user-dialog git:20260930.d55119bA

Immutable. This exact content never changes and is served at /api/v1/blob/02a1560b3d033d9b.

---
name: user-dialog
description: Compose popups with inputs, Markdown documents, and image or document file paths, then return the response as a user message in the originating conversation.
---

# User Dialog

Compose basic UI elements freely in JSON for the communication purpose, using
inputs and file paths for documents and images. Run the provided script; do not
create request-specific executable scripts. Set `SKILL_DIR` to this skill's
absolute directory.

Use `markdown` for body content, from brief explanations to full documents,
and `file` for existing documents or images. Markdown is unframed by default;
title, border, source-copy, and code-copy controls are independent display options.
See the [view contract](references/view-contract.md) for supported syntax and options.

Run from the session project root. Keep request JSON, state, and logs in
`.codex-skills/user-dialog/<run-id>/` unless the user chooses another workspace.
Use a unique ID for each new dialog and reuse its path for updates and recovery.
Input asset paths remain project-relative.

When creating the default workspace in a Git project, ensure `/.codex-skills/` is ignored unless the user intends to version that data.

```bash
uv run --script "$SKILL_DIR/scripts/user_dialog.py" show <request.json|-> --run-dir <run-dir>
```

For Desktop delivery, keep the originating turn active while the popup accepts input.
If `show` or `resume` yields a running exec session or cell, wait on that same ID
in bounded waits of at most 60 seconds. Continue independent work if useful, but
do not send a final response while the writable popup is pending. A detached
renderer or running cell alone does not keep the turn active. Cancellation or
interruption closes the writable popup and preserves its draft or saved answer.
CLI popups retain their detached lifetime.

While a dialog is open, update it with `update <run-dir> <request.json|-> [--revision N]`
using the same JSON format and stable element IDs. Paths resolve from the original
working directory; use `status <run-dir>` to inspect pending updates.

Read the [view contract](references/view-contract.md) for JSON syntax when needed,
or its [runtime section](references/view-contract.md#runtime) for validation, preview, and recovery.

The runtime preserves submitted answers and delivers one ordinary user message
to the originating task. State and response formatting are shared; native
connection, submission, receipt checks, and recovery are separate for each client.
CLI discovers its existing managed shared daemon and uses Core's `turn/start`.
Desktop discovers the existing local owner through native IPC and uses only its
steering path. An inactive turn leaves the answer saved; it never triggers start.
Remote and embedded CLI servers are unsupported.

Desktop freezes the submitted popup and releases the launcher after admission
acknowledgement or an uncertain attempted-write outcome, before waiting for a
canonical receipt. Let that exec session or cell return so Core can record the
user input. The renderer independently confirms the saved UUID and exact text;
automatic closing waits for confirmation. A writable Desktop popup cannot outlive
normal completion of its originating turn.

Once input may have been admitted, errors or lost acknowledgements never trigger
another send. Confirmation uses the client's saved native records without replay.
Retain unconfirmed runs; clean up expendable files after confirmation and window
closure, preserving drafts and recovery state. Save requested exports at their
output destination.

Response titles, field labels, and the submitted button are emphasized automatically
using the client's theme where supported. Compose the usual request JSON; no
emphasis ranges or additional styling fields are needed. Answer text stays verbatim.

Drafts retain incomplete number/date edits for resume and compatible updates. Submission
validates active fields before recording typed numeric/date answers; invalid input stays
editable in the popup. Use the documented tabs/pages transition type and duration;
the runtime waits for document readiness, settles layout, and restores focus.
Place conditional controllers outside the content they control. Self/descendant
conditions and indirect field-dependency cycles are rejected; keep required
controllers accessible so invalid drafts can be corrected.