ask-agent 0.31.0 → 0.33.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e039a90d18224ab29b454dd2094a81628ddf80cc39938419038378182ecbe472
-  data.tar.gz: 8d6d1a8005d2451469a998d36061adea945245beef774876b5b5bc1565f8fd5a
+  metadata.gz: 90d637b9a007fef96f7b03e78ac61366ec3597bd789dfb3aaa36059687fb1632
+  data.tar.gz: 48e9b46cd59bdbefa5e93dc2925c42c13f8b9ab85b389a2e4bf2b15b2c7add1e
 SHA512:
-  metadata.gz: 014b65f0247e65970d3d4fa7496744aa7d38f00f2684c53ff02f74ec5c547b6534c906b24dc6594387069e5034b1916e7f4e3a2986c6bf55e42412177ac7a678
-  data.tar.gz: 72f571ba1ffafca8f9e9f181d51891ce9ea315e4ca5ebc15e1bf27557e8c05faf9ed6f3136a0a88a124f6833f096b5bb7d6cc9d7db9b32bc1dc0a27eb6cff1a9
+  metadata.gz: a1f76527ad518404c64c36c697db32fdebdb4b6381d86513e3aca4658486db238c2ab08a4df4df9ebdd6f0997fb9a5620c8d4d77bf69e9dbd70bb3235009d8a7
+  data.tar.gz: b1697c33f4ca2dad32a05e716c060ec14baaf848e9b39f918a43a8917682fe7baf76c80ea583ffa44f648fe14c778d4b39fbb1d4237adae6718b78d14c6ea10f

data/CHANGELOG.md

@@ -1,3 +1,53 @@
+## [0.33.0] — 2026-08-06
+
+### Added
+
+- **Durable memory — facts that outlive sessions.** `Ask::Agent::Memory`
+  stores namespaced entries on the same `Ask::State::Adapter` as sessions
+  and checkpoints (no new dependencies, no ask-rag mandate):
+  - Storage: one key per entry (`memory:<namespace>:<id>`) plus a JSON
+    index key for enumeration — pure KV, works with every backend
+    (SQLite/Redis/Postgres/MySQL/custom adapters) and with the in-process
+    Memory store.
+  - `Memory#write` (dedupes identical content), `#search` (keyword
+    substring match, ranked by matched terms, punctuation-stripped
+    queries), `#list`, `#delete`, `#count`. Namespaces isolate tenants and
+    agent roles.
+  - **Session integration**: `Session.new(memory: memory)` injects
+    `memory_write` (stamps the session id as provenance) and
+    `memory_search` tools, and **injects relevant memories as a system
+    message at run start** — session B starts knowing what session A
+    learned. Opt-in; sessions without `memory:` are unaffected.
+
+## [0.32.0] — 2026-08-06
+
+### Added
+
+- **TodoWrite — the model maintains a live task list.** `Session.new(todos:
+  true)` injects a `todo_write` tool backed by a session-scoped
+  `Ask::Agent::TodoList`:
+  - Actions `add` / `update` / `list` / `clear` with `pending`,
+    `in_progress`, `completed`, `blocked` statuses; every result returns
+    the full list so one call both mutates and shows state.
+  - `Events::TodoUpdated` fires with the full list on every change — the
+    contract for live progress rendering (UI kit / app server).
+  - The list is part of the checkpoint snapshot: `rollback!` and `fork`
+    restore it, and `Session.load` re-enables todos automatically.
+- **Plan mode — research first, execute after human approval.** `Session.new(
+  plan_mode: true)` (or `plan_mode: { read_only_tools: [...] }`) starts the
+  session in a research phase where non-read-only tools are blocked
+  (`:block` with a plan-mode reason; the gate runs before user hooks and
+  the approval policy). The model researches, then calls the injected
+  `exit_plan_mode` tool with its plan:
+  - The plan is submitted to a dedicated `Session#plan_queue` and the tool
+    returns a pending result — the agent hands back the interim reply,
+    exactly like the tool-approval flow.
+  - **Approve** → plan mode turns off, `Events::PlanApproved` fires, and a
+    follow-up turn executes the plan. **Reject** → the session stays in
+    plan mode, `Events::PlanRejected` fires, and the rejection feedback
+    reaches the conversation.
+  - Default read-only allowlist: `read`, `glob`, `grep`, `web_search`.
+
 ## [0.31.0] — 2026-08-06
 
 ### Added

data/lib/ask/agent/events.rb

@@ -34,6 +34,14 @@ module Ask
       # Emitted when a session was forked from a checkpoint.
       SessionForked = Data.define(:session_id, :forked_id, :seq)
 
+      # Emitted when the task list changed (todo_write tool); carries the
+      # full entry list for live rendering.
+      TodoUpdated = Data.define(:todos)
+      # Plan mode lifecycle.
+      PlanProposed = Data.define(:plan)
+      PlanApproved = Data.define(:plan)
+      PlanRejected = Data.define(:plan)
+
       LoopDetected = Data.define(:tool_name, :repeated_count)
       MaxTurnsExceeded = Data.define(:max_turns)
 

data/lib/ask/agent/exit_plan_mode.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+require "ask/tools/tool"
+require "ask/result"
+
+module Ask
+  module Agent
+    # Presents the model's plan for human approval at the end of plan mode.
+    #
+    # Called after research: submits the plan to the session's plan queue
+    # and returns a pending result — the agent hands back the interim reply
+    # and waits for a human decision. On approval, plan mode turns off and
+    # the agent executes the plan; on rejection, it stays in plan mode with
+    # the rejection feedback in the conversation.
+    #
+    # Injected into the session by `Session.new(plan_mode: true)`.
+    class ExitPlanMode < Ask::Tool
+      description "Submit your plan for human approval and leave plan mode. " \
+                   "Call this when your research is done and you are ready to execute."
+
+      param :plan, type: :string, desc: "The plan you propose to execute", required: true
+
+      # @param plan_queue [Ask::Agent::ApprovalQueue] queue carrying plan
+      #   approvals; the session wires approve/reject callbacks
+      # @param on_submit [Proc, nil] called with the plan text when the plan
+      #   is submitted (used to emit PlanProposed)
+      def initialize(plan_queue:, on_submit: nil)
+        @plan_queue = plan_queue
+        @on_submit = on_submit
+        super()
+      end
+
+      def execute(plan:)
+        tool_call_id = Thread.current[:ask_agent_tool_call_id]
+        @plan_queue.submit(
+          tool_call_id: tool_call_id,
+          tool_name: "exit_plan_mode",
+          args: { plan: plan.to_s },
+          auto_approvable: false,
+          message: "Plan submitted for approval"
+        )
+        @on_submit&.call(plan.to_s)
+        Ask::Result.pending("Plan submitted for approval — waiting for a human decision")
+      end
+    end
+  end
+end

data/lib/ask/agent/memory.rb

@@ -0,0 +1,162 @@
+# frozen_string_literal: true
+
+require "json"
+require "securerandom"
+require "time"
+
+module Ask
+  module Agent
+    # Durable, namespaced memory on any {Ask::State::Adapter} — the same
+    # storage layer as sessions and checkpoints.
+    #
+    # Entries are plain facts ("the deploy window is Tuesday", "the user
+    # prefers concise answers") that outlive a session: session A writes
+    # them, session B (same adapter + namespace) retrieves them via keyword
+    # search and has them injected into context. The abstraction is
+    # domain-agnostic — nothing here assumes a coding agent.
+    #
+    # Storage shape (pure KV, no list primitives — works with every backend
+    # including custom get/set/delete adapters):
+    #   memory:<namespace>:<id>      — one key per entry
+    #   memory:<namespace>:index     — JSON array of entry ids (write order)
+    #
+    #   store = Ask::State::Providers::SQLite.new(path: "agent.db")
+    #   memory = Ask::Agent::Memory.new(state: store, namespace: "user:42")
+    #   memory.write("Deploy window is Tuesday")
+    #   memory.search("when can we deploy?")   # => [Entry]
+    #
+    # Namespaces isolate memory: a support agent's facts never leak into a
+    # finance agent's, and tenants share one backend safely.
+    class Memory
+      Entry = Data.define(:id, :content, :metadata, :created_at) do
+        def to_h = { id: id, content: content, metadata: metadata, created_at: created_at.iso8601 }
+      end
+
+      KEY_PREFIX = "memory:"
+      INDEX_SUFFIX = ":index"
+
+      # @param state [Ask::State::Adapter] backing store
+      # @param namespace [String] isolation scope (user id, project id, ...)
+      def initialize(state:, namespace:)
+        @state = state
+        @namespace = namespace.to_s
+        @mutex = Mutex.new
+      end
+
+      # @return [Ask::State::Adapter] the underlying adapter
+      attr_reader :state
+
+      # @return [String] the namespace this memory is scoped to
+      attr_reader :namespace
+
+      # Save a fact. Writing an identical content again is a no-op (returns
+      # the existing entry).
+      #
+      # @param content [String] the fact to remember
+      # @param metadata [Hash] optional provenance (session id, tags, ...)
+      # @return [Entry]
+      # @raise [ArgumentError] on empty content
+      def write(content, metadata: {})
+        content = content.to_s
+        raise ArgumentError, "content is required" if content.strip.empty?
+
+        @mutex.synchronize do
+          existing = entries.find { |e| e.content == content }
+          return existing if existing
+
+          entry = Entry.new(id: SecureRandom.uuid, content: content, metadata: metadata, created_at: Time.now)
+          @state.set(entry_key(entry.id), entry.to_h)
+          @state.set(index_key, (load_index + [entry.id]).to_json)
+          entry
+        end
+      end
+
+      # Keyword search over the namespace's entries: entries matching any
+      # query term (case-insensitive substring), ranked by matched-term
+      # count, newest first on ties.
+      #
+      # @param query [String]
+      # @param limit [Integer] max results
+      # @return [Array<Entry>]
+      def search(query, limit: 5)
+        terms = query.to_s.downcase.gsub(/[^a-z0-9\s]/, " ").split(/\s+/).reject(&:empty?)
+        return [] if terms.empty?
+
+        scored = entries.filter_map do |entry|
+          text = entry.content.downcase
+          hits = terms.count { |term| text.include?(term) }
+          [hits, entry] if hits.positive?
+        end
+        scored.sort_by { |hits, entry| [-hits, entry.created_at] }.first(limit).map(&:last)
+      end
+
+      # @param limit [Integer]
+      # @return [Array<Entry>] entries, newest first
+      def list(limit: 50)
+        entries.last(limit).reverse
+      end
+
+      # Remove an entry by id.
+      #
+      # @param id [String]
+      # @return [void]
+      def delete(id)
+        @mutex.synchronize do
+          @state.delete(entry_key(id))
+          @state.set(index_key, (load_index - [id]).to_json)
+        end
+        nil
+      end
+
+      # @return [Integer] number of entries in this namespace
+      def count
+        entries.size
+      end
+
+      private
+
+      def entries
+        load_index.filter_map { |id| load_entry(id) }
+      end
+
+      def load_index
+        raw = @state.get(index_key)
+        raw ? JSON.parse(raw) : []
+      end
+
+      def load_entry(id)
+        data = @state.get(entry_key(id))
+        return nil unless data
+
+        data = symbolize(data)
+        Entry.new(
+          id: id,
+          content: data[:content].to_s,
+          metadata: data[:metadata] || {},
+          created_at: Time.parse(data[:created_at])
+        )
+      rescue ArgumentError, TypeError
+        nil
+      end
+
+      def entry_key(id)
+        "#{KEY_PREFIX}#{@namespace}:#{id}"
+      end
+
+      def index_key
+        "#{KEY_PREFIX}#{@namespace}#{INDEX_SUFFIX}"
+      end
+
+      def symbolize(obj)
+        case obj
+        when Hash
+          obj.each_with_object({}) { |(k, v), h| h[k.to_sym] = symbolize(v) }
+        when Array
+          obj.map { |e| symbolize(e) }
+        else
+          obj
+        end
+      end
+    end
+  end
+end

data/lib/ask/agent/memory_search.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require "ask/tools/tool"
+require "ask/result"
+
+module Ask
+  module Agent
+    # Tool that searches the session's durable memory ({Memory}). Injected
+    # into the session by `Session.new(memory: memory)`.
+    class MemorySearch < Ask::Tool
+      description "Search durable memory for facts from previous sessions. " \
+                   "Use this to recall user preferences, decisions, conventions, " \
+                   "or resolved problems before answering."
+
+      param :query, type: :string, desc: "Search query", required: true
+      param :limit, type: :integer, desc: "Maximum number of results", required: false
+
+      # @param memory [Ask::Agent::Memory]
+      def initialize(memory:)
+        @memory = memory
+        super()
+      end
+
+      def execute(query:, limit: 5)
+        hits = @memory.search(query, limit: limit)
+        return Ask::Result.ok(data: "(no matching memories)") if hits.empty?
+
+        Ask::Result.ok(data: hits.map { |e| "- #{e.content}" }.join("\n"))
+      end
+    end
+  end
+end

data/lib/ask/agent/memory_write.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+require "ask/tools/tool"
+require "ask/result"
+
+module Ask
+  module Agent
+    # Tool that saves facts to the session's durable memory ({Memory}).
+    # Injected into the session by `Session.new(memory: memory)`.
+    class MemoryWrite < Ask::Tool
+      description "Save a fact to durable memory. " \
+                   "Use this for information worth remembering across sessions: " \
+                   "user preferences, decisions, conventions, resolved problems. " \
+                   "The fact will be available to future sessions with the same namespace."
+
+      param :content, type: :string, desc: "The fact to remember", required: true
+
+      # @param memory [Ask::Agent::Memory]
+      # @param session_id [String] stamped into the entry metadata as
+      #   provenance
+      def initialize(memory:, session_id:)
+        @memory = memory
+        @session_id = session_id
+        super()
+      end
+
+      def execute(content:)
+        entry = @memory.write(
+          content,
+          metadata: { session_id: @session_id, written_at: Time.now.iso8601 }
+        )
+        Ask::Result.ok(data: "Saved to memory (#{entry.id}): #{entry.content}")
+      rescue ArgumentError => e
+        Ask::Result.error(message: e.message)
+      end
+    end
+  end
+end

data/lib/ask/agent/session.rb

@@ -23,7 +23,8 @@ module Ask
                      reflector: nil, telemetry: true, meta_agent: nil,
                      agent_dir: nil, evaluator: nil, audit_log: nil,
                      skills_disclosure: true, approval: nil,
-                     tool_call_repair: nil, checkpoints: false, **chat_options)
+                     tool_call_repair: nil, checkpoints: false,
+                     todos: false, plan_mode: false, memory: nil, **chat_options)
         @id = id || SecureRandom.uuid
         @agent_dir = agent_dir
         @max_turns = max_turns
@@ -47,6 +48,29 @@ module Ask
 
         @telemetry = telemetry.is_a?(Telemetry) ? telemetry : Telemetry.new(enabled: !!telemetry)
 
+        # Task list (todo_write tool) — built before resolve_tools so the
+        # tool can be injected with a reference to it.
+        @todos_enabled = !!todos
+        @todo_list = TodoList.new if @todos_enabled
+        @todo_list&.subscribe { |entries| emit(Events::TodoUpdated.new(todos: entries)) }
+
+        # Durable memory (memory_write / memory_search tools). An instance
+        # with its own namespace and state adapter; nil disables memory.
+        @memory = memory
+
+        # Plan mode — research phase gated to read-only tools until a human
+        # approves the model's plan (submitted via the exit_plan_mode tool).
+        @plan_mode = plan_mode.is_a?(Hash) ? true : !!plan_mode
+        @plan_mode_read_only_tools = if plan_mode.is_a?(Hash) && plan_mode[:read_only_tools]
+          Array(plan_mode[:read_only_tools]).map(&:to_s)
+        else
+          %w[read glob grep web_search]
+        end
+        @plan_queue = ApprovalQueue.new(
+          on_approve: ->(action) { approve_plan(action) },
+          on_reject: ->(action) { reject_plan(action) }
+        ) if @plan_mode
+
         @tools = resolve_tools(tools)
         @chat = build_chat(model, system_prompt, @tools, **chat_options)
         @loop = Loop.new(max_turns: max_turns)
@@ -57,6 +81,15 @@ module Ask
         @approval_queue = build_approval(approval)
         @tool_call_repair = tool_call_repair
 
+        # Plan gate runs before user hooks and the approval policy: in plan
+        # mode, non-read-only tools are blocked outright (never queued).
+        if @plan_mode
+          @hooks = Hooks.new(
+            before_tool: [method(:plan_mode_gate)] + Array(@hooks.instance_variable_get(:@before_tool)),
+            after_tool: @hooks.instance_variable_get(:@after_tool)
+          )
+        end
+
         @system_context = build_system_context(system_prompt)
         apply_system_context
 
@@ -102,6 +135,15 @@ module Ask
       #
       # @return [Ask::Agent::ApprovalQueue, nil]
       attr_reader :approval_queue
+      # @return [Ask::Agent::ApprovalQueue, nil] queue carrying plan
+      #   approvals (only when plan mode is enabled)
+      attr_reader :plan_queue
+      # @return [Ask::Agent::TodoList, nil] session task list (only when
+      #   todos are enabled)
+      attr_reader :todo_list
+      # @return [Ask::Agent::Memory, nil] durable memory (only when passed
+      #   via the +memory:+ option)
+      attr_reader :memory
 
       def run(message, tools: nil, reset: true)
         raise "Session deleted" if @deleted
@@ -119,6 +161,9 @@ module Ask
 
         active_tools = @tools
 
+        # Retrieve relevant memories from previous sessions into context.
+        inject_memories(message) if reset && @memory
+
         if active_tools.empty? && !@_no_tools_instructed
           @chat.add_message(role: :system, content: "You have no tools available. Do not claim you can look up information or use tools of any kind. Just respond based on your existing knowledge.")
           @_no_tools_instructed = true
@@ -329,17 +374,20 @@ module Ask
           end,
           state: adapter,
           # Checkpointing is restored automatically when the session has
-          # checkpoints in the store.
-          checkpoints: !adapter.get("#{id}#{CheckpointStore::HEAD_KEY}").nil?
+          # checkpoints in the store; todos likewise when the snapshot has
+          # a task list.
+          checkpoints: !adapter.get("#{id}#{CheckpointStore::HEAD_KEY}").nil?,
+          todos: !data[:todos].nil?
         )
 
-	        data[:messages].each do |msg|
-	          session.chat.add_message(
-	            role: msg[:role].to_sym,
-	            content: msg[:content],
-	            tool_call_id: msg[:tool_call_id]
-	          )
-	        end
+        data[:messages].each do |msg|
+          session.chat.add_message(
+            role: msg[:role].to_sym,
+            content: msg[:content],
+            tool_call_id: msg[:tool_call_id]
+          )
+        end
+        session.instance_variable_get(:@todo_list)&.restore(data[:todos])
 	
 	        session.instance_variable_set(:@messages, session.chat.messages.dup)
 	        session
@@ -425,13 +473,72 @@ module Ask
           model: data[:metadata][:model],
           tools: @tools,
           state: @state,
-          checkpoints: true
+          checkpoints: true,
+          todos: @todos_enabled,
+          plan_mode: @plan_mode
         )
         restore_into(forked, data)
         emit(Events::SessionForked.new(session_id: @id, forked_id: forked_id, seq: seq))
         forked
       end
 
+      # --- Plan mode ---
+
+      # Retrieve memories relevant to the incoming message and inject them
+      # as a system message, so a new session starts with what earlier
+      # sessions learned.
+      def inject_memories(message)
+        hits = @memory.search(message.to_s, limit: 5)
+        return if hits.empty?
+
+        @chat.add_message(
+          role: :system,
+          content: "Relevant memories from previous sessions:\n" + hits.map { |e| "- #{e.content}" }.join("\n")
+        )
+      end
+
+      # @return [Boolean] whether the session is in plan mode (research
+      #   phase; non-read-only tools are blocked until the plan is approved)
+      def plan_mode? = @plan_mode
+
+      # Before-tool gate active while in plan mode: only read-only tools
+      # (and exit_plan_mode itself) run until a human approves the plan.
+      def plan_mode_gate(tool_call, _context)
+        return { action: :proceed } unless @plan_mode
+        return { action: :proceed } if @plan_mode_read_only_tools.include?(tool_call.name) || tool_call.name == "exit_plan_mode"
+
+        { action: :block, reason: "Plan mode: only read-only tools until the plan is approved" }
+      end
+
+      def approve_plan(action)
+        @plan_mode = false
+        plan = action.args[:plan] || action.args["plan"] || ""
+        emit(Events::PlanApproved.new(plan: plan))
+        complete_pending_tool(
+          tool_call_id: action.tool_call_id,
+          result: {
+            tool_name: "exit_plan_mode",
+            message: "Plan approved — execute it now.",
+            status: "success",
+            is_error: false
+          }
+        )
+      end
+
+      def reject_plan(action)
+        plan = action.args[:plan] || action.args["plan"] || ""
+        emit(Events::PlanRejected.new(plan: plan))
+        complete_pending_tool(
+          tool_call_id: action.tool_call_id,
+          result: {
+            tool_name: "exit_plan_mode",
+            message: "Plan rejected by the user — revise your plan and resubmit.",
+            status: "rejected",
+            is_error: false
+          }
+        )
+      end
+
       # --- Async (pending) tools ---
 
       # Registers a pending tool call (called by the loop when a tool
@@ -631,6 +738,19 @@ module Ask
         if skills_disclosure_enabled?
           resolved << Ask::Skills::LoadSkillTool.new(registry: @skills_registry) unless resolved.any? { |t| t.name == "load_skill" }
         end
+        if @todo_list
+          resolved << TodoWrite.new(todo_list: @todo_list) unless resolved.any? { |t| t.name == "todo_write" }
+        end
+        if @plan_mode
+          resolved << ExitPlanMode.new(
+            plan_queue: @plan_queue,
+            on_submit: ->(plan) { emit(Events::PlanProposed.new(plan: plan)) }
+          ) unless resolved.any? { |t| t.name == "exit_plan_mode" }
+        end
+        if @memory
+          resolved << MemoryWrite.new(memory: @memory, session_id: @id) unless resolved.any? { |t| t.name == "memory_write" }
+          resolved << MemorySearch.new(memory: @memory) unless resolved.any? { |t| t.name == "memory_search" }
+        end
         resolved
       end
 
@@ -695,6 +815,7 @@ module Ask
         end
         target.instance_variable_set(:@messages, target.chat.messages.dup)
         target.instance_variable_set(:@turn_count, data.dig(:metadata, :turn_count) || 0)
+        target.instance_variable_get(:@todo_list)&.restore(data[:todos])
       end
 
       # User-supplied tools only. Framework-injected tools (the built-in
@@ -717,6 +838,7 @@ module Ask
               created_at: Time.now.iso8601
             }
           },
+          todos: @todo_list&.to_h,
           metadata: {
             model: @chat.model.respond_to?(:id) ? @chat.model.id : @chat.model,
             tools: persisted_tools.map { |t| t.class.name },

data/lib/ask/agent/todo_list.rb

@@ -0,0 +1,132 @@
+# frozen_string_literal: true
+
+module Ask
+  module Agent
+    # Session-scoped task list maintained by the model through the
+    # {TodoWrite} tool.
+    #
+    # The list is the externalized plan: the model writes it once and checks
+    # it against each step, humans see progress live (via the TodoUpdated
+    # event), and checkpoints carry it across rollbacks and forks.
+    class TodoList
+      STATUSES = %w[pending in_progress completed blocked].freeze
+
+      Entry = Data.define(:id, :title, :status) do
+        def to_h = { id: id, title: title, status: status }
+      end
+
+      def initialize
+        @entries = []
+        @next_id = 1
+        @mutex = Mutex.new
+        @listeners = []
+      end
+
+      # @return [Array<Entry>] snapshot of the current entries
+      def all
+        @mutex.synchronize { @entries.dup }
+      end
+
+      # Register a listener called with the full entry list after every
+      # change (used to emit TodoUpdated events for live rendering).
+      #
+      # @return [self]
+      def subscribe(&block)
+        @listeners << block
+        self
+      end
+
+      # @param title [String]
+      # @param status [String] pending, in_progress, completed, or blocked
+      # @return [Entry]
+      # @raise [ArgumentError] on empty title or invalid status
+      def add(title, status: "pending")
+        raise ArgumentError, "title is required" if title.to_s.strip.empty?
+
+        entry = @mutex.synchronize do
+          e = Entry.new(id: "todo_#{@next_id}", title: title.to_s, status: validate_status(status || "pending"))
+          @next_id += 1
+          @entries << e
+          e
+        end
+        notify
+        entry
+      end
+
+      # @param id [String] entry id from {Entry#id}
+      # @param status [String, nil]
+      # @param title [String, nil]
+      # @return [Entry] the updated entry
+      # @raise [ArgumentError] on unknown id or invalid status
+      def update(id, status: nil, title: nil)
+        entry = @mutex.synchronize do
+          index = @entries.index { |e| e.id == id }
+          raise ArgumentError, "no todo with id #{id.inspect}" unless index
+
+          @entries[index] = Entry.new(
+            id: id,
+            title: title.nil? ? @entries[index].title : title.to_s,
+            status: status.nil? ? @entries[index].status : validate_status(status)
+          )
+          @entries[index]
+        end
+        notify
+        entry
+      end
+
+      # @return [void]
+      def clear
+        @mutex.synchronize { @entries.clear }
+        notify
+        nil
+      end
+
+      # @return [Hash] serialized form for persistence (checkpoints)
+      def to_h
+        { entries: all.map(&:to_h) }
+      end
+
+      # Rebuild from a serialized snapshot (rollback, fork, load). Fires no
+      # events.
+      #
+      # @param data [Hash, nil]
+      # @return [void]
+      def restore(data)
+        @mutex.synchronize do
+          raw = Array(data&.dig(:entries) || data&.dig("entries") || [])
+          @entries = raw.map do |e|
+            Entry.new(
+              id: (e[:id] || e["id"]).to_s,
+              title: (e[:title] || e["title"]).to_s,
+              status: (e[:status] || e["status"]).to_s
+            )
+          end
+          @next_id = @entries.size + 1
+        end
+        nil
+      end
+
+      # @return [String] human-readable list
+      def to_s
+        entries = all
+        return "(no todos)" if entries.empty?
+
+        entries.map { |e| "[#{e.status}] #{e.title} (#{e.id})" }.join("\n")
+      end
+
+      private
+
+      def validate_status(status)
+        s = status.to_s
+        raise ArgumentError, "invalid status #{s.inspect}; valid: #{STATUSES.join(', ')}" unless STATUSES.include?(s)
+
+        s
+      end
+
+      def notify
+        snapshot = all
+        @listeners.each { |listener| listener.call(snapshot) }
+      end
+    end
+  end
+end

data/lib/ask/agent/todo_write.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+require "ask/tools/tool"
+require "ask/result"
+
+module Ask
+  module Agent
+    # Tool that maintains the session's task list ({TodoList}). The model
+    # writes and updates todos as it works; every result returns the full
+    # list, so one call both mutates and shows state. A TodoUpdated event
+    # fires on every change for live rendering.
+    #
+    # Injected into the session by `Session.new(todos: true)`.
+    class TodoWrite < Ask::Tool
+      description "Maintain a task list for the current job. " \
+                   "Use it to plan multi-step work and update statuses as steps finish. " \
+                   "Actions: add (with title), update (with id and status or title), list, clear."
+
+      param :action, type: :string, desc: "add, update, list, or clear", required: true
+      param :title, type: :string, desc: "Task title (required for add)", required: false
+      param :id, type: :string, desc: "Task id (required for update)", required: false
+      param :status, type: :string, desc: "pending, in_progress, completed, or blocked", required: false
+
+      # @param todo_list [Ask::Agent::TodoList] the session's task list
+      def initialize(todo_list:)
+        @todo_list = todo_list
+        super()
+      end
+
+      def execute(action:, title: nil, id: nil, status: nil)
+        case action
+        when "add"
+          @todo_list.add(title, status: status)
+        when "update"
+          @todo_list.update(id, status: status, title: title)
+        when "list"
+          # no-op — the result carries the full list
+        when "clear"
+          @todo_list.clear
+        else
+          return Ask::Result.error(message: "Unknown action #{action.inspect}; valid: add, update, list, clear")
+        end
+
+        Ask::Result.ok(data: format_list)
+      rescue ArgumentError => e
+        Ask::Result.error(message: e.message)
+      end
+
+      private
+
+      def format_list
+        entries = @todo_list.all
+        return "(no todos)" if entries.empty?
+
+        entries.map { |e| "[#{e.status}] #{e.title} (#{e.id})" }.join("\n")
+      end
+    end
+  end
+end

data/lib/ask/agent/version.rb

@@ -2,6 +2,6 @@
 
 module Ask
   module Agent
-    VERSION = "0.31.0"
+    VERSION = "0.33.0"
   end
 end

data/lib/ask/agent.rb

@@ -40,6 +40,12 @@ module Ask
 
     autoload :ToolCallRepair, "ask/agent/tool_call_repair"
     autoload :CheckpointStore, "ask/agent/checkpoint_store"
+    autoload :TodoList, "ask/agent/todo_list"
+    autoload :TodoWrite, "ask/agent/todo_write"
+    autoload :ExitPlanMode, "ask/agent/exit_plan_mode"
+    autoload :Memory, "ask/agent/memory"
+    autoload :MemoryWrite, "ask/agent/memory_write"
+    autoload :MemorySearch, "ask/agent/memory_search"
 
     module Middleware
       autoload :Base, "ask/agent/middleware/base"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ask-agent
 version: !ruby/object:Gem::Version
-  version: 0.31.0
+  version: 0.33.0
 platform: ruby
 authors:
 - Kaka Ruto
@@ -175,8 +175,12 @@ files:
 - lib/ask/agent/definition.rb
 - lib/ask/agent/evaluator.rb
 - lib/ask/agent/events.rb
+- lib/ask/agent/exit_plan_mode.rb
 - lib/ask/agent/hooks.rb
 - lib/ask/agent/loop.rb
+- lib/ask/agent/memory.rb
+- lib/ask/agent/memory_search.rb
+- lib/ask/agent/memory_write.rb
 - lib/ask/agent/meta_agent.rb
 - lib/ask/agent/middleware/base.rb
 - lib/ask/agent/middleware/default_settings.rb
@@ -205,6 +209,8 @@ files:
 - lib/ask/agent/system_context.rb
 - lib/ask/agent/telemetry.rb
 - lib/ask/agent/test.rb
+- lib/ask/agent/todo_list.rb
+- lib/ask/agent/todo_write.rb
 - lib/ask/agent/tool_abort_controller.rb
 - lib/ask/agent/tool_call_repair.rb
 - lib/ask/agent/tool_executor.rb