Make input request signals advisory

docs/tui-input-required.md

@@ -9,12 +9,12 @@ such as `Allow` in terminal text. Those heuristics cannot distinguish a dialog
 from thinking, a completed turn, documentation, or agent-produced output; a
 false "blocked" badge would be worse than a missed prompt.
 
-The pane reader and Overview card replace their reply composer with a **Needs
-input** banner and an **open terminal** action. The session tile and sidebar
-also identify the condition. The normal composer is hidden because submitting
-text while a choice menu owns stdin can select the wrong option. The prompt and
-attachment APIs refuse the same operation with HTTP 409 while the signal is
-active; direct terminal input remains available.
+The pane reader and Overview card show a **Needs input** banner and an **open
+terminal** action above their normal reply composer. The session tile and
+sidebar also identify the condition. Detection is advisory: the composer,
+prompt API, and attachment delivery stay available while a signal is active.
+A false-positive warning is recoverable; turning it into a write denial would
+make detector error an availability bug.
 
 The reader does not answer the dialog in this version. The CLIs have different
 choice identifiers, validation, queueing, "allow once/always" semantics, and
@@ -80,14 +80,20 @@ removed at process exit.
 
 OpenCode's paired event remains authoritative through menu-navigation input and
 closes immediately when the final queued request closes. Every marker, including
-OpenCode's, also has a 30-minute ceiling so a lost close event cannot disable
-reader prompting indefinitely. For unpaired CLIs, an actual operator key or a
+OpenCode's, also has a 30-minute ceiling so a lost close event cannot leave a
+stale warning indefinitely. For unpaired CLIs, an actual operator key or a
 native completion event can clear the signal sooner; process exit clears every
 kind. Automatic terminal query replies do not count as operator input. The
 ceiling can create a false negative for a dialog left open longer than 30
 minutes; that is intentional because an indefinitely stale warning is the more
 damaging failure mode.
 
+Enforcement remains a possible later step per adapter, after every covered
+dialog and subtype has been observed end-to-end in the deployed environment.
+It should not be enabled globally: a notification such as Claude's
+`agent_needs_input` may describe a teammate that needs attention rather than a
+modal dialog owning the main pane's input.
+
 ## Verification
 
 Automated coverage includes stale/mismatched launch markers, unrelated terminal

server/src/runner.js

@@ -2095,11 +2095,6 @@ export function attach(session, cols, rows) {
 export async function sendInput(id, text, { confirmEcho = false } = {}) {
   const host = hosts.get(id);
   if (!host || stopping.has(id)) throw new Error('session is not running');
-  if (host.inputRequired.get()) {
-    const error = new Error('session needs input in its terminal — a normal prompt was not sent into the open dialog');
-    error.statusCode = 409;
-    throw error;
-  }
   host.inputRequired.observeInput();
   // Multi-line prompts go in as a bracketed paste so the CLI's composer treats
   // the inner newlines as soft line breaks instead of submitting early.
@@ -2150,11 +2145,6 @@ export async function sendInput(id, text, { confirmEcho = false } = {}) {
 export function pasteInput(id, text) {
   const host = hosts.get(id);
   if (!host || stopping.has(id)) throw new Error('session is not running');
-  if (host.inputRequired.get()) {
-    const error = new Error('session needs input in its terminal — text was not pasted into the open dialog');
-    error.statusCode = 409;
-    throw error;
-  }
   const value = String(text || '');
   if (!value) return;
   host.inputRequired.observeInput();

web/src/components/Overview.tsx

@@ -367,30 +367,29 @@ export function Card({ s, color, group, pending, isMobile, onOpen, onClose }: {
         )}
       </div>
 
-      {s.inputRequired ? (
+      {s.inputRequired && (
         <InputRequiredNotice
           input={s.inputRequired}
           onOpenTerminal={() => { writePaneMode('terminal'); onOpen(s.id); }}
         />
-      ) : (
-        <Composer
-          draft={draft}
-          sending={sending}
-          isMobile={isMobile}
-          inputRef={inputRef}
-          canSend={!!draft.trim() || images.length > 0}
-          above={<Attachments
-            attachments={images}
-            disabled={sending || !allowAttachments}
-            disabledReason={!allowAttachments ? 'Files are not available for remote agents yet — that agent cannot read files stored on this Space.' : undefined}
-            onFiles={addImages}
-            onRemove={removeImage}
-          />}
-          onChange={setDraft}
-          onSend={send}
-          onPasteFiles={allowAttachments ? addImages : undefined}
-        />
       )}
+      <Composer
+        draft={draft}
+        sending={sending}
+        isMobile={isMobile}
+        inputRef={inputRef}
+        canSend={!!draft.trim() || images.length > 0}
+        above={<Attachments
+          attachments={images}
+          disabled={sending || !allowAttachments}
+          disabledReason={!allowAttachments ? 'Files are not available for remote agents yet — that agent cannot read files stored on this Space.' : undefined}
+          onFiles={addImages}
+          onRemove={removeImage}
+        />}
+        onChange={setDraft}
+        onSend={send}
+        onPasteFiles={allowAttachments ? addImages : undefined}
+      />
       {(imageError || failed) && <div className="ov-note" role="alert">{imageError || failed}</div>}
     </div>
   );

web/src/components/Sidebar.tsx

@@ -346,7 +346,10 @@ export default function Sidebar({
       >
         {/* The same three lights, but for a remote agent they mean connection,
             not process: working / listening / not connected. */}
-        <span className={`status ${s.state}`} title={s.inputRequired ? 'needs input in terminal' : (isRemote(s.cli) ? REMOTE_STATE_LABEL : STATE_LABEL)[s.state]} />
+        <span
+          className={`status ${s.inputRequired ? 'needs-input' : s.state}`}
+          title={s.inputRequired ? 'needs input in terminal' : (isRemote(s.cli) ? REMOTE_STATE_LABEL : STATE_LABEL)[s.state]}
+        />
         <Logo cli={s.cli} size={12} tint={colorOf[s.cli]} />
         {editing ? (
           <input

web/src/components/conversation/ConversationView.tsx

@@ -559,7 +559,7 @@ export default function ConversationView({
       {!readOnly && session.inputRequired && (
         <InputRequiredNotice input={session.inputRequired} onOpenTerminal={() => writePaneMode('terminal')} />
       )}
-      {!readOnly && !session.inputRequired && (
+      {!readOnly && (
         <Composer
           className="cxv-live"
           containerClassName="cxv-composer"

web/src/conversation.css

@@ -401,6 +401,7 @@ mark.cx-hit.on { background: var(--accent); color: var(--panel); }
   padding: 4px 8px; background: var(--panel-2); color: var(--text); font: inherit; cursor: pointer;
 }
 .input-required button:hover { border-color: var(--accent); }
+.input-required + .ov-composer { border-top: 0; }
 @media (max-width: 720px) and (pointer: coarse) {
   /* Restating styles.css's iOS guard: 16px is what stops zoom-on-focus, and the
      rule above is later in the cascade, so it would otherwise win. A phone