@vincemakes/kiso-code 0.46.1 → 0.47.0

package/dist/auth/oauth/chatgpt.js

@@ -18,6 +18,7 @@
  */
 import { createServer } from "node:http";
 import { RefreshRejectedError } from "./index.js";
+import { callbackPage } from "./page.js";
 import { generatePkce, randomState } from "./pkce.js";
 export const CHATGPT = {
     providerId: "chatgpt",
@@ -122,30 +123,46 @@ export function credentialFromTokens(tokens) {
         throw new Error("ChatGPT sign-in: the access token carries no chatgpt_account_id claim — signed in to something the backend will not serve");
     return { type: "oauth", access: tokens.access, refresh: tokens.refresh, expires: tokens.expires, accountId, savedAt: Date.now() };
 }
-const PAGE = (title, body) => `<!doctype html><meta charset="utf-8"><title>${title}</title><body style="font:16px system-ui;padding:2rem"><h1>${title}</h1><p>${body}</p></body>`;
 /** The local callback: one code for one state, or null when the port cannot
  *  be bound (the paste path takes over). */
 export function startCallbackServer(state, host, port) {
     return new Promise((resolve) => {
         let settle;
-        const waited = new Promise((r) => {
+        let fail;
+        const waited = new Promise((r, j) => {
             settle = r;
+            fail = j;
         });
+        // a failure that lands after the paste path won the race has no one
+        // awaiting it — it must not become an unhandled rejection
+        waited.catch(() => { });
         const server = createServer((req, res) => {
             const url = new URL(req.url ?? "", `http://${host}`);
-            const reply = (status, title, body) => {
+            // Graphite R3c: the page looks like kiso.work (page.ts)
+            const reply = (status, page) => {
                 res.statusCode = status;
                 res.setHeader("Content-Type", "text/html; charset=utf-8");
-                res.end(PAGE(title, body));
+                res.end(callbackPage(page));
             };
             if (url.pathname !== "/auth/callback")
-                return reply(404, "Not found", "This is kiso's sign-in callback.");
+                return reply(404, { kind: "note", state: "not found", title: "Nothing here.", body: "This is kiso's sign-in callback. Return to your terminal." });
             if (url.searchParams.get("state") !== state)
-                return reply(400, "State mismatch", "The sign-in did not start from this kiso. Start again.");
+                return reply(400, { kind: "fail", state: "state mismatch", title: "Start again.", body: "This sign-in did not start from the kiso that is waiting. Run kiso login chatgpt again in your terminal." });
+            // R3c: a sign-in the person declined (or the server refused) comes
+            // back as `error` and `error_description` — said as itself, here
+            // and in the terminal, where it used to read "Missing code"
+            const error = url.searchParams.get("error");
+            if (error !== null) {
+                const why = url.searchParams.get("error_description");
+                const reason = why === null || why === "" ? error : `${error}: ${why}`;
+                reply(400, { kind: "fail", state: "sign-in failed", title: "Sign-in failed.", body: "Return to your terminal and run kiso login chatgpt again.", detail: reason });
+                fail?.(new Error(`ChatGPT sign-in failed — ${reason}`));
+                return;
+            }
             const code = url.searchParams.get("code");
             if (!code)
-                return reply(400, "Missing code", "The authorization server sent no code.");
-            reply(200, "Signed in", "You can close this window and return to kiso.");
+                return reply(400, { kind: "fail", state: "sign-in failed", title: "No code came back.", body: "The authorization server sent no code. Return to your terminal and run kiso login chatgpt again." });
+            reply(200, { kind: "ok", state: "signed in", title: "You're signed in.", body: "kiso has your ChatGPT sign-in. Close this tab and return to your terminal." });
             settle?.(code);
         });
         server.on("error", () => resolve(null));

package/dist/auth/oauth/page.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Graphite R3c — the page a browser shows when a sign-in comes back to
+ * kiso's local callback. It is the one kiso surface outside the terminal,
+ * so it looks like kiso.work: the quatrefoil mark and the `kiso` wordmark,
+ * the site's warm ground and ink (a dark twin for `prefers-color-scheme:
+ * dark`), a small mono status line with its dot, one large headline, one
+ * sentence, and the reason in a mono box when there is one. Static — no
+ * script, no request, no web font (the system's own faces stand in for
+ * the site's) — and every word from outside (the server's
+ * `error_description`) is escaped before it reaches the page.
+ */
+export declare const escapeHtml: (s: string) => string;
+export interface CallbackPage {
+    /** the dot's colour, and the status line's word */
+    readonly kind: "ok" | "fail" | "note";
+    /** the headline — its trailing period is drawn muted, like the site's */
+    readonly title: string;
+    /** one sentence under it */
+    readonly body: string;
+    /** a reason from outside (the server's), shown verbatim in a mono box */
+    readonly detail?: string;
+    /** the status line's words (`signed in`, `sign-in failed`) */
+    readonly state: string;
+}
+export declare function callbackPage(page: CallbackPage): string;

package/dist/auth/oauth/page.js

@@ -0,0 +1,44 @@
+/**
+ * Graphite R3c — the page a browser shows when a sign-in comes back to
+ * kiso's local callback. It is the one kiso surface outside the terminal,
+ * so it looks like kiso.work: the quatrefoil mark and the `kiso` wordmark,
+ * the site's warm ground and ink (a dark twin for `prefers-color-scheme:
+ * dark`), a small mono status line with its dot, one large headline, one
+ * sentence, and the reason in a mono box when there is one. Static — no
+ * script, no request, no web font (the system's own faces stand in for
+ * the site's) — and every word from outside (the server's
+ * `error_description`) is escaped before it reaches the page.
+ */
+const ESC = { "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" };
+export const escapeHtml = (s) => s.replace(/[&<>"']/g, (c) => ESC[c]);
+/** kiso's quatrefoil — the mark in `assets/logo.svg`, shared with kiso.work. */
+const MARK = '<svg class="mark" viewBox="0 0 100 100" aria-hidden="true"><path fill="currentColor" d="m89 54c-0.5-1.3-0.8-2.7-0.8-3.9 0.2-5.5 7-11.1 9.5-19.4 2.2-7.3 2.2-17.3-5.2-23.8-2.7-2.4-7-4.7-12.7-4.7-2.6 0-5.3 0.4-7.8 1.2-4.7 1.5-7.8 3.5-14.5 7.8-2.6 1.5-4.6 2.6-7.5 2.6s-5-1.1-7.5-2.6c-6.7-4.3-11.1-7.2-15.8-8.3-1.6-0.4-3.5-0.7-6.1-0.7-5.7 0-10 2-12.9 4.7-7.3 6.7-7.4 16-5.2 22.9 2.6 7.9 8.4 13.1 8.9 18.8 0.2 1.6 0 3.5-0.9 5.4-2.8 5.7-8.4 10.9-8.9 21.5-0.2 4.2 0.3 8.9 2.8 13.1 2.1 3.3 6.5 8.3 16 8.5 12.5 0.2 18.8-6.9 25.8-9.6 1.3-0.5 2.5-0.7 3.8-0.7 6.7 0 11.4 6.9 21.9 9.8 2.2 0.7 4.7 1.1 7.5 1.2 4.2 0 7.5-0.8 10.2-2.3 4-2.1 6.5-5.8 7.7-8.8 1.1-2.9 1.6-5.9 1.6-8.8-0.2-10.6-7.3-17.4-9.9-23.9zm-71.2-3.6c6.4-0.4 11.6-1 17.4-4.2 3.3-1.8 6.4-4.5 8.6-7.3 3.1-4.2 5.6-9.5 6.1-17.1l0.1-2.2 0.2 2.2c1.2 13.1 9.3 20.8 16.2 24.3 4.5 2.4 8.7 3.6 15.8 4.1v0.2c-5.3 0.2-9.3 1-13.2 2.6-4.8 1.9-9.4 5.1-12.6 9.2-3.5 4.7-5.8 10-6.3 17.5l-0.1 1.4-0.2-2c-0.4-5.7-2.3-11-5.4-15.3-2.3-3.3-5.3-6.1-8.9-8.2-3.4-2.1-8-4.2-15.9-5.1l-1.8-0.1z"/></svg>';
+const STYLE = [
+    ":root{--bg:#f7f7f4;--ink:#20211f;--muted:#666761;--line:#d9dad4;--ok:#2f7a3a;--fail:#b3261e;--sans:ui-sans-serif,-apple-system,'Helvetica Neue',Arial,sans-serif;--mono:ui-monospace,'SF Mono',Menlo,monospace;--pad:clamp(20px,5vw,72px)}",
+    "@media (prefers-color-scheme:dark){:root{--bg:#151513;--ink:#ecece6;--muted:#9a9b93;--line:#33342f;--ok:#8fd19e;--fail:#f2877a}}",
+    "*{box-sizing:border-box}html,body{margin:0;min-height:100%}",
+    "body{min-height:100vh;display:flex;flex-direction:column;background:var(--bg);color:var(--ink);font:16px/1.6 var(--sans);-webkit-font-smoothing:antialiased}",
+    "header,footer{display:flex;justify-content:space-between;align-items:center;gap:16px;padding:24px var(--pad)}",
+    ".logo{display:flex;align-items:center;gap:10px;font-size:26px;font-weight:600;letter-spacing:-1.3px}.mark{width:26px;height:26px}",
+    ".mono{font-family:var(--mono);font-size:11px;letter-spacing:.07em;text-transform:uppercase;color:var(--muted)}",
+    "main{flex:1;display:flex;flex-direction:column;justify-content:center;padding:32px var(--pad) 56px;max-width:880px}",
+    ".state{display:flex;align-items:center;gap:10px}.dot{width:7px;height:7px;border-radius:50%;background:var(--tone)}",
+    "h1{margin:22px 0 0;font-size:clamp(40px,7vw,76px);line-height:1.03;font-weight:500;letter-spacing:-.06em}.period{color:var(--muted)}",
+    "p.lead{margin:22px 0 0;color:var(--muted);font-size:17px;max-width:34rem}",
+    "pre{margin:26px 0 0;padding:14px 16px;border:1px solid var(--line);font:13px/1.55 var(--mono);white-space:pre-wrap;overflow-wrap:anywhere;max-width:40rem}",
+    "code{font:14px var(--mono);color:var(--ink)}",
+    "footer{border-top:1px solid var(--line)}",
+].join("");
+export function callbackPage(page) {
+    const tone = page.kind === "ok" ? "var(--ok)" : page.kind === "fail" ? "var(--fail)" : "var(--muted)";
+    const title = escapeHtml(page.title.replace(/\.$/, ""));
+    return [
+        `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">`,
+        `<title>${escapeHtml(page.title.replace(/\.$/, ""))} · kiso</title><style>${STYLE}</style>`,
+        `<header><div class="logo">${MARK}kiso</div><span class="mono">ChatGPT sign-in</span></header>`,
+        `<main style="--tone:${tone}"><div class="state mono"><span class="dot"></span>${escapeHtml(page.state)}</div>`,
+        `<h1>${title}<span class="period">.</span></h1><p class="lead">${escapeHtml(page.body)}</p>`,
+        page.detail === undefined ? "" : `<pre>${escapeHtml(page.detail)}</pre>`,
+        `</main><footer><span class="mono">A small core. A long memory.</span><span class="mono">kiso.work</span></footer></html>`,
+    ].join("");
+}

package/dist/chat.d.ts

@@ -5,7 +5,7 @@
  * estimates. All bodies moved verbatim from index.ts.
  */
 import type { SessionRoute } from "./projects.js";
-import { type RunUsage } from "@vincemakes/kiso-tui";
+import { type BarInput, type RunUsage, type TaskCountsOnRow } from "@vincemakes/kiso-tui";
 import { type SaferFailure, type SaferOption } from "@vincemakes/kiso-tui";
 import type { AgentSession, Run } from "@vincemakes/kiso-runtime";
 import { type LineInput } from "./state.js";
@@ -150,6 +150,17 @@ export declare function compactionDiscardedNotice(d: {
     readonly summary: number;
 }): string;
 export declare function displayCtxRatio(session: AgentSession): number;
+/**
+ * Graphite §8.9 — the status bar's facts, one builder for every caller
+ * (the boot row, the idle row, the running turn's row), so they cannot
+ * drift apart. The context share is USED, with the runtime's own
+ * compaction tiers as shares of the same window (`tiersFor`, never a
+ * fixed fraction); an unknown window is `ctx ?`.
+ */
+export declare function barFor(session: AgentSession, measured?: {
+    readonly tokPerSec: number | null;
+    readonly tasks?: TaskCountsOnRow | undefined;
+}): BarInput;
 /** 0.40.0 item 9: how long a prompt cache is assumed to live. PROVISIONAL:
  *  DeepSeek does not publish its TTL (the owner's cache was gone after 27
  *  minutes); Anthropic's default is 5 minutes. */

package/dist/chat.js

@@ -5,16 +5,19 @@
  * estimates. All bodies moved verbatim from index.ts.
  */
 import { readFileSync, statSync } from "node:fs";
-import { escapeTerminal, cacheHitPct, decodeRate, idleStatus, palette, renderEvent, renderRecap, runningStatus, toolTarget, STATUS_GLYPHS, kUnit, namedPickView, } from "@vincemakes/kiso-tui";
-import { askView, coldResumeLine, coldResumeView, deletionRiskHint, editFileDiff, writeFileDiff } from "@vincemakes/kiso-tui";
+import { escapeTerminal, cacheHitPct, decodeRate, palette, renderEvent, renderRecap, sealTiers, toolTarget, STATUS_GLYPHS, kUnit, workingRow, compactingStatus, liveRow, namedPickView, } from "@vincemakes/kiso-tui";
+import { askView, coldResumeLine, coldResumeView, deletionRiskHint, editFileHunksDiff, hunksOf, writeFileDiff } from "@vincemakes/kiso-tui";
 import { canonicalTargetPath, isProtectedPath, protectedIdentity, shellProgressPath } from "@vincemakes/kiso-tools-node";
-import { liveTasks, mergedConfig, queuedSwitchLines, seenUnknownTasks, setExitTasks, tasksFor } from "./state.js";
-import { taskCounts, taskNoticeRow } from "./task-notice.js";
+import { deliveryLines, liveTasks, lostToldOf, mergedConfig, queuedSwitchLines, setExitTasks, tasksFor, taskWhatOf } from "./state.js";
+import { taskCounts, taskNoticeLines, taskNoticeRows, tasksForDisplay } from "./task-notice.js";
+import { current as inRunCompaction, takeKept as takeKeptCompaction } from "./in-run-compaction.js";
 import { echoText } from "@vincemakes/kiso-tui-cells/render";
 import { canonicalizeUsage, RunClosedError } from "@vincemakes/kiso-runtime";
-import { canonicalizeUsageForModel, requestBudget } from "@vincemakes/kiso-runtime/internal";
-import { dispatch, abortBangCommand } from "./dispatch.js";
-import { paintWindowTitle } from "./window-title.js";
+import { canonicalizeUsageForModel, requestBudget, tiersFor } from "@vincemakes/kiso-runtime/internal";
+import { homedir } from "node:os";
+import { currentBranch } from "./git-branch.js";
+import { dispatch, markAutoCompact, markCompactWhy, abortBangCommand } from "./dispatch.js";
+import { setTitleState } from "./window-title.js";
 import { agentBaseUrl, agentModel, body, bodyLog, configuredWindow, dock, retryOnRow, retryShown, setRetryShown, floorOn, protectedFiles, upstreamOf, VERSION } from "./state.js";
 import { attachImages } from "./attachments.js";
 import { installedVersion, staleVersionNotice } from "./stale-version.js";
@@ -266,6 +269,36 @@ export function displayCtxRatio(session) {
         return anchored / window;
     return requestBudget(session.requestParts(), window).ratio;
 }
+/**
+ * Graphite §8.9 — the status bar's facts, one builder for every caller
+ * (the boot row, the idle row, the running turn's row), so they cannot
+ * drift apart. The context share is USED, with the runtime's own
+ * compaction tiers as shares of the same window (`tiersFor`, never a
+ * fixed fraction); an unknown window is `ctx ?`.
+ */
+export function barFor(session, measured = { tokPerSec: null }) {
+    const window = knownContextWindow();
+    const used = displayCtxRatio(session);
+    const tiers = window === null ? null : tiersFor(window, 0);
+    const home = homedir();
+    const cwd = process.cwd();
+    return {
+        // the main-sync round: the tier by its name (#203's MODE_LABEL), full
+        // access in the failure colour, and the don't-ask switch as its own chip
+        mode: getMode() === "plan" ? "plan \u00b7 read-only" : MODE_LABEL[getMode()],
+        modeAlert: getMode() === "full-access",
+        dontAsk: getDontAsk(),
+        floorOff: !floorOn,
+        model: statusModelLabel(session),
+        ctx: tiers === null || window === null || !Number.isFinite(used) ? null : { used, soft: tiers.soft / window, hard: tiers.hard / window },
+        tokPerSec: measured.tokPerSec,
+        // ADR-0058 (3e): the session's tasks — the bar is where they are
+        // counted in Graphite (§8.9); absent, the bar is unchanged
+        ...(measured.tasks !== undefined ? { tasks: measured.tasks } : {}),
+        branch: currentBranch(cwd),
+        folder: cwd === home ? "~" : cwd.startsWith(`${home}/`) ? `~${cwd.slice(home.length)}` : cwd,
+    };
+}
 /** 0.40.0 item 9: how long a prompt cache is assumed to live. PROVISIONAL:
  *  DeepSeek does not publish its TTL (the owner's cache was gone after 27
  *  minutes); Anthropic's default is 5 minutes. */
@@ -505,8 +538,8 @@ export function startStatusSpinner(onTick) {
     setRetryShown(null);
     if (!dock.active)
         return () => { };
-    // v3 §03/§05: the working glyph family ▖▘▝▗, 200ms rotation — the
-    // callback repaints the running status line with the new glyph.
+    // v3 §03/§05: the working glyph family (STATUS_GLYPHS), 200ms
+    // rotation — the callback repaints the live row with the new glyph.
     // KC2 §5: the family itself moved to the tui's status formatters.
     let i = 0;
     const timer = setInterval(() => onTick(STATUS_GLYPHS[i++ % STATUS_GLYPHS.length]), 200);
@@ -578,13 +611,15 @@ function approvalDiff(name, input) {
     }
     try {
         if (name === "edit_file") {
-            const search = typeof input.search === "string" ? input.search : "";
-            const replace = typeof input.replace === "string" ? input.replace : "";
-            if (search === "")
+            // R2a: the single pair or the batch — a batch's hunks applied in
+            // order, as the tool applies them (it reached the panel with no
+            // diff while only search/replace was read)
+            const hunks = hunksOf(input);
+            if (hunks === null || hunks.some((h) => h.search === ""))
                 return null;
             // TUI2-R1.5 ② (VD-2): the path rides along so a miss can name the
             // file in its honest note instead of fabricating a diff.
-            return editFileDiff(oldContent ?? "", search, replace, path);
+            return editFileHunksDiff(oldContent ?? "", hunks, path);
         }
         const content = typeof input.content === "string" ? input.content : "";
         return writeFileDiff(oldContent, content);
@@ -919,7 +954,16 @@ onInputLanded) {
             if (ev.type === "summarized" || ev.type === "microcompacted") {
                 const r = displayCtxRatio(session);
                 const ctx = Number.isFinite(r) ? ` · ctx now ~${Math.round(r * 100)}% used` : "";
-                body.notice(ev.type === "summarized" ? `✦ compacted mid-run — the conversation before this point is a summary now${ctx}` : `✦ pruned old tool output mid-run${ctx}`);
+                const pipe = ev.type === "summarized" ? `✦ compacted mid-run — the conversation before this point is a summary now${ctx}` : `✦ pruned old tool output mid-run${ctx}`;
+                // the compaction round (owner, 2026-10-06): the COMPACTED row says
+                // the numbers — how big the context was, how big it is now, the
+                // share of the window used — where it said a sentence. A pipe keeps
+                // the sentence.
+                const kept = ev.type === "summarized" ? takeKeptCompaction() : null;
+                if (kept !== null)
+                    body.metaNotice(pipe, [{ label: "COMPACTED", sentence: `mid-run \u00b7 ~${kUnit(kept.pre)} \u2192 ~${kUnit(kept.post)}${Number.isFinite(r) ? ` \u00b7 ctx now ${Math.round(r * 100)}%` : ""}` }]);
+                else
+                    body.notice(pipe);
             }
             if (ev.type !== "thinking") {
                 if (thinkingSince !== null) {
@@ -938,13 +982,6 @@ onInputLanded) {
                     inputsSeen += 1;
                     if (inputsSeen > 1)
                         onInputLanded?.();
-                    // The window title is re-derived here because THIS is when a
-                    // session stops being nameless: the tab opened as `kiso —
-                    // <workspace>` and the first substantive prompt is what gives
-                    // it a name. Re-derived rather than set, so the opener rule is
-                    // `sessionTitle`'s and a greeting-first session upgrades when
-                    // the real prompt lands instead of keeping "hi" forever.
-                    paintWindowTitle(session.log.all);
                     // TV-1B: a system-sourced input is PRODUCT MACHINERY — visible
                     // (every durable input renders) but never painted as the
                     // user's words. Provenance is honest on screen, not only in
@@ -953,7 +990,13 @@ onInputLanded) {
                     // any run that carries one, as replay.ts does for old logs.
                     // ADR-0058: a task notice is a row, never the person's chip
                     if (ev.via?.kind === "tasks") {
-                        body.notice(taskNoticeRow(ev.via.items));
+                        // the tasks round: one row per task, how it ended and what ran —
+                        // a loss already said (Amendment 8) is left out, as the pipe's
+                        // lines (deliveryLines) leave it out
+                        const told = lostToldOf(session.id);
+                        const shown = ev.via.items.filter((i) => !(i.transition === "unknown" && told.has(i.taskId)));
+                        if (shown.length > 0)
+                            body.metaNotice(deliveryLines(session.id, ev.via.items).join("\n"), taskNoticeRows(shown, tasksForDisplay(tasksFor(session.id))));
                         break;
                     }
                     if (ev.source === "system") {
@@ -1196,8 +1239,11 @@ onInputLanded) {
                         const e = ev.outcome.error;
                         body.notice(`run failed — ${e.code}${e.status !== undefined ? ` ${e.status}` : ""}${e.retryable ? " (retryable)" : ""}: ${escapeTerminal(e.message)}`);
                     }
-                    bodyLog(renderRecap({
+                    // Graphite §7.11: the seal is a cell on the terminal (drawn at
+                    // the current width, no context share); the pipe keeps the recap.
+                    const recapStats = {
                         seconds: Math.round((Date.now() - turnStart) / 1000),
+                        stopped: ev.outcome.kind === "aborted",
                         // R3g: the work terms are NOT passed — the fold line
                         // says what the turn did, once, where it happened and
                         // with the key that reopens it. This row is the turn's
@@ -1219,12 +1265,18 @@ onInputLanded) {
                         // W19: under plan the recap becomes the way-forward row
                         // (the /mode hints are the mode's exits).
                         mode: getMode(),
-                    }));
+                    };
+                    body.seal(sealTiers(recapStats), renderRecap(recapStats));
                     break;
                 }
                 default: {
                     // Events without a cell (stop, …) — the generic render, byte-
                     // preserved for the pipe path (C5: Event → RenderInput first).
+                    // the compaction round (owner, 2026-10-06): on a dock the
+                    // COMPACTED row above already says it — `[summarized up to seq
+                    // N]` was a raw row under it. A pipe keeps the line.
+                    if (ev.type === "summarized" && dock.active)
+                        break;
                     const input = toRenderInput(ev);
                     if (input === null)
                         break;
@@ -1334,6 +1386,11 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
             runGlyph = g;
             paintRunning();
         });
+        // Graphite §8.7: the live row stands from the run's FIRST frame —
+        // the spinner's first tick is 200ms away, and a row that arrived
+        // then would move the content above it once the turn had begun.
+        paintRunning();
+        setTitleState("working"); // §8.10: the title says so, once, not per tick
         (async () => {
             let last;
             try {
@@ -1510,7 +1567,7 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
     // no rate in the pricing table contributes nothing and the row shows no
     // $ at all, because a partial total presented as a total is a lie.
     let spentUsd = null;
-    let runGlyph = "▖";
+    let runGlyph = STATUS_GLYPHS[0];
     let runStart = Date.now();
     // TPS-1: the decode rate of the last SETTLED call. One variable serves
     // both rows because they want the same number at different moments;
@@ -1536,7 +1593,7 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
         const manager = tasksFor(session.id);
         if (manager === undefined)
             return undefined;
-        if (fresh || taskRow === null || Date.now() - taskRow.at > 1_000 || taskRow.seen !== seenUnknownTasks.size) {
+        if (fresh || taskRow === null || Date.now() - taskRow.at > 1_000) {
             let list = [];
             try {
                 list = manager.list();
@@ -1544,7 +1601,7 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
             catch {
                 // a corrupt journal is reported where it is read on purpose
             }
-            taskRow = { at: Date.now(), seen: seenUnknownTasks.size, counts: taskCounts(list, seenUnknownTasks) };
+            taskRow = { at: Date.now(), counts: taskCounts(list) };
         }
         return taskRow.counts;
     };
@@ -1556,27 +1613,39 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
         // (DF-0330-F1). A pending retry makes it thirty columns longer, and
         // composed blind it would be cut from the END — the context figure,
         // a fact, going before the gesture hints.
-        if (dock.active)
-            dock.setStatus(runningStatus(runGlyph, runStart, runUsage.out, displayCtxRatio(session), lastTokPerSec, rowWidth(), retryOnRow(), taskCountsNow(), detachableNow()));
+        // Graphite §8.7 / §8.9: the turn's own facts ride the LIVE row above
+        // the composer; the status bar keeps the session's (its ctx moves as
+        // the turn reads).
+        if (!dock.active)
+            return;
+        // the main-sync round (ADR-0058 3e): the live row teaches ctrl+b exactly
+        // while a command can be moved to the background; the bar counts the
+        // session's tasks (§8.9)
+        // the compaction round (owner, 2026-10-06): a summary inside the run is
+        // the row /compact draws — `compacting · auto`, its progress in the
+        // bar's cells — not `working` with a clock and nothing arriving
+        const summary = inRunCompaction();
+        if (summary !== null) {
+            const W = rowWidth();
+            dock.setLive(liveRow(compactingStatus(runGlyph, summary.rounds, summary.tokens, Math.round((Date.now() - summary.since) / 1000), W - 20, retryOnRow(), summary.progress, "auto"), ["esc stops"], W));
+            return;
+        }
+        dock.setLive(workingRow(runGlyph, runStart, runUsage.out, lastTokPerSec, rowWidth(), retryOnRow(), detachableNow()));
+        dock.setBar(barFor(session, { tokPerSec: lastTokPerSec, tasks: taskCountsNow() }));
     };
     // W19: under plan the idle row makes the posture unmistakable — the W4
     // parentheses idiom names the read-only constraint. The tier is the
     // CALLER's word (the recovery flow passes the bare mode).
     const paintIdle = () => {
+        setTitleState("ready"); // §8.10 — a dock-less TTY has a title too
         if (!dock.active)
             return;
-        // TUI2-R1 (E): the meter rides the idle row — both fields omitted
-        // when unknown, so a session that has not called the model paints
-        // exactly the pre-round row.
-        dock.setStatus(idleStatus(modeDisplay(), statusModelLabel(session), displayCtxRatio(session), {
-            cacheHitPct: cacheHitPct(runUsage),
-            costUsd: spentUsd,
-            tokPerSec: lastTokPerSec,
-        }, 
-        // DF-0330-F1: the row's budget. Without it the row is composed
-        // blind and invariant ① cuts whatever sits last — which is how
-        // a measured rate went missing at 100 columns.
-        rowWidth(), !floorOn, taskCountsNow(true)));
+        // Graphite §8.9: nothing is live; the bar carries the session and
+        // its health. TUI2-R1 (E): the meter's fields are omitted while
+        // unmeasured, so a session that has not called the model paints no
+        // rate.
+        dock.setLive(null);
+        dock.setBar(barFor(session, { tokPerSec: lastTokPerSec, tasks: taskCountsNow(true) }));
     };
     // TUI2-R2 ⑥ — the BOOT status line. The row is the product's one
     // persistent claim about itself (the tier, how to change it, the model,
@@ -1621,7 +1690,7 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
         spentUsd = (spentUsd ?? 0) + usd;
     };
     const queueTurn = (line, via) => {
-        const slot = { line: via?.kind === "skill" ? via.line : via?.kind === "tasks" ? taskNoticeRow(via.items) : line, content: line, ...(via !== undefined ? { via } : {}), cancelled: false };
+        const slot = { line: via?.kind === "skill" ? via.line : via?.kind === "tasks" ? (deliveryLines(session.id, via.items).join(" · ") || taskNoticeLines(via.items, taskWhatOf(session.id)).join(" · ")) : line, content: line, ...(via !== undefined ? { via } : {}), cancelled: false };
         pendingTurns.push(slot);
         queued += 1;
         chainRef.current = chainRef.current.then(async () => {
@@ -1706,6 +1775,15 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
         : session.useTasks(taskManager, {
             wake: mergedConfig.taskWake !== false,
             onWake: (w) => queueTurn(w.content, w.via),
+            // Amendment 8: a loss is said when kiso concludes it — the
+            // model's notice still rides the next run, and is not said again
+            onLost: (ids) => {
+                const told = lostToldOf(session.id);
+                for (const id of ids)
+                    told.add(id);
+                for (const line of taskNoticeLines(ids.map((taskId) => ({ taskId, transition: "unknown" })), taskWhatOf(session.id)))
+                    body.notice(line);
+            },
             ...(Number.isFinite(autoDetachFromEnv) && autoDetachFromEnv >= 0 ? { autoDetachMinAgeMs: autoDetachFromEnv } : {}),
         });
     // 3e: a task's change repaints the row it is counted on
@@ -1814,6 +1892,7 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
         const ratio = autoCompactRatio(session); // A1a: the policy keeps the pre-A1a number — A1b decides if it moves
         if (!Number.isFinite(ratio) || ratio < autoCompact.thresholdRatio)
             return;
+        markAutoCompact();
         dispatch("/compact", dispatchCtx);
     };
     // CX-1 F5: a literal input (task-file mode) submits the turn directly —
@@ -1847,14 +1926,16 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
     // The switch is the SAME live-extension flip /mode performs; the status
     // row repaints at once with a one-line notice.
     input.onModeCycle?.(() => {
-        const next = OFFERED_MODES[(OFFERED_MODES.indexOf(getMode()) + 1) % OFFERED_MODES.length];
+        const was = getMode();
+        const next = OFFERED_MODES[(OFFERED_MODES.indexOf(was) + 1) % OFFERED_MODES.length];
         const wasOn = getDontAsk();
         setMode(next);
         paintIdle();
-        body.notice(`mode → ${MODE_LABEL[next]} (shift+tab cycles)`);
+        // Graphite R3e: the MODE row on a terminal (the pipe keeps these words)
+        body.modeNotice(`mode → ${MODE_LABEL[next]} (shift+tab cycles)`, MODE_LABEL[was], MODE_LABEL[next]);
         // the switch came with the old dontAsk tier, and left with it
         if (getDontAsk() !== wasOn)
-            body.notice("don't ask → off");
+            body.dontAskNotice("don't ask → off", false);
     });
     // Recovery first: a session with a dangling pause or uncertain
     // executions must resolve them BEFORE the REPL accepts new turns —
@@ -1876,11 +1957,17 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
     // before the run resumes: the run continues on the compacted projection.
     const cold = !cancelled && process.stdin.isTTY ? coldResumeOffer(session) : null;
     if (cold !== null) {
+        // Graphite P1b (owner, 2026-09-30): either way the compaction row
+        // says why it runs — `cold cache` — so on a dock dontAsk needs no line
+        // of its own; off a dock the line is printed as it always was
         if (getDontAsk()) {
-            body.notice(`[dontAsk] ${coldResumeLine(cold.tokens, cold.minutes)} — compacting first`);
+            if (!dock.active)
+                body.notice(`[dontAsk] ${coldResumeLine(cold.tokens, cold.minutes)} — compacting first`);
+            markCompactWhy("cold cache");
             dispatch("/compact", dispatchCtx);
         }
         else if ((await askPanel(input, coldResumeView(cold.tokens, cold.minutes))).action === "allow") {
+            markCompactWhy("cold cache");
             dispatch("/compact", dispatchCtx);
         }
         await chainRef.current;

package/dist/coding-prompt.d.ts

@@ -24,6 +24,13 @@ export declare const SYSTEM_PROMPT = "You are kiso, a coding agent. You work in
  * a protected one is skipped as though absent.
  */
 export declare function readProjectInstructions(cwd: string, protectedFiles?: readonly string[]): string;
+/** The instruction file the prompt reads, and its text — the ONE lookup,
+ *  so the opening's RULES fact (Graphite §7.10) names exactly the file the
+ *  model is given, never a file it is not. */
+export declare function projectInstructions(cwd: string, protectedFiles?: readonly string[]): {
+    readonly name: string;
+    readonly text: string;
+} | null;
 /** A area: the session's system prompt — the constant plus any project
  *  instructions found in the workspace. Deterministic per cwd. */
 export declare function composeSystemPrompt(cwd: string, protectedFiles?: readonly string[]): string;

package/dist/coding-prompt.js

@@ -64,20 +64,28 @@ const INSTRUCTION_FILES = ["AGENTS.md", "CLAUDE.md"];
  * a protected one is skipped as though absent.
  */
 export function readProjectInstructions(cwd, protectedFiles = []) {
+    const found = projectInstructions(cwd, protectedFiles);
+    if (found === null)
+        return "";
+    const { name, text } = found;
+    return `\n\n=== Project instructions (${name}) ===\n${text.length > 8 * 1024 ? text.slice(0, 8 * 1024) + `\n\n[truncated at ${8 * 1024} chars]` : text}`;
+}
+/** The instruction file the prompt reads, and its text — the ONE lookup,
+ *  so the opening's RULES fact (Graphite §7.10) names exactly the file the
+ *  model is given, never a file it is not. */
+export function projectInstructions(cwd, protectedFiles = []) {
     const id = protectedIdentity(protectedFiles);
     for (const name of INSTRUCTION_FILES) {
         if (isProtectedPath(join(cwd, name), id))
             continue;
-        let text;
         try {
-            text = readFileSync(join(cwd, name), "utf8");
+            return { name, text: readFileSync(join(cwd, name), "utf8") };
         }
         catch {
             continue; // not present — try the next
         }
-        return `\n\n=== Project instructions (${name}) ===\n${text.length > 8 * 1024 ? text.slice(0, 8 * 1024) + `\n\n[truncated at ${8 * 1024} chars]` : text}`;
     }
-    return "";
+    return null;
 }
 /** A area: the session's system prompt — the constant plus any project
  *  instructions found in the workspace. Deterministic per cwd. */

package/dist/config.d.ts

@@ -151,7 +151,8 @@ export declare function loadUserConfig(): KisoConfig | null;
 /** The project config — read ONLY when the project's .kiso passed the E3
  *  trust gate (an untrusted project's config is never even read). */
 export declare function loadProjectConfig(cwd: string, trusted: boolean): KisoConfig | null;
-/** Merge: project wins over user (each layer's own keys only). */
+/** Merge: a project's keys win over the user's (each layer's own keys
+ *  only) — except that a project may only tighten (assertProjectTightens). */
 export declare function mergeConfigs(user: KisoConfig | null, project: KisoConfig | null): KisoConfig;
 /** What a profile's sign-in actually IS. The two shapes are not
  *  interchangeable: an API key is a string an adapter holds, an OAuth
@@ -210,6 +211,9 @@ export declare function resolveContextWindow(merged: KisoConfig, profile?: Model
 /** Auto-compact: env (KISO_AUTO_COMPACT) > config.autoCompact > off. An
  *  invalid env value is OFF (it set the env → it wins, and it is invalid). */
 export declare function resolveAutoCompact(merged: KisoConfig): AutoCompactConfig | undefined;
-/** Project-trust policy: config.projectTrust (project wins over user) —
- *  "ask" (the E3 gate, default) or "never" (the gate auto-refuses). */
+/** Project-trust policy: the USER config's projectTrust — "ask" (the E3
+ *  gate, default) or "never" (the gate auto-refuses). The gate passes
+ *  loadUserConfig() alone (trust-ui.ts): a project never relaxes its own
+ *  gate, and it could not anyway, since an untrusted project's config is
+ *  never read. */
 export declare function resolveProjectTrustPolicy(merged: KisoConfig): "ask" | "never";