@kdonev/termscape 0.1.2 → 0.1.4

package/README.md

@@ -48,10 +48,15 @@ the field, with what you typed still in it.
   navigates instead of zooming: in over a terminal maximizes it, out steps
   back to the workspace around it and then to everything. Zooming at any
   ordinary pace is left alone
-- Below 60% zoom terminals become preview cards — zoom in to interact
+- Every window shows its real terminal at every zoom; the text minifies
+  rather than being replaced by a card, so a zoomed-out canvas still shows
+  the shape of what each agent is doing
 - Clicking an agent in the panel brings the canvas to it
 - Clicking the canvas closes the panel, as does **Escape** — which closes the
   panel first and clears the selection only once it is shut
+- **share** on a window's title bar hands a reviewer a link to that one
+  terminal, live, with nothing else on the canvas visible to them — see
+  [Security](#security) for what the link actually grants
 
 ## Requirements
 
@@ -171,6 +176,7 @@ tunnel. Same protocol, opposite direction.
 |---|---|
 | `whoami` | your address, workspace and working directory |
 | `list_agents` | everyone on the canvas, across every host, and whether they are busy |
+| `list_hosts` | every machine on the canvas, its workspaces, and the agent CLIs it has |
 | `list_templates` | the saved ways of starting an agent, and what each one runs |
 | `send_message` | type a message into another agent's terminal, right now |
 | `spawn_agent` | start a helper in your workspace, with an optional first task |
@@ -184,6 +190,12 @@ CLI: its `profile` takes a template id, and this is how an agent finds out
 which ids exist. It reports the *names* of the environment variables a template
 sets and never their values, which are credentials more often than not.
 
+`list_hosts` is the same idea for `spawn_agent`'s `host`: without it, nothing
+tells an agent what other machines are even on the canvas, let alone which of
+them are reachable or have the CLI it wants to start. An agent started on
+another machine cannot be stopped with `stop_agent` yet — that gap is tracked
+as a follow-up rather than silently left unsaid.
+
 `propose_template` is the only one that asks rather than does. A template
 changes how *future* agents are launched, on every machine, with nobody
 necessarily watching — so the canvas shows it to a human, who can edit it
@@ -197,10 +209,10 @@ text arriving as `[from <address>] ...` is a colleague rather than the human.
 ## Agent profiles
 
 An agent CLI is configuration, not code. Built-ins are `claude`, `codex`,
-`gemini`, `opencode` and `shell`.
+`gemini`, `kilocode`, `opencode` and `shell`.
 
 Every one of them except `shell` is wired to the hub's MCP endpoint: each gets an
-address, a brief and the `send_message` tool set. They arrive there by four
+address, a brief and the `send_message` tool set. They arrive there by five
 different routes, because no two of these CLIs configure an MCP server the same
 way — and **none of them writes to a file you own**, so there is nothing left
 behind when a session ends or when the hub is killed rather than stopped.
@@ -208,6 +220,7 @@ behind when a session ends or when the hub is killed rather than stopped.
 | agent | how it reaches the hub | brief | resume |
 | --- | --- | --- | --- |
 | `claude` | `--mcp-config` on a generated file | `--append-system-prompt-file` | `--resume <uuid>` |
+| `kilocode` | `KILO_CONFIG` at a generated file, layered under yours | `instructions` in that file | restarts clean |
 | `codex` | `-c mcp_servers.…` overrides, one run only | typed in at startup | restarts clean |
 | `gemini` | `GEMINI_CLI_SYSTEM_SETTINGS_PATH` at a generated file | typed in at startup | restarts clean |
 | `opencode` | `OPENCODE_CONFIG_CONTENT`, no file anywhere | typed in at startup | restarts clean |
@@ -224,6 +237,15 @@ Two details worth knowing, because both are easy to get wrong:
 - **Codex's bearer token goes in the environment, never `-c`.** Config
   overrides land in the command line, where any other user on the machine can
   read them. `bearer_token_env_var` exists precisely for this.
+- **Kilo's config variable is the opposite of opencode's.** They look alike
+  and behave inversely: `OPENCODE_CONFIG_CONTENT` merges, `KILO_CONFIG_CONTENT`
+  *replaces*, so handing Kilo an MCP section that way would cost the user every
+  provider and model they had configured. `KILO_CONFIG` instead names one more
+  file, appended last to the list Kilo already layers and deep-merges — your
+  `mcp` entries keep their keys beside `termscape`, and your instruction files
+  are still loaded alongside the brief. Kilo also has no flag that appends to
+  its system prompt, which is why the brief is named under `instructions` in
+  that same file rather than on the command line.
 - **opencode is configured entirely from the environment.** Its config is
   handed over as a string, merged with your own rather than replacing it, so
   your models, themes and your own MCP servers survive the session. Note that
@@ -343,7 +365,7 @@ where the error reads like the hub is broken.
   naming the command that was not found — rather than vanishing, which looks
   like the config was ignored.
 - Models are enumerated where the CLI can be asked (`opencode models` returns
-  a few hundred) and declared in the profile where it cannot. Claude Code has
+  a few hundred, `kilo models` around a hundred) and declared in the profile where it cannot. Claude Code has
   no listing command; its `--help` documents the aliases instead, and it takes
   a full model name as readily as an alias. Codex is declared too, for a
   different reason: `codex debug models` does render the real catalog, but it
@@ -409,6 +431,15 @@ could be talked into sending an attacker's text to a peer.
   machine to death.
 - An agent may only stop agents it spawned.
 - `--dangerously-skip-permissions` is never a default.
+- A share link is a real grant of a keyboard on an agent that can run
+  commands, not a read-only view — the dialog says so before you copy one.
+  It opens exactly one terminal and nothing else: no canvas, no other agent's
+  name, no panel. It is scoped to that one session everywhere the canvas
+  token is checked, stored in `state.db` so it survives a hub restart, and
+  reachable only on the interfaces the hub bound — a hub started with
+  `--listen loopback` has no `lanOrigin` to build one from. **stop sharing**,
+  in the same dialog, revokes it and disconnects any tab that already had it
+  open — immediately, not on that tab's next reload.
 
 ## Contributing
 

package/dist/agents/polling.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Catches an agent watching a screen instead of waiting for a reply.
+ *
+ * The wording and the brief say waiting means ending your turn, but that only
+ * ever reaches a model that reads it before it acts - and one already mid-loop
+ * on `read_screen` has nothing left to read. This is what lands *after* the
+ * loop has started: `Hub.readScreen` attaches a `note` to the third read of
+ * the same screen inside a minute, telling the agent to stop.
+ *
+ * No hub dependency, so it unit-tests on its own.
+ */
+export declare const POLL_WINDOW_MS = 60000;
+/** Reads of one screen inside the window before a note is attached. */
+export declare const POLL_NUDGE_AFTER = 3;
+export declare class PollWatch {
+    /** Last `send_message` from one address to another, keyed `from\0to`. */
+    private readonly sent;
+    /** Read timestamps, keyed `reader\0target`, newest last. */
+    private readonly reads;
+    noteMessage(from: string, to: string, at?: number): void;
+    /** Records the read and returns the line to attach, or null. */
+    noteRead(reader: string, target: string, at?: number): string | null;
+    /**
+     * Drops anything older than the window and any entry that leaves empty, so
+     * neither map grows with a hub that has been up for a week. Run on every
+     * touch rather than on a timer: both maps are sized by the number of
+     * address pairs actually talking, which stays small.
+     */
+    private prune;
+}
+//# sourceMappingURL=polling.d.ts.map

package/dist/agents/polling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling.d.ts","sourceRoot":"","sources":["../../src/agents/polling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,cAAc,QAAS,CAAC;AACrC,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAKlC,qBAAa,SAAS;IACpB,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,4DAA4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAE,MAAmB,GAAG,IAAI;IAKpE,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAE,MAAmB,GAAG,MAAM,GAAG,IAAI;IAmBhF;;;;;OAKG;IACH,OAAO,CAAC,KAAK;CAWd"}

package/dist/agents/polling.js

@@ -0,0 +1,65 @@
+/**
+ * Catches an agent watching a screen instead of waiting for a reply.
+ *
+ * The wording and the brief say waiting means ending your turn, but that only
+ * ever reaches a model that reads it before it acts - and one already mid-loop
+ * on `read_screen` has nothing left to read. This is what lands *after* the
+ * loop has started: `Hub.readScreen` attaches a `note` to the third read of
+ * the same screen inside a minute, telling the agent to stop.
+ *
+ * No hub dependency, so it unit-tests on its own.
+ */
+export const POLL_WINDOW_MS = 60_000;
+/** Reads of one screen inside the window before a note is attached. */
+export const POLL_NUDGE_AFTER = 3;
+const SEP = '\0';
+const keyOf = (a, b) => `${a}${SEP}${b}`;
+export class PollWatch {
+    /** Last `send_message` from one address to another, keyed `from\0to`. */
+    sent = new Map();
+    /** Read timestamps, keyed `reader\0target`, newest last. */
+    reads = new Map();
+    noteMessage(from, to, at = Date.now()) {
+        this.prune(at);
+        this.sent.set(keyOf(from, to), at);
+    }
+    /** Records the read and returns the line to attach, or null. */
+    noteRead(reader, target, at = Date.now()) {
+        this.prune(at);
+        const k = keyOf(reader, target);
+        const times = [...(this.reads.get(k) ?? []), at];
+        this.reads.set(k, times);
+        if (times.length < POLL_NUDGE_AFTER)
+            return null;
+        const outstanding = this.sent.has(keyOf(reader, target));
+        return outstanding
+            ? `You asked ${target} something and have read their screen ${times.length} times ` +
+                'since. Watching does not make an answer arrive — a reply is typed into your ' +
+                'terminal and starts your next turn. Stop here and wait.'
+            : `You have read this screen ${times.length} times in the last minute. If you are ` +
+                'waiting on something, ask for it with send_message and then end your turn; the ' +
+                'answer is typed into your terminal. To see only whether an agent is working, ' +
+                'list_agents says idle or busy in one call.';
+    }
+    /**
+     * Drops anything older than the window and any entry that leaves empty, so
+     * neither map grows with a hub that has been up for a week. Run on every
+     * touch rather than on a timer: both maps are sized by the number of
+     * address pairs actually talking, which stays small.
+     */
+    prune(at) {
+        const cutoff = at - POLL_WINDOW_MS;
+        for (const [k, sentAt] of this.sent) {
+            if (sentAt <= cutoff)
+                this.sent.delete(k);
+        }
+        for (const [k, times] of this.reads) {
+            const kept = times.filter((t) => t > cutoff);
+            if (kept.length === 0)
+                this.reads.delete(k);
+            else
+                this.reads.set(k, kept);
+        }
+    }
+}
+//# sourceMappingURL=polling.js.map

package/dist/agents/polling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling.js","sourceRoot":"","sources":["../../src/agents/polling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,MAAM,GAAG,GAAG,IAAI,CAAC;AACjB,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC;AAEzD,MAAM,OAAO,SAAS;IACpB,yEAAyE;IACxD,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,4DAA4D;IAC3C,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAErD,WAAW,CAAC,IAAY,EAAE,EAAU,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;QAC3D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,gEAAgE;IAChE,QAAQ,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;QAC9D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEzB,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAEjD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,OAAO,WAAW;YAChB,CAAC,CAAC,aAAa,MAAM,yCAAyC,KAAK,CAAC,MAAM,SAAS;gBAC/E,8EAA8E;gBAC9E,yDAAyD;YAC7D,CAAC,CAAC,6BAA6B,KAAK,CAAC,MAAM,wCAAwC;gBAC/E,iFAAiF;gBACjF,+EAA+E;gBAC/E,4CAA4C,CAAC;IACrD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,EAAU;QACtB,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,CAAC;QACnC,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,MAAM,IAAI,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;;gBACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CACF"}

package/dist/agents/profiles.d.ts

@@ -19,9 +19,13 @@ export interface AgentProfile {
     /**
      * How the brief reaches the agent.
      *
-     * `flag` - the profile's own args point at `{{brief_path}}`, the way Claude
-     * Code's `--append-system-prompt-file` does. The brief is part of the
-     * system prompt and the agent never sees it as a turn.
+     * `flag` - the brief reaches the system prompt before the first turn, so
+     * the agent never sees it as one. Usually that is a flag in the profile's
+     * own args pointing at `{{brief_path}}`, the way Claude Code's
+     * `--append-system-prompt-file` does; Kilo has no such flag and names the
+     * same file under `instructions` in the config the hub generates for it,
+     * which arrives at the same place by a different road. What the value
+     * promises is the timing, not the mechanism.
      *
      * `typed` - the CLI has no way to *append* to its system prompt, so the
      * brief is typed into the terminal once the CLI is up, ahead of any opening
@@ -132,10 +136,21 @@ export interface AgentProfile {
  *   `opencode mcp add` - which does write to the user's file, and ignores
  *   `OPENCODE_CONFIG` when it does - and mistaking that command for the only
  *   way in.
+ * - **Kilo** is an opencode fork whose variable of the same shape means the
+ *   opposite: `KILO_CONFIG_CONTENT` *replaces* the config rather than merging
+ *   with it. `KILO_CONFIG` is the one to use - it appends one more file to
+ *   the list Kilo already layers and deep-merges, so a session adds its
+ *   server and its brief on top of the user's config without reading it.
+ *   Verified against @kilocode/cli 7.5.16, which is also how three flags that
+ *   read like they should exist turned out not to: Kilo has no
+ *   `--append-system-prompt-file` (the brief goes under `instructions` in
+ *   that config), and `--variant` and `--session` are `kilo run` options
+ *   rather than top-level ones. Its parser accepts an unknown top-level flag
+ *   and exits 0, so each of those would have failed silently.
  *
- * `shell` is the only profile left that is not an agent, and it is not one in
- * a way no flag can fix: it runs a shell, so text typed at it is executed
- * rather than read.
+ * `shell` and `powershell` are the two profiles left that are not agents, and
+ * they are not agents in a way no flag can fix: they run a shell, so text
+ * typed at one is executed rather than read.
  */
 export declare const BUILTIN_PROFILES: Record<string, AgentProfile>;
 /**

package/dist/agents/profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/agents/profiles.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,0EAA0E;IAC1E,GAAG,EAAE,OAAO,CAAC;IACb,mCAAmC;IACnC,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IAClC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAItB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAIlB;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAOD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAkNzD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAEpE;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAA+B;gBAEnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC;IAInD,oEAAoE;IACpE,MAAM,CAAC,IAAI,IAAI,eAAe;IAyC9B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAIpC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY;IAMjC,IAAI,IAAI,YAAY,EAAE;IAItB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAIjC;AAED,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAI5E;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAElF"}
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/agents/profiles.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,0EAA0E;IAC1E,GAAG,EAAE,OAAO,CAAC;IACb,mCAAmC;IACnC,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IAClC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAItB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAIlB;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAOD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CA6TzD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAEpE;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAA+B;gBAEnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC;IAInD,oEAAoE;IACpE,MAAM,CAAC,IAAI,IAAI,eAAe;IAyC9B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAIpC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY;IAMjC,IAAI,IAAI,YAAY,EAAE;IAItB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAIjC;AAED,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAI5E;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAElF"}

package/dist/agents/profiles.js

@@ -41,10 +41,21 @@ function defaultShell() {
  *   `opencode mcp add` - which does write to the user's file, and ignores
  *   `OPENCODE_CONFIG` when it does - and mistaking that command for the only
  *   way in.
+ * - **Kilo** is an opencode fork whose variable of the same shape means the
+ *   opposite: `KILO_CONFIG_CONTENT` *replaces* the config rather than merging
+ *   with it. `KILO_CONFIG` is the one to use - it appends one more file to
+ *   the list Kilo already layers and deep-merges, so a session adds its
+ *   server and its brief on top of the user's config without reading it.
+ *   Verified against @kilocode/cli 7.5.16, which is also how three flags that
+ *   read like they should exist turned out not to: Kilo has no
+ *   `--append-system-prompt-file` (the brief goes under `instructions` in
+ *   that config), and `--variant` and `--session` are `kilo run` options
+ *   rather than top-level ones. Its parser accepts an unknown top-level flag
+ *   and exits 0, so each of those would have failed silently.
  *
- * `shell` is the only profile left that is not an agent, and it is not one in
- * a way no flag can fix: it runs a shell, so text typed at it is executed
- * rather than read.
+ * `shell` and `powershell` are the two profiles left that are not agents, and
+ * they are not agents in a way no flag can fix: they run a shell, so text
+ * typed at one is executed rather than read.
  */
 export const BUILTIN_PROFILES = {
     claude: {
@@ -132,6 +143,81 @@ export const BUILTIN_PROFILES = {
         // and is not a top-level option, so the TUI this profile starts does not
         // take one. A template asking for an effort here is refused at load.
     },
+    kilocode: {
+        id: 'kilocode',
+        description: 'Kilo Code CLI, wired to the hub MCP endpoint',
+        command: 'kilo',
+        // Bare, which is its default subcommand and starts the TUI. `kilo run` is
+        // the one-shot form and is not what a window on the canvas wants.
+        args: [],
+        /*
+         * Kilo is an opencode fork and reaches the hub by a fourth route again,
+         * because the variable opencode uses has the opposite meaning here.
+         *
+         * `KILO_CONFIG` names one more config file, appended *last* to the list
+         * Kilo already layers - the project's own kilo.json, then the global
+         * ~/.config/kilo/kilo.json - and the layers are deep-merged. So the file
+         * this points at adds our MCP server and our brief on top of the user's
+         * config without the hub reading or rewriting a byte of it: their `mcp`
+         * entries keep their own keys beside `termscape`, their models and themes
+         * survive, and their `instructions` list simply gains one entry.
+         *
+         * The token is not in that file. It goes in the environment, and the file
+         * refers to it as `{env:TERMSCAPE_TOKEN}` - Kilo's own substitution
+         * syntax, verified resolving against a live `kilo debug config`. Same
+         * reasoning as Codex's `bearer_token_env_var`, with one more benefit
+         * here: nothing secret is written to disk at all.
+         */
+        env: {
+            KILO_CONFIG: '{{kilocode_config_path}}',
+            TERMSCAPE_TOKEN: '{{token}}',
+        },
+        /*
+         * `KILO_CONFIG_CONTENT` is the other one, and it *replaces* the effective
+         * config rather than layering onto it - which is exactly wrong for a
+         * session and exactly right for a probe. `kilo --version` and
+         * `kilo models` need no config, and this stops Kilo writing a default one
+         * on a machine whose owner may never have run it by hand.
+         */
+        probeEnv: { KILO_CONFIG_CONTENT: '{}' },
+        mcp: true,
+        /*
+         * `flag` without a flag. Kilo has no `--append-system-prompt-file`; what
+         * it has is `instructions` in config, a list of files folded into the
+         * system prompt. The brief is named there, in the same generated config
+         * that carries the MCP server, so it arrives as context and the agent
+         * never sees it as a turn - which is the whole of what `flag` means to
+         * the hub.
+         *
+         * Worth saying why this is not `typed`: Kilo's top-level parser is not
+         * strict, so an invented flag is accepted, ignored, and exits 0. An agent
+         * briefed by a flag that does not exist launches with no brief and no
+         * error, which is the failure this profile is written to avoid.
+         */
+        brief: 'flag',
+        status: 'heuristic',
+        inject: 'bracketed',
+        versionArgs: ['--version'],
+        // Real enumeration: `kilo models` prints one provider/model per line, 102
+        // of them on the machine this was written on - the same plain-text shape
+        // opencode answers with, so there is nothing to declare here.
+        modelsArgs: ['models'],
+        // `-m provider/model` is a top-level option, so it applies to the TUI and
+        // not only to `kilo run`. Verified against `kilo --help`.
+        modelArgs: ['-m', '{{model}}'],
+        /*
+         * No effortArgs, for precisely the reason opencode has none: `--variant`
+         * is documented under `kilo run` and is not a top-level option, so the
+         * TUI this profile starts does not take one. A template asking for an
+         * effort here is refused at load rather than dropped at launch.
+         *
+         * No resumeArgs either. `-s/--session` exists, but it takes an id Kilo
+         * mints for itself rather than one the hub could record up front, and
+         * `-c/--continue` resolves to "the most recent session in this cwd",
+         * which is the wrong agent as soon as a workspace holds two of them.
+         * Better to restart clean and say so.
+         */
+    },
     codex: {
         id: 'codex',
         description: 'Codex CLI, wired to the hub MCP endpoint',
@@ -237,6 +323,38 @@ export const BUILTIN_PROFILES = {
          * not an id it could resume by.
          */
     },
+    /*
+     * PowerShell, named rather than left to `shell`.
+     *
+     * On Windows `shell` follows COMSPEC, which is cmd.exe - so the shell most
+     * Windows work actually happens in was the one thing the picker could not
+     * offer. Elsewhere `pwsh` is the cross-platform build, and it stays in the
+     * list when it is not installed with "not found on PATH" against it, which
+     * is the honest answer for a shell you have to install.
+     *
+     * Unwired for the same reason `shell` is, and it is not a gap a flag could
+     * close: a shell executes what is typed at it, so a brief there is a series
+     * of commands rather than context.
+     */
+    powershell: {
+        id: 'powershell',
+        description: 'PowerShell, no agent wiring',
+        command: platform === 'win32' ? 'powershell.exe' : 'pwsh',
+        // -NoLogo: the banner is three lines of nothing in a window this small.
+        args: ['-NoLogo'],
+        env: {},
+        mcp: false,
+        brief: 'none',
+        status: 'heuristic',
+        // `PS C:\dev>`, and the `>>` of a continuation prompt. Not a bare `>`,
+        // which is the last character of half the redirects anyone types.
+        readyHint: '(PS [^>]*>|^>>) ?$',
+        inject: 'raw',
+        // Asked rather than declared: unlike `shell`, which is whatever COMSPEC or
+        // SHELL happens to point at, this is one named command that either is on
+        // PATH or is not - and its version is worth showing next to it.
+        versionArgs: ['-NoLogo', '-NoProfile', '-Command', '$PSVersionTable.PSVersion.ToString()'],
+    },
     shell: {
         id: 'shell',
         description: 'Plain terminal, no agent wiring',

package/dist/agents/profiles.js.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/agents/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AA4GpC,SAAS,YAAY;IACnB,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACzE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,WAAW,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiC;IAC5D,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE;YACJ,cAAc;YACd,qBAAqB;YACrB,cAAc;YACd,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;YACnB,6BAA6B;YAC7B,gBAAgB;SACjB;QACD,GAAG,EAAE,EAAE;QACP,GAAG,EAAE,IAAI;QACT,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B;;;;;WAKG;QACH,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnC,0EAA0E;QAC1E,wDAAwD;QACxD,SAAS,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;QACnC,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;QACtC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;QAClD,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,UAAU,EAAE;YACV,cAAc;YACd,qBAAqB;YACrB,UAAU;YACV,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;YACnB,6BAA6B;YAC7B,gBAAgB;SACjB;KACF;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,6CAA6C;QAC1D,OAAO,EAAE,UAAU;QACnB,yEAAyE;QACzE,8DAA8D;QAC9D,IAAI,EAAE,EAAE;QACR;;;;;;;;;;;WAWG;QACH,GAAG,EAAE,EAAE,uBAAuB,EAAE,qBAAqB,EAAE;QACvD,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,2DAA2D;QAC3D,QAAQ,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE;QAC3C,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,oEAAoE;QACpE,+BAA+B;QAC/B,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,0EAA0E;QAC1E,yDAAyD;QACzD,SAAS,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QAC9B,2EAA2E;QAC3E,yEAAyE;QACzE,qEAAqE;KACtE;IACD,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE,OAAO;QAChB;;;;;;;;WAQG;QACH,IAAI,EAAE;YACJ,IAAI;YACJ,yCAAyC;YACzC,IAAI;YACJ,8DAA8D;SAC/D;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,aAAa;QACb,GAAG,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE;QACrC,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B;;;;;;;;WAQG;QACH,MAAM,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,CAAC;QAC7F,SAAS,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QAC9B;;;;;;;;;WASG;QACH,UAAU,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;QACzD,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;QAC3D;;;;;;;WAOG;KACJ;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,2CAA2C;QACxD,OAAO,EAAE,QAAQ;QACjB;;;;;;WAMG;QACH,IAAI,EAAE,CAAC,cAAc,CAAC;QACtB,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,GAAG,EAAE,EAAE,+BAA+B,EAAE,0BAA0B,EAAE;QACpE,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,2EAA2E;QAC3E,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,EAAE;YACN,wBAAwB;YACxB,sBAAsB;YACtB,kBAAkB;YAClB,gBAAgB;YAChB,uBAAuB;YACvB,gBAAgB;YAChB,kBAAkB;SACnB;QACD,SAAS,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QAC9B;;;;;;;;;WASG;KACJ;IACD,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,YAAY,EAAE;QACvB,IAAI,EAAE,EAAE;QACR,GAAG,EAAE,EAAE;QACP,GAAG,EAAE,KAAK;QACV,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,oEAAoE;QACpE,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,WAAW;QACtB,MAAM,EAAE,KAAK;QACb,sEAAsE;QACtE,yEAAyE;QACzE,qBAAqB;KACtB;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,CAAe;IACvC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,OAAO,eAAe;IAClB,QAAQ,CAA+B;IAE/C,YAAY,QAAuC;QACjD,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACtD,CAAC;IAED,oEAAoE;IACpE,MAAM,CAAC,IAAI;QACT,MAAM,MAAM,GAAiC,EAAE,GAAG,gBAAgB,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;gBACzE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;wBAAE,SAAS;oBAClD,qEAAqE;oBACrE,gDAAgD;oBAChD,IAAI,EAAE,KAAK,UAAU;wBAAE,SAAS;oBAChC,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;oBACxB,MAAM,CAAC,EAAE,CAAC,GAAG;wBACX,EAAE;wBACF,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,WAAW,IAAI,EAAE;wBACrD,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,OAAO,IAAI,EAAE;wBACzC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE;wBAChC,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,IAAI,EAAE;wBAC7B,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI;wBAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM,IAAI,WAAW;wBAC/C,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS;wBACzD,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM,IAAI,WAAW;wBAC/C,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK;wBAC7B,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU;wBAC7D,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,EAAE,QAAQ;wBACrD,WAAW,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,WAAW;wBACjE,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU;wBAC7D,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM;wBAChC,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS;wBACzD,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU;wBAC7D,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,OAAO;qBACpC,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sEAAsE;gBACtE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACnC,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;IACzB,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,IAA4B;IAClE,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CAC5D,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,KAAK,CACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAc,EAAE,IAA4B;IACtE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/agents/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAgHpC,SAAS,YAAY;IACnB,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACzE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,WAAW,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiC;IAC5D,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE;YACJ,cAAc;YACd,qBAAqB;YACrB,cAAc;YACd,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;YACnB,6BAA6B;YAC7B,gBAAgB;SACjB;QACD,GAAG,EAAE,EAAE;QACP,GAAG,EAAE,IAAI;QACT,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B;;;;;WAKG;QACH,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnC,0EAA0E;QAC1E,wDAAwD;QACxD,SAAS,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;QACnC,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;QACtC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;QAClD,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,UAAU,EAAE;YACV,cAAc;YACd,qBAAqB;YACrB,UAAU;YACV,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;YACnB,6BAA6B;YAC7B,gBAAgB;SACjB;KACF;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,6CAA6C;QAC1D,OAAO,EAAE,UAAU;QACnB,yEAAyE;QACzE,8DAA8D;QAC9D,IAAI,EAAE,EAAE;QACR;;;;;;;;;;;WAWG;QACH,GAAG,EAAE,EAAE,uBAAuB,EAAE,qBAAqB,EAAE;QACvD,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,2DAA2D;QAC3D,QAAQ,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE;QAC3C,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,oEAAoE;QACpE,+BAA+B;QAC/B,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,0EAA0E;QAC1E,yDAAyD;QACzD,SAAS,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QAC9B,2EAA2E;QAC3E,yEAAyE;QACzE,qEAAqE;KACtE;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,MAAM;QACf,0EAA0E;QAC1E,kEAAkE;QAClE,IAAI,EAAE,EAAE;QACR;;;;;;;;;;;;;;;;;WAiBG;QACH,GAAG,EAAE;YACH,WAAW,EAAE,0BAA0B;YACvC,eAAe,EAAE,WAAW;SAC7B;QACD;;;;;;WAMG;QACH,QAAQ,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE;QACvC,GAAG,EAAE,IAAI;QACT;;;;;;;;;;;;WAYG;QACH,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,0EAA0E;QAC1E,yEAAyE;QACzE,8DAA8D;QAC9D,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,0EAA0E;QAC1E,0DAA0D;QAC1D,SAAS,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QAC9B;;;;;;;;;;;WAWG;KACJ;IACD,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE,OAAO;QAChB;;;;;;;;WAQG;QACH,IAAI,EAAE;YACJ,IAAI;YACJ,yCAAyC;YACzC,IAAI;YACJ,8DAA8D;SAC/D;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,aAAa;QACb,GAAG,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE;QACrC,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B;;;;;;;;WAQG;QACH,MAAM,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,CAAC;QAC7F,SAAS,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QAC9B;;;;;;;;;WASG;QACH,UAAU,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;QACzD,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;QAC3D;;;;;;;WAOG;KACJ;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,2CAA2C;QACxD,OAAO,EAAE,QAAQ;QACjB;;;;;;WAMG;QACH,IAAI,EAAE,CAAC,cAAc,CAAC;QACtB,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,GAAG,EAAE,EAAE,+BAA+B,EAAE,0BAA0B,EAAE;QACpE,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,2EAA2E;QAC3E,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,EAAE;YACN,wBAAwB;YACxB,sBAAsB;YACtB,kBAAkB;YAClB,gBAAgB;YAChB,uBAAuB;YACvB,gBAAgB;YAChB,kBAAkB;SACnB;QACD,SAAS,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QAC9B;;;;;;;;;WASG;KACJ;IACD;;;;;;;;;;;;OAYG;IACH,UAAU,EAAE;QACV,EAAE,EAAE,YAAY;QAChB,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM;QACzD,wEAAwE;QACxE,IAAI,EAAE,CAAC,SAAS,CAAC;QACjB,GAAG,EAAE,EAAE;QACP,GAAG,EAAE,KAAK;QACV,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,WAAW;QACnB,uEAAuE;QACvE,kEAAkE;QAClE,SAAS,EAAE,oBAAoB;QAC/B,MAAM,EAAE,KAAK;QACb,2EAA2E;QAC3E,yEAAyE;QACzE,gEAAgE;QAChE,WAAW,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,sCAAsC,CAAC;KAC3F;IACD,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,YAAY,EAAE;QACvB,IAAI,EAAE,EAAE;QACR,GAAG,EAAE,EAAE;QACP,GAAG,EAAE,KAAK;QACV,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,oEAAoE;QACpE,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,WAAW;QACtB,MAAM,EAAE,KAAK;QACb,sEAAsE;QACtE,yEAAyE;QACzE,qBAAqB;KACtB;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,CAAe;IACvC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,OAAO,eAAe;IAClB,QAAQ,CAA+B;IAE/C,YAAY,QAAuC;QACjD,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACtD,CAAC;IAED,oEAAoE;IACpE,MAAM,CAAC,IAAI;QACT,MAAM,MAAM,GAAiC,EAAE,GAAG,gBAAgB,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;gBACzE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;wBAAE,SAAS;oBAClD,qEAAqE;oBACrE,gDAAgD;oBAChD,IAAI,EAAE,KAAK,UAAU;wBAAE,SAAS;oBAChC,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;oBACxB,MAAM,CAAC,EAAE,CAAC,GAAG;wBACX,EAAE;wBACF,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,WAAW,IAAI,EAAE;wBACrD,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,OAAO,IAAI,EAAE;wBACzC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE;wBAChC,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,IAAI,EAAE;wBAC7B,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI;wBAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM,IAAI,WAAW;wBAC/C,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS;wBACzD,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM,IAAI,WAAW;wBAC/C,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK;wBAC7B,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU;wBAC7D,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,EAAE,QAAQ;wBACrD,WAAW,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE,WAAW;wBACjE,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU;wBAC7D,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM;wBAChC,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS;wBACzD,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU;wBAC7D,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,OAAO;qBACpC,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sEAAsE;gBACtE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACnC,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;IACzB,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,IAA4B;IAClE,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CAC5D,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,KAAK,CACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAc,EAAE,IAA4B;IACtE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC"}

package/dist/agents/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/agents/router.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,OAAO,EACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAoBD;;;;;;;;;GASG;AACH,qBAAa,aAAa;IAItB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAN5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAG1B,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,eAAe,EACzB,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI;IAGlD,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc;CAkDrE"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/agents/router.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,OAAO,EACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAoBD;;;;;;;;;GASG;AACH,qBAAa,aAAa;IAItB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAN5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAG1B,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,eAAe,EACzB,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI;IAGlD,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc;CAsDrE"}

package/dist/agents/router.js

@@ -1,5 +1,5 @@
 import { randomUUID } from 'node:crypto';
-import { encodeInjection, formatMessage, MESSAGE_RATE_LIMIT, } from '../protocol/index.js';
+import { encodeInjection, formatMessage, INJECT_SUBMIT, MESSAGE_RATE_LIMIT, } from '../protocol/index.js';
 /** Simple fixed-window counter, per sender address. */
 class RateLimiter {
     hits = new Map();
@@ -71,7 +71,7 @@ export class MessageRouter {
         try {
             // Attribution comes from the hub's own record of who is calling, never
             // from the sender's arguments, so it cannot be spoofed.
-            this.sessions.write(target.id, encodeInjection(formatMessage(fromAddr, body), mode));
+            this.sessions.inject(target.id, encodeInjection(formatMessage(fromAddr, body), mode), INJECT_SUBMIT);
             pty.markBusy();
             return record('delivered');
         }

package/dist/agents/router.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/agents/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,eAAe,EACf,aAAa,EACb,kBAAkB,GAEnB,MAAM,qBAAqB,CAAC;AAW7B,uDAAuD;AACvD,MAAM,WAAW;IACP,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE3C,KAAK,CAAC,GAAW;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC;QACjD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACjE,IAAI,GAAG,CAAC,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,aAAa;IAIL;IACA;IACA;IACA;IANF,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAE7C,YACmB,KAAY,EACZ,QAAwB,EACxB,QAAyB,EACzB,SAA+B;QAH/B,UAAK,GAAL,KAAK,CAAO;QACZ,aAAQ,GAAR,QAAQ,CAAgB;QACxB,aAAQ,GAAR,QAAQ,CAAiB;QACzB,cAAS,GAAT,SAAS,CAAsB;IAC/C,CAAC;IAEJ,IAAI,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAY;QACjD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE1B,MAAM,MAAM,GAAG,CAAC,KAA6B,EAAE,KAAc,EAAkB,EAAE;YAC/E,MAAM,CAAC,GAAY;gBACjB,EAAE;gBACF,QAAQ;gBACR,MAAM;gBACN,IAAI;gBACJ,MAAM;gBACN,WAAW,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI;gBACtD,aAAa,EAAE,KAAK;gBACpB,KAAK,EAAE,KAAK,IAAI,IAAI;aACrB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,EAAE,SAAS,EAAE,KAAK,KAAK,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;QACjF,CAAC,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,MAAM,CACX,QAAQ,EACR,wBAAwB,kBAAkB,CAAC,GAAG,iBAC5C,kBAAkB,CAAC,QAAQ,GAAG,IAChC,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,wBAAwB,MAAM,GAAG,CAAC,CAAC;QAExE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,QAAQ,EAAE,UAAU,MAAM,4BAA4B,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,OAAO,EAAE,MAAM,IAAI,WAAW,CAAC;QAE5C,IAAI,CAAC;YACH,uEAAuE;YACvE,wDAAwD;YACxD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACrF,GAAG,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,QAAQ,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/agents/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,kBAAkB,GAEnB,MAAM,qBAAqB,CAAC;AAW7B,uDAAuD;AACvD,MAAM,WAAW;IACP,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE3C,KAAK,CAAC,GAAW;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC;QACjD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACjE,IAAI,GAAG,CAAC,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,aAAa;IAIL;IACA;IACA;IACA;IANF,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAE7C,YACmB,KAAY,EACZ,QAAwB,EACxB,QAAyB,EACzB,SAA+B;QAH/B,UAAK,GAAL,KAAK,CAAO;QACZ,aAAQ,GAAR,QAAQ,CAAgB;QACxB,aAAQ,GAAR,QAAQ,CAAiB;QACzB,cAAS,GAAT,SAAS,CAAsB;IAC/C,CAAC;IAEJ,IAAI,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAY;QACjD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE1B,MAAM,MAAM,GAAG,CAAC,KAA6B,EAAE,KAAc,EAAkB,EAAE;YAC/E,MAAM,CAAC,GAAY;gBACjB,EAAE;gBACF,QAAQ;gBACR,MAAM;gBACN,IAAI;gBACJ,MAAM;gBACN,WAAW,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI;gBACtD,aAAa,EAAE,KAAK;gBACpB,KAAK,EAAE,KAAK,IAAI,IAAI;aACrB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,EAAE,SAAS,EAAE,KAAK,KAAK,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;QACjF,CAAC,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,MAAM,CACX,QAAQ,EACR,wBAAwB,kBAAkB,CAAC,GAAG,iBAC5C,kBAAkB,CAAC,QAAQ,GAAG,IAChC,IAAI,CACL,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,wBAAwB,MAAM,GAAG,CAAC,CAAC;QAExE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,QAAQ,EAAE,UAAU,MAAM,4BAA4B,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,OAAO,EAAE,MAAM,IAAI,WAAW,CAAC;QAE5C,IAAI,CAAC;YACH,uEAAuE;YACvE,wDAAwD;YACxD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAClB,MAAM,CAAC,EAAE,EACT,eAAe,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EACpD,aAAa,CACd,CAAC;YACF,GAAG,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,QAAQ,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF"}

package/dist/agents/shares.d.ts

@@ -0,0 +1,32 @@
+import type { ShareInfo } from '../protocol/index.js';
+import type { Store } from '../db/store.js';
+/**
+ * Per-session share tokens: the mechanism behind issue 14's "share this
+ * terminal by link".
+ *
+ * Unlike `TokenRegistry`, this is backed by the store rather than kept in
+ * memory - the whole point of the feature is that a link mailed to a
+ * reviewer still works after the hub restarts, until someone revokes it. The
+ * validity checks that make an FK to `session` impossible (see migration 9)
+ * live on `Hub`, not here: this class only knows how to mint, look up and
+ * forget a token, exactly as thin a wrapper over the store as `tokens.ts` is
+ * over its own map.
+ */
+export declare class Shares {
+    private readonly store;
+    constructor(store: Store);
+    list(): ShareInfo[];
+    /** The session a token grants, or null for an unknown or revoked one. */
+    resolve(token: string): string | null;
+    /**
+     * Mint a token for a session, or hand back the one it already has.
+     *
+     * Idempotent on purpose: clicking "share" again on a session that is
+     * already shared must not invalidate a link someone already holds - the
+     * unique index on `session_id` is what makes "already shared" a lookup
+     * rather than a race.
+     */
+    share(sessionId: string): string;
+    unshare(sessionId: string): void;
+}
+//# sourceMappingURL=shares.d.ts.map

package/dist/agents/shares.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shares.d.ts","sourceRoot":"","sources":["../../src/agents/shares.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C;;;;;;;;;;;GAWG;AACH,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,KAAK;IAEzC,IAAI,IAAI,SAAS,EAAE;IAInB,yEAAyE;IACzE,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIrC;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAQhC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAGjC"}

package/dist/agents/shares.js

@@ -0,0 +1,46 @@
+import { randomBytes } from 'node:crypto';
+/**
+ * Per-session share tokens: the mechanism behind issue 14's "share this
+ * terminal by link".
+ *
+ * Unlike `TokenRegistry`, this is backed by the store rather than kept in
+ * memory - the whole point of the feature is that a link mailed to a
+ * reviewer still works after the hub restarts, until someone revokes it. The
+ * validity checks that make an FK to `session` impossible (see migration 9)
+ * live on `Hub`, not here: this class only knows how to mint, look up and
+ * forget a token, exactly as thin a wrapper over the store as `tokens.ts` is
+ * over its own map.
+ */
+export class Shares {
+    store;
+    constructor(store) {
+        this.store = store;
+    }
+    list() {
+        return this.store.listShares();
+    }
+    /** The session a token grants, or null for an unknown or revoked one. */
+    resolve(token) {
+        return this.store.resolveShare(token);
+    }
+    /**
+     * Mint a token for a session, or hand back the one it already has.
+     *
+     * Idempotent on purpose: clicking "share" again on a session that is
+     * already shared must not invalidate a link someone already holds - the
+     * unique index on `session_id` is what makes "already shared" a lookup
+     * rather than a race.
+     */
+    share(sessionId) {
+        const existing = this.store.getShare(sessionId);
+        if (existing)
+            return existing.token;
+        const token = randomBytes(24).toString('base64url');
+        this.store.insertShare({ sessionId, token });
+        return token;
+    }
+    unshare(sessionId) {
+        this.store.removeShare(sessionId);
+    }
+}
+//# sourceMappingURL=shares.js.map

package/dist/agents/shares.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shares.js","sourceRoot":"","sources":["../../src/agents/shares.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,KAAY;QAAZ,UAAK,GAAL,KAAK,CAAO;IAAG,CAAC;IAE7C,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IACjC,CAAC;IAED,yEAAyE;IACzE,OAAO,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAiB;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/agents/wiring.d.ts

@@ -37,6 +37,14 @@ export interface WiringOutput {
      * it, so their models, themes and their own MCP servers survive the session.
      */
     opencodeConfig: string;
+    /**
+     * One more config file for Kilo, named by `KILO_CONFIG` and appended last
+     * to the list it already layers - the project's kilo.json, then the global
+     * ~/.config/kilo/kilo.json. The layers are deep-merged, so this file holds
+     * only what the hub is adding: the MCP server, and the brief under
+     * `instructions`. The user's own config is neither read nor rewritten.
+     */
+    kilocodeConfigPath: string;
 }
 /**
  * Where a session's brief is written. Exported because an agent with no

package/dist/agents/wiring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../src/agents/wiring.ts"],"names":[],"mappings":"AAGA,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7D;;;;GAIG;AAEH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtD;AAOD,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CAgD5D;AAwID;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CA0EtD"}
+{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../src/agents/wiring.ts"],"names":[],"mappings":"AAGA,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7D;;;;GAIG;AAEH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtD;AAOD,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CAyD5D;AA8KD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAuGtD"}