[omartelo]

Client side of lich's extended session-state contract: lichdotdev/lich#200 must merge first — the fixtures-drift job here reads lich@main, so CI stays red until it does.

A busy lich card showed a spinning ring and nothing else. report-tool.sh rides PreToolUse in both harnesses and reports the same busy with two more fields — the tool's name and what it acts on. lich draws them under the session's label and clears them when the state leaves busy, so this script never has to report an end.

The payload shapes were measured, not assumed

Both CLIs were driven against a stub HTTP listener in an isolated home (CODEX_HOME / CLAUDE_CONFIG_DIR), and the first draft of this script was wrong twice:

	expected	actually sends
Codex, shell call	shell, command as a list	Bash, command as a plain string
Codex, file edit	a path	the whole patch as command
both, file tools	a workable path	an absolute one

So the detail is read by field, never by tool name — command, then file_path / path, then pattern / url / query. One rule covers both harnesses because a Codex shell call arrives wearing Claude Code's own name and field.

Two shapes needed more:

• apply_patch — the file its *** Add/Update/Delete File: line names goes on the card instead of *** Begin Patch. A patch touching several shows the first; one naming none sends no detail at all.
• A path — shortened against the payload's cwd, because a lich card is 240px wide and Write · /home/…/worktrees/…/probe.txt is all prefix. Outside that directory only the file name survives. Commands are never shortened: a leading slash there is a binary.

Without jq (Windows, usually) the tool name still goes out, read with sed like the session id is; the detail does not, because a hand-built body cannot escape arbitrary text.

The critical path

PreToolUse is the first event this plugin rides that the agent waits on: in both harnesses a hook exiting 2 there blocks the tool call. Until now the worst a broken script could do was lose a status report. The client rules were already right; this is the first hook where they are load-bearing rather than polite.

Test plan

• node --test tests/*.test.mjs — 85 pass. The new script is covered by the shared per-registration suite (accepted shape, endpoint, token, no deprecated alias, no-op outside lich, exit 0 on 500 and on refused connection) plus its own: no tool name → no report, detail per field, the two patch shapes, path shortening in and out of cwd, a command that starts with a slash left uncut, JSON escaping, one line of a multi-line command, and the no-jq fallback.
• binWithout() gained cat, which this script uses to read stdin once.
• Real codex exec run: Bash · ls -la, apply_patch · probe.txt, Bash · cat probe.txt, then done.
• Real claude -p run: Write · probe.txt, Read · probe.txt, Bash · grep -rn "hello" ., then done.
• Rendered in lich itself (isolated task dev, driven over CDP) — the line holds through a busy naming no tool and disappears on done.

Needs lich >= 0.29.0; an older one ignores the two fields.