@cruxy/cli 1.2.1 → 1.3.0

package/dist/tui/approval-overlay.js

@@ -0,0 +1,160 @@
+/**
+ * The approval prompt as an in-viewport modal (P5 track 2).
+ *
+ * Before this, the prompt was the one thing in the TUI that could not be drawn:
+ * it wrote to stderr, so the renderer's only way to keep those bytes legible was
+ * to clear the entire shell for the duration. You answered "may I overwrite
+ * this file?" with the diff, the conversation, and the file's own name gone from
+ * the screen. The question survived; everything that made it answerable did not.
+ *
+ * Nothing about the prompt's LOGIC changes here — `promptForApproval` still
+ * renders the same bytes, reads the same 4-way choice, and default-denies on
+ * anything unrecognized. Only the surface moves: `write` composes overlay rows
+ * instead of terminal bytes, and the reads come from the session's key lease
+ * rather than a reader of their own.
+ *
+ * The displaced-state latch is untouched and still lives in the renderer:
+ * `beginPrompt` sets `awaiting-approval` (stashing the phase and its clock) and
+ * `endPrompt` calls `promptResolved` to put them back. That part was already
+ * correct — this only stops the phase from meaning "blank the screen".
+ */
+/**
+ * Build a {@link PromptIO} that draws into the TUI's overlay drawer.
+ *
+ * The write model is append-and-recompose, which is what lets the existing
+ * prompt code run unmodified: `promptForApproval` emits its block, then a
+ * newline, then possibly a follow-up label, treating `write` as a terminal that
+ * remembers. Buffering the whole transcript and re-splitting it on every write
+ * gives exactly that behaviour without the prompt knowing it is in a modal.
+ */
+export function createOverlayPromptIO(surface, lease, color) {
+    /** Everything the prompt has written this interaction, verbatim. */
+    let transcript = "";
+    /** The line being typed into a `readLine` follow-up, if one is open. */
+    let typing = null;
+    /** This interaction's claim on the shared reader; null while none is open. */
+    let keys = null;
+    const paint = () => {
+        // A trailing "\n" from the prompt means "that line is done", not "add a
+        // blank row" — `split` would produce an empty last element and the drawer
+        // would grow a dead row under the choices.
+        const body = transcript.replace(/\n$/, "");
+        const rows = body === "" ? [] : body.split("\n");
+        // The caret is drawn, not moved: the frame parks the real cursor after the
+        // last painted row so a repaint can erase upward, exactly as the input row
+        // does. An invisible cursor in a text field reads as a hang, so the field
+        // always shows where the next character lands.
+        if (typing !== null) {
+            rows[Math.max(0, rows.length - 1)] =
+                `${rows[rows.length - 1] ?? ""}${typing}▏`;
+        }
+        surface.setOverlay(rows);
+    };
+    return {
+        color,
+        // The drawer spans the viewport, so the prompt reflows against the width it
+        // is actually painted at — not stderr's, which is what it measured when it
+        // was writing to stderr.
+        get columns() {
+            return surface.overlayWidth();
+        },
+        beginPrompt() {
+            transcript = "";
+            typing = null;
+            // Borrow the session's reader. When the input loop is between lines this
+            // is the first claim and enters raw mode; when a modal is opened from
+            // inside a read it is a no-op on a terminal already in raw mode.
+            keys = lease.handle();
+            keys.begin();
+        },
+        endPrompt() {
+            // Take the drawer down and hand the reader back on EVERY path, including
+            // a default-deny on EOF. A modal that yields nothing back leaves the
+            // conversation permanently short a few rows.
+            surface.setOverlay(null);
+            transcript = "";
+            typing = null;
+            keys?.restore();
+            keys = null;
+        },
+        write(text) {
+            transcript += text;
+            paint();
+        },
+        async readKey() {
+            const key = await read(keys);
+            return keyToChar(key);
+        },
+        /**
+         * The follow-up line for `n` (reason) and `t` (instruction), edited in the
+         * drawer. Append-only plus backspace: this is a one-line reason field, not
+         * the input row, and cursor movement inside it would be the first thing to
+         * need a second editor implementation for no user-visible gain.
+         *
+         * Escape and Ctrl-C resolve "" — which `promptForApproval` reads as "no
+         * reason given", collapsing `instruct` to a plain reject. Backing out of the
+         * reason field can only ever make the decision MORE conservative.
+         */
+        async readLine() {
+            typing = "";
+            paint();
+            try {
+                for (;;) {
+                    const key = await read(keys);
+                    switch (key.kind) {
+                        case "enter":
+                            return typing;
+                        case "eof":
+                        case "ctrl-c":
+                        case "escape":
+                            return "";
+                        case "backspace":
+                            if (typing.length > 0)
+                                typing = typing.slice(0, -1);
+                            break;
+                        case "char":
+                            typing += key.char;
+                            break;
+                        default:
+                            // Arrows and tab: inert rather than leaking a control char into
+                            // text that is sent verbatim to the agent.
+                            break;
+                    }
+                    paint();
+                }
+            }
+            finally {
+                typing = null;
+                paint();
+            }
+        },
+    };
+}
+/**
+ * Read one key, or EOF when no reader is open.
+ *
+ * A read outside a `beginPrompt`/`endPrompt` bracket is a wiring bug, and EOF is
+ * the only safe answer to it: the prompt maps EOF to default-deny, so the
+ * failure mode is a refused action rather than a hang or an approval nobody gave.
+ */
+async function read(keys) {
+    if (keys === null)
+        return { kind: "eof" };
+    return keys.read();
+}
+/**
+ * The {@link PromptIO.readKey} contract, matching `readSingleKey` exactly: the
+ * printable character, `"\n"` for enter, and `""` for everything that means "no
+ * answer" — so the prompt's default-deny mapping is identical in the drawer and
+ * on a bare terminal.
+ */
+function keyToChar(key) {
+    switch (key.kind) {
+        case "char":
+            return key.char;
+        case "enter":
+            return "\n";
+        default:
+            return "";
+    }
+}

package/dist/tui/context-gauge.js

@@ -0,0 +1,48 @@
+import { readContext } from "../agent/context.js";
+/**
+ * The rail's context-window reading (P4 track 3) — the memoized, TUI-side half.
+ *
+ * The measurement itself moved to `agent/context.ts` in P6 track 3, so the
+ * panel, `/context` and the compaction seam all read one implementation. What
+ * stays here is the only thing that was ever TUI-specific: the memo.
+ *
+ * `estimateTokens` walks every block of every message, so it is O(history) — a
+ * full-window conversation is ~400k characters to scan. The rail repaints at
+ * ~30fps, so sampling on the paint path would scan that history thirty times a
+ * second to produce a number that only changes when a message is added.
+ *
+ * So the read and the walk are separated, the same shape as `GitStatusCache`:
+ * {@link current} is a field read the paint path may call freely, and
+ * {@link sample} does the walk at the seams where the history can actually have
+ * changed.
+ *
+ * WHERE THE NUMBER COMES FROM, and where it deliberately does NOT: see
+ * `agent/context.ts`. The short version is that `Session.usage` is the wrong
+ * source — it sums input+output across every `send` and never decreases, not
+ * even when compaction frees the window it is supposed to describe.
+ */
+export { readContext, } from "../agent/context.js";
+/** A memoized context reading. */
+export class ContextGauge {
+    source;
+    budget;
+    value;
+    constructor(source, budget) {
+        this.source = source;
+        this.budget = budget;
+    }
+    /** The last sampled reading; `undefined` before the first sample. */
+    current() {
+        return this.value;
+    }
+    /** Re-measure the history. Cheap enough at a turn or tool boundary, not per frame. */
+    sample() {
+        try {
+            this.value = readContext(this.source(), this.budget);
+        }
+        catch {
+            // A source that throws (a session torn down mid-turn) keeps the previous
+            // reading rather than blanking a panel that was correct a moment ago.
+        }
+    }
+}

package/dist/tui/git-status.js

@@ -0,0 +1,63 @@
+import { getGitInfoAsync } from "../utils/git.js";
+export class GitStatusCache {
+    cwd;
+    probe;
+    value = undefined;
+    /** Set by {@link invalidate}; cleared once a refresh has actually settled. */
+    stale = true;
+    /** The refresh in flight, so concurrent triggers share one probe. */
+    inFlight = null;
+    constructor(cwd, probe = getGitInfoAsync) {
+        this.cwd = cwd;
+        this.probe = probe;
+    }
+    /**
+     * The last known state — a plain field read, safe from the paint path. Never
+     * probes, never blocks, and never lies about freshness: a stale value is the
+     * previous truth, which is a better answer than a stalled frame.
+     */
+    current() {
+        return this.value;
+    }
+    /**
+     * Mark the working tree as possibly changed. Cheap and idempotent — call it
+     * from every seam that could have written a file; the coalescing in
+     * {@link refresh} makes over-calling free.
+     */
+    invalidate() {
+        this.stale = true;
+    }
+    /**
+     * Re-probe if stale, and resolve once the value has settled.
+     *
+     * Concurrent callers share the in-flight probe rather than starting their own:
+     * a turn that writes ten files fires ten invalidations, and those must not
+     * become ten `git status` runs.
+     */
+    async refresh() {
+        if (!this.stale)
+            return;
+        if (this.inFlight)
+            return this.inFlight;
+        // Cleared BEFORE awaiting, so a write landing mid-probe re-marks it and the
+        // next refresh runs again. Clearing after would swallow that invalidation
+        // and leave the panel showing a tree that has already moved on.
+        this.stale = false;
+        this.inFlight = this.run();
+        try {
+            await this.inFlight;
+        }
+        finally {
+            this.inFlight = null;
+        }
+    }
+    async run() {
+        try {
+            this.value = await this.probe(this.cwd);
+        }
+        catch {
+            // A probe that throws is unknown, not "not a repo" — keep the last known
+            // value rather than downgrading the panel on a transient failure.
+        }
+    }
+}

package/dist/tui/index.js

@@ -0,0 +1,10 @@
+export { budgetColumns, bodyRows, columnOf, composeScreen, droppedForWidth, fitBlock, padTo, railOpen, stackPanels, CHROME_ROWS, CLOSABLE_PANELS, GUTTER, MIN_MAIN_COLS, RAIL_COLS, RAIL_PANELS, SIDEBAR_COLS, } from "./layout.js";
+export { COLUMN_LABELS, PANEL_LABELS, contextPanelLines, gitPanelLines, headerModel, modelPanelLines, mainWelcome, railBlocks, sidebarLines, toolsPanelLines, } from "./panels.js";
+export { ContextGauge, readContext, } from "./context-gauge.js";
+export { ToolVersions, parseVersion, } from "./tool-versions.js";
+export { GitStatusCache, } from "./git-status.js";
+export { TuiRenderer, PAINT_INTERVAL_MS, SCROLLBACK_LINES, } from "./renderer.js";
+export { runTui, renderInput, TUI_COMMANDS } from "./app.js";
+export { openPalette, paletteItems, paletteInsertion, paletteLabel, } from "./palette.js";
+export { canOverlay, createKeyLease, createOverlayFrame, createOverlayIO, } from "./overlay.js";
+export { supportsTui } from "./supports.js";

package/dist/tui/layout.js

@@ -0,0 +1,269 @@
+import { fit, visibleWidth } from "../render/layout.js";
+export const RAIL_PANELS = [
+    "context",
+    "model",
+    "git",
+    "tools",
+];
+export const CLOSABLE_PANELS = ["sidebar", ...RAIL_PANELS];
+/** Which column a panel is drawn in — the bridge between the two identities. */
+export function columnOf(panel) {
+    return panel === "sidebar" ? "sidebar" : "rail";
+}
+/** True when any rail panel is open, i.e. the rail column should be budgeted. */
+export function railOpen(open) {
+    return RAIL_PANELS.some((p) => open.has(p));
+}
+/** Fixed column widths; `main` takes whatever is left. */
+export const SIDEBAR_COLS = 18;
+/**
+ * 24, not the 20 P1 shipped.
+ *
+ * The rail's widest real content is a git branch name, and 20 could not hold
+ * one: `feat/p3-test-results` is exactly 20 columns before the marker glyph and
+ * change count the git panel has to put beside it. Every line here is hard
+ * truncated by {@link padTo}, so the branch — the part that identifies WHERE the
+ * work is happening — was the first thing to be cut.
+ *
+ * The cost is 4 columns off `main`, and it is affordable at the size that
+ * matters: at an 80-column terminal `main` goes 40 → 36, still comfortably over
+ * {@link MIN_MAIN_COLS}. Below that the rail was already being dropped whole.
+ */
+export const RAIL_COLS = 24;
+/** One blank column between adjacent panels. */
+export const GUTTER = 1;
+/** Below this, `main` is too cramped to read and a side column is dropped. */
+export const MIN_MAIN_COLS = 24;
+/** Rows the chrome costs: header + rule + (body) + rule + status + input. */
+export const CHROME_ROWS = 5;
+/** Below this height there is no room for a body; the shell collapses. */
+export const MIN_BODY_ROWS = 1;
+/**
+ * Resolve column widths for an inner width, honoring what the user has open.
+ * Degrades the same way the status line does (U.12) — shed context, keep the
+ * thing that carries meaning:
+ *
+ * - wide: sidebar + main + rail
+ * - medium: drop the rail, keep sidebar + main
+ * - narrow: main only
+ *
+ * A dropped column returns 0 — the caller distinguishes "closed by the user"
+ * from "dropped for width" via {@link droppedForWidth}, so the TUI can say so
+ * rather than silently losing a panel the user opened.
+ */
+export function budgetColumns(width, open) {
+    const wantSidebar = open.has("sidebar");
+    const wantRail = railOpen(open);
+    const gutters = (n) => Math.max(0, n - 1) * GUTTER;
+    if (wantSidebar && wantRail) {
+        const fixed = SIDEBAR_COLS + RAIL_COLS + gutters(3);
+        if (width - fixed >= MIN_MAIN_COLS) {
+            return { sidebar: SIDEBAR_COLS, main: width - fixed, rail: RAIL_COLS };
+        }
+    }
+    const single = wantSidebar ? SIDEBAR_COLS : wantRail ? RAIL_COLS : 0;
+    if (single > 0) {
+        const fixed = single + gutters(2);
+        if (width - fixed >= MIN_MAIN_COLS) {
+            return {
+                sidebar: wantSidebar ? SIDEBAR_COLS : 0,
+                main: width - fixed,
+                rail: wantSidebar ? 0 : RAIL_COLS,
+            };
+        }
+    }
+    return { sidebar: 0, main: Math.max(1, width), rail: 0 };
+}
+/**
+ * COLUMNS the user has open but the current width cannot fit — the honest
+ * complement to {@link budgetColumns}. The TUI surfaces these rather than
+ * letting a column vanish with no explanation.
+ *
+ * Reported per column, not per panel: width is a column-level budget, so four
+ * open rail panels losing their column is one fact, not four. Callers map a
+ * panel to its column with {@link columnOf}. The vertical mirror of this is
+ * {@link stackPanels}, which reports what a column's HEIGHT could not fit.
+ */
+export function droppedForWidth(budget, open) {
+    const dropped = [];
+    if (open.has("sidebar") && budget.sidebar === 0)
+        dropped.push("sidebar");
+    if (railOpen(open) && budget.rail === 0)
+        dropped.push("rail");
+    return dropped;
+}
+/** Rows available to the body at a given terminal height (at least 1). */
+export function bodyRows(height) {
+    return Math.max(MIN_BODY_ROWS, height - CHROME_ROWS);
+}
+/**
+ * Truncate to exactly `width` visible columns and pad with spaces to fill it.
+ * Column joining needs every cell to be the SAME visible width or the grid
+ * shears — `fit` alone only guarantees the upper bound.
+ */
+export function padTo(text, width) {
+    if (width <= 0)
+        return "";
+    const clipped = fit(text, width);
+    return clipped + " ".repeat(Math.max(0, width - visibleWidth(clipped)));
+}
+/**
+ * Take the LAST `rows` lines of a panel's content and pad the block to exactly
+ * that many rows. Last-N (not first-N) because a SCROLLING panel is a tail view:
+ * the newest conversation line, the newest session, matter most.
+ *
+ * That rule is right for `main` and the sidebar and WRONG for the rail, which is
+ * a stack of fixed panels rather than a feed — see {@link stackPanels}. Do not
+ * reach for this to fit the rail.
+ */
+export function fitBlock(lines, rows, width) {
+    const tail = lines.length > rows ? lines.slice(lines.length - rows) : lines;
+    const out = tail.map((l) => padTo(l, width));
+    while (out.length < rows)
+        out.push(" ".repeat(Math.max(0, width)));
+    return out;
+}
+/** Rows the overflow notice costs when at least one panel is dropped. */
+const OVERFLOW_ROWS = 1;
+/**
+ * The overflow notice: how many panels the height could not hold. Kept short
+ * enough to survive {@link RAIL_COLS} after truncation.
+ */
+function overflowNotice(count, theme) {
+    return theme.muted(`${theme.glyph.ellipsis}${count} more panel${count === 1 ? "" : "s"}`);
+}
+/**
+ * Stack fixed panels TOP-DOWN into a row budget, reporting what did not fit.
+ *
+ * This is the vertical mirror of {@link droppedForWidth}, and it exists because
+ * {@link fitBlock} is actively wrong here. `fitBlock` keeps the LAST N rows —
+ * correct for a feed, but applied to a stack of fixed panels it eats the TOP of
+ * the rail first. Below roughly 19 body rows that silently deleted the context
+ * panel: no marker, no notice, a panel the user had open simply absent. A panel
+ * must never vanish without saying so — the same rule `droppedForWidth` enforces
+ * across the other axis.
+ *
+ * Panels are placed whole or not at all. A half-drawn gauge or a title with its
+ * body cut off reads as a rendering bug, and worse, reads as DATA — a context
+ * meter clipped to its first row looks like a real (wrong) number. Dropping it
+ * and counting it is the honest failure.
+ *
+ * One blank separator row sits between adjacent panels, and is charged for here
+ * rather than baked into each block, so a panel's own height stays its own
+ * business.
+ */
+export function stackPanels(blocks, rows, theme) {
+    if (rows <= 0) {
+        return { lines: [], dropped: blocks.map((b) => b.id) };
+    }
+    // Cost of placing the first `n` blocks: their heights plus the separators
+    // between them. Computed against the same rule the placement loop uses, so
+    // the "does everything fit" test below cannot drift from the loop.
+    const costOf = (n) => blocks
+        .slice(0, n)
+        .reduce((sum, b, i) => sum + b.lines.length + (i > 0 ? 1 : 0), 0);
+    // Everything fits: no notice row, nothing dropped, no budget games.
+    const fitsWhole = costOf(blocks.length) <= rows;
+    // Otherwise the notice itself needs a row, and it must be paid for BEFORE
+    // deciding what fits — reserving it afterwards could push out a panel that
+    // the user was just told fit.
+    const budget = fitsWhole ? rows : rows - OVERFLOW_ROWS;
+    // The longest PREFIX that fits. Not a best-fit pack: skipping a tall panel to
+    // squeeze in a shorter one below it would reorder the rail, and the order is
+    // meaningful — it is the order the user reads, and the order `/help` lists.
+    let placed = 0;
+    while (placed < blocks.length && costOf(placed + 1) <= budget)
+        placed++;
+    const lines = [];
+    for (let i = 0; i < placed; i++) {
+        if (i > 0)
+            lines.push("");
+        lines.push(...blocks[i].lines);
+    }
+    const dropped = blocks.slice(placed).map((b) => b.id);
+    if (dropped.length > 0)
+        lines.push(overflowNotice(dropped.length, theme));
+    return { lines, dropped };
+}
+/**
+ * Body rows an overlay may occupy at a given height — its budget, so a caller
+ * can fit its own content to the drawer instead of discovering the truncation.
+ * Always leaves at least one row to the columns: an overlay never blanks the
+ * conversation the way the old full-frame clear did.
+ */
+export function overlayRows(height) {
+    return Math.max(0, bodyRows(height) - 1);
+}
+/**
+ * Fit overlay content to `rows`, keeping the FIRST row and the tail.
+ *
+ * A safety net, not the fitting strategy: {@link overlayRows} publishes the
+ * budget and callers are expected to compose within it. When one does not, this
+ * keeps the two rows a modal cannot lose — row 0 (its identity: what is being
+ * asked, and at what risk) and the last rows (what the user can press) — rather
+ * than the plain tail every feed-shaped block here uses. A drawer is not a feed.
+ */
+export function fitOverlay(lines, rows) {
+    if (rows <= 0)
+        return [];
+    if (lines.length <= rows)
+        return lines;
+    if (rows === 1)
+        return [lines[0]];
+    return [lines[0], ...lines.slice(lines.length - (rows - 1))];
+}
+/** Compose the header row: left flush, right flush, dropped when it won't fit. */
+function headerRow(vm, width, theme) {
+    const left = theme.strong(theme.accent(fit(vm.headerLeft, width)));
+    const leftW = visibleWidth(fit(vm.headerLeft, width));
+    const room = width - leftW - 2;
+    if (room < 8 || vm.headerRight === "")
+        return padTo(left, width);
+    const right = fit(vm.headerRight, room);
+    const gap = width - leftW - visibleWidth(right);
+    return left + " ".repeat(Math.max(1, gap)) + theme.muted(right);
+}
+/**
+ * Compose the full screen: exactly `height` rows, each at most `width` visible
+ * columns. The caller hands these straight to the transient frame.
+ *
+ * Every row is padded to the full width so a repaint fully overwrites the row
+ * beneath it — a short row would leave the previous paint's tail on screen.
+ */
+export function composeScreen(vm, width, height, open, theme) {
+    const budget = budgetColumns(width, open);
+    const rows = bodyRows(height);
+    // The rule follows the theme's unicode axis (U.1) like every other glyph —
+    // a box-drawing dash would mojibake on a CRUXY_ASCII / dumb terminal.
+    const rule = theme.muted((theme.unicode ? "─" : "-").repeat(Math.max(0, width)));
+    // An overlay is a drawer: it takes rows from the BOTTOM of the body and the
+    // columns render into what is left. The columns keep at least one row, so a
+    // modal never blanks the conversation behind it.
+    const drawer = fitOverlay(vm.overlay ?? [], overlayRows(height));
+    const columnRows = Math.max(1, rows - drawer.length);
+    const columns = [];
+    if (budget.sidebar > 0)
+        columns.push(fitBlock(vm.sidebar, columnRows, budget.sidebar));
+    columns.push(fitBlock(vm.main, columnRows, budget.main));
+    if (budget.rail > 0)
+        columns.push(fitBlock(vm.rail, columnRows, budget.rail));
+    const body = [];
+    for (let r = 0; r < columnRows; r++) {
+        body.push(columns.map((c) => c[r]).join(" ".repeat(GUTTER)));
+    }
+    // Padded to the full width like every other row: the grid shears otherwise,
+    // and a short overlay row would leave stale column bytes to its right.
+    for (const line of drawer)
+        body.push(padTo(line, width));
+    const screen = [
+        headerRow(vm, width, theme),
+        rule,
+        ...body,
+        rule,
+        padTo(vm.status === "" ? "" : theme.muted(vm.status), width),
+        padTo(vm.input, width),
+    ];
+    // A terminal shorter than the chrome itself: keep the last `height` rows, so
+    // the input line — the only row the user can act on — always survives.
+    return screen.length > height ? screen.slice(screen.length - height) : screen;
+}

package/dist/tui/overlay.js

@@ -0,0 +1,105 @@
+import { createKeyReader, } from "../components/input.js";
+/**
+ * Build the lease over one real reader.
+ *
+ * `restore()` is idempotent PER HANDLE, not just in aggregate: a component that
+ * calls it twice in a `finally` must not decrement the count twice and yank the
+ * terminal out from under the loop that lent it.
+ */
+export function createKeyLease(stdin) {
+    const reader = createKeyReader(stdin);
+    let holders = 0;
+    return {
+        handle() {
+            let mine = false;
+            return {
+                begin() {
+                    if (mine)
+                        return;
+                    mine = true;
+                    if (holders++ === 0)
+                        reader.begin();
+                },
+                read() {
+                    return reader.read();
+                },
+                restore() {
+                    if (!mine)
+                        return;
+                    mine = false;
+                    if (--holders === 0)
+                        reader.restore();
+                },
+            };
+        },
+        held: () => holders > 0,
+    };
+}
+/**
+ * A {@link Frame} that paints into the renderer's overlay drawer instead of the
+ * terminal. Same contract as `components/frame.ts` — render replaces the
+ * region, `clear()` removes it entirely and is idempotent — so a component
+ * cannot tell the difference, and the `finally { frame.clear() }` every one of
+ * them already has is what takes the drawer back down.
+ */
+export function createOverlayFrame(surface) {
+    let cleared = false;
+    return {
+        render(lines) {
+            if (cleared)
+                return;
+            surface.setOverlay(lines);
+        },
+        clear() {
+            if (cleared)
+                return;
+            cleared = true;
+            surface.setOverlay(null);
+        },
+    };
+}
+/**
+ * A {@link ComponentIO} that runs a component inside the TUI viewport: frames
+ * become overlay rows, keys come from the shared lease.
+ *
+ * `caps` is a LIVE view, not a snapshot. The real capabilities object is mutated
+ * in place on SIGWINCH, and the drawer's usable width and height are both
+ * derived from it, so these have to be getters — a spread would freeze the
+ * overlay at the width it was opened with and every row would be fitted to a
+ * terminal that no longer exists. (Content composed before a resize is not
+ * re-flowed until the component's next repaint; the renderer pads and truncates
+ * every row it paints, so the intermediate frame is stale, never corrupt.)
+ *
+ * `write` is deliberately a sink. Components emit frame bytes through the frame
+ * and nothing else; anything that did reach here would be raw ANSI landing in
+ * the middle of a managed screen, so dropping it is the honest behaviour rather
+ * than forwarding corruption to the terminal.
+ */
+export function createOverlayIO(surface, lease) {
+    const host = surface.caps;
+    const caps = {
+        ...host,
+        get width() {
+            return surface.overlayWidth();
+        },
+        get height() {
+            return surface.overlayRows();
+        },
+    };
+    return {
+        caps,
+        interactive: host.interactive,
+        write: () => { },
+        keys: lease.handle(),
+        makeFrame: () => createOverlayFrame(surface),
+    };
+}
+/**
+ * Whether the screen can host a modal at all. A terminal too short for a drawer
+ * leaves {@link OverlaySurface.overlayRows} at 0, and a component painting into
+ * zero rows would read as a hang — the prompt never appears, the key loop still
+ * blocks. Callers check this and fall back to a non-overlay path instead.
+ */
+export function canOverlay(surface) {
+    return surface.caps.interactive && surface.overlayRows() > 0;
+}