@vincemakes/kiso-runtime 0.26.1 → 0.26.3

package/dist/agent.js

@@ -28,13 +28,17 @@ export class AgentRuntime {
         // E1: extension tools join the registry — a collision with a built-in
         // name throws here, at agent creation: a loud startup failure.
         for (const ext of definition.extensions ?? []) {
-            for (const tool of ext.tools ?? [])
-                this.#registry.register(tool);
-            // 0.1.26 (MCP lazy connection): an extension's tools array is LIVE — the
-            // registry consults it on every lookup, so tools registered by a
-            // background connect (the MCP bridge's servers) are callable the
-            // moment they land, without a session rebuild.
-            this.#registry.registerLive(() => ext.tools ?? []);
+            // CX-1 F7a (audit F7): extension tools are reached ONLY through
+            // their live source — never frozen into static entries that would
+            // win every lookup and mask a background refresh (the MCP bridge
+            // replacing its cached definitions). The loud startup collision
+            // stays: a startup tool sharing a built-in's name (or an earlier
+            // extension's) throws here, at agent creation.
+            for (const tool of ext.tools ?? []) {
+                if (this.#registry.has(tool.name))
+                    throw new Error(`Tool already registered: ${tool.name} (extension ${ext.name})`);
+            }
+            this.#registry.registerLive(() => ext.tools ?? [], ext.name);
         }
         this.#adapterPromise = resolveAdapter(definition);
     }

package/dist/summarize.js

@@ -197,6 +197,16 @@ export async function summarizeConversation(options) {
     const { adapter, model, messages } = options;
     let text = "";
     let usage = null;
+    // CX-1 F3 (audit F3): the turn's SHAPE is validated, not just its text.
+    // A max_tokens cut after the last required heading, a turn with no
+    // stop, a turn that called a tool — all passed the section check and
+    // were persisted as a checkpoint that was not one. Exactly one stop,
+    // reason end_turn, zero tool-call events, no model output after the
+    // stop; `usage` after the stop is the one permitted trailer.
+    let stops = 0;
+    let stopReason;
+    let toolCalls = 0;
+    let afterStop;
     for await (const ev of adapter.stream({
         model,
         messages,
@@ -204,13 +214,31 @@ export async function summarizeConversation(options) {
         ...(options.signal !== undefined ? { signal: options.signal } : {}),
         ...(options.maxOutputTokens !== undefined ? { maxTokens: options.maxOutputTokens } : {}),
     })) {
+        if (stops > 0 && ev.type !== "usage" && ev.type !== "stop" && afterStop === undefined)
+            afterStop = ev.type;
         if (ev.type === "text_delta")
             text += ev.text;
+        else if (ev.type === "tool_call_start" || ev.type === "tool_call_end" || ev.type === "tool_call_input_delta")
+            toolCalls += 1;
+        else if (ev.type === "stop") {
+            stops += 1;
+            stopReason = ev.reason;
+        }
         // The LAST usage event is the call's (a turn reports usage once).
         if (ev.type === "usage" && ev.known) {
             usage = { inputTokens: ev.inputTokens, outputTokens: ev.outputTokens, cacheRead: ev.cacheRead, cacheWrite: ev.cacheWrite };
         }
     }
+    if (stops === 0)
+        throw new Error("the summary turn never stopped — not a complete turn");
+    if (stops > 1)
+        throw new Error(`the summary turn stopped ${stops} times — not a complete turn`);
+    if (toolCalls > 0)
+        throw new Error("the summary turn called a tool — a summary is text, never a tool call");
+    if (stopReason !== "end_turn")
+        throw new Error(`the summary turn ended with ${String(stopReason)} — not a complete turn`);
+    if (afterStop !== undefined)
+        throw new Error(`the summary turn produced ${afterStop} after its stop — not a complete turn`);
     const trimmed = text.trim();
     if (trimmed === "") {
         throw new Error("the summary call produced no text");

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vincemakes/kiso-runtime",
-	"version": "0.26.1",
+	"version": "0.26.3",
 	"description": "kiso runtime — durable multi-turn agent sessions: AgentDefinition, AgentRuntime, AgentSession, Run, append-only JSONL store.",
 	"type": "module",
 	"license": "MIT",
@@ -25,11 +25,11 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@vincemakes/kiso-core": "0.26.1"
+		"@vincemakes/kiso-core": "0.26.3"
 	},
 	"peerDependencies": {
-		"@vincemakes/kiso-provider-anthropic": "0.26.1",
-		"@vincemakes/kiso-provider-openai": "0.26.1"
+		"@vincemakes/kiso-provider-anthropic": "0.26.3",
+		"@vincemakes/kiso-provider-openai": "0.26.3"
 	},
 	"peerDependenciesMeta": {
 		"@vincemakes/kiso-provider-anthropic": {
@@ -40,7 +40,7 @@
 		}
 	},
 	"devDependencies": {
-		"@vincemakes/kiso-evals": "0.26.1",
+		"@vincemakes/kiso-evals": "0.26.3",
 		"@types/node": "^26.1.2",
 		"typescript": "^5.7.2",
 		"vitest": "^3.0.0"