Release: intercept /sessions and /resume slash commands (#6245, @webtecnica)

[nesquena-hermes]

Release: intercept /sessions and /resume slash commands (#6245, @webtecnica)

Ships @webtecnica's fix so /sessions and /resume open the session browser instead of being sent as chat text, gated + hardened for mobile.

What ships

Both commands appeared in the slash-command autocomplete (exposed by /api/commands) but the WebUI send-time dispatch didn't handle them, so they were posted to the agent as plain text. They now open the native WebUI session browser and clear the composer.

Gate + maintainer fix

Codex verified no agent-side behavior is lost (unmatched slash text goes to run_conversation), built-in/CLI/plugin command precedence is intact, and args-ignored (/resume <id>) is a noted limitation (WebUI never executed those handlers before), NOT a regression — 34/34 slash tests pass. One SILENT mobile bug found + fixed (maintainer follow-up, co-authored to @webtecnica): the intercept called expandSidebar() directly, which is a no-op on phone-width layouts, so /sessions//resume silently did nothing on mobile. Now uses the mobile-aware _openProfileSwitchSessionBrowser() with an expandSidebar() fallback.

Verification

• Codex adversarial: SAFE (with the mobile fix applied) — dispatch paths reproduced (bare + args, /pet, CLI-only, agent-runtime, plugin).
• Full pytest suite: 13,363 passed (sole failure = known editable-install box artifact); 323 slash/command/send tests pass on the fixed code.

Closes #6245

Credit: @webtecnica.

[greptile-apps]

Greptile Summary

This release PR ships @webtecnica's fix so /sessions and /resume typed in the composer open the native session browser instead of being forwarded to the agent as plain text, with a maintainer follow-up that makes the intercept mobile-aware via _openProfileSwitchSessionBrowser.

• static/messages.js: A new branch inside the if(_parsedCmd&&!_cmd) block intercepts the two command names, calls the mobile-aware sidebar opener (with an expandSidebar fallback), awaits renderSessionList, clears the composer, and returns — matching the pattern used by the /pet intercept just above it.
• CHANGELOG.md: Release entry added documenting the fix, the mobile-aware opener detail, and the original reporter credit.

Confidence Score: 3/5

The new intercept works correctly for the primary case (no active session, or a normal writable session), but is unreachable with a misleading error when the user has a read-only imported session active.

The mobile-aware opener and the fallback chain are implemented correctly, and the happy path is solid. However, a pre-existing early-return guard fires before the slash-command dispatch whenever a read-only session is active, so /sessions and /resume still fail in that scenario — and with a message that misdirects the user. The fix is incomplete for a real, reachable code path.

static/messages.js — specifically the interaction between the read-only session guard (line 1416) and the new slash-command intercept (line 1468).

Important Files Changed

Filename	Overview
static/messages.js	Adds /sessions and /resume intercept inside the if(_parsedCmd&&!_cmd) block; uses the mobile-aware _openProfileSwitchSessionBrowser with an expandSidebar fallback. The intercept is unreachable when a read-only session is active due to a pre-existing early-return guard that fires with a misleading toast.
CHANGELOG.md	New CHANGELOG entry added by the release process describing the sessions/resume fix; content matches the PR changes. No issues.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["User types /sessions or /resume in composer and hits Send"] --> B{"S.session exists AND is read-only?"}
    B -- "Yes (pre-existing guard)" --> C["showToast: 'Read-only imported sessions cannot be modified.' return ❌"]
    B -- No --> D["text.startsWith('/') && !pendingFiles && !literalSlash?"]
    D -- Yes --> E["parseCommand(text) → _parsedCmd"]
    E --> F{"_parsedCmd in COMMANDS array?"}
    F -- No --> H{"_parsedCmd.name === 'sessions' or 'resume'?"}
    H -- Yes --> I{"typeof _openProfileSwitchSessionBrowser === 'function'?"}
    I -- Yes --> J["_openProfileSwitchSessionBrowser() (mobile-aware)"]
    I -- No --> K{"typeof expandSidebar === 'function'?"}
    K -- Yes --> L["expandSidebar() (desktop-only)"]
    K -- No --> M["No sidebar action"]
    J --> N["await renderSessionList()"]
    L --> N
    M --> N
    N --> O["Clear composer, return ✓"]
    H -- No --> P["Continue to agent/plugin dispatch"]

Loading

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A["User types /sessions or /resume in composer and hits Send"] --> B{"S.session exists AND is read-only?"}
    B -- "Yes (pre-existing guard)" --> C["showToast: 'Read-only imported sessions cannot be modified.' return ❌"]
    B -- No --> D["text.startsWith('/') && !pendingFiles && !literalSlash?"]
    D -- Yes --> E["parseCommand(text) → _parsedCmd"]
    E --> F{"_parsedCmd in COMMANDS array?"}
    F -- No --> H{"_parsedCmd.name === 'sessions' or 'resume'?"}
    H -- Yes --> I{"typeof _openProfileSwitchSessionBrowser === 'function'?"}
    I -- Yes --> J["_openProfileSwitchSessionBrowser() (mobile-aware)"]
    I -- No --> K{"typeof expandSidebar === 'function'?"}
    K -- Yes --> L["expandSidebar() (desktop-only)"]
    K -- No --> M["No sidebar action"]
    J --> N["await renderSessionList()"]
    L --> N
    M --> N
    N --> O["Clear composer, return ✓"]
    H -- No --> P["Continue to agent/plugin dispatch"]

Loading

Comments Outside Diff (1)

1. static/messages.js, line 1416-1418 (link)

   Read-only guard blocks navigation commands with misleading toast

   The if(S.session&&(S.session.read_only||S.session.is_read_only)) guard at line 1416 fires before the slash-command dispatch block (line 1428). If a user has a read-only imported session active and types /sessions or /resume, they receive "Read-only imported sessions cannot be modified." and nothing opens — even though these commands are purely navigational and touch no session data. The fix is unreachable in that scenario, and the toast text actively misdirects the user into thinking the session browser is locked.

   The busy-control guard at line 1356 demonstrates the existing pattern for commands that need to bypass the read-only wall — intercepting /sessions//resume similarly (before line 1416, or by widening the guard's exclusion list) would close this gap.

_{Reviews (1): Last reviewed commit: "CHANGELOG: intercept /sessions /resume s..." | Re-trigger Greptile}

[greptile-apps]

/resume <id> argument is silently discarded

_parsedCmd.args carries the session ID a user typed (e.g. /resume abc123) but the handler never reads it — the session browser always opens at the default/current position. The autocomplete exposes /resume as a command that accepts an argument, so a user who copies a session ID from the UI and types /resume <id> will see the browser open but their target session won't be selected or jumped to. The PR notes this as a known limitation; it's flagged here because the discarded args value is the only hook point for a future fix and documenting it in code (even a // TODO: navigate to args when possible comment) would prevent future confusion.

[cutter-sh]

🎬 Cutter preview — PR #6253

Open session browser using /sessions or /resume command — Typing /sessions opens the session browser sidebar and clears the composer instead of sending as chat.