@groeponline/pi-wishcraft 1.2.0 → 1.3.1

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## [Unreleased]
 
+## [1.3.1] - 2026-08-25
+
+### Fixed
+- Make protected-main releases promote only an exact bot-generated candidate SHA after its own canonical `Verify` check succeeds.
+- Keep `package-lock.json` version metadata synchronized with release commits and resolve the dev-only `nanoid` advisory at 3.3.18.
+
+## [1.3.0] - 2026-08-25
+
 ## [1.2.0] - 2026-08-24
 
 ### Changed

package/ROADMAP.md

@@ -1,208 +1,146 @@
 # Roadmap — pi-wishcraft
 
-Herschreven 2026-08-18. Vijfde pass 2026-08-20: 0.19.0–0.19.2 staan
-op npm. CHE-40 (`/powerline` tab) is Done via #18. Overlay-submenus
-(CHE-42 / #19) starten 0.20. ROADMAP was achter op de code: hooks,
-repairs-subset en skills-manager v2 UI zitten al op `main`.
-
-Pi core is de engine. Wishcraft is de cockpit. Elke feature dient één van
-drie doelen: **grip** (skills, tokens, config), **prestatie** (repairs,
-hooks, read-hints), of **leven** (overlays, vibes, detail views).
-
-Elke release is één campagne met een done-criterium. P1 = deze release,
-P2 = volgende, P3 = richting 1.0. Wat in 0.19 staat, shipt. Wat later
-staat, start niet eerder.
-
----
-
-## Waarom wij bestaan
-
-De pi-extensiewereld heeft statusbalken. Ze heeft geen cockpit.
-
-**Upstream `nicobailon/pi-powerline-footer`** is een goede balk: git,
-context, stash, compaction-queue, vibes, welcome, bash-mode. Wij zijn
-daaruit gegroeid. Wat zij niet hebben, en wat onze publieke identiteit
-is:
-
-| Wij | Zij / de rest |
-|---|---|
-| Skills als OS: `/skills`, inline `/$`, usage, later doctor | Geen skill-manager |
-| Idee → actie: `#`, `/idea`, `/ideas`, `/ideas issue` | Alleen compaction-hold queue |
-| Eerlijke TPS: 1s-venster over 5s-ring, in/out gescheiden | Session-average of helemaal niks |
-| Tab-token completion + git ahead/behind | Niet of later |
-| Harness-laag (0.20): hooks + tool-input repairs op stock pi | Nergens in het extensie-ecosysteem |
-
-**oh-my-pi** is een hele agent-fork (~80k regels Rust-core, eigen tools,
-LSP, DAP). Dat is een ander product. Wij forken Mario's pi niet. Alles
-wat we willen van oh-my-pi vertalen we naar een extensie of we laten het
-liggen. De weddenschap: de beste cockpit op stock pi wint van een
-tweede engine.
-
-**Command Code** is een commerciële harness (hooks, tool-call repairs,
-read-tool engineering). Hun inzicht klopt: open modellen falen op het
-contract, niet op "slimheid". Wij kopiëren hun product niet. We gieten
-dezelfde principes in wat Pi al native biedt:
-
-- `pi.on("tool_call")` — `event.input` is mutable; `block` + `reason` +
-  `terminate` bestaan (`pi-coding-agent` 0.84.x
-  `dist/core/extensions/types.d.ts`).
-- `pi.on("tool_result")` — resultaat muteren.
-- `pi.on("session_start" | "input" | "turn_end")`.
-
-Geen core-patch. Geen tweede agent. Iedereen die `pi` draait kan de
-cockpit + harness installeren.
-
-**ChefGroep** (ChefBar-statuskeys, fleet-ports) is een privé-bonus, niet
-de publieke pitch. De npm-pagina moet leesbaar zijn voor iemand die pi
-gisteren installeerde.
-
-Kort: **wij zijn de cockpit + harness voor stock pi.** Niet de balk.
-Niet de fork. Niet de SaaS-agent.
-
----
-
-## Wat wij niet worden
-
-- Geen agent-fork. Geen oh-my-pi-lite.
-- Geen derde control surface naast ChefBar / Kater. Overlays blijven in
-  deze extensie.
-- Geen muis op de live footer. Pi core bezit die; overlay-navigatie is
-  het pad.
-- Geen eigen bulk-read tool. Core's verantwoordelijkheid; wij leveren
-  repairs + hints eromheen.
-- Geen PostHog in de balk. Events alleen op expliciete Joep-opt-in.
-- Geen custom embed/component-registratie voor footer-segments.
-  Segments zijn data; `customItems` + `command/env/static` dekken
-  gebruikerscontent.
-- Geen skills-markt als identiteit vóór 1.0. Eerst discovery die klopt
-  en een manager die zoekt.
-- Geen fleet-SSH `open_ports` zonder expliciete opt-in (`segmentOptions.openPorts.host`; sanitized, geen shell-injectie).
-- Geen versie-reset naar 1.0.0. We blijven op 0.19 → 0.20 → 1.0 wanneer
-  de cockpit stabiel is.
-
----
-
-## Mijlpalen
-
-- **0.19.0–0.19.2 — "Correctheid"** (geland). Bugs, hygiëne, catalogus,
-  auto-release, `/powerline` tab. Hooks, repairs-subset en skills
-  manager v2 UI gingen mee in #12, eerder dan deze sectie beloofde.
-  Done = npm 0.19.2 live, `/skills` filtert, `$test` expandeert geen
-  debris, verify-trio groen op de tag.
-- **0.20.0–0.22 — "Harness"** (0.20.0 + 0.21.0 op npm; leftovers in GRO-1414).
-  Overlay-chrome + CHE-42 drill-down, Configure als SelectList, token-overlays,
-  rest-repairs, README-hooks. Done = drie README-hookvoorbeelden, repair-teller,
-  `alt+p` overlay-boom, `/tps` deelt de ring met het segment.
-- **1.0 — "Cockpit"**. Skills-doctor/install, declaratieve policy,
-  preset-editor, idee-review, stabiele ChefGroep-statuskeys,
-  documentatie die waar is. Done = README dekt alles wat we shipten,
-  geen kapotte footer-belofte.
-- **vNext — "Operator Layer"** (in uitvoering). Stacked PRs PR0–PR8:
-  Deck control surface (`ctx.ui.custom`), animated Signal powerline,
-  zero-overhead Motion Engine (0 FPS idle), 10 signature structural presets,
-  semantische tokens, en first-class accessibility (`NO_COLOR`, reduced motion).
-  Zie [docs/design/vnext-release-plan.md](docs/design/vnext-release-plan.md).
-  - PR0 design corpus — geland (`docs/design/`).
-  - PR1 motion engine — geland (`src/motion/`): één scheduler op de bestaande
-    coalescing timer, semantische events, 6 channels, 0 FPS zonder consumers.
-  - PR2 semantic tokens — geland (`src/config/tokens.ts`): `PresetDef.tokens`
-    is optioneel en `DEFAULT_TOKENS` reproduceert `getDefaultColors()`.
-  - PR3 structural presets — geland (`src/config/structural-presets.ts`,
-    `src/config/appearance.ts`): 10 signature presets, mixable layers, Nerd/ASCII
-    glyph fallbacks; legacy layout presets ongewijzigd.
-  - PR4 animated Signal — geland (`src/signal/`): drie lanes, lifecycle-driven
-    motion op één gedeelde scheduler, `/signal` primair en 0 FPS in rust.
-  - PR5 Deck — geland (`src/extension/ui/deck/`): unified overlay via
-    `ctx.ui.custom`, Alt+P en `/wishcraft`, elf routes, jump/search navigatie.
-  - PR6 Appearance / Gallery — geland: Deck Motion gallery + composer,
-    50+ catalog defs, Enter assigns `powerline.appearance.motion`.
-  - PR7 accessibility — geland: `src/theme/detect.ts`,
-    `src/motion/accessibility.ts`, `powerline.motionLevel`.
-  - PR8 Craft + docs — geland: Deck Skill Workbench, idea/guardrail panes,
-    `skills/wishcraft-tui/references/*`, project subagents.
-
-## Top-15 track: remaining maturity gaps
-
-Written 2026-08-20, rebaselined on 0.27.1 (code review, not this ROADMAP
-alone). Feature density is high; several original gaps closed in
-0.23–0.27. What remains is the maturity layer that separates a top-15 pi
-extension from a feature-rich prototype.
-
-### Already shipped (0.22.x–0.27.x)
-- **CHE-41 per-segment detail** — `→` in Navigate, snapshot on open (0.22.1).
-- **CHE-42 drill-down** — #19 + Configure in #13.
-- **Changelog roll** — version headers drive the what's-new panel.
-- **Per-segment fault isolation** — throwing custom segments show `!id`
-  instead of blanking the footer (#34, 0.23.1).
-- **macOS open_ports** — netstat dot-address parsing (#34, 0.23.1).
-- **GitHub Release per npm tag** (#25, 0.23.2).
-- **CodeQL proto-pollution hardening** (#27, 0.23.3).
-- **setupHooks wired** (#26, 0.23.4).
-- **Policy engine** — declarative deny/inject, no spawn (GRO-1418, #29,
-  0.24.0).
-- **`/skills doctor`** — broken frontmatter, dupes, unused, budget
-  (GRO-1416, #28, 0.24.0 / 0.25.0 tag).
-- **`/skills new` templates** — no marketplace (GRO-1417, #32, 0.26.0).
-- **`/ideas` review overlay** — status, tags, skill insert (GRO-1419, #31,
-  0.27.0).
-- **English operator UI** — overlays, skill manager, `/wishcraft` TUI
-  (GRO-1422, #24, 0.27.1).
-- **`powerline.skills.count` + read hints + Status trim** (GRO-1420, 0.23.0).
-- **1.0.0 cockpit cut** — README lists doctor, templates, policy, and
-  idea-review (GRO-1421). Semver leaves 0.x.
-
-### Remaining open gaps (maturity)
-P1 — differentiation and quality:
-1. **Settings contract to pi core.** No `contributes.settings`/schema;
-   users hand-edit JSON. *Fix: typed settings schema + contributions.*
-2. **Zero-config first run.** Install still expects JSON edits for the most
-   useful features. *Fix: sensible defaults + first-run setup overlay.*
-3. **Perf budget / low-power mode.** Status renders every ~33ms; heavy
-   segments (bash-history, git) can hit the hot path. *Fix: configurable
-   refresh + lite mode / repeating scheduler with 0 FPS idle. Scheduler landed
-   in PR1 (`src/motion/scheduler.ts`); the segment hot path is still open.*
-4. **Accessibility (no-color / reduced-motion).** Truecolor + animations
-   (vibes, rainbow think) break on terminals without truecolor. *Fix:
-   `NO_COLOR`/8-color + reduced-motion respect (PR7).*
-
-P2 — full product, post-1.0:
-5. **Preset editor in-menu** — custom JSON-only today (addressed in PR3 & PR6).
-6. **Skill install from repo/npm** — discovery + doctor exist; install and
-   curate missing (addressed in PR8).
-7. **Host-status integration** — `ctx.ui.setStatus` beside the footer so
-   status also shows in host UI (`skills.count` is a start; full coverage
-   remains).
-
----
-
-## vNext Milestone: The Stacked PR Plan
-
-The complete vNext architecture is detailed in **[`docs/design/vnext-release-plan.md`](docs/design/vnext-release-plan.md)** and executed across 9 stacked pull requests:
-
-```mermaid
-graph LR
-  PR0["PR0: Design Corpus"] --> PR1["PR1: Motion Engine"]
-  PR1 --> PR2["PR2: Semantic Tokens"]
-  PR2 --> PR3["PR3: Preset Contract"]
-  PR3 --> PR4["PR4: Animated Signal"]
-  PR4 --> PR5["PR5: Wishcraft Deck"]
-  PR5 --> PR6["PR6: Appearance & Gallery"]
-  PR6 --> PR7["PR7: First-Class A11y"]
-  PR7 --> PR8["PR8: Craft, Skills & Docs"]
+Baseline: **v1.2.0**, published 2026-08-24.
+
+Pi is the engine. Wishcraft is the operator experience layer: Signal, Deck, skills, ideas, shell UX, hooks, repairs and policy without forking Pi core.
+
+Historical 0.x/1.0/vNext campaign detail belongs in `CHANGELOG.md` and `docs/design/`. This file describes only the current product contract and work that is still open.
+
+## Product boundary
+
+Wishcraft may extend the Pi experience, but it does not become:
+
+- a Pi fork or second agent engine;
+- a fleet/orchestration control plane;
+- a SaaS integrations bundle;
+- a second plugin runtime competing with Pi extensions;
+- a telemetry collector by default.
+
+External systems should connect through small contribution/integration contracts. Vendor-specific control planes belong outside Wishcraft.
+
+## Release line
+
+| Release | Theme | State | Done means |
+| --- | --- | --- | --- |
+| **1.2** | Operator Layer | shipped | Deck, universal Signal, structural appearance, motion gallery/composer, skill workbench and first-class motion accessibility |
+| **1.3** | Hardening | current | release invariant, render-path performance, one token source of truth, explicit renderer/lifecycle contracts, regression coverage |
+| **1.4** | Extension Contract | next | typed settings registry plus small contribution APIs; no new plugin runtime |
+| **1.5** | Craft Ecosystem | later | curated skill/package workflows built on Pi-native distribution and the contribution contract |
+| **2.0** | Stable Experience Platform | target | documented compatibility policy, migrations, performance budgets and stable public extension points |
+
+## 1.3 — Hardening
+
+No feature dump. This release exists to make the v1.2 surface trustworthy.
+
+### P0 — release integrity
+
+- One reusable `Verify` contract for PR verification and release gating.
+- Verify includes whitespace, typecheck, unit tests, circular dependency check and Pi package contract.
+- Release jobs depend on Verify and re-check the synchronized `origin/main` tree before tagging.
+- `main` should require the Verify check in repository rules before merge.
+
+### P0 — render/runtime performance
+
+- Deck paint must not run filesystem-backed skill discovery, skill doctor or settings parsing.
+- Expensive Deck data is cached as static snapshot state and refreshed only on open, relevant navigation or mutation.
+- Live model/Git/context/queue/Signal state remains cheap to repaint.
+- Idle motion stays 0 FPS.
+
+### P0 — appearance consistency
+
+- `src/config/types.ts` + `src/config/tokens.ts` are the canonical token contract.
+- `src/theme/tokens/*` is compatibility-only; it may re-export but may not define a second palette or semantic mapping.
+- One structural base must paint the same semantic roles regardless of the configuration path used to select it.
+
+### P0 — Signal contract
+
+- Signal is the universal status renderer for legacy and structural presets.
+- Legacy presets keep their existing segment/layout/color contract unless a structural appearance layer is explicitly selected.
+- Terminal one-shots (`success`, `warning`, `error`) settle to `idle/ready` after their finite burst.
+- Reduced/off/screen-reader modes communicate state without requiring animation.
+
+### P1 — verification matrix
+
+Add/keep regression coverage for:
+
+- widths around 40 / 80 / 120+ columns;
+- ASCII, Nerd Font and `NO_COLOR` rendering;
+- full / reduced / functional / off motion;
+- Deck render hot-path invariants;
+- legacy preset color compatibility;
+- release-gate dependency order;
+- Linux and macOS system-segment parsing.
+
+## 1.4 — Extension Contract
+
+The next architecture step is **composability**, not more built-in routes.
+
+### Typed settings registry
+
+One registry should drive:
+
+```text
+settings definition
+      │
+      ├─ parsing + validation
+      ├─ defaults + migrations
+      ├─ /wishcraft settings
+      ├─ Pi settings contribution (where supported)
+      └─ generated documentation/examples
+```
+
+This removes duplicate knowledge about settings and enables a real zero-config first run.
+
+### Small contribution API
+
+Target capabilities, subject to Pi host APIs:
+
+```text
+registerDeckRoute()
+registerSignalSource()
+registerMotion()
+registerAppearanceContribution()
+registerRecipeOrAction()
+contributeSettings()
 ```
 
----
-
-## Kwaliteit (altijd)
-
-- Overlay logic is testable via pure functions. No headless `ctx.ui`.
-- **English UI:** operator overlays, notify strings, and `/wishcraft` copy are
-  English. Do not add Dutch UI strings.
-- `prepublishOnly` = `tsc --noEmit`. Een slecht type ship't niet.
-- `madge --circular` blijft CI. Nieuwe map in `src/` → check mee.
-- Dependabot-vulns (devDep-transitief): waiven, track op GRO-603.
-  Niet required in CI. Geen stille bump van TypeScript 7 of
-  `@types/node` 26 in een bug-PR.
-- TPS-core blijft 1s sliding window over 5s-ring. Geen regressie
-  naar session-average of per-render EMA (beide spikten:
-  `tps:12775`).
+Rules:
+
+- Pi remains the package/extension runtime.
+- Contributions are data/callback contracts, not arbitrary nested plugin loaders.
+- Public contracts are versioned and capability-scoped.
+- A failing contribution cannot take down Signal or the Deck.
+
+## 1.5 — Craft Ecosystem
+
+After the contribution/settings contracts are stable:
+
+- skill import/install workflows from explicit trusted sources;
+- curated recipes/actions that compose existing Wishcraft/Pi capabilities;
+- package discovery surfaced through Pi-native package distribution rather than a parallel Wishcraft marketplace;
+- export/import of appearance and motion recipes with validation.
+
+## 2.0 — Stable Experience Platform
+
+2.0 is justified when the public contracts, not the feature count, are stable.
+
+Required before 2.0:
+
+- compatibility and deprecation policy;
+- settings migrations with round-trip tests;
+- measured render/performance budgets;
+- stable contribution API with fault isolation;
+- release provenance and required repository checks;
+- docs generated from canonical contracts where practical;
+- no known duplicate sources of truth for tokens, settings or release verification.
+
+## Always-on engineering rules
+
+- English operator UI.
+- No synchronous discovery work in paint/render loops.
+- No background animation when nothing consumes it.
+- Core Pi tools are not silently rewritten by Wishcraft repairs.
+- Policies and hooks remain explicitly disableable.
+- Security-sensitive paths fail closed.
+- Package/release verification runs before npm publication.
+- New features must fit the operator-layer boundary above.

package/docs/design/signal.md

@@ -1,68 +1,71 @@
-# Signal — The Animated Powerline Specification
+# Signal — Animated status contract
 
 ## Overview
 
-**Signal** is Wishcraft's animated powerline. While previous terminal footers were static rows of plain text, Signal turns status into an informative, living track.
+Signal is Wishcraft's status renderer for stock Pi. `/signal` is primary; `/powerline` remains a compatibility alias. No-args toggles the surface, `/signal menu` opens Navigate / Configure / Status, and `/signal <preset>` changes the information preset.
 
-- **Primary Command**: `/signal` (opens the Signal configuration deck or toggles view modes).
-- **Compatibility Alias**: `/powerline` (retained for backward compatibility).
+Signal divides status into three lanes:
 
----
-
-## 3-Lane Architecture
+```text
+LEFT / IDENTITY            CENTER / ACTIVITY            RIGHT / CONTEXT
+model · git · workspace    lifecycle · tool · motion    context · queue
+```
 
-Signal divides status information into three distinct, customizable lanes:
+A typical frame:
 
-```
-┌──────────────────────────────────────────────────────────────────────────────────┐
-│ LEFT LANE                    CENTER LANE                    RIGHT LANE           │
-│ Model · Git Status           Live Activity & Tools          Context · Queue      │
-├──────────────────────────────┼──────────────────────────────┼────────────────────┤
-│ ◆ GPT-5.6 ╾━━━━ main ━━━━    │ ╾✦╼━━━━ read_file ━━━━━━━    │ ctx █████░ 47%     │
-└──────────────────────────────┴──────────────────────────────┴────────────────────┘
+```text
+◆ GPT-5.6  main       ╾✦╼ read_file       ctx █████░ 47% · q1
 ```
 
-1. **Left Lane (Identity & Workspace)**
-   - Active Model badge (with provider color accent)
-   - Git branch and repository clean/dirty status
-   - Workspace directory (truncated gracefully on compact displays)
+## Renderer contract
 
-2. **Center Lane (Live Activity & Motion)**
-   - Current agent state (Thinking, Streaming, Tool Execution)
-   - Active tool call indicator (`read_file`, `grep`, `execute_command`)
-   - Traveling motion pulse representing data throughput
+**Signal is the universal status-line renderer.** This is intentional, including for the legacy layout preset names (`default`, `minimal`, `compact`, `full`, `nerd`, `ascii`, `chef`). There is no second legacy renderer hidden behind those names.
 
-3. **Right Lane (Metrics & Session)**
-   - Context window progress bar and percentage
-   - Queued user/agent instructions count
-   - Session cost / token consumption (if enabled)
+Compatibility is preserved at the data/config layer:
 
----
+- legacy presets still define their existing segment selection, layout options, separators, and explicit colors;
+- with no structural appearance layer selected, legacy preset colors remain exact;
+- structural preset names (`lanternwake` … `crucible`) opt into the vNext appearance personality and semantic-token palette;
+- `powerline.appearance.*` may mix palette, Signal grammar, chrome, glyphs, deck, welcome, and motion independently.
 
-## Live Motion Sweeps
+In other words: **one renderer, two compatible preset contracts**. A future change that restores a second renderer or silently remaps legacy colors is a breaking change and requires explicit migration tests.
 
-Signal animates only when actual work is being processed. The track reflects execution states through traveling pulses:
+## Three lanes
 
-### Token Streaming Wave
-```
-t0:  ◆ GPT-5.6 ╾▓▒░━━━━ main ━━━━━━━━━ read ━━━━━━━━━ ctx 47%
-t1:  ◆ GPT-5.6 ━╾▓▒░━━━ main ━━━━━━━━━ read ━━━━━━━━━ ctx 47%
-t2:  ◆ GPT-5.6 ━━━╾▓▒░━ main ━━━━━━━━━ read ━━━━━━━━━ ctx 47%
-t3:  ◆ GPT-5.6 ━━━━━━━━ main ╾▓▒░━━━━━ read ━━━━━━━━━ ctx 47%
-```
+1. **Identity / workspace** — model, Git state, path/workspace identity.
+2. **Activity** — thinking, streaming, tool execution, compacting and one-shot outcomes.
+3. **Context / queue** — context usage and queued/parked work.
 
-### Tool Execution Traveling Pulse
-```
-t0:  read ━━━╾✦╼━━━ grep ━━━━━━━━━ edit ━━━━━━━━━
-t1:  read ✓ ━━━━━━━ grep ━━━╾✦╼━━━ edit ━━━━━━━━━
-t2:  read ✓ ━━━━━━━ grep ✓ ━━━━━━━ edit ━━━╾✦╼━━━
+Width pressure is resolved inside Signal; lanes may compact or omit optional detail, but their semantic order stays identity → activity → context.
+
+## Motion lifecycle
+
+Signal owns no timer. It leases the shared MotionScheduler only while a motion channel needs frames.
+
+```text
+idle / ready       0 FPS
+      │
+      ├─ thinking / streaming / tool.start / compact  → active state
+      │
+      └─ success | warning | error                    → finite burst
+                                                        ↓
+                                                     idle / ready
+                                                     0 FPS
 ```
 
----
+Terminal one-shots (`success`, `warning`, `error`) settle their semantic state back to `idle/ready` when the final frame completes. This prevents a completed agent run from leaving `done` painted indefinitely without keeping a background timer alive.
+
+Reduced/functional/off motion policies may suppress frames entirely; status text must still communicate the state. `NO_COLOR`, screen-reader flags and ASCII fallback are first-class inputs to the same policy.
+
+## Fault isolation
+
+Signal builds on Wishcraft's segment isolation:
+
+- a failing custom segment is isolated instead of blanking the full status surface;
+- cached Git/session state is preferred during transient refreshes;
+- separators collapse around hidden/empty segments;
+- rendering must not perform unrelated discovery work such as the Deck skill doctor.
 
-## Fault Isolation & Error Boundaries
+## Performance invariant
 
-Signal builds on Pi-Wishcraft's existing segment architecture:
-- Every segment executes in an isolated `try/catch` wrapper.
-- If an individual segment fails (e.g. git command timeout or unexpected API response), it degrades gracefully to a silent fallback or a compact warning glyph without crashing the surrounding status line.
-- Segment separators adjust dynamically when neighboring segments are hidden or empty.
+Idle is 0 FPS. Continuous animation uses the shared coalescing scheduler. Expensive filesystem-backed discovery belongs outside paint/render paths; status rendering consumes already-resolved/cached state.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groeponline/pi-wishcraft",
-  "version": "1.2.0",
+  "version": "1.3.1",
   "description": "Operator cockpit for Pi: live powerline status, searchable skills, idea queue, sticky Bash, hooks, policy controls, and session UX.",
   "type": "module",
   "files": [

package/src/config/appearance.ts

@@ -62,7 +62,6 @@ export function resolveAppearanceMix(
   config: AppearanceMixConfig = {},
 ): ResolvedAppearance {
   const baseName = config.base ?? "lanternwake";
-  const base = getStructuralPreset(baseName);
 
   const paletteName = layerPreset(config, "palette", baseName);
   const signalName = layerPreset(config, "signalLayout", baseName);

package/src/extension/core/segment-context.ts

@@ -15,14 +15,8 @@ import { getDefaultColors } from "../../theme/theme.ts";
 import { getGitStatus } from "../../git/status.ts";
 import { getQueueContext } from "../queue/queue-context.ts";
 import { getUsageTokenTotal } from "../../usage/ledger.ts";
-import {
-  dayKey,
-  loadUsageFileFromDisk,
-  tokenTotal,
-  totalsForRange,
-} from "../../usage/usage-store.ts";
-import { parseTokenBudget } from "../../usage/token-budget.ts";
-import { readSettings } from "../settings/settings-io.ts";
+import { tokenBudgetSnapshotForDay } from "../../usage/token-budget.ts";
+import { dayKey } from "../../usage/usage-store.ts";
 import {
   CUSTOM_COMPACTION_STATUS_KEY,
   EDITOR_STATUS_DEFER_MS,
@@ -120,10 +114,16 @@ export function installFooterStatusRepaintHook(
   };
 }
 
+export interface BuildSegmentContextOptions {
+  /** Omit token-budget data from lightweight UI snapshots. */
+  includeTokenBudget?: boolean;
+}
+
 export function buildSegmentContext(
   rt: RuntimeState,
   ctx: any,
   theme: Theme,
+  options: BuildSegmentContextOptions = {},
 ): SegmentContext {
   const presetDef = getPreset(config.preset);
   const colors: ColorScheme = liveColorScheme(
@@ -205,6 +205,10 @@ export function buildSegmentContext(
     getQueueContext(ctx),
     rt.powerlineCompacting,
   );
+  const budgetSnapshot = tokenBudgetSnapshotForDay(
+    rt.tokenBudgetSnapshot,
+    dayKey(Date.now()),
+  );
 
   return {
     model: ctx.model,
@@ -234,18 +238,14 @@ export function buildSegmentContext(
     effectiveCustomItems,
     options: segmentOptions,
     segmentLabels: new Map(Object.entries(config.segmentLabels)),
-    tokenBudget: (() => {
-      const dailyLimit = parseTokenBudget(
-        readSettings(ctx.cwd ?? process.cwd()).wishcraft,
-      ).daily;
-      const now = Date.now();
-      const todayStart = Date.parse(`${dayKey(now)}T00:00:00`);
-      const dailyUsed = tokenTotal(
-        totalsForRange(loadUsageFileFromDisk(), todayStart, now + 1),
-      );
-      return { dailyLimit, dailyUsed };
-    })(),
+    tokenBudget:
+      options.includeTokenBudget === false
+        ? undefined
+        : {
+            dailyLimit: budgetSnapshot.dailyLimit,
+            dailyUsed: budgetSnapshot.dailyUsed,
+          },
     theme,
     colors,
   };
-}
+}

package/src/extension/core/state.ts

@@ -117,6 +117,7 @@ export function createRuntimeState(
     currentEditor: null,
     costAlertNotified: false,
     tokenBudgetNotifiedLevel: 0,
+    tokenBudgetSnapshot: { day: "", dailyLimit: null, dailyUsed: 0 },
     bashModeActive: false,
     bashTranscript: new BashTranscriptStore(bashModeSettings),
     bashCompletionEngine: new BashCompletionEngine(),
@@ -174,4 +175,4 @@ export function createRuntimeState(
   });
 
   return rt;
-}
+}

package/src/extension/core/types.ts

@@ -11,6 +11,7 @@ import type {
   SessionTokenStatsCache,
 } from "../../usage/ledger.ts";
 import type { CoreContextUsageCache } from "../../usage/context.ts";
+import type { TokenBudgetSnapshot } from "../../usage/token-budget.ts";
 import type { WelcomeDismissScheduler } from "../../welcome/auto-dismiss.ts";
 import type { RenderScheduler } from "../../render/timer.ts";
 import type { MotionPolicy, MotionScheduler } from "../../motion/index.ts";
@@ -68,6 +69,8 @@ export interface RuntimeState {
   costAlertNotified: boolean;
   /** Highest daily-budget warning already shown this session (0 / 80 / 100). */
   tokenBudgetNotifiedLevel: 0 | 80 | 100;
+  /** Event-driven token-budget snapshot consumed by render paths without disk I/O. */
+  tokenBudgetSnapshot: TokenBudgetSnapshot;
   bashModeActive: boolean;
   bashTranscript: BashTranscriptStore;
   bashCompletionEngine: BashCompletionEngine;
@@ -105,4 +108,4 @@ export interface RuntimeState {
   motionPolicy: MotionPolicy;
   /** Live Signal event, motion frame, and activity label. */
   signal: SignalRuntime;
-}
+}