commandmate 0.46.1 → 0.47.0

package/dist/server/src/lib/detection/tools/claude/detect.js

@@ -10,6 +10,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.claudeStatusDetector = void 0;
 exports.findClaudeTranscriptTail = findClaudeTranscriptTail;
+exports.isClaudeAskUserQuestionConfirmPage = isClaudeAskUserQuestionConfirmPage;
 exports.readIdleEvidence = readIdleEvidence;
 const cli_patterns_1 = require("../../cli-patterns");
 const composer_text_1 = require("../../composer-text");
@@ -17,6 +18,7 @@ const prompt_detect_multiple_choice_1 = require("../../prompt-detect-multiple-ch
 const verdicts_1 = require("../verdicts");
 const status_reason_1 = require("../../status-reason");
 const prompt_1 = require("./prompt");
+const picker_chrome_1 = require("./picker-chrome");
 const frame_1 = require("../frame");
 const live_region_1 = require("./live-region");
 const run_detection_1 = require("../run-detection");
@@ -59,6 +61,64 @@ function findClaudeTranscriptTail(contentLines) {
     }
     return index;
 }
+/** The confirmation page's question, as the whole row (Issue #3748). */
+const CLAUDE_SUBMIT_CONFIRM_QUESTION_ROW = /^\s*Ready to submit your answers\?\s*$/;
+/** Its option 1, as the whole row, cursor or not. */
+const CLAUDE_SUBMIT_ANSWERS_OPTION_ROW = /^\s*(?:❯\s*)?1\.\s+Submit answers\s*$/;
+/** Its option 2, as the whole row, cursor or not. */
+const CLAUDE_SUBMIT_CANCEL_OPTION_ROW = /^\s*(?:❯\s*)?2\.\s+Cancel\s*$/;
+/** The multi-question tab bar's `✔ Submit` tab — only that bar leads to this page. */
+const CLAUDE_SUBMIT_TAB_PATTERN = /✔\s*Submit/;
+/**
+ * How far above the question the tab bar may sit: the page lists every
+ * question and answer (`● …` / `→ …`) between them, wrapped at the pane width.
+ */
+const CLAUDE_SUBMIT_CONFIRM_TAB_LOOKBACK = 200;
+/** The nearest non-blank row above `row`, or -1. */
+function previousNonBlankRow(lines, row) {
+    for (let i = row - 1; i >= 0; i--) {
+        if (lines[i].trim() !== '')
+            return i;
+    }
+    return -1;
+}
+/**
+ * Is this frame Claude's `AskUserQuestion` confirmation page? (Issue #3748)
+ *
+ * Read strictly, row by row, from the end of the transcript up — all of:
+ *
+ *  1. the transcript's last row ({@link findClaudeTranscriptTail}, which steps
+ *     over Claude's chrome) is `2. Cancel`, the row above it `1. Submit
+ *     answers`, and the cursor `❯` is on one of the two;
+ *  2. the nearest non-blank row above the options IS `Ready to submit your
+ *     answers?` — the whole row, not a row that contains it;
+ *  3. the multi-question tab bar (`←  ☒ …  ✔ Submit  →`) sits above that.
+ *
+ * Deliberately NOT `detectClaudeDialog`'s `ask_user` kind: that classifies by a
+ * substring of the four rows above the options, so a Bash approval whose command
+ * is `grep -rn "review your answers" src`, an Edit approval whose diff holds
+ * the phrase, or a question that asks it read as this page — and Auto-Yes then
+ * left an ordinary `1. Yes` to a human. The dialog gate's reading is unchanged.
+ *
+ * `Submit answers` picks nothing — it commits whatever stands as the answers —
+ * so Auto-Yes leaves this page to a human, as it does Command Code's (#3497).
+ */
+function isClaudeAskUserQuestionConfirmPage(frame) {
+    const lines = frame.contentLines;
+    const cancelRow = findClaudeTranscriptTail(lines);
+    if (cancelRow < 0 || !CLAUDE_SUBMIT_CANCEL_OPTION_ROW.test(lines[cancelRow]))
+        return false;
+    const submitRow = cancelRow - 1;
+    if (submitRow < 0 || !CLAUDE_SUBMIT_ANSWERS_OPTION_ROW.test(lines[submitRow]))
+        return false;
+    if (!lines[submitRow].includes('❯') && !lines[cancelRow].includes('❯'))
+        return false;
+    const questionRow = previousNonBlankRow(lines, submitRow);
+    if (questionRow < 0 || !CLAUDE_SUBMIT_CONFIRM_QUESTION_ROW.test(lines[questionRow]))
+        return false;
+    const tabRow = (0, picker_chrome_1.findAskUserQuestionTabRow)(lines, questionRow, CLAUDE_SUBMIT_CONFIRM_TAB_LOOKBACK);
+    return tabRow >= 0 && CLAUDE_SUBMIT_TAB_PATTERN.test(lines[tabRow]);
+}
 /**
  * §4 D1 決定 1: does this frame positively show that Claude's turn is over?
  *

package/dist/server/src/lib/detection/tools/command-code/selection-shape.js

@@ -17,6 +17,7 @@ exports.hasCommandCodePlanReviewFooterAtBottom = hasCommandCodePlanReviewFooterA
 exports.hasDismissablePanelFooter = hasDismissablePanelFooter;
 exports.isCommandCodeQuestionTabRow = isCommandCodeQuestionTabRow;
 exports.readCommandCodeReviewPage = readCommandCodeReviewPage;
+exports.isCommandCodeQuestionConfirmPage = isCommandCodeQuestionConfirmPage;
 const ansi_1 = require("../../ansi");
 const selection_shape_patterns_1 = require("../../selection-shape-patterns");
 /**
@@ -404,22 +405,13 @@ const COMMAND_CODE_REVIEW_BACK_HINT_PATTERN = /^[^\S\n]*\u2190[^\S\n]+to[^\S\n]+
  */
 const COMMAND_CODE_REVIEW_UNANSWERED_PATTERN = /have\s+not\s+answered\s+all\s+questions/i;
 /**
- * Read Command Code's `AskUserQuestion` Review page, if this frame is one
- * (Issue #2755 §7).
- *
- * The same region {@link readCommandCodeQuestionRegion} works on — last rule
- * row, tab strip as the first row under it — plus the three rows above. The
- * question-shaped conditions are deliberately NOT applied: this page has no
- * question body of its own on the `Submit`/`Cancel` spelling (the answers sit
- * where the question would), and it draws `1.` twice, so the strict reading
- * declines it for a numbering reason that says nothing about what it is.
- *
- * `null` for everything else, so no existing verdict moves except the two
- * captures this is about.
+ * The rows under the frame's LAST rule row, when the first of them that carries
+ * content is a question-screen tab strip (Issue #2755 §7, split out by Issue
+ * #3497 so the Review page reading and the confirm-page guard share one anchor).
  *
  * @param frame - a raw `capture-pane -p -e` frame, ANSI intact (CRLF tolerated)
  */
-function readCommandCodeReviewPage(frame) {
+function readQuestionTabRegion(frame) {
     if (!frame)
         return null;
     const lines = frame.replace(/\r\n/g, '\n').split('\n').map(ansi_1.stripAnsi);
@@ -446,6 +438,28 @@ function readCommandCodeReviewPage(frame) {
         return null;
     if (!isCommandCodeQuestionTabRow(region[tabOffset]))
         return null;
+    return region;
+}
+/**
+ * Read Command Code's `AskUserQuestion` Review page, if this frame is one
+ * (Issue #2755 §7).
+ *
+ * The same region {@link readCommandCodeQuestionRegion} works on — last rule
+ * row, tab strip as the first row under it — plus the three rows above. The
+ * question-shaped conditions are deliberately NOT applied: this page has no
+ * question body of its own on the `Submit`/`Cancel` spelling (the answers sit
+ * where the question would), and it draws `1.` twice, so the strict reading
+ * declines it for a numbering reason that says nothing about what it is.
+ *
+ * `null` for everything else, so no existing verdict moves except the two
+ * captures this is about.
+ *
+ * @param frame - a raw `capture-pane -p -e` frame, ANSI intact (CRLF tolerated)
+ */
+function readCommandCodeReviewPage(frame) {
+    const region = readQuestionTabRegion(frame);
+    if (region === null)
+        return null;
     const body = region.join('\n');
     if (!COMMAND_CODE_REVIEW_SUBMIT_ROW_PATTERN.test(body))
         return null;
@@ -459,3 +473,39 @@ function readCommandCodeReviewPage(frame) {
         cursorOnSubmit: submitRow !== undefined && submitRow.includes(exports.COMMAND_CODE_CURSOR_GLYPH),
     };
 }
+/**
+ * Is this frame an `AskUserQuestion` CONFIRM page — `❯ 1. Submit` / `2. Cancel`
+ * under the question screen's tab strip — whatever else it draws? (Issue #3497)
+ *
+ * {@link readCommandCodeReviewPage} needs all three of its rows, the back hint
+ * included, and on a frame without `← to go back and edit` it answers `null`.
+ * The question region declines that page too (it draws `1.` twice), so the
+ * GENERIC parser reads it; and a free-text question drawn with the pair as its
+ * only options is read by the question reader itself. Either way the payload is
+ * a two-option `multiple_choice` whose default is `Submit`, which Auto-Yes
+ * answered `1` — committing the worker's own proposal as the human's answer
+ * (Kewton/Musunest#283).
+ *
+ * This is the wider reading Auto-Yes declines on, and deliberately NOT a change
+ * to the Review page reading: the status path and the answer panels keep what
+ * they publish for these frames, so a human is still shown the question. True
+ * when the tab strip sits directly under the last rule row and the region
+ * carries the confirm pair — `1. Submit` and `2. Cancel`, the `❯` on either —
+ * with or without the back hint, and whichever tab is current (the incident's
+ * page was a free-text question drawn with the same pair).
+ *
+ * The question screens themselves (#2521 / #2522 / #2753 / #2754) never carry
+ * the pair: their `Submit` / `Next` confirm row has no number, and the Review
+ * TAB showing a diff (`◯ Dispatch | ● Review` over `1 +` gutter rows) has no
+ * `Submit` row at all.
+ *
+ * @param frame - a raw capture with its box drawing intact (ANSI optional)
+ */
+function isCommandCodeQuestionConfirmPage(frame) {
+    const region = readQuestionTabRegion(frame);
+    if (region === null)
+        return false;
+    const body = region.join('\n');
+    return (COMMAND_CODE_REVIEW_SUBMIT_ROW_PATTERN.test(body) &&
+        COMMAND_CODE_REVIEW_CANCEL_ROW_PATTERN.test(body));
+}

package/dist/server/src/lib/detection/tools/copilot/patterns.js

@@ -4,7 +4,7 @@
  * (Issue #3217). `cli-patterns.ts` re-exports every public name.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.COPILOT_SKIP_PATTERNS = exports.COPILOT_FOLDER_TRUST_ANSWER_KEY = exports.COPILOT_FOLDER_TRUST_SESSION_OPTION_PATTERN = exports.COPILOT_FOLDER_TRUST_ANCHORS = exports.COPILOT_SELECTION_FOOTER_PATTERN = exports.COPILOT_BOOT_BANNER_ANCHORS = exports.COPILOT_TRANSCRIPT_CONTINUATION_PATTERN = exports.COPILOT_TOOL_ROW_PATTERN = exports.COPILOT_TOOL_VERBS = exports.COPILOT_TRANSCRIPT_DIVIDER_PATTERN = exports.COPILOT_USER_ECHO_PATTERN = exports.COPILOT_REASONING_HEADER_PATTERN = exports.COPILOT_BOX_ROW_PATTERN = exports.COPILOT_SEPARATOR_PATTERN = exports.COPILOT_IDLE_STATUS_PATTERN = exports.COPILOT_WORKING_STATUS_PATTERN = exports.COPILOT_THINKING_PATTERN = exports.COPILOT_PROMPT_PATTERN = void 0;
+exports.COPILOT_SKIP_PATTERNS = exports.COPILOT_FOLDER_TRUST_ANSWER_KEY = exports.COPILOT_FOLDER_TRUST_OPTION_LABEL_PATTERN = exports.COPILOT_FOLDER_TRUST_SESSION_OPTION_PATTERN = exports.COPILOT_FOLDER_TRUST_ANCHORS = exports.COPILOT_SELECTION_FOOTER_PATTERN = exports.COPILOT_BOOT_BANNER_ANCHORS = exports.COPILOT_TRANSCRIPT_CONTINUATION_PATTERN = exports.COPILOT_TOOL_ROW_PATTERN = exports.COPILOT_TOOL_VERBS = exports.COPILOT_TRANSCRIPT_DIVIDER_PATTERN = exports.COPILOT_USER_ECHO_PATTERN = exports.COPILOT_REASONING_HEADER_PATTERN = exports.COPILOT_BOX_ROW_PATTERN = exports.COPILOT_SEPARATOR_PATTERN = exports.COPILOT_IDLE_STATUS_PATTERN = exports.COPILOT_WORKING_STATUS_PATTERN = exports.COPILOT_THINKING_PATTERN = exports.COPILOT_PROMPT_PATTERN = void 0;
 exports.readCopilotStatusBar = readCopilotStatusBar;
 exports.findCopilotChromeStart = findCopilotChromeStart;
 exports.isCopilotSelectionFrame = isCopilotSelectionFrame;
@@ -559,6 +559,12 @@ exports.COPILOT_FOLDER_TRUST_ANCHORS = [
  * line and accept `1. Yes, and remember ...`.
  */
 exports.COPILOT_FOLDER_TRUST_SESSION_OPTION_PATTERN = /^[ \t]*(?:[>❯][ \t]*)?1\.[ \t]+Yes[ \t]*$/m;
+/**
+ * The folder-trust dialog's option labels as the prompt parser reads them
+ * (`1. Yes` -> `Yes`), for the Auto-Yes poller to tell the dialog itself from
+ * another prompt under a reply that quotes its question (Issue #3790).
+ */
+exports.COPILOT_FOLDER_TRUST_OPTION_LABEL_PATTERN = /^(?:Yes|Yes, and remember this folder for future sessions|No \(Esc\))$/;
 /**
  * Key that selects {@link COPILOT_FOLDER_TRUST_SESSION_OPTION_PATTERN}.
  * Measured on 1.0.80: the digit confirms on its own — sending a trailing Enter

package/dist/server/src/lib/hooks/sources/opencode-v2/history.js

@@ -367,9 +367,13 @@ async function writeOpencodeV2Turn(target, rendered, timestampMs) {
  * @param target - The instance the stream belongs to
  * @param port - Its server
  * @param sessionId - `ses_…` from the end-of-turn frame
+ * @param isCurrent - Whether the subscription that asked is still the
+ *   instance's (Issue #3733); checked after the read, right before the model
+ *   is latched. False skips only the latch: the rows are still written (the
+ *   turn did happen, and `requestId` keeps a later sync from doubling them)
  * @returns How many rows were written
  */
-function syncOpencodeV2History(target, port, sessionId) {
+function syncOpencodeV2History(target, port, sessionId, isCurrent = () => true) {
     return serialize((0, secrets_1.opencodeV2KeyOf)(target), async () => {
         const instanceId = target.instanceId ?? target.cliToolId;
         try {
@@ -395,7 +399,12 @@ function syncOpencodeV2History(target, port, sessionId) {
             }
             // Issue #2964: the model that answered, onto the hook latch the UI and
             // `capture --json` read. Before the rows, so a failed write cannot cost it.
-            (0, agent_event_state_1.recordAgentReportedModel)(target.worktreeId, tool_id_1.OPENCODE_V2_CLI_TOOL_ID, target.instanceId ?? tool_id_1.OPENCODE_V2_CLI_TOOL_ID, readLatestOpencodeV2AssistantModel(entries));
+            // Issue #3733: not for a subscription closed or replaced during the read —
+            // a restarted or stopped session would show the old model, and its change
+            // broadcast and Push (#2357) would fire for a session that is not there.
+            if (isCurrent()) {
+                (0, agent_event_state_1.recordAgentReportedModel)(target.worktreeId, tool_id_1.OPENCODE_V2_CLI_TOOL_ID, target.instanceId ?? tool_id_1.OPENCODE_V2_CLI_TOOL_ID, readLatestOpencodeV2AssistantModel(entries));
+            }
             const closed = buildOpencodeV2TurnsFromMessages(entries, sessionId).filter((turn) => turn.closed);
             const kept = closed.slice(-exports.MAX_OPENCODE_V2_SYNCED_TURNS);
             let written = 0;

package/dist/server/src/lib/hooks/sources/opencode-v2/subscription.js

@@ -386,7 +386,7 @@ function deliver(state, frame) {
             error: error instanceof Error ? error.message : String(error),
         });
     }
-    void recordOpencodeV2TurnEnd(state.target, state.port, frame);
+    void recordOpencodeV2TurnEnd(state.target, state.port, frame, () => isCurrentSubscription(state));
     void refreshOpencodeV2UsageOnFrame(state.target, state.port, frame, () => isCurrentSubscription(state));
 }
 function isCurrentSubscription(state) {
@@ -429,16 +429,18 @@ function refreshOpencodeV2UsageOnFrame(target, port, frame, isCurrent = () => tr
  *
  * Exported for the tests, which drive frames through the path the stream does.
  *
+ * @param isCurrent - Handed to `syncOpencodeV2History`, which skips the model
+ *   latch when it is false after the read (Issue #3733)
  * @returns The sync, or null when the frame ends no turn
  */
-function recordOpencodeV2TurnEnd(target, port, frame) {
+function recordOpencodeV2TurnEnd(target, port, frame, isCurrent = () => true) {
     try {
         if (!(0, history_1.isOpencodeV2TurnEndEventType)((0, mappers_1.frameType)(frame)))
             return null;
         const sessionId = (0, mappers_1.frameSessionId)(frame);
         if (sessionId === null)
             return null;
-        return (0, history_1.syncOpencodeV2History)(target, port, sessionId);
+        return (0, history_1.syncOpencodeV2History)(target, port, sessionId, isCurrent);
     }
     catch (error) {
         logger.warn('opencode-v2-history-trigger-failed', {

package/dist/server/src/lib/polling/antigravity-permission-receipts.js

@@ -41,6 +41,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ANTIGRAVITY_PERMISSION_RECEIPT_WINDOW_MS = void 0;
 exports.recordAntigravityPermissionReceipt = recordAntigravityPermissionReceipt;
 exports.hasRecentAntigravityPermissionReceipt = hasRecentAntigravityPermissionReceipt;
+exports.getAntigravityPermissionReceiptAt = getAntigravityPermissionReceiptAt;
 exports.resetAntigravityPermissionReceiptsForTests = resetAntigravityPermissionReceiptsForTests;
 const auto_yes_state_1 = require("../../lib/auto-yes-state");
 const global_state_1 = require("../global-state");
@@ -69,6 +70,12 @@ function pruneExpiredReceipts(now) {
             receipts.delete(key);
     }
 }
+/**
+ * Per-instance episode state of the poller's reads (Issue #3767); the logic is in
+ * `antigravity-receipt-episodes.ts`. The Map lives here only so that
+ * {@link resetAntigravityPermissionReceiptsForTests} empties both records.
+ */
+const observations = (0, global_state_1.getOrInitGlobal)('__antigravityReceiptObservations', () => new Map());
 /**
  * Record that agy asked CommandMate about a tool call.
  *
@@ -107,7 +114,15 @@ function hasRecentAntigravityPermissionReceipt(worktreeId, cliToolId, instanceId
         return false;
     return now - receipt.at <= exports.ANTIGRAVITY_PERMISSION_RECEIPT_WINDOW_MS;
 }
+/**
+ * The latest question's arrival time for this instance, kept past the window
+ * (Issue #3767), or null when none was ever received.
+ */
+function getAntigravityPermissionReceiptAt(worktreeId, cliToolId, instanceId) {
+    return receipts.get((0, auto_yes_state_1.buildCompositeKey)(worktreeId, cliToolId, instanceId))?.at ?? null;
+}
 /** Empty the record. Tests only: production entries age out on their own. */
 function resetAntigravityPermissionReceiptsForTests() {
     receipts.clear();
+    observations.clear();
 }

package/dist/server/src/lib/polling/antigravity-receipt-episodes.js

@@ -0,0 +1,281 @@
+"use strict";
+/**
+ * When did an agy approval dialog first appear, and was it asked about in time?
+ * (Issue #3767)
+ *
+ * `hasRecentAntigravityPermissionReceipt` measures the window to the CLOCK OF THE
+ * TICK. agy draws a dialog some seconds after the hook reply, and the poller ticks
+ * every 5s after a response, so a dialog drawn 5.9s after the receipt was first
+ * read 8.7s after it, outside the 8s window, and no later receipt came to open
+ * it. The gate here judges the window to the dialog's first appearance instead
+ * (bounded by the last read that saw no dialog), which the poller makes possible
+ * by bracketing its reads with {@link beginAntigravityFrameRead} /
+ * {@link endAntigravityFrameRead}. See `antigravity-permission-receipts` for the
+ * receipt record itself.
+ *
+ * @module lib/polling/antigravity-receipt-episodes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ANTIGRAVITY_ANSWERED_DIALOG_GRACE_MS = exports.ANTIGRAVITY_PERMISSION_RECEIPT_OBSERVATION_SLACK_MS = void 0;
+exports.beginAntigravityFrameRead = beginAntigravityFrameRead;
+exports.endAntigravityFrameRead = endAntigravityFrameRead;
+exports.markAntigravityAnswerSent = markAntigravityAnswerSent;
+exports.getAntigravityAcceptedReceiptAt = getAntigravityAcceptedReceiptAt;
+exports.getAntigravityReceiptVerdict = getAntigravityReceiptVerdict;
+exports.judgeAntigravityPermissionReceipt = judgeAntigravityPermissionReceipt;
+const auto_yes_state_1 = require("../../lib/auto-yes-state");
+const global_state_1 = require("../global-state");
+const antigravity_permission_receipts_1 = require("./antigravity-permission-receipts");
+/**
+ * Extra time past the window that the FIRST tick to see a dialog may be after
+ * the receipt (Issue #3767). The dialog's real appearance is only known to lie
+ * between the last tick that saw none and the first that saw it; that gap is a
+ * poll interval (5s after a response), so the window is judged on the lower
+ * bound and the first sighting is capped at window + this slack.
+ */
+exports.ANTIGRAVITY_PERMISSION_RECEIPT_OBSERVATION_SLACK_MS = 5_000;
+/**
+ * Longest gap between two poller reads over which an episode is carried
+ * (Issue #3767): the slowest tick (5s after a response) plus room for the
+ * capture. A longer gap (capture backoff, no session, Auto-Yes off and on) means
+ * nothing is known of the screen in between, so the episode is dropped and the
+ * next candidate is judged from its own first sighting.
+ */
+const MAX_READ_GAP_MS = exports.ANTIGRAVITY_PERMISSION_RECEIPT_OBSERVATION_SLACK_MS + 2_000;
+/**
+ * How long after the poller SENT its answer to an accepted dialog (Issue #3789,
+ * {@link markAntigravityAnswerSent}) a dialog may still be on screen before it
+ * is reported: the window, the slack, and the cooldown the poller waits after
+ * an answer. Until then it is agy taking its time to take the dialog down, and
+ * stays `answered` (silent). Past it the keys did not clear the dialog, or a
+ * dialog with no question of its own replaced it between two reads (the screen
+ * cannot tell which), and it is `outlived` — withheld, and recorded.
+ *
+ * Written as the sum's value (8s + 5s + 5s, `COOLDOWN_INTERVAL_MS`), not the
+ * sum: tests that mock the receipts module without the window constant would
+ * fail at load. A unit test pins it to the sum.
+ */
+exports.ANTIGRAVITY_ANSWERED_DIALOG_GRACE_MS = 18_000;
+/** Beyond this, a late dialog is read as "the hook stopped arriving" (#3767). */
+const RECEIPT_LAPSED_AFTER_MS = 60_000;
+const observations = (0, global_state_1.getOrInitGlobal)('__antigravityReceiptObservations', () => new Map());
+const isTimeOrNull = (x) => x === null || (typeof x === 'number' && Number.isFinite(x));
+/**
+ * The Map lives on globalThis and outlives a module reload, so an entry may have
+ * another shape. Such an entry is dropped (no episode: the plain tick test),
+ * never read as times — `undefined` would turn every comparison into NaN.
+ */
+function isObservation(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const o = v;
+    return (typeof o.tracking === 'boolean' &&
+        typeof o.candidateSeen === 'boolean' &&
+        ['firstSeenAt', 'clearAt', 'prevReadAt', 'lastReadAt', 'acceptedReceiptAt', 'answerSentAt', 'usedReceiptAt'].every(k => isTimeOrNull(o[k])) &&
+        (o.verdict === null || typeof o.verdict === 'object') &&
+        (o.answerInterrupted === undefined || typeof o.answerInterrupted === 'boolean'));
+}
+function existingObservation(key) {
+    const o = observations.get(key);
+    if (o === undefined)
+        return undefined;
+    if (isObservation(o))
+        return o;
+    observations.delete(key);
+    return undefined;
+}
+function observationOf(key) {
+    let o = existingObservation(key);
+    if (!o) {
+        o = {
+            tracking: false,
+            candidateSeen: false,
+            firstSeenAt: null,
+            clearAt: null,
+            prevReadAt: null,
+            lastReadAt: null,
+            acceptedReceiptAt: null,
+            answerSentAt: null,
+            answerInterrupted: false,
+            usedReceiptAt: null,
+            verdict: null,
+        };
+        observations.set(key, o);
+    }
+    return o;
+}
+/**
+ * Start one poller read of an agy frame (Issue #3767). Pair with
+ * {@link endAntigravityFrameRead}; the pair is what lets the gate judge the
+ * window by when the dialog first appeared rather than by the tick's clock.
+ */
+function beginAntigravityFrameRead(worktreeId, instanceId, now = Date.now()) {
+    const o = observationOf((0, auto_yes_state_1.buildCompositeKey)(worktreeId, 'antigravity', instanceId));
+    if (o.lastReadAt !== null && !(now - o.lastReadAt <= MAX_READ_GAP_MS)) {
+        // Reads stopped for a while: the dialog now on screen may not be the one
+        // the episode saw, nor did it appear right after the last clear read.
+        o.firstSeenAt = null;
+        o.clearAt = null;
+        o.acceptedReceiptAt = null;
+        o.answerSentAt = null;
+        o.answerInterrupted = false;
+        o.verdict = null;
+    }
+    o.tracking = true;
+    o.candidateSeen = false;
+    o.prevReadAt = o.lastReadAt;
+    o.lastReadAt = now;
+}
+/**
+ * End the read. A read in which the gate never saw a prompt candidate closes the
+ * episode: the next candidate is a new dialog with its own first sighting.
+ */
+function endAntigravityFrameRead(worktreeId, instanceId, now = Date.now()) {
+    const o = existingObservation((0, auto_yes_state_1.buildCompositeKey)(worktreeId, 'antigravity', instanceId));
+    if (!o || !o.tracking || o.candidateSeen)
+        return;
+    o.firstSeenAt = null;
+    o.acceptedReceiptAt = null;
+    o.answerSentAt = null;
+    o.answerInterrupted = false;
+    o.verdict = null;
+    o.clearAt = now;
+}
+/**
+ * The poller sent keys to the dialog the current episode accepted (Issue #3789):
+ * starts {@link ANTIGRAVITY_ANSWERED_DIALOG_GRACE_MS}. Called only after the send
+ * reached tmux; a tick that accepted but sent nothing never calls it, so its
+ * dialog is never reported as one that outlived an answer. No-op without an
+ * accepted episode.
+ *
+ * Issue #3796: also called, with `interrupted`, when the send was cut short
+ * after it began (stopped part-way, or failed) — some of its keys may be on the
+ * pane, and the receipt is spent either way. Without it such a dialog stayed
+ * `answered` (silent) for as long as it stayed up. Starting the grace only
+ * leads to `outlived`, which withholds: nothing is answered because of it.
+ *
+ * @param options.forReceiptAt - The episode the send was for
+ *   ({@link getAntigravityAcceptedReceiptAt} read when it began). Given, only
+ *   that episode is marked: a send that comes back — whole or cut short —
+ *   after a stop → enable, when the successor already accepted a dialog on a
+ *   newer receipt, must not start that dialog's grace or give it its own
+ *   "cut short" (Issue #3796 review, review E for the whole send).
+ */
+function markAntigravityAnswerSent(worktreeId, instanceId, now = Date.now(), options = {}) {
+    const o = existingObservation((0, auto_yes_state_1.buildCompositeKey)(worktreeId, 'antigravity', instanceId));
+    if (!o || o.acceptedReceiptAt === null)
+        return;
+    if (options.forReceiptAt !== undefined && options.forReceiptAt !== o.acceptedReceiptAt)
+        return;
+    o.answerSentAt = now;
+    o.answerInterrupted = options.interrupted === true;
+}
+/**
+ * The receipt (`at`) the current episode was accepted on, or null when none
+ * (Issue #3796): what identifies the episode a send is for.
+ */
+function getAntigravityAcceptedReceiptAt(worktreeId, instanceId) {
+    return existingObservation((0, auto_yes_state_1.buildCompositeKey)(worktreeId, 'antigravity', instanceId))?.acceptedReceiptAt ?? null;
+}
+/**
+ * The verdict of the current episode's latest consultation, or null when no
+ * candidate dialog was read in the last tick (Issue #3767).
+ */
+function getAntigravityReceiptVerdict(worktreeId, instanceId) {
+    return existingObservation((0, auto_yes_state_1.buildCompositeKey)(worktreeId, 'antigravity', instanceId))?.verdict ?? null;
+}
+function causeFor(ageMs) {
+    if (ageMs === null)
+        return 'never';
+    return ageMs > RECEIPT_LAPSED_AFTER_MS ? 'lapsed' : 'late';
+}
+/**
+ * May the prompt candidate on this instance's frame be answered, judged by when
+ * the dialog first appeared (Issue #3767)?
+ *
+ * Replaces the tick-clock test of {@link hasRecentAntigravityPermissionReceipt}
+ * for the caller that answers: agy draws the dialog some seconds after the hook
+ * reply, and a 5s poll can first read it past the 8s window. The dialog is taken
+ * as appearing at the later of the last tick that saw none and the question's
+ * arrival. Still refused: a question that arrived after the dialog was already
+ * up, one older than the window by then, one already spent on another dialog,
+ * and none at all (a quotation follows no question).
+ *
+ * Without {@link beginAntigravityFrameRead} brackets there is no episode to
+ * remember, and this is exactly the old tick test.
+ */
+function judgeAntigravityPermissionReceipt(worktreeId, instanceId, nowOverride) {
+    const now = nowOverride ?? Date.now();
+    const key = (0, auto_yes_state_1.buildCompositeKey)(worktreeId, 'antigravity', instanceId);
+    const o = observationOf(key);
+    if (!o.tracking) {
+        // No bracketed reads: no episode to remember, the plain tick test.
+        const ok = nowOverride === undefined
+            ? (0, antigravity_permission_receipts_1.hasRecentAntigravityPermissionReceipt)(worktreeId, 'antigravity', instanceId)
+            : (0, antigravity_permission_receipts_1.hasRecentAntigravityPermissionReceipt)(worktreeId, 'antigravity', instanceId, undefined, nowOverride);
+        return { ok, cause: ok ? null : 'never', lastReceiptAt: null, firstSeenAt: now, ageMs: null };
+    }
+    const lastReceiptAt = (0, antigravity_permission_receipts_1.getAntigravityPermissionReceiptAt)(worktreeId, 'antigravity', instanceId);
+    const sameRead = o.candidateSeen;
+    o.candidateSeen = true;
+    if (o.firstSeenAt === null)
+        o.firstSeenAt = now;
+    const firstSeenAt = o.firstSeenAt;
+    const ageMs = lastReceiptAt === null ? null : firstSeenAt - lastReceiptAt;
+    const verdict = (cause, age = ageMs) => {
+        const v = { ok: cause === null, cause, lastReceiptAt, firstSeenAt, ageMs: age };
+        o.verdict = v;
+        return v;
+    };
+    if (lastReceiptAt === null)
+        return verdict('never');
+    if (o.acceptedReceiptAt !== null && lastReceiptAt > o.acceptedReceiptAt) {
+        // A newer question while the answered dialog stayed up on every tick: the
+        // dialog it asked about replaced the old one between two reads. A new
+        // episode, which cannot have appeared before the previous read.
+        o.firstSeenAt = now;
+        o.clearAt = o.prevReadAt;
+        o.acceptedReceiptAt = null;
+        o.answerSentAt = null;
+        o.answerInterrupted = false;
+        return judgeAntigravityPermissionReceipt(worktreeId, instanceId, now);
+    }
+    if (o.acceptedReceiptAt === lastReceiptAt) {
+        // The read that accepted may consult the gate twice (the tool's reader, then
+        // the generic pass). A LATER tick over the same dialog is the old tick test:
+        // a dialog that outlives the answer is not answered again past the window.
+        // Withheld, but as `answered`: the caller records no no-hook-receipt for it.
+        if (sameRead || now - lastReceiptAt <= antigravity_permission_receipts_1.ANTIGRAVITY_PERMISSION_RECEIPT_WINDOW_MS)
+            return verdict(null);
+        // Issue #3789: not forever, though, once keys were sent. Past the grace they
+        // did not clear the dialog (or one with no question of its own replaced it),
+        // and staying silent would leave the session stopped with no record of why.
+        // Accepted but never sent stays `answered`: the poller's own reason for not
+        // sending (partial-answer, …) is the one to keep, not overwrite. Written as
+        // `!(… <= …)` so that a NaN time reports.
+        if (o.answerSentAt !== null && !(now - o.answerSentAt <= exports.ANTIGRAVITY_ANSWERED_DIALOG_GRACE_MS)) {
+            const v = verdict('outlived');
+            if (o.answerInterrupted === true)
+                v.answerInterrupted = true;
+            return v;
+        }
+        return verdict('answered');
+    }
+    if (o.usedReceiptAt === lastReceiptAt)
+        return verdict('used');
+    if (lastReceiptAt > firstSeenAt)
+        return verdict('predates');
+    // The clear read bounds the appearance only when it is the read right before
+    // the first sighting; otherwise the dialog may have been up since long before.
+    const clearBound = o.clearAt !== null && firstSeenAt - o.clearAt <= MAX_READ_GAP_MS ? o.clearAt : firstSeenAt;
+    const appearedAfter = Math.max(clearBound, lastReceiptAt);
+    // Written as `!(… <= …)` so that a NaN withholds.
+    if (!(appearedAfter - lastReceiptAt <= antigravity_permission_receipts_1.ANTIGRAVITY_PERMISSION_RECEIPT_WINDOW_MS) ||
+        !(firstSeenAt - lastReceiptAt <=
+            antigravity_permission_receipts_1.ANTIGRAVITY_PERMISSION_RECEIPT_WINDOW_MS + exports.ANTIGRAVITY_PERMISSION_RECEIPT_OBSERVATION_SLACK_MS)) {
+        return verdict(causeFor(ageMs));
+    }
+    o.acceptedReceiptAt = lastReceiptAt;
+    o.usedReceiptAt = lastReceiptAt;
+    return verdict(null);
+}

package/dist/server/src/lib/polling/auto-yes-confirm-page.js

@@ -0,0 +1,56 @@
+"use strict";
+/**
+ * The `AskUserQuestion` confirm pages Auto-Yes leaves to a human (Issue #3497,
+ * Issue #3748).
+ *
+ * `Submit` on these pages picks nothing: it commits whatever stands as the
+ * answers. On Kewton/Musunest#283 that was the worker's own proposal, which the
+ * worker then implemented as though a human had approved it. So neither the
+ * server's poller (`suppressIfNotOursToAnswer`, step 3.3) nor the browser's
+ * fallback (`useAutoYes`, which answers only while no server poller runs) sends
+ * a key to them.
+ *
+ * Server-only: `normalizeFrame` and the tools' detectors reach `logger` → `env`
+ * → `fs`. The browser judges by the prompt's options instead
+ * (`polling/auto-yes-confirm-shape`).
+ *
+ * @module lib/polling/auto-yes-confirm-page
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAutoYesDeclinedConfirmPage = isAutoYesDeclinedConfirmPage;
+exports.isAutoYesDeclinedConfirmFrame = isAutoYesDeclinedConfirmFrame;
+const frame_1 = require("../detection/tools/frame");
+const selection_shape_1 = require("../detection/tools/command-code/selection-shape");
+const detect_1 = require("../detection/tools/claude/detect");
+/**
+ * Is this frame one of the confirm pages Auto-Yes does not answer?
+ *
+ * - `command-code`: `❯ 1. Submit` / `2. Cancel` under the question's tab strip,
+ *   with or without the back hint (#3497, `isCommandCodeQuestionConfirmPage`).
+ * - `claude`: `Ready to submit your answers?` / `❯ 1. Submit answers` /
+ *   `2. Cancel` (#3748, `isClaudeAskUserQuestionConfirmPage`).
+ *
+ * Every other tool: false — none has a measured confirm page.
+ *
+ * @param frame - The tick's one normalised frame (Issue #3183)
+ */
+function isAutoYesDeclinedConfirmPage(cliToolId, frame) {
+    // An empty capture draws no page (and Claude's reading walks the rows).
+    if (!frame.raw)
+        return false;
+    if (cliToolId === 'command-code')
+        return (0, selection_shape_1.isCommandCodeQuestionConfirmPage)(frame.raw);
+    if (cliToolId === 'claude')
+        return (0, detect_1.isClaudeAskUserQuestionConfirmPage)(frame);
+    return false;
+}
+/**
+ * {@link isAutoYesDeclinedConfirmPage} on a capture as text. False for no frame.
+ */
+function isAutoYesDeclinedConfirmFrame(cliToolId, output) {
+    if (!output)
+        return false;
+    if (cliToolId !== 'command-code' && cliToolId !== 'claude')
+        return false;
+    return isAutoYesDeclinedConfirmPage(cliToolId, (0, frame_1.normalizeFrame)(output, cliToolId));
+}

package/dist/server/src/lib/polling/auto-yes-dialog-gate.js

@@ -392,10 +392,17 @@ function assessPromptAnswerability(cliToolId, frame) {
             },
         };
     }
+    // Issue #3808: a numbered agy screen agy's reader declines (the login-method
+    // screen, a permission dialog whose `tab Amend` footer is cut or off the
+    // pane) is no prompt — not the generic parser's reading of its `1. / 2.` rows.
+    const declinedAgyScreen = cliToolId === 'antigravity' && toolDialog === null
+        && (0, dialog_1.isAntigravityUnvouchedNumberedScreen)(cleanOutput);
     const isCommandCodeQuestion = commandCodeQuestion.kind === 'prompt';
     const candidate = (commandCodeQuestion.kind === 'prompt' ? commandCodeQuestion.prompt : null)
         ?? toolDialog
-        ?? (0, prompt_detector_1.detectPrompt)(cleanOutput, (0, cli_patterns_1.buildDetectPromptOptions)(cliToolId));
+        ?? (declinedAgyScreen
+            ? { isPrompt: false, cleanContent: cleanOutput }
+            : (0, prompt_detector_1.detectPrompt)(cleanOutput, (0, cli_patterns_1.buildDetectPromptOptions)(cliToolId)));
     // Issue #3183: one frame, normalised once from the capture, for the
     // quotation veto and the presence gate alike — the reading the status chain
     // and the Auto-Yes poller apply, so Send is offered exactly when they agree.