@pugi/cli 0.1.0-beta.36 → 0.1.0-beta.38

package/dist/core/repl/slash-commands.js

@@ -29,6 +29,7 @@
  * `/quit` confirmation and `/help` footer - never inline.
  */
 import { listRoles } from '../agents/registry.js';
+import { PERMISSION_MODES, parsePermissionMode, } from '../permissions/index.js';
 /**
  * Deterministic stub copy returned by the Tier 3 commands. Spec'd
  * inline so the unit test can pin the exact text without poking at
@@ -86,7 +87,7 @@ export const SLASH_COMMAND_HELP = Object.freeze([
     // Settings
     { name: 'config', args: '', gloss: 'Show config', group: 'Settings', stub: true },
     { name: 'privacy', args: '', gloss: 'Show privacy mode + contract', group: 'Settings' },
-    { name: 'permissions', args: '[mode] [--persist]', gloss: 'Show or flip permission mode (plan / ask / allow / bypass)  (also: /plan)', group: 'Settings' },
+    { name: 'permissions', args: '[mode] [--persist]', gloss: 'Show or flip permission mode (default / acceptEdits / plan / auto / dontAsk / bypassPermissions)  (also: /plan, Shift+Tab cycle)', group: 'Settings' },
     { name: 'plan', args: '[--back | --persist] [<prompt>]', gloss: 'Switch to plan mode (read-only). Same as /permissions plan, slicker UX.', group: 'Settings' },
     { name: 'model', args: '[<slug>]', gloss: 'Show or select the active model. Bare /model lists tier-gated options', group: 'Settings' },
     { name: 'budget', args: '', gloss: 'Show usage budget', group: 'Settings', stub: true },
@@ -332,26 +333,29 @@ export function parseSlashCommand(input) {
         }
         case 'permissions':
         case 'perms': {
-            // Leak L6: `/permissions [mode] [--persist] [--confirm]`.
+            // Wave 7: `/permissions [mode] [--persist] [--confirm]`.
             //
             // Argument grammar (single line, no quoting):
-            //   /permissions                   -> show current mode + table
-            //   /permissions plan|ask|allow    -> flip mode
-            //   /permissions bypass --confirm  -> flip to bypass (refused
-            //                                     without --confirm — safety)
+            //   /permissions                                        -> show + table
+            //   /permissions default|acceptEdits|plan|auto|dontAsk  -> flip mode
+            //   /permissions bypassPermissions --confirm            -> flip to
+            //                                     bypassPermissions (refused
+            //                                     без --confirm — safety)
             //   /permissions <mode> --persist  -> also write to ~/.pugi/config.json
             //
-            // Anything else returns an `error` result so the runtime can
-            // render the usage hint inline.
+            // α6 aliases (`ask`, `allow`, `bypass`) are accepted и mapped to
+            // their Wave 7 canonical names via `parsePermissionMode`.
             const tokens = tail.length === 0 ? [] : tail.split(/\s+/).filter((s) => s.length > 0);
             if (tokens.length === 0) {
                 return { kind: 'permissions', persist: false, confirmBypass: false };
             }
-            const head0 = tokens[0]?.toLowerCase();
-            if (head0 !== 'plan' && head0 !== 'ask' && head0 !== 'allow' && head0 !== 'bypass') {
+            const headRaw = tokens[0] ?? '';
+            const mode = parsePermissionMode(headRaw);
+            if (!mode) {
+                const modeList = [...PERMISSION_MODES].join('|');
                 return {
                     kind: 'error',
-                    message: `Usage: /permissions [plan|ask|allow|bypass] [--persist] [--confirm]; unknown mode '${tokens[0] ?? ''}'`,
+                    message: `Usage: /permissions [${modeList}] [--persist] [--confirm]; unknown mode '${headRaw}'`,
                 };
             }
             const flags = tokens.slice(1);
@@ -371,7 +375,7 @@ export function parseSlashCommand(input) {
                     };
                 }
             }
-            return { kind: 'permissions', mode: head0, persist, confirmBypass };
+            return { kind: 'permissions', mode, persist, confirmBypass };
         }
         case 'init': {
             // β1 Sl11: surface the init flow inside the REPL. Tail args

package/dist/core/session.js

@@ -62,6 +62,54 @@ export async function fireSessionStartMvp(session) {
         return 0;
     }
 }
+/**
+ * Wave 7 P1 — fire the v2 `SessionStart` event from `~/.pugi/hooks.json`
+ * (global) + `<workspaceRoot>/.pugi/hooks.json` (project). Companion to
+ * `fireSessionStartMvp`; both surfaces run because they read different
+ * config files.
+ *
+ * Headless by default (no trust prompt) — the v2 trust ledger gates
+ * first-run executions. Operators with no prior trust decision will see
+ * the SessionStart hook skipped with a `denied by trust ledger` stderr
+ * note; running `pugi hooks trust allow <command>` enrolls it.
+ *
+ * Returns the number of hooks that ran (excluding trust-denied skips).
+ * Never throws.
+ */
+export async function fireSessionStartV2(session) {
+    try {
+        const { fireSessionStart } = await import('./hooks/v2/index.js');
+        const outcome = await fireSessionStart({
+            sessionId: session.id,
+            workspaceRoot: session.root,
+            transcriptPath: session.eventsPath,
+            permissionMode: 'ask',
+        });
+        return outcome.results.filter((r) => r.exitCode !== -1).length;
+    }
+    catch {
+        return 0;
+    }
+}
+/**
+ * Wave 7 P1 — fire the v2 `SessionEnd` event. Called by the REPL
+ * teardown path. Companion to `fireSessionStartV2`.
+ */
+export async function fireSessionEndV2(session) {
+    try {
+        const { fireSessionEnd } = await import('./hooks/v2/index.js');
+        const outcome = await fireSessionEnd({
+            sessionId: session.id,
+            workspaceRoot: session.root,
+            transcriptPath: session.eventsPath,
+            permissionMode: 'ask',
+        });
+        return outcome.results.filter((r) => r.exitCode !== -1).length;
+    }
+    catch {
+        return 0;
+    }
+}
 export function recordCommandStarted(session, command) {
     if (!session.enabled)
         return;

package/dist/runtime/cli.js

@@ -755,7 +755,7 @@ async function dispatchRewind(args, flags, _session) {
 async function dispatchPermissions(args, flags, _session) {
     const head = args[0];
     if (head && parsePermissionMode(head) === null) {
-        writeOutput(flags, { error: 'unknown_mode', mode: head }, `Unknown mode '${head}'. Allowed: plan, ask, allow, bypass.`);
+        writeOutput(flags, { error: 'unknown_mode', mode: head }, `Unknown mode '${head}'. Allowed: default, acceptEdits, plan, auto, dontAsk, bypassPermissions (α6 aliases ask/allow/bypass accepted).`);
         process.exitCode = 1;
         return;
     }
@@ -780,8 +780,8 @@ async function dispatchPermissions(args, flags, _session) {
             await runPermissionsCommand({
                 mode: chosen,
                 persist: Boolean(flags.persist),
-                // The picker selection IS the confirm gesture for `bypass`.
-                confirmBypass: chosen === 'bypass' ? true : Boolean(flags.confirm),
+                // The picker selection IS the confirm gesture for `bypassPermissions`.
+                confirmBypass: chosen === 'bypassPermissions' ? true : Boolean(flags.confirm),
             }, {
                 workspaceRoot: process.cwd(),
                 writeOutput: (text) => writeOutput(flags, { text }, text),
@@ -1524,7 +1524,7 @@ function parseArgs(argv) {
         else if (arg === '--mode') {
             const next = argv[index + 1];
             if (!next || next.startsWith('--')) {
-                throw new Error('--mode requires plan|ask|allow|bypass');
+                throw new Error('--mode requires default|acceptEdits|plan|auto|dontAsk|bypassPermissions (α6 aliases ask|allow|bypass accepted)');
             }
             flags.mode = next;
             index += 1;
@@ -1669,12 +1669,12 @@ const COMMAND_HELP_BODIES = {
         '  pugi explain "trace the auth flow in src/auth/"',
     ],
     code: [
-        'pugi code "<brief>" — engineering-mode write loop (30k token budget).',
+        'pugi code "<brief>" — engineering-mode write loop (80k token budget).',
         '',
         'Writes files in the current workspace. Use --no-tty in CI / pipes.',
     ],
     fix: [
-        'pugi fix "<brief>" — minimal-diff bugfix loop (30k token budget).',
+        'pugi fix "<brief>" — minimal-diff bugfix loop (50k token budget).',
         '',
         'Same as `pugi code` but the prompt biases toward the smallest patch',
         'that closes the brief — refuses scope creep / refactor invitations.',

package/dist/runtime/commands/permissions.js

@@ -29,9 +29,10 @@ export async function runPermissionsCommand(command, ctx) {
         renderModeTable(ctx);
         return;
     }
-    if (command.mode === 'bypass' && !command.confirmBypass) {
-        ctx.writeOutput('Bypass mode disables policy hooks (skill steering, denial tracking).');
-        ctx.writeOutput('Run `/permissions bypass --confirm` to acknowledge before flipping.');
+    if (command.mode === 'bypassPermissions' && !command.confirmBypass) {
+        ctx.writeOutput('bypassPermissions disables policy hooks (skill steering, denial tracking) AND skips the deny-list.');
+        ctx.writeOutput('Catastrophic patterns (rm -rf /, fork bomb, dd if=/) still trip the circuit-breaker, но that is the only guardrail left.');
+        ctx.writeOutput('Run `/permissions bypassPermissions --confirm` to acknowledge before flipping.');
         return;
     }
     setCurrentMode(ctx.workspaceRoot, command.mode);
@@ -42,8 +43,8 @@ export async function runPermissionsCommand(command, ctx) {
         ? ' Persisted to ~/.pugi/config.json for future sessions.'
         : '';
     ctx.writeOutput(`Permission mode set to '${command.mode}'.${persistedHint} ${PERMISSION_MODE_GLOSS[command.mode]}`);
-    if (command.mode === 'bypass') {
-        ctx.writeOutput('BYPASS MODE — all tools execute without prompts AND policy hooks disabled. Switch back with /permissions allow.');
+    if (command.mode === 'bypassPermissions') {
+        ctx.writeOutput('bypassPermissions — all tools execute without prompts AND policy hooks disabled (circuit-breaker still trips on rm -rf /). Switch back with /permissions dontAsk.');
     }
 }
 /**
@@ -68,12 +69,13 @@ function renderCurrentMode(ctx) {
  */
 function renderModeTable(ctx) {
     ctx.writeOutput('');
-    ctx.writeOutput('Permission modes:');
+    ctx.writeOutput('Permission modes (Shift+Tab cycles in REPL):');
     for (const mode of PERMISSION_MODES) {
-        ctx.writeOutput(`  ${mode.padEnd(7)}  ${PERMISSION_MODE_GLOSS[mode]}`);
+        // Wave 7: longest canonical name is `bypassPermissions` (17 chars).
+        ctx.writeOutput(`  ${mode.padEnd(18)}  ${PERMISSION_MODE_GLOSS[mode]}`);
     }
     ctx.writeOutput('');
-    ctx.writeOutput('Switch with `/permissions <mode> [--persist]`. Bypass requires `--confirm`.');
+    ctx.writeOutput('Switch with `/permissions <mode> [--persist]`. bypassPermissions requires `--confirm`.');
 }
 /**
  * Render the one-shot banner shown on session boot when the effective
@@ -82,7 +84,7 @@ function renderModeTable(ctx) {
  * but the caller is responsible for the once-only semantics.
  */
 export function renderBypassBanner(writeOutput) {
-    writeOutput('BYPASS MODE — all tools execute without prompts AND policy hooks disabled. Switch back with /permissions allow.');
+    writeOutput('bypassPermissions — all tools execute without prompts AND policy hooks disabled (circuit-breaker still trips on rm -rf /). Switch back with /permissions dontAsk.');
 }
 /**
  * Resolve the effective mode + the layered source label used by the

package/dist/runtime/commands/plan.js

@@ -135,9 +135,9 @@ function effectiveMode(ctx) {
     const global = getGlobalDefaultMode(ctx.homeDir);
     if (global)
         return global;
-    // Defensive: PERMISSION_MODES[1] is 'ask' (the canonical default). We
-    // index off the canonical list rather than re-import DEFAULT_PERMISSION_MODE
-    // here to keep the symbol surface narrow.
-    return PERMISSION_MODES[1] ?? 'ask';
+    // Wave 7 canonical default — `PERMISSION_MODES[0]` is `default` (the
+    // CC-parity ask-every-call ground state). Fall back literally if the
+    // array is empty (defensive — should never happen).
+    return PERMISSION_MODES[0] ?? 'default';
 }
 //# sourceMappingURL=plan.js.map

package/dist/runtime/version.js

@@ -44,7 +44,7 @@ export function sanitizeSemver(raw) {
  * during import). When bumping the CLI version BOTH literals must be
  * updated; the release smoke-test (`pack:smoke`) verifies they agree.
  */
-export const PUGI_CLI_VERSION = sanitizeSemver('0.1.0-beta.36');
+export const PUGI_CLI_VERSION = sanitizeSemver('0.1.0-beta.38');
 /**
  * Outbound: the CLI's installed semver. Read at request time by
  * `version-interceptor.ts` and injected on every `fetch` call.

package/dist/tui/input-box.js

@@ -107,6 +107,11 @@ export function InputBox(props) {
     // panes when Ctrl+L wipes the terminal (the parent React tree is
     // otherwise stable and would not redraw on a stdout.write alone).
     const [, setRedrawTick] = useState(0);
+    // Wave 7 Shift+Tab toast — flashed for 2s after a mode cycle so the
+    // operator sees `Mode → acceptEdits` под the input divider. Cleared
+    // by a setTimeout so a quick second Shift+Tab refreshes the toast.
+    const [modeCycleToast, setModeCycleToast] = useState(null);
+    const modeCycleTimerRef = useRef(null);
     const now = props.now ?? Date.now;
     const { stdout } = useStdout();
     const columns = stdout?.columns ?? FALLBACK_COLUMNS;
@@ -197,6 +202,24 @@ export function InputBox(props) {
             }
             return;
         }
+        // Wave 7 — Claude Code parity: Shift+Tab cycles permission mode.
+        // The host owns the cycle logic + persistence; we just intercept
+        // the chord and surface a one-line toast on success. Place this
+        // BEFORE the search-mode and palette branches so a Shift+Tab fires
+        // even while reverse-search is active (operator habit-driven).
+        if (key.shift && key.tab && props.onCyclePermissionMode) {
+            const nextMode = props.onCyclePermissionMode();
+            if (nextMode) {
+                setModeCycleToast(`Mode → ${nextMode}`);
+                if (modeCycleTimerRef.current)
+                    clearTimeout(modeCycleTimerRef.current);
+                modeCycleTimerRef.current = setTimeout(() => {
+                    setModeCycleToast(null);
+                    modeCycleTimerRef.current = null;
+                }, 2_000);
+            }
+            return;
+        }
         // Search-mode key handling. Ctrl+R / Ctrl+S cycle, Enter accepts,
         // Esc cancels (restoring the pre-search draft), backspace shortens
         // the query, typed characters extend it.
@@ -543,7 +566,7 @@ export function InputBox(props) {
         : Math.min(paletteIndex, paletteView.rows.length - 1);
     const divider = '─'.repeat(innerWidth);
     const focusedMatch = search ? search.matches[search.focusedIndex] : undefined;
-    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { color: "#3da9fc", dimColor: true, children: divider }), _jsx(Box, { paddingX: 1, flexDirection: "column", children: search ? (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: "#3da9fc", children: '(reverse-i-search) ' }), _jsx(Text, { children: `\`${search.query}\`: ` }), _jsx(Text, { color: "yellow", children: focusedMatch ? focusedMatch.brief : '(no match)' })] }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: `Ctrl+R next  ·  Ctrl+S prev  ·  Enter accept  ·  Esc cancel  ·  ${search.matches.length} match${search.matches.length === 1 ? '' : 'es'}` }) })] })) : (_jsxs(Box, { children: [_jsx(Text, { color: "#3da9fc", children: '› ' }), _jsx(Text, { children: renderLineWithCursor(line, cursor, cursorVisible) })] })) }), _jsx(Text, { color: "#3da9fc", dimColor: true, children: divider }), line.length > innerWidth - 4 ? (_jsxs(Box, { children: [_jsx(Text, { color: "gray", children: '┊ ' }), _jsx(Text, { dimColor: true, children: 'line wraps - Enter still submits' })] })) : null, _jsx(SlashPalette, { rows: paletteView.rows, focusedIndex: clampedPaletteIndex, totalBeforeLimit: paletteView.totalBeforeLimit }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: '↑/↓ history  ·  Ctrl+R search  ·  / commands  ·  Enter brief  ·  Esc cancel  ·  Ctrl+C abort / ×2 exit' }) })] }));
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { color: "#3da9fc", dimColor: true, children: divider }), _jsx(Box, { paddingX: 1, flexDirection: "column", children: search ? (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Box, { children: [_jsx(Text, { color: "#3da9fc", children: '(reverse-i-search) ' }), _jsx(Text, { children: `\`${search.query}\`: ` }), _jsx(Text, { color: "yellow", children: focusedMatch ? focusedMatch.brief : '(no match)' })] }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: `Ctrl+R next  ·  Ctrl+S prev  ·  Enter accept  ·  Esc cancel  ·  ${search.matches.length} match${search.matches.length === 1 ? '' : 'es'}` }) })] })) : (_jsxs(Box, { children: [_jsx(Text, { color: "#3da9fc", children: '› ' }), _jsx(Text, { children: renderLineWithCursor(line, cursor, cursorVisible) })] })) }), _jsx(Text, { color: "#3da9fc", dimColor: true, children: divider }), modeCycleToast ? (_jsx(Box, { children: _jsx(Text, { color: "#3da9fc", bold: true, children: `  ${modeCycleToast}` }) })) : null, line.length > innerWidth - 4 ? (_jsxs(Box, { children: [_jsx(Text, { color: "gray", children: '┊ ' }), _jsx(Text, { dimColor: true, children: 'line wraps - Enter still submits' })] })) : null, _jsx(SlashPalette, { rows: paletteView.rows, focusedIndex: clampedPaletteIndex, totalBeforeLimit: paletteView.totalBeforeLimit }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: '↑/↓ history  ·  Ctrl+R search  ·  / commands  ·  Shift+Tab mode  ·  Enter brief  ·  Esc cancel  ·  Ctrl+C abort / ×2 exit' }) })] }));
 }
 /**
  * Render the line with the cursor glyph inserted at `cursor`. The cursor

package/dist/tui/permissions-picker.js

@@ -49,15 +49,21 @@ export function PermissionsPicker(props) {
             props.onCancel();
             return;
         }
-        // Number shortcuts mirror the legacy text table order.
+        // Wave 7: number shortcuts mirror the canonical 6-mode order.
+        // Operators coming from Claude Code reach the same mode with the
+        // same digit (1=default, 2=acceptEdits, …, 6=bypassPermissions).
         if (input === '1')
-            props.onSelect('plan');
+            props.onSelect('default');
         if (input === '2')
-            props.onSelect('ask');
+            props.onSelect('acceptEdits');
         if (input === '3')
-            props.onSelect('allow');
+            props.onSelect('plan');
         if (input === '4')
-            props.onSelect('bypass');
+            props.onSelect('auto');
+        if (input === '5')
+            props.onSelect('dontAsk');
+        if (input === '6')
+            props.onSelect('bypassPermissions');
     });
     return (_jsxs(Box, { flexDirection: "column", paddingX: 2, paddingY: 1, children: [_jsxs(Box, { children: [_jsx(Text, { bold: true, children: "Permission mode" }), _jsx(Text, { dimColor: true, children: `   (current: ${props.currentMode} — ${props.sourceLabel})` })] }), props.firstRun ? (_jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: "First time? Mode = Ask \u043F\u043E \u0443\u043C\u043E\u043B\u0447\u0430\u043D\u0438\u044E. Use /permissions \u043A change later." }) })) : null, _jsx(Box, { marginTop: 1, flexDirection: "column", children: ITEMS.map((item, itemIndex) => {
                     const isSelected = itemIndex === index;
@@ -71,7 +77,9 @@ function PickerRow({ isSelected, isCurrent, title, hint, }) {
     // mode (separate from cursor focus) so an operator instantly sees
     // which row is "what I have now" vs "what I'm hovering".
     const indicator = isSelected ? '▸ ' : '  ';
-    const padded = title.padEnd(10, ' ');
+    // Wave 7: longest title is `BypassPermissions` (17 chars). Bump the
+    // pad column так the gloss column stays aligned across all 6 rows.
+    const padded = title.padEnd(18, ' ');
     const currentMarker = isCurrent ? ' ●' : '  ';
     return (_jsxs(Text, { children: [_jsxs(Text, { color: isSelected ? 'cyan' : undefined, bold: isSelected, children: [indicator, padded] }), _jsx(Text, { color: isCurrent ? 'green' : undefined, children: currentMarker }), _jsx(Text, { dimColor: true, children: ` ${hint}` })] }));
 }

package/dist/tui/repl.js

@@ -196,6 +196,34 @@ export function Repl(props) {
         const verdict = props.session.walkbackLastTurn();
         return verdict === 'walked-back' ? 'walked-back' : 'nothing';
     }, [props.session, modalActive]);
+    // Wave 7 — Shift+Tab cycles the 6 canonical permission modes (CC
+    // parity). Refuses while a modal is active so the operator does not
+    // accidentally flip mode mid-prompt; otherwise resolves the current
+    // mode through the workspace > global > default merge, advances via
+    // `nextPermissionMode`, и persists к .pugi/session.json. Returns the
+    // new mode string so the InputBox can flash a one-line toast.
+    const handleCyclePermissionMode = useCallback(() => {
+        if (modalActive)
+            return null;
+        try {
+            // Lazy-require так this code path doesn't drag the permissions
+            // module into the splash + boot stages where it isn't needed.
+            // The require is sync but the inner work is pure JSON IO.
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const perm = require('../core/permissions/index.js');
+            const workspaceRoot = process.cwd();
+            const current = perm.resolveMode({ workspaceRoot });
+            const next = perm.nextPermissionMode(current);
+            perm.setCurrentMode(workspaceRoot, next);
+            return next;
+        }
+        catch {
+            // Persistence is best-effort — if .pugi/session.json is read-only
+            // или ENOENT-on-parent the toast is suppressed so we don't lie
+            // about the flip к the operator.
+            return null;
+        }
+    }, [modalActive]);
     // α6.14.5 CEO dogfood 2026-05-25 (parity with Claude Code): input
     // box pinned to alt-screen BOTTOM, conversation grows above it.
     // Beta.3's height={rows} fix broke keystroke focus - raw echo at
@@ -204,7 +232,7 @@ export function Repl(props) {
     // input, and the input stays the sole focusable surface adjacent
     // to the cursor row, so all keystrokes route through it.
     const altScreenRows = process.stdout.rows ?? 24;
-    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, minHeight: altScreenRows, children: [props.updateBanner ? _jsx(UpdateBanner, { result: props.updateBanner }) : null, splashVisible ? (_jsx(ReplSplash, { cliVersion: state.cliVersion, workspaceLabel: state.workspaceLabel, plan: props.splashPlan, model: props.splashModel, tenant: props.splashTenant, onDismiss: dismissSplash, mascotPrePrinted: props.mascotPrePrinted === true })) : null, _jsx(Header, { state: state }), _jsx(Box, { flexDirection: "column", marginTop: 1, flexGrow: 1, justifyContent: "flex-end", children: overlay === 'help' ? (_jsx(HelpOverlay, {})) : overlay === 'roster' ? (_jsx(RosterOverlay, {})) : overlay === 'farewell' ? (_jsx(FarewellOverlay, {})) : (_jsx(MainArea, { state: state, personaNames: personaNames, nowEpochMs: tickNow, hideToolStream: props.hideToolStream === true, toolStreamCollapsed: toolStreamCollapsed })) }), state.pendingAsk ? (_jsx(Box, { marginTop: 1, children: _jsx(AskModal, { tag: state.pendingAsk, onResolve: handleAskResolve }) })) : null, state.pendingPlanReview ? (_jsx(Box, { marginTop: 1, children: _jsx(PlanReviewModal, { tag: state.pendingPlanReview, onResolve: handlePlanReviewResolve }) })) : null, _jsxs(Box, { flexDirection: "column", marginTop: 1, children: [overlay === 'farewell' || modalActive ? null : (_jsx(InputBox, { onSubmit: handleSubmit, onExit: handleExit, onCancel: handleCancel, onWalkback: handleWalkback, now: props.now, 
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, minHeight: altScreenRows, children: [props.updateBanner ? _jsx(UpdateBanner, { result: props.updateBanner }) : null, splashVisible ? (_jsx(ReplSplash, { cliVersion: state.cliVersion, workspaceLabel: state.workspaceLabel, plan: props.splashPlan, model: props.splashModel, tenant: props.splashTenant, onDismiss: dismissSplash, mascotPrePrinted: props.mascotPrePrinted === true })) : null, _jsx(Header, { state: state }), _jsx(Box, { flexDirection: "column", marginTop: 1, flexGrow: 1, justifyContent: "flex-end", children: overlay === 'help' ? (_jsx(HelpOverlay, {})) : overlay === 'roster' ? (_jsx(RosterOverlay, {})) : overlay === 'farewell' ? (_jsx(FarewellOverlay, {})) : (_jsx(MainArea, { state: state, personaNames: personaNames, nowEpochMs: tickNow, hideToolStream: props.hideToolStream === true, toolStreamCollapsed: toolStreamCollapsed })) }), state.pendingAsk ? (_jsx(Box, { marginTop: 1, children: _jsx(AskModal, { tag: state.pendingAsk, onResolve: handleAskResolve }) })) : null, state.pendingPlanReview ? (_jsx(Box, { marginTop: 1, children: _jsx(PlanReviewModal, { tag: state.pendingPlanReview, onResolve: handlePlanReviewResolve }) })) : null, _jsxs(Box, { flexDirection: "column", marginTop: 1, children: [overlay === 'farewell' || modalActive ? null : (_jsx(InputBox, { onSubmit: handleSubmit, onExit: handleExit, onCancel: handleCancel, onWalkback: handleWalkback, onCyclePermissionMode: handleCyclePermissionMode, now: props.now, 
                         // Slug from process.cwd() (full path) so two workspaces with
                         // the same basename do not share history. state.workspaceLabel
                         // is the basename only. Codex review P2.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pugi/cli",
-  "version": "0.1.0-beta.36",
+  "version": "0.1.0-beta.38",
   "description": "Pugi CLI - terminal-native software execution system",
   "homepage": "https://pugi.io",
   "repository": {
@@ -55,7 +55,7 @@
     "undici": "^8.3.0",
     "zod": "^3.23.0",
     "@pugi/personas": "0.1.2",
-    "@pugi/sdk": "0.1.0-beta.36"
+    "@pugi/sdk": "0.1.0-beta.38"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",