Method submit

internal/tui/model.go:575–608

submit commits a user prompt. sendText is the expanded form sent to the LLM (chip labels replaced by their original paste content); echoText is the collapsed form shown in scrollback so the chat doesn't swallow 80 lines of pasted log every turn; entry is the history snapshot replayed by ↑/↓, includi

(sendText, echoText string, entry promptEntry)

	return m, tea.Sequence(cmds...)
}

// submit commits a user prompt. sendText is the expanded form sent to the LLM
// (chip labels replaced by their original paste content); echoText is the
// collapsed form shown in scrollback so the chat doesn't swallow 80 lines of
// pasted log every turn; entry is the history snapshot replayed by ↑/↓,
// including chip state.
func (m Model) submit(sendText, echoText string, entry promptEntry) (tea.Model, tea.Cmd) {
	// Redact secret-bearing slash commands (/hamrpass <key>) before they reach
	// any sink that persists or replays them: the scrollback echo (kept in
	// m.scroll, re-emitted verbatim on every resize), the ↑/↓ recall ring, and
	// the on-disk .codehamr/history file. Without this, submit leaks the bearer
	// token into a second on-disk copy and into UI recall, undermining the
	// 0o600 + symlink defences on the key in config.yaml. Raw sendText still
	// flows to runSlash so activation works. No-op for non-secret input.
	safeText := redactSlash(sendText)
	if safeText != sendText {
		echoText = safeText
		entry = promptEntry{display: safeText}
	}
	// Echo to scrollback with the same accent ▌ the textarea uses, one visual
	// language for "your voice" across live input and history.
	m.appendLine(stylePrompt.Render("▌ ") + styleUser.Render(echoText))
	m.promptHistory = append(m.promptHistory, entry)
	m.histIdx = -1
	// Persist the (redacted) prompt so ↑ finds it after a restart. Errors are
	// swallowed: a transient failure isn't worth derailing submit, and a
	// permanent one (read-only .codehamr/) would just be noise on every prompt.
	_ = appendPromptHistory(m.cfg.Dir, safeText)

	if strings.HasPrefix(sendText, "/") {
		dbgWritef("user_slash", "%s", safeText)
		return m.runSlash(sendText)
	}
	// A new user message is a new goal: drop any in-progress failure streak so
	// a stale count can't trip the nudge early. History persists; only the
	// counter resets.
	m.failKey, m.failStreak = "", 0