@kya-os/cli 1.8.3 → 2.0.2

package/dist/orchestrator/mcp/stdio.js

@@ -1,51 +0,0 @@
-/**
- * stdio transport for the ledger MCP server.
- *
- * Newline-delimited JSON-RPC on stdin/stdout, which is how a local MCP client
- * (an orchestrator session) speaks to a server it spawned.
- *
- * @module cli/orchestrator/mcp/stdio
- */
-import { createInterface } from "node:readline";
-import { handleLedgerRpc } from "./server.js";
-/**
- * Serve until stdin closes.
- *
- * Nothing here writes to stdout except protocol frames. A stray console.log
- * would be parsed by the client as a malformed message and desynchronise the
- * stream, so diagnostics go to stderr, always.
- */
-export function serveLedgerStdio(db, opts = {}) {
-    const input = opts.input ?? process.stdin;
-    const output = opts.output ?? process.stdout;
-    const rl = createInterface({ input, crlfDelay: Infinity });
-    return new Promise((resolve) => {
-        rl.on("line", (line) => {
-            const trimmed = line.trim();
-            if (!trimmed)
-                return;
-            let req;
-            try {
-                req = JSON.parse(trimmed);
-            }
-            catch {
-                // A parse error has no id to answer against, so per JSON-RPC it is
-                // reported with a null id rather than dropped silently.
-                output.write(JSON.stringify({
-                    jsonrpc: "2.0",
-                    id: null,
-                    error: { code: -32700, message: "Parse error" },
-                }) + "\n");
-                return;
-            }
-            const res = handleLedgerRpc(db, req);
-            // handleLedgerRpc returns null for notifications, which must not be
-            // answered: replying to one is a protocol violation the client may
-            // treat as a response to a different request.
-            if (res !== null)
-                output.write(JSON.stringify(res) + "\n");
-        });
-        rl.on("close", () => resolve());
-    });
-}
-//# sourceMappingURL=stdio.js.map

package/dist/orchestrator/mcp/stdio.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../../src/orchestrator/mcp/stdio.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAuB,MAAM,aAAa,CAAC;AAOnE;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAU,EAAE,OAAqB,EAAE;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,OAAO;YAErB,IAAI,GAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,wDAAwD;gBACxD,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,SAAS,CAAC;oBACb,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;iBAChD,CAAC,GAAG,IAAI,CACV,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACrC,oEAAoE;YACpE,mEAAmE;YACnE,8CAA8C;YAC9C,IAAI,GAAG,KAAK,IAAI;gBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/orchestrator/review.d.ts

@@ -1,131 +0,0 @@
-/**
- * Review verdicts, applied to the ledger.
- *
- * The half of the loop that was missing. The review machinery in @kya-os/compute
- * already runs itself once a PR exists: reviewers are dispatched, verdicts are
- * validated against a single head SHA, and the hub counts quorum. All of that
- * landed with the review-verdict work and needs nothing from here. What it did
- * NOT do is tell the ledger, so a ticket sat in whatever state it was left in
- * while its PR was approved or sent back.
- *
- * This module is deliberately only the deterministic half. Per the split this
- * whole design rests on, the daemon owns anything whose correctness a test can
- * check and the session owns anything whose correctness requires an opinion:
- *
- *   - Which ticket a verdict is about, and what status that implies: testable.
- *     It lives here.
- *   - What the fix task should actually SAY when changes are requested: an
- *     opinion. It stays with the orchestrator session, which reads the journal
- *     through the ledger MCP tools and dispatches with real instructions.
- *
- * So a request-changes verdict moves the ticket back to in-progress and leaves
- * a journal row explaining why. It does not compose a message. That keeps the
- * daemon free of an outbound DIDComm path it would otherwise need, and keeps
- * the judgement where a human or a model can see it.
- *
- * @module cli/orchestrator/review
- */
-import type { Ledger } from "./db/index.js";
-import type { EventSource, HubEventLike } from "./events.js";
-import { type TicketStatus } from "./db/tickets.js";
-/** The outcome of applying one review event, for the caller to journal or log. */
-export interface ReviewReaction {
-    ticketId: string;
-    from: TicketStatus;
-    to: TicketStatus;
-    reason: string;
-}
-/**
- * Apply one review event to the ledger.
- *
- * Returns the transition when one happened, or null when the event was not a
- * review event, named no ticket we own, or implied no change. Null is the
- * common case and not a failure.
- */
-export declare function applyReviewEvent(db: Ledger, event: HubEventLike): ReviewReaction | null;
-/**
- * Derive a ticket's review status from what is STORED, not from the event that
- * just arrived.
- *
- * This has to be a projection rather than a per-event rule, and a review finding
- * proved it. With per-event policy, a reviewer who requested changes and then
- * re-approved left the ticket stuck: the re-approval is not quorum on its own,
- * and the hub does not re-emit pr_quorum_reached for a head that already fired.
- * There was no deterministic path back to ready, so orchestration would keep
- * treating already-quorate work as sent back.
- *
- * Reading the set answers it directly. A counted request-changes outstanding
- * means work is owed; absent that, a recorded quorum means ready. Withdraw the
- * request-changes and the first clause simply stops matching.
- *
- * Order matters: request-changes WINS over quorum on the same head. Quorum is
- * historical -- it was reached at some point -- while an outstanding
- * request-changes is a live objection, and shipping over a live objection is the
- * worse error.
- *
- * Returns null for "no opinion", which leaves the ticket wherever it is.
- */
-/**
- * The statuses a review verdict can derive.
- *
- * Narrower than `TicketStatus`, and deliberately so: this function only ever
- * answers `in-progress` or `ready`, and saying `TicketStatus` claimed it could
- * also return `closed` or `claimed` -- neither of which a review outcome has any
- * business asserting. Writing the honest type is also what keeps this
- * compatible with `setTicketStatus`, which refuses exactly those two.
- */
-export type DerivedTicketStatus = Extract<TicketStatus, "in-progress" | "ready">;
-export declare function deriveStatus(db: Ledger, repo: string, prNumber: number, headSha: string): DerivedTicketStatus | null;
-/**
- * Subscribe to the hub and apply review verdicts to the ledger.
- *
- * A SECOND subscription rather than a branch inside the journal writer, and the
- * daemon registers it after that one. The raw event should be on record before
- * anything derived from it, so that if the transition throws, the evidence of
- * what arrived survives -- the reverse order can lose the event and leave only
- * a status change nobody can explain.
- *
- * The transition row is written by {@link applyReviewEvent} itself, inside the
- * same transaction as the status change, so this handler cannot leave a ticket
- * moved without a record of why.
- *
- * Returns the unsubscribe, matching the hub's `onEvent` contract so the daemon
- * can detach cleanly instead of leaking a handler that writes to a closed
- * database.
- *
- * Deliberately does NOT catch a write failure here, for the same reason
- * `registerJournalWriter` does not: every real dispatcher this attaches to
- * already isolates one handler's failure from its siblings, so catching
- * again in here would only hide the failure from that dispatcher -- and
- * from a reconnect's replay retry, which needs to see it (review finding on
- * #686).
- */
-export declare function registerReviewReactor(db: Ledger, hub: EventSource): () => void;
-/**
- * Apply the hub's recent-event window to ticket status on boot.
- *
- * The companion to `reconcileRecentEvents`, and the reason a restart is not a
- * silent hole. That function replays the window into the JOURNAL; the reactor
- * only sees events emitted while it is attached. So a daemon that was down when
- * `pr_quorum_reached` fired recorded the evidence on boot and never moved the
- * ticket -- leaving a journal that shows quorum for a ticket still sitting in
- * `in-review`, which is worse than missing the event outright because it looks
- * like the reactor ran and disagreed.
- *
- * Records EVERY event in the window, oldest first, and lets the projection
- * decide the outcome. An earlier version converged to the last verdict per
- * ticket, which was a workaround for per-event status policy; with status
- * derived from the stored set, dropping the earlier verdicts would derive from
- * an incomplete one.
- *
- * Convergence to one event per ticket is what this REPLACED, and the reason the
- * old argument for it no longer holds: it existed so a replay could not walk a
- * ticket back and forth writing a `ticket_status_changed` row per hop. The
- * natural keys do that job now -- an already-recorded verdict reports no change
- * and moves nothing -- so replaying the full window is both safe and necessary,
- * where dropping the earlier verdicts would derive status from an incomplete set.
- *
- * Returns how many tickets actually moved.
- */
-export declare function reconcileReviewState(db: Ledger, hub: EventSource, limit?: number): number;
-//# sourceMappingURL=review.d.ts.map

package/dist/orchestrator/review.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../src/orchestrator/review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAU7D,OAAO,EAA8B,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGhF,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,YAAY,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,IAAI,CAyGvF;AAgDD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,YAAY,EAAE,aAAa,GAAG,OAAO,CAAC,CAAC;AAEjF,wBAAgB,YAAY,CAC1B,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,mBAAmB,GAAG,IAAI,CAQ5B;AAGD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,MAAM,IAAI,CAI9E;AA0ED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,SAAK,GAAG,MAAM,CAsBrF"}

package/dist/orchestrator/review.js

@@ -1,322 +0,0 @@
-/**
- * Review verdicts, applied to the ledger.
- *
- * The half of the loop that was missing. The review machinery in @kya-os/compute
- * already runs itself once a PR exists: reviewers are dispatched, verdicts are
- * validated against a single head SHA, and the hub counts quorum. All of that
- * landed with the review-verdict work and needs nothing from here. What it did
- * NOT do is tell the ledger, so a ticket sat in whatever state it was left in
- * while its PR was approved or sent back.
- *
- * This module is deliberately only the deterministic half. Per the split this
- * whole design rests on, the daemon owns anything whose correctness a test can
- * check and the session owns anything whose correctness requires an opinion:
- *
- *   - Which ticket a verdict is about, and what status that implies: testable.
- *     It lives here.
- *   - What the fix task should actually SAY when changes are requested: an
- *     opinion. It stays with the orchestrator session, which reads the journal
- *     through the ledger MCP tools and dispatches with real instructions.
- *
- * So a request-changes verdict moves the ticket back to in-progress and leaves
- * a journal row explaining why. It does not compose a message. That keeps the
- * daemon free of an outbound DIDComm path it would otherwise need, and keeps
- * the judgement where a human or a model can see it.
- *
- * @module cli/orchestrator/review
- */
-import { appendJournal, journalEventId } from "./db/journal.js";
-import { recordVerdict, recordQuorum, listVerdictsForPr, quorumReached, latestTrustedHeadForPr, VerdictKindSchema, } from "./db/verdicts.js";
-import { getTicket, setTicketStatus } from "./db/tickets.js";
-import { reviewSubjectOf, ticketIdForEvent } from "./journal-writer.js";
-/**
- * Apply one review event to the ledger.
- *
- * Returns the transition when one happened, or null when the event was not a
- * review event, named no ticket we own, or implied no change. Null is the
- * common case and not a failure.
- */
-export function applyReviewEvent(db, event) {
-    // Record the evidence for ANY review event, then decide separately whether it
-    // implies a status change. The schema carries a `counted` column precisely so
-    // an uncounted verdict -- a review of a superseded head SHA -- is kept as
-    // evidence rather than discarded; bailing on "implies nothing" first would
-    // leave that column with nothing to hold and lose the record of a stale
-    // review having arrived at all.
-    if (event.type !== "review_verdict" && event.type !== "pr_quorum_reached")
-        return null;
-    const subject = reviewSubjectOf(event);
-    if (subject === null)
-        return null;
-    const ticketId = ticketIdForEvent(db, event);
-    if (ticketId === null)
-        return null;
-    const ticket = getTicket(db, ticketId);
-    if (ticket === undefined)
-        return null;
-    // The fact and the status change commit TOGETHER.
-    //
-    // Recording the fact first and moving the status afterwards leaves a window
-    // where the key exists and the ticket never moved: if that second step failed
-    // or the process died between them, every later delivery AND every boot
-    // reconcile would see the key, treat the verdict as handled, and skip it. The
-    // ticket sticks in the wrong status permanently, and nothing looks broken.
-    //
-    // Inside one transaction, a failure rolls the fact back too, so the retry is a
-    // clean first attempt.
-    let reaction = null;
-    db.transaction(() => {
-        // `false` means nothing changed -- a replay, or an identical re-delivery --
-        // so there is nothing to apply. A REVISED verdict from the same reviewer
-        // reports true and is applied, which is how a withdrawn approval takes
-        // effect.
-        if (!recordFact(db, ticketId, event, subject))
-            return;
-        // Derived for the LATEST TRUSTED head, not for the head this event names
-        // and not for whatever latestHeadForPr would say. A push invalidates
-        // every prior verdict, so a late or replayed quorum for superseded code
-        // must not move current work -- but ranking by EVERY verdict, including
-        // uncounted ones, lets a rejected verdict for a stale or made-up SHA
-        // outrank a real counted verdict or quorum sitting on the head that
-        // actually matters, by nothing more than a later timestamp. Derivation
-        // would then run against the noise head, find nothing there, and never
-        // even look at the real one again -- silently occluding a live
-        // objection. latestTrustedHeadForPr answers "which head has anyone
-        // ACTUALLY reviewed," which is the question derivation needs; recording
-        // the fact above is unconditional regardless, so an uncounted verdict is
-        // still kept as evidence even though it cannot steer this.
-        const head = latestTrustedHeadForPr(db, subject.repo, subject.prNumber) ?? subject.headSha;
-        let to = deriveStatus(db, subject.repo, subject.prNumber, head);
-        // Null ordinarily means "nothing derivable yet, leave the ticket wherever
-        // it is" -- but a ticket already sitting at `ready` is the one case where
-        // that default is wrong. `ready` can only have been set by quorum on SOME
-        // earlier head H; if H were still the latest trusted head, deriveStatus
-        // would have found that same quorum row and returned "ready", not null.
-        // So null here, with the ticket already ready, proves the trusted head
-        // has genuinely advanced past H with nothing derivable there yet.
-        //
-        // The counted check below is now provable rather than merely defensive:
-        // any head latestTrustedHeadForPr returns got there via a counted
-        // verdict or a quorum row (a quorum row would have made `to` "ready", not
-        // null, so within this branch it must have been a counted verdict). It
-        // still guards the one path that bypasses that ranking entirely -- the
-        // `?? subject.headSha` fallback, reached only when NO head has any
-        // trusted evidence at all, which cannot happen while the ticket is
-        // already ready (ready requires a quorum row to exist somewhere, and a
-        // quorum row is always trusted) but is cheap insurance against that
-        // invariant being wrong in a way neither of us has thought of yet.
-        const headHasCountedEvidence = listVerdictsForPr(db, subject.repo, subject.prNumber, head).some((v) => v.counted === 1);
-        const staleReady = to === null && ticket.status === "ready" && headHasCountedEvidence;
-        if (to === null && !staleReady)
-            return;
-        if (staleReady)
-            to = "in-progress";
-        if (to === null) {
-            // Unreachable per the invariant argued above: the guard just above
-            // returns whenever `to` is null and `staleReady` is false, and the
-            // line above this one sets `to` whenever `staleReady` is true. Stated
-            // for the type checker, which cannot see that argument.
-            throw new Error("orchestrator: derived ticket status was null after the staleReady guard");
-        }
-        // A closed ticket stays closed. Reviews keep arriving on a merged PR (a late
-        // reviewer, a re-run), and no robot verdict should undo a human's close.
-        if (ticket.status === "closed")
-            return;
-        if (ticket.status === to)
-            return;
-        const next = {
-            ticketId,
-            from: ticket.status,
-            to,
-            reason: staleReady ? staleReadyReason(event) : reasonFor(event, to),
-        };
-        setTicketStatus(db, ticketId, to);
-        appendDerived(db, ticketId, event, "ticket_status_changed", {
-            from: next.from,
-            to: next.to,
-            reason: next.reason,
-        });
-        reaction = next;
-    })();
-    return reaction;
-}
-/**
- * Persist the protocol fact behind an event, returning whether it was new.
- *
- * Two grains, because the protocol has two: a verdict belongs to a reviewer, so
- * it is unique per (repo, pr, head_sha, reviewer_did); quorum is a property of
- * the PR head with no reviewer, so it is unique per (repo, pr, head_sha).
- * Forcing quorum into the verdicts table would have needed a sentinel reviewer,
- * which is how a natural key stops being natural.
- */
-function recordFact(db, ticketId, event, subject) {
-    if (event.type === "pr_quorum_reached") {
-        const n = (event.data ?? {})["quorumN"];
-        return recordQuorum(db, {
-            ticketId,
-            repo: subject.repo,
-            prNumber: subject.prNumber,
-            headSha: subject.headSha,
-            quorumN: typeof n === "number" ? n : undefined,
-            observedAt: event.timestamp,
-        });
-    }
-    const data = event.data ?? {};
-    // Parsed, not cast: the CHECK constraint would reject an unknown verdict at
-    // the database boundary, but failing here names the bad value instead.
-    const kind = VerdictKindSchema.safeParse(data["verdict"]);
-    if (!kind.success)
-        return false;
-    return recordVerdict(db, {
-        ticketId,
-        repo: subject.repo,
-        prNumber: subject.prNumber,
-        headSha: subject.headSha,
-        reviewerDid: event.agentDid,
-        verdict: kind.data,
-        counted: data["counted"] === true,
-        findings: data["reasons"],
-        observedAt: event.timestamp,
-    });
-}
-export function deriveStatus(db, repo, prNumber, headSha) {
-    const verdicts = listVerdictsForPr(db, repo, prNumber, headSha);
-    // `counted` is the hub's own validity flag: an uncounted verdict failed
-    // validation, usually for naming a stale head, and must not gate anything.
-    const objection = verdicts.some((v) => v.counted === 1 && v.verdict === "request-changes");
-    if (objection)
-        return "in-progress";
-    if (quorumReached(db, repo, prNumber, headSha))
-        return "ready";
-    return null;
-}
-/**
- * Subscribe to the hub and apply review verdicts to the ledger.
- *
- * A SECOND subscription rather than a branch inside the journal writer, and the
- * daemon registers it after that one. The raw event should be on record before
- * anything derived from it, so that if the transition throws, the evidence of
- * what arrived survives -- the reverse order can lose the event and leave only
- * a status change nobody can explain.
- *
- * The transition row is written by {@link applyReviewEvent} itself, inside the
- * same transaction as the status change, so this handler cannot leave a ticket
- * moved without a record of why.
- *
- * Returns the unsubscribe, matching the hub's `onEvent` contract so the daemon
- * can detach cleanly instead of leaking a handler that writes to a closed
- * database.
- *
- * Deliberately does NOT catch a write failure here, for the same reason
- * `registerJournalWriter` does not: every real dispatcher this attaches to
- * already isolates one handler's failure from its siblings, so catching
- * again in here would only hide the failure from that dispatcher -- and
- * from a reconnect's replay retry, which needs to see it (review finding on
- * #686).
- */
-export function registerReviewReactor(db, hub) {
-    return hub.onEvent((event) => {
-        applyReviewEvent(db, event);
-    });
-}
-function whereFor(event) {
-    const subject = reviewSubjectOf(event);
-    return subject ? `${subject.repo}#${subject.prNumber}` : "an unknown PR";
-}
-function reasonFor(event, to) {
-    const data = event.data ?? {};
-    const where = whereFor(event);
-    if (to === "ready") {
-        const n = data["quorumN"];
-        const quorum = typeof n === "number" ? `${n}` : "the required number of";
-        return `review quorum reached on ${where} (${quorum} approvals); awaiting human merge`;
-    }
-    return `changes requested on ${where}; the fix is owed by the author`;
-}
-/**
- * Reason for demoting a ticket OUT of `ready` when the head has advanced past
- * the one quorum was reached on, and nothing has reconfirmed readiness for
- * the new head yet. Distinct from {@link reasonFor}'s request-changes text,
- * which would misreport this as an objection nobody actually raised -- this
- * event named no objection, it just proved the old quorum no longer applies.
- */
-function staleReadyReason(event) {
-    const where = whereFor(event);
-    return `a newer commit landed on ${where}; the prior ready status was quorum on a superseded head and needs re-review`;
-}
-/**
- * Write a journal row DERIVED from an event, scoped to one ticket.
- *
- * The distinction that matters: a raw event row is one row per event, because
- * the event happened once. A derived row is one per (event, ticket), because the
- * same verdict can be reasoned about for more than one ticket -- a newer
- * dispatch on the same PR points somewhere else.
- *
- * `journalEventId` hashes event CONTENT only, and `ticketId` reaches
- * appendJournal as a separate column, so a derived row that leaves ticketId out
- * of its content collides across tickets and INSERT OR IGNORE silently drops the
- * second one. That bug was fixed once in the handled marker and immediately
- * reappeared in the transition row beside it, which is what a rule enforced by
- * remembering looks like. Folding ticketId in here makes it structural: every
- * derived row is scoped because there is one way to write one.
- */
-function derivedEvent(ticketId, source, type, data = {}) {
-    return {
-        type,
-        timestamp: source.timestamp,
-        agentDid: source.agentDid,
-        agentName: source.agentName,
-        data: { ...data, becauseEventId: journalEventId(source), because: source.type, ticketId },
-    };
-}
-function appendDerived(db, ticketId, source, type, data = {}) {
-    appendJournal(db, { event: derivedEvent(ticketId, source, type, data), ticketId });
-}
-/**
- * Apply the hub's recent-event window to ticket status on boot.
- *
- * The companion to `reconcileRecentEvents`, and the reason a restart is not a
- * silent hole. That function replays the window into the JOURNAL; the reactor
- * only sees events emitted while it is attached. So a daemon that was down when
- * `pr_quorum_reached` fired recorded the evidence on boot and never moved the
- * ticket -- leaving a journal that shows quorum for a ticket still sitting in
- * `in-review`, which is worse than missing the event outright because it looks
- * like the reactor ran and disagreed.
- *
- * Records EVERY event in the window, oldest first, and lets the projection
- * decide the outcome. An earlier version converged to the last verdict per
- * ticket, which was a workaround for per-event status policy; with status
- * derived from the stored set, dropping the earlier verdicts would derive from
- * an incomplete one.
- *
- * Convergence to one event per ticket is what this REPLACED, and the reason the
- * old argument for it no longer holds: it existed so a replay could not walk a
- * ticket back and forth writing a `ticket_status_changed` row per hop. The
- * natural keys do that job now -- an already-recorded verdict reports no change
- * and moves nothing -- so replaying the full window is both safe and necessary,
- * where dropping the earlier verdicts would derive status from an incomplete set.
- *
- * Returns how many tickets actually moved.
- */
-export function reconcileReviewState(db, hub, limit = 50) {
-    // Oldest first, and EVERY event, not just the newest per ticket. Each verdict
-    // is a row in the set the status is derived from, so dropping the earlier ones
-    // would derive from an incomplete set. The previous version kept only the
-    // latest event per ticket to avoid re-walking a path -- a precaution the
-    // natural keys now make unnecessary, since an already-recorded verdict
-    // reports no change and moves nothing.
-    const recent = [...hub.getRecentEvents(limit)].sort((a, b) => a.timestamp - b.timestamp);
-    let moved = 0;
-    for (const event of recent) {
-        try {
-            if (applyReviewEvent(db, event) !== null)
-                moved++;
-        }
-        catch (err) {
-            // One unapplicable event must not abort recovery for the rest.
-            console.error(`[orchestrator] failed to reconcile ${event?.type ?? "unknown"}: ${err instanceof Error ? err.message : String(err)}`);
-        }
-    }
-    return moved;
-}
-//# sourceMappingURL=review.js.map

package/dist/orchestrator/review.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/orchestrator/review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EACL,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,eAAe,EAAqB,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAsB,MAAM,qBAAqB,CAAC;AAU5F;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAU,EAAE,KAAmB;IAC9D,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,gCAAgC;IAChC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAEvF,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEtC,kDAAkD;IAClD,EAAE;IACF,4EAA4E;IAC5E,8EAA8E;IAC9E,wEAAwE;IACxE,8EAA8E;IAC9E,2EAA2E;IAC3E,EAAE;IACF,+EAA+E;IAC/E,uBAAuB;IACvB,IAAI,QAAQ,GAA0B,IAAI,CAAC;IAC3C,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAClB,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,UAAU;QACV,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC;YAAE,OAAO;QAEtD,yEAAyE;QACzE,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,+DAA+D;QAC/D,mEAAmE;QACnE,wEAAwE;QACxE,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC;QAC3F,IAAI,EAAE,GAAG,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEhE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,kEAAkE;QAClE,EAAE;QACF,wEAAwE;QACxE,kEAAkE;QAClE,0EAA0E;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,mEAAmE;QACnE,uEAAuE;QACvE,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAC7F,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CACvB,CAAC;QACF,MAAM,UAAU,GAAG,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,sBAAsB,CAAC;QACtF,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QACvC,IAAI,UAAU;YAAE,EAAE,GAAG,aAAa,CAAC;QACnC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,mEAAmE;YACnE,mEAAmE;YACnE,sEAAsE;YACtE,wDAAwD;YACxD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QAED,6EAA6E;QAC7E,yEAAyE;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO;QAEjC,MAAM,IAAI,GAAmB;YAC3B,QAAQ;YACR,IAAI,EAAE,MAAM,CAAC,MAAM;YACnB,EAAE;YACF,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;SACpE,CAAC;QACF,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClC,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE;YAC1D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CACjB,EAAU,EACV,QAAgB,EAChB,KAAmB,EACnB,OAAsB;IAEtB,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,YAAY,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAC9C,UAAU,EAAE,KAAK,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9B,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAEhC,OAAO,aAAa,CAAC,EAAE,EAAE;QACvB,QAAQ;QACR,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,KAAK,CAAC,QAAQ;QAC3B,OAAO,EAAE,IAAI,CAAC,IAAI;QAClB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI;QACjC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;QACzB,UAAU,EAAE,KAAK,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC;AAmCD,MAAM,UAAU,YAAY,CAC1B,EAAU,EACV,IAAY,EACZ,QAAgB,EAChB,OAAe;IAEf,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,iBAAiB,CAAC,CAAC;IAC3F,IAAI,SAAS;QAAE,OAAO,aAAa,CAAC;IACpC,IAAI,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAGD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAU,EAAE,GAAgB;IAChE,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAmB;IACnC,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB,EAAE,EAAgB;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC;QACzE,OAAO,4BAA4B,KAAK,KAAK,MAAM,mCAAmC,CAAC;IACzF,CAAC;IACD,OAAO,wBAAwB,KAAK,iCAAiC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAmB;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,4BAA4B,KAAK,8EAA8E,CAAC;AACzH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,YAAY,CACnB,QAAgB,EAChB,MAAoB,EACpB,IAAY,EACZ,OAAgC,EAAE;IAElC,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,EAAU,EACV,QAAgB,EAChB,MAAoB,EACpB,IAAY,EACZ,OAAgC,EAAE;IAElC,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;AACrF,CAAC;AAKD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAU,EAAE,GAAgB,EAAE,KAAK,GAAG,EAAE;IAC3E,8EAA8E;IAC9E,+EAA+E;IAC/E,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,uCAAuC;IACvC,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IACzF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI;gBAAE,KAAK,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+DAA+D;YAC/D,OAAO,CAAC,KAAK,CACX,sCAAsC,KAAK,EAAE,IAAI,IAAI,SAAS,KAC5D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/tui/app.d.ts

@@ -1,33 +0,0 @@
-/**
- * The TUI frame: sidebar plus content pane.
- *
- * Two references, deliberately combined. The interaction grammar is
- * `ssh terminal.shop`: one full-screen frame, keyboard-first, muted palette
- * with a single accent, no emoji, instant startup. The information design is
- * checkpoint's V2 dashboard, so the sidebar carries the same sections in the
- * same order and the content pane uses the analytics surface's own layout.
- *
- * The frame knows nothing about any view's data. Views register themselves and
- * return rows; the frame owns navigation, focus and chrome. That separation is
- * what lets Checkpoint-backed views drop in later without touching this file.
- *
- * @module cli/tui/app
- */
-import type { ViewProps } from "./views/index.js";
-export interface AppProps {
-    /** Rendered content per nav id. */
-    views: Record<string, (p: ViewProps) => JSX.Element>;
-    /** Terminal width; injected so tests can pin a size. */
-    width?: number;
-    height?: number;
-    /** Whether a Checkpoint session exists. Drives the honest empty states. */
-    authenticated?: boolean;
-    /**
-     * Nav id to land on instead of the first selectable item (`kya-os init`'s
-     * TUI handoff lands on "agents"). An id `navIndexOf` cannot find falls
-     * back to the default first item rather than throwing.
-     */
-    initialViewId?: string;
-}
-export declare function App({ views, width, height, authenticated, initialViewId, }: AppProps): JSX.Element;
-//# sourceMappingURL=app.d.ts.map

package/dist/tui/app.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/tui/app.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAIlD,MAAM,WAAW,QAAQ;IACvB,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAsCD,wBAAgB,GAAG,CAAC,EAClB,KAAK,EACL,KAAW,EACX,MAAW,EACX,aAAqB,EACrB,aAAa,GACd,EAAE,QAAQ,GAAG,GAAG,CAAC,OAAO,CAsGxB"}

package/dist/tui/app.js

@@ -1,71 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-/**
- * The TUI frame: sidebar plus content pane.
- *
- * Two references, deliberately combined. The interaction grammar is
- * `ssh terminal.shop`: one full-screen frame, keyboard-first, muted palette
- * with a single accent, no emoji, instant startup. The information design is
- * checkpoint's V2 dashboard, so the sidebar carries the same sections in the
- * same order and the content pane uses the analytics surface's own layout.
- *
- * The frame knows nothing about any view's data. Views register themselves and
- * return rows; the frame owns navigation, focus and chrome. That separation is
- * what lets Checkpoint-backed views drop in later without touching this file.
- *
- * @module cli/tui/app
- */
-import { useState } from "react";
-import { Box, Text, useApp, useInput } from "ink";
-import { theme } from "./theme.js";
-import { NAV, SELECTABLE, navIndexOf } from "./nav.js";
-import { reduceKey } from "./keymap.js";
-import { Rule, SectionHeader } from "./components.js";
-import { FILTER_COUNTS } from "./views/registry.js";
-const SIDEBAR_WIDTH = 22;
-function Sidebar({ activeId, width, }) {
-    return (_jsxs(Box, { flexDirection: "column", width: width, paddingX: 1, children: [_jsx(Text, { bold: true, color: theme.accent, children: "KYA-OS" }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: theme.dim, children: "checkpoint" }) }), NAV.map((item) => {
-                const active = item.id === activeId;
-                if (!item.selectable) {
-                    return (_jsx(Box, { marginTop: 1, children: _jsx(Text, { color: theme.dim, children: item.title.toUpperCase() }) }, item.id));
-                }
-                return (_jsxs(Text, { color: active ? theme.accent : theme.fg, bold: active, children: [active ? "› " : "  ", item.depth === 1 ? "  " : "", item.title] }, item.id));
-            })] }));
-}
-export function App({ views, width = 100, height = 30, authenticated = false, initialViewId, }) {
-    const { exit } = useApp();
-    const initialIndex = initialViewId ? Math.max(0, navIndexOf(initialViewId)) : 0;
-    const [index, setIndex] = useState(initialIndex);
-    const [filter, setFilter] = useState(0);
-    const [showHelp, setShowHelp] = useState(false);
-    // A view (the agents view's row-focus/dispatch sub-mode) can ask the frame
-    // to stop reading nav keys while IT owns the keyboard -- otherwise every
-    // key it wants for itself (j/k to move a row cursor, digits to type a
-    // command) also fires the global nav handler below, which reads the same
-    // keys as "move between sections" and "jump to nav item N". Suspended only
-    // while a view is actively capturing input; nav behaves exactly as before
-    // the rest of the time.
-    const [navSuspended, setNavSuspended] = useState(false);
-    const active = SELECTABLE[index];
-    // The pane gets an EXPLICIT width rather than flexGrow. With flexGrow, Ink
-    // sizes the border to the container but leaves short text rows unpadded, so
-    // the right edge frays: the rule reaches the border and the prose does not.
-    const paneWidth = Math.max(24, width - SIDEBAR_WIDTH - 2);
-    // Inside the pane: minus 2 border columns and 2 padding columns.
-    const contentWidth = paneWidth;
-    // How many filter chips the CURRENT view offers, so `f` wraps at the right
-    // point rather than cycling through positions the view does not render.
-    const filterCount = FILTER_COUNTS[active.id] ?? 1;
-    useInput((input, key) => {
-        const next = reduceKey({ index, filter, showHelp, exit: false }, { input, upArrow: key.upArrow, downArrow: key.downArrow }, SELECTABLE.length, filterCount);
-        if (next.exit) {
-            exit();
-            return;
-        }
-        setIndex(next.index);
-        setFilter(next.filter);
-        setShowHelp(next.showHelp);
-    }, { isActive: !navSuspended });
-    const View = views[active.id];
-    return (_jsxs(Box, { flexDirection: "column", width: width, height: height, children: [_jsxs(Box, { children: [_jsx(Sidebar, { activeId: active.id, width: SIDEBAR_WIDTH }), _jsx(Box, { flexDirection: "column", marginRight: 1, children: Array.from({ length: height - 1 }, (_, i) => (_jsx(Text, { color: theme.line, children: "\u2502" }, i))) }), _jsxs(Box, { flexDirection: "column", width: paneWidth, children: [_jsx(SectionHeader, { title: active.title, hint: active.source === "ledger" ? "local ledger" : "checkpoint", width: contentWidth }), _jsx(Rule, { width: contentWidth }), View ? (_jsx(View, { width: contentWidth, authenticated: authenticated, filter: filter, navSuspended: navSuspended, setNavSuspended: setNavSuspended })) : (_jsxs(Text, { color: theme.dim, children: ["No view registered for ", active.id, "."] }))] })] }), _jsx(Box, { children: showHelp ? (_jsx(Text, { color: theme.dim, children: "j/k or arrows move \u00B7 1-9 jump \u00B7 f filter \u00B7 ? help \u00B7 q quit" })) : (_jsxs(Text, { color: theme.dim, children: [filterCount > 1 ? "f filter · " : "", "? help \u00B7 q quit"] })) })] }));
-}
-//# sourceMappingURL=app.js.map

package/dist/tui/app.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/tui/app.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAgB,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,SAAS,EAAiB,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,MAAM,aAAa,GAAG,EAAE,CAAC;AAkBzB,SAAS,OAAO,CAAC,EACf,QAAQ,EACR,KAAK,GAIN;IACC,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,aACnD,KAAC,IAAI,IAAC,IAAI,QAAC,KAAK,EAAE,KAAK,CAAC,MAAM,uBAEvB,EACP,KAAC,GAAG,IAAC,YAAY,EAAE,CAAC,YAClB,KAAC,IAAI,IAAC,KAAK,EAAE,KAAK,CAAC,GAAG,2BAAmB,GACrC,EACL,GAAG,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE;gBACzB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;oBACrB,OAAO,CACL,KAAC,GAAG,IAAe,SAAS,EAAE,CAAC,YAC7B,KAAC,IAAI,IAAC,KAAK,EAAE,KAAK,CAAC,GAAG,YAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,GAAQ,IADjD,IAAI,CAAC,EAAE,CAEX,CACP,CAAC;gBACJ,CAAC;gBACD,OAAO,CACL,MAAC,IAAI,IAAe,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,aACtE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EACpB,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAC5B,IAAI,CAAC,KAAK,KAHF,IAAI,CAAC,EAAE,CAIX,CACR,CAAC;YACJ,CAAC,CAAC,IACE,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,EAClB,KAAK,EACL,KAAK,GAAG,GAAG,EACX,MAAM,GAAG,EAAE,EACX,aAAa,GAAG,KAAK,EACrB,aAAa,GACJ;IACT,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,2EAA2E;IAC3E,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,wBAAwB;IACxB,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAE,CAAC;IAClC,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC;IAC1D,iEAAiE;IACjE,MAAM,YAAY,GAAG,SAAS,CAAC;IAE/B,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAElD,QAAQ,CACN,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,SAAS,CACpB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EACxC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EACzD,UAAU,CAAC,MAAM,EACjB,WAAW,CACZ,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC,EACD,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,CAC5B,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE9B,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,aACtD,MAAC,GAAG,eACF,KAAC,OAAO,IAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,aAAa,GAAI,EAUtD,KAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,WAAW,EAAE,CAAC,YACvC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAC5C,KAAC,IAAI,IAAS,KAAK,EAAE,KAAK,CAAC,IAAI,wBAApB,CAAC,CAEL,CACR,CAAC,GACE,EACN,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,KAAK,EAAE,SAAS,aAC1C,KAAC,aAAa,IACZ,KAAK,EAAE,MAAM,CAAC,KAAK,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,EAChE,KAAK,EAAE,YAAY,GACnB,EACF,KAAC,IAAI,IAAC,KAAK,EAAE,YAAY,GAAI,EAC5B,IAAI,CAAC,CAAC,CAAC,CACN,KAAC,IAAI,IACH,KAAK,EAAE,YAAY,EACnB,aAAa,EAAE,aAAa,EAC5B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,eAAe,EAAE,eAAe,GAChC,CACH,CAAC,CAAC,CAAC,CACF,MAAC,IAAI,IAAC,KAAK,EAAE,KAAK,CAAC,GAAG,wCAA0B,MAAM,CAAC,EAAE,SAAS,CACnE,IACG,IACF,EAEN,KAAC,GAAG,cACD,QAAQ,CAAC,CAAC,CAAC,CACV,KAAC,IAAI,IAAC,KAAK,EAAE,KAAK,CAAC,GAAG,+FAEf,CACR,CAAC,CAAC,CAAC,CACF,MAAC,IAAI,IAAC,KAAK,EAAE,KAAK,CAAC,GAAG,aACnB,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,4BAChC,CACR,GACG,IACF,CACP,CAAC;AACJ,CAAC"}