mirror of
https://github.com/Twigpine/zero.git
synced 2026-11-11 23:40:28 -10:00
* feat(tui): actionable hints on provider/model errors Classify a failed turn's provider error into auth / rate-limit / connectivity / model-not-found / context-overflow and render a one-line next step below the red error row, instead of dumping an identical raw blob for every failure mode. The classifier lives in a new internal/errhint package so both the TUI error row and the CLI exec path can share it (TUIHint references slash commands, CLIHint references zero subcommands). Classification is a conservative string heuristic keyed off providerio.ClassifiedError's prefixes plus lower-level DNS/TLS/timeout/context-length signatures, since the numeric HTTP status is gone by the time the error reaches a UI surface. * feat(tools): budget bash output with head+tail truncation bash was the one tool that returned command output with no byte cap — 'cat large.log' or a verbose test run could dump megabytes into context and force compaction, while every other read/search tool already applies a budget. Cap stdout and stderr at 96KB each, keeping the head and tail of an oversized stream (build/test failures usually land at the tail) and dropping the middle behind a marker that points at redirect-to-file + read_file. Record raw_bytes/emitted_bytes/estimated_tokens/truncated in Meta like the other tools. Sandbox-denial and shell-issue detection still run on the full raw output before budgeting. * fix(gemini): retry 401 with refreshed OAuth token The Gemini provider used providerio.SendWithRetry (429/503/529 only), so an expired OAuth token surfaced as a terminal 'API key not valid' auth error while OpenAI and Anthropic silently recovered via SendWithAuthRetry's force-refresh-and-replay on 401. Plumb OAuthResolver through gemini.Options/Provider and the factory (exactly as the other two providers already do) and switch the stream send to SendWithAuthRetry. With a nil resolver (API-key users) behavior is unchanged. * fix(errhint): gate classification on provider-origin marker Address CodeRabbit review on #1: agentResponseMsg.err can also carry local failures (a tool's 'permission denied', a 'file does not exist', a config error), and broad substrings would have attached a bogus /provider or /model hint to those. Classify now returns Unknown unless the message carries a provider marker the provider layer always attaches (auth error: / rate limit error: / provider error: / provider request error: / provider stream error:). Local errors never draw a provider hint; provider errors sub-classify as before. Added local-failure test cases proving they stay Unknown. * feat(cli): actionable hint on text-mode exec provider errors zero exec printed provider failures as a bare '[zero] <raw error>' with no next step. Append a one-line hint (reusing the shared errhint classifier) for recognized provider failures — 'run `zero auth`', 'run `zero doctor`', etc. The provider-origin gate means non-provider codes (sandbox_error, mcp_error) and JSON/stream-json output are untouched. * fix(tools): set Result.Truncated for budgeted bash output Address CodeRabbit review on #3: budgetBashOutput recorded truncation in meta["truncated"] but never set the Result.Truncated struct field, so consumers reading the struct (like glob/web_fetch/read_minified do) would miss truncated bash results. Return the bool from budgetBashOutput and set Result.Truncated on every return path. * perf(tui): reuse one LSP manager across prompts runAgentWithOptions built a fresh lsp.NewManager per run and shut it down when the run returned, so gopls (and every other language server) cold-started on the first edit of every turn — 200ms-2s of latency the manager's own design (long-lived, reused servers) exists to avoid. Build one manager per session in newModel (cheap: servers start lazily on first Check) and reuse it across runs; the SelfCorrector still gets a fresh checker wrapping the shared manager each run. Torn down with a short deadline in quit(). Runs fall back to a per-run manager when the session manager is absent (cwd unknown, or a directly-built test model). * perf(tui): accumulate streamingText as []byte (O(1) append) m.streamingText += msg.delta was O(len) per delta -> O(n²) across a long generation (a 10k-token code gen allocates hundreds of MB of intermediate strings and the UI gets progressively laggier). Accumulate into a []byte with append (O(1) amortized) and read via streamingTextString(). A []byte rather than strings.Builder because the TUI model is copied by value on every Update, which would trip strings.Builder's copy check; []byte is nil-safe and copies cleanly like the other slice fields. * perf(tui): coalesce streamed text deltas to one frame Every OnText delta was its own tea.Msg, so a fast provider (100+ tok/s) drove 100+ full Update->View cycles per second, each re-parsing the growing markdown — visible stutter over SSH and wasted CPU. Batch agentTextMsg deltas at the runtime sink over a ~16ms frame and forward them as a single message, decoupling render rate from token rate. Any non-text message flushes pending text first so ordering with tool-call / reasoning / row messages is preserved; the final agentResponseMsg (a tea.Cmd return, not a sink message) is safe because the model already drops deltas for an inactive runID. * fix(agent): raise tool-failure stop threshold 4->6 guardrails.go halted a run after 4 consecutive same-error tool failures. A corrective hint fires at 2, and a model iterating on a genuinely tricky edit can legitimately fail a couple more times after the hint while converging — stopping at 4 cut those runs short. Raise to 6; the streak still resets the instant the tool succeeds or hits a different error, so only true same-error loops are affected. * fix(agent): more reconnect retries with jitter; narrow to transport errors #19: bump maxStreamReconnects 2->4 and add up-to-50% jitter on the exponential backoff (capped at 8s), so a multi-second network blip is ridden out instead of killing the run on a 2s hiccup, and concurrent runs (swarms, cron fleets) don't reconnect in lockstep. #34: drop the '502'/'503' substring matches from shouldReconnect. 503 already exhausted providerio.SendWithRetry (retrying here is a redundant double-retry) and 502 is non-idempotent by providerio's rule (the POST may have been processed). Only genuine transport failures — where no response was received — reconnect now. * fix(agent): reduce stall retries 2->1 to bound stuck-session time A no-output stream stall is detected only after the full stream idle timeout (~5min) elapses, and each retry can idle again — so 2 retries left an interactive session frozen for ~15min. Drop to 1 retry: keeps the common single-hiccup recovery while bounding the worst case to ~2x the idle timeout. * fix(tui): serialize coalescer forwarding to preserve message order Address CodeRabbit review on #7: flush() and the run-switch path drained the text buffer under c.mu but called forward() after releasing it, so a timer-fired text flush could race a concurrent non-text send() and land after the tool-call/reasoning message it should precede. Hold c.mu across drain AND forward (drainAndForwardLocked), so whoever holds the lock delivers atomically and the other caller blocks until it is done — text can never overtake a following non-text message. Added a concurrency stress test (timer racing an inline send) that passes under -race. * feat(tui): accept /compact now Bare /compact already triggers compaction, but /compact now — what users reach for when the context gauge climbs — hit the usage-error branch. Accept the 'now' keyword and advertise it in the command usage. * feat(tui): add /retry, /edit, /copy, /export commands /retry resends the last prompt; /edit recalls it into the composer to tweak and resend — both read a new lastPrompt field captured verbatim (pre-expansion) in launchPrompt. /copy puts the last answer on the clipboard via the existing copy machinery; /export writes a plain role-prefixed transcript to a file (timestamped default, or a given path). Real gaps for SSH users with no mouse select. * feat(tools): separator-insensitive tool_search matching tool_search ranked deferred tools by exact substring, so a model that typed 'webfetch' (dropping the underscore) matched nothing and looped. Add a separator-squashing fallback ('web_fetch' -> 'webfetch') scored below an exact substring match, so precise queries still rank first. * feat(tools): signal ask_user dismissal distinctly from a blank field Empty answers all rendered as '(no answer provided)', so the model couldn't tell a wholesale dismissal (user closed the prompt without answering anything) from one field left blank amid real answers — and might invent a default. FormatAskUserAnswers now flags a full dismissal up front as a skip and marks individual empties '(left blank)' vs '(skipped)'. * feat(tui): fuzzy ranking in model/session pickers The pickers filtered by flat strings.Contains with no ranking, so finding 'sonnet 4.5' among 50+ models meant an exact prefix or scrolling. Rank matches (exact < prefix < contains < subsequence, reusing fuzzySubsequenceGap) so the closest match lands on top, and 'snt45' now matches 'Sonnet 4.5'. Groups stay contiguous — ordered by their best match, never split — so the grouped model picker still renders one header per provider. Covers both /model and /resume (shared commandPicker). * perf(agent): cache per-tool schema render across turns partitionTools re-ran the recursive schema->map conversion (schemaToRuntimeMap) for every tool on every turn — redundant, since a tool's advertised name/description/schema is stable for the run. Add a per-run definition cache keyed by tool name (nil-safe; the plain partitionTools entrypoint and tests pass nil for fresh renders). The partitioning itself (visibility, deferral, ordering) still recomputes every turn — it must, because a tool's deferred state can flip mid-run (swarm tools un-defer once a swarm is active). Only the expensive schema render is memoized. tool_search is excluded by its callers (dynamic description) so it never poisons the cache. * perf(agent): calibrate compaction estimate against real prompt tokens The byte/4 heuristic (ApproxTextTokens) over-counts code-heavy content ~15-20%, so with triggerRatio=0.7 compaction fired at ~60% of true capacity — premature summarizer calls that degrade quality. Each turn now folds (rawEstimate, provider InputTokens) into an EMA calibration ratio, clamped per-sample to a sane band; maybeCompact and the reactive path scale their estimates by it. Turn 1 uses the raw estimate (no data yet); later turns compact near real capacity. * style: gofmt the new agent test files The CI gofmt check flagged the #22/#25 test files (struct-field and switch alignment). No behavior change. * feat(agent): turn-based plan staleness reminder The stale-plan nudge only fired after 10 tool calls since the last update_plan, so a plan that drifts stale across many low-tool-call turns (one call per turn) took many turns to catch — the 'plan set turn 1 stays pending forever' case. Add a turn-count complement: after stalePlanTurnThreshold (8) turns without an update AND with items still pending, fire the same one-shot reminder. Gated on pending items so a fully-completed plan is never nagged; the existing tool-call trigger is unchanged. (The roadmap's fuzzy 'tool calls unrelated to plan items' relevance match is deliberately omitted — too false-positive-prone.) * feat(agent): preserve recent-edits summary across compaction Compaction preserved the plan, loaded skills, tool schemas, and project instructions, but not file edits — so after the editing turns were elided the model knew it had changed a file only vaguely, and would re-read to rediscover its own footprint. Extract write_file/edit_file targets from the elided middle with a one-line note from each tool result, merge them across repeated compactions (newer note per path wins), and carry them in the preserved-state JSON (capped at 20 paths / 160 bytes per note). * feat(tui): workspace-scoped /resume + fewer event reads /resume listed sessions from every project globally, and read the full event file for each of them to test for resumable content. Filter the picker (and /resume latest) by the current workspace Cwd, checked BEFORE the per-session read so a large global history no longer pays N full file reads to build one workspace's list; also skip zero-event sessions via metadata without any read. Sessions with no recorded Cwd (older runs) and an unknown current workspace stay visible so nothing is hidden that can't be confidently placed. Explicit /resume <id> still resolves any session. * feat(tui): warn on model switch that drops staged images Staged images were silently dropped at submit when the active model had no vision support — the user only learned after sending. Chips already render above the composer (renderAttachmentChips); add an immediate amber warning line to the /model switch status (both same-provider and cross-provider paths) when images are staged and the newly selected model can't accept them, so the drop is surfaced at switch time. * feat(tui): inline recovery affordance on setup errors A first-run setup error rendered as a bare red 'error: <text>' with no pointer to the fix. Append a faint, stage-tailored recovery line (edit the endpoint/name/key above then Enter, or pick another model) that names only keys the stage's footer confirms, so the guidance is always accurate. Empty for stages whose footer already makes recovery obvious. * fix: address CodeRabbit review (5 findings) - loop.go: recompute the compaction calibration estimate at calibration time, not request-build time, so a reactive-compaction reissue that shrinks the request feeds the EMA the sample that actually completed. - errhint: match bare HTTP status codes (401/403/429/529) only at digit boundaries, so an incidental number ('4290ms', 'id 14015') isn't mis-bucketed as auth/rate-limit. - bash: drop the stray unmatched ']' in the output-truncation marker. - tui /retry: apply the same exiting/compactInFlight guards commandPrompt has, so a retry can't race compactResultMsg's rewrite of session state. - tui /export: write the transcript 0o600 (it may contain echoed secrets), not world/group-readable 0o644. * test(tui): skip export file-mode assertion on Windows os.WriteFile ignores Unix permission bits on Windows and Stat reports 0666, so the 0o600 assertion failed there. The production 0o600 is honored on Linux/macOS (where it matters); guard the check with runtime.GOOS so Windows smoke passes. * fix(tui): align /resume latest filters + case-insensitive workspace match on Windows Address CodeRabbit review on #21: - latestResumableInWorkspace now applies the SAME filters as the picker (skip zero-event metadata and empty/failed runs), so /resume latest can't land on a session the picker intentionally hides. - sessionMatchesWorkspace compares paths case-insensitively on Windows (its filesystem is), so the same workspace spelled with different casing no longer hides resumable sessions; other platforms stay case-sensitive. * fix(tui): /retry resends the last prompt's image/PDF attachments /retry relaunched only lastPrompt's text, but launchPrompt clears the pending image/document queues once a turn is sent. A vision- or PDF-backed prompt that failed would silently retry as text-only and answer a different task. Snapshot the consumed attachments at launch and re-stage them on /retry so launchPrompt rebuilds an identical request (document preamble, images, and the submit-time vision re-check). startNewSession drops the snapshot so a post-/new /retry cannot leak the previous session's attachments. Also correct the OAuthResolver factory comment, which omitted the Gemini provider it is now passed to. * fix: address jatmn review (reconnect 5xx, /edit attachments, edit-cap, coalescer test) - reconnect: exclude HTTP 5xx (500/502/503/504) before the transport substring match so "504 Gateway Timeout" no longer slips through on the generic "timeout" needle. A gateway timeout is non-idempotent — the completion POST may already have reached the model — so replaying the connect risked duplicate billable work. Reuses a digit-boundary status matcher exported from errhint (HasStatusCode). Test asserts 504/500 stay non-reconnectable. - tui /edit: re-stage the remembered image/PDF snapshot alongside the recalled prompt text, mirroring the /retry fix — editing a vision- or document-backed prompt no longer silently resends a text-only version. - compaction recent-edits: order edits by LAST edit, not first, and move a re-touched path to the newest position on merge, so the maxRecentEdits tail cap keeps the file the model most recently edited instead of dropping it. Adds mergeRecentEdits (edit-specific) and a capped-list regression. - coalescer test: inject the frame timer via afterFunc so TestCoalescerBatchesDeltas proves buffering deterministically instead of racing the real 16ms wall-clock timer. * fix(tools): bound bash output capture in memory, not just model-visible text Previously stdout/stderr streamed into unbounded bytes.Buffers and were only truncated to the 96 KiB budget AFTER the command finished, so a runaway command (cat huge.log, yes) could grow Zero's memory until it stalled or OOMed before budgetBashOutput ever ran. Replace the capture with boundedBuffer, an io.Writer that keeps only the head+tail each stream will surface and discards the middle as it arrives, while counting the true total for the truncation marker. Memory is now bounded to ~head+2×tail per stream regardless of output size. truncateHeadTail is refactored onto a total-aware core so the string path (and its tests) are unchanged, and budgetBashCapture reports the true raw_bytes even though only a bounded slice was held. Adds boundedBuffer/capture unit tests and an end-to-end test that streams ~5× the budget and asserts bounded emission with an accurate raw_bytes.
317 lines
11 KiB
Go
317 lines
11 KiB
Go
package tui
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"runtime"
|
|
"strings"
|
|
|
|
"github.com/Gitlawb/zero/internal/imageinput"
|
|
"github.com/Gitlawb/zero/internal/modelregistry"
|
|
"github.com/Gitlawb/zero/internal/zeroruntime"
|
|
)
|
|
|
|
// droppableImageExts are the image extensions a dragged-and-dropped file may
|
|
// carry (matched case-insensitively); PDFs are recognized separately.
|
|
var droppableImageExts = map[string]bool{
|
|
".png": true, ".jpg": true, ".jpeg": true, ".gif": true, ".webp": true,
|
|
}
|
|
|
|
// droppedAttachmentPath recognizes a single drag-dropped (or pasted) file path
|
|
// that points at an existing image or PDF, returning the cleaned path. Terminals
|
|
// deliver a dropped file as its path with spaces/special chars backslash-escaped
|
|
// (or the whole path quoted); this undoes that so "Screenshot 2026 at 1.png"
|
|
// resolves. ok is false for anything that is not a single existing image/PDF
|
|
// file, so normal text pastes and real slash-commands are left untouched.
|
|
func droppedAttachmentPath(content, cwd string) (string, bool) {
|
|
s := strings.TrimSpace(content)
|
|
if s == "" || strings.ContainsAny(s, "\n\r") {
|
|
return "", false // empty or multi-line: not a single dropped file
|
|
}
|
|
if unq, quoted := stripMatchingQuotes(s); quoted {
|
|
s = unq // a quoted path is literal — do not unescape inside it
|
|
} else {
|
|
s = unescapeDroppedPath(s)
|
|
}
|
|
if s == "" {
|
|
return "", false
|
|
}
|
|
resolved := s
|
|
if !filepath.IsAbs(resolved) {
|
|
resolved = filepath.Join(cwd, resolved)
|
|
}
|
|
info, err := os.Stat(resolved)
|
|
if err != nil || !info.Mode().IsRegular() {
|
|
return "", false
|
|
}
|
|
ext := strings.ToLower(filepath.Ext(s))
|
|
if droppableImageExts[ext] || ext == ".pdf" || imageinput.LooksLikeDocumentFile(s, cwd) {
|
|
return s, true
|
|
}
|
|
return "", false
|
|
}
|
|
|
|
// unescapeDroppedPath drops a backslash before any following byte, undoing the
|
|
// terminal's drag-drop escaping ("\ " -> " ", "\(" -> "(", "\\" -> "\").
|
|
func unescapeDroppedPath(s string) string {
|
|
if runtime.GOOS == "windows" {
|
|
// On Windows the backslash is the path separator, not a drag-drop escape;
|
|
// stripping it would corrupt real paths (C:\Users\… -> C:Users…). Dropped
|
|
// paths there arrive quoted (handled by stripMatchingQuotes) or plain.
|
|
return s
|
|
}
|
|
if !strings.Contains(s, `\`) {
|
|
return s
|
|
}
|
|
var b strings.Builder
|
|
b.Grow(len(s))
|
|
for i := 0; i < len(s); i++ {
|
|
if s[i] == '\\' && i+1 < len(s) {
|
|
i++
|
|
}
|
|
b.WriteByte(s[i])
|
|
}
|
|
return b.String()
|
|
}
|
|
|
|
// stripMatchingQuotes removes a single pair of surrounding ' or " quotes.
|
|
func stripMatchingQuotes(s string) (string, bool) {
|
|
if len(s) >= 2 {
|
|
q := s[0]
|
|
if (q == '"' || q == '\'') && s[len(s)-1] == q {
|
|
return s[1 : len(s)-1], true
|
|
}
|
|
}
|
|
return s, false
|
|
}
|
|
|
|
// modelSupportsVisionTUI reports whether the active model can accept image
|
|
// input. It checks three sources in order:
|
|
// 1. The curated model registry (catalog authority + name heuristic)
|
|
// 2. The discovered model list from models.dev (if the live model picker
|
|
// fetched it) — this carries InputModalities from models.dev, which
|
|
// includes "image" for vision-capable models
|
|
// 3. Falls back to the name heuristic for unknown models
|
|
func (m model) modelSupportsVisionTUI() bool {
|
|
trimmed := strings.TrimSpace(m.modelName)
|
|
if trimmed == "" {
|
|
return false
|
|
}
|
|
// The curated catalog is authoritative only when it knows the model.
|
|
if entry, known := m.modelCatalog.Resolve(trimmed); known {
|
|
return entry.Supports(modelregistry.ModelCapabilityVision)
|
|
}
|
|
// Check the discovered model list (from models.dev) for InputModalities
|
|
// containing "image". This covers custom/ollama/cloud models not in the
|
|
// curated catalog — models.dev knows their capabilities.
|
|
for _, models := range m.modelPickerLiveByProvider {
|
|
for _, dm := range models {
|
|
if strings.EqualFold(strings.TrimSpace(dm.ID), trimmed) {
|
|
for _, modality := range dm.InputModalities {
|
|
if strings.EqualFold(strings.TrimSpace(modality), "image") {
|
|
return true
|
|
}
|
|
}
|
|
return false // found the model in discovered list, no image modality
|
|
}
|
|
}
|
|
}
|
|
// Fall back to the name heuristic for models not in the catalog or
|
|
// discovered list.
|
|
return modelregistry.VisionCapableByName(trimmed)
|
|
}
|
|
|
|
// attachClipboardImage attaches an image read from the OS clipboard (a
|
|
// screenshot paste). Runs through the same vision gate + size cap as
|
|
// /image <path>, but the bytes come from the clipboard instead of a file.
|
|
func (m model) attachClipboardImage(data []byte, mediaType string) model {
|
|
if !m.modelSupportsVisionTUI() {
|
|
name := m.modelName
|
|
if name == "" {
|
|
name = "the active model"
|
|
}
|
|
return m.appendImageNotice("Model " + name + " does not support image input; clipboard image refused.")
|
|
}
|
|
if len(data) > imageinput.MaxImageBytes {
|
|
return m.appendImageNotice("Clipboard image is larger than the 10 MiB limit.")
|
|
}
|
|
m.pendingImages = append(m.pendingImages, zeroruntime.ImageBlock{
|
|
MediaType: mediaType,
|
|
Data: data,
|
|
})
|
|
m.pendingImageLabels = append(m.pendingImageLabels, "clipboard")
|
|
return m
|
|
}
|
|
|
|
// handleImageCommand processes "/image <path>" and "/image clear". A bare
|
|
// "/image" prints usage. PDFs are routed to the document path (text layer always
|
|
// attaches; pages rasterize to images only for vision models with a rasterizer).
|
|
// Image files attach only to vision models. Attachment failures (missing file,
|
|
// unsupported type, oversize) surface as an inline notice and attach nothing.
|
|
func (m model) handleImageCommand(arg string) model {
|
|
trimmed := strings.TrimSpace(arg)
|
|
switch {
|
|
case trimmed == "":
|
|
return m.appendImageNotice("Usage: /image <path> (image or PDF; or /image clear)")
|
|
case strings.EqualFold(trimmed, "clear"):
|
|
m.pendingImages = nil
|
|
m.pendingImageLabels = nil
|
|
m.pendingDocuments = nil
|
|
return m.appendImageNotice("Cleared pending attachments.")
|
|
}
|
|
|
|
// A PDF carries a text layer every model can read, so it is not gated on
|
|
// vision the way a raw image is; the optional rasterized pages are. Route by
|
|
// the ".pdf" hint OR a content sniff so a real PDF whose name lacks the
|
|
// extension still reaches the document path rather than the vision-only image
|
|
// path. The cheap header sniff runs before the vision gate.
|
|
if imageinput.IsProbablyDocumentPath(trimmed) || imageinput.LooksLikeDocumentFile(trimmed, m.cwd) {
|
|
return m.handleDocumentAttach(trimmed)
|
|
}
|
|
|
|
if !m.modelSupportsVisionTUI() {
|
|
name := m.modelName
|
|
if name == "" {
|
|
name = "the active model"
|
|
}
|
|
return m.appendImageNotice("Model " + name + " does not support image input; attachment refused.")
|
|
}
|
|
|
|
block, err := imageinput.LoadFile(trimmed, m.cwd)
|
|
if err != nil {
|
|
return m.appendImageNotice(err.Error())
|
|
}
|
|
|
|
m.pendingImages = append(m.pendingImages, block)
|
|
m.pendingImageLabels = append(m.pendingImageLabels, filepath.Base(trimmed))
|
|
// No "attached" system message: the composer attachment chip ([Image #N]) is
|
|
// the confirmation, matching the compact attach UX.
|
|
return m
|
|
}
|
|
|
|
// pendingDocument is a PDF staged by /image for the next user turn: its extracted
|
|
// text layer (prepended to the prompt at submit time) and a display label.
|
|
type pendingDocument struct {
|
|
label string
|
|
text string
|
|
}
|
|
|
|
// handleDocumentAttach loads a PDF through imageinput.LoadDocument. The text
|
|
// layer is staged for every model; when the active model supports vision and a
|
|
// rasterizer is available, the rendered pages are staged through the existing
|
|
// pending-image pipeline too. A scanned PDF with no text (and no rasterizer)
|
|
// surfaces LoadDocument's explicit "no extractable text" notice and attaches
|
|
// nothing.
|
|
func (m model) handleDocumentAttach(path string) model {
|
|
doc, err := imageinput.LoadDocument(path, m.cwd, imageinput.DocumentOptions{
|
|
Vision: m.modelSupportsVisionTUI(),
|
|
})
|
|
if err != nil {
|
|
return m.appendImageNotice(err.Error())
|
|
}
|
|
|
|
label := filepath.Base(path)
|
|
if strings.TrimSpace(doc.Text) != "" {
|
|
m.pendingDocuments = append(m.pendingDocuments, pendingDocument{label: label, text: doc.Text})
|
|
}
|
|
for _, block := range doc.Images {
|
|
m.pendingImages = append(m.pendingImages, block)
|
|
m.pendingImageLabels = append(m.pendingImageLabels, label)
|
|
}
|
|
// The composer attachment chip ([Doc #N] / [Image #N]) is the confirmation; no
|
|
// "attached" system message.
|
|
return m
|
|
}
|
|
|
|
// consumePendingDocuments returns the staged document text formatted as a prompt
|
|
// preamble and clears the pending documents. The preamble names each document so
|
|
// the model can attribute the text; an empty result means nothing was staged.
|
|
func (m *model) consumePendingDocuments() string {
|
|
if len(m.pendingDocuments) == 0 {
|
|
return ""
|
|
}
|
|
var b strings.Builder
|
|
for _, doc := range m.pendingDocuments {
|
|
b.WriteString("Attached document: ")
|
|
b.WriteString(doc.label)
|
|
b.WriteString("\n")
|
|
b.WriteString(doc.text)
|
|
b.WriteString("\n\n")
|
|
}
|
|
m.pendingDocuments = nil
|
|
return b.String()
|
|
}
|
|
|
|
// appendImageNotice appends an image-related notice to the transcript. Image
|
|
// errors (vision gate refusal, oversize, unsupported type) render with a red
|
|
// error border + red text so they stand out from ordinary grey system notes.
|
|
func (m model) appendImageNotice(text string) model {
|
|
row := transcriptRow{
|
|
kind: rowError,
|
|
text: text,
|
|
}
|
|
m.transcript = appendTranscriptRow(m.transcript, row)
|
|
return m
|
|
}
|
|
|
|
// removeLastAttachment drops the rightmost pending attachment chip and reports
|
|
// whether anything was removed. Documents render after images, so a staged
|
|
// document is removed before images; image pops keep pendingImages and
|
|
// pendingImageLabels in lockstep.
|
|
func (m model) removeLastAttachment() (model, bool) {
|
|
if n := len(m.pendingDocuments); n > 0 {
|
|
m.pendingDocuments = m.pendingDocuments[:n-1]
|
|
return m, true
|
|
}
|
|
if n := len(m.pendingImageLabels); n > 0 {
|
|
m.pendingImageLabels = m.pendingImageLabels[:n-1]
|
|
if len(m.pendingImages) > 0 {
|
|
m.pendingImages = m.pendingImages[:len(m.pendingImages)-1]
|
|
}
|
|
return m, true
|
|
}
|
|
return m, false
|
|
}
|
|
|
|
// renderImageChips builds a compact "[Image #1] [Image #2]" row for the pending
|
|
// image attachments, or "" when there are none, so the long file name never
|
|
// clutters the input. Kept plain so the renderer can wrap/style it consistently.
|
|
func renderImageChips(labels []string) string {
|
|
if len(labels) == 0 {
|
|
return ""
|
|
}
|
|
chips := make([]string, 0, len(labels))
|
|
for i := range labels {
|
|
chips = append(chips, fmt.Sprintf("[Image #%d]", i+1))
|
|
}
|
|
return strings.Join(chips, " ")
|
|
}
|
|
|
|
// renderAttachmentChips builds the pending-attachment row from both staged images
|
|
// and staged documents, e.g. "[Image #1] [Image #2] [Doc #1]". Returns "" when
|
|
// nothing is staged. Numbered (not named) so a long screenshot path never shows
|
|
// in the composer.
|
|
// visionDropWarning returns a one-line notice when images are staged but the
|
|
// (now active) model can't accept them, so switching to a non-vision model warns
|
|
// the user immediately at switch time instead of silently dropping the images at
|
|
// submit. Empty when there is nothing staged or the model supports vision.
|
|
func (m model) visionDropWarning() string {
|
|
if len(m.pendingImages) == 0 || m.modelSupportsVisionTUI() {
|
|
return ""
|
|
}
|
|
return fmt.Sprintf("⚠ %d staged image(s) will be dropped — %s has no vision support.",
|
|
len(m.pendingImages), displayValue(m.modelName, "the active model"))
|
|
}
|
|
|
|
func renderAttachmentChips(imageLabels []string, docs []pendingDocument) string {
|
|
chips := make([]string, 0, len(imageLabels)+len(docs))
|
|
for i := range imageLabels {
|
|
chips = append(chips, fmt.Sprintf("[Image #%d]", i+1))
|
|
}
|
|
for i := range docs {
|
|
chips = append(chips, fmt.Sprintf("[Doc #%d]", i+1))
|
|
}
|
|
return strings.Join(chips, " ")
|
|
}
|