@vincemakes/kiso-runtime 1.0.1 → 1.1.0

package/dist/agent.d.ts

@@ -62,6 +62,7 @@ export interface AgentDefinition {
      *  loop's policy chain. */
     readonly extensions?: readonly KisoExtension[];
 }
+/** @deprecated the canonical name is `Agent` (root export, 1.1.0); this alias is removed in the next major. */
 export declare class AgentRuntime {
     #private;
     constructor(definition: AgentDefinition);

package/dist/agent.js

@@ -13,6 +13,7 @@
  */
 import { EventLog, ToolRegistry } from "@vincemakes/kiso-core";
 import { AgentSession } from "./session.js";
+/** @deprecated the canonical name is `Agent` (root export, 1.1.0); this alias is removed in the next major. */
 export class AgentRuntime {
     #definition;
     #registry;

package/dist/index.d.ts

@@ -1,11 +1,31 @@
-export * from "./agent.js";
-export * from "./session.js";
-export * from "./run.js";
-export * from "./recovery.js";
-export * from "./compose.js";
-export * from "./summarize.js";
-export * from "./store.js";
-export * from "./lock-adapter.js";
-export * from "./ledger.js";
-export * from "./extensions.js";
-export * from "./trust.js";
+/**
+ * The SDK surface — the curated root manifest (S1, 2026-08-12).
+ *
+ * Every name here is a review-approved contract: adding or removing one
+ * WITHOUT the ritual (the review's sign-off + a public-surface.json
+ * refresh) turns the public-surface gate red. See docs/sdk.md for the
+ * contract, the aliases, and what deliberately lives behind the
+ * first-party door.
+ *
+ * What is NOT here is not the SDK. The recovery / compose / summarize /
+ * lock-adapter machinery and buildAdapter live behind "./internal"
+ * (unstable, first-party only — see internal.ts).
+ *
+ * Canonical names: Agent = AgentRuntime, Session = AgentSession. The old
+ * names are deprecated aliases, removed in the next major (additive,
+ * ADR-0051 Amendment 1 — release rounds move the cli minor).
+ */
+export { AgentRuntime, AgentRuntime as Agent, createAgent } from "./agent.js";
+export type { AgentDefinition, PermissionPolicy, PermissionRule } from "./agent.js";
+export { AgentSession, AgentSession as Session } from "./session.js";
+export { PoisonedSessionError, ResumeBlockedError } from "./session.js";
+export type { ApprovalRequest, CompactInfo, SessionConfig, SummarizeResult } from "./session.js";
+export { Run } from "./run.js";
+export { SessionStore, StaleWriterError, StoreCorruptionError } from "./store.js";
+export type { Event, SessionMeta, StoreRecord } from "./store.js";
+export { disposeExtensions, loadExtensions, loadProjectExtensions } from "./extensions.js";
+export type { KisoExtension } from "./extensions.js";
+export { executionForCallId, executionLedger } from "./ledger.js";
+export type { ExecutionRecord, ExecutionStatus } from "./ledger.js";
+export { kisoHome, projectArtifacts, recordTrust, trustFor } from "./trust.js";
+export type { ProjectArtifact, ProjectArtifacts, TrustDecision, TrustRecord } from "./trust.js";

package/dist/index.js

@@ -1,11 +1,32 @@
-export * from "./agent.js";
-export * from "./session.js";
-export * from "./run.js";
-export * from "./recovery.js";
-export * from "./compose.js";
-export * from "./summarize.js";
-export * from "./store.js";
-export * from "./lock-adapter.js";
-export * from "./ledger.js";
-export * from "./extensions.js";
-export * from "./trust.js";
+/**
+ * The SDK surface — the curated root manifest (S1, 2026-08-12).
+ *
+ * Every name here is a review-approved contract: adding or removing one
+ * WITHOUT the ritual (the review's sign-off + a public-surface.json
+ * refresh) turns the public-surface gate red. See docs/sdk.md for the
+ * contract, the aliases, and what deliberately lives behind the
+ * first-party door.
+ *
+ * What is NOT here is not the SDK. The recovery / compose / summarize /
+ * lock-adapter machinery and buildAdapter live behind "./internal"
+ * (unstable, first-party only — see internal.ts).
+ *
+ * Canonical names: Agent = AgentRuntime, Session = AgentSession. The old
+ * names are deprecated aliases, removed in the next major (additive,
+ * ADR-0051 Amendment 1 — release rounds move the cli minor).
+ */
+// agent
+export { AgentRuntime, AgentRuntime as Agent, createAgent } from "./agent.js";
+// session
+export { AgentSession, AgentSession as Session } from "./session.js";
+export { PoisonedSessionError, ResumeBlockedError } from "./session.js";
+// run
+export { Run } from "./run.js";
+// store
+export { SessionStore, StaleWriterError, StoreCorruptionError } from "./store.js";
+// extensions
+export { disposeExtensions, loadExtensions, loadProjectExtensions } from "./extensions.js";
+// ledger
+export { executionForCallId, executionLedger } from "./ledger.js";
+// trust
+export { kisoHome, projectArtifacts, recordTrust, trustFor } from "./trust.js";

package/dist/internal.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The FIRST-PARTY door — NOT part of the public SDK contract (S1,
+ * 2026-08-12, adjudicated).
+ *
+ * Unstable: anything here can move or vanish in any release without a
+ * major bump. External consumers must import the curated root
+ * (index.ts); this file exists for the in-repo consumers (apps/cli,
+ * extensions, tests) that need machinery the SDK deliberately does not
+ * expose — the recovery / compose / summarize / lock-adapter internals
+ * and buildAdapter.
+ *
+ * This is today's pre-S1 index.ts verbatim: removing the door would be a
+ * breaking change for the first-party consumers mid-migration.
+ */
+export * from "./agent.js";
+export * from "./session.js";
+export * from "./run.js";
+export * from "./recovery.js";
+export * from "./compose.js";
+export * from "./summarize.js";
+export * from "./store.js";
+export * from "./lock-adapter.js";
+export * from "./ledger.js";
+export * from "./extensions.js";
+export * from "./trust.js";

package/dist/internal.js

@@ -0,0 +1,25 @@
+/**
+ * The FIRST-PARTY door — NOT part of the public SDK contract (S1,
+ * 2026-08-12, adjudicated).
+ *
+ * Unstable: anything here can move or vanish in any release without a
+ * major bump. External consumers must import the curated root
+ * (index.ts); this file exists for the in-repo consumers (apps/cli,
+ * extensions, tests) that need machinery the SDK deliberately does not
+ * expose — the recovery / compose / summarize / lock-adapter internals
+ * and buildAdapter.
+ *
+ * This is today's pre-S1 index.ts verbatim: removing the door would be a
+ * breaking change for the first-party consumers mid-migration.
+ */
+export * from "./agent.js";
+export * from "./session.js";
+export * from "./run.js";
+export * from "./recovery.js";
+export * from "./compose.js";
+export * from "./summarize.js";
+export * from "./store.js";
+export * from "./lock-adapter.js";
+export * from "./ledger.js";
+export * from "./extensions.js";
+export * from "./trust.js";

package/dist/lock-adapter.js

@@ -91,6 +91,15 @@ export class LockUnavailableError extends Error {
  * pre-amendment behavior — alive, the fail-safe refusal (prefer a false
  * refusal over a double-write). Live-process semantics and the PID-reuse
  * rules do not move: a live foreign writer is still refused.
+ *
+ * ADR-0050 Amendment 2 (Finding R-I-p-3): the state letters are matched
+ * ANYWHERE in the state string, not as the first character. The
+ * exit-path linger's ps output is "?E" — the first character is the
+ * no-controlling-terminal marker "?", with the E sitting AFTER it — so
+ * first-character matching judged the finding's own documented shape
+ * alive. The ps state alphabet (macOS + Linux) has no flag letters
+ * "E"/"Z": an occurrence anywhere is the process-state code, and the
+ * holder is dead.
  */
 function isAlive(pid) {
     try {
@@ -100,12 +109,16 @@ function isAlive(pid) {
         return err.code === "EPERM";
     }
     const state = processState(pid);
-    return state !== "E" && state !== "Z";
+    // A null state (probe failure) keeps the pre-amendment behavior —
+    // judged alive, the fail-safe refusal.
+    return state === null || (!state.includes("E") && !state.includes("Z"));
 }
 /**
- * The process state via `ps -o state= -p <pid>` (macOS/Linux). The
- * state is the FIRST character (a multi-char string like "Ss+" is a
- * combined flag set). An empty or unreadable state — the process
+ * The process state via `ps -o state= -p <pid>` (macOS/Linux) — the
+ * whole state string (a multi-char string like "Ss+" or "?E" is a
+ * combined flag set; the E/Z process-state codes may sit after the "?"
+ * no-tty marker or other flag letters, so the matching in isAlive scans
+ * the whole string). An empty or unreadable state — the process
  * vanished between the kill and the probe, or ps itself failed —
  * returns null; isAlive's fail-safe branch then judges the holder alive
  * (the pre-amendment behavior).
@@ -113,7 +126,7 @@ function isAlive(pid) {
 function processState(pid) {
     try {
         const state = execFileSync("ps", ["-o", "state=", "-p", String(pid)], { encoding: "utf8" }).trim();
-        return state.length > 0 ? (state[0] ?? null) : null;
+        return state.length > 0 ? state : null;
     }
     catch {
         return null;

package/dist/session.d.ts

@@ -71,6 +71,7 @@ export interface CompactInfo {
     /** The covered content's estimated tokens (the chars/4 proxy). */
     readonly tokens: number;
 }
+/** @deprecated the canonical name is `Session` (root export, 1.1.0); this alias is removed in the next major. */
 export declare class AgentSession {
     #private;
     readonly id: string;

package/dist/session.js

@@ -54,6 +54,7 @@ export class ResumeBlockedError extends Error {
         this.uncertain = uncertain;
     }
 }
+/** @deprecated the canonical name is `Session` (root export, 1.1.0); this alias is removed in the next major. */
 export class AgentSession {
     id;
     log;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vincemakes/kiso-runtime",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "kiso runtime — durable multi-turn agent sessions: AgentDefinition, AgentRuntime, AgentSession, Run, append-only JSONL store.",
   "type": "module",
   "license": "MIT",
@@ -8,6 +8,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
+    },
+    "./internal": {
+      "types": "./dist/internal.d.ts",
+      "default": "./dist/internal.js"
     }
   },
   "files": [