open-multi-agent-kit 0.78.0

package/dist/commands/image.d.ts

@@ -0,0 +1,16 @@
+import { OpenAiImageClient } from "../openai/image-client.js";
+export interface ImageCommandOptions {
+    json?: boolean;
+    model?: string;
+    size?: string;
+    quality?: string;
+    background?: string;
+    outputFormat?: "png" | "jpeg" | "webp";
+    n?: string | number;
+    apiKeyEnv?: string;
+    timeoutMs?: string | number;
+    mask?: string;
+}
+export declare function imageGenerateCommand(prompt: string, options?: ImageCommandOptions): Promise<void>;
+export declare function imageEditCommand(imagePaths: string | string[], prompt: string, options?: ImageCommandOptions): Promise<void>;
+export declare function createOpenAiImageClient(options?: ImageCommandOptions): OpenAiImageClient;

package/dist/commands/image.js

@@ -0,0 +1,102 @@
+import { getProjectRoot } from "../util/fs.js";
+import { header, label, status, style } from "../util/theme.js";
+import { DEFAULT_OPENAI_API_KEY_ENV, DEFAULT_OPENAI_IMAGE_MODEL, OpenAiImageClient, OpenAiImageError, resolveOpenAiApiKey, saveOpenAiImageResult, } from "../openai/image-client.js";
+export async function imageGenerateCommand(prompt, options = {}) {
+    await runImageCommand("generate", prompt, undefined, options);
+}
+export async function imageEditCommand(imagePaths, prompt, options = {}) {
+    const paths = Array.isArray(imagePaths) ? imagePaths : splitImagePaths(imagePaths);
+    await runImageCommand("edit", prompt, paths, options);
+}
+export function createOpenAiImageClient(options = {}) {
+    return new OpenAiImageClient({
+        apiKey: resolveOpenAiApiKey(process.env, options.apiKeyEnv ?? DEFAULT_OPENAI_API_KEY_ENV),
+        timeoutMs: parsePositiveInt(options.timeoutMs, 120_000),
+    });
+}
+async function runImageCommand(operation, prompt, imagePaths, options) {
+    try {
+        if (!prompt.trim()) {
+            throw new OpenAiImageError("Image prompt is required.", {
+                kind: "api",
+                action: "Pass a non-empty prompt to the image command.",
+            });
+        }
+        const root = getProjectRoot();
+        const requestOptions = normalizeRequestOptions(options);
+        const client = createOpenAiImageClient(options);
+        const result = operation === "generate"
+            ? await client.generate({ ...requestOptions, prompt })
+            : await client.edit({
+                ...requestOptions,
+                prompt,
+                imagePaths: imagePaths ?? [],
+                maskPath: options.mask,
+            });
+        const saved = await saveOpenAiImageResult(root, result, requestOptions);
+        const payload = {
+            ok: true,
+            operation,
+            model: saved.model,
+            imagePath: saved.relativeImagePath,
+            metadataPath: saved.relativeMetadataPath,
+            bytes: saved.image.length,
+        };
+        if (options.json) {
+            console.log(JSON.stringify(payload, null, 2));
+            return;
+        }
+        console.log(header("OpenAI image"));
+        console.log(status.ok(`${operation === "generate" ? "Generated" : "Edited"} image saved`));
+        console.log(label("Model", saved.model));
+        console.log(label("Image", saved.relativeImagePath));
+        console.log(label("Metadata", saved.relativeMetadataPath));
+        console.log(style.gray("Metadata stores prompt hash/length only; API keys and raw prompts are not written."));
+        console.log(style.gray(`One-shot key flow: unset ${options.apiKeyEnv ?? DEFAULT_OPENAI_API_KEY_ENV} and remove any decrypted temp key after this run.`));
+    }
+    catch (error) {
+        handleImageCommandError(error, Boolean(options.json));
+    }
+}
+function normalizeRequestOptions(options) {
+    return {
+        model: options.model ?? DEFAULT_OPENAI_IMAGE_MODEL,
+        size: options.size,
+        quality: options.quality,
+        background: options.background,
+        outputFormat: options.outputFormat ?? "png",
+        n: parsePositiveInt(options.n, 1),
+    };
+}
+function handleImageCommandError(error, json) {
+    const mapped = error instanceof OpenAiImageError
+        ? error
+        : new OpenAiImageError(error instanceof Error ? error.message : String(error), {
+            kind: "api",
+            action: "Review the command inputs and retry.",
+        });
+    const payload = {
+        ok: false,
+        error: mapped.message,
+        kind: mapped.kind,
+        status: mapped.status,
+        action: mapped.action,
+    };
+    if (json) {
+        console.error(JSON.stringify(payload, null, 2));
+    }
+    else {
+        console.error(status.error(mapped.message));
+        console.error(style.gray(mapped.action));
+    }
+    process.exitCode = 1;
+}
+function splitImagePaths(value) {
+    return value.split(",").map((entry) => entry.trim()).filter(Boolean);
+}
+function parsePositiveInt(value, fallback) {
+    if (value === undefined)
+        return fallback;
+    const parsed = typeof value === "number" ? value : Number.parseInt(value, 10);
+    return Number.isFinite(parsed) && parsed > 0 ? Math.floor(parsed) : fallback;
+}

package/dist/commands/init/config.d.ts

@@ -0,0 +1,8 @@
+import type { RuntimeScope } from "./types.js";
+export declare function createThemeJson(): string;
+export declare function createRuntimePresetsJson(): string;
+export declare function getConfigToml(options: {
+    mcpScope: RuntimeScope;
+    skillsScope: RuntimeScope;
+    hooksScope: RuntimeScope;
+}): string;

package/dist/commands/init/config.js

@@ -0,0 +1,97 @@
+import { OMK_CORE_VERIFIED_PRESET, OMK_RUNTIME_PRESETS } from "../../runtime/core-verified-preset.js";
+export function createThemeJson() {
+    return JSON.stringify({
+        banner: {
+            title: "OMK://CONTROL",
+            subtitle: "Route agents. Verify evidence. Control the loop.",
+            style: "default",
+            enabled: true,
+        },
+        colors: {
+            primary: "#00D6FF",
+            accent: "#FF47B2",
+            success: "#00FFC2",
+            warning: "#FFB000",
+            danger: "#FF5874",
+            info: "#9D4EDD",
+            muted: "#758FA8",
+        },
+        metaBox: true,
+    }, null, 2) + "\n";
+}
+export function createRuntimePresetsJson() {
+    return JSON.stringify({
+        defaultPresetId: OMK_CORE_VERIFIED_PRESET.id,
+        presets: OMK_RUNTIME_PRESETS,
+    }, null, 2) + "\n";
+}
+export function getConfigToml(options) {
+    const { mcpScope, skillsScope, hooksScope } = options;
+    return `# open-multi-agent-kit project settings
+[project]
+name = "my-project"
+description = ""
+
+[orchestration]
+default_workers = 4
+max_retries = 3
+approval_policy = "yolo"         # low-friction SWE/benchmark mode: auto-allow tool use
+execution_prompt = "ask"         # ask | auto | parallel | sequential
+yolo_mode = true                 # minimal hard stops only; avoid benchmark-stalling prompts
+
+[runtime]
+# auto chooses lite on <=18GB RAM hosts to make 16GB laptops usable.
+resource_profile = "auto"        # auto | lite | standard
+mcp_scope = "${mcpScope}"            # all | project | none — all also reads user ~/.kimi/mcp.json at runtime
+skills_scope = "${skillsScope}"         # all | project | none — all reads user ~/.kimi/skills without copying them
+hooks_scope = "${hooksScope}"          # all | project | none — all reads user ~/.kimi hooks without copying them
+max_workers = 4                  # can override with OMK_MAX_WORKERS
+max_output_mb = 4                # cap buffered shell/quality output
+wire_output_mb = 1               # cap per-task retained wire output
+
+[ensemble]
+# Role-aware agent ensemble. Keep max_parallel=1 for 16GB/WSL safety.
+enabled = true
+max_candidates_per_node = 2
+max_parallel = 2
+quorum_ratio = 0.5
+
+[quality]
+lint = "auto"      # auto | command
+test = "auto"
+typecheck = "auto"
+build = "auto"
+
+[memory]
+# Project-local ontology graph is the default source of truth for project/session memory.
+# Use backend = "kuzu" for the embedded Kuzu ontology graph backend.
+backend = "local_graph"    # local_graph | kuzu
+scope = "project-session"
+strict = true               # fail memory writes if the selected graph backend is unavailable
+mirror_files = true         # keep .omk/memory/*.md as readable mirrors
+migrate_files = true        # seed the graph from existing .omk/memory files on first read
+
+[local_graph]
+path = ".omk/memory/graph-state.json"
+ontology = "omk-ontology-mindmap-v1"
+query = "graphql-lite"
+
+
+[locale]
+# UI language: en (default) | ko | ja
+language = "en"
+
+[theme]
+# Optional custom logo image path for terminal welcome banner.
+# omk init does not create or copy image assets; add your own asset first, then uncomment.
+# Relative paths are resolved from project root; absolute paths require OMK_TRUST_ABSOLUTE_LOGO_PATH=1.
+# Supported formats: PNG, JPEG, GIF, WEBP (high-res on iTerm/Konsole, else ANSI block).
+# logo_image = "assets/omk-logo.png"
+
+[router]
+default_model = "kimi-k2.6"
+# off | medium | high | xhigh | max
+research_thinking = "off"
+coding_thinking = "high"
+`;
+}

package/dist/commands/init/constants.d.ts

@@ -0,0 +1,7 @@
+export declare const packageRoot: string;
+export declare const SKILL_COPY_IGNORED_NAMES: Set<string>;
+export declare const PROTECTED_SKILL_FILE_PATTERNS: RegExp[];
+export declare const SKILL_SECRET_LITERAL_PATTERNS: RegExp[];
+export declare const GENERIC_SKILL_SECRET_ASSIGNMENT: RegExp;
+export declare const GENERIC_SKILL_SECRET_ALLOWLIST: RegExp;
+export declare const DEFAULT_PROJECT_MCP_COMMENT = "Project-local MCP config. omk-project is virtual runtime MCP injected; global MCP servers remain in ~/.kimi/mcp.json and must be imported explicitly only after secret review.";

package/dist/commands/init/constants.js

@@ -0,0 +1,49 @@
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "path";
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+export const packageRoot = join(__dirname, "..", "..", "..");
+export const SKILL_COPY_IGNORED_NAMES = new Set([
+    ".git",
+    ".hg",
+    ".svn",
+    ".DS_Store",
+    "node_modules",
+    "dist",
+    "build",
+    "coverage",
+    ".venv",
+    "venv",
+    "__pycache__",
+    ".pytest_cache",
+    ".mypy_cache",
+    ".ruff_cache",
+]);
+export const PROTECTED_SKILL_FILE_PATTERNS = [
+    /^\.env(?:\..*)?$/i,
+    /^\.npmrc$/i,
+    /^\.pypirc$/i,
+    /^\.netrc$/i,
+    /\.pem$/i,
+    /\.key$/i,
+    /\.p8$/i,
+    /\.p12$/i,
+    /\.pfx$/i,
+    /^id_rsa$/i,
+    /^id_ed25519$/i,
+    /^credentials\.json$/i,
+    /^service-account.*\.json$/i,
+];
+export const SKILL_SECRET_LITERAL_PATTERNS = [
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----/,
+    /AKIA[0-9A-Z]{16}/,
+    /gh[pousr]_[A-Za-z0-9_]{20,}/,
+    /glpat-[A-Za-z0-9\-_]{20,}/,
+    /\bsk-[A-Za-z0-9]{20,}\b/,
+    /\bfc-[A-Za-z0-9_-]{20,}\b/,
+    /\b(?:sk|pk)_(?:live|test)_[A-Za-z0-9]{16,}\b/,
+    /\bxox[baprs]-[A-Za-z0-9-]{20,}\b/,
+];
+export const GENERIC_SKILL_SECRET_ASSIGNMENT = /\b(api[_-]?key|secret|token|password|private[_-]?key)\b\s*[:=]\s*["']?([^"'\s;,]{20,})/i;
+export const GENERIC_SKILL_SECRET_ALLOWLIST = /\$\{|<|YOUR_|REPLACE_|NPM_TOKEN|GITHUB_TOKEN|NODE_AUTH_TOKEN|process\.env|env\.|placeholder|example|sample|redacted|\*\*\*|Do not store secrets|Do not send secrets|secret leakage|secret leak/i;
+export const DEFAULT_PROJECT_MCP_COMMENT = "Project-local MCP config. omk-project is virtual runtime MCP injected; global MCP servers remain in ~/.kimi/mcp.json and must be imported explicitly only after secret review.";

package/dist/commands/init/content.d.ts

@@ -0,0 +1,12 @@
+export declare const OKABE_AGENT_YAML = "version: 1\nagent:\n  extend: default\n  name: omk-okabe-base\n  # Provider adapters may require an explicit non-empty tools list for custom --agent-file configs.\n  # Keep the full OMK native tool surface, including Agent for parallel subagents\n  # and SendDMail for Okabe checkpoints; MCP/skills/hooks are injected by runtime config.\n  tools:\n    - \"kimi_cli.tools.agent:Agent\"\n    - \"kimi_cli.tools.ask_user:AskUserQuestion\"\n    - \"kimi_cli.tools.todo:SetTodoList\"\n    - \"kimi_cli.tools.shell:Shell\"\n    - \"kimi_cli.tools.file:ReadFile\"\n    - \"kimi_cli.tools.file:ReadMediaFile\"\n    - \"kimi_cli.tools.file:Glob\"\n    - \"kimi_cli.tools.file:Grep\"\n    - \"kimi_cli.tools.file:WriteFile\"\n    - \"kimi_cli.tools.file:StrReplaceFile\"\n    - \"kimi_cli.tools.web:SearchWeb\"\n    - \"kimi_cli.tools.web:FetchURL\"\n    - \"kimi_cli.tools.plan.enter:EnterPlanMode\"\n    - \"kimi_cli.tools.plan:ExitPlanMode\"\n    - \"kimi_cli.tools.background:TaskList\"\n    - \"kimi_cli.tools.background:TaskOutput\"\n    - \"kimi_cli.tools.background:TaskStop\"\n    - \"kimi_cli.tools.dmail:SendDMail\"\n  system_prompt_args:\n    OMK_MCP_ENABLED: \"true\"\n    OMK_SKILLS_ENABLED: \"true\"\n    OMK_HOOKS_ENABLED: \"true\"\n";
+export declare const ROOT_AGENT_YAML = "version: 1\nagent:\n  extend: ./okabe.yaml  # Inherits OMK adapter tools plus scoped MCP/skills/hooks flags\n  name: omk-root\n  system_prompt_path: ../prompts/root.md\n  system_prompt_args:\n    OMK_ROLE: \"root-coordinator\"\n    OMK_MCP_ENABLED: \"true\"\n    OMK_SKILLS_ENABLED: \"true\"\n    OMK_HOOKS_ENABLED: \"true\"\n  subagents:\n    explorer:\n      path: ./roles/explorer.yaml\n      description: \"Read-only repository exploration and context mapping with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    explore:\n      path: ./roles/explorer.yaml\n      description: \"Alias for explorer; kept for compatibility with older OMK instructions\"\n    planner:\n      path: ./roles/planner.yaml\n      description: \"Architecture, refactor, migration, and implementation planning with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    plan:\n      path: ./roles/planner.yaml\n      description: \"Alias for planner; kept for compatibility with older OMK instructions\"\n    router:\n      path: ./roles/router.yaml\n      description: \"Task routing, skill/MCP/hook fit, context budgeting, and parallel/sequential lane decisions with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    architect:\n      path: ./roles/architect.yaml\n      description: \"Read-only architecture and migration design with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    coder:\n      path: ./roles/coder.yaml\n      description: \"Scoped implementation in the current project with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    reviewer:\n      path: ./roles/reviewer.yaml\n      description: \"Adversarial code review and risk detection with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    security:\n      path: ./roles/security.yaml\n      description: \"Security, secret, permission, and trust-boundary review with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    qa:\n      path: ./roles/qa.yaml\n      description: \"Run and analyze lint, typecheck, test, and build results with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    tester:\n      path: ./roles/tester.yaml\n      description: \"Focused regression and edge-case testing with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    researcher:\n      path: ./roles/researcher.yaml\n      description: \"Reference-backed research and external documentation checks with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    integrator:\n      path: ./roles/integrator.yaml\n      description: \"Merge coordination and final synthesis with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    aggregator:\n      path: ./roles/aggregator.yaml\n      description: \"Parallel-lane result aggregation with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    interviewer:\n      path: ./roles/interviewer.yaml\n      description: \"Requirement clarification and acceptance criteria discovery with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    ontology:\n      path: ./roles/ontology.yaml\n      description: \"Project graph memory and ontology curation with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n    vision-debugger:\n      path: ./roles/vision-debugger.yaml\n      description: \"Screenshot and multimodal debugging with scoped MCP, skills, and hooks access when enabled by runtime scope\"\n";
+export declare const ROLE_YAMLS: Record<string, string>;
+export declare function getDesignMd(version: string): string;
+export declare const GEMINI_MD = "# GEMINI.md\n\n@./AGENTS.md\n@./DESIGN.md\n\nUse AGENTS.md as the canonical project instruction source, including current OMK skills, MCP, agents, and harness policy.\nUse DESIGN.md as the canonical visual identity source.\nDo not duplicate runtime inventories; follow AGENTS.md and `chat-agent-harness.json` when present.\n";
+export declare const CLAUDE_MD = "# CLAUDE.md\n\n@./AGENTS.md\n@./DESIGN.md\n\nUse AGENTS.md as the canonical project instruction source, including current OMK skills, MCP, agents, and harness policy.\nUse DESIGN.md for UI/frontend work.\nDo not duplicate runtime inventories; follow AGENTS.md and `chat-agent-harness.json` when present.\n";
+export declare const ROADMAP_MD = "# Roadmap\n\nCurrent source version: v1.1.18\nLast updated: 2026-05-24\n\n## Current runtime stance\n\nOMK is the root orchestrator. Kimi is an authority-capable compatibility provider adapter, not the whole runtime or implicit default. Codex, DeepSeek, OpenCode, CommandCode, OpenRouter, Qwen, Gemini, and Claude run as adapter lanes only when provider health, capability, approval, sandbox, and harness policy match the task.\n\n- `omk run`, `omk parallel`, chat harnesses, and DAG replay expose provider routing and evidence-gated lanes.\n- `omk provider` / `omk deepseek` manage provider enablement, key setup, availability checks, and fallback readiness.\n- DeepSeek is read/review/advisory by default; it must not receive write/shell authority from native chat defaults.\n- The resolved authority provider remains the writer, merger, and final synthesis lane for write/shell/merge work.\n- `omk graph view` generates an HTML view from local graph memory.\n- `omk goal` has a persisted lifecycle, continue loop, generated plan/evidence criteria, and verification flow.\n\n## v1.2 \u2014 Hardening the current surface\n\n### P0: native runtime safety hardening\n\n- Remaining: native chat turn capabilities must be intent-based: read-only by default, write only for edits, shell only for explicit command/build/test work, merge only for merge/release operations.\n- Remaining: `--execution ask|auto|never` and sandbox mode must propagate into runtime adapter metadata; provider adapters must not silently collapse ask into never.\n- Remaining: `authority`, `primary`, and `omk` provider policy must resolve to a concrete provider before bootstrap/router execution.\n- Remaining: CLI provider bootstrap must distinguish runtime/binary availability from auth/model/quota readiness.\n- Remaining: MCP, skills, hooks, and tool-plane parse or resolution failures must surface as diagnostics; runtime-required MCP failures should hard fail.\n\n### P0: release and contract gates\n\n- Done: YAML validation now runs in local `verify` plus CI/smoke workflows.\n- Done: package dry-pack, package audit, tarball smoke, native safety build, and release matrix gates were re-verified against v1.1.17 artifacts.\n- Done: provider/deepseek and screenshot JSON command contracts gained hermetic regression tests.\n- Done: current AGENTS/init templates and packaged workflow skills were aligned with the active skills/MCP/agents/harness surface, including all generated agent MCP/skills/hooks flags and parallel subagent orchestration guidance.\n- Remaining: lock broader provider fallback metadata with tests for rate limit, timeout, and authority fallback variants.\n- Remaining: define minimum machine-readable CLI envelopes for the rest of the automation-critical commands.\n- Remaining: release/tag only after local gates, native safety packaging, package audit, smoke-pack, tarball install smoke, GitHub Smoke Test, and GitHub CI pass on the exact target commit.\n\n### P1: observability and diagnostics\n\n- Done: provider route/fallback counts are now emitted in run summaries/reports and summary terminal output.\n- Done: invalid MCP JSON is reported as a visible diagnostic without leaking secret-like config values.\n- Done: `omk mcp doctor --json` exposes structured server status, command resolution, timeout, permission, and config-source fields.\n- Expand JSON output for graph, DAG, summary, and workflow commands where CI or agents consume results.\n- Link graph nodes back to runs, goals, providers, and evidence so `omk graph view` becomes audit evidence, not only visualization.\n\n### P2: execution depth and planner quality\n\n- Deepen `omk team` runtime reporting: worker state, pane/session health, artifacts, and verification handoff.\n- Done: replace the `omk goal plan` stub with a planner that emits steps, acceptance criteria, risks, and evidence gates.\n- Add provider-quality gates before broader non-primary-provider worker pools.\n- Keep primary-provider execution as the safe fallback path for every run.\n\n## Later tracks\n\n### Provider routing maturity\n\n- Keep the resolved authority provider as the writer, merger, and final synthesis runtime.\n- Use provider hints for explorer, reviewer, QA, planner, and documentation roles only when preflight is healthy and task risk is low.\n- Record provider attempts, route confidence, fallback reason, and final authority in run evidence.\n\n### Graph and memory maturity\n\n- Materialize provider routes, fallback events, goals, evidence gates, and run artifacts in the local graph/Kuzu ontology.\n- Keep `omk graph view` local-first and safe for private repositories.\n\n### Historical milestones\n\n| Version | Focus |\n|---------|-------|\n| v0.1 | init / doctor / chat, P0 skills, AGENTS.md / DESIGN.md generation, quality gate hooks |\n| v0.2 | wire controller, HUD, run state, worker logs |\n| v0.3 | worktree team, merge queue, reviewer / QA / integrator agents |\n| v0.4 | Google DESIGN.md integration, Stitch skills installer, screenshot UI review, Spec Kit planning + DAG execution, agent registry, project index, run summary |\n| v0.5 | MCP project server, plugin pack, CI agent mode |\n| v1.1.6 | provider/deepseek commands, provider policy flags, graph view, goal lifecycle, expanded run history and update JSON |\n| v1.1.9 | chat harness manifest, capability DAG lanes, Rust native safety loader, Windows clipboard screenshot bridge, release native matrix |\n| v1.1.12 | Replay system, skill assigner, decision trace coverage, evidence gates, and repair policy |\n| v1.1.13 | Bundled MCP server entrypoints, ACP/host transport groundwork, deployment-ready package metadata |\n| v1.1.14 | Current harness docs, external-inspired workflow skills, and release-safe public wording |\n| v1.1.15 | Isolated HOME MCP shell-profile hotfix and persistent fetch MCP entrypoint |\n| v1.1.16 | Deterministic IntentFrame/ActionAtom orchestration, chat schema preflight, MCP duplicate policy, agent capability propagation, and doctor/init/pack smoke fixes |\n| v1.1.17 | Full generated-agent MCP/skills/hooks enablement, parallel subagent orchestration emphasis, and v1.1.17 release docs |\n";
+export declare const SECURITY_MD = "# Security Policy\n\n## Reporting Vulnerabilities\n\nPlease report security issues via GitHub Issues with the `security` label.\n\n## Built-in Protections\n\nopen-multi-agent-kit includes scoped default hooks to block destructive commands and secret leakage when the active runtime/harness enables them.\n\n## Native Runtime Safety Gates\n\n- Native chat turns should be read-only by default; write, shell, and merge capabilities must be requested only when task intent requires them.\n- `--execution ask|auto|never` and sandbox policy must propagate through routing into runtime adapters.\n- `authority`, `primary`, and `omk` provider policies must resolve to a concrete provider before execution.\n- DeepSeek and other advisory providers are read/review/advisory by default and must not silently receive write/shell authority.\n- Provider bootstrap must distinguish binary/runtime availability from auth, model, and quota readiness.\n- Provider failure previews must be gated behind debug mode and redacted before terminal or artifact output.\n- MCP, skills, hooks, and tool-plane parse/resolution failures must surface as diagnostics; runtime-required MCP failures should block execution.\n\n## MCP and Harness Secret Handling\n\n- Fresh init writes project-local `omk-project` MCP only; user/global MCP and skills are runtime-only unless explicitly imported by a trusted local user.\n- Never print, commit, or summarize MCP `env`, headers, tokens, or provider keys.\n- Treat `chat-agent-harness.json` as private run metadata: use it for inventory/gates, but do not paste large inventories or secret-like values into prompts, memory, or reports.\n- Prefer sanitized `omk mcp doctor --json`, `omk verify --json`, test summaries, and secret scans as shareable evidence.\n\n## Child Runtime Isolation\n\nOMK currently provides environment hardening for child runtimes.\n\nBy default, child runtimes do not inherit the full parent process environment.\nOMK passes an allowlisted environment and drops common secret-bearing variables\nsuch as cloud provider credentials, GitHub/NPM tokens, SSH agent sockets,\nKubernetes config, and dotenv/env-file references.\n\nThis is not a full OS-level sandbox. Filesystem, process, and network isolation\nare future hardening work and must not be assumed unless explicitly provided by\nthe selected runtime or host environment.\n\nCurrent security claims:\n\n- OMK prevents ambient secret leakage into child runtimes by default.\n- OMK sanitizes child runtime environments.\n- OMK routes tasks according to declared runtime capabilities.\n- OMK forces approval for write-capable Codex workspace runs.\n- OMK exposes sandbox intent/profile metadata for future enforcement.\n\nNon-claims:\n\n- OMK does not fully sandbox child CLIs.\n- OMK does not prevent all filesystem access outside the workspace.\n- OMK does not prevent network exfiltration.\n- OMK does not enforce OS-level process isolation.\n\n## Best Practices\n\n- Review hooks before running in production repositories.\n- Use `--print` mode only in disposable worktrees.\n- Never commit secrets into agent memory files.\n";
+export declare const ROOT_PROMPT_MD = "# open-multi-agent-kit Root Agent\n\nYou are the OMK root orchestrator for open-multi-agent-kit \u2014 a provider-neutral orchestration control plane that turns a goal into a bounded coding team.\n\nModels execute. OMK routes, verifies, measures, and controls.\n\nYou must operate with OMK identity as the authority layer: summon parallel subagents when scopes are independent, assign each lane scoped MCP, skills, and hooks, and keep the root context focused on goal management, integration, evidence, and verification. The active runtime scope, selected provider adapter, and harness policy decide which resources are actually available.\n\n## Loaded Project Instructions\n\n${KIMI_AGENTS_MD}\n\n## Loaded Skills\n\n${KIMI_SKILLS}\n\n## Global Rules\n\n- Apply AGENTS.md silently.\n- Do not repeat boilerplate.\n- Use SetTodoList for multi-step tasks.\n- Use Agent tool for non-trivial tasks. All 15 role agents (explorer, planner, router, architect, coder, reviewer, security, qa, tester, researcher, integrator, aggregator, interviewer, ontology, vision-debugger) are available with MCP, skills, and hooks capability flags.\n- Use skills when relevant.\n- Use MCP tools when configured and useful. All subagents inherit scoped MCP server inventory, skills, and hooks when enabled by runtime scope. Do not hesitate to invoke available capabilities.\n- Treat project-local ontology graph memory as mandatory when the omk-project MCP exposes memory tools.\n- Recall relevant project memory before work, write durable findings through omk_write_memory, and use omk_memory_mindmap/omk_graph_query for graph recall.\n- Prefer plan-first execution.\n- Prefer small, reviewable diffs.\n- Verify before completion.\n- Never claim tests passed unless they were run.\n\n## Active Harness and Resource Inventory\n\n- If a run contains chat-agent-harness.json, read it for the full MCP/skills/hooks inventory, virtual DAG, authority boundaries, worker limits, and gate list.\n- Treat compact prompt resource counts as summaries only.\n- Default runtime scope is project MCP/skills; all-scope may read user ~/.kimi resources at runtime without copying personal files.\n- Do not paste huge global MCP/skill inventories or secret-bearing env/header values into prompts, memory, or final reports.\n\n## OMK Context Tools\n\n- Root and generated role agents inherit an Okabe-compatible base while OMK scopes MCP, skills, and hooks per active runtime/harness policy.\n- Use D-Mail before risky refactors, compaction, or long-running branch points: send a concise future-facing recovery note to the relevant checkpoint.\n- Use OMK-managed subagents for isolated context and parallel work; keep the root context focused on decisions, integration, and verification.\n- Prefer /compact or a D-Mail recovery note over dumping large history back into the prompt.\n\n## Required Workflow\n\nFor non-trivial tasks:\n\n1. Read project instructions.\n2. Create todos.\n3. Launch appropriate subagents in parallel when their scopes are independent:\n   - explorer for repository discovery\n   - planner for architecture/refactor/risky work\n   - coder for implementation\n   - reviewer or qa for review and gate analysis\n   - security for secret/permission/trust-boundary review\n   - ontology for graph memory and project knowledge curation\n4. Read relevant skills.\n5. Use MCP if useful.\n6. Implement minimal changes.\n7. Run quality gates.\n8. Review final diff.\n9. Return factual final report.\n\n## Final Report Format\n\n```txt\nChanged:\nFiles:\nCommands:\nResult:\nRisk:\n```\n";
+export declare const HOOK_SCRIPTS: Record<string, string>;
+export declare const KIMI_CONFIG_TOML = "# open-multi-agent-kit generated Kimi adapter config\n# Lifecycle hook settings\n\n[[hooks]]\nevent = \"SessionStart\"\ncommand = \".omk/hooks/session-context.sh\"\ntimeout = 5\n\n[[hooks]]\nevent = \"PreCompact\"\ncommand = \".omk/hooks/precompact-checkpoint.sh\"\ntimeout = 5\n\n[[hooks]]\nevent = \"SubagentStop\"\ncommand = \".omk/hooks/subagent-stop-audit.sh\"\ntimeout = 5\n\n[[hooks]]\nevent = \"PreToolUse\"\nmatcher = \"Shell\"\ncommand = \".omk/hooks/pre-shell-guard.sh\"\ntimeout = 5\n\n[[hooks]]\nevent = \"PreToolUse\"\nmatcher = \"WriteFile|StrReplaceFile\"\ncommand = \".omk/hooks/protect-secrets.sh\"\ntimeout = 5\n\n[[hooks]]\nevent = \"Stop\"\ncommand = \".omk/hooks/stop-verify.sh\"\ntimeout = 30\n";
+export declare const MEMORY_FILES: Record<string, string>;