@vincemakes/kiso-code 0.51.1 → 0.52.0

package/dist/auth/credentials.js

@@ -21,7 +21,7 @@
  */
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { kisoHome } from "../state.js";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 export class AuthError extends Error {
 }
 /** The providers a credential can be stored for (the runtime's built-in

package/dist/coding-prompt.js

@@ -3,7 +3,6 @@
  * project-instruction injection. Moved verbatim from index.ts (R1,
  * 2026-09-23): the entry module keeps no prompt text of its own.
  */
-import { protectedFiles } from "./state.js";
 import { isProtectedPath, protectedIdentity } from "@vincemakes/kiso-tools-node";
 import { join } from "node:path";
 import { readFileSync } from "node:fs";

package/dist/config-door.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The coding product's configuration and sign-in, as a library door: the
+ * profiles in `~/.kiso/config.json`, the credential store, the adapter
+ * options a profile resolves to, the efforts the person last picked, and the
+ * per-project session folders. A host that is not the terminal (the desktop
+ * app) reads the same login and the same Works as the terminal does.
+ *
+ * Almost read-only: the one write is `setCredential`, the terminal's own single
+ * credential write path (an API key; no OAuth flow), and `scaffoldFirstRun`, the
+ * terminal's first-run files. No project config (it needs the terminal's trust prompt). Nothing here
+ * reaches the terminal's state or UI; a test holds that line.
+ */
+import { type KisoConfig, type ModelProfile } from "./config.js";
+export { ConfigError, applyEffortDeclarations, authForProfile, loadUserConfig, mergeConfigs, profileAvailable, resolveAutoCompact, resolveContextWindow, resolveModel, unavailableReason, } from "./config.js";
+export type { KisoConfig, ModelProfile, ProfileAuth, ProfileKind, ResolvedModel } from "./config.js";
+export { adapterOptionsFor } from "./auth/adapter-options.js";
+export type { AdapterAuth, AdapterOptions } from "./auth/adapter-options.js";
+export { AuthError, KNOWN_PROVIDERS, endpointCredentialId, maskSecret, providerIdOf, setCredential } from "./auth/credentials.js";
+export type { Credential } from "./auth/credentials.js";
+export { preferences, rememberEffort, startingEffort } from "./preferences.js";
+export { isFirstRun, scaffoldFirstRun } from "./first-run.js";
+export { fauxScript as demoScript } from "./demo-script.js";
+export { canonicalPath, claimProjectDir, projectDirFor, projectLayoutActive, sessionFolders } from "./projects.js";
+export type { SessionFolder } from "./projects.js";
+/**
+ * The context window someone stated for a profile, or null when nobody has: the window the person set (the environment, the profile,
+ * the configuration, in that order), else the metadata registry's for the profile's endpoint, else for the model's own identity.
+ * The terminal's own chain, less what only a running terminal knows (a window an endpoint's refusal taught it).
+ */
+export declare function contextWindowOf(profile: Pick<ModelProfile, "model" | "baseUrl" | "contextWindow">, config?: KisoConfig): number | null;
+/** The reasoning levels a profile's route accepts, and the one it uses when none is sent; null when nobody states them. */
+export declare function effortOptions(profile: Pick<ModelProfile, "model" | "baseUrl">): {
+    readonly levels: readonly string[];
+    readonly default: string | null;
+} | null;

package/dist/config-door.js

@@ -0,0 +1,35 @@
+/**
+ * The coding product's configuration and sign-in, as a library door: the
+ * profiles in `~/.kiso/config.json`, the credential store, the adapter
+ * options a profile resolves to, the efforts the person last picked, and the
+ * per-project session folders. A host that is not the terminal (the desktop
+ * app) reads the same login and the same Works as the terminal does.
+ *
+ * Almost read-only: the one write is `setCredential`, the terminal's own single
+ * credential write path (an API key; no OAuth flow), and `scaffoldFirstRun`, the
+ * terminal's first-run files. No project config (it needs the terminal's trust prompt). Nothing here
+ * reaches the terminal's state or UI; a test holds that line.
+ */
+import { lookupContextWindow, lookupModelMetadata } from "@vincemakes/kiso-runtime/internal";
+import { resolveContextWindow } from "./config.js";
+export { ConfigError, applyEffortDeclarations, authForProfile, loadUserConfig, mergeConfigs, profileAvailable, resolveAutoCompact, resolveContextWindow, resolveModel, unavailableReason, } from "./config.js";
+export { adapterOptionsFor } from "./auth/adapter-options.js";
+export { AuthError, KNOWN_PROVIDERS, endpointCredentialId, maskSecret, providerIdOf, setCredential } from "./auth/credentials.js";
+export { preferences, rememberEffort, startingEffort } from "./preferences.js";
+export { isFirstRun, scaffoldFirstRun } from "./first-run.js";
+export { fauxScript as demoScript } from "./demo-script.js";
+export { canonicalPath, claimProjectDir, projectDirFor, projectLayoutActive, sessionFolders } from "./projects.js";
+/**
+ * The context window someone stated for a profile, or null when nobody has: the window the person set (the environment, the profile,
+ * the configuration, in that order), else the metadata registry's for the profile's endpoint, else for the model's own identity.
+ * The terminal's own chain, less what only a running terminal knows (a window an endpoint's refusal taught it).
+ */
+export function contextWindowOf(profile, config) {
+    const set = resolveContextWindow(config ?? {}, profile);
+    return set ?? lookupContextWindow(profile.model, profile.baseUrl)?.tokens ?? null;
+}
+/** The reasoning levels a profile's route accepts, and the one it uses when none is sent; null when nobody states them. */
+export function effortOptions(profile) {
+    const effort = lookupModelMetadata(profile.model, profile.baseUrl)?.capabilities.reasoning?.effort ?? null;
+    return effort === null ? null : { levels: effort.levels, default: effort.default };
+}

package/dist/config.js

@@ -34,7 +34,7 @@
 import { readFileSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { join, win32 } from "node:path";
-import { kisoHome } from "./state.js";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 import { MODE_VALUES, parseMode } from "./mode.js";
 import { AuthError, effectiveBaseUrl, endpointCredentialId, getCredential, providerIdOf } from "./auth/credentials.js";
 import { BUILTIN_MANIFESTS, declareEffort } from "@vincemakes/kiso-runtime/internal";

package/dist/demo-script.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The keyless demo script, as plain data with no imports of its own: the terminal's first-run demo and any other host that shows the
+ * same tour (the desktop app's first-run guide) read it from here.
+ */
+import type { FauxScript } from "@vincemakes/kiso-evals";
+/**
+ * The keyless demo script: tours the tools so `kiso chat` exercises them.
+ * FOUR turns: each user turn consumes two model rounds (call → result →
+ * summary), so at least two consecutive user turns work in one process
+ * (F group).
+ */
+export declare function fauxScript(): FauxScript;

package/dist/demo-script.js

@@ -0,0 +1,41 @@
+/**
+ * The keyless demo script: tours the tools so `kiso chat` exercises them.
+ * FOUR turns: each user turn consumes two model rounds (call → result →
+ * summary), so at least two consecutive user turns work in one process
+ * (F group).
+ */
+export function fauxScript() {
+    return [
+        {
+            events: [
+                // bootstrap P1: a multi-delta thinking block — renders as ONE
+                // streaming segment, not one line per token.
+                { type: "thinking", text: "Let me think about" },
+                { type: "thinking", text: " the workspace" },
+                { type: "thinking", text: " before acting." },
+                { type: "text_start" },
+                { type: "text_delta", text: "I'm the faux model. Let me look at the working directory." },
+                { type: "tool_call_end", callId: "c1", name: "list_dir", input: {} },
+                { type: "stop", reason: "tool_use" },
+            ],
+        },
+        {
+            events: [
+                { type: "text_delta", text: "I see the workspace. What would you like me to inspect or change?" },
+                { type: "stop", reason: "end_turn" },
+            ],
+        },
+        {
+            events: [
+                { type: "text_delta", text: "The faux model is still here, with full context." },
+                { type: "stop", reason: "end_turn" },
+            ],
+        },
+        {
+            events: [
+                { type: "text_delta", text: "And this is the end of the scripted tour." },
+                { type: "stop", reason: "end_turn" },
+            ],
+        },
+    ];
+}

package/dist/faux-glue.d.ts

@@ -5,6 +5,8 @@
  */
 import type { FauxScript } from "@vincemakes/kiso-evals";
 import { type LineInput } from "./state.js";
+import { fauxScript } from "./demo-script.js";
+export { fauxScript };
 /**
  * E area: how many faux-script turns a session has already consumed. The faux
  * provider's script counter is per-process, so a FRESH process that resumes
@@ -23,13 +25,6 @@ export declare function fauxSkip(id: string): number;
  * multi-tool trajectory. Absent → the built-in demo script.
  */
 export declare function readFauxScript(): FauxScript;
-/**
- * The keyless demo script: tours the tools so `kiso chat` exercises them.
- * FOUR turns: each user turn consumes two model rounds (call → result →
- * summary), so at least two consecutive user turns work in one process
- * (F group).
- */
-export declare function fauxScript(): FauxScript;
 /** round 10: a faux-mode run whose scripted turns are exhausted must NOT print a
  * provider error and exit 0 — the honest outcome is a loud message and a
  * non-zero exit. Thrown as a CONTROLLED exception (never process.exit):

package/dist/faux-glue.js

@@ -7,6 +7,8 @@ import { readFileSync } from "node:fs";
 import { escapeTerminal } from "@vincemakes/kiso-tui";
 import { SessionStore } from "@vincemakes/kiso-runtime";
 import { sessionsDir } from "./state.js";
+import { fauxScript } from "./demo-script.js";
+export { fauxScript };
 /**
  * E area: how many faux-script turns a session has already consumed. The faux
  * provider's script counter is per-process, so a FRESH process that resumes
@@ -47,47 +49,6 @@ export function readFauxScript() {
         process.exit(1);
     }
 }
-/**
- * The keyless demo script: tours the tools so `kiso chat` exercises them.
- * FOUR turns: each user turn consumes two model rounds (call → result →
- * summary), so at least two consecutive user turns work in one process
- * (F group).
- */
-export function fauxScript() {
-    return [
-        {
-            events: [
-                // bootstrap P1: a multi-delta thinking block — renders as ONE
-                // streaming segment, not one line per token.
-                { type: "thinking", text: "Let me think about" },
-                { type: "thinking", text: " the workspace" },
-                { type: "thinking", text: " before acting." },
-                { type: "text_start" },
-                { type: "text_delta", text: "I'm the faux model. Let me look at the working directory." },
-                { type: "tool_call_end", callId: "c1", name: "list_dir", input: {} },
-                { type: "stop", reason: "tool_use" },
-            ],
-        },
-        {
-            events: [
-                { type: "text_delta", text: "I see the workspace. What would you like me to inspect or change?" },
-                { type: "stop", reason: "end_turn" },
-            ],
-        },
-        {
-            events: [
-                { type: "text_delta", text: "The faux model is still here, with full context." },
-                { type: "stop", reason: "end_turn" },
-            ],
-        },
-        {
-            events: [
-                { type: "text_delta", text: "And this is the end of the scripted tour." },
-                { type: "stop", reason: "end_turn" },
-            ],
-        },
-    ];
-}
 /** round 10: a faux-mode run whose scripted turns are exhausted must NOT print a
  * provider error and exit 0 — the honest outcome is a loud message and a
  * non-zero exit. Thrown as a CONTROLLED exception (never process.exit):

package/dist/first-run.js

@@ -10,7 +10,7 @@
  */
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
-import { kisoHome } from "./state.js";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 /** The sentinel: present = the home has seen the 0.1.45 first-run
  *  sequence (its config surface exists — no re-scaffold, no re-note). */
 const SENTINEL = "first-run";

package/dist/index.js

@@ -29,7 +29,8 @@ import { newSessionId } from "./session-id.js";
 import { createInterface } from "node:readline";
 import { Readable } from "node:stream";
 import { fileURLToPath } from "node:url";
-import { basename, join } from "node:path";
+import { createRequire } from "node:module";
+import { basename, dirname, join } from "node:path";
 import { Body, Editor, PROMPT, bannerLines, currentGround, currentGroundRgb, parseOscColor, resolveGround, setGround, escapeTerminal, extensionsBannerText, extensionsFact, idColumn, interactivePrompt, palette, renderSessionLine, sessionListFooter, sessionListHeader, sessionListRow, sessionListUnknownLine, slashCommandNames } from "@vincemakes/kiso-tui";
 import { disposeExtensions, SessionStore } from "@vincemakes/kiso-runtime";
 import { listSessionSidecars, migrateSummaries, readProfile, readSessionName, summaryMigrationPending } from "@vincemakes/kiso-runtime/internal";
@@ -1266,6 +1267,32 @@ async function main() {
         process.exitCode = await applyPatch(args.slice(1));
         return;
     }
+    // W2 (2026-11-01): `kiso web` runs the web app, its own package (@vincemakes/kiso-web), when it is
+    // installed beside kiso, and names the install command when it is not. The FIRST argument alone
+    // triggers it, before any flag is read: every other argument is the web app's (`kiso web --no-open`),
+    // and a session named "web" still opens with `kiso chat web`. No terminal UI is drawn on this path,
+    // so the host's own ctrl+C handling decides, and its exit is this command's exit.
+    if (args[0] === "web") {
+        let bin;
+        try {
+            const manifest = createRequire(import.meta.url).resolve("@vincemakes/kiso-web/package.json");
+            bin = join(dirname(manifest), JSON.parse(readFileSync(manifest, "utf8")).bin["kiso-web"] ?? "");
+        }
+        catch {
+            process.stderr.write("kiso web: the web app is not installed — npm i -g @vincemakes/kiso-web\n");
+            process.exitCode = 1;
+            return;
+        }
+        const child = spawn(process.execPath, [bin, ...args.slice(1)], { stdio: "inherit" });
+        process.on("SIGINT", () => { }); // the terminal sends it to the host too
+        for (const sig of ["SIGTERM", "SIGHUP"])
+            process.on(sig, () => child.kill(sig));
+        process.exitCode = await new Promise((done) => {
+            child.on("error", () => done(1));
+            child.on("exit", (code) => done(code ?? 1));
+        });
+        return;
+    }
     // XP-1: --accept-drift (a flag, never an env var) authorizes opening a
     // session whose recorded profile materially drifted — the
     // acknowledgement is recorded as a new revision by the runtime.
@@ -1864,6 +1891,7 @@ async function main() {
                     "  kiso logout <provider>   remove the stored credential (or --endpoint <url>)\n" +
                     "  kiso auth               list stored credentials (keys masked)\n" +
                     "  kiso update             install the latest release (npm i -g @vincemakes/kiso-code@latest)\n" +
+                    "  kiso web [--port <n>] [--no-open]   the web app in the browser (its own package: npm i -g @vincemakes/kiso-web)\n" +
                     "  kiso help               this help\n\n" +
                     "flags (any position):\n" +
                     "  --model <profile|provider/model>   pick the model (also /model in-session)\n" +

package/dist/mode.d.ts

@@ -122,8 +122,8 @@ export declare function applyModeState(s: ModeState): void;
  *  deny>allow>ask over the SPEAKING verdicts (abstain = no opinion), so a
  *  user extension's deny wins over any mode tier, full-access included
  *  (the monotonicity e2e pins it). */
-export declare function modeExtensions(workspaceRoot?: () => string): readonly KisoExtension[];
+export declare function modeExtensions(workspaceRoot?: () => string, currentTier?: () => Mode): readonly KisoExtension[];
 /** The plan tier's system prompt addition — injected at startup when the
  *  initial mode is plan (the session prompt is fixed at creation; runtime
  *  switches are guided by the deny reason). */
-export declare function modeSystemPrompt(): string | undefined;
+export declare function modeSystemPrompt(tier?: Mode): string | undefined;

package/dist/mode.js

@@ -165,9 +165,9 @@ export function applyModeState(s) {
     current = s.mode;
     dontAsk = s.dontAsk;
 }
-/** The per-tier verdict for a tool call — only when this tier is current. */
-function tierVerdict(tier, call, workspaceRoot) {
-    if (tier !== current)
+/** The per-tier verdict for a tool call — only when this tier is current (`now`: the tier in force, the process's own by default). */
+function tierVerdict(tier, call, workspaceRoot, now) {
+    if (tier !== now)
         return { action: "abstain" }; // not our tier — no opinion
     switch (tier) {
         case "manual":
@@ -215,12 +215,13 @@ function tierVerdict(tier, call, workspaceRoot) {
  *  deny>allow>ask over the SPEAKING verdicts (abstain = no opinion), so a
  *  user extension's deny wins over any mode tier, full-access included
  *  (the monotonicity e2e pins it). */
-export function modeExtensions(workspaceRoot = () => process.cwd()) {
-    return [...MODES.filter((m) => m === current), ...MODES.filter((m) => m !== current)].map((m) => ({
+export function modeExtensions(workspaceRoot = () => process.cwd(), currentTier = getMode) {
+    // the tier in force is read on every decision, so a host that holds several sessions can give each its own (the terminal passes none)
+    return [...MODES.filter((m) => m === currentTier()), ...MODES.filter((m) => m !== currentTier())].map((m) => ({
         name: `mode:${m}`,
         approvals: [
             {
-                decide: async (payload) => tierVerdict(m, { name: payload.name, input: payload.input ?? {} }, workspaceRoot),
+                decide: async (payload) => tierVerdict(m, { name: payload.name, input: payload.input ?? {} }, workspaceRoot, currentTier()),
             },
         ],
     }));
@@ -228,8 +229,8 @@ export function modeExtensions(workspaceRoot = () => process.cwd()) {
 /** The plan tier's system prompt addition — injected at startup when the
  *  initial mode is plan (the session prompt is fixed at creation; runtime
  *  switches are guided by the deny reason). */
-export function modeSystemPrompt() {
-    if (current !== "plan")
+export function modeSystemPrompt(tier = current) {
+    if (tier !== "plan")
         return undefined;
     return ("plan mode: read-only. You may inspect the workspace (read_file, list_dir, search_text, " +
         "read_skill) but every write/edit/shell call is DENIED with 'plan mode: read-only'. " +

package/dist/policy.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The coding product's policy, as a library door: the prompt and tool rules,
+ * and the extensions that bound what a coding agent may do (the catastrophe
+ * floor, the protected-file shell guard, the read-only shell allow, the loop
+ * breaker, the mode tiers). Everything here is state-free except the mode
+ * tier, which is process-local (`getMode` / `setMode`). A host that is not
+ * the terminal (the desktop app) composes the same agent from these and the
+ * public runtime and tool packages.
+ */
+export { CODING_TOOL_RULES, SYSTEM_PROMPT, composeSystemPrompt } from "./coding-prompt.js";
+export { breakerExtension } from "./breaker.js";
+export { floorExtension } from "./floor.js";
+export { MODE_LABEL, OFFERED_MODES, getMode, modeExtensions, modeSystemPrompt, setMode } from "./mode.js";
+export { protectedShellExtension } from "./protected-shell.js";
+export { guardSavedAllow, neverInheritedCall } from "./protected-writes.js";
+export { readOnlyShellExtension } from "./readonly-shell.js";

package/dist/policy.js

@@ -0,0 +1,16 @@
+/**
+ * The coding product's policy, as a library door: the prompt and tool rules,
+ * and the extensions that bound what a coding agent may do (the catastrophe
+ * floor, the protected-file shell guard, the read-only shell allow, the loop
+ * breaker, the mode tiers). Everything here is state-free except the mode
+ * tier, which is process-local (`getMode` / `setMode`). A host that is not
+ * the terminal (the desktop app) composes the same agent from these and the
+ * public runtime and tool packages.
+ */
+export { CODING_TOOL_RULES, SYSTEM_PROMPT, composeSystemPrompt } from "./coding-prompt.js";
+export { breakerExtension } from "./breaker.js";
+export { floorExtension } from "./floor.js";
+export { MODE_LABEL, OFFERED_MODES, getMode, modeExtensions, modeSystemPrompt, setMode } from "./mode.js";
+export { protectedShellExtension } from "./protected-shell.js";
+export { guardSavedAllow, neverInheritedCall } from "./protected-writes.js";
+export { readOnlyShellExtension } from "./readonly-shell.js";

package/dist/preferences.js

@@ -15,7 +15,7 @@
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { lookupModelMetadata, resolveReasoning } from "@vincemakes/kiso-runtime/internal";
-import { kisoHome } from "./state.js";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 let prefs = null;
 let prefsPath = null;
 export function preferencesPath(home = kisoHome()) {

package/dist/state.d.ts

@@ -7,7 +7,7 @@
  */
 import { Dock, type AtItem, type Body, type PanelVerdict, type PanelView, type SaferAnswer, type SessionCardView } from "@vincemakes/kiso-tui";
 import type { TaskDeliveryItem } from "@vincemakes/kiso-core";
-import type { KisoExtension, StoreRecord } from "@vincemakes/kiso-runtime";
+import { kisoHome, type KisoExtension, type StoreRecord } from "@vincemakes/kiso-runtime";
 import type { ReasoningSetting } from "@vincemakes/kiso-runtime/internal";
 import { TaskManager } from "@vincemakes/kiso-runtime/internal";
 import { type ShellTasks } from "@vincemakes/kiso-tools-node";
@@ -15,7 +15,7 @@ import { type ShellTasks } from "@vincemakes/kiso-tools-node";
  *  it (sessions, trust, extensions, mcp config, skills). The dedicated
  *  env vars (KISO_EXTENSIONS_DIR / KISO_MCP_CONFIG / KISO_SKILLS_DIR)
  *  still override their own path; nothing hard-codes ~/.kiso anymore. */
-export declare function kisoHome(): string;
+export { kisoHome };
 /** DC-49 — the workspace the coding tools may touch, and the one place it
  *  is decided. The session's own tool set and the `!` command's runner both
  *  need it, and two copies of a ruling-bearing literal is how a later DC-49
@@ -445,4 +445,3 @@ export declare function lastBinding(): LastBinding | null;
 export declare function setAcceptDrift(v: boolean): void;
 export declare function acceptDrift(): boolean;
 export declare function observedRevisionFromLog(sessionId: string | undefined, full: string, kind?: "edit" | "write"): string | undefined;
-export {};

package/dist/state.js

@@ -12,8 +12,9 @@ import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { AT_CAP, AT_SKIP, Dock } from "@vincemakes/kiso-tui";
 import { projectMessages } from "@vincemakes/kiso-core";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 import { TaskManager } from "@vincemakes/kiso-runtime/internal";
-import { processTaskBackend } from "@vincemakes/kiso-tools-node";
+import { processTaskBackend, readShowsWholeFile } from "@vincemakes/kiso-tools-node";
 import { collectWriter } from "@vincemakes/kiso-subagent-ext";
 import { canonicalPath, LEGACY_SESSIONS_DIR, projectDirFor, projectLayoutActive } from "./projects.js";
 import { taskNoticeLines, taskWhat } from "./task-notice.js";
@@ -21,9 +22,7 @@ import { taskNoticeLines, taskWhat } from "./task-notice.js";
  *  it (sessions, trust, extensions, mcp config, skills). The dedicated
  *  env vars (KISO_EXTENSIONS_DIR / KISO_MCP_CONFIG / KISO_SKILLS_DIR)
  *  still override their own path; nothing hard-codes ~/.kiso anymore. */
-export function kisoHome() {
-    return process.env.KISO_HOME ?? join(homedir(), ".kiso");
-}
+export { kisoHome };
 /** DC-49 — the workspace the coding tools may touch, and the one place it
  *  is decided. The session's own tool set and the `!` command's runner both
  *  need it, and two copies of a ruling-bearing literal is how a later DC-49
@@ -709,7 +708,7 @@ export function observedRevisionFromLog(sessionId, full, kind = "edit") {
         if (m.role === "assistant") {
             for (const b of m.blocks) {
                 if (b.type === "tool_use" && typeof b.input.path === "string") {
-                    calls.set(b.callId, { name: b.name, full: realOrResolved(resolve(process.cwd(), b.input.path)), ranged: b.input.offset !== undefined || b.input.limit !== undefined });
+                    calls.set(b.callId, { name: b.name, full: realOrResolved(resolve(process.cwd(), b.input.path)), input: b.input });
                 }
             }
         }
@@ -722,9 +721,11 @@ export function observedRevisionFromLog(sessionId, full, kind = "edit") {
             if (hit === undefined)
                 continue;
             if (!m.isError && (c.name === "read_file" || c.name === "edit_file" || c.name === "write_file")) {
+                const sameRevision = hit[1] === rev;
                 rev = hit[1];
+                // a later partial read of the SAME revision keeps what the model already saw whole; another revision starts over
                 if (c.name === "read_file")
-                    wholeKnown = !c.ranged && !body.includes("(call again with offset=") && !body.includes("[output capped at");
+                    wholeKnown = readShowsWholeFile(c.input, body) || (wholeKnown && sameRevision);
                 else if (c.name === "write_file")
                     wholeKnown = true;
             }

package/dist/task-notice.js

@@ -90,8 +90,12 @@ export function lostReason(task) {
         // an unreadable journal: the general reason below
     }
     const unconfirmed = records.find((r) => r.type === "stop_unconfirmed");
-    if (unconfirmed !== undefined)
-        return `its stop could not be confirmed (pids ${unconfirmed.pids.join(", ")})`;
+    if (unconfirmed !== undefined) {
+        return unconfirmed.pids.length > 0 ? `its stop could not be confirmed (pids ${unconfirmed.pids.join(", ")})` : "its stop could not be confirmed (what still held it could not be named)";
+    }
+    const failed = records.find((r) => r.type === "handover_failed");
+    if (failed !== undefined)
+        return `its hand-over to a task failed (${failed.reason}); the command was running and its end is not known`;
     if (task.backend === "foreground")
         return "the kiso that held it ended without recording its end";
     return "its runner is gone without recording its end";

package/package.json

@@ -1,12 +1,23 @@
 {
 	"name": "@vincemakes/kiso-code",
-	"version": "0.51.1",
+	"version": "0.52.0",
 	"description": "kiso-code \u2014 the coding agent on kiso, the durable runtime for AI agents: kiso chat / kiso resume / kiso sessions.",
 	"type": "module",
 	"license": "MIT",
 	"bin": {
 		"kiso": "dist/index.js"
 	},
+	"exports": {
+		"./config": {
+			"types": "./dist/config-door.d.ts",
+			"default": "./dist/config-door.js"
+		},
+		"./policy": {
+			"types": "./dist/policy.d.ts",
+			"default": "./dist/policy.js"
+		},
+		"./package.json": "./package.json"
+	},
 	"files": [
 		"dist",
 		"README.md",
@@ -18,19 +29,19 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@vincemakes/kiso-ask-ext": "0.51.1",
-		"@vincemakes/kiso-core": "0.51.1",
-		"@vincemakes/kiso-evals": "0.51.1",
-		"@vincemakes/kiso-mcp-ext": "0.51.1",
-		"@vincemakes/kiso-provider-anthropic": "0.51.1",
-		"@vincemakes/kiso-provider-openai": "0.51.1",
-		"@vincemakes/kiso-provider-openai-responses": "0.51.1",
-		"@vincemakes/kiso-runtime": "0.51.1",
-		"@vincemakes/kiso-skills-ext": "0.51.1",
-		"@vincemakes/kiso-subagent-ext": "0.51.1",
-		"@vincemakes/kiso-tools-node": "0.51.1",
-		"@vincemakes/kiso-tui": "0.51.1",
-		"@vincemakes/kiso-tui-cells": "0.51.1"
+		"@vincemakes/kiso-ask-ext": "0.52.0",
+		"@vincemakes/kiso-core": "0.52.0",
+		"@vincemakes/kiso-evals": "0.52.0",
+		"@vincemakes/kiso-mcp-ext": "0.52.0",
+		"@vincemakes/kiso-provider-anthropic": "0.52.0",
+		"@vincemakes/kiso-provider-openai": "0.52.0",
+		"@vincemakes/kiso-provider-openai-responses": "0.52.0",
+		"@vincemakes/kiso-runtime": "0.52.0",
+		"@vincemakes/kiso-skills-ext": "0.52.0",
+		"@vincemakes/kiso-subagent-ext": "0.52.0",
+		"@vincemakes/kiso-tools-node": "0.52.0",
+		"@vincemakes/kiso-tui": "0.52.0",
+		"@vincemakes/kiso-tui-cells": "0.52.0"
 	},
 	"devDependencies": {
 		"@types/node": "^26.1.2",