@vincemakes/kiso-code 0.39.2 → 0.40.0

package/dist/index.d.ts

@@ -24,6 +24,7 @@
  * makeAgent, and main.
  */
 import { type ContextPolicy } from "@vincemakes/kiso-runtime";
+import { type SessionRoute } from "./projects.js";
 export { applyProjectMerges } from "./trust-ui.js";
 /**
  * A area: the coding-agent system prompt — ONE constant, byte-stable for the
@@ -38,11 +39,17 @@ export declare const SYSTEM_PROMPT = "You are kiso, a coding agent. You work in
  * return it as an injected section, or "" when none exists. Truncated at
  * 8KB with an explicit note. Pure — read once per session, so the prompt
  * is byte-stable for the session's lifetime.
+ *
+ * kiso never serves its own credential store to a model, and this read is
+ * the one that needs no model at all: a cloned repository whose AGENTS.md
+ * is a symlink to the store would put it in the SYSTEM PROMPT of every
+ * request, with no tool call and no trust prompt. A file that resolves to
+ * a protected one is skipped as though absent.
  */
-export declare function readProjectInstructions(cwd: string): string;
+export declare function readProjectInstructions(cwd: string, protectedFiles?: readonly string[]): string;
 /** A area: the session's system prompt — the constant plus any project
  *  instructions found in the workspace. Deterministic per cwd. */
-export declare function composeSystemPrompt(cwd: string): string;
+export declare function composeSystemPrompt(cwd: string, protectedFiles?: readonly string[]): string;
 /**
  * E6: the run-start context policy, OFF unless env-armed (invalid values
  * are ABSENT, never a crash — the autoCompactFromEnv convention).
@@ -61,3 +68,15 @@ export declare function composeSystemPrompt(cwd: string): string;
  * arms the session-aware override (MIN_TURNS = the no-fire guard).
  */
 export declare function contextPolicyFromEnv(): ContextPolicy | undefined;
+export { workspaceRoot } from "./state.js";
+/**
+ * 0.40.0 (the owner's dogfood: a uooki session resumed from flowpix2) —
+ * whether a session id may open in this project. Its own folder: yes. A
+ * session another project RECORDED: refused, with where to go. One whose
+ * project is unknown, or was only inferred, is never refused and never
+ * moved (the lead's ruling: a resume changes no placement) — it opens where
+ * it is, and the line says the tools work here. A pure read. `null` = not
+ * found anywhere (the caller's own rule applies: a new session, or "no
+ * such session").
+ */
+export declare function routeSession(id: string): SessionRoute | null;