commandmate 0.46.1 → 0.47.0

package/dist/lib/prompt-observation/kinds.d.ts

@@ -0,0 +1,101 @@
+/**
+ * The screen kinds a prompt observation publishes (Issue #3755, #3746 A-3).
+ *
+ * ## Why a vocabulary of its own
+ *
+ * `promptData.type` (`yes_no` / `multiple_choice` / `unclassified`) says how a
+ * parsed prompt is answered, and agy's status detector
+ * (`detection/tools/antigravity/detect.ts`) publishes the folder-trust screen,
+ * the `/model` picker and the slash popup under ONE reason
+ * (`antigravity_selection_list`). Neither can say "this is the trust screen and
+ * not the picker", which is exactly what a caller about to answer one of them
+ * has to be sure of (#3746 P4-1). So the values a caller may branch on — and
+ * that the strict `respond` (#3756) may make a send condition — live here, and
+ * are never mixed into `promptData.type` or read back from the detector's
+ * reason.
+ *
+ * A kind is added only for a screen whose reading is pinned to a measured
+ * frame. Everything else that waits on a human is `unknown`: an unmeasured
+ * screen must not borrow a measured screen's name.
+ *
+ * ## No imports, on purpose
+ *
+ * The CLI (`tsconfig.cli.json`) compiles with `"paths": {}` and reaches a
+ * module under `src/lib` only by a relative path whose graph uses no `@/`
+ * alias (the arrangement `lib/session/prompt-view` documents). `prompt` and
+ * `wait` import these values from here rather than restating them.
+ *
+ * @module lib/prompt-observation/kinds
+ */
+/** `schemaVersion` of the observation payload. Bumped when a field changes meaning. */
+export declare const PROMPT_OBSERVATION_SCHEMA_VERSION = 1;
+/**
+ * Every kind an observation can publish.
+ *
+ * - `antigravity-trust` — agy's first-run folder trust screen (`Do you trust
+ *   the contents of this project?` over `> Yes, I trust this folder` /
+ *   `No, exit`). Unnumbered; Enter confirms the highlighted row.
+ * - `antigravity-model-picker` — agy's `/model` picker (`Switch Model`): the
+ *   1.1.27 layout (`antigravity-live-2364/picker-switch-model.txt`) and the
+ *   1.4 one with a search box (`prompt-observation-3797/`, Issue #3797).
+ * - `antigravity-permission` — agy's numbered permission dialog (command
+ *   execution, file creation; `tests/fixtures/antigravity-live-2364/dialog-*`),
+ *   ending on its `tab Amend` footer. agy's numbered login-method screen is
+ *   not one (`unknown`).
+ * - `antigravity-slash-menu` — agy's slash-command popup.
+ * - `composer` — no confirmation: the agent sits at its input box.
+ * - `none` — no confirmation, and not at the input box either (working).
+ * - `unknown` — something waits on a human and no measured reading names it.
+ */
+export declare const PROMPT_OBSERVATION_KINDS: readonly ["antigravity-trust", "antigravity-model-picker", "antigravity-permission", "antigravity-slash-menu", "composer", "none", "unknown"];
+export type PromptObservationKind = (typeof PROMPT_OBSERVATION_KINDS)[number];
+/** The two kinds that mean "nothing on screen is asking for a decision". */
+export declare const NO_PROMPT_OBSERVATION_KINDS: readonly PromptObservationKind[];
+/** Whether `value` is one of {@link PROMPT_OBSERVATION_KINDS}. */
+export declare function isPromptObservationKind(value: unknown): value is PromptObservationKind;
+/** Whether `kind` is a screen that asks for a decision (neither `composer` nor `none`). */
+export declare function isDecisionKind(kind: PromptObservationKind): boolean;
+/**
+ * The kinds the strict `respond` (Issue #3756) answers. Every other kind is
+ * refused before a key: the `/model` picker's effort slider is not read, the
+ * slash popup is a menu of the composer, and `unknown` is never answered.
+ */
+export declare const STRICT_RESPOND_KINDS: readonly ["antigravity-trust", "antigravity-permission"];
+export type StrictRespondKind = (typeof STRICT_RESPOND_KINDS)[number];
+/** Whether `kind` is one of {@link STRICT_RESPOND_KINDS}. */
+export declare function isStrictRespondKind(kind: unknown): kind is StrictRespondKind;
+/**
+ * Strict kinds whose rows carry no number: answered only by a label, which is
+ * sent as ↑/↓ and Enter. An option number or `--default` is refused there.
+ */
+export declare const UNNUMBERED_STRICT_RESPOND_KINDS: readonly StrictRespondKind[];
+/**
+ * Per strict kind, the answer whose consequence is the agent exiting (Issue
+ * #3788): its 1-based position, valid only on a screen that shows exactly
+ * `optionCount` options AND whose row at that position reads `label`. agy's
+ * trust screen offers `Yes, I trust this folder` then `No, exit` (measured:
+ * `tests/fixtures/prompt-observation-3755/antigravity-trust.txt`,
+ * `antigravity-live-2364/trust-dialog.txt`), and agy exits on the second.
+ *
+ * The three conditions only narrow: a screen drawn in another order, with
+ * another number of rows, or with another wording has no exiting answer, and
+ * its outcome stays `indeterminate` (exit 41).
+ *
+ * Only after such an answer may a shell back in front of the pane be read as
+ * the session having ended: after any other answer it is the agent falling
+ * over (a crash, a failed start), which the answer did not ask for. A kind
+ * absent here has no exiting answer.
+ */
+export declare const EXITING_STRICT_ANSWERS: Readonly<Partial<Record<StrictRespondKind, {
+    readonly position: number;
+    readonly optionCount: number;
+    readonly label: string;
+}>>>;
+/**
+ * Whether answering option `position` (1-based) of a `kind` screen showing
+ * `options` (labels in draw order) exits the agent: the declared position, the
+ * declared number of options, and the declared label at that position (runs of
+ * spaces folded, ends trimmed; case kept).
+ */
+export declare function isExitingStrictAnswer(kind: StrictRespondKind, position: number, options: readonly string[]): boolean;
+//# sourceMappingURL=kinds.d.ts.map

package/dist/lib/prompt-observation/kinds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kinds.d.ts","sourceRoot":"","sources":["../../../src/lib/prompt-observation/kinds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,uFAAuF;AACvF,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,wBAAwB,+IAQ3B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,4EAA4E;AAC5E,eAAO,MAAM,2BAA2B,EAAE,SAAS,qBAAqB,EAAyB,CAAC;AAElG,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAEtF;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAEnE;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,0DAA2D,CAAC;AAE7F,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,6DAA6D;AAC7D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,iBAAiB,CAE5E;AAED;;;GAGG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,iBAAiB,EAA0B,CAAC;AAEnG;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAIxH,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAIpH"}

package/dist/lib/prompt-observation/kinds.js

@@ -0,0 +1,123 @@
+"use strict";
+/**
+ * The screen kinds a prompt observation publishes (Issue #3755, #3746 A-3).
+ *
+ * ## Why a vocabulary of its own
+ *
+ * `promptData.type` (`yes_no` / `multiple_choice` / `unclassified`) says how a
+ * parsed prompt is answered, and agy's status detector
+ * (`detection/tools/antigravity/detect.ts`) publishes the folder-trust screen,
+ * the `/model` picker and the slash popup under ONE reason
+ * (`antigravity_selection_list`). Neither can say "this is the trust screen and
+ * not the picker", which is exactly what a caller about to answer one of them
+ * has to be sure of (#3746 P4-1). So the values a caller may branch on — and
+ * that the strict `respond` (#3756) may make a send condition — live here, and
+ * are never mixed into `promptData.type` or read back from the detector's
+ * reason.
+ *
+ * A kind is added only for a screen whose reading is pinned to a measured
+ * frame. Everything else that waits on a human is `unknown`: an unmeasured
+ * screen must not borrow a measured screen's name.
+ *
+ * ## No imports, on purpose
+ *
+ * The CLI (`tsconfig.cli.json`) compiles with `"paths": {}` and reaches a
+ * module under `src/lib` only by a relative path whose graph uses no `@/`
+ * alias (the arrangement `lib/session/prompt-view` documents). `prompt` and
+ * `wait` import these values from here rather than restating them.
+ *
+ * @module lib/prompt-observation/kinds
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXITING_STRICT_ANSWERS = exports.UNNUMBERED_STRICT_RESPOND_KINDS = exports.STRICT_RESPOND_KINDS = exports.NO_PROMPT_OBSERVATION_KINDS = exports.PROMPT_OBSERVATION_KINDS = exports.PROMPT_OBSERVATION_SCHEMA_VERSION = void 0;
+exports.isPromptObservationKind = isPromptObservationKind;
+exports.isDecisionKind = isDecisionKind;
+exports.isStrictRespondKind = isStrictRespondKind;
+exports.isExitingStrictAnswer = isExitingStrictAnswer;
+/** `schemaVersion` of the observation payload. Bumped when a field changes meaning. */
+exports.PROMPT_OBSERVATION_SCHEMA_VERSION = 1;
+/**
+ * Every kind an observation can publish.
+ *
+ * - `antigravity-trust` — agy's first-run folder trust screen (`Do you trust
+ *   the contents of this project?` over `> Yes, I trust this folder` /
+ *   `No, exit`). Unnumbered; Enter confirms the highlighted row.
+ * - `antigravity-model-picker` — agy's `/model` picker (`Switch Model`): the
+ *   1.1.27 layout (`antigravity-live-2364/picker-switch-model.txt`) and the
+ *   1.4 one with a search box (`prompt-observation-3797/`, Issue #3797).
+ * - `antigravity-permission` — agy's numbered permission dialog (command
+ *   execution, file creation; `tests/fixtures/antigravity-live-2364/dialog-*`),
+ *   ending on its `tab Amend` footer. agy's numbered login-method screen is
+ *   not one (`unknown`).
+ * - `antigravity-slash-menu` — agy's slash-command popup.
+ * - `composer` — no confirmation: the agent sits at its input box.
+ * - `none` — no confirmation, and not at the input box either (working).
+ * - `unknown` — something waits on a human and no measured reading names it.
+ */
+exports.PROMPT_OBSERVATION_KINDS = [
+    'antigravity-trust',
+    'antigravity-model-picker',
+    'antigravity-permission',
+    'antigravity-slash-menu',
+    'composer',
+    'none',
+    'unknown',
+];
+/** The two kinds that mean "nothing on screen is asking for a decision". */
+exports.NO_PROMPT_OBSERVATION_KINDS = ['composer', 'none'];
+/** Whether `value` is one of {@link PROMPT_OBSERVATION_KINDS}. */
+function isPromptObservationKind(value) {
+    return typeof value === 'string' && exports.PROMPT_OBSERVATION_KINDS.includes(value);
+}
+/** Whether `kind` is a screen that asks for a decision (neither `composer` nor `none`). */
+function isDecisionKind(kind) {
+    return !exports.NO_PROMPT_OBSERVATION_KINDS.includes(kind);
+}
+/**
+ * The kinds the strict `respond` (Issue #3756) answers. Every other kind is
+ * refused before a key: the `/model` picker's effort slider is not read, the
+ * slash popup is a menu of the composer, and `unknown` is never answered.
+ */
+exports.STRICT_RESPOND_KINDS = ['antigravity-trust', 'antigravity-permission'];
+/** Whether `kind` is one of {@link STRICT_RESPOND_KINDS}. */
+function isStrictRespondKind(kind) {
+    return typeof kind === 'string' && exports.STRICT_RESPOND_KINDS.includes(kind);
+}
+/**
+ * Strict kinds whose rows carry no number: answered only by a label, which is
+ * sent as ↑/↓ and Enter. An option number or `--default` is refused there.
+ */
+exports.UNNUMBERED_STRICT_RESPOND_KINDS = ['antigravity-trust'];
+/**
+ * Per strict kind, the answer whose consequence is the agent exiting (Issue
+ * #3788): its 1-based position, valid only on a screen that shows exactly
+ * `optionCount` options AND whose row at that position reads `label`. agy's
+ * trust screen offers `Yes, I trust this folder` then `No, exit` (measured:
+ * `tests/fixtures/prompt-observation-3755/antigravity-trust.txt`,
+ * `antigravity-live-2364/trust-dialog.txt`), and agy exits on the second.
+ *
+ * The three conditions only narrow: a screen drawn in another order, with
+ * another number of rows, or with another wording has no exiting answer, and
+ * its outcome stays `indeterminate` (exit 41).
+ *
+ * Only after such an answer may a shell back in front of the pane be read as
+ * the session having ended: after any other answer it is the agent falling
+ * over (a crash, a failed start), which the answer did not ask for. A kind
+ * absent here has no exiting answer.
+ */
+exports.EXITING_STRICT_ANSWERS = {
+    // eslint-disable-next-line no-restricted-syntax -- agy's drawn option row, matched against the screen, not display text
+    'antigravity-trust': { position: 2, optionCount: 2, label: 'No, exit' },
+};
+/**
+ * Whether answering option `position` (1-based) of a `kind` screen showing
+ * `options` (labels in draw order) exits the agent: the declared position, the
+ * declared number of options, and the declared label at that position (runs of
+ * spaces folded, ends trimmed; case kept).
+ */
+function isExitingStrictAnswer(kind, position, options) {
+    const exiting = exports.EXITING_STRICT_ANSWERS[kind];
+    if (exiting === undefined || exiting.position !== position || exiting.optionCount !== options.length)
+        return false;
+    return options[position - 1].replace(/\s+/g, ' ').trim() === exiting.label;
+}

package/dist/lib/prompt-observation/types.d.ts

@@ -0,0 +1,271 @@
+/**
+ * The payload of one prompt observation (Issue #3755): what
+ * `GET /api/worktrees/:id/current-output?observe=1` adds as `promptObservation`,
+ * what `commandmate prompt --json` prints, and what `commandmate wait` adds to
+ * its exit-10 payload as `observation`.
+ *
+ * Types only, and importable from the CLI for the reason `./kinds` gives: the
+ * two imports outside this directory (`polling/auto-yes-suppression-reason`,
+ * `session/send-attempt-types`) have no imports of their own.
+ *
+ * @module lib/prompt-observation/types
+ */
+import type { PromptObservationKind } from './kinds';
+import type { AutoYesSuppressionReason } from '../polling/auto-yes-suppression-reason';
+import type { LastSendAttempt } from '../session/send-attempt-types';
+/** One option of the observed screen, in draw order. */
+export interface PromptObservationOption {
+    /** 1-based position on screen (the row a human would count to). */
+    position: number;
+    /** The label as drawn, highlight marker and number prefix removed. */
+    label: string;
+}
+/** How the observed screen is answered today. */
+export type PromptObservationAnswerVia = 
+/** Keys typed at the pane through `respond` (an option number or y/n). */
+'screen'
+/** A decision delivered over the agent's own API (`respond <id> <number>`). */
+ | 'api'
+/** agy's folder-trust screen: `respond --expect-screen` answers it (Issue #3771). */
+ | 'strict'
+/** Nothing `respond` can send today: a human answers at the pane. */
+ | 'terminal'
+/** There is nothing to answer (`composer` / `none`). */
+ | 'none';
+/**
+ * Why a screen carries no token:
+ * - `no-decision`: nothing asks (`composer` / `none`)
+ * - `unknown-screen`: no measured reading names the screen; it is never
+ *   answered by token
+ * - `no-session-generation`: the server did not create the running agent (it
+ *   predates a restart), so the token could not be bound to a generation
+ */
+export type PromptObservationTokenWithheld = 'no-decision' | 'unknown-screen' | 'no-session-generation';
+/** What is on the screen, read once. */
+export interface PromptObservationScreen {
+    kind: PromptObservationKind;
+    /**
+     * The observation token (`./token`), or null — see {@link tokenWithheld}.
+     * Short lived, single use, and bound to the instance, the session
+     * generation, the pane, this appearance of the screen, the kind, the
+     * question, the options, the approval target and the highlighted option —
+     * so a sender can prove the screen it answers is the screen it read.
+     *
+     * Single use per appearance: the strict `respond` (#3756) consumes it BEFORE
+     * sending, so a send that then fails has still burnt it (fail closed).
+     *
+     * Known gap: a screen that goes away and comes back with the same words
+     * between two observations, with nothing observed in between, is the same
+     * appearance (`./appearance`), so a token from the first still verifies.
+     */
+    token: string | null;
+    /** Epoch ms after which the token no longer verifies; null with no token. */
+    tokenExpiresAt: number | null;
+    /** Why {@link token} is null; null when there is a token. */
+    tokenWithheld: PromptObservationTokenWithheld | null;
+    /**
+     * Epoch ms this appearance of the screen was first observed (bound by the
+     * token), or null when no token was issued.
+     */
+    appearedAt: number | null;
+    /** The question as drawn, or null when the screen asks none. */
+    question: string | null;
+    /**
+     * What the screen asks approval for: the folder on the trust screen, the
+     * command block on a permission dialog. Null when the screen names none.
+     *
+     * A trust screen whose folder could not be read is still `antigravity-trust`,
+     * with `approvalTarget: null` (and the token binds that null). A sender that
+     * answers a trust screen (#3756) must require kind `antigravity-trust` AND an
+     * `approvalTarget` equal to the folder it expects — a null one never matches.
+     */
+    approvalTarget: string | null;
+    options: PromptObservationOption[];
+    /** 1-based position of the highlighted option, or null when none is. */
+    selectedPosition: number | null;
+    answerVia: PromptObservationAnswerVia;
+    /** The detector's verdict on the same frame, for diagnosis only (never a send condition). */
+    sessionStatus: string;
+    sessionStatusReason: string;
+}
+/**
+ * How the poller's record relates to the screen observed now.
+ *
+ * The record carries a reason, a prompt type and a time — nothing that names
+ * the screen it was made on — so it can never be CONFIRMED to be about this
+ * screen. What can be shown is that it is not: `type-mismatch` (it was made on
+ * a prompt of another type) and `no-prompt-on-screen` (nothing is asking now).
+ * Every other case is `unknown`.
+ */
+export type PollerRecordScreenCorrelation = 'unknown' | 'type-mismatch' | 'no-prompt-on-screen';
+/** The last answer the Auto-Yes poller (or the permission hook) recorded as withheld. */
+export interface PromptObservationPollerRecord {
+    /** As recorded. A server newer than the reader may name a reason the reader does not know. */
+    reason: AutoYesSuppressionReason | string;
+    mode: string | null;
+    promptType: string;
+    pattern?: string;
+    /** Epoch ms of the record (refreshed while the poller keeps withholding). */
+    at: number;
+    ageSeconds: number;
+    screenCorrelation: PollerRecordScreenCorrelation;
+}
+/**
+ * The contract's Auto-Yes policy, evaluated NOW against the observed screen.
+ *
+ * Not what the poller did — that is {@link PromptObservationPollerRecord} —
+ * and not "Auto-Yes will answer": the poller has gates of its own (the
+ * tool-specific dialog reader, launch dialogs, partial answers) that this does
+ * not run. `policy-permits` says only that the contract would not stop it.
+ */
+export type PromptObservationContractEvaluation = {
+    state: 'policy-withholds';
+    reason: AutoYesSuppressionReason;
+    pattern?: string;
+    contract: PromptObservationContract | null;
+} | {
+    state: 'policy-permits';
+    contract: PromptObservationContract | null;
+} | {
+    /** The base rules would not answer this prompt at all (no default, text input, checkboxes). */
+    state: 'no-base-answer';
+    contract: PromptObservationContract | null;
+} | {
+    state: 'not-evaluated';
+    /** `no-parsed-prompt`: the screen carries no prompt the resolver reads (selection screens, `unknown`, nothing asking). */
+    because: 'no-parsed-prompt' | 'session-not-running';
+    contract: PromptObservationContract | null;
+};
+/** The contract governing the instance, as the policy cache read it. */
+export interface PromptObservationContract {
+    taskId: string | null;
+    mode: string | null;
+}
+/** Auto-Yes as it bears on the observed screen. */
+export interface PromptObservationAutoYes {
+    /** Null when the session is not running (the state outlives the session; `auto-yes` serves it). */
+    enabled: boolean | null;
+    expiresAt: number | null;
+    stopReason: string | null;
+    /** Whether the server's poller for this instance is running; null when not known. */
+    pollerActive: boolean | null;
+    /**
+     * The poller's last record, or null when it recorded nothing. **Null is not
+     * "Auto-Yes can answer"**: a poller that never reached the screen records
+     * nothing either (#3746 P2).
+     */
+    pollerRecord: PromptObservationPollerRecord | null;
+    contractEvaluation: PromptObservationContractEvaluation;
+}
+/** One observation of one instance's screen. */
+export interface PromptObservation {
+    schemaVersion: number;
+    /** Epoch ms the observation was made. */
+    observedAt: number;
+    /** The target the server resolved the request to. */
+    target: {
+        worktreeId: string;
+        cliToolId: string;
+        instanceId: string;
+        /** The tmux session (pane) the frame was read from. */
+        sessionName: string;
+        resolvedBy: string | null;
+    };
+    session: {
+        running: boolean;
+        /** Whether the instance is still launching (`startingSince` non-null). */
+        starting: boolean;
+        /**
+         * Epoch ms the current agent process was created by this server, or null
+         * when this server did not create it (it was running before a restart).
+         */
+        generation: number | null;
+    };
+    /**
+     * `observed`: the screen was read, and {@link screen} says what is on it —
+     * including `composer` / `none` when nothing asks. `unavailable`: there is no
+     * screen to read, and {@link screen} is null.
+     */
+    status: 'observed' | 'unavailable';
+    unavailableReason: 'session-not-running' | null;
+    screen: PromptObservationScreen | null;
+    autoYes: PromptObservationAutoYes;
+    /**
+     * How the last send to this instance ended (Issue #3759): `not-sent` (no key
+     * of the body was typed — resend it yourself), `sent`, or `indeterminate`
+     * (part of it may have been typed — do not resend before checking the pane).
+     * Nothing is resent automatically. Null when this server holds no record
+     * (none since it started); absent from a server older than the field.
+     */
+    lastSend?: LastSendAttempt | null;
+}
+/**
+ * Why the strict `respond` (Issue #3756) sent nothing (exit 40) or could not
+ * say how its keys landed (exit 41).
+ */
+export type StrictRespondReason = 'session_not_running' | 'capture_failed' | 'observation_failed' | 'kind_mismatch' | 'unsupported_screen' | 'no_token_on_screen' | 'approval_target_unreadable' | 'expect_target_required' | 'target_mismatch' | 'label_not_found' | 'label_ambiguous' | 'number_on_unnumbered_screen' | 'number_out_of_range' | 'selection_unreadable' | 'screen_not_open' | 'startup_window_open' | 'startup_trust_in_flight' | 'token_malformed' | 'token_expired' | 'token_not_yet_valid' | 'token_mismatch' | 'token_consumed' | 'token_consumed_store_full' | 'strict_endpoint_missing' | 'session_conflict' | 'server_unreachable' | 'auto_yes_active' | 'send_failed' | 'screen_moved_mid_send' | 'highlight_not_reached' | 'outcome_unchanged' | 'outcome_indeterminate' | 'operation_in_progress'
+/** The operation id was used for another request (instance, screen, answer or token). */
+ | 'operation_id_conflict'
+/** Too many operations are still running to remember one more. */
+ | 'operation_table_full' | 'response_unknown';
+/**
+ * How far the strict `respond`'s keys got: `not-sent` (none), `partial` (↑/↓
+ * but not the Enter), `sent` (every key, Enter included), `indeterminate`
+ * (not known — a duplicate of an operation still running).
+ */
+export type StrictRespondDelivery = 'not-sent' | 'partial' | 'sent' | 'indeterminate';
+/**
+ * What the screen did after the Enter, read again within a few seconds:
+ * `unchanged` (the same screen), `advanced` (nothing asks any more: the input
+ * box, or working), `next-prompt` (another measured decision screen),
+ * `session-ended` (the session is gone, or — after the kind's exiting answer
+ * only, agy's `No, exit` — the agent exited back to the shell in a pane that is
+ * still up; Issue #3788), `indeterminate` (could not be read, or `unknown`).
+ */
+export type StrictRespondOutcome = 'unchanged' | 'advanced' | 'next-prompt' | 'session-ended' | 'indeterminate';
+/**
+ * The body of `POST /api/worktrees/:id/prompt-response/strict`, and what
+ * `commandmate respond --expect-screen … --json` prints.
+ */
+export interface StrictRespondResult {
+    /** Always 1: the field an older server's 404 never carries. */
+    strictRespond: 1;
+    /** The CLI's exit code: 0 answered, 40 nothing sent, 41 sent but not confirmed (never resend). */
+    code: 0 | 40 | 41;
+    delivery: StrictRespondDelivery;
+    /** Null when `code` is 0. */
+    reason: StrictRespondReason | null;
+    message: string;
+    expectedKind: string;
+    /** The kind the fresh capture showed; null when nothing could be read. */
+    observedKind: PromptObservationKind | null;
+    expectedTarget: string | null;
+    /** The approval target the fresh capture showed (the folder on a trust screen). */
+    observedTarget: string | null;
+    operationId: string;
+    /** The option the answer resolved to; null when it was not resolved. */
+    answer: {
+        position: number;
+        label: string;
+    } | null;
+    /** How many keys reached tmux. */
+    keysSent: number;
+    /** Null until the Enter was sent. */
+    outcome: StrictRespondOutcome | null;
+    /** True when this is the stored result of an earlier request with the same operation id. */
+    replayed: boolean;
+    /**
+     * Where the answer's arrows left the highlight when it stopped before its
+     * Enter (`delivery: 'partial'`), as the last read of the same screen showed
+     * it — so a caller sees that, say, a `(Persist to settings.json)` option is
+     * now the one an Enter at the pane would choose (Issue #3812). Null when the
+     * answer did not stop between keys, or when the position is not known (the
+     * screen moved, or a key was sent and not read back). Absent from a result
+     * the CLI makes itself and from a server before #3812.
+     */
+    highlightLeftAt?: {
+        position: number;
+        label: string;
+    } | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/prompt-observation/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/prompt-observation/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAErE,wDAAwD;AACxD,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,iDAAiD;AACjD,MAAM,MAAM,0BAA0B;AACpC,0EAA0E;AACxE,QAAQ;AACV,+EAA+E;GAC7E,KAAK;AACP,qFAAqF;GACnF,QAAQ;AACV,qEAAqE;GACnE,UAAU;AACZ,wDAAwD;GACtD,MAAM,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,MAAM,8BAA8B,GAAG,aAAa,GAAG,gBAAgB,GAAG,uBAAuB,CAAC;AAExG,wCAAwC;AACxC,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,qBAAqB,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,6EAA6E;IAC7E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,6DAA6D;IAC7D,aAAa,EAAE,8BAA8B,GAAG,IAAI,CAAC;IACrD;;;OAGG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;;;OAQG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,0BAA0B,CAAC;IACtC,6FAA6F;IAC7F,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,6BAA6B,GAAG,SAAS,GAAG,eAAe,GAAG,qBAAqB,CAAC;AAEhG,yFAAyF;AACzF,MAAM,WAAW,6BAA6B;IAC5C,8FAA8F;IAC9F,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAAC;IAC1C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,6BAA6B,CAAC;CAClD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,mCAAmC,GAC3C;IACE,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,wBAAwB,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAC5C,GACD;IAAE,KAAK,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAAA;CAAE,GACvE;IACE,+FAA+F;IAC/F,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAC5C,GACD;IACE,KAAK,EAAE,eAAe,CAAC;IACvB,0HAA0H;IAC1H,OAAO,EAAE,kBAAkB,GAAG,qBAAqB,CAAC;IACpD,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAC5C,CAAC;AAEN,wEAAwE;AACxE,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,mDAAmD;AACnD,MAAM,WAAW,wBAAwB;IACvC,mGAAmG;IACnG,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qFAAqF;IACrF,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,YAAY,EAAE,6BAA6B,GAAG,IAAI,CAAC;IACnD,kBAAkB,EAAE,mCAAmC,CAAC;CACzD;AAED,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,uDAAuD;QACvD,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,0EAA0E;QAC1E,QAAQ,EAAE,OAAO,CAAC;QAClB;;;WAGG;QACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF;;;;OAIG;IACH,MAAM,EAAE,UAAU,GAAG,aAAa,CAAC;IACnC,iBAAiB,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAChD,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,wBAAwB,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAE3B,qBAAqB,GACrB,gBAAgB,GAChB,oBAAoB,GACpB,eAAe,GACf,oBAAoB,GACpB,oBAAoB,GACpB,4BAA4B,GAC5B,wBAAwB,GACxB,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,6BAA6B,GAC7B,qBAAqB,GACrB,sBAAsB,GACtB,iBAAiB,GACjB,qBAAqB,GACrB,yBAAyB,GACzB,iBAAiB,GACjB,eAAe,GACf,qBAAqB,GACrB,gBAAgB,GAChB,gBAAgB,GAChB,2BAA2B,GAE3B,yBAAyB,GACzB,kBAAkB,GAClB,oBAAoB,GAEpB,iBAAiB,GAEjB,aAAa,GACb,uBAAuB,GACvB,uBAAuB,GACvB,mBAAmB,GACnB,uBAAuB,GACvB,uBAAuB;AACzB,yFAAyF;GACvF,uBAAuB;AACzB,kEAAkE;GAChE,sBAAsB,GAEtB,kBAAkB,CAAC;AAEvB;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,eAAe,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,GAAG,eAAe,CAAC;AAEhH;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,+DAA+D;IAC/D,aAAa,EAAE,CAAC,CAAC;IACjB,kGAAkG;IAClG,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAClB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,6BAA6B;IAC7B,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,YAAY,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mFAAmF;IACnF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACnD,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrC,4FAA4F;IAC5F,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC9D"}

package/dist/lib/prompt-observation/types.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * The payload of one prompt observation (Issue #3755): what
+ * `GET /api/worktrees/:id/current-output?observe=1` adds as `promptObservation`,
+ * what `commandmate prompt --json` prints, and what `commandmate wait` adds to
+ * its exit-10 payload as `observation`.
+ *
+ * Types only, and importable from the CLI for the reason `./kinds` gives: the
+ * two imports outside this directory (`polling/auto-yes-suppression-reason`,
+ * `session/send-attempt-types`) have no imports of their own.
+ *
+ * @module lib/prompt-observation/types
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/lib/session/send-attempt-types.d.ts

@@ -0,0 +1,66 @@
+/**
+ * What the last send to an instance did to its pane (Issue #3759): types only.
+ *
+ * Kept free of imports so the CLI can read the payload's shape through
+ * `lib/prompt-observation/types` without pulling the server graph in (the same
+ * rule `polling/auto-yes-suppression-reason` follows).
+ *
+ * @module lib/session/send-attempt-types
+ */
+/**
+ * - `not-sent`: it failed before any key of the message body was typed (the
+ *   input prompt never came back, a dialog was open, the session was another
+ *   server's). The message is not on the pane.
+ * - `sent`: the body was typed and its submit was confirmed.
+ * - `indeterminate`: it failed after part of the body may have been typed, or
+ *   its outcome could not be read back. The message may be in the composer, or
+ *   may even have been submitted.
+ *
+ * Nothing is resent automatically in any state. A `not-sent` message is the
+ * sender's to resend; an `indeterminate` one must not be resent before the pane
+ * has been looked at (`capture --pane`), or it can arrive twice.
+ */
+export type SendAttemptState = 'not-sent' | 'sent' | 'indeterminate';
+export type SendAttemptReason = 
+/** `sent`: the submit was confirmed. */
+'submitted'
+/** `not-sent`: the input prompt did not appear within the wait (#3746). */
+ | 'prompt-not-ready'
+/** `not-sent`: the session was launched and is still coming up. */
+ | 'session-starting'
+/** `not-sent`: the session could not be started. */
+ | 'session-start-failed'
+/** `not-sent`: a prompt dialog was open (#1708). */
+ | 'prompt-waiting'
+/** `not-sent`: the tmux session belongs to another server (#2865). */
+ | 'foreign-session'
+/** `not-sent`: copilot's `/model` switch failed before the body. */
+ | 'model-switch-failed'
+/** `not-sent`: the composer held text that could not be cleared (#1880). */
+ | 'composer-not-empty'
+/** `not-sent`: a Command Code plan review overlay refused the send before the body (#3125/#3772). */
+ | 'plan-review'
+/** `indeterminate`: the body was typed, did not land intact, and was taken back out best-effort (#2464/#3366). */
+ | 'body-not-landed'
+/** `indeterminate`: an autocompletion replaced the body; the line was cleared best-effort (#1501). */
+ | 'replaced-by-completion'
+/** `indeterminate`: the body was typed and Enter sent, but the submit was never confirmed (#1471). */
+ | 'submit-unconfirmed'
+/** `indeterminate`: a read of the composer after the failure still shows the body. */
+ | 'composer-residue'
+/** `indeterminate`: any other failure; where it stopped is not known. */
+ | 'send-error';
+/** The last send attempt as `prompt --json` publishes it (`lastSend`). */
+export interface LastSendAttempt {
+    /** Epoch ms the attempt ended. */
+    at: number;
+    state: SendAttemptState;
+    /** As recorded. A server newer than the reader may name a reason the reader does not know. */
+    reason: SendAttemptReason | string;
+}
+/**
+ * `code` on the error a tool throws when a plan review overlay refuses the
+ * send before any body is typed (Issue #3772). Matched by code, never by wording.
+ */
+export declare const PLAN_REVIEW_SEND_REFUSED_CODE = "PLAN_REVIEW_SEND_REFUSED";
+//# sourceMappingURL=send-attempt-types.d.ts.map

package/dist/lib/session/send-attempt-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-attempt-types.d.ts","sourceRoot":"","sources":["../../../src/lib/session/send-attempt-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,MAAM,GAAG,eAAe,CAAC;AAErE,MAAM,MAAM,iBAAiB;AAC3B,wCAAwC;AACtC,WAAW;AACb,2EAA2E;GACzE,kBAAkB;AACpB,mEAAmE;GACjE,kBAAkB;AACpB,oDAAoD;GAClD,sBAAsB;AACxB,oDAAoD;GAClD,gBAAgB;AAClB,sEAAsE;GACpE,iBAAiB;AACnB,oEAAoE;GAClE,qBAAqB;AACvB,4EAA4E;GAC1E,oBAAoB;AACtB,qGAAqG;GACnG,aAAa;AACf,kHAAkH;GAChH,iBAAiB;AACnB,sGAAsG;GACpG,wBAAwB;AAC1B,sGAAsG;GACpG,oBAAoB;AACtB,sFAAsF;GACpF,kBAAkB;AACpB,yEAAyE;GACvE,YAAY,CAAC;AAEjB,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,gBAAgB,CAAC;IACxB,8FAA8F;IAC9F,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAAC;CACpC;AAED;;;GAGG;AACH,eAAO,MAAM,6BAA6B,6BAA6B,CAAC"}

package/dist/lib/session/send-attempt-types.js

@@ -0,0 +1,17 @@
+"use strict";
+/**
+ * What the last send to an instance did to its pane (Issue #3759): types only.
+ *
+ * Kept free of imports so the CLI can read the payload's shape through
+ * `lib/prompt-observation/types` without pulling the server graph in (the same
+ * rule `polling/auto-yes-suppression-reason` follows).
+ *
+ * @module lib/session/send-attempt-types
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLAN_REVIEW_SEND_REFUSED_CODE = void 0;
+/**
+ * `code` on the error a tool throws when a plan review overlay refuses the
+ * send before any body is typed (Issue #3772). Matched by code, never by wording.
+ */
+exports.PLAN_REVIEW_SEND_REFUSED_CODE = 'PLAN_REVIEW_SEND_REFUSED';

package/dist/server/locales/en/worktree.json

@@ -562,6 +562,7 @@
         "reasonDismissablePanel": "This screen only closes. Press Esc here, with it in view below.",
         "reasonUnclassified": "Chat can't tell what this screen is. It is shown as-is below, so you can drive it with the keys here.",
         "reasonPromptUnreadable": "Waiting for an answer, and the options couldn't be read. Read the screen below and answer with a number or y/n.",
+        "reasonTrustConfirmation": "Terminal action needed (trust confirmation). The agent will not continue until you answer whether to trust this folder, and Auto-Yes does not answer this screen. Send the arrows and Enter from here, with the screen below in view, or answer it in the terminal.",
         "openTerminal": "Open terminal",
         "jumpToLatest": "Jump to latest",
         "jumpToLatestGenerating": "Jump to latest (still responding)",
@@ -1169,6 +1170,9 @@
         "opencodeToolbarLabel": "opencode model keys",
         "opencodeCaption": "Model"
     },
+    "trustConfirmation": {
+        "notice": "Terminal action needed (trust confirmation). The agent will not continue until you answer whether to trust this folder, and Auto-Yes does not answer this screen. Pick with the arrows and press Enter, or answer it in the terminal."
+    },
     "newFileDialog": {
         "title": "New File",
         "fileNameLabel": "File name",

package/dist/server/locales/ja/worktree.json

@@ -562,6 +562,7 @@
         "reasonDismissablePanel": "閉じるだけの画面です。下の画面を見ながら、ここで Esc を押せます。",
         "reasonUnclassified": "チャットでは種類を判別できない画面です。下にそのまま表示しているので、ここでキーを送って操作できます。",
         "reasonPromptUnreadable": "応答待ちですが選択肢を読み取れませんでした。下の画面を見て、番号か y／n で答えられます。",
+        "reasonTrustConfirmation": "端末で操作が必要です（信頼の確認）。このフォルダを信頼するかを答えるまで、エージェントは先へ進みません。Auto-Yes もこの確認には答えません。下の画面を見ながら、ここで矢印と決定キーを送るか、端末で答えてください。",
         "openTerminal": "ターミナルで確認",
         "jumpToLatest": "新着へ",
         "jumpToLatestGenerating": "新着へ（応答中）",
@@ -1169,6 +1170,9 @@
         "opencodeToolbarLabel": "opencode のモデルキー",
         "opencodeCaption": "モデル"
     },
+    "trustConfirmation": {
+        "notice": "端末で操作が必要です（信頼の確認）。このフォルダを信頼するかを答えるまで、エージェントは先へ進みません。Auto-Yes もこの確認には答えません。矢印で選んで決定キーを押すか、端末で答えてください。"
+    },
     "newFileDialog": {
         "title": "新規ファイル",
         "fileNameLabel": "ファイル名",