kward 0.74.0 → 0.75.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b2f648e16f1d5c7187e428b30ecc2d5945f067c5decf98d1db46c51e1974a7d6
-  data.tar.gz: 5acbd39bd18701659c3699a80f6a660ae5bc85c8366083ee7aa3ec184dc93706
+  metadata.gz: 063b8f53ff1a13adc3171af1201b12dcbbd014b59edf37c61f963614ceb79ea5
+  data.tar.gz: db3f8715d8e648326a3d1dbf746636092dca709addadc6e629acec11016d5e13
 SHA512:
-  metadata.gz: 92de6ca9d486d9bc95d6c36d5bffa2bc591ad18b9dbf499aba14dc349c6f6f8492869b78788e7370a38b0e90067326a0678c0e3efb1a552b12604ab8db55d15d
-  data.tar.gz: 97f901a2f5992b34d6e3a75d92137518e6b16471ae66b73455cbbccfba740a480045271cac670d82d2920ceb61a48c4ecd2b83ae3de7d97b8bdecb8b284e658c
+  metadata.gz: c483b653b15e10415ec322dfea7f0e3a23df7e416260eaaf91d66cb711348573f4ecc642db07b55786f0f01389f5421549293a5c2ead483947152d5702909572
+  data.tar.gz: faa9827cdc03b0d48fdee98f4ecf40b7157ed8989800236226adc138d8ecabe52855a67d472c85174d0a3365527ed4aab9ec63ded872a61ba9e85c62b08a4c8b

data/CHANGELOG.md

@@ -4,6 +4,39 @@ All notable changes to Kward will be documented in this file.
 
 ## [Unreleased]
 
+## [0.75.0] - 2026-07-09
+
+### Added
+
+- Added `rake release:preflight` to run release checks, build docs, build the gem, and print packaged files.
+- Added cached RubyGems update notices on the fresh interactive startup screen.
+- Added an Interface `/settings` option for choosing the integrated diff viewer mode: auto, unified, or side-by-side.
+- Added lifecycle hooks for deterministic runtime policy and automation, including Ruby plugin hooks, command hooks configured in `config.json`, tool/shell/file/turn/model events, and allow/deny/ask/modify/warn decisions.
+- Added Agent Skills interoperability across `~/.agents/skills`, project `.agents/skills`, Kward-native skill directories, explicit `/skill` activation, RPC skill commands, resource listing, and compaction preservation for activated skills.
+- Added RPC MCP/tool discovery metadata, session-aware `tools/list`, `mcp/status`, and initialize capability reporting for MCP discovery.
+
+### Changed
+
+- Changed code search to share the web/fetch HTTP adapter for package and GitHub lookups.
+- Changed OpenAI and Anthropic OAuth flows to share browser callback and token helper mechanics.
+- Changed context token counting to reuse loaded tokenizer encodings per model.
+- Changed RPC capability format names from Tauren-specific identifiers to Kward-neutral identifiers.
+- Changed `/settings` to require only picker support, with live overlay redraw remaining optional for overlay-specific settings.
+- Changed new default configs to include explicit overlay and web-search defaults while preserving existing behavior for partial configs.
+- Changed interactive `/settings` menus to return to the last changed option instead of resetting to the first settings screen.
+- Changed the saved session picker slash command from `/sessions` to `/session`, kept `/resume` as an alias, and replaced `/name` with `/session name`.
+- Changed session picker search to use Tab, and Tab again returns to the list without clearing the current search text.
+
+### Fixed
+
+- Fixed RPC memory auto-summary so completed RPC turns learn memories when memory and auto-summary are enabled.
+- Fixed worker lifecycle hooks so create/start blocking decisions stop worker jobs before they run.
+- Fixed RPC plugin reloads so existing sessions rebuild their agent, tool registry, and lifecycle hook runtime.
+- Fixed streamed Codex reasoning whitespace so repeated blank lines collapse to a single empty line.
+- Fixed default persona spelling in new configs and the documented Anthropic default model.
+- Fixed context-usage estimates for restored sessions whose provider differs from the current client default.
+- Fixed project skill discovery to use the active conversation workspace instead of the process working directory.
+
 ## [0.74.0] - 2026-06-30
 
 ### Added
@@ -16,6 +49,8 @@ All notable changes to Kward will be documented in this file.
 
 ### Fixed
 
+- Fixed tab switching while busy local commands such as `/compact` are running, including restoring the busy spinner when returning to the tab.
+- Fixed repeated compaction for compacted sessions that continue growing after later turns.
 - Fixed editor undo/redo so selections do not become sticky after restoring buffer contents.
 - Fixed busy composer slash commands so they are blocked instead of being queued or sent as in-flight steering.
 

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    kward (0.74.0)
+    kward (0.75.0)
       base64
       nokogiri
       tiktoken_ruby
@@ -146,7 +146,7 @@ CHECKSUMS
   html-proofer (5.2.1) sha256=fdd958a7cbf9c3255fb96fe7cfc4e611f64e2706e469488a3326309ad007d2fd
   io-event (1.16.2) sha256=9f9cb0a96ea5c3850a672606c65f27bc96d7621399ef6196acbfe2be0cd1279c
   json (2.19.9) sha256=9b9025b7cdddafa38d316eca0b2358488e42d417045c1b90d216a9fefe46b79a
-  kward (0.74.0)
+  kward (0.75.0)
   logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
   metrics (0.15.0) sha256=61ded5bac95118e995b1bc9ed4a5f19bc9814928a312a85b200abbdac9039072
   minitest (6.0.6) sha256=153ea36d1d987a62942382b61075745042a2b3123b1cd48f4c3675af9cc7d6f1

data/README.md

@@ -48,6 +48,7 @@ kward                          # start an interactive chat
 kward help                     # show available commands and examples
 /login                         # from inside Kward: sign in or save provider credentials
 kward login                    # from your shell: sign in or save provider credentials
+kward hooks doctor             # inspect lifecycle hook setup
 kward "Explain this project"   # run one prompt and exit
 kward --working-directory ~/code/project "Explain this project"
 ```
@@ -63,7 +64,7 @@ See [Authentication](doc/authentication.md) for more details about sign-in optio
 - Save, resume, clone, compact, and export sessions.
 - Extend the Agent with trusted Ruby plugins for custom commands, footer UI, prompt context, and transcript-event observers.
 - Use optional memory, personas, prompt templates, and skills.
-- Serve an experimental JSON-RPC backend for UI clients.
+- Serve a JSON-RPC backend for trusted local UI clients.
 
 ## Documentation
 
@@ -88,7 +89,8 @@ Advanced:
 
 - [Extensibility](doc/extensibility.md): `PRINCIPLES.md`, workspace `AGENTS.md`, skills, prompt templates, and extension choices.
 - [Plugins](doc/plugins.md): trusted Ruby plugins for commands, footer UI, prompt context, transcript events, and RPC clients.
-- [RPC protocol](doc/rpc.md): experimental JSON-RPC backend mode for UI clients.
+- [Lifecycle hooks](doc/lifecycle-hooks.md): deterministic runtime hooks for policy, approvals, automation, and command-hook integrations.
+- [RPC protocol](doc/rpc.md): JSON-RPC backend mode for trusted local UI clients.
 - [Releasing](doc/releasing.md): release checklist for RubyGems publishing.
 - [Agent tools](doc/agent-tools.md): overview of model-callable tools, token-saving behavior, and tool categories.
 - [Workspace tools](doc/workspace-tools.md): local file, edit, and shell command tools.

data/Rakefile

@@ -1,8 +1,10 @@
 require "fileutils"
 require "html-proofer"
 require "rdoc/task"
+require "rubygems/package"
 require "webrick"
 require "yard"
+require_relative "lib/kward/version"
 require "yard/rake/yardoc_task"
 
 DOCS_WATCH_GLOBS = [
@@ -26,6 +28,11 @@ def rebuild_docs
   system({ "DOCS_SERVE_REBUILD" => "1" }, "bundle", "exec", "rake", "docs:build") || abort("Documentation rebuild failed")
 end
 
+def packaged_gem_files(gem_name)
+  gem = Gem::Package.new(gem_name)
+  gem.spec.files.sort
+end
+
 def rewrite_yard_markdown_links
   guide_names = Dir.glob("doc/*.md").map { |path| File.basename(path, ".md") }
 
@@ -46,6 +53,7 @@ end
 
 task default: :test
 
+desc "Run the full test suite"
 task :test do
   ruby "-Itest", "-e", 'Dir["test/**/test_*.rb"].sort.each { |file| require_relative file }'
 end
@@ -66,6 +74,16 @@ YARD::Rake::YardocTask.new do |yard|
   ]
 end
 
+namespace :release do
+  desc "Run release checks and build a local gem"
+  task preflight: [:test, "docs:check"] do
+    gem_name = "kward-#{Kward::VERSION}.gem"
+    FileUtils.rm_f(gem_name)
+    sh "gem", "build", "kward.gemspec"
+    puts packaged_gem_files(gem_name)
+  end
+end
+
 namespace :docs do
   desc "Serve the built YARD documentation site locally and rebuild on changes"
   task serve: :build do

data/doc/configuration.md

@@ -26,6 +26,16 @@ Small examples:
 
 See [MCP servers](mcp.md) for connecting local Model Context Protocol servers such as Safari's browser automation server.
 
+```json
+{
+  "skills": {
+    "trust_project": true
+  }
+}
+```
+
+By default, Kward loads user-level skills but skips project-level skills from the workspace. Set `skills.trust_project` to `true`, or use `/settings` → `Tools & Search` → `Trust project skills`, when you trust the repository's `.kward/skills` or `.agents/skills` directories. See [Skills](skills.md) for skill locations and examples.
+
 ```json
 {
   "memory": {
@@ -52,6 +62,31 @@ By default, Kward stores user data under `~/.kward`:
 
 When `KWARD_CONFIG_PATH=/path/to/config.json` is set, most config-related files live beside that file instead. User plugins are the exception: they are loaded only from `~/.kward/plugins`. See [Plugins](plugins.md) for writing and loading user plugins.
 
+## Lifecycle hooks
+
+Configure command or HTTP lifecycle hooks with a top-level `hooks` object. Each key is an event name and each value is an array of hook entries. Command hooks receive event JSON on stdin and return decision JSON on stdout. HTTP hooks receive event JSON by `POST` and return decision JSON in the response body.
+
+```json
+{
+  "hooks": {
+    "shell_command_before": [
+      {
+        "id": "block-release",
+        "type": "command",
+        "command": "~/.kward/hooks/block-release.rb",
+        "timeout_seconds": 5,
+        "failure_policy": "deny",
+        "match": { "command_regex": "\\bgem push\\b" }
+      }
+    ]
+  }
+}
+```
+
+Use `failure_policy` (`allow`, `warn`, `deny`, or `ask`) to decide what happens if the hook command fails, times out, or returns invalid JSON.
+
+Project-local hooks can also live in `.kward/hooks.json`, but Kward loads them only after you explicitly run `/hooks trust` in that workspace. Trust is tied to the file digest, so changes require re-trusting. See [Lifecycle hooks](lifecycle-hooks.md) for events, decisions, selectors, plugin hooks, command-hook protocol, workspace trust, and security notes.
+
 ## Embedded shell config
 
 The embedded Kward shell (`/shell`, internally `ekwsh`) reads optional global settings from `~/.kward/ekwsh.yml` or, when `KWARD_CONFIG_PATH` is set, from `ekwsh.yml` beside that config file.
@@ -112,11 +147,13 @@ Model settings:
 
 `model` is a generic setting for the active provider. Provider-specific values such as `openai_model`, `anthropic_model`, `openrouter_model`, and `copilot_model` take precedence for their provider. `reasoning_effort` and `thinking_level` are generic reasoning settings. `thinking_level` is an alias for `reasoning_effort` honored by all providers. For each provider, Kward resolves reasoning in this order: the provider-specific key (for example `openai_reasoning_effort`), then the generic `reasoning_effort`, then `thinking_level`, then the default `medium`. `openai_reasoning_effort`, `anthropic_reasoning_effort`, `openrouter_reasoning_effort`, and `copilot_reasoning_effort` are provider-specific forms.
 
+Set `codex_show_raw_reasoning` to `true` to display raw Codex `reasoning_text` when the API does not provide reasoning summary text. It defaults to `false`; raw reasoning can include internal or unstable model output, so enable it only when you explicitly want to inspect that stream.
+
 Defaults:
 
 - OpenAI/Codex: `gpt-5.5`
 - OpenRouter: `openai/gpt-5.5`
-- Anthropic: `claude-sonnet-4-5`
+- Anthropic: `claude-sonnet-4-6`
 - Copilot: `gpt-5-mini`
 - Reasoning effort: `medium`
 
@@ -170,7 +207,7 @@ Use environment variables for temporary or local-only secrets when possible. If
 
 ## Overlay settings
 
-Overlay settings control terminal picker/card layout:
+Overlay settings control terminal picker/card layout. New default configs include this section, and partial existing configs use the same defaults for missing keys:
 
 ```json
 {
@@ -185,6 +222,22 @@ Overlay settings control terminal picker/card layout:
 
 You can change these interactively with `/settings`.
 
+## Web search settings
+
+New default configs enable web search with the automatic provider order:
+
+```json
+{
+  "web_search": {
+    "enabled": true,
+    "provider": "auto",
+    "allow_model_providers": false
+  }
+}
+```
+
+Existing configs without `web_search` keep the same behavior: web search is enabled, the provider is `auto`, and model-provider fallbacks are disabled unless explicitly enabled.
+
 ## Composer settings
 
 The busy composer shows a short Ctrl+C cancellation hint by default. To hide it:
@@ -290,7 +343,7 @@ Interactive CLI and RPC clients start fresh by default. To automatically resume
 }
 ```
 
-The `/sessions` command, `/resume` alias, and RPC `sessions/resume` work regardless of this automatic resume setting.
+The `/session` command, `/resume` alias, and RPC `sessions/resume` work regardless of this automatic resume setting.
 
 ## Memory
 

data/doc/extensibility.md

@@ -14,6 +14,7 @@ Start simple. Most users only need `PRINCIPLES.md`, workspace `AGENTS.md`, and m
 | Task-specific reusable instructions | skills |
 | Different tone or role | [personas](personas.md) |
 | Local Ruby behavior or integrations | plugins |
+| Deterministic runtime policy or automation | lifecycle hooks |
 
 Install the starter pack for a useful starting point:
 
@@ -97,29 +98,15 @@ Prompt templates are best for reusable text. They do not run local code.
 
 ## Skills
 
-Use skills for reusable instructions that should only be loaded for certain tasks.
+Use skills for reusable instructions that should only be loaded for certain tasks, such as testing, release checks, or code review workflows.
 
-Create:
-
-```text
-~/.kward/skills/testing/SKILL.md
-```
-
-Example:
+Kward supports Agent Skills in user and project directories, including the shared `.agents/skills` convention. See [Skills](skills.md) for the full guide, including setup, explicit `/skill` activation, bundled files, project trust, and troubleshooting.
 
-```markdown
----
-name: testing
-description: Use when adding or changing tests.
----
-
-Prefer focused tests near the changed behavior.
-Do not weaken assertions to make tests pass.
-```
+## Lifecycle hooks
 
-Skills are listed to the model by name and description. When a task matches a skill, the model calls the `read_skill` tool to load the full `SKILL.md` instructions before proceeding.
+Use [lifecycle hooks](lifecycle-hooks.md) when something must happen at a specific runtime point: before a shell command, around model requests, after a file change, or before a tool call. Hooks can allow, deny, ask for approval, modify supported payloads, or warn. They are available from trusted Ruby plugins and from command hooks configured in `config.json`.
 
-Skills can also contain additional files alongside `SKILL.md`. The model can read them through `read_skill` with a relative `path` argument (for example, `path: examples.md`). Files must stay inside the skill folder; paths outside are rejected.
+Hooks are deterministic automation and policy. They are not model instructions.
 
 ## Plugins
 

data/doc/getting-started.md

@@ -118,7 +118,7 @@ Inside interactive Kward:
 /login              sign in or save provider credentials
 /model              choose a model
 /status             show session and context status
-/sessions           open the saved sessions picker
+/session           open the saved sessions picker
 /rewind             revisit an earlier prompt
 /export notes.md    export the transcript
 /compact            summarize older context when a chat gets long