@matthesketh/fleet 1.1.0 → 1.6.0

package/dist/tui/views/LogsView.js

@@ -1,19 +1,24 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useState, useEffect, useRef } from 'react';
-import { Box, Text, useInput } from 'ink';
+import { Box, Text } from 'ink';
 import Spinner from 'ink-spinner';
+import { useRegisterHandler } from '@matthesketh/ink-input-dispatcher';
+import { useAvailableHeight } from '@matthesketh/ink-viewport';
 import { useAppState, useAppDispatch, useRedact } from '../state.js';
 import { runFleetCommand, streamFleetCommand } from '../exec-bridge.js';
 import { colors } from '../theme.js';
-const MAX_LINES = 100;
+const MAX_LINES = 200;
 export function LogsView() {
     const { selectedApp } = useAppState();
     const dispatch = useAppDispatch();
     const redact = useRedact();
+    const availableHeight = useAvailableHeight();
     const [lines, setLines] = useState([]);
     const [following, setFollowing] = useState(false);
     const [loading, setLoading] = useState(true);
     const streamRef = useRef(null);
+    const lineBufferRef = useRef([]);
+    const flushTimerRef = useRef(null);
     useEffect(() => {
         if (!selectedApp)
             return;
@@ -32,40 +37,63 @@ export function LogsView() {
                 streamRef.current.kill();
                 streamRef.current = null;
             }
+            if (flushTimerRef.current) {
+                clearInterval(flushTimerRef.current);
+                flushTimerRef.current = null;
+            }
         };
     }, [selectedApp]);
-    useInput((input, key) => {
+    const handler = (input, key) => {
         if (input === 'f') {
             if (following) {
-                // Stop following
                 if (streamRef.current) {
                     streamRef.current.kill();
                     streamRef.current = null;
                 }
+                if (flushTimerRef.current) {
+                    clearInterval(flushTimerRef.current);
+                    flushTimerRef.current = null;
+                }
+                // flush any remaining buffered lines
+                if (lineBufferRef.current.length > 0) {
+                    const buf = lineBufferRef.current;
+                    lineBufferRef.current = [];
+                    setLines(prev => [...prev, ...buf].slice(-MAX_LINES));
+                }
                 setFollowing(false);
             }
             else if (selectedApp) {
-                // Start following
                 setFollowing(true);
                 const handle = streamFleetCommand(['logs', selectedApp, '-f']);
                 streamRef.current = handle;
                 handle.onData((line) => {
-                    setLines(prev => [...prev.slice(-MAX_LINES + 1), line]);
+                    lineBufferRef.current.push(line);
                 });
+                flushTimerRef.current = setInterval(() => {
+                    const buf = lineBufferRef.current;
+                    if (buf.length === 0)
+                        return;
+                    lineBufferRef.current = [];
+                    setLines(prev => [...prev, ...buf].slice(-MAX_LINES));
+                }, 50);
             }
+            return true;
         }
-        else if (key.escape) {
+        if (key.escape) {
             if (streamRef.current) {
                 streamRef.current.kill();
                 streamRef.current = null;
             }
             dispatch({ type: 'GO_BACK' });
+            return true;
         }
-    });
+        return false;
+    };
+    useRegisterHandler(handler);
     if (loading) {
         return (_jsx(Box, { padding: 1, children: _jsxs(Text, { children: [_jsx(Spinner, { type: "dots" }), " Loading logs for ", selectedApp, "..."] }) }));
     }
-    // Show last N lines that fit in terminal
-    const visibleLines = lines.slice(-30);
+    const visibleCount = Math.max(5, availableHeight - 3);
+    const visibleLines = lines.slice(-visibleCount);
     return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsxs(Box, { marginBottom: 1, gap: 2, children: [_jsxs(Text, { bold: true, color: colors.primary, children: ["Logs: ", redact(selectedApp ?? '')] }), following && (_jsxs(Text, { color: colors.success, children: [_jsx(Spinner, { type: "dots" }), " following"] }))] }), _jsx(Box, { flexDirection: "column", children: visibleLines.map((line, i) => (_jsx(Text, { wrap: "truncate", children: line }, i))) })] }));
 }

package/dist/tui/views/MultiLogsView.d.ts

@@ -0,0 +1,2 @@
+import React from 'react';
+export declare function MultiLogsView(): React.JSX.Element;

package/dist/tui/views/MultiLogsView.js

@@ -0,0 +1,165 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useMemo, useRef, useState } from 'react';
+import { Box, Text } from 'ink';
+import Spinner from 'ink-spinner';
+import { useRegisterHandler } from '@matthesketh/ink-input-dispatcher';
+import { useAvailableHeight } from '@matthesketh/ink-viewport';
+import { colors } from '../theme.js';
+import { useRedact } from '../state.js';
+import { load } from '../../core/registry.js';
+import { startMultiTail, resolveSources, } from '../../core/logs-multi.js';
+const MAX_LINES = 500;
+const LEVEL_RANKS = ['debug', 'info', 'warn', 'error', 'all'];
+const LEVEL_RANK_NUMBER = {
+    debug: 0, info: 1, warn: 2, error: 3,
+};
+const SOURCE_PALETTE = [colors.primary, colors.success, colors.warning, colors.muted, 'cyan', 'magenta'];
+function colourForSource(name) {
+    let h = 0;
+    for (let i = 0; i < name.length; i++)
+        h = (h * 31 + name.charCodeAt(i)) | 0;
+    return SOURCE_PALETTE[Math.abs(h) % SOURCE_PALETTE.length];
+}
+export function MultiLogsView() {
+    const redact = useRedact();
+    const availableHeight = useAvailableHeight();
+    const allSources = useMemo(() => {
+        try {
+            return resolveSources(load().apps);
+        }
+        catch {
+            return [];
+        }
+    }, []);
+    // Selection: by default, every container. User toggles with Space.
+    const [selected, setSelected] = useState(() => new Set(allSources.map(s => `${s.app}/${s.container}`)));
+    const [pickerIndex, setPickerIndex] = useState(0);
+    const [paused, setPaused] = useState(false);
+    const [level, setLevel] = useState('all');
+    const [lines, setLines] = useState([]);
+    const [pickerFocused, setPickerFocused] = useState(true);
+    const handleRef = useRef(null);
+    const lineIdRef = useRef(0);
+    // Buffer lines between renders so we batch React updates and don't flicker
+    // when bursts of output land. flushed every 100ms.
+    const pendingRef = useRef([]);
+    // (Re)start tailers whenever the selection changes.
+    useEffect(() => {
+        if (handleRef.current) {
+            void handleRef.current.stop();
+            handleRef.current = null;
+        }
+        pendingRef.current = [];
+        setLines([]);
+        const sources = allSources.filter(s => selected.has(`${s.app}/${s.container}`));
+        if (sources.length === 0)
+            return;
+        const handle = startMultiTail(sources, { tail: 30, follow: true }, line => {
+            pendingRef.current.push({ ...line, id: ++lineIdRef.current });
+        });
+        handleRef.current = handle;
+        return () => { void handle.stop(); };
+    }, [allSources, selected]);
+    // Flush buffered lines into state on a 100ms tick (batched to avoid flicker).
+    useEffect(() => {
+        const t = setInterval(() => {
+            if (paused)
+                return;
+            if (pendingRef.current.length === 0)
+                return;
+            const batch = pendingRef.current;
+            pendingRef.current = [];
+            setLines(prev => {
+                const merged = prev.length + batch.length > MAX_LINES
+                    ? [...prev, ...batch].slice(-MAX_LINES)
+                    : [...prev, ...batch];
+                return merged;
+            });
+        }, 100);
+        return () => clearInterval(t);
+    }, [paused]);
+    const handler = (input, key) => {
+        // Tab toggles focus between picker and viewport (so j/k goes to the right place).
+        if (key.tab) {
+            setPickerFocused(p => !p);
+            return true;
+        }
+        if (pickerFocused) {
+            if (input === 'j' || key.downArrow) {
+                setPickerIndex(i => Math.min(i + 1, allSources.length - 1));
+                return true;
+            }
+            if (input === 'k' || key.upArrow) {
+                setPickerIndex(i => Math.max(i - 1, 0));
+                return true;
+            }
+            if (input === ' ') {
+                const src = allSources[pickerIndex];
+                if (!src)
+                    return true;
+                const k = `${src.app}/${src.container}`;
+                setSelected(prev => {
+                    const next = new Set(prev);
+                    if (next.has(k))
+                        next.delete(k);
+                    else
+                        next.add(k);
+                    return next;
+                });
+                return true;
+            }
+            if (input === 'a') {
+                // Select / deselect all
+                setSelected(prev => prev.size === allSources.length
+                    ? new Set()
+                    : new Set(allSources.map(s => `${s.app}/${s.container}`)));
+                return true;
+            }
+        }
+        if (input === 'p') {
+            setPaused(p => !p);
+            return true;
+        }
+        if (input === 'c') {
+            setLines([]);
+            pendingRef.current = [];
+            return true;
+        }
+        if (input === 'L') {
+            // Cycle level filter
+            setLevel(l => LEVEL_RANKS[(LEVEL_RANKS.indexOf(l) + 1) % LEVEL_RANKS.length]);
+            return true;
+        }
+        return false;
+    };
+    useRegisterHandler(handler);
+    // Apply level filter at render time so the buffer keeps everything (cheap to
+    // change filter back and forth without losing history).
+    const filteredLines = useMemo(() => {
+        if (level === 'all')
+            return lines;
+        const minRank = LEVEL_RANK_NUMBER[level];
+        return lines.filter(l => {
+            if (l.level === 'unknown')
+                return false;
+            return LEVEL_RANK_NUMBER[l.level] >= minRank;
+        });
+    }, [lines, level]);
+    // Rough split of the viewport: 30% picker, 70% logs (min 5 rows each).
+    const totalH = Math.max(10, availableHeight - 4);
+    const pickerH = Math.max(5, Math.floor(totalH * 0.3));
+    const logsH = Math.max(5, totalH - pickerH - 1);
+    const visibleLogs = filteredLines.slice(-logsH);
+    const maxLabelLen = useMemo(() => allSources.reduce((m, s) => Math.max(m, `${s.app}/${s.container}`.length), 0), [allSources]);
+    return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsxs(Box, { marginBottom: 1, gap: 2, children: [_jsx(Text, { bold: true, color: colors.primary, children: "Multi-source Logs" }), _jsxs(Text, { color: colors.muted, children: [selected.size, "/", allSources.length, " sources \u00B7 level:", level, " \u00B7 ", paused ? 'PAUSED' : 'live'] }), !paused && handleRef.current && handleRef.current.active() > 0 && (_jsxs(Text, { color: colors.success, children: [_jsx(Spinner, { type: "dots" }), " tailing"] }))] }), _jsxs(Box, { flexDirection: "column", height: pickerH, marginBottom: 1, borderStyle: pickerFocused ? 'round' : 'single', borderColor: pickerFocused ? colors.primary : colors.muted, children: [_jsx(Box, { paddingX: 1, children: _jsx(Text, { bold: true, color: colors.muted, children: "Sources [Tab to switch focus, Space toggle, a all/none]" }) }), _jsxs(Box, { flexDirection: "column", paddingX: 1, children: [allSources.slice(0, pickerH - 2).map((src, i) => {
+                                const k = `${src.app}/${src.container}`;
+                                const checked = selected.has(k);
+                                const cursor = pickerFocused && i === pickerIndex ? '>' : ' ';
+                                return (_jsxs(Text, { color: checked ? colors.success : colors.muted, children: [cursor, " ", checked ? '☑' : '☐', " ", redact(src.app), "/", src.container] }, k));
+                            }), allSources.length > pickerH - 2 && (_jsxs(Text, { color: colors.muted, children: ["\u2026 ", allSources.length - (pickerH - 2), " more"] }))] })] }), _jsxs(Box, { flexDirection: "column", height: logsH, borderStyle: !pickerFocused ? 'round' : 'single', borderColor: !pickerFocused ? colors.primary : colors.muted, children: [_jsx(Box, { paddingX: 1, children: _jsxs(Text, { bold: true, color: colors.muted, children: ["Logs [p pause \u00B7 c clear \u00B7 L level cycle \u00B7 last ", visibleLogs.length, "/", filteredLines.length, "]"] }) }), _jsx(Box, { flexDirection: "column", paddingX: 1, children: visibleLogs.map(line => {
+                            const label = `${line.app}/${line.container}`.padEnd(maxLabelLen);
+                            const colour = colourForSource(`${line.app}/${line.container}`);
+                            const ts = line.ts.toISOString().slice(11, 19); // HH:MM:SS
+                            return (_jsxs(Text, { wrap: "truncate", children: [_jsxs(Text, { color: colors.muted, children: [ts, " "] }), _jsx(Text, { color: colour, children: label }), _jsxs(Text, { children: [" ", line.text] })] }, line.id));
+                        }) })] })] }));
+}

package/dist/tui/views/SecretEdit.js

@@ -1,7 +1,8 @@
 import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
-import { useState, useEffect } from 'react';
-import { Box, Text, useInput } from 'ink';
+import { useState, useEffect, useRef } from 'react';
+import { Box, Text } from 'ink';
 import TextInput from 'ink-text-input';
+import { useRegisterHandler } from '@matthesketh/ink-input-dispatcher';
 import { useAppState, useAppDispatch } from '../state.js';
 import { useSecrets } from '../hooks/use-secrets.js';
 import { getSecret as getCoreSecret } from '../../core/secrets-ops.js';
@@ -15,6 +16,13 @@ export function SecretEdit() {
     const [value, setValue] = useState('');
     const [phase, setPhase] = useState(isNew ? 'key' : 'value');
     const [status, setStatus] = useState(null);
+    const timerRef = useRef(null);
+    useEffect(() => {
+        return () => {
+            if (timerRef.current)
+                clearTimeout(timerRef.current);
+        };
+    }, []);
     useEffect(() => {
         if (!isNew && selectedApp && selectedSecret) {
             try {
@@ -26,14 +34,14 @@ export function SecretEdit() {
                 // ignore
             }
         }
-    }, []);
+    }, [isNew, selectedApp, selectedSecret]);
     const save = () => {
         if (!selectedApp || !keyName)
             return;
         const result = secrets.saveSecret(selectedApp, keyName, value);
         if (result.ok) {
             setStatus('Saved and re-sealed');
-            setTimeout(() => {
+            timerRef.current = setTimeout(() => {
                 dispatch({ type: 'GO_BACK' });
             }, 500);
         }
@@ -41,13 +49,16 @@ export function SecretEdit() {
             setStatus(`Error: ${result.error}`);
         }
     };
-    useInput((input, key) => {
+    const handler = (_input, key) => {
         if (key.escape) {
             dispatch({ type: 'GO_BACK' });
+            return true;
         }
-    });
+        return false;
+    };
+    useRegisterHandler(handler);
     return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsxs(Text, { bold: true, color: colors.primary, children: [isNew ? 'Add Secret' : 'Edit Secret', " - ", selectedApp] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", gap: 1, children: [_jsxs(Box, { children: [_jsx(Text, { color: colors.muted, children: "Key:   " }), isNew && phase === 'key' ? (_jsx(TextInput, { value: keyName, onChange: setKeyName, onSubmit: () => {
                                     if (keyName)
                                         setPhase('value');
-                                } })) : (_jsx(Text, { bold: true, children: keyName }))] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.muted, children: "Value: " }), phase === 'value' ? (_jsx(TextInput, { value: value, onChange: setValue, onSubmit: save })) : (_jsx(Text, { color: colors.muted, children: "(press Enter on key first)" }))] })] }), status && (_jsx(Box, { marginTop: 1, children: _jsx(Text, { color: status.startsWith('Error') ? colors.error : colors.success, children: status }) })), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: colors.muted, children: "Enter to save | Esc to cancel" }) })] }));
+                                } })) : (_jsx(Text, { bold: true, children: keyName }))] }), _jsxs(Box, { children: [_jsx(Text, { color: colors.muted, children: "Value: " }), phase === 'value' ? (_jsx(TextInput, { value: value, onChange: setValue, onSubmit: save, mask: "*" })) : (_jsx(Text, { color: colors.muted, children: "(press Enter on key first)" }))] })] }), status && (_jsx(Box, { marginTop: 1, children: _jsx(Text, { color: status.startsWith('Error') ? colors.error : colors.success, children: status }) })), _jsx(Box, { marginTop: 1, children: _jsx(Text, { color: colors.muted, children: "Enter to save | Esc to cancel" }) })] }));
 }

package/dist/tui/views/SecretsView.js

@@ -1,82 +1,97 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useEffect, useState } from 'react';
-import { Box, Text, useInput } from 'ink';
+import { useEffect, useCallback } from 'react';
+import { Box, Text } from 'ink';
+import { useRegisterHandler } from '@matthesketh/ink-input-dispatcher';
+import { ScrollableList } from '@matthesketh/ink-scrollable-list';
+import { useAvailableHeight } from '@matthesketh/ink-viewport';
 import { useAppState, useAppDispatch, useRedact } from '../state.js';
 import { useSecrets } from '../hooks/use-secrets.js';
 import { colors } from '../theme.js';
 export function SecretsView() {
-    const { selectedApp } = useAppState();
+    const state = useAppState();
     const dispatch = useAppDispatch();
     const redact = useRedact();
     const secrets = useSecrets();
-    const [subView, setSubView] = useState('app-list');
-    const [selectedIndex, setSelectedIndex] = useState(0);
+    const availableHeight = useAvailableHeight();
+    const { secretsSubView: subView, secretsIndex: selectedIndex, selectedApp } = state;
+    const refresh = secrets.refresh;
     useEffect(() => {
-        secrets.refresh();
-    }, []);
+        refresh();
+    }, [refresh]);
     useEffect(() => {
         if (subView === 'secret-list' && selectedApp) {
             secrets.loadAppSecrets(selectedApp);
         }
-    }, [subView, selectedApp]);
-    useInput((input, key) => {
+    }, [subView, selectedApp, secrets.loadAppSecrets]);
+    const handler = useCallback((input, key) => {
         if (subView === 'app-list') {
             if (input === 'j' || key.downArrow) {
-                setSelectedIndex(prev => Math.min(prev + 1, secrets.apps.length - 1));
+                dispatch({ type: 'SET_INDEX', view: 'secrets', index: Math.min(selectedIndex + 1, secrets.apps.length - 1) });
+                return true;
             }
-            else if (input === 'k' || key.upArrow) {
-                setSelectedIndex(prev => Math.max(prev - 1, 0));
+            if (input === 'k' || key.upArrow) {
+                dispatch({ type: 'SET_INDEX', view: 'secrets', index: Math.max(selectedIndex - 1, 0) });
+                return true;
             }
-            else if (key.return && secrets.apps[selectedIndex]) {
+            if (key.return && secrets.apps[selectedIndex]) {
                 dispatch({ type: 'SELECT_APP', app: secrets.apps[selectedIndex].app });
-                setSubView('secret-list');
-                setSelectedIndex(0);
+                dispatch({ type: 'SET_SECRETS_SUBVIEW', subView: 'secret-list' });
+                return true;
             }
-            else if (input === 'u') {
+            if (input === 'u') {
                 const result = secrets.unseal();
                 if (!result.ok) {
                     dispatch({ type: 'SET_ERROR', error: result.error ?? 'Unseal failed' });
                 }
                 secrets.refresh();
+                return true;
             }
-            else if (input === 'l') {
+            if (input === 'l') {
                 const result = secrets.seal();
                 if (!result.ok) {
                     dispatch({ type: 'SET_ERROR', error: result.error ?? 'Seal failed' });
                 }
                 secrets.refresh();
+                return true;
             }
         }
         else if (subView === 'secret-list') {
+            if (secrets.secrets.length === 0)
+                return false;
             if (input === 'j' || key.downArrow) {
-                setSelectedIndex(prev => Math.min(prev + 1, secrets.secrets.length - 1));
+                dispatch({ type: 'SET_INDEX', view: 'secrets', index: Math.min(selectedIndex + 1, secrets.secrets.length - 1) });
+                return true;
             }
-            else if (input === 'k' || key.upArrow) {
-                setSelectedIndex(prev => Math.max(prev - 1, 0));
+            if (input === 'k' || key.upArrow) {
+                dispatch({ type: 'SET_INDEX', view: 'secrets', index: Math.max(selectedIndex - 1, 0) });
+                return true;
             }
-            else if (key.return && secrets.secrets[selectedIndex] && selectedApp) {
+            if (key.return && secrets.secrets[selectedIndex] && selectedApp) {
                 dispatch({ type: 'SELECT_SECRET', key: secrets.secrets[selectedIndex].key });
                 dispatch({ type: 'NAVIGATE', view: 'secret-edit' });
+                return true;
             }
-            else if (key.escape) {
-                setSubView('app-list');
-                setSelectedIndex(0);
+            if (key.escape) {
+                dispatch({ type: 'SET_SECRETS_SUBVIEW', subView: 'app-list' });
+                return true;
             }
-            else if (input === 'a' && selectedApp) {
+            if (input === 'a' && selectedApp) {
                 dispatch({ type: 'SELECT_SECRET', key: null });
                 dispatch({ type: 'NAVIGATE', view: 'secret-edit' });
+                return true;
             }
-            else if (input === 'd' && selectedApp && secrets.secrets[selectedIndex]) {
+            if (input === 'd' && selectedApp && secrets.secrets[selectedIndex]) {
                 const secretKey = secrets.secrets[selectedIndex].key;
+                const appName = selectedApp;
                 dispatch({
                     type: 'CONFIRM',
                     action: {
                         label: `Delete secret "${secretKey}"?`,
-                        description: `This will remove ${secretKey} from ${redact(selectedApp)}'s vault.`,
+                        description: `This will remove ${secretKey} from ${redact(appName)}'s vault.`,
                         onConfirm: () => {
-                            const result = secrets.deleteSecret(selectedApp, secretKey);
+                            const result = secrets.deleteSecret(appName, secretKey);
                             if (result.ok) {
-                                secrets.loadAppSecrets(selectedApp);
+                                secrets.loadAppSecrets(appName);
                                 secrets.refresh();
                             }
                             else {
@@ -85,8 +100,9 @@ export function SecretsView() {
                         },
                     },
                 });
+                return true;
             }
-            else if (input === 'r' && selectedApp && secrets.secrets[selectedIndex]) {
+            if (input === 'r' && selectedApp && secrets.secrets[selectedIndex]) {
                 const secretKey = secrets.secrets[selectedIndex].key;
                 if (secrets.revealedValues[secretKey]) {
                     secrets.hideSecret(secretKey);
@@ -94,15 +110,15 @@ export function SecretsView() {
                 else {
                     secrets.revealSecret(selectedApp, secretKey);
                 }
+                return true;
             }
         }
-    });
-    return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsxs(Box, { marginBottom: 1, paddingX: 1, gap: 2, children: [_jsx(Text, { bold: true, children: "Vault:" }), !secrets.initialized ? (_jsx(Text, { color: colors.error, children: "Not initialized" })) : secrets.sealed ? (_jsx(Text, { color: colors.warning, bold: true, children: "SEALED" })) : (_jsx(Text, { color: colors.success, bold: true, children: "UNSEALED" })), _jsxs(Text, { color: colors.muted, children: [secrets.apps.length, " apps | ", secrets.apps.reduce((sum, a) => sum + a.keyCount, 0), " keys"] })] }), secrets.error && (_jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: colors.error, children: secrets.error }) })), subView === 'app-list' ? (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, children: "Apps with secrets:" }), secrets.apps.length === 0 ? (_jsx(Text, { color: colors.muted, children: "  No secrets managed" })) : (secrets.apps.map((app, i) => {
-                        const selected = i === selectedIndex;
-                        return (_jsxs(Text, { children: [_jsx(Text, { color: colors.primary, children: selected ? '> ' : '  ' }), _jsx(Text, { bold: selected, color: selected ? colors.primary : colors.text, children: redact(app.app).padEnd(24) }), _jsx(Text, { color: colors.muted, children: app.type.padEnd(14) }), _jsxs(Text, { children: [String(app.keyCount).padEnd(8), " keys"] })] }, app.app));
-                    }))] })) : (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, color: colors.primary, children: redact(selectedApp ?? '') }), _jsx(Box, { marginTop: 1, flexDirection: "column", children: secrets.secrets.length === 0 ? (_jsx(Text, { color: colors.muted, children: "  No secrets found" })) : (secrets.secrets.map((secret, i) => {
-                            const selected = i === selectedIndex;
-                            const revealed = secrets.revealedValues[secret.key];
-                            return (_jsxs(Text, { children: [_jsx(Text, { color: colors.primary, children: selected ? '> ' : '  ' }), _jsx(Text, { bold: selected, color: selected ? colors.primary : colors.text, children: secret.key.padEnd(30) }), _jsx(Text, { color: revealed ? colors.warning : colors.muted, children: revealed ?? secret.maskedValue })] }, secret.key));
-                        })) })] }))] }));
+        return false;
+    }, [subView, selectedIndex, selectedApp, secrets, dispatch, redact]);
+    useRegisterHandler(handler);
+    const listHeight = Math.max(5, availableHeight - 5);
+    return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsxs(Box, { marginBottom: 1, paddingX: 1, gap: 2, children: [_jsx(Text, { bold: true, children: "Vault:" }), !secrets.initialized ? (_jsx(Text, { color: colors.error, children: "Not initialized" })) : secrets.sealed ? (_jsx(Text, { color: colors.warning, bold: true, children: "SEALED" })) : (_jsx(Text, { color: colors.success, bold: true, children: "UNSEALED" })), _jsxs(Text, { color: colors.muted, children: [secrets.apps.length, " apps | ", secrets.apps.reduce((sum, a) => sum + a.keyCount, 0), " keys"] })] }), secrets.error && (_jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: colors.error, children: secrets.error }) })), subView === 'app-list' ? (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, children: "Apps with secrets:" }), _jsx(ScrollableList, { items: secrets.apps, selectedIndex: Math.min(selectedIndex, secrets.apps.length - 1), maxVisible: listHeight, emptyText: "  No secrets managed", renderItem: (app, selected) => (_jsxs(Box, { children: [_jsx(Text, { color: colors.primary, children: selected ? '> ' : '  ' }), _jsx(Text, { bold: selected, color: selected ? colors.primary : colors.text, children: redact(app.app).padEnd(24) }), _jsx(Text, { color: colors.muted, children: app.type.padEnd(14) }), _jsxs(Text, { children: [String(app.keyCount).padEnd(8), " keys"] })] })) })] })) : (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, color: colors.primary, children: redact(selectedApp ?? '') }), _jsx(Box, { marginTop: 1, flexDirection: "column", children: _jsx(ScrollableList, { items: secrets.secrets, selectedIndex: Math.min(selectedIndex, secrets.secrets.length - 1), maxVisible: listHeight, emptyText: "  No secrets found", renderItem: (secret, selected) => {
+                                const revealed = secrets.revealedValues[secret.key];
+                                return (_jsxs(Box, { children: [_jsx(Text, { color: colors.primary, children: selected ? '> ' : '  ' }), _jsx(Text, { bold: selected, color: selected ? colors.primary : colors.text, children: secret.key.padEnd(30) }), _jsx(Text, { color: revealed ? colors.warning : colors.muted, children: revealed ?? secret.maskedValue })] }));
+                            } }) })] }))] }));
 }

package/dist/ui/prompt.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Plain-text and hidden-input prompts, no external deps.
+ *
+ * promptHidden uses raw mode + manual char-by-char read so the echoed value
+ * never appears on the terminal — important for pasting secrets and for
+ * tools like `script` / asciinema.
+ */
+export declare function prompt(message: string, defaultValue?: string): Promise<string>;
+/**
+ * String variant — convenience wrapper around the Buffer variant. Use the
+ * Buffer variant directly if you want the strongest in-memory guarantees;
+ * this one converts to string and the result lives in the V8 heap until GC.
+ */
+export declare function promptHidden(message: string): Promise<string>;
+/**
+ * Buffer-based hidden input. Returns the raw input bytes in a Buffer the
+ * caller is expected to zero out (`buf.fill(0)`) when finished — see
+ * `withSecretBuffer` for an automated pattern.
+ *
+ * Why Buffer (not string)?
+ *   - Node strings are immutable + interned in V8 heap; you can't zero them.
+ *     Once a secret string exists, it sits in the heap until GC.
+ *   - Buffer is a writable byte array. Calling `buf.fill(0)` overwrites the
+ *     bytes in-place; subsequent heap dumps and core dumps contain zeros.
+ *
+ * Hardening:
+ *   - Buffer is grown by `Buffer.concat` and the intermediate buffers are
+ *     zeroed before being released.
+ *   - Non-TTY fallback uses `terminal: false` so readline can never promote
+ *     stdout to terminal mode and echo the value.
+ *   - End/error/SIGINT all reject + restore terminal state and zero the
+ *     in-flight buffer so a death never leaves bytes behind.
+ *
+ * KNOWN LIMITATION: any string copy made downstream (e.g. `buf.toString()`
+ * for regex validation) lives in V8 heap until GC. Convert as late as
+ * possible and let the string go out of scope ASAP.
+ */
+export declare function promptHiddenBuffer(message: string): Promise<Buffer>;
+/**
+ * Recommended pattern for handling a secret in memory: read into a Buffer,
+ * pass to your callback, zero on exit (success or throw). Use this instead
+ * of `promptHidden` when the value will be processed by code under your
+ * control end-to-end.
+ *
+ * Example:
+ *   await withSecretBuffer('Paste new STRIPE_SECRET_KEY', async (buf) => {
+ *     const asString = buf.toString('utf8');   // brief string copy
+ *     await sealApp(app, applyRotation(...));   // age-encrypt happens here
+ *     // String copy is unreferenced from this point; buf is zeroed on exit.
+ *   });
+ */
+export declare function withSecretBuffer<T>(message: string, fn: (value: Buffer) => Promise<T>): Promise<T>;