zot/internal/tui/view.go
patriceckhart 99c9ba8062 feat(ext): phase 4 - full-event interception, arg rewrites, /reload-ext
Clears every deferred extension todo in one push:

1) Interception expands to three events: tool_call (already shipped),
   turn_start (gate the turn before the model call, e.g. rate-limit /
   business-hour), and assistant_message (suppress or rewrite the
   user-visible text while keeping the model's original output in
   the transcript).

2) Tool-call args can now be rewritten mid-flight. An interceptor
   returning modified_args replaces the JSON the tool actually
   receives, without the model seeing the rewrite. Chains: each
   subscriber sees the previous one's output, letting guards
   successively redact / patch / augment. Invalid JSON is dropped
   safely.

3) /reload-ext hot-reloads every extension without restarting zot.
   The manager gracefully shuts down all running subprocesses,
   re-reads extension.json from disk, respawns (including --ext
   paths remembered from startup), and the host rebuilds the agent's
   tool registry in-place so freshly-registered tools are callable
   immediately.

Wire-format changes (extproto):
- EventInterceptResponseFromExt gains modified_args and replace_text
  fields (both optional, ignored when block=true).
- EventInterceptFromHost gains Step (for turn_start) and Text (for
  assistant_message) alongside the existing tool_call payload.

Core agent changes:
- BeforeToolExecute signature now returns (allowed, reason,
  modifiedArgs json.RawMessage). Non-nil+valid JSON args replace
  tc.Arguments before Tool.Execute runs.
- New BeforeTurn hook, invoked in runLoop before oneTurn. Blocking
  cancels the turn with an EvTurnEnd{StopError} carrying the reason.
- New BeforeAssistantMessage hook, invoked after finalMsg is
  assembled but before the EvAssistantMessage emit. Supports
  suppress (block=true) and text rewrite (replace_text). Transcript
  always gets the original; UI gets the rewritten text.
- New SetTools(reg) so /reload-ext can swap the registry on the
  live agent under the agent mutex.

Manager changes:
- InterceptToolCall now returns InterceptResult (Block, Reason,
  ModifiedArgs, ReplaceText), with a chain that folds rewrites.
- New InterceptTurnStart and InterceptAssistantMessage.
- New Reload(ctx, grace) tears down and respawns everything,
  returning ReloadStats{Stopped, Loaded, Ready, Errors}.
- New SetOnReload(fn) callback the host uses to rebuild the agent
  tool registry after a reload.
- LoadExplicit remembers --ext paths so Reload respawns them.
- subscribe accepts "tool_call", "turn_start", "assistant_message"
  under "intercept".

SDK (pkg/zotext):
- New handler types: ToolCallHandler, TurnStartHandler,
  AssistantMessageHandler, and their decision structs
  (ToolCallDecision with ModifiedArgs, AssistantMessageDecision
  with ReplaceText).
- New registration methods: InterceptToolCallX (rich variant of
  the existing InterceptToolCall), InterceptTurnStart,
  InterceptAssistantMessage.
- dispatchIntercept routes per-event with panic recovery and
  always emits exactly one event_intercept_response.

TUI:
- /reload-ext slash command registered in slashCatalog and
  runSlash. Added to slashCancelsTurn so it waits for idle like
  /compact does.
- runReloadExt shows a "reloading extensions..." status, runs the
  Manager.Reload on a goroutine, and reports the resulting stats.

Tests:
- internal/core/intercept_test.go: verifies args are actually
  rewritten on the way to Tool.Execute, malformed JSON is ignored,
  and block surfaces the reason as an error ToolResult.
- internal/agent/extensions/intercept_test.go: end-to-end with a
  bash extension subprocess that blocks rm -rf, rewrites other bash
  args to "echo GUARDED:", passes through read calls, allows
  turn_start, and redacts SECRET in assistant messages. Second test
  verifies Reload respawns the subprocess, re-registers its command,
  and fires the onReload callback.

Docs:
- docs/extensions.md: rewrote the intercept section to cover all
  three events, added a table of event_intercept_response fields,
  documented the /reload-ext hot-reload command, expanded the SDK
  section with examples of every handler, moved the old "future"
  items into a shipped Phase 4.
- README.md: extensions summary mentions intercept beyond tool_call,
  /reload-ext added to the slash-commands table and to the
  turn-cancel list in "Queued messages".
2026-04-19 17:02:04 +02:00

969 lines
29 KiB
Go

package tui
import (
"encoding/json"
"fmt"
"os"
"regexp"
"strconv"
"strings"
"github.com/patriceckhart/zot/internal/provider"
)
// pathFromToolArgs returns the "path" argument from a tool_call's
// JSON arguments, or "" if the args aren't a JSON object or don't
// include one. Used to pick a syntax language for rendering the
// corresponding tool_result.
func pathFromToolArgs(raw json.RawMessage) string {
if len(raw) == 0 {
return ""
}
var m map[string]any
if err := json.Unmarshal(raw, &m); err != nil {
return ""
}
for _, k := range []string{"path", "file_path"} {
if s, ok := m[k].(string); ok && s != "" {
return s
}
}
return ""
}
// osUserHomeDir is aliased so the test file can swap it.
var osUserHomeDir = os.UserHomeDir
// View turns a transcript + live state into a slice of styled lines,
// already wrapped to width.
type View struct {
Theme Theme
ImageProto ImageProtocol // how to render inline images in this terminal
Messages []provider.Message
// toolPaths maps tool_use_id to the "path" argument of the call, if
// any, so tool_result rendering can pick the right syntax language.
// Rebuilt on each Build().
toolPaths map[string]string
Streaming string // current assistant text delta
StreamingActive bool
ToolCalls []ToolCallView // tool calls in flight or completed
StatusLine string
Err string
// ExpandAll forces every long tool result to render in full.
// Toggled from the tui by ctrl+o. When false, results longer than
// ToolCollapseLines collapse to ToolCollapsePreview lines plus a
// "... (N more lines, M total, ctrl+o to expand)" footer.
ExpandAll bool
// renderCache holds the per-message rendered line slices so Build
// doesn't re-markdown every message on every frame. Keyed by a
// struct of (content hash, width, expandAll) — any of those
// changing invalidates the entry. Messages are append-only after
// they finalise so keeping the cache across turns is safe.
//
// Streaming/in-flight work (v.Streaming, v.ToolCalls) is never
// cached because it changes every delta.
renderCache map[msgCacheKey][]string
}
// msgCacheKey identifies a cached message render. hash is a 64-bit
// FNV-1a of the message's content, which is cheap to compute and
// unambiguous enough for the cache (collisions produce a stale frame,
// not wrong data, and we recompute on invalidation anyway).
type msgCacheKey struct {
hash uint64
width int
expandAll bool
}
// InvalidateRenderCache drops all cached message renders. The tui
// calls this when the transcript is replaced wholesale (/compact,
// /clear, session swap) since messages can be replaced in place and
// a content-hash miss alone doesn't reclaim the old entries.
func (v *View) InvalidateRenderCache() {
v.renderCache = nil
}
// ToolCollapsePreview is the number of lines shown before a long tool
// result is replaced with a "... ctrl+o to expand" footer. Tool
// results shorter than ToolCollapseLines always render in full.
const (
ToolCollapsePreview = 10
ToolCollapseLines = 12
)
// ToolCallView is a pending tool invocation plus optional result.
type ToolCallView struct {
ID string
Name string
Args string // rendered argument summary
Result string // rendered result preview (truncated)
Error bool
Done bool
}
// MessageAnchor records where a rendered message starts in the chat
// line slice. Used by /jump so the dialog can scroll the viewport to
// the row where a turn's user prompt begins.
type MessageAnchor struct {
MessageIdx int // index into v.Messages
Row int // first row of that message in the Build() output
}
// Build returns the chat log lines for the given width.
func (v *View) Build(width int) []string {
lines, _ := v.BuildWithAnchors(width)
return lines
}
// BuildWithAnchors is like Build but additionally reports the first
// row occupied by each message in v.Messages. Callers that need to
// scroll to a specific turn (the /jump dialog) use the anchor slice
// to map a message index back to a row offset.
func (v *View) BuildWithAnchors(width int) ([]string, []MessageAnchor) {
v.refreshToolPaths()
if v.renderCache == nil {
v.renderCache = make(map[msgCacheKey][]string)
}
// Pre-render every message (hits the cache for unchanged ones) so
// we can allocate `out` in a single shot with the exact capacity.
// Growing via append on a long transcript copies the backing array
// log2(N) times; for a 2000-line scrollback that's enough memcpy
// to visibly stutter while typing.
rendered := make([][]string, len(v.Messages))
total := 0
for idx, m := range v.Messages {
lines := v.renderMessageCached(m, width)
rendered[idx] = lines
total += len(lines) + 1 // +1 for the blank separator row
}
out := make([]string, 0, total+16)
anchors := make([]MessageAnchor, 0, len(v.Messages))
for idx := range v.Messages {
anchors = append(anchors, MessageAnchor{MessageIdx: idx, Row: len(out)})
out = append(out, rendered[idx]...)
out = append(out, "")
}
if v.StreamingActive {
out = append(out, v.Theme.FG256(v.Theme.Assistant, "▍ zot"))
// Stream the partial assistant text through the same markdown
// renderer used for finalised messages so code fences, diffs,
// lists, and inline styles look the same while streaming and
// don't suddenly reflow when the turn ends. Indent matches the
// finalised assistant body in renderMessage so the column
// stays consistent across the stream/finalise transition.
const indent = " "
inner := width - len(indent)
if inner < 1 {
inner = width
}
md := RenderMarkdown(v.Streaming, v.Theme, inner)
for _, l := range strings.Split(md, "\n") {
for _, w := range wrapLine(l, inner, "") {
out = append(out, indent+w)
}
}
out = append(out, "")
}
for _, tc := range v.ToolCalls {
out = append(out, v.renderToolCall(tc, width)...)
out = append(out, "")
}
if v.Err != "" {
out = append(out, v.Theme.FG256(v.Theme.Error, "✖ "+v.Err))
out = append(out, "")
}
return out, anchors
}
// refreshToolPaths rebuilds the tool_use_id -> path map from the
// current transcript. Called once per Build() so tool result blocks
// (which may be cached) can look up their syntax language when they
// were originally rendered. Walking the transcript here is O(N) but
// cheap compared to markdown/chroma work it enables.
func (v *View) refreshToolPaths() {
v.toolPaths = map[string]string{}
for _, m := range v.Messages {
for _, c := range m.Content {
if tc, ok := c.(provider.ToolCallBlock); ok {
if p := pathFromToolArgs(tc.Arguments); p != "" {
v.toolPaths[tc.ID] = p
}
}
}
}
}
// renderMessageCached returns the rendered line slice for m, using the
// cache if the same (content hash, width, expandAll) combination has
// been rendered before. The slice returned is shared — callers must
// not mutate it; Build() only ever appends to its own `out` so the
// shared slice is safe.
func (v *View) renderMessageCached(m provider.Message, width int) []string {
key := msgCacheKey{
hash: hashMessage(m),
width: width,
expandAll: v.ExpandAll,
}
if v.renderCache != nil {
if lines, ok := v.renderCache[key]; ok {
return lines
}
}
lines := v.renderMessage(m, width)
if v.renderCache != nil {
// Bound the cache: 4x the current message count is enough to
// survive /compact churn without leaking memory across a very
// long session.
max := len(v.Messages) * 4
if max < 32 {
max = 32
}
if len(v.renderCache) > max {
// Drop half the entries. map iteration order gives us a
// pseudo-LRU for free.
dropped := 0
target := len(v.renderCache) / 2
for k := range v.renderCache {
if dropped >= target {
break
}
delete(v.renderCache, k)
dropped++
}
}
v.renderCache[key] = lines
}
return lines
}
// hashMessage returns a 64-bit FNV-1a over the role + content blocks
// of m. Serialising each block to its salient bytes is enough: two
// messages with the same role and same content render identically.
func hashMessage(m provider.Message) uint64 {
h := fnv64aInit
h = fnv64aWrite(h, []byte(m.Role))
h = fnv64aWriteByte(h, 0)
for _, c := range m.Content {
switch b := c.(type) {
case provider.TextBlock:
h = fnv64aWriteByte(h, 't')
h = fnv64aWrite(h, []byte(b.Text))
case provider.ImageBlock:
h = fnv64aWriteByte(h, 'i')
h = fnv64aWrite(h, []byte(b.MimeType))
h = fnv64aWrite(h, b.Data)
case provider.ToolCallBlock:
h = fnv64aWriteByte(h, 'c')
h = fnv64aWrite(h, []byte(b.ID))
h = fnv64aWrite(h, []byte(b.Name))
h = fnv64aWrite(h, []byte(b.Arguments))
case provider.ToolResultBlock:
h = fnv64aWriteByte(h, 'r')
h = fnv64aWrite(h, []byte(b.CallID))
if b.IsError {
h = fnv64aWriteByte(h, 'E')
}
for _, inner := range b.Content {
switch ib := inner.(type) {
case provider.TextBlock:
h = fnv64aWrite(h, []byte(ib.Text))
case provider.ImageBlock:
h = fnv64aWrite(h, []byte(ib.MimeType))
h = fnv64aWrite(h, ib.Data)
}
}
}
h = fnv64aWriteByte(h, 0)
}
return h
}
// FNV-1a implementation inlined so we don't pay the interface cost of
// hash.Hash64 on every Build(). The whole point here is speed.
const (
fnv64aInit uint64 = 0xcbf29ce484222325
fnv64aPrime uint64 = 0x100000001b3
)
func fnv64aWriteByte(h uint64, b byte) uint64 {
h ^= uint64(b)
h *= fnv64aPrime
return h
}
func fnv64aWrite(h uint64, p []byte) uint64 {
for _, b := range p {
h ^= uint64(b)
h *= fnv64aPrime
}
return h
}
func (v *View) renderMessage(m provider.Message, width int) []string {
var lines []string
switch m.Role {
case provider.RoleUser:
header := v.Theme.FG256(v.Theme.User, "▍ you")
lines = append(lines, header)
for _, c := range m.Content {
switch b := c.(type) {
case provider.TextBlock:
for _, l := range strings.Split(b.Text, "\n") {
for _, w := range wrapLine(l, width-2, " ") {
lines = append(lines, " "+v.Theme.FG256(v.Theme.Muted, w))
}
}
case provider.ImageBlock:
lines = append(lines, " "+v.Theme.FG256(v.Theme.Muted, fmt.Sprintf("[image %s, %d bytes]", b.MimeType, len(b.Data))))
}
}
case provider.RoleAssistant:
header := v.Theme.FG256(v.Theme.Assistant, "▍ zot")
lines = append(lines, header)
// Indent assistant body the same 4 cells the user body uses,
// so the conversation column lines up vertically. The width
// passed into the markdown renderer / wrap is reduced by the
// indent so long lines wrap inside the indented column.
const indent = " "
inner := width - len(indent)
if inner < 1 {
inner = width
}
for _, c := range m.Content {
switch b := c.(type) {
case provider.TextBlock:
md := RenderMarkdown(b.Text, v.Theme, inner)
for _, l := range strings.Split(md, "\n") {
for _, w := range wrapLine(l, inner, "") {
lines = append(lines, indent+w)
}
}
case provider.ToolCallBlock:
lines = append(lines, indent+v.Theme.FG256(v.Theme.Tool, "▸ "+b.Name+" "+shortArgs(b.Arguments)))
}
}
case provider.RoleTool:
for _, c := range m.Content {
if tr, ok := c.(provider.ToolResultBlock); ok {
title := " result"
color := v.Theme.ToolOut
if tr.IsError {
title = " error"
color = v.Theme.Error
}
path := ""
if v.toolPaths != nil {
path = v.toolPaths[tr.CallID]
}
lines = append(lines, v.Theme.FG256(color, title))
lines = append(lines, v.renderToolResultContent(tr.Content, width, color, path)...)
}
}
}
return lines
}
func (v *View) renderToolCall(tc ToolCallView, width int) []string {
var lines []string
head := v.Theme.FG256(v.Theme.Tool, "▸ "+tc.Name+" "+tc.Args)
lines = append(lines, head)
if tc.Result != "" {
color := v.Theme.ToolOut
if tc.Error {
color = v.Theme.Error
}
block := toolResultBlock(v.Theme, tc.Result, width, color)
// Strip rules, collapse the body, put rules back on.
if len(block) >= 2 {
top, bot := block[0], block[len(block)-1]
body := v.collapseToolBody(block[1:len(block)-1], false)
block = append([]string{top}, body...)
block = append(block, bot)
}
lines = append(lines, block...)
}
return lines
}
// toolResultBlock wraps text in thin horizontal rules (top + bottom),
// indenting the body with four spaces. The rules span the content column.
// renderToolResultContent renders the body of a tool result block.
// Text blocks get the usual rules-wrapped treatment; text that looks
// like a unified diff gets +/- coloring. Image blocks are rendered
// inline when the terminal supports a protocol, else as a text
// placeholder with dimensions.
func (v *View) renderToolResultContent(blocks []provider.Content, width, color int, sourcePath string) []string {
rule := v.Theme.FG256(v.Theme.Muted, strings.Repeat("─", width))
var body []string
hasImage := false
for _, b := range blocks {
switch bb := b.(type) {
case provider.TextBlock:
body = append(body, v.renderToolText(bb.Text, width, color, sourcePath)...)
case provider.ImageBlock:
hasImage = true
body = append(body, v.renderImageBlock(bb, width)...)
}
}
body = v.collapseToolBody(body, hasImage)
out := make([]string, 0, len(body)+2)
out = append(out, rule)
out = append(out, body...)
out = append(out, rule)
return out
}
// collapseToolBody trims lines to the configured preview size when the
// view is not in ExpandAll mode, appending a muted "... ctrl+o to
// expand" footer. Image blocks never collapse — they're short in text
// rows but represent real content the user wants to see.
func (v *View) collapseToolBody(lines []string, hasImage bool) []string {
if v.ExpandAll || hasImage {
return lines
}
if len(lines) <= ToolCollapseLines {
return lines
}
kept := lines[:ToolCollapsePreview]
hidden := len(lines) - ToolCollapsePreview
total := len(lines)
footer := fmt.Sprintf(" ... (%d more lines, %d total, ctrl+o to expand)", hidden, total)
footer = v.Theme.FG256(v.Theme.Muted, footer)
return append(append([]string(nil), kept...), footer)
}
// renderToolText renders a text block inside a tool result. If the
// text contains a unified-diff section (lines starting with "--- " /
// "+++ " / "+" / "-"/" "), those rows are styled with add/remove
// colors matching git diff conventions.
func (v *View) renderToolText(text string, width, defaultColor int, sourcePath string) []string {
// Detect whether the text is `read`-style numbered output
// (" 1\t…") so we can strip the gutter, highlight the code, and
// re-apply the line numbers in muted color. Runs even without a
// source path — language is guessed from the first line, falling
// back to "text" (no highlighting) if nothing obvious matches.
if looksLikeNumberedFile(text) {
return v.renderNumberedFile(text, sourcePath)
}
// No truncation — the full tool output is rendered into chat and
// becomes part of the scrollback you can page back through.
lines := strings.Split(text, "\n")
inDiff := false
oldLine, newLine := 1, 1
var out []string
for _, l := range lines {
// Detect diff header: "--- name" followed somewhere by "+++ name".
if strings.HasPrefix(l, "--- ") || strings.HasPrefix(l, "+++ ") {
inDiff = true
out = append(out, " "+v.Theme.FG256(v.Theme.Muted, l))
continue
}
// Hunk header "@@ -a,b +c,d @@" resets the counters so patches
// that skip around in the file still get correct numbering.
if inDiff && strings.HasPrefix(l, "@@") {
if o, n, ok := parseHunkHeader(l); ok {
oldLine, newLine = o, n
}
out = append(out, " "+v.Theme.FG256(v.Theme.Muted, l))
continue
}
if inDiff && len(l) > 0 {
switch l[0] {
case '+':
out = append(out, v.renderDiffRow(l, width, v.Theme.Tool, newLine, '+', sourcePath))
newLine++
continue
case '-':
out = append(out, v.renderDiffRow(l, width, v.Theme.Error, oldLine, '-', sourcePath))
oldLine++
continue
case ' ':
out = append(out, v.renderDiffRow(l, width, v.Theme.Muted, newLine, ' ', sourcePath))
oldLine++
newLine++
continue
}
}
// Regular line.
for _, w := range wrapLine(l, width-4, " ") {
out = append(out, " "+v.Theme.FG256(defaultColor, w))
}
}
return out
}
// parseHunkHeader extracts the starting old/new line from a unified
// diff hunk header ("@@ -12,5 +12,7 @@ ..."). Returns ok=false if the
// header is malformed or missing numbers.
func parseHunkHeader(l string) (oldStart, newStart int, ok bool) {
// Skip "@@ "
rest := strings.TrimPrefix(l, "@@")
rest = strings.TrimSpace(rest)
if !strings.HasPrefix(rest, "-") {
return 0, 0, false
}
rest = rest[1:]
space := strings.IndexByte(rest, ' ')
if space < 0 {
return 0, 0, false
}
oldPart := rest[:space]
rest = strings.TrimSpace(rest[space+1:])
if !strings.HasPrefix(rest, "+") {
return 0, 0, false
}
rest = rest[1:]
if sp := strings.IndexAny(rest, " \t"); sp >= 0 {
rest = rest[:sp]
}
parseStart := func(s string) (int, bool) {
if c := strings.IndexByte(s, ','); c >= 0 {
s = s[:c]
}
n, err := strconv.Atoi(s)
if err != nil || n < 1 {
return 0, false
}
return n, true
}
o, ok1 := parseStart(oldPart)
n, ok2 := parseStart(rest)
if !ok1 || !ok2 {
return 0, 0, false
}
return o, n, true
}
// renderDiffRow renders one unified-diff line with a read-style gutter
// (6-cell right-aligned line number, muted) followed by the +/-/space
// marker and the code. Code is syntax-highlighted if sourcePath hints
// at a known language; falls back to the plain diff color otherwise.
func (v *View) renderDiffRow(line string, width, color int, lineNo int, mark byte, sourcePath string) string {
if len(line) == 0 {
return ""
}
code := line[1:] // strip the leading marker; we re-emit it in colour
// Syntax-highlight the code half when we know the language. Use
// the same HighlightCode pipeline as renderNumberedFile so the
// palette matches.
lang := LanguageFromPath(sourcePath)
var codeRendered string
if lang != "" {
if h := HighlightCode(code, lang); len(h) == 1 {
codeRendered = h[0]
}
}
if codeRendered == "" {
codeRendered = v.Theme.FG256(color, code)
}
gutter := v.Theme.FG256(v.Theme.Muted, fmt.Sprintf("%6d\t", lineNo))
marker := v.Theme.FG256(color, string(mark)+" ")
row := " " + gutter + marker + codeRendered
// Cheap width clamp: truncate visible text if the raw code is too
// long. We work on the pre-ANSI code string because measuring ansi
// output is unreliable.
maxCode := width - 4 /* indent */ - 7 /* gutter */ - 2 /* marker */
if maxCode > 0 && len(code) > maxCode {
trunc := code[:maxCode-1] + "…"
if lang != "" {
if h := HighlightCode(trunc, lang); len(h) == 1 {
codeRendered = h[0]
} else {
codeRendered = v.Theme.FG256(color, trunc)
}
} else {
codeRendered = v.Theme.FG256(color, trunc)
}
row = " " + gutter + marker + codeRendered
}
return row
}
// renderImageBlock returns the lines for one image, inline if possible.
//
// Inline image escapes paint into multiple terminal rows but the zot
// renderer treats each slice entry as a single row. To prevent chat
// content from being drawn on top of the image, we pad with blank rows
// so the image's real footprint is reflected in the frame height.
func (v *View) renderImageBlock(b provider.ImageBlock, width int) []string {
w, h := ImageDimensions(b.Data)
kb := len(b.Data) / 1024
info := fmt.Sprintf(" image · %s · %dx%d · %d KB", b.MimeType, w, h, kb)
if v.ImageProto != ImageProtocolNone {
// Clamp rendered width so the image never overflows the chat
// column. Subtract a 4-cell indent for the tool result block,
// cap at 60 cells, floor at 10.
cells := width - 4
if cells > 60 {
cells = 60
}
if cells < 10 {
cells = 10
}
const maxRows = 20
if seq := RenderInlineImageScaled(v.ImageProto, b.Data, b.MimeType, cells, maxRows); seq != "" {
rows := RowsForInlineImage(b.Data, cells, maxRows)
if rows < 1 {
rows = 1
}
out := make([]string, 0, rows+1)
out = append(out, " "+seq)
// Reserve blank rows matching the image's on-screen height.
for i := 1; i < rows; i++ {
out = append(out, "")
}
out = append(out, v.Theme.FG256(v.Theme.Muted, info))
return out
}
}
// Text fallback.
return []string{v.Theme.FG256(v.Theme.Muted, info)}
}
// looksLikeNumberedFile returns true when text matches the `read`
// tool's " N\tcontent" format for most of its lines.
func looksLikeNumberedFile(text string) bool {
lines := strings.Split(text, "\n")
if len(lines) == 0 {
return false
}
hits := 0
scanned := 0
for _, l := range lines {
if l == "" {
continue
}
scanned++
if scanned > 20 {
break
}
if numberedLineRE.MatchString(l) {
hits++
}
}
if scanned == 0 {
return false
}
return hits*2 >= scanned // majority of non-empty lines match
}
var numberedLineRE = regexp.MustCompile(`^\s*\d+\t`)
// renderNumberedFile strips line numbers, highlights the code, and
// re-attaches the line numbers in muted color.
func (v *View) renderNumberedFile(text, sourcePath string) []string {
lines := strings.Split(text, "\n")
gutters := make([]string, 0, len(lines))
codes := make([]string, 0, len(lines))
for _, l := range lines {
idx := strings.IndexByte(l, '\t')
if idx < 0 || !numberedLineRE.MatchString(l) {
// Non-code footer (e.g. "[truncated at 2000 lines]").
gutters = append(gutters, "")
codes = append(codes, l)
continue
}
gutter := l[:idx+1] // keep the tab so alignment is preserved
code := l[idx+1:]
gutters = append(gutters, gutter)
codes = append(codes, code)
}
lang := LanguageFromPath(sourcePath)
var highlighted []string
if lang != "" {
highlighted = HighlightCode(strings.Join(codes, "\n"), lang)
// Chroma sometimes collapses the trailing empty line. Pad to
// align with the gutter slice so per-line zipping works.
for len(highlighted) < len(codes) {
highlighted = append(highlighted, "")
}
if len(highlighted) > len(codes) {
highlighted = highlighted[:len(codes)]
}
} else {
// No lexer for this file type — render in the ToolOut color so
// code is visually distinct from the muted gutter.
highlighted = make([]string, len(codes))
for i, c := range codes {
highlighted[i] = v.Theme.FG256(v.Theme.ToolOut, c)
}
}
out := make([]string, 0, len(codes))
for i, code := range highlighted {
g := gutters[i]
if g == "" {
out = append(out, " "+v.Theme.FG256(v.Theme.Muted, code))
continue
}
out = append(out, " "+v.Theme.FG256(v.Theme.Muted, g)+code)
}
return out
}
func toolResultBlock(th Theme, text string, width int, color int) []string {
rule := th.FG256(th.Muted, strings.Repeat("─", width))
var out []string
out = append(out, rule)
for _, l := range strings.Split(text, "\n") {
for _, w := range wrapLine(l, width-4, " ") {
out = append(out, " "+th.FG256(color, w))
}
}
out = append(out, rule)
return out
}
func shortArgs(raw json.RawMessage) string {
var v any
if err := json.Unmarshal(raw, &v); err != nil {
return ""
}
switch x := v.(type) {
case map[string]any:
for _, k := range []string{"path", "file_path", "command"} {
if s, ok := x[k].(string); ok {
if len(s) > 60 {
s = s[:57] + "..."
}
return s
}
}
}
b, _ := json.Marshal(v)
s := string(b)
if len(s) > 60 {
s = s[:57] + "..."
}
return s
}
func collectText(blocks []provider.Content) string {
var sb strings.Builder
for _, b := range blocks {
if tb, ok := b.(provider.TextBlock); ok {
if sb.Len() > 0 {
sb.WriteString("\n")
}
sb.WriteString(tb.Text)
}
}
return sb.String()
}
func truncateLines(s string, n int) string {
lines := strings.Split(s, "\n")
if len(lines) <= n {
return s
}
return strings.Join(lines[:n], "\n") + "\n … (" + fmt.Sprintf("%d", len(lines)-n) + " more)"
}
// StatusBarParams groups the many bits of state the status bar needs.
// Grew from a flat argument list once we started matching pi's format.
type StatusBarParams struct {
Theme Theme
Provider string
Model string
Busy bool
BusyPrefix string // spinner + funny line when busy
CWD string
Locked bool // sandbox on?
// Cumulative session usage and cost.
Usage provider.Usage
// Subscription is true when the credential is an OAuth token (claude
// pro/max, chatgpt plus/pro) rather than a paid api key. We still
// compute a cost for visibility, but pi-style we append "(sub)" so
// the user knows no money actually moved.
Subscription bool
// Last turn's input+cache tokens (approximates current live context).
ContextUsed int
ContextMax int // model's context window; 0 disables the percentage
// AutoCompacting is true when the agent is currently running a
// model-triggered condense pass. Surfaces as "(auto)" after the
// context percentage so it's clear where the spinner is coming from.
AutoCompacting bool
Cols int // terminal width; drives right-alignment of cwd
}
// StatusBar builds the status shown above the editor. Always returns
// two lines when a cwd is provided: the stats on the first line, the
// cwd on its own line below, indented to match the stats column. This
// keeps the status bar stable across terminal resizes (the cwd never
// jumps from right-aligned-on-line-1 to flush-left-on-line-2) and
// makes a long cwd safe at any width.
//
// Layout:
//
// <busyPrefix> (provider) model stats <- line 1
// cwd <- line 2 (2-space indent)
//
// The old "ctrl+c exit - /help" / "esc cancel" hint is gone entirely.
// The slash-command popup and the queued/sliding-in chips already
// cover the discoverability of those keybindings.
func StatusBar(p StatusBarParams) []string {
th := p.Theme
// Token stats: only include each segment when non-zero (pi's
// behavior). Keeps the bar compact on brand-new sessions.
var stats []string
if p.Usage.InputTokens > 0 {
stats = append(stats, fmt.Sprintf("↑%s", piFormatTokens(p.Usage.InputTokens)))
}
if p.Usage.OutputTokens > 0 {
stats = append(stats, fmt.Sprintf("↓%s", piFormatTokens(p.Usage.OutputTokens)))
}
if p.Usage.CacheReadTokens > 0 {
stats = append(stats, fmt.Sprintf("R%s", piFormatTokens(p.Usage.CacheReadTokens)))
}
if p.Usage.CacheWriteTokens > 0 {
stats = append(stats, fmt.Sprintf("W%s", piFormatTokens(p.Usage.CacheWriteTokens)))
}
// Cost: always show the dollar value computed from token counts,
// even on subscription — lets you see what the equivalent api cost
// would be (handy for gauging subscription value). Append "(sub)"
// only as a hint that no real money moved.
var costStr string
if p.Usage.CostUSD > 0 || p.Subscription {
costStr = fmt.Sprintf("$%.3f", p.Usage.CostUSD)
if p.Subscription {
costStr += " (sub)"
}
}
if costStr != "" {
stats = append(stats, costStr)
}
// Context %. Color-coded: yellow >70, red >90.
ctx, ctxColor := piContextUsage(th, p.ContextUsed, p.ContextMax)
if ctx != "" {
if p.AutoCompacting {
ctx += " (auto)"
}
stats = append(stats, th.FG256(ctxColor, ctx))
}
// Layout uses exactly 2 spaces of horizontal padding everywhere:
// 2 spaces (openai) gpt-5.4 $0.000 (sub) 0.0%/400k ~/Sites/zot
// matches the editor prompt's left inset so the bar lines up
// vertically with the conversation column.
const pad = " " // 2 spaces
left := fmt.Sprintf("(%s) %s", p.Provider, p.Model)
middle := strings.Join(stats, " ")
var leftBuilder strings.Builder
if p.BusyPrefix != "" {
leftBuilder.WriteString(th.FG256(th.Accent, pad+p.BusyPrefix))
leftBuilder.WriteString(pad)
}
leftBuilder.WriteString(pad)
leftBuilder.WriteString(th.FG256(th.Muted, left))
if middle != "" {
leftBuilder.WriteString(pad)
// `middle` already has colorized context segments; wrap the rest in muted.
leftBuilder.WriteString(th.FG256(th.Muted, middle))
}
cwd := shortenHome(p.CWD)
if p.Locked && cwd != "" {
cwd = "· locked · " + cwd
}
primary := leftBuilder.String()
if cwd == "" {
return []string{primary}
}
// Second line: indent with the same 2-space pad so the cwd lines
// up under the "(provider)" column on line 1.
cwdRendered := pad + th.FG256(th.Muted, cwd)
return []string{primary, cwdRendered}
}
// piContextUsage renders the "N%/ctxMax" fragment, returning the
// rendered string plus the colour to wrap it in.
func piContextUsage(th Theme, used, max int) (string, int) {
if max <= 0 {
if used <= 0 {
return "", th.Muted
}
return piFormatTokens(used), th.Muted
}
pct := float64(used) / float64(max) * 100
text := fmt.Sprintf("%.1f%%/%s", pct, piFormatTokens(max))
switch {
case pct > 90:
return text, th.Error
case pct > 70:
return text, th.Warning
}
return text, th.Muted
}
// piFormatTokens footer formatter:
//
// < 1000 -> "42"
// < 10_000 -> "2.7k"
// < 1_000_000 -> "35k"
// < 10M -> "1.1M"
// else -> "12M"
func piFormatTokens(n int) string {
switch {
case n < 0:
return "0"
case n < 1000:
return fmt.Sprintf("%d", n)
case n < 10000:
return fmt.Sprintf("%.1fk", float64(n)/1000)
case n < 1_000_000:
return fmt.Sprintf("%dk", (n+500)/1000)
case n < 10_000_000:
return fmt.Sprintf("%.1fM", float64(n)/1_000_000)
default:
return fmt.Sprintf("%dM", (n+500_000)/1_000_000)
}
}
// shortenHome replaces the user's $HOME prefix with "~" for readability.
func shortenHome(p string) string {
if p == "" {
return ""
}
home := osUserHome()
if home == "" {
return p
}
if p == home {
return "~"
}
if strings.HasPrefix(p, home+"/") {
return "~" + p[len(home):]
}
return p
}
// osUserHome is a tiny wrapper around os.UserHomeDir so tests can mock it.
var osUserHome = func() string {
if h, err := osUserHomeDir(); err == nil {
return h
}
return ""
}