scream-code 0.12.0 → 0.12.2

package/README.md

@@ -38,7 +38,7 @@ Scream Code is a hassle-free, locally deployable, all-in-one AI Agent assistant.
     </td>
     <td width="50%">
       <h3>🐺 Wolfpack Mode</h3>
-      <p><strong>Unlimited intelligent batch concurrency</strong> — multiple Agents collaborate in parallel. Built-in coder/explore/plan/verify/reviewer/oracle/writer sub-agents. No item limit.</p>
+      <p><strong>Unlimited intelligent batch concurrency</strong> — multiple Agents collaborate in parallel. Built-in coder/explore/plan/verify/reviewer/oracle/writer/worker sub-agents. No item limit.</p>
     </td>
   </tr>
   <tr>
@@ -240,7 +240,7 @@ Scream Code 是一款省心的可在本地部署的全能 AI Agent 助手。你
     </td>
     <td width="50%">
       <h3>🐺 Wolfpack 群狼模式</h3>
-      <p><strong>无限制智能批量并发</strong>多Agent协同，并行处理大项目任务。内置coder/explore/plan/verify/reviewer/oracle/writer 等多种子 Agent，精准识别任务类型，item 数量无上限。</p>
+      <p><strong>无限制智能批量并发</strong>多Agent协同，并行处理大项目任务。内置coder/explore/plan/verify/reviewer/oracle/writer/worker 等多种子 Agent，精准识别任务类型，item 数量无上限。</p>
     </td>
   </tr>
   <tr>

package/dist/{app-BRaJ5hGm.mjs → app-1A238nr4.mjs}

@@ -7,7 +7,7 @@ import { i as __require, o as __toESM, r as __exportAll, t as __commonJSMin } fr
 import "./suppress-sqlite-warning-C2VB0doZ.mjs";
 import { C as join$1, D as resolve$1, E as relative$1, S as isAbsolute$1, T as parse$7, a as isSupportedFile, b as basename$1, i as ingestFile, r as ingestDirectory, t as multiSearch, w as normalize, x as dirname$2, y as KnowledgeStore } from "./src-BH9W5k24.mjs";
 import { t as require_base64_js } from "./base64-js-DzVmk6Nb.mjs";
-import { a as setLocale, i as getLocale, n as assertScreamHostIdentity, o as t, r as createScreamDefaultHeaders, t as TextInputDialogComponent } from "./text-input-dialog-DLkaeiFf.mjs";
+import { a as setLocale, i as getLocale, n as assertScreamHostIdentity, o as t, r as createScreamDefaultHeaders, t as TextInputDialogComponent } from "./text-input-dialog-DHhRrX3G.mjs";
 import { createRequire } from "node:module";
 import { createHash, randomBytes, randomInt, randomUUID } from "node:crypto";
 import * as fs$1 from "node:fs/promises";
@@ -54,7 +54,7 @@ import { AsyncLocalStorage } from "node:async_hooks";
 import { Command, Option } from "commander";
 import { createInterface } from "node:readline/promises";
 import chalk, { chalkStderr } from "chalk";
-import { CombinedAutocompleteProvider, Container, Editor, Image, Input, Key, Markdown, ProcessTerminal, Spacer, TUI, Text, decodeKittyPrintable, deleteAllKittyImages, fuzzyFilter, fuzzyMatch, getCapabilities, getImageDimensions, isKeyRelease, matchesKey, setTightMode, sliceByColumn, truncateToWidth, visibleWidth, wrapTextWithAnsi } from "@liutod-scream/pi-tui";
+import { CombinedAutocompleteProvider, Container, Editor, FlexSpacer, Image, Input, Key, Markdown, ProcessTerminal, Spacer, TUI, Text, decodeKittyPrintable, deleteAllKittyImages, fuzzyFilter, fuzzyMatch, getCapabilities, getImageDimensions, isKeyRelease, matchesKey, setTightMode, sliceByColumn, truncateToWidth, visibleWidth, wrapTextWithAnsi } from "@liutod-scream/pi-tui";
 import { highlight, supportsLanguage } from "cli-highlight";
 import { diffWords } from "diff";
 import { gt, valid } from "semver";
@@ -214,7 +214,7 @@ const SCREAM_ERROR_INFO = {
 		title: "Invalid permission mode",
 		retryable: false,
 		public: true,
-		action: "Use one of: yolo / manual / auto."
+		action: "Use one of: yolo / manual / auto / ask."
 	},
 	"session.thinking_empty": {
 		title: "Thinking value is empty",
@@ -66341,7 +66341,8 @@ const ThinkingConfigSchema = z.object({
 const PermissionModeSchema = z.enum([
 	"yolo",
 	"manual",
-	"auto"
+	"auto",
+	"ask"
 ]);
 const PermissionRuleDecisionSchema = z.enum([
 	"allow",
@@ -79129,6 +79130,13 @@ const AUTO_MODE_ENTER_REMINDER = [
 	"  - Do NOT call AskUserQuestion while auto mode is active. Make a reasonable decision and continue without asking the user."
 ].join("\n");
 const AUTO_MODE_EXIT_REMINDER = ["Auto permission mode is no longer active. Tool approvals and permission checks are back to the current mode.", "  - Continue normally, but expect approval prompts or denials when a tool requires them."].join("\n");
+const ASK_MODE_ENTER_REMINDER = [
+	"Ask mode is active — read-only Q&A. You are here to discuss, not to act.",
+	"  - You may read files, search the codebase, and use the web to analyse.",
+	"  - Do NOT modify any files, run shell commands, schedule work, or call MCP tools.",
+	"  - Answer the user directly in conversation. If they want changes, they will ask and switch out of Ask mode."
+].join("\n");
+const ASK_MODE_EXIT_REMINDER = ["Ask mode is no longer active. You may modify files and run commands again as the current permission mode allows.", "  - Resume normal work. The previous read-only Q&A constraint is lifted."].join("\n");
 var PermissionModeInjector = class extends DynamicInjector {
 	injectionVariant = "permission_mode";
 	lastMode;
@@ -79137,8 +79145,12 @@ var PermissionModeInjector = class extends DynamicInjector {
 		const previousMode = this.lastMode;
 		if (mode === previousMode) return void 0;
 		this.lastMode = mode;
-		if (mode === "auto") return AUTO_MODE_ENTER_REMINDER;
-		if (previousMode === "auto") return AUTO_MODE_EXIT_REMINDER;
+		const parts = [];
+		if (mode === "auto") parts.push(AUTO_MODE_ENTER_REMINDER);
+		if (previousMode === "auto") parts.push(AUTO_MODE_EXIT_REMINDER);
+		if (mode === "ask") parts.push(ASK_MODE_ENTER_REMINDER);
+		if (previousMode === "ask") parts.push(ASK_MODE_EXIT_REMINDER);
+		return parts.length > 0 ? parts.join("\n\n") : void 0;
 	}
 };
 //#endregion
@@ -79731,6 +79743,89 @@ var InjectionManager = class {
 	}
 };
 //#endregion
+//#region ../../packages/agent-core/src/mcp/tool-naming.ts
+const MCP_NAME_PREFIX = "mcp__";
+const MCP_NAME_SEPARATOR = "__";
+/**
+* Most LLM providers cap tool names around 64 characters. Leave headroom
+* for the prefix and a separator and truncate longer names with a stable
+* hash suffix so collisions remain extremely unlikely.
+*/
+const MAX_QUALIFIED_LENGTH = 64;
+/**
+* Replace any character outside the safe ASCII set with `_`, then collapse
+* any run of `_` into a single underscore. The collapse step guarantees neither the sanitized server
+* nor tool name contains the `__` separator used by {@link qualifyMcpToolName},
+* which lets {@link isMcpToolName}-aware decoders split unambiguously on the
+* first `__` after the prefix.
+*/
+function sanitizeMcpNamePart(part) {
+	return part.replaceAll(/[^a-zA-Z0-9_-]/g, "_").replaceAll(/_+/g, "_");
+}
+function isMcpToolName(name) {
+	return name.startsWith(MCP_NAME_PREFIX);
+}
+/**
+* Produce the qualified MCP tool name used inside the agent and on the wire.
+* If the result would exceed {@link MAX_QUALIFIED_LENGTH}, a deterministic
+* 8-char hash suffix replaces the tail so the prefix structure stays intact.
+*/
+function qualifyMcpToolName(serverName, toolName) {
+	const full = `${MCP_NAME_PREFIX}${sanitizeMcpNamePart(serverName)}${MCP_NAME_SEPARATOR}${sanitizeMcpNamePart(toolName)}`;
+	if (full.length <= MAX_QUALIFIED_LENGTH) return full;
+	const hash = stableHash8(full);
+	return `${full.slice(0, MAX_QUALIFIED_LENGTH - hash.length - 1)}_${hash}`;
+}
+function stableHash8(input) {
+	let hash = 2166136261;
+	for (let i = 0; i < input.length; i++) {
+		hash ^= input.codePointAt(i);
+		hash = Math.trunc(Math.imul(hash, 16777619));
+	}
+	return hash.toString(16).padStart(8, "0");
+}
+//#endregion
+//#region ../../packages/agent-core/src/agent/permission/policies/ask-mode-guard-deny.ts
+/**
+* Denies every mutating tool while ask mode is active. Ask mode is a
+* read-only Q&A mode: the model may read, search, and analyse, then answer
+* in conversation — it must never modify the filesystem, run shell commands,
+* schedule work, or reach a mutating MCP server tool. The deny messages are
+* deliberately instructive: they tell the model what ask mode is for and
+* point it back to answering, so a blocked call converges instead of looping.
+*/
+var AskModeGuardDenyPermissionPolicy = class {
+	agent;
+	name = "ask-mode-guard-deny";
+	constructor(agent) {
+		this.agent = agent;
+	}
+	evaluate(context) {
+		if (this.agent.permission.mode !== "ask") return;
+		const toolName = context.toolCall.name;
+		if (toolName === "Bash") return {
+			kind: "deny",
+			message: "Bash is not available in Ask mode — it could modify the system. Ask mode is read-only Q&A: answer the user directly in conversation instead of running commands."
+		};
+		if (toolName === "Write" || toolName === "Edit") return {
+			kind: "deny",
+			message: `${toolName} is not available in Ask mode. Ask mode is read-only Q&A: answer the user directly in conversation instead of modifying files. Exit Ask mode when you are ready to make changes.`
+		};
+		if (toolName === "CronCreate" || toolName === "CronDelete") return {
+			kind: "deny",
+			message: `${toolName} is not available in Ask mode because it schedules work that mutates the system. Answer the user directly in conversation instead.`
+		};
+		if (toolName === "TaskStop") return {
+			kind: "deny",
+			message: "TaskStop is not available in Ask mode. Answer the user directly in conversation instead."
+		};
+		if (isMcpToolName(toolName)) return {
+			kind: "deny",
+			message: `${toolName} is not available in Ask mode — MCP tools may mutate external systems. Answer the user directly in conversation instead.`
+		};
+	}
+};
+//#endregion
 //#region ../../packages/agent-core/src/agent/permission/policies/auto-mode-approve.ts
 var AutoModeApprovePermissionPolicy = class {
 	agent;
@@ -80324,6 +80419,7 @@ function createPermissionDecisionPolicies(agent) {
 		new PreToolCallHookPermissionPolicy(agent),
 		new AutoModeAskUserQuestionDenyPermissionPolicy(agent),
 		new PlanModeGuardDenyPermissionPolicy(agent),
+		new AskModeGuardDenyPermissionPolicy(agent),
 		new UserConfiguredDenyPermissionPolicy(agent),
 		new AutoModeApprovePermissionPolicy(agent),
 		new SessionApprovalHistoryPermissionPolicy(agent),
@@ -89841,8 +89937,13 @@ async function recordUnexecutedToolCalls(step, response) {
 	}
 }
 async function runToolCallBatch(step, response) {
-	if (response.toolCalls.length === 0) return { stopTurn: false };
+	if (response.toolCalls.length === 0) return {
+		stopTurn: false,
+		rejectedCount: 0,
+		totalCalls: 0
+	};
 	const calls = response.toolCalls.map((toolCall) => preflightToolCall(step.tools, toolCall));
+	const rejectedCount = calls.filter((call) => call.kind === "rejected").length;
 	const scheduler = new ToolScheduler();
 	const pendingResults = [];
 	let stopTurn = false;
@@ -89893,7 +89994,11 @@ async function runToolCallBatch(step, response) {
 		if (steerPoll !== void 0) clearInterval(steerPoll);
 		await Promise.allSettled(pendingResults);
 	}
-	return { stopTurn };
+	return {
+		stopTurn,
+		rejectedCount,
+		totalCalls: response.toolCalls.length
+	};
 }
 /**
 * Provider-order validation pass. It does not run hooks, spawn tools, or write
@@ -90018,7 +90123,21 @@ async function prepareToolCall(step, call) {
 			stopBatchAfterThis: toolResultStopsTurn(coerced)
 		};
 	};
-	if (call.kind === "rejected") return settleError(call.args, call.output);
+	if (call.kind === "rejected") {
+		let reminder;
+		try {
+			reminder = await step.hooks?.onToolCallRejected?.({
+				toolCallId: call.toolCall.id,
+				toolName: call.toolName,
+				args: call.args,
+				rawArguments: call.toolCall.arguments
+			});
+		} catch {
+			reminder = null;
+		}
+		const output = reminder ? `${call.output}\n${reminder}` : call.output;
+		return settleError(call.args, output);
+	}
 	const decision = await runPrepareToolExecutionHook(step, call);
 	if (decision.kind === "blocked" || decision.kind === "hookFailed") return settleError(decision.args, decision.output);
 	if (decision.kind === "synthetic") return settleSynthetic(decision.args, decision.result);
@@ -90458,8 +90577,13 @@ async function executeLoopStep(deps) {
 	const stopTurnAfterUsage = (await recordUsage(usage))?.stopTurn === true;
 	const stopReason = deriveStepStopReason(response);
 	let effectiveStopReason = stopTurnAfterUsage && stopReason === "tool_use" ? "end_turn" : stopReason;
+	let rejectedCalls = 0;
+	let totalCalls = 0;
 	if (effectiveStopReason === "tool_use") {
-		if ((await runToolCallBatch(step, response)).stopTurn) effectiveStopReason = "end_turn";
+		const toolBatch = await runToolCallBatch(step, response);
+		rejectedCalls = toolBatch.rejectedCount;
+		totalCalls = toolBatch.totalCalls;
+		if (toolBatch.stopTurn) effectiveStopReason = "end_turn";
 	} else if ((stopReason === "paused" || stopReason === "unknown" || stopReason === "max_tokens") && response.toolCalls.length > 0) await recordUnexecutedToolCalls(step, response);
 	signal.throwIfAborted();
 	await dispatchEvent({
@@ -90487,7 +90611,9 @@ async function executeLoopStep(deps) {
 	} catch {}
 	return {
 		usage,
-		stopReason: stopTurnAfterStep && effectiveStopReason === "tool_use" ? "end_turn" : effectiveStopReason
+		stopReason: stopTurnAfterStep && effectiveStopReason === "tool_use" ? "end_turn" : effectiveStopReason,
+		rejectedCalls,
+		totalCalls
 	};
 }
 function deriveStepStopReason(response) {
@@ -90564,10 +90690,20 @@ function createChatStreamingCallbacks(deps) {
 * enforcement, usage aggregation, optional continuation after non-tool stops,
 * and final `TurnResult` mapping. One-step execution lives in `turn-step.ts`.
 */
+/**
+* Consecutive steps whose tool calls were ALL rejected during preflight
+* (unknown tool / malformed args) before the turn stops. Deliberately
+* generous — the repeat breaker's 3/5/8 reminders fire first and let a
+* healthy model self-correct, so this final breaker only trips on genuine
+* model failure after enough fully-rejected steps (8) to never hit a
+* one-off slip.
+*/
+const MAX_CONSECUTIVE_REJECTED_STEPS = 8;
 async function runTurn(input) {
 	const { turnId, signal, llm, buildMessages, dispatchEvent, tools, buildTools, hooks, log, maxSteps, maxRetryAttempts, recordStepUsage: hostRecordStepUsage } = input;
 	let usage = emptyUsage();
 	let steps = 0;
+	let consecutiveRejectedSteps = 0;
 	let stopReason = "end_turn";
 	let activeStep;
 	const mediaProjection = { mode: "normal" };
@@ -90598,6 +90734,15 @@ async function runTurn(input) {
 				mediaProjection
 			});
 			activeStep = void 0;
+			if (stepResult.totalCalls > 0) {
+				if (stepResult.rejectedCalls === stepResult.totalCalls) consecutiveRejectedSteps += 1;
+				else consecutiveRejectedSteps = 0;
+				if (consecutiveRejectedSteps >= MAX_CONSECUTIVE_REJECTED_STEPS) {
+					log?.warn(`repeated invalid tool calls — stopping turn after ${consecutiveRejectedSteps} consecutive all-rejected steps`);
+					stopReason = "end_turn";
+					break;
+				}
+			}
 			if (stepResult.stopReason === "tool_use") continue;
 			const terminalStopReason = stepResult.stopReason;
 			stopReason = terminalStopReason;
@@ -94111,48 +94256,6 @@ function wrapAuthError(prefix, error) {
 	return /* @__PURE__ */ new Error(`${prefix}: ${String(error)}`);
 }
 //#endregion
-//#region ../../packages/agent-core/src/mcp/tool-naming.ts
-const MCP_NAME_PREFIX = "mcp__";
-const MCP_NAME_SEPARATOR = "__";
-/**
-* Most LLM providers cap tool names around 64 characters. Leave headroom
-* for the prefix and a separator and truncate longer names with a stable
-* hash suffix so collisions remain extremely unlikely.
-*/
-const MAX_QUALIFIED_LENGTH = 64;
-/**
-* Replace any character outside the safe ASCII set with `_`, then collapse
-* any run of `_` into a single underscore. The collapse step guarantees neither the sanitized server
-* nor tool name contains the `__` separator used by {@link qualifyMcpToolName},
-* which lets {@link isMcpToolName}-aware decoders split unambiguously on the
-* first `__` after the prefix.
-*/
-function sanitizeMcpNamePart(part) {
-	return part.replaceAll(/[^a-zA-Z0-9_-]/g, "_").replaceAll(/_+/g, "_");
-}
-function isMcpToolName(name) {
-	return name.startsWith(MCP_NAME_PREFIX);
-}
-/**
-* Produce the qualified MCP tool name used inside the agent and on the wire.
-* If the result would exceed {@link MAX_QUALIFIED_LENGTH}, a deterministic
-* 8-char hash suffix replaces the tail so the prefix structure stays intact.
-*/
-function qualifyMcpToolName(serverName, toolName) {
-	const full = `${MCP_NAME_PREFIX}${sanitizeMcpNamePart(serverName)}${MCP_NAME_SEPARATOR}${sanitizeMcpNamePart(toolName)}`;
-	if (full.length <= MAX_QUALIFIED_LENGTH) return full;
-	const hash = stableHash8(full);
-	return `${full.slice(0, MAX_QUALIFIED_LENGTH - hash.length - 1)}_${hash}`;
-}
-function stableHash8(input) {
-	let hash = 2166136261;
-	for (let i = 0; i < input.length; i++) {
-		hash ^= input.codePointAt(i);
-		hash = Math.trunc(Math.imul(hash, 16777619));
-	}
-	return hash.toString(16).padStart(8, "0");
-}
-//#endregion
 //#region ../../packages/agent-core/src/mcp/auth-tool.ts
 /**
 * Synthetic `mcp__<server>__authenticate` tool.
@@ -95588,6 +95691,45 @@ var ToolCallDeduplicator = class {
 		return null;
 	}
 	/**
+	* Projects the consecutive streak that a call at `index` in the current
+	* step's call list ends, extending the cross-step streak carried in
+	* `consecutiveKey`/`consecutiveCount`.
+	*/
+	projectStreak(index) {
+		let lastKey = this.consecutiveKey;
+		let streak = this.consecutiveCount;
+		for (let i = 0; i <= index; i += 1) {
+			const k = this.stepCalls[i];
+			if (k === lastKey) streak += 1;
+			else {
+				lastKey = k;
+				streak = 1;
+			}
+		}
+		return streak;
+	}
+	/**
+	* Registers a tool call that never reached `prepareToolExecution` — e.g.
+	* preflight rejected it (unknown tool / malformed args) — so the repeat
+	* breaker can count it. Without this, re-issuing the same invalid call
+	* would never fire the 3/5/8 reminders. Returns a reminder string to
+	* append to the rejection output when a streak threshold is reached,
+	* else null.
+	*
+	* `rawArguments` is the provider's raw arguments string. Args that failed
+	* JSON parsing are keyed on the raw text so different malformed attempts
+	* do not count as repeats of each other.
+	*/
+	registerSkipped(toolCallId, toolName, args, rawArguments) {
+		if (this.callKeyByCallId.has(toolCallId)) return null;
+		const keyArgs = rawArguments !== void 0 && rawArguments !== null && !parseToolCallArguments(rawArguments).success ? rawArguments : args;
+		if (this.checkSameStep(toolCallId, toolName, keyArgs) !== null) return null;
+		const streak = this.projectStreak(this.stepCalls.length - 1);
+		if (streak === 3) return REMINDER_TEXT_1;
+		if (streak === 5 || streak === 8) return makeReminderText2(toolName, streak, args);
+		return null;
+	}
+	/**
 	* Called from `finalizeToolResult`, in provider order. For first-occurrence
 	* calls, projects the consecutive streak ending at this call and, if the
 	* threshold is reached, appends the system reminder, then resolves the
@@ -95607,16 +95749,7 @@ var ToolCallDeduplicator = class {
 		const index = this.originalCallIndex.get(toolCallId);
 		if (index === void 0) return result;
 		this.originalCallIndex.delete(toolCallId);
-		let lastKey = this.consecutiveKey;
-		let streak = this.consecutiveCount;
-		for (let i = 0; i <= index; i += 1) {
-			const k = this.stepCalls[i];
-			if (k === lastKey) streak += 1;
-			else {
-				lastKey = k;
-				streak = 1;
-			}
-		}
+		const streak = this.projectStreak(index);
 		let finalResult = result;
 		if (streak === 3) finalResult = appendReminder(result, REMINDER_TEXT_1);
 		else if (streak === 5 || streak === 8) finalResult = appendReminder(result, makeReminderText2(toolName, streak, args));
@@ -95765,6 +95898,7 @@ var TurnFlow = class {
 		if (this.activeTurn !== "resuming") this.activeTurn?.controller.abort(reason);
 		this.activeTurn = null;
 	}
+	maxTokensRecoveryAttempted = false;
 	flushSteerBuffer() {
 		const steers = this.steerBuffer;
 		if (steers.length === 0) return false;
@@ -96055,9 +96189,17 @@ var TurnFlow = class {
 							await this.agent.fullCompaction.afterStep();
 							deduper.endStep();
 						},
-						shouldContinueAfterStop: async ({ signal }) => {
+						shouldContinueAfterStop: async ({ signal, stopReason }) => {
 							if (this.flushSteerBuffer()) return { continue: true };
 							signal.throwIfAborted();
+							if (stopReason === "max_tokens" && !this.maxTokensRecoveryAttempted && this.agent.config.profileName === "agent") {
+								this.maxTokensRecoveryAttempted = true;
+								this.agent.fullCompaction.begin({
+									source: "auto",
+									instruction: "The previous response was truncated by the output limit. Compact the context and continue."
+								});
+								return { continue: true };
+							}
 							const latestVerification = this.agent.workingSet.getLatestVerificationForTurn(this.currentTurnId);
 							const hasPassedVerificationThisTurn = latestVerification?.passed === true;
 							if (this.convergenceInjections < this.MAX_CONVERGENCE_INJECTIONS) {
@@ -96121,6 +96263,7 @@ var TurnFlow = class {
 						authorizeToolExecution: async (ctx) => {
 							return this.agent.permission.beforeToolCall(ctx);
 						},
+						onToolCallRejected: async ({ toolCallId, toolName, args, rawArguments }) => deduper.registerSkipped(toolCallId, toolName, args, rawArguments),
 						finalizeToolResult: async (ctx) => {
 							const finalResult = await deduper.finalizeResult(ctx.toolCall.id, ctx.toolCall.name, ctx.args, ctx.result);
 							const { isError, output } = finalResult;
@@ -120009,7 +120152,7 @@ var Session = class {
 	}
 	async setPermission(mode) {
 		this.ensureOpen();
-		if (!isPermissionMode(mode)) throw new ScreamError(ErrorCodes.SESSION_PERMISSION_MODE_INVALID, "Session permission mode must be yolo, manual, or auto");
+		if (!isPermissionMode(mode)) throw new ScreamError(ErrorCodes.SESSION_PERMISSION_MODE_INVALID, "Session permission mode must be yolo, manual, auto, or ask");
 		await this.rpc.setPermission({
 			sessionId: this.id,
 			mode
@@ -120378,7 +120521,7 @@ function normalizeOptionalString$1(value) {
 	return normalized.length > 0 ? normalized : void 0;
 }
 function isPermissionMode(value) {
-	return value === "yolo" || value === "manual" || value === "auto";
+	return value === "yolo" || value === "manual" || value === "auto" || value === "ask";
 }
 function resumeStateFromSummary(summary) {
 	if (!hasResumeState(summary)) return void 0;
@@ -120755,7 +120898,7 @@ function optionalBuildString(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 const SCREAM_BUILD_INFO = {
-	version: optionalBuildString("0.12.0"),
+	version: optionalBuildString("0.12.2"),
 	channel: optionalBuildString(""),
 	commit: optionalBuildString(""),
 	buildTarget: optionalBuildString("darwin-arm64")
@@ -121752,6 +121895,13 @@ const BUILTIN_SLASH_COMMANDS = [
 		priority: 124,
 		availability: "always"
 	},
+	{
+		name: "ask",
+		aliases: ["ask"],
+		description: "registry.ask_desc",
+		priority: 122,
+		availability: "always"
+	},
 	{
 		name: "wolfpack",
 		aliases: ["wp"],
@@ -123290,11 +123440,16 @@ function getPermissionOptions() {
 			value: "yolo",
 			label: "YES",
 			description: t("permission.yolo_desc")
+		},
+		{
+			value: "ask",
+			label: "ASK",
+			description: t("permission.ask_desc")
 		}
 	];
 }
 function isPermissionModeChoice(value) {
-	return value === "manual" || value === "auto" || value === "yolo";
+	return value === "manual" || value === "auto" || value === "yolo" || value === "ask";
 }
 var PermissionSelectorComponent = class extends ChoicePickerComponent {
 	constructor(opts) {
@@ -123950,7 +124105,7 @@ function formatTokenCount$1(n) {
 	return String(Math.round(n));
 }
 /**
-* Build a `[███░░░░░░░]` style bar. Returns a plain-ASCII string with
+* Build a `███░░░░░░░` style bar. Returns a plain-ASCII string with
 * `filled`/`empty` glyphs — colouring is the caller's responsibility.
 */
 function renderProgressBar(ratio, width = 20, filled = "█", empty = "░") {
@@ -123988,8 +124143,9 @@ function safeUsage(usage) {
 	return safeUsageRatio(usage);
 }
 const CONTEXT_BAR_WIDTH = 10;
-const CONTEXT_BAR_FILLED = "▰";
-const CONTEXT_BAR_EMPTY = "▱";
+const CONTEXT_BAR_DEEP = "█";
+const CONTEXT_BAR_FOAM = "▓▒";
+const CONTEXT_BAR_AIR = "░";
 const BALANCE_FLASH_MS = 1500;
 function currencySymbol(currency) {
 	if (currency === "CNY") return "¥";
@@ -123997,18 +124153,22 @@ function currencySymbol(currency) {
 	return `${currency} `;
 }
 /**
-* Half-block progress bar for context usage: `▰▰▰▱▱▱▱▱▱▱` (10 cells).
-* Filled cells are rounded from the clamped ratio, so 0% is all-empty and
-* >=100% is all-filled; NaN/undefined coerce through safeUsageRatio first.
+* Water-level progress bar for context usage: `█████▓▒░░░` (10 cells).
+* Used cells read as water — solid depth (█) with a foam transition (▓▒)
+* hugging the water line; unused cells read as air (░). Cell count is
+* rounded from the clamped ratio, so 0% is all-air and >=100% is all-water;
+* NaN/undefined coerce through safeUsageRatio first.
 */
 function formatContextBar(usage, width = CONTEXT_BAR_WIDTH) {
 	const clamped = Math.min(1, Math.max(0, safeUsageRatio(usage)));
 	const filled = Math.round(clamped * width);
-	return CONTEXT_BAR_FILLED.repeat(filled) + CONTEXT_BAR_EMPTY.repeat(width - filled);
+	const foam = Math.min(2, filled);
+	const deep = Math.max(0, filled - foam);
+	return `${CONTEXT_BAR_DEEP.repeat(deep) + CONTEXT_BAR_FOAM.slice(0, foam)}${CONTEXT_BAR_AIR.repeat(width - filled)}`;
 }
-function formatContextStatus(usage, tokens, maxTokens) {
+function formatContextStatus(usage, tokens, maxTokens, barWidth = CONTEXT_BAR_WIDTH) {
 	const pct = `${(safeUsage(usage) * 100).toFixed(1)}%`;
-	const barAndPct = `${formatContextBar(usage)}  ${pct}`;
+	const barAndPct = `${barWidth > 0 ? `${formatContextBar(usage, barWidth)}  ` : ""}${pct}`;
 	if (maxTokens && maxTokens > 0 && tokens !== void 0) return t("footer.context", {
 		pct: barAndPct,
 		tokens: formatTokenCount(tokens),
@@ -124258,7 +124418,8 @@ var FooterComponent = class {
 			const statusLine = buildStatusLine(state.streamingPhase, state.streamingStartTime, state.reconnectAttempt);
 			const ccDot = state.ccConnectActive ? chalk.hex(colors.success)("●") : chalk.hex(colors.textDim)("●");
 			const contextColor = pickContextColor(state.contextUsage, colors);
-			rightText = `${ccDot} ${chalk.hex(contextColor)(formatContextStatus(state.contextUsage, state.contextTokens, state.maxContextTokens))}${chalk.hex(colors.textDim)(`  ${statusLine}`)}`;
+			const contextBarWidth = width >= 68 ? CONTEXT_BAR_WIDTH : width >= 52 ? 6 : 0;
+			rightText = `${ccDot} ${chalk.hex(contextColor)(formatContextStatus(state.contextUsage, state.contextTokens, state.maxContextTokens, contextBarWidth))}${chalk.hex(colors.textDim)(`  ${statusLine}`)}`;
 		}
 		const rightWidth = visibleWidth(rightText);
 		const gap = 3;
@@ -125314,6 +125475,40 @@ async function handleYoloCommand(host, args) {
 		host.setAppState({ permissionMode: "yolo" });
 	}
 }
+async function handleAskCommand(host, args) {
+	const session = host.session;
+	if (session === void 0) {
+		host.showError(getNoActiveSessionMessage());
+		return;
+	}
+	const subcmd = args.trim().toLowerCase();
+	const currentMode = host.state.appState.permissionMode;
+	if (subcmd === "on") {
+		if (currentMode === "ask") {
+			host.showNotice(t("config.ask_already_on"));
+			return;
+		}
+		await session.setPermission("ask");
+		host.setAppState({ permissionMode: "ask" });
+		return;
+	}
+	if (subcmd === "off") {
+		if (currentMode !== "ask") {
+			host.showNotice(t("config.ask_already_off"));
+			return;
+		}
+		await session.setPermission("manual");
+		host.setAppState({ permissionMode: "manual" });
+		return;
+	}
+	if (currentMode === "ask") {
+		await session.setPermission("manual");
+		host.setAppState({ permissionMode: "manual" });
+	} else {
+		await session.setPermission("ask");
+		host.setAppState({ permissionMode: "ask" });
+	}
+}
 async function handleAutoCommand(host, args) {
 	const session = host.session;
 	if (session === void 0) {
@@ -126444,7 +126639,7 @@ async function guidedGoalSetup(host) {
 		host.showNotice(t("goal.storm_breaker"), t("goal.conflict_loop"));
 		return;
 	}
-	const { TextInputDialogComponent } = await import("./text-input-dialog-D-IR4lxs.mjs");
+	const { TextInputDialogComponent } = await import("./text-input-dialog-K1S_ir1m.mjs");
 	const initialDesc = await promptText(host, TextInputDialogComponent, {
 		title: t("goal.setup_title_initial"),
 		subtitle: t("goal.setup_desc_hint"),
@@ -126465,7 +126660,7 @@ async function guidedGoalSetup(host) {
 	await showGoalConfigWizard(host, session, confirmed.trim() || objective, false);
 }
 async function showGoalConfigWizard(host, session, objective, replace) {
-	const { TextInputDialogComponent } = await import("./text-input-dialog-D-IR4lxs.mjs");
+	const { TextInputDialogComponent } = await import("./text-input-dialog-K1S_ir1m.mjs");
 	const turnInput = await promptNumber(host, TextInputDialogComponent, {
 		title: t("goal.wizard_title", { objective }),
 		subtitle: t("goal.budget_turns_hint"),
@@ -135147,6 +135342,9 @@ async function handleBuiltInSlashCommand(host, name, args) {
 		case "yes":
 			await handleYoloCommand(host, args);
 			return;
+		case "ask":
+			await handleAskCommand(host, args);
+			return;
 		case "auto":
 			await handleAutoCommand(host, args);
 			return;
@@ -140783,6 +140981,7 @@ var LifecycleController = class LifecycleController {
 		ui.addChild(this.host.state.queueContainer);
 		ui.addChild(this.host.state.errorBannerContainer);
 		ui.addChild(this.host.state.planModeBannerContainer);
+		ui.addChild(new FlexSpacer());
 		ui.addChild(this.host.state.editorContainer);
 	}
 	mountFooter() {
@@ -143159,6 +143358,24 @@ function adaptQuestionAnswers(event, response) {
 //#endregion
 //#region src/tui/managers/session-manager.ts
 /**
+* How recently a session must have been touched for the empty-session pruner
+* to leave it alone. Guards against sweeping a fresh empty session that
+* another terminal is about to use.
+*/
+const PRUNE_EMPTY_SESSION_GRACE_MS = 300 * 1e3;
+/**
+* A session is prunable when it never received a user prompt and never got a
+* title (auto-generated or custom) — i.e. an empty shell left behind by a
+* one-off startup. Archived sessions and sessions touched within the grace
+* window are kept.
+*/
+function isPrunableEmptySession(summary, now, graceMs = PRUNE_EMPTY_SESSION_GRACE_MS) {
+	if (summary.archived) return false;
+	if (summary.lastPrompt !== void 0) return false;
+	if (summary.title) return false;
+	return now - summary.updatedAt > graceMs;
+}
+/**
 * Encapsulates all session lifecycle operations:
 * create / resume / switch / close / sync state / reset runtime.
 */
@@ -143212,12 +143429,34 @@ var SessionManager$1 = class {
 		await this.syncRuntimeState(session);
 		if (startup.wolfpack && !isResumeStartup) await session.setWolfpackMode(true);
 		this.host.state.startupState = "ready";
+		await this.pruneEmptySessions(workDir, session.id);
 		this.host.sessionEventHandler.startSubscription();
 		return {
 			session,
 			shouldReplay: shouldReplayHistory
 		};
 	}
+	/**
+	* Deletes sessions in this workdir that never received a user prompt and
+	* were never renamed — repeated startups otherwise leave a growing pile of
+	* one-off empty session shells. The session about to be used is skipped, as
+	* are archived sessions, any session that produced a prompt or a title, and
+	* any session touched within the grace window (protects a fresh empty
+	* session being used from another terminal). Best-effort: cleanup failures
+	* never block startup.
+	*/
+	async pruneEmptySessions(workDir, currentSessionId) {
+		try {
+			const now = Date.now();
+			const summaries = await this.host.harness.listSessions({ workDir });
+			for (const summary of summaries) {
+				if (summary.id === currentSessionId) continue;
+				if (isPrunableEmptySession(summary, now)) await this.host.harness.deleteSession(summary.id);
+			}
+		} catch (error) {
+			this.host.showStatus(`Session cleanup skipped: ${String(error)}`);
+		}
+	}
 	async setSession(session) {
 		await this.unloadCurrentSession("switching session")?.close({ extractMemories: false });
 		this.host.session = session;
@@ -144597,11 +144836,14 @@ var SessionPickerComponent = class extends Container {
 			return lines;
 		}
 		const headerLabel = t("session.picker_title");
-		const headerHint = this.confirmingDelete ? this.selectedIds.size > 0 ? t("session_picker.batch_delete_confirm", { count: String(this.selectedIds.size) }) : t("session.delete_confirm") : this.selectedIds.size > 0 ? t("session_picker.batch_hint", { count: String(this.selectedIds.size) }) : t("session.picker_hint");
+		const headerHint = this.selectedIds.size > 0 ? t("session_picker.batch_hint", { count: String(this.selectedIds.size) }) : t("session.picker_hint");
 		const labelWidth = visibleWidth(headerLabel);
 		const shownHint = truncateToWidth(headerHint, Math.max(0, width - labelWidth), ELLIPSIS);
-		const hintColor = this.confirmingDelete ? colors.warning : colors.textMuted;
-		lines.push(chalk.hex(colors.primary).bold(headerLabel) + chalk.hex(hintColor)(shownHint));
+		lines.push(chalk.hex(colors.primary).bold(headerLabel) + chalk.hex(colors.textMuted)(shownHint));
+		if (this.confirmingDelete) if (this.selectedIds.size > 0) {
+			lines.push(chalk.hex(colors.warning).bold(truncateToWidth(t("session_picker.batch_delete_confirm", { count: String(this.selectedIds.size) }), width, ELLIPSIS)));
+			lines.push(chalk.hex(colors.warning)(t("session_picker.batch_delete_hint")));
+		} else lines.push(chalk.hex(colors.warning)(t("session.delete_confirm")));
 		lines.push("");
 		const visibleStart = Math.max(0, Math.min(this.selectedIndex - Math.floor(this.maxVisibleSessions / 2), Math.max(0, this.sessions.length - this.maxVisibleSessions)));
 		const visibleSessions = this.sessions.slice(visibleStart, visibleStart + this.maxVisibleSessions);

package/dist/main.mjs

@@ -6,7 +6,7 @@ const __dirname = __cjsShimDirname(__filename);
 import "./suppress-sqlite-warning-C2VB0doZ.mjs";
 //#region src/main.ts
 try {
-	(await import("./app-BRaJ5hGm.mjs")).main();
+	(await import("./app-1A238nr4.mjs")).main();
 } catch (error) {
 	process.stderr.write(`${error instanceof Error ? error.stack ?? error.message : String(error)}\n`);
 	process.exit(1);

package/dist/{text-input-dialog-DLkaeiFf.mjs → text-input-dialog-DHhRrX3G.mjs}

@@ -474,6 +474,7 @@ const dictionaries = {
 		"session_picker.empty": "未找到会话。按 Escape 关闭。",
 		"session_picker.cc_restricted": "CC专属会话不支持切换或删除，请点击或复制下方文件路径进入手动管理",
 		"session_picker.batch_delete_confirm": "删除选中的 {count} 个会话？",
+		"session_picker.batch_delete_hint": "  按 Enter 确认批量删除，Esc 取消",
 		"session_picker.batch_delete_unavailable": "此处不支持批量删除。",
 		"session_picker.batch_hint": "[空格] 选择 · [a] 全选 · [d] 删除选中（{count}）",
 		"session.picker_title": "会话 ",
@@ -844,6 +845,7 @@ const dictionaries = {
 		"permission.auto": "自动",
 		"permission.auto_desc": "完全无交互运行。工具操作自动批准，跳过代理问题以便其自行决策。",
 		"permission.yolo_desc": "自动批准工具操作和计划转换。需要您输入时代理仍会明确提问。",
+		"permission.ask_desc": "只读问答模式：直接对话回答，不修改文件、不运行命令、不调用 MCP 工具。",
 		"permission.select_title": "选择权限模式",
 		"theme.auto": "自动（跟随终端）",
 		"theme.dark": "深色",
@@ -1030,6 +1032,8 @@ const dictionaries = {
 		"config.plan_cleared": "计划已清除",
 		"config.yolo_already_on": "YES 模式已开启",
 		"config.yolo_already_off": "YES 模式已关闭",
+		"config.ask_already_on": "ASK 模式已开启",
+		"config.ask_already_off": "ASK 模式已关闭",
 		"config.auto_already_on": "自动模式已开启",
 		"config.auto_already_off": "自动模式已关闭",
 		"settings.title": "设置",
@@ -1064,6 +1068,7 @@ const dictionaries = {
 		"cc.clean_config.detail": " ~/.cc-connect（含会话记录、配置、日志）",
 		"registry.auto_desc": "切换自动权限模式",
 		"registry.yolo_desc": "切换至自动批准模式(yolo)",
+		"registry.ask_desc": "切换至只读问答模式(ask)",
 		"registry.wolfpack_desc": "切换群狼协作模式，自动批准+批量并发",
 		"registry.sessions_desc": "浏览并恢复会话",
 		"registry.goal_desc": "查看/管理自动目标",
@@ -1524,6 +1529,7 @@ const dictionaries = {
 		"session_picker.empty": "No sessions found. Press Escape to close.",
 		"session_picker.cc_restricted": "CC sessions cannot be switched or deleted. Use the file path below to manage manually",
 		"session_picker.batch_delete_confirm": "Delete {count} selected sessions?",
+		"session_picker.batch_delete_hint": "  Press Enter to confirm batch delete, Esc to cancel",
 		"session_picker.batch_delete_unavailable": "Batch delete is not available here.",
 		"session_picker.batch_hint": "[space] select · [a] all · [d] delete selected ({count})",
 		"session.picker_title": "Sessions ",
@@ -1894,6 +1900,7 @@ const dictionaries = {
 		"permission.auto": "Auto",
 		"permission.auto_desc": "Run fully without interaction. Tool operations are auto-approved; agent questions are skipped so it can decide on its own.",
 		"permission.yolo_desc": "Auto-approve tool operations and plan transitions. The agent will still explicitly ask when it needs your input.",
+		"permission.ask_desc": "Read-only Q&A mode: answer in conversation, never modify files, run commands, or call MCP tools.",
 		"permission.select_title": "Select permission mode",
 		"theme.auto": "Auto (follow terminal)",
 		"theme.dark": "Dark",
@@ -2080,6 +2087,8 @@ const dictionaries = {
 		"config.plan_cleared": "Plan cleared",
 		"config.yolo_already_on": "YES mode is already on",
 		"config.yolo_already_off": "YES mode is already off",
+		"config.ask_already_on": "ASK mode is already on",
+		"config.ask_already_off": "ASK mode is already off",
 		"config.auto_already_on": "Auto mode is already on",
 		"config.auto_already_off": "Auto mode is already off",
 		"settings.title": "Settings",
@@ -2114,6 +2123,7 @@ const dictionaries = {
 		"cc.clean_config.detail": " ~/.cc-connect (includes session records, config, logs)",
 		"registry.auto_desc": "Toggle auto permission mode",
 		"registry.yolo_desc": "Toggle auto-approve mode (yolo)",
+		"registry.ask_desc": "Toggle read-only Q&A mode (ask)",
 		"registry.wolfpack_desc": "Toggle wolfpack mode, auto-approve + batch concurrency",
 		"registry.sessions_desc": "Browse and restore sessions",
 		"registry.goal_desc": "View/manage auto goals",

package/dist/{text-input-dialog-D-IR4lxs.mjs → text-input-dialog-K1S_ir1m.mjs}

@@ -3,5 +3,5 @@ import { fileURLToPath as __cjsShimFileURLToPath } from 'node:url';
 import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
 const __dirname = __cjsShimDirname(__filename);
-import { t as TextInputDialogComponent } from "./text-input-dialog-DLkaeiFf.mjs";
+import { t as TextInputDialogComponent } from "./text-input-dialog-DHhRrX3G.mjs";
 export { TextInputDialogComponent };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scream-code",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "description": "A terminal-native AI agent for builders",
   "license": "MIT",
   "author": "ScreamCli",
@@ -59,7 +59,7 @@
     "smoke": "node dist/main.mjs --version"
   },
   "dependencies": {
-    "@liutod-scream/pi-tui": "^0.80.34",
+    "@liutod-scream/pi-tui": "^0.80.39",
     "@mariozechner/clipboard": "^0.3.2",
     "chalk": "^5.4.1",
     "cli-highlight": "^2.1.11",