kolega-code 0.18.0__tar.gz → 0.19.0__tar.gz

{kolega_code-0.18.0 → kolega_code-0.19.0}/CHANGELOG.md

@@ -6,6 +6,38 @@ This project uses GitHub Releases for detailed generated release notes. This fil
 
 ## Unreleased
 
+## 0.19.0 - 2026-07-16
+
+### Added
+
+- Added private, project-scoped memory outside repositories, with bounded
+  Markdown storage, model tools, startup context, linked-worktree sharing,
+  `/memory` commands, settings controls, and a TUI browser and editor.
+
+### Changed
+
+- Pinned the MCP SDK to stable `1.28.1` and stopped globally enabling
+  prerelease dependency resolution.
+- Added the stable-lock `filelock` dependency required by project memory.
+
+### Removed
+
+- Stopped loading or modifying legacy repository `AGENT_MEMORY.md` files.
+  Existing files are not automatically migrated to private project memory.
+
+### Fixed
+
+- Preserved separate OpenAI and ChatGPT Responses reasoning-summary parts so
+  thinking summaries render as clean, separated lines.
+- Fixed MCP 1.x stream, timeout, and camelCase result compatibility, and now
+  report nested transport failures as credential-safe tool errors instead of
+  opaque `TaskGroup` messages.
+
+### Security
+
+- Sanitized terminal-rendered control sequences and unsafe hyperlink metadata
+  while preserving raw model, tool, and session content internally.
+
 ## 0.18.0 - 2026-07-14
 
 ### Added

{kolega_code-0.18.0 → kolega_code-0.19.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: kolega-code
-Version: 0.18.0
+Version: 0.19.0
 Summary: Multi-agent coding in the terminal
 Project-URL: Homepage, https://kolega-ai.github.io/kolega-code/
 Project-URL: Documentation, https://kolega-ai.github.io/kolega-code/
@@ -229,6 +229,7 @@ Requires-Python: >=3.11
 Requires-Dist: anthropic==0.101.0
 Requires-Dist: beautifulsoup4==4.14.3
 Requires-Dist: ddgs==9.14.4
+Requires-Dist: filelock==3.20.3
 Requires-Dist: firecrawl-py==4.28.2
 Requires-Dist: google-genai==2.0.1
 Requires-Dist: httpx==0.28.1
@@ -237,7 +238,7 @@ Requires-Dist: langfuse==3.14.5
 Requires-Dist: lxml-html-clean==0.4.5
 Requires-Dist: markdownify==1.2.3
 Requires-Dist: markitdown[docx,pdf,pptx,xls,xlsx]==0.1.6
-Requires-Dist: mcp>=1.21.2
+Requires-Dist: mcp==1.28.1
 Requires-Dist: nest-asyncio==1.6.0
 Requires-Dist: openai==1.109.1
 Requires-Dist: packaging==25.0

{kolega_code-0.18.0 → kolega_code-0.19.0}/docs/astro.config.mjs

@@ -94,6 +94,7 @@ export default defineConfig({
             { label: "Build & Plan Modes", slug: "tui/modes" },
             { label: "Chat Composer", slug: "tui/composer" },
             { label: "Slash Commands", slug: "tui/slash-commands" },
+            { label: "Project Memory", slug: "tui/project-memory" },
             { label: "Sessions & Resuming", slug: "tui/sessions-and-resume" },
           ],
         },

{kolega_code-0.18.0 → kolega_code-0.19.0}/docs/src/assets/coverage.svg

@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="114" height="20" role="img" aria-label="coverage: 80.48%"><title>coverage: 80.48%</title><filter id="blur"><feGaussianBlur stdDeviation="16"/></filter><linearGradient id="s" x2="0" y2="100%"><stop offset="0" stop-color="#bbb" stop-opacity=".1"/><stop offset="1" stop-opacity=".1"/></linearGradient><clipPath id="r"><rect width="114" height="20" rx="3"/></clipPath><g clip-path="url(#r)"><rect width="61" height="20" fill="#555"/><rect x="61" width="53" height="20" fill="#67ac09"/><rect width="114" height="20" fill="url(#s)"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><g transform="scale(.1)"><g aria-hidden="true" fill="#010101"><text x="315" y="150" fill-opacity=".8" filter="url(#blur)" textLength="510">coverage</text><text x="315" y="150" fill-opacity=".3" textLength="510">coverage</text></g><text x="315" y="140" textLength="510">coverage</text></g><g transform="scale(.1)"><g aria-hidden="true" fill="#010101"><text x="865" y="150" fill-opacity=".8" filter="url(#blur)" textLength="430">80.48%</text><text x="865" y="150" fill-opacity=".3" textLength="430">80.48%</text></g><text x="865" y="140" textLength="430">80.48%</text></g></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="114" height="20" role="img" aria-label="coverage: 81.01%"><title>coverage: 81.01%</title><filter id="blur"><feGaussianBlur stdDeviation="16"/></filter><linearGradient id="s" x2="0" y2="100%"><stop offset="0" stop-color="#bbb" stop-opacity=".1"/><stop offset="1" stop-opacity=".1"/></linearGradient><clipPath id="r"><rect width="114" height="20" rx="3"/></clipPath><g clip-path="url(#r)"><rect width="61" height="20" fill="#555"/><rect x="61" width="53" height="20" fill="#67ac09"/><rect width="114" height="20" fill="url(#s)"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><g transform="scale(.1)"><g aria-hidden="true" fill="#010101"><text x="315" y="150" fill-opacity=".8" filter="url(#blur)" textLength="510">coverage</text><text x="315" y="150" fill-opacity=".3" textLength="510">coverage</text></g><text x="315" y="140" textLength="510">coverage</text></g><g transform="scale(.1)"><g aria-hidden="true" fill="#010101"><text x="865" y="150" fill-opacity=".8" filter="url(#blur)" textLength="430">81.01%</text><text x="865" y="150" fill-opacity=".3" textLength="430">81.01%</text></g><text x="865" y="140" textLength="430">81.01%</text></g></g></svg>

{kolega_code-0.18.0 → kolega_code-0.19.0}/docs/src/content/docs/concepts/how-it-works.md

@@ -79,3 +79,10 @@ Kolega Code runs against your real environment:
 Sessions, settings, permissions, and credentials are persisted locally. That local
 state is what lets Kolega Code operate on a real development workspace while preserving
 resumable sessions and project-specific controls.
+
+Private [Project Memory](../../tui/project-memory/) is another local state
+service, but it is not session history: an agent or user must explicitly curate
+it, and linked Git worktrees share it through their common Git identity. Its
+provider interface keeps the built-in Markdown backend separate from possible
+future structured backends; switching providers never migrates data
+automatically.

{kolega_code-0.18.0 → kolega_code-0.19.0}/docs/src/content/docs/concepts/tools.md

@@ -67,7 +67,49 @@ OCR/conversion outside this tool.
 
 - `think_hard` — an extended-reasoning step that uses the
   [thinking model](../../configuration/providers-and-models/) and its token budget.
-- `read_memory`, `write_memory` — read and write workspace memories.
+- `read_memory(path="MEMORY.md")` — read a private project-memory index or topic,
+  including its logical path, byte count, and bounded content. The startup copy
+  of `MEMORY.md` counts as already read.
+- `list_memory(query=None)` — list private project-memory files with sizes and titles.
+  The optional `query` is a case-insensitive substring filter over paths and
+  content; custom agents with an explicit `allowed_tools` list must name
+  `list_memory` to receive it.
+- `write_memory(content, path="MEMORY.md")` — create or overwrite one complete
+  memory file.
+- `edit_memory(old_string, new_string, path="MEMORY.md")` — replace one exact,
+  unique occurrence in a memory file. An empty `old_string` is rejected. If the
+  text occurs zero times or more than once, the edit fails and the file is left
+  unchanged.
+- `delete_memory(path)` — delete one memory file.
+
+These are the model tools supplied by the built-in `markdown` project-memory
+backend. They write to owner-private Kolega Code state, never the repository.
+Before writing, the agent first inspects the already-loaded `MEMORY.md`, follows
+any semantically relevant link, and otherwise makes a targeted `list_memory`
+search. If the durable fact is already covered, it makes no mutation; a
+different wording alone is not a reason to write. Existing topic files are read
+before they are overwritten or edited.
+
+A short, self-contained fact belongs directly in `MEMORY.md`. Detail that needs
+multiple rules, caveats, rationale, or examples belongs in a flat topic file
+with a concise descriptive link from `MEMORY.md`. For a new detailed memory, the
+agent writes the topic first and then edits the index. To forget one, it removes
+the index link first and then deletes the topic. These are recoverable ordering
+conventions, not a cross-file transaction.
+
+Each private write atomically replaces one file, but content mutation follows a
+single-writer, last-write-wins model. There is no cross-file atomicity, and an
+exact edit does not preserve independent concurrent changes. Paths and content
+are bounded, but content is not secret-scanned or redacted. See
+[Project Memory](../../tui/project-memory/) for storage identity, limits, model
+exposure, and the `/memory` browser.
+
+Memory tool registration is capability- and provider-driven. Enabled top-level
+coder, general, and planning agents can read and explicitly curate memory;
+private memory mutation is an intentional exception to Plan mode's ban on
+repository edits. Built-in sub-agents get read-only access. Exact custom-agent
+tool allowlists remain the final gate. When memory is disabled or its configured
+backend is unavailable, no memory tools or context are exposed.
 
 ### Sub-agent dispatch
 
@@ -87,8 +129,9 @@ Build mode's full toolset.
 
 This separation is what keeps Plan mode safe to run against any codebase: the
 planning agent can look and run investigative commands, but it has no file-edit
-tools. Shell commands are further gated by the active permission mode — in `ask`
-they prompt before running.
+tools. Explicit writes to private project memory are the one exception; they
+never change repository files. Shell commands are further gated by the active
+permission mode — in `ask` they prompt before running.
 
 In the Textual TUI, Build mode defaults to `ask` permission mode. Shell commands
 and file edits must be approved before they run unless you switch to `auto` or

{kolega_code-0.18.0 → kolega_code-0.19.0}/docs/src/content/docs/configuration/prompt-overrides.md

@@ -132,9 +132,23 @@ Project override templates can use variables, conditionals, and loops over the e
 Agent prompt overrides replace the bundled base system prompt for that agent type. Kolega Code still appends dynamic runtime/project sections after your override, including:
 
 - matching prompt extensions, such as skills or gigacode guidance
-- workspace memories
+- host-provided `workspace_memories`, labelled as host workspace context
+- enabled [private project memory](../../tui/project-memory/), including its
+  backend policy and bounded `MEMORY.md` index
 - `AGENTS.md` or legacy `KOLEGA.md` project guidance
-- `AGENT_MEMORY.md`
+
+These sections remain distinct and survive coder, planning, and sub-agent prompt
+overrides. They are also different from resumable session history and the
+Planning tab's transient task list. Project memory is not generated from either:
+Kolega Code performs no completed-turn transcript review or automatic memory
+authoring.
+
+Only the private Markdown backend's `MEMORY.md` index is injected automatically,
+up to 200 lines or 25 KiB; linked topics require `read_memory`. Memory is treated
+as untrusted observations rather than instructions. Private project memory is
+owner-controlled state and is not secret-scanned or redacted before injection.
+Disabling project memory removes both its context and tools without deleting its
+private data.
 
 `COMPACTION.md` is different: it fully replaces only the system prompt used by the conversation compaction summarizer. The user prompt containing the conversation history is still generated by Kolega Code.
 

{kolega_code-0.18.0 → kolega_code-0.19.0}/docs/src/content/docs/tui/interface.md

@@ -23,6 +23,10 @@ you submit follow-ups while the agent is working, a small queued-messages panel
 appears above the composer until those prompts are sent. See
 [Chat Composer](../composer/) for everything it can do.
 
+Run `/memory` to open the full-screen [Project Memory](../project-memory/)
+browser/editor. It manages private durable project knowledge separately from the
+conversation and the Planning tab's task list.
+
 ## Side-panel tabs
 
 | Tab | What it shows |

kolega_code-0.19.0/docs/src/content/docs/tui/project-memory.md

@@ -0,0 +1,188 @@
+---
+title: Project Memory
+description: Inspect and curate private, project-scoped agent memory in the TUI.
+---
+
+Project memory is a small, durable knowledge bank for facts that remain useful
+across tasks and sessions: build commands, architecture notes, conventions, and
+recurring pitfalls. It is **enabled by default**, but nothing is written merely
+because you open a project, finish a turn, compact context, save, or resume a
+session. The agent writes memory only through an explicit memory tool call, and
+you can inspect or change it yourself.
+
+Run `/memory` with no arguments to open the Project Memory screen.
+
+## Private, project-scoped state
+
+The built-in `markdown` backend stores a concise `MEMORY.md` index and optional
+Markdown topic files under Kolega Code's private local state directory—not under
+the repository. Directories and files use owner-only permissions where the
+platform supports them: `0700` for directories and `0600` for files, manifests,
+and lock artifacts. The screen and `/memory path` show the local location to you;
+it is never included in model-facing memory output.
+
+Kolega Code does not:
+
+- write memory files into your repository or change Git status;
+- review completed transcripts or synthesize end-of-turn summaries into memory;
+- cloud-sync project memory; or
+- use project memory as a scratchpad for transient progress, active plans, or
+  task state.
+
+Memory content returned by tools is part of the normal private session history
+sent to the selected model, just like other tool results. Keep credentials and
+other secrets out of it. This is an authoring precaution, not an enforced
+policy: project memory is not scanned, rejected, withheld, or redacted based on
+secret-like content.
+
+### Which directories share a bank?
+
+For Git projects, identity comes from the canonical Git **common directory**.
+Linked worktrees therefore share one project-memory bank. Separate clones have
+different common directories and do not share memory.
+
+For non-Git projects, identity is the canonical resolved project path. Moving a
+non-Git directory changes that identity. Initializing it as a Git repository also
+creates a new identity, as can moving the Git identity root. Existing banks are
+not moved or merged automatically.
+
+## The Markdown backend
+
+Only `MEMORY.md` is added automatically to the agent's startup context. It is
+limited to the first **200 lines or 25 KiB**, with a visible truncation marker.
+Use it as a concise index and link to topic files; topic content is loaded on
+demand with `read_memory`, and the agent can enumerate or search entries with
+`list_memory`.
+
+The model-facing file API is:
+
+- `read_memory(path="MEMORY.md")`
+- `list_memory(query=None)`
+- `write_memory(content, path="MEMORY.md")`
+- `edit_memory(old_string, new_string, path="MEMORY.md")`
+- `delete_memory(path)`
+
+`write_memory` creates or overwrites one complete file. `edit_memory` replaces
+one exact, unique occurrence. It rejects an empty `old_string`; if the old text
+occurs zero times or more than once, the operation fails without writing.
+
+The agent follows a no-op-first retrieval policy. It inspects the already-loaded
+`MEMORY.md` first and follows any semantically relevant link. If no link looks
+promising, it uses a targeted `list_memory` query to find unindexed or nested
+entries. When a durable fact is already covered, it does nothing—rewording the
+same fact is not a reason to mutate memory. It reads an existing topic before
+overwriting or editing it and updates memory only for materially new, corrected,
+or stale information.
+
+Memory uses a hybrid structure. Keep a short, self-contained fact directly in
+`MEMORY.md`. Use a flat topic file plus a concise, descriptive one-line index
+link when the information needs multiple rules, caveats, rationale, or examples.
+Existing nested topics remain valid. Create a detailed memory topic-first and
+index-second; delete one index-first and topic-second. These orderings make
+interrupted operations recoverable, but they are not transactions and do not
+provide automatic index maintenance.
+
+Backend-wide safety limits are:
+
+- normalized relative `.md` paths only;
+- at most 100 Markdown files;
+- at most 128 KiB per file; and
+- at most 1 MiB of Markdown content per project.
+
+Absolute paths, traversal, symlinks, reserved paths, and writes that exceed a
+limit are rejected. A write uses a temporary file followed by an atomic
+same-directory replacement, so an interrupted write does not leave a partial
+Markdown file. This guarantee applies to one file only. Content mutation has an
+explicit single-writer, last-write-wins concurrency model: overlapping writers
+can overwrite one another, and the read-exact-replace-write sequence used by
+`edit_memory` does not preserve independent concurrent changes. There is no
+cross-file atomicity.
+
+The private state directory is treated as owner-controlled application state,
+not as a sandbox against other processes running as the same operating-system
+user. Kolega Code coordinates its own processes and rejects ordinary path
+escapes and symlinks, but it does not attempt to race an unrelated local process
+that deliberately changes private state during a write. A process with access
+to that directory can already inspect or tamper with the application's local
+state.
+
+## Using the Project Memory screen
+
+The screen shows whether memory is enabled, the active backend, project identity
+kind, startup-context size and warnings, file count and total size, and the
+private local path. Filter the entry list on the left and select an entry to see
+its rendered preview, logical path, and size on the right.
+
+Available controls depend on backend capabilities. With `markdown`, you can:
+
+- create a topic, edit an entry, and save its complete content;
+- delete an entry with confirmation;
+- refresh changes made by another process (`r`);
+- preview the exact bounded startup context the agent receives (**Agent view**);
+- turn agent memory access on or off.
+
+While an entry is being edited, the entry list and filter are inactive; only
+Save, Cancel, and closing the screen are available. The footer buttons swap
+between browse actions (New, Delete, Edit) and edit actions (Cancel, Save).
+
+Turning memory off preserves its files but removes its context and memory tools
+from the agent. The screen can still inspect an existing disabled bank after an
+explicit action. Creating the first entry in a new disabled bank asks you to
+confirm enablement first.
+
+Configuration changes are unavailable or deferred while an agent turn is
+running. After a successful edit or enablement change, the idle agent prompt is
+refreshed. Failed writes do not refresh it.
+
+## Slash commands
+
+| Command | Action |
+| --- | --- |
+| `/memory` | Open the Project Memory screen (alias: `/memory browse`) |
+| `/memory status` | Show state, backend, identity, sizes, and the exact bounded startup context the agent receives |
+| `/memory on` | Enable project memory without changing its files |
+| `/memory off` | Disable agent access while preserving its files |
+| `/memory files` | List logical entries and sizes |
+| `/memory show [path]` | Show bounded content; defaults to `MEMORY.md` |
+| `/memory path` | Show the active backend's private local directory |
+
+## Sensitive and untrusted content
+
+Private project memory is trusted as owner-controlled application state. Kolega
+Code does not scan it for probable secrets: credential-like content is stored,
+shown in the TUI and slash-command previews, returned by `read_memory`, and
+included in bounded startup context without rejection, withholding, or
+redaction. Because those model-facing paths can send memory to the selected
+provider and retain it in private session history, do not use project memory as
+a credential store.
+
+Memory is treated as untrusted project observations, not instructions. Current
+system and user instructions, repository guidance, and fresh tool output take
+precedence over instruction-like text found there.
+
+## Other kinds of state
+
+Project memory is distinct from:
+
+- `AGENTS.md`, `KOLEGA.md`, and prompt overrides: repository-controlled project
+  instructions;
+- host-provided `workspace_memories`: a separately labelled host context;
+- session history: the messages and tool results used to resume a conversation;
+  and
+- the Planning tab's task list: current work state, not durable knowledge.
+
+## Pluggable backends
+
+`markdown` is the first backend behind Kolega Code's versioned project-memory
+provider architecture. The common manager handles identity, lifecycle, backend
+selection, capability discovery, tool registration, and the generic TUI shell.
+Each backend owns isolated storage and may provide different context, tools, and
+browse/edit capabilities.
+
+Phase 1 supports built-in registration and host injection for tests or embedders,
+not discovery of arbitrary installed plugins. Selecting another backend never
+migrates or reinterprets Markdown data automatically, and inactive backend data
+is retained. If a configured provider is unavailable, Kolega Code shows a
+diagnostic, exposes no memory to the agent, and lets the coding session continue.
+A future SQLite, Mnemopi-style, or other structured provider will be a separate
+backend rather than a change to Markdown semantics.

{kolega_code-0.18.0 → kolega_code-0.19.0}/docs/src/content/docs/tui/slash-commands.md

@@ -41,6 +41,7 @@ These control the app and your session.
 | `/build` | Switch to [Build mode](../modes/) |
 | `/sidebar` | Show or hide the side panel |
 | `/settings` | Open the full-screen Settings editor |
+| `/memory` | Open [Project Memory](../project-memory/) or run a memory subcommand |
 | `/permissions` | Show or switch the shell/edit permission mode |
 | `/model` | Choose the active model |
 | `/effort` | Choose the active model's thinking effort |
@@ -70,6 +71,20 @@ provider. You can also switch directly with `/model <name>`.
 Run `/settings` to open the categorized Settings editor without navigating to the
 sidebar tab. Unsaved changes remain a draft until you select **Apply Changes**.
 
+Run `/memory` with no arguments (alias: `/memory browse`) to browse and edit the
+project's private memory bank. Lightweight subcommands are also available:
+
+| Command | Description |
+| --- | --- |
+| `/memory status` | Show enabled/backend/identity state, sizes, and the exact bounded startup context the agent receives |
+| `/memory on` / `/memory off` | Enable agent access or disable it without deleting data |
+| `/memory files` | List entries and sizes |
+| `/memory show [path]` | Show bounded content; defaults to `MEMORY.md` |
+| `/memory path` | Show the private local backend directory |
+
+See [Project Memory](../project-memory/) for project identity, limits,
+concurrency, privacy, and model-exposure details.
+
 Run `/effort` to open a selectable list of supported effort values for the
 active model. You can also switch directly with `/effort <level>`.
 

{kolega_code-0.18.0 → kolega_code-0.19.0}/kolega_code/__init__.py

@@ -151,4 +151,4 @@ __all__ = [
     "parse_git_status_output",
 ]
 
-__version__ = "0.18.0"
+__version__ = "0.19.0"

{kolega_code-0.18.0 → kolega_code-0.19.0}/kolega_code/agent/__init__.py

@@ -48,4 +48,4 @@ __all__ = [
     "ToolExtension",
 ]
 
-__version__ = "0.18.0"
+__version__ = "0.19.0"

{kolega_code-0.18.0 → kolega_code-0.19.0}/kolega_code/agent/baseagent.py

@@ -53,7 +53,7 @@ from kolega_code.permissions import (
 from .prompt_provider import PromptProvider, AgentMode, AgentType, PromptContext, PromptExtension
 from .prompt_overrides import ProjectPromptOverrides, format_prompt_override_error, render_prompt_override_source
 from kolega_code.services.base import TerminalManager, BrowserManager
-from kolega_code.services.file_system import FileSystem
+from kolega_code.services.file_system import FileSystem, LocalFileSystem
 from .tools import ToolCollection  # noqa: F401 - kept for tests and downstream monkeypatch compatibility
 from kolega_code.tools import ToolError
 from .utils.commands import CommandProcessor
@@ -67,7 +67,6 @@ if TYPE_CHECKING:
 logger = logging.getLogger(__name__)
 
 PROJECT_GUIDANCE_FILES = ("AGENTS.md", "KOLEGA.md")
-AGENT_MEMORY_FILE = "AGENT_MEMORY.md"
 
 # System prompt for `prompt`/`agent` lifecycle hooks: the model's only job is a
 # yes/no decision returned as a compact JSON object.
@@ -149,6 +148,7 @@ class BaseAgent(LogMixin):
         context: Optional[AgentContext] = None,
         max_iterations: Optional[int] = None,
         custom_agent_catalog: Optional[Any] = None,
+        memory_manager: Optional[Any] = None,
     ) -> None:
         """
         Initialize a new BaseAgent instance.
@@ -205,6 +205,7 @@ class BaseAgent(LogMixin):
                 filesystem=filesystem or defaults.filesystem,
                 terminal_manager=terminal_manager or defaults.terminal_manager,
                 browser_manager=browser_manager or defaults.browser_manager,
+                memory_manager=memory_manager,
             )
 
             context = AgentContext(
@@ -226,8 +227,11 @@ class BaseAgent(LogMixin):
                 permission_mode=normalize_permission_mode(permission_mode, default=PermissionMode.AUTO),
                 permission_callback=permission_callback or auto_allow_permission_callback,
             )
-        elif prompt_provider is not None:
-            context.prompt_provider = prompt_provider
+        else:
+            if memory_manager is not None:
+                context.services.memory_manager = memory_manager
+            if prompt_provider is not None:
+                context.prompt_provider = prompt_provider
             if permission_mode is not None:
                 context.permission_mode = normalize_permission_mode(permission_mode, default=context.permission_mode)
             if permission_callback is not None:
@@ -277,6 +281,20 @@ class BaseAgent(LogMixin):
         self.sub_agent_recorder = context.telemetry.sub_agent_recorder
         self.session_recorder = None if sub_agent else session_recorder
         self.custom_agent_catalog = custom_agent_catalog
+        self.memory_manager = context.services.memory_manager
+        self._owns_memory_manager = False
+        if self.memory_manager is not None and sub_agent:
+            from kolega_code.memory import MemoryAccessScope
+
+            self.memory_manager = self.memory_manager.with_scope(MemoryAccessScope.SUBAGENT)
+        if self.memory_manager is None and not sub_agent and isinstance(self.filesystem, LocalFileSystem):
+            # Keep non-local/sandbox hosts unchanged unless they inject a manager.
+            from kolega_code.cli.session_store import default_state_dir
+            from kolega_code.memory import ProjectMemoryManager
+
+            self.memory_manager = ProjectMemoryManager(self.project_path, default_state_dir())
+            self.context.services.memory_manager = self.memory_manager
+            self._owns_memory_manager = True
 
         # gigacode (workflow orchestration) opt-in. Off by default; the host toggles
         # it via apply_gigacode(). The run_workflow tool gate reads this live, so
@@ -547,15 +565,6 @@ class BaseAgent(LogMixin):
                 return guidance_file, ""
         return "", ""
 
-    def _load_agent_memory(self) -> tuple[str, str]:
-        """Return agent memory content when AGENT_MEMORY.md exists."""
-        if not self.filesystem.exists(AGENT_MEMORY_FILE):
-            return "", ""
-        try:
-            return AGENT_MEMORY_FILE, self.filesystem.read_text(AGENT_MEMORY_FILE)
-        except Exception:
-            return AGENT_MEMORY_FILE, ""
-
     def build_prompt_context(self) -> PromptContext:
         """Build PromptContext from agent state."""
         import platform
@@ -564,7 +573,13 @@ class BaseAgent(LogMixin):
         is_git_repo = self.filesystem.exists(".git") and self.filesystem.is_dir(".git")
 
         project_guidance_file, project_guidance = self._load_project_guidance()
-        agent_memory_file, agent_memory = self._load_agent_memory()
+        private_memory = ""
+        if self.memory_manager is not None:
+            try:
+                private_memory = self.memory_manager.prompt_context().text
+            except Exception:
+                # Disabled/unavailable memory is intentionally invisible to the model.
+                private_memory = ""
 
         return PromptContext(
             system_name=os.getenv("KOLEGA_CODE_SYSTEM_NAME", "Kolega Code"),
@@ -576,12 +591,11 @@ class BaseAgent(LogMixin):
             available_ports=self.available_ports,
             project_guidance=project_guidance,
             project_guidance_file=project_guidance_file,
-            agent_memory=agent_memory,
-            agent_memory_file=agent_memory_file,
             kolega_md=project_guidance,
             workspace_id=self.workspace_id,
             workspace_environment_variables=self.workspace_env_var_descriptions,
             memories=self.workspace_memories,
+            private_memory=private_memory,
         )
 
     def _prompt_override_error_message(self, path: str, detail: object) -> str:
@@ -1020,9 +1034,6 @@ class BaseAgent(LogMixin):
             if isinstance(output, list):
                 chat_message_content = "\n\n".join(item.to_markdown() for item in output)
 
-            if tool_name == "write_memory":
-                self._initialize_system_prompt()
-
             # Send tool_result message for successful execution
             await self.send_chat_message(
                 message_type="tool_result",
@@ -1561,6 +1572,13 @@ class BaseAgent(LogMixin):
             return
         await asyncio.to_thread(recorder.finish_turn, status, error=error)
 
+    def refresh_memory_context(self) -> None:
+        """Refresh private memory and rebuild the system prompt without a full agent rebuild."""
+        if self.memory_manager is None:
+            return
+        self.memory_manager.refresh()
+        self._initialize_system_prompt()
+
     async def _process_message_stream_impl(
         self, message: str, attachments: Optional[List[Dict[str, Any]]] = None
     ) -> AsyncGenerator[Dict[str, Any], None]:
@@ -1570,6 +1588,13 @@ class BaseAgent(LogMixin):
         Yields dicts of the form
         ``{"type": "response"|"thinking", "content": str, "complete": bool, "uuid": str}``.
         """
+        if not self.sub_agent:
+            try:
+                self.refresh_memory_context()
+            except Exception:
+                # Keep the last valid prompt if memory or prompt refresh fails.
+                pass
+
         unsupported_attachment_message = self._unsupported_attachment_message(attachments)
         if unsupported_attachment_message:
             yield {
@@ -1834,9 +1859,13 @@ class BaseAgent(LogMixin):
         Clean up all agent resources.
         This should be called when the agent is being destroyed.
         """
-        # Clean up tool collection resources
-        if self.tool_collection is not None:
-            await self.tool_collection.cleanup()
+        try:
+            if self.tool_collection is not None:
+                await self.tool_collection.cleanup()
+        finally:
+            if self._owns_memory_manager and self.memory_manager is not None:
+                self.memory_manager.close()
+                self.memory_manager = None
 
         # Log cleanup
         await self.log_info("Agent cleanup completed", sender=self.agent_name)

{kolega_code-0.18.0 → kolega_code-0.19.0}/kolega_code/agent/browseragent.py

@@ -7,7 +7,7 @@ from kolega_code.events import AgentConnectionManager
 from kolega_code.llm.models import Message, TextBlock
 from kolega_code.llm.specs import supports_vision as model_supports_vision
 from .prompt_provider import AgentMode, AgentType, PromptExtension, PromptProvider
-from .tools import ToolCollection
+from .tools import ToolCollection, ToolCollectionConfig
 
 
 class BrowserAgent(BaseAgent):
@@ -61,6 +61,7 @@ class BrowserAgent(BaseAgent):
         sub_agent_recorder: Optional[Any] = None,
         hook_dispatcher: Optional[Any] = None,
         max_iterations: Optional[int] = None,
+        memory_manager: Optional[Any] = None,
     ) -> None:
         """
         Initialize a new BrowserAgent instance.
@@ -116,6 +117,7 @@ class BrowserAgent(BaseAgent):
             sub_agent_recorder=sub_agent_recorder,
             hook_dispatcher=hook_dispatcher,
             max_iterations=max_iterations,
+            memory_manager=memory_manager,
         )
 
         self.tool_collection = ToolCollection(
@@ -125,7 +127,7 @@ class BrowserAgent(BaseAgent):
             self.connection_manager,
             self.config,
             caller=self,
-            browser_only=True,
+            tool_config=ToolCollectionConfig(browser_only=True, include_memory_tools=True),
             filesystem=self.filesystem,
             terminal_manager=self.terminal_manager,
             browser_manager=self.browser_manager,

{kolega_code-0.18.0 → kolega_code-0.19.0}/kolega_code/agent/coder.py

@@ -52,6 +52,7 @@ class CoderAgent(BaseAgent, LogMixin):
         hook_dispatcher: Optional[Any] = None,
         max_iterations: Optional[int] = None,
         custom_agent_catalog: Optional[Any] = None,
+        memory_manager: Optional[Any] = None,
     ) -> None:
         """
         Initialize a new CoderAgent instance.
@@ -114,12 +115,11 @@ class CoderAgent(BaseAgent, LogMixin):
             hook_dispatcher=hook_dispatcher,
             max_iterations=max_iterations,
             custom_agent_catalog=custom_agent_catalog,
+            memory_manager=memory_manager,
         )
 
         # Configure tool collection with custom coder agent tools
         tool_exclusions = [
-            "read_memory",
-            "write_memory",
             "execute_terminal_command",
             "get_tool_list",
             "log_error",
@@ -137,6 +137,8 @@ class CoderAgent(BaseAgent, LogMixin):
         tool_config = ToolCollectionConfig(
             custom_tool_groups=["coder_agent_tools"],
             tool_exclusions=tool_exclusions,
+            include_memory_tools=True,
+            memory_write_access=True,
         )
 
         self.tool_collection = ToolCollection(