thincoder 0.12.27 → 0.12.29

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thincoder",
-  "version": "0.12.27",
+  "version": "0.12.29",
   "description": "Thin coding agent - zero dependencies, no build step, Node.js native. Sharp code, zero bloat.",
   "keywords": [
     "ai",

package/src/agent/setup.mjs

@@ -80,12 +80,20 @@ export async function prepareRun(agent, input, callbacks, {
       const platform = { win32: 'Windows', darwin: 'macOS', linux: 'Linux' }[process.platform] ?? process.platform
       const wasRestored = agent._sessionStart != null
       agent._sessionStart ??= new Date().toISOString()
-      if (tree) {
-        agent.history.push({ role: "user", content: `[System reminder: OS: ${platform}. Working directory: ${agent.cwd}. Session start: ${agent._sessionStart}. Working directory snapshot:\n<untrusted_cwd_listing>\n${escapeXml(tree)}\n</untrusted_cwd_listing>]`, transient: true })
-      } else {
-        agent.history.push({ role: "user", content: `[System reminder: OS: ${platform}. Working directory: ${agent.cwd}. Session start: ${agent._sessionStart}.]`, transient: true })
+      // Inject OS/cwd + cwd-tree only ONCE per process (restored sessionStart keeps the
+      // content byte-identical across restarts — 2026-08-16 cache audit). Without the guard
+      // every run re-pushed the same reminder (history bloat, wasted tokens).
+      if (!agent._osReminderInjected) {
+        agent._osReminderInjected = true
+        if (tree) {
+          agent.history.push({ role: "user", content: `[System reminder: OS: ${platform}. Working directory: ${agent.cwd}. Session start: ${agent._sessionStart}. Working directory snapshot:\n<untrusted_cwd_listing>\n${escapeXml(tree)}\n</untrusted_cwd_listing>]`, transient: true })
+        } else {
+          agent.history.push({ role: "user", content: `[System reminder: OS: ${platform}. Working directory: ${agent.cwd}. Session start: ${agent._sessionStart}.]`, transient: true })
+        }
+  
       }
-      if (wasRestored) {
+      if (wasRestored && !agent._restartReminderInjected) {
+        agent._restartReminderInjected = true
         agent.history.push({ role: "user", content: `[System reminder: process restarted at ${new Date().toISOString()}.]`, transient: true })
       }
       if (agent.memory && !agent.history.some((m) => typeof m.content === "string" && m.content.startsWith(OUTLINE_INJECT_PREFIX))) {
@@ -124,13 +132,6 @@ export async function prepareRun(agent, input, callbacks, {
         })
       }
     }
-    // Time grounding for EVERY agent depth (subagents are short-lived; they also need
-    // to know "now"). Transient — dropped on persist, fresh at every run start.
-    agent.history.push({
-      role: "user",
-      content: `[System reminder: current time is ${timeNowLocal()} (local; timezone ${Intl.DateTimeFormat().resolvedOptions().timeZone || "local"}).]`,
-      transient: true,
-    })
     if (depth === 0) {
       // Checklist injection: inject pending + in_progress items from .thincoder/checklist.md
       try {
@@ -147,6 +148,15 @@ export async function prepareRun(agent, input, callbacks, {
     }
     pushReal(agent, { role: "user", content: input })
   }
+  // Time grounding for EVERY agent depth AND every resume, pushed LAST (after the user
+  // input): transient, dropped on persist, fresh at every run start — including resumes
+  // (an interrupt-continuation must know NOW, not the pre-interrupt time; 2026-08-16).
+  // Tail position keeps the second-precision content out of any prefix — caches stay hit.
+  agent.history.push({
+    role: "user",
+    content: `[System reminder: current time is ${timeNowLocal()} (local; timezone ${Intl.DateTimeFormat().resolvedOptions().timeZone || "local"}).`,
+    transient: true,
+  })
 
   if (agent._pendingReminders.length > 0) {
     for (const reminder of agent._pendingReminders) {
@@ -183,7 +193,13 @@ export async function prepareRun(agent, input, callbacks, {
   } : subagentTool
 
   const depthOnly = depth === 0 ? [filteredSubagent, skillTool, goalTool, engTool, verifyTool, recentChangesTool, advisorTool]
-    : agent._role === "eng-coder" ? [advisorTool, verifyTool] : []
+    // Write-permission coder sub-agents (subagent role="coder" + escalate surgeon): the
+    // system prompt names verify (system.md) and advisor (discipline.md) — without them a
+    // surgeon hit "unknown tool" and fell back to bash node --check / npm test to
+    // self-verify (2026-08-16 deepseek surgeon diagnosis; plugin parity).
+    : agent._role === "eng-coder" ? [advisorTool, verifyTool]
+    : agent._role === "coder" ? [verifyTool, advisorTool]
+    : []
   const tools = [...agent.tools, taskTool, planTool, timerTool, ...depthOnly]
   const toolSchemas = tools.map(toOpenAISchema)
   const toolByName = new Map(tools.map((t) => [t.name, t]))

package/src/provider/core.mjs

@@ -240,7 +240,9 @@ export function normalizeToolPairing(messages) {
       rest.push(m)
     }
   }
-  if (toolById.size === 0) return messages // no tool messages — nothing to enforce
+  if (toolById.size === 0 && !messages.some((m) => m.role === "assistant" && m.tool_calls?.length)) {
+    return messages // no tool messages AND no tool_calls declared — nothing to enforce
+  }
   const out = []
   for (const m of rest) {
     out.push(m)

package/src/session.mjs

@@ -325,8 +325,14 @@ export function saveSession(agent) {
   // _fullHistory is written at the source via pushReal — no flush needed here.
   // history        = FULL, never-compacted (human-readable; VS Code panel & CLI resume read this)
   // contextHistory = machine context (possibly compacted) so CLI resume keeps the token savings
+  // Human line: transient machine injections never enter the readable record.
   const history = (agent._fullHistory ?? agent.history).filter((m) => !m.transient && !isLegacyTransient(m))
-  const contextHistory = agent.history.filter((m) => !m.transient && !isLegacyTransient(m))
+  // Machine line (contextHistory): KEEP transient messages — resume must rebuild the
+  // machine line byte-identical to what the provider cache saw. Dropping them made every
+  // process restart diverge at the first injection position (git/OS/time reminders are
+  // re-injected with FRESH content) → whole-prefix cache miss on the CLI's very first
+  // request of each session (2026-08-16 cache-hit report; Kimi review).
+  const contextHistory = agent.history.filter((m) => !isLegacyTransient(m))
   const data = {
     version: 2,
     cwd: agent.cwd,

package/src/skills.mjs

@@ -52,6 +52,10 @@ async function loadSkillsFromDir(dir) {
   let entries
   try {
     entries = await readdir(dir, { withFileTypes: true })
+    // Deterministic order: readdir order is filesystem-dependent; an unsorted scan would
+    // reshuffle the skills listing → system prompt byte change with zero content change
+    // (2026-08-16 cache audit — that silently misses the provider prefix cache).
+    entries.sort((a, b) => a.name.localeCompare(b.name))
   } catch {
     return []
   }