@sayknow-cli/coding-agent 0.5.0 → 0.5.2

package/src/modes/components/pet-selector.ts

@@ -13,7 +13,7 @@ const PET_OPTIONS: { value: PetMode; label: string; description: string }[] = [
 ];
 
 /**
- * Theme-style picker for the sayknow pet skin (Off / RedSayknow / BlueSayknow). Preview
+ * Theme-style picker for the sayknow pet skin (Off / RedOctopus / BlueOctopus). Preview
  * fires as the selection moves; select commits, cancel restores.
  */
 export class PetSelectorComponent extends Container {

package/src/modes/components/sayknow-pet-widget.ts

@@ -4,6 +4,7 @@ import {
 	type Component,
 	type Container,
 	getCellDimensions,
+	getTmuxOverlayImageProtocol,
 	isUnderTmux,
 	PARA_PARA_STEPS,
 	PET_SKINS,
@@ -14,8 +15,10 @@ import {
 	registerAnimationCallback,
 	type SayknowPixelFrameName,
 	type SayknowPixelFrames,
+	TERMINAL,
 	type TUI,
 	tmuxOwnsSixel,
+	tmuxPaneOffset,
 	wrapTmuxPassthrough,
 } from "@sayknow-cli/tui";
 import type { CustomEditor } from "./custom-editor";
@@ -216,7 +219,7 @@ export class SayknowPetWidget {
 
 	/** Live preview during a selector: change the sprite without re-mounting the
 	 *  composer editor (that would tear down the open overlay). After a short idle
-	 *  eye-roll it fires the signature burst once (RedSayknow flex, BlueSayknow para-para
+	 *  eye-roll it fires the signature burst once (RedOctopus flex, BlueOctopus para-para
 	 *  then sob) so the selector demos the animation instead of waiting the random gap. */
 	previewMode(mode: PetMode): void {
 		this.#applyMode(mode, false);
@@ -341,7 +344,7 @@ export class SayknowPetWidget {
 		const mode = this.#mode;
 		if (mode === "off") return "base";
 		// Random idle burst → the skin's own animation, driven by its burst descriptor
-		// (RedSayknow holds a flex; BlueSayknow dances the para-para then sobs).
+		// (RedOctopus holds a flex; BlueOctopus dances the para-para then sobs).
 		if (now < this.#flexUntil) {
 			const burst = PET_SKINS[mode].burst;
 			const elapsed = now - (this.#flexUntil - petBurstDurationMs(burst));
@@ -384,7 +387,7 @@ export class SayknowPetWidget {
 			}
 		}
 		// Random show-off, both while idle and while working. Each skin's burst runs for
-		// its own length (RedSayknow a brief flex; BlueSayknow a para-para cycle plus sob).
+		// its own length (RedOctopus a brief flex; BlueOctopus a para-para cycle plus sob).
 		if (this.#autoFlexGapMs && now >= this.#flexUntil) {
 			if (this.#nextAutoFlexAt === 0) {
 				this.#scheduleAutoFlex(now);
@@ -429,11 +432,35 @@ export class SayknowPetWidget {
 		return out;
 	}
 
+	/**
+	 * Whether pet art must be smuggled to the outer terminal through tmux's DCS
+	 * passthrough envelope. True exactly when the multiplexer suppressed inline
+	 * graphics and the startup probe proved the outer terminal can draw them.
+	 */
+	#usesTmuxPassthrough(): boolean {
+		return TERMINAL.imageProtocol === null && getTmuxOverlayImageProtocol() !== null;
+	}
+
+	/**
+	 * Cursor-position escape for the pet's top-left cell.
+	 *
+	 * Passthrough payloads address the OUTER terminal's screen, so they carry the
+	 * pane origin; tmux-level payloads stay pane-relative.
+	 */
+	#cursorTo(x: number, y: number, outer: boolean): string {
+		const offset = outer ? tmuxPaneOffset() : { top: 0, left: 0 };
+		return `\x1b[${y + offset.top + 1};${x + offset.left + 1}H`;
+	}
+
 	/** Pending on-screen image cleanup. Pure: authority is consumed separately, on delivery. */
 	#imageCleanupPayload(): string {
 		let out = "";
 		if (this.#kittyCleanupPending && this.#kittyImageId !== undefined) {
-			out += `\x1b_Ga=d,d=I,i=${this.#kittyImageId},q=2\x1b\\`;
+			// Deleting by image id needs no cursor addressing, but it still has to
+			// reach the terminal that holds the placement — the outer one when the
+			// art was delivered through passthrough.
+			const del = `\x1b_Ga=d,d=I,i=${this.#kittyImageId},q=2\x1b\\`;
+			out += this.#usesTmuxPassthrough() ? wrapTmuxPassthrough(del) : del;
 		}
 		if (this.#lastSixelFootprint) {
 			out += this.#clearSixelFootprint(this.#lastSixelFootprint);
@@ -491,8 +518,10 @@ export class SayknowPetWidget {
 		// A full frame supersedes any cleanup-only frame still awaiting ack.
 		this.#frameCleanupAwaitingAck = false;
 		const { x, y } = pos;
+		const frame = pixel.frames[this.#frame];
 		let out = "";
-		const positioned = `\x1b[${y + 1};${x + 1}H${pixel.frames[this.#frame]}`;
+		const positioned = `${this.#cursorTo(x, y, false)}${frame}`;
+		const positionedOuter = `${this.#cursorTo(x, y, true)}${frame}`;
 
 		if (pixel.protocol === "sixel") {
 			const footprint = { x, y, columns: pixel.columns, rows: pixel.rasterRows };
@@ -518,7 +547,7 @@ export class SayknowPetWidget {
 			out += tmuxOwnsSixel()
 				? positioned
 				: isUnderTmux()
-					? wrapTmuxPassthrough(`\x1b7${positioned}\x1b8`)
+					? wrapTmuxPassthrough(`\x1b7${positionedOuter}\x1b8`)
 					: positioned;
 			return out;
 		}
@@ -526,7 +555,12 @@ export class SayknowPetWidget {
 		// A kitty frame (re)places the image cursor-neutrally, so cleanup is pending
 		// again even if a narrow-terminal pass consumed it earlier.
 		this.#kittyCleanupPending = true;
-		out += positioned;
+		// Under tmux the placement is cursor-neutral for the OUTER terminal but its
+		// addressing is not: tmux forwards passthrough bytes without first syncing
+		// the physical cursor, so the frame carries its own outer-screen position,
+		// and the save/restore pair sits inside the envelope so the outer cursor is
+		// exactly where tmux believes it left it.
+		out += this.#usesTmuxPassthrough() ? wrapTmuxPassthrough(`\x1b7${positionedOuter}\x1b8`) : positioned;
 		return out;
 	}
 }

package/src/modes/controllers/event-controller.ts

@@ -869,7 +869,7 @@ export class EventController {
 				(content: { type: string; text?: string }) => content.type === "text",
 			)?.text;
 			this.ctx.showWarning(
-				`Todo update failed${textContent ? `: ${textContent}` : ". Progress may be stale until todo_write succeeds."}`,
+				`Todo update failed${textContent ? `: ${textContent}` : ""}. Work continues without visible todo progress for this turn.`,
 			);
 		}
 		if (event.toolName === "resolve" && !event.isError) {

package/src/modes/shared/agent-wire/unattended-session.ts

@@ -104,6 +104,12 @@ export function modelSupportsTokenCostMetrics(model: Model | undefined): boolean
 export interface WorkflowGateEmitter {
 	/** True only when unattended mode has been negotiated. */
 	isUnattended(): boolean;
+	/**
+	 * True when gates emitted through this emitter can be answered remotely
+	 * (workflow_gate_response over RPC/bridge). The ask tool refuses headless
+	 * execution unless this reports true.
+	 */
+	supportsRemoteGateAnswers(): boolean;
 	/** Open + emit a gate; resolves with the agent's answer (from workflow_gate_response). */
 	emitGate(input: OpenGateInput): Promise<unknown>;
 	/**
@@ -157,6 +163,10 @@ export class UnattendedSessionControlPlane implements RpcUnattendedControlPlane,
 		return this.#controller !== undefined;
 	}
 
+	supportsRemoteGateAnswers(): boolean {
+		return true;
+	}
+
 	/** Observe every emitted gate (e.g. so an extension can map an ask to its gate_id). */
 	onGateEmitted(listener: (gate: RpcWorkflowGate) => void): () => void {
 		this.#gateListeners.add(listener);
@@ -219,19 +229,27 @@ export class UnattendedSessionControlPlane implements RpcUnattendedControlPlane,
 		this.#broker = new WorkflowGateBroker(this.opts.runId, this.opts.store ?? new MemoryGateStore(), {
 			emit: gate => this.opts.emitFrame(gate),
 			audit: e => this.opts.audit?.(e),
-			advance: (gate, answer) => {
-				const pending = this.#pending.get(gate.gate_id);
+			// The broker verifies the continuation is still live *after* `advance`
+			// returns, so the pending waiter must survive advance and only settle in
+			// `completeAccepted` (mirroring the session-side gate emitter).
+			advance: () => {},
+			completeAccepted: record => {
+				const pending = this.#pending.get(record.gate.gate_id);
 				if (pending) {
-					this.#pending.delete(gate.gate_id);
-					pending.resolve(answer);
+					this.#pending.delete(record.gate.gate_id);
+					pending.resolve(record.answer);
 					return;
 				}
 				// A controller may answer synchronously while emitFrame is still on the
 				// stack. Keep the accepted answer so emitGate can still resolve after
 				// openGate returns and the caller starts awaiting.
-				this.#earlyAnswers.set(gate.gate_id, answer);
+				this.#earlyAnswers.set(record.gate.gate_id, record.answer);
 			},
 			finalizeAccepted: record => this.#finalizeAcceptedGate(record),
+			// The control plane's durable record is the gate store itself; it never
+			// publishes a separate terminal transcript, so accepted gates (live and
+			// recovered) terminalize with the designed "not_published" proof.
+			terminalizeAccepted: () => "not_published",
 		});
 		this.#brokerReady = true;
 		void this.startRecoveryOnce();
@@ -496,7 +514,21 @@ export class UnattendedSessionControlPlane implements RpcUnattendedControlPlane,
 		if (!this.#broker) {
 			return Promise.reject(new Error("cannot emit a workflow gate before unattended mode is negotiated"));
 		}
-		const gate = this.#broker.openGate(input);
+		// Opening without a continuation quarantines the gate as
+		// "opened_without_continuation", which makes it permanently unanswerable.
+		// Register the pending waiter through the continuation contract so the
+		// broker records a live, resolvable gate and can fence it on release.
+		const waiter = Promise.withResolvers<unknown>();
+		const gate = this.#broker.openGate(input, {
+			activate: opened => this.#pending.set(opened.gate_id, { resolve: waiter.resolve, reject: waiter.reject }),
+			isLive: gateId => this.#pending.has(gateId),
+			release: gateId => {
+				const pending = this.#pending.get(gateId);
+				if (!pending) return;
+				this.#pending.delete(gateId);
+				pending.reject(new Error(`workflow gate ${gateId} continuation was fenced`));
+			},
+		});
 		for (const listener of this.#gateListeners) {
 			try {
 				listener(gate);
@@ -507,11 +539,10 @@ export class UnattendedSessionControlPlane implements RpcUnattendedControlPlane,
 		if (this.#earlyAnswers.has(gate.gate_id)) {
 			const answer = this.#earlyAnswers.get(gate.gate_id);
 			this.#earlyAnswers.delete(gate.gate_id);
+			this.#pending.delete(gate.gate_id);
 			return Promise.resolve(answer);
 		}
-		const { promise, resolve, reject } = Promise.withResolvers<unknown>();
-		this.#pending.set(gate.gate_id, { resolve, reject });
-		return promise;
+		return waiter.promise;
 	}
 
 	async recover(): Promise<void> {

package/src/modes/shared/agent-wire/workflow-gate-broker.ts

@@ -96,6 +96,8 @@ export interface AskSelectedAckRecoveryParticipant {
 /** SDK-native surface for emitting a workflow gate and awaiting its answer. */
 export interface WorkflowGateEmitter {
 	supportsRemoteGateAnswers(): boolean;
+	/** True when an unattended run has been negotiated for this emitter (control-plane emitters). */
+	isUnattended?(): boolean;
 	emitGate(input: OpenGateInput): Promise<unknown>;
 	onGateEmitted?(listener: (gate: WorkflowGate) => void): () => void;
 	resolveGate?(response: WorkflowGateResponse): Promise<WorkflowGateResolution>;