Module specs

September 2, 2026 ยท View on GitHub

One spec per backend subsystem. These are change-control contracts: read the spec for the subsystem you are touching before you change it, and update it in the same commit when you change what it documents.

This is also the on-demand load target for an AI session. The routing table in ../../../AGENTS.md maps a subsystem to its spec here, so an agent loads only the one it needs.

Core runtime

SpecSubsystem
acp-client.mdThe ACP JSON-RPC client that drives kiro-cli: transport, framing, timeouts, and the backend seam.
providers.mdThe LLMProvider interface and the KiroACP-only provider surface.
harness-parity.mdThe invariants keeping the Kiro harness first-class while other harnesses are adapted, and the test pinning each.
harness-onboarding.mdThe sequence a new ACP harness walks to land: vocabulary, capability decisions, spawn path, handshake, install probe, selectability, and what a live harness additionally touches.
kas-backend.mdThe second, adapted ACP backend: how Crew selects and adapts it (the kas_wire seam, harness-parity, ABC defaults) and the deferred hooks / transport / /clear items. Crew-side only.
session.mdSessions, slots, session keys, the warm pool, and PID tracking.
history.mdConversation persistence, JSONL rotation, and transcript search.
session-summary.mdIntent-level session summaries: the sidecar cache, extraction, and the turn-end pass.
file-search.mdThe @-mention file/folder search: index, ranking, kinds filter, and the sensitive-path symmetry.
session-storage.mdWhat sessions cost on disk, and the user-initiated trash that reclaims it.
session-control.mdOne chat session opening, stopping, and reading another.
config.mdThe config schema, defaults, loading, and live reload.
cli.mdEvery CLI command, the gateway flags, and the test harness.
heartbeat.mdThe liveness heartbeat and its restricted tool allowlist.
metrics.mdDuration histograms, system metrics, and the loop-stall watchdog.
sel.mdThe security event log: what is audited and how it is signed.

Security and platform

SpecSubsystem
security.mdSensitive paths, denied commands, credential redaction, the sandbox, and the keystone.
governance.mdThe two-level governance model, the scope catalog, and the PreToolUse gate.
platform-context.mdThe Composed Platform Providers seam, edition resolution, and signed-plugin admission.
computer-use.mdNative desktop GUI automation, its keystone opt-in, and the in-band refusals.
kas-auth.mdKAS-mode auth: the Kiro OIDC login/refresh/storage lifecycle Kiro Crew runs itself when there is no kiro-cli.

Agents and orchestration

SpecSubsystem
subagent.mdSpawning background workers, result delivery, and orphan recovery.
task.mdTask models and state.
taskrunner.mdThe execution engine that runs a task spec to completion.
workflows.mdThe dynamic-workflow engine: the frozen ctx contract, the event stream, and budgets.
workflow-gates.mdThe named conformance gates the workflow engine asserts, and the test pinning each.
autopilot.mdPlan-driven orchestration and its lifecycle.
persistent-agent-channels.mdLong-lived channels for multi-agent collaboration.
channel-history.mdThe channel history buffer.

Memory and knowledge

SpecSubsystem
memory-skills-hooks.mdThe memory layers, embeddings, lessons, skills, and hooks.
knowledge.mdThe knowledge graph and local knowledge search.
onboarding-import.mdImporting existing content at onboarding, and its embedding cost.
learn-cron-dashboard.mdLessons, cron scheduling, and the dashboard handlers that expose them.

Channels and messaging

SpecSubsystem
messaging.mdThe channel-neutral contracts: approvals, streaming, the mid-turn queue, and cooperative cancel.
slack-gateway.mdThe Slack gateway, its event dispatch, and Block Kit rendering.

Apps and UI surfaces

SpecSubsystem
app-kit-platform.mdApp contracts: MCP scoping, agent JSON composition, permissions, and dependencies.
mcp-apps.mdApps that surface as MCP servers.
mcp-shareability.mdPredicting which MCP servers can share one backend, from local evidence.
mcp-gateway-backend-replacement.mdValidating a replacement MCP backend's tool set before a live session adopts it.
artifacts.mdArtifact identity, versioning, and the companion chat panel.
themes.mdThe theme tier model and the CSS variable contract.
md-notebook.mdThe inline markdown viewer and editor.
side.mdThe chat side panel.
browser.mdWebsite browsing through the playwright-cli shell commands.

Built-in apps

SpecSubsystem
papyrus.mdThe Papyrus writing app.
command-bar.mdThe opt-in launcher that replaces quick-search: the overlay seam, the request-free root, ranking and scopes.
pptx-maker.mdDeck generation.
meetings.mdMeeting capture and summarization.
issue-radar.mdIssue triage and grouping.
ops-mission-control.mdAutonomous ops first responder: alarms, pages and monitors.
mochi.mdThe Mochi app.
auto-improvement.mdMeasurement-first self-improvement loop: ruler calibration, keep-or-revert cycles, draft PRs.
auto-improvement-test-plan.mdIntegration test plan for auto-improvement (all endpoints + UI + full loop), against a real GitHub repo.

Operations

SpecSubsystem
cloud.mdCloud connect and remote gateway login.
instances.mdManaging multiple instances over SSH. Sections here are cited by number from cloud/connect.py, so do not renumber them.
dev-fleet.mdWorktree fleet management and pruning.