@pi-unipi/unipi 2.1.2 → 2.2.0

package/packages/notify/src/__tests__/permission-prompt-message.test.ts

@@ -0,0 +1,172 @@
+/**
+ * Tests for buildPermissionPromptMessage — the `permissions:ui_prompt`
+ * payload projection used by the `permission_request` notify event.
+ *
+ * The test fixtures use `satisfies PermissionPromptEventPayload` to
+ * enforce the payload contract at compile time.
+ */
+
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+
+import {
+  buildPermissionPromptMessage,
+  type PermissionPromptEventPayload,
+} from "../../permission-prompt-message.ts";
+
+describe("buildPermissionPromptMessage", () => {
+  it("formats a standard bash permission payload", () => {
+    const payload = {
+      requestId: "req-1",
+      source: "tool",
+      surface: "bash",
+      value: "npm test",
+      agentName: "Current agent",
+      message: "Allow this command?",
+    } satisfies PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "Current agent requested bash 'npm test'. Allow this command?",
+    );
+  });
+
+  it("falls back to \"Agent\" when agentName is absent", () => {
+    const payload = {
+      surface: "edit",
+      value: "src/index.ts",
+    } satisfies PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "Agent requested edit 'src/index.ts'.",
+    );
+  });
+
+  it("marks forwarded subagent prompts", () => {
+    const payload = {
+      surface: "mcp",
+      value: "github.create_issue",
+      agentName: "explore",
+      forwarding: { from: "subagent-1" },
+    } satisfies PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "explore requested mcp 'github.create_issue'. (forwarded)",
+    );
+  });
+
+  it("does not mark prompts when forwarding is explicitly falsy", () => {
+    for (const forwarding of [false, null, "", 0, {}, []]) {
+      const payload = {
+        surface: "read",
+        value: "/etc/hosts",
+        forwarding,
+      } satisfies PermissionPromptEventPayload;
+
+      const result = buildPermissionPromptMessage(payload);
+      assert.equal(
+        result.includes("(forwarded)"),
+        false,
+        `expected no forwarded marker for ${JSON.stringify(forwarding)}`,
+      );
+    }
+  });
+
+  it("uses surface alone when no value is provided", () => {
+    const payload = { surface: "bash" } satisfies PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "Agent requested bash access.",
+    );
+  });
+
+  it("uses value alone when no surface is provided", () => {
+    const payload = { value: "rm -rf build" } satisfies PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "Agent requested 'rm -rf build'.",
+    );
+  });
+
+  it("falls back to the message when surface and value are missing", () => {
+    const payload = {
+      requestId: "req-2",
+      message: "Allow access to the workspace?",
+    } satisfies PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "Allow access to the workspace?",
+    );
+  });
+
+  it("does not duplicate the message when it equals the request clause", () => {
+    const payload = {
+      surface: "bash",
+      value: "npm test",
+      agentName: "Current agent",
+      message: "Current agent requested bash 'npm test'.",
+    } satisfies PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "Current agent requested bash 'npm test'.",
+    );
+  });
+
+  it("returns a generic fallback for an empty payload", () => {
+    assert.equal(
+      buildPermissionPromptMessage({}),
+      "Pi is waiting for a permission decision.",
+    );
+  });
+
+  it("handles null, undefined and non-object payloads without throwing", () => {
+    for (const payload of [null, undefined, 42, "nope", true]) {
+      assert.equal(
+        buildPermissionPromptMessage(payload),
+        "Pi is waiting for a permission decision.",
+      );
+    }
+  });
+
+  it("treats empty and whitespace-only strings as absent", () => {
+    const payload = {
+      surface: "   ",
+      value: "",
+      agentName: "  ",
+      message: "\t\n",
+    } satisfies PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "Pi is waiting for a permission decision.",
+    );
+  });
+
+  it("ignores non-string surface/value/message fields", () => {
+    const payload = {
+      surface: 123,
+      value: { cmd: "ls" },
+      message: ["a"],
+    } as unknown as PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "Pi is waiting for a permission decision.",
+    );
+  });
+
+  it("still reports a forwarded prompt with no other detail", () => {
+    const payload = { forwarding: true } satisfies PermissionPromptEventPayload;
+
+    assert.equal(
+      buildPermissionPromptMessage(payload),
+      "Pi is waiting for a permission decision. (forwarded)",
+    );
+  });
+});

package/packages/notify/tui/gotify-setup.ts

@@ -11,6 +11,7 @@ import { truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
 import type { Theme } from "@earendil-works/pi-coding-agent";
 import { sendGotifyNotification } from "../platforms/gotify.js";
 import { updateConfig, loadConfig } from "../settings.js";
+import { boxInnerWidth } from "@pi-unipi/core";
 
 type SetupPhase =
   | "instructions"
@@ -235,7 +236,7 @@ export class GotifySetupOverlay implements Component {
   }
 
   render(width: number): string[] {
-    const innerWidth = Math.max(22, width - 2);
+    const innerWidth = boxInnerWidth(width);
     const lines: string[] = [];
 
     lines.push(this.borderLine(innerWidth, "top"));

package/packages/notify/tui/ntfy-setup.ts

@@ -11,6 +11,7 @@ import { truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
 import type { Theme } from "@earendil-works/pi-coding-agent";
 import { sendNtfyNotification } from "../platforms/ntfy.js";
 import { loadNtfyConfig, saveNtfyConfig, getNtfyConfigScope } from "../ntfy-config.js";
+import { boxInnerWidth } from "@pi-unipi/core";
 
 type SetupPhase =
   | "instructions"
@@ -281,7 +282,7 @@ export class NtfySetupOverlay implements Component {
   }
 
   render(width: number): string[] {
-    const innerWidth = Math.max(22, width - 2);
+    const innerWidth = boxInnerWidth(width);
     const lines: string[] = [];
 
     lines.push(this.borderLine(innerWidth, "top"));

package/packages/notify/tui/recap-model-selector.ts

@@ -8,7 +8,7 @@
 import type { Component } from "@earendil-works/pi-tui";
 import { truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
 import type { Theme } from "@earendil-works/pi-coding-agent";
-import { readModelCache, type CachedModel } from "@pi-unipi/core";
+import { readModelCache, type CachedModel, boxInnerWidth } from "@pi-unipi/core";
 import { loadConfig, saveConfig } from "../settings.js";
 
 const DEFAULT_MODEL = "openrouter/openai/gpt-oss-20b";
@@ -170,7 +170,7 @@ export class RecapModelSelectorOverlay implements Component {
   }
 
   render(width: number): string[] {
-    const innerWidth = Math.max(40, width - 2);
+    const innerWidth = boxInnerWidth(width);
     const lines: string[] = [];
 
     lines.push(this.borderLine(innerWidth, "top"));

package/packages/notify/tui/settings-overlay.ts

@@ -15,6 +15,7 @@ import {
 } from "../settings.js";
 import { loadNtfyConfig, saveNtfyConfig, getNtfyConfigScope } from "../ntfy-config.js";
 import type { NotifyConfig, NtfyConfig } from "../types.js";
+import { boxInnerWidth } from "@pi-unipi/core";
 
 /** Section types */
 type Section = "platforms" | "events" | "recap";
@@ -174,7 +175,7 @@ export class NotifySettingsOverlay implements Component {
   }
 
   render(width: number): string[] {
-    const innerWidth = Math.max(22, width - 2);
+    const innerWidth = boxInnerWidth(width);
     const lines: string[] = [];
 
     lines.push(this.borderLine(innerWidth, "top"));

package/packages/notify/tui/telegram-setup.ts

@@ -10,6 +10,7 @@ import { truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
 import type { Theme } from "@earendil-works/pi-coding-agent";
 import { pollForChatId } from "../platforms/telegram.js";
 import { updateConfig } from "../settings.js";
+import { boxInnerWidth } from "@pi-unipi/core";
 
 type SetupPhase = "instructions" | "token" | "polling" | "success" | "error" | "timeout";
 
@@ -224,7 +225,7 @@ export class TelegramSetupOverlay implements Component {
   }
 
   render(width: number): string[] {
-    const innerWidth = Math.max(22, width - 2);
+    const innerWidth = boxInnerWidth(width);
     const lines: string[] = [];
 
     lines.push(this.borderLine(innerWidth, "top"));

package/packages/ralph/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/ralph",
-  "version": "2.1.2",
+  "version": "2.2.0",
   "description": "Long-running iterative development loops for Pi coding agent",
   "type": "module",
   "main": "index.ts",
@@ -27,8 +27,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.1.2",
-    "@pi-unipi/info-screen": "2.1.2"
+    "@pi-unipi/core": "2.2.0",
+    "@pi-unipi/info-screen": "2.2.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": "^0.80.0",

package/packages/subagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/subagents",
-  "version": "2.1.2",
+  "version": "2.2.0",
   "description": "Subagents for UniPi — parallel execution, file locking, workflow integration",
   "type": "module",
   "main": "dist/index.js",
@@ -14,12 +14,12 @@
   "scripts": {
     "build": "tsc",
     "dev": "tsc --watch",
-    "test": "node --test src/__tests__/*.test.ts"
+    "test": "npx tsx --test src/__tests__/*.test.ts"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.1.2",
-    "@pi-unipi/workflow": "2.1.2",
-    "@pi-unipi/info-screen": "2.1.2",
+    "@pi-unipi/core": "2.2.0",
+    "@pi-unipi/workflow": "2.2.0",
+    "@pi-unipi/info-screen": "2.2.0",
     "@earendil-works/pi-agent-core": "^0.80.0"
   },
   "devDependencies": {

package/packages/subagents/src/__tests__/shutdown-stale-ctx.test.ts

@@ -0,0 +1,185 @@
+/**
+ * Test: background agents must not touch a stale extension runtime
+ *
+ * BUG — Pi crashed on exit with:
+ *   "This extension ctx is stale after session replacement or reload."
+ *   at pi.sendMessage (loader.js:240)
+ *   at onComplete (packages/subagents/src/index.ts)
+ *
+ * Sequence:
+ *  1. A background agent (e.g. the session-name generator) is still running.
+ *  2. The user quits. Pi emits `session_shutdown`, then immediately calls
+ *     `AgentSession.dispose()`, which invalidates the extension runtime.
+ *  3. Our handler calls `abortAll()`, but aborting only *signals* the
+ *     AbortController — the in-flight promise still settles on a later
+ *     microtask and invokes the completion callback.
+ *  4. That callback called `pi.sendMessage()`, which is `assertActive`-gated,
+ *     so it threw from an async continuation with no catch → process crash.
+ *
+ * FIX — a `sessionEnded` flag set at the top of the `session_shutdown` handler
+ * (before `abortAll()`), checked at the top of the completion callback, plus a
+ * try/catch around `sendMessage` for the session-replacement race.
+ *
+ * The flag is scoped to the extension factory, not the module: `/new`,
+ * `/fork` and `/resume` also emit `session_shutdown` and pi re-invokes the
+ * factory for the replacement session, so a fresh closure resets it.
+ * (Verified against pi 0.80.2: `/new` emits `shutdown reason=new`, then the
+ * factory runs again with `ended=false`.)
+ */
+
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+
+const ROOT = join(import.meta.dirname, "../../../..");
+
+function readSource(relativePath: string): string {
+  const fullPath = join(ROOT, relativePath);
+  if (!existsSync(fullPath)) throw new Error(`File not found: ${fullPath}`);
+  return readFileSync(fullPath, "utf-8");
+}
+
+// ─── Behavioural: reproduce the race ────────────────────────────────
+
+/**
+ * Minimal stand-in for pi's runtime: every `assertActive`-gated method throws
+ * once the session has been disposed.
+ */
+function createFakeRuntime() {
+  let stale = false;
+  return {
+    invalidate() {
+      stale = true;
+    },
+    sendMessage() {
+      if (stale) {
+        throw new Error(
+          "This extension ctx is stale after session replacement or reload.",
+        );
+      }
+      return { delivered: true };
+    },
+    setSessionName() {
+      if (stale) {
+        throw new Error(
+          "This extension ctx is stale after session replacement or reload.",
+        );
+      }
+    },
+    // pi.events is NOT assertActive-gated — it keeps working.
+    events: { emit() {} },
+  };
+}
+
+/**
+ * Reproduces the extension's shutdown wiring.
+ *
+ * @param guard - whether to apply the `sessionEnded` fix
+ */
+function simulateShutdownRace(guard: boolean) {
+  const pi = createFakeRuntime();
+  let sessionEnded = false;
+  const errors: Error[] = [];
+
+  // The completion callback registered with AgentManager.
+  const onComplete = () => {
+    if (guard && sessionEnded) return;
+    pi.sendMessage();
+  };
+
+  // A background agent whose promise is still pending at shutdown.
+  let settle!: () => void;
+  const inFlight = new Promise<void>((resolve) => {
+    settle = resolve;
+  }).then(() => {
+    try {
+      onComplete();
+    } catch (error) {
+      // In production this is an unhandled rejection that kills the process.
+      errors.push(error as Error);
+    }
+  });
+
+  // --- session_shutdown handler ---
+  if (guard) sessionEnded = true; // must be set BEFORE abortAll()
+  settle(); // abortAll(): signals abort; the promise settles a tick later
+  // --- pi disposes the session right after handlers resolve ---
+  pi.invalidate();
+
+  return { done: inFlight, errors };
+}
+
+describe("shutdown race — background agent completing after dispose", () => {
+  it("reproduces the stale-ctx crash without the guard", async () => {
+    const { done, errors } = simulateShutdownRace(false);
+    await done;
+
+    assert.equal(errors.length, 1, "expected the unguarded path to throw");
+    assert.match(errors[0].message, /stale after session replacement/);
+  });
+
+  it("does not touch the stale runtime with the guard", async () => {
+    const { done, errors } = simulateShutdownRace(true);
+    await done;
+
+    assert.deepEqual(errors, [], "guarded path must not throw");
+  });
+});
+
+// ─── Source contract: the wiring must stay correct ──────────────────
+
+describe("subagents shutdown wiring", () => {
+  const src = readSource("packages/subagents/src/index.ts");
+
+  it("declares the sessionEnded guard", () => {
+    assert.match(
+      src,
+      /let sessionEnded = false;/,
+      "expected a `sessionEnded` guard flag",
+    );
+  });
+
+  it("sets the guard before aborting, inside session_shutdown", () => {
+    const handler = src.match(
+      /pi\.on\(\s*"session_shutdown"[\s\S]*?\}\s*\);/,
+    )?.[0];
+    assert.ok(handler, "session_shutdown handler not found");
+
+    const guardIdx = handler.indexOf("sessionEnded = true");
+    const abortIdx = handler.indexOf("abortAll()");
+
+    assert.notEqual(guardIdx, -1, "handler must set sessionEnded = true");
+    assert.notEqual(abortIdx, -1, "handler must still call abortAll()");
+    assert.ok(
+      guardIdx < abortIdx,
+      "sessionEnded must be set BEFORE abortAll(), which settles in-flight promises",
+    );
+  });
+
+  it("checks the guard before any pi call in the completion callback", () => {
+    const guardIdx = src.indexOf("if (sessionEnded) return;");
+    assert.notEqual(guardIdx, -1, "completion callback must bail when sessionEnded");
+
+    const sendIdx = src.indexOf("pi.sendMessage");
+    assert.notEqual(sendIdx, -1, "expected a pi.sendMessage call");
+    assert.ok(
+      guardIdx < sendIdx,
+      "the guard must be checked before pi.sendMessage is reached",
+    );
+  });
+
+  it("wraps sendMessage in try/catch for the session-replacement race", () => {
+    const block = src.match(/try\s*\{\s*pi\.sendMessage[\s\S]*?\}\s*catch\s*\{[\s\S]*?\}/);
+    assert.ok(
+      block,
+      "pi.sendMessage must be wrapped in try/catch — a notification is best-effort",
+    );
+  });
+
+  it("keeps setSessionName defensively wrapped", () => {
+    // Badge generation also runs on a background agent.
+    const block = src.match(/try\s*\{\s*pi\.setSessionName[\s\S]*?\}\s*catch/);
+    assert.ok(block, "pi.setSessionName must stay wrapped in try/catch");
+  });
+});

package/packages/subagents/src/index.ts

@@ -137,10 +137,40 @@ export default function (pi: ExtensionAPI) {
   // Activity tracking for widget
   const agentActivity = new Map<string, AgentActivity>();
 
+  /**
+   * Set once `session_shutdown` fires — after which `pi` must not be touched.
+   *
+   * Pi disposes the session as soon as the shutdown handlers resolve, and
+   * `AgentSession.dispose()` invalidates the extension runtime. Every
+   * `assertActive`-gated method (`sendMessage`, `setSessionName`,
+   * `appendEntry`, `setModel`, …) then throws "This extension ctx is stale
+   * after session replacement or reload".
+   *
+   * Background agents outlive that moment: `abortAll()` only signals their
+   * AbortController, so the in-flight promise settles a microtask *later* and
+   * fires this completion callback against a dead runtime — an unhandled
+   * throw that crashed the process on exit.
+   *
+   * Scoped to the extension factory rather than module scope on purpose:
+   * `session_shutdown` also fires for `/new`, `/fork` and `/resume` (reasons
+   * "new" / "fork" / "resume"), and pi re-invokes the extension factory for
+   * the replacement session. A fresh closure therefore starts with
+   * `sessionEnded = false`, so the guard can never latch permanently.
+   * Verified: `/new` emits `shutdown reason=new` then re-runs the factory.
+   *
+   * `pi.events` is NOT gated, so cross-module events still fire.
+   */
+  let sessionEnded = false;
+
   // Create manager with completion callback
   const manager = new AgentManager(
     (record) => {
       agentActivity.delete(record.id);
+
+      // After shutdown the UI is gone and the runtime is stale — nothing here
+      // is deliverable, and touching `pi` would throw.
+      if (sessionEnded) return;
+
       widget.markFinished(record.id);
       widget.update();
 
@@ -160,6 +190,7 @@ export default function (pi: ExtensionAPI) {
         record.resultConsumed = true;
       }
 
+
       // Send styled notification via message renderer
       const status = getStatusLabel(record.status, record.error);
       const durationMs = record.completedAt ? record.completedAt - record.startedAt : 0;
@@ -180,15 +211,22 @@ export default function (pi: ExtensionAPI) {
       ].join("\n");
 
       if (!record.resultConsumed) {
-        pi.sendMessage<NotificationDetails>(
-          {
-            customType: "subagent-notification",
-            content: notificationXml,
-            display: true,
-            details,
-          },
-          { deliverAs: "followUp", triggerTurn: true },
-        );
+        // Defence in depth: `sessionEnded` covers the ordinary shutdown path,
+        // but a session can also be replaced mid-flight. Delivering a
+        // notification is best-effort — it must never take the process down.
+        try {
+          pi.sendMessage<NotificationDetails>(
+            {
+              customType: "subagent-notification",
+              content: notificationXml,
+              display: true,
+              details,
+            },
+            { deliverAs: "followUp", triggerTurn: true },
+          );
+        } catch {
+          // Runtime went stale between the guard and here — nothing to notify.
+        }
       }
 
       pi.events.emit("subagents:completed", {
@@ -394,8 +432,12 @@ export default function (pi: ExtensionAPI) {
     });
   });
 
-  // ESC propagation: abort all agents on session shutdown
+  // ESC propagation: abort all agents on session shutdown.
+  // Set the guard FIRST: abortAll() settles in-flight promises, whose
+  // completion callbacks would otherwise reach a runtime that pi is about to
+  // invalidate.
   pi.on("session_shutdown", async () => {
+    sessionEnded = true;
     manager.abortAll();
     manager.dispose();
   });

package/packages/unipi/index.ts

@@ -30,6 +30,7 @@ import footer from "@pi-unipi/footer";
 import updater from "@pi-unipi/updater";
 import inputShortcuts from "@pi-unipi/input-shortcuts";
 import cocoindex from "@pi-unipi/cocoindex";
+import image from "../image/src/index.js";
 
 export default function (pi: ExtensionAPI) {
   workflow(pi);
@@ -51,4 +52,5 @@ export default function (pi: ExtensionAPI) {
   updater(pi);
   inputShortcuts(pi);
   cocoindex(pi);
+  image(pi);
 }

package/packages/updater/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/updater",
-  "version": "2.1.2",
+  "version": "2.2.0",
   "description": "Auto-updater, changelog browser, and readme browser for Unipi — checks npm registry, renders CHANGELOG.md and README.md files in TUI overlays",
   "type": "module",
   "main": "src/index.ts",
@@ -27,13 +27,13 @@
     "README.md"
   ],
   "scripts": {
-    "test": "node --experimental-strip-types --test tests/**/*.test.ts"
+    "test": "npx tsx --test tests/**/*.test.ts"
   },
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.1.2"
+    "@pi-unipi/core": "2.2.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.80.0",

package/packages/updater/src/tui/changelog-overlay.ts

@@ -11,7 +11,7 @@ import { Key, matchesKey, truncateToWidth, visibleWidth } from "@earendil-works/
 import type { Theme } from "@earendil-works/pi-coding-agent";
 import { parseChangelog } from "../changelog.js";
 import { renderMarkdown } from "../markdown.js";
-import { getInstalledPackageVersion } from "@pi-unipi/core";
+import { getInstalledPackageVersion, boxInnerWidth } from "@pi-unipi/core";
 import type { ChangelogEntry } from "../../types.js";
 
 type View = "list" | "detail";
@@ -72,7 +72,7 @@ export function renderChangelogOverlay() {
     const render = (width: number): string[] => {
       ensureLoaded();
 
-      const innerWidth = Math.max(22, width - 2);
+      const innerWidth = boxInnerWidth(width);
       const lines: string[] = [];
 
       // ── Header ──────────────────────────────────────────────────────

package/packages/updater/src/tui/readme-overlay.ts

@@ -12,6 +12,7 @@ import type { Theme } from "@earendil-works/pi-coding-agent";
 import { discoverReadmes, resolveReadmePath } from "../readme.js";
 import { renderMarkdown } from "../markdown.js";
 import type { ReadmeEntry } from "../../types.js";
+import { boxInnerWidth } from "@pi-unipi/core";
 
 type View = "list" | "content";
 
@@ -71,7 +72,7 @@ export function renderReadmeOverlay(params?: { openDirect?: string }) {
     const render = (width: number): string[] => {
       ensureLoaded();
 
-      const innerWidth = Math.max(22, width - 2);
+      const innerWidth = boxInnerWidth(width);
       const lines: string[] = [];
 
       // ── Header ──────────────────────────────────────────────────────

package/packages/updater/src/tui/update-overlay.ts

@@ -15,6 +15,7 @@ import { installUpdate } from "../installer.js";
 import { writeSkippedVersion } from "../cache.js";
 import { loadConfig } from "../settings.js";
 import type { ChangelogEntry, UpdateCheckResult } from "../../types.js";
+import { boxInnerWidth } from "@pi-unipi/core";
 
 /**
  * Pad content to exact visible width.
@@ -119,7 +120,7 @@ export function renderUpdateOverlay(checkResult: UpdateCheckResult) {
     };
 
     const render = (width: number): string[] => {
-      const innerWidth = Math.max(22, width - 2);
+      const innerWidth = boxInnerWidth(width);
       const lines: string[] = [];
 
       // ── Header ──────────────────────────────────────────────────────