@vincemakes/kiso-code 0.1.14 → 0.1.16

package/dist/mode.js

@@ -0,0 +1,93 @@
+/**
+ * Modes — the five built-in approval tiers, built ON the E1 policy chain
+ * (the kernel is untouched). Each tier is an in-process "mode:<name>"
+ * extension whose decide() is live — it only speaks when it is the
+ * CURRENT tier (otherwise abstain = no opinion, ADR-0042), so /mode
+ * switches take effect immediately. The extension NAME rides the runtime's decidedBy
+ * field: an automated denial records decidedBy: "mode:<name>" — the
+ * audit sell. User-level extensions stay on the chain AFTER the mode
+ * tiers; a user deny always wins (the chain's deny>ask>allow
+ * monotonicity — bypass cannot override an extension deny).
+ */
+export const MODES = ["manual", "default", "accept-edits", "plan", "bypass"];
+/** The read-only tool set (plan): reading is allowed, everything else
+ *  denied with the guiding reason. */
+const READ_TOOLS = new Set(["read_file", "list_dir", "search_text", "read_skill"]);
+let current = "default";
+export function getMode() {
+    return current;
+}
+export function setMode(m) {
+    current = m;
+}
+/** The startup mode: KISO_MODE env (or the --mode flag — the CLI applies
+ *  it before the first makeAgent). */
+export function modeFromEnv() {
+    const raw = process.env.KISO_MODE;
+    const m = MODES.find((x) => x === raw);
+    return m ?? "default";
+}
+/** The per-tier verdict for a tool call — only when this tier is current. */
+function tierVerdict(tier, call) {
+    if (tier !== current)
+        return { action: "abstain" }; // not our tier — no opinion
+    switch (tier) {
+        case "manual":
+            return { action: "ask" }; // every tool asks
+        case "default":
+            if (READ_TOOLS.has(call.name))
+                return { action: "allow" };
+            if (call.name === "write_file" || call.name === "edit_file" || call.name === "shell")
+                return { action: "ask" };
+            // Abstain (ADR-0042): an extension-provided tool is the
+            // EXTENSIONS' business — the tier neither allows nor denies.
+            // The chain falls to the ask flow when nobody else speaks, so
+            // an uncovered external tool STILL meets the human (the P2
+            // finding: "allow"-as-no-opinion auto-approved it).
+            return { action: "abstain" };
+        case "accept-edits":
+            if (READ_TOOLS.has(call.name))
+                return { action: "allow" };
+            if (call.name === "write_file" || call.name === "edit_file")
+                return { action: "allow" };
+            if (call.name === "shell")
+                return { action: "ask" };
+            return { action: "abstain" }; // see "default"
+        case "plan":
+            if (READ_TOOLS.has(call.name))
+                return { action: "allow" };
+            return { action: "deny", reason: "plan mode: read-only" };
+        case "bypass":
+            return { action: "allow" }; // everything — a REAL allow, never an abstain
+    }
+}
+/** The five built-in mode tiers as chain extensions — named "mode:<tier>"
+ *  so the runtime's decidedBy records exactly that (the runtime derives
+ *  approvalPolicies from extensions[].approvals, tagging each with the
+ *  extension name). The CURRENT tier is first: an all-allow chain records
+ *  decidedBy = the FIRST SPEAKER, so an auto-allow under the startup mode
+ *  names that mode honestly. Order never affects verdicts — the chain is
+ *  deny>ask>allow over the SPEAKING verdicts (abstain = no opinion), so a
+ *  user extension's deny wins over any mode tier, bypass included (the
+ *  monotonicity e2e pins it). */
+export function modeExtensions() {
+    return [...MODES.filter((m) => m === current), ...MODES.filter((m) => m !== current)].map((m) => ({
+        name: `mode:${m}`,
+        approvals: [
+            {
+                decide: async (payload) => tierVerdict(m, { name: payload.name }),
+            },
+        ],
+    }));
+}
+/** The plan tier's system prompt addition — injected at startup when the
+ *  initial mode is plan (the session prompt is fixed at creation; runtime
+ *  switches are guided by the deny reason). */
+export function modeSystemPrompt() {
+    if (current !== "plan")
+        return undefined;
+    return ("plan mode: read-only. You may inspect the workspace (read_file, list_dir, search_text, " +
+        "read_skill) but every write/edit/shell call is DENIED with 'plan mode: read-only'. " +
+        "Produce a concrete plan (files, searches, proposed edits) as your output; the human " +
+        "switches to another mode to execute it.");
+}

package/dist/render.d.ts

@@ -16,6 +16,7 @@ export interface Palette {
     readonly blue: string;
     readonly dim: string;
     readonly red: string;
+    readonly green: string;
     readonly reset: string;
 }
 export declare const COLOR_ON: Palette;

package/dist/render.js

@@ -3,8 +3,8 @@
  * the lines a human sees. Colors are raw ANSI — no dependencies.
  */
 import { canonicalTargetPath } from "@vincemakes/kiso-tools-node";
-export const COLOR_ON = { blue: "\x1b[38;5;75m", dim: "\x1b[2m", red: "\x1b[31m", reset: "\x1b[0m" };
-export const COLOR_OFF = { blue: "", dim: "", red: "", reset: "" };
+export const COLOR_ON = { blue: "\x1b[38;5;75m", dim: "\x1b[2m", red: "\x1b[31m", green: "\x1b[32m", reset: "\x1b[0m" };
+export const COLOR_OFF = { blue: "", dim: "", red: "", green: "", reset: "" };
 export function palette() {
     return process.env.NO_COLOR === undefined && process.stdout.isTTY ? COLOR_ON : COLOR_OFF;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vincemakes/kiso-code",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "kiso CLI — the coding-agent reference product: kiso chat / kiso resume / kiso sessions.",
   "type": "module",
   "license": "MIT",
@@ -18,12 +18,12 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@vincemakes/kiso-core": "0.1.14",
-    "@vincemakes/kiso-evals": "0.1.14",
-    "@vincemakes/kiso-provider-anthropic": "0.1.14",
-    "@vincemakes/kiso-provider-openai": "0.1.14",
-    "@vincemakes/kiso-runtime": "0.1.14",
-    "@vincemakes/kiso-tools-node": "0.1.14"
+    "@vincemakes/kiso-core": "0.1.16",
+    "@vincemakes/kiso-evals": "0.1.16",
+    "@vincemakes/kiso-provider-anthropic": "0.1.16",
+    "@vincemakes/kiso-provider-openai": "0.1.16",
+    "@vincemakes/kiso-runtime": "0.1.16",
+    "@vincemakes/kiso-tools-node": "0.1.16"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",