atom-lite 0.0.0-stage → 0.4.1

package/CHANGELOG.md

@@ -0,0 +1,72 @@
+# Changelog
+
+All notable changes to this project are documented here.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+
+## [0.4.1] - 2026-11-04
+
+### Fixed
+
+- npm publish retry after staged 0.4.0 conflict.
+
+## [0.4.0] - 2026-11-04
+
+### Added
+
+- Extension discovery and manifest parsing (`src/extensions/discovery.ts`).
+- Project trust gating and extension loader lifecycle with `/extensions`.
+- `/export` for sessions.
+- Markdown rendering for assistant responses and unified diff summaries in tool boxes.
+- Literal edit replacement handling.
+- Escape to cancel an active turn.
+- TUI mouse capture fixes.
+
+### Fixed
+
+- Mouse capture sequence and startup ordering for TUI mouse support.
+
+[0.4.0]: https://github.com/beast-ofcourse/atom-lite/releases/tag/v0.4.0
+
+## [0.3.1] - 2026-11-04
+
+### Added
+
+- MCP client over stdio: user-config-only `mcpServers`, lazy connections, tool
+  discovery and execution as `mcp__<server>__<tool>`, refresh on
+  `tools/list_changed`, `/mcp` and `/mcp reconnect`, and `/doctor` health.
+- Session picker and search (`/sessions`, `/search`), resume in place, and
+  `/session rename`.
+- Command palette (`ctrl+p`), semantic theme registry, and TUI mouse support.
+- Configuration reference and documentation index.
+
+### Fixed
+
+- Ollama provider profiles now forward the `think` option to the adapter.
+
+[0.3.1]: https://github.com/beast-ofcourse/atom-lite/releases/tag/v0.3.1
+
+## [0.1.0] - 2026-11-04
+
+### Added
+
+- Local-first interactive TUI with streaming assistant output, thinking display,
+  boxed tool calls, and collapsible transcripts.
+- Single agent loop with a conflict-aware tool scheduler.
+- Built-in `read`, `write`, `edit`, `bash`, `webfetch`, and `websearch` tools.
+- Provider adapters for OpenAI-compatible endpoints, Ollama, and Gemini.
+- Interactive `/provider` setup with hidden API-key input and validation.
+- Fuzzy `/model` picker spanning every configured provider.
+- Durable JSONL sessions with resume support.
+- Context management with compaction, project instructions, and skill indexing.
+- Live context-window usage in the status line (`tokens: 4.5k/256k`).
+- Bold-red ANSI Shadow startup banner.
+- Approval modes, workspace path boundaries, and hash-guarded writes.
+- Non-gating performance benchmark suite for tools, startup, and TUI rendering.
+
+[0.1.0]: https://github.com/beast-ofcourse/atom-lite/releases/tag/v0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Atom-lite contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,314 @@
-# Temporary Holding Version
+# Atom-lite
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![npm](https://img.shields.io/npm/v/atom-lite?logo=npm)](https://www.npmjs.com/package/atom-lite)
+[![CI](https://github.com/beast-ofcourse/atom-lite/actions/workflows/ci.yml/badge.svg)](https://github.com/beast-ofcourse/atom-lite/actions/workflows/ci.yml)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D22.19-339933?logo=node.js&logoColor=white)](https://nodejs.org)
+[![TypeScript](https://img.shields.io/badge/TypeScript-strict-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](./LICENSE)
+
+**Atom-lite** is a local-first, model-agnostic coding agent with an intentionally small harness: one agent loop, four core built-in tools (`read`, `write`, `edit`, `bash`) plus network tools (`webfetch`, `websearch`), a deterministic conflict-aware scheduler, durable JSONL sessions, and explicit safety boundaries. It runs against local or hosted model providers through interchangeable adapters — no cloud account, telemetry service, or hosted control plane required.
+
+> See [`docs/README.md`](./docs/README.md) for the documentation index and [`docs/adr/`](./docs/adr/) for architectural decisions.
+
+---
+
+## Table of contents
+
+- [Why Atom-lite](#why-atom-lite)
+- [Features](#features)
+- [Install](#install)
+- [Quick start](#quick-start)
+- [Default provider](#default-provider)
+- [Configuration](#configuration)
+- [Usage](#usage)
+- [Tools](#tools)
+- [Providers](#providers)
+- [Safety & security](#safety--security)
+- [Sessions](#sessions)
+- [Context management](#context-management)
+- [Development](#development)
+- [Architecture](#architecture)
+- [Contributing](#contributing)
+- [License](#license)
+
+## Why Atom-lite
+
+Most coding agents accumulate tools, sub-agents, planning frameworks, retrieval pipelines, and orchestration layers until the harness itself becomes the product. Atom-lite takes the opposite stance:
+
+- **Small core, strong primitives.** The core contains only a provider interface, a session model, a single agent loop, four core tools plus two network tools, a scheduler/executor, context-window management, configuration, and a CLI.
+- **The model decides; the runtime enforces.** The model chooses which tool to call and what to do next. The runtime validates arguments, enforces workspace boundaries, applies approval rules, schedules calls safely, and returns accurate results. There is no hard-coded "plan → inspect → edit → test" workflow.
+- **Thin harness, not weak engineering.** Provider-specific formats, streaming failures, concurrent file access, shell timeouts, large outputs, context exhaustion, and session recovery are all handled — they are the reliability layer that makes a small harness useful.
+
+## Features
+
+- **Six built-in tools** — four core tools (`read`, `write`, `edit`, `bash`) plus `webfetch` and `websearch`. Everything else (search, tests, git, builds) goes through `bash`.
+- **Single agent loop** — one agent, one conversation, one tool registry, one control loop. Parallelism lives inside a tool-call batch.
+- **Conflict-aware scheduler** — per-file read/write locks and a global bash barrier. Parallelism is governed by resource conflicts, not applied blindly.
+- **Durable sessions** — append-only JSONL event logs, resumable across CLI restarts, grouped by workspace.
+- **Context management** — token estimation, compaction (summarization of older history) before the context budget is exceeded, while retaining the full transcript.
+- **Live context meter** — the status line shows context tokens used against the selected model's real window (e.g. `tokens: 4.5k/256k`), resolved from provider metadata with known-model fallbacks.
+- **Approval modes** — `ask` / `trusted` / `deny` for shell commands, with session-level trust.
+- **Hash guards** — `expected_hash` rejects stale `write`/`edit` operations when the file changed since it was read.
+- **Provider-agnostic** — Ollama, Gemini, and any OpenAI-compatible endpoint (LM Studio, llama.cpp, Kilo AI Gateway, OpenAI, Anthropic, OpenRouter, Groq, Mistral, xAI, …).
+- **Interactive provider/model pickers** — `/provider` adds a provider and stores its key securely; `/model` fuzzy-searches every configured provider's models.
+- **Command palette and themes** — `ctrl+p` fuzzy-searches commands, skills, providers, models, themes, and recent sessions. `/theme` switches between auto, dark, light, and no-colour modes.
+- **Local-first** — runs fully against local providers with no cloud account, telemetry, or hosted database.
+- **Safe path handling** — file tools resolve against the workspace and reject escapes; shell is an explicit, sandbox-aware boundary.
+
+## Install
+
+```sh
+npm install -g atom-lite
+```
+
+Or run without installing:
+
+```sh
+npx atom-lite "fix the failing test"
+```
+
+Requires **Node.js >= 22.19** (see `engines` in `package.json`).
+
+## Quick start
+
+```sh
+atom-lite                 # interactive session in the current directory
+atom-lite "task"          # run one task, then exit
+atom-lite --provider NAME # select a provider profile
+atom-lite --continue      # resume the most recent session
+atom-lite --help
+```
+
+Pipe a task via stdin:
+
+```sh
+echo "summarize this repo" | atom-lite
+```
+
+## Default provider
+
+Out of the box, Atom-lite uses the **Kilo AI Gateway** (`https://api.kilo.ai/api/gateway`) with the free `kilo-auto/free` model. No API key is required (rate-limited to 200 requests/hour per IP for anonymous use). Override via `--provider`/`--model` or config.
+
+## Configuration
+
+User config: `~/.config/atom-lite/config.json`
+Project config: `.atom-lite/config.json` (non-secrets only)
+
+Precedence (low → high): defaults → user config → project config (non-secret) → environment → CLI overrides. Security-critical user settings (e.g. `approvalMode`) are **not** overridable by project config.
+
+Secrets are stored in `~/.config/atom-lite/credentials.json` with owner-only permissions (`0600`). Environment variables named by a provider's `apiKeyEnv` take precedence over the stored key. Secrets are never written to project config or session files.
+
+Environment overrides:
+
+| Variable | Effect |
+| --- | --- |
+| `ATOM_LITE_PROVIDER` | Default provider profile name |
+| `ATOM_LITE_APPROVAL_MODE` | `ask` / `trusted` / `deny` |
+
+Example `config.json`:
+
+```json
+{
+  "defaultProvider": "kilo",
+  "providers": {
+    "kilo": {
+      "type": "openai-compatible",
+      "baseUrl": "https://api.kilo.ai/api/gateway",
+      "model": "kilo-auto/free",
+      "apiKeyEnv": null
+    },
+    "ollama": {
+      "type": "ollama",
+      "baseUrl": "http://127.0.0.1:11434",
+      "model": "qwen2.5-coder:7b"
+    },
+    "gemini": {
+      "type": "gemini",
+      "model": "gemini-2.0-flash",
+      "apiKeyEnv": "GEMINI_API_KEY"
+    }
+  },
+  "runtime": {
+    "approvalMode": "ask",
+    "bashConcurrency": "serial",
+    "maxIterations": 40,
+    "maxToolCalls": 100
+  },
+  "context": {
+    "maxInputTokens": null,
+    "reserveOutputTokens": 4096,
+    "compactAtPercent": 85
+  }
+}
+```
+
+See [`docs/configuration.md`](./docs/configuration.md) for every field, default, and precedence rule.
+
+## Usage
+
+```
+atom-lite [task] [--provider NAME] [--model MODEL] [--continue] [--session ID]
+          [--list-sessions] [--search-sessions QUERY] [--no-tools] [--json]
+          [--debug] [--theme NAME] [--no-color] [--version] [--help]
+```
+
+| Flag | Description |
+| --- | --- |
+| `task` | One-shot task; agent runs it and exits |
+| `--provider NAME` | Select a provider profile |
+| `--model MODEL` | Override the model for this run |
+| `--continue` | Resume the most recent session in this workspace |
+| `--session ID` | Resume a specific session |
+| `--list-sessions` | Print the session index and exit |
+| `--search-sessions QUERY` | Print matching sessions with snippets and exit |
+| `--no-tools` | Disable all tools (model-only chat) |
+| `--json` | Non-interactive JSON output |
+| `--debug` | Debug logging |
+| `--theme NAME` | Use `auto`, `dark`, `light`, or `ansi` for this run |
+| `--no-color` | Force the no-colour theme |
+| `--version` | Print version |
+| `--help` | Show help |
+
+In the TUI, type `/help` to see every command grouped by category, or press
+`ctrl+p` for the fuzzy command palette. `/theme` opens a live-preview picker and
+persists your choice to user config; `NO_COLOR` and `--no-color` always win.
+`/sessions` opens a searchable session picker scoped to the current workspace,
+with a toggle for all workspaces, and `/search <query>` prints matching sessions
+with content snippets. Mouse wheel scrolling and click-to-focus are enabled for
+interactive terminals and can be disabled with `ui.mouse: false`.
+
+## Tools
+
+Four core tools (see [ADR 0001](./docs/adr/0001-four-built-in-tools-only.md)) plus the additive network tools from [ADR 0006](./docs/adr/0006-expanded-toolset.md):
+
+| Tool | Purpose |
+| --- | --- |
+| `read` | Inspect files (with optional line ranges) |
+| `write` | Create or replace files safely (hash-guarded) |
+| `edit` | Precise find-and-replace edits (hash-guarded) |
+| `bash` | Execute shell commands (global exclusive barrier by default) |
+| `webfetch` | Fetch a URL and convert HTML to markdown |
+| `websearch` | Search the web and return ranked results |
+
+File discovery, search, tests, Git, builds, formatters, and package managers are available through `bash`, not through additional built-in tools.
+
+## Providers
+
+| Type | Adapter | Notes |
+| --- | --- | --- |
+| `openai-compatible` | `OpenAICompatibleAdapter` | LM Studio, llama.cpp/llama-server, Kilo AI Gateway, and other compatible endpoints |
+| `ollama` | `OllamaAdapter` | Native Ollama chat API |
+| `gemini` | `GeminiAdapter` | Official Gemini API |
+
+Provider profiles are named combinations of endpoint, model, auth source, and options. Switching profiles mid-tool-exchange is disallowed.
+
+### Interactive setup
+
+- `/provider` opens a searchable list of built-in providers (Kilo, OpenAI, Anthropic, Google Gemini, OpenRouter, Groq, Mistral, xAI, Ollama, LM Studio, llama.cpp). Selecting a hosted provider prompts for an API key with hidden input, validates it against the provider, and saves it to `~/.config/atom-lite/credentials.json` (`0600`).
+- `/model` opens a fuzzy-searchable picker containing models from **every configured provider** (plus providers whose key is present in the environment). Live model lists are fetched in the background while the picker stays responsive.
+- `/model <provider>/<model>` and `/provider <name>` are the non-interactive forms.
+
+The selected provider/model is persisted to the user config, so the next session starts where you left off.
+
+## Safety & security
+
+- **Workspace boundary** — `read`/`write`/`edit` resolve paths against the workspace and reject escapes. Shell commands are not constrained by this boundary (their effects are unknown), so `bash` runs as a global exclusive barrier.
+- **Approval modes** — `ask` prompts before each shell command; `trusted` auto-approves; `deny` blocks. Session trust can be granted interactively (`t`).
+- **Hash guards** — prevent stale overwrites when a file changed since it was read.
+- **Sandboxing flags** — reported per command; see `src/security/`.
+- **No secrets in config** — interactive provider setup stores API keys in `~/.config/atom-lite/credentials.json` with `0600` permissions; environment variables still take precedence.
+- **Local-first** — no cloud account, telemetry, or remote control plane required (see [ADR 0004](./docs/adr/0004-local-first-no-cloud-dependency.md)).
+
+## Commands
+
+Type `/help` for the grouped list, or press `ctrl+p` for the fuzzy command
+palette. Common commands:
+
+| Command | Description |
+| --- | --- |
+| `/model [model]` | Show or switch the active model |
+| `/provider [profile]` | Show or switch the active provider |
+| `/effort [low\|medium\|high]` | Set reasoning effort |
+| `/session [rename <title>]` | Show or rename the current session |
+| `/sessions [all]` | Search and resume a session |
+| `/search <query>` | Search sessions by title or content |
+| `/export [path]` | Export the session transcript |
+| `/mcp [reconnect [server]]` | Inspect or reconnect MCP servers |
+| `/extensions` | List loaded extensions |
+| `/compact` | Compact older context |
+| `/clear` | Clear the transcript view |
+| `/approval` | Change approval mode |
+| `/doctor` | Run diagnostics |
+| `/thinking` | Toggle thinking display |
+| `/theme [auto\|dark\|light\|ansi]` | Switch theme |
+| `/skills`, `/skill <name>` | List or load a skill |
+| `/exit` | Exit the TUI |
+
+## Sessions
+
+Sessions are append-only JSONL event logs recording everything that happened in one conversation. They are resumable across CLI restarts and grouped by workspace. Stored under the session store (see `src/sessions/`). Compaction summarizes older history to stay within the context budget while retaining the full transcript.
+
+The session index derives a title from the first user message unless `/session rename <title>` overrides it, and records the provider, update time, and message count. `/sessions` resumes a session in place: retained messages are replayed into the transcript and a `session_resumed` event is appended. `/search <query>` matches titles, message content, and workspace paths, ranking title hits first. `--list-sessions` and `--search-sessions` print the same index as stable tab-separated rows for scripts.
+
+## Context management
+
+The context manager builds model input, estimates tokens, and triggers compaction before the context budget is exceeded. It also loads project instructions (e.g. `AGENTS.md`/`CLAUDE.md`-style files) subject to `maxProjectInstructionBytes`.
+
+## Development
+
+```sh
+npm install
+npm run dev        # run via tsx (src/cli/main.ts)
+npm start          # build and run
+npm run typecheck  # tsc --noEmit
+npm test           # build + node --test
+npm run build      # tsc
+npm run format     # prettier --write .
+```
+
+Tests live in `tests/` (agent, config, runtime, tools). The project is TypeScript (strict) on NodeNext ESM.
+
+### Releasing
+
+1. Update `version` in `package.json` and add a `CHANGELOG.md` entry.
+2. Run `npm run typecheck && npm test && npm run bench`.
+3. Commit, then tag and push: `git tag vX.Y.Z && git push origin master --tags`.
+4. The `Release` workflow stages the package on npm with provenance and opens a draft GitHub release. It requires an `NPM_TOKEN` repository secret with publish access.
+5. Approve the staged version on npm (Staged Packages tab, or `npm stage approve <stage-id>` with 2FA), then publish the draft release on GitHub.
+
+npm requires a maintainer with 2FA to approve staged releases; CI cannot complete that step.
+
+## Architecture
+
+```
+src/
+  agent/        # agent loop & types
+  cli/          # terminal UI, approvals, commands
+  config/       # schema, defaults, loader
+  context/      # builder, manager, compaction, budget, instructions
+  providers/    # adapters (openai-compatible, ollama, gemini, fake) + factory
+  runtime/      # scheduler, approvals
+  security/     # paths, process, redaction
+  sessions/     # store, events, recovery
+  tools/        # read, write, edit, bash, webfetch, websearch, registry
+```
+
+Key design decisions are recorded as ADRs in [`docs/adr/`](./docs/adr/):
+
+- [0001 — Four built-in tools only](./docs/adr/0001-four-built-in-tools-only.md)
+- [0002 — Single agent loop, no sub-agents in v1](./docs/adr/0002-single-agent-loop.md)
+- [0003 — `bash` is a global exclusive barrier](./docs/adr/0003-bash-as-global-exclusive-barrier.md)
+- [0004 — Local-first, no cloud dependency](./docs/adr/0004-local-first-no-cloud-dependency.md)
+- [0005 — OpenTUI for the terminal UI](./docs/adr/0005-opentui-for-terminal-ui.md) (superseded by 0007)
+- [0006 — Expanded built-in toolset (webfetch, websearch)](./docs/adr/0006-expanded-toolset.md)
+- [0007 — pi-tui replaces OpenTUI](./docs/adr/0007-pi-tui-replaces-opentui.md)
+
+## Contributing
+
+Read [`CONTRIBUTING.md`](./CONTRIBUTING.md) before opening a pull request. Issues and specs live as markdown under `.scratch/` (see [`docs/agents/issue-tracker.md`](./docs/agents/issue-tracker.md)). Please keep changes consistent with the "small core" principle: new tools require strong justification against ADR 0001.
+
+Report vulnerabilities privately as described in [`SECURITY.md`](./SECURITY.md).
+
+## License
+
+MIT

package/dist/agent/loop.d.ts

@@ -0,0 +1,32 @@
+import type { AgentRuntimeOptions, ContextUsage } from "./types.js";
+import type { Message } from "../types.js";
+export declare class AgentRuntime {
+    private provider;
+    private model;
+    private workspace;
+    private approvals;
+    private contextManager;
+    private onEvent;
+    private tools;
+    private effort;
+    private bashConcurrency;
+    private toolMap;
+    private limits;
+    private systemPrompt;
+    private contextWindow;
+    private contextUsed;
+    constructor(options: AgentRuntimeOptions);
+    switchModel(provider: AgentRuntimeOptions["provider"], model?: string): void;
+    /** Update the context window for the selected model (metadata may arrive late). */
+    setContextWindow(window: number | undefined): void;
+    getContextUsage(): ContextUsage;
+    private emitContextUsage;
+    setEffort(effort: string): void;
+    /** Replace the toolset, e.g. after MCP discovery or a list_changed refresh. */
+    setTools(tools: AgentRuntimeOptions["tools"]): void;
+    getEffort(): string;
+    runAgentTurn(input: string, session: {
+        messages: Message[];
+        appendMessage(m: Message): void;
+    }, signal: AbortSignal): Promise<string>;
+}

package/dist/agent/loop.js

@@ -0,0 +1,204 @@
+import { DEFAULT_LIMITS } from "../types.js";
+import { executeToolBatch } from "../runtime/scheduler.js";
+import { ContextManager } from "../context/manager.js";
+export class AgentRuntime {
+    provider;
+    model;
+    workspace;
+    approvals;
+    contextManager;
+    onEvent;
+    tools;
+    effort;
+    bashConcurrency;
+    toolMap;
+    limits;
+    systemPrompt;
+    contextWindow;
+    contextUsed;
+    constructor(options) {
+        this.provider = options.provider;
+        this.model = options.model ?? "default";
+        this.workspace = options.workspace ?? process.cwd();
+        this.approvals = options.approvals;
+        this.onEvent = options.onEvent;
+        this.tools = options.tools;
+        this.effort = options.effort ?? "medium";
+        this.bashConcurrency = options.bashConcurrency ?? "serial";
+        this.contextManager =
+            options.contextManager ??
+                new ContextManager({
+                    systemPrompt: options.systemPrompt ?? "You are a coding assistant.",
+                    maxInputTokens: null,
+                    reserveOutputTokens: 4096,
+                    compactAtPercent: 85,
+                    maxProjectInstructionBytes: 30000,
+                    provider: options.provider,
+                    model: options.model ?? "default",
+                });
+        this.toolMap = new Map(options.tools.map((t) => [t.definition.name, t]));
+        this.limits = { ...DEFAULT_LIMITS, ...(options.limits ?? {}) };
+        this.systemPrompt = options.systemPrompt ?? "You are a coding assistant with tools: read, write, edit, bash, webfetch, websearch.";
+        this.contextWindow = options.contextWindow;
+        this.contextManager.setModelContextWindow(options.contextWindow);
+    }
+    switchModel(provider, model) {
+        this.provider = provider;
+        if (model)
+            this.model = model;
+        this.contextManager.setProvider(provider, this.model);
+        // The new model has a fresh window; usage from the old one is meaningless.
+        this.contextUsed = undefined;
+        this.onEvent?.({ type: "model_switched", provider: provider.id, model: this.model });
+        this.emitContextUsage();
+    }
+    /** Update the context window for the selected model (metadata may arrive late). */
+    setContextWindow(window) {
+        const next = typeof window === "number" && Number.isFinite(window) && window > 0
+            ? Math.floor(window)
+            : undefined;
+        if (next === this.contextWindow)
+            return;
+        this.contextWindow = next;
+        this.contextManager.setModelContextWindow(next);
+        this.emitContextUsage();
+    }
+    getContextUsage() {
+        return { used: this.contextUsed, window: this.contextWindow };
+    }
+    emitContextUsage() {
+        this.onEvent?.({
+            type: "context_usage",
+            used: this.contextUsed,
+            window: this.contextWindow,
+        });
+    }
+    setEffort(effort) {
+        this.effort = effort;
+    }
+    /** Replace the toolset, e.g. after MCP discovery or a list_changed refresh. */
+    setTools(tools) {
+        this.tools = tools;
+        this.toolMap = new Map(tools.map((t) => [t.definition.name, t]));
+    }
+    getEffort() {
+        return this.effort;
+    }
+    async runAgentTurn(input, session, signal) {
+        session.appendMessage({ role: "user", content: [{ type: "text", text: input }] });
+        let totalToolCalls = 0;
+        const start = Date.now();
+        for (let iteration = 0; iteration < this.limits.maxIterations; iteration++) {
+            if (signal.aborted) {
+                throw new Error("USER_CANCELLED");
+            }
+            if (Date.now() - start > this.limits.maxExecutionMs) {
+                return "TASK_BUDGET_REACHED";
+            }
+            const messages = await this.contextManager.build(this.workspace, session.messages);
+            if (this.contextManager.consumeCompaction()) {
+                // Peers treat usage as unknown after compaction until the next
+                // assistant response reports fresh numbers.
+                this.contextUsed = undefined;
+                this.emitContextUsage();
+            }
+            const request = {
+                model: this.model,
+                messages,
+                tools: this.tools.map((t) => t.definition),
+                signal,
+                options: { effort: this.effort },
+            };
+            let response;
+            let streamedText = "";
+            if (typeof this.provider.stream === "function") {
+                // Stream tokens as they arrive.
+                for await (const ev of this.provider.stream(request)) {
+                    if (ev.type === "thinking") {
+                        this.onEvent?.({ type: "thinking_delta", text: ev.text });
+                    }
+                    else if (ev.type === "text") {
+                        streamedText += ev.text;
+                        this.onEvent?.({ type: "assistant_delta", text: ev.text });
+                    }
+                    else if (ev.type === "done") {
+                        response = ev.response;
+                    }
+                }
+                if (!response) {
+                    // Fallback if stream ended without done
+                    response = {
+                        message: { role: "assistant", content: streamedText ? [{ type: "text", text: streamedText }] : undefined, toolCalls: undefined },
+                        toolCalls: [],
+                        finishReason: "stop",
+                    };
+                }
+            }
+            else {
+                response = await this.provider.generate(request);
+                const t = response.message.content?.map((p) => (p.type === "text" ? p.text : "")).join("") ?? "";
+                if (t)
+                    this.onEvent?.({ type: "assistant_text", text: t });
+                streamedText = t;
+            }
+            session.appendMessage(response.message);
+            if (response.usage) {
+                this.onEvent?.({ type: "usage", input: response.usage.input, output: response.usage.output });
+                const used = (response.usage.input ?? 0) + (response.usage.output ?? 0);
+                if (used > 0) {
+                    // The latest assistant step's prompt + generated tokens is the
+                    // current context occupancy (not a cumulative session total).
+                    this.contextUsed = used;
+                    this.emitContextUsage();
+                }
+            }
+            const text = streamedText || (response.message.content?.map((p) => (p.type === "text" ? p.text : "")).join("") ?? "");
+            const toolCalls = response.toolCalls ?? [];
+            if (toolCalls.length === 0) {
+                this.onEvent?.({ type: "final", text });
+                return text;
+            }
+            for (const c of toolCalls)
+                this.onEvent?.({ type: "tool_call", id: c.id, name: c.name, args: c.arguments });
+            totalToolCalls += toolCalls.length;
+            if (totalToolCalls > this.limits.maxToolCalls) {
+                return "TASK_BUDGET_REACHED";
+            }
+            const ctx = {
+                workspace: this.workspace,
+                signal,
+                maxBashTimeMs: this.limits.maxBashTimeMs,
+                maxToolOutputBytes: this.limits.maxToolOutputBytes,
+                approvals: this.approvals,
+                onToolOutput: (call, stream, text) => {
+                    this.onEvent?.({
+                        type: "tool_output",
+                        toolCallId: call.id,
+                        name: call.name,
+                        stream,
+                        text,
+                    });
+                },
+            };
+            const results = await executeToolBatch(toolCalls, this.toolMap, ctx, this.limits.maxParallelToolCalls, signal, undefined, this.bashConcurrency);
+            for (const r of results) {
+                session.appendMessage({
+                    role: "tool",
+                    toolCallId: r.toolCallId,
+                    name: r.name,
+                    content: r.content,
+                });
+                this.onEvent?.({
+                    type: "tool_result",
+                    toolCallId: r.toolCallId,
+                    name: r.name,
+                    content: r.content,
+                    isError: r.isError,
+                    diff: r.diff,
+                });
+            }
+        }
+        return "TASK_BUDGET_REACHED";
+    }
+}
+//# sourceMappingURL=loop.js.map

package/dist/agent/loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.js","sourceRoot":"","sources":["../../src/agent/loop.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,OAAO,YAAY;IACf,QAAQ,CAAkC;IAC1C,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,SAAS,CAAmC;IAC5C,cAAc,CAAiB;IAC/B,OAAO,CAAiC;IACxC,KAAK,CAA+B;IACpC,MAAM,CAAS;IACf,eAAe,CAAwB;IACvC,OAAO,CAAoD;IAC3D,MAAM,CAAc;IACpB,YAAY,CAAS;IACrB,aAAa,CAAqB;IAClC,WAAW,CAAqB;IAExC,YAAY,OAA4B;QACtC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC;QAC3D,IAAI,CAAC,cAAc;YACjB,OAAO,CAAC,cAAc;gBACtB,IAAI,cAAc,CAAC;oBACjB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,6BAA6B;oBACnE,cAAc,EAAE,IAAI;oBACpB,mBAAmB,EAAE,IAAI;oBACzB,gBAAgB,EAAE,EAAE;oBACpB,0BAA0B,EAAE,KAAK;oBACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;iBAClC,CAAC,CAAC;QACL,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sFAAsF,CAAC;QACnI,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACnE,CAAC;IAED,WAAW,CAAC,QAAyC,EAAE,KAAc;QACnE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,2EAA2E;QAC3E,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED,mFAAmF;IACnF,gBAAgB,CAAC,MAA0B;QACzC,MAAM,IAAI,GACR,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YACjE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACpB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,IAAI,KAAK,IAAI,CAAC,aAAa;YAAE,OAAO;QACxC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED,eAAe;QACb,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;IAChE,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,MAAM,EAAE,IAAI,CAAC,aAAa;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,+EAA+E;IAC/E,QAAQ,CAAC,KAAmC;QAC1C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,OAAiE,EACjE,MAAmB;QAEnB,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAElF,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,KACE,IAAI,SAAS,GAAG,CAAC,EACjB,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EACrC,SAAS,EAAE,EACX,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACpD,OAAO,qBAAqB,CAAC;YAC/B,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAC9C,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,QAAQ,CACjB,CAAC;YACF,IAAI,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,EAAE,CAAC;gBAC5C,+DAA+D;gBAC/D,4CAA4C;gBAC5C,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;gBAC7B,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,CAAC;YAED,MAAM,OAAO,GAAiB;gBAC5B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC1C,MAAM;gBACN,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;aACjC,CAAC;YAEF,IAAI,QAAa,CAAC;YAClB,IAAI,YAAY,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC/C,gCAAgC;gBAChC,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrD,IAAI,EAAE,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;wBAC3B,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC5D,CAAC;yBAAM,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC9B,YAAY,IAAI,EAAE,CAAC,IAAI,CAAC;wBACxB,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC7D,CAAC;yBAAM,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC9B,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;oBACzB,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,wCAAwC;oBACxC,QAAQ,GAAG;wBACT,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;wBAChI,SAAS,EAAE,EAAE;wBACb,YAAY,EAAE,MAAM;qBACrB,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjD,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACtG,IAAI,CAAC;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC3D,YAAY,GAAG,CAAC,CAAC;YACnB,CAAC;YAED,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAExC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9F,MAAM,IAAI,GACR,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;gBAC7D,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;oBACb,+DAA+D;oBAC/D,8DAA8D;oBAC9D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACxB,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,YAAY,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3H,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC;YAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,SAAS;gBACvB,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAEnF,cAAc,IAAI,SAAS,CAAC,MAAM,CAAC;YACnC,IAAI,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC9C,OAAO,qBAAqB,CAAC;YAC/B,CAAC;YAED,MAAM,GAAG,GAAG;gBACV,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM;gBACN,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACxC,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAClD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,YAAY,EAAE,CACZ,IAAkC,EAClC,MAA2B,EAC3B,IAAY,EACZ,EAAE;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,IAAI,EAAE,aAAa;wBACnB,UAAU,EAAE,IAAI,CAAC,EAAE;wBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,MAAM;wBACN,IAAI;qBACL,CAAC,CAAC;gBACL,CAAC;aACF,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,SAAS,EACT,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAChC,MAAM,EACN,SAAS,EACT,IAAI,CAAC,eAAe,CACrB,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,aAAa,CAAC;oBACpB,IAAI,EAAE,MAAM;oBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,IAAI,EAAE,aAAa;oBACnB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,qBAAqB,CAAC;IAC/B,CAAC;CACF"}