@vincemakes/kiso-code 0.49.0 → 0.50.0

package/README.md

@@ -1,4 +1,8 @@
-# @vincemakes/kiso-code
+<h1 align="center"><picture><source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/vincemakes/kiso/main/assets/readme/lockup-dark.png"><img src="https://raw.githubusercontent.com/vincemakes/kiso/main/assets/readme/lockup-light.png" height="46" alt="kiso"></picture></h1>
+
+<p align="center"><picture><source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/vincemakes/kiso/main/assets/readme/features-dark.png"><img src="https://raw.githubusercontent.com/vincemakes/kiso/main/assets/readme/features-light.png" width="830" alt="Built in, not bolted on: it asks before it guesses; subagents in parallel; background tasks; approval modes; it resumes after a crash; yours to extend."></picture></p>
+
+<p align="center"><img src="https://raw.githubusercontent.com/vincemakes/kiso/main/assets/readme/screenshot.png" width="830" alt="kiso in a dark terminal window: a green diff of new tests, then the test suite started as a background task, with 1 task running in the status row"></p>
 
 The coding agent that survives kill -9: durable sessions (append-only
 JSONL), pre-effect approvals, and honest recovery — an interrupted side

package/dist/builtin.js

@@ -59,8 +59,9 @@ ask,
  *  too late. Only the config knows them; nothing else can. */
 secretEnvNames = []) {
     // ADR-0058 3d: the session's task manager makes `delegate` offer
-    // background children (explorer/reviewer; the cap and the turn budget
-    // are the extension's defaults). 0.49.0 C1: the session's live binding
+    // background children (any role; a writer works in its own snapshot and
+    // is collected; the caps and the turn budgets are the extension's
+    // defaults). 0.49.0 C1: the session's live binding
     // is the model a child runs on when its task names none.
     const all = await Promise.all([createMcp({ secretEnvNames }), createSkills(), createSubagent({ tasks: tasksFor, currentBinding: bindingFor, ...joinOption() }), ...(ask === undefined ? [] : [createAsk(ask).then(offInDontAsk)])]);
     const shadowed = all.filter((b) => user.some((u) => u.name === b.name));

package/dist/chat.js

@@ -1062,7 +1062,7 @@ onInputLanded) {
                         if (m !== null)
                             reason = m[1];
                     }
-                    body.toolResult(ev.callId, { content: text, isError: ev.isError, reason });
+                    body.toolResult(ev.callId, { content: text, isError: ev.isError, reason, ...((ev.tags ?? []).includes("created") ? { created: true } : {}) });
                     break;
                 }
                 case "text_delta":

package/dist/coding-prompt.d.ts

@@ -9,7 +9,7 @@
  */
 /** The built-in prompt. Exported for scripts/request-surface.mjs — the
  *  model-side token-rent counter measures the REAL bytes, never a copy. */
-export declare const SYSTEM_PROMPT = "You are kiso, a coding agent. You work in a workspace\ndirectory and change code with tools. Be concise: answer in a few lines\nunless the task genuinely needs more. Never claim a file was changed\nunless a tool confirmed it.\n\nWhat you can reach:\n- The workspace: read_file, list_dir, search_text, write_file, edit_file.\n- This machine and the network: shell \u2014 builds, tests, git, package\n  managers, curl for HTTP, system queries. A request one command can\n  answer is answered by running it.\n- The human: ask_user, for a decision that is theirs.\n\nTool discipline:\n- READ BEFORE YOU EDIT. For any file you are about to change, read it\n  first \u2014 never guess its content.\n- Use edit_file for targeted changes and write_file for new files or\n  full rewrites.\n- Be careful \u2014 shell has side effects and may take time.\n- search_text and list_dir are cheap \u2014 locate first, then read ranges\n  with read_file offset/limit; never read a whole large file in one call.\n- Do not re-read a file you already read unchanged, or one you changed\n  yourself through a confirmed edit \u2014 rely on the earlier result and\n  on the change you just made.\n- When a tool fails, read the error and adjust; do not repeat the same\n  call blindly.\n\nAn authorization covers what it NAMES: when the scope is not named \u2014\nwhich files, which branches, whether to push \u2014 ask before acting.\nDelivering, sharing or handing over changes means committing locally and\nstopping; pushing, publishing or sending happens only when the human\nnames it.\n\nWorkflow: understand the request, find the relevant code, make the\nsmallest change that works, then verify with a command (tests/build).\nReport what you did in one or two lines per change.";
+export declare const SYSTEM_PROMPT = "You are an expert coding assistant running on Kiso, an agent runtime. Help the user complete software engineering tasks in the current workspace using the available tools.\n\nShell can access this machine and the network, including git, package managers, and HTTP. For factual questions the user asks, use existing valid tool evidence or an available tool rather than guessing or claiming the information is unavailable.\n\nWork directly toward the user's request. Make the smallest complete change that solves it, follow existing conventions, and do not expand the task into unrelated fixes, refactors, or features.\n\nInspect enough current context to act correctly. Reuse valid observations and tool results instead of repeating work. A confirmed tool result is evidence; do not re-read or re-check solely for reassurance. If a tool reports a failure or conflict, use that new evidence to decide the next action.\n\nAfter a successful edit or write, treat the change you made and the returned revision as the file's current observed state. Do not re-read it before a follow-up edit unless you need context you have not already observed or a tool reports a conflict or failure. When a conflict or refusal already provides the current relevant text and revision, use that result directly instead of reading the file again.\n\nFor behavior-changing work, use the narrowest relevant existing verification when needed. Broaden verification only when a failure, meaningful risk, or concrete unresolved concern gives a reason to do so. Do not create ad-hoc verification scripts when existing evidence is sufficient.\n\nWhen the requested work is complete and there is no concrete unresolved issue, stop. Continue investigating or checking only when new evidence gives a reason to continue.\n\nNecessary workspace changes are within the scope of the requested task. Ask the user only for decisions that require the user. Do not commit, push, publish, send, or perform other remote or irreversible actions unless explicitly requested.\n\nRequests to share, deliver, hand over, or get work ready do not by themselves authorize a commit, push, publish, or send. Perform those actions only when the user explicitly names the action; otherwise leave the changes in the workspace.\n\nBe concise.";
 /** Hard cap for injected instructions — truncate and say so. */
 /**
  * A area: read the FIRST present instruction file (AGENTS.md preferred) and

package/dist/coding-prompt.js

@@ -13,41 +13,25 @@ import { readFileSync } from "node:fs";
  */
 /** The built-in prompt. Exported for scripts/request-surface.mjs — the
  *  model-side token-rent counter measures the REAL bytes, never a copy. */
-export const SYSTEM_PROMPT = `You are kiso, a coding agent. You work in a workspace
-directory and change code with tools. Be concise: answer in a few lines
-unless the task genuinely needs more. Never claim a file was changed
-unless a tool confirmed it.
+export const SYSTEM_PROMPT = `You are an expert coding assistant running on Kiso, an agent runtime. Help the user complete software engineering tasks in the current workspace using the available tools.
 
-What you can reach:
-- The workspace: read_file, list_dir, search_text, write_file, edit_file.
-- This machine and the network: shell — builds, tests, git, package
-  managers, curl for HTTP, system queries. A request one command can
-  answer is answered by running it.
-- The human: ask_user, for a decision that is theirs.
+Shell can access this machine and the network, including git, package managers, and HTTP. For factual questions the user asks, use existing valid tool evidence or an available tool rather than guessing or claiming the information is unavailable.
 
-Tool discipline:
-- READ BEFORE YOU EDIT. For any file you are about to change, read it
-  first — never guess its content.
-- Use edit_file for targeted changes and write_file for new files or
-  full rewrites.
-- Be careful — shell has side effects and may take time.
-- search_text and list_dir are cheap — locate first, then read ranges
-  with read_file offset/limit; never read a whole large file in one call.
-- Do not re-read a file you already read unchanged, or one you changed
-  yourself through a confirmed edit — rely on the earlier result and
-  on the change you just made.
-- When a tool fails, read the error and adjust; do not repeat the same
-  call blindly.
+Work directly toward the user's request. Make the smallest complete change that solves it, follow existing conventions, and do not expand the task into unrelated fixes, refactors, or features.
 
-An authorization covers what it NAMES: when the scope is not named —
-which files, which branches, whether to push — ask before acting.
-Delivering, sharing or handing over changes means committing locally and
-stopping; pushing, publishing or sending happens only when the human
-names it.
+Inspect enough current context to act correctly. Reuse valid observations and tool results instead of repeating work. A confirmed tool result is evidence; do not re-read or re-check solely for reassurance. If a tool reports a failure or conflict, use that new evidence to decide the next action.
 
-Workflow: understand the request, find the relevant code, make the
-smallest change that works, then verify with a command (tests/build).
-Report what you did in one or two lines per change.`;
+After a successful edit or write, treat the change you made and the returned revision as the file's current observed state. Do not re-read it before a follow-up edit unless you need context you have not already observed or a tool reports a conflict or failure. When a conflict or refusal already provides the current relevant text and revision, use that result directly instead of reading the file again.
+
+For behavior-changing work, use the narrowest relevant existing verification when needed. Broaden verification only when a failure, meaningful risk, or concrete unresolved concern gives a reason to do so. Do not create ad-hoc verification scripts when existing evidence is sufficient.
+
+When the requested work is complete and there is no concrete unresolved issue, stop. Continue investigating or checking only when new evidence gives a reason to continue.
+
+Necessary workspace changes are within the scope of the requested task. Ask the user only for decisions that require the user. Do not commit, push, publish, send, or perform other remote or irreversible actions unless explicitly requested.
+
+Requests to share, deliver, hand over, or get work ready do not by themselves authorize a commit, push, publish, or send. Perform those actions only when the user explicitly names the action; otherwise leave the changes in the workspace.
+
+Be concise.`;
 /** The project-instructions file names, in priority order (A area). */
 const INSTRUCTION_FILES = ["AGENTS.md", "CLAUDE.md"];
 /** Hard cap for injected instructions — truncate and say so. */

package/dist/dispatch.js

@@ -880,7 +880,7 @@ export function dispatch(line, ctx) {
                 if (want !== wasOn)
                     body.dontAskNotice(`don't ask → ${want ? "on" : "off"}`, want);
                 else
-                    body.notice(`don't ask → ${want ? "on" : "off"}`);
+                    body.dontAskNotice(`don't ask → ${want ? "on" : "off"}`, want, true);
                 ctx.paintIdle();
             }
             ctx.input.prompt();
@@ -1087,6 +1087,9 @@ export function dispatch(line, ctx) {
                             // session still names the outgoing profile
                             const prevProfile = currentProfileName !== null ? configModels[currentProfileName] : undefined;
                             const payeeBefore = prevProfile !== undefined ? payeeOf(prevProfile) : null;
+                            // the notices round (owner, 2026-10-14): the MODEL row says what it
+                            // switched FROM, read before the outgoing binding is replaced
+                            const fromName = currentProfileName ?? agentModel;
                             ctx.session.setModelBinding(binding);
                             setLastBinding(binding);
                             setAgentModel(profile.model, profile.baseUrl);
@@ -1117,14 +1120,15 @@ export function dispatch(line, ctx) {
                             // (and the owner's) read `gpt-6-astra · CH 92%`, the new
                             // model beside the previous model's figure.
                             ctx.modelSwitched();
-                            body.notice(`model → ${profName} (${profile.model}${providerLabel(profile.baseUrl, profile.upstream) === "" ? "" : ` ${providerLabel(profile.baseUrl, profile.upstream)}`}${effortTok !== undefined ? ` · ${effortTok}` : ""}) — takes effect on the next turn`);
+                            const hostLabel = providerLabel(profile.baseUrl, profile.upstream);
+                            body.modelNotice(`model → ${profName} (${profile.model}${hostLabel === "" ? "" : ` ${hostLabel}`}${effortTok !== undefined ? ` · ${effortTok}` : ""}) — takes effect on the next turn`, fromName, profName, `${profile.model}${hostLabel === "" ? "" : ` ${hostLabel}`}${effortTok !== undefined ? ` \u00b7 ${effortTok}` : ""} \u00b7 takes effect on the next turn`);
                             // MP-1 (0.40.7): when the switch changes WHO PAYS — another
                             // endpoint, or another credential for it — say so, once,
                             // under the switch line. A switch between two models on the
                             // same account says nothing more.
                             const payeeAfter = payeeOf(profile);
                             if (payeeBefore !== null && payeeBefore !== payeeAfter)
-                                body.notice(`paid by ${payeeAfter} from the next turn — was ${payeeBefore}`);
+                                body.metaNotice(`paid by ${payeeAfter} from the next turn — was ${payeeBefore}`, [{ label: "PAYER", sentence: `${payeeAfter} from the next turn \u00b7 was ${payeeBefore}` }]);
                         }
                     }
                 }

package/dist/index.js

@@ -1114,7 +1114,7 @@ async function chatLoop(first, firstId, input, autoCompact) {
                 return r.status === 0 ? r.stdout.trim() : null;
             });
             if (tmuxHint !== null)
-                body.notice(tmuxHint);
+                body.metaNotice(tmuxHint, [{ label: "HINT", sentence: tmuxHint }]);
             void announceUpdate();
         }
         else {

package/dist/replay.d.ts

@@ -34,6 +34,7 @@ export interface ReplayBody {
         isError: boolean;
         reason?: string | null;
         untimed?: boolean;
+        created?: boolean;
     }): void;
     notice(text: string): void;
     metaNotice(text: string, rows: readonly {

package/dist/replay.js

@@ -98,7 +98,8 @@ function replayTurn(body, turn, tasks) {
                     if (m !== null)
                         reason = m[1];
                 }
-                body.toolResult(String(e.callId), { content: text, isError: e.isError === true, reason, untimed: true });
+                const created = (e.tags ?? []).includes("created");
+                body.toolResult(String(e.callId), { content: text, isError: e.isError === true, reason, untimed: true, ...(created ? { created: true } : {}) });
                 results.add(String(e.callId));
                 break;
             }

package/dist/state.d.ts

@@ -35,6 +35,7 @@ export declare function codingToolOptions(): {
     readonly secretEnvNames: readonly string[];
     readonly protectedFiles: readonly string[];
     readonly tasks: (sessionId: string | undefined) => ShellTasks | undefined;
+    readonly observedRevision: (sessionId: string | undefined, full: string, kind?: "edit" | "write") => string | undefined;
     readonly limits?: {
         readonly minForegroundMs: number;
     };
@@ -441,4 +442,5 @@ export declare function setLastBinding(b: LastBinding): void;
 export declare function lastBinding(): LastBinding | null;
 export declare function setAcceptDrift(v: boolean): void;
 export declare function acceptDrift(): boolean;
+export declare function observedRevisionFromLog(sessionId: string | undefined, full: string, kind?: "edit" | "write"): string | undefined;
 export {};

package/dist/state.js

@@ -8,9 +8,10 @@
 import { execFileSync } from "node:child_process";
 import { readdirSync, readFileSync, realpathSync } from "node:fs";
 import { homedir } from "node:os";
-import { dirname, join } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { AT_CAP, AT_SKIP, Dock } from "@vincemakes/kiso-tui";
+import { projectMessages } from "@vincemakes/kiso-core";
 import { TaskManager } from "@vincemakes/kiso-runtime/internal";
 import { processTaskBackend } from "@vincemakes/kiso-tools-node";
 import { collectWriter } from "@vincemakes/kiso-subagent-ext";
@@ -53,6 +54,7 @@ export function codingToolOptions() {
         secretEnvNames: secretEnvNamesOf(configModels),
         protectedFiles: protectedFiles(),
         tasks: tasksFor,
+        observedRevision: observedRevisionFromLog,
         ...(Number.isFinite(minForeground) && minForeground >= 0 ? { limits: { minForegroundMs: minForeground } } : {}),
     };
 }
@@ -638,3 +640,87 @@ export function setAcceptDrift(v) {
 export function acceptDrift() {
     return acceptDriftValue;
 }
+/** O1 — the hidden observed revision. The revision the model last
+ *  OBSERVED for a file, rebuilt from the session's MODEL-VISIBLE history
+ *  (`projectMessages` over the durable log, so a receipt cleared by
+ *  microcompaction or covered by a summary no longer counts): the last
+ *  [rev:…] of a successful read_file / edit_file / write_file on that
+ *  file, or of an edit_file stale refusal (it carries the current text).
+ *  Never the disk's current revision — a stale write stays refused.
+ *  `kind: "write"` (a whole-file replace) also needs visible whole-file
+ *  knowledge: an unranged, uncapped read or an own write, followed only
+ *  by own mutations. The log is per session, so a child session (a
+ *  subagent) inherits no observation. */
+function realOrResolved(p) {
+    try {
+        return realpathSync(p);
+    }
+    catch {
+        return p;
+    }
+}
+export function observedRevisionFromLog(sessionId, full, kind = "edit") {
+    if (sessionId === undefined || activeStoreDir === "")
+        return undefined;
+    let text;
+    try {
+        text = readFileSync(join(activeStoreDir, `${sessionId}.jsonl`), "utf8");
+    }
+    catch {
+        return undefined;
+    }
+    const events = [];
+    for (const line of text.split("\n")) {
+        if (line === "")
+            continue;
+        try {
+            const e = JSON.parse(line).event;
+            if (e !== undefined)
+                events.push(e);
+        }
+        catch { /* a torn tail line */ }
+    }
+    let messages;
+    try {
+        messages = projectMessages(events);
+    }
+    catch {
+        return undefined;
+    }
+    const target = realOrResolved(full);
+    const calls = new Map();
+    let rev;
+    let wholeKnown = false;
+    for (const m of messages) {
+        if (m.role === "assistant") {
+            for (const b of m.blocks) {
+                if (b.type === "tool_use" && typeof b.input.path === "string") {
+                    calls.set(b.callId, { name: b.name, full: realOrResolved(resolve(process.cwd(), b.input.path)), ranged: b.input.offset !== undefined || b.input.limit !== undefined });
+                }
+            }
+        }
+        else if (m.role === "tool") {
+            const c = calls.get(m.callId);
+            if (c === undefined || c.full !== target)
+                continue;
+            const body = typeof m.content === "string" ? m.content : m.content.map((x) => (x.type === "text" ? x.text : "")).join("");
+            const hit = [...body.matchAll(/\[(rev:[0-9a-f]{16})\]/g)].pop();
+            if (hit === undefined)
+                continue;
+            if (!m.isError && (c.name === "read_file" || c.name === "edit_file" || c.name === "write_file")) {
+                rev = hit[1];
+                if (c.name === "read_file")
+                    wholeKnown = !c.ranged && !body.includes("(call again with offset=") && !body.includes("[output capped at");
+                else if (c.name === "write_file")
+                    wholeKnown = true;
+            }
+            else if (m.isError && c.name === "edit_file" && body.includes(" changed since ")) {
+                rev = hit[1];
+                wholeKnown = false;
+            }
+        }
+    }
+    if (kind === "write" && !wholeKnown)
+        return undefined;
+    return rev;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vincemakes/kiso-code",
-	"version": "0.49.0",
+	"version": "0.50.0",
 	"description": "kiso-code \u2014 the coding agent on kiso, the durable runtime for AI agents: kiso chat / kiso resume / kiso sessions.",
 	"type": "module",
 	"license": "MIT",
@@ -18,19 +18,19 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@vincemakes/kiso-ask-ext": "0.49.0",
-		"@vincemakes/kiso-core": "0.49.0",
-		"@vincemakes/kiso-evals": "0.49.0",
-		"@vincemakes/kiso-mcp-ext": "0.49.0",
-		"@vincemakes/kiso-provider-anthropic": "0.49.0",
-		"@vincemakes/kiso-provider-openai": "0.49.0",
-		"@vincemakes/kiso-provider-openai-responses": "0.49.0",
-		"@vincemakes/kiso-runtime": "0.49.0",
-		"@vincemakes/kiso-skills-ext": "0.49.0",
-		"@vincemakes/kiso-subagent-ext": "0.49.0",
-		"@vincemakes/kiso-tools-node": "0.49.0",
-		"@vincemakes/kiso-tui": "0.49.0",
-		"@vincemakes/kiso-tui-cells": "0.49.0"
+		"@vincemakes/kiso-ask-ext": "0.50.0",
+		"@vincemakes/kiso-core": "0.50.0",
+		"@vincemakes/kiso-evals": "0.50.0",
+		"@vincemakes/kiso-mcp-ext": "0.50.0",
+		"@vincemakes/kiso-provider-anthropic": "0.50.0",
+		"@vincemakes/kiso-provider-openai": "0.50.0",
+		"@vincemakes/kiso-provider-openai-responses": "0.50.0",
+		"@vincemakes/kiso-runtime": "0.50.0",
+		"@vincemakes/kiso-skills-ext": "0.50.0",
+		"@vincemakes/kiso-subagent-ext": "0.50.0",
+		"@vincemakes/kiso-tools-node": "0.50.0",
+		"@vincemakes/kiso-tui": "0.50.0",
+		"@vincemakes/kiso-tui-cells": "0.50.0"
 	},
 	"devDependencies": {
 		"@types/node": "^26.1.2",