papilot 0.7.0 → 0.8.1

package/dist/index.html

@@ -8,6 +8,6 @@
   document.documentElement.dataset.theme = dark ? 'dark' : 'light';
   document.querySelector('meta[name="theme-color"]').content = dark ? '#26272b' : '#ffffff';
 })();
-</script><style>html{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light;background:#fff}html[data-theme=dark]{--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;background:#26272b}</style>  <script type="module" crossorigin src="/assets/index-CIJEYlP7.js"></script>
-  <link rel="stylesheet" crossorigin href="/assets/index-hOJEruFc.css">
+</script><style>html{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light;background:#fff}html[data-theme=dark]{--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;background:#26272b}</style>  <script type="module" crossorigin src="/assets/index-BlLyIqT9.js"></script>
+  <link rel="stylesheet" crossorigin href="/assets/index-DVZtyZvu.css">
 </head><body><div id="root"></div></body></html>

package/examples/papilot-paper/main.tex

@@ -12,7 +12,7 @@
 Papilot is a personal workspace for revising \LaTeX{} papers with an AI agent
 and reviewing every resulting change as a PDF difference before it reaches the
 manuscript. Each editing task runs in an isolated Git worktree, may be driven
-by Codex, Claude or Antigravity, and proceeds in review rounds in which the
+by Codex, Claude, Antigravity or Kimi Code, and proceeds in review rounds in which the
 author accepts, rejects or comments on individual changes. This paper describes
 the system through a sequence of small formal models. We define edits and
 review rounds as operators on a document, prove that compatible edits commute

package/examples/papilot-paper/sections/02-using.tex

@@ -91,7 +91,8 @@ remote (\cref{sec:git}).
 \subsection{Agents}
 
 Each task runs on one agent: Codex through its app server, Claude through the
-Claude Agent SDK, or Antigravity through its command line. Every agent uses its
+Claude Agent SDK, Antigravity through its command line, or Kimi Code through
+ACP. For Kimi, install the CLI and run \texttt{kimi login}. Every agent uses its
 own login on the host, and an agent that is not installed or signed in is listed
 as unavailable. When an agent reports usage, the new-task page shows each usage
 window with how much is used and when it resets (\cref{sec:usage}).
@@ -124,6 +125,7 @@ Variable & Purpose \\
 \texttt{PAPILOT\_DATA} & state and generated example, \texttt{\textasciitilde/.papilot} by default \\
 \texttt{PAPILOT\_CODEX\_BIN} & Codex executable \\
 \texttt{ANTHROPIC\_API\_KEY} & API key for Claude tasks \\
+\texttt{PAPILOT\_KIMI\_BIN} & Kimi Code executable \\
 \texttt{PAPILOT\_AGY\_BIN} & Antigravity command line \\
 \texttt{PAPILOT\_AGY\_PROXY} & HTTP proxy used only for Antigravity \\
 \texttt{PAPILOT\_REVIEW\_ENGINE} & review engine directory \\

package/examples/papilot-paper/sections/09-agents.tex

@@ -1,7 +1,7 @@
 \section{Agents and scheduling}
 \label{sec:agents}
 
-\subsection{One protocol for three agents}
+\subsection{One protocol for every agent}
 
 Every agent is driven through the same small protocol: a thread is started or
 resumed, a turn is started with the author's text, the agent streams items
@@ -40,8 +40,9 @@ task in a recoverable state with a \emph{Check status} action (not shown).}
 \end{figure}
 
 Codex speaks this protocol natively. Claude runs through the Claude Agent SDK,
-and Antigravity runs the \texttt{agy} command line once per turn; both are
-translated by small adapters into the same requests and notifications. Each
+Antigravity runs the \texttt{agy} command line once per turn, and Kimi Code
+runs \texttt{kimi acp}; adapters translate their interfaces into the same
+requests and notifications. Kimi sessions resume after a restart. Each
 agent uses its own login on the host, and Papilot never reads, stores or
 forwards a credential. An agent that cannot ask for permission, such as a
 headless command line, is told in advance which tools it may not use.
@@ -102,5 +103,7 @@ answers after a mean delay $\Theta$, the expected wall-clock time of the turn is
   \E[T] = T_w \bigl(1 + \zeta \Theta\bigr),
   \label{eq:approvals}
 \end{equation}
-which is why Papilot lets agents edit and run sandboxed commands in the task's
-worktree without asking, and asks only for what leaves it.
+which motivates reducing unnecessary approval requests. Codex and Claude can
+run sandboxed commands under their permission policies; Kimi uses manual
+approvals for tools on the host, without a Papilot sandbox. Antigravity edits
+files but cannot run shell commands in Papilot.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "papilot",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "description": "A Cursor-like workspace for your papers: annotate and review PDFs directly without ever touching LaTeX.",
   "keywords": [
     "latex",
@@ -12,17 +12,19 @@
     "codex",
     "claude",
     "antigravity",
+    "kimi",
+    "kimi-code",
     "writing",
     "academic",
     "manuscript"
   ],
-  "homepage": "https://github.com/cu1ch3n/papilot#readme",
+  "homepage": "https://papilot.ai",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/cu1ch3n/papilot.git"
+    "url": "git+https://github.com/PapilotAI/papilot.git"
   },
   "bugs": {
-    "url": "https://github.com/cu1ch3n/papilot/issues"
+    "url": "https://github.com/PapilotAI/papilot/issues"
   },
   "license": "MIT",
   "author": "Cui Chen",
@@ -34,6 +36,8 @@
     "bin",
     "src/server",
     "src/shared.ts",
+    "src/skill-icons.ts",
+    "src/skill-metadata.ts",
     "src/notes.ts",
     "src/note-groups.ts",
     "src/conversation.ts",
@@ -57,17 +61,21 @@
     "dev": "tsx watch src/server/main.ts",
     "start": "tsx src/server/main.ts",
     "build": "tsc --noEmit && vite build",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit && tsc -p desktop/tsconfig.json --noEmit",
     "test": "tsx --test tests/*.test.ts",
     "setup:review": "npm --prefix vendor/latex-review ci && npm --prefix vendor/latex-review run build",
     "demo": "tsx scripts/demo.ts",
     "doctor": "node bin/papilot.mjs doctor",
     "service:install": "tsx scripts/service.ts install",
     "service:stop": "tsx scripts/service.ts stop",
-    "test:ui": "npm run build && node scripts/check-ui.mjs && node scripts/check-updates.mjs && node scripts/check-papers.mjs && node scripts/check-imports.mjs && node scripts/check-compilation.mjs && node scripts/check-review-notes.mjs && node --import tsx scripts/check-note-groups.mjs && node scripts/check-note-selection.mjs && node --import tsx scripts/check-note-results.mjs && node --import tsx scripts/check-review-flow.mjs && node scripts/check-skills.mjs && node --import tsx scripts/check-skill-library.mjs && node scripts/check-attachments.mjs && node --import tsx scripts/check-accounts.mjs",
+    "test:ui": "npm run build && node scripts/check-ui.mjs && node scripts/check-appearance.mjs && node scripts/check-updates.mjs && node scripts/check-papers.mjs && node scripts/check-imports.mjs && node scripts/check-compilation.mjs && node scripts/check-build-problems.mjs && node scripts/check-review-notes.mjs && node --import tsx scripts/check-note-groups.mjs && node scripts/check-note-selection.mjs && node scripts/check-ai-review.mjs && node --import tsx scripts/check-note-results.mjs && node --import tsx scripts/check-review-flow.mjs && node scripts/check-skills.mjs && node --import tsx scripts/check-skill-library.mjs && node scripts/check-attachments.mjs && node --import tsx scripts/check-accounts.mjs",
     "site": "node scripts/build-site.mjs",
-    "site:video": "node scripts/build-site.mjs --video",
-    "prepack": "npm run build && npm run setup:review"
+    "test:site": "npm run site && node scripts/check-site.mjs",
+    "prepack": "npm run build && npm run setup:review",
+    "desktop:compile": "tsc -p desktop/tsconfig.json",
+    "desktop": "npm run setup:review && npm run build && npm run desktop:compile && node scripts/desktop.mjs dev",
+    "desktop:build": "npm run setup:review && npm run build && npm run desktop:compile && node scripts/desktop.mjs package",
+    "test:desktop": "node scripts/check-desktop.mjs"
   },
   "dependencies": {
     "@fastify/compress": "^9.2.2",
@@ -90,6 +98,8 @@
     "@types/react-dom": "^19.3.0",
     "@types/yauzl": "^3.4.0",
     "@vitejs/plugin-react": "^6.1.2",
+    "electron": "45.2.1",
+    "electron-builder": "26.18.0",
     "katex": "^0.16.47",
     "pdfjs-dist": "^6.4.299",
     "react": "^19.3.1",

package/skills/ai-review.md

@@ -0,0 +1,18 @@
+---
+name: AI review
+description: Read the paper and leave PDF comments without editing the manuscript
+hint: What should the reviewer focus on? Leave empty for the whole paper
+order: 8
+output: annotations
+---
+Review the paper as a constructive academic reviewer. Read it and leave suggestions; do not edit, rewrite, commit, or apply changes to the manuscript.
+
+- Follow the author's requested focus, or review the whole paper when none is given.
+- Look for unsupported claims, gaps in reasoning, unclear definitions, inconsistent terminology, and concrete writing issues.
+- Anchor each comment to the smallest relevant passage in the supplied PDF: the specific sentence, claim, or equation at issue, usually 1–3 lines. Avoid whole-paragraph or page-level highlights. If the issue concerns a symbol within a line, name that symbol in the comment.
+- Write one issue per comment, usually in one short sentence: aim for 10–30 English words or 20–60 Chinese characters. State the problem and a concrete next step; add a second short sentence only when needed for accuracy. Example: “This bound is undefined at p = 1; state that case separately.”
+- Omit praise, preambles, repeated quotations, background explanations, full derivations, and rewritten paragraphs. For a complex issue, identify the failing step and needed clarification; leave extended reasoning for follow-up.
+- Prefer a few high-impact, actionable comments to minor or speculative criticism. Flag a repeated issue once at a representative location. Do not invent sources, results, or assumptions, or claim a citation is wrong without evidence.
+- Use the author's requested language, otherwise the manuscript's language.
+- The supplied PDF extraction contains text, equations, and captions, not figure images. Do not claim to have inspected page appearance.
+- Return PDF annotations in the format Papilot supplies, with a single brief sentence summarizing the main priority. Do not repeat the findings in the summary or add a review essay. The author decides which suggestions to use in a separate editing task.

package/skills/latex-warnings.md

@@ -6,7 +6,7 @@ order: 6
 ---
 Fix the problems LaTeX reports when it builds the paper.
 
-- Compile in your worktree (for example with `latexmk`) and read the log. If you cannot run commands, look for the same problems in the source instead.
+- When the request lists problems from the last compilation, with their files and lines, fix those. Otherwise compile in your worktree (for example with `latexmk`) and read the log. If you cannot run commands, look for the same problems in the source instead.
 - Fix undefined or duplicate labels, references and citations; overfull boxes, by rewording slightly or allowing a break where the line overflows; and package warnings that point to real mistakes.
 - Do not silence warnings globally: no document-wide `\sloppy`, badness or tolerance changes, and no new packages, unless the request asks for them.
 - In your summary, list the warnings you fixed and any you left, with the reason.

package/src/conversation.ts

@@ -6,6 +6,12 @@ export const reviewInstructions = 'Continue this task using the decisions and co
 // Earlier versions stored the prompt itself as the author's message.
 export const isFeedbackPrompt = (text: string) => text === reviewInstructions || text === 'Address the comments from this review round. Preserve accepted changes and do not reintroduce rejected edits.';
 
+// Older AI reviews appended a generated copy of every PDF suggestion to the
+// chat summary. Keep those records intact, but display only their summary.
+export function aiReviewSummary(text: string) {
+  return text.split(/\n\n1\. \*\*Page \d+\*\* — /, 1)[0].trimEnd();
+}
+
 // What the agent receives when its own edits stop the review build. The chat
 // shows the error, never this prompt.
 export function buildFixPrompt(failure: BuildFailure) {

package/src/server/acp.ts

@@ -0,0 +1,387 @@
+import { spawn, type ChildProcess } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { createInterface } from 'node:readline';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import type { AgentId } from '../shared.ts';
+import { Adapter, findExecutable, type Item, type Thread, type Turn } from './agents.ts';
+import { imageType } from './attachments.ts';
+import { VERSION } from './paths.ts';
+
+interface Choice { value: string; name: string }
+interface ConfigOption { id: string; category?: string; currentValue: string; options: (Choice | { options: Choice[] })[] }
+interface Session { sessionId: string; configOptions?: ConfigOption[]; modes?: { availableModes: { id: string }[] }; models?: { currentModelId: string; availableModels: { modelId: string; name: string }[] } }
+interface LiveTurn { turn: Turn; cwd: string; text: string; message: string; tools: Map<string, any>; received: boolean; stopped: boolean }
+// Some agents report every tool as kind "other" (DeepSeek Harness), so shell
+// commands and file edits are also recognized by the tool's name.
+const SHELL_TOOLS = new Set(['bash', 'shell', 'run_shell_command', 'execute_command', 'terminal']);
+const EDIT_TOOLS = new Set(['write', 'edit', 'multiedit', 'strreplacefile', 'writefile', 'write_file', 'edit_file', 'replace', 'apply_patch']);
+function toolKind(tool: any): string {
+  if (tool.kind && tool.kind !== 'other') return tool.kind;
+  const names = [tool.name, tool.title].filter(Boolean).map((name: string) => String(name).toLowerCase());
+  if (names.some(name => SHELL_TOOLS.has(name)) && tool.rawInput?.command) return 'execute';
+  if (names.some(name => EDIT_TOOLS.has(name))) return 'edit';
+  return tool.kind || 'other';
+}
+const choices = (option?: ConfigOption): Choice[] => (option?.options || []).flatMap(value => 'options' in value ? value.options : [value]);
+
+// How one ACP agent is launched and kept on manual approvals. modes lists the
+// session modes Papilot accepts, best first: a mode that edits the task
+// worktree but asks before anything else. Papilot never inherits an
+// auto-approve mode from the user's own configuration, so an agent that
+// offers none of these modes is refused.
+export interface AcpProfile {
+  id: AgentId; name: string; bin: string; binEnv: string; args: string[]; modes: string[]; setup: string;
+  env?: () => NodeJS.ProcessEnv;
+  config?: Record<string, string>;
+  authMethods?: string[];
+  sessionMeta?: Record<string, unknown>;
+}
+export const ACP_PROFILES = {
+  // Grok owns authentication and tools. A dedicated process and explicit
+  // session metadata keep new and restored sessions out of yolo/auto mode.
+  grok: { id: 'grok', name: 'Grok', bin: 'grok', binEnv: 'PAPILOT_GROK_BIN', args: ['--no-auto-update', 'agent', '--no-leader', 'stdio'],
+    modes: [], authMethods: ['xai.api_key', 'cached_token'], sessionMeta: { yoloMode: false, autoMode: false },
+    setup: 'Install Grok Build CLI from https://x.ai/cli and run grok login on this host, or configure XAI_API_KEY, then select Reconnect. Set PAPILOT_GROK_BIN if grok is not on PATH.' },
+  // Copilot's agent mode and permission mode are separate: leaving autopilot
+  // does not disable allow-all. Pin both, including when resuming a session.
+  copilot: { id: 'copilot', name: 'Copilot', bin: 'copilot', binEnv: 'PAPILOT_COPILOT_BIN', args: ['--acp', '--stdio', '--no-auto-update'],
+    modes: ['https://agentclientprotocol.com/protocol/session-modes#agent'], config: { allow_all: 'off' },
+    setup: 'Install GitHub Copilot CLI (npm install -g @github/copilot) and run copilot login on this host, then select Reconnect. Set PAPILOT_COPILOT_BIN if copilot is not on PATH.',
+    env: () => ({ ...process.env, COPILOT_ALLOW_ALL: 'false', COPILOT_ASSISTED_APPROVAL: 'false' }) },
+  kimi: { id: 'kimi', name: 'Kimi', bin: 'kimi', binEnv: 'PAPILOT_KIMI_BIN', args: ['acp'], modes: ['default'],
+    setup: 'Install Kimi Code CLI and run kimi login on this host, then select Reconnect. Set PAPILOT_KIMI_BIN if kimi is not on PATH.' },
+  qwen: { id: 'qwen', name: 'Qwen', bin: 'qwen', binEnv: 'PAPILOT_QWEN_BIN', args: ['--acp'], modes: ['auto-edit', 'default'],
+    setup: 'Install Qwen Code and sign in by running qwen once on this host, then select Reconnect. Set PAPILOT_QWEN_BIN if qwen is not on PATH.' },
+  // DeepSeek Harness has no session modes: its ACP profile sandboxes writes and
+  // commands to the session folder and asks before leaving it. Papilot pins
+  // that preset so a looser DSH_PERMISSION_MODE in the environment is not used.
+  deepseek: { id: 'deepseek', name: 'DeepSeek', bin: 'dsh', binEnv: 'PAPILOT_DSH_BIN', args: ['acp'], modes: [],
+    setup: 'Install DeepSeek Harness (npm install -g @deepseek-ai/dsh) and set up a model with dsh web or the dsh TUI, then select Reconnect. Set PAPILOT_DSH_BIN if dsh is not on PATH.',
+    env: () => ({ ...process.env, DSH_PERMISSION_MODE: 'workspace-write' }) },
+  // OpenCode runs tools without asking by default. Its highest-precedence
+  // config layer makes it ask before shell commands and anything outside the
+  // task worktree, while edits in the worktree go ahead for review.
+  opencode: { id: 'opencode', name: 'OpenCode', bin: 'opencode', binEnv: 'PAPILOT_OPENCODE_BIN', args: ['acp'], modes: ['build'],
+    setup: 'Install OpenCode and connect a provider with opencode auth login, then select Reconnect. Set PAPILOT_OPENCODE_BIN if opencode is not on PATH.',
+    env: () => ({ ...process.env, OPENCODE_CONFIG_CONTENT: opencodeConfig(process.env.OPENCODE_CONFIG_CONTENT) }) },
+} satisfies Record<string, AcpProfile>;
+export function opencodeConfig(own?: string) {
+  let config: Record<string, unknown> = {};
+  try { const parsed = own ? JSON.parse(own) : {}; if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) config = parsed; } catch { /* Replaced below. */ }
+  const permission = config.permission && typeof config.permission === 'object' ? config.permission : {};
+  return JSON.stringify({ ...config, permission: { ...permission, bash: 'ask', shell: 'ask', edit: 'allow', external_directory: 'ask' } });
+}
+
+// ACP sessions are the thread IDs persisted by Papilot. The agent owns
+// credentials and conversation storage; the adapter only translates JSON-RPC
+// over stdio.
+export class AcpAgent extends Adapter {
+  private child: ChildProcess | null = null;
+  private starting: Promise<void> | null = null;
+  private sequence = 0;
+  private pending = new Map<number, { resolve: (value: any) => void; reject: (error: Error) => void; timer?: NodeJS.Timeout }>();
+  private approvals = new Map<string, { rpcId: string | number; turn: Turn; options: { optionId: string; kind: string; name?: string }[]; question: boolean }>();
+  private live = new Map<string, LiveTurn>();
+  private sessions = new Map<string, Session>();
+  private capabilities: any = {};
+  private catalog: any[] = [];
+  private defaultModel: string | null = null;
+  private readonly name: string;
+  private readonly binary: string;
+  constructor(private profile: AcpProfile, binary?: string, private launch: typeof spawn = spawn) {
+    super();
+    this.name = profile.name;
+    this.binary = binary || process.env[profile.binEnv] || profile.bin;
+  }
+  detect() { return Boolean(findExecutable(this.binary)); }
+
+  start(): Promise<void> {
+    if (this.ready) return Promise.resolve();
+    if (this.starting) return this.starting;
+    this.starting = this.connect().finally(() => { this.starting = null; });
+    return this.starting;
+  }
+  private async connect() {
+    const cwd = fs.mkdtempSync(path.join(os.tmpdir(), `papilot-${this.profile.id}-`));
+    try {
+      // The probe folder is removed below, so the agent itself runs from the home folder.
+      const child = this.launch(findExecutable(this.binary) || this.binary, this.profile.args, { cwd: os.homedir(), env: this.profile.env?.() || process.env, stdio: ['pipe', 'pipe', 'pipe'] });
+      this.child = child;
+      const failed = (error: Error) => { if (this.child === child) this.disconnect(error); };
+      createInterface({ input: child.stdout! }).on('line', line => {
+        let message: any;
+        try { message = JSON.parse(line); } catch { return; }
+        if (this.child === child) this.receive(message);
+      });
+      child.stderr?.resume();
+      child.stdin?.on('error', failed);
+      child.once('error', failed);
+      child.once('close', (code, signal) => failed(new Error(`${this.name} exited (${signal || code}). ${this.profile.setup}`)));
+      // The first start of some agents installs their plugins, so allow it a minute.
+      const init = await this.rpc('initialize', { protocolVersion: 1, clientInfo: { name: 'papilot', version: VERSION }, clientCapabilities: {} }, 60000);
+      if (init.protocolVersion !== 1) throw new Error(`${this.name} returned an unsupported ACP version. Update it.`);
+      this.capabilities = init.agentCapabilities || {};
+      if (this.profile.authMethods) {
+        const methodId = this.profile.authMethods.find(id => init.authMethods?.some((method: { id: string }) => method.id === id));
+        if (!methodId) throw new Error(`${this.name} has no saved login or configured API credentials.`);
+        await this.rpc('authenticate', { methodId, _meta: { headless: true } }, 60000);
+      }
+      // No generation: a disposable session checks configuration and exposes models.
+      const probe: Session = await this.rpc('session/new', { cwd, mcpServers: [], ...(this.profile.sessionMeta ? { _meta: this.profile.sessionMeta } : {}) }, 60000);
+      this.catalog = [];
+      if (this.profile.modes.length) this.mode(probe);
+      this.config(probe);
+      this.readModels(probe, true);
+      const sessionCapabilities = this.capabilities.sessionCapabilities || {};
+      if (sessionCapabilities.delete) await this.rpc('session/delete', { sessionId: probe.sessionId });
+      else if (sessionCapabilities.close) await this.rpc('session/close', { sessionId: probe.sessionId });
+      this.ready = true;
+    } catch (error) {
+      this.close();
+      throw new Error(`${this.name} is unavailable: ${error instanceof Error ? error.message.replace(/\.$/, '') : String(error)}. ${this.profile.setup}`);
+    } finally { fs.rmSync(cwd, { recursive: true, force: true }); }
+  }
+  protected account() { return { account: this.ready ? { type: `Local ${this.name} configuration` } : null, requiresOpenaiAuth: !this.ready }; }
+  protected models() { return { data: this.catalog }; }
+
+  async request(method: string, params: any = {}): Promise<any> {
+    if (method === 'thread/start' || method === 'thread/resume') {
+      const resumed = method === 'thread/resume';
+      const session = await this.session(resumed ? String(params.threadId) : null, params.cwd, params.model);
+      const known = this.threads.get(session.sessionId);
+      this.threads.set(session.sessionId, { cwd: params.cwd, instructions: params.developerInstructions || '', model: params.model || known?.model || null, started: resumed });
+      return { thread: { id: session.sessionId }, model: params.model || this.defaultModel };
+    }
+    return super.request(method, params);
+  }
+  private async session(id: string | null, cwd: string, model?: string | null): Promise<Session> {
+    let session = id ? this.sessions.get(id) : undefined;
+    if (!session) {
+      if (id && !this.capabilities.loadSession && !this.capabilities.sessionCapabilities?.resume) throw new Error(`This ${this.name} version cannot resume sessions. Update it.`);
+      const result = await this.rpc(id ? this.capabilities.sessionCapabilities?.resume ? 'session/resume' : 'session/load' : 'session/new', { ...(id ? { sessionId: id } : {}), cwd, mcpServers: [], ...(this.profile.sessionMeta ? { _meta: this.profile.sessionMeta } : {}) });
+      session = { ...result, sessionId: id || result.sessionId };
+      if (!session!.sessionId) throw new Error(`${this.name} did not return a session ID.`);
+      // Do not inherit an auto-approve mode from the user's global configuration.
+      // Agents list modes as session modes or as a mode configuration option.
+      if (this.profile.modes.length) {
+        const { mode, option } = this.mode(session!);
+        if (session!.modes) await this.rpc('session/set_mode', { sessionId: session!.sessionId, modeId: mode });
+        else if (option!.currentValue !== mode) {
+          const result = await this.rpc('session/set_config_option', { sessionId: session!.sessionId, configId: option!.id, value: mode });
+          if (result?.configOptions) session!.configOptions = result.configOptions;
+        }
+      }
+      for (const [configId, value] of this.config(session!)) {
+        const result = await this.rpc('session/set_config_option', { sessionId: session!.sessionId, configId, value });
+        if (result?.configOptions) session!.configOptions = result.configOptions;
+      }
+      this.sessions.set(session!.sessionId, session!);
+    }
+    if (model) {
+      const option = session!.configOptions?.find(option => option.category === 'model' || option.id === 'model');
+      if (option) {
+        const result = await this.rpc('session/set_config_option', { sessionId: session!.sessionId, configId: option.id, value: model });
+        if (result.configOptions) session!.configOptions = result.configOptions;
+      } else await this.rpc('session/set_model', { sessionId: session!.sessionId, modelId: model });
+    }
+    this.readModels(session!);
+    return session!;
+  }
+  // The accepted mode a session offers, as a session mode or a mode option.
+  private mode(session: Session) {
+    const option = session.configOptions?.find(option => option.category === 'mode' || option.id === 'mode');
+    const offered = session.modes ? session.modes.availableModes.map(mode => mode.id) : choices(option).map(choice => choice.value);
+    const mode = this.profile.modes.find(id => offered.includes(id));
+    if (!mode) throw new Error(`${this.name} does not offer manual approvals. Update it.`);
+    return { mode, option };
+  }
+  private config(session: Session) {
+    const settings = Object.entries(this.profile.config || {});
+    for (const [id, value] of settings) {
+      if (!choices(session.configOptions?.find(option => option.id === id)).some(choice => choice.value === value)) {
+        throw new Error(`${this.name} does not offer the required ${id} setting. Update it.`);
+      }
+    }
+    return settings;
+  }
+  private readModels(session: Session, initial = false) {
+    const model = session.configOptions?.find(option => option.category === 'model' || option.id === 'model');
+    const thinking = session.configOptions?.find(option => option.category === 'thought_level' || option.id === 'thinking');
+    // A "default" level is the model default Papilot already offers.
+    const levels = choices(thinking).filter(choice => choice.value !== 'default'), level = thinking?.currentValue === 'default' ? null : thinking?.currentValue || null;
+    const current = model?.currentValue || session.models?.currentModelId || null;
+    if (initial) this.defaultModel = current;
+    const available = model ? choices(model) : (session.models?.availableModels || []).map(model => ({ value: model.modelId, name: model.name }));
+    for (const option of available) {
+      const previous = this.catalog.find(entry => entry.model === option.value);
+      const entry = { model: option.value, displayName: option.name, isDefault: option.value === this.defaultModel,
+        supportedReasoningEfforts: option.value === current ? levels.map(choice => ({ reasoningEffort: choice.value })) : previous?.supportedReasoningEfforts || [],
+        defaultReasoningEffort: option.value === current ? level : previous?.defaultReasoningEffort || null };
+      if (previous) Object.assign(previous, entry); else this.catalog.push(entry);
+    }
+  }
+  protected run(turn: Turn, thread: Thread, text: string, effort: string | null, images: string[]) { void this.execute(turn, thread, text, effort, images); }
+  private async execute(turn: Turn, thread: Thread, text: string, effort: string | null, images: string[]) {
+    let stopped = false, prompting = false;
+    let cancelTimer: NodeJS.Timeout | undefined;
+    const live: LiveTurn = { turn, cwd: thread.cwd, text: '', message: randomUUID(), tools: new Map(), received: false, stopped: false };
+    turn.stop = () => {
+      stopped = true; live.stopped = true;
+      this.clearApprovals(turn);
+      if (prompting) {
+        this.send({ method: 'session/cancel', params: { sessionId: turn.threadId } });
+        // A broken server must not leave paused tasks waiting forever.
+        cancelTimer ??= setTimeout(() => this.disconnect(new Error(`${this.name} did not acknowledge cancellation. Reconnect to resume.`)), 5000);
+        cancelTimer.unref();
+      }
+    };
+    try {
+      const session = await this.session(turn.threadId, thread.cwd, thread.model);
+      if (effort) {
+        const option = session.configOptions?.find(option => option.category === 'thought_level' || option.id === 'thinking');
+        if (!option || !choices(option).some(choice => choice.value === effort)) throw new Error(`${this.name} does not support reasoning effort ${effort} for this model.`);
+        await this.rpc('session/set_config_option', { sessionId: turn.threadId, configId: option.id, value: effort });
+      }
+      const prompt: any[] = [{ type: 'text', text: thread.started ? text : `${thread.instructions}\n\n---\n\n${text}` }];
+      if (images.length && !this.capabilities.promptCapabilities?.image) throw new Error(`This ${this.name} version does not support image input. Update it, or send the images to another agent.`);
+      for (const file of images) {
+        const bytes = await fs.promises.readFile(file), mimeType = imageType(bytes);
+        if (!mimeType) throw new Error('This image format is not supported.');
+        prompt.push({ type: 'image', data: bytes.toString('base64'), mimeType });
+      }
+      if (stopped) return this.finish(turn, 'interrupted');
+      this.live.set(turn.threadId, live);
+      prompting = true;
+      // The response arrives at the end of the turn; user approvals can take any amount of time.
+      const result = await this.rpc('session/prompt', { sessionId: turn.threadId, prompt }, 0);
+      this.threads.set(turn.threadId, { ...thread, started: true });
+      this.flush(live);
+      if (stopped || result.stopReason === 'cancelled') this.finish(turn, 'interrupted');
+      else if (result.stopReason === 'end_turn' && live.received) this.finish(turn, 'completed');
+      else if (result.stopReason === 'end_turn') this.finish(turn, 'failed', `${this.name} returned no response. Check its login and model configuration, then retry.`);
+      else this.finish(turn, 'failed', `${this.name} stopped: ${result.stopReason || 'no stop reason returned'}.`);
+    } catch (error) {
+      this.flush(live);
+      this.finish(turn, stopped ? 'interrupted' : 'failed', stopped ? undefined : error instanceof Error ? error.message : String(error));
+    } finally {
+      if (cancelTimer) clearTimeout(cancelTimer);
+      this.clearApprovals(turn);
+      this.live.delete(turn.threadId);
+    }
+  }
+  private flush(live: LiveTurn) {
+    if (live.text.trim()) this.item(live.turn, { id: live.message, type: 'agentMessage', text: live.text });
+    live.text = ''; live.message = randomUUID();
+  }
+  private update(params: any) {
+    const live = this.live.get(params.sessionId), update = params.update;
+    if (!live || !update) return; // Includes history replay while loading a session.
+    if (update.sessionUpdate === 'agent_message_chunk' && update.content?.type === 'text') {
+      const text = String(update.content.text || ''), shown = live.text.trim();
+      live.text += text;
+      // Empty and whitespace-only chunks (Qwen sends them) would show as empty
+      // messages, so text is streamed from its first visible character.
+      if (!live.text.trim()) return;
+      live.received = true;
+      this.notify('item/agentMessage/delta', { threadId: live.turn.threadId, turnId: live.turn.id, itemId: live.message, delta: shown ? text : live.text });
+    } else if (update.sessionUpdate === 'tool_call' || update.sessionUpdate === 'tool_call_update') {
+      live.received = true;
+      this.flush(live);
+      const tool = { ...live.tools.get(update.toolCallId), ...update };
+      live.tools.set(update.toolCallId, tool);
+      const kind = toolKind(tool), named = tool.rawInput?.file_path || tool.rawInput?.path;
+      const paths = (tool.locations || []).map((location: any) => location.path).concat((tool.content || []).filter((part: any) => part.type === 'diff').map((part: any) => part.path))
+        .concat(kind === 'edit' && typeof named === 'string' ? [path.resolve(live.cwd, named)] : []);
+      const id = `${live.turn.id}:${tool.toolCallId}`;
+      const status = tool.status === 'failed' ? 'failed' : tool.status === 'completed' ? 'completed' : 'inProgress';
+      const output = (tool.content || []).map((part: any) => part.type === 'content' && part.content?.type === 'text' ? part.content.text : '').join('\n');
+      const item: Item = kind === 'execute' ? { id, type: 'commandExecution', command: tool.rawInput?.command || tool.title || `${this.name} command`, aggregatedOutput: output.slice(-40000), status }
+        : kind === 'edit' && paths.length ? { id, type: 'fileChange', changes: [...new Set(paths)].map(file => ({ path: file })), status }
+        : { id, type: 'toolCall', text: tool.title || `${this.name} tool`, status };
+      this.item(live.turn, item, status !== 'inProgress');
+    }
+  }
+  private receive(message: any) {
+    if (!message.method) {
+      const wait = this.pending.get(message.id);
+      if (!wait) return;
+      if (wait.timer) clearTimeout(wait.timer);
+      this.pending.delete(message.id);
+      if (message.error) wait.reject(new Error(message.error.message || `${this.name} request failed.`));
+      else wait.resolve(message.result);
+      return;
+    }
+    if (message.method === 'session/update') { this.update(message.params); return; }
+    if (message.id === undefined) return;
+    const live = this.live.get(message.params?.sessionId);
+    if (message.method !== 'session/request_permission' || !live || live.turn.status !== 'inProgress') {
+      this.send({ id: message.id, error: { code: -32601, message: 'This client does not support this request, or the turn has ended.' } }); return;
+    }
+    if (live.stopped) { this.send({ id: message.id, result: { outcome: { outcome: 'cancelled' } } }); return; }
+    const id = randomUUID(), update = message.params.toolCall || {};
+    const tool = { ...live.tools.get(update.toolCallId), ...update };
+    const file = tool.locations?.[0]?.path || tool.rawInput?.file_path || tool.rawInput?.path;
+    const edit = toolKind(tool) === 'edit';
+    const options = message.params.options || [];
+    const question = options.filter((option: any) => option.kind === 'allow_once').length > 1;
+    this.approvals.set(id, { rpcId: message.id, turn: live.turn, options, question });
+    if (question) {
+      // A question arrives as a permission request with several one-time
+      // choices (Kimi's AskUserQuestion): the question itself is the tool's
+      // text, and a one-time rejection is its Skip choice. An ACP permission
+      // answer can only select an option, never carry free text.
+      const asked = (tool.content || []).map((part: any) => part.type === 'content' && part.content?.type === 'text' ? part.content.text : '').filter(Boolean).join('\n');
+      this.emit('request', { id, method: 'item/tool/requestUserInput', params: { threadId: live.turn.threadId, turnId: live.turn.id,
+        questions: [{ id: 'choice', question: asked || tool.title || `${this.name} needs your input.`, isOther: false, options: options.filter((option: any) => option.kind === 'allow_once' || option.kind === 'reject_once').map((option: any) => ({ label: option.name || option.optionId })) }] } });
+      return;
+    }
+    this.emit('request', { id, method: edit ? 'item/fileChange/requestApproval' : 'item/commandExecution/requestApproval',
+      params: { threadId: live.turn.threadId, turnId: live.turn.id, reason: tool.title || `${this.name} requests permission.`, command: tool.rawInput?.command || (edit && file ? `Edit ${file}` : tool.title || `${this.name} tool`) } });
+  }
+  respond(id: string | number, result: any) {
+    const wait = this.approvals.get(String(id));
+    if (!wait) throw new Error('This request has ended.');
+    const kind = result?.decision === 'accept' ? 'allow_once' : result?.decision === 'decline' ? 'reject_once' : null;
+    const answer = result?.answers?.choice?.answers?.[0];
+    const option = wait.question
+      ? wait.options.find(option => (option.kind === 'allow_once' || option.kind === 'reject_once') && (option.name || option.optionId) === answer)
+      : wait.options.find(option => option.kind === kind);
+    this.approvals.delete(String(id));
+    this.send({ id: wait.rpcId, result: { outcome: option ? { outcome: 'selected', optionId: option.optionId } : { outcome: 'cancelled' } } });
+  }
+  reject(id: string | number, _message: string) { if (this.approvals.has(String(id))) this.respond(id, { decision: 'decline' }); }
+  private clearApprovals(turn: Turn) {
+    for (const [id, wait] of this.approvals) if (wait.turn === turn) {
+      this.respond(id, { decision: 'cancel' });
+      this.notify('serverRequest/resolved', { threadId: turn.threadId, requestId: id });
+    }
+  }
+  private send(message: Record<string, unknown>) {
+    const child = this.child;
+    child?.stdin?.write(JSON.stringify({ jsonrpc: '2.0', ...message }) + '\n', error => { if (error && this.child === child) this.disconnect(error); });
+  }
+  private rpc(method: string, params: unknown, timeout = 20000): Promise<any> {
+    if (!this.child) return Promise.reject(new Error(`${this.name} is not connected.`));
+    const id = ++this.sequence;
+    return new Promise((resolve, reject) => {
+      const timer = timeout ? setTimeout(() => { this.pending.delete(id); reject(new Error(`${this.name} request timed out: ${method}.`)); }, timeout) : undefined;
+      this.pending.set(id, { resolve, reject, timer });
+      this.send({ id, method, params });
+    });
+  }
+  private disconnect(error: Error, notify = true) {
+    const child = this.child;
+    this.child = null; this.ready = false; this.sessions.clear();
+    for (const wait of this.pending.values()) { if (wait.timer) clearTimeout(wait.timer); wait.reject(error); }
+    this.pending.clear(); this.approvals.clear();
+    child?.stdin?.end(); child?.kill('SIGTERM');
+    if (child && notify) this.emit('disconnected', error);
+  }
+  close() { this.disconnect(new Error(`${this.name} disconnected.`), false); }
+}
+
+export class KimiAgent extends AcpAgent {
+  constructor(binary?: string, launch?: typeof spawn) { super(ACP_PROFILES.kimi, binary, launch); }
+}