Pressing up should cycle history like claude code.

~~Remove the user's input from output "you" - it's not needed.~~ Brought back as a condensed one-liner (first line + line count for multi-line).

Smart shell auto-approve: auto-approve `run_command` when the base executable is in the `allowed_commands` list and the full command doesn't match any `denied_commands` prefix. Only prompt the user for commands whose base executable is unlisted. Currently all shell commands prompt regardless, which is tedious for safe read-only commands like `git branch` or `ls`. The allow/deny lists in `ShellToolConfig` already define what's safe — the permissions service just needs to be shell-aware.

Show a token count or some other display for when the model is "thinking" for a long period of time. I want a way for the user to know the model is working on it.

/models command to show models available and temporarly change models in the session

pass a directory to the tool so that it uses that directory as it's root for commands.

add a skills directory so we can prompt our own skills for the tool to use similar to Claude Code

need not only a session log, but also a log of what the llm is thinking and how it's working somehow. I need a way to see behind the curtain.

# Left of from Phase 7 of old roadmap - finish these first
- Permission modal auto-approves (TODO: proper modal dialog)
- Session resume auto-resumes (TODO: modal y/n)
- LLM client cleanup on unmount not yet wired
- No automated TUI tests (Textual's AppTest can be added later)