@songsid/agend 2.3.2-beta.1 → 2.3.2-beta.10

package/dist/backend/kiro-retired-model.js

@@ -0,0 +1,160 @@
+/**
+ * #2648: a kiro conversation saved with a model kiro has since retired. Resumed as is, kiro answers every start with
+ * "Model unavailable — use /model to switch", and an instance with no model of its own never gets past it.
+ *
+ * `--model` on a resume overrides the conversation's saved model in every engine and launch form (probed on 2.30.0:
+ * classic and TUI, interactive and not); the model given answers and becomes the saved one. So, for an instance with
+ * no model of its own (none on the instance and none inherited from the fleet):
+ *   1. at launch, the conversation it resumes is read (its own row or session file, read-only); a saved model that is
+ *      not in kiro's cached model list launches with kiro's default model instead;
+ *   2. a model error after a resume that (1) could not foresee restarts it once on that default, per conversation;
+ *   3. the switch is announced once per conversation.
+ * An instance whose own model is the retired one is a configuration error: it is said once, never switched (4).
+ *
+ * The records live in the instance's directory (kiro-model.json); a missing or damaged file reads as empty.
+ */
+import { readFileSync } from "node:fs";
+import { readFile, stat } from "node:fs/promises";
+import { join } from "node:path";
+import Database from "better-sqlite3";
+import { atomicWriteFileSync } from "../atomic-write.js";
+import { CLI_ENV_TTL_MS } from "./types.js";
+import { kiroDirectoryKeys } from "./kiro-identity.js";
+/** kiro's own default model: what `--list-models` names `default_model` (2.30.0: "auto", which kiro routes itself). */
+export const KIRO_FALLBACK_MODEL = "auto";
+const RECORD_FILE = "kiro-model.json";
+/** Bounds the records an instance keeps (one per conversation it has had switched or reported). */
+const MAX_ENTRIES = 32;
+/** A v2 session file larger than this is not read on the launch path (the model sits near its top, but JSON is whole). */
+const MAX_SESSION_FILE_BYTES = 8 * 1024 * 1024;
+function empty() {
+    return { switched: Object.create(null), restarted: [], notified: [] };
+}
+export function readKiroModelRecords(instanceDir) {
+    const out = empty();
+    let raw;
+    try {
+        raw = JSON.parse(readFileSync(join(instanceDir, RECORD_FILE), "utf-8"));
+    }
+    catch {
+        return out;
+    }
+    if (!raw || typeof raw !== "object")
+        return out;
+    const r = raw;
+    if (r.switched && typeof r.switched === "object") {
+        for (const [id, v] of Object.entries(r.switched)) {
+            const s = v;
+            if (!s || typeof s.to !== "string" || !s.to)
+                continue;
+            out.switched[id] = { from: typeof s.from === "string" ? s.from : null, to: s.to, announced: s.announced === true };
+        }
+    }
+    const strings = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string") : [];
+    out.restarted = strings(r.restarted);
+    out.notified = strings(r.notified);
+    return out;
+}
+export function writeKiroModelRecords(instanceDir, records) {
+    const switched = Object.entries(records.switched).slice(-MAX_ENTRIES);
+    atomicWriteFileSync(join(instanceDir, RECORD_FILE), JSON.stringify({
+        switched: Object.fromEntries(switched),
+        restarted: records.restarted.slice(-MAX_ENTRIES),
+        notified: records.notified.slice(-MAX_ENTRIES),
+    }) + "\n", { mode: 0o600 });
+}
+/**
+ * v1: the model a conversation was saved with, or null when it cannot be read (never an error: step 2 covers it). The
+ * owned row only — this directory's keys and this conversation id, through the (key, updated_at) index — in a
+ * read-only connection with a short busy timeout. Synchronous, on the launch path: one indexed row.
+ */
+export function readKiroV1SavedModel(launch) {
+    let db = null;
+    try {
+        db = new Database(launch.dbPath, { readonly: true, fileMustExist: true, timeout: 200 });
+        const [a, b = a, c = b] = kiroDirectoryKeys(launch.workingDirectory);
+        const row = db.prepare("SELECT json_extract(value, '$.model_info.model_id') AS m FROM conversations_v2 INDEXED BY idx_conversations_v2_key_updated"
+            + " WHERE key IN (?, ?, ?) AND conversation_id = ? LIMIT 1").get(a, b, c, launch.id);
+        return typeof row?.m === "string" && row.m ? row.m : null;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        try {
+            db?.close();
+        }
+        catch { /* closed */ }
+    }
+}
+/**
+ * v2: the model in a session file's `rts_model_state`, or null. Asynchronous — session files are never read on the
+ * fleet loop (#1417) — so it runs in the launch's preparation, for the conversation the instance has recorded.
+ */
+export async function readKiroV2SavedModel(sessionsDir, id) {
+    if (!/^[A-Za-z0-9-]{8,64}$/.test(id))
+        return null;
+    const path = join(sessionsDir, `${id}.json`);
+    try {
+        if ((await stat(path)).size > MAX_SESSION_FILE_BYTES)
+            return null;
+        const session = JSON.parse(await readFile(path, "utf-8"));
+        const model = session?.session_state?.rts_model_state?.model_info?.model_id;
+        return typeof model === "string" && model ? model : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** kiro's model list from AgEnD's cached probe (cli-env/kiro-cli.json); null when missing, damaged or stale. */
+export function readKiroKnownModels(agendHome, now = Date.now()) {
+    try {
+        const env = JSON.parse(readFileSync(join(agendHome, "cli-env", "kiro-cli.json"), "utf-8"));
+        if (typeof env?.probedAt !== "number" || now - env.probedAt >= CLI_ENV_TTL_MS)
+            return null;
+        const models = new Set((env.models ?? []).map(m => m?.id).filter((id) => typeof id === "string" && !!id));
+        if (models.size === 0)
+            return null;
+        const defaultModel = typeof env.currentModel === "string" && models.has(env.currentModel) ? env.currentModel : KIRO_FALLBACK_MODEL;
+        return { models, defaultModel };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * What a kiro model error should do. `ownModel` = the model this launch was given from the instance's (or fleet's)
+ * configuration; `launchModel` = the --model it ran with (its own, or a fallback from a switch); `conversation` = the
+ * resumed conversation, null for a fresh one. Records what it decides.
+ */
+export function decideKiroModelError(instanceDir, launch, fallbackModel) {
+    const records = readKiroModelRecords(instanceDir);
+    const save = () => { try {
+        writeKiroModelRecords(instanceDir, records);
+        return true;
+    }
+    catch {
+        return false;
+    } };
+    if (!launch.ownModel && launch.conversation && !launch.launchModel && !records.restarted.includes(launch.conversation)) {
+        const before = records.switched[launch.conversation];
+        records.restarted.push(launch.conversation);
+        records.switched[launch.conversation] = { from: before?.from ?? null, to: fallbackModel, announced: false };
+        // The restart is the record's to authorize: one that cannot be committed would restart again on the same error,
+        // and the next launch would not know to switch. Then it is only said (#2649 review).
+        if (save())
+            return { kind: "restart", model: fallbackModel };
+        records.restarted.pop();
+        if (before)
+            records.switched[launch.conversation] = before;
+        else
+            delete records.switched[launch.conversation];
+    }
+    const key = `${launch.conversation ?? "-"}|${launch.launchModel ?? "-"}`;
+    if (records.notified.includes(key))
+        return { kind: "quiet" };
+    records.notified.push(key);
+    save();
+    return { kind: "notify", configured: launch.ownModel };
+}
+//# sourceMappingURL=kiro-retired-model.js.map

package/dist/backend/kiro-retired-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kiro-retired-model.js","sourceRoot":"","sources":["../../src/backend/kiro-retired-model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,uHAAuH;AACvH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,mGAAmG;AACnG,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,0HAA0H;AAC1H,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAY/C,SAAS,KAAK;IACZ,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAoC,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,CAAC;IAAC,CAAC;IACtG,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAChD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAmC,CAAC,EAAE,CAAC;YAC5E,MAAM,CAAC,GAAG,CAAoC,CAAC;YAC/C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,SAAS;YACtD,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QACrH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtH,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrC,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,WAAmB,EAAE,OAAyB;IAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;IACtE,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;QACjE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC;QAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC;KAC/C,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAgE;IACnG,IAAI,EAAE,GAA6B,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,4HAA4H;cAC/I,yDAAyD,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAgC,CAAC;QACtH,OAAO,OAAO,GAAG,EAAE,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,IAAI,CAAC;YAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,EAAU;IACxE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,sBAAsB;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAsF,CAAC;QAC/I,MAAM,KAAK,GAAG,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,CAAC;QAC5E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACrE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,CACP,CAAC;QACnF,IAAI,OAAO,GAAG,EAAE,QAAQ,KAAK,QAAQ,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,IAAI,cAAc;YAAE,OAAO,IAAI,CAAC;QAC3F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACnI,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAmB,EACnB,MAA4F,EAC5F,aAAqB;IAErB,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,GAAY,EAAE,GAAG,IAAI,CAAC;QAAC,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACvH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACrD,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC5G,gHAAgH;QAChH,qFAAqF;QACrF,IAAI,IAAI,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAC7D,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;QACxB,IAAI,MAAM;YAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC;;YAAM,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,YAAY,IAAI,GAAG,IAAI,MAAM,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC;IACzE,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC7D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AACzD,CAAC"}

package/dist/backend/kiro.d.ts

@@ -1,5 +1,7 @@
-import { type BackendAgentSwitch, type CliBackend, type CliBackendConfig, type ErrorPattern, type StartupDialog, type RuntimeDialog, type SteerComposerMode } from "./types.js";
+import { type BackendAgentSwitch, type CliBackend, type CliBackendConfig, type ErrorPattern, type StartupDialog, type RuntimeDialog, type RemoteInputCard, type RemoteQuestionCard, type SteerComposerMode } from "./types.js";
+import { type KiroModelErrorVerdict } from "./kiro-retired-model.js";
 import type { KiroLogLaunch } from "../kiro-log-gate.js";
+import type { KiroTranscriptLaunch } from "../transcript-sources.js";
 export declare const KIRO_LEGACY_UI_MIN = "1.27.0";
 export declare const KIRO_EFFORT_FLAG_MIN = "2.6.0";
 /** Oldest kiro-cli AgEnD claims: older ones still launch, with a warning. */
@@ -14,7 +16,7 @@ export declare const KIRO_INSTANCE_AGENT_MIN = "2.21.0";
  * the binary's own --help instead of the version table, and the operator is
  * told the version is unverified.
  */
-export declare const KIRO_TESTED_MAX = "2.33.0";
+export declare const KIRO_TESTED_MAX = "2.34.0";
 /**
  * kiro-cli versions, per TUI front-end, whose mid-turn steering AgEnD drives (#1405). Only kiro's TUI steers — typed
  * input while a turn runs is injected into it ("steer", the default) or held for its end ("queue", Ctrl+S toggles); the
@@ -22,6 +24,8 @@ export declare const KIRO_TESTED_MAX = "2.33.0";
  * queued message mid-tool — has been captured (tests/fixtures/kiro-steer-1405, 2026-10-08: 2.27.1 `--tui
  * --agent-engine=v2` and `--v3`, 2.28.0 `--tui --agent-engine=v2`; identical rows on all three). Any other version,
  * 2.28.0's v3, the legacy UI and an undetected version all deliver a steer as an ordinary message after the turn.
+ * 2.34.0 TUI was checked on the user-authorized #2598 D5 run (tests/fixtures/kiro-2.34.0-tui-d5):
+ * native steer during a read-only tool, a fleet message queued mid-tool, and a native queue entry in the busy turn.
  */
 export declare const KIRO_STEER_VERIFIED: Readonly<Record<string, ReadonlyArray<"tui" | "v3">>>;
 export declare function readKiroSteerComposer(pane: string): SteerComposerMode | null;
@@ -59,6 +63,41 @@ export declare function kiroTrustPromptState(pane: string): KiroLaunchPromptStat
  * mid-session "cancel" and notice variants, and any other shape, are active with an unknown cursor — held, never keyed.
  */
 export declare function kiroWorkspaceTrustState(pane: string): KiroLaunchPromptState;
+/**
+ * #2587: kiro-cli 2.34.0's V3 engine answers an MCP server's `elicitation/create` (a tool asking the user for input)
+ * with a card in place of the composer: a divider, `Input requested · <server>`, a divider, the server's message and
+ * one row per form field then Submit / Decline (form mode) — or Host, URL and Open in browser / Copy URL / I'll open it
+ * myself / Decline / Cancel (url mode) — with exactly one `❯` cursor row, a divider, and the key hints as the last row
+ * (tests/fixtures/kiro-2.34.0-audit). Bottom-anchored: the card is live only while it is what the pane ends with. The
+ * answer can carry credentials or a sign-in, so it is the person's: never a key, and no delivery's Enter may land in it.
+ */
+export declare function kiroMcpInputRequestActive(pane: string): boolean;
+/**
+ * #2592: kiro's V3 engine shows the agent's question to the user (`question_request`) as a card in place of the
+ * composer: a divider, `Question` (or `<name> > Question`), the question, numbered options (a description row under
+ * one, `(recommended)` after one) and `Type a different answer…`, a divider, and the key hints as the last row — or, in
+ * an option's sub-options, `[✓] <title>` rows and `esc to go back · … · space to toggle · ↵ to submit`
+ * (tests/fixtures/kiro-question-2592; unchanged from 2.33.1 to 2.34.0). Any typed character turns the card into a free
+ * answer and Enter submits it, so a delivered message would become the answer to a question nobody read. The person
+ * answers it in the pane (the user's decision on #2592); it is never keyed. Bottom-anchored like
+ * kiroMcpInputRequestActive: the header is the row right under the nearest divider above the key hints' divider.
+ */
+export declare function kiroQuestionCardActive(pane: string): boolean;
+/**
+ * #2675: the live Question card (see kiroQuestionCardActive), read for a person to answer from the chat: the question,
+ * the numbered options (`(recommended)` and the description row under one), the typed-answer row, and where the `❯`
+ * is (tui.js `A0`; tests/fixtures/kiro-question-2592). On a sub-options page the rows are the `[✓]` boxes; while an
+ * answer is being typed the last row is `❯ <text>`. A row the shapes above do not account for is a wrapped title (the
+ * card's own indent) or description (deeper), joined to the row it continues; one before any option belongs to the
+ * question. Null when the card is not live, or when it is in a shape this reader does not know.
+ */
+export declare function readKiroQuestionCard(pane: string): RemoteQuestionCard | null;
+/**
+ * #2675: the live MCP `Input requested` card (see kiroMcpInputRequestActive), read for the chat: the server, the body
+ * as painted, with the `URL:` row masked (a sign-in link stays in the pane), its action rows, and the `❯` row. Its
+ * identity is the server, the mode, the message's first row and the actions: moving or filling in a field keeps it.
+ */
+export declare function readKiroMcpInputCard(pane: string): RemoteInputCard | null;
 /**
  * Kiro's service-unavailable path opens the same picker as `/model`, but only
  * the former needs incident escalation. The runtime scanner and delivery gate
@@ -116,6 +155,15 @@ export declare const KIRO_CLASSIC_NUDGE_V3: KiroLaunchPromptSpec;
  * flag; the quoted names in its description are the fallback.
  */
 export declare function parseKiroAgentEngines(help: string): string[] | null;
+/**
+ * #2598 (D1): kiro-cli-chat skips its self-update when this is set (2.30.0 and 2.34.0 both read it). AgEnD pins the
+ * kiro version it has audited; an in-place update can swap the engine a running fleet depends on (3.0 drops legacy).
+ * Every chat AgEnD starts carries it: the instance launch (a shell prefix) and the probes (their child env). The
+ * host-wide `app.disableAutoupdates` setting is the operator's half; this holds even where that was never set.
+ */
+export declare const KIRO_NO_AUTO_UPDATE = "KIRO_NO_AUTO_UPDATE";
+/** A kiro child's environment: the given one (default: ours) with self-update off. */
+export declare function kiroChildEnv(base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
 /**
  * Probe once per binary generation. A version AgEnD has run (<= TESTED_MAX)
  * is answered from the table without a second CLI call; anything newer, or a
@@ -211,6 +259,8 @@ export declare class KiroBackend implements CliBackend {
     private activeTrustAll;
     /** Version-gate notice for the launch just built (consumeLaunchWarning). */
     private launchWarning;
+    /** #2648: what this launch's model came from, for a model error to be judged by (decideKiroModelError). */
+    private launchModels;
     /**
      * What this launch attempt resumes and as which agent (#906), resolved once per attempt in writeConfig — it claims
      * conversations and records fresh starts — and read by the buildCommand that follows it.
@@ -221,6 +271,8 @@ export declare class KiroBackend implements CliBackend {
     /** #1218: the last launch built in full (cleared when a build starts, set only when it returns). */
     private builtLaunch;
     private preparedV2Store;
+    /** #2648: the saved model of the v2 conversation this instance has recorded, read in prepareLaunch (off the loop). */
+    private preparedV2Model;
     private storePreparation;
     private storeKey;
     private readPreparedV2Store;
@@ -273,6 +325,18 @@ export declare class KiroBackend implements CliBackend {
     private agentSpec;
     /** A shared file AgEnD could not bring to the state isolation needs: said, never reported as isolated. */
     private noteShared;
+    /**
+     * #2648 steps 1 and 3: the model a resumed conversation is launched on instead of its saved one, or null to launch as
+     * before. Only for an instance with no model of its own. The conversation's current saved model decides, every
+     * launch: one kiro's cached list no longer has is switched to kiro's default; one it has — or, without a list, one
+     * other than the model that failed (a later /model choice, or the default kiro saved after a switch) — is launched
+     * as saved, even after an earlier switch (#2649 review). Only when the saved model cannot be read does a recorded
+     * switch (step 2's restart) still apply. Announced once per conversation; the record also keeps that dedupe.
+     */
+    private retiredModelFallback;
+    private saveModelRecords;
+    /** #2648 steps 2 and 4: what a model error on this launch should do (records it); null before any launch. */
+    onModelError(): KiroModelErrorVerdict | null;
     private addLaunchWarning;
     /**
      * The launch plan of one attempt (#906, design §2/§5): the engine the plan pins, and — when this kiro-cli has
@@ -319,6 +383,11 @@ export declare class KiroBackend implements CliBackend {
     getRuntimeDialogs(): RuntimeDialog[];
     getContextUsage(): number | null;
     logLaunch(): KiroLogLaunch | null;
+    /**
+     * #2598 B1: the store is the launch's engine's (v1 = the classic sqlite store, v2 = the TUI's session files), and the
+     * conversation is the one the launch resumed by id. A fresh or legacy-mode launch owns no id yet.
+     */
+    transcriptLaunch(): KiroTranscriptLaunch | null;
     getSessionId(): string | null;
     getQuitCommand(): string;
     getCompactCommand(): string;