@azure-id/orc 1.9.2 → 2.1.0

package/bin/verify-package.js

@@ -46,6 +46,7 @@ const required = [
   "bin/webui/css/panels/mockrun.css",
   "bin/webui/css/panels/maintenance.css",
   "bin/webui/css/panels/pact.css",
+  "bin/webui/css/panels/behaviour.css",
   "bin/webui/css/panels/boundary.css",
   "bin/webui/css/panels/wait.css",
   "bin/webui/css/panels/hookui.css",
@@ -78,6 +79,7 @@ const required = [
   "bin/webui/js/panels/experiment.js",
   "bin/webui/js/panels/maintenance.js",
   "bin/webui/js/panels/pact.js",
+  "bin/webui/js/panels/behaviour.js",
   "bin/webui/js/panels/boundary.js",
   "bin/webui/js/panels/wait.js",
   "bin/webui/js/panels/hookui.js",
@@ -101,6 +103,7 @@ const required = [
   "bin/webui/fixtures/runs.js",
   "bin/webui/fixtures/stats.js",
   "bin/webui/fixtures/pact.js",
+  "bin/webui/fixtures/behaviour.js",
   "bin/webui/fixtures/boundary.js",
   "bin/webui/fixtures/wait.js",
   "bin/webui/fixtures/hookui.js",
@@ -136,6 +139,7 @@ const required = [
   "bin/webui/i18n/en/mockrun.json",
   "bin/webui/i18n/en/maintenance.json",
   "bin/webui/i18n/en/pact.json",
+  "bin/webui/i18n/en/behaviour.json",
   "bin/webui/i18n/en/boundary.json",
   "bin/webui/i18n/en/wait.json",
   "bin/webui/i18n/en/hookui.json",
@@ -162,6 +166,7 @@ const required = [
   "bin/webui/i18n/id/mockrun.json",
   "bin/webui/i18n/id/maintenance.json",
   "bin/webui/i18n/id/pact.json",
+  "bin/webui/i18n/id/behaviour.json",
   "bin/webui/i18n/id/boundary.json",
   "bin/webui/i18n/id/wait.json",
   "bin/webui/i18n/id/hookui.json",
@@ -202,6 +207,30 @@ const required = [
   // the only answer that says WHY a THIN map is thin. Without it the status
   // line still says THIN and names a command that is not there.
   "bin/graph-audit.js",
+  // v2.0.0 W2 — the habit engine. `orc habit` requires it, and so do
+  // `orc lane config` and `orc config list` when `habits` is not off — a publish
+  // that drops it breaks the resolver for every lane that turned habits on.
+  "bin/habit.js",
+  // v2.0.0 W4 / W6a — the gotchas engine and its importers. `orc gotcha` and
+  // `orc lane config` require the first; `import`, `sync`, `orc pr threads`
+  // and `orc ci failed` require the second. A publish that drops the importer
+  // makes every review step's sync fail — silently, because a sync never blocks.
+  "bin/gotcha.js",
+  "bin/gotcha-import.js",
+  // v2.0.0 T21 — the trace pen. `orc trace write` requires it; a publish that
+  // drops it sends every lane to the Haiku fallback on every phase close.
+  "bin/trace-write.js",
+  // v2.0.0 W6b — `orc run snapshot` + `orc undo`. A publish that drops it
+  // leaves every end-of-run card printing an undo command that crashes.
+  "bin/run-undo.js",
+  // v2.1.0 W7 — `orc clear logs` and the FINISH sweep. A publish that drops it
+  // breaks the Maintenance row, and `orc trace write` loses the sweep (it
+  // never blocks, so the loss would be silent).
+  "bin/clear-logs.js",
+  // v2.1.0 W6 — `orc fix classify|record|list`, the deterministic half of
+  // /orc-fix. A publish that drops it leaves the lane naming a command that
+  // crashes, and no fix ever reaches the review card.
+  "bin/fix.js",
 
   // The two DATED data files (v0.50.0). Both ship inside the package and both
   // are load-bearing on absence rather than on content: without the catalog
@@ -351,6 +380,7 @@ const required = [
   "templates/commands/orc-export.md",
   "templates/skills/orc-route/SKILL.md",
   "templates/skills/orc-explain/SKILL.md",
+  "templates/skills/orc-fix/SKILL.md",
   "templates/skills/orc-analyze/references/thin-input.md",
   // v1.0.0 W7 — the ONE config doc. `orc/config.md` stopped restating 72 key
   // defaults and now points here for the ranks, the families, the gates, the
@@ -368,6 +398,18 @@ const required = [
   // trimmed lane reading a full-lane procedure.
   "templates/skills/_shared/phases/README.md",
   "templates/skills/_shared/phases/trace.md",
+  // v2.0.0 T1 — the CLOSED verb table, split out of trace.md and read on
+  // demand. A publish missing it leaves every lane's fallback for a verb not
+  // in `trace_grammar` pointing at nothing.
+  "templates/skills/_shared/phases/trace-verbs.md",
+  // v2.0.0 T3 — the common text of the coding-lane spine blocks. A publish
+  // missing it leaves every exit ≠ 0 fallback pointing at nothing.
+  "templates/skills/_shared/lane-contract.md",
+  // v2.0.0 W3 — the lane side of habits, read on demand. A publish missing it
+  // leaves every `(H <qid>)` mark pointing at nothing once habits is on.
+  "templates/skills/_shared/habits.md",
+  // v2.0.0 W5a — the one review slice, read on demand at a review dispatch.
+  "templates/skills/_shared/review-slice.md",
   "templates/skills/_shared/phases/preflight.md",
   "templates/skills/_shared/phases/stop-resume.md",
   // v1.0.0 W12 — the seven files that were already SHARED while living in one
@@ -412,6 +454,7 @@ const required = [
   "templates/commands/orc-grill.md",
   "templates/commands/orc-route.md",
   "templates/commands/orc-explain.md",
+  "templates/commands/orc-fix.md",
   "templates/commands/orc.md",
   "templates/commands/orc-quick.md",
   "templates/commands/orc-diy.md",
@@ -425,17 +468,19 @@ const required = [
   "templates/agents/MODEL-MAPPING.md",
   "templates/agents/orc-advisor-opus-5-xhigh.md",
   "templates/agents/orc-judge-opus-5-xhigh.md",
-  "templates/agents/orc-claude-writer-opus-4-8-high.md",
+  "templates/agents/orc-claude-writer-opus-5-low.md",
   "templates/agents/orc-learn-writer-opus-5-low.md",
   "templates/agents/orc-trace-writer-haiku-4-5.md",
   // v1.8.0 — the code graph's notes writer (Layer 2).
   "templates/agents/orc-graph-noter-sonnet-4-6-med.md",
   // Core non-generated agents — named explicitly so a dropped file is REPORTED
-  // by name, not merely absorbed by the count floor. (The 8 executor agents are
-  // checked separately by `build-agents.js --check`.)
+  // by name, not merely absorbed by the count floor. (The 10 executor agents are
+  // checked separately by `build-agents.js --check`. v2.0.0 T15: the 16 model
+  // twins below are GENERATED too — from agents-src/twins/ — and `--check`
+  // guards their content; this list still guards that each one ships.)
   "templates/agents/orc-system-analyst-opus-5-high.md",
   "templates/agents/orc-planner-opus-5-med.md",
-  "templates/agents/orc-reviewer-opus-5-med.md",
+  "templates/agents/orc-reviewer-opus-5-low.md",
   "templates/agents/orc-verifier-opus-5-med.md",
   "templates/agents/orc-scout-sonnet-4-6-high.md",
   // v1.9.0 — the /orc-quick recon pair. Both halves must ship: the gate offers
@@ -445,7 +490,7 @@ const required = [
   "templates/agents/orc-test-author-opus-5-med.md",
   "templates/agents/orc-pattern-codifier-sonnet-5-high.md",
   "templates/agents/orc-retro-sonnet-5-high.md",
-  "templates/agents/orc-wiki-scanner-opus-4-8-high.md",
+  "templates/agents/orc-wiki-scanner-opus-5-low.md",
   // v0.46.0 — the LIGHT half of the wiki scan tier ladder. Both halves must ship:
   // the ladder resolves at dispatch time, so a missing light scanner makes every
   // small-delta refresh dispatch a nonexistent agent.
@@ -463,8 +508,6 @@ const required = [
   "templates/agents/orc-planner-mini-opus-5-med.md",
   "templates/agents/orc-scout-opus-5-low.md",
   "templates/agents/orc-pattern-codifier-opus-5-med.md",
-  "templates/agents/orc-wiki-scanner-opus-5-med.md",
-  "templates/agents/orc-claude-writer-opus-5-med.md",
   "templates/agents/orc-retro-opus-5-med.md",
   // v0.47.0 — the three /orc-challenge agents. All THREE must ship: a cycle that
   // cannot dispatch the reader silently loses D4, and one that cannot dispatch
@@ -514,6 +557,7 @@ const required = [
   // the panel's preview and the bar's real output byte-identical BY
   // CONSTRUCTION. A missing file here breaks the status line AND the panel.
   "templates/hooks/orc-statusline-render.js",
+  "templates/hooks/orc-weather-fetch.js",
   // v1.4.0 — the SECOND board, and the per-agent token record that rides with
   // it. Wired even with the board off, because the measurement is handed over
   // either way.
@@ -522,6 +566,9 @@ const required = [
   // the ORCHESTRATOR. Ships wired but OFF; `read_gate` arms it.
   "templates/hooks/orc-read-gate.js",
   "templates/hooks/orc-trace.js",
+  // v2.0.0 W6c — the session hook: the bell at a run's turn end (Q8, `notify`,
+  // off by default) and the run pointer after a compaction (Q9).
+  "templates/hooks/orc-session-hook.js",
 ];
 
 const missing = [];
@@ -608,7 +655,9 @@ const agentCount = walkCount(path.join(ROOT, "templates/agents"), ".md");
 // hatch survives on the menu as line 3 (model only). Both names earn an
 // explicit guard entry above and a MODEL-MAPPING row; `opus5_only` adds no
 // pair, because orc-quick is the lane that key is inert in.
-if (skillCount < 39) missing.push(`templates/skills (expected >=39 SKILL.md, found ${skillCount})`);
+// v2.1.0 W6: +1 skill (orc-fix, a rider lane) and NO new agent — the no-run
+// fix reuses the /orc-quick dispatch gate and its shipped executors.
+if (skillCount < 41) missing.push(`templates/skills (expected >=41 SKILL.md, found ${skillCount})`);
 if (agentCount < 50) missing.push(`templates/agents (expected >=50 .md, found ${agentCount})`);
 
 // B4 — encoding/mojibake guard. The OneDrive corruption rule becomes a gate:
@@ -624,13 +673,22 @@ function scanEncoding(dir, hits) {
   if (!fs.existsSync(dir)) return;
   const st = fs.statSync(dir);
   if (st.isFile()) {
-    let text;
+    let buf;
     try {
-      text = fs.readFileSync(dir, "utf8");
+      buf = fs.readFileSync(dir);
     } catch (_) {
       return; // unreadable → not our concern here
     }
     const rel = path.relative(ROOT, dir).replace(/\\/g, "/");
+    // v2.0.0 Q10 — a raw 0x00 byte. Grep and ripgrep then treat the WHOLE file as
+    // binary and stop reporting matches after it, so every agent that greps the
+    // file gets a partial answer. Write the "\u0000" escape instead.
+    const nul = buf.indexOf(0);
+    if (nul >= 0) {
+      hits.push(`${rel} (raw NUL byte at offset ${nul} — write the "\\u0000" escape)`);
+      return;
+    }
+    const text = buf.toString("utf8");
     // Reference U+FFFD via escape, never as a literal, so this scanner does not
     // flag its own source.
     if (text.includes(REPL)) hits.push(`${rel} (U+FFFD replacement char — corrupted bytes)`);

package/bin/webui/api.js

@@ -284,6 +284,9 @@ const READS = {
     // applies these to a copy of the saved layout before it compiles.
     if (q.theme) argv.push("--theme", String(q.theme));
     if (q.glyphs) argv.push("--glyphs", String(q.glyphs));
+    // v2.0.4 — an animated preview: N frames, M ms apart. Render-only.
+    if (q.frames) argv.push("--frames", String(q.frames));
+    if (q.frame_ms) argv.push("--frame-ms", String(q.frame_ms));
     return argv;
   },
   "/api/statusline/explain": (q) => ["statusline", "explain", String(q.at || "1:1"), ...slBoard(q)],
@@ -453,6 +456,22 @@ const READS = {
   "/api/test/ui": () => ["test", "ui", "tools"],
   "/api/patterns": () => ["pattern", "status"],
   "/api/gotchas": () => ["gotcha", "list"],
+  // v2.0.0 W7 — the Behaviour panel. Every one is a CLI read, and every exit
+  // code is DATA: `habit show` 0 · 1 no ASK lines yet · 3 `habits: off`;
+  // `habit log` 0 · 1 empty; `gotcha card` 0 · 1 no match (an ANSWER: no card);
+  // `gotcha quality` 0 · 1 below the 5-review floor. The window is DROPPED
+  // unless it is one of the three the CLI knows — a query string is user input.
+  "/api/habits": (q) => (["30d", "90d", "all"].includes(String(q.window || "")) ? ["habit", "show", "--window", String(q.window)] : ["habit", "show"]),
+  "/api/habits/log": () => ["habit", "log", "--limit", "40"],
+  "/api/habits/states": () => ["habit", "log", "--states"],
+  "/api/habits/points": () => ["habit", "points"],
+  "/api/gotcha/card": (q) => ["gotcha", "card", "--files", String(q.files || ""), "--full"],
+  // The panel window (30d · 90d · all) in the days `gotcha quality --window` takes.
+  "/api/gotcha/quality": (q) => {
+    const days = { "30d": "30", "90d": "90", all: "3650" }[String(q.window || "")];
+    return days ? ["gotcha", "quality", "--window", days] : ["gotcha", "quality"];
+  },
+  "/api/gotcha/candidates": () => ["gotcha", "list", "--candidates"],
   "/api/stats": (q) => (q.since ? ["stats", "--since", String(q.since)] : ["stats"]),
   "/api/diy": () => ["diy", "show"],
   "/api/crosslink": () => ["crosslink", "list"],
@@ -511,17 +530,41 @@ const WRITES = {
       ["width", "--width"], ["precision", "--precision"],
       ["min_width", "--min-width"], ["min_cols", "--min-cols"],
       ["max_cols", "--max-cols"], ["priority", "--priority"],
+      // v2.0.4 — the design fields. Same rule: absent sends nothing, "" clears.
+      ["label_pos", "--label-pos"], ["value_pos", "--value-pos"],
+      ["caption", "--caption"], ["caption_pos", "--caption-pos"],
+      ["caption_align", "--caption-align"], ["caption_color", "--caption-color"],
+      ["caption_case", "--caption-case"], ["fill_color", "--fill-color"],
+      ["empty_color", "--empty-color"], ["ramp_colors", "--ramp-colors"],
+      ["ramp_stops", "--ramp-stops"], ["fill_char", "--fill-char"],
+      ["empty_char", "--empty-char"], ["brackets", "--brackets"],
+      ["threshold", "--threshold"], ["pad_left", "--pad-left"],
+      ["pad_right", "--pad-right"], ["align", "--align"], ["sign", "--sign"],
+      ["max_len", "--max-len"], ["unknown", "--unknown"],
+      ["color_by_state", "--state-color"], ["glyph_by_state", "--state-glyph"],
     ]) {
-      if (b[k] !== undefined && b[k] !== null && b[k] !== "") argv.push(f, String(b[k]));
+      // An absent key sends nothing; a PRESENT "" or null sends `<flag> ""`,
+      // which the CLI reads as "delete the key" (inherit). Dropping it made a
+      // clear "succeed" while it changed nothing.
+      if (b[k] === undefined) continue;
+      argv.push(f, b[k] === null ? "" : String(b[k]));
     }
     if (b.draw_empty) argv.push("--draw-empty");
+    // `params` is an OBJECT, one `--param k=v` per key. The CLI scans every
+    // `--param`, and `k=` (a null or "" value) deletes that key.
+    if (b.params && typeof b.params === "object")
+      for (const [k, v] of Object.entries(b.params)) argv.push("--param", String(k) + "=" + (v === null || v === undefined ? "" : String(v)));
     return argv.concat(slBoard(b));
   },
   "/api/statusline/move": (b) => ["statusline", "move", String(b.from), String(b.to), ...slBoard(b)],
   "/api/statusline/remove": (b) => ["statusline", "remove", String(b.at), ...slBoard(b)],
   "/api/statusline/line": (b) => {
     const argv = ["statusline", "line", String(b.line)];
-    if (b.separator !== undefined) argv.push("--separator", String(b.separator));
+    // A PRESENT key is forwarded even when it is "" — that is the clear.
+    for (const [k, f] of [["separator", "--separator"], ["prefix", "--prefix"], ["align", "--align"], ["sep_color", "--sep-color"]]) {
+      if (b[k] === undefined) continue;
+      argv.push(f, b[k] === null ? "" : String(b[k]));
+    }
     if (b.theme) argv.push("--theme", String(b.theme));
     if (b.max_width !== undefined) argv.push("--max-width", String(b.max_width));
     return argv.concat(slBoard(b));
@@ -548,6 +591,8 @@ const WRITES = {
   "/api/statusline/clone": (b) => ["statusline", "clone", String(b.at), ...slBoard(b)],
   "/api/statusline/reset": (b) => ["statusline", "reset", ...slBoard(b)],
   "/api/statusline/compile": (b) => ["statusline", "compile", ...slBoard(b)],
+  // v2.0.4 — the redraw timer: a settings write, not a layout op.
+  "/api/statusline/refresh": (b) => ["statusline", "refresh", String(b.seconds), ...slBoard(b)],
   "/api/wait/unblock": (b) => (b.slug ? ["wait", "unblock", String(b.slug)] : ["wait", "unblock"]),
   "/api/wait/cancel": (b) => (b.slug ? ["wait", "cancel", String(b.slug)] : ["wait", "cancel"]),
   "/api/wiki/sync": () => ["wiki", "sync"],
@@ -555,6 +600,16 @@ const WRITES = {
   "/api/graph/update": () => ["graph", "update"],
   "/api/wiki/usage/rebuild": () => ["wiki", "usage", "--rebuild"],
   "/api/gotcha/prune": () => ["gotcha", "prune"],
+  // v2.0.0 W7 — the Behaviour panel writes. FREE, local and reversible: each
+  // one changes `.claude/orc/habits-state.json` only (or promotes ONE gotcha
+  // candidate), and each is a person's click on a confirmation that names the
+  // command. `--by panel` is how the history says who made the change. The
+  // learning switch itself is `/api/config/set` — no second route for it.
+  "/api/habit/accept": (b) => ["habit", "accept", String(b.id), "--by", "panel"],
+  "/api/habit/decline": (b) => (b.never ? ["habit", "decline", String(b.id), "--never", "--by", "panel"] : ["habit", "decline", String(b.id), "--by", "panel"]),
+  "/api/habit/forget": (b) => ["habit", "forget", String(b.id), "--by", "panel"],
+  "/api/habit/reset": (b) => ["habit", "reset", String(b.id), "--by", "panel"],
+  "/api/gotcha/accept": (b) => ["gotcha", "accept", String(b.id)],
   "/api/pact/check": (b) => (b.id ? ["pact", "check", String(b.id)] : ["pact", "check"]),
   "/api/pact/sync": () => ["pact", "sync"],
   // The surface id, the key and the value all come from the browser — and all
@@ -810,6 +865,20 @@ const MAINTENANCE = {
     label: "Recompile AGENTS.md from the wiki, patterns, PACT.md and boundary cards",
     preview: ["export", "--check"],
   },
+  // v2.1.0 W7 — clear old logs. The preview is the CLI's own print mode, which
+  // names EVERY file it would delete and every file it keeps, with the reason
+  // (a count is not consent). The day value comes from config
+  // (`log_retention_days`): the panel sends only this id. `status` is the
+  // no-scan summary the row shows before any preview (days, last sweep).
+  "clear-logs": {
+    apply: ["clear", "logs", "--apply"],
+    restarts_ui: false,
+    label: "Delete finished traces and run folders older than log_retention_days (never user data, never a waiting run)",
+    preview: ["clear", "logs"],
+    status: ["clear", "logs", "--summary"],
+    names_files: true,
+    danger: true,
+  },
   // ADVANCED (v0.44.0) — the one action on this panel that does not target the
   // project. Every other route pins `--dir <projectRoot>`; `--global` outranks
   // `--dir` in `resolveClaudeDir`, so this pair reaches ~/.claude and its
@@ -1120,7 +1189,11 @@ async function handleApi(req, res, url, ctx) {
       try {
         body = await readBody(req);
       } catch (_) {}
-      const canned = fixtures.post(route, body);
+      // The staged preview has nothing to replay here, so it answers with the
+    // canned picture — the shape the panel reads, not "nothing ran".
+    if (route === "/api/statusline/stage-preview")
+      return json(res, 200, { ok: true, preview: fixtures.get("/api/statusline/preview", body), show: fixtures.get("/api/statusline/show", body) });
+    const canned = fixtures.post(route, body);
       if (canned)
         return json(res, 200, {
           ok: true,
@@ -1183,6 +1256,9 @@ async function handleApi(req, res, url, ctx) {
         names_files: !!m.names_files,
         advanced: !!m.advanced,
         restarts_ui: !!m.restarts_ui,
+        danger: !!m.danger,
+        // The CLI's own no-scan summary (v2.1.0 W7) — never a number the panel computes.
+        status: m.status ? readCli(m.status, ctx).data || null : null,
       }));
       return json(res, 200, { ok: true, exit_code: 0, data: { actions } });
     }
@@ -1200,6 +1276,7 @@ async function handleApi(req, res, url, ctx) {
           network: !!m.network,
           names_files: !!m.names_files,
           advanced: !!m.advanced,
+          danger: !!m.danger,
           // Said in the confirmation, not discovered afterwards. A panel that
           // reloads itself without warning reads as a crash.
           restarts_ui: !!m.restarts_ui,
@@ -1382,6 +1459,10 @@ async function handleApi(req, res, url, ctx) {
     return json(res, 200, { ok: true, ...started });
   }
 
+  // v2.0.4 — the staged preview. NOT a mutation of this project: it runs in a
+  // throwaway copy, so it neither waits on nor blocks a running job.
+  if (route === "/api/statusline/stage-preview") return json(res, 200, stagePreview(body, ctx));
+
   const build = WRITES[route];
   if (!build) return json(res, 404, { error: "unknown endpoint " + route });
   if (job && job.running) return json(res, 409, { error: "busy", job: jobView() });
@@ -1391,8 +1472,7 @@ async function handleApi(req, res, url, ctx) {
   } catch (_) {
     return json(res, 400, { error: "bad request body" });
   }
-  if (argv.some((a) => a === "undefined" || a === "null" || a === ""))
-    return json(res, 400, { error: "missing argument" });
+  if (!argvComplete(argv)) return json(res, 400, { error: "missing argument" });
   const out = runCli(argv, ctx);
   clearCache();
   // A write's exit code is a REAL failure signal (validators exit 1), unlike a
@@ -1406,6 +1486,71 @@ async function handleApi(req, res, url, ctx) {
   });
 }
 
+// A write's argv is complete when no element is a lost value. `""` is a real
+// value right after a `--flag` — it is how a v2.0.3 clear is spelled — and is
+// refused only as a positional, together with "undefined" and "null".
+function argvComplete(argv) {
+  return !argv.some((a, i) => {
+    if (a === "undefined" || a === "null") return true;
+    if (a !== "") return false;
+    const prev = argv[i - 1];
+    return !(typeof prev === "string" && prev.startsWith("--"));
+  });
+}
+
+// The files a board's layout lives in, under `.claude/orc/`. The CLI's own
+// names; only the AUTHORED file is copied — the rest is compiled from it.
+const SL_LAYOUT_FILE = { status: "statusline-layout.json", subagent: "subagent-layout.json" };
+
+// v2.0.4 — THE STAGED PREVIEW. The staged writes are replayed through the SAME
+// `WRITES` builders against a throwaway copy of this project's layout, then
+// the copy is previewed by the hook's own engine. Nothing touches the real
+// project, and the copy is always deleted.
+function stagePreview(body, ctx) {
+  const b = body || {};
+  const board = b.board === "subagent" ? "subagent" : "status";
+  const tmp = fs.mkdtempSync(path.join(os.tmpdir(), "orc-stage-"));
+  const sub = { ...ctx, projectRoot: tmp };
+  try {
+    const orcDir = path.join(tmp, ".claude", "orc");
+    fs.mkdirSync(orcDir, { recursive: true });
+    const src = path.join(ctx.projectRoot || "", ".claude", "orc", SL_LAYOUT_FILE[board]);
+    if (ctx.projectRoot && fs.existsSync(src)) fs.copyFileSync(src, path.join(orcDir, SL_LAYOUT_FILE[board]));
+    const actions = Array.isArray(b.actions) ? b.actions : [];
+    for (let i = 0; i < actions.length; i++) {
+      const a = actions[i] || {};
+      const route = String(a.route || "");
+      const build = route.startsWith("/api/statusline/") ? WRITES[route] : null;
+      let argv = null;
+      try {
+        argv = build ? build(Object.assign({}, a.body || {}, { board: board })) : null;
+      } catch (_) {
+        argv = null;
+      }
+      if (!argv || !argvComplete(argv)) return { ok: false, failed: { index: i, output: "refused: " + route } };
+      const out = runCli(argv, sub);
+      if (out.exit_code !== 0)
+        return { ok: false, failed: { index: i, output: (out.stdout + (out.stderr ? chr10 + out.stderr : "")).trim() } };
+    }
+    const q = { board };
+    if (b.width) q.width = b.width;
+    if (b.state) q.state = b.state;
+    if (b.frames) q.frames = b.frames;
+    if (b.frame_ms) q.frame_ms = b.frame_ms;
+    const preview = runCli(READS["/api/statusline/preview"](q), sub, { json: true });
+    const show = runCli(READS["/api/statusline/show"](q), sub, { json: true });
+    return { ok: true, preview: preview.data, show: show.data };
+  } finally {
+    rmTree(tmp);
+  }
+}
+
+function rmTree(dir) {
+  try {
+    fs.rmSync(dir, { recursive: true, force: true });
+  } catch (_) {}
+}
+
 // `orc upgrade` replaces the package while your working tree may hold changes.
 // Worth a warning before, not a surprise after.
 function isDirtyTree(ctx) {
@@ -1422,4 +1567,4 @@ function isDirtyTree(ctx) {
   }
 }
 
-module.exports = { handleApi, clearCache, encodeBody, READS, WRITES, MAINTENANCE };
+module.exports = { handleApi, clearCache, encodeBody, READS, WRITES, MAINTENANCE, argvComplete, stagePreview };