aiden-runtime 4.7.0 → 4.8.1

package/dist/core/v4/daemon/dispatcher/realAgentRunner.js

@@ -177,14 +177,19 @@ function createRealAgentRunner(opts) {
             let invocationError = null;
             try {
                 result = await agent.runConversation(history, {
-                // The agent honours its own abort signal via per-tool aborts;
-                // tools that respect AbortSignal (shell_exec, fetch_*) will
-                // bail when perTurnWatcher trips.
-                //
-                // Note: runConversation doesn't currently take an abort
-                // signal in its options — the budget watcher is best-effort
-                // observability via tally(). Future enhancement: thread the
-                // signal into the loop body via options.
+                    // The agent honours its own abort signal via per-tool aborts;
+                    // tools that respect AbortSignal (shell_exec, fetch_*) will
+                    // bail when perTurnWatcher trips.
+                    //
+                    // Note: runConversation doesn't currently take an abort
+                    // signal in its options — the budget watcher is best-effort
+                    // observability via tally(). Future enhancement: thread the
+                    // signal into the loop body via options.
+                    //
+                    // v4.8.0 Phase 2.2 — uiOnly events on the daemon side are
+                    // dropped here. Phase 2.4 will serialize them into the
+                    // dispatcher's run_events stream.
+                    onUiEvent: () => { },
                 });
                 // Stamp the actual token usage onto the watcher for the
                 // post-turn snapshot below.

package/dist/core/v4/promptBuilder.js

@@ -131,6 +131,48 @@ const EXECUTION_DISCIPLINE_PROSE = [
     'result. When the user requests an action, take it. When the user requests',
     'discussion, discuss.',
 ].join('\n');
+/**
+ * v4.8.0 Phase 2.6 — UI events nudge. Without this, the model only
+ * emits ui_* tools when explicitly told to (e.g. "call ui_task_update
+ * with ..."). With it, events fire during normal multi-step work —
+ * research, file creation, test runs, command execution. Always-on:
+ * every model that sees the ui_* tools benefits.
+ */
+const UI_EVENTS_GUIDANCE = [
+    '## UI events',
+    '',
+    'When doing multi-step work, emit structured progress signals INSTEAD OF',
+    'writing them as text. The user sees these as inline rows separate from',
+    'your prose reply.',
+    '',
+    'WRONG (do NOT do this):',
+    '  "✓ Done — found 3 results"',
+    '  "⟳ Searching the web..."',
+    '  "Created hello.py"',
+    '',
+    'RIGHT:',
+    '  ui_task_update {task_id, label, status: "running"}',
+    '  ui_task_done   {task_id, status: "success", summary}',
+    '  ui_artifact_created {path, kind: "file", preview}',
+    '',
+    'When to fire each:',
+    '- ui_task_update + ui_task_done for any multi-step task (pair them by task_id)',
+    '- ui_command_result after shell_exec when the output is interesting',
+    '- ui_test_result after running tests',
+    '- ui_toast for transient notices (e.g. "switched to dark mode")',
+    '- ui_artifact_created when you create or modify a file/skill',
+    '- ui_approval_request fires automatically for risky tools — NEVER emit it manually',
+    '',
+    'Markdown text in your reply is for explanation, not status. Status goes',
+    'through events. Skip events entirely on single-shot queries that aren\'t',
+    'multi-step work.',
+    '',
+    '## Comparison formatting',
+    '',
+    'For comparison requests, prefer sectioned lists or narrow tables (3 cols max).',
+    'Wide tables (4+ columns or cells over ~30 chars) render imperfectly in the',
+    'CLI grid — break long content into sections with headers + bullets instead.',
+].join('\n');
 /**
  * Llama-3.3-specific tool-call format guard. Adapter-side recovery picks
  * up failures, but we'd rather avoid the 400 round-trip.
@@ -358,6 +400,15 @@ class PromptBuilder {
                 optional: true,
             });
         }
+        // ── 6.6. UI events nudge (v4.8.0 Phase 2.6) ───────────────────────
+        // Unconditional like execution discipline — every model that sees
+        // the ui_* tools benefits. Teaches structured-event emission for
+        // multi-step work instead of relying on text status formatting.
+        slots.push({
+            name: 'uiEvents',
+            content: UI_EVENTS_GUIDANCE,
+            optional: true,
+        });
         // ── 7. Iteration budget ───────────────────────────────────────────
         if (opts.initialBudget) {
             const { used, max } = opts.initialBudget;

package/dist/core/v4/subagent/childBuilder.js

@@ -199,6 +199,7 @@ function buildChildAgent(deps, input) {
         resolveVerifiedFlag: deps.resolveVerifiedFlag,
         resolveToolset: deps.resolveToolset,
         resolveMutates: deps.resolveMutates,
+        resolveUiOnly: deps.resolveUiOnly,
         honestyEnforcement: childHonestyEnforcement,
         onToolCall,
         // iterationBudgetInjection inherits the default (true) — child

package/dist/core/v4/subagent/spawnSubAgent.js

@@ -190,7 +190,13 @@ async function spawnSubAgent(spec, deps, ctx) {
     let tokensIn = 0;
     let tokensOut = 0;
     try {
-        const result = await agentBundle.agent.runConversation(agentBundle.history, { signal: childCtrl.signal });
+        const result = await agentBundle.agent.runConversation(agentBundle.history, {
+            signal: childCtrl.signal,
+            // v4.8.0 Phase 2.2 — uiOnly events from a subagent are
+            // dropped. Subagents have no chat surface; the parent
+            // assembles their summary. Stub stays a no-op forever.
+            onUiEvent: () => { },
+        });
         apiCalls = result.turnCount; // one provider call per turn
         tokensIn = result.totalUsage.inputTokens;
         tokensOut = result.totalUsage.outputTokens;

package/dist/core/v4/ui/banner.js

@@ -90,29 +90,29 @@ function renderBanner(opts) {
         out.push('');
         return out.join('\n') + '\n';
     }
-    // Wide layout: framed panel with ASCII art inside, taglines below.
+    // v4.8.0 Slice 10b — wide layout flows the AIDEN art without the
+    // heavy `╔══╗` frame (legacy chrome). The art carries its own
+    // visual weight as the boot-card identity anchor; framing it
+    // inside a closed box collides with the asymmetric orange-bar
+    // language used by every other v4.8.0 surface.
+    //
+    // v4.8.0 Slice 10c — emit raw 24-bit truecolor for the AIDEN art
+    // instead of routing through `c.primary` (which depth-detects via
+    // theme.ts and degrades to 256-color or 16-color when COLORTERM is
+    // unset — common on Windows ConPTY). Result on those terminals was
+    // a washed-out / grey AIDEN that didn't match the boot card's
+    // skinEngine-painted brand orange. Forcing truecolor here brings
+    // disclaimer + setupWizard banner in line with the boot card.
+    const ORANGE_ON = '\x1b[38;2;255;107;53m';
+    const COLOR_OFF = '\x1b[39m';
     const inner = w - 2;
     const artPad = Math.max(0, Math.floor((inner - ART_WIDTH) / 2));
-    const framed = opts.framed !== false;
-    const horiz = '═'.repeat(inner);
-    const top = framed ? theme_1.c.rule(`╔${horiz}╗`) : '';
-    const bottom = framed ? theme_1.c.rule(`╚${horiz}╝`) : '';
-    const blank = framed
-        ? `${theme_1.c.rule('║')}${' '.repeat(inner)}${theme_1.c.rule('║')}`
-        : ' '.repeat(w);
     const lines = [];
     lines.push('');
-    if (framed)
-        lines.push(top);
-    lines.push(blank);
     for (const row of AIDEN_ART) {
         const padded = rpad(' '.repeat(artPad) + row, inner);
-        const coloured = theme_1.c.primary(padded);
-        lines.push(framed ? `${theme_1.c.rule('║')}${coloured}${theme_1.c.rule('║')}` : `  ${coloured}`);
+        lines.push(`  ${ORANGE_ON}${padded}${COLOR_OFF}`);
     }
-    lines.push(blank);
-    if (framed)
-        lines.push(bottom);
     lines.push('');
     lines.push('  ' + (0, theme_1.dim)(theme_1.c.muted(versionLine)));
     lines.push('');

package/dist/core/v4/update/executeInstall.js

@@ -66,17 +66,21 @@ async function executeInstall(opts = {}) {
     const platform = opts.platform ?? process.platform;
     return new Promise((resolve) => {
         const args = ['install', '-g', packageSpec];
-        // shell: true on Windows so npm.cmd is found via PATHEXT; on
-        // POSIX we spawn npm directly. Either way the args are validated
-        // (only npm + install + a hardcoded spec by default) — no user
-        // input flows into argv.
+        // v4.8.1 Slice 2 — drop `shell: true`. Node 20+ emits
+        // `DeprecationWarning: Passing args to a child process with shell
+        // option true can lead to security vulnerabilities` whenever
+        // shell:true is paired with an args array. We don't need the
+        // shell either — on Windows we spawn `npm.cmd` explicitly (the
+        // shim that PATHEXT would otherwise resolve to); on POSIX we
+        // spawn `npm` directly. No user input flows into argv on either
+        // path so the prior shell-resolution wasn't load-bearing.
+        const cmd = platform === 'win32' ? 'npm.cmd' : 'npm';
         const spawnOpts = {
-            shell: platform === 'win32',
             stdio: ['ignore', 'pipe', 'pipe'],
         };
         let child;
         try {
-            child = spawn('npm', args, spawnOpts);
+            child = spawn(cmd, args, spawnOpts);
         }
         catch (err) {
             resolve({

package/dist/core/v4/update/installMethodDetect.js

@@ -37,6 +37,13 @@ const NPM_GLOBAL_HINTS = [
     /[/\\]npm-global[/\\]/,
     /[/\\]\.nvm[/\\]versions[/\\]node[/\\][^/\\]+[/\\]lib[/\\]node_modules\b/,
     /Program Files[/\\]nodejs[/\\]node_modules[/\\]aiden-runtime\b/i,
+    // v4.8.1 Slice 2 — Windows user-mode `npm install -g` lands in
+    // `C:\Users\<u>\AppData\Roaming\npm\node_modules\aiden-runtime\`.
+    // The leading `[/\\]npm[/\\]node_modules` hint above usually catches
+    // it, but tests on a non-default `npm config prefix` setup
+    // (Cmder, Scoop, etc.) can land outside the canonical path. The
+    // extra hint here is a belt-and-suspenders explicit AppData match.
+    /[/\\]AppData[/\\]Roaming[/\\]npm[/\\]/i,
 ];
 function inferDirs(input) {
     return {

package/dist/core/version.js

@@ -1,5 +1,70 @@
 "use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/version.ts — runtime version reader.
+ *
+ * v4.8.1 Slice 2 — switched from build-time injection to a runtime
+ * `package.json` walk. The previous design relied on
+ * `scripts/inject-version.js` (a `prebuild:cli` / `prebuild:api` hook)
+ * to write a hardcoded VERSION constant into this file. That design
+ * had a subtle ordering bug:
+ *
+ *   `npm run build` ran `tsc --outDir dist` BEFORE `inject-version.js`.
+ *   tsc compiled `core/version.ts` (still at the previously-committed
+ *   value) into `dist/core/version.js`. Inject then mutated the
+ *   source, but only the esbuild bundle (`dist-bundle/cli.js`) picked
+ *   up the fresh value. The `bin` entry uses the tsc tree
+ *   (`dist/cli/v4/aidenCLI.js`), so the globally-installed CLI
+ *   reported the stale version.
+ *
+ * Fix: read the version at module-load time by walking up from
+ * `__dirname` and parsing the first `package.json` we find whose
+ * `name` is `aiden-runtime`. This works for:
+ *
+ *   - the tsc tree   (`dist/core/version.js` → walk to `<install>/package.json`)
+ *   - the esbuild bundle (`dist-bundle/cli.js` → walk to root)
+ *   - source / tsx dev runs (`core/version.ts` → walk to repo root)
+ *   - tests (any `__dirname` inside the repo lands on the right pkg)
+ *
+ * Failure mode: returns `'0.0.0-unknown'` if no aiden-runtime
+ * package.json is found within 6 parent directories. End-user
+ * deployments always have one within 3 levels; the 6-level budget
+ * keeps the function defensive without scanning the whole filesystem.
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-// AUTO-GENERATED by scripts/inject-version.js — do not edit by hand
-exports.VERSION = '4.7.0';
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+function readVersion() {
+    let dir = __dirname;
+    for (let i = 0; i < 6; i += 1) {
+        const candidate = (0, node_path_1.join)(dir, 'package.json');
+        if ((0, node_fs_1.existsSync)(candidate)) {
+            try {
+                const pkg = JSON.parse((0, node_fs_1.readFileSync)(candidate, 'utf8'));
+                if (pkg.name === 'aiden-runtime' && typeof pkg.version === 'string') {
+                    return pkg.version;
+                }
+            }
+            catch {
+                /* unreadable / non-JSON → keep walking */
+            }
+        }
+        const parent = (0, node_path_1.dirname)(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return '0.0.0-unknown';
+}
+/**
+ * Resolved at module-load time. Idempotent — multiple imports share
+ * the cached value. Re-reading on every access would be wasteful;
+ * the package.json version doesn't change during a process lifetime.
+ */
+exports.VERSION = readVersion();

package/dist/moat/approvalEngine.js

@@ -237,6 +237,20 @@ class ApprovalEngine {
             this.callbacks.onDecision?.(req, 'deny');
             return false;
         }
+        // v4.8.0 Phase 2.5 — emit a structured ui_approval_request event
+        // BEFORE the y/n prompt fires. Additive: the display layer paints
+        // the gutter-integrated row, then the existing promptUser flow
+        // runs unchanged. Moat-tier (safe/caution/dangerous) maps to the
+        // ui schema's 4-tier scale; 'critical' is reserved for future
+        // wiring and unreachable from this path.
+        const uiTier = req.riskTier === 'safe' ? 'low' :
+            req.riskTier === 'dangerous' ? 'high' : 'medium';
+        const argsPreview = JSON.stringify(req.args).slice(0, 80);
+        this.callbacks.onUiEvent?.('ui_approval_request', {
+            prompt: `${req.toolName} ${argsPreview}`,
+            risk_tier: uiTier,
+            reason: req.reason,
+        });
         const decision = await this.callbacks.promptUser(req);
         this.callbacks.onDecision?.(req, decision);
         if (decision === 'deny')

package/dist/tools/v4/index.js

@@ -246,6 +246,60 @@ function registerWriteTools(registry) {
 function registerAllTools(registry) {
     registerReadOnlyTools(registry);
     registerWriteTools(registry);
+    // v4.8.0 Phase 2.2 — register the 7 semantic ui_* event tools.
+    // All uiOnly: true → the dispatch loop in core/v4/aidenAgent.ts
+    // bypasses execute and fires onUiEvent on the caller. execute()
+    // throws as a safety guard: if the uiOnly branch ever misfires
+    // and an executor is reached, that's a wiring bug, not a render.
+    // Renderer is a no-op stub in this phase; Phase 2.3 lands chrome.
+    const ui = (name, description, properties, required) => ({
+        schema: { name, description, inputSchema: { type: 'object', properties, required } },
+        execute: async () => { throw new Error(`${name} is uiOnly — dispatch branch should bypass execute`); },
+        category: 'read', mutates: false, uiOnly: true,
+    });
+    const str = { type: 'string' };
+    const num = { type: 'number' };
+    registry.register(ui('ui_task_update', 'Signal current task state for the live task panel. Append-only stream.', { task_id: str, label: { type: 'string', description: '≤80 chars' },
+        status: { type: 'string', enum: ['running', 'blocked', 'paused'] },
+        kind: { type: 'string', enum: ['task', 'subagent'] }, depth: num, parent_id: str }, ['task_id', 'label', 'status']));
+    registry.register(ui('ui_task_done', 'Signal a task is complete. Pairs with a prior ui_task_update.', { task_id: str, status: { type: 'string', enum: ['success', 'failure', 'blocked'] },
+        summary: { type: 'string', description: 'Optional, ≤120 chars' } }, ['task_id', 'status']));
+    registry.register(ui('ui_command_result', 'Surface shell output as a formatted block.', { command: str, stdout: str, stderr: str, exit_code: num }, ['command']));
+    registry.register(ui('ui_test_result', 'Pass/fail count after a test run.', { framework: { type: 'string', description: 'e.g. "vitest", "pytest"' },
+        passed: num, failed: num, skipped: num, duration_ms: num }, ['framework', 'passed', 'failed']));
+    registry.register(ui('ui_approval_request', 'Structured approval prompt before a privileged action.', { prompt: { type: 'string', description: '≤160 chars' },
+        risk_tier: { type: 'string', enum: ['low', 'medium', 'high', 'critical'] },
+        reason: { type: 'string', description: 'Optional, ≤200 chars' } }, ['prompt', 'risk_tier']));
+    registry.register(ui('ui_toast', 'Transient notice to surface without interrupting flow.', { message: { type: 'string', description: '≤120 chars' },
+        kind: { type: 'string', enum: ['info', 'success', 'warning', 'error'] } }, ['message', 'kind']));
+    registry.register(ui('ui_artifact_created', 'Surface a file or skill created/modified this turn.', { path: str, kind: { type: 'string', enum: ['file', 'skill', 'directory'] },
+        preview: { type: 'string', description: 'Optional, ≤200 chars' } }, ['path', 'kind']));
+    // v4.8.0 Phase 2.1 — env-gated uiOnly smoke stub. Never registers
+    // in production. Set AIDEN_TEST_UI_STUB=1 to enable for the
+    // dispatch-branch smoke harness. The execute() throws on purpose:
+    // if the uiOnly branch is wired correctly the model can never
+    // reach the executor.
+    if (process.env.AIDEN_TEST_UI_STUB === '1') {
+        registry.register({
+            schema: {
+                name: '_test_ui_stub',
+                description: 'Test-only uiOnly stub for v4.8.0 Phase 2.1 smoke. Set AIDEN_TEST_UI_STUB=1 to enable.',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        message: { type: 'string', description: 'Arbitrary message to echo via onUiEvent' },
+                    },
+                    required: ['message'],
+                },
+            },
+            execute: async () => {
+                throw new Error('_test_ui_stub should never execute — uiOnly branch should bypass it');
+            },
+            category: 'read',
+            mutates: false,
+            uiOnly: true,
+        });
+    }
 }
 var subagentFanout_2 = require("./subagent/subagentFanout");
 Object.defineProperty(exports, "makeSubagentFanoutTool", { enumerable: true, get: function () { return subagentFanout_2.makeSubagentFanoutTool; } });

package/dist/tools/v4/subagent/spawnSubAgentTool.js

@@ -289,6 +289,19 @@ function makeSpawnSubAgentTool(factory) {
             // ── 3. Resolve optional parent run / session identifiers ─────────────
             const parentRunId = factory.resolveParentRunId?.();
             const parentSessionId = factory.resolveParentSessionId?.();
+            // v4.8.0 Phase 2.5 — emit ui_task_update for the subagent start.
+            // Stable task_id correlates with the matching ui_task_done emit
+            // after the spawnSubAgent call returns. depth:1 hardcoded today
+            // — childBuilder caps recursion at 1 (see SUBAGENT_BLOCKED_TOOL_NAMES
+            // 'spawn_sub_agent'). TODO: thread real depth when nested spawns ship.
+            const subTaskId = `subagent-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+            factory.onUiEvent?.('ui_task_update', {
+                task_id: subTaskId,
+                label: goalPreview,
+                status: 'running',
+                kind: 'subagent',
+                depth: 1,
+            });
             // ── 4. Invoke the primitive. NEVER throws — always envelope. ─────────
             const result = await (0, spawnSubAgent_1.spawnSubAgent)(spec, {
                 // ChildBuilderDeps fields:
@@ -310,6 +323,16 @@ function makeSpawnSubAgentTool(factory) {
                 parentRunId,
                 parentSessionId,
             });
+            // v4.8.0 Phase 2.5 — emit ui_task_done with the same subTaskId
+            // so the display layer can finalize the in-flight row.
+            const doneStatus = result.ok ? 'success' :
+                result.status === 'interrupted' ? 'blocked' :
+                    result.status === 'timeout' ? 'blocked' : 'failure';
+            factory.onUiEvent?.('ui_task_done', {
+                task_id: subTaskId,
+                status: doneStatus,
+                summary: `${result.metrics.apiCalls} calls · ${result.exitReason}`,
+            });
             // Completion log — pairs with "spawn_sub_agent invoked" so a
             // grep on parentSessionId surfaces invoke → complete in order.
             logger.info('spawn_sub_agent completed', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiden-runtime",
-  "version": "4.7.0",
+  "version": "4.8.1",
   "publishConfig": {
     "access": "public"
   },
@@ -60,9 +60,7 @@
   "scripts": {
     "dev": "electron electron/main.js",
     "build": "tsc --outDir dist && npm run build:cli && npm run build:api",
-    "prebuild:cli": "node scripts/inject-version.js",
     "build:cli": "esbuild cli/aiden.ts --bundle --platform=node --target=node18 --outfile=dist-bundle/cli.js --external:electron --external:cpu-features --external:ssh2 --external:bcrypt --external:playwright --external:playwright-core --external:@aws-sdk/client-s3",
-    "prebuild:api": "node scripts/inject-version.js",
     "build:api": "esbuild api/entry.ts --bundle --platform=node --target=node18 --outfile=dist-bundle/index.js --external:electron --external:cpu-features --external:ssh2 --external:bcrypt --external:playwright --external:playwright-core --external:@aws-sdk/client-s3",
     "prepublishOnly": "npm run typecheck && npm run build",
     "typecheck": "tsc --noEmit",