@mafdet/cli 0.4.4 → 0.4.5

package/dist/commands/sessions.js

@@ -63,7 +63,13 @@ async function run(argv, io) {
     return ExitCode.Usage;
 }
 function list(argv, io, root) {
-    const { format } = parseFormatFlags(argv);
+    const { format, rest } = parseFormatFlags(argv);
+    // R-7 · `list` was the one subcommand that threw its leftovers away, so
+    // `sessions list --dry-run` exited 0 and listed everything.
+    if (rest.length > 0) {
+        io.stderr(`mafdet sessions list: unexpected argument '${rest[0]}'\n${USAGE}`);
+        return ExitCode.Usage;
+    }
     const { sessions } = loadIndex(root);
     if (format === "json") {
         io.stdout(renderJson({
@@ -89,7 +95,12 @@ function list(argv, io, root) {
         { header: "REQUESTS", value: (s) => `${s.model_requests}` },
         {
             header: "EST. COST",
-            value: (s) => formatUsd(s.estimated_charge_micro_usd),
+            // R-6 · An unpriced session is not a free one. `$0.00` in the main
+            // column is the claim that matters; a note on stderr cannot correct
+            // a number the user has already read.
+            value: (s) => s.unpriced_requests
+                ? "unknown"
+                : formatUsd(s.estimated_charge_micro_usd),
         },
         { header: "UPDATED", value: (s) => s.updated_at },
     ]));
@@ -135,12 +146,20 @@ function show(argv, io, root) {
         ["model", safe(m.model_id, io)],
         ["workspace", safe(m.workspace, io)],
         ["mode", safe(m.mode, io)],
-        ["created", m.created_at],
-        ["updated", m.updated_at],
+        // R-4 · Timestamps come off disk like everything else here; a file that
+        // has been edited can carry a sequence in any field, not only the
+        // free-text ones.
+        ["created", safe(m.created_at, io)],
+        ["updated", safe(m.updated_at, io)],
         ["messages", `${m.message_count}`],
         ["model requests", `${m.model_requests}`],
         ["tokens", `${m.prompt_tokens} in / ${m.completion_tokens} out`],
-        ["estimated cost", formatUsd(m.estimated_charge_micro_usd)],
+        [
+            "estimated cost",
+            m.unpriced_requests
+                ? `${formatUsd(m.estimated_charge_micro_usd)} + ${m.unpriced_requests} unpriced`
+                : formatUsd(m.estimated_charge_micro_usd),
+        ],
     ]));
     if (session.truncatedTail) {
         // Worth saying plainly: the user should know a crash cost them the tail.
@@ -322,6 +341,8 @@ async function usage(argv, io, root) {
             completion_tokens: totals.completionTokens,
             // Strings, so no parser turns a charge into a float.
             estimated_charge_micro_usd: totals.estimatedMicroUsd.toString(),
+            // R-6 · Without this a consumer reads the total above as complete.
+            unpriced_requests: totals.unpricedRequests,
             settled_charge_micro_usd: totals.settledMicroUsd.toString(),
             by_settlement: totals.bySettlement,
             by_model: totals.byModel.map((m) => ({
@@ -348,7 +369,12 @@ async function usage(argv, io, root) {
             `${totals.toolRuns}${totals.toolRunsRefused > 0 ? ` (${totals.toolRunsRefused} refused)` : ""}`,
         ],
         ["tokens", `${totals.promptTokens} in / ${totals.completionTokens} out`],
-        ["local estimate", formatUsd(totals.estimatedMicroUsd.toString())],
+        [
+            "local estimate",
+            totals.unpricedRequests > 0
+                ? `${formatUsd(totals.estimatedMicroUsd.toString())} + ${totals.unpricedRequests} unpriced`
+                : formatUsd(totals.estimatedMicroUsd.toString()),
+        ],
     ];
     if (totals.bySettlement.settled > 0) {
         rows.push([
@@ -366,7 +392,7 @@ async function usage(argv, io, root) {
     if (totals.byModel.length > 1) {
         io.stdout("\nBy model\n");
         io.stdout(renderTable(totals.byModel, [
-            { header: "MODEL", value: (m) => m.modelId },
+            { header: "MODEL", value: (m) => safe(m.modelId, io) },
             { header: "REQUESTS", value: (m) => `${m.modelRequests}` },
             {
                 header: "ESTIMATE",
@@ -378,7 +404,7 @@ async function usage(argv, io, root) {
         // Split per key so two accounts' spending is never presented as one.
         io.stdout("\nBy API key\n");
         io.stdout(renderTable(totals.byKey, [
-            { header: "KEY", value: (k) => k.apiKeyRef },
+            { header: "KEY", value: (k) => safe(k.apiKeyRef, io) },
             { header: "REQUESTS", value: (k) => `${k.modelRequests}` },
             {
                 header: "ESTIMATE",

package/dist/sessions/index-file.d.ts

@@ -7,6 +7,8 @@ export interface IndexEntry {
     readonly workspace: string;
     readonly model_requests: number;
     readonly estimated_charge_micro_usd: string;
+    /** R-6 · Requests the estimate above does not include; see F-012. */
+    readonly unpriced_requests?: number;
 }
 export interface SessionIndex {
     readonly schema_version: number;

package/dist/sessions/index-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index-file.d.ts","sourceRoot":"","sources":["../../src/sessions/index-file.ts"],"names":[],"mappings":"AAqBA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAKpB,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;CAC7C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAC;CAC1C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAmBD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAoBvD;AAED,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAiBlE;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAapD;AAwBD,yEAAyE;AACzE,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,eAAe,GACxB,YAAY,CAUd;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,YAAY,CAed;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBnD"}
+{"version":3,"file":"index-file.d.ts","sourceRoot":"","sources":["../../src/sessions/index-file.ts"],"names":[],"mappings":"AAqBA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAKpB,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,qEAAqE;IACrE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAC;CAC1C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAsBD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAoBvD;AAED,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAiBlE;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAapD;AAwBD,yEAAyE;AACzE,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,eAAe,GACxB,YAAY,CAUd;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,YAAY,CAed;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBnD"}

package/dist/sessions/index-file.js

@@ -25,6 +25,9 @@ function entryOf(metadata) {
         workspace: metadata.workspace,
         model_requests: metadata.model_requests,
         estimated_charge_micro_usd: metadata.estimated_charge_micro_usd,
+        ...(metadata.unpriced_requests
+            ? { unpriced_requests: metadata.unpriced_requests }
+            : {}),
     };
 }
 /** Newest first, which is the order a session list wants. */

package/dist/sessions/open.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"open.d.ts","sourceRoot":"","sources":["../../src/sessions/open.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAEL,oBAAoB,EAGpB,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAKrB,OAAO,EAAE,aAAa,EAAe,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;CACpD;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxD;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;CAC/D,CAAC;AAEN,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,UAAU,CAqFnE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,GAC9C,MAAM,CAwBR"}
+{"version":3,"file":"open.d.ts","sourceRoot":"","sources":["../../src/sessions/open.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAEL,oBAAoB,EAGpB,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAKrB,OAAO,EAAE,aAAa,EAAe,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;CACpD;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxD;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;CAC/D,CAAC;AAEN,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,UAAU,CAqFnE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,GAC9C,MAAM,CAyBR"}

package/dist/sessions/open.js

@@ -6,6 +6,7 @@
 // and the checks are all re-derived from the key in use *now*, never from
 // what the session was recorded with.
 import { existsSync } from "node:fs";
+import { stripAnsi } from "../agent/command-policy.js";
 import { acquireSessionLock, SessionLockedError, } from "./lock.js";
 import { describeBlocker, permissionsForResume, rebuildContext, resumeBlockers, } from "./resume.js";
 import { InvalidSessionIdError, resolveSessionDirectory, } from "./session-id.js";
@@ -102,8 +103,9 @@ export function openForResume(input) {
  * know that will be surprised by the bill rather than by the feature.
  */
 export function describeResume(result) {
+    // R-4 · Title and model come off disk and this is drawn on a terminal.
     const lines = [
-        `resuming "${result.metadata.title}" (${result.metadata.model_id})`,
+        `resuming "${stripAnsi(result.metadata.title)}" (${stripAnsi(result.metadata.model_id)})`,
     ];
     if (result.toolRunsSummarised > 0) {
         lines.push(`  ${result.toolRunsSummarised} earlier tool run(s) are summarised, not repeated`);

package/dist/sessions/resume.d.ts

@@ -50,6 +50,7 @@ export interface ResumeCheckInput {
  * with a key that could call a model says nothing about whether this key can.
  */
 export declare function resumeBlockers(input: ResumeCheckInput): readonly ResumeBlocker[];
+/** R-4 · The values quoted here are recorded ones, and this is shown on a terminal. */
 export declare function describeBlocker(blocker: ResumeBlocker): string;
 /**
  * What a resumed run starts with, stated so the caller cannot forget.

package/dist/sessions/resume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../src/sessions/resume.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACjC,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAID;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAwClE;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,8CAA8C;IAC9C,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,gBAAgB,GACtB,SAAS,aAAa,EAAE,CAa1B;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAS9D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC;CAChC;AAED,wBAAgB,oBAAoB,CAClC,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,kBAAkB,CAQpB"}
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../src/sessions/resume.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACjC,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAID;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAwClE;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,8CAA8C;IAC9C,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,gBAAgB,GACtB,SAAS,aAAa,EAAE,CAa1B;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAS9D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC;CAChC;AAED,wBAAgB,oBAAoB,CAClC,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,kBAAkB,CAQpB"}

package/dist/sessions/resume.js

@@ -9,6 +9,7 @@
 // what was said. A replayed `tool_calls` block would invite the model to
 // continue a plan the user approved yesterday, in a workspace that has since
 // changed, with permissions this run may not have.
+import { stripAnsi } from "../agent/command-policy.js";
 const DEFAULT_MAX_MESSAGES = 40;
 /**
  * Rebuild the messages to send, from what was stored.
@@ -79,14 +80,15 @@ export function resumeBlockers(input) {
     }
     return blockers;
 }
+/** R-4 · The values quoted here are recorded ones, and this is shown on a terminal. */
 export function describeBlocker(blocker) {
     switch (blocker.kind) {
         case "model-unavailable":
-            return `${blocker.modelId} is not callable with the key you are using now - choose another model to continue`;
+            return `${stripAnsi(blocker.modelId)} is not callable with the key you are using now - choose another model to continue`;
         case "model-not-agent-capable":
-            return `${blocker.modelId} has no verified tool calling now, so the agent cannot drive it - choose another model`;
+            return `${stripAnsi(blocker.modelId)} has no verified tool calling now, so the agent cannot drive it - choose another model`;
         case "workspace-missing":
-            return `${blocker.workspace} no longer exists - you can read this conversation, or continue it in another directory`;
+            return `${stripAnsi(blocker.workspace)} no longer exists - you can read this conversation, or continue it in another directory`;
     }
 }
 export function permissionsForResume(declaredThisRun) {

package/dist/tui/agent-surface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-surface.d.ts","sourceRoot":"","sources":["../../src/tui/agent-surface.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EAAW,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,IAAI,CACpB,cAAc,EACd,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAC1D,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;IACnD,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC,yDAAyD;IACzD,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,UAAU,CAAC;CAClC;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA+B7B;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,cAAc,CAAC,CA4EzB;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,oBAAoB,GACjC,MAAM,CAgBR"}
+{"version":3,"file":"agent-surface.d.ts","sourceRoot":"","sources":["../../src/tui/agent-surface.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EAAW,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGhE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,IAAI,CACpB,cAAc,EACd,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAC1D,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;IACnD,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC,yDAAyD;IACzD,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,UAAU,CAAC;CAClC;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA+B7B;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,cAAc,CAAC,CAoFzB;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,oBAAoB,GACjC,MAAM,CAgBR"}

package/dist/tui/agent-surface.js

@@ -72,8 +72,17 @@ export async function runAgentSurface(options) {
             // Said out loud: from here the model can no longer see those results,
             // which is the sort of thing that otherwise looks like it forgot.
             // The saved transcript still has them - only what we send got shorter.
+            // R-2 · Say what was actually dropped. A conversation with no tools in
+            // it drops turns and zero exchanges, and this used to report "0 earlier
+            // tool exchanges" - a true statement that described nothing.
+            const parts = [];
+            if (event.exchanges > 0) {
+                parts.push(`${event.exchanges} earlier tool exchange(s)`);
+            }
+            if (event.turns > 0)
+                parts.push(`${event.turns} earlier turn(s)`);
             options.stdout.write(dim(`  context near the limit (${event.promptTokens} tokens) - dropped ` +
-                `${event.exchanges} earlier tool exchange(s) from what is sent\n`));
+                `${parts.join(" and ") || "nothing"} from what is sent\n`));
         }
     };
     const sessionOptions = {

package/dist/tui/app.d.ts

@@ -1,6 +1,8 @@
 import { ExitCode } from "../output/exit-codes.js";
 import type { CommandIo } from "../commands/runtime.js";
+import { type TerminalCapabilities } from "./theme.js";
 import { type GuardHost } from "./terminal.js";
+import { type WidgetIo } from "./widgets.js";
 export interface TuiOptions {
     readonly version: string;
     readonly workspace: string;
@@ -22,4 +24,16 @@ export interface TuiOptions {
     readonly argv: readonly string[];
 }
 export declare function runTui(options: TuiOptions): Promise<ExitCode>;
+interface ChooseOptions {
+    readonly io: WidgetIo;
+    readonly commandIo: CommandIo;
+    readonly apiKey: string;
+    readonly capabilities: TerminalCapabilities;
+    readonly stdout: {
+        write(text: string): unknown;
+    };
+}
+/** The model the whole precedence chain settles on: flag > env > project > user. */
+export declare function resolvedDefaultModel(options: ChooseOptions): string | undefined;
+export {};
 //# sourceMappingURL=app.d.ts.map

package/dist/tui/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/tui/app.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAcxD,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAiBrE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,GAAG;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACzE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgKnE"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/tui/app.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAYxD,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAerE,OAAO,EAAU,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,GAAG;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACzE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgLnE;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;CACnD;AAsBD,oFAAoF;AACpF,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,GACrB,MAAM,GAAG,SAAS,CAYpB"}

package/dist/tui/app.js

@@ -7,7 +7,7 @@
 import { existsSync } from "node:fs";
 import { ExitCode } from "../output/exit-codes.js";
 import { loadConfig } from "../config/load.js";
-import { loadCatalogue, saveDefaultModel } from "./adapters/models.js";
+import { loadCatalogue, saveDefaultModel, } from "./adapters/models.js";
 import { renderBanner } from "./banner.js";
 import { keyboard } from "./input.js";
 import { FORCED_EXIT_NOTICE, InterruptTracker } from "./interrupt.js";
@@ -110,18 +110,21 @@ export async function runTui(options) {
             options.stdout.write("commands that work without an interactive session.\n");
             return ExitCode.Cancelled;
         }
-        const chosen = await chooseModel({
+        const chooseOptions = {
             io,
             commandIo: options.commandIo,
             apiKey: auth.apiKey,
             capabilities,
             stdout: options.stdout,
-        });
-        if (chosen === undefined)
+        };
+        const catalogue = await loadModels(chooseOptions);
+        if (catalogue === undefined)
             return ExitCode.Cancelled;
         options.stdout.write(renderWorkspaceSummary(inspectWorkspace(options.workspace, existsSync), capabilities));
-        // Offered only when there is something to resume, and only when the user
-        // did not already say what they wanted on the command line.
+        // R-9 · The session comes first. Resuming runs on the model the session
+        // recorded, so asking for one before knowing whether we are resuming made
+        // the user choose - and possibly save as their default - a model the run
+        // then ignored, after printing it in the banner as though it were in use.
         const sessionOptions = parseSessionOptions(options.argv);
         let resumeId = sessionOptions.resumeId;
         if (resumeId === undefined && !sessionOptions.noHistory) {
@@ -131,6 +134,17 @@ export async function runTui(options) {
             if (choice.kind === "resume")
                 resumeId = choice.sessionId;
         }
+        // Only a new conversation needs a model chosen for it.
+        const chosen = resumeId === undefined
+            ? await chooseModel(chooseOptions, catalogue)
+            : {
+                model: catalogue.agentReady[0] ?? catalogue.chat[0],
+                catalogue: catalogue.chat,
+                agentCapable: catalogue.agentReady.map((m) => m.modelId),
+            };
+        if (chosen === undefined || chosen.model === undefined) {
+            return ExitCode.Cancelled;
+        }
         return await startAgent({
             io,
             capabilities,
@@ -160,7 +174,7 @@ export async function runTui(options) {
     }
 }
 /** The model the whole precedence chain settles on: flag > env > project > user. */
-function resolvedDefaultModel(options) {
+export function resolvedDefaultModel(options) {
     try {
         return loadConfig({
             env: options.commandIo.env,
@@ -174,7 +188,15 @@ function resolvedDefaultModel(options) {
         return options.commandIo.env?.MAFDET_MODEL;
     }
 }
-async function chooseModel(options) {
+/**
+ * R-9 · Load and vet the catalogue, without choosing anything yet.
+ *
+ * Split from the picker because resuming does not need a choice: the session
+ * runs on the model it recorded. Asking for one first made the user pick - and
+ * possibly "remember" - a model that the run then ignored, and printed it in
+ * the banner as though it were in use.
+ */
+async function loadModels(options) {
     const { dim, bold } = palette(options.capabilities);
     options.stdout.write(dim("  loading the model catalogue...\n"));
     let catalogue;
@@ -202,13 +224,25 @@ async function chooseModel(options) {
         return undefined;
     }
     if (catalogue.agentReady.length === 0) {
+        // R-1 · Refuse, rather than warn and open the gate wider.
+        //
+        // This printed a notice and then offered *every* chat model, because
+        // `agentOnly` was `agentReady.length > 0` - so the one case with nothing
+        // safe to offer was the case that offered everything. The whole of this
+        // surface is an agent session, and `mafdet agent` already refuses an
+        // unverified model outright; the two must not disagree about admission.
         options.stdout.write(noAgentModelsNotice(catalogue.chat.length, options.capabilities));
+        return undefined;
     }
+    return catalogue;
+}
+async function chooseModel(options, catalogue) {
+    const { dim } = palette(options.capabilities);
     const picked = await pickModel(options.io, {
         models: catalogue.chat,
-        // Fail closed: offer only agent-capable models when any exist, so a
-        // model the agent cannot drive never becomes the session's default.
-        agentOnly: catalogue.agentReady.length > 0,
+        // Fail closed: only agent-capable models are ever offered here. The
+        // empty case is refused in loadModels, so this is never a way in.
+        agentOnly: true,
         // F-005 · The resolved model, not just the environment variable. After
         // "Remember X as your default?" wrote X to the user config, the next
         // launch still highlighted whatever MAFDET_MODEL said - usually nothing -

package/dist/tui/picker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"picker.d.ts","sourceRoot":"","sources":["../../src/tui/picker.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAW,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAW7C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,SAAS,CAC7B,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,UAAU,CAAC,CAiHrB;AA6BD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,oBAAoB,GACjC,MAAM,CAYR;AAED,iEAAiE;AACjE,YAAY,EAAE,GAAG,EAAE,CAAC"}
+{"version":3,"file":"picker.d.ts","sourceRoot":"","sources":["../../src/tui/picker.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAW,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAW7C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,SAAS,CAC7B,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,UAAU,CAAC,CAiHrB;AA6BD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,oBAAoB,GACjC,MAAM,CAaR;AAED,iEAAiE;AACjE,YAAY,EAAE,GAAG,EAAE,CAAC"}

package/dist/tui/picker.js

@@ -138,7 +138,8 @@ export function noAgentModelsNotice(chatCount, capabilities) {
     return ([
         "",
         bold("  No model on this key has verified tool calling."),
-        dim(`  ${chatCount} chat model(s) are available, so chat still works.`),
+        dim("  The agent needs one, so there is no session to open."),
+        dim(`  ${chatCount} chat model(s) still work: try 'mafdet chat'.`),
         dim("  Run 'mafdet models list --agent' to see which models qualify,"),
         dim("  or check the key's model permissions in the console."),
         "",

package/dist/tui/session-centre.d.ts

@@ -10,6 +10,11 @@ export type SessionChoice = {
     readonly kind: "cancelled";
 };
 export declare function recentSessions(root: string): readonly IndexEntry[];
+/**
+ * R-4 · Every string here came off disk, and this list is drawn on a terminal
+ * by definition. A title carrying an OSC sequence would retitle the window of
+ * anyone who merely opened the picker - before choosing anything.
+ */
 export declare function describeSession(entry: IndexEntry, capabilities: TerminalCapabilities): string;
 export declare function chooseSession(io: WidgetIo, root: string): Promise<SessionChoice>;
 //# sourceMappingURL=session-centre.d.ts.map

package/dist/tui/session-centre.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-centre.d.ts","sourceRoot":"","sources":["../../src/tui/session-centre.ts"],"names":[],"mappings":"AAOA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAW,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAU,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAKrD,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAEnC,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,UAAU,EAAE,CAQlE;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,UAAU,EACjB,YAAY,EAAE,oBAAoB,GACjC,MAAM,CAQR;AAOD,wBAAsB,aAAa,CACjC,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,aAAa,CAAC,CAoBxB"}
+{"version":3,"file":"session-centre.d.ts","sourceRoot":"","sources":["../../src/tui/session-centre.ts"],"names":[],"mappings":"AAQA,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAW,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAU,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAKrD,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAEnC,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,UAAU,EAAE,CAQlE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,UAAU,EACjB,YAAY,EAAE,oBAAoB,GACjC,MAAM,CAQR;AAOD,wBAAsB,aAAa,CACjC,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,aAAa,CAAC,CAoBxB"}

package/dist/tui/session-centre.js

@@ -3,6 +3,7 @@
 // Offered only when there is something to resume: a menu whose only entry is
 // "New conversation" is a keystroke charged for nothing. Everything here reads
 // the local index and sends no request, so browsing costs nothing (plan 20.2).
+import { stripAnsi } from "../agent/command-policy.js";
 import { formatUsd } from "../output/money.js";
 import { loadIndex } from "../sessions/index-file.js";
 import { palette } from "./theme.js";
@@ -19,10 +20,15 @@ export function recentSessions(root) {
         return [];
     }
 }
+/**
+ * R-4 · Every string here came off disk, and this list is drawn on a terminal
+ * by definition. A title carrying an OSC sequence would retitle the window of
+ * anyone who merely opened the picker - before choosing anything.
+ */
 export function describeSession(entry, capabilities) {
     const parts = [
-        entry.model_id,
-        workspaceName(entry.workspace),
+        stripAnsi(entry.model_id),
+        stripAnsi(workspaceName(entry.workspace)),
         `${entry.model_requests} request(s)`,
         `~${formatUsd(entry.estimated_charge_micro_usd)}`,
     ];
@@ -42,7 +48,7 @@ export async function chooseSession(io, root) {
             { value: "", label: "New conversation" },
             ...recent.map((entry) => ({
                 value: entry.session_id,
-                label: entry.title,
+                label: stripAnsi(entry.title),
                 detail: stripStyles(describeSession(entry, io.capabilities)),
             })),
         ],

package/dist/tui/start-agent.d.ts

@@ -73,5 +73,33 @@ export interface StartAgentOptions {
      */
     readonly getSignal?: () => AbortSignal | undefined;
 }
+export interface RunContextInput {
+    /** The metadata of a resumed session, or undefined for a new one. */
+    readonly resumed?: {
+        readonly workspace: string;
+        readonly model_id: string;
+    };
+    readonly currentWorkspace: string;
+    readonly currentModel: ResolvedModel;
+    readonly catalogue: readonly ResolvedModel[];
+}
+/**
+ * F-003 · Where a run happens and which model it uses.
+ *
+ * A resumed session runs where it was recorded, on the model it was recorded
+ * with. It used to run in the current directory on the model picked moments
+ * earlier - so continuing project A's conversation from project B pointed the
+ * agent at B's files, and with `--allow-write` that meant editing the wrong
+ * repository.
+ *
+ * Falls back to the current model only when the catalogue has no entry for the
+ * recorded one. That cannot happen on a run that got this far - an uncallable
+ * model is a blocker and blockers now stop the run - but the fallback keeps
+ * this total rather than throwing on a case the type system allows.
+ */
+export declare function effectiveRunContext(input: RunContextInput): {
+    workspace: string;
+    model: ResolvedModel;
+};
 export declare function startAgent(options: StartAgentOptions): Promise<ExitCode>;
 //# sourceMappingURL=start-agent.d.ts.map

package/dist/tui/start-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start-agent.d.ts","sourceRoot":"","sources":["../../src/tui/start-agent.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEtE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAenD,OAAO,EAAW,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED;;;;;GAKG;AACH,kEAAkE;AAClE,2DAA2D;AAC3D,eAAO,MAAM,SAAS,iHAQZ,CAAC;AASX,qBAAa,gBAAiB,SAAQ,KAAK;CAAG;AAE9C;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAgB/D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,CAiB3E;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,CAgB1E;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;CACpD;AAED,wBAAsB,UAAU,CAC9B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,QAAQ,CAAC,CA8JnB"}
+{"version":3,"file":"start-agent.d.ts","sourceRoot":"","sources":["../../src/tui/start-agent.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEtE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAgBnD,OAAO,EAAW,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED;;;;;GAKG;AACH,kEAAkE;AAClE,2DAA2D;AAC3D,eAAO,MAAM,SAAS,iHAQZ,CAAC;AASX,qBAAa,gBAAiB,SAAQ,KAAK;CAAG;AAE9C;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAgB/D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,CAiB3E;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,CAgB1E;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;CACpD;AAED,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;CAC9C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,aAAa,CAAC;CACtB,CAUA;AAED,wBAAsB,UAAU,CAC9B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,QAAQ,CAAC,CAgKnB"}

package/dist/tui/start-agent.js

@@ -15,6 +15,7 @@ import { keyDigest } from "../security/redact.js";
 import { SessionRecorder } from "../sessions/recorder.js";
 import { SessionWriter } from "../sessions/store.js";
 import { NOTICE_FILE, decideRecording, firstSaveNotice, } from "../sessions/policy.js";
+import { stripAnsi } from "../agent/command-policy.js";
 import { describeResume, openForResume } from "../sessions/open.js";
 import { describeBlocker } from "../sessions/resume.js";
 import { runAgentSurface } from "./agent-surface.js";
@@ -118,6 +119,30 @@ export function parsePermissions(argv) {
     }
     return { allowWrite, allowedCommands };
 }
+/**
+ * F-003 · Where a run happens and which model it uses.
+ *
+ * A resumed session runs where it was recorded, on the model it was recorded
+ * with. It used to run in the current directory on the model picked moments
+ * earlier - so continuing project A's conversation from project B pointed the
+ * agent at B's files, and with `--allow-write` that meant editing the wrong
+ * repository.
+ *
+ * Falls back to the current model only when the catalogue has no entry for the
+ * recorded one. That cannot happen on a run that got this far - an uncallable
+ * model is a blocker and blockers now stop the run - but the fallback keeps
+ * this total rather than throwing on a case the type system allows.
+ */
+export function effectiveRunContext(input) {
+    if (input.resumed === undefined) {
+        return { workspace: input.currentWorkspace, model: input.currentModel };
+    }
+    return {
+        workspace: input.resumed.workspace,
+        model: input.catalogue.find((m) => m.modelId === input.resumed?.model_id) ??
+            input.currentModel,
+    };
+}
 export async function startAgent(options) {
     const { dim, bold } = palette(options.capabilities);
     // The TUI is interactive by construction, so `--allow-write` can be honoured
@@ -128,11 +153,6 @@ export async function startAgent(options) {
         ...options.commandIo,
         env: { ...options.commandIo.env, MAFDET_API_KEY: options.apiKey },
     });
-    options.stdout.write(dim(`\n  ${options.model.modelId} - ${mode}` +
-        (hasCommands
-            ? ` - commands: ${options.permissions.allowedCommands.join(", ")}`
-            : "") +
-        "\n  type a goal, or /help for the session commands\n\n"));
     const opened = options.session?.resumeId
         ? openForResume({
             root: sessionsDir(options.commandIo.env ?? process.env),
@@ -174,10 +194,12 @@ export async function startAgent(options) {
     // was recorded with. Continuing project A's conversation against project B's
     // files is how an agent with write access edits the wrong repository - and
     // it used to be the default, because the workspace came from the cwd.
-    const effectiveWorkspace = opened === undefined ? options.workspace : opened.metadata.workspace;
-    const effectiveModel = opened === undefined
-        ? options.model
-        : ((options.catalogue ?? []).find((m) => m.modelId === opened.metadata.model_id) ?? options.model);
+    const { workspace: effectiveWorkspace, model: effectiveModel } = effectiveRunContext({
+        resumed: opened?.metadata,
+        currentWorkspace: options.workspace,
+        currentModel: options.model,
+        catalogue: options.catalogue ?? [],
+    });
     let workspace;
     try {
         workspace = Workspace.open(effectiveWorkspace);
@@ -194,6 +216,14 @@ export async function startAgent(options) {
     if (opened !== undefined && effectiveWorkspace !== options.workspace) {
         options.stdout.write(dim(`  continuing in ${effectiveWorkspace}, where it was recorded\n`));
     }
+    // R-9 · Printed here, not before the session was resolved: on a resume the
+    // model in use is the one the session recorded, and announcing the model
+    // picked beforehand named something that was never going to be used.
+    options.stdout.write(dim(`\n  ${stripAnsi(effectiveModel.modelId)} - ${mode}` +
+        (hasCommands
+            ? ` - commands: ${options.permissions.allowedCommands.join(", ")}`
+            : "") +
+        "\n  type a goal, or /help for the session commands\n\n"));
     const recorder = opened !== undefined
         ? new SessionRecorder({
             writer: opened.writer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mafdet/cli",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "Mafdet AI command line — model calls, account queries, and a permissioned local agent.",
   "type": "module",
   "license": "MIT",