samagotchi 0.72.0 → 0.74.0

data/lib/samagotchi/tools/builtins.rb

@@ -2,6 +2,7 @@
 
 require_relative "registry"
 require_relative "../tool_declarations"
+require_relative "../paths"
 require_relative "execute"
 require_relative "read"
 require_relative "write"
@@ -127,6 +128,8 @@ module Samagotchi
       # level (SAMAGOTCHI_SESSION_REASONING_HISTORY, the same way). A
       # worker's `chi --model X` default (ModelProfile::MODEL_FROM_CLI_ENV)
       # is unset: it was that run's, not the default of a chi run here.
+      # A set XDG_STATE_HOME / XDG_CONFIG_HOME goes in absolute (Paths), so
+      # a chi run in another cwd (chi send) reads this chi's dirs.
       def parent_env(kctx, env: ENV)
         peers = kctx.peers
         id = peers.respond_to?(:session_id) ? peers.session_id.to_s : ""
@@ -136,7 +139,16 @@ module Samagotchi
         { Guardrails::ParentApprovals::PARENT_SESSION_ENV => id.empty? ? "chi" : id,
           SESSION_MODEL_ENV => model.empty? ? nil : model,
           SESSION_THINKING_ENV => thinking,
-          SESSION_REASONING_HISTORY_ENV => history }.merge(cli_model_unset(env))
+          SESSION_REASONING_HISTORY_ENV => history }.merge(cli_model_unset(env)).merge(xdg_absolute(env))
+      end
+
+      # The XDG dirs set in +env+, made absolute (nothing for an unset one).
+      def xdg_absolute(env = ENV)
+        set = ->(key) { !env.fetch(key, "").to_s.strip.empty? }
+        dirs = {}
+        dirs["XDG_STATE_HOME"] = Paths.state_home(env: env) if set.call("XDG_STATE_HOME")
+        dirs["XDG_CONFIG_HOME"] = Paths.config_home(env: env) if set.call("XDG_CONFIG_HOME")
+        dirs
       end
 
       # The unsets that keep a `chi --model X` worker's default from passing
@@ -151,11 +163,12 @@ module Samagotchi
       SESSION_THINKING_ENV = "SAMAGOTCHI_SESSION_THINKING"
       SESSION_REASONING_HISTORY_ENV = "SAMAGOTCHI_SESSION_REASONING_HISTORY"
 
-      # task_create's parent_env, less the unsets of a variable the model
-      # set in its env (a SAMAGOTCHI_DEFAULT_MODEL it asked for stays).
+      # task_create's parent_env, less what the model set in its env (a
+      # SAMAGOTCHI_DEFAULT_MODEL or an XDG dir it asked for stays; chi's own
+      # markers are reserved, the model's env can't set them).
       def task_marker_env(kctx, env)
         given = env.is_a?(Hash) ? env.keys.map(&:to_s) : []
-        parent_env(kctx).reject { |key, value| value.nil? && given.include?(key) }
+        parent_env(kctx).reject { |key, _| given.include?(key) }
       end
 
       # Stop flips the turn's controller, seen through the Engine's PeerView

data/lib/samagotchi/tools/execute.rb

@@ -350,7 +350,7 @@ module Samagotchi
         return nil if error
 
         File.write(File.join(dir, BACK_POINTER), File.expand_path(TaskRuntime.metadata_path(record.id)))
-        write_missing_exit_code(waiter, record.exit_code_path)
+        TaskRuntime.record_exit_status(waiter, record.exit_code_path, task_id: record.id)
         # Ended between the deadline and the adopt: the record says how.
         TaskRuntime.get_record(record.id) unless waiter.alive?
         lines = [handed_over_line(timeout_sec), "task_id: #{record.id}",
@@ -363,20 +363,6 @@ module Samagotchi
       end
       private_class_method :hand_over
 
-      # A command that set its own EXIT trap replaced the wrapper's, so it
-      # writes no exit_code: while this chi lives, the waiter's status fills
-      # it in (a refresh in between may still read "no exit code").
-      def self.write_missing_exit_code(waiter, path)
-        Thread.new do
-          Thread.current.report_on_exception = false
-          code = waiter.value&.exitstatus
-          File.write(path, code.to_s) if code && !File.exist?(path) && Dir.exist?(File.dirname(path))
-        rescue StandardError => e
-          Log.debug(:turn, "execute_exit_code_failed", error: e.class.name, msg: e.message)
-        end
-      end
-      private_class_method :write_missing_exit_code
-
       # <state dir>/execute: every command's dir (LOGS_DIRNAME).
       def self.logs_root = File.join(Paths.state_dir, LOGS_DIRNAME)
 

data/lib/samagotchi/tools/task_runtime.rb

@@ -6,6 +6,7 @@ require "securerandom"
 require "shellwords"
 require "time"
 require_relative "../atomic_file"
+require_relative "../log"
 require_relative "../process_group"
 require_relative "shell"
 require_relative "task_record"
@@ -55,7 +56,9 @@ module Samagotchi
         task_id = generate_task_id
         task_dir = task_dir_for(task_id)
         output_path = File.join(task_dir, OUTPUT_FILENAME)
-        exit_code_path = File.join(task_dir, EXIT_CODE_FILENAME)
+        # Absolute: the trap writes it wherever the shell is when it exits
+        # (a +cwd+, or a cd in the command). Ruby opens output_path here.
+        exit_code_path = File.expand_path(File.join(task_dir, EXIT_CODE_FILENAME))
 
         FileUtils.mkdir_p(task_dir)
 
@@ -72,7 +75,7 @@ module Samagotchi
           out: output_io,
           err: output_io
         )
-        Process.detach(pid)
+        waiter = Process.detach(pid)
         # Read now, compared before each signal: a pid reused later is not this task.
         pid_started = ProcessGroup.start_time(pid)
 
@@ -81,6 +84,7 @@ module Samagotchi
                                     output_path: output_path, exit_code_path: exit_code_path)
 
         write_record(record)
+        record_exit_status(waiter, exit_code_path, task_id: task_id)
         [record, nil]
       rescue StandardError => e
         [nil, "Error: #{e.message}"]
@@ -88,6 +92,66 @@ module Samagotchi
         output_io&.close
       end
 
+      # The shell's status from chi's waiter (+waiter+, a Process.detach
+      # thread), for a shell whose EXIT trap wrote nothing: one killed by a
+      # signal (zsh's sh mode skips the trap on TERM, INT and KILL) gets
+      # 128 + the signal, one whose command replaced the trap gets its exit
+      # status. Only while this chi runs. A record a refresh finished in
+      # between (failed, no exit code) is corrected; a stopped task (its
+      # stop flag on disk) is left as task_stop records it.
+      # The thread is named EXIT_STATUS_THREAD (a spec joins them before it
+      # removes the tasks' folder).
+      # @return [Thread]
+      def record_exit_status(waiter, path, task_id:)
+        # Absolute now: safe against a later chdir.
+        record_path = File.expand_path(metadata_path(task_id))
+        path = File.expand_path(path)
+        Thread.new do
+          Thread.current.report_on_exception = false
+          Thread.current.name = EXIT_STATUS_THREAD
+          code = status_code(waiter.value)
+          next if code.nil? || record_at(record_path)&.stop_requested_by
+
+          File.write(path, code.to_s) if !File.exist?(path) && Dir.exist?(File.dirname(path))
+          correct_finished_record(record_path, read_exit_code(path))
+        rescue StandardError => e
+          Log.debug(:turn, "task_exit_code_failed", id: task_id, error: e.class.name, msg: e.message)
+        end
+      end
+
+      # A Process::Status as a shell reports one: its exit status, or
+      # 128 + the signal that killed it.
+      def status_code(status)
+        return nil unless status
+
+        status.exitstatus || (status.termsig && (128 + status.termsig))
+      end
+
+      # record_exit_status's threads' name.
+      EXIT_STATUS_THREAD = "task_exit_status"
+
+      # Reasons a refresh finishes a record with when it read no exit code.
+      MISSING_CODE_REASONS = ["process_ended_without_exit_code", NOT_CHIS_PROCESS].freeze
+
+      # A record a refresh finished before the exit code was there (failed,
+      # exit_code nil, no stop) gets +code+; finished_at is kept.
+      def correct_finished_record(record_path, code)
+        record = record_at(record_path)
+        return unless code && record && !record.running? && record.exit_code.nil? && !record.stop_requested_by
+        return unless MISSING_CODE_REASONS.include?(record.stop_reason)
+
+        status = code.zero? ? "completed" : "failed"
+        AtomicFile.write(record_path, record_json(record.with(status: status, exit_code: code, stop_reason: nil)))
+      end
+
+      def record_at(path)
+        return nil unless File.file?(path)
+
+        TaskRecord.from_file(JSON.parse(File.read(path)))
+      rescue JSON::ParserError
+        nil
+      end
+
       # A record for a command chi already runs: an execute still running at
       # its limit, handed over as a task (Execute::HANDED_OVER), given as a
       # TaskRecord.running whose +started_at+ is the spawn's. Its logs and
@@ -321,9 +385,11 @@ module Samagotchi
         FileUtils.mkdir_p(dir)
 
         path = File.join(dir, METADATA_FILENAME)
-        AtomicFile.write(path, JSON.pretty_generate(record.to_file) + "\n")
+        AtomicFile.write(path, record_json(record))
       end
 
+      def record_json(record) = JSON.pretty_generate(record.to_file) + "\n"
+
       def metadata_path(task_id)
         File.join(task_dir_for(task_id), METADATA_FILENAME)
       end
@@ -352,9 +418,12 @@ module Samagotchi
       # exit status to +exit_code_path+. A prefix, not lines after the
       # command: a trailing "\\" or "|" in the command would swallow those,
       # and an `exit N` or a `set -e` failure would skip them. A command that
-      # sets its own EXIT trap replaces this one: no exit_code file then
-      # (the task ends failed with process_ended_without_exit_code, unless
-      # its starter's waiter writes the code: Execute's hand-over).
+      # sets its own EXIT trap replaces this one, and a shell killed by a
+      # signal skips it (zsh's sh mode, on TERM, INT and KILL): no exit_code
+      # file from the shell then. The waiter of the chi that started it
+      # writes the code instead (record_exit_status: the status, or
+      # 128 + the signal); with that chi gone too, the task ends failed with
+      # process_ended_without_exit_code.
       def wrapped_shell_command(command, exit_code_path)
         write = %(printf "%s" "$?" > #{Shellwords.escape(exit_code_path)})
         "trap #{Shellwords.escape(write)} EXIT\n#{command}\n"

data/lib/samagotchi/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module Samagotchi
-  VERSION = "0.72.0"
+  VERSION = "0.74.0"
   # Sent as the User-Agent of every HTTP request chi makes.
   USER_AGENT = "chi/#{VERSION}"
 end

data/lib/samagotchi/web/app.rb

@@ -66,6 +66,9 @@ module Samagotchi
       BRIDGE_WAIT_TIMEOUT = 10.0
       # An uploaded image may be this big before it is downscaled.
       MAX_IMAGE_UPLOAD_BYTES = 20 * 1024 * 1024
+      # A POST /api/render body may be this big: a decision message is a few
+      # KB, and the cap bounds the work a page can ask for.
+      MAX_RENDER_BYTES = 64 * 1024
       SESSION_ID_RE = /\A[0-9A-Za-z-]{1,64}\z/
       IMAGE_NAME_RE = /\A[0-9a-f]{16}\.(png|jpe?g|gif|webp)\z/
       IMAGE_TYPES = { "png" => "image/png", "jpg" => "image/jpeg", "jpeg" => "image/jpeg", "gif" => "image/gif",
@@ -158,6 +161,7 @@ module Samagotchi
         ["GET", %r{\A/api/models\z}, :handle_models],
         ["GET", %r{\A/api/history\z}, :handle_history],
         ["GET", %r{\A/api/events\z}, :handle_events],
+        ["POST", %r{\A/api/render\z}, :handle_render],
         ["GET", %r{\A/api/sessions/([^/]+)/stream\z}, :handle_stream],
         ["GET", %r{\A/api/sessions/([^/]+)/output\z}, :handle_output],
         ["POST", %r{\A/api/sessions/([^/]+)/cancel\z}, :handle_cancel],
@@ -679,8 +683,9 @@ module Samagotchi
       # refused beside it (a create takes no reasoning_history). It runs on
       # model (or model_name) when given, else on the previous link's: one
       # whose host is gone falls back to the default, and the 201's
-      # model_warning (null when none) says so. A model it can't start on is
-      # 400 invalid_model, nothing archived.
+      # model_warning (null when none) says so. Its opener is the text the
+      # page prefills (SessionChain.opener_for; null: the page's constant).
+      # A model it can't start on is 400 invalid_model, nothing archived.
       # 409 continued (with next_id, the link that continues it already: the
       # page opens that one), open_children (ids), folder_gone, busy, scratch
       # or owned_by_tui.
@@ -707,7 +712,8 @@ module Samagotchi
         [session.continues, session.id, *moved].each { |sid| @hub&.touch(sid) }
         record_history(body, prompt) if !idle && PromptHistory.shell_line?(prompt.to_s.strip)
         json_response(201, session_to_json(session).merge(bridge_port: port, moved: moved,
-                                                          model_warning: session.model_warning))
+                                                          model_warning: session.model_warning,
+                                                          opener: session.opener))
       end
 
       # SessionManager.continue_session, its refusals as responses: [session,
@@ -1006,6 +1012,24 @@ module Samagotchi
         html || "<pre>#{CGI.escapeHTML(body)}</pre>"
       end
 
+      # POST /api/render {text}: the page's markdown read for a text it
+      # already shows (the stage's asking text, a resolved question card's
+      # reply), session-free. {html: nil} when markdown is off or
+      # commonmarker is missing: the page keeps the raw text.
+      def handle_render(req)
+        too_large = error_response(413, "too_large", "a text to render may be up to #{MAX_RENDER_BYTES / 1024} KB")
+        return too_large if req.content_length.to_i > MAX_RENDER_BYTES
+
+        raw = request_body(req, MAX_RENDER_BYTES + 1).to_s
+        return too_large if raw.bytesize > MAX_RENDER_BYTES
+
+        body = parse_json(raw)
+        return error_response(400, "invalid_json", "give {text}") unless body.is_a?(Hash) && body["text"].is_a?(String)
+
+        html = @markdown_renderer.render(body["text"]) if @markdown_renderer.available?
+        json_response(200, { html: html })
+      end
+
       def handle_question_answer(req, id)
         session = @session_class.load(id, state_dir: default_state_dir) rescue nil
         return error_response(404, "not_found", "Session not found: #{id}") unless session

data/lib/samagotchi/web/public/app.js

@@ -20,6 +20,7 @@ import {
   getContext,
   detachContext,
   addContext,
+  renderText,
 } from "./data.js";
 import { createContextChips } from "./context_chips.js";
 import {
@@ -45,7 +46,7 @@ import { createBubbles, hintEl, outputBubbleTemplate, setBubbleDelivery } from "
 import { createCardsPlace } from "./cards_place.js";
 import { createStageView, FOLD_MS } from "./stage_view.js";
 import { reducedMotion, STAGE_GAP } from "./stage_frame.js";
-import { CONTINUE_OPENER, chainNeighbours, isOpener, continueRefusal, continuedText, freshLink, openChildrenTemplate } from "./chains.js";
+import { chainNeighbours, continueRefusal, continuedText, freshLink, openChildrenTemplate, openerText, openTitle } from "./chains.js";
 import { createTaskStopper } from "./task_stop.js";
 import { appendQuote } from "./annotations.js";
 import { parsePresets } from "./annotate_presets.js";
@@ -231,8 +232,25 @@ const viewArgs = {
   taskStop: createTaskStopper({ sessionId: () => selected, features: () => current.workerFeatures }),
 };
 const turnDom = view === "stage"
-  ? createStageView({ ...viewArgs, isNearBottom: () => atHistoryEnd(), dockEl: $("#dock"), centerEl: $("#center"), composerEl })
+  ? createStageView({
+    ...viewArgs, isNearBottom: () => atHistoryEnd(), dockEl: $("#dock"), centerEl: $("#center"), composerEl,
+    renderMarkdown, linkRefs: linkRefsIn,
+  })
   : createTurnView(viewArgs);
+// A text the page already shows as its markdown HTML (POST /api/render,
+// sanitised there), or null: markdown off here (no request), or a failed
+// read (the raw text stays).
+function renderMarkdown(text) {
+  if (pageCapabilities.display !== true) return Promise.resolve(null);
+  return renderText(text)
+    .then((d) => (typeof d?.html === "string" && d.html ? d.html : null))
+    .catch(() => null);
+}
+// The `path:line` refs in one rendered text (the stage's asking slot, a
+// kept reply), as linkTextRefs links the answers'.
+function linkRefsIn(el) {
+  linkRefs(el, touchedFiles(turnRoots()), current.dir);
+}
 // Where a running turn's rows can be: the history, and the stage while it
 // holds a turn (lookups by id, copy, annotate, card actions).
 function turnRoots() {
@@ -293,6 +311,8 @@ const questionCards = createQuestionCards({
   scrollToEnd: () => { historyEl.scrollTop = historyEl.scrollHeight; },
   removeHintIfEmpty: () => removeHintIfEmpty(),
   askingText: () => turnDom.askingText(),
+  renderMarkdown,
+  linkRefs: linkRefsIn,
 });
 // The history's bubbles (bubbles.js): output, end lines, every client's
 // prompts, the recap, warnings and notices, command and note bubbles.
@@ -1107,12 +1127,12 @@ function updateInfoBar() {
 
 // The open session's title, once on screen (session_title.js): its strip
 // card says it when the strip is shown and has one; else the top bar. The
-// browser tab names it too. It follows the card's: a chain link opened with
-// the opener reads its chain's first link's title (cardTitle).
+// browser tab names it too. It follows the card's (openTitle): a chain link
+// reads its card's title (cardTitle), whatever opener it was sent.
 function updateSessionTitle() {
   const shown = selected ? lists.sessionsById().get(selected) : null;
   const first = current.firstPreview || "";
-  const raw = !selected ? "" : (shown && isOpener(first) ? lists.cardTitle(shown) : first);
+  const raw = !selected ? "" : openTitle({ shown, first, cardTitle: (s) => lists.cardTitle(s) });
   const title = raw === "\u2014" ? "" : raw; // "—": no first message yet
   const text = topBarTitle({
     title,
@@ -1888,7 +1908,8 @@ $("#infoArchiveBtn").addEventListener("click", () => {
 // ── Continue (session chains) ───────────────────────────────────────────────
 // Continue → starts the next link of the open session's chain (the server
 // waits up to 30 s for its recap, archives it, starts the new one with the
-// recap as a note) and opens it with the opener in the composer, not sent.
+// recap as a note) and opens it with the opener in the composer, not sent
+// (fillOpener: the previous link's own first message when it continues one).
 // A link continued already opens that next link; its open delegates move
 // to the new link (the toast counts them); a refusal for open delegates
 // that can't move names them, each a link.
@@ -1914,7 +1935,7 @@ async function continueSelected() {
       return;
     }
     await select(next);
-    if (selected === next) fillOpener();
+    if (selected === next) fillOpener(created);
     showToast(continuedText(id, created), null, { sticky });
   } catch (e) {
     const refusal = continueRefusal(e, allSessions);
@@ -1932,10 +1953,12 @@ async function continueSelected() {
   }
 }
 
-// The new link's composer: the opener, unless a draft is there (it stays).
-function fillOpener() {
+// The new link's composer: the opener (openerText: the previous link's own,
+// else the constant), unless a draft is there (it stays). +created+: the
+// continue's 201.
+function fillOpener(created) {
   if (promptEl.value.trim() || chips.length) return;
-  promptEl.value = CONTINUE_OPENER;
+  promptEl.value = openerText(created);
   fitPrompt();
   promptEl.focus();
   promptEl.setSelectionRange(promptEl.value.length, promptEl.value.length);

data/lib/samagotchi/web/public/bubbles.js

@@ -9,6 +9,7 @@ import { BADGES, elementOf, noteBubbleTemplate, stateBadgeTemplate, steerRowTemp
 import { thumbsTemplate } from "./images.js";
 import { appendAboveLiveTiming, STOPPED_LINE_CLASS } from "./timing.js";
 import { keepFollowing } from "./scroll.js";
+import { linkedLine } from "./notice_links.js";
 import { hookNoticeLabel, isReportClient, promptOps } from "./turn_events.js";
 import { drawCommandBubble } from "./commands.js";
 
@@ -53,10 +54,11 @@ export function guardrailWarningTemplate(text, label = "guardrails") {
 
 // A hook's line to the user (event[:notify]), in the warning colour for
 // level warn; +cls+ adds a kind's class (llm_context_edited's). +bubble+:
-// one of the history's own, else a row of a turn's step.
+// one of the history's own, else a row of a turn's step. Its http(s) URLs
+// are links (notice_links.js).
 export function hookNoticeTemplate({ line, level = null, cls = null, title = null }, { bubble = true } = {}) {
   const klass = (bubble ? "bubble hook-notice" : "hook-notice") + (level === "warn" ? " warn" : "") + (cls ? ` ${cls}` : "");
-  return html`<div class=${klass} title=${title || nothing}>${line}</div>`;
+  return html`<div class=${klass} title=${title || nothing}>${linkedLine(line)}</div>`;
 }
 
 // A hook notice's line: its own (a snapshot's notice), else "<hook>: text".

data/lib/samagotchi/web/public/chains.js

@@ -13,9 +13,18 @@ import { archivedBadge, rowBadgesTemplate, rowDotTemplate } from "./families_vie
 import { html, nothing } from "./vendor/lit-html.js";
 
 // The opener a new link's composer is filled with (never sent: the user
-// edits or sends it). The same for every chain.
+// edits or sends it) when the continue brings none of its own.
 export const CONTINUE_OPENER = "Continue where we left off.";
 
+// What a new link's composer is filled with: the continue's own opener
+// (+created+, the 201: the previous link's first typed message, when that
+// link continues one), else CONTINUE_OPENER. So whatever the user sent on
+// the last link comes back on the next one.
+export function openerText(created) {
+  const own = created?.opener;
+  return typeof own === "string" && own.trim() ? own : CONTINUE_OPENER;
+}
+
 // Whether +text+ (a title or a first message) is the opener and nothing
 // else, trimmed: "Continue where we left off. Then fix X" is a title of its own.
 export function isOpener(text) {
@@ -41,6 +50,17 @@ export function chainTitle(s, byId) {
   return isOpener(at.first_preview || at.last_prompt) ? own : previewForCard(at);
 }
 
+// The open session's title (app.js updateSessionTitle: the top bar and the
+// tab) from +first+, its first message: it follows its card. A chain link
+// (+shown+, its summary, has continues) reads +cardTitle+(shown) whatever
+// its first message: a web link inherits its chain's title, and its first
+// message is an opener (the constant or the user's own). Else +first+,
+// unless it is the opener. +shown+ null: not listed yet, +first+.
+export function openTitle({ shown, first, cardTitle }) {
+  if (shown && (shown.continues || isOpener(first))) return cardTitle(shown);
+  return first;
+}
+
 const createdMs = (s) => {
   const ms = Date.parse(s?.created_at || "");
   return Number.isNaN(ms) ? 0 : ms;

data/lib/samagotchi/web/public/data.js

@@ -120,6 +120,15 @@ export function sendCommand(id, line, { clientId, card = false, ...opts } = {})
   });
 }
 
+// A text's markdown as sanitised HTML ({ html }; null with markdown off).
+export function renderText(text, opts = {}) {
+  return api("/api/render", {
+    method: "POST",
+    body: JSON.stringify({ text }),
+    ...opts,
+  });
+}
+
 export function cancelTurn(id, opts = {}) {
   return api(`/api/sessions/${id}/cancel`, {
     method: "POST",

data/lib/samagotchi/web/public/index.html

@@ -326,6 +326,22 @@ button.task-stop:hover:not(:disabled){background:var(--danger-bg-dim);filter:non
 .bubble.question>summary .question-said{max-width:72ch;margin:2px 0 1px 1.05em;font-size:12.5px;font-weight:400;line-height:1.5;color:var(--text-muted);white-space:normal;overflow-wrap:anywhere;display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:2;line-clamp:2;overflow:hidden}
 .bubble.question[open]>summary .question-said{display:none}
 .question-said-full{margin:4px 0 6px;font-size:13px;line-height:1.55;color:var(--text-muted);white-space:pre-wrap;overflow-wrap:anywhere}
+/* Its markdown once the card is first opened (question_cards.js renderSaidOnOpen), as compact as the stage's. */
+.question-said-full.markdown{white-space:normal}
+.question-said-full.markdown :is(h1,h2,h3,h4,h5,h6){font-size:13.5px;font-weight:600;line-height:1.4;margin:8px 0 2px;color:var(--text-2)}
+.question-said-full.markdown :is(p,ul,ol,blockquote,table,pre){margin:0 0 6px}
+.question-said-full.markdown>:first-child{margin-top:0}
+.question-said-full.markdown>:last-child{margin-bottom:0}
+.question-said-full.markdown :is(ul,ol){padding-left:1.3em}
+.question-said-full.markdown li>:is(ul,ol){margin:0}
+.question-said-full.markdown hr{border:0;border-top:1px solid var(--border);margin:8px 0}
+.question-said-full.markdown blockquote{border-left:3px solid var(--border-strong);padding-left:10px}
+.question-said-full.markdown code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.88em}
+.question-said-full.markdown :not(pre)>code{background:var(--bg-inset);border:1px solid var(--border);border-radius:4px;padding:0 4px}
+.question-said-full.markdown pre{overflow:auto;padding:6px 8px;border-radius:6px;background:var(--bg-inset);border:1px solid var(--border);font-size:12px;line-height:1.45;white-space:pre}
+.question-said-full.markdown table{border-collapse:collapse;display:block;max-width:100%;overflow:auto}
+.question-said-full.markdown :is(th,td){border:1px solid var(--border-strong);padding:3px 7px;font-size:12.5px}
+.question-said-full.markdown th{background:var(--bg-inset);font-weight:600}
 .bubble.command{border-left:3px solid var(--text-faint);background:var(--bg-panel);font-size:13px}
 .bubble.note{border-left:3px dotted var(--text-faint);background:transparent;font-size:12px;color:var(--text-muted);opacity:.85}
 .note-line{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;color:var(--text-faint);margin-bottom:2px}
@@ -438,6 +454,8 @@ button.task-stop:hover:not(:disabled){background:var(--danger-bg-dim);filter:non
 .gen .activity-body>.hook-notice:first-child{border-top:none}
 .gen .hook-notice.warn{border-left-color:var(--warn);color:var(--warn-text)}
 .hook-notice.llm-context{border-left-style:dashed;cursor:help}
+.hook-notice a{color:inherit;text-decoration:underline;text-underline-offset:2px}
+.hook-notice a:hover{text-decoration-thickness:2px}
 /* A plugin's steer (a nudge into the running turn): a row of its step, or a bubble; its text collapsed. */
 .steer-row{font-size:13px;color:var(--text-3);border-left:2px solid var(--accent-border)}
 .steer-row>summary{cursor:pointer;list-style:none;font-style:italic}
@@ -708,9 +726,28 @@ body.stage-view .turn-stage{position:absolute;left:0;right:0;bottom:100%;margin-
 .ts-headline.thinking{font-size:13.5px;font-style:italic;color:var(--text-muted)}
 .ts-think-tag{font-style:normal;font-size:12.5px;color:var(--think-text);margin-right:6px}
 .ts-headline.fresh{animation:ts-fade .3s ease}
-/* While a question or approval waits: the whole reply that asked it, raw as a closed step's text, in the headline's
-   place; capped so the card keeps its room, read from the top (stage_view.js drawAsking). */
+/* While a question or approval waits: the whole reply that asked it, in the headline's place; raw as a closed step's
+   text, then its markdown when web.markdown is on (.markdown, stage_slots.js drawAsking); capped so the card keeps
+   its room, read from the top. */
 .ts-asking{max-height:calc(var(--stage-max,60vh) * .35);overflow:auto;scrollbar-width:thin;white-space:pre-wrap;overflow-wrap:anywhere;font-size:14px;line-height:1.55;color:var(--narr);border-left:2px solid var(--border-strong);padding-left:10px}
+/* Its markdown, compact: about the raw text's metrics, so the swap barely moves the slot. */
+.ts-asking.markdown{white-space:normal}
+.ts-asking.markdown :is(h1,h2,h3,h4,h5,h6){font-size:14.5px;font-weight:600;line-height:1.4;margin:8px 0 2px;color:var(--text-bright)}
+.ts-asking.markdown :is(h4,h5,h6){font-size:14px;color:var(--text-2)}
+.ts-asking.markdown :is(p,ul,ol,blockquote,table,pre){margin:0 0 6px}
+.ts-asking.markdown>:first-child{margin-top:0}
+.ts-asking.markdown>:last-child{margin-bottom:0}
+.ts-asking.markdown :is(ul,ol){padding-left:1.3em}
+.ts-asking.markdown li>:is(ul,ol){margin:0}
+.ts-asking.markdown strong{color:var(--text-bright)}
+.ts-asking.markdown hr{border:0;border-top:1px solid var(--border);margin:8px 0}
+.ts-asking.markdown blockquote{border-left:3px solid var(--border-strong);padding-left:10px;color:var(--text-muted)}
+.ts-asking.markdown code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.88em}
+.ts-asking.markdown :not(pre)>code{background:var(--bg-inset);border:1px solid var(--border);border-radius:4px;padding:0 4px;color:var(--text)}
+.ts-asking.markdown pre{overflow:auto;padding:6px 8px;border-radius:6px;background:var(--bg-inset);border:1px solid var(--border);font-size:12.5px;line-height:1.45;white-space:pre}
+.ts-asking.markdown table{border-collapse:collapse;display:block;max-width:100%;overflow:auto}
+.ts-asking.markdown :is(th,td){border:1px solid var(--border-strong);padding:3px 7px;font-size:13px}
+.ts-asking.markdown th{background:var(--bg-inset);font-weight:600}
 .turn-stage.asking .ts-headline{display:none}
 @keyframes ts-fade{from{opacity:.35}}
 .ts-now{height:var(--ts-now-h);display:flex;align-items:center;gap:8px;min-width:0;padding:0 9px;border-radius:8px;background:var(--accent-tint);font-size:13px}

data/lib/samagotchi/web/public/notice_links.js

@@ -0,0 +1,55 @@
+// A hook notice line's http(s) URLs as links (a source-links `sources:`
+// line with markdown off): the terminals need the line as text, the web can
+// click it. Only http(s) URLs that refs.js httpUrl accepts (no userinfo, not
+// over-long) are linked; everything else stays text, escaped by lit (no
+// unsafeHTML). A link opens in a new tab: refs.js installRefClicks leaves a
+// plain <a> (no data-ref-kind) to the browser.
+import { html } from "./vendor/lit-html.js";
+import { httpUrl } from "./refs.js";
+
+// A candidate: the scheme, then anything up to a space or an angle bracket
+// (`<https://x/a>` links https://x/a).
+const CANDIDATE = /https?:\/\/[^\s<>]+/gi;
+const TRAILING = /[.,;:!?'"]+$/;
+
+// +url+ cut at its first ) that no ( inside it balances: `(https://x/a)`
+// ends before the ), `…/Foo_(bar)` keeps it (source_links.rb trim_url_end).
+function cutUnbalancedParen(url) {
+  let depth = 0;
+  for (let i = 0; i < url.length; i++) {
+    if (url[i] === "(") depth++;
+    else if (url[i] === ")") {
+      if (depth === 0) return url.slice(0, i);
+      depth--;
+    }
+  }
+  return url;
+}
+
+// A candidate without what ends the sentence around it: trailing
+// punctuation (the sources line's ", "), an unbalanced ), a ] no [ opens.
+function trimUrl(candidate) {
+  let url = cutUnbalancedParen(candidate.replace(TRAILING, ""));
+  if (url.endsWith("]") && !url.includes("[")) url = url.replace(/\]+$/, "");
+  return url.replace(TRAILING, "");
+}
+
+// +text+ with each http(s) URL a link (a lit template's array of strings
+// and <a> parts); +text+ itself when it links nothing, so a URL-less line
+// renders exactly as before.
+export function linkedLine(text) {
+  if (typeof text !== "string" || !text) return text;
+  const parts = [];
+  let last = 0;
+  for (const match of text.matchAll(CANDIDATE)) {
+    const shown = trimUrl(match[0]);
+    const href = httpUrl(shown);
+    if (!href) continue;
+    if (match.index > last) parts.push(text.slice(last, match.index));
+    parts.push(html`<a href=${href} target="_blank" rel="noopener noreferrer">${shown}</a>`);
+    last = match.index + shown.length;
+  }
+  if (!parts.length) return text;
+  if (last < text.length) parts.push(text.slice(last));
+  return parts;
+}

data/lib/samagotchi/web/public/plain_line.js

@@ -0,0 +1,55 @@
+// Markdown out of the web UI's plain one-line places: the stage's live
+// headline (stage_model.js), a closed step's title (turn_model.js
+// genLabel), an answered question card's kept-reply line (question_cards.js).
+// Pure, no DOM, so `node --test` covers it; the places that render markdown
+// (step bodies, the card's open copy) keep the text as written.
+
+// One line as plain text: the markdown a reply carries (headings, quotes,
+// bullets and item numbers, table pipes, emphasis, code ticks, links) goes,
+// and a line that is only syntax (a code fence, a table's separator row, a
+// rule) is empty. A small pass, no renderer: a one-line
+// preview only needs to read well, and an unclosed "**" mid-stream goes too.
+export function plainLine(line) {
+  let s = String(line ?? "").trim();
+  if (/^(```|~~~)/.test(s)) return "";
+  if (/^\|?\s*:?-{2,}:?\s*(\|\s*:?-{2,}:?\s*)*\|?$/.test(s)) return "";
+  if (/^([-*_])(\s*\1){2,}$/.test(s)) return "";
+  s = s.replace(/^(>\s*)+/, "").replace(/^#{1,6}\s+/, "").replace(/^([-*+]|\d{1,9}[.)])\s+(\[[ xX]\]\s+)?/, "");
+  // A table row: a pipe at either end (a pipe mid-prose, "a || b", stays).
+  if (/^\||\|$/.test(s)) {
+    s = s.replace(/^\|/, "").replace(/\|$/, "").split("|").map((c) => c.trim()).filter(Boolean).join(" · ");
+  }
+  // Code spans keep their text as is; an unclosed tick just goes.
+  const code = [];
+  s = s.replace(/`+([^`]+)`+/g, (_, c) => `\u0000${code.push(c) - 1}\u0000`);
+  s = s
+    .replace(/!\[([^\]]*)\]\([^)]*\)?/g, "$1")
+    .replace(/\[([^\]]*)\]\([^)]*\)?/g, "$1")
+    .replace(/<(https?:\/\/[^>\s]+)>/g, "$1")
+    .replace(/`+/g, "")
+    .replace(/(^|[^\w])__(?=\S)(.*?\S)__(?=$|[^\w])/g, "$1$2")
+    .replace(/(\*\*|~~)/g, "")
+    .replace(/(^|[^\w*])\*(?=\S)([^*]*?\S)\*(?=$|[^\w*])/g, "$1$2")
+    .replace(/(^|[^\w])_(?=\S)([^_]*?\S)_(?=$|[^\w])/g, "$1$2")
+    .replace(/\u0000(\d+)\u0000/g, (_, i) => code[Number(i)]);
+  return s.replace(/\s+/g, " ").trim();
+}
+
+// A reply as one plain line (each of its lines plainLine's), for a preview
+// that clamps it: blank and syntax-only lines go; the lines inside a code
+// fence stay as written (code's "*" and "_" are not emphasis), the fences
+// themselves go. A line that ends a sentence (or a clause: ":", ",") runs on
+// with a space, one that doesn't (a heading, an item) with " · ", so
+// "## Plan" and the line under it don't read as one sentence.
+export function plainText(text) {
+  let out = "";
+  let fenced = false;
+  for (const raw of String(text ?? "").split("\n")) {
+    if (/^\s*(```|~~~)/.test(raw)) { fenced = !fenced; continue; }
+    const line = fenced ? raw.trim() : plainLine(raw);
+    if (!line) continue;
+    if (out) out += /[.!?…:;,]["')\]]*$/.test(out) ? " " : " · ";
+    out += line;
+  }
+  return out;
+}