Confirm a destructive action (default NO). assume_yes (a --yes/--force
flag) is the explicit opt-in for scripted use; without it a non-interactive
session refuses rather than proceeding silently. prompt is printed
verbatim, followed by [y/N]:.
Drain all complete newline-terminated lines out of buf, decoding each
as UTF-8 and dropping the trailing \n. Any partial trailing line stays
in buf so the caller can append more bytes and try again.
Drain all complete SSE events out of buf, returning the payload of
each data: field. The [DONE] sentinel and non-data: fields are
filtered out. Each returned String is exactly one event’s data
(multi-line data: fields are joined with \n, per the SSE spec).
Return (creating if needed) a 0700 per-user scratch directory under the app
data dir. Callers write transient sensitive files here instead of the shared
system temp dir.
Read at most max_bytes from path. Returns (bytes, truncated) where
bytes.len() <= max_bytes and truncated is true when the file was
longer than the cap.
Retry an async operation with exponential backoff, retrying on ANY error.
For selective retries (skip terminal errors like HTTP 4xx) use
retry_async_if.
Retry an async operation with exponential backoff, but only while
is_retryable returns true for the error. A terminal error (e.g. an HTTP
4xx on a non-idempotent POST) is surfaced immediately instead of being
retried max_attempts times (#85).
Fail-closed policy: refuse a destructive/untrusted action when there is no
interactive terminal to confirm at and the explicit opt-in was not passed.
Also defeats yes | mermaid …, since a pipe is not a TTY.