kaagum - Tiny, security-focused AI agent in Guile

Age	Commit message (Collapse)	Author
11 days	Rename project to kaagum.	Arun Isaac
	kaakaa reminds too many Europeans of shit. 😅
11 days	Let tool kinds be constants, rather than functions.	Arun Isaac
	It makes little sense for a tool kind to be a function of the tool call arguments.
11 days	Strip message fields based on role.	Arun Isaac

12 days	Refactor sending agent requests into separate function.	Arun Isaac
	Incidentally, this refactor fixes a bug whereby agent requests would be registered even when tool calls were pre-approved/pre-rejected and no permission requests were sent out.
12 days	Make acp-message-json a lens.	Arun Isaac

13 days	Add /tools command.	Arun Isaac

13 days	Add markdown table builder function.	Arun Isaac

13 days	Pass tools to slash commands.	Arun Isaac
	This is becoming a hodge-podge of arguments passed in to slash commands. We need a more principled approach in the future.
13 days	Move state/session lenses right after <state>/<session> types.	Arun Isaac

13 days	Expose persistent permissions to the user.	Arun Isaac

13 days	Implement persistent tool permissions.	Arun Isaac
	We store a list of allowed and rejected tools in the session state, and pass it on to spec->tool-call so it can set an appropriate tool call status. Then, request permission from the client only if the tool call hasn't been pre-approved or pre-rejected.
13 days	Refactor, introducing the state-cwd lens.	Arun Isaac

13 days	Refactor permission selection decoding.	Arun Isaac
	Refactor permission selection decoding to be less tightly coupled to the JSON from the client.
13 days	Send tool call results to the client as a vector of content.	Arun Isaac
	In a tool_call_update, the content field must be a vector of association lists, not just an association list.
14 days	Do not repeat tool title, kind and rawInput.	Arun Isaac
	It is enough to send the tool title, kind and rawInput the first time when the tool call is created. There is no need to send these fields repeatedly in subsequent updates. Subsequent updates need only mention fields that have actually changed.
14 days	Send tool_call_update instead of tool_call for tool call updates.	Arun Isaac
	A sessionUpdate of "tool_call" must only be sent when the tool call is created. Further updates must send a sessionUpdate of "tool_call_update".
14 days	Notify client about new tool call before asking for permission.	Arun Isaac

14 days	Abstract out construction of agent_message_chunk notifications.	Arun Isaac

14 days	Implement /cwd command.	Arun Isaac

14 days	Implement slash commands.	Arun Isaac

2026-04-09	Provide title, kind and rawInput to client when requesting permission.	Arun Isaac

2026-04-09	Check for tool existence in spec->tool-call.	Arun Isaac

2026-04-08	Handle tool call parse failures early.	Arun Isaac
	Report tool call parse failures immediately to the LLM without bothering the client with permission requests; only notify the client.
2026-04-08	Process tool calls one at a time.	Arun Isaac
	We process tool calls one at a time using a new function next-state-tool-call. We refactor next-state-llm-response to use next-state-tool-call.
2026-04-08	Push check for tool calls and cancellation into state->llm-request.	Arun Isaac
	In doing so, we also change state->llm-request to state->llm-requests. The new function now returns a list of <llm-request> objects rather than a single one.
2026-04-08	Re-fill comments and docstrings.	Arun Isaac

2026-04-03	Initial commit	Arun Isaac