@phnx-labs/agents-cli 1.22.120 → 1.22.121

package/dist/lib/session/prompt.js

@@ -1,601 +0,0 @@
-/**
- * Prompt cleaning and topic extraction for session messages.
- *
- * Strips noise injected by the agent framework (system context lines, XML
- * wrapper tags, team-spawn boilerplate) so that only the real user intent
- * remains. Used by the session picker to show a human-readable topic line.
- */
-/** Per-line noise patterns stripped during prompt cleaning (env context, bare paths, etc). */
-const NOISE_LINE_PATTERNS = [
-    /^(cwd|shell|current_date|timezone|os|platform|arch|home|user)\b\s*:/i,
-    /^\/[\w/.-]+$/,
-    /^(bash|zsh|fish|sh|dash)$/i,
-    /^\d{4}-\d{2}-\d{2}$/,
-    /^[A-Z][A-Za-z]+\/[A-Z][\w+-]+$/,
-    /^Caveat:/i,
-];
-/** XML tag prefix used by local-command messages. */
-const LOCAL_COMMAND_PREFIX = '<local-command-caveat>';
-/**
- * Patterns that mark a whole `role=user` message as harness-injected scaffolding
- * rather than a genuine user turn: the `!`-prefix shell echo and its output,
- * slash-command wrappers, injected reminders / task-notifications, the local
- * caveat, the interrupt marker, skill bodies, and hook feedback. This is the
- * single cross-harness list — `isSyntheticUserMessage` is consumed by the parser
- * (`parseSession`) to flag such events `_synthetic`, so `--include user` and the
- * `--first`/`--last` turn split see only real intent, and every consumer (the
- * session picker, `session-recall`, external hooks) gets clean user turns without
- * re-implementing the stripping. Extend this list, not each caller.
- */
-const SYNTHETIC_USER_MESSAGE_PATTERNS = [
-    /^\s*<\/?(?:bash-input|bash-stdout|bash-stderr)>/i,
-    /^\s*<\/?(?:command-name|command-message|command-args|command-contents)>/i,
-    /^\s*<\/?(?:local-command-stdout|local-command-stderr|local-command-caveat)>/i,
-    /^\s*<\/?system-reminder>/i,
-    /^\s*<\/?task-notification>/i,
-    /^\s*<\/?user-prompt-submit-hook>/i,
-    /^\s*<\/?persisted-output>/i,
-    /^\s*<permissions instructions>/i,
-    /^\s*<(?:apps|plugins|skills)_instructions>/i,
-    /^\s*<recommended_plugins>/i,
-    /^\s*<(?:multi_agent_mode|environment_context)>/i,
-    /^\s*<user_info>/i,
-    /^\s*## (?:In-flight in this repo|Host & Fleet)/i,
-    /^\s*Your current session id is\b/i,
-    /^\s*Linear context skipped:/i,
-    /^\s*<collaboration_mode>/i,
-    /^\s*Caveat: The messages below were generated by the user while running/i,
-    /^\s*\[Request interrupted/i,
-    /^\s*Base directory for this skill:/i,
-    /^\s*[A-Za-z][A-Za-z-]* hook feedback:/,
-    /^\s*<\/?notification\b/i,
-    /^\s*<\/?hook_?result\b/i,
-    /^\s*\[SYSTEM NOTIFICATION/i,
-    /^\s*\[Image: original/i,
-    /^\s*Skill tool loaded instructions/i,
-    // A skill expansion the harness injects when a `/name` command resolves: the
-    // routing line the loader prepends to the skill body.
-    /^\s*\*\*`\/[\w:-]+` routes to/,
-    // The AGENTS.md preamble Claude injects ahead of a turn. `m` because it can
-    // follow other injected blocks rather than opening the message; this is the
-    // one pattern that only `extractSessionTopic` used to carry.
-    /^# AGENTS\.md instructions for\b/im,
-];
-/**
- * True when a `role=user` message is harness-injected scaffolding, not a genuine
- * user turn. Text-based so it is cross-harness by construction (the markers are
- * the same wrappers across Claude/Codex/etc.); harnesses that already drop their
- * own scaffolding at parse time simply never reach here.
- */
-export function isSyntheticUserMessage(raw) {
-    if (!raw)
-        return false;
-    return SYNTHETIC_USER_MESSAGE_PATTERNS.some(pattern => pattern.test(raw));
-}
-/**
- * Inner text of a `<user_query>` wrapper, or the original string if none.
- * Same extraction Cursor already applies in `parseCursorUserText`.
- */
-export function unwrapUserQuery(text) {
-    const query = text.match(/<user_query>\s*([\s\S]*?)\s*<\/user_query>/);
-    return (query?.[1] ?? text).trim();
-}
-/**
- * Return one genuine user turn in full.
- * Synthetic scaffolding is rejected as a whole so an injected Apps/AGENTS
- * preamble can never become the session's displayed request. Unlike the topic
- * cleaner, this intentionally preserves internal whitespace and every line of
- * the user's actual request. A Grok/Cursor `<user_query>` wrapper is unwrapped
- * so the stored turn is the originating request, not the harness tags.
- */
-export function cleanFirstUserMessage(raw) {
-    if (!raw || isSyntheticUserMessage(raw))
-        return undefined;
-    const clean = unwrapUserQuery(raw);
-    return clean || undefined;
-}
-/**
- * LATEST genuine user message from an already-normalized event stream.
- *
- * The operative request of a `/continue`d, redirected, or interrupted-and-
- * restated session is the last thing the user said, not the first (PHNX-3939).
- * Same rejection rules as {@link firstUserMessageFromEvents} — walking from the
- * end so a long transcript stops at the first genuine turn it meets.
- */
-export function lastUserMessageFromEvents(events) {
-    for (let i = events.length - 1; i >= 0; i--) {
-        const event = events[i];
-        if (event.type !== 'message' || event.role !== 'user' || event._synthetic)
-            continue;
-        const latest = cleanFirstUserMessage(event.content);
-        if (latest)
-            return latest;
-    }
-    return undefined;
-}
-/** First genuine user message from an already-normalized event stream. */
-export function firstUserMessageFromEvents(events) {
-    for (const event of events) {
-        if (event.type !== 'message' || event.role !== 'user' || event._synthetic)
-            continue;
-        const first = cleanFirstUserMessage(event.content);
-        if (first)
-            return first;
-    }
-    return undefined;
-}
-/**
- * The `<command-name>` wrapper Claude injects into a `role=user` message when
- * a typed slash command is invoked, e.g.:
- *   <command-message>recap</command-message>
- *   <command-name>/recap</command-name>
- * Captures the name INCLUDING its leading slash (`/recap`), matching how the
- * `SlashCommand` tool's own `command` input is formatted (see
- * `extractSlashCommandFromToolInput`) so both sources land on the same shape.
- */
-const COMMAND_NAME_WRAPPER_RE = /<command-name>\s*([^<]*?)\s*<\/command-name>/i;
-/**
- * Extract the invoked slash-command name from a raw `role=user` message, or
- * undefined when the message carries no `<command-name>` wrapper. Used by
- * `parseClaudeContent` to populate `SessionEvent.slashCommand`.
- *
- * Normalizes a leading `/` onto the result: current Claude Code wraps the
- * name WITH the slash already (`/recap`), but the wrapper predates that and
- * older transcripts carry the bare name (`recap`) — normalizing here means
- * every consumer sees one consistent `/name` shape regardless of vintage.
- */
-export function extractSlashCommandName(raw) {
-    if (!raw)
-        return undefined;
-    const m = raw.match(COMMAND_NAME_WRAPPER_RE);
-    const name = m?.[1]?.trim();
-    if (!name)
-        return undefined;
-    return name.startsWith('/') ? name : `/${name}`;
-}
-/**
- * Extract the invoked slash-command name from the `SlashCommand` tool's input
- * — the MODEL invoking a command programmatically, not the user typing it.
- * The tool's `command` field carries the full invocation text (name plus any
- * args, e.g. `/code:commit fix the bug`); only the leading command token is
- * the name, matching {@link extractSlashCommandName}'s shape.
- */
-export function extractSlashCommandFromToolInput(toolInput) {
-    const command = toolInput?.command;
-    if (typeof command !== 'string')
-        return undefined;
-    const name = command.trim().split(/\s+/)[0];
-    return name || undefined;
-}
-// Prefix prepended to every Claude-in-plan-mode team spawn prompt.
-// Ends at a blank line before the real user task.
-export const HEADLESS_PLAN_MODE_PREFIX = 'You are running in HEADLESS PLAN MODE.';
-// Wrappers added to team-spawned prompts in src/lib/teams/agents.ts.
-// Stripped before topic extraction so the picker shows what the user actually typed.
-/** Marker string appended to team-spawned prompts; stripped before topic extraction. */
-const TEAM_PROMPT_SUFFIX_MARKER = "When you're done, provide a brief summary of:";
-/** Remove headless-plan-mode prefix and team summary suffix from a raw prompt. */
-function stripTeamWrappers(raw) {
-    let text = raw;
-    if (text.trimStart().startsWith(HEADLESS_PLAN_MODE_PREFIX)) {
-        const blankLine = text.indexOf('\n\n');
-        if (blankLine === -1)
-            return '';
-        text = text.slice(blankLine + 2);
-    }
-    const suffixIdx = text.indexOf(TEAM_PROMPT_SUFFIX_MARKER);
-    if (suffixIdx !== -1)
-        text = text.slice(0, suffixIdx);
-    return text.trim();
-}
-/** Strip framework noise from a raw session prompt, returning only meaningful user text. */
-export function cleanSessionPrompt(raw) {
-    let text = stripTeamWrappers(raw).replace(/\r/g, '').trim();
-    if (!text)
-        return '';
-    text = stripXmlLikeTags(text);
-    const meaningful = text
-        .split('\n')
-        .map(line => line.trim())
-        .filter(Boolean)
-        .filter(line => !NOISE_LINE_PATTERNS.some(pattern => pattern.test(line)));
-    return meaningful.join('\n').trim();
-}
-/**
- * Remove XML-like tags in one pass, including nested fragments such as
- * `<scr<b>ipt>`. A candidate starts only with a valid tag-name prefix, so
- * ordinary comparisons such as `1 < 2 > 0` remain prose.
- */
-function stripXmlLikeTags(text) {
-    const chunks = [];
-    let plainStart = 0;
-    let tagStart = -1;
-    let depth = 0;
-    for (let index = 0; index < text.length; index += 1) {
-        const char = text[index];
-        if (depth === 0) {
-            if (char !== '<')
-                continue;
-            const firstNameIndex = text[index + 1] === '/' ? index + 2 : index + 1;
-            if (!/[a-z_]/i.test(text[firstNameIndex] ?? ''))
-                continue;
-            chunks.push(text.slice(plainStart, index));
-            tagStart = index;
-            depth = 1;
-            continue;
-        }
-        if (char === '<') {
-            depth += 1;
-        }
-        else if (char === '>' && --depth === 0) {
-            plainStart = index + 1;
-            tagStart = -1;
-        }
-    }
-    if (tagStart !== -1)
-        chunks.push(text.slice(tagStart));
-    else
-        chunks.push(text.slice(plainStart));
-    return chunks.join('');
-}
-/**
- * A skill invocation injects a system line naming the skill's install directory:
- *   "Base directory for this skill: /home/.../skills/<name>"
- * which collapses to "/<name>" so a row shows the skill, not the path. Anchored
- * to that exact injected line — a bare `.../skills/<name>` mention in ordinary
- * prose is NOT a skill invocation and must keep its real text.
- */
-const SKILL_BASEDIR_RE = /Base directory for this skill:\s*\S*[\/\\]skills[\/\\]([\w.-]+)/i;
-/**
- * An explicit shell-prompt paste (`$ cmd`). Only the command survives. Deliberately
- * `$`-only: a leading `>` is a markdown blockquote far more often than a shell
- * prompt, so matching it misread quoted prose as a command.
- */
-const COMMAND_PREFIX_RE = /^\$\s+(\S.*)$/;
-/**
- * A filesystem path (absolute or `~`-rooted) ending in an image extension —
- * matched even across the spaces a CleanShot filename carries. Used both to
- * detect an image-only prompt and to drop the path from a mixed one.
- */
-const IMAGE_PATH_RE = /[\/~][^\n]*?\.(?:png|jpe?g|gif|webp|heic|bmp|svg)\b/i;
-/**
- * Classify a raw first user turn into a display-ready `{ clean, kind }`, so a
- * Fleet/session row shows the user's actual intent rather than path noise:
- *
- *   - `skill`   — a `/skill` invocation's injected "Base directory for this
- *                 skill: …" line collapses to `/<name>`.
- *   - `command` — a `$ `-prefixed shell paste keeps only the first command.
- *   - `image`   — a screenshot/image path standing alone, or an image
- *                 attachment with no real accompanying text, becomes `[image]`.
- *   - `text`    — everything else: wrapper tags stripped (via
- *                 {@link cleanSessionPrompt}) and any inline image path replaced
- *                 with `[image]` so a mixed prompt still drops the path.
- *
- * Pure and cross-harness (text markers, no per-agent branch). `hasImageAttachment`
- * lets a caller that only has an already-extracted topic line still detect an
- * image-only turn from the row's attachment list.
- */
-export function classifyUserPrompt(raw, opts = {}) {
-    const text = (raw ?? '').replace(/\r/g, '').trim();
-    const skill = text.match(SKILL_BASEDIR_RE);
-    if (skill)
-        return { clean: `/${skill[1]}`, kind: 'skill' };
-    const firstLine = text.split('\n').map(line => line.trim()).find(Boolean) ?? '';
-    const cmd = firstLine.match(COMMAND_PREFIX_RE);
-    if (cmd)
-        return { clean: `$ ${cmd[1]}`.trim(), kind: 'command' };
-    const cleaned = cleanSessionPrompt(text);
-    const cleanedFirst = cleaned.split('\n').map(line => line.trim()).find(Boolean) ?? '';
-    const imgMatch = firstLine.match(IMAGE_PATH_RE);
-    const imageOnly = !!imgMatch && firstLine.replace(imgMatch[0], '').replace(/[^\w]/g, '').length <= 8;
-    if (imageOnly || (opts.hasImageAttachment && !cleanedFirst)) {
-        return { clean: '[image]', kind: 'image' };
-    }
-    const display = (cleanedFirst || firstLine).replace(IMAGE_PATH_RE, '[image]').trim();
-    return { clean: display, kind: 'text' };
-}
-/**
- * A label that is nothing but a control command — `/clear`, `/compact`,
- * `/model`, `/exit` — with no words of its own after it.
- *
- * One rule instead of a per-harness list of control verbs: a title that is a
- * bare slash token describes an action taken ON the session, never what the
- * session is about, so whatever it names it is not a headline. A command WITH an
- * argument (`/continue fix the parser`, `/code:commit the retry fix`) carries
- * real intent and is kept.
- *
- * Skill collapse runs first in {@link cleanGeneratedSessionLabel} and returns
- * its own `/<skill>` form, so this never swallows that deliberate shape.
- */
-const BARE_CONTROL_COMMAND_RE = /^\/[\w:-]+$/;
-/**
- * Reduce a harness-generated session title to something worth showing as a
- * headline, or `undefined` when it is not (PHNX-3999 F26/F27).
- *
- * Claude's `ai-title` and Cursor's `chatMeta.title` are both derived from the
- * FIRST turn of the transcript, so whatever the harness injected there becomes
- * the session's name: a skill's install-directory preamble, a `!`-prefixed shell
- * echo wrapped in `<bash-input>`, a `/clear`. The owner's recording shows both
- * failures — one row titled with shell-command XML wrappers, others reading
- * `/clear`. Three rungs, in order:
- *
- *  1. A skill invocation collapses to `/<skill>` ({@link classifyUserPrompt}
- *     reports `kind: 'skill'` only for that injected line).
- *  2. Harness scaffolding is REJECTED, not cleaned: `<bash-input>`,
- *     `<command-name>`, `<local-command-stdout>`, `<system-reminder>` and the
- *     rest of {@link isSyntheticUserMessage}'s cross-harness list, plus a title
- *     that is only tags. Stripping the tags would leave the shell command
- *     itself as the headline, which is the same wrong answer with tidier
- *     punctuation.
- *  3. A bare control command is rejected ({@link BARE_CONTROL_COMMAND_RE}).
- *
- * A rejected label returns `undefined`, so the row falls to the next rung of the
- * canonical ladder — the daemon-generated title, then the user's own first
- * prompt (`sessionHeadline`, `session/title.ts`). Nothing is deleted: the
- * original turn stays on the row as `firstUserMessage` / `request`, so the
- * details view still shows exactly what the agent was told.
- *
- * A user-authored title (Claude `/rename` / `custom-title`) is never passed
- * here — the caller keeps it verbatim.
- */
-export function cleanGeneratedSessionLabel(title) {
-    const trimmed = title?.trim();
-    if (!trimmed)
-        return undefined;
-    const classified = classifyUserPrompt(trimmed);
-    if (classified.kind === 'skill')
-        return classified.clean;
-    if (isSyntheticUserMessage(trimmed))
-        return undefined;
-    if (!stripXmlLikeTags(trimmed).trim())
-        return undefined;
-    if (BARE_CONTROL_COMMAND_RE.test(trimmed))
-        return undefined;
-    return trimmed;
-}
-/**
- * Extract a one-line topic from a raw user message, or undefined if the message
- * is pure noise.
- *
- * Rejection is {@link isSyntheticUserMessage} — the SAME list the turn cleaner
- * uses. This function used to consult a shorter, looser copy of it
- * (permissions / collaboration / AGENTS.md / local-command-caveat /
- * `<command-*>` only), which is how a `/model` echo (`<local-command-stdout>`)
- * or a skill body ("Base directory for this skill:") became a session's topic —
- * and then its displayed title — while `cleanFirstUserMessage` rejected the same
- * text (PHNX-3939). Whatever is not a genuine user turn is not a topic either.
- *
- * The check runs twice on purpose: once on the raw message, and again after
- * {@link cleanSessionPrompt} strips wrapper tags, since stripping can expose a
- * marker (a skill body) that the tags were hiding.
- */
-export function extractSessionTopic(raw) {
-    if (!raw.trim())
-        return undefined;
-    if (isSyntheticUserMessage(raw))
-        return undefined;
-    const cleaned = cleanSessionPrompt(raw);
-    if (!cleaned)
-        return undefined;
-    if (isSyntheticUserMessage(cleaned))
-        return undefined;
-    const firstLine = cleaned.split('\n').map(line => line.trim()).find(Boolean);
-    return firstLine || undefined;
-}
-/** `host:/abs/path.png`, `/abs/path.pdf`, or a bare `@rel/path` mention. */
-const REQUEST_ATTACHMENT_RE = /^(?:[\w.-]+:)?\/\S.*\.(?:png|jpe?g|gif|pdf|mov|mp4)$|^@\S+$/i;
-/**
- * A line the user pasted out of a terminal rather than typed: a shell prompt
- * echo (`box % `, `$ `), the CLI's own run banners, a resume hint, or the
- * box-drawing frame of a TUI panel — a pasted `│ script (hooks, daemon, ext)`
- * row is chrome, and it read as the request's first sentence before this.
- */
-const REQUEST_ECHO_RE = /^\S+ % |^\[agents\]|^Running: |^Session [0-9a-f]{8}|^\s*Resume later:|^✔ |^\s*Week \d+% left|^\s*\$ |^[\u2500-\u257F\u2580-\u259F]/;
-/** The full `<command-name>…</command-name> … <command-args>…</command-args>` pair. */
-const COMMAND_WRAPPER_PAIR_RE = /<command-name>\s*(\/?[\w:-]+)\s*<\/command-name>[\s\S]*?<command-args>([\s\S]*?)<\/command-args>/;
-/** `/name <id> [prose]` — a slash command typed with a session id argument. */
-const SLASH_WITH_ID_RE = /^\/([\w:-]+)\s+([A-Za-z0-9_-]{8,})\s*([\s\S]*)$/;
-/** `$name <id>` — the same invocation as the resume banner echoes it. */
-const DOLLAR_WITH_ID_RE = /^\s*\$(\w[\w:-]*)\s+([0-9a-f-]{8,})\s*([\s\S]*)$/;
-/** The stock body `/continue` and friends append when there is nothing else to say. */
-const CONTINUE_FILLER = "Let's continue this session.";
-/** A sentence ends, or continues past, a terminator — the tell that a line is prose. */
-const SENTENCE_PUNCTUATION_RE = /[.?!]\s|[.?!]$/;
-/**
- * An absolute or `~`-rooted image path appearing INSIDE a line of prose. Same
- * shape as {@link IMAGE_PATH_RE}, global so every path on the line is pulled
- * out; matched across spaces because a CleanShot filename carries them.
- */
-const INLINE_IMAGE_PATH_RE = /[\/~][^\n]*?\.(?:png|jpe?g|gif|webp|heic|bmp|svg)\b/gi;
-/**
- * A bare session UUID opening the turn — how `agents message <id> <text>`
- * arrives. Full 8-4-4-4-12 only, so an ordinary word is never mistaken for one.
- */
-const LEADING_SESSION_UUID_RE = /^\s*[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\s+/i;
-/** Leading tokens that mark a multi-line paste as terminal output, not a question. */
-const PASTED_OUTPUT_HEAD_RE = /^(agents|git|gh|npm|bun|ls|cat|curl|ssh|scp)\b/;
-/**
- * First sentence of a block of text, flattened and capped.
- *
- * Leading markdown headings are skipped so the headline is the ask, not the
- * section label. A block that then opens with markdown structure (a table row, a
- * bullet, a numbered item) is reduced to its first LINE — a sentence-terminator
- * scan across a table would otherwise splice two cells together. Markdown
- * emphasis characters are dropped so a headline never renders as raw syntax. A
- * "sentence" shorter than 12 characters is not one (an abbreviation, a version
- * number), so the whole flattened text is kept instead.
- */
-export function firstSentence(text, cap = 96) {
-    // A block that opens with markdown HEADINGS names its section before it says
-    // anything: `## Mission` / `Ship the CLI half of …` headlines as "Mission",
-    // which is the label, not the ask. Skip leading heading lines and headline the
-    // first real line under them. A heading-only block keeps the heading — there
-    // is nothing else, and inventing a line is not an option.
-    let body = text.replace(/\r/g, '').trimStart();
-    while (/^#{1,6}\s/.test(body)) {
-        const newline = body.indexOf('\n');
-        if (newline < 0)
-            break;
-        const rest = body.slice(newline + 1).trimStart();
-        if (!rest)
-            break;
-        body = rest;
-    }
-    const trimmed = body.trim() || text.trim();
-    const structured = /^([|\-*]|1\.)/.test(trimmed);
-    const source = structured ? (trimmed.split('\n')[0] ?? '') : trimmed;
-    const flat = source
-        // A leading list marker is syntax, not words.
-        .replace(/^\s*(?:[-*+]|\d+\.)\s+/, '')
-        .replace(/[*`#|_]+/g, '')
-        .replace(/\s+/g, ' ')
-        .trim();
-    const match = flat.match(/^(.+?[.!?])(\s|$)/);
-    const sentence = match && match[1].length >= 12 ? match[1] : flat;
-    return sentence.length <= cap ? sentence : `${sentence.slice(0, cap - 1).trimEnd()}…`;
-}
-/** A `/name <id>` invocation with no prose of its own. */
-function bareCommandRequest(command) {
-    return { kind: 'skill', command, text: '', headline: command, attachments: [], pastedLines: 0 };
-}
-/** Image attachments the row carries that the prose did not already name. */
-function attachmentsFromRow(attachments, already) {
-    if (!attachments?.length)
-        return [];
-    const seen = new Set(already.map((a) => a.name));
-    const extra = [];
-    for (const attachment of attachments) {
-        const name = (attachment.name || attachment.path || '').split(/[\\/]/).pop()?.trim();
-        if (!name || seen.has(name))
-            continue;
-        seen.add(name);
-        extra.push({ kind: attachment.mediaType?.startsWith('image/') ? 'image' : 'file', name });
-    }
-    return extra;
-}
-/**
- * Split one raw user turn into prose, attachments and pasted terminal echo
- * WITHOUT rewriting a word of it (PHNX-3939). Returns `undefined` when the turn
- * is harness-injected scaffolding or carries nothing to show.
- *
- * Order matters and mirrors how a turn is actually assembled:
- *   1. a `<user_query>` wrapper is unwrapped (Grok/Cursor);
- *   2. a `/name <id>` or `<command-name>` invocation becomes `command`, and any
- *      prose inside `<command-args>` becomes the request itself — this is what
- *      makes a `/plan -- Wait hold on…` turn read as the user's sentence rather
- *      than as a bare command name;
- *   3. whole-message scaffolding is rejected;
- *   4. a multi-line paste that opens with a command and asks nothing is pasted
- *      output, not a request;
- *   5. every remaining segment (split on ` -- ` and per line) is classified as
- *      an attachment, terminal echo, or prose.
- *
- * `opts.attachments` are the row's own recorded attachments, folded in so an
- * image the harness captured but the text never named still shows as a chip.
- */
-export function tidyRequest(raw, opts = {}, depth = 0) {
-    let text = (raw ?? '').trim().replace(/^"+/, '');
-    if (!text)
-        return undefined;
-    text = unwrapUserQuery(text);
-    const wrapped = COMMAND_WRAPPER_PAIR_RE.exec(text);
-    let prefix;
-    if (!wrapped && depth < 3) {
-        const slash = SLASH_WITH_ID_RE.exec(text);
-        if (slash) {
-            const command = `/${slash[1]} ${slash[2].slice(0, 8)}`;
-            const prose = slash[3].trim();
-            if (!prose || prose === CONTINUE_FILLER)
-                return bareCommandRequest(command);
-            const inner = tidyRequest(prose, opts, depth + 1);
-            if (!inner)
-                return undefined;
-            return { ...inner, command, headline: `/${slash[1]} · ${inner.headline}` };
-        }
-        const dollar = DOLLAR_WITH_ID_RE.exec(text);
-        if (dollar && !dollar[3].replace(CONTINUE_FILLER, '').trim()) {
-            return bareCommandRequest(`/${dollar[1]} ${dollar[2].slice(0, 8)}`);
-        }
-    }
-    if (wrapped) {
-        const name = wrapped[1].startsWith('/') ? wrapped[1] : `/${wrapped[1]}`;
-        const args = wrapped[2].trim().replace(/^--\s*/, '');
-        if (!args || /^[0-9a-f-]{8,}$/i.test(args)) {
-            return bareCommandRequest(`${name} ${args.slice(0, 8)}`.trim());
-        }
-        text = args;
-        prefix = name;
-    }
-    if (isSyntheticUserMessage(text))
-        return undefined;
-    const lines = text.split('\n').filter((line) => line.trim());
-    if (lines.length >= 3 && PASTED_OUTPUT_HEAD_RE.test(lines[0].trim()) && !text.slice(0, 200).includes('?')) {
-        return {
-            kind: 'command',
-            text: '',
-            headline: `pasted terminal output (${lines.length} lines)`,
-            attachments: [],
-            pastedLines: lines.length,
-        };
-    }
-    const prose = [];
-    const attachments = [];
-    let pastedLines = 0;
-    for (const segment of text.split(/\s+--\s+/)) {
-        for (const rawLine of segment.split('\n')) {
-            const line = rawLine.trim();
-            if (!line)
-                continue;
-            if (REQUEST_ATTACHMENT_RE.test(line)) {
-                const kind = line.startsWith('@')
-                    ? 'dir'
-                    : /\.(png|jpe?g|gif)$/i.test(line) ? 'image' : 'file';
-                const name = line.startsWith('@') ? line : (line.split(':').pop() ?? line).split('/').pop() ?? line;
-                attachments.push({ kind, name });
-                continue;
-            }
-            // A long line that is mostly flags and never punctuates is a pasted
-            // command invocation, not a sentence — the `agents run … --device auto
-            // --cwd … --session-id … --strategy balanced` banner a dispatch echoes.
-            const flagSoup = line.length > 80
-                && (line.match(/\s--\w/g) ?? []).length >= 3
-                && !SENTENCE_PUNCTUATION_RE.test(line);
-            // The `<id> --flag` shape a banner continues on, and any flag-bearing
-            // continuation once a pasted line has already been seen — so a sentence
-            // containing a dash survives when nothing was pasted.
-            const continuesPaste = pastedLines > 0 && /--\w+/.test(line) && !SENTENCE_PUNCTUATION_RE.test(line);
-            if (REQUEST_ECHO_RE.test(line) || /^[0-9a-f-]{8,}\s+--/.test(line) || flagSoup || continuesPaste) {
-                pastedLines++;
-                continue;
-            }
-            // An image path INSIDE a prose line (a screenshot dropped mid-sentence)
-            // becomes a chip and leaves the sentence intact, rather than sitting in
-            // the middle of the request text as a wall of path.
-            const withoutImages = line.replace(INLINE_IMAGE_PATH_RE, (match) => {
-                attachments.push({ kind: 'image', name: match.split('/').pop() ?? match });
-                return '';
-            }).replace(/\s{2,}/g, ' ').trim();
-            if (withoutImages)
-                prose.push(withoutImages);
-        }
-    }
-    attachments.push(...attachmentsFromRow(opts.attachments, attachments));
-    const joined = prose.join(' ').trim();
-    if (!joined && attachments.length === 0)
-        return undefined;
-    // Headline from the LINES, not the joined text: `firstSentence` skips a leading
-    // markdown heading, which it can only see while the line breaks survive. A
-    // leading bare session UUID is addressing, not the ask (`agents message
-    // <id> <text>` lands as `<uuid> Hey Claude…`), so it is dropped from the
-    // headline — the full id stays in `text`.
-    const headlineSource = prose.join('\n').replace(LEADING_SESSION_UUID_RE, '');
-    const headline = joined ? firstSentence(headlineSource || prose.join('\n'), 120) : '[image]';
-    return {
-        kind: joined ? 'text' : 'image',
-        text: joined,
-        headline: prefix ? `${prefix} · ${headline}` : headline,
-        ...(prefix ? { command: prefix } : {}),
-        attachments,
-        pastedLines,
-    };
-}