farai 0.3.2 → 0.3.4

package/dist/cli/index.js

@@ -61,10 +61,11 @@ function isDefaultSessionTitle(value) {
   return !value?.trim() || DEFAULT_TITLES.has(value.trim().toLowerCase());
 }
 function normalizeSessionTitle(value, fallback = DEFAULT_SESSION_TITLE) {
-  const clean = value.replace(/<[^>]+>/g, " ").replace(/^\s*(?:[-*#>]+|\d+[.)])\s*/, "").replace(/\s+/g, " ").trim().replace(/[.!?,;:]+$/, "").trim();
+  const clean = value.replace(/<[^>]+>/g, " ").replace(/[`*_#>~|]+/g, " ").replace(/["'\u201C\u201D\u2018\u2019()\[\]{}]/g, " ").replace(/^\s*(?:[-*#>]+|\d+[.)])\s*/, "").replace(/[^\p{L}\p{N}\s.\/&+-]+/gu, " ").replace(/\s+/g, " ").trim().replace(/[.!?,;:\/&+-]+$/, "").trim().toLowerCase();
   if (!clean)
     return fallback;
-  return clean.length > 72 ? `${clean.slice(0, 69).trimEnd()}...` : clean;
+  const byWords = clean.split(" ").slice(0, TITLE_MAX_WORDS).join(" ");
+  return byWords.length > TITLE_MAX_CHARS ? byWords.slice(0, TITLE_MAX_CHARS).trimEnd() : byWords;
 }
 function titleFromPrompt(prompt, fallback = DEFAULT_SESSION_TITLE) {
   const first = prompt.split(`
@@ -73,12 +74,21 @@ function titleFromPrompt(prompt, fallback = DEFAULT_SESSION_TITLE) {
     return fallback;
   return normalizeSessionTitle(first.replace(LEADING_FILLER, ""), fallback);
 }
+function titleFromModelText(text, fallback = DEFAULT_SESSION_TITLE) {
+  const stripped = text.replace(/<think>[\s\S]*?<\/think>/gi, "").replace(/<[^>]+>/g, " ").replace(/^\s*title\s*[:\-]\s*/i, "");
+  const first = stripped.split(`
+`).map((line) => line.trim()).find(Boolean) ?? "";
+  return normalizeSessionTitle(first, fallback);
+}
 function sessionDisplayName(session) {
   if (isDefaultSessionTitle(session?.title))
     return DEFAULT_SESSION_TITLE;
   return normalizeSessionTitle(session.title, DEFAULT_SESSION_TITLE);
 }
-var DEFAULT_SESSION_TITLE = "new session", DEFAULT_TITLES, LOW_INFORMATION, LEADING_FILLER;
+var DEFAULT_SESSION_TITLE = "new session", DEFAULT_TITLES, LOW_INFORMATION, LEADING_FILLER, TITLE_MAX_WORDS = 6, TITLE_MAX_CHARS = 48, SESSION_TITLE_PROMPT = `Write a short title for this session, describing the user's overall task.
+Rules: 3 to 6 words, at most 48 characters, lowercase, plain text only.
+No quotes, no markdown, no emoji, no trailing punctuation, no prefixes like "title:".
+Be general about the whole task, not a single step. Respond with the title only.`;
 var init_session_title = __esm(() => {
   DEFAULT_TITLES = new Set(["new session", "untitled", "untitled session"]);
   LOW_INFORMATION = /^(?:hi|hey|hello|halo|hai|yo|bro|test|testing|ping|p|ok|oke|okay|sip|thanks|thank you|makasih|terima kasih)[.!?\s]*$/i;
@@ -5398,7 +5408,7 @@ function parseManifest(value) {
   if (!value || typeof value !== "object")
     throw new Error("invalid farai tool manifest");
   const candidate = value;
-  if (typeof candidate.contract !== "string" || !candidate.contract || !Array.isArray(candidate.aptPackages) || !candidate.pinnedTools || typeof candidate.pinnedTools !== "object" || !candidate.pinnedAssets || typeof candidate.pinnedAssets !== "object" || !candidate.workflows || typeof candidate.workflows !== "object") {
+  if (!Array.isArray(candidate.aptPackages) || !candidate.pinnedTools || typeof candidate.pinnedTools !== "object" || !candidate.pinnedAssets || typeof candidate.pinnedAssets !== "object" || !candidate.workflows || typeof candidate.workflows !== "object") {
     throw new Error("invalid farai tool manifest");
   }
   const aptPackages = candidate.aptPackages.filter((item) => typeof item === "string" && Boolean(item));
@@ -5445,7 +5455,6 @@ function parseManifest(value) {
   if (!Object.keys(pinnedAssets).length)
     throw new Error("empty pinned asset manifest");
   return {
-    contract: candidate.contract,
     aptPackages,
     pinnedTools,
     pinnedAssets,
@@ -5455,11 +5464,15 @@ function parseManifest(value) {
 function isSha256(value) {
   return typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
 }
-var KALI_TOOL_MANIFEST_PATH, KALI_TOOL_MANIFEST;
+var KALI_TOOL_MANIFEST_PATH, KALI_IMAGE_CONTRACT_PATH, KALI_TOOL_MANIFEST, KALI_IMAGE_CONTRACT;
 var init_kali_tool_manifest = __esm(() => {
   init_file_read();
   KALI_TOOL_MANIFEST_PATH = join4(import.meta.dir, "..", "..", "docker", "kali", "farai-tool-manifest.json");
+  KALI_IMAGE_CONTRACT_PATH = join4(import.meta.dir, "..", "..", "docker", "kali", "farai-image-contract");
   KALI_TOOL_MANIFEST = parseManifest(JSON.parse(readBoundedFileTextSync(KALI_TOOL_MANIFEST_PATH, 1024 * 1024, "kali tool manifest")));
+  KALI_IMAGE_CONTRACT = readBoundedFileTextSync(KALI_IMAGE_CONTRACT_PATH, 1024, "kali image contract").trim();
+  if (!KALI_IMAGE_CONTRACT)
+    throw new Error("empty kali image contract");
 });
 
 // src/agent-tools/mcp-builtins.ts
@@ -7284,20 +7297,59 @@ class KaliContainerBackend {
   pullImageCommand() {
     return ["docker", "pull", this.image];
   }
-  async ensureImage() {
-    const current = await this.resolveImage();
-    if (current.exists && current.contract === KALI_IMAGE_CONTRACT) {
+  async remoteImageDigest() {
+    const inspect = await this.processRunner("docker", ["buildx", "imagetools", "inspect", this.image, "--format", "{{.Manifest.Digest}}"]);
+    if (inspect.exitCode !== 0)
+      return;
+    return digestOf(inspect.stdout.trim());
+  }
+  async checkForImageUpdate() {
+    const local = await this.resolveImage();
+    if (!local.exists)
       return {
-        exitCode: 0,
-        stdout: "image ready",
-        stderr: "",
-        durationMs: 0,
-        timedOut: false
+        exists: false,
+        upToDate: false,
+        ...local.error ? {
+          error: local.error
+        } : {}
+      };
+    const remote = await this.remoteImageDigest();
+    if (!remote || !local.repoDigest)
+      return {
+        exists: true,
+        upToDate: true
       };
+    return {
+      exists: true,
+      upToDate: local.repoDigest === remote
+    };
+  }
+  async ensureImage() {
+    const local = await this.resolveImage();
+    if (local.exists) {
+      const remote = await this.remoteImageDigest();
+      if (!remote || local.repoDigest !== undefined && local.repoDigest === remote) {
+        return {
+          exitCode: 0,
+          stdout: "image ready",
+          stderr: "",
+          durationMs: 0,
+          timedOut: false
+        };
+      }
     }
     const started = Date.now();
     const pulled = await this.pullRunner("docker", ["pull", this.image]);
     if (pulled.exitCode !== 0) {
+      if (local.exists) {
+        return {
+          exitCode: 0,
+          stdout: pulled.stdout || "using local kali image",
+          stderr: "",
+          durationMs: Date.now() - started,
+          timedOut: false
+        };
+      }
       return {
         ...pulled,
         stderr: dockerFailure(pulled, `could not pull kali image ${this.image}; check network access to ${KALI_IMAGE_REPO}`),
@@ -7315,15 +7367,6 @@ class KaliContainerBackend {
         timedOut: false
       };
     }
-    if (resolved.contract !== KALI_IMAGE_CONTRACT) {
-      return {
-        exitCode: 1,
-        stdout: "",
-        stderr: `pulled kali image ${this.image} does not satisfy the farai capability contract (${resolved.contract ?? "missing"})`,
-        durationMs: Date.now() - started,
-        timedOut: false
-      };
-    }
     return {
       exitCode: 0,
       stdout: pulled.stdout || "image pulled",
@@ -7922,6 +7965,7 @@ function parseImageInspect(raw) {
         exists: true
       };
     const contract = image.Config?.Labels?.[KALI_IMAGE_CONTRACT_LABEL];
+    const repoDigest = digestOf((image.RepoDigests ?? []).find((entry) => entry.includes("@sha256:")));
     return {
       exists: true,
       ...image.Id ? {
@@ -7929,6 +7973,9 @@ function parseImageInspect(raw) {
       } : {},
       ...contract ? {
         contract
+      } : {},
+      ...repoDigest ? {
+        repoDigest
       } : {}
     };
   } catch {
@@ -7937,6 +7984,12 @@ function parseImageInspect(raw) {
     };
   }
 }
+function digestOf(reference) {
+  if (!reference)
+    return;
+  const match = reference.match(/sha256:[a-f0-9]{64}/i);
+  return match ? match[0].toLowerCase() : undefined;
+}
 function dockerFailure(result, fallback) {
   const detail = `${result.stderr}
 ${result.stdout}`.trim().replace(/\s+/g, " ");
@@ -7960,7 +8013,7 @@ function containerDoesNotExist2(result) {
   return /no such (container|object)/i.test(`${result.stdout}
 ${result.stderr}`);
 }
-var CONTAINER_WORKSPACE_MOUNT = "/workspace", CONTAINER_WORKTREES_MOUNT = "/worktrees", kaliSessions, kaliPtySessions, containerStartLocks, globalContainerStartChain, CONTAINER_EXEC_MARKER_DIR = "/tmp/farai-exec", CONTAINER_EXEC_WRAPPER, CONTAINER_EXEC_KILLER, CONTAINER_PREFIX, KALI_IMAGE_CONTRACT, KALI_IMAGE_REPO = "ghcr.io/pajarori/farai-kali", DEFAULT_KALI_IMAGE, KALI_IMAGE_CONTRACT_LABEL = "org.farai.kali.contract", KALI_IMAGE_PULL_TIMEOUT_MS;
+var CONTAINER_WORKSPACE_MOUNT = "/workspace", CONTAINER_WORKTREES_MOUNT = "/worktrees", kaliSessions, kaliPtySessions, containerStartLocks, globalContainerStartChain, CONTAINER_EXEC_MARKER_DIR = "/tmp/farai-exec", CONTAINER_EXEC_WRAPPER, CONTAINER_EXEC_KILLER, CONTAINER_PREFIX, KALI_IMAGE_REPO = "ghcr.io/pajarori/farai-kali", KALI_IMAGE_TAG = "latest", DEFAULT_KALI_IMAGE, KALI_IMAGE_CONTRACT_LABEL = "org.farai.kali.contract", KALI_IMAGE_PULL_TIMEOUT_MS;
 var init_kali = __esm(() => {
   init_spawn_session();
   init_pty_session();
@@ -7978,8 +8031,7 @@ var init_kali = __esm(() => {
   CONTAINER_EXEC_KILLER = ["import os, signal, sys, time", "path = sys.argv[1]", "root = None", "marker_deadline = time.monotonic() + 0.25", "while root is None and time.monotonic() < marker_deadline:", "    try:", "        with open(path, encoding='ascii') as handle:", "            root = int(handle.read().strip())", "    except (FileNotFoundError, OSError, ValueError):", "        time.sleep(0.01)", "if root is None:", "    raise SystemExit(0)", "def direct_children(pid):", "    try:", "        with open(f'/proc/{pid}/task/{pid}/children', encoding='ascii') as handle:", "            return [int(value) for value in handle.read().split()]", "    except (FileNotFoundError, OSError, ValueError):", "        return []", "def descendants(pid):", "    found = []", "    pending = direct_children(pid)", "    seen = set()", "    while pending:", "        child = pending.pop()", "        if child in seen:", "            continue", "        seen.add(child)", "        found.append(child)", "        pending.extend(direct_children(child))", "    return found", "def alive(pid):", "    try:", "        os.kill(pid, 0)", "        return True", "    except ProcessLookupError:", "        return False", "    except PermissionError:", "        return True", "targets = descendants(root)", "for pid in [*reversed(targets), root]:", "    try:", "        os.kill(pid, signal.SIGTERM)", "    except (ProcessLookupError, PermissionError):", "        pass", "deadline = time.monotonic() + 1.0", "while time.monotonic() < deadline and any(alive(pid) for pid in [root, *targets]):", "    time.sleep(0.025)", "targets = list(dict.fromkeys([*targets, *descendants(root)]))", "for pid in [*reversed(targets), root]:", "    try:", "        os.kill(pid, signal.SIGKILL)", "    except (ProcessLookupError, PermissionError):", "        pass", "try:", "    os.unlink(path)", "except FileNotFoundError:", "    pass"].join(`
 `);
   CONTAINER_PREFIX = FARAI_CONTAINER_NAME_PREFIX;
-  KALI_IMAGE_CONTRACT = KALI_TOOL_MANIFEST.contract;
-  DEFAULT_KALI_IMAGE = `${KALI_IMAGE_REPO}:${KALI_IMAGE_CONTRACT}`;
+  DEFAULT_KALI_IMAGE = `${KALI_IMAGE_REPO}:${KALI_IMAGE_TAG}`;
   KALI_IMAGE_PULL_TIMEOUT_MS = 30 * 60 * 1000;
 });
 
@@ -8732,8 +8784,8 @@ var init_process_output = __esm(() => {
 
 // src/version.ts
 function resolveFaraiVersion() {
-  if ("0.3.2")
-    return "0.3.2";
+  if ("0.3.4")
+    return "0.3.4";
   try {
     const parsed = JSON.parse(readBoundedFileTextSync(new URL("../package.json", import.meta.url), 1024 * 1024, "package metadata"));
     if (typeof parsed.version === "string" && parsed.version)
@@ -29373,40 +29425,15 @@ function renderCtfNotes(input) {
 // src/agent-tools/tool-guidance.ts
 function modelToolDescription(tool, _detailed = false) {
   const exact = EXACT_GUIDANCE[tool.name];
-  const highValue = new Set(["report_add_finding", "cvss_calculate", "internet_search", "agent_spawn"]);
-  if (!exact || !_detailed && !highValue.has(tool.name))
+  if (!exact)
     return tool.description;
   return `${tool.description}
 
 model contract: ${exact}`;
 }
-function toolGuidanceMatchesQuery(toolName, query) {
-  const normalized = query.toLowerCase();
-  const terms = toolName.split("_").filter((term) => term.length >= 3);
-  const words = new Set(normalized.match(/[a-z0-9]+/g) ?? []);
-  const fileIntent = /\b(file|path|write|edit|patch|markdown|\.md|report)\b/.test(normalized);
-  const fileTools = ["fs_read", "fs_list", "fs_grep", "fs_write", "fs_edit", "patch_apply", "code_write_script", "report_add_finding", "report_update_finding"];
-  return terms.some((term) => words.has(term)) || fileIntent && fileTools.includes(toolName) || normalized.includes("finding") && ["report_add_finding", "report_update_finding", "campaign_verify", "campaign_test", "cvss_calculate"].includes(toolName) || normalized.includes("email") && toolName.startsWith("email_") || normalized.includes("browser") && toolName.startsWith("browser_") || normalized.includes("proxy") && toolName.startsWith("proxy_") || normalized.includes("campaign") && toolName.startsWith("campaign_");
-}
-function modelToolSchema(schema, detailed = false, toolName) {
-  if (!detailed && !new Set(["report_add_finding", "cvss_calculate", "internet_search", "agent_spawn"]).has(toolName ?? "")) {
-    return compactSchemaNode(schema);
-  }
+function modelToolSchema(schema, _detailed = false, toolName) {
   return enrichSchemaNode(schema, [], toolName);
 }
-function compactSchemaNode(value) {
-  if (Array.isArray(value))
-    return value.map(compactSchemaNode);
-  if (!isRecord9(value))
-    return value;
-  const compact = {};
-  for (const [key, child] of Object.entries(value)) {
-    if (key === "description")
-      continue;
-    compact[key] = compactSchemaNode(child);
-  }
-  return compact;
-}
 function enrichSchemaNode(value, path, toolName) {
   if (Array.isArray(value))
     return value.map((item) => enrichSchemaNode(item, path, toolName));
@@ -33006,22 +33033,17 @@ class HeuristicPlanner {
     });
   }
 }
-function buildToolsPayload(toolNames, availableTools, options = {}) {
+function buildToolsPayload(toolNames, availableTools, _options = {}) {
   const payload = [];
   const available = availableTools ? new Map(availableTools.map((tool) => [tool.name, tool])) : undefined;
-  let detailedCount = 0;
   for (const name of [...new Set(toolNames.map(canonicalToolName))].sort()) {
     const tool = available?.get(name) ?? getTool(name);
     if (!tool)
       continue;
-    const matched = Boolean(options.userText && toolGuidanceMatchesQuery(tool.name, options.userText));
-    const detailed = matched && (options.maxDetailedTools === undefined || detailedCount < options.maxDetailedTools);
-    if (detailed)
-      detailedCount += 1;
     payload.push({
       name: tool.name,
-      description: modelToolDescription(tool, detailed),
-      parameters: modelToolSchema(tool.inputSchema, detailed, tool.name)
+      description: modelToolDescription(tool),
+      parameters: modelToolSchema(tool.inputSchema, true, tool.name)
     });
   }
   return payload;
@@ -35335,10 +35357,7 @@ function mergeProviderToolCatalog(advertised, selected, availableTools) {
     const current = buildToolsPayload([definition.name], availableTools)[0];
     if (!current)
       continue;
-    const detailed = buildToolsPayload([definition.name], availableTools, {
-      userText: definition.name.replaceAll("_", " ")
-    })[0];
-    const isCurrent = sameProviderTool(prior, current) || (detailed ? sameProviderTool(prior, detailed) : false);
+    const isCurrent = sameProviderTool(prior, current);
     merged.push(isCurrent ? prior : selectedByName.get(prior.name) ?? current);
     seen.add(prior.name);
   }
@@ -37048,7 +37067,9 @@ function validateToolArgs(schema, args) {
   if (validate(args))
     return;
   const error = validate.errors?.[0];
-  return error ? formatValidationError(error, schema) : "arguments do not match the tool input schema";
+  if (!error)
+    return "arguments do not match the tool input schema";
+  return `${formatValidationError(error, schema)}${compositionShapes(error, schema)}`;
 }
 function compiledValidator(schema) {
   const cached = validatorCache.get(schema);
@@ -37109,6 +37130,58 @@ function formatValidationError(error, schema) {
       return `${fieldName(path)} ${error.message ?? `failed ${error.keyword} validation`}`;
   }
 }
+function compositionShapes(error, schema) {
+  const compositionPath = compositionPointer(error.schemaPath);
+  const branches = compositionPath ? resolveSchemaPointer(schema, compositionPath) : undefined;
+  if (!Array.isArray(branches) || branches.length < 2)
+    return "";
+  const shapes = branches.map(describeBranch).filter((text2) => Boolean(text2));
+  if (shapes.length < 2)
+    return "";
+  return `; provide exactly one shape: ${shapes.map((text2, index) => `${index + 1}) ${text2}`).join(" or ")}`;
+}
+function compositionPointer(schemaPath) {
+  if (typeof schemaPath !== "string")
+    return;
+  const segments = schemaPath.split("/");
+  for (let index = segments.length - 1;index >= 0; index -= 1) {
+    if (segments[index] === "oneOf" || segments[index] === "anyOf") {
+      return segments.slice(0, index + 1).join("/");
+    }
+  }
+  return;
+}
+function describeBranch(branch) {
+  if (!branch || typeof branch !== "object" || Array.isArray(branch))
+    return;
+  const record3 = branch;
+  const required = Array.isArray(record3.required) ? record3.required.map(String) : [];
+  if (required.length > 0)
+    return `{ ${required.join(", ")} }`;
+  if (typeof record3.type === "string")
+    return `a ${record3.type}`;
+  if (typeof record3.const !== "undefined")
+    return JSON.stringify(record3.const);
+  return;
+}
+function resolveSchemaPointer(schema, schemaPath) {
+  if (typeof schemaPath !== "string")
+    return;
+  const pointer = schemaPath.startsWith("#") ? schemaPath.slice(1) : schemaPath;
+  let node = schema;
+  for (const raw of pointer.split("/")) {
+    if (!raw)
+      continue;
+    const key = raw.replace(/~1/g, "/").replace(/~0/g, "~");
+    if (Array.isArray(node))
+      node = node[Number(key)];
+    else if (node && typeof node === "object")
+      node = node[key];
+    else
+      return;
+  }
+  return node;
+}
 function unexpectedFieldError(path, property, schema) {
   const field = joinFieldPath(path, property);
   const enumOwner = enumOwnerForValue(schema, property);
@@ -38026,6 +38099,7 @@ class AgentRuntime {
     this.maxTurnMs = resolveMaxTurnMs(options.maxTurnSeconds ?? config.maxTurnSeconds);
     this.maxCostUsd = positiveFinite(options.maxCostUsd ?? config.maxCostUsd);
     this.maxInputTokens = positiveFinite(options.maxInputTokens);
+    this.sessionTitlesEnabled = options.enableSessionTitles === true;
     this.mailbox = new SessionMailbox(this.store, this.runtimeId);
     this.inputQueue = new SessionInputQueue(this.mailbox, (sessionId, type, payload) => this.event(sessionId, type, payload));
     this.userInputs = new SessionUserInputCoordinator({
@@ -39327,6 +39401,7 @@ class AgentRuntime {
     const activeCampaignRun = source === "user" && !trimmed.startsWith("/") && !trimmed.startsWith("!") ? this.campaignSupervisor.prepare(session.id, input) : undefined;
     if (activeCampaignRun)
       session = this.store.loadSession(session.id);
+    let autoTitleBaseline;
     if (source === "user" && isDefaultSessionTitle(session.title)) {
       const title = titleFromPrompt(input);
       if (!isDefaultSessionTitle(title)) {
@@ -39335,6 +39410,7 @@ class AgentRuntime {
         });
         this.recordSession(session);
       }
+      autoTitleBaseline = session.title ?? DEFAULT_SESSION_TITLE;
     }
     if (source === "user" && (trimmed === "/compact" || trimmed.startsWith("/compact "))) {
       const cursor2 = this.store.latestEventSequence(session.id);
@@ -39438,6 +39514,11 @@ class AgentRuntime {
     if (source === "user" && !this.shuttingDown && this.store.loadTurn(turn.id).status !== "cancelled") {
       this.mailboxDispatcher.wakeQueuedInputs(session.id);
     }
+    if (autoTitleBaseline !== undefined && this.sessionTitlesEnabled && !trimmed.startsWith("/") && !trimmed.startsWith("!") && this.store.loadTurn(turn.id).status === "completed") {
+      this.generateSessionTitle(session.id, input, response, autoTitleBaseline).catch(() => {
+        return;
+      });
+    }
     const cursor = startedEvents.at(-1)?.sequence ?? 0;
     return {
       session,
@@ -39445,6 +39526,48 @@ class AgentRuntime {
       events: this.store.listEventsAfter(session.id, cursor, 1e4)
     };
   }
+  async generateSessionTitle(sessionId, userText, assistantText, baseline) {
+    let session = this.store.loadSession(sessionId);
+    if (session.title !== baseline)
+      return;
+    let planner;
+    if (this.planner)
+      planner = this.planner;
+    else
+      planner = new ChatProviderPlanner(this.chatProviderOverride ?? await createChatProviderForSession(session, this.workspace));
+    if (planner.compactionMode !== "model")
+      return;
+    const history = [{
+      role: "user",
+      text: userText.slice(0, 4000)
+    }];
+    const reply = sanitizeVisibleResponse(assistantText).trim();
+    if (reply)
+      history.push({
+        role: "assistant",
+        text: reply.slice(0, 4000)
+      });
+    const actions = await planner.plan({
+      session,
+      userText: "title",
+      systemInstruction: SESSION_TITLE_PROMPT,
+      history,
+      tools: [],
+      toolCatalog: [],
+      toolChoice: "none"
+    });
+    const text2 = actions.filter((action) => action.kind === "respond").map((action) => action.text).join(" ");
+    const title = titleFromModelText(text2, "");
+    if (!title)
+      return;
+    session = this.store.loadSession(sessionId);
+    if (session.title !== baseline)
+      return;
+    session = this.store.updateSession(sessionId, {
+      title
+    });
+    this.recordSession(session);
+  }
   async runAgentLoop(session, turn, contextMessage, assistantMessage, input, userAuthored = true, mailboxItems = []) {
     const responses = [];
     let planner;
@@ -43757,17 +43880,17 @@ async function runStartupContainerPreflight(workspace) {
   const backend2 = new KaliContainerBackend({
     workspace
   });
-  const image = await backend2.resolveImage().catch(() => {
+  const update = await backend2.checkForImageUpdate().catch(() => {
     return;
   });
-  if (!image || image.error)
+  if (!update || update.error)
     return "continue";
-  if (image.exists && image.contract === KALI_IMAGE_CONTRACT)
+  if (update.exists && update.upToDate)
     return "continue";
   const config = loadConfig(workspace);
   if (config.updates?.prompt === false || !process.stdin.isTTY || !process.stdout.isTTY)
     return "continue";
-  const answer = await promptForImagePull(KALI_IMAGE_CONTRACT, image.exists);
+  const answer = await promptForImagePull(update.exists);
   if (answer === "cancelled")
     return "cancelled";
   if (answer === "later")
@@ -43779,11 +43902,11 @@ async function runStartupContainerPreflight(workspace) {
   }
   return "continue";
 }
-async function promptForImagePull(contract, exists) {
+async function promptForImagePull(exists) {
   console.log("");
   console.log(FARAI_BANNER);
   console.log("");
-  console.log(exists ? `kali container image is outdated (needs ${contract})` : `kali container image ${contract} is not installed`);
+  console.log(exists ? "a newer kali container image is available" : "kali container image is not installed");
   const interfaceHandle = createInterface2({
     input: process.stdin,
     output: process.stdout
@@ -66247,9 +66370,10 @@ function StatusIndicator(props) {
     const value = tui.store.ui.statusDetail;
     return value && value !== "working" && value !== props.activity && !isFooterStatusDetail(value) ? ` \u2022 ${value}` : "";
   };
+  const glyph = () => SPINNER_FRAMES[(props.spinnerFrame ?? 0) % SPINNER_FRAMES.length];
   const text2 = () => {
     if (props.activity) {
-      const value2 = dims().width >= 56 ? `\u2022 ${props.activity} (${fmtElapsed(props.elapsed)}${detail()} \u2022 esc to interrupt)` : `\u2022 ${props.activity} ${fmtElapsed(props.elapsed)} \xB7 esc interrupt`;
+      const value2 = dims().width >= 56 ? `${glyph()} ${props.activity} (${fmtElapsed(props.elapsed)}${detail()} \u2022 esc to interrupt)` : `${glyph()} ${props.activity} ${fmtElapsed(props.elapsed)} \xB7 esc interrupt`;
       return truncateLine2(value2.toLowerCase(), Math.max(1, dims().width));
     }
     const value = tui.store.ui.statusDetail;
@@ -66268,6 +66392,7 @@ function StatusIndicator(props) {
     return _el$;
   })();
 }
+var SPINNER_FRAMES;
 var init_status_indicator = __esm(() => {
   init_solid2();
   init_solid2();
@@ -66279,6 +66404,7 @@ var init_status_indicator = __esm(() => {
   init_terminal();
   init_theme();
   init_footer_state();
+  SPINNER_FRAMES = ["\xB7", "\u2022", "\xB7"];
 });
 
 // src/agent-tui/dialog/list-selection.ts
@@ -69434,7 +69560,9 @@ function BottomPane() {
   const dims = useTuiDimensions();
   const commandRegistryRevision = useCommandRegistryRevision();
   const [elapsed, setElapsed] = createSignal(0);
+  const [spinner, setSpinner] = createSignal(0);
   let tick;
+  let spinTick;
   const frame = () => tui.store.ui.overlayStack.at(-1);
   const listFrame = () => {
     const top = frame();
@@ -69510,16 +69638,24 @@ function BottomPane() {
       clearInterval(tick);
       tick = undefined;
     }
+    if (spinTick) {
+      clearInterval(spinTick);
+      spinTick = undefined;
+    }
     if (!started) {
       setElapsed(0);
+      setSpinner(0);
       return;
     }
     setElapsed(Math.max(0, Math.floor((Date.now() - started) / 1000)));
     tick = setInterval(() => setElapsed(Math.max(0, Math.floor((Date.now() - started) / 1000))), 1000);
+    spinTick = setInterval(() => setSpinner((value) => value + 1), 120);
   });
   onCleanup(() => {
     if (tick)
       clearInterval(tick);
+    if (spinTick)
+      clearInterval(spinTick);
   });
   return (() => {
     var _el$ = createElement("box");
@@ -69537,6 +69673,9 @@ function BottomPane() {
           get elapsed() {
             return elapsed();
           },
+          get spinnerFrame() {
+            return spinner();
+          },
           get activity() {
             return statusActivity();
           }
@@ -70708,7 +70847,9 @@ async function launchOpenTui(workspace, sessionId) {
   const located = sessionId ? resolveSessionLocation(sessionId) : undefined;
   const effectiveWorkspace = located?.workspace ?? workspace;
   const effectiveSessionId = located?.id ?? sessionId;
-  const runtime = new AgentRuntime(effectiveWorkspace);
+  const runtime = new AgentRuntime(effectiveWorkspace, undefined, {
+    enableSessionTitles: true
+  });
   let port;
   try {
     await runtime.recover();
@@ -73872,11 +74013,12 @@ async function doctor() {
   const backend2 = new KaliContainerBackend({
     workspace: process.cwd()
   });
-  const image = await backend2.resolveImage();
-  const capabilities = !image.exists ? "not installed (pulled on first run)" : image.contract === KALI_IMAGE_CONTRACT ? "ready" : "update available (pulled on first run)";
-  console.log(`kali image: ${backend2.image} (${image.exists ? "installed" : "missing"})`);
-  console.log(`kali contract: ${image.contract ?? "missing"} (expected ${KALI_IMAGE_CONTRACT})`);
-  console.log(`kali capabilities: ${capabilities}`);
+  const update = await backend2.checkForImageUpdate().catch(() => {
+    return;
+  });
+  const status = !update ? "unknown (docker unavailable)" : !update.exists ? "not installed (pulled on first run)" : update.upToDate ? "up to date" : "update available (pulled on first run)";
+  console.log(`kali image: ${backend2.image}`);
+  console.log(`kali image status: ${status}`);
   const {
     contentStatus: contentStatus2
   } = await Promise.resolve().then(() => (init_updater(), exports_updater));
@@ -74260,5 +74402,5 @@ Examples:
 `);
 }
 
-//# debugId=4868BF6C23AAC2A664756E2164756E21
+//# debugId=32EC65247FDE45AE64756E2164756E21
 //# sourceMappingURL=index.js.map