fix final assistant response not streamed to WebUI; replace confirm() dialog

server/loop.go: append final assistant message to messages slice
  before returning from runLoop. The final text was only returned as
  the first return value, never added to the messages slice, so
  handlePrompt in serve.go never streamed it as a token event.
  Effect: WebUI showed tool calls + tool results but no assistant
  text response after 'done'.

WebUI: replace native confirm() with custom HTML dialog
  - New #confirm-overlay with backdrop blur, same pattern as
    approval dialog
  - Shows 'Delete session abc12345...?' with Cancel/Delete buttons
  - Escape key closes the dialog
  - Cleaner UX matching the dark theme

Author: jkyberneees

cmd/kode/ui/index.html

@@ -690,6 +690,38 @@
   border-radius: 4px; padding: 2px 8px; color: var(--text-secondary);
 }
 
+/* ── Confirm Dialog ── */
+#confirm-overlay {
+  display: none;
+  position: fixed; inset: 0; z-index: 1001;
+  background: rgba(0,0,0,0.6);
+  backdrop-filter: blur(4px);
+  align-items: center; justify-content: center;
+}
+#confirm-overlay.active { display: flex; animation: fadeIn 0.15s ease-out; }
+#confirm-dialog {
+  background: var(--bg-card);
+  border: 1px solid var(--border-subtle);
+  border-radius: 16px;
+  padding: 24px;
+  max-width: 400px;
+  width: 90%;
+  box-shadow: 0 16px 64px rgba(0,0,0,0.5);
+  animation: dialogEnter 0.2s ease-out;
+}
+#confirm-dialog h3 { font-size: 16px; margin-bottom: 8px; color: var(--text-primary); }
+#confirm-dialog p { font-size: 14px; color: var(--text-secondary); margin-bottom: 20px; line-height: 1.5; }
+#confirm-actions { display: flex; gap: 8px; justify-content: flex-end; }
+#confirm-actions button {
+  padding: 8px 16px; border-radius: 8px; border: none;
+  font-family: var(--font-sans); font-size: 13px; font-weight: 600;
+  cursor: pointer; transition: all 0.15s;
+}
+#confirm-actions .cancel { background: var(--bg-primary); color: var(--text-secondary); border: 1px solid var(--border-subtle); }
+#confirm-actions .cancel:hover { background: var(--accent-subtle); color: var(--text-primary); }
+#confirm-actions .delete-confirm { background: #ef4444; color: white; }
+#confirm-actions .delete-confirm:hover { opacity: 0.9; }
+
 /* ── Toast ── */
 .toast {
   position: fixed; bottom: 80px; left: 50%; transform: translateX(-50%);
@@ -803,6 +835,18 @@ <h3>⌨ Keyboard Shortcuts</h3>
   </div>
 </div>
 
+<!-- Confirm Dialog -->
+<div id="confirm-overlay">
+  <div id="confirm-dialog">
+    <h3>Delete session?</h3>
+    <p id="confirm-msg">This action cannot be undone.</p>
+    <div id="confirm-actions">
+      <button class="cancel" onclick="hideConfirmDialog()">Cancel</button>
+      <button class="delete-confirm" id="confirm-delete-btn" onclick="executeDeleteSession()">Delete</button>
+    </div>
+  </div>
+</div>
+
 <!-- Toast -->
 <div class="toast" id="toast"></div>
 
@@ -1353,6 +1397,22 @@ <h3>⌨ Keyboard Shortcuts</h3>
   approvalId = null;
 };
 
+// ── Confirm Dialog ──
+window.hideConfirmDialog = function() {
+  document.getElementById('confirm-overlay').classList.remove('active');
+  pendingDeleteId = null;
+};
+
+window.executeDeleteSession = function() {
+  if (!pendingDeleteId) return;
+  const sid = pendingDeleteId;
+  pendingDeleteId = null;
+  document.getElementById('confirm-overlay').classList.remove('active');
+  fetch('/api/sessions/' + encodeURIComponent(sid), { method: 'DELETE' })
+    .then(() => loadSessions())
+    .catch(() => showToast('Failed to delete session'));
+};
+
 // ── Shortcuts ──
 window.toggleShortcuts = function() {
   document.getElementById('shortcuts-overlay').classList.toggle('active');
@@ -1655,6 +1715,7 @@ <h3>⌨ Keyboard Shortcuts</h3>
 
 // ── Sessions ──
 let allSessions = [];
+let pendingDeleteId = null;
 
 sessionListEl.addEventListener('click', (e) => {
   // Delete button
@@ -1664,11 +1725,9 @@ <h3>⌨ Keyboard Shortcuts</h3>
     const sid = item.dataset.id;
     if (!sid) return;
     e.stopPropagation();
-    if (confirm('Delete session ' + sid.slice(0, 8) + '?')) {
-      fetch('/api/sessions/' + encodeURIComponent(sid), { method: 'DELETE' })
-        .then(() => loadSessions())
-        .catch(() => showToast('Failed to delete session'));
-    }
+    pendingDeleteId = sid;
+    document.getElementById('confirm-msg').textContent = 'Delete session ' + sid.slice(0, 8) + '...?';
+    document.getElementById('confirm-overlay').classList.add('active');
     return;
   }
 
@@ -1731,6 +1790,8 @@ <h3>⌨ Keyboard Shortcuts</h3>
   if (e.key === 'Escape') {
     document.getElementById('shortcuts-overlay').classList.remove('active');
     document.getElementById('approval-overlay').classList.remove('active');
+    document.getElementById('confirm-overlay').classList.remove('active');
+    pendingDeleteId = null;
   }
   // Ctrl+R refreshes sessions
   if (e.key === 'r' && (e.ctrlKey || e.metaKey)) {

internal/loop/loop.go

@@ -239,6 +239,12 @@ func (e *Engine) runLoop(ctx context.Context, messages []llm.Message) (string, [
 			if e.renderer != nil {
 				e.renderer.FinalAnswer(result.Content)
 			}
+			// Append final assistant message so callers (e.g. WebUI) get
+			// the final text in the messages slice and can stream it.
+			messages = append(messages, llm.Message{
+				Role:    "assistant",
+				Content: result.Content,
+			})
 			return result.Content, messages, nil
 		}