@vincemakes/kiso-code 0.51.1 → 0.53.0

package/dist/auth/credentials.js

@@ -21,7 +21,7 @@
  */
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { kisoHome } from "../state.js";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 export class AuthError extends Error {
 }
 /** The providers a credential can be stored for (the runtime's built-in

package/dist/chat.d.ts

@@ -411,5 +411,7 @@ export interface ChatNav {
     /** 0.40.0: an id outside this project's folder — refused, or opened where it is */
     readonly route?: (id: string) => SessionRoute | null;
     readonly pick?: () => Promise<string | null>;
+    /** the session's first message was sent: the caller may title the session from it (Session.title) */
+    readonly titled?: (firstMessage: string) => void;
 }
 export declare function chat(session: AgentSession, faux: boolean, input: LineInput, autoCompact?: AutoCompact, nav?: ChatNav, seed?: readonly string[]): Promise<ChatEnd>;

package/dist/chat.js

@@ -1386,7 +1386,11 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
         // 0.40.0: a skill turn is not scanned either — its text is a
         // SKILL.md body, and a body that mentions `diagram.png` must not
         // attach a file from the workspace the person never pointed at.
+        input.setGhost?.(null); // a new turn: the last run's follow-up no longer applies
         const content = via !== undefined ? text : attachImages(text, input.attachments?.(), protectedFiles());
+        // the person's first message of the session: a title is made from it beside the run, never in its way
+        if (via === undefined && !session.log.all.some((e) => e.type === "user_input"))
+            nav?.titled?.(text);
         // ADR-0058: a task notice is the runtime's input — source "system"
         const run = via !== undefined ? session.run(content, { via, ...(via.kind === "tasks" ? { source: "system" } : {}) }) : session.run(content);
         currentRun = run;
@@ -1435,6 +1439,15 @@ export async function chat(session, faux, input, autoCompact, nav, seed) {
                 // round 8: after EVERY turn the prompt is re-armed — the human
                 // never types blind after the first turn.
                 input.prompt();
+                // the follow-up (owner 2026-11-03): after a run that ended well, the line the person may send next,
+                // asked of the session's own model with the run's own prefix (Session.followUp); shown dim in the
+                // empty box only while no other turn has started or waits; off with the faux model and KISO_FOLLOWUP=off
+                if (last?.type === "terminal" && last.outcome.kind === "completed" && !faux && input.setGhost !== undefined && process.env["KISO_FOLLOWUP"] !== "off" && queued === 0) {
+                    void session.followUp({ maxTokens: 200, signal: AbortSignal.timeout(15_000) }).then((line) => {
+                        if (turnNo === myTurn && currentRun === null && queued === 0)
+                            input.setGhost?.(line === "" ? null : line);
+                    }, () => undefined);
+                }
                 // the ergonomics batch C8: the opt-in auto-compact — checked AFTER the
                 // turn ended (the run's terminal is in the log, the ratio
                 // is post-run).

package/dist/coding-prompt.js

@@ -3,7 +3,6 @@
  * project-instruction injection. Moved verbatim from index.ts (R1,
  * 2026-09-23): the entry module keeps no prompt text of its own.
  */
-import { protectedFiles } from "./state.js";
 import { isProtectedPath, protectedIdentity } from "@vincemakes/kiso-tools-node";
 import { join } from "node:path";
 import { readFileSync } from "node:fs";

package/dist/config-door.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The coding product's configuration and sign-in, as a library door: the
+ * profiles in `~/.kiso/config.json`, the credential store, the adapter
+ * options a profile resolves to, the efforts the person last picked, and the
+ * per-project session folders. A host that is not the terminal (the desktop
+ * app) reads the same login and the same Works as the terminal does.
+ *
+ * Almost read-only: the one write is `setCredential`, the terminal's own single
+ * credential write path (an API key; no OAuth flow), and `scaffoldFirstRun`, the
+ * terminal's first-run files. No project config (it needs the terminal's trust prompt). Nothing here
+ * reaches the terminal's state or UI; a test holds that line.
+ */
+import { type KisoConfig, type ModelProfile } from "./config.js";
+export { ConfigError, applyEffortDeclarations, authForProfile, loadUserConfig, mergeConfigs, profileAvailable, resolveAutoCompact, resolveContextWindow, resolveModel, unavailableReason, } from "./config.js";
+export type { KisoConfig, ModelProfile, ProfileAuth, ProfileKind, ResolvedModel } from "./config.js";
+export { adapterOptionsFor } from "./auth/adapter-options.js";
+export type { AdapterAuth, AdapterOptions } from "./auth/adapter-options.js";
+export { AuthError, KNOWN_PROVIDERS, endpointCredentialId, maskSecret, providerIdOf, setCredential } from "./auth/credentials.js";
+export type { Credential } from "./auth/credentials.js";
+export { preferences, rememberEffort, startingEffort } from "./preferences.js";
+export { isFirstRun, scaffoldFirstRun } from "./first-run.js";
+export { fauxScript as demoScript } from "./demo-script.js";
+export { canonicalPath, claimProjectDir, projectDirFor, projectLayoutActive, sessionFolders } from "./projects.js";
+export type { SessionFolder } from "./projects.js";
+/**
+ * The context window someone stated for a profile, or null when nobody has: the window the person set (the environment, the profile,
+ * the configuration, in that order), else the metadata registry's for the profile's endpoint, else for the model's own identity.
+ * The terminal's own chain, less what only a running terminal knows (a window an endpoint's refusal taught it).
+ */
+export declare function contextWindowOf(profile: Pick<ModelProfile, "model" | "baseUrl" | "contextWindow">, config?: KisoConfig): number | null;
+/** The reasoning levels a profile's route accepts, and the one it uses when none is sent; null when nobody states them. */
+export declare function effortOptions(profile: Pick<ModelProfile, "model" | "baseUrl">): {
+    readonly levels: readonly string[];
+    readonly default: string | null;
+} | null;

package/dist/config-door.js

@@ -0,0 +1,35 @@
+/**
+ * The coding product's configuration and sign-in, as a library door: the
+ * profiles in `~/.kiso/config.json`, the credential store, the adapter
+ * options a profile resolves to, the efforts the person last picked, and the
+ * per-project session folders. A host that is not the terminal (the desktop
+ * app) reads the same login and the same Works as the terminal does.
+ *
+ * Almost read-only: the one write is `setCredential`, the terminal's own single
+ * credential write path (an API key; no OAuth flow), and `scaffoldFirstRun`, the
+ * terminal's first-run files. No project config (it needs the terminal's trust prompt). Nothing here
+ * reaches the terminal's state or UI; a test holds that line.
+ */
+import { lookupContextWindow, lookupModelMetadata } from "@vincemakes/kiso-runtime/internal";
+import { resolveContextWindow } from "./config.js";
+export { ConfigError, applyEffortDeclarations, authForProfile, loadUserConfig, mergeConfigs, profileAvailable, resolveAutoCompact, resolveContextWindow, resolveModel, unavailableReason, } from "./config.js";
+export { adapterOptionsFor } from "./auth/adapter-options.js";
+export { AuthError, KNOWN_PROVIDERS, endpointCredentialId, maskSecret, providerIdOf, setCredential } from "./auth/credentials.js";
+export { preferences, rememberEffort, startingEffort } from "./preferences.js";
+export { isFirstRun, scaffoldFirstRun } from "./first-run.js";
+export { fauxScript as demoScript } from "./demo-script.js";
+export { canonicalPath, claimProjectDir, projectDirFor, projectLayoutActive, sessionFolders } from "./projects.js";
+/**
+ * The context window someone stated for a profile, or null when nobody has: the window the person set (the environment, the profile,
+ * the configuration, in that order), else the metadata registry's for the profile's endpoint, else for the model's own identity.
+ * The terminal's own chain, less what only a running terminal knows (a window an endpoint's refusal taught it).
+ */
+export function contextWindowOf(profile, config) {
+    const set = resolveContextWindow(config ?? {}, profile);
+    return set ?? lookupContextWindow(profile.model, profile.baseUrl)?.tokens ?? null;
+}
+/** The reasoning levels a profile's route accepts, and the one it uses when none is sent; null when nobody states them. */
+export function effortOptions(profile) {
+    const effort = lookupModelMetadata(profile.model, profile.baseUrl)?.capabilities.reasoning?.effort ?? null;
+    return effort === null ? null : { levels: effort.levels, default: effort.default };
+}

package/dist/config.js

@@ -34,7 +34,7 @@
 import { readFileSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { join, win32 } from "node:path";
-import { kisoHome } from "./state.js";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 import { MODE_VALUES, parseMode } from "./mode.js";
 import { AuthError, effectiveBaseUrl, endpointCredentialId, getCredential, providerIdOf } from "./auth/credentials.js";
 import { BUILTIN_MANIFESTS, declareEffort } from "@vincemakes/kiso-runtime/internal";

package/dist/demo-script.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The keyless demo script, as plain data with no imports of its own: the terminal's first-run demo and any other host that shows the
+ * same tour (the desktop app's first-run guide) read it from here.
+ */
+import type { FauxScript } from "@vincemakes/kiso-evals";
+/**
+ * The keyless demo script: tours the tools so `kiso chat` exercises them.
+ * FOUR turns: each user turn consumes two model rounds (call → result →
+ * summary), so at least two consecutive user turns work in one process
+ * (F group).
+ */
+export declare function fauxScript(): FauxScript;

package/dist/demo-script.js

@@ -0,0 +1,41 @@
+/**
+ * The keyless demo script: tours the tools so `kiso chat` exercises them.
+ * FOUR turns: each user turn consumes two model rounds (call → result →
+ * summary), so at least two consecutive user turns work in one process
+ * (F group).
+ */
+export function fauxScript() {
+    return [
+        {
+            events: [
+                // bootstrap P1: a multi-delta thinking block — renders as ONE
+                // streaming segment, not one line per token.
+                { type: "thinking", text: "Let me think about" },
+                { type: "thinking", text: " the workspace" },
+                { type: "thinking", text: " before acting." },
+                { type: "text_start" },
+                { type: "text_delta", text: "I'm the faux model. Let me look at the working directory." },
+                { type: "tool_call_end", callId: "c1", name: "list_dir", input: {} },
+                { type: "stop", reason: "tool_use" },
+            ],
+        },
+        {
+            events: [
+                { type: "text_delta", text: "I see the workspace. What would you like me to inspect or change?" },
+                { type: "stop", reason: "end_turn" },
+            ],
+        },
+        {
+            events: [
+                { type: "text_delta", text: "The faux model is still here, with full context." },
+                { type: "stop", reason: "end_turn" },
+            ],
+        },
+        {
+            events: [
+                { type: "text_delta", text: "And this is the end of the scripted tour." },
+                { type: "stop", reason: "end_turn" },
+            ],
+        },
+    ];
+}

package/dist/dispatch.d.ts

@@ -4,7 +4,9 @@
  * the context (the chain, the run state, the prompt arming).
  */
 import type { SessionRoute } from "./projects.js";
-import type { AgentSession } from "@vincemakes/kiso-runtime";
+import { type StoreRecord } from "@vincemakes/kiso-runtime/internal";
+import { type AgentSession } from "@vincemakes/kiso-runtime";
+import type { SessionCardView } from "@vincemakes/kiso-tui";
 import { type LineInput } from "./state.js";
 import type { UserInputVia } from "@vincemakes/kiso-core";
 /** Everything dispatch touches that chat() owns. */
@@ -72,3 +74,6 @@ export declare function parseBang(trimmed: string): {
 export declare function markCompactWhy(why: string): void;
 export declare function markAutoCompact(): void;
 export declare function dispatch(line: string, ctx: DispatchCtx): void;
+/** /fork's rows: each finished run's reply, newest first, by its first line and when it ended; the opened row says the
+ *  line it answered. The card's id is the seq of the run's terminal, where SessionStore.fork cuts. */
+export declare function replyCards(records: readonly StoreRecord[]): SessionCardView[];

package/dist/dispatch.js

@@ -5,11 +5,12 @@
  */
 import { STATUS_GLYPHS, contextRows, contextSheetRows, contextUnavailableRows, contextUnavailableSheetRows, displayVerb, escapeTerminal, helpRows, toolTarget, infoSheetRows, kUnit, modePickView, modelPickView, namedPickView, settingsPickView, compactingStatus, liveRow, palette, renderEvent, settledLabel, slashCommandNames } from "@vincemakes/kiso-tui";
 import { newSessionId } from "./session-id.js";
-import { buildAdapter, lookupModelMetadata, readSessionName, resolveContinuationScope, resolveReasoning, sessionTitle, tiersFor, writeSessionName } from "@vincemakes/kiso-runtime/internal";
+import { buildAdapter, isForkNote, lookupModelMetadata, readSessionName, resolveContinuationScope, resolveReasoning, sessionTitle, tiersFor, writeSessionName } from "@vincemakes/kiso-runtime/internal";
+import { ForkRefusedError, SessionStore } from "@vincemakes/kiso-runtime";
 import { MODE_LABEL, MODE_NOTE, OFFERED_MODES, applyModeSetting, getDontAsk, getMode, modeDisplay, parseMode, setDontAsk } from "./mode.js";
 import { clipboardWrite, lastAnswer } from "./clipboard.js";
 import { protectedBangReason, protectedShellVerdict } from "./protected-shell.js";
-import { activeStoreDir, agentBaseUrl, currentProfileName, setCurrentProfileName, currentModelName, agentModel, body, bodyLog, codingToolOptions, protectedFiles, kisoHome, configModels, dock, lastBinding, loadedSkillsCatalog, mergedConfig, readContextLedger, retryOnRow, sessionsDir, setAgentModel, setConfiguredWindow, setCurrentModelName, setModelChoice, setRetryShown, upstreamOf, VERSION, setLastBinding } from "./state.js";
+import { activeStoreDir, sessionStoreRef, agentBaseUrl, currentProfileName, setCurrentProfileName, currentModelName, agentModel, body, bodyLog, codingToolOptions, protectedFiles, kisoHome, configModels, dock, lastBinding, loadedSkillsCatalog, mergedConfig, readContextLedger, retryOnRow, sessionsDir, setAgentModel, setConfiguredWindow, setCurrentModelName, setModelChoice, setRetryShown, upstreamOf, VERSION, setLastBinding } from "./state.js";
 import { adapterOptionsFor } from "./auth/adapter-options.js";
 import { profileProviderLabel, providerLabel } from "./provider-label.js";
 import { installedVersion, versionStatusLine } from "./stale-version.js";
@@ -1384,6 +1385,44 @@ export function dispatch(line, ctx) {
         ctx.requestReload();
         return;
     }
+    if (trimmed === "/fork") {
+        // owner 2026-11-03: the web app's fork, one rule — a new session from after one of this session's replies
+        // (SessionStore.fork), then the terminal switches to it as /resume does; the replies are picked in /resume's band
+        if (ctx.isRunning()) {
+            body.notice("[/fork] a run is in flight — let it finish (esc stops it), then fork");
+            ctx.input.prompt();
+            return;
+        }
+        ctx.chainRef.current = ctx.chainRef.current.then(async () => {
+            const cards = replyCards(sessionStoreRef?.load(ctx.session.id) ?? []);
+            if (cards.length === 0) {
+                body.notice("no finished reply to fork after yet");
+                ctx.input.prompt();
+                return;
+            }
+            const fork = (afterSeq) => {
+                try {
+                    const made = new SessionStore(activeStoreDir).fork(ctx.session.id, { afterSeq });
+                    body.notice(`forked "${escapeTerminal(readSessionName(activeStoreDir, made.id) ?? made.id)}" — switching to it`);
+                    ctx.requestSwitch(made.id);
+                }
+                catch (error) {
+                    body.notice(error instanceof ForkRefusedError ? `[/fork] ${error.message}` : `[/fork] ${error instanceof Error ? error.message : String(error)}`);
+                    ctx.input.prompt();
+                }
+            };
+            // no band (a pipe, a dock-less terminal): after the last reply, the sidebar's Fork
+            if (ctx.input.pick === undefined || !dock.active)
+                return fork(Number(cards[0].id));
+            ctx.input.pick(() => cards, (picked) => {
+                if (picked === null)
+                    ctx.input.prompt(); // esc: nothing forked, nothing said
+                else
+                    fork(Number(picked));
+            }, undefined, "fork");
+        });
+        return;
+    }
     if (trimmed === "/resume" || trimmed.startsWith("/resume ")) {
         // the mini-spec: the in-session door to the durable sessions —
         // /resume <id> switches directly; bare /resume opens the SAME
@@ -1589,3 +1628,27 @@ async function tasksCommand(arg, ctx) {
     else if (action === 1)
         stop(task);
 }
+/** /fork's rows: each finished run's reply, newest first, by its first line and when it ended; the opened row says the
+ *  line it answered. The card's id is the seq of the run's terminal, where SessionStore.fork cuts. */
+export function replyCards(records) {
+    const cards = [];
+    let asked = "";
+    let reply = "";
+    for (const { event: e, ts } of records) {
+        if (e.type === "user_input" && e.source !== "system") {
+            const content = Array.isArray(e.content) ? e.content.filter((b) => !(b.type === "text" && isForkNote(b.text ?? ""))) : e.content;
+            asked = (typeof content === "string" ? content : content.map((b) => (b.type === "text" ? (b.text ?? "") : "")).join(" ")).trim();
+            reply = "";
+        }
+        else if (e.type === "tool_result")
+            reply = "";
+        else if (e.type === "text_delta")
+            reply += e.text;
+        else if (e.type === "terminal" && e.outcome.kind === "completed") {
+            // the row is how the person recognizes the reply: its first line, inline code read as plain text
+            const first = (reply.split("\n").map((l) => l.trim()).find((l) => l !== "") ?? "(no reply text)").replace(/`([^`]*)`/g, "$1");
+            cards.unshift({ id: String(e.seq), title: first, badge: "completed", turns: null, updatedAt: ts, uncertain: 0, asks: 0, outcome: null, detail: `answered: ${asked.split("\n")[0] ?? ""}` });
+        }
+    }
+    return cards;
+}

package/dist/faux-glue.d.ts

@@ -5,6 +5,8 @@
  */
 import type { FauxScript } from "@vincemakes/kiso-evals";
 import { type LineInput } from "./state.js";
+import { fauxScript } from "./demo-script.js";
+export { fauxScript };
 /**
  * E area: how many faux-script turns a session has already consumed. The faux
  * provider's script counter is per-process, so a FRESH process that resumes
@@ -23,13 +25,6 @@ export declare function fauxSkip(id: string): number;
  * multi-tool trajectory. Absent → the built-in demo script.
  */
 export declare function readFauxScript(): FauxScript;
-/**
- * The keyless demo script: tours the tools so `kiso chat` exercises them.
- * FOUR turns: each user turn consumes two model rounds (call → result →
- * summary), so at least two consecutive user turns work in one process
- * (F group).
- */
-export declare function fauxScript(): FauxScript;
 /** round 10: a faux-mode run whose scripted turns are exhausted must NOT print a
  * provider error and exit 0 — the honest outcome is a loud message and a
  * non-zero exit. Thrown as a CONTROLLED exception (never process.exit):

package/dist/faux-glue.js

@@ -7,6 +7,8 @@ import { readFileSync } from "node:fs";
 import { escapeTerminal } from "@vincemakes/kiso-tui";
 import { SessionStore } from "@vincemakes/kiso-runtime";
 import { sessionsDir } from "./state.js";
+import { fauxScript } from "./demo-script.js";
+export { fauxScript };
 /**
  * E area: how many faux-script turns a session has already consumed. The faux
  * provider's script counter is per-process, so a FRESH process that resumes
@@ -47,47 +49,6 @@ export function readFauxScript() {
         process.exit(1);
     }
 }
-/**
- * The keyless demo script: tours the tools so `kiso chat` exercises them.
- * FOUR turns: each user turn consumes two model rounds (call → result →
- * summary), so at least two consecutive user turns work in one process
- * (F group).
- */
-export function fauxScript() {
-    return [
-        {
-            events: [
-                // bootstrap P1: a multi-delta thinking block — renders as ONE
-                // streaming segment, not one line per token.
-                { type: "thinking", text: "Let me think about" },
-                { type: "thinking", text: " the workspace" },
-                { type: "thinking", text: " before acting." },
-                { type: "text_start" },
-                { type: "text_delta", text: "I'm the faux model. Let me look at the working directory." },
-                { type: "tool_call_end", callId: "c1", name: "list_dir", input: {} },
-                { type: "stop", reason: "tool_use" },
-            ],
-        },
-        {
-            events: [
-                { type: "text_delta", text: "I see the workspace. What would you like me to inspect or change?" },
-                { type: "stop", reason: "end_turn" },
-            ],
-        },
-        {
-            events: [
-                { type: "text_delta", text: "The faux model is still here, with full context." },
-                { type: "stop", reason: "end_turn" },
-            ],
-        },
-        {
-            events: [
-                { type: "text_delta", text: "And this is the end of the scripted tour." },
-                { type: "stop", reason: "end_turn" },
-            ],
-        },
-    ];
-}
 /** round 10: a faux-mode run whose scripted turns are exhausted must NOT print a
  * provider error and exit 0 — the honest outcome is a loud message and a
  * non-zero exit. Thrown as a CONTROLLED exception (never process.exit):

package/dist/first-run.js

@@ -10,7 +10,7 @@
  */
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
-import { kisoHome } from "./state.js";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 /** The sentinel: present = the home has seen the 0.1.45 first-run
  *  sequence (its config surface exists — no re-scaffold, no re-note). */
 const SENTINEL = "first-run";

package/dist/index.js

@@ -29,10 +29,11 @@ import { newSessionId } from "./session-id.js";
 import { createInterface } from "node:readline";
 import { Readable } from "node:stream";
 import { fileURLToPath } from "node:url";
-import { basename, join } from "node:path";
+import { createRequire } from "node:module";
+import { basename, dirname, join } from "node:path";
 import { Body, Editor, PROMPT, bannerLines, currentGround, currentGroundRgb, parseOscColor, resolveGround, setGround, escapeTerminal, extensionsBannerText, extensionsFact, idColumn, interactivePrompt, palette, renderSessionLine, sessionListFooter, sessionListHeader, sessionListRow, sessionListUnknownLine, slashCommandNames } from "@vincemakes/kiso-tui";
 import { disposeExtensions, SessionStore } from "@vincemakes/kiso-runtime";
-import { listSessionSidecars, migrateSummaries, readProfile, readSessionName, summaryMigrationPending } from "@vincemakes/kiso-runtime/internal";
+import { listSessionSidecars, migrateSummaries, readProfile, readSessionName, summaryMigrationPending, writeSessionName } from "@vincemakes/kiso-runtime/internal";
 import { skillMenuItems } from "./skill-invoke.js";
 import { canonicalPath, hasSession, locateSession, projectLayoutActive, sessionFolders } from "./projects.js";
 import { reverseMigration } from "./session-migration.js";
@@ -331,8 +332,8 @@ function editorInput(editor) {
         // TUI2-R2 ②: the session picker — the editor owns the keys (the
         // selection walk, the filter, enter/esc), the compositor draws the
         // band, and the id comes back here.
-        pick(cards, onPick, here) {
-            editor.beginPick(cards, onPick, here);
+        pick(cards, onPick, here, kind) {
+            editor.beginPick(cards, onPick, here, kind);
         },
         // W22: the pending-turn queue — the ↑ pop walk (the keys); the
         // chips are the compositor's bindQueue (the dock side).
@@ -340,6 +341,9 @@ function editorInput(editor) {
             editor.bindQueue(state, pop);
         },
         // ADR-0057: the steers a stop handed back return to the buffer.
+        setGhost(text) {
+            editor.setGhost(text);
+        },
         restore(text) {
             editor.restore(text);
         },
@@ -1157,6 +1161,30 @@ async function chatLoop(first, firstId, input, autoCompact) {
             sessions: () => agent.sessionIds(),
             route: (sessionId) => routeSession(sessionId),
             ...(process.stdin.isTTY ? { pick: () => pickSession(agent, input) } : {}),
+            // owner 2026-11-03: a session is titled by a summary of its first message, in the background; the person's own
+            // name wins, before or after; off with KISO_AUTO_TITLE=off and with the faux model, and never without a TTY:
+            // a piped chat is a script or a bench leg, where one more request per session is not the person's
+            ...(currentFaux || process.env["KISO_AUTO_TITLE"] === "off" || process.stdin.isTTY !== true
+                ? {}
+                : {
+                    titled: (firstMessage) => {
+                        // the session and its folder as they are NOW: a /resume or a switch before the title lands must not
+                        // send it to another session, nor repaint another session's window title
+                        const [titling, mine, dir] = [session, session.id, activeStoreDir];
+                        if (readSessionName(dir, mine) !== null)
+                            return;
+                        void titling.title(firstMessage, { signal: AbortSignal.timeout(15_000) }).then((title) => {
+                            if (title === "" || readSessionName(dir, mine) !== null)
+                                return;
+                            writeSessionName(dir, mine, title);
+                            // `id` is the loop's: the session open now (a switch moves it on)
+                            if (id !== mine)
+                                return;
+                            setTitleName(title);
+                            paintWindowTitle();
+                        }, () => undefined);
+                    },
+                }),
         };
         const end = await chat(session, currentFaux, input, autoCompact, nav, seed);
         if (end.next === "exit") {
@@ -1266,6 +1294,32 @@ async function main() {
         process.exitCode = await applyPatch(args.slice(1));
         return;
     }
+    // W2 (2026-11-01): `kiso web` runs the web app, its own package (@vincemakes/kiso-web), when it is
+    // installed beside kiso, and names the install command when it is not. The FIRST argument alone
+    // triggers it, before any flag is read: every other argument is the web app's (`kiso web --no-open`),
+    // and a session named "web" still opens with `kiso chat web`. No terminal UI is drawn on this path,
+    // so the host's own ctrl+C handling decides, and its exit is this command's exit.
+    if (args[0] === "web") {
+        let bin;
+        try {
+            const manifest = createRequire(import.meta.url).resolve("@vincemakes/kiso-web/package.json");
+            bin = join(dirname(manifest), JSON.parse(readFileSync(manifest, "utf8")).bin["kiso-web"] ?? "");
+        }
+        catch {
+            process.stderr.write("kiso web: the web app is not installed — npm i -g @vincemakes/kiso-web\n");
+            process.exitCode = 1;
+            return;
+        }
+        const child = spawn(process.execPath, [bin, ...args.slice(1)], { stdio: "inherit" });
+        process.on("SIGINT", () => { }); // the terminal sends it to the host too
+        for (const sig of ["SIGTERM", "SIGHUP"])
+            process.on(sig, () => child.kill(sig));
+        process.exitCode = await new Promise((done) => {
+            child.on("error", () => done(1));
+            child.on("exit", (code) => done(code ?? 1));
+        });
+        return;
+    }
     // XP-1: --accept-drift (a flag, never an env var) authorizes opening a
     // session whose recorded profile materially drifted — the
     // acknowledgement is recorded as a new revision by the runtime.
@@ -1864,6 +1918,7 @@ async function main() {
                     "  kiso logout <provider>   remove the stored credential (or --endpoint <url>)\n" +
                     "  kiso auth               list stored credentials (keys masked)\n" +
                     "  kiso update             install the latest release (npm i -g @vincemakes/kiso-code@latest)\n" +
+                    "  kiso web [--port <n>] [--no-open]   the web app in the browser (its own package: npm i -g @vincemakes/kiso-web)\n" +
                     "  kiso help               this help\n\n" +
                     "flags (any position):\n" +
                     "  --model <profile|provider/model>   pick the model (also /model in-session)\n" +

package/dist/mode.d.ts

@@ -122,8 +122,8 @@ export declare function applyModeState(s: ModeState): void;
  *  deny>allow>ask over the SPEAKING verdicts (abstain = no opinion), so a
  *  user extension's deny wins over any mode tier, full-access included
  *  (the monotonicity e2e pins it). */
-export declare function modeExtensions(workspaceRoot?: () => string): readonly KisoExtension[];
+export declare function modeExtensions(workspaceRoot?: () => string, currentTier?: () => Mode): readonly KisoExtension[];
 /** The plan tier's system prompt addition — injected at startup when the
  *  initial mode is plan (the session prompt is fixed at creation; runtime
  *  switches are guided by the deny reason). */
-export declare function modeSystemPrompt(): string | undefined;
+export declare function modeSystemPrompt(tier?: Mode): string | undefined;

package/dist/mode.js

@@ -165,9 +165,9 @@ export function applyModeState(s) {
     current = s.mode;
     dontAsk = s.dontAsk;
 }
-/** The per-tier verdict for a tool call — only when this tier is current. */
-function tierVerdict(tier, call, workspaceRoot) {
-    if (tier !== current)
+/** The per-tier verdict for a tool call — only when this tier is current (`now`: the tier in force, the process's own by default). */
+function tierVerdict(tier, call, workspaceRoot, now) {
+    if (tier !== now)
         return { action: "abstain" }; // not our tier — no opinion
     switch (tier) {
         case "manual":
@@ -215,12 +215,13 @@ function tierVerdict(tier, call, workspaceRoot) {
  *  deny>allow>ask over the SPEAKING verdicts (abstain = no opinion), so a
  *  user extension's deny wins over any mode tier, full-access included
  *  (the monotonicity e2e pins it). */
-export function modeExtensions(workspaceRoot = () => process.cwd()) {
-    return [...MODES.filter((m) => m === current), ...MODES.filter((m) => m !== current)].map((m) => ({
+export function modeExtensions(workspaceRoot = () => process.cwd(), currentTier = getMode) {
+    // the tier in force is read on every decision, so a host that holds several sessions can give each its own (the terminal passes none)
+    return [...MODES.filter((m) => m === currentTier()), ...MODES.filter((m) => m !== currentTier())].map((m) => ({
         name: `mode:${m}`,
         approvals: [
             {
-                decide: async (payload) => tierVerdict(m, { name: payload.name, input: payload.input ?? {} }, workspaceRoot),
+                decide: async (payload) => tierVerdict(m, { name: payload.name, input: payload.input ?? {} }, workspaceRoot, currentTier()),
             },
         ],
     }));
@@ -228,8 +229,8 @@ export function modeExtensions(workspaceRoot = () => process.cwd()) {
 /** The plan tier's system prompt addition — injected at startup when the
  *  initial mode is plan (the session prompt is fixed at creation; runtime
  *  switches are guided by the deny reason). */
-export function modeSystemPrompt() {
-    if (current !== "plan")
+export function modeSystemPrompt(tier = current) {
+    if (tier !== "plan")
         return undefined;
     return ("plan mode: read-only. You may inspect the workspace (read_file, list_dir, search_text, " +
         "read_skill) but every write/edit/shell call is DENIED with 'plan mode: read-only'. " +

package/dist/policy.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The coding product's policy, as a library door: the prompt and tool rules,
+ * and the extensions that bound what a coding agent may do (the catastrophe
+ * floor, the protected-file shell guard, the read-only shell allow, the loop
+ * breaker, the mode tiers). Everything here is state-free except the mode
+ * tier, which is process-local (`getMode` / `setMode`). A host that is not
+ * the terminal (the desktop app) composes the same agent from these and the
+ * public runtime and tool packages.
+ */
+export { CODING_TOOL_RULES, SYSTEM_PROMPT, composeSystemPrompt } from "./coding-prompt.js";
+export { breakerExtension } from "./breaker.js";
+export { floorExtension } from "./floor.js";
+export { MODE_LABEL, OFFERED_MODES, getMode, modeExtensions, modeSystemPrompt, setMode } from "./mode.js";
+export { protectedShellExtension } from "./protected-shell.js";
+export { guardSavedAllow, neverInheritedCall } from "./protected-writes.js";
+export { readOnlyShellExtension } from "./readonly-shell.js";

package/dist/policy.js

@@ -0,0 +1,16 @@
+/**
+ * The coding product's policy, as a library door: the prompt and tool rules,
+ * and the extensions that bound what a coding agent may do (the catastrophe
+ * floor, the protected-file shell guard, the read-only shell allow, the loop
+ * breaker, the mode tiers). Everything here is state-free except the mode
+ * tier, which is process-local (`getMode` / `setMode`). A host that is not
+ * the terminal (the desktop app) composes the same agent from these and the
+ * public runtime and tool packages.
+ */
+export { CODING_TOOL_RULES, SYSTEM_PROMPT, composeSystemPrompt } from "./coding-prompt.js";
+export { breakerExtension } from "./breaker.js";
+export { floorExtension } from "./floor.js";
+export { MODE_LABEL, OFFERED_MODES, getMode, modeExtensions, modeSystemPrompt, setMode } from "./mode.js";
+export { protectedShellExtension } from "./protected-shell.js";
+export { guardSavedAllow, neverInheritedCall } from "./protected-writes.js";
+export { readOnlyShellExtension } from "./readonly-shell.js";

package/dist/preferences.js

@@ -15,7 +15,7 @@
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { lookupModelMetadata, resolveReasoning } from "@vincemakes/kiso-runtime/internal";
-import { kisoHome } from "./state.js";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 let prefs = null;
 let prefsPath = null;
 export function preferencesPath(home = kisoHome()) {

package/dist/replay.d.ts

@@ -19,7 +19,7 @@
  *     summary (what the model sees next) and the turns it covers, read in
  *     the viewer — then any uncovered earlier turns folded as above.
  */
-import type { TaskInfo } from "@vincemakes/kiso-runtime/internal";
+import { type TaskInfo } from "@vincemakes/kiso-runtime/internal";
 import type { NoticeMark } from "@vincemakes/kiso-tui";
 /** The Body surface the replay drives — the live run's own mutations. */
 export interface ReplayBody {

package/dist/replay.js

@@ -22,6 +22,7 @@
 import { echoText } from "@vincemakes/kiso-tui-cells/render";
 import { bandHeader } from "@vincemakes/kiso-tui-cells/strings";
 import { cappedWaitLine, taskNoticeLines, taskNoticeRows, taskWhat } from "./task-notice.js";
+import { isForkNote } from "@vincemakes/kiso-runtime/internal";
 /** How many turns stay on screen in full. */
 const FULL_TURNS = 2;
 /** A user turn's opening line, or null when this input does not open one
@@ -32,7 +33,9 @@ function askOf(e) {
     if (e.type !== "user_input" || e.source === "system")
         return null;
     const via = e.via;
-    const text = typeof via?.line === "string" ? via.line : echoText(e.content);
+    // a fork's first input carries the fork note before the person's words: the model's, not the line they typed
+    const content = Array.isArray(e.content) ? e.content.filter((b) => !(b.type === "text" && isForkNote(b.text ?? ""))) : e.content;
+    const text = typeof via?.line === "string" ? via.line : echoText(content);
     return text.trim() === "" ? null : text;
 }
 /** Split events into turns: each starts at a user turn's input; anything

package/dist/state.d.ts

@@ -7,7 +7,7 @@
  */
 import { Dock, type AtItem, type Body, type PanelVerdict, type PanelView, type SaferAnswer, type SessionCardView } from "@vincemakes/kiso-tui";
 import type { TaskDeliveryItem } from "@vincemakes/kiso-core";
-import type { KisoExtension, StoreRecord } from "@vincemakes/kiso-runtime";
+import { kisoHome, type KisoExtension, type StoreRecord } from "@vincemakes/kiso-runtime";
 import type { ReasoningSetting } from "@vincemakes/kiso-runtime/internal";
 import { TaskManager } from "@vincemakes/kiso-runtime/internal";
 import { type ShellTasks } from "@vincemakes/kiso-tools-node";
@@ -15,7 +15,7 @@ import { type ShellTasks } from "@vincemakes/kiso-tools-node";
  *  it (sessions, trust, extensions, mcp config, skills). The dedicated
  *  env vars (KISO_EXTENSIONS_DIR / KISO_MCP_CONFIG / KISO_SKILLS_DIR)
  *  still override their own path; nothing hard-codes ~/.kiso anymore. */
-export declare function kisoHome(): string;
+export { kisoHome };
 /** DC-49 — the workspace the coding tools may touch, and the one place it
  *  is decided. The session's own tool set and the `!` command's runner both
  *  need it, and two copies of a ruling-bearing literal is how a later DC-49
@@ -241,7 +241,7 @@ export interface LineInput {
      *  picked id, or null when the human leaves without picking.
      *  OPTIONAL: only the raw-mode editor has it, and the picker only
      *  ever opens on a TTY (a pipe has nobody to pick). */
-    pick?(cards: () => readonly SessionCardView[], onPick: (id: string | null) => void, here?: string): void;
+    pick?(cards: () => readonly SessionCardView[], onPick: (id: string | null) => void, here?: string, kind?: "resume" | "fork"): void;
     /** W22: bind the pending-turn queue — the ↑ pop walks the CLI's
      *  live slots (each pop cancels the turn), esc ends the walk after
      *  one more pop. The chips are the compositor's own bindQueue. */
@@ -249,6 +249,9 @@ export interface LineInput {
     /** ADR-0057: put text back into the editor — the steers a stop handed
      *  back before they landed. The pipe path has no editor; optional. */
     restore?(text: string): void;
+    /** The follow-up: a line the person may send next, dim in the empty box, Tab takes it; null clears it. Optional: the
+     *  readline input has no box to draw it in. */
+    setGhost?(text: string | null): void;
     /** R3a: cross-session history — seed the recall buffer, register the
      *  append sink. The pipe path has no recall keys; optional. */
     bindHistory?(seed: readonly string[], persist: (line: string) => void): void;
@@ -445,4 +448,3 @@ export declare function lastBinding(): LastBinding | null;
 export declare function setAcceptDrift(v: boolean): void;
 export declare function acceptDrift(): boolean;
 export declare function observedRevisionFromLog(sessionId: string | undefined, full: string, kind?: "edit" | "write"): string | undefined;
-export {};

package/dist/state.js

@@ -12,8 +12,9 @@ import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { AT_CAP, AT_SKIP, Dock } from "@vincemakes/kiso-tui";
 import { projectMessages } from "@vincemakes/kiso-core";
+import { kisoHome } from "@vincemakes/kiso-runtime";
 import { TaskManager } from "@vincemakes/kiso-runtime/internal";
-import { processTaskBackend } from "@vincemakes/kiso-tools-node";
+import { processTaskBackend, readShowsWholeFile } from "@vincemakes/kiso-tools-node";
 import { collectWriter } from "@vincemakes/kiso-subagent-ext";
 import { canonicalPath, LEGACY_SESSIONS_DIR, projectDirFor, projectLayoutActive } from "./projects.js";
 import { taskNoticeLines, taskWhat } from "./task-notice.js";
@@ -21,9 +22,7 @@ import { taskNoticeLines, taskWhat } from "./task-notice.js";
  *  it (sessions, trust, extensions, mcp config, skills). The dedicated
  *  env vars (KISO_EXTENSIONS_DIR / KISO_MCP_CONFIG / KISO_SKILLS_DIR)
  *  still override their own path; nothing hard-codes ~/.kiso anymore. */
-export function kisoHome() {
-    return process.env.KISO_HOME ?? join(homedir(), ".kiso");
-}
+export { kisoHome };
 /** DC-49 — the workspace the coding tools may touch, and the one place it
  *  is decided. The session's own tool set and the `!` command's runner both
  *  need it, and two copies of a ruling-bearing literal is how a later DC-49
@@ -709,7 +708,7 @@ export function observedRevisionFromLog(sessionId, full, kind = "edit") {
         if (m.role === "assistant") {
             for (const b of m.blocks) {
                 if (b.type === "tool_use" && typeof b.input.path === "string") {
-                    calls.set(b.callId, { name: b.name, full: realOrResolved(resolve(process.cwd(), b.input.path)), ranged: b.input.offset !== undefined || b.input.limit !== undefined });
+                    calls.set(b.callId, { name: b.name, full: realOrResolved(resolve(process.cwd(), b.input.path)), input: b.input });
                 }
             }
         }
@@ -722,9 +721,11 @@ export function observedRevisionFromLog(sessionId, full, kind = "edit") {
             if (hit === undefined)
                 continue;
             if (!m.isError && (c.name === "read_file" || c.name === "edit_file" || c.name === "write_file")) {
+                const sameRevision = hit[1] === rev;
                 rev = hit[1];
+                // a later partial read of the SAME revision keeps what the model already saw whole; another revision starts over
                 if (c.name === "read_file")
-                    wholeKnown = !c.ranged && !body.includes("(call again with offset=") && !body.includes("[output capped at");
+                    wholeKnown = readShowsWholeFile(c.input, body) || (wholeKnown && sameRevision);
                 else if (c.name === "write_file")
                     wholeKnown = true;
             }

package/dist/task-notice.js

@@ -90,8 +90,12 @@ export function lostReason(task) {
         // an unreadable journal: the general reason below
     }
     const unconfirmed = records.find((r) => r.type === "stop_unconfirmed");
-    if (unconfirmed !== undefined)
-        return `its stop could not be confirmed (pids ${unconfirmed.pids.join(", ")})`;
+    if (unconfirmed !== undefined) {
+        return unconfirmed.pids.length > 0 ? `its stop could not be confirmed (pids ${unconfirmed.pids.join(", ")})` : "its stop could not be confirmed (what still held it could not be named)";
+    }
+    const failed = records.find((r) => r.type === "handover_failed");
+    if (failed !== undefined)
+        return `its hand-over to a task failed (${failed.reason}); the command was running and its end is not known`;
     if (task.backend === "foreground")
         return "the kiso that held it ended without recording its end";
     return "its runner is gone without recording its end";

package/package.json

@@ -1,12 +1,23 @@
 {
 	"name": "@vincemakes/kiso-code",
-	"version": "0.51.1",
+	"version": "0.53.0",
 	"description": "kiso-code \u2014 the coding agent on kiso, the durable runtime for AI agents: kiso chat / kiso resume / kiso sessions.",
 	"type": "module",
 	"license": "MIT",
 	"bin": {
 		"kiso": "dist/index.js"
 	},
+	"exports": {
+		"./config": {
+			"types": "./dist/config-door.d.ts",
+			"default": "./dist/config-door.js"
+		},
+		"./policy": {
+			"types": "./dist/policy.d.ts",
+			"default": "./dist/policy.js"
+		},
+		"./package.json": "./package.json"
+	},
 	"files": [
 		"dist",
 		"README.md",
@@ -18,19 +29,19 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@vincemakes/kiso-ask-ext": "0.51.1",
-		"@vincemakes/kiso-core": "0.51.1",
-		"@vincemakes/kiso-evals": "0.51.1",
-		"@vincemakes/kiso-mcp-ext": "0.51.1",
-		"@vincemakes/kiso-provider-anthropic": "0.51.1",
-		"@vincemakes/kiso-provider-openai": "0.51.1",
-		"@vincemakes/kiso-provider-openai-responses": "0.51.1",
-		"@vincemakes/kiso-runtime": "0.51.1",
-		"@vincemakes/kiso-skills-ext": "0.51.1",
-		"@vincemakes/kiso-subagent-ext": "0.51.1",
-		"@vincemakes/kiso-tools-node": "0.51.1",
-		"@vincemakes/kiso-tui": "0.51.1",
-		"@vincemakes/kiso-tui-cells": "0.51.1"
+		"@vincemakes/kiso-ask-ext": "0.53.0",
+		"@vincemakes/kiso-core": "0.53.0",
+		"@vincemakes/kiso-evals": "0.53.0",
+		"@vincemakes/kiso-mcp-ext": "0.53.0",
+		"@vincemakes/kiso-provider-anthropic": "0.53.0",
+		"@vincemakes/kiso-provider-openai": "0.53.0",
+		"@vincemakes/kiso-provider-openai-responses": "0.53.0",
+		"@vincemakes/kiso-runtime": "0.53.0",
+		"@vincemakes/kiso-skills-ext": "0.53.0",
+		"@vincemakes/kiso-subagent-ext": "0.53.0",
+		"@vincemakes/kiso-tools-node": "0.53.0",
+		"@vincemakes/kiso-tui": "0.53.0",
+		"@vincemakes/kiso-tui-cells": "0.53.0"
 	},
 	"devDependencies": {
 		"@types/node": "^26.1.2",