neagen 0.1.9 → 0.1.10

package/lib/approval-format.mjs

@@ -7,8 +7,20 @@
 
 const PREVIEW_MAX_LINES = 12;
 const PREVIEW_MAX_LINE_CHARS = 100;
-const BODY_MAX_CHARS = 700;
 const RULE = "─".repeat(44);
+const TERMINAL_CONTROL = /[\u0000-\u0009\u000B-\u001F\u007F-\u009F\u200B-\u200F\u202A-\u202E\u2060-\u206F\uFEFF]/gu;
+
+/**
+ * Keep line feeds readable while making every terminal/format control an
+ * explicit code point. In particular, raw ESC never reaches the terminal, so
+ * message content cannot apply ANSI styling or rewrite the approval chrome.
+ */
+export function renderTerminalSafeText(value) {
+  return String(value).replace(TERMINAL_CONTROL, (character) => {
+    const codePoint = character.codePointAt(0).toString(16).toUpperCase().padStart(4, "0");
+    return `⟦U+${codePoint}⟧`;
+  });
+}
 
 function formatBytes(size) {
   if (!Number.isFinite(size)) return "unknown size";
@@ -24,7 +36,7 @@ function clampLine(line) {
 }
 
 function previewBlock(text, { truncated = false } = {}) {
-  const lines = String(text).split("\n");
+  const lines = renderTerminalSafeText(text).split("\n");
   const shown = lines.slice(0, PREVIEW_MAX_LINES).map((line) => `  │ ${clampLine(line)}`);
   const clipped = truncated || lines.length > PREVIEW_MAX_LINES;
   return [
@@ -34,21 +46,14 @@ function previewBlock(text, { truncated = false } = {}) {
   ];
 }
 
-function clampBody(body) {
-  const text = String(body);
-  return text.length > BODY_MAX_CHARS
-    ? { text: `${text.slice(0, BODY_MAX_CHARS)}…`, truncated: true }
-    : { text, truncated: false };
-}
-
 function formatSendFilePrompt(input) {
   const review = input?.review;
   if (!review || typeof review !== "object") return undefined;
-  const to = review.to ?? input?.to ?? "connection";
+  const to = renderTerminalSafeText(review.to ?? input?.to ?? "connection");
   const header = [
     `Send file to ${to}?`,
-    `  ${review.filename} · ${review.contentType} · ${formatBytes(review.size)}`,
-    `  sha256 ${String(review.sha256).slice(0, 16)}…`,
+    `  ${renderTerminalSafeText(review.filename)} · ${renderTerminalSafeText(review.contentType)} · ${formatBytes(review.size)}`,
+    `  sha256 ${renderTerminalSafeText(review.sha256).slice(0, 16)}…`,
   ];
   return [
     ...header,
@@ -58,23 +63,45 @@ function formatSendFilePrompt(input) {
 }
 
 function formatSendMessagePrompt(input) {
-  if (typeof input?.body !== "string") return undefined;
-  const { text, truncated } = clampBody(input.body);
+  const review = input?.review;
+  if (
+    !review ||
+    typeof review !== "object" ||
+    review.version !== "v1" ||
+    typeof review.body !== "string" ||
+    typeof review.token !== "string" ||
+    !/^[0-9a-f]{64}$/.test(review.token)
+  ) return undefined;
   return [
-    `Send message${input.to ? ` to ${input.to}` : ""}?`,
-    ...previewBlock(text, { truncated }),
-    "Approve to send. Deny to cancel.",
+    `Send reviewed message to ${renderTerminalSafeText(review.to ?? "connection")}?`,
+    `  ${RULE}`,
+    renderTerminalSafeText(review.body),
+    `  ${RULE}`,
+    `  sha256 ${renderTerminalSafeText(review.bodySha256).slice(0, 16)}…`,
+    "Control characters are shown as ⟦U+XXXX⟧.",
+    "Approve to send this exact body. Deny to cancel.",
   ].join("\n");
 }
 
 function formatApproveDraftPrompt(input) {
-  const lines = [`Approve and send draft${input?.draftId ? ` ${String(input.draftId).slice(0, 8)}…` : ""}?`];
-  if (typeof input?.body === "string") {
-    const { text, truncated } = clampBody(input.body);
-    lines.push(...previewBlock(text, { truncated }), "(revised body shown above)");
-  }
-  lines.push("Approve to send. Deny to cancel.");
-  return lines.join("\n");
+  const review = input?.review;
+  if (
+    !review ||
+    typeof review !== "object" ||
+    review.version !== "v1" ||
+    typeof review.body !== "string" ||
+    typeof review.token !== "string" ||
+    !/^[0-9a-f]{64}$/.test(review.token)
+  ) return undefined;
+  return [
+    `Send reviewed draft to ${renderTerminalSafeText(review.to ?? "connection")}?`,
+    `  ${RULE}`,
+    renderTerminalSafeText(review.body),
+    `  ${RULE}`,
+    `  sha256 ${renderTerminalSafeText(review.bodySha256).slice(0, 16)}…`,
+    "Control characters are shown as ⟦U+XXXX⟧.",
+    "Approve to send this exact body. Deny to cancel.",
+  ].join("\n");
 }
 
 const FORMATTERS = {

package/lib/eve-product-tui.mjs

@@ -40,10 +40,20 @@ async function loadEveTuiRunner() {
 }
 
 function wakeSyncPrompt(ev) {
+  if (ev.kind !== "message" && ev.kind !== "file") {
+    return null;
+  }
   const noun = ev.kind === "message" ? "a text message" : "a file";
   return `[mail] You just received new mail (${noun}) from a connection. Call sync_inbox once to fetch it, then tell me in one short line who it is from and what it is.`;
 }
 
+function contactWakeText(ev) {
+  if (ev.kind === "contact_request") return "New contact request arrived. Ask Neagen to review contact requests.";
+  if (ev.kind === "intro_forward_request") return "New intro forwarding request arrived. Ask Neagen to forward or decline it.";
+  if (ev.kind === "contact_accepted") return "A contact request was accepted. Ask Neagen to check contact requests and reveal the accepted card.";
+  return null;
+}
+
 function normalizeHost(host) {
   return host.replace(/\/$/, "");
 }
@@ -417,12 +427,19 @@ export async function runProductTui({ profile } = {}) {
   let wake = null;
   try {
     wake = await subscribeInboxWakeAuto(identity.ownerId, (ev) => {
+      const contactText = contactWakeText(ev);
+      if (contactText) {
+        process.stdout.write(`\n${contactText}\n`);
+        return;
+      }
       const noun = ev.kind === "message" ? "a message" : `a file (${ev.filename ?? "unknown"})`;
       process.stdout.write(`\nNew mail: ${noun} arrived. Fetching it now...\n`);
       wakeChain = wakeChain
         .then(async () => {
+          const prompt = wakeSyncPrompt(ev);
+          if (!prompt) return;
           const syncSession = client.session();
-          const response = await syncSession.send({ message: wakeSyncPrompt(ev) });
+          const response = await syncSession.send({ message: prompt });
           for await (const _event of response) {
             // drain the sync turn stream silently in the background
           }

package/lib/turn-stream.mjs

@@ -45,7 +45,7 @@ export function stalledSessionFailed() {
     data: {
       error: {
         code: "turn_stalled",
-        message: "The connection to your Neagen stalled with no reply for a while. Your message may still be processing, so just send it again.",
+        message: "The connection to your Neagen stalled. Check the conversation for a saved reply before retrying.",
       },
     },
   };
@@ -60,7 +60,7 @@ export function droppedSessionFailed() {
     data: {
       error: {
         code: "turn_dropped",
-        message: "The connection to your Neagen dropped mid-reply. Your message may still be processing, so just try again.",
+        message: "The connection to your Neagen dropped. Check the conversation for a saved reply before retrying.",
       },
     },
   };
@@ -69,14 +69,14 @@ export function droppedSessionFailed() {
 // Synthesized failure for a held boundary (session.completed/waiting) that the
 // stream never confirmed with a commit event or a `done`. The boundary reached
 // us, but the turn was cut off before the server finished saving and billing it,
-// so we must not show success. The reply may have been lost mid-save.
+// so we must not show success. The server abort guard prevents a late save.
 export function unconfirmedBoundarySessionFailed() {
   return {
     type: "session.failed",
     data: {
       error: {
         code: "turn_unconfirmed",
-        message: "The connection to your Neagen dropped before the reply was saved. Your Neagen's reply may not have been saved, so ask again to be sure.",
+        message: "The connection to your Neagen dropped before confirmation. Check the conversation for a saved reply before retrying.",
       },
     },
   };
@@ -318,4 +318,4 @@ export async function readTurnSseStream(response, onEvent) {
   return collected;
 }
 
-export { sseEvent };
+export { sseEvent };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neagen",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Agentic networking, in the terminal. Your Neagen represents you in the network: chat, agent-mail, and files, with passkey login and no passwords.",
   "type": "module",
   "bin": {