samagotchi 0.153.0 → 0.154.1

data/lib/samagotchi/bundle_command/try/run.rb

@@ -30,7 +30,7 @@ module Samagotchi
 
         def run(prompt:, options:, timeout:)
           command = [RbConfig.ruby, "-I", Sandbox::LIB_DIR, Sandbox::CHI,
-                     "--no-shared", "--non-interactive", "-p", prompt, *child_options(options)]
+                     "--non-interactive", "-p", prompt, *child_options(options)]
           trap_state, old_traps = trap_forwarding
           pid = nil
           streams = []

data/lib/samagotchi/bundle_command/try/trace.rb

@@ -124,7 +124,7 @@ module Samagotchi
         end
 
         # The listing's placement fields: nothing to place in a one-turn run.
-        LISTING_FIELDS = %w[turns_since current earlier after_failed label].freeze
+        LISTING_FIELDS = %w[turns_since opening_id current earlier after_failed label].freeze
 
         # The saved cards as the web reads them (CardStore.saved), with
         # string keys and values, as the JSON trace prints them.

data/lib/samagotchi/bundle_command.rb

@@ -367,8 +367,8 @@ module Samagotchi
       prompt = build_conflict_prompt(bundle_name, installer.conflicts, expanded_source)
       before = installer.conflicts.to_h { |key, info| [key, Samagotchi::MemoryBundle::Merger.digest(info[:current])] }
       @stdout.puts "Launching an interactive session to merge them… (/exit when done)"
-      require "samagotchi/terminal_ui"
-      Samagotchi::TerminalUI.new(prompt: prompt).run
+      require "samagotchi/terminal_ui/attach_launcher"
+      Samagotchi::TerminalUI::AttachLauncher.run(prompt: prompt)
       settle_conflicts(installer.conflicts, before, bundle_name)
     ensure
       # An owned source (git/zip/tar) was kept for the incoming files above;

data/lib/samagotchi/bundles/btw/manifest.yml

@@ -1,12 +1,12 @@
 ---
 name: btw
-version: 0.1.4
+version: 0.1.5
 scope: system
 description: "/btw <question>: a side answer about the conversation, as a card in every UI, even mid-turn; Keep as session forks it into a child session"
 trust_level: reviewed
 plugin:
   file: plugin.rb
-  sha256: sha256:6497129b06d1c3061c1d7d9d7a9c3dfdbcf790e8f2049addad0c26d24771015f
+  sha256: sha256:d4c0d6309308270a1430d64f9713e46c15d71ace1b068fefc22916aa8cc2d043
 requires_chi: ">= 0.143.0"
 # config.yml bundles: btw: (another key warns; an older chi ignores this)
 settings: [max_tokens, timeout]

data/lib/samagotchi/bundles/btw/plugin.rb

@@ -15,7 +15,7 @@ class Plugin
   SYSTEM = "Answer the user's question about the conversation below, briefly. The user asks it on the side: " \
            "don't continue the conversation's task, and don't say what you would do next."
   # How many answers /btw keep can still fork: the last ones, for the
-  # worker's (or the REPL's) life.
+  # worker's life.
   KEPT = 10
   TITLE_CHARS = 72
   EARLIER = "(About the conversation before the running turn.)"

data/lib/samagotchi/bundles/coordinator/manifest.yml

@@ -1,6 +1,6 @@
 ---
 name: coordinator
-version: 0.8.0
+version: 0.8.1
 scope: system
 description: "Coordinate parallel work: the coordinator skill (split the work, one worktree and child session per task, check each report, merges under a guardrail approval (the git-merge rule) or a question, a handoff memory to resume from), /coordinate <goal>, /coordinate resume, /coordinate end, /coordinate review (experimental: a sprint review session to share) and /children; the coordinator toolkit (lean + delegate, delegate_result, list_sessions, objectives) and the coding toolkit for build children (child + be concise)"
 trust_level: reviewed
@@ -10,7 +10,7 @@ files:
     description: "Coordinate parallel work: split it, delegate each task wait:false in its own worktree (cwd:), check each report, merge under the git-merge approval or ask the user; resume from a handoff_* memory"
 plugin:
   file: plugin.rb
-  sha256: sha256:84535a86b754f3a12cdb2f2591027ea71bbf9ffb74734b1050899b9a4fde07ac
+  sha256: sha256:540dd6369342ea4dcbc6ba5ee17fb20d980b880df614a475668c70115e7ec6b8
 # the coordinator toolkit needs chi.toolkit and ctx.use_toolkit (0.66.0); the
 # coding toolkit (chi.toolkit prompt:) and the skill's delegate toolkit: need
 # the next chi.

data/lib/samagotchi/bundles/coordinator/plugin.rb

@@ -16,8 +16,9 @@
 # (ctx.sessions.stop, by session id) and shows the card again.
 #
 # /coordinate <goal> asks the model, in this session, to follow the skill
-# for the goal. A REPL session (--no-shared) takes no messages: the request
-# is shown for the user to send.
+# for the goal. A session a one-turn run holds (-p --non-interactive, or an
+# older chi's terminal) takes no messages: the request is shown for the user
+# to send.
 #
 # /coordinate resume picks up a coordinator handoff: the open handoff_*
 # memories of this project (an index line whose description doesn't start

data/lib/samagotchi/bundles/decision-card/manifest.yml

@@ -1,13 +1,13 @@
 ---
 name: decision-card
-version: 0.2.0
+version: 0.2.1
 scope: system
 description: "In a session with objectives, a long answer ending in a question gets a card: a short summary and the question, answered in the composer"
 trust_level: reviewed
 plugin:
   file: plugin.rb
-  sha256: sha256:e628d84ab9521f7e8e5f3bc69da97fe00e574082412ea24e9f3f1c6234ad31a9
-# ctx.objectives and ctx.turn_running? are new after 0.148.0
-requires_chi: ">= 0.149.0"
+  sha256: sha256:b85fd2162e41d1ea059ff6ca89ce6bb543e4f283d18337e9d4ac6936477d3770
+# ctx.last_answer is new after 0.153.0 (ctx.objectives, ctx.turn_running? after 0.148.0)
+requires_chi: ">= 0.154.0"
 # config.yml bundles: decision-card: (another key warns; an older chi ignores this)
 settings: [min_chars, tail_chars, model, timeout, max_tokens]

data/lib/samagotchi/bundles/decision-card/plugin.rb

@@ -135,7 +135,7 @@ class Plugin
     return SHORT_BUSY if ctx.turn_running?
 
     messages = ctx.messages
-    answer = last_answer(messages) or return "no answer to shorten yet"
+    answer = ctx.last_answer or return "no answer to shorten yet"
 
     id = ctx.card(title: SHORT_TITLE, body: "…")
     @mutex.synchronize { @shorts[id] = ctx }
@@ -158,14 +158,6 @@ class Plugin
     ctx.card(id: id, title: SHORT_TITLE, body: body)
   end
 
-  # @return [String, nil] the newest non-empty answer's text
-  def last_answer(messages)
-    found = Array(messages).reverse_each.find do |message|
-      %w[model assistant].include?(field(message, :role).to_s) && !field(message, :content).to_s.strip.empty?
-    end
-    found && field(found, :content).to_s
-  end
-
   def turn_ended(event, ctx)
     return unless event[:status].to_s == "completed"
     # A participant's question is for the participant, on the owner's model; a

data/lib/samagotchi/bundles/dev/manifest.yml

@@ -1,10 +1,10 @@
 ---
 name: dev
-version: 0.7.6
+version: 0.7.7
 scope: system
 description: "Developer tools"
 trust_level: reviewed
-requires_chi: ">= 0.150.0"
+requires_chi: ">= 0.154.0"
 includes:
 - known-names
 - mcp

data/lib/samagotchi/bundles/github-pr/manifest.yml

@@ -1,6 +1,6 @@
 ---
 name: github-pr
-version: 0.6.3
+version: 0.6.4
 scope: system
 description: Proposes the branch's open GitHub pull request to a session, attached once you mention it (#N, the branch or its URL), and attaches any PR URL with chi context add or the web's "+ URL"; the agent gets a note when reviews, comments, checks or its state change; in the web, a path:line in an answer links to that line of the PR; the auto_attach setting can attach the PR at once instead, or do nothing
 trust_level: reviewed
@@ -11,7 +11,7 @@ needs:
   hint: brew install gh, then gh auth login
 plugin:
   file: plugin.rb
-  sha256: sha256:82f8c76d38f314c3503eef3a5de0f8c0b20d0bb5bf4a3daebca43b60d00f8c7a
+  sha256: sha256:87678c39565a3d586b462d0449a27ee3da4a96f53ef5b352dea959256f6c1eda
 scripts:
   pr_context.rb: sha256:a883d2780e89c68c0d7b6d5e0fcb22c273f17bb167e79064e0e99db6bd2ee6f0
 context_providers:

data/lib/samagotchi/bundles/github-pr/plugin.rb

@@ -29,11 +29,11 @@ require "samagotchi/git_env"
 # diff" (or "File at head") action the web's ref menu offers. The
 # after_turn hook links from a per-PR cache and never runs gh (the web holds the answer until the hooks are
 # done); before_turn, before_generation and the init task fill the cache
-# off the turn's thread (`gh api`), in a session worker only: the REPL and
-# -p --non-interactive show no web page while they run (ctx.frontend; a chi
+# off the turn's thread (`gh api`), in a session worker only: -p
+# --non-interactive shows no web page while it runs (ctx.frontend; a chi
 # without it counts as a worker), and a scratch session never fetches.
 # `bundles: github-pr: line_links:` false turns it off, "always" fetches in
-# the REPL and -p too (still not for a scratch session).
+# -p --non-interactive too (still not for a scratch session).
 #
 # `bundles: github-pr: auto_attach:` says what the init task does with the
 # branch's open PR: `propose` (the default, above), `attach` (attached at

data/lib/samagotchi/bundles/skills/manifest.yml

@@ -1,12 +1,12 @@
 ---
 name: skills
-version: 0.1.9
+version: 0.1.10
 scope: system
 description: "Skills (skill_<name> memories, the steps of a task done together): /skill save, list, show and diff; older versions kept with a short diff line on every update; a nudge when a followed skill's step fails"
 trust_level: reviewed
 plugin:
   file: plugin.rb
-  sha256: sha256:781d943749d59ade0e24d04ba774449d31267eb8ca435835c36c67a3e523e632
+  sha256: sha256:8d72d29286d0807c18d2c37225455ca06d45f4f974f9335b76cc77916043838c
 requires_chi: ">= 0.143.0"
 # config.yml bundles: skills: (another key warns; an older chi ignores this)
 settings: [history_keep, nudge]

data/lib/samagotchi/bundles/skills/plugin.rb

@@ -242,8 +242,9 @@ class Plugin
   # what was just done (the model has seen the commands; a side answer
   # wouldn't). The request runs as a turn; sent while a turn runs it joins
   # that turn at its next step, and the request says to finish the task
-  # first. A REPL session (--no-shared) takes no messages: the request is
-  # shown for the user to send.
+  # first. A session a one-turn run holds (-p --non-interactive, or an older
+  # chi's terminal) takes no messages: the request is shown for the user to
+  # send.
   def save(rest, ctx)
     words = rest.split
     scope = words.delete("--system") ? "system" : "project"

data/lib/samagotchi/bundles/system/config_modification_protocol.md

@@ -18,7 +18,7 @@ Single registry `Samagotchi::Config` (`Config::ENTRIES` in `lib/samagotchi/confi
 
 Sections forbid `_`/`-` (`SECTION_RE` `/\A[a-z0-9]+\z/`), since an env or CLI name is derived from them; a config-only section (`system_one`: `expose: [:config]`, no derived name) may carry `_`. Leaves keep `snake_case` in YAML (`base_url`) and become kebab in CLI (`base-url`) via registry derivation — no generic string split, registry lookup avoids flat vs nested collision.
 
-**Universal entries** (`expose: [:env,:config,:cli]`): `default.model`, `server.host/port/open_timeout/read_timeout`, `server.first_token_timeout` (env and config only), `recap.model/base_url/host_ref/inactivity/timeout/min_user_turns/sentences`, `session.retention_days/max_count/keep_status/sweep_interval_hours/idle_exit_minutes`, `session.shared/keep_empty/max_children` (env and config only), `log.file/disable`, `status.line`, `context.status/window_tokens/chars_per_token/status_thresholds`, `memory.index_warn_tokens/entry_warn_tokens/read_max_chars`, `default.max_tokens`, `max_tool_output_chars`, `retry.max/base_delay/max_delay`, `read.*`, `execute.*`, `web.port/host`, `no_interrupt`, `no_default_input` etc. (`Config::ENTRIES`; `expose` says which of env/config/cli each takes). Precedence is `CLI > ENV > file > default`.
+**Universal entries** (`expose: [:env,:config,:cli]`): `default.model`, `server.host/port/open_timeout/read_timeout`, `server.first_token_timeout` (env and config only), `recap.model/base_url/host_ref/inactivity/timeout/min_user_turns/sentences`, `session.retention_days/max_count/keep_status/sweep_interval_hours/idle_exit_minutes`, `session.keep_empty/max_children` (env and config only), `log.file/disable`, `status.line`, `context.status/window_tokens/chars_per_token/status_thresholds`, `memory.index_warn_tokens/entry_warn_tokens/read_max_chars`, `default.max_tokens`, `max_tool_output_chars`, `retry.max/base_delay/max_delay`, `read.*`, `execute.*`, `web.port/host`, `no_interrupt`, `no_default_input` etc. (`Config::ENTRIES`; `expose` says which of env/config/cli each takes). Precedence is `CLI > ENV > file > default`.
 
 Example `config.yml` (new nested form, preferred):
 
@@ -40,10 +40,9 @@ recap:
 session:
   retention_days: 14
   max_count: 500
-  keep_status: ""        # the default: no status protects a session from pruning; a live worker or REPL always does
+  keep_status: ""        # the default: no status protects a session from pruning; a live worker or a one-turn run always does
   sweep_interval_hours: 24
   idle_exit_minutes: 30   # a background worker nobody uses exits; 0 = never
-  shared: true            # the default: plain `chi` runs its session in a background worker and attaches (as `chi --shared`); false keeps the in-process REPL (env SAMAGOTCHI_SESSION_SHARED; no CLI flag, `--no-shared` opts out per run)
   keep_empty: false       # the default: a session nothing happened in (no prompt, default model, no note/image) is deleted when left; true keeps it (env SAMAGOTCHI_SESSION_KEEP_EMPTY)
   max_children: 4         # running child sessions one session may have delegated at a time (the delegate tool; env SAMAGOTCHI_SESSION_MAX_CHILDREN)
 log:
@@ -77,7 +76,7 @@ guardrails:
   disable: [guardrails:git-rebase]
 ```
 
-- `bundles:` map of installed bundle name → its settings (one Hash, string keys, handed to the bundle's hook/plugin `initialize(settings)`). Read when a session's Engine starts: after a change restart the session's worker (`chi sessions stop <id>`) or the REPL. Unknown keys are ignored by the bundle, not validated. `chi bundle list` names the bundles; each bundle's keys are in `docs/bundles.md` / `docs/guardrails.md`.
+- `bundles:` map of installed bundle name → its settings (one Hash, string keys, handed to the bundle's hook/plugin `initialize(settings)`). Read when a session's Engine starts: after a change restart the session's worker (`chi sessions stop <id>`). Unknown keys are ignored by the bundle, not validated. `chi bundle list` names the bundles; each bundle's keys are in `docs/bundles.md` / `docs/guardrails.md`.
 
 ```yaml
 bundles:

data/lib/samagotchi/bundles/system/manifest.yml

@@ -1,11 +1,11 @@
 ---
 name: samagotchi-system
-version: 0.153.0
+version: 0.154.1
 scope: system
 description: Default system memories — identity, self map, config modification protocol, memory guide and the delegated-session rules
 files:
   identity.md: sha256:29c2f7df9f6c5acbc5ec17000a4490741e55e426af15ca0d81c8706edd9bd027
-  self_map.md: sha256:e695f78f858c29ccfef2ed6f9d6dd86d0ec067ed704a5a1956c01e53617948a1
-  config_modification_protocol.md: sha256:8896d1d364ce835040f69b504518d43dbdf959b93fdd9b10f87a8de61cae84a8
+  self_map.md: sha256:709bd52710bf6c50334a89a10742ea1554c5985cc2d7c4e7571e526cc4479526
+  config_modification_protocol.md: sha256:f3f6545c93d59b624a2bf1766e26059520ffc7b236470dd9f1b51ab77312376d
   memory_guide.md: sha256:8b7727b939b9c04486ca59859561023dcc319a73e0f5b47b3fcf5741edaa69e2
   delegated.md: sha256:a0d6ddcd4a8be06526d964898611775fd251cfd9d145a9d16afaccaa503597bd

data/lib/samagotchi/bundles/system/self_map.md

@@ -67,7 +67,7 @@
   `docs/bundle-authoring.md` in my source dir first.
 
 ## Where things live (relative to the source dir)
-- `docs/`: `cli.md` (flags, subcommands, REPL commands), `configuration.md` (config.yml keys,
+- `docs/`: `cli.md` (flags, subcommands, the terminal's commands), `configuration.md` (config.yml keys,
   hosts, the server api), `hooks.md` (hook events table), `plugins.md` (plugin API), `bundles.md` (each shipped bundle: btw, mcp, cost-cap…),
   `guardrails.md`, `memory.md`, `sessions.md`. `README.md` is only the quickstart.
 - `lib/samagotchi/tools/<tool>.rb`: each tool's real limits and defaults (e.g. `execute.rb`,

data/lib/samagotchi/child_move.rb

@@ -47,7 +47,7 @@ module Samagotchi
     # What a continue does with the previous link's children: +move+ the
     # direct children whose subtree has an open node (they go to the new
     # link, their subtrees with them), +refuse+ the open ones it can't move
-    # (SessionContinue::OpenChild, why: an older chi worker or a chi REPL).
+    # (SessionContinue::OpenChild, why: an older chi worker or a one-turn chi run).
     Plan = Data.define(:move, :refuse)
     # A move under way: from the session, the children moved, and those
     # already sent their note (so a move finished again notes no one twice).
@@ -87,14 +87,14 @@ module Samagotchi
       Plan.new(move: move, refuse: refuse)
     end
 
-    # Why a child's live owner keeps it from moving: a chi REPL holds its
+    # Why a child's live owner keeps it from moving: a one-turn chi run holds its
     # own Session and never reads the override; a worker on an older chi
     # neither. A worker with no sidecar yet is starting, on the newest chi
     # installed (SessionManager.worker_command): it moves.
     # @return [String, nil]
     def unmovable(child_id, state_dir:)
       link = WorkerLink.resolve(Session.session_dir(child_id, state_dir: state_dir), unlink: false)
-      return "open in a chi REPL; close it there" if link.owner&.tui?
+      return "#{OwnerLock::TUI_BUSY}; let it finish" if link.owner&.tui?
       return nil if !link.live? || link.features.include?(FEATURE)
 
       "older chi worker#{" #{link.version}" if link.version}; restart it"

data/lib/samagotchi/commands/registry.rb

@@ -29,9 +29,9 @@ module Samagotchi
       # @!attribute mid_turn [Symbol, #call] what a line of it does while a
       #   turn runs (MID_TURN): a symbol, or a lambda line (stripped) → one
       # @!attribute local [Boolean] the UI runs it; completion and help only
-      # @!attribute uis [Array<Symbol>, nil] a local entry's UIs (:repl,
-      #   :attached, :web) for completion and /help; nil means every UI
-      #   (for a local entry, every terminal)
+      # @!attribute uis [Array<Symbol>, nil] a local entry's UIs (:attached,
+      #   :web) for completion and /help; nil means every UI (for a local
+      #   entry, the terminal)
       # @!attribute match [#call] line (stripped) → whether it is this command
       # @!attribute handler [Proc, nil] runs it; SessionCommands instance_execs
       #   a built-in's with the line, and calls a bundle's with the text
@@ -165,8 +165,8 @@ module Samagotchi
       end
 
       # @return [Entry, nil] the first entry the UI runs itself (local) that
-      #   matches +line+, whatever its uis (a UI answers the others' too:
-      #   the REPL's /detach note)
+      #   matches +line+, whatever its uis (a UI answers the others' too,
+      #   with a note)
       def lookup_local(line)
         text = line.to_s.strip
         @entries.find { |entry| entry.local && entry.match?(text) }
@@ -190,7 +190,7 @@ module Samagotchi
         end
       end
 
-      # @param ui [Symbol] :repl or :attached
+      # @param ui [Symbol] :attached
       # @return [Array<String>] the /names Tab offers in +ui+, sorted
       def completions(ui)
         @entries.select { |entry| entry.slash? && entry.in_ui?(ui) }.map(&:name).uniq.sort

data/lib/samagotchi/composer_route.rb

@@ -3,11 +3,10 @@
 require_relative "delivery"
 
 module Samagotchi
-  # Where a line typed at a terminal's prompt goes, for both terminals (the
-  # REPL's TerminalUI#steer_line / #run_input_line, the attached
-  # AttachedLoop#submit). It only classifies; each UI keeps what it does
-  # with the answer (the REPL's mid-turn command policy and image lines, the
-  # attached TUI's continue offer and question). The web's composer.js
+  # Where a line typed at a terminal's prompt goes (AttachedLoop#submit; a
+  # -p prompt's /cut or /queue: TerminalUI#run). It only classifies; each
+  # UI keeps what it does with the answer (the attached TUI's continue
+  # offer and question). The web's composer.js
   # routeComposerLine decides the same; spec/fixtures/composer_routes.json
   # holds the cases both answer (docs/testing.md).
   #

data/lib/samagotchi/config.rb

@@ -119,7 +119,7 @@ module Samagotchi
                 check: ->(value) { "N or N-M (1-#{IdleRecap::RecapPrompt::MAX_SENTENCES})" unless IdleRecap::RecapPrompt.sentences_range(value) }),
 
       # chi broadcast (Broadcast::Recipients, Broadcast::Tags): a session that ended no turn in this many hours (and
-      # no worker or REPL runs) gets no broadcast; a ticket id in the note and in a session's branch or prompts
+      # no worker runs) gets no broadcast; a ticket id in the note and in a session's branch or prompts
       # delivers it there without triage.
       Entry.new(key: "broadcast.active_hours",   yaml_path: %w[broadcast active_hours],   type: :float,   default: 8.0,             expose: %i[env config], lifecycle: :next_broadcast),
       Entry.new(key: "broadcast.ticket_pattern", yaml_path: %w[broadcast ticket_pattern], type: :string,  default: '\b[A-Z][A-Z0-9]+-\d+\b', expose: %i[env config], lifecycle: :next_broadcast),
@@ -140,8 +140,6 @@ module Samagotchi
       Entry.new(key: "session.idle_exit_minutes",     yaml_path: %w[session idle_exit_minutes],     type: :float,   default: 30.0, expose: %i[env config cli], lifecycle: :worker_start),
       # Tools follow the project: a worker applies its folder's `mise env` at start (ProjectEnv); off keeps the spawner's env.
       Entry.new(key: "session.project_env",           yaml_path: %w[session project_env],           type: :enum,    default: "mise", expose: %i[env config], enum_values: %w[mise off], lifecycle: :worker_start),
-      # Plain `chi` runs like `chi --shared` (bin/chi, LaunchMode); false, or --no-shared per run, keeps the plain REPL. No CLI flag: that would duplicate --shared.
-      Entry.new(key: "session.shared",                yaml_path: %w[session shared],                type: :bool,    default: true,  expose: %i[env config], lifecycle: :next_invocation),
       # false: a continue's carry note holds the previous link's recap only (SessionChain.note_text), not its last answer too.
       Entry.new(key: "session.carry_last_answer",     yaml_path: %w[session carry_last_answer],     type: :bool,    default: true,  expose: %i[env config], lifecycle: :next_lifecycle_decision),
       # false: a session nothing happened in is deleted when it is left (SessionManager.discardable?).
@@ -698,7 +696,7 @@ module Samagotchi
         # Live resolve so ENV changes (as in specs) are reflected without explicit reload
         # Use current ENV and file (via ConfigFile's cached reader), plus any CLI
         # overrides captured via reload!
-        path = Samagotchi::ConfigFile.global_path rescue nil
+        path = Samagotchi::ConfigFile.global_path rescue nil # degrade-ok: Config↔Log: Log resolves its file and level through Config
         file_data = Samagotchi::ConfigFile.read_yaml(path: path) if path
         resolve_with_origin(entry.key, file_data: file_data, env: ENV, cli_overrides: cli_overrides, session: session)
       end
@@ -817,7 +815,7 @@ module Samagotchi
       end
 
       # Keys replaced by another, and what the warning adds: it names the new
-      # one (no alias).
+      # one (no alias). A key removed with nothing in its place has nil.
       PARENT_ANSWERS_HINT = "hard, standard or soft; see docs/guardrails.md"
       SYSTEM_ONE_MOVED_HINT = "it has moved: until all of host, model and timeout_ms have, nothing is judged or " \
                               "auto-allowed, and every ask goes to you; see docs/configuration.md"
@@ -826,14 +824,18 @@ module Samagotchi
         "turn.parent_continue" => ["guardrails.parent_answers", PARENT_ANSWERS_HINT],
         "guardrails.system_one.host" => ["system_one.host", SYSTEM_ONE_MOVED_HINT],
         "guardrails.system_one.model" => ["system_one.model", SYSTEM_ONE_MOVED_HINT],
-        "guardrails.system_one.timeout_ms" => ["system_one.timeout_ms", SYSTEM_ONE_MOVED_HINT]
+        "guardrails.system_one.timeout_ms" => ["system_one.timeout_ms", SYSTEM_ONE_MOVED_HINT],
+        "session.shared" => [nil, "chi always runs attached"]
       }.freeze
 
       # nil when +dotted+ is a key the file may hold.
       def key_problem(dotted)
         return nil if known_config_keys.include?(dotted)
         return "config: #{ConfigFile.removed_transport_problem("'#{dotted}'")}" if dotted == "server.transport"
+
         if (replaced = REPLACED_KEYS[dotted])
+          return "config: unknown key '#{dotted}': removed: #{replaced.last}" unless replaced.first
+
           return "config: unknown key '#{dotted}': replaced by '#{replaced.first}' (#{replaced.last})"
         end
 
@@ -1231,7 +1233,7 @@ module Samagotchi
       return [] unless raw.is_a?(Hash)
 
       raw.filter_map { |name, cfg| name.to_s.strip.downcase if cfg.is_a?(Hash) && HostConfig.disabled?(cfg) }
-    rescue StandardError
+    rescue StandardError # degrade-ok: Config↔Log: Log resolves its file and level through Config
       []
     end
 
@@ -1277,7 +1279,7 @@ module Samagotchi
 
       items = raw.is_a?(Array) ? raw : [raw]
       items.flat_map { |v| v.to_s.split(",") }.map(&:strip).reject(&:empty?)
-    rescue StandardError
+    rescue StandardError # degrade-ok: Config↔Log: Log resolves its file and level through Config
       []
     end
 
@@ -1296,7 +1298,7 @@ module Samagotchi
               else []
               end
       items.select { |v| v.is_a?(String) }.map(&:strip).reject(&:empty?).filter_map { |v| expand_appended_entry(v) }
-    rescue StandardError
+    rescue StandardError # degrade-ok: Config↔Log: Log resolves its file and level through Config
       []
     end
 
@@ -1355,7 +1357,7 @@ module Samagotchi
       end
 
       raw.each_with_object({}) { |(name, value), acc| acc[name.to_s] = value.is_a?(Hash) ? value : {} }
-    rescue StandardError
+    rescue StandardError # degrade-ok: Config↔Log: Log resolves its file and level through Config
       {}
     end
 
@@ -1414,7 +1416,7 @@ module Samagotchi
 
         result[key.downcase] = val
       end
-    rescue StandardError
+    rescue StandardError # degrade-ok: Config↔Log: Log resolves its file and level through Config
       {}
     end
 
@@ -1432,7 +1434,7 @@ module Samagotchi
         settings = ModelSettings.parse(key, v)
         result[key] = settings if settings
       end
-    rescue StandardError
+    rescue StandardError # degrade-ok: Config↔Log: Log resolves its file and level through Config
       {}
     end
 

data/lib/samagotchi/context_candidate_choice.rb

@@ -117,7 +117,7 @@ module Samagotchi
     # @param show_card [#call] (**card) → replaces the card
     # @return [Array(Symbol, String)] :ok or :error, and the answer
     def choose(action, name, session:, state_dir:, show_card:)
-      return [:error, "no session yet"] unless session&.id
+      return [:error, Session::NONE_YET] unless session&.id
       return [:error, "a review session takes no context candidates"] if session.review?
       return [:error, USAGE] if name.to_s.empty?
 

data/lib/samagotchi/context_candidates.rb

@@ -176,7 +176,7 @@ module Samagotchi
         .filter_map { |candidate, state| candidate if state == "proposed" }
     end
 
-    # Turn start (Worker#run_prompt before its absorb; the REPL's turn):
+    # Turn start (Worker#run_prompt before its absorb; a one-shot's turn):
     # the proposed candidates +prompt+ (or an earlier owner prompt: a late
     # proposal) mentions are attached, then each gets one first fetch
     # (together within +seconds+), so the note reaches this turn. Only an
@@ -192,7 +192,7 @@ module Samagotchi
       return [] if own.candidates.empty? || !OwnerPrompt.turn?(session: session, author: author)
 
       # The earlier owner prompts too: a proposal that came while one ran
-      # (the REPL's plugins never see a running turn's prompt).
+      # (a one-shot's plugins never see a running turn's prompt).
       texts = owner_texts(session.messages) + (prompt.is_a?(String) ? [prompt] : [])
       found = hits(texts, proposed(session.id, project_root: session.project_root, state_dir: state_dir))
       names = found.filter_map { |hit| attach(hit, own: own, state_dir: state_dir) }
@@ -203,7 +203,8 @@ module Samagotchi
       []
     end
 
-    # The REPL's turn start (it has no ContextAbsorber running): the notes
+    # A --non-interactive one-shot's turn start (it has no ContextAbsorber
+    # running, TerminalUI#attach_mentioned_context): the notes
     # of the sources attached from candidates, as the worker's absorb gives
     # them, added to +engine+'s session and marked delivered.
     # @return [Integer] how many notes were added

data/lib/samagotchi/continue_offer.rb

@@ -134,7 +134,7 @@ module Samagotchi
     # The continue offer was answered yes: resume the conversation without a
     # user message, with the iteration limit the offer's turn had, from the
     # run that turn started (TurnFlow#resume_from: its reasoning stays). A failure
-    # keeps the offer, as the REPL does ("continue prompt preserved"), and
+    # keeps the offer ("continue prompt preserved"), and
     # asks again, one before the turn began too (logged, no :turn_failed).
     # The answer's text is carried into the turn as it begins; a turn that
     # never began leaves it to no other.

data/lib/samagotchi/debug_log.rb

@@ -101,7 +101,7 @@ module Samagotchi
 
     def close_io
       @io&.close
-    rescue StandardError
+    rescue StandardError # degrade-ok: the log writer itself: a failure here must not recurse into Log
       nil
     ensure
       @io = nil

data/lib/samagotchi/degrade.rb

@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+
+require_relative "log"
+
+module Samagotchi
+  # A logged degradation: a piece of work whose failure has a fallback (a
+  # prompt section left out, an empty list, nil), with a record in the debug
+  # log instead of silence.
+  #
+  #   Degrade.call(:prompt, "model_notes_unreadable", fallback: nil, model: name) { read_notes }
+  #   Degrade.call(:bridge, "state_unreadable", fallback: {}, rescue: [SystemCallError, JSON::ParserError]) { … }
+  #
+  # Runs the block and returns its value. When it raises one of +rescue:+
+  # (StandardError by default; never Exception), returns +fallback+ and logs
+  # Log.warn(area, event, error:, msg:, **fields) the first time this
+  # process sees [area, event], Log.debug after: a hot path that fails on
+  # every call writes one WARN, and the happy path takes no lock. Nothing
+  # goes to stderr (a worker has none; a terminal line would be noise).
+  #
+  # A `return` in the block returns from the enclosing method as usual; a
+  # `next` or `break` would change what the site does, so a site that needs
+  # one logs by hand (Degrade.note) instead.
+  #
+  # Written Degrade.call (Style/LambdaCall turns Degrade.() into it).
+  #
+  # +area+ is a Log tag (LogLine::TAGS), +event+ a slug saying what was
+  # lost; with Log's strict mode on (the specs) both are checked on every
+  # call, the happy path's included.
+  module Degrade
+    MSG_CHARS = 500
+
+    @seen = Set.new
+    @mutex = Mutex.new
+
+    class << self
+      # @param area [Symbol] a Log tag
+      # @param event [String, Symbol] what was lost (agents_md_unreadable)
+      # @param fallback [Object] the value when the block raises
+      # @param fields [Hash] extra record fields; +rescue:+ (a class or an
+      #   array of them, default StandardError) is the one taken out
+      # @return the block's value, or +fallback+
+      def call(area, event, fallback: nil, **fields)
+        classes = Array(fields.delete(:rescue) || StandardError)
+        check!(area, event) if Log.strict
+        begin
+          yield
+        rescue *classes => e
+          note(area, event, e, **fields)
+          fallback
+        end
+      end
+
+      # Log a degradation the caller has already handled (its rescue keeps
+      # a next/break or a fallback of its own): the same once-per-process
+      # WARN, DEBUG after.
+      # @return nil
+      def note(area, event, error, **fields)
+        first = @mutex.synchronize { @seen.add?([area.to_sym, event.to_s]) }
+        record = { error: error.class.name, msg: error.message.to_s[0, MSG_CHARS], **fields }
+        first ? Log.warn(area, event.to_s, **record) : Log.debug(area, event.to_s, **record)
+        nil
+      end
+
+      # Forget what was logged (specs, with Log.reset!).
+      def reset! = @mutex.synchronize { @seen.clear }
+
+      private
+
+      def check!(area, event)
+        raise ArgumentError, "unknown log tag #{area}" unless LogLine::TAGS.include?(area.to_s)
+        raise ArgumentError, "bad log event #{event}" unless event.to_s.match?(LogLine::SLUG)
+      end
+    end
+  end
+end

data/lib/samagotchi/desktop/macos/ChiRunner.swift

@@ -182,8 +182,8 @@ final class ChiRunner {
   /// The live sessions, oldest started first, then up to +recentCount+
   /// stopped ones, newest first. The live order is by creation so ⌘1…⌘9
   /// stay on their sessions as turns update them; a new one comes last.
-  /// A session a chi REPL holds is in neither: it takes no notes or
-  /// messages. A failed second call just leaves "recent" empty. Calls
+  /// A session a one-turn chi --non-interactive run holds is in neither: it
+  /// takes no notes or messages. A failed second call just leaves "recent" empty. Calls
   /// back on +queue+ (a headless seam waits on another one).
   func sessions(recentCount: Int = 3, queue: DispatchQueue = .main,
                 completion: @escaping (Result<[LiveSession], ChiError>) -> Void) {
@@ -199,7 +199,7 @@ final class ChiRunner {
   private static let recentFlags = ["--limit", "20"]
 
   /// The live rows, then up to +recentCount+ of the recent list that are
-  /// neither live nor a REPL's; a failed recent list adds none.
+  /// neither live nor held by an owner (a one-turn run); a failed recent list adds none.
   private static func rows(live: [LiveSession], recent: Result<[LiveSession], ChiError>, recentCount: Int) -> [LiveSession] {
     let liveIds = Set(live.map(\.id))
     let stopped = ((try? recent.get()) ?? [])