kward 0.83.0 → 0.85.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 678c9e9bb188e6c3d065dfde6b97c9ec5c31b29b178b40d69b0397b5200eb2a8
-  data.tar.gz: 3e09cb3d11ff6018ecc75e3eb31e8745e72e534dba7a4c3711a488451d353fcc
+  metadata.gz: 6ab55d26a014211a33f370b7bdf8d42de5d46723471ac26abc7ab893e2c41391
+  data.tar.gz: 0a48ff5db83fe90318d252b817e6addcff3108bd51f8afd843785cc64aa13b02
 SHA512:
-  metadata.gz: 7f4247a32300deff0906c95c10d7312aa6303108956596f16d9f2c6d2d4fc444b5ef377751f47dbd2157b041710d855c44a981a1a22f8a562c79203afe8b65ed
-  data.tar.gz: d93d09126d221c05d7ef0e931f46ccfaa4a84450e6eb5695dbea653d8b9de99bb27bc7fb070b323c74160477fd328f0be3cd972d544b45e3ea90ffbeb79cb087
+  metadata.gz: bf2be9c210d40d005736f385ea74c34158339e850b7bd1a2945174a85798fccd898cbd8ddeebc707559bc70028551706cc6dbafef6abf96632b74d4e7162aa65
+  data.tar.gz: aa45a82d92d3c42af471d633e5d83ee80d5131e51c855be07e050b8fef1e468e1d6be459e2ba1741ab762df2a4a7dac6bbce1e4e4cf43ed32bda8f4611c10aa8

data/CHANGELOG.md

@@ -4,6 +4,91 @@ All notable changes to Kward will be documented in this file.
 
 ## [Unreleased]
 
+## [0.85.0] - 2026-10-05
+
+### Added
+
+- Added the opt-in `typesafe_evaluate` tool backed by TypeSafe's Jev structured-decision API for `noul`, `choice`, and `score` evaluations, with bounded input and normal tool permissions.
+- Added `ctx.request_turn(system: text)` for plugin commands to run the active session model with turn-scoped system instructions, normal tools and cancellation, TUI/RPC/transport execution, persisted invocation history, and explicit capability reporting for unsupported contexts.
+- Added GPT-6 Astra to the OpenAI, Codex, and Copilot model choices with its 1,050,000-token context metadata and model-specific reasoning limits.
+- Added GPT-6.1 Sol and GPT-6 Luna to the OpenAI model choices with their 1,050,000-token context metadata and model-specific reasoning limits.
+- Added verified `active` and `origin` targets to core agent workspace tools in linked worktree tabs, plus same-tab merge conflict resolution and continuation commands, allowing the agent to inspect, resolve, test, and complete original-worktree merges without switching tabs or requiring target-specific authorization.
+- Added a versioned plugin-chat contract with declared attachment, steering, and transcript-paging capabilities; scoped chat configuration/storage/secrets/logging; surface and scope context; persistent local scope IDs; RPC capability discovery; and driver validation while preserving legacy plugin tabs.
+- Added composable plugin footer status with stable segment IDs, display ordering, width-aware priority removal, isolated render failures, structured RPC segments and tooltips, and backward-compatible `plugin.footer` contributions.
+- Added identified-plugin start, reload, and shutdown callbacks; plugin- and tab-owned cooperative background tasks; idempotent managed cleanup; bounded shutdown waits; and optional plugin-tab driver cleanup.
+- Added typed plugin commands with JSON Schema validation, shell-style flags and declared positional arguments, structured frontend/RPC results, cancellation context, and legacy raw-string compatibility, plus identified-plugin actions with namespaced RPC discovery and execution.
+- Added structured frontend-neutral plugin UI for questions, selections, confirmations, text input, progress, and notifications, with TUI rendering, RPC capability negotiation and request/answer notifications, transport interaction routing, bounded validation, cancellation, and fail-closed fallbacks.
+- Added stable plugin identity metadata and a shared plugin host with namespaced configuration, private durable storage, secret lookup, logging, API compatibility checks, and sanitized RPC discovery.
+- Added model-callable plugin tools with strict JSON schemas, cancellation context, normal permission and lifecycle-hook enforcement, execution-profile filtering, RPC discovery, and tool-output compaction.
+- Added `/name` to rename the active session and tab together, including while the tab's agent is running.
+
+### Changed
+
+- Grouped session, shell, PTY, terminal, workspace, plugin, tab, transcript, editor, and model implementations under domain folders and removed the old internal require paths.
+
+### Fixed
+
+- Fixed plugin system-turn instructions being folded into the old conversation's preamble instead of appearing as a new ordered message; Codex uses its supported `developer` input role, while direct OpenAI uses `system`.
+- Fixed plugin system-turn commands such as `/iddqd` crashing in the TUI image renderer; system instructions render as plain text without attachment parsing.
+- Fixed the documentation homepage’s `Get Started` link so it opens the getting-started guide.
+- Fixed the interactive composer leaving the final streamed transcript line too close to its top border.
+- Fixed `/compact` completion output and cancellation so work remains owned by its originating tab instead of rendering into whichever tab is active.
+- Fixed detached `/shell` commands losing output across tab switches by retaining pre-detach output and streaming buffered output when the originating tab is active again.
+- Fixed interactive PTY handoff cleanup so preserved keyboard protocol state is reasserted only after a child reset and remains balanced when Kward exits.
+- Fixed `/rewind` and session-tree navigation detaching active worktree tabs by reloading their conversations against the original workspace instead of the linked worktree.
+
+## [0.84.0] - 2026-08-30
+
+### Added
+
+- Added security reporting, contribution and conduct policies, structured issue and pull-request templates, and an explicit macOS/Linux/WSL/Windows support matrix.
+- Added Vibe multi-cursor editing with `Ctrl+D` occurrence selection from normal, insert, and characterwise visual modes, plus visual-mode `I`/`A` cursors at each selected line boundary.
+- Added `script/benchmark_composer` for repeatable draft-layout, history-search, and file-completion performance measurements.
+- Added Vibe visual and cursor-aware `:run` support plus `:run all` for executing runnable Markdown fenced language blocks and inserting or replacing their formatted `<output>` fields.
+- Added configurable editor runners under `editor.runners`, with Node, TypeScript, Python, Shell, Lua, Julia, Elixir, Crystal, Go, and Swift buffer execution alongside Ruby.
+- Added Vibe visual-mode `Ctrl+h`/`Ctrl+j`/`Ctrl+k`/`Ctrl+l` shortcuts to outdent, move down, move up, and indent selected lines while keeping visual mode active.
+- Added a live `source`/`.` shell builtin that applies declarative aliases and exports to the running `/shell` session without restarting Kward.
+- Added shell-agent provider, model, and reasoning-effort settings under `shell.agent`, editor-agent provider settings under `editor.agent`, and environment overrides for transient-agent provider selection.
+- Added shell-style `kwshrc` configuration files at `~/.kward/kwshrc` and `~/.kwshrc`, with ordered `alias`, `export`, and declarative `source` support.
+- Added the `open_editor` agent tool so interactive sessions, including explicit `/shell` `?` prompts, can open a requested workspace file in Kward's built-in editor.
+- Extended `/scratchpad` to open all 26 built-in syntax-highlighted languages through canonical names or familiar file-extension shortcuts, with `/scratchpad help` for discovery.
+- Added nested syntax highlighting, auto-indentation, and endwise behavior for recognized language tags inside fenced code blocks in Markdown editor buffers.
+
+### Changed
+
+- Smoothed interactive response streaming by pacing buffered provider events and rendering safe text before incomplete inline Markdown instead of delaying whole lines.
+- Replaced the busy Braille spinner with a calmer four-frame activity pulse in the interactive composer.
+- Added brief success, failure, and cancellation transitions to the interactive composer when an agent turn finishes.
+- Standardized terminal accents by meaning: cyan for agent activity, green for success, amber for caution, red for failure, purple for tools, and gray for metadata.
+- Added a brief, visual-only response-arrival flourish when the first assistant output reaches the interactive composer.
+- Made the composer activity label follow real turn states such as thinking, reasoning, responding, retrying, and the currently running tool.
+- Added unobtrusive elapsed-time feedback after two seconds, final turn duration in completion transitions, and provider-reported tool durations in result summaries.
+- Added stable `❯` user and `✦` assistant anchors to make transcript turn boundaries easier to scan without changing stored conversation content.
+- Added persistent background-tab status colors for running work, unread output, successful detached commands, questions, and failures without changing tab label widths.
+- Restored green for ready tabs with unread output.
+- Documentation checks now validate the curated public extension entry points without presenting aggregate internal-helper coverage as a product-quality metric.
+- The repository and documentation landing pages now use a focused coding-workflow visual, restrained project badges, and clearer product identity.
+- Updated RubyGems positioning and metadata to describe Kward's supported product surfaces and direct users to the documentation site while keeping source and issue links on GitHub.
+- Refined the documentation homepage with a concrete static message, direct getting-started navigation, branded browser and social metadata, canonical URLs, and a quieter generated-docs footer.
+- The composer now highlights `/` command and `@` file discovery, and the startup screen gives actionable guidance when no model provider is connected.
+- Grouped and aligned top-level help, condensed credential status with an opt-in `--all` view, and standardized doctor, hooks, and project-skill diagnostics with actionable summaries and exit statuses.
+- Pan now binds to `127.0.0.1` by default, accepts `KWARD_PAN_PASSWORD`, and warns whenever it is explicitly exposed over plain HTTP on a non-loopback address.
+- Vibe visual selections can now be used as line ranges for `:` commands, including `:s` substitutions and `:run` scratchpad execution.
+- Ruby scratchpad runs now preserve the source buffer and show captured output in a scrollable, cancellable lower-half output pane instead of appending it after `__END__`; mouse drag selection and `Ctrl+C`/`Cmd+C`/Vibe `y` copy clean output without pane borders.
+
+### Fixed
+
+- Restored Codex commentary as visible reasoning output during streaming and session replay instead of showing only the provider's short reasoning-summary headline.
+- Kept expected Git discovery failures, PTY fixtures, and release subprocess output inside their owning tests so successful suite and CI logs remain quiet.
+- Replaced one-shot authentication and runtime backtraces with concise, actionable CLI errors while retaining opt-in debug backtraces through `KWARD_DEBUG=1`.
+- Fixed composer cursor movement, deletion, wrapping, truncation, and border alignment for wide and multi-codepoint Unicode graphemes.
+- Reduced composer latency for long drafts, large file and slash-command lists, and prompt histories by eliminating repeated layout work, discovering project paths outside rendering, and reusing search results.
+- Fixed tab switching during shell commands so tab shortcuts take priority without aborting the command; detached commands continue in the originating tab's background and report their output when complete.
+
+### Removed
+
+- Removed legacy `kwsh.yml` shell configuration; shell aliases and exports now use the shell-style `kwshrc` files.
+
 ## [0.83.0] - 2026-08-28
 
 ### Added
@@ -14,6 +99,8 @@ All notable changes to Kward will be documented in this file.
 - Added current-buffer word completion to the integrated editor, with repeated Tab presses cycling nearby matches and existing smart indentation retained when no match exists.
 - Added Claude Opus 5 to the Anthropic model picker with its 1M context window and high-reasoning metadata.
 - Added an `i` toggle to the `/files` browser for showing Git-ignored files, which remain hidden by default.
+- Added `f`, `d`, and `r` actions to the `/files` browser for creating files, creating directories, and renaming entries from the composer prompt.
+- Added Backspace deletion to the `/files` browser with confirmation and an additional confirmation before recursively deleting non-empty directories.
 
 ### Changed
 
@@ -73,7 +160,7 @@ All notable changes to Kward will be documented in this file.
 - Displayed packaged plugins with their folder name in the startup plugin list, such as `folder/plugin.rb`.
 - Added a frozen composer display for line-oriented Git PTY commands while preserving the full-terminal handoff for full-screen programs.
 - Changed external `/shell` commands and one-shot `!command` input to use interactive PTY terminal handoff by default, while retaining `pty` and `/pty` for compatibility.
-- Made aliases configured in `ekwsh.yml` available to leading-`!` execution and command completion.
+- Made aliases configured in `kwshrc` available to leading-`!` execution and command completion.
 - Removed interactive PTY start and exit-status messages while retaining the submitted command echo.
 - Changed shell and leading-`!` completion so the candidate list appears in an interactive overlay while repeated Tab presses cycle through candidates in the composer.
 - Removed the `Tab` and `Shift+Tab` reasoning-effort shortcuts so the composer keeps its normal completion behavior.
@@ -328,27 +415,27 @@ All notable changes to Kward will be documented in this file.
 - Added `/queue open <id>` to open a queued worker's session for review or follow-up.
 - Added `/diff` to open the chronological file changes recorded in the current session in the integrated diff viewer.
 - Added `/scratchpad [text|markdown|ruby]` for opening unsaved editor buffers, including Vibe `:w filename` save-as support and Ruby `:run`/Modern `Ctrl+R` output written after `__END__`.
-- Added `/pty <command>` and the `ekwsh` `pty <command>` built-in for explicit interactive PTY passthrough sessions, enabling terminal-owned tools such as pagers to run from Kward.
-- Added minimal PTY execution for external `ekwsh` commands so terminal-aware tools can detect a TTY and terminal width.
-- Added Ctrl+C cancellation for running `ekwsh` commands and preserved tab-switch actions while shell commands are active.
-- Added quoted path completion and cached `$PATH` executable completion for `ekwsh`.
-- Added streaming `ekwsh` command output in the TUI transcript while commands run.
-- Added separate workspace-scoped `ekwsh` command history so embedded shell input no longer shares normal prompt history.
+- Added `/pty <command>` and the `kwsh` `pty <command>` built-in for explicit interactive PTY passthrough sessions, enabling terminal-owned tools such as pagers to run from Kward.
+- Added minimal PTY execution for external `kwsh` commands so terminal-aware tools can detect a TTY and terminal width.
+- Added Ctrl+C cancellation for running `kwsh` commands and preserved tab-switch actions while shell commands are active.
+- Added quoted path completion and cached `$PATH` executable completion for `kwsh`.
+- Added streaming `kwsh` command output in the TUI transcript while commands run.
+- Added separate workspace-scoped `kwsh` command history so embedded shell input no longer shares normal prompt history.
 - Added structured RPC `runtime/updateSetting` `defaultModel` values so clients can send provider and model separately while keeping the existing string format.
 
 ### Changed
 
-- Changed PTY-backed `ekwsh` commands to refresh terminal window size while running so long-lived commands can adapt to resizes.
-- Changed `ekwsh` to default `GIT_PAGER` to `cat`, while preserving user-provided values, so Git commands do not unexpectedly enter an interactive pager under PTY execution.
-- Improved `ekwsh` POSIX-oriented built-ins, including `exit [status]`, stricter `cd`/`pwd`, `export NAME`, assignment persistence, `unalias`, and shared alias-name validation.
-- Changed `ekwsh` configuration to prefer a POSIX `/bin/sh` default shell and validate runtime settings for command timeout, output cap, and shell history size.
+- Changed PTY-backed `kwsh` commands to refresh terminal window size while running so long-lived commands can adapt to resizes.
+- Changed `kwsh` to default `GIT_PAGER` to `cat`, while preserving user-provided values, so Git commands do not unexpectedly enter an interactive pager under PTY execution.
+- Improved `kwsh` POSIX-oriented built-ins, including `exit [status]`, stricter `cd`/`pwd`, `export NAME`, assignment persistence, `unalias`, and shared alias-name validation.
+- Changed `kwsh` configuration to prefer a POSIX `/bin/sh` default shell and validate runtime settings for command timeout, output cap, and shell history size.
 
 ### Fixed
 
-- Normalized ordinary PTY line endings in `ekwsh` command output so transcripts avoid stray carriage returns.
-- Added `ekwsh` timeout and output-limit enforcement for external commands using the shared local command runner.
+- Normalized ordinary PTY line endings in `kwsh` command output so transcripts avoid stray carriage returns.
+- Added `kwsh` timeout and output-limit enforcement for external commands using the shared local command runner.
 - Consolidated workspace shell command execution on a shared local command runner with timeout, cancellation, bounded capture, and optional streaming support.
-- Fixed `ekwsh` shell output sanitization so unsafe terminal controls are stripped before command output is shown while SGR color is preserved.
+- Fixed `kwsh` shell output sanitization so unsafe terminal controls are stripped before command output is shown while SGR color is preserved.
 - Split Vibe editor insert/readline key handling into a focused mixin without changing editor behavior.
 - Consolidated compaction message-field reads through the shared message access helper.
 - Consolidated RPC transcript tool metadata normalization with tool event metadata so tool names, args, diffs, and changed files stay aligned.
@@ -370,7 +457,7 @@ All notable changes to Kward will be documented in this file.
 
 - Added a built-in editor that can be opened from the TUI with `$` or directly from the CLI with `kward edit <filename>`, with modern, Emacs-style, and Vibe editing modes.
 - Added richer editor workflows including syntax highlighting, undo/redo, auto-indent, soft wrap, mouse support, multi-cursor editing, relative line numbers, and an expanded Vim-like Vibe mode with visual selections, text objects, registers, marks, macros, substitution, and Ruby navigation.
-- Added `/shell`, an embedded Kward shell (`ekwsh`) for running workspace commands without leaving the TUI, including command/path completion, safe color output, optional global `ekwsh.yml` configuration, and rbenv shim autodetection.
+- Added `/shell`, an embedded Kward shell (`kwsh`) for running workspace commands without leaving the TUI, including command/path completion, safe color output, optional global `kwshrc` configuration, and rbenv shim autodetection.
 - Added `/files`, a searchable project file browser that can open files in the editor and remembers cursor and folder expansion state per workspace.
 - Added persistent TUI tabs for session-backed conversations, plus tab commands, shortcuts, status colors, and restoration across restarts.
 - Added `/git` workflows for reviewing changes, viewing diffs, staging or unstaging files, and writing commit messages from inside the TUI.

data/CONTRIBUTING.md

@@ -0,0 +1,74 @@
+# Contributing to Kward
+
+Thank you for helping improve Kward. Small, focused changes with clear tests are the easiest to review and release.
+
+## Before you start
+
+- Search existing issues and pull requests for related work.
+- Open an issue before a large feature, new dependency, protocol change, or broad restructuring.
+- Report security concerns privately through [the security policy](SECURITY.md), not in a public issue.
+
+## Set up the project
+
+Kward requires Ruby 3.4 or newer.
+
+```bash
+git clone https://github.com/kaiwood/kward.git
+cd kward
+bundle install
+bundle exec rake test
+```
+
+Run the CLI from the checkout with:
+
+```bash
+ruby lib/main.rb
+ruby lib/main.rb "Explain this project"
+```
+
+See [Platform support](doc/platform-support.md) for operating-system and terminal expectations.
+
+## Make a change
+
+1. Keep the patch limited to one problem.
+2. Follow the existing Ruby style and ownership boundaries.
+3. Add focused Minitest coverage for behavior changes.
+4. Update user documentation when commands, configuration, tools, protocols, or workflows change.
+5. Add user-facing changes to the `[Unreleased]` section of `CHANGELOG.md`.
+
+Avoid unrelated refactors, formatting-only churn, generated-file commits, and new dependencies unless they are necessary for the change.
+
+## Verify the change
+
+Run the smallest relevant test first, then the full suite before opening a pull request:
+
+```bash
+ruby -Itest test/test_cli.rb
+bundle exec rake test
+```
+
+For documentation changes, also run:
+
+```bash
+bundle exec rake docs:check
+```
+
+The release preflight combines tests, documentation checks, package validation, and release metadata checks:
+
+```bash
+bundle exec rake release:preflight
+```
+
+Release preflight expects the current version and tag state to be ready for a release, so contributors normally do not need to run it for ordinary pull requests.
+
+## Open a pull request
+
+Describe:
+
+- the user-visible problem;
+- the chosen solution;
+- tests and checks run;
+- security, compatibility, or documentation implications;
+- screenshots for visible UI changes.
+
+A pull request should be understandable one commit at a time. Maintainers may ask for commits to be combined or reorganized before merge when that makes the final history clearer.

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    kward (0.83.0)
+    kward (0.85.0)
       base64
       nokogiri
       tiktoken_ruby
@@ -9,6 +9,7 @@ PATH
       tty-prompt
       tty-reader
       tty-screen
+      unicode-display_width
 
 GEM
   remote: https://rubygems.org/
@@ -104,6 +105,9 @@ GEM
     tty-screen (0.8.2)
     typhoeus (1.6.0)
       ethon (>= 0.18.0)
+    unicode-display_width (3.2.0)
+      unicode-emoji (~> 4.1)
+    unicode-emoji (4.2.0)
     webrick (1.9.2)
     wisper (2.0.1)
     yard (0.9.44)
@@ -146,7 +150,7 @@ CHECKSUMS
   html-proofer (5.2.1) sha256=fdd958a7cbf9c3255fb96fe7cfc4e611f64e2706e469488a3326309ad007d2fd
   io-event (1.16.2) sha256=9f9cb0a96ea5c3850a672606c65f27bc96d7621399ef6196acbfe2be0cd1279c
   json (2.19.9) sha256=9b9025b7cdddafa38d316eca0b2358488e42d417045c1b90d216a9fefe46b79a
-  kward (0.83.0)
+  kward (0.85.0)
   logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
   metrics (0.15.0) sha256=61ded5bac95118e995b1bc9ed4a5f19bc9814928a312a85b200abbdac9039072
   minitest (6.0.6) sha256=153ea36d1d987a62942382b61075745042a2b3123b1cd48f4c3675af9cc7d6f1
@@ -174,6 +178,8 @@ CHECKSUMS
   tty-reader (0.9.0) sha256=c62972c985c0b1566f0e56743b6a7882f979d3dc32ff491ed490a076f899c2b1
   tty-screen (0.8.2) sha256=c090652115beae764336c28802d633f204fb84da93c6a968aa5d8e319e819b50
   typhoeus (1.6.0) sha256=bacc41c23e379547e29801dc235cd1699b70b955a1ba3d32b2b877aa844c331d
+  unicode-display_width (3.2.0) sha256=0cdd96b5681a5949cdbc2c55e7b420facae74c4aaf9a9815eee1087cb1853c42
+  unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
   wisper (2.0.1) sha256=ce17bc5c3a166f241a2e6613848b025c8146fce2defba505920c1d1f3f88fae6
   yard (0.9.44) sha256=eb087e9b631ccd887b049f303d489963945452d5e2a7eb49a5a74a7cf6887f28

data/README.md

@@ -1,5 +1,17 @@
+<p align="center">
+  <img src="templates/default/fulldoc/html/images/kward_logo.png" width="150" alt="Kward logo">
+</p>
+
 # Kward
 
+<p align="center"><strong>An extensible Ruby coding agent for your terminal.</strong></p>
+
+<p align="center">
+  <a href="https://github.com/kaiwood/kward/actions/workflows/ci.yml"><img src="https://github.com/kaiwood/kward/actions/workflows/ci.yml/badge.svg" alt="CI status"></a>
+  <a href="https://rubygems.org/gems/kward"><img src="https://badge.fury.io/rb/kward.svg" alt="RubyGems version"></a>
+  <a href="https://kaiwood.github.io/kward/"><img src="https://img.shields.io/badge/docs-kaiwood.github.io-9caf35" alt="Documentation"></a>
+</p>
+
 Kward is a coding agent for your terminal. It can inspect and edit a project, run commands, research problems, and save your work in sessions you can resume later.
 
 Use Kward from the terminal, its local browser interface, or a trusted JSON-RPC client. It works with ChatGPT/Codex and Claude subscriptions, hosted model APIs, GitHub Copilot, OpenRouter, and local servers such as Ollama, LM Studio, and llama.cpp.
@@ -12,6 +24,10 @@ Kward treats that work as an ongoing workspace rather than a disposable conversa
 
 Start with a normal coding conversation. If your workflow grows, you can add memory, reusable prompts and skills, local plugins, lifecycle hooks, MCP servers, transports, or a custom RPC client.
 
+<p align="center">
+  <img src="templates/default/fulldoc/html/images/kward_screen_1.png" width="1000" alt="Kward terminal interface screenshot">
+</p>
+
 ## Install
 
 Install Kward from RubyGems:
@@ -65,6 +81,8 @@ New to Kward:
 Work safely:
 
 - [Security and trust](doc/security.md): local permissions, external data flow, trusted extensions, and safe work in unfamiliar repositories.
+- [Security policy](https://github.com/kaiwood/kward/blob/main/SECURITY.md): privately report suspected vulnerabilities and understand supported security-fix versions.
+- [Platform support](doc/platform-support.md): macOS, Linux, WSL, native Windows, terminal, and sandbox support expectations.
 - [Permissions](doc/permissions.md): opt-in tool approval, write scopes, policy rules, and current limits.
 - [Command sandboxing](doc/sandboxing.md): opt-in OS-enforced boundaries for model-requested shell commands.
 - [Troubleshooting](doc/troubleshooting.md): environment-specific install and runtime issues.
@@ -83,7 +101,7 @@ Everyday workflows:
 - [Skills](doc/skills.md): add reusable instructions that load only for matching tasks.
 - [Prompt templates](doc/prompt-templates.md): create reusable slash prompts and use the starter templates installed by `kward init`.
 - [MCP servers](doc/mcp.md): connect trusted local Model Context Protocol tool servers.
-- [Pan mode](doc/pan.md): use the mobile-friendly browser interface on a trusted local network.
+- [Pan mode](doc/pan.md): use the mobile-friendly local browser interface or explicitly expose it to a trusted LAN.
 - [Local models](doc/local-models.md): connect Ollama, LM Studio, or llama.cpp and use a minimal replacement prompt.
 
 Extend and integrate:
@@ -109,6 +127,8 @@ Generated Ruby API:
 
 ## Development
 
+Read [Contributing to Kward](https://github.com/kaiwood/kward/blob/main/CONTRIBUTING.md) before preparing a pull request.
+
 Run tests:
 
 ```bash

data/Rakefile

@@ -1,8 +1,10 @@
 require "bundler/gem_tasks"
 require "fileutils"
+Warning[:experimental] = false if Warning.respond_to?(:[]=)
 require "html-proofer"
 require "open3"
 require "rdoc/task"
+require "rbconfig"
 require "rubygems/package"
 require "webrick"
 require "yard"
@@ -65,6 +67,44 @@ def verify_packaged_gem(gem_name)
   files
 end
 
+def verify_docs_branding
+  homepage = File.read("_yardoc/index.html")
+  required = [
+    "<title>Kward — Ruby Coding Agent for Your Terminal</title>",
+    '<meta name="description"',
+    '<link rel="canonical" href="https://kaiwood.github.io/kward/">',
+    '<link rel="icon" type="image/png"',
+    'href="file.getting-started.html">Get Started'
+  ]
+  missing = required.reject { |content| homepage.include?(content) }
+  abort("Generated documentation is missing branded homepage metadata: #{missing.join(", ")}") if missing.any?
+
+  getting_started = File.read("_yardoc/file.getting-started.html")
+  guide_required = [
+    "<title>Getting started | Kward Docs</title>",
+    '<link rel="canonical" href="https://kaiwood.github.io/kward/file.getting-started.html">'
+  ]
+  missing = guide_required.reject { |content| getting_started.include?(content) }
+  abort("Generated guide metadata is incorrect: #{missing.join(", ")}") if missing.any?
+end
+
+def verify_public_api_docs
+  api_page = File.read("_yardoc/file.api.html")
+  required_links = [
+    "Kward.html#plugin-class_method",
+    "Kward/PluginRegistry/DSL.html",
+    "Kward/PluginRegistry/Context.html",
+    "Kward/Tools/Base.html",
+    "Kward/ToolRegistry.html",
+    "Kward/RPC/Server.html",
+    "Kward/Prompts.html",
+    "Kward/Skills/Registry.html",
+    "Kward/ConfigFiles.html"
+  ]
+  missing = required_links.reject { |link| api_page.include?(%(href="#{link}")) }
+  abort("Generated public API landing page is missing supported entry points: #{missing.join(", ")}") if missing.any?
+end
+
 def rewrite_yard_markdown_links
   guide_names = Dir.glob("doc/*.md").map { |path| File.basename(path, ".md") }
 
@@ -87,7 +127,8 @@ task default: :test
 
 desc "Run the full test suite"
 task :test do
-  ruby "-Itest", "-e", 'Dir["test/**/test_*.rb"].sort.each { |file| require_relative file }'
+  success = system(RbConfig.ruby, "-Itest", "-e", 'Dir["test/**/test_*.rb"].sort.each { |file| require_relative file }')
+  abort("Test suite failed") unless success
 end
 
 RDoc::Task.new do |rdoc|
@@ -102,7 +143,8 @@ YARD::Rake::YardocTask.new do |yard|
     "--readme", "README.md",
     "--output-dir", "_yardoc",
     "--markup", "markdown",
-    "--template-path", "templates"
+    "--template-path", "templates",
+    "--no-stats"
   ]
 end
 
@@ -183,5 +225,7 @@ namespace :docs do
     }
 
     HTMLProofer.check_directory("_yardoc", options).run
+    verify_docs_branding
+    verify_public_api_docs
   end
 end

data/SECURITY.md

@@ -0,0 +1,31 @@
+# Security policy
+
+Kward can read files, edit workspaces, run commands, call external providers, and load trusted local extensions. Security reports are taken seriously, especially when they involve credential exposure, workspace-boundary bypasses, command execution, authentication, or remote access.
+
+## Supported versions
+
+Security fixes are made against the latest released version and the `main` branch. Upgrade to the newest Kward release before reporting behavior that may already have been fixed.
+
+## Report a vulnerability privately
+
+Do not open a public issue for a suspected vulnerability.
+
+Use GitHub's private vulnerability reporting form:
+
+<https://github.com/kaiwood/kward/security/advisories/new>
+
+Include, when available:
+
+- the affected Kward version and platform;
+- a concise description of the impact;
+- reproducible steps or a minimal proof of concept;
+- the expected security boundary;
+- any suggested mitigation.
+
+Do not include real API keys, OAuth tokens, customer data, private repository content, or other secrets. Use clearly fake fixtures and redact local paths when they are not relevant.
+
+The maintainer will aim to acknowledge a complete report within seven days, validate its impact, coordinate a fix, and agree on disclosure timing. Complex reports may take longer to investigate.
+
+## Security model
+
+Before reporting expected behavior as a vulnerability, review [Security and trust](doc/security.md), [Permissions](doc/permissions.md), and [Command sandboxing](doc/sandboxing.md). Kward's host process, user-directed shell features, and trusted extensions normally run with the current user's permissions; workspace guardrails and command-worker sandboxing have narrower documented boundaries.

data/doc/agent-tools.md

@@ -19,6 +19,8 @@ Tools also enforce important boundaries:
 | Web tools | `web_search`, `fetch_content`, `fetch_raw` | [Web search](web-search.md) |
 | Code search | `code_search` | [Code search](code-search.md) |
 | Context and interaction tools | `read_skill`, `retrieve_tool_output`, `ask_user_question` | [Context tools](context-tools.md) |
+| Decision tools | `typesafe_evaluate` when `TYPESAFE_API_KEY` is configured | [TypeSafe](#TypeSafe_evaluation) |
+| Plugin tools | Trusted local integrations registered by installed plugins | [Plugins](plugins.md#Add_a_model_callable_tool) |
 
 ## How tools save tokens
 
@@ -42,7 +44,17 @@ See [Context budgeting](context-budgeting.md) for the full compaction strategy,
 
 - web tools can be hidden with web search configuration,
 - `read_skill` is advertised only when skills are available,
-- `ask_user_question` is advertised only when the frontend can display structured questions.
+- `ask_user_question` is advertised only when the frontend can display structured questions,
+- `typesafe_evaluate` is advertised only in normal turns when `TYPESAFE_API_KEY` is configured,
+- plugin tools are advertised in normal agent turns and remain subject to execution profiles and permission policy.
+
+### TypeSafe evaluation
+
+Set `TYPESAFE_API_KEY` to enable the opt-in `typesafe_evaluate` tool. It sends explicitly supplied state and typed questions to TypeSafe's `jev-latest` model and returns structured answers, probabilities, confidence, and usage. It is intended for classification, scoring, routing, and verification; it is not a chat model and does not generate assistant text.
+
+The tool supports TypeSafe's `noul`, `choice`, and `score` question types. State is bounded to 100,000 bytes and question count to 100. Treat state as third-party data: do not include secrets or personal information unless sending it to TypeSafe is intentional. Requests remain subject to Kward's normal tool permissions and hooks.
+
+See the [TypeSafe API reference](https://docs.typesafe.ai/api) for question and answer details.
 
 When `write_file` or `edit_file` changes an `AGENTS.md` file in the workspace root, Kward automatically rebuilds the system message so the model picks up the new instructions without a restart.
 

data/doc/api.md

@@ -15,7 +15,12 @@ If you use Kward from the terminal, start with the [user guides](file.README.htm
 
 ### Plugin authors
 
-Use plugins when you need trusted local Ruby code for slash commands, prompt context, footer UI, transcript events, or RPC-visible commands.
+Use plugins when you need trusted local Ruby code for typed commands and actions, model-callable tools, prompt context, footer UI, transcript events, plugin-owned chats, or external transports.
+
+Session commands can stage a host-owned model response with
+`ctx.request_turn(system: text)`; check `ctx.turn_requests_supported?` before
+offering this on an unknown frontend. Instructions are scoped to that turn,
+while normal tools, hooks, cancellation, and session history remain host-owned.
 
 Read first:
 
@@ -28,6 +33,16 @@ Generated entry points:
 - [`Kward::PluginRegistry`](Kward/PluginRegistry.html)
 - [`Kward::PluginRegistry::DSL`](Kward/PluginRegistry/DSL.html)
 - [`Kward::PluginRegistry::Context`](Kward/PluginRegistry/Context.html)
+- [`Kward::PluginCommand`](Kward/PluginCommand.html)
+- [`Kward::PluginAction`](Kward/PluginAction.html)
+- [`Kward::PluginResult`](Kward/PluginResult.html)
+- [`Kward::PluginHost`](Kward/PluginHost.html)
+- [`Kward::PluginStore`](Kward/PluginStore.html)
+- [`Kward::PluginScopedStore`](Kward/PluginScopedStore.html)
+- [`Kward::PluginChatCapabilities`](Kward/PluginChatCapabilities.html)
+- [`Kward::PluginTask`](Kward/PluginTask.html)
+- [`Kward::PluginDisposable`](Kward/PluginDisposable.html)
+- [`Kward::PluginTabHost`](Kward/PluginTabHost.html)
 
 ### Tool authors and contributors
 
@@ -45,7 +60,7 @@ Generated entry points:
 - [`Kward::Tools::Base`](Kward/Tools/Base.html)
 - [`Kward::ToolRegistry`](Kward/ToolRegistry.html)
 
-These pages document the schema and dispatch contract used by built-in tools. Kward does not yet provide a plugin DSL for registering arbitrary model-callable tools; contributors add them through the built-in registry and keep schemas, validation, docs, and tests aligned.
+These pages document the schema and dispatch contract used by built-in tools. Plugin authors can register model-callable tools through `PluginRegistry::DSL#tool`; those tools use the same permission, lifecycle-hook, execution-profile, and output-compaction path.
 
 ### RPC and frontend authors
 
@@ -82,6 +97,10 @@ Generated entry points:
 
 The generated comments focus on these supported extension boundaries rather than trying to make every internal orchestration helper public. When a generated method lacks guide coverage, treat it as internal unless the page explicitly marks it as a public API.
 
+## Documentation checks
+
+`bundle exec rake docs:check` validates links, images, scripts, branded metadata, guide canonical URLs, and the curated plugin, tool, RPC, prompt, skill, and configuration entry points listed above. The generated site intentionally includes implementation detail for contributors, so aggregate documentation coverage across every internal constant and helper is not used as a release-quality signal.
+
 ## Public API expectations
 
 The generated reference is useful for understanding the codebase, but it does not make every class, method, or constructor a supported public API.

data/doc/composer.md

@@ -28,7 +28,7 @@ The composer supports familiar line-editing keys:
 
 | Key | Action |
 | --- | --- |
-| `Left` / `Right` | Move by character |
+| `Left` / `Right` | Move by visible character (Unicode grapheme) |
 | `Home` / `Ctrl+A` | Move to the start of the current line |
 | `End` / `Ctrl+E` | Move to the end of the current line |
 | `Ctrl+B` / `Ctrl+F` | Move left or right |
@@ -197,7 +197,7 @@ The composer area can include:
 - approximate context-window usage,
 - provider, model, and reasoning effort,
 - a tab bar plus queued or steered input counts,
-- an optional plugin footer.
+- composable status contributions from installed plugins.
 
 Context usage is an estimate, not provider billing. Use `/status` for more session and compaction detail.