@vincemakes/kiso-code 0.6.0 → 0.7.0

package/dist/dispatch.js

@@ -30,7 +30,9 @@ export function dispatch(line, ctx) {
             // KC1: the composer's keys ride the SAME bodyLog call (it splits
             // on \n) — the help gains a row, the cli source does not.
             // KC2: the redirect joins the same row for the same reason.
-            bodyLog(`${cmd("exit", "leave the session")}\n${cmd("keys", "enter sends · ctrl+J newline (shift+enter where encoded) · esc stops the run · alt+⏎ stops it and sends this instead")}`);
+            // KC3: and so does the @ picker — the row is where a gesture is
+            // taught, and the row costs nothing.
+            bodyLog(`${cmd("exit", "leave the session")}\n${cmd("keys", "enter sends · ctrl+J newline (shift+enter where encoded) · esc stops the run · alt+⏎ stops it and sends this instead · @ files")}`);
             ctx.input.prompt();
         });
         return;

package/dist/index.js

@@ -26,14 +26,14 @@ import { readFileSync, realpathSync, rmSync } from "node:fs";
 import { createInterface } from "node:readline";
 import { fileURLToPath } from "node:url";
 import { join } from "node:path";
-import { Body, Editor, bannerLines, escapeTerminal, palette, renderSessionLine } from "@vincemakes/kiso-tui";
+import { Body, Editor, bannerLines, escapeTerminal, interactivePrompt, palette, renderSessionLine } from "@vincemakes/kiso-tui";
 import { createAgent, disposeExtensions, loadExtensions, loadProjectExtensions, SessionStore, } from "@vincemakes/kiso-runtime";
 import { createFauxProvider } from "@vincemakes/kiso-evals";
 import { createCodingTools } from "@vincemakes/kiso-tools-node";
 import { MODES, modeExtensions, modeFromEnv, modeSystemPrompt, setMode } from "./mode.js";
 import { builtInLayer } from "./builtin.js";
-import { body, bodyLog, builtInExtensions, currentFaux, dock, extensionsDir, loadedExtensions, mergedConfig, mergedTempPaths, projectExtensions, sessionsDir, setAgentModel, setBody, setConfigModels, setConfiguredWindow, setCurrentAgentExtensions, setCurrentFaux, setCurrentModelName, setExtensionLists, setMergedConfig, userExtensions, VERSION } from "./state.js";
-import { interactivePrompt, resolveProjectTrust } from "./trust-ui.js";
+import { atFiles, body, bodyLog, builtInExtensions, currentFaux, dock, extensionsDir, loadedExtensions, mergedConfig, mergedTempPaths, projectExtensions, sessionsDir, setAgentModel, setBody, setConfigModels, setConfiguredWindow, setCurrentAgentExtensions, setCurrentFaux, setCurrentModelName, setExtensionLists, setMergedConfig, userExtensions, VERSION } from "./state.js";
+import { resolveProjectTrust } from "./trust-ui.js";
 import { isFirstRun, scaffoldFirstRun } from "./first-run.js";
 import { fauxSkip, readFauxScript } from "./faux-glue.js";
 import { autoCompactFromEnv, chat, contextWindowTokens } from "./chat.js";
@@ -196,6 +196,8 @@ function makeLineInput() {
         // pipe bytes do not change)
         dock.bindInput(() => editor.dockState(), "› ");
         dock.bindMenu(() => editor.menuState()); // v3 §04: the slash-command menu
+        editor.bindAtItems(atFiles); // KC3 §5: the file source — listed per OPEN
+        dock.bindAt(() => editor.atState()); // KC3 §4: the picker's band
         dock.bindApproval(() => editor.panelState()); // W21: the panel's bound state
         return editorInput(editor);
     }

package/dist/state.d.ts

@@ -5,7 +5,7 @@
  * creates the mutable ones (setBody / setAgentModel / setExtensionLists);
  * the moved modules read and mutate at call time.
  */
-import { Dock, type Body, type PanelVerdict, type PanelView } from "@vincemakes/kiso-tui";
+import { Dock, type AtItem, type Body, type PanelVerdict, type PanelView } from "@vincemakes/kiso-tui";
 import type { KisoExtension } from "@vincemakes/kiso-runtime";
 /** finding #11: KISO_HOME is the ONE root — every default path derives from
  *  it (sessions, trust, extensions, mcp config, skills). The dedicated
@@ -15,6 +15,30 @@ export declare function kisoHome(): string;
 export declare function sessionsDir(): string;
 /** E1: the extension scan directory — KISO_EXTENSIONS_DIR overrides. */
 export declare function extensionsDir(): string;
+/**
+ * KC3 §5 — the @ picker's file source. Computed PER OPEN: no index, no
+ * daemon, no watcher, nothing to invalidate and nothing to go stale.
+ * (The editor snapshots the result for the life of one open, so this
+ * runs once per `@`, not once per keystroke.)
+ *
+ * In a git repo, git IS the answer. `ls-files -c -o --exclude-standard`
+ * is the tracked files AND the untracked ones that are not ignored, in
+ * ONE process: the same set the user's own tooling calls "the project",
+ * with every .gitignore in the tree already honoured — and honoured by
+ * git rather than by a reimplementation of git's rules. stderr is
+ * discarded because "not a git repository" must never land in a live
+ * TUI frame.
+ *
+ * Outside a repo — or with no git on PATH — the bounded walk stands
+ * in: it prunes AT_SKIP before descending and stops at AT_CAP + 1
+ * entries, the extra entry being what lets the panel's counter SAY it
+ * truncated instead of showing the first two thousand files as though
+ * they were all of them.
+ *
+ * Paths are forward-slashed on both branches (git's own format), so
+ * the fuzzy filter sees one alphabet whichever branch ran.
+ */
+export declare function atFiles(): readonly AtItem[];
 /**
  * v2c — the interactive input source. TTYs use the raw-mode Editor (the
  * self-drawn input row — width-aware, the CJK-drift root cause retired,

package/dist/state.js

@@ -5,11 +5,12 @@
  * creates the mutable ones (setBody / setAgentModel / setExtensionLists);
  * the moved modules read and mutate at call time.
  */
-import { readFileSync } from "node:fs";
+import { execFileSync } from "node:child_process";
+import { readdirSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { Dock } from "@vincemakes/kiso-tui";
+import { AT_CAP, AT_SKIP, Dock } from "@vincemakes/kiso-tui";
 /** finding #11: KISO_HOME is the ONE root — every default path derives from
  *  it (sessions, trust, extensions, mcp config, skills). The dedicated
  *  env vars (KISO_EXTENSIONS_DIR / KISO_MCP_CONFIG / KISO_SKILLS_DIR)
@@ -24,6 +25,62 @@ export function sessionsDir() {
 export function extensionsDir() {
     return process.env.KISO_EXTENSIONS_DIR ?? join(kisoHome(), "extensions");
 }
+/**
+ * KC3 §5 — the @ picker's file source. Computed PER OPEN: no index, no
+ * daemon, no watcher, nothing to invalidate and nothing to go stale.
+ * (The editor snapshots the result for the life of one open, so this
+ * runs once per `@`, not once per keystroke.)
+ *
+ * In a git repo, git IS the answer. `ls-files -c -o --exclude-standard`
+ * is the tracked files AND the untracked ones that are not ignored, in
+ * ONE process: the same set the user's own tooling calls "the project",
+ * with every .gitignore in the tree already honoured — and honoured by
+ * git rather than by a reimplementation of git's rules. stderr is
+ * discarded because "not a git repository" must never land in a live
+ * TUI frame.
+ *
+ * Outside a repo — or with no git on PATH — the bounded walk stands
+ * in: it prunes AT_SKIP before descending and stops at AT_CAP + 1
+ * entries, the extra entry being what lets the panel's counter SAY it
+ * truncated instead of showing the first two thousand files as though
+ * they were all of them.
+ *
+ * Paths are forward-slashed on both branches (git's own format), so
+ * the fuzzy filter sees one alphabet whichever branch ran.
+ */
+export function atFiles() {
+    let paths;
+    try {
+        paths = execFileSync("git", ["ls-files", "-c", "-o", "--exclude-standard"], { cwd: process.cwd(), encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], maxBuffer: 1 << 24 }).split("\n").filter((p) => p !== "");
+    }
+    catch {
+        paths = atWalk(process.cwd(), "", []);
+    }
+    return paths.slice(0, AT_CAP + 1).map((path) => ({ path }));
+}
+/** The fallback walk. `prefix` carries the repo-relative directory so
+ *  the result needs no path arithmetic afterwards. An unreadable
+ *  directory contributes nothing and ends nothing — the recursion's own
+ *  try catches it at that level, so one locked subtree cannot stop a
+ *  file picker from opening. */
+function atWalk(dir, prefix, out) {
+    try {
+        for (const e of readdirSync(dir, { withFileTypes: true })) {
+            if (out.length > AT_CAP)
+                break;
+            if (AT_SKIP.has(e.name))
+                continue;
+            if (e.isDirectory())
+                atWalk(`${dir}/${e.name}`, `${prefix}${e.name}/`, out);
+            else if (e.isFile())
+                out.push(`${prefix}${e.name}`);
+        }
+    }
+    catch {
+        // unreadable — skipped
+    }
+    return out;
+}
 /** v2b: the bottom-anchored UI — docked only on a color TTY; pipes and
  *  NO_COLOR stay the v2a line mode byte-for-byte. Created at load, like
  *  the pre-split module-scope const. */

package/dist/trust-ui.d.ts

@@ -9,11 +9,6 @@ import { type PanelVerdict, type PanelView } from "@vincemakes/kiso-tui";
 import { type ProjectArtifacts } from "@vincemakes/kiso-runtime";
 import type { AgentSession } from "@vincemakes/kiso-runtime";
 import { type LineInput } from "./state.js";
-/** v2a: the interactive prompt — blue, the identity accent. readline owns
- *  the echo of what the user types; we own the prompt's color. (v2c: the
- *  readline prompt keeps "you> " — the brick ▌ is the dock's row only;
- *  pipe bytes must not change.) */
-export declare function interactivePrompt(): string;
 /**
  * W21 — ask the human with the approval panel: the bounded block that
  * replaces the running tool's live window while the approval is pending.

package/dist/trust-ui.js

@@ -9,19 +9,11 @@ import { existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, symlinkS
 import { homedir, tmpdir } from "node:os";
 import { join } from "node:path";
 import { pathToFileURL } from "node:url";
-import { escapeTerminal, palette } from "@vincemakes/kiso-tui";
+import { projectTrustRows, projectTrustView, projectUntrustedNote, uncertainView } from "@vincemakes/kiso-tui";
 import { projectArtifacts, recordTrust, trustFor } from "@vincemakes/kiso-runtime";
 import { bodyLog, currentAgentExtensions, dock, extensionsDir, kisoHome, mergedTempPaths } from "./state.js";
 import { loadUserConfig, resolveProjectTrustPolicy } from "./config.js";
 import { getMode } from "./mode.js";
-/** v2a: the interactive prompt — blue, the identity accent. readline owns
- *  the echo of what the user types; we own the prompt's color. (v2c: the
- *  readline prompt keeps "you> " — the brick ▌ is the dock's row only;
- *  pipe bytes must not change.) */
-export function interactivePrompt() {
-    const p = palette();
-    return `${p.bold}you> ${p.reset}`;
-}
 /**
  * W21 — ask the human with the approval panel: the bounded block that
  * replaces the running tool's live window while the approval is pending.
@@ -192,7 +184,7 @@ export async function resolveProjectTrust(input) {
     // First discovery — list every artifact (file name + digest short
     // prefix) and ask the human ONCE.
     if (!process.stdin.isTTY) {
-        console.error(`[project .kiso] found ${artifacts.files.length} artifact(s) in ${artifacts.root} — not trusted, not loaded (run kiso interactively once to decide)`);
+        console.error(projectUntrustedNote(artifacts.files.length, artifacts.root));
         return null;
     }
     // v2c: the shared input (the editor on a TTY) reads the answer.
@@ -201,19 +193,9 @@ export async function resolveProjectTrust(input) {
     // the bodyLog below records, verbatim — the listing still lands in
     // the scrollback; the panel is a bounded block, the record is not).
     bodyLog(`[project .kiso] ${artifacts.root}`);
-    for (const f of artifacts.files) {
-        bodyLog(`  ${f.path}  (${f.digest.slice(0, 6)})`);
-    }
-    const verdict = await askPanel(input, {
-        flavor: "simple",
-        name: "project trust",
-        title: artifacts.root,
-        speaker: "kiso",
-        statusText: "▸ project trust",
-        args: { kind: "text", lines: artifacts.files.map((f) => `${f.path}  (${f.digest.slice(0, 6)})`) },
-        ruleOverride: "trust this project's .kiso?",
-        fallbackQuestion: `trust this project's .kiso? (y/n) `,
-    });
+    for (const row of projectTrustRows(artifacts.files, "  "))
+        bodyLog(row);
+    const verdict = await askPanel(input, projectTrustView(artifacts.root, artifacts.files));
     // A cancel is a "no" HERE — refused is sticky, the project does not
     // load (re-evaluate by deleting the trust line or changing a file).
     // The non-TTY branch above returned WITHOUT a record so an interactive
@@ -317,16 +299,7 @@ function readdirSyncSafe(dir) {
  *  the body is the single stdout writer, never a stray console.log. */
 export async function resolveUncertains(session, input, isCancelled) {
     for (const uncertain of session.uncertainExecutions()) {
-        const verdict = await askPanel(input, {
-            flavor: "simple",
-            name: "uncertain execution",
-            title: `${uncertain.name} (${uncertain.executionId})`,
-            speaker: "kiso",
-            statusText: "▸ uncertain execution",
-            args: { kind: "text", lines: [uncertain.executionId] },
-            ruleOverride: "did the interrupted execution apply? — 1 rerun · 3 abandon",
-            fallbackQuestion: `⚠ interrupted execution: ${escapeTerminal(uncertain.name)} (${uncertain.executionId}) — did it apply? (y)es / (n)o `,
-        });
+        const verdict = await askPanel(input, uncertainView(uncertain.name, uncertain.executionId));
         if (isCancelled() || verdict.action === "cancel") {
             // round 10: a cancellation NEVER records a verdict — the execution
             // stays uncertain and durable; no rerun/abandoned is fabricated.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vincemakes/kiso-code",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "kiso CLI — the durable coding agent that survives kill -9: kiso chat / kiso resume / kiso sessions.",
   "type": "module",
   "license": "MIT",
@@ -18,18 +18,18 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@vincemakes/kiso-core": "0.6.0",
-    "@vincemakes/kiso-evals": "0.6.0",
-    "@vincemakes/kiso-mcp-ext": "0.6.0",
-    "@vincemakes/kiso-provider-anthropic": "0.6.0",
-    "@vincemakes/kiso-provider-openai": "0.6.0",
-    "@vincemakes/kiso-runtime": "0.6.0",
-    "@vincemakes/kiso-skills-ext": "0.6.0",
-    "@vincemakes/kiso-subagent-ext": "0.6.0",
-    "@vincemakes/kiso-task-ext": "0.6.0",
-    "@vincemakes/kiso-tools-node": "0.6.0",
-    "@vincemakes/kiso-tui": "0.6.0",
-    "@vincemakes/kiso-tui-cells": "0.6.0"
+    "@vincemakes/kiso-core": "0.7.0",
+    "@vincemakes/kiso-evals": "0.7.0",
+    "@vincemakes/kiso-mcp-ext": "0.7.0",
+    "@vincemakes/kiso-provider-anthropic": "0.7.0",
+    "@vincemakes/kiso-provider-openai": "0.7.0",
+    "@vincemakes/kiso-runtime": "0.7.0",
+    "@vincemakes/kiso-skills-ext": "0.7.0",
+    "@vincemakes/kiso-subagent-ext": "0.7.0",
+    "@vincemakes/kiso-task-ext": "0.7.0",
+    "@vincemakes/kiso-tools-node": "0.7.0",
+    "@vincemakes/kiso-tui": "0.7.0",
+    "@vincemakes/kiso-tui-cells": "0.7.0"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",