The TUI — @, !, /, Tab

# @ — fuzzy file search and attach
@ auth        → src/auth.ts, tests/auth.spec.ts, docs/auth-flow.md
              ↑/↓ to select, Enter to attach

# Compose attached files into a prompt:
@src/auth.ts @tests/ Refactor auth to JWT RS256

# ! — run a shell command, output appears in transcript
!git status
!npm test
!git diff HEAD~1
# Codex can reference the output in its next response

# / — open slash command popup
/permissions
/compact
/theme
/clear

─── src/auth.ts ─────────────────────
@@ -12,7 +12,12 @@
-  function validateToken(token) {
-    return jwt.verify(token, SECRET);
+  async function validateToken(token: string): Promise<TokenPayload> {
+    try {
+      return await jwt.verify(token, SECRET) as TokenPayload;
+    } catch (err) {
+      throw new AuthError('Invalid token', 401);
+    }
+  }
─────────────────────────────────────
[A]pprove  [R]eject  [E]dit  [S]kip all