@vincemakes/kiso-runtime 0.40.7 → 0.41.1

package/dist/agent.d.ts

@@ -80,6 +80,15 @@ export interface AgentDefinition {
      *  before the request is aborted and retried (default 120 s; 0 off).
      *  Type-only additive; read by the runtime's idle guard. */
     readonly streamIdleMs?: number;
+    /** R1 (2026-09-23): the tool table's vocabulary rows — the product's
+     *  routing policy, one line per tool NAME, injected only while that tool
+     *  is active. Absent = no vocabulary lines (the fixed directives and the
+     *  tools' own snippets still compose). Type-only additive; never part of
+     *  the profile digest. */
+    readonly toolRules?: ReadonlyArray<{
+        readonly tool: string;
+        readonly line: string;
+    }>;
     /** E1: loaded extensions — their tools merge into the registry (a name
      *  collision with a built-in is a loud startup error), their hooks
      *  compose after the agent's own (the existing come first), their approvals join the

package/dist/agent.js

@@ -177,6 +177,7 @@ export class AgentRuntime {
             ...(this.#definition.contextPolicy !== undefined ? { contextPolicy: this.#definition.contextPolicy } : {}),
             ...(this.#definition.maxRetries !== undefined ? { maxRetries: this.#definition.maxRetries } : {}),
             ...(this.#definition.streamIdleMs !== undefined ? { streamIdleMs: this.#definition.streamIdleMs } : {}),
+            ...(this.#definition.toolRules !== undefined ? { toolRules: this.#definition.toolRules } : {}),
             ...(this.#definition.extensions !== undefined ? { extensions: this.#definition.extensions } : {}),
         };
         // 0.40.0: the last bill's time rides the RECORD, not the event.

package/dist/compose.d.ts

@@ -5,13 +5,33 @@
  */
 import type { ApprovalChain, Event, HookHost, KisoExtension, ToolRegistry } from "@vincemakes/kiso-core";
 import type { SessionConfig } from "./session.js";
+/**
+ * 0.1.40 (R-C item 1) — the tool substitution table: vocabulary rows, each
+ * bound to the tool that makes it true, filtered to the ACTIVE tool set +
+ * each active tool's ONE-line snippet + its guideline bullets. The full
+ * descriptions NEVER enter the system prompt — the provider transmits them
+ * in the JSON schema anyway (never pay twice). Deterministic: same registry
+ * + same rows → same table.
+ *
+ * R1 (2026-09-23): the ROWS are the product's (`AgentDefinition.toolRules`),
+ * not the runtime's. They were a constant here — the coding agent's routing
+ * policy, keyed by tool name — and every host whose tool happened to be
+ * called read_file received "never shell cat/head/tail" whether or not it
+ * had a shell. The runtime keeps the mechanism: the filter, the position,
+ * the joining. It knows no row. No rows → no vocabulary lines; the two
+ * fixed directives and the tools' own snippets remain.
+ */
+export type ToolRules = ReadonlyArray<{
+    readonly tool: string;
+    readonly line: string;
+}>;
 /** The base a run's system prompt is composed on: the session's prompt,
  *  then the tool table (generated machinery sits BETWEEN the base and the
  *  extension appends). One function, so an in-band summary outside a run
  *  (ADR-0055 A2, /compact) sends the exact prefix a run sends. */
-export declare function runBasePrompt(systemPrompt: string | undefined, registry: ToolRegistry): string | undefined;
+export declare function runBasePrompt(systemPrompt: string | undefined, registry: ToolRegistry, rules?: ToolRules): string | undefined;
 /** The table, or "" when the registry is empty (no vocabulary, no tools). */
-export declare function composeToolTable(registry: ToolRegistry): string;
+export declare function composeToolTable(registry: ToolRegistry, rules?: ToolRules): string;
 /**
  * E2: the session's systemPrompt plus every extension's append, in LOAD
  * order, \n\n-joined — deterministic (same extension list → same prompt).

package/dist/compose.js

@@ -3,38 +3,23 @@
  * from session.ts: the extension system-prompt appends, the extension
  * hook composition (the existing come first), and the loop's microcompact config lookup.
  */
-/**
- * 0.1.40 (R-C item 1) — the tool substitution table: the fixed vocabulary
- * (the reference implementation's content in kiso's voice, each line bound
- * to the tool that makes
- * it true) filtered to the ACTIVE tool set + each active tool's ONE-line
- * snippet + its guideline bullets. The full descriptions NEVER enter the
- * system prompt — the provider transmits them in the JSON schema anyway
- * (never pay twice). Deterministic: same registry → same table.
- */
-const TOOL_RULES = [
-    { tool: "read_file", line: "read files with read_file, never shell cat/head/tail" },
-    { tool: "search_text", line: "search with search_text, never shell grep/rg" },
-    { tool: "list_dir", line: "list with list_dir, never ls" },
-    { tool: "shell", line: "shell for what the file tools cannot do: commands, git, the network, the system" },
-];
 /** The base a run's system prompt is composed on: the session's prompt,
  *  then the tool table (generated machinery sits BETWEEN the base and the
  *  extension appends). One function, so an in-band summary outside a run
  *  (ADR-0055 A2, /compact) sends the exact prefix a run sends. */
-export function runBasePrompt(systemPrompt, registry) {
-    const toolTable = composeToolTable(registry);
+export function runBasePrompt(systemPrompt, registry, rules = []) {
+    const toolTable = composeToolTable(registry, rules);
     return toolTable === "" ? systemPrompt : systemPrompt === undefined ? toolTable : `${systemPrompt}\n\n${toolTable}`;
 }
 /** The table, or "" when the registry is empty (no vocabulary, no tools). */
-export function composeToolTable(registry) {
+export function composeToolTable(registry, rules = []) {
     const tools = registry.list();
     if (tools.length === 0)
         return "";
     const active = new Set(tools.map((t) => t.name));
     const lines = [
         "Tool use:",
-        ...TOOL_RULES.filter((r) => active.has(r.tool)).map((r) => `- ${r.line}`),
+        ...rules.filter((r) => active.has(r.tool)).map((r) => `- ${r.line}`),
         // the parallel directive: the window applies to every active turn.
         "- batch independent tool calls into one reply — they run in parallel",
         // D1: a tool result is evidence, not an answer — the turn ends with

package/dist/run.js

@@ -88,7 +88,7 @@ export class Run {
             // session's base prompt and the extension appends: generated
             // machinery never outranks the deliberate extension text (the E2
             // "append lands at the END" contract holds). "" when empty.
-            const basePrompt = runBasePrompt(this.#config.systemPrompt, this.#config.registry);
+            const basePrompt = runBasePrompt(this.#config.systemPrompt, this.#config.registry, this.#config.toolRules ?? []);
             // E3 — the ledger's parts: the base as CONFIGURED (what the CLI
             // handed the runtime — the tool table is generated machinery, R3)
             // and the extension appends in load order (R4 attribution). The

package/dist/session.d.ts

@@ -554,6 +554,11 @@ export interface SessionConfig {
     readonly maxRetries?: number;
     /** LT-1: the stream watchdog's idle bound (ms); default 120 s, 0 off. */
     readonly streamIdleMs?: number;
+    /** R1: the tool table's vocabulary rows, the product's (see AgentDefinition). */
+    readonly toolRules?: ReadonlyArray<{
+        readonly tool: string;
+        readonly line: string;
+    }>;
     /**
      * E1: loaded extensions — their tools join the registry (idempotently;
      * a collision with a built-in name was already rejected at agent

package/dist/session.js

@@ -842,7 +842,7 @@ export class AgentSession {
             // the one fallback. The budget is unchanged: measured for the
             // manual gesture, fixed for the policy (0.39.2).
             const cfg = this.#effectiveConfig();
-            const systemPrompt = composeSystemPrompt(runBasePrompt(cfg.systemPrompt, cfg.registry), cfg.extensions ?? []);
+            const systemPrompt = composeSystemPrompt(runBasePrompt(cfg.systemPrompt, cfg.registry, cfg.toolRules ?? []), cfg.extensions ?? []);
             const wire = cfg.reasoning === undefined ? undefined : resolveReasoning(binding.model, cfg.reasoning, binding.baseUrl);
             const { result: call, path } = await this.#checkpointCall({
                 messages: this.projected(),

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vincemakes/kiso-runtime",
-	"version": "0.40.7",
+	"version": "0.41.1",
 	"description": "kiso runtime \u2014 durable multi-turn agent sessions: AgentDefinition, AgentRuntime, AgentSession, Run, append-only JSONL store.",
 	"type": "module",
 	"license": "MIT",
@@ -25,12 +25,12 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@vincemakes/kiso-core": "0.40.7"
+		"@vincemakes/kiso-core": "0.41.1"
 	},
 	"peerDependencies": {
-		"@vincemakes/kiso-provider-anthropic": "0.40.7",
-		"@vincemakes/kiso-provider-openai": "0.40.7",
-		"@vincemakes/kiso-provider-openai-responses": "0.40.7"
+		"@vincemakes/kiso-provider-anthropic": "0.41.1",
+		"@vincemakes/kiso-provider-openai": "0.41.1",
+		"@vincemakes/kiso-provider-openai-responses": "0.41.1"
 	},
 	"peerDependenciesMeta": {
 		"@vincemakes/kiso-provider-anthropic": {
@@ -44,7 +44,7 @@
 		}
 	},
 	"devDependencies": {
-		"@vincemakes/kiso-evals": "0.40.7",
+		"@vincemakes/kiso-evals": "0.41.1",
 		"@types/node": "^26.1.2",
 		"typescript": "^5.7.2",
 		"vitest": "^3.0.0"