iclavue 10.5.13 → 10.5.16

package/dist/provider-setup.js

@@ -7,7 +7,7 @@ import { createInterface } from 'node:readline/promises'
 import { stdin, stdout } from 'node:process'
 import { fileURLToPath } from 'node:url'
 
-const APP_VERSION = '10.5.13'
+const APP_VERSION = '10.5.16'
 const APP_NPM_PACKAGE_NAME = 'clavue'
 export const CURRENT_PROVIDER_PROFILE_ID = '__current_provider__'
 const SUPPORTED_LANGUAGES = new Set(['en', 'zh'])

package/docs/clavue-pager-interaction-contract.md

@@ -89,7 +89,7 @@ Full engine conversation restore remains `/rewind` (agent). Esc×2 is local re-e
 | Enter | Send (or run local `/`); **empty** + Needs Input open → `/parallel needs` panel |
 | ↑ ↓ | Move caret by **soft-wrap display row** when draft has >1 display row; else history (↑ from top) |
 | Ctrl+Y (prompt focus) | Copy **selection** if any, else entire draft |
-| Mouse drag on prompt | **App-level** select → release copies (native select cannot survive TUI redraw) |
+| Mouse drag on prompt | **App-level** select → release copies, then clears highlight (native select cannot survive TUI redraw) |
 | Tab | Toggle prompt ↔ scrollback |
 | ↑ ↓ (history) | Prompt history only when caret cannot move within draft display rows |
 | Ctrl+P / ? | Searchable command palette |
@@ -139,6 +139,20 @@ Full engine conversation restore remains `/rewind` (agent). Esc×2 is local re-e
 | Panel row `worker:…` Enter | Resolve / ack worker gate (not a permission y/a/n) |
 | Permission modal **y / a / n** | Session tool permission only — never worker reply |
 
+## Session · Structured questions
+
+`AskUserQuestion` uses the same live permission channel but renders its options
+instead of the generic y/a/n modal. `↑↓` or number keys choose, `Space` toggles
+multi-select rows, `Enter` submits the current question, and `Esc` declines.
+The synthetic `Other` row accepts typed or pasted free-form text. Answers from
+every question are returned to the engine in `updatedInput.answers`.
+
+MCP `elicitation` requests share this owner-bound modal. Form mode renders the
+restricted primitive JSON Schema fields and returns typed `content`; URL mode
+shows the validated HTTP(S) URL and opens it after acceptance. `Esc` reports
+`cancel`, while the visible Decline row reports `decline`. Unsupported or
+invalid schemas fail closed instead of leaving the agent waiting.
+
 ---
 
 ## Session · History search (Ctrl+R)
@@ -171,9 +185,9 @@ Full engine conversation restore remains `/rewind` (agent). Esc×2 is local re-e
 | Alt+T | Thinking toggle |
 | Alt+O | Fast model toggle |
 | Ctrl+L | Collapse last tool group |
-| Mouse drag | Select → copy |
+| Mouse drag | Select → copy, then clear highlight |
 
-Terminal-family running-turn overrides follow Grok 0.2.93: Apple Terminal uses
+Terminal-family running-turn overrides follow the Grok 0.2.101 guide: Apple Terminal uses
 `Ctrl+O` for send-now; VS Code, Cursor, Windsurf, and Zed use `Ctrl+L`.
 Outside a running prompt these keys retain always-approve and collapse behavior.
 

package/docs/clavue-provider-model-best-practices.md

@@ -126,7 +126,26 @@ Best practice:
 - Change provider and slot routing through `/provider`, not by hand-editing environment variables.
 - Run `clavue provider validate <profile>` after every model or gateway change.
 - Run `clavue provider matrix <profile>` when deciding which GPT/Codex route is safe.
-- Treat a route as production-safe only when it validates native tool/function calling, not just chat completion.
+
+### Product policy: open tools first, health may narrow
+
+Clavue's runtime coding route policy is **open-tools first**:
+
+- Any **user-configured** provider route keeps a full coding surface by default.
+  Capability snapshots may choose transport (messages / responses / chat
+  completions) and inform warnings, but they must **not** hide tools or force a
+  chat-only workflow solely because function calling is unvalidated.
+- **Permission mode** (`/permissions`) is the operator's explicit execution
+  boundary — not capability probes.
+- **Provider health** (ledger: degraded / broken) *is* allowed to narrow
+  workflow tools, force strict recovery, and surface `qualityTier` as
+  `degraded` / `blocked` so orchestration can enter `fallback_chain`.
+
+Validation (`provider validate` / matrix) remains the recommended gate before
+**trusting a new gateway for production workloads**, but missing validation no
+longer means Clavue refuses the coding surface. Prefer validate-then-use for
+new endpoints; treat runtime health demotions as the safety net for
+already-configured routes.
 
 ## `/model` Is A Main-Session Override
 

package/docs/protocol/clavue-ui-v1.md

@@ -78,6 +78,7 @@ Every message:
 | `session.prefs` | `compact?`, `verbose?`, `vimMode?`, `multiline?`, `stickyUserHeaders?`, `alwaysAllowCount?`, `theme?` |
 | `prompt.queue.snapshot` | `items[{id,text}]` |
 | `session.started` | `sessionId`, `cwd` |
+| `session.focus` | `sessionId`, `alreadyOpen?` — already-open session focus (no duplicate spawn) |
 | `session.ended` | `reason` |
 | `agent.running` | `prompt?` — turn in flight (pager shows Executing) |
 | `agent.idle` | `{}` — turn finished / cancelled |
@@ -103,7 +104,7 @@ Every message:
 | `parallel.roster` | `runId`, `goal`, `line`, `counts{needs_input,working,queued,done,failed}`, `workers[]` — worker state machine chrome |
 | `parallel.needs_input` | `total`, `line`, `items[{id,source,label,reason,kind}]` — engineering gates hub (perms + workers) |
 | `parallel.merge` | `runId`, `goal`, `ok`, `ready[]`, `failed[]`, `pending[]`, `steps[]`, `summary`, `body`, `agentPrompt` — multi-agent merge suggestion card (L1 present; apply via agent = L2) |
-| `permission.request` | `requestId`, `tool`, `summary`, `risk` |
+| `permission.request` | `requestId`, `tool`, `summary`, `risk`, optional `input` for structured interaction |
 | `permission.resolved` | `requestId`, `outcome` (`allowed`\|`denied`\|`cancelled`), `reason?`, `taskId?` |
 | `background.task.started` | `taskId`, `sessionId?` |
 | `background.task.permission` | `taskId`, `requestId`, `tool`, `summary` — observability event; the actionable modal remains `permission.request` |
@@ -131,7 +132,7 @@ The `hello` handshake is also valid in the `a2p` direction.
 | `prompt.queue.open` | `{}` — request the latest snapshot |
 | `prompt.queue.remove` | `id` |
 | `prompt.queue.move` | `id`, `direction` (negative = earlier, positive = later) |
-| `permission.respond` | `requestId`, `allow`, `always?` |
+| `permission.respond` | `requestId`, `allow`, `always?`, `responseAction?` (`accept`\|`decline`\|`cancel`), `updatedInput?` — structured tools and MCP elicitations return answers/edits instead of a bare approval |
 | `permission.toggle_always` | `{}` |
 | `permission.cycle` | `{}` |
 | `prefs.toggle_fast` | `{}` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "iclavue",
-  "version": "10.5.13",
+  "version": "10.5.16",
   "description": "Clavue: execution-first AI coding CLI with direct repo tools, provider routing, native workflows, MCP integration, and long-session recovery",
   "keywords": [
     "iclavue",
@@ -72,6 +72,7 @@
   ],
   "scripts": {
     "postinstall": "node scripts/postinstall-pager.mjs",
+    "prepublishOnly": "npm run check:pager-native-publish",
     "build": "npm run check:release && npm pack --dry-run",
     "build:knowledge": "node scripts/build-project-knowledge.mjs",
     "vendor:ripgrep": "node scripts/vendor-ripgrep.mjs",
@@ -106,6 +107,7 @@
     "check:pager-release": "cargo fmt --manifest-path pager/Cargo.toml -- --check && cargo test --locked --manifest-path pager/Cargo.toml && npm run pager:test && npm run check:pager-surface-catalog && npm run check:ui-protocol-registry && npm run check:pager-ui",
     "pager:check": "npm run pager:stage && npm run pager:test",
     "check:pager-ui": "node scripts/check-pager-ui-quality.mjs",
+    "check:pager-native-publish": "node scripts/check-pager-native-publish.mjs",
     "restore:authored-source": "node scripts/restore-authored-source.mjs",
     "test": "node --loader ./tests/ts-esm-loader.mjs --test tests/*.test.mjs",
     "test:fast": "node scripts/run-fast-tests.mjs",