } from './script.js';
 import { DEFAULT_MODEL, JUDGE_MODEL } from './shared.js';
 export { DEFAULT_MODEL, JUDGE_MODEL, extractAgentTrace, createScriptExecutor };
 export declare function createExecutor(name?: string): ExecutorFn;
-//# sourceMappingURL=index.d.ts.map

package/dist/executors/index.js

@@ -24,4 +24,3 @@ export { DEFAULT_MODEL, JUDGE_MODEL, extractAgentTrace, createScriptExecutor };
 export function createExecutor(name = 'claude') {
     return EXECUTOR_REGISTRY[name] || createScriptExecutor(name);
 }
-//# sourceMappingURL=index.js.map

package/dist/executors/openai-api.d.ts

@@ -1,3 +1,2 @@
 import type { ExecResult, ExecutorInput } from '../types/index.js';
 export declare function openAiApiExecutor({ model, system, prompt, timeoutMs }: ExecutorInput): Promise<ExecResult>;
-//# sourceMappingURL=openai-api.d.ts.map

package/dist/executors/openai-api.js

@@ -37,4 +37,3 @@ export async function openAiApiExecutor({ model, system, prompt, timeoutMs = DEF
         return { ok: false, error, durationMs, durationApiMs: 0, inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheCreationTokens: 0, costUSD: 0, output: null, stopReason, numTurns: 0 };
     }
 }
-//# sourceMappingURL=openai-api.js.map

package/dist/executors/runtime-fingerprint.d.ts

@@ -4,4 +4,3 @@ export interface ExecutorRuntimeFingerprintOptions {
     env?: NodeJS.ProcessEnv;
 }
 export declare function getExecutorRuntimeFingerprint(executorName: string, model: string, options?: ExecutorRuntimeFingerprintOptions): ExecutorRuntimeFingerprint;
-//# sourceMappingURL=runtime-fingerprint.d.ts.map

package/dist/executors/runtime-fingerprint.js

@@ -140,7 +140,7 @@ function withFingerprint(input) {
     const stablePayload = {
         executor: input.executor,
         model: input.model,
-        kind: input.kind,
+        kind: input.runtimeKind,
         binary: input.binary
             ? {
                 name: input.binary.name,
@@ -171,7 +171,7 @@ function runtime(executor, model, kind, capabilities, extra = {}) {
     return withFingerprint({
         executor,
         model,
-        kind,
+        runtimeKind: kind,
         capabilities,
         ...extra,
     });
@@ -274,4 +274,3 @@ export function getExecutorRuntimeFingerprint(executorName, model, options = {})
     RUNTIME_CACHE.set(cacheKey, fp);
     return fp;
 }
-//# sourceMappingURL=runtime-fingerprint.js.map

package/dist/executors/script.d.ts

@@ -1,3 +1,2 @@
 import type { ExecutorFn } from '../types/index.js';
 export declare function createScriptExecutor(command: string): ExecutorFn;
-//# sourceMappingURL=script.d.ts.map

package/dist/executors/script.js

@@ -74,4 +74,3 @@ export function createScriptExecutor(command) {
         }
     };
 }
-//# sourceMappingURL=script.js.map

package/dist/executors/shared.d.ts

@@ -128,7 +128,6 @@ export interface CodexEvent {
         results?: unknown[];
         changes?: Array<{
             path?: string;
-            kind?: string;
         }>;
         server?: string;
         tool?: string;
@@ -191,4 +190,3 @@ export declare function spawnWithSigintPropagation(command: string, args: string
     child: ChildProcess;
     done: Promise<SpawnHelperResult>;
 };
-//# sourceMappingURL=shared.d.ts.map

package/dist/executors/shared.js

@@ -250,4 +250,3 @@ export function spawnWithSigintPropagation(command, args, options = {}) {
     });
     return { child, done };
 }
-//# sourceMappingURL=shared.js.map

package/dist/grading/assertions.d.ts

@@ -36,4 +36,3 @@ export declare function runAssertions(output: string, assertions: Assertion[], c
     };
 }): AssertionResults;
 export declare function runAsyncAssertions(output: string, assertions: Assertion[], { executor, judgeModel, sample, samplesDir }: AsyncAssertionContext): Promise<AssertionResults>;
-//# sourceMappingURL=assertions.d.ts.map

package/dist/grading/assertions.js

@@ -551,4 +551,3 @@ async function runRagJudge(assertion, output, sample, executor, judgeModel) {
         return { passed: false, message: 'failed to parse judge response', costUSD: result.costUSD || 0, ...reported };
     }
 }
-//# sourceMappingURL=assertions.js.map

package/dist/grading/debias-validate.d.ts

@@ -81,4 +81,3 @@ export interface DebiasValidateResult {
  */
 export declare function validateLengthDebias(input: DebiasValidateInput): Promise<DebiasValidateResult>;
 export declare function formatDebiasValidate(result: DebiasValidateResult): string;
-//# sourceMappingURL=debias-validate.d.ts.map

package/dist/grading/debias-validate.js

@@ -170,4 +170,3 @@ export function formatDebiasValidate(result) {
     }
     return lines.join('\n');
 }
-//# sourceMappingURL=debias-validate.js.map

package/dist/grading/diagnostic.d.ts

@@ -37,4 +37,3 @@ export declare function salvagePartialJson(blob: string): {
 };
 export declare function runDiagnostic(opts: RunDiagnosticOptions): Promise<DiagnosticResult>;
 export {};
-//# sourceMappingURL=diagnostic.d.ts.map

package/dist/grading/diagnostic.js

@@ -447,4 +447,3 @@ function parseFailureModes(raw) {
     }
     return out;
 }
-//# sourceMappingURL=diagnostic.js.map

package/dist/grading/gold-cli.d.ts

@@ -82,4 +82,3 @@ export declare function validateGoldDataset(dir: string): {
     issues: string[];
     sampleCount: number;
 };
-//# sourceMappingURL=gold-cli.d.ts.map

package/dist/grading/gold-cli.js

@@ -244,4 +244,3 @@ export function validateGoldDataset(dir) {
         sampleCount: dataset?.annotations.length ?? 0,
     };
 }
-//# sourceMappingURL=gold-cli.js.map

package/dist/grading/gold-dataset.d.ts

@@ -70,4 +70,3 @@ export interface LoadResult {
 export declare function loadGoldDataset(dir: string): LoadResult;
 /** Re-export YAML serializer so the `gold init` CLI can write a template. */
 export declare function dumpYaml(value: unknown): string;
-//# sourceMappingURL=gold-dataset.d.ts.map

package/dist/grading/gold-dataset.js

@@ -158,4 +158,3 @@ function validateAnnotation(raw, path, index) {
 export function dumpYaml(value) {
     return yaml.dump(value, { lineWidth: 100, noRefs: true });
 }
-//# sourceMappingURL=gold-dataset.js.map

package/dist/grading/human-gold.d.ts

@@ -99,4 +99,3 @@ export declare function computeAgreementWithCI(pairs: RatingPair[], options?: {
         max: number;
     };
 }): AgreementResult;
-//# sourceMappingURL=human-gold.d.ts.map

package/dist/grading/human-gold.js

@@ -185,4 +185,3 @@ function roundOrNaN(x) {
         return NaN;
     return Math.round(x * 10000) / 10000;
 }
-//# sourceMappingURL=human-gold.js.map

package/dist/grading/index.d.ts

@@ -58,4 +58,3 @@ interface GradeOptions {
 export declare function grade({ output, sample, judgeModels, judgeExecutors, allowLlmJudge, execMetrics, samplesDir, judgeRepeat, lengthDebias }: GradeOptions): Promise<GradeResult>;
 export { runAssertions, validateJsonSchema } from './assertions.js';
 export { buildTraceSummary } from './judge.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/grading/index.js

@@ -137,4 +137,3 @@ export async function grade({ output, sample, judgeModels, judgeExecutors, allow
 }
 export { runAssertions, validateJsonSchema } from './assertions.js';
 export { buildTraceSummary } from './judge.js';
-//# sourceMappingURL=index.js.map

package/dist/grading/judge.d.ts

@@ -73,4 +73,3 @@ export declare function computeJudgeAgreement(judgeScores: number[][]): JudgeAgr
  */
 export declare function llmJudgeEnsemble(options: LlmJudgeOptions, judges: JudgeConfig[], executorByName: (name: string) => ExecutorFn, judgeRepeat?: number): Promise<DimensionResult>;
 export {};
-//# sourceMappingURL=judge.d.ts.map

package/dist/grading/judge.js

@@ -473,4 +473,3 @@ export async function llmJudgeEnsemble(options, judges, executorByName, judgeRep
         agreement,
     };
 }
-//# sourceMappingURL=judge.js.map

package/dist/grading/layered-scores.d.ts

@@ -10,4 +10,3 @@ export declare function computeLayeredScores(results: CompositeInput): {
     layeredScores: LayeredScores;
 };
 export {};
-//# sourceMappingURL=layered-scores.d.ts.map

package/dist/grading/layered-scores.js

@@ -60,4 +60,3 @@ export function computeLayeredScores(results) {
     const compositeScore = scores.length > 0 ? Number((scores.reduce((a, b) => a + b, 0) / scores.length).toFixed(2)) : 0;
     return { compositeScore, layeredScores: layered };
 }
-//# sourceMappingURL=layered-scores.js.map

package/dist/inputs/content-hash.d.ts

@@ -0,0 +1,28 @@
+/**
+ * 给定相对源根的路径分段(空数组 = 源根本身),判断是否进可分发树。hash 的 walk、copy 的 filter、
+ * git 物化共用此一处,保证三者完全一致。
+ *
+ * 关键:检查**每一段**而非只看叶子。本地 walk / cpSync 是逐层下降、命中目录即剪枝,只看叶子也够;
+ * 但 git ls-tree 给的是**扁平路径**(如 `.omk/samples.json`),只看叶子 `samples.json` 会让 `.omk`
+ * 内容漏过。故:任一段命中全局排除即排除;首段命中 root-only(evolve)即排除(嵌套同名是合法资产)。
+ */
+export declare function isDistributablePath(segments: string[]): boolean;
+/**
+ * cpSync 的 filter,口径与 hashArtifactSource 的 walk 完全一致(「分发出去的 == 算进 hash 的」):
+ * 源根永远拷;软链跳过(避免软链目标改了却不触发 drift、回避软链环);其余按 isDistributablePath
+ * 逐段判定。install 分发(copyArtifactToTarget)与 eval 隔离副本物化(materializeIsolatedCopy)
+ * 共用此一处 —— copy / hash / 副本三者绝不发散。
+ */
+export declare function distributableCopyFilter(sourceRoot: string): (src: string) => boolean;
+/**
+ * artifact 内容 hash —— drift baseline 与 evidence 绑定的依据。
+ *   - 文件-skill:单个 .md 的字节;
+ *   - 目录-skill:覆盖**整棵可分发目录树**(SKILL.md + references/ 等资产,但排除 .omk / .git /
+ *     evolve 等评测迭代产物),按相对路径排序后把每个文件的`路径 + 字节长度 + 内容`喂进同一个
+ *     sha256 —— 改任意资产都会令 hash 变化、drift 不漏;只补样本则 hash 不动。
+ * 用 createHash 直接喂 Buffer(字节级,二进制资产也稳;分隔符是运行时字节,源码里不引入任何不可见字符)。
+ * 读时(list / drift 检查 / eval 报告)用同一函数重算比对。
+ */
+/** sha256 前 12 位的字节摘要 —— 单文件 / 单 blob 内容指纹的共用底座(整树哈、git 单文件哈都走它)。 */
+export declare function hashBytes(buf: Buffer): string;
+export declare function hashArtifactSource(source: string, isDirectorySkill: boolean): string;

package/dist/inputs/content-hash.js

@@ -0,0 +1,106 @@
+import { createHash } from 'node:crypto';
+import { readFileSync, readdirSync, lstatSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+/**
+ * artifact「可分发树」与内容指纹 —— inputs 层的纯内容哈希工具。install(受管记录)与 eval
+ * (report 的 artifactHashes)共用同一处,保证「同一个 skill,装出来与测出来的指纹落在同一空间」,
+ * 是证据随 artifact 走(evidence.contentHash === record.contentHash)的承重基础。
+ *
+ * 放在 inputs 层而非 managed:这两个函数语义上属内容哈希、无 managed 专属依赖;skill-loader、
+ * source-resolver、managed/store 都在它之上消费,inputs 是更低层,不成环。
+ */
+/**
+ * 不进 artifact「可分发树」的条目 —— omk 的评测 / 迭代 / VCS / 系统产物,既不该被拷进 agent
+ * skill 目录,也不该计入 artifact contentHash。区分两类语义,避免误伤合法嵌套资产:
+ *   - **任意层级排除**:隐藏元数据 / VCS / 系统 / 依赖目录,任何深度出现都是噪声
+ *     (`.omk` = samples / managed / observations;`.git`;`node_modules`;OS 垃圾);
+ *   - **仅源根第一层排除**:omk 保留的工作目录,只在 skill 根有保留语义,嵌套同名是用户合法资产
+ *     (`evolve` 是 `<skillDir>/evolve/` 候选快照;但 `references/evolve/guide.md` 应正常分发并计入 hash)。
+ * spec 里 artifact content hash 与 sample-set hash 是分开的证据轴,故只补样本(.omk)不该改 hash。
+ */
+const GLOBAL_EXCLUDED_NAMES = new Set(['.omk', '.git', 'node_modules', '.DS_Store', 'Thumbs.db']);
+const ROOT_ONLY_EXCLUDED_NAMES = new Set(['evolve']);
+/**
+ * 给定相对源根的路径分段(空数组 = 源根本身),判断是否进可分发树。hash 的 walk、copy 的 filter、
+ * git 物化共用此一处,保证三者完全一致。
+ *
+ * 关键:检查**每一段**而非只看叶子。本地 walk / cpSync 是逐层下降、命中目录即剪枝,只看叶子也够;
+ * 但 git ls-tree 给的是**扁平路径**(如 `.omk/samples.json`),只看叶子 `samples.json` 会让 `.omk`
+ * 内容漏过。故:任一段命中全局排除即排除;首段命中 root-only(evolve)即排除(嵌套同名是合法资产)。
+ */
+export function isDistributablePath(segments) {
+    if (segments.length === 0)
+        return true; // 源根永远算
+    for (const seg of segments) {
+        if (GLOBAL_EXCLUDED_NAMES.has(seg))
+            return false;
+    }
+    if (ROOT_ONLY_EXCLUDED_NAMES.has(segments[0]))
+        return false;
+    return true;
+}
+/**
+ * cpSync 的 filter,口径与 hashArtifactSource 的 walk 完全一致(「分发出去的 == 算进 hash 的」):
+ * 源根永远拷;软链跳过(避免软链目标改了却不触发 drift、回避软链环);其余按 isDistributablePath
+ * 逐段判定。install 分发(copyArtifactToTarget)与 eval 隔离副本物化(materializeIsolatedCopy)
+ * 共用此一处 —— copy / hash / 副本三者绝不发散。
+ */
+export function distributableCopyFilter(sourceRoot) {
+    return (src) => {
+        const rel = relative(sourceRoot, src);
+        if (rel === '')
+            return true;
+        if (lstatSync(src).isSymbolicLink())
+            return false;
+        return isDistributablePath(rel.split(sep));
+    };
+}
+/**
+ * artifact 内容 hash —— drift baseline 与 evidence 绑定的依据。
+ *   - 文件-skill:单个 .md 的字节;
+ *   - 目录-skill:覆盖**整棵可分发目录树**(SKILL.md + references/ 等资产,但排除 .omk / .git /
+ *     evolve 等评测迭代产物),按相对路径排序后把每个文件的`路径 + 字节长度 + 内容`喂进同一个
+ *     sha256 —— 改任意资产都会令 hash 变化、drift 不漏;只补样本则 hash 不动。
+ * 用 createHash 直接喂 Buffer(字节级,二进制资产也稳;分隔符是运行时字节,源码里不引入任何不可见字符)。
+ * 读时(list / drift 检查 / eval 报告)用同一函数重算比对。
+ */
+/** sha256 前 12 位的字节摘要 —— 单文件 / 单 blob 内容指纹的共用底座(整树哈、git 单文件哈都走它)。 */
+export function hashBytes(buf) {
+    return createHash('sha256').update(buf).digest('hex').slice(0, 12);
+}
+export function hashArtifactSource(source, isDirectorySkill) {
+    if (!isDirectorySkill) {
+        return hashBytes(readFileSync(source));
+    }
+    const rels = [];
+    const walk = (dir, segments) => {
+        for (const entry of readdirSync(dir, { withFileTypes: true })) {
+            const segs = [...segments, entry.name];
+            if (!isDistributablePath(segs))
+                continue;
+            // 软链既非 isFile 也非 isDirectory,天然跳过 —— 与 copyArtifactToTarget 的 filter 一致
+            // (hash 覆盖的 == 分发出去的),避免软链目标改变却不触发 drift,也回避软链环。
+            if (entry.isDirectory())
+                walk(join(dir, entry.name), segs);
+            else if (entry.isFile())
+                rels.push(segs.join('/'));
+        }
+    };
+    walk(source, []);
+    rels.sort();
+    const h = createHash('sha256');
+    const sep = Buffer.from([0]);
+    for (const rel of rels) {
+        const content = readFileSync(join(source, rel));
+        // 路径与内容都做长度前缀,彻底排除"不同树拼出同一串"的歧义(文件名虽不含 NUL,核心层仍按可注入防)。
+        h.update(String(Buffer.byteLength(rel)));
+        h.update(sep);
+        h.update(rel);
+        h.update(sep);
+        h.update(String(content.length));
+        h.update(sep);
+        h.update(content);
+        h.update(sep);
+    }
+    return h.digest('hex').slice(0, 12);
+}

package/dist/inputs/eval-config.d.ts

@@ -10,4 +10,3 @@ export declare function loadEvalConfig(configPath: string): EvalConfig;
  * so the downstream variant resolver can treat CLI and config uniformly.
  */
 export declare function configVariantsToSpecs(variants: EvalConfigVariant[]): VariantSpec[];
-//# sourceMappingURL=eval-config.d.ts.map

package/dist/inputs/eval-config.js

@@ -23,12 +23,19 @@ export function loadEvalConfig(configPath) {
  * so the downstream variant resolver can treat CLI and config uniformly.
  */
 export function configVariantsToSpecs(variants) {
-    return variants.map((v) => ({
-        name: v.name,
-        role: v.role,
-        expr: v.cwd ? `${v.artifact}@${v.cwd}` : v.artifact,
-        ...(v.allowedSkills !== undefined && { allowedSkills: v.allowedSkills }),
-    }));
+    return variants.map((v) => {
+        // 远端 git:expr 落规范身份串 `git+<url>@<ref>:<spec>`(仅供 variantIdentity 去重、绝不 re-split),
+        // 真正解析走结构化 spec.git;本地 artifact 直接用其字符串身份。
+        const expr = v.git ? `git+${v.git.url}@${v.git.ref ?? 'HEAD'}:${v.git.spec}` : v.artifact;
+        return {
+            name: v.name,
+            role: v.role,
+            expr,
+            ...(v.git !== undefined && { git: v.git }),
+            ...(v.cwd !== undefined && { cwd: v.cwd }),
+            ...(v.allowedSkills !== undefined && { allowedSkills: v.allowedSkills }),
+        };
+    });
 }
 function validateEvalConfig(parsed, configPath) {
     if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
@@ -55,8 +62,31 @@ function validateEvalConfig(parsed, configPath) {
         if (typeof v.role !== 'string' || !VALID_ROLES.includes(v.role)) {
             throw new Error(`${configPath}: variants[${i}].role must be 'control' or 'treatment' (got: ${JSON.stringify(v.role)})`);
         }
-        if (typeof v.artifact !== 'string' || !v.artifact) {
-            throw new Error(`${configPath}: variants[${i}].artifact is required and must be a string`);
+        // artifact(本地字符串身份)与 git(远端结构化)二选一、不可兼有。
+        const hasArtifact = v.artifact !== undefined;
+        const hasGit = v.git !== undefined;
+        if (hasArtifact === hasGit) {
+            throw new Error(`${configPath}: variants[${i}] must have exactly one of 'artifact' or 'git'`);
+        }
+        if (hasArtifact && (typeof v.artifact !== 'string' || !v.artifact)) {
+            throw new Error(`${configPath}: variants[${i}].artifact must be a non-empty string`);
+        }
+        let git;
+        if (hasGit) {
+            if (typeof v.git !== 'object' || v.git === null || Array.isArray(v.git)) {
+                throw new Error(`${configPath}: variants[${i}].git must be an object { url, ref?, spec }`);
+            }
+            const g = v.git;
+            if (typeof g.url !== 'string' || !g.url) {
+                throw new Error(`${configPath}: variants[${i}].git.url is required and must be a string`);
+            }
+            if (typeof g.spec !== 'string' || !g.spec) {
+                throw new Error(`${configPath}: variants[${i}].git.spec is required and must be a string (in-repo skill path)`);
+            }
+            if (g.ref !== undefined && (typeof g.ref !== 'string' || !g.ref)) {
+                throw new Error(`${configPath}: variants[${i}].git.ref must be a non-empty string when present`);
+            }
+            git = { url: g.url, spec: g.spec, ...(g.ref !== undefined && { ref: g.ref }) };
         }
         if (v.cwd !== undefined && typeof v.cwd !== 'string') {
             throw new Error(`${configPath}: variants[${i}].cwd must be a string`);
@@ -87,7 +117,8 @@ function validateEvalConfig(parsed, configPath) {
         variants.push({
             name: v.name,
             role: v.role,
-            artifact: v.artifact,
+            ...(hasArtifact && { artifact: v.artifact }),
+            ...(git !== undefined && { git }),
             cwd: v.cwd,
             ...(allowedSkills !== undefined && { allowedSkills }),
         });
@@ -244,9 +275,11 @@ function resolveConfigPaths(config, configDir) {
         goldDir: config.goldDir ? resolveRel(config.goldDir) : undefined,
         variants: config.variants.map((v) => ({
             ...v,
-            artifact: isNonPathExpr(v.artifact) ? v.artifact : (looksLikePath(v.artifact) ? resolveRel(v.artifact) : v.artifact),
+            // git 变体无 artifact(git.url 是 URL、git.spec 是仓库相对路径,都不按本地路径解析,原样经 ...v 携带)。
+            ...(v.artifact !== undefined && {
+                artifact: isNonPathExpr(v.artifact) ? v.artifact : (looksLikePath(v.artifact) ? resolveRel(v.artifact) : v.artifact),
+            }),
             cwd: v.cwd ? resolveRel(v.cwd) : undefined,
         })),
     };
 }
-//# sourceMappingURL=eval-config.js.map

package/dist/inputs/load-samples.d.ts

@@ -33,4 +33,3 @@ export interface LoadSamplesResult {
  */
 export declare function loadSamples(samplesPath: string): LoadSamplesResult;
 export declare function validateSamples(samples: Sample[]): void;
-//# sourceMappingURL=load-samples.d.ts.map

package/dist/inputs/load-samples.js

@@ -245,4 +245,3 @@ function loadSampleFile(samplesPath) {
     validateSamples(samples);
     return { samples, requires };
 }
-//# sourceMappingURL=load-samples.js.map

package/dist/inputs/materialize-copy.d.ts

@@ -0,0 +1,37 @@
+/**
+ * 内容寻址隔离副本 —— eval 把任意源(本地目录-skill / 本地单文件-skill / 本地 git ref / 远端 git)
+ * 在测量前落地成的那一份。executor 的 cwd 锚到 copyRoot,被测 agent 在隔离副本里跑、不碰用户真实
+ * 目录,references/ 资产成为真实运行时输入。路径按 contentHash 命名 → 同内容同路径 → task.cwd
+ * 稳定 → cache key / runtime fingerprint 稳定。
+ */
+export interface IsolatedCopy {
+    /** 副本根:目录-skill 为目录 `<treesDir>/<hash>`、单文件-skill 为 `<treesDir>/<hash>/<name>.md`。 */
+    copyRoot: string;
+    /** = hashArtifactSource(copyRoot, isDirectorySkill);与 install 受管记录的 contentHash 同空间。 */
+    contentHash: string;
+    isDirectorySkill: boolean;
+}
+/** 隔离副本根目录(与 managed / isolated-cwd / reports 同 home-dir 模式)。
+ *  `OMK_TREES_DIR` 可重定位(测试隔离 / 用户迁移)。 */
+export declare function treesDir(): string;
+/**
+ * 内容寻址副本的 LRU 回收:`<treesDir>/<hash>` 数超过上限时,按 mtime 从旧到新淘汰,直到回到上限内。
+ * **绝不删**被活进程占用的副本(`.locks/<hash>.<pid>` 且 pid 在世)—— 这才是「正在跑的 eval 的 cwd 不被删」
+ * 的真实保证(不靠 mtime 当 liveness)。grace 窗口是第二道兜底。软上限:被占用/grace 内的大批新副本会暂时
+ * 超限,待其释放/老化后回收。`.tmp-` 暂存与 `.locks` 不计、不删。
+ * materializeIsolatedCopy 命中走 utimes 触碰(LRU touch)+ 落锁;未命中落盘后落锁并调本函数;也可独立调用。
+ */
+export declare function pruneTreesDir(opts?: {
+    maxEntries?: number;
+    graceMs?: number;
+}): void;
+/**
+ * 把一棵已在盘的本地源树(目录或单 .md)落地成内容寻址隔离副本。
+ *   - 先从**源**算整树 / 单文件指纹(`hashArtifactSource` 与副本同 filter → 同 hash),不必先 copy
+ *   - `<treesDir>/<hash>` 已存在 → 内容寻址命中,直接复用、**零 copy**(同 hash 内容必然相同)
+ *   - 未命中 → 物化到同卷临时目录 `<treesDir>/.tmp-xxx`(目录-skill 用 install 同一 distributable
+ *     filter;单文件-skill copyFile 到 `<tmp>/<name>.md`,使 `<hash>` 恒为目录、消歧),再原子
+ *     `rename` 到 `<hash>`;rename 撞 EEXIST/ENOTEMPTY(并发已落同 hash)即删临时复用。
+ * 物化只发生一次/variant(resolveArtifacts 解析期),不随 sample 数放大。
+ */
+export declare function materializeIsolatedCopy(localRoot: string, isDirectorySkill: boolean, name: string): IsolatedCopy;