npm - @botiverse/kimi-code-sdk - Versions diffs - 0.19.2-botiverse.0 → 0.20.0-botiverse.0 - Mend

@botiverse/kimi-code-sdk 0.19.2-botiverse.0 → 0.20.0-botiverse.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/index.mjs CHANGED Viewed

@@ -795,7 +795,7 @@ const KIMI_ERROR_INFO = {
 		title: "Turn exceeded max steps",
 		retryable: false,
 		public: true,
-		action: "Increase loop_control.max_steps_per_turn or split the task."
+		action: "Increase loop_control.max_steps_per_turn in config.toml or split the task."
 	},
 	"provider.api_error": {
 		title: "Provider API error",
@@ -51668,7 +51668,7 @@ function withTelemetryProperties(telemetry, defaults) {
 * Loop-local error helpers.
 */
 function createMaxStepsExceededError(maxSteps, message) {
-	return new KimiError(ErrorCodes.LOOP_MAX_STEPS_EXCEEDED, message ?? `Turn exceeded maxSteps=${maxSteps}`, { details: { maxSteps } });
+	return new KimiError(ErrorCodes.LOOP_MAX_STEPS_EXCEEDED, message ?? `Turn exceeded maxSteps=${maxSteps}. If max_steps_per_turn is too small, raise it in config.toml (loop_control.max_steps_per_turn), or run "/update-config" to update it, then "/reload".`, { details: { maxSteps } });
 }
 function isMaxStepsExceededError(error) {
 	return isKimiError(error) && error.code === ErrorCodes.LOOP_MAX_STEPS_EXCEEDED;
@@ -51698,6 +51698,37 @@ function timeoutOutcome(timeoutMs, outcome) {
 		timeout = void 0;
 	} });
 }
+/**
+* Like `timeoutOutcome`, but the timer can be restarted via `reset()` while the
+* returned promise stays the same — so a `Promise.race` that already captured it
+* observes the new deadline. Used to extend a task's timeout (e.g. when a
+* foreground command is detached to the background).
+*/
+function resettableTimeoutOutcome(initialMs, outcome) {
+	let timer;
+	let resolvePromise;
+	const promise = new Promise((resolve) => {
+		resolvePromise = resolve;
+	});
+	const clear = () => {
+		if (timer === void 0) return;
+		clearTimeout(timer);
+		timer = void 0;
+	};
+	const reset = (timeoutMs) => {
+		clear();
+		if (timeoutMs === void 0 || timeoutMs <= 0) return;
+		timer = setTimeout(() => {
+			timer = void 0;
+			resolvePromise(outcome);
+		}, timeoutMs);
+	};
+	reset(initialMs);
+	return Object.assign(promise, {
+		reset,
+		clear
+	});
+}
 //#endregion
 //#region ../agent-core/src/utils/xml-escape.ts
 /** Escape XML content — escapes both tag and attribute boundary chars (& < > ") */
@@ -51723,14 +51754,11 @@ function escapeXmlTags(input) {
 *   Title: ...
 *   Severity: ...
 *   <body>
-*   <task-notification>   (only when source_kind === 'background_task' and tail_output is non-empty)
-*   <truncated tail>
-*   </task-notification>
+*   <children...>
 *   </notification>
 *
-* The opening-tag names (`<notification ` / `<task-notification>`) are
-* load-bearing for the projector's `mergeAdjacentUserMessages` detector
-* — rename requires updating the detector too.
+* The opening tag name (`<notification `) is load-bearing for notification
+* consumers that detect chat-history injections.
 *
 * `agent_id` is emitted only for background_task notifications whose
 * source task is an agent subagent — surfacing it structurally lets the
@@ -51749,33 +51777,15 @@ function renderNotificationXml(data) {
 	const title = typeof data["title"] === "string" ? data["title"] : "";
 	const severity = typeof data["severity"] === "string" ? data["severity"] : "";
 	const body = typeof data["body"] === "string" ? data["body"] : "";
+	const children = childBlocks(data["children"] ?? data["extraBlocks"]);
 	const lines = [`<notification id="${id}" category="${category}" type="${type}" source_kind="${sourceKind}" source_id="${sourceId}"${agentId === void 0 ? "" : ` agent_id="${agentId}"`}>`];
 	if (title.length > 0) lines.push(`Title: ${title}`);
 	if (severity.length > 0) lines.push(`Severity: ${severity}`);
 	if (body.length > 0) lines.push(body);
-	if (data["source_kind"] === "background_task") {
-		const tailRaw = typeof data["tail_output"] === "string" ? data["tail_output"] : "";
-		if (tailRaw.length > 0) {
-			const truncated = truncateTailOutput(tailRaw, 20, 3e3);
-			lines.push("<task-notification>");
-			lines.push(truncated);
-			lines.push("</task-notification>");
-		}
-	}
+	lines.push(...children);
 	lines.push("</notification>");
 	return lines.join("\n");
 }
-/**
-* Truncate tail output to at most `maxLines` lines and `maxChars`
-* characters. Takes the *last* N lines, then trims from the front if
-* the character budget is exceeded.
-*/
-function truncateTailOutput(raw, maxLines, maxChars) {
-	const allLines = raw.split("\n");
-	let result = (allLines.length > maxLines ? allLines.slice(-maxLines) : allLines).join("\n");
-	if (result.length > maxChars) result = result.slice(-maxChars);
-	return result;
-}
 function stringAttr$1(value, fallback) {
 	if (typeof value !== "string" || value.length === 0) return fallback;
 	return escapeXmlAttr(value);
@@ -51786,6 +51796,11 @@ function optionalStringAttr(value) {
 	if (typeof value !== "string" || value.length === 0) return void 0;
 	return value.replaceAll("&", "&amp;").replaceAll("\"", "&quot;");
 }
+function childBlocks(value) {
+	if (typeof value === "string" && value.length > 0) return [value];
+	if (!Array.isArray(value)) return [];
+	return value.filter((item) => typeof item === "string" && item.length > 0);
+}
 //#endregion
 //#region ../agent-core/src/utils/per-id-json-store.ts
 /**
@@ -52357,6 +52372,7 @@ function isBackgroundTaskTerminal(status) {
 * reads the persisted log when available.
 */
 const MAX_OUTPUT_BYTES$1 = 1024 * 1024;
+const NOTIFICATION_FALLBACK_PREVIEW_BYTES = 3e3;
 const SIGTERM_GRACE_MS$1 = 5e3;
 const USER_INTERRUPT_REASON$1 = "Interrupted by user";
 const _ALPHABET = "0123456789abcdefghijklmnopqrstuvwxyz";
@@ -52382,7 +52398,6 @@ function emptyOutputSnapshot() {
 		preview: ""
 	};
 }
-const NOTIFICATION_TAIL_BYTES = 3e3;
 var BackgroundManager = class {
 	agent;
 	persistence;
@@ -52446,6 +52461,7 @@ var BackgroundManager = class {
 		const entryOptions = {
 			detached,
 			timeoutMs: options.timeoutMs ?? task.timeoutMs,
+			detachTimeoutMs: options.detachTimeoutMs,
 			signal: detached ? void 0 : options.signal
 		};
 		this.assertCanRegister(detached);
@@ -52569,6 +52585,7 @@ var BackgroundManager = class {
 		const foregroundRelease = entry.foregroundRelease;
 		if (foregroundRelease === void 0) return this.toInfo(entry);
 		entry.foregroundRelease = void 0;
+		if (entry.options.detachTimeoutMs !== void 0) entry.timeoutHandle?.reset(entry.options.detachTimeoutMs);
 		try {
 			entry.task.onDetach?.();
 		} catch {}
@@ -52578,6 +52595,11 @@ var BackgroundManager = class {
 		foregroundRelease.resolve("detached");
 		return this.toInfo(entry);
 	}
+	persistOutput(taskId) {
+		const entry = this.tasks.get(taskId);
+		if (entry === void 0) return;
+		this.startOutputPersist(entry);
+	}
 	/** Stop a running task. SIGTERM → 5s grace → SIGKILL. */
 	async stop(taskId, reason) {
 		const entry = this.tasks.get(taskId);
@@ -52753,7 +52775,8 @@ var BackgroundManager = class {
 		if (this.scheduledNotificationKeys.has(key)) return;
 		if (this.deliveredNotificationKeys.has(key)) return;
 		this.scheduledNotificationKeys.add(key);
-		const tailOutput = (await this.getOutputSnapshot(info.taskId, NOTIFICATION_TAIL_BYTES)).preview;
+		let output = await this.getOutputSnapshot(info.taskId, 0);
+		if (!output.fullOutputAvailable) output = await this.getOutputSnapshot(info.taskId, NOTIFICATION_FALLBACK_PREVIEW_BYTES);
 		if (this.isTerminalNotificationSuppressed(info.taskId)) return void 0;
 		const notification = {
 			id: origin.notificationId,
@@ -52765,7 +52788,7 @@ var BackgroundManager = class {
 			title: `Background ${info.kind} ${info.status}`,
 			severity: info.status === "completed" ? "info" : "warning",
 			body: buildBackgroundTaskNotificationBody(info),
-			tail_output: tailOutput
+			children: backgroundTaskNotificationChildren(output)
 		};
 		return {
 			content: [{
@@ -52817,7 +52840,8 @@ var BackgroundManager = class {
 				stopReason: entry.abortController.signal.aborted ? void 0 : errorMessage$2(error)
 			});
 		});
-		const timeout = timeoutOutcome(entry.options.timeoutMs, { kind: "timeout" });
+		const timeout = resettableTimeoutOutcome(entry.options.timeoutMs, { kind: "timeout" });
+		entry.timeoutHandle = timeout;
 		const outcome = await Promise.race([
 			worker.then((settlement) => ({
 				kind: "worker",
@@ -52829,7 +52853,10 @@ var BackgroundManager = class {
 				request
 			})),
 			this.signalOutcome(entry)
-		]).finally(() => timeout.clear());
+		]).finally(() => {
+			timeout.clear();
+			entry.timeoutHandle = void 0;
+		});
 		const settlement = await this.settlementForOutcome(entry, outcome, worker);
 		await this.finalizeTask(entry, settlement);
 	}
@@ -52898,6 +52925,26 @@ var BackgroundManager = class {
 		return entry.task.toInfo(base);
 	}
 };
+function backgroundTaskNotificationChildren(output) {
+	if (output.fullOutputAvailable && output.outputPath !== void 0) return [renderOutputFileBlock(output.outputPath, output.outputSizeBytes)];
+	if (output.preview.length === 0) return void 0;
+	return [renderOutputPreviewBlock(output)];
+}
+function renderOutputFileBlock(outputPath, outputSizeBytes) {
+	return [
+		`<output-file path="${escapeXmlAttr(outputPath)}" bytes="${String(outputSizeBytes)}">`,
+		`Read the output file to retrieve the result: ${escapeXml(outputPath)}`,
+		"</output-file>"
+	].join("\n");
+}
+function renderOutputPreviewBlock(output) {
+	return [
+		`<output-preview bytes="${String(output.previewBytes)}" total_bytes="${String(output.outputSizeBytes)}" truncated="${String(output.truncated)}">`,
+		output.truncated ? `Showing the last ${String(output.previewBytes)} bytes. No persisted full output is available.` : "No persisted full output is available; this preview is the currently buffered task output.",
+		escapeXml(output.preview),
+		"</output-preview>"
+	].join("\n");
+}
 function notificationKey(origin) {
 	return `${origin.taskId}\0${origin.status}\0${origin.notificationId}`;
 }
@@ -61836,6 +61883,23 @@ var ContextMemory = class {
 			origin
 		});
 	}
+	/**
+	* Inject a user-invisible message and immediately send it to the model by
+	* launching/steering a turn. The content is used as-is (no wrapper tag), so
+	* callers can pass raw tool-result-style text or wrap it themselves. The
+	* message is skipped on replay / transcript (so the user never sees it) but
+	* is included in the context sent to the model. Use this for events the
+	* model must react to right away without surfacing a user-visible message.
+	*/
+	injectAndNotify(content, origin) {
+		this.agent.turn.steer([{
+			type: "text",
+			text: content
+		}], origin ?? {
+			kind: "injection",
+			variant: "system_reminder"
+		});
+	}
 	appendLocalCommandStdout(content) {
 		const text = `<local-command-stdout>\n${content.trim()}\n</local-command-stdout>`;
 		this.appendMessage({
@@ -61851,6 +61915,40 @@ var ContextMemory = class {
 			}
 		});
 	}
+	appendBashInput(command) {
+		const text = `<bash-input>\n${escapeXml(command)}\n</bash-input>`;
+		this.appendMessage({
+			role: "user",
+			content: [{
+				type: "text",
+				text
+			}],
+			toolCalls: [],
+			origin: {
+				kind: "shell_command",
+				phase: "input"
+			}
+		});
+	}
+	appendBashOutput(stdout, stderr, isError) {
+		const text = `<bash-stdout>${escapeXml(stdout)}</bash-stdout><bash-stderr>${escapeXml(stderr)}</bash-stderr>`;
+		this.appendMessage({
+			role: "user",
+			content: [{
+				type: "text",
+				text
+			}],
+			toolCalls: [],
+			origin: isError === true ? {
+				kind: "shell_command",
+				phase: "output",
+				isError: true
+			} : {
+				kind: "shell_command",
+				phase: "output"
+			}
+		});
+	}
 	popMatchedMessage(matcher) {
 		const lastDeferred = this.deferredMessages.at(-1);
 		const last = lastDeferred ?? this._history.at(-1);
@@ -63082,6 +63180,33 @@ var PermissionModeInjector = class extends DynamicInjector {
 };
 //#endregion
 //#region ../agent-core/src/agent/injection/plugin-session-start.ts
+/**
+* Renders the `<plugin_session_start>` reminder blocks for the currently enabled
+* plugin session starts. Returns `undefined` when there is nothing to render
+* (no session starts, no registry, or no resolvable skills).
+*
+* Shared by the turn-loop injector (which dedups against history) and the
+* explicit `/reload` flow (which force-appends a fresh reminder).
+*/
+function renderPluginSessionStartReminder(input) {
+	const { sessionStarts, registry, log } = input;
+	if (sessionStarts.length === 0) return void 0;
+	if (registry === void 0) return void 0;
+	const blocks = [];
+	for (const sessionStart of sessionStarts) {
+		const skill = registry.getPluginSkill(sessionStart.pluginId, sessionStart.skillName);
+		if (skill === void 0) {
+			log?.warn("plugin sessionStart skill not found", {
+				pluginId: sessionStart.pluginId,
+				skillName: sessionStart.skillName
+			});
+			continue;
+		}
+		blocks.push(renderSessionStartBlock(sessionStart, skill, registry.renderSkillPrompt(skill, "")));
+	}
+	if (blocks.length === 0) return void 0;
+	return blocks.join("\n");
+}
 var PluginSessionStartInjector = class extends DynamicInjector {
 	injectionVariant = "plugin_session_start";
 	async getInjection() {
@@ -63091,24 +63216,11 @@ var PluginSessionStartInjector = class extends DynamicInjector {
 			this.injectedAt = replayedAt;
 			return;
 		}
-		const sessionStarts = this.agent.pluginSessionStarts ?? [];
-		if (sessionStarts.length === 0) return void 0;
-		const registry = this.agent.skills?.registry;
-		if (registry === void 0) return void 0;
-		const blocks = [];
-		for (const sessionStart of sessionStarts) {
-			const skill = registry.getPluginSkill(sessionStart.pluginId, sessionStart.skillName);
-			if (skill === void 0) {
-				this.agent.log.warn("plugin sessionStart skill not found", {
-					pluginId: sessionStart.pluginId,
-					skillName: sessionStart.skillName
-				});
-				continue;
-			}
-			blocks.push(renderSessionStartBlock(sessionStart, skill, registry.renderSkillPrompt(skill, "")));
-		}
-		if (blocks.length === 0) return void 0;
-		return blocks.join("\n");
+		return renderPluginSessionStartReminder({
+			sessionStarts: this.agent.pluginSessionStarts,
+			registry: this.agent.skills?.registry,
+			log: this.agent.log
+		});
 	}
 };
 function renderSessionStartBlock(sessionStart, skill, skillContent) {
@@ -69252,7 +69364,7 @@ function isRecord$2(value) {
 }
 //#endregion
 //#region ../agent-core/src/skill/builtin/custom-theme.md?raw
-var custom_theme_default = "---\nname: custom-theme\ndescription: Create or edit a kimi-code custom color theme — a JSON file under the resolved KIMI_CODE_HOME data directory that recolors the TUI. Use when the user wants their own theme, asks for a specific palette or mood, or wants to tweak an existing custom theme's colors.\n---\n\n# Create a kimi-code custom theme (custom-theme)\n\nHelp the user design, write, and apply a custom color theme for the kimi-code TUI. A theme is a single JSON file; the TUI ships with `dark`, `light`, and `auto`, and any file the user adds becomes selectable alongside them.\n\n## Rules of engagement\n\n- **Never write a theme until the user has explicitly clarified what they want.** This skill may only run after the user has confirmed light vs dark, the style or mood, any specific colors they care about, and the intended filename. If any of these are missing, ask before creating files.\n- **Never assume the data directory is `~/.kimi-code`.** Always resolve `$KIMI_CODE_HOME` first with the Bash command below.\n- **Never edit a live theme file in place.** Always create a `.json.new` candidate, validate it, back up the old file, and then `mv` it into place.\n- **Never overwrite an existing theme without reading it first.** Read, back up, then overwrite only after the user confirms.\n\n## Where a theme lives\n\nThe kimi-code runtime resolves the data directory as `KIMI_CODE_HOME` first, falling back to `~/.kimi-code`. Theme files live inside the `themes/` subdirectory of that data directory.\n\nBefore doing anything, resolve the actual data root with Bash so you don't write to the wrong place. Check whether `KIMI_CODE_HOME` is set and fall back to `~/.kimi-code` when it is empty:\n\n```bash\necho \"$KIMI_CODE_HOME\"\necho \"$HOME/.kimi-code\"\n```\n\nUse the first line when it is non-empty; otherwise use the second line. In the rest of this skill, `<KIMI_CODE_HOME>` means that resolved data root — **never assume `~/.kimi-code`**. Theme files live at `<KIMI_CODE_HOME>/themes/<name>.json`. Create the `themes/` directory if it doesn't exist.\n\n## What a theme is\n\n- A theme lives at `<KIMI_CODE_HOME>/themes/<name>.json`.\n- **The filename is the theme name**: `ember.json` shows up in the `/theme` picker as `Custom: ember`.\n- Shape:\n\n  ```json\n  {\n    \"name\": \"ember\",\n    \"displayName\": \"Ember\",\n    \"colors\": {\n      \"primary\": \"#83A598\",\n      \"accent\": \"#FE8019\"\n    }\n  }\n  ```\n\n  - `name` (required), `displayName` (optional), `base` (optional: `\"dark\"` default, or `\"light\"`), `colors` (each value a 6-digit hex `#RRGGBB`).\n- **Partial themes are fine**: any token you leave out falls back to the **base** palette (`dark` by default; set `\"base\": \"light\"` for a light theme), so you can recolor just a few tokens or all of them.\n\n## Source of truth: the docs token reference\n\nBefore choosing colors, use **FetchURL** to fetch the official custom-theme docs as the authoritative list of tokens and what each controls:\n\n```\nhttps://moonshotai.github.io/kimi-code/en/customization/themes.html\n```\n\nOnly set tokens from this set — unknown keys are silently ignored at load. If FetchURL is unavailable or the fetch fails, fall back to the embedded reference below (it mirrors the same tokens) and tell the user you're working from the built-in list rather than the live docs.\n\n## Color tokens (what each controls)\n\n| Token | Controls |\n| --- | --- |\n| `primary` | The most-used color: links, inline code, the selected item in nearly every dialog, the focused editor border, plan/\"running\" badges, spinners |\n| `accent` | Secondary highlight: approval `▶` prefix, device-code box, image placeholder, BTW / queue panes, registry import |\n| `text` | Body text: dialog bodies, todo titles, footer model label, Markdown headings, assistant/tool message bullets, list bullets |\n| `textStrong` | Emphasized / bold text: input dialogs, status messages |\n| `textDim` | Secondary, dimmed text (the most widely used dim shade): thinking, hints, descriptions, completed todos, Markdown quotes, footer status bar |\n| `textMuted` | Faintest text: counters, scroll info, descriptions, Markdown link URLs, code-block borders |\n| `border` | Pane and editor borders, Markdown horizontal rule |\n| `borderFocus` | Focus / attention border (currently only the approval panel) |\n| `success` | Success state: `✓`, \"enabled\", completed |\n| `warning` | Warning state: auto/yolo badges, stale markers, plan-mode hint |\n| `error` | Error state: error messages, failed tool output |\n| `diffAdded` | Diff added lines |\n| `diffRemoved` | Diff removed lines |\n| `diffAddedStrong` | Diff intra-line changed words, added (bold) |\n| `diffRemovedStrong` | Diff intra-line changed words, removed (bold) |\n| `diffGutter` | Diff line-number gutter |\n| `diffMeta` | Diff meta / hunk headers |\n| `roleUser` | User message bullet and text, skill-activation name (the one role color with its own hue) |\n\n## Workflow\n\n1. **Ask the user what they want first — before choosing any colors.** Clarify, in one short exchange:\n   - **Light or dark?** A light theme (dark text on a light background) or a dark theme (light text on a dark background). This sets the whole direction, so settle it first. For a light theme, set `\"base\": \"light\"` so the tokens you leave out inherit the light palette instead of dark.\n   - **What style / mood?** e.g. warm vs cool, vivid vs muted, high vs low contrast, a named vibe (\"nord\", \"solarized\", \"sunset\"), or a base to start from (an existing theme, or `dark` / `light`).\n   - **Any specific colors?** Whether they have exact hex values to anchor on (a brand color, a preferred `primary`, etc.).\n\n   For the discrete choices (light vs dark, a few style options), prefer **AskUserQuestion** if it is available. If you are running in **auto mode** and `AskUserQuestion` is unavailable, ask the same question as a plain-text message with clear numbered or bulleted options, and wait for the user's reply. Don't start picking colors until you at least know light-vs-dark and the rough style.\n\n2. **Resolve the actual theme directory and current theme(s).**\n   - Resolve the data root by checking `echo \"$KIMI_CODE_HOME\"`; if empty, use `echo \"$HOME/.kimi-code\"`. Use `<root>/themes` for every subsequent step.\n   - If tweaking an existing custom theme, **Read** `<KIMI_CODE_HOME>/themes/<name>.json` first — never overwrite a theme you haven't read.\n   - Starting fresh: build a `colors` object from the token table. You can `ls <KIMI_CODE_HOME>/themes/` and Read one of the user's existing themes as a reference for the format.\n\n3. **Pick a starting point and choose colors deliberately.**\n   - Every value is a 6-digit hex `#RRGGBB` (not 3-digit, not a named color).\n   - Keep contrast usable against the user's terminal background: don't let `text` / `textDim` sit too close to the background, and keep `success` / `warning` / `error` clearly distinguishable from each other.\n   - `primary` is the most-seen color (links, selection, focus) — make it readable and distinct from `text`.\n   - `roleUser` is the one role color meant to stand on its own — give it a distinct hue.\n\n4. **Create a candidate file; never edit the live theme in place.**\n   - Use Bash to create a candidate. If the target theme already exists, copy it verbatim: `cp <name>.json <name>.json.new` (inside `<KIMI_CODE_HOME>/themes/`). If it doesn't exist, use **Write** to create a minimal skeleton named `<name>.json.new`.\n   - Use **Edit** on the candidate to change only the intended keys. Keep every existing entry, comment, and formatting intact.\n\n5. **Validate the candidate before overwriting.**\n   - Read the candidate with **Read** to visually confirm it is well-formed JSON and that every `colors` value is a full 6-digit hex `#RRGGBB` (not 3-digit, not a named color).\n   - Invalid hex values are silently skipped at load (they fall back to the base palette), but fix them so the theme renders as intended.\n\n6. **Back up and overwrite.**\n   - Back up the old file first — **always** create a new timestamped backup and never overwrite an existing backup: `cp <name>.json \"<name>.json.$(date +%Y%m%d-%H%M%S).bak\"`.\n   - If the target didn't exist, skip the backup.\n   - Overwrite with the candidate: `mv <name>.json.new <name>.json`.\n\n7. **Tell the user how to apply it** (next section).\n\n## Applying the theme\n\n- The `/theme` picker re-scans the themes directory every time it opens, so a newly added file shows up **without restarting** — tell the user to run `/theme` and choose `Custom: <name>`.\n- Or set it in `tui.toml`: `theme = \"<name>\"`.\n- **Editing the active theme**: changes to the theme that's *currently in use* are not auto-reloaded. Tell the user to run **`/reload-tui`** (or switch to another theme and back). Re-selecting the **same** theme in `/theme` is a no-op (\"Theme unchanged\").\n\n## Don'ts\n\n- **Don't start creating or editing a theme until the user has clarified light/dark, style/mood, any specific colors, and the filename.** If anything is unclear, ask — don't guess.\n- Don't invent token names — only use the documented set; unknown keys are silently ignored.\n- Don't write 3-digit hex or named colors — use full `#RRGGBB`.\n- Never edit the live theme file in place; work through a candidate and validate before `mv`.\n- Before overwriting an existing theme file, **read it and back it up** so the user can recover.\n- Don't tell the user to restart the app to apply a theme — `/theme` or `/reload-tui` is enough.\n";
+var custom_theme_default = "---\nname: custom-theme\ndescription: Create or edit a kimi-code custom color theme — a JSON file under the resolved KIMI_CODE_HOME data directory that recolors the TUI. Use when the user wants their own theme, asks for a specific palette or mood, or wants to tweak an existing custom theme's colors.\n---\n\n# Create a kimi-code custom theme (custom-theme)\n\nHelp the user design, write, and apply a custom color theme for the kimi-code TUI. A theme is a single JSON file; the TUI ships with `dark`, `light`, and `auto`, and any file the user adds becomes selectable alongside them.\n\n## Rules of engagement\n\n- **Never write a theme until the user has explicitly clarified what they want.** This skill may only run after the user has confirmed light vs dark, the style or mood, any specific colors they care about, and the intended filename. If any of these are missing, ask before creating files.\n- **Never assume the data directory is `~/.kimi-code`.** Always resolve `$KIMI_CODE_HOME` first with the Bash command below.\n- **Never edit a live theme file in place.** Always create a `.json.new` candidate, validate it, back up the old file, and then `mv` it into place.\n- **Never overwrite an existing theme without reading it first.** Read, back up, then overwrite only after the user confirms.\n\n## Where a theme lives\n\nThe kimi-code runtime resolves the data directory as `KIMI_CODE_HOME` first, falling back to `~/.kimi-code`. Theme files live inside the `themes/` subdirectory of that data directory.\n\nBefore doing anything, resolve the actual data root with Bash so you don't write to the wrong place. Check whether `KIMI_CODE_HOME` is set and fall back to `~/.kimi-code` when it is empty:\n\n```bash\necho \"$KIMI_CODE_HOME\"\necho \"$HOME/.kimi-code\"\n```\n\nUse the first line when it is non-empty; otherwise use the second line. In the rest of this skill, `<KIMI_CODE_HOME>` means that resolved data root — **never assume `~/.kimi-code`**. Theme files live at `<KIMI_CODE_HOME>/themes/<name>.json`. Create the `themes/` directory if it doesn't exist.\n\n## What a theme is\n\n- A theme lives at `<KIMI_CODE_HOME>/themes/<name>.json`.\n- **The filename is the theme name**: `ember.json` shows up in the `/theme` picker as `Custom: ember`.\n- Shape:\n\n  ```json\n  {\n    \"name\": \"ember\",\n    \"displayName\": \"Ember\",\n    \"colors\": {\n      \"primary\": \"#83A598\",\n      \"accent\": \"#FE8019\"\n    }\n  }\n  ```\n\n  - `name` (required), `displayName` (optional), `base` (optional: `\"dark\"` default, or `\"light\"`), `colors` (each value a 6-digit hex `#RRGGBB`).\n- **Partial themes are fine**: any token you leave out falls back to the **base** palette (`dark` by default; set `\"base\": \"light\"` for a light theme), so you can recolor just a few tokens or all of them.\n\n## Source of truth: the docs token reference\n\nBefore choosing colors, use **FetchURL** to fetch the official custom-theme docs as the authoritative list of tokens and what each controls:\n\n```\nhttps://moonshotai.github.io/kimi-code/en/customization/themes.html\n```\n\nOnly set tokens from this set — unknown keys are silently ignored at load. If FetchURL is unavailable or the fetch fails, fall back to the embedded reference below (it mirrors the same tokens) and tell the user you're working from the built-in list rather than the live docs.\n\n## Color tokens (what each controls)\n\n| Token | Controls |\n| --- | --- |\n| `primary` | The most-used color: links, inline code, the selected item in nearly every dialog, the focused editor border, plan/\"running\" badges, spinners |\n| `accent` | Secondary highlight: approval `▶` prefix, device-code box, image placeholder, BTW / queue panes, registry import |\n| `text` | Body text: dialog bodies, todo titles, footer model label, Markdown headings, assistant/tool message bullets, list bullets |\n| `textStrong` | Emphasized / bold text: input dialogs, status messages |\n| `textDim` | Secondary, dimmed text (the most widely used dim shade): thinking, hints, descriptions, completed todos, Markdown quotes, footer status bar |\n| `textMuted` | Faintest text: counters, scroll info, descriptions, Markdown link URLs, code-block borders |\n| `border` | Pane and editor borders, Markdown horizontal rule |\n| `borderFocus` | Focus / attention border (currently only the approval panel) |\n| `success` | Success state: `✓`, \"enabled\", completed |\n| `warning` | Warning state: auto/yolo badges, stale markers, plan-mode hint |\n| `error` | Error state: error messages, failed tool output |\n| `diffAdded` | Diff added lines |\n| `diffRemoved` | Diff removed lines |\n| `diffAddedStrong` | Diff intra-line changed words, added (bold) |\n| `diffRemovedStrong` | Diff intra-line changed words, removed (bold) |\n| `diffGutter` | Diff line-number gutter |\n| `diffMeta` | Diff meta / hunk headers |\n| `roleUser` | User message bullet and text, skill-activation name (the one role color with its own hue) |\n| `shellMode` | Shell mode (`!`) prompt, editor border, and the echoed `$ command` line |\n\n## Workflow\n\n1. **Ask the user what they want first — before choosing any colors.** Clarify, in one short exchange:\n   - **Light or dark?** A light theme (dark text on a light background) or a dark theme (light text on a dark background). This sets the whole direction, so settle it first. For a light theme, set `\"base\": \"light\"` so the tokens you leave out inherit the light palette instead of dark.\n   - **What style / mood?** e.g. warm vs cool, vivid vs muted, high vs low contrast, a named vibe (\"nord\", \"solarized\", \"sunset\"), or a base to start from (an existing theme, or `dark` / `light`).\n   - **Any specific colors?** Whether they have exact hex values to anchor on (a brand color, a preferred `primary`, etc.).\n\n   For the discrete choices (light vs dark, a few style options), prefer **AskUserQuestion** if it is available. If you are running in **auto mode** and `AskUserQuestion` is unavailable, ask the same question as a plain-text message with clear numbered or bulleted options, and wait for the user's reply. Don't start picking colors until you at least know light-vs-dark and the rough style.\n\n2. **Resolve the actual theme directory and current theme(s).**\n   - Resolve the data root by checking `echo \"$KIMI_CODE_HOME\"`; if empty, use `echo \"$HOME/.kimi-code\"`. Use `<root>/themes` for every subsequent step.\n   - If tweaking an existing custom theme, **Read** `<KIMI_CODE_HOME>/themes/<name>.json` first — never overwrite a theme you haven't read.\n   - Starting fresh: build a `colors` object from the token table. You can `ls <KIMI_CODE_HOME>/themes/` and Read one of the user's existing themes as a reference for the format.\n\n3. **Pick a starting point and choose colors deliberately.**\n   - Every value is a 6-digit hex `#RRGGBB` (not 3-digit, not a named color).\n   - Keep contrast usable against the user's terminal background: don't let `text` / `textDim` sit too close to the background, and keep `success` / `warning` / `error` clearly distinguishable from each other.\n   - `primary` is the most-seen color (links, selection, focus) — make it readable and distinct from `text`.\n   - `roleUser` is the one role color meant to stand on its own — give it a distinct hue.\n\n4. **Create a candidate file; never edit the live theme in place.**\n   - Use Bash to create a candidate. If the target theme already exists, copy it verbatim: `cp <name>.json <name>.json.new` (inside `<KIMI_CODE_HOME>/themes/`). If it doesn't exist, use **Write** to create a minimal skeleton named `<name>.json.new`.\n   - Use **Edit** on the candidate to change only the intended keys. Keep every existing entry, comment, and formatting intact.\n\n5. **Validate the candidate before overwriting.**\n   - Read the candidate with **Read** to visually confirm it is well-formed JSON and that every `colors` value is a full 6-digit hex `#RRGGBB` (not 3-digit, not a named color).\n   - Invalid hex values are silently skipped at load (they fall back to the base palette), but fix them so the theme renders as intended.\n\n6. **Back up and overwrite.**\n   - Back up the old file first — **always** create a new timestamped backup and never overwrite an existing backup: `cp <name>.json \"<name>.json.$(date +%Y%m%d-%H%M%S).bak\"`.\n   - If the target didn't exist, skip the backup.\n   - Overwrite with the candidate: `mv <name>.json.new <name>.json`.\n\n7. **Tell the user how to apply it** (next section).\n\n## Applying the theme\n\n- The `/theme` picker re-scans the themes directory every time it opens, so a newly added file shows up **without restarting** — tell the user to run `/theme` and choose `Custom: <name>`.\n- Or set it in `tui.toml`: `theme = \"<name>\"`.\n- **Editing the active theme**: changes to the theme that's *currently in use* are not auto-reloaded. Tell the user to run **`/reload-tui`** (or switch to another theme and back). Re-selecting the **same** theme in `/theme` is a no-op (\"Theme unchanged\").\n\n## Don'ts\n\n- **Don't start creating or editing a theme until the user has clarified light/dark, style/mood, any specific colors, and the filename.** If anything is unclear, ask — don't guess.\n- Don't invent token names — only use the documented set; unknown keys are silently ignored.\n- Don't write 3-digit hex or named colors — use full `#RRGGBB`.\n- Never edit the live theme file in place; work through a candidate and validate before `mv`.\n- Before overwriting an existing theme file, **read it and back it up** so the user can recover.\n- Don't tell the user to restart the app to apply a theme — `/theme` or `/reload-tui` is enough.\n";
 //#endregion
 //#region ../agent-core/src/skill/builtin/custom-theme.ts
 const PSEUDO_PATH$4 = "builtin://custom-theme";
@@ -69796,8 +69908,17 @@ function formatModelSkill(skill) {
 	lines.push(`  Path: ${skill.path}`);
 	return lines;
 }
+const graphemeSegmenter = new Intl.Segmenter(void 0, { granularity: "grapheme" });
 function truncate(value, max) {
-	return value.length > max ? value.slice(0, max) : value;
+	if (value.length <= max) return value;
+	let length = 0;
+	let result = "";
+	for (const { segment } of graphemeSegmenter.segment(value)) {
+		if (length + segment.length > max - 1) break;
+		result += segment;
+		length += segment.length;
+	}
+	return `${result}…`;
 }
 //#endregion
 //#region ../agent-core/src/agent/skill/prompt.ts
@@ -77806,9 +77927,17 @@ function normalizeToolResult(r) {
 		const textJoined = r.output.filter((c) => c.type === "text").map((c) => c.text).join("");
 		output = textJoined.length > 0 ? textJoined : TOOL_OUTPUT_EMPTY;
 	}
-	return r.isError === true ? {
+	if (r.isError === true) return r.truncated === true ? {
+		output,
+		isError: true,
+		truncated: true
+	} : {
 		output,
 		isError: true
+	};
+	return r.truncated === true ? {
+		output,
+		truncated: true
 	} : { output };
 }
 function makeToolResult(call, args, result) {
@@ -78891,6 +79020,11 @@ const injectionOriginSchema = z.object({
 	kind: z.literal("injection"),
 	variant: z.string()
 });
+const shellCommandOriginSchema = z.object({
+	kind: z.literal("shell_command"),
+	phase: z.enum(["input", "output"]),
+	isError: z.boolean().optional()
+});
 const compactionSummaryOriginSchema = z.object({ kind: z.literal("compaction_summary") });
 const systemTriggerOriginSchema = z.object({
 	kind: z.literal("system_trigger"),
@@ -78935,6 +79069,7 @@ const promptOriginSchema = z.discriminatedUnion("kind", [
 	userPromptOriginSchema,
 	skillActivationOriginSchema,
 	injectionOriginSchema,
+	shellCommandOriginSchema,
 	compactionSummaryOriginSchema,
 	systemTriggerOriginSchema,
 	backgroundTaskOriginSchema,
@@ -79282,6 +79417,16 @@ const toolProgressEventSchema = z.object({
 	toolCallId: z.string(),
 	update: toolUpdateSchema
 });
+const shellOutputEventSchema = z.object({
+	type: z.literal("shell.output"),
+	commandId: z.string(),
+	update: toolUpdateSchema
+});
+const shellStartedEventSchema = z.object({
+	type: z.literal("shell.started"),
+	commandId: z.string(),
+	taskId: z.string()
+});
 const toolResultEventSchema = z.object({
 	type: z.literal("tool.result"),
 	turnId: z.number(),
@@ -79408,6 +79553,8 @@ const eventSchema = z.discriminatedUnion("type", [
 	toolCallDeltaEventSchema,
 	toolCallStartedEventSchema,
 	toolProgressEventSchema,
+	shellOutputEventSchema,
+	shellStartedEventSchema,
 	toolResultEventSchema,
 	toolListUpdatedEventSchema,
 	mcpServerStatusEventSchema,
@@ -79879,8 +80026,7 @@ const questionRequestSchema = z.object({
 	turn_id: z.number().int().nonnegative().optional(),
 	tool_call_id: z.string().min(1).optional(),
 	questions: z.array(questionItemSchema).min(1).max(4),
-	created_at: isoDateTimeSchema,
-	expires_at: isoDateTimeSchema
+	created_at: isoDateTimeSchema
 });
 const questionAnswerSchema = z.discriminatedUnion("kind", [
 	z.object({
@@ -80460,6 +80606,16 @@ const sessionStatusResponseSchema = z.object({
 	max_context_tokens: z.number().int().nonnegative(),
 	context_usage: z.number().min(0).max(1)
 });
+const sessionWarningSchema = z.object({
+	code: z.string(),
+	message: z.string(),
+	severity: z.enum([
+		"info",
+		"warning",
+		"error"
+	])
+});
+z.object({ warnings: z.array(sessionWarningSchema) });
 z.preprocess((value) => value === void 0 ? {} : value, z.object({ instruction: z.string().optional() }));
 z.object({});
 z.preprocess((value) => value === void 0 ? {} : value, z.object({
@@ -84393,8 +84549,14 @@ function mcpResultToExecutableOutput(result, qualifiedToolName) {
 		const part = convertMCPContentBlock(block);
 		if (part !== null) converted.push(part);
 	}
-	return {
-		output: collapseSingleText(applyOutputLimits(wrapMediaOnly(converted, qualifiedToolName))),
+	const limited = applyOutputLimits(wrapMediaOnly(converted, qualifiedToolName));
+	const output = collapseSingleText(limited.parts);
+	return limited.truncated ? {
+		output,
+		isError: result.isError,
+		truncated: true
+	} : {
+		output,
 		isError: result.isError
 	};
 }
@@ -84428,11 +84590,13 @@ function wrapMediaOnly(parts, qualifiedToolName) {
 */
 function applyOutputLimits(parts) {
 	let remaining = MCP_MAX_OUTPUT_CHARS;
+	let truncated = false;
 	let textTruncated = false;
 	const out = [];
 	for (const part of parts) {
 		if (part.type === "text") {
 			if (remaining <= 0) {
+				truncated = true;
 				textTruncated = true;
 				continue;
 			}
@@ -84442,6 +84606,7 @@ function applyOutputLimits(parts) {
 					text: part.text.slice(0, remaining)
 				});
 				remaining = 0;
+				truncated = true;
 				textTruncated = true;
 			} else {
 				out.push(part);
@@ -84452,6 +84617,7 @@ function applyOutputLimits(parts) {
 		if (part.type === "think") {
 			const size = part.think.length + (part.encrypted?.length ?? 0);
 			if (remaining <= 0) {
+				truncated = true;
 				textTruncated = true;
 				continue;
 			}
@@ -84461,6 +84627,7 @@ function applyOutputLimits(parts) {
 					think: part.think.slice(0, remaining)
 				});
 				remaining = 0;
+				truncated = true;
 				textTruncated = true;
 			} else {
 				out.push(part);
@@ -84475,12 +84642,16 @@ function applyOutputLimits(parts) {
 				type: "text",
 				text: binaryPartTooLargeNotice(kind, url.length)
 			});
+			truncated = true;
 			continue;
 		}
 		out.push(part);
 	}
 	if (textTruncated) appendTruncationNotice(out);
-	return out;
+	return {
+		parts: out,
+		truncated
+	};
 }
 function appendTruncationNotice(out) {
 	for (let i = out.length - 1; i >= 0; i--) {
@@ -84591,25 +84762,25 @@ async function listDirectory(kaos, workDir = kaos.getcwd(), options = {}) {
 }
 //#endregion
 //#region ../agent-core/src/profile/context.ts
-const AGENTS_MD_MAX_BYTES = 32 * 1024;
-const AGENTS_MD_TRUNCATION_MARKER = "<!-- Some AGENTS.md files were truncated or omitted to fit the 32 KB budget -->";
+const AGENTS_MD_RECOMMENDED_MAX_BYTES = 32 * 1024;
 const S_IFMT$3 = 61440;
 const S_IFREG$1 = 32768;
 async function prepareSystemPromptContext(kaos, brandHome, options) {
 	const additionalDirs = normalizeAdditionalDirs(options?.additionalDirs ?? []);
-	const [cwdListing, agentsMd, additionalDirsInfo] = await Promise.all([
+	const [cwdListing, agentsMdResult, additionalDirsInfo] = await Promise.all([
 		listDirectory(kaos, void 0, { collapseHiddenDirs: true }),
-		loadAgentsMd(kaos, brandHome),
+		loadAgentsMdForRoots(kaos, brandHome, [kaos.getcwd()]),
 		loadAdditionalDirsInfo(kaos, additionalDirs)
 	]);
 	return {
 		cwdListing,
-		agentsMd,
-		additionalDirsInfo
+		agentsMd: agentsMdResult.content,
+		additionalDirsInfo,
+		agentsMdWarning: agentsMdResult.warning
 	};
 }
 async function loadAgentsMd(kaos, brandHome) {
-	return loadAgentsMdForRoots(kaos, brandHome, [kaos.getcwd()]);
+	return (await loadAgentsMdForRoots(kaos, brandHome, [kaos.getcwd()])).content;
 }
 async function loadAgentsMdForRoots(kaos, brandHome, workDirs) {
 	const discovered = [];
@@ -84636,7 +84807,12 @@ async function loadAgentsMdForRoots(kaos, brandHome, workDirs) {
 			for (const fileName of ["AGENTS.md", "agents.md"]) if (await collect(join$1(dir, fileName))) break;
 		}
 	}
-	return renderAgentFiles(discovered);
+	const content = renderAgentFiles(discovered);
+	const totalBytes = byteLength(content);
+	return {
+		content,
+		warning: totalBytes > AGENTS_MD_RECOMMENDED_MAX_BYTES ? `AGENTS.md total ${formatKB(totalBytes)} KB exceeds the recommended ${formatKB(AGENTS_MD_RECOMMENDED_MAX_BYTES)} KB. Large instruction files increase cost and may impact performance; consider trimming.` : void 0
+	};
 }
 async function loadAdditionalDirsInfo(kaos, additionalDirs) {
 	return (await Promise.all(additionalDirs.map(async (dir) => {
@@ -84691,60 +84867,15 @@ async function isFile$2(kaos, path) {
 }
 function renderAgentFiles(files) {
 	if (files.length === 0) return "";
-	let remaining = AGENTS_MD_MAX_BYTES;
-	let didTruncate = false;
-	const budgeted = Array.from({ length: files.length });
-	for (let i = files.length - 1; i >= 0; i--) {
-		const file = files[i];
-		if (file === void 0) continue;
-		const annotation = annotationFor(file.path);
-		const separator = i < files.length - 1 ? "\n\n" : "";
-		remaining -= byteLength(annotation) + byteLength(separator);
-		if (remaining <= 0) {
-			budgeted[i] = {
-				path: file.path,
-				content: ""
-			};
-			remaining = 0;
-			didTruncate = true;
-			continue;
-		}
-		let content = file.content;
-		if (byteLength(content) > remaining) {
-			content = truncateUtf8(content, remaining).trim();
-			didTruncate = true;
-		}
-		remaining -= byteLength(content);
-		budgeted[i] = {
-			path: file.path,
-			content
-		};
-	}
-	const rendered = budgeted.filter((file) => file !== void 0 && file.content.length > 0).map((file) => `${annotationFor(file.path)}${file.content}`).join("\n\n");
-	return didTruncate ? `${AGENTS_MD_TRUNCATION_MARKER}\n${rendered}` : rendered;
-}
-function truncateUtf8(text, maxBytes) {
-	if (maxBytes <= 0) return "";
-	if (byteLength(text) <= maxBytes) return text;
-	let low = 0;
-	let high = text.length;
-	while (low < high) {
-		const mid = Math.ceil((low + high) / 2);
-		if (byteLength(text.slice(0, mid)) <= maxBytes) low = mid;
-		else high = mid - 1;
-	}
-	let result = text.slice(0, low);
-	while (endsWithUnpairedHighSurrogate(result)) result = result.slice(0, -1);
-	return result;
-}
-function endsWithUnpairedHighSurrogate(text) {
-	if (text.length === 0) return false;
-	const codePoint = text.codePointAt(text.length - 1);
-	return codePoint !== void 0 && codePoint >= 55296 && codePoint <= 56319;
+	return files.map((file) => `${annotationFor(file.path)}${file.content}`).join("\n\n");
 }
 function byteLength(text) {
 	return Buffer.byteLength(text, "utf8");
 }
+function formatKB(bytes) {
+	const kb = bytes / 1024;
+	return Number.isInteger(kb) ? String(kb) : kb.toFixed(1);
+}
 function annotationFor(path) {
 	return `<!-- From: ${path} -->\n`;
 }
@@ -85622,21 +85753,44 @@ async function disposeProcess$2(proc) {
 * directory is not a git repository or no useful information was collected.
 */
 async function collectGitContext(kaos, cwd) {
-	if (await runGit(kaos, cwd, ["rev-parse", "--is-inside-work-tree"]) === null) return "";
-	const [remoteUrl, branch, dirtyRaw, logRaw] = await Promise.all([
-		runGit(kaos, cwd, [
+	const revParseArgs = ["rev-parse", "--is-inside-work-tree"];
+	const revParse = await runGit(kaos, cwd, revParseArgs);
+	if (!revParse.ok) {
+		if (revParse.kind === "command-failed" && isNotARepo(revParse.stderr)) return `<git-context status="unavailable" reason="not-a-repo"/>`;
+		logGitFailure(cwd, revParseArgs, revParse);
+		return "";
+	}
+	const [remote, branch, status, gitLog] = await Promise.all([
+		[
 			"remote",
 			"get-url",
 			"origin"
-		]),
-		runGit(kaos, cwd, ["branch", "--show-current"]),
-		runGit(kaos, cwd, ["status", "--porcelain"]),
-		runGit(kaos, cwd, [
+		],
+		[
+			"symbolic-ref",
+			"--short",
+			"HEAD"
+		],
+		["status", "--porcelain"],
+		[
 			"log",
 			"-3",
 			"--format=%h %s"
-		])
-	]);
+		]
+	].map(async (args) => ({
+		args,
+		result: await runGit(kaos, cwd, args)
+	})));
+	for (const { args, result } of [
+		remote,
+		branch,
+		status,
+		gitLog
+	]) if (!result.ok) logGitFailure(cwd, args, result);
+	const remoteUrl = stdoutOf(remote.result);
+	const branchName = stdoutOf(branch.result);
+	const dirtyRaw = stdoutOf(status.result);
+	const logRaw = stdoutOf(gitLog.result);
 	const sections = [`Working directory: ${cwd}`];
 	if (remoteUrl) {
 		const safeUrl = sanitizeRemoteUrl(remoteUrl);
@@ -85646,15 +85800,13 @@ async function collectGitContext(kaos, cwd) {
 			if (project) sections.push(`Project: ${project}`);
 		}
 	}
-	if (branch) sections.push(`Branch: ${branch}`);
-	if (dirtyRaw !== null) {
-		const dirtyLines = dirtyRaw.split("\n").filter((line) => line.trim().length > 0);
-		if (dirtyLines.length > 0) {
-			const total = dirtyLines.length;
-			let body = dirtyLines.slice(0, MAX_DIRTY_FILES).map((line) => `  ${line}`).join("\n");
-			if (total > MAX_DIRTY_FILES) body += `\n  ... and ${String(total - MAX_DIRTY_FILES)} more`;
-			sections.push(`Dirty files (${String(total)}):\n${body}`);
-		}
+	if (branchName) sections.push(`Branch: ${branchName}`);
+	const dirtyLines = dirtyRaw.split("\n").filter((line) => line.trim().length > 0);
+	if (dirtyLines.length > 0) {
+		const total = dirtyLines.length;
+		let body = dirtyLines.slice(0, MAX_DIRTY_FILES).map((line) => `  ${line}`).join("\n");
+		if (total > MAX_DIRTY_FILES) body += `\n  ... and ${String(total - MAX_DIRTY_FILES)} more`;
+		sections.push(`Dirty files (${String(total)}):\n${body}`);
 	}
 	if (logRaw) {
 		const logLines = logRaw.split("\n").filter((line) => line.trim().length > 0);
@@ -85702,39 +85854,87 @@ function tryUrlPath(remoteUrl) {
 		return null;
 	}
 }
+function stdoutOf(result) {
+	return result.ok ? result.stdout : "";
+}
+function isNotARepo(stderr) {
+	return stderr !== void 0 && stderr.includes("not a git repository");
+}
+function logGitFailure(cwd, args, failure) {
+	const command = `git ${args.join(" ")}`;
+	if (failure.kind === "timeout") log.debug("git context command timed out", {
+		cwd,
+		command
+	});
+	else if (failure.kind === "spawn-error") log.warn("git context command failed to spawn", {
+		cwd,
+		command
+	});
+	else log.debug("git context command failed", {
+		cwd,
+		command,
+		exitCode: failure.exitCode,
+		stderr: failure.stderr
+	});
+}
 /**
-* Run a single `git -C <cwd> <args>` command and return its trimmed stdout,
-* or `null` on any failure (spawn error, non-zero exit, or timeout). The
-* `git -C` form runs in the target directory regardless of the Kaos backend.
+* Run a single `git -C <cwd> <args>` command and return a structured result.
+* The `git -C` form runs in the target directory regardless of the Kaos
+* backend. Both stdout and stderr are captured so callers can tell "not a
+* git repository" (exit 128 + telltale stderr) apart from other failures.
 */
 async function runGit(kaos, cwd, args) {
 	let proc;
 	try {
 		proc = await kaos.exec("git", "-C", cwd, ...args);
 	} catch {
-		return null;
+		return {
+			ok: false,
+			kind: "spawn-error"
+		};
 	}
 	try {
 		proc.stdin.end();
 	} catch {}
-	const work = Promise.all([collectStream(proc.stdout), proc.wait()]);
+	const work = Promise.all([
+		collectStream(proc.stdout),
+		collectStream(proc.stderr),
+		proc.wait()
+	]);
 	work.catch(() => {});
 	let timer;
+	let timedOut = false;
 	try {
 		const timeout = new Promise((_resolve, reject) => {
 			timer = setTimeout(() => {
+				timedOut = true;
 				reject(/* @__PURE__ */ new Error(`git ${args.join(" ")} timed out`));
 			}, GIT_TIMEOUT_MS);
 		});
-		const [stdout, exitCode] = await Promise.race([work, timeout]);
-		if (exitCode !== 0) return null;
-		return stdout.trim();
+		const [stdout, stderr, exitCode] = await Promise.race([work, timeout]);
+		if (exitCode !== 0) return {
+			ok: false,
+			kind: "command-failed",
+			exitCode,
+			stderr: stderr.trim()
+		};
+		return {
+			ok: true,
+			stdout: stdout.trim()
+		};
 	} catch {
 		try {
 			await proc.kill("SIGKILL");
 		} catch {}
 		await work.catch(() => {});
-		return null;
+		if (timedOut) return {
+			ok: false,
+			kind: "timeout"
+		};
+		return {
+			ok: false,
+			kind: "command-failed"
+		};
 	} finally {
 		if (timer !== void 0) clearTimeout(timer);
 		if (proc !== void 0) await disposeProcess$2(proc);
@@ -91938,6 +92138,9 @@ var ToolResultBuilder = class {
 	get nChars() {
 		return this.nCharsValue;
 	}
+	get truncated() {
+		return this.truncationHappened;
+	}
 	write(text) {
 		if (this.nCharsValue >= this.maxChars) {
 			if (text.length > 0 && !this.truncationHappened) {
@@ -93556,7 +93759,7 @@ var ReadMediaFileTool = class {
 };
 //#endregion
 //#region ../agent-core/src/tools/builtin/file/write.md?raw
-var write_default = "Create, append to, or replace a file entirely.\n\n- The parent directory must already exist.\n- Mode defaults to overwrite; append adds content at EOF without adding a newline.\n- Write is NOT ALLOWED for incremental changes to existing files, including trivial, one-line, quick, or cosmetic edits. Use Edit instead.\n- Use Write only when the file does not exist, you intend a complete replacement, or the new contents have little continuity with the old contents.\n- Read before overwriting an existing file.\n- Write ignores the Read/Edit line-number view. NEVER include line prefixes.\n- Write outputs content literally, including supplied line endings: \\n stays LF, \\r\\n stays CRLF.\n- For new content too large for one call, overwrite the first chunk, then append subsequent chunks. Never chunk Write to modify an existing file.\n";
+var write_default = "Create, append to, or replace a file entirely.\n\n- Missing parent directories are created automatically (like `mkdir(parents=True, exist_ok=True)`).\n- Mode defaults to overwrite; append adds content at EOF without adding a newline.\n- Write is NOT ALLOWED for incremental changes to existing files, including trivial, one-line, quick, or cosmetic edits. Use Edit instead.\n- Use Write only when the file does not exist, you intend a complete replacement, or the new contents have little continuity with the old contents.\n- Read before overwriting an existing file.\n- Write ignores the Read/Edit line-number view. NEVER include line prefixes.\n- Write outputs content literally, including supplied line endings: \\n stays LF, \\r\\n stays CRLF.\n- For new content too large for one call, overwrite the first chunk, then append subsequent chunks. Never chunk Write to modify an existing file.\n";
 //#endregion
 //#region ../agent-core/src/tools/builtin/file/write.ts
 /** Mask isolating the file-type bits of a stat mode. */
@@ -93564,7 +93767,7 @@ const S_IFMT = 61440;
 /** File-type bits of a directory. */
 const S_IFDIR = 16384;
 const WriteInputSchema = z.object({
-	path: z.string().describe("Path to the file to create, append to, or completely overwrite. Relative paths resolve against the working directory; a path outside the working directory must be absolute. The parent directory must already exist."),
+	path: z.string().describe("Path to the file to create, append to, or completely overwrite. Relative paths resolve against the working directory; a path outside the working directory must be absolute. Missing parent directories are created automatically."),
 	content: z.string().describe("Raw full file content to write exactly as provided. This does not use the Read/Edit text view."),
 	mode: z.enum(["overwrite", "append"]).optional().describe("Write mode. Defaults to overwrite. append adds content to the end exactly as provided and does not add a newline.")
 });
@@ -93606,7 +93809,7 @@ var WriteTool = class {
 		};
 	}
 	async execution(args, safePath) {
-		const parentError = await this.checkParentDirectory(safePath);
+		const parentError = await this.ensureParentDirectory(safePath);
 		if (parentError !== void 0) return {
 			isError: true,
 			output: parentError
@@ -93629,22 +93832,36 @@ var WriteTool = class {
 		}
 	}
 	/**
-	* Best-effort check that the parent directory exists and is a directory.
+	* Best-effort check that the parent directory is usable, creating it when
+	* it is missing.
+	*
+	* If the parent (or any ancestor) does not exist, it is created
+	* recursively — mirroring Python's `Path.mkdir(parents=True,
+	* exist_ok=True)` — so the agent does not need a separate `mkdir` round
+	* trip before writing into a fresh subfolder. An existing parent that is
+	* not a directory is still a hard error. Any other `stat` failure
+	* (permissions, an environment without `stat`) is treated as
+	* inconclusive: the check is skipped and the write proceeds, surfacing
+	* the real I/O error if any.
 	*
-	* The path schema documents this precondition; probing it up front turns a
-	* bare `ENOENT` from the underlying write into an actionable message.
 	* Returns an error string when the precondition is definitively violated,
-	* or `undefined` otherwise. Any other `stat` failure (permissions, an
-	* environment without `stat`) is treated as inconclusive: the check is
-	* skipped and the write proceeds, surfacing the real I/O error if any.
+	* or `undefined` otherwise.
 	*/
-	async checkParentDirectory(safePath) {
+	async ensureParentDirectory(safePath) {
 		const parent = dirname$3(safePath);
 		let stat;
 		try {
 			stat = await this.kaos.stat(parent);
 		} catch (error) {
-			if (error.code === "ENOENT") return `Parent directory does not exist: ${parent}. Create it before writing this file.`;
+			if (error.code === "ENOENT") try {
+				await this.kaos.mkdir(parent, {
+					parents: true,
+					existOk: true
+				});
+				return;
+			} catch (mkdirError) {
+				return mkdirError instanceof Error ? mkdirError.message : String(mkdirError);
+			}
 			return;
 		}
 		if ((stat.stMode & S_IFMT) !== S_IFDIR) return `Parent path is not a directory: ${parent}.`;
@@ -94030,6 +94247,69 @@ var ToolCallDeduplicator = class {
 	}
 };
 //#endregion
+//#region ../agent-core/src/agent/turn/tool-result-budget.ts
+const TOOL_RESULT_MAX_CHARS = 5e4;
+const TOOL_RESULT_PREVIEW_CHARS = 2e3;
+async function budgetToolResultForModel(options) {
+	const text = persistableToolResultText(options.result.output);
+	if (text === void 0 || text.length <= TOOL_RESULT_MAX_CHARS) return options.result;
+	if (options.result.truncated === true) return options.result;
+	if (options.homedir === void 0) return options.result;
+	const outputPath = await saveToolResult({
+		homedir: options.homedir,
+		toolName: options.toolName,
+		toolCallId: options.toolCallId
+	}, text);
+	if (outputPath === void 0) return options.result;
+	const output = renderPersistedToolResult(options.toolName, options.toolCallId, text, outputPath);
+	return options.result.isError === true ? {
+		...options.result,
+		output,
+		isError: true
+	} : {
+		...options.result,
+		output
+	};
+}
+function persistableToolResultText(output) {
+	if (typeof output === "string") return output;
+	if (!output.every((part) => part.type === "text")) return;
+	return output.map((part) => part.text).join("");
+}
+async function saveToolResult(options, text) {
+	try {
+		const dir = join$1(options.homedir, "tool-results");
+		await mkdir(dir, {
+			recursive: true,
+			mode: 448
+		});
+		const outputPath = join$1(dir, `${safeToolResultFileStem(options.toolName, options.toolCallId)}-${randomUUID()}.txt`);
+		await writeFile$1(outputPath, text, {
+			encoding: "utf8",
+			flag: "wx"
+		});
+		return outputPath;
+	} catch {
+		return;
+	}
+}
+function renderPersistedToolResult(toolName, toolCallId, text, outputPath) {
+	const lines = [
+		`Tool output exceeded ${String(TOOL_RESULT_MAX_CHARS)} characters; showing a preview only.`,
+		`tool_name: ${toolName}`,
+		`tool_call_id: ${toolCallId}`,
+		`output_size_chars: ${String(text.length)}`,
+		`output_size_bytes: ${String(Buffer.byteLength(text, "utf8"))}`,
+		`output_path: ${outputPath}`,
+		"next_step: Use Read with output_path to page through the full output."
+	];
+	lines.push("", "[preview]", text.slice(0, TOOL_RESULT_PREVIEW_CHARS));
+	return lines.join("\n");
+}
+function safeToolResultFileStem(toolName, toolCallId) {
+	return `${toolName}-${toolCallId}`.replace(/[^a-zA-Z0-9._-]+/g, "_").replace(/^_+|_+$/g, "").slice(0, 80) || "tool-result";
+}
+//#endregion
 //#region ../agent-core/src/agent/turn/index.ts
 const LLM_NOT_SET_MESSAGE = "LLM not set, send \"/login\" to login";
 /** Origin tag for the synthetic "continue" prompt that drives each goal turn. */
@@ -94568,7 +94848,12 @@ var TurnFlow = class {
 									toolOutput: isError === true ? void 0 : toolOutputText(output).slice(0, 2e3)
 								}
 							});
-							return finalResult;
+							return budgetToolResultForModel({
+								homedir: this.agent.homedir,
+								toolName: ctx.toolCall.name,
+								toolCallId: ctx.toolCall.id,
+								result: finalResult
+							});
 						}
 					}
 				})).stopReason;
@@ -95292,7 +95577,7 @@ var BashTool = class {
 			},
 			approvalRule: literalRulePattern(this.name, args.command),
 			matchesRule: (ruleArgs) => matchesGlobRuleSubject(ruleArgs, args.command),
-			execute: ({ signal, onUpdate }) => this.execution(args, signal, onUpdate)
+			execute: ({ signal, onUpdate, onForegroundTaskStart }) => this.execution(args, signal, onUpdate, onForegroundTaskStart)
 		};
 	}
 	spawn(effectiveCwd, command) {
@@ -95314,7 +95599,7 @@ var BashTool = class {
 		};
 		return this.kaos.execWithEnv(shellArgs, mergedEnv);
 	}
-	async execution(args, signal, onUpdate) {
+	async execution(args, signal, onUpdate, onForegroundTaskStart) {
 		const validationError = this.validateRunRequest(args, signal);
 		if (validationError !== void 0) return validationError;
 		const startsInBackground = args.run_in_background === true;
@@ -95335,6 +95620,8 @@ var BashTool = class {
 		}
 		closeProcessStdin(proc);
 		let collectForegroundOutput = !startsInBackground;
+		let foregroundOutputPersisted = false;
+		let foregroundTaskId;
 		const onProcessOutput = startsInBackground ? void 0 : (kind, text) => {
 			if (!collectForegroundOutput) return;
 			onUpdate?.({
@@ -95342,14 +95629,20 @@ var BashTool = class {
 				text
 			});
 			builder.write(text);
+			if (!foregroundOutputPersisted && builder.truncated && foregroundTaskId !== void 0) {
+				this.backgroundManager.persistOutput(foregroundTaskId);
+				foregroundOutputPersisted = true;
+			}
 		};
 		let taskId;
 		try {
 			taskId = this.backgroundManager.registerTask(new ProcessBackgroundTask(proc, command, description, onProcessOutput), {
 				detached: startsInBackground,
 				timeoutMs,
+				detachTimeoutMs: DEFAULT_BACKGROUND_TIMEOUT_S * MS_PER_SECOND,
 				signal: startsInBackground ? void 0 : signal
 			});
+			foregroundTaskId = startsInBackground ? void 0 : taskId;
 		} catch (error) {
 			collectForegroundOutput = false;
 			await killSpawnedProcess(proc);
@@ -95358,6 +95651,7 @@ var BashTool = class {
 				output: error instanceof Error ? error.message : String(error)
 			};
 		}
+		if (!startsInBackground) onForegroundTaskStart?.(taskId);
 		if (startsInBackground) return this.backgroundStartedResult(taskId, proc, description, {
 			title: "Background task started",
 			brief: `Started ${taskId}`
@@ -95370,7 +95664,7 @@ var BashTool = class {
 					brief: `Backgrounded ${taskId}`
 				}, builder, "foreground_detached");
 			}
-			return this.foregroundCompletionResult(taskId, proc, builder, foregroundTimeoutMs);
+			return await this.foregroundCompletionResult(taskId, proc, builder, foregroundTimeoutMs);
 		} finally {
 			collectForegroundOutput = false;
 		}
@@ -95394,19 +95688,32 @@ var BashTool = class {
 			output: "description is required when run_in_background is true."
 		};
 	}
-	foregroundCompletionResult(taskId, proc, builder, foregroundTimeoutMs) {
+	async foregroundCompletionResult(taskId, proc, builder, foregroundTimeoutMs) {
 		const current = this.backgroundManager.getTask(taskId);
 		const exitCode = current?.kind === "process" ? current.exitCode : proc.exitCode;
+		let result;
 		if (current?.status === "timed_out") {
 			const timeoutLabel = formatTimeoutLabel(foregroundTimeoutMs);
-			return builder.error(`Command killed by timeout (${timeoutLabel})`, { brief: `Killed by timeout (${timeoutLabel})` });
+			result = builder.error(`Command killed by timeout (${timeoutLabel})`, { brief: `Killed by timeout (${timeoutLabel})` });
+		} else if (current?.status === "killed" && current.stopReason === USER_INTERRUPT_REASON) result = builder.error(USER_INTERRUPT_REASON, { brief: USER_INTERRUPT_REASON });
+		else if ((current?.status === "failed" || current?.status === "killed") && current.stopReason !== void 0) result = builder.error(current.stopReason, { brief: current.stopReason });
+		else if (exitCode === 0) result = builder.ok("Command executed successfully.");
+		else {
+			if (builder.nChars === 0) builder.write(`Process exited with code ${String(exitCode)}`);
+			result = builder.error(`Command failed with exit code: ${String(exitCode)}.`, { brief: `Failed with exit code: ${String(exitCode)}` });
 		}
-		if (current?.status === "killed" && current.stopReason === USER_INTERRUPT_REASON) return builder.error(USER_INTERRUPT_REASON, { brief: USER_INTERRUPT_REASON });
-		if ((current?.status === "failed" || current?.status === "killed") && current.stopReason !== void 0) return builder.error(current.stopReason, { brief: current.stopReason });
-		const isError = exitCode !== 0;
-		if (isError && builder.nChars === 0) builder.write(`Process exited with code ${String(exitCode)}`);
-		if (!isError) return builder.ok("Command executed successfully.");
-		return builder.error(`Command failed with exit code: ${String(exitCode)}.`, { brief: `Failed with exit code: ${String(exitCode)}` });
+		return this.addForegroundOutputReference(taskId, result);
+	}
+	async addForegroundOutputReference(taskId, result) {
+		if (!result.truncated) return result;
+		const output = await this.backgroundManager.getOutputSnapshot(taskId, 0);
+		if (!output.fullOutputAvailable || output.outputPath === void 0) return result;
+		const taskOutputHint = this.allowBackground ? `, or TaskOutput(task_id="${taskId}", block=false)` : "";
+		const reference = `\n\n[Full output saved]\ntask_id: ${taskId}\noutput_path: ${output.outputPath}\noutput_size_bytes: ${String(output.outputSizeBytes)}\nnext_step: Use Read with output_path to page through the full log${taskOutputHint}.`;
+		return {
+			...result,
+			output: `${result.output}${reference}`
+		};
 	}
 	backgroundStartedResult(taskId, proc, description, labels, builder = new ToolResultBuilder(), scenario = "background_started") {
 		const status = this.backgroundManager.getTask(taskId)?.status ?? "running";
@@ -95632,6 +95939,8 @@ function classifySearchError(error) {
 }
 //#endregion
 //#region ../agent-core/src/agent/tool/index.ts
+/** Foreground timeout (seconds) for a user-initiated `!` shell command. */
+const SHELL_FOREGROUND_TIMEOUT_S = 120;
 var ToolManager = class {
 	agent;
 	builtinTools = /* @__PURE__ */ new Map();
@@ -95645,6 +95954,9 @@ var ToolManager = class {
 	mcpAccessPatterns = [];
 	store = {};
 	mcpToolStatusUnsubscribe;
+	/** Abort controllers for in-flight `!` shell commands, keyed by commandId so
+	*  the TUI can cancel (Esc / Ctrl+C) a running command. */
+	shellCommandControllers = /* @__PURE__ */ new Map();
 	constructor(agent) {
 		this.agent = agent;
 		this.attachMcpTools();
@@ -95676,6 +95988,95 @@ var ToolManager = class {
 		});
 		this.store[key] = value;
 	}
+	/**
+	* Execute a user-initiated `!` shell command. Reuses the builtin Bash tool
+	* (same kaos / cwd / BackgroundManager as the agent), recording the command
+	* and its output as `shell_command`-origin messages. It does NOT start a turn
+	* — the model is not prompted (parity with claude-code's `shouldQuery: false`).
+	*/
+	async runShellCommand(command, commandId) {
+		this.agent.context.appendBashInput(command);
+		const bash = this.builtinTools.get("Bash");
+		if (bash === void 0) {
+			const error = "Bash tool is not available.";
+			this.agent.context.appendBashOutput("", error);
+			return {
+				stdout: "",
+				stderr: error,
+				isError: true
+			};
+		}
+		let stdout = "";
+		let stderr = "";
+		let isError;
+		const controller = new AbortController();
+		if (commandId !== void 0) this.shellCommandControllers.set(commandId, controller);
+		try {
+			const execution = await bash.resolveExecution({
+				command,
+				timeout: SHELL_FOREGROUND_TIMEOUT_S
+			});
+			if (!("execute" in execution)) {
+				const output = typeof execution.output === "string" ? execution.output : "Command failed.";
+				this.agent.context.appendBashOutput("", output);
+				return {
+					stdout: "",
+					stderr: output,
+					isError: true
+				};
+			}
+			const result = await execution.execute({
+				turnId: "",
+				toolCallId: "shell-command",
+				signal: controller.signal,
+				onUpdate: (update) => {
+					if (update.kind === "stdout") stdout += update.text ?? "";
+					else if (update.kind === "stderr") stderr += update.text ?? "";
+					else return;
+					if (commandId !== void 0) this.agent.emitEvent({
+						type: "shell.output",
+						commandId,
+						update
+					});
+				},
+				onForegroundTaskStart: (taskId) => {
+					if (commandId !== void 0) this.agent.emitEvent({
+						type: "shell.started",
+						commandId,
+						taskId
+					});
+				}
+			});
+			isError = result.isError === true;
+			if (typeof result.output === "string" && result.output.startsWith("task_id: ")) {
+				this.agent.context.injectAndNotify(result.output, {
+					kind: "injection",
+					variant: "shell_command_backgrounded"
+				});
+				return {
+					stdout: result.output,
+					stderr: "",
+					isError: false,
+					backgrounded: true
+				};
+			}
+			if (isError && stdout.length === 0 && stderr.length === 0 && typeof result.output === "string" && result.output.length > 0) stderr = result.output;
+		} catch (error) {
+			stderr += error instanceof Error ? error.message : String(error);
+			isError = true;
+		} finally {
+			if (commandId !== void 0) this.shellCommandControllers.delete(commandId);
+		}
+		this.agent.context.appendBashOutput(stdout, stderr, isError);
+		return {
+			stdout,
+			stderr,
+			isError
+		};
+	}
+	cancelShellCommand(commandId) {
+		this.shellCommandControllers.get(commandId)?.abort();
+	}
 	registerUserTool(input) {
 		this.agent.records.logRecord({
 			type: "tools.register_user_tool",
@@ -96392,6 +96793,8 @@ var Agent$1 = class {
 			prompt: (payload) => {
 				this.turn.prompt(payload.input);
 			},
+			runShellCommand: (payload) => this.tools.runShellCommand(payload.command, payload.commandId),
+			cancelShellCommand: (payload) => this.tools.cancelShellCommand(payload.commandId),
 			steer: (payload) => {
 				this.telemetry.track("input_steer", { parts: payload.input.length });
 				this.turn.steer(payload.input);
@@ -125836,7 +126239,7 @@ var StdioMcpClient = class {
 			command: config.command,
 			args: config.args,
 			env: mergeStdioEnv(config.env),
-			cwd: config.cwd,
+			cwd: resolveStdioCwd(config.cwd, options.defaultCwd),
 			stderr: "pipe"
 		});
 		this.transport.stderr?.on("data", (chunk) => {
@@ -125949,6 +126352,11 @@ var BoundedTail = class {
 		return this.buffer;
 	}
 };
+function resolveStdioCwd(configCwd, defaultCwd) {
+	if (configCwd === void 0) return defaultCwd;
+	if (defaultCwd !== void 0 && !isAbsolute$1(configCwd)) return resolve$2(defaultCwd, configCwd);
+	return configCwd;
+}
 function mergeStdioEnv(configEnv, parentEnv = process.env) {
 	const merged = {};
 	for (const [key, value] of Object.entries(parentEnv)) if (value !== void 0) merged[key] = value;
@@ -126186,7 +126594,10 @@ var McpConnectionManager = class {
 	}
 	createClient(config, name) {
 		const toolCallTimeoutMs = config.toolTimeoutMs;
-		if (config.transport === "stdio") return new StdioMcpClient(config, { toolCallTimeoutMs });
+		if (config.transport === "stdio") return new StdioMcpClient(config, {
+			toolCallTimeoutMs,
+			defaultCwd: this.options.stdioCwd
+		});
 		if (config.transport === "sse") return new SseMcpClient(config, {
 			toolCallTimeoutMs,
 			envLookup: this.options.envLookup,
@@ -126477,6 +126888,7 @@ var Session$1 = class {
 		custom: {}
 	};
 	writeMetadataPromise = Promise.resolve();
+	agentsMdWarning;
 	constructor(options) {
 		this.options = options;
 		this.logHandle = options.id === void 0 ? void 0 : getRootLogger().attachSession({
@@ -126497,7 +126909,8 @@ var Session$1 = class {
 		this.skills = new SessionSkillRegistry({ sessionId: options.id });
 		this.mcp = new McpConnectionManager({
 			oauthService: new McpOAuthService({ kimiHomeDir: options.kimiHomeDir }),
-			log: this.log
+			log: this.log,
+			stdioCwd: options.kaos.getcwd()
 		});
 		this.mcp.onStatusChange((entry) => {
 			this.onMcpServerStatusChange(entry);
@@ -126692,6 +127105,36 @@ var Session$1 = class {
 	async bootstrapAgentProfile(agent, profile) {
 		const context = await prepareSystemPromptContext(this.systemContextKaos(agent.kaos.getcwd()), this.options.kimiHomeDir, { additionalDirs: this.additionalDirs });
 		agent.useProfile(profile, context);
+		const { agentsMdWarning } = context;
+		if (agentsMdWarning !== void 0) {
+			this.agentsMdWarning = agentsMdWarning;
+			log.warn("AGENTS.md exceeds recommended size", { message: agentsMdWarning });
+			agent.emitEvent({
+				type: "warning",
+				message: agentsMdWarning,
+				code: "agents-md-oversized"
+			});
+		}
+	}
+	async getSessionWarnings() {
+		const warnings = [];
+		const agentsMdWarning = await this.computeAgentsMdWarning();
+		if (agentsMdWarning !== void 0) warnings.push({
+			code: "agents-md-oversized",
+			message: agentsMdWarning,
+			severity: "warning"
+		});
+		return warnings;
+	}
+	async computeAgentsMdWarning() {
+		if (this.agentsMdWarning !== void 0) return this.agentsMdWarning;
+		try {
+			const context = await prepareSystemPromptContext(this.systemContextKaos(this.toolKaos.getcwd()), this.options.kimiHomeDir, { additionalDirs: this.additionalDirs });
+			this.agentsMdWarning = context.agentsMdWarning;
+		} catch (error) {
+			log.warn("failed to compute AGENTS.md warning", { error });
+		}
+		return this.agentsMdWarning;
 	}
 	async generateAgentsMd() {
 		await this.skillsReady;
@@ -126715,6 +127158,45 @@ var Session$1 = class {
 			throw new KimiError(ErrorCodes.SESSION_INIT_FAILED, error instanceof Error ? error.message : "Init failed", { cause: error });
 		}
 	}
+	/**
+	* Appends a fresh `<plugin_session_start>` system reminder to the main agent
+	* using the currently enabled plugins, then flushes records so the reminder is
+	* persisted and visible on the wire. Used by the explicit `/reload` flow after
+	* the session has been re-resumed with reloaded plugin state.
+	*
+	* When no plugin session start is currently resolvable but an earlier
+	* When no plugin session start is currently resolvable but the context may still
+	* carry stale plugin guidance — either an earlier `<plugin_session_start>`
+	* reminder, or a compaction summary that may have folded one in — appends a
+	* neutralizing reminder instead, so the model does not keep following stale
+	* plugin instructions and the turn-loop injector does not dedup against them.
+	*/
+	async appendPluginSessionStartReminder() {
+		await this.skillsReady;
+		const mainAgent = this.requireMainAgent();
+		const reminder = renderPluginSessionStartReminder({
+			sessionStarts: mainAgent.pluginSessionStarts,
+			registry: mainAgent.skills?.registry,
+			log: mainAgent.log
+		});
+		if (reminder !== void 0) mainAgent.context.appendSystemReminder(`${reminder}\n\nThis supersedes any earlier plugin_session_start reminder in this session.`, {
+			kind: "injection",
+			variant: "plugin_session_start"
+		});
+		else if (this.shouldNeutralizePluginSessionStart(mainAgent)) mainAgent.context.appendSystemReminder("There are currently no active plugin session starts. This supersedes any earlier plugin_session_start reminder in this session.", {
+			kind: "injection",
+			variant: "plugin_session_start"
+		});
+		else return;
+		await mainAgent.records.flush();
+	}
+	shouldNeutralizePluginSessionStart(mainAgent) {
+		return mainAgent.context.history.some((message) => {
+			const kind = message.origin?.kind;
+			if (kind === "injection") return message.origin?.variant === "plugin_session_start";
+			return kind === "compaction_summary";
+		});
+	}
 	get hasActiveTurn() {
 		for (const agent of this.readyAgents()) if (agent.turn.hasActiveTurn) return true;
 		return false;
@@ -126940,9 +127422,10 @@ function createRPC() {
 			signal?.throwIfAborted();
 			let response;
 			try {
+				const handlerResult = signal === void 0 ? fn(rpcPayload) : fn(rpcPayload, { signal });
 				response = {
 					ok: true,
-					value: await abortableRpc(Promise.resolve(fn(rpcPayload)), signal)
+					value: await abortableRpc(Promise.resolve(handlerResult), signal)
 				};
 			} catch (error) {
 				signal?.throwIfAborted();
@@ -141407,6 +141890,9 @@ var SessionAPIImpl = class {
 	generateAgentsMd(_payload) {
 		return this.session.generateAgentsMd();
 	}
+	getSessionWarnings(_payload) {
+		return this.session.getSessionWarnings();
+	}
 	addAdditionalDir(payload) {
 		return this.session.addAdditionalDir(payload.path, payload.persist);
 	}
@@ -141417,6 +141903,12 @@ var SessionAPIImpl = class {
 	async steer({ agentId, ...payload }) {
 		return (await this.getAgent(agentId)).steer(payload);
 	}
+	async runShellCommand({ agentId, ...payload }) {
+		return (await this.getAgent(agentId)).runShellCommand(payload);
+	}
+	async cancelShellCommand({ agentId, ...payload }) {
+		return (await this.getAgent(agentId)).cancelShellCommand(payload);
+	}
 	async cancel({ agentId, ...payload }) {
 		return (await this.getAgent(agentId)).cancel(payload);
 	}
@@ -143273,6 +143765,7 @@ var KimiCore = class {
 			throw error;
 		}
 		this.sessions.set(summary.id, session);
+		if (overrides.forcePluginSessionStartReminder === true) await session.appendPluginSessionStartReminder();
 		return resumeSessionResult(summary, session, warning);
 	}
 	async reloadSession(input) {
@@ -143286,7 +143779,7 @@ var KimiCore = class {
 			await active.closeForReload();
 			this.sessions.delete(summary.id);
 		}
-		return this.resumeSession({ sessionId: summary.id });
+		return this.resumeSessionWithOverrides({ sessionId: summary.id }, { forcePluginSessionStartReminder: input.forcePluginSessionStartReminder });
 	}
 	async forkSession(input) {
 		const source = await this.sessionStore.get(input.sessionId);
@@ -143361,6 +143854,12 @@ var KimiCore = class {
 	prompt({ sessionId, ...payload }) {
 		return this.sessionApi(sessionId).prompt(payload);
 	}
+	runShellCommand({ sessionId, ...payload }) {
+		return this.sessionApi(sessionId).runShellCommand(payload);
+	}
+	cancelShellCommand({ sessionId, ...payload }) {
+		return this.sessionApi(sessionId).cancelShellCommand(payload);
+	}
 	steer({ sessionId, ...payload }) {
 		return this.sessionApi(sessionId).steer(payload);
 	}
@@ -143473,6 +143972,9 @@ var KimiCore = class {
 	generateAgentsMd({ sessionId, ...payload }) {
 		return this.sessionApi(sessionId).generateAgentsMd(payload);
 	}
+	getSessionWarnings({ sessionId, ...payload }) {
+		return this.sessionApi(sessionId).getSessionWarnings(payload);
+	}
 	addAdditionalDir({ sessionId, ...payload }) {
 		return this.requireSession(sessionId).addAdditionalDir(payload.path, payload.persist);
 	}
@@ -144279,8 +144781,8 @@ var BridgeClientAPI = class {
 	async requestApproval(request) {
 		return this.deps.approvalService.request(request);
 	}
-	async requestQuestion(request) {
-		return this.deps.questionService.request(request);
+	async requestQuestion(request, options) {
+		return this.deps.questionService.request(request, options);
 	}
 	async toolCall(request) {
 		return {
@@ -151298,6 +151800,7 @@ let WorkspaceRegistryService = class WorkspaceRegistryService extends Disposable
 	logger;
 	eventService;
 	_serviceBrand;
+	homeDir;
 	sessionsDir;
 	registryPath;
 	opQueue = Promise.resolve();
@@ -151305,12 +151808,33 @@ let WorkspaceRegistryService = class WorkspaceRegistryService extends Disposable
 		super();
 		this.logger = logger;
 		this.eventService = eventService;
+		this.homeDir = env.homeDir;
 		this.sessionsDir = join(env.homeDir, "sessions");
 		this.registryPath = join(env.homeDir, WORKSPACE_REGISTRY_FILE);
 	}
 	async list() {
 		const file = await this.runExclusive(() => this.readRegistry());
-		return (await Promise.all(Object.entries(file.workspaces).map(([workspaceId, entry]) => this.hydrate(workspaceId, entry)))).sort((a, b) => b.last_opened_at < a.last_opened_at ? -1 : 1);
+		const deleted = new Set(file.deleted_workspace_ids);
+		const result = [];
+		for (const [id, entry] of Object.entries(file.workspaces)) result.push(await this.hydrate(id, entry));
+		const index = await readSessionIndex(this.homeDir, this.sessionsDir);
+		const derived = /* @__PURE__ */ new Map();
+		for (const entry of index.values()) {
+			const id = encodeWorkDirKey(entry.workDir);
+			if (file.workspaces[id] !== void 0 || deleted.has(id)) continue;
+			derived.set(id, entry.workDir);
+		}
+		for (const [id, workDir] of derived) {
+			const sessionCount = await countActiveSessions(join(this.sessionsDir, id));
+			if (sessionCount === 0) continue;
+			result.push(await this.hydrate(id, {
+				root: workDir,
+				name: basename(workDir),
+				created_at: "",
+				last_opened_at: ""
+			}, sessionCount));
+		}
+		return result.sort((a, b) => b.last_opened_at < a.last_opened_at ? -1 : 1);
 	}
 	async get(workspaceId) {
 		const entry = await this.runExclusive(async () => {
@@ -151347,6 +151871,7 @@ let WorkspaceRegistryService = class WorkspaceRegistryService extends Disposable
 				last_opened_at: now
 			};
 			file.workspaces[workspaceId] = next;
+			file.deleted_workspace_ids = file.deleted_workspace_ids.filter((id) => id !== workspaceId);
 			await this.writeRegistry(file);
 			return {
 				entry: next,
@@ -151384,10 +151909,18 @@ let WorkspaceRegistryService = class WorkspaceRegistryService extends Disposable
 		const root = await this.runExclusive(async () => {
 			const file = await this.readRegistry();
 			const existing = file.workspaces[workspaceId];
-			if (existing === void 0) throw new WorkspaceNotFoundError(workspaceId);
-			delete file.workspaces[workspaceId];
+			let root;
+			if (existing !== void 0) {
+				delete file.workspaces[workspaceId];
+				root = existing.root;
+			} else {
+				const derived = await this.findDerivedWorkDir(workspaceId);
+				if (derived === void 0) throw new WorkspaceNotFoundError(workspaceId);
+				root = derived;
+			}
+			if (!file.deleted_workspace_ids.includes(workspaceId)) file.deleted_workspace_ids.push(workspaceId);
 			await this.writeRegistry(file);
-			return existing.root;
+			return root;
 		});
 		this.publishWorkspace({
 			type: "event.workspace.deleted",
@@ -151399,11 +151932,19 @@ let WorkspaceRegistryService = class WorkspaceRegistryService extends Disposable
 		const entry = await this.runExclusive(async () => {
 			return (await this.readRegistry()).workspaces[workspaceId] ?? null;
 		});
-		if (entry === null) throw new WorkspaceNotFoundError(workspaceId);
-		return entry.root;
+		if (entry !== null) return entry.root;
+		const derived = await this.findDerivedWorkDir(workspaceId);
+		if (derived !== void 0) return derived;
+		throw new WorkspaceNotFoundError(workspaceId);
+	}
+	/** Look up a derived workspace's workDir from the session index, or undefined
+	*  if the id is not a known derived bucket. */
+	async findDerivedWorkDir(workspaceId) {
+		const index = await readSessionIndex(this.homeDir, this.sessionsDir);
+		for (const e of index.values()) if (encodeWorkDirKey(e.workDir) === workspaceId) return e.workDir;
 	}
-	async hydrate(workspaceId, entry) {
-		const [{ is_git_repo, branch }, session_count] = await Promise.all([detectGit(entry.root), countActiveSessions(join(this.sessionsDir, workspaceId))]);
+	async hydrate(workspaceId, entry, sessionCount) {
+		const [{ is_git_repo, branch }, session_count] = await Promise.all([detectGit(entry.root), sessionCount ?? countActiveSessions(join(this.sessionsDir, workspaceId))]);
 		return {
 			id: workspaceId,
 			root: entry.root,
@@ -151445,7 +151986,8 @@ let WorkspaceRegistryService = class WorkspaceRegistryService extends Disposable
 			const code = err.code;
 			if (code === "ENOENT" || code === "ENOTDIR") return {
 				version: WORKSPACE_REGISTRY_VERSION,
-				workspaces: {}
+				workspaces: {},
+				deleted_workspace_ids: []
 			};
 			throw err;
 		}
@@ -151459,14 +152001,16 @@ let WorkspaceRegistryService = class WorkspaceRegistryService extends Disposable
 			}, "workspaces.json malformed; treating as empty");
 			return {
 				version: WORKSPACE_REGISTRY_VERSION,
-				workspaces: {}
+				workspaces: {},
+				deleted_workspace_ids: []
 			};
 		}
 		if (typeof parsed !== "object" || parsed === null || typeof parsed.workspaces !== "object" || parsed.workspaces === null) {
 			this.logger.warn({ path: this.registryPath }, "workspaces.json missing required keys; treating as empty");
 			return {
 				version: WORKSPACE_REGISTRY_VERSION,
-				workspaces: {}
+				workspaces: {},
+				deleted_workspace_ids: []
 			};
 		}
 		const rawWorkspaces = parsed.workspaces;
@@ -151475,9 +152019,12 @@ let WorkspaceRegistryService = class WorkspaceRegistryService extends Disposable
 			const entry = this.sanitizeEntry(value);
 			if (entry !== null) workspaces[id] = entry;
 		}
+		const version = typeof parsed.version === "number" ? parsed.version : WORKSPACE_REGISTRY_VERSION;
+		const rawDeleted = parsed.deleted_workspace_ids;
 		return {
-			version: typeof parsed.version === "number" ? parsed.version : WORKSPACE_REGISTRY_VERSION,
-			workspaces
+			version,
+			workspaces,
+			deleted_workspace_ids: Array.isArray(rawDeleted) ? rawDeleted.filter((id) => typeof id === "string") : []
 		};
 	}
 	sanitizeEntry(value) {
@@ -152926,7 +153473,6 @@ let SessionService = class SessionService extends Disposable {
 			case "event.question.requested":
 			case "event.question.answered":
 			case "event.question.dismissed":
-			case "event.question.expired":
 				this._emitStatusChanged(sessionId);
 				break;
 		}
@@ -153104,6 +153650,17 @@ let SessionService = class SessionService extends Disposable {
 			context_usage: contextUsage
 		};
 	}
+	async getSessionWarnings(id) {
+		if (!(await this.core.rpc.listSessions({})).some((s) => s.id === id)) throw new SessionNotFoundError(id);
+		try {
+			await this.core.rpc.resumeSession({ sessionId: id });
+		} catch {}
+		try {
+			return await this.core.rpc.getSessionWarnings({ sessionId: id });
+		} catch {
+			return [];
+		}
+	}
 	async compact(id, input) {
 		if ((await this.core.rpc.listSessions({})).find((s) => s.id === id) === void 0) throw new SessionNotFoundError(id);
 		await this.core.rpc.resumeSession({ sessionId: id });
@@ -154345,7 +154902,7 @@ let PromptService = class PromptService extends Disposable {
 		});
 	}
 	async _requireSession(sid) {
-		if (!(await this.core.rpc.listSessions({})).some((s) => s.id === sid)) throw new SessionNotFoundError(sid);
+		if ((await this.core.rpc.listSessions({ sessionId: sid })).length === 0) throw new SessionNotFoundError(sid);
 	}
 	dispose() {
 		if (this._store.isDisposed) return;
@@ -155111,9 +155668,12 @@ var Session = class {
 		this.ensureOpen();
 		return this.resumeState;
 	}
-	async reloadSession() {
+	async reloadSession(options) {
 		this.ensureOpen();
-		const summary = await this.rpc.reloadSession({ sessionId: this.id });
+		const summary = await this.rpc.reloadSession({
+			sessionId: this.id,
+			forcePluginSessionStartReminder: options?.forcePluginSessionStartReminder
+		});
 		this.summary = summary;
 		this.resumeState = resumeStateFromSummary(summary);
 		return summary;
@@ -155139,6 +155699,25 @@ var Session = class {
 			input: normalizePromptInput(input)
 		});
 	}
+	/** Execute a user-initiated `!` shell command (silent — does not prompt the
+	*  model). Resolves with the command's stdout/stderr for immediate display.
+	*  Pass `commandId` to receive live `shell.output` events for this command. */
+	async runShellCommand(command, options) {
+		this.ensureOpen();
+		return this.rpc.runShellCommand({
+			sessionId: this.id,
+			command,
+			commandId: options?.commandId
+		});
+	}
+	/** Cancel a running `!` shell command by its commandId (e.g. on Esc / Ctrl+C). */
+	async cancelShellCommand(commandId) {
+		this.ensureOpen();
+		return this.rpc.cancelShellCommand({
+			sessionId: this.id,
+			commandId
+		});
+	}
 	async steer(input) {
 		this.ensureOpen();
 		await this.rpc.steer({
@@ -155157,6 +155736,10 @@ var Session = class {
 		this.ensureOpen();
 		await this.rpc.generateAgentsMd({ sessionId: this.id });
 	}
+	async getSessionWarnings() {
+		this.ensureOpen();
+		return this.rpc.getSessionWarnings({ sessionId: this.id });
+	}
 	async addAdditionalDir(path, options) {
 		this.ensureOpen();
 		const normalized = normalizeRequiredString(path, "Additional directory cannot be empty", ErrorCodes.REQUEST_INVALID);
@@ -155572,11 +156155,14 @@ var KimiHarness = class {
 		const id = normalizeSessionId(input.id);
 		const active = this.activeSessions.get(id);
 		if (active !== void 0) {
-			await active.reloadSession();
+			await active.reloadSession({ forcePluginSessionStartReminder: input.forcePluginSessionStartReminder });
 			this.trackSessionEvent(active.id, "session_reload");
 			return active;
 		}
-		const summary = await this.rpc.reloadSession({ sessionId: id });
+		const summary = await this.rpc.reloadSession({
+			sessionId: id,
+			forcePluginSessionStartReminder: input.forcePluginSessionStartReminder
+		});
 		const session = new Session({
 			id: summary.id,
 			workDir: summary.workDir,
@@ -155849,7 +156435,10 @@ var SDKRpcClientBase = class {
 		return this.resumeSession(input);
 	}
 	async reloadSession(input) {
-		return (await this.getRpc()).reloadSession({ sessionId: input.sessionId });
+		return (await this.getRpc()).reloadSession({
+			sessionId: input.sessionId,
+			forcePluginSessionStartReminder: input.forcePluginSessionStartReminder
+		});
 	}
 	async forkSession(input) {
 		return (await this.getRpc()).forkSession({
@@ -155904,6 +156493,23 @@ var SDKRpcClientBase = class {
 			input: input.input
 		});
 	}
+	async runShellCommand(input) {
+		const agentId = this.interactiveAgentId;
+		return (await this.getRpc()).runShellCommand({
+			sessionId: input.sessionId,
+			agentId,
+			command: input.command,
+			commandId: input.commandId
+		});
+	}
+	async cancelShellCommand(input) {
+		const agentId = this.interactiveAgentId;
+		return (await this.getRpc()).cancelShellCommand({
+			sessionId: input.sessionId,
+			agentId,
+			commandId: input.commandId
+		});
+	}
 	async steer(input) {
 		const agentId = this.interactiveAgentId;
 		return (await this.getRpc()).steer({
@@ -155915,6 +156521,9 @@ var SDKRpcClientBase = class {
 	async generateAgentsMd(input) {
 		return (await this.getRpc()).generateAgentsMd({ sessionId: input.sessionId });
 	}
+	async getSessionWarnings(input) {
+		return (await this.getRpc()).getSessionWarnings({ sessionId: input.sessionId });
+	}
 	async addAdditionalDir(input) {
 		return (await this.getRpc()).addAdditionalDir({
 			sessionId: input.id,