Total selectable entries: the pinned clean row + every session row.

Evaluate against the sub-agent's structured `details`. Returns the intersection on match (so the caller can write `promote_eligible_rule_ids` for audi

Evaluate a single tool call against the policy in the given category. Pure function — no IO. Runtime ships a permissive default for [`PermissionCateg

Scan for `@<path>` tokens. Stops a path at whitespace, semicolon, comma, parenthesis, or quote. Leading punctuation around the `@` (e.g. wrapping in p

Extract the text body of a `Message::User`, joining `Blocks` text content. Returns `None` for image-only messages or empty text. Used to fill [`OnTurn

StreamFn that always emits a Done with the supplied text. Equivalent to the harness_e2e helper but inlined so this test stays self-contained.

Per-call stream_fn that returns successive assistant texts from a shared queue. Used to differentiate iterations in continuation-loop tests so we can

Wrap up a finished turn: clear the busy state and surface an aborted/error line.

Build a single frame with one `:event-type` string header and a JSON payload.

Call the LLM to produce a single text summary of the supplied messages.

Handle `/web-connect` family outcomes. Shared by the TUI and web event loops.

Initialise a fresh repo at `dir` with one committed file and one staged change.

Inject-and-run delivery hook: injects `prompt` into the parent conversation and runs one turn in the parent's context (`TriggerDelivery::InjectAndRun`

Inject-summary delivery hook: returns [`TriggerDelivery::InjectSummary`] with a verbatim `{{trigger.payload_summary}}` template (the source-as-feed sh

Build the dynamic trigger listing tool. This is the model-facing counterpart to `/triggers rules`: it lets the assistant inspect current rule ids befo

Build an `AgentListener` that prints lifecycle events. Holds onto `self` (cheaply clonable Arc state) so deltas accumulate across events.

Load the service-account file from `GOOGLE_APPLICATION_CREDENTIALS` (or the explicit path supplied by the caller).

Translate one MCP push frame to a `Trigger`, or `None` if the frame should be dropped at the adapter (custom method without `_pie_dedup_key` / `_meta.

Build the session-scoped cron creation tool. This is the model-facing counterpart to `/cron add`: when the user asks in ordinary conversation for a sc

Normalize a single shell token before the target predicate sees it. Strips one balanced layer of single or double quotes and rewrites `${HOME}` (with

Mistral requires tool-call ids to be alphanumeric and exactly 9 chars.

Hash the on-disk SKILL.md bytes at `target_path` using the same SHA256 + line-ending normalization the new-content hash uses, so an idempotent re-inst

Issue #110 sub-PR 3 classifier — every install is a persistent control-plane write that grows the model's tool surface, so always route through the `o

Render a short, single-line preview of tool-call arguments — the first few keys with truncated values. Mirrors the old `tui::preview` shape (`(k="v",

`/session import` brought automation that the source had enabled. Raise the shared confirm surface; approval restores exactly the source enablement.

Queue the current state to the relay, if one is connected. Cheap when off; the relay task debounces actual sends.

Queue a snapshot for the relay. Cheap; the task debounces on the wire.

Render the viewer URL as a scannable QR code for the TUI feed. Unicode half-block rendering, inverted so modules read dark-on-light on dark terminal t