@vincemakes/kiso-code 0.40.6 → 0.41.0

package/dist/mode.d.ts

@@ -38,7 +38,7 @@ export declare function getMode(): Mode;
 export declare function setMode(m: Mode): void;
 /** The startup mode from env: KISO_MODE, or undefined when unset (the
  *  config layer's mode then applies — merge round B; the --mode flag is
- *  applied by main before the first makeAgent and wins over everything). */
+ *  applied by main before the first createCodingAgent and wins over everything). */
 export declare function modeFromEnv(): Mode | undefined;
 /** The six built-in mode tiers as chain extensions — named "mode:<tier>"
  *  so the runtime's decidedBy records exactly that (the runtime derives

package/dist/mode.js

@@ -56,7 +56,7 @@ export function setMode(m) {
 }
 /** The startup mode from env: KISO_MODE, or undefined when unset (the
  *  config layer's mode then applies — merge round B; the --mode flag is
- *  applied by main before the first makeAgent and wins over everything). */
+ *  applied by main before the first createCodingAgent and wins over everything). */
 export function modeFromEnv() {
     const raw = process.env.KISO_MODE;
     return MODES.find((x) => x === raw);

package/dist/readonly-shell.js

@@ -33,7 +33,7 @@
 import { statSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, isAbsolute, join, relative } from "node:path";
-import { isCredentialName } from "@vincemakes/kiso-tools-node";
+import { isCredentialName, isCredentialPath } from "@vincemakes/kiso-tools-node";
 import { getMode } from "./mode.js";
 import { HOME_SUBTREES, parseShell, realCase, resolveShellPath } from "./shell-words.js";
 // ── the predicates ──────────────────────────────────────────────────────
@@ -55,15 +55,11 @@ function scope(ctx, word) {
     }
     return null;
 }
-/** B4: credentials by the shell's own list — names the search corpus's
- *  rule does not cover, on the canonical path. (The corpus rule itself,
- *  shared with read_file and search_text, is not moved before the freeze:
- *  finding RO-F4, 0.41.0.) */
-const SHELL_CREDENTIAL_NAMES = new Set([".npmrc", ".pypirc", ".git-credentials", ".htpasswd"]);
-const SHELL_CREDENTIAL_PATHS = ["/.aws/credentials", "/.config/gh/hosts.yml", "/.docker/config.json", "/.kube/config"];
+/** B4, and since RO-F4 (0.40.7) the search corpus's own set: the shell and
+ *  the file tools ask ONE rule — names (`isCredentialName`) and the
+ *  directory-scoped paths (`isCredentialPath`) — on the canonical path. */
 function shellCredential(canonical) {
-    const folded = canonical.toLowerCase();
-    return SHELL_CREDENTIAL_NAMES.has(basename(folded)) || SHELL_CREDENTIAL_PATHS.some((s) => folded.endsWith(s));
+    return isCredentialName(basename(canonical).toLowerCase()) || isCredentialPath(canonical);
 }
 function content(ctx, word) {
     const s = scope(ctx, word);

package/dist/state.d.ts

@@ -204,7 +204,7 @@ export declare function setBody(value: Body): void;
 /** v2d: body output routes through the cell renderer — the single writer.
  *  bodyLog adds the trailing newline; internal newlines are preserved. */
 export declare function bodyLog(text: string, wrap?: "words"): void;
-/** TUI2-R2 ②/③: the session store makeAgent built — the ONE store per
+/** TUI2-R2 ②/③: the session store createCodingAgent built — the ONE store per
  *  process. The navigation surfaces need its read side (load) to project
  *  the badges, and a second store on the same root would be a second
  *  lock manager for a job that never writes. */
@@ -214,18 +214,22 @@ export declare let sessionStoreRef: {
 export declare function setSessionStore(value: {
     load(id: string): readonly StoreRecord[];
 }): void;
-/** The model name for the status bar — set by makeAgent. */
+/** The folder createCodingAgent built the store on — written there and by
+ *  the resume picker's folder switch, read by the listings. */
+export declare let activeStoreDir: string;
+export declare function setActiveStoreDir(value: string): void;
+/** The model name for the status bar — set by createCodingAgent. */
 export declare let agentModel: string;
 /** OR-1: the live model's ENDPOINT, set in the same call as the model so
  *  the two can never drift: the window lookup keys on (model, endpoint). */
 export declare let agentBaseUrl: string | undefined;
 export declare function setAgentModel(value: string, baseUrl?: string): void;
 /** merge round B: whether the agent runs on the faux provider (no real key) —
- *  set inside makeAgent, read by main for chat/resume's exhaustion check. */
+ *  set inside createCodingAgent, read by main for chat/resume's exhaustion check. */
 export declare let currentFaux: boolean;
 export declare function setCurrentFaux(value: boolean): void;
 /** merge round B: the merged config (user + trusted project) as resolved by the
- *  LAST makeAgent — /model and autoCompact resolve against it. */
+ *  LAST createCodingAgent — /model and autoCompact resolve against it. */
 export declare let mergedConfig: import("./config.js").KisoConfig;
 export declare function setMergedConfig(value: import("./config.js").KisoConfig): void;
 /** ADR-0005 Amendment 2: the retry the kernel announced and is waiting
@@ -270,7 +274,7 @@ export declare function upstreamOf(baseUrl: string | undefined): string | undefi
  * first reload — the effort-axis round produced that bug once already
  * from having two sources for the model.
  *
- * One variable, seeded by `makeAgent` from the startup flag and
+ * One variable, seeded by `createCodingAgent` from the startup flag and
  * overwritten by `/model`. Undefined means "resolve exactly as this
  * process did at startup", which is the right answer for a session that
  * never named a profile.
@@ -292,7 +296,7 @@ export declare function setCurrentProfileName(value: string | null): void;
  *  `chat()` drains them into its own replay, so no line is answered by the
  *  session being left and none is dropped. */
 export declare const queuedSwitchLines: string[];
-/** E1: the extensions loaded by makeAgent — their names feed the banner. */
+/** E1: the extensions loaded by createCodingAgent — their names feed the banner. */
 /** 0.40.0: whether the catastrophe floor is on (floor.ts) — the user
  *  config's `floor`, read where the chain is assembled. */
 /** 0.40.6: what /settings needs to name each value's layer — the two config
@@ -329,7 +333,7 @@ export declare function setExtensionLists(builtIn: readonly KisoExtension[], use
  *  different set. Null when no skills extension is loaded (or a user
  *  extension named "skills" shadows it and reports none). */
 export declare function loadedSkillsCatalog(): import("@vincemakes/kiso-skills-ext").SkillsCatalog | null;
-/** W21: the CURRENT agent's extensions array — set by makeAgent, the
+/** W21: the CURRENT agent's extensions array — set by createCodingAgent, the
  *  don't-ask-again writer pushes the generated extension into it so a
  *  first-time rule joins the chain at the NEXT run (the run's policies
  *  are fixed at its start; the array is shared by reference with the

package/dist/state.js

@@ -290,7 +290,7 @@ export function setBody(value) {
 export function bodyLog(text, wrap) {
     body.raw(text.split("\n"), wrap);
 }
-/** TUI2-R2 ②/③: the session store makeAgent built — the ONE store per
+/** TUI2-R2 ②/③: the session store createCodingAgent built — the ONE store per
  *  process. The navigation surfaces need its read side (load) to project
  *  the badges, and a second store on the same root would be a second
  *  lock manager for a job that never writes. */
@@ -298,7 +298,13 @@ export let sessionStoreRef = null;
 export function setSessionStore(value) {
     sessionStoreRef = value;
 }
-/** The model name for the status bar — set by makeAgent. */
+/** The folder createCodingAgent built the store on — written there and by
+ *  the resume picker's folder switch, read by the listings. */
+export let activeStoreDir = "";
+export function setActiveStoreDir(value) {
+    activeStoreDir = value;
+}
+/** The model name for the status bar — set by createCodingAgent. */
 export let agentModel = "faux";
 /** OR-1: the live model's ENDPOINT, set in the same call as the model so
  *  the two can never drift: the window lookup keys on (model, endpoint). */
@@ -308,13 +314,13 @@ export function setAgentModel(value, baseUrl) {
     agentBaseUrl = baseUrl;
 }
 /** merge round B: whether the agent runs on the faux provider (no real key) —
- *  set inside makeAgent, read by main for chat/resume's exhaustion check. */
+ *  set inside createCodingAgent, read by main for chat/resume's exhaustion check. */
 export let currentFaux = true;
 export function setCurrentFaux(value) {
     currentFaux = value;
 }
 /** merge round B: the merged config (user + trusted project) as resolved by the
- *  LAST makeAgent — /model and autoCompact resolve against it. */
+ *  LAST createCodingAgent — /model and autoCompact resolve against it. */
 export let mergedConfig = {};
 export function setMergedConfig(value) {
     mergedConfig = value;
@@ -366,7 +372,7 @@ export function upstreamOf(baseUrl) {
  * first reload — the effort-axis round produced that bug once already
  * from having two sources for the model.
  *
- * One variable, seeded by `makeAgent` from the startup flag and
+ * One variable, seeded by `createCodingAgent` from the startup flag and
  * overwritten by `/model`. Undefined means "resolve exactly as this
  * process did at startup", which is the right answer for a session that
  * never named a profile.
@@ -394,7 +400,7 @@ export function setCurrentProfileName(value) {
  *  `chat()` drains them into its own replay, so no line is answered by the
  *  session being left and none is dropped. */
 export const queuedSwitchLines = [];
-/** E1: the extensions loaded by makeAgent — their names feed the banner. */
+/** E1: the extensions loaded by createCodingAgent — their names feed the banner. */
 /** 0.40.0: whether the catastrophe floor is on (floor.ts) — the user
  *  config's `floor`, read where the chain is assembled. */
 /** 0.40.6: what /settings needs to name each value's layer — the two config
@@ -437,7 +443,7 @@ export function loadedSkillsCatalog() {
     const ext = loadedExtensions.find((e) => e.name === "skills");
     return ext?.catalog ?? null;
 }
-/** W21: the CURRENT agent's extensions array — set by makeAgent, the
+/** W21: the CURRENT agent's extensions array — set by createCodingAgent, the
  *  don't-ask-again writer pushes the generated extension into it so a
  *  first-time rule joins the chain at the NEXT run (the run's policies
  *  are fixed at its start; the array is shared by reference with the

package/dist/temp-sweep.d.ts

@@ -0,0 +1,12 @@
+export declare const LEGACY_MAX_AGE_MS: number;
+/** One startup never spends long here, whatever the temp directory holds. */
+export declare const SWEEP_LIMIT = 200;
+/** The mkdtemp prefix for a merge directory: this process's pid in the name. */
+export declare function mergeDirPrefix(kind: "mcp" | "skills"): string;
+/** Is a process with this pid running? EPERM means it is, and belongs to
+ *  someone else; only ESRCH says it is gone. */
+export declare function pidAlive(pid: number): boolean;
+/** Remove the merge directories whose owner is gone (and legacy ones a week
+ *  old). Returns the names removed. Every failure is skipped — a sweep is
+ *  housekeeping, never a reason for a session not to start. */
+export declare function sweepStaleMergeDirs(dir?: string, now?: number, alive?: (pid: number) => boolean): string[];

package/dist/temp-sweep.js

@@ -0,0 +1,76 @@
+/**
+ * 0.40.7 — the merge directories a killed kiso left behind.
+ *
+ * A project with its own `.kiso/mcp.json` or skills gets a merged copy in
+ * the temp directory (`kiso-mcp-*`, `kiso-skills-*`, trust-ui.ts). A clean
+ * exit removes it; `kill -9` does not, and macOS's temp cleaner removes old
+ * FILES but leaves directories — so every killed session left one behind
+ * for good (the owner's machine once held 449,956 of the test suite's).
+ *
+ * The directory's name now carries its owner's pid
+ * (`kiso-mcp-<pid>-XXXXXX`). At startup kiso removes the ones whose owner
+ * is gone; a live session's directory is never touched. Names from before
+ * this version carry no pid: those are removed only when untouched for a
+ * week, which no live session's merge can be (it is read at every reload).
+ * Only directories this user owns are considered; nothing else in the
+ * temp directory is read.
+ */
+import { lstatSync, readdirSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+export const LEGACY_MAX_AGE_MS = 7 * 24 * 3600_000;
+/** One startup never spends long here, whatever the temp directory holds. */
+export const SWEEP_LIMIT = 200;
+const OWNED = /^kiso-(?:mcp|skills)-(\d+)-[A-Za-z0-9]{6}$/;
+const LEGACY = /^kiso-(?:mcp|skills)-[A-Za-z0-9]{6}$/;
+/** The mkdtemp prefix for a merge directory: this process's pid in the name. */
+export function mergeDirPrefix(kind) {
+    return join(tmpdir(), `kiso-${kind}-${process.pid}-`);
+}
+/** Is a process with this pid running? EPERM means it is, and belongs to
+ *  someone else; only ESRCH says it is gone. */
+export function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return err.code === "EPERM";
+    }
+}
+/** Remove the merge directories whose owner is gone (and legacy ones a week
+ *  old). Returns the names removed. Every failure is skipped — a sweep is
+ *  housekeeping, never a reason for a session not to start. */
+export function sweepStaleMergeDirs(dir = tmpdir(), now = Date.now(), alive = pidAlive) {
+    let names;
+    try {
+        names = readdirSync(dir);
+    }
+    catch {
+        return [];
+    }
+    const uid = typeof process.getuid === "function" ? process.getuid() : undefined;
+    const removed = [];
+    for (const name of names) {
+        if (removed.length >= SWEEP_LIMIT)
+            break;
+        const owned = OWNED.exec(name);
+        if (owned === null && !LEGACY.test(name))
+            continue;
+        const full = join(dir, name);
+        try {
+            const st = lstatSync(full);
+            if (!st.isDirectory() || (uid !== undefined && st.uid !== uid))
+                continue;
+            const stale = owned !== null ? Number(owned[1]) !== process.pid && !alive(Number(owned[1])) : now - st.mtimeMs > LEGACY_MAX_AGE_MS;
+            if (!stale)
+                continue;
+            rmSync(full, { recursive: true, force: true });
+            removed.push(name);
+        }
+        catch {
+            // gone already, or not ours to remove
+        }
+    }
+    return removed;
+}

package/dist/trust-ui.js

@@ -6,13 +6,14 @@
  * decisions. All bodies moved verbatim from index.ts.
  */
 import { existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, symlinkSync, writeFileSync } from "node:fs";
-import { homedir, tmpdir } from "node:os";
+import { homedir } from "node:os";
 import { join } from "node:path";
 import { pathToFileURL } from "node:url";
 import { askDeclineAll, askView, projectTrustRows, projectTrustView, projectUntrustedNote, uncertainView, unansweredAskView } from "@vincemakes/kiso-tui";
 import { projectArtifacts, recordTrust, trustFor } from "@vincemakes/kiso-runtime";
 import { bodyLog, currentAgentExtensions, dock, extensionsDir, kisoHome, mergedTempPaths, neverInherited } from "./state.js";
 import { guardSavedAllow } from "./protected-writes.js";
+import { mergeDirPrefix } from "./temp-sweep.js";
 import { loadUserConfig, resolveProjectTrustPolicy } from "./config.js";
 import { getMode } from "./mode.js";
 /**
@@ -415,7 +416,7 @@ function applyMcpMerge(root) {
     // the paths the previous set owned deleted the file the new set had just
     // been merged into. One directory per merge, and the directory is what is
     // recorded, so the cleanup removes exactly what that merge created.
-    const dir = mkdtempSync(join(tmpdir(), "kiso-mcp-"));
+    const dir = mkdtempSync(mergeDirPrefix("mcp")); // 0.40.7: the owner's pid in the name (temp-sweep.ts)
     const temp = join(dir, "mcp.json");
     writeFileSync(temp, `${JSON.stringify(merged, null, 2)}\n`, "utf8");
     process.env.KISO_MCP_CONFIG = temp;
@@ -442,7 +443,7 @@ function applySkillsMerge(root) {
     originalUserSkillsDir ??= process.env.KISO_SKILLS_DIR ?? join(kisoHome(), "skills");
     const userDir = originalUserSkillsDir;
     const projectDir = join(root, "skills");
-    const merged = mkdtempSync(join(tmpdir(), "kiso-skills-"));
+    const merged = mkdtempSync(mergeDirPrefix("skills"));
     mergedTempPaths.push(merged);
     for (const dir of readdirSyncSafe(projectDir)) {
         symlinkSync(join(projectDir, dir), join(merged, dir)); // project wins on collision

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vincemakes/kiso-code",
-	"version": "0.40.6",
+	"version": "0.41.0",
 	"description": "kiso-code \u2014 the coding agent on kiso, the durable runtime for AI agents: kiso chat / kiso resume / kiso sessions.",
 	"type": "module",
 	"license": "MIT",
@@ -18,20 +18,20 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@vincemakes/kiso-ask-ext": "0.40.6",
-		"@vincemakes/kiso-core": "0.40.6",
-		"@vincemakes/kiso-evals": "0.40.6",
-		"@vincemakes/kiso-mcp-ext": "0.40.6",
-		"@vincemakes/kiso-provider-anthropic": "0.40.6",
-		"@vincemakes/kiso-provider-openai": "0.40.6",
-		"@vincemakes/kiso-provider-openai-responses": "0.40.6",
-		"@vincemakes/kiso-runtime": "0.40.6",
-		"@vincemakes/kiso-skills-ext": "0.40.6",
-		"@vincemakes/kiso-subagent-ext": "0.40.6",
-		"@vincemakes/kiso-task-ext": "0.40.6",
-		"@vincemakes/kiso-tools-node": "0.40.6",
-		"@vincemakes/kiso-tui": "0.40.6",
-		"@vincemakes/kiso-tui-cells": "0.40.6"
+		"@vincemakes/kiso-ask-ext": "0.41.0",
+		"@vincemakes/kiso-core": "0.41.0",
+		"@vincemakes/kiso-evals": "0.41.0",
+		"@vincemakes/kiso-mcp-ext": "0.41.0",
+		"@vincemakes/kiso-provider-anthropic": "0.41.0",
+		"@vincemakes/kiso-provider-openai": "0.41.0",
+		"@vincemakes/kiso-provider-openai-responses": "0.41.0",
+		"@vincemakes/kiso-runtime": "0.41.0",
+		"@vincemakes/kiso-skills-ext": "0.41.0",
+		"@vincemakes/kiso-subagent-ext": "0.41.0",
+		"@vincemakes/kiso-task-ext": "0.41.0",
+		"@vincemakes/kiso-tools-node": "0.41.0",
+		"@vincemakes/kiso-tui": "0.41.0",
+		"@vincemakes/kiso-tui-cells": "0.41.0"
 	},
 	"devDependencies": {
 		"@types/node": "^26.1.2",