Bind ask selector rows by request id

Author: TheGreatAxios

CHANGELOG.md

@@ -22,6 +22,12 @@ parallel copies under `docs/` or `scripts/notes/`. At cut time: rename
   not a second copy of `env.authorize`: it consumes the prior verdict when the
   same call (id, name, and arguments) is cached, and decides on a cache miss.
 
+### Fixed
+
+- Sequential TUI ask and permission selectors paint the live question's option
+  labels. Rows bind by ask and request id rather than render-order index, so a
+  later question cannot keep the previous question's choices.
+
 ## [0.3.18] - 2026-09-08
 
 ### Added

docs/TUI.md

@@ -342,6 +342,9 @@ viewport kit: shared windowing, keep-active-visible, and page/jump behavior.
 There is exactly one scroll lease at a time; keyboard paging and the mouse
 wheel both follow whichever surface currently holds it, so a modal open on
 top of the transcript never lets the wheel move the transcript underneath it.
+Ask and permission rows bind by ask/request id, never render-order index;
+painted labels are the live payload, and stale rows whose ids are not in the
+new payload are dropped.
 
 "Current" is never inferred. For the model picker, the row marked
 `(current)` is read live from the session's actual active provider/model on

src/permission/gate.test.ts

@@ -236,3 +236,39 @@ describe("standing grant covers a later git worktree command (CL-5638)", () => {
     expect(prompts).toBe(1);
   });
 });
+
+describe("ask decision mints request.id", () => {
+  test("the copy handed to requestApproval has a non-empty id", async () => {
+    let captured: PermissionRequest | undefined;
+    const gate = createPermissionGate({
+      approvals: [],
+      interactive: true,
+      skipPermissions: false,
+      reactorGated: false,
+      requestApproval: async (request) => {
+        captured = request;
+        return { allow: true };
+      },
+    });
+    const verdict = await gate.evaluate(shellCall("npm test || true"));
+    expect(verdict.allowed).toBe(true);
+    expect(captured?.id).toEqual(expect.any(String));
+    expect(captured?.id?.length).toBeGreaterThan(0);
+  });
+
+  test("authorizeCall ask request carries a minted id", async () => {
+    const gate = createPermissionGate({
+      approvals: [],
+      interactive: true,
+      skipPermissions: false,
+      reactorGated: false,
+      requestApproval: async () => ({ allow: true }),
+    });
+    const result = await gate.authorizeCall(shellCall("npm test || true"));
+    expect(result.effect).toBe("ask");
+    if (result.effect !== "ask") throw new Error("expected ask");
+    const id = result.request.id;
+    expect(id).toEqual(expect.any(String));
+    expect(id?.length).toBeGreaterThan(0);
+  });
+});

src/permission/gate.ts

@@ -1,5 +1,6 @@
 import type { ToolCall } from "@intx/types/runtime";
 import { isAbsolute, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
 import type {
   Approval,
   ApprovalOutcome,
@@ -47,6 +48,12 @@ import { NOOP_APPROVAL_LOG, type ApprovalLog, type ApprovalOutcomeKind } from ".
 // autoDeny in gate-wire.ts and the timeout branch in tui/request-approval.ts's
 // finish() usage); anything else that denies is a plain operator/unavailable
 // decision.
+function withRequestId(request: PermissionRequest): PermissionRequest {
+  return request.id !== undefined && request.id.length > 0
+    ? request
+    : { ...request, id: randomUUID() };
+}
+
 function classifyOutcome(outcome: ApprovalOutcome | undefined): ApprovalOutcomeKind {
   if (outcome === undefined) return "deny";
   if (!outcome.allow) {
@@ -664,7 +671,7 @@ export function createPermissionGate(options: PermissionGateOptions): Permission
         const requestForOperator = anySecret ? { ...request, scopes: [] } : request;
         return {
           kind: "ask",
-          request: requestForOperator,
+          request: withRequestId(requestForOperator),
           anySecret,
           segmentCount: segments.length,
         };
@@ -692,7 +699,7 @@ export function createPermissionGate(options: PermissionGateOptions): Permission
         };
       }
 
-      return { kind: "ask", request, anySecret: false, segmentCount: 0 };
+      return { kind: "ask", request: withRequestId(request), anySecret: false, segmentCount: 0 };
     }
     return { kind: "allow" };
   };

src/permission/types.ts

@@ -56,6 +56,10 @@ export interface PermissionRequest {
   // withheld for a reason beyond the ordinary "no persistent option exists
   // yet" case. Plain literal text, never model-authored.
   notice?: string;
+  // Set by the gate on the copy handed to requestApproval, never on
+  // buildRequests matching/display copies. Overlay rows bind by this id
+  // rather than render-order index (see gate-wire.ts).
+  id?: string;
   // Set by the gate right before handing this request to requestApproval, so
   // whichever surface actually renders it (see gate-wire.ts's overlay host)
   // can report the moment it reached the operator's screen — distinct from

src/tui/decision-truncation.test.ts

@@ -33,6 +33,7 @@ const hintRequest: PermissionRequest = {
       hint: HINT,
     },
   ],
+  id: "req-1",
 };
 
 function bodySelect(view: ReturnType<typeof createOverlayView>): SelectRenderable {

src/tui/gate-events.ts

@@ -2,6 +2,8 @@ import type { ApprovalOutcome, PermissionRequest } from "../permission/types.js"
 import type { OperatorResult } from "../agent/tools.js";
 
 export interface OperatorGateEvent {
+  /** Minted by the session emitter, never by the TUI overlay. */
+  id: string;
   question: string;
   options: string[];
   resolve: (result: OperatorResult) => void;