@namzu/cli 14.3.0 → 15.1.0

package/dist/tui/live-window.js

@@ -41,8 +41,9 @@
  * row that has settled never comes back.
  */
 import { renderedDetailLines } from './Transcript.js';
-import { SAFETY_ROWS, estimateRenderedLines } from './bottom-spacer.js';
 import { terminalDisplayText } from './terminal-display.js';
+/** Rows kept clear between the redrawable tail and the terminal boundary. */
+export const LIVE_WINDOW_SAFETY_ROWS = 6;
 /**
  * The most rows the window will ever hold, whatever the terminal's height.
  *
@@ -81,43 +82,86 @@ function messageLines(message, hasPrev, raw) {
     ];
 }
 /**
- * Every line the finalized transcript will print, for a height estimate.
+ * Every line the finalized transcript will print, for the live-window height
+ * estimate and terminal-safety observers.
  *
- * Exported so the wiring is testable rather than only typecheckable. The
- * spacer's own docblock states the asymmetry it depends on: over-count the
- * content and the composer merely floats, under-count it and the composer is
- * pushed off the bottom. The caller used to pass each row's `content` alone,
- * which counted a six-line collapsed tool body as nothing at all — the estimate
- * ran low by six per tool call, in the direction that costs the usability
- * rather than the feature. `/expand` makes it acute: a row whose entire
- * substance is a two-hundred-line body would have been handed over as one line.
+ * Exported so the wiring is testable rather than only typecheckable. The caller
+ * once counted each row's `content` alone, which made a six-line collapsed tool
+ * body look like one line. `/expand` makes that acute: a row whose substance is
+ * a two-hundred-line body must not be admitted to a small redrawable viewport.
  *
  * A pending row is excluded because it is not in the static log yet; the
- * spacer's `liveRows` covers the live region.
+ * pending content is already part of the live region outside this window.
  */
 export function transcriptLines(messages, raw = false) {
     const finalized = messages.filter((m) => !m.pending);
     return finalized.flatMap((message, i) => messageLines(message, i > 0, raw));
 }
+/**
+ * Conservative terminal-cell width.
+ *
+ * ASCII is one cell. Every printable non-ASCII code point is charged two: that
+ * deliberately over-counts combining marks and narrow scripts, but never makes
+ * a CJK glyph one cell or relies on UTF-16 string length for terminal geometry.
+ * Over-counting settles a row earlier; under-counting can trigger Ink's
+ * whole-scrollback repaint path.
+ */
+function terminalCellWidth(value) {
+    let cells = 0;
+    for (const char of value) {
+        const code = char.codePointAt(0) ?? 0;
+        if (char === '\t')
+            cells += 4;
+        else if (code >= 0x20 && code !== 0x7f)
+            cells += code <= 0x7e ? 1 : 2;
+    }
+    return cells;
+}
+/**
+ * A deliberate over-count of how many terminal rows source lines occupy.
+ * Unknown width falls back to a narrow terminal; each source line occupies at
+ * least one row, and wrapping is measured in terminal cells rather than code
+ * units.
+ */
+export function estimateRenderedLines(transcript, columns) {
+    const width = Math.max(20, columns ?? 80);
+    let total = 0;
+    for (const entry of transcript) {
+        for (const line of entry.split('\n')) {
+            total += Math.max(1, Math.ceil(terminalCellWidth(line) / width));
+        }
+    }
+    return total;
+}
 /**
  * Rows added to each windowed row's estimate.
  *
- * `estimateRenderedLines` is deliberately an UNDER-count, because for the
- * bottom spacer counting low leaves more apparent room and the safety margin
- * absorbs the difference. Here the asymmetry runs the other way: under-count a
- * live row and the window takes more of the viewport than it was budgeted, and
- * the price of exceeding the viewport is the whole-session repaint this window
- * exists to stay clear of. Over-count and the window merely holds one row
- * fewer.
+ * Under-count a live row and the window takes more of the viewport than it was
+ * budgeted, and the price of exceeding the viewport is the whole-session
+ * repaint this window exists to stay clear of. Over-count and the window merely
+ * holds one row fewer.
  *
  * Two per row covers what the line estimate cannot see — the rule a code block
  * draws around itself, the blank line markdown puts between blocks — without
  * needing to model any of it.
  */
 const ROW_HEIGHT_ALLOWANCE = 2;
+/**
+ * Markdown can add a margin between adjacent blocks even when source blocks
+ * are not separated by a blank line. One potential row per non-empty assistant
+ * source line is a conservative ceiling on those vertical margins. Detail and
+ * non-assistant rows render as plain Text and need no such allowance.
+ */
+function markdownHeightAllowance(message, raw) {
+    if (raw || message.role !== 'assistant')
+        return 0;
+    return message.content.split('\n').filter((line) => line.trim().length > 0).length;
+}
 /** How tall one row is expected to render, rounded UP. */
 function messageHeight(message, hasPrev, columns, raw) {
-    return estimateRenderedLines(messageLines(message, hasPrev, raw), columns) + ROW_HEIGHT_ALLOWANCE;
+    return (estimateRenderedLines(messageLines(message, hasPrev, raw), columns) +
+        ROW_HEIGHT_ALLOWANCE +
+        markdownHeightAllowance(message, raw));
 }
 /**
  * How much of the transcript stays live, given the room there is for it.
@@ -132,7 +176,7 @@ export function liveWindow(input) {
     const floor = Math.min(Math.max(settled, 0), messages.length);
     if (rows === undefined || !Number.isFinite(rows))
         return { settled: messages.length, rows: 0 };
-    const budget = rows - furnitureRows - SAFETY_ROWS;
+    const budget = rows - furnitureRows - LIVE_WINDOW_SAFETY_ROWS;
     if (budget < 1)
         return { settled: messages.length, rows: 0 };
     let height = 0;

package/dist/tui/live-window.js.map

@@ -1 +1 @@
-{"version":3,"file":"live-window.js","sourceRoot":"","sources":["../../src/tui/live-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAG3D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAA;AAwB9B;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,OAA0B,EAAE,OAAgB,EAAE,GAAY;IAC/E,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAClE,IAAI,GAAG,EAAE,CAAC;QACT,OAAO;YACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACvC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAClD,CAAC,CAAC,EAAE,CAAC;SACN,CAAA;IACF,CAAC;IACD,OAAO;QACN,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,KAAK,OAAO,EAAE;QACd,GAAG,mBAAmB,CAAC,OAAO,CAAC;KAC/B,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAC9B,QAAsC,EACtC,GAAG,GAAG,KAAK;IAEX,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACpD,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAE9B,0DAA0D;AAC1D,SAAS,aAAa,CACrB,OAA0B,EAC1B,OAAgB,EAChB,OAA2B,EAC3B,GAAY;IAEZ,OAAO,qBAAqB,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,GAAG,oBAAoB,CAAA;AAClG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAAsB;IAChD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,GAAG,KAAK,CAAA;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE7D,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IAC9F,MAAM,MAAM,GAAG,IAAI,GAAG,aAAa,GAAG,WAAW,CAAA;IACjD,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IAE5D,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,MAAK;QACnB,MAAM,IAAI,GAAG,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;QACjE,IAAI,IAAI,GAAG,MAAM;YAAE,MAAK;QACxB,MAAM,GAAG,IAAI,CAAA;QACb,IAAI,IAAI,CAAC,CAAA;IACV,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACzD,CAAC"}
+{"version":3,"file":"live-window.js","sourceRoot":"","sources":["../../src/tui/live-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAG3D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAA;AAExC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAA;AAwB9B;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,OAA0B,EAAE,OAAgB,EAAE,GAAY;IAC/E,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAClE,IAAI,GAAG,EAAE,CAAC;QACT,OAAO;YACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACvC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAClD,CAAC,CAAC,EAAE,CAAC;SACN,CAAA;IACF,CAAC;IACD,OAAO;QACN,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,KAAK,OAAO,EAAE;QACd,GAAG,mBAAmB,CAAC,OAAO,CAAC;KAC/B,CAAA;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC9B,QAAsC,EACtC,GAAG,GAAG,KAAK;IAEX,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACpD,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACvC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,IAAI,CAAC,CAAA;aACxB,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACpC,UAA6B,EAC7B,OAA2B;IAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,CAAA;IACzC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAA;QACjE,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAE9B;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,OAA0B,EAAE,GAAY;IACxE,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,CAAC,CAAA;IACjD,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;AACnF,CAAC;AAED,0DAA0D;AAC1D,SAAS,aAAa,CACrB,OAA0B,EAC1B,OAAgB,EAChB,OAA2B,EAC3B,GAAY;IAEZ,OAAO,CACN,qBAAqB,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC;QACnE,oBAAoB;QACpB,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CACrC,CAAA;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAAsB;IAChD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,GAAG,KAAK,CAAA;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE7D,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IAC9F,MAAM,MAAM,GAAG,IAAI,GAAG,aAAa,GAAG,uBAAuB,CAAA;IAC7D,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IAE5D,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,MAAK;QACnB,MAAM,IAAI,GAAG,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;QACjE,IAAI,IAAI,GAAG,MAAM;YAAE,MAAK;QACxB,MAAM,GAAG,IAAI,CAAA;QACb,IAAI,IAAI,CAAC,CAAA;IACV,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACzD,CAAC"}

package/dist/tui/login-prompt.d.ts

@@ -58,6 +58,8 @@ export declare function describeLoginOutcome(outcome: LoginOutcome, hints?: {
 }): string;
 /** What the operator reads after asking namzu to forget the credential. */
 export declare function describeLogout(path: string, removed: boolean): string;
+/** A provider-specific logout result for a store that may hold two siblings. */
+export declare function describeProviderLogout(path: string, provider: 'anthropic' | 'codex', removed: boolean): string;
 /**
  * Whether a `/login` argument is an attempt to finish, rather than to start.
  *

package/dist/tui/login-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-prompt.d.ts","sourceRoot":"","sources":["../../src/tui/login-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAA;AAEtE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAChC,GAAG,MAAM,CAcT;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAC/B,GAAG,MAAM,CAaT;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,YAAY,EACrB,KAAK,GAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/D,MAAM,CAUR;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAIrE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAErE"}
+{"version":3,"file":"login-prompt.d.ts","sourceRoot":"","sources":["../../src/tui/login-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAA;AAEtE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAChC,GAAG,MAAM,CAcT;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAC/B,GAAG,MAAM,CAaT;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,YAAY,EACrB,KAAK,GAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/D,MAAM,CAUR;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAIrE;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,WAAW,GAAG,OAAO,EAC/B,OAAO,EAAE,OAAO,GACd,MAAM,CAKR;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAErE"}

package/dist/tui/login-prompt.js

@@ -71,9 +71,16 @@ export function describeLoginOutcome(outcome, hints = {}) {
 /** What the operator reads after asking namzu to forget the credential. */
 export function describeLogout(path, removed) {
     return removed
-        ? `Removed the stored credential at ${path}. This session keeps working until it ends; the next one will ask you to sign in again.\n\nSigning out here does not revoke anything at the provider — do that in your account settings if you need to.`
+        ? `Removed the stored credential at ${path}. An active turn is not interrupted; a later turn may ask you to sign in again.\n\nSigning out here does not revoke anything at the provider — do that in your account settings if you need to.`
         : "There was no stored credential to remove. If namzu is using one, it came from your environment or from another tool on this machine, and neither is namzu's to delete.";
 }
+/** A provider-specific logout result for a store that may hold two siblings. */
+export function describeProviderLogout(path, provider, removed) {
+    const label = provider === 'anthropic' ? 'Claude' : 'Codex';
+    return removed
+        ? `Removed Namzu's stored ${label} subscription credential at ${path}. Other stored subscriptions were kept. An active turn is not interrupted; a later turn using ${label} may ask you to sign in again.\n\nSigning out here does not revoke anything at the provider, and credentials owned by other tools on this machine were not changed.`
+        : `There was no Namzu-owned ${label} subscription credential to remove. Credentials from the environment or another tool on this machine were not changed.`;
+}
 /**
  * Whether a `/login` argument is an attempt to finish, rather than to start.
  *

package/dist/tui/login-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"login-prompt.js","sourceRoot":"","sources":["../../src/tui/login-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAelC;IACA,MAAM,KAAK,GAAG;QACb,KAAK,CAAC,aAAa;YAClB,CAAC,CAAC,6GAA6G;YAC/G,CAAC,CAAC,0FAA0F;QAC7F,EAAE;QACF,KAAK,CAAC,GAAG;QACT,EAAE;KACF,CAAA;IACD,KAAK,CAAC,IAAI,CACT,mHAAmH,CACnH,CAAA;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,KAAK,CAAC,cAAc,IAAI,wCAAwC,EAAE,CAAC,CAAA;IACvF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACA,OAAO;QACN,KAAK,CAAC,aAAa;YAClB,CAAC,CAAC,oFAAoF;YACtF,CAAC,CAAC,4CAA4C;QAC/C,EAAE;QACF,KAAK,CAAC,GAAG;QACT,EAAE;QACF,kCAAkC;QAClC,KAAK,KAAK,CAAC,QAAQ,EAAE;QACrB,EAAE;QACF,wFAAwF;KACxF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CACnC,OAAqB,EACrB,QAA+D,EAAE;IAEjE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,GAAG,OAAO,CAAC,MAAM,WAAW,KAAK,CAAC,KAAK,IAAI,QAAQ,gBAAgB,CAAA;IAC3E,CAAC;IACD,OAAO;QACN,qFAAqF;QACrF,KAAK,OAAO,CAAC,QAAQ,EAAE;QACvB,EAAE;QACF,wFAAwF,KAAK,CAAC,MAAM,IAAI,SAAS,gBAAgB;KACjI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAgB;IAC5D,OAAO,OAAO;QACb,CAAC,CAAC,oCAAoC,IAAI,yMAAyM;QACnP,CAAC,CAAC,wKAAwK,CAAA;AAC5K,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAuB;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;AACxC,CAAC"}
+{"version":3,"file":"login-prompt.js","sourceRoot":"","sources":["../../src/tui/login-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAelC;IACA,MAAM,KAAK,GAAG;QACb,KAAK,CAAC,aAAa;YAClB,CAAC,CAAC,6GAA6G;YAC/G,CAAC,CAAC,0FAA0F;QAC7F,EAAE;QACF,KAAK,CAAC,GAAG;QACT,EAAE;KACF,CAAA;IACD,KAAK,CAAC,IAAI,CACT,mHAAmH,CACnH,CAAA;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,KAAK,CAAC,cAAc,IAAI,wCAAwC,EAAE,CAAC,CAAA;IACvF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACA,OAAO;QACN,KAAK,CAAC,aAAa;YAClB,CAAC,CAAC,oFAAoF;YACtF,CAAC,CAAC,4CAA4C;QAC/C,EAAE;QACF,KAAK,CAAC,GAAG;QACT,EAAE;QACF,kCAAkC;QAClC,KAAK,KAAK,CAAC,QAAQ,EAAE;QACrB,EAAE;QACF,wFAAwF;KACxF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CACnC,OAAqB,EACrB,QAA+D,EAAE;IAEjE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,GAAG,OAAO,CAAC,MAAM,WAAW,KAAK,CAAC,KAAK,IAAI,QAAQ,gBAAgB,CAAA;IAC3E,CAAC;IACD,OAAO;QACN,qFAAqF;QACrF,KAAK,OAAO,CAAC,QAAQ,EAAE;QACvB,EAAE;QACF,wFAAwF,KAAK,CAAC,MAAM,IAAI,SAAS,gBAAgB;KACjI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAgB;IAC5D,OAAO,OAAO;QACb,CAAC,CAAC,oCAAoC,IAAI,iMAAiM;QAC3O,CAAC,CAAC,wKAAwK,CAAA;AAC5K,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CACrC,IAAY,EACZ,QAA+B,EAC/B,OAAgB;IAEhB,MAAM,KAAK,GAAG,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAA;IAC3D,OAAO,OAAO;QACb,CAAC,CAAC,0BAA0B,KAAK,+BAA+B,IAAI,iGAAiG,KAAK,qKAAqK;QAC/U,CAAC,CAAC,4BAA4B,KAAK,wHAAwH,CAAA;AAC7J,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAuB;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;AACxC,CAAC"}

package/dist/tui/mentions.d.ts

@@ -8,6 +8,25 @@
  * file is capped so a huge file can't blow up the turn. Non-existent or
  * unreadable tokens are left as literal text.
  */
+export interface ActiveFileMention {
+    /** Inclusive `@` position in the complete composer value. */
+    readonly start: number;
+    /** Exclusive end of the token, equal to the current cursor. */
+    readonly end: number;
+    readonly query: string;
+}
+/** The file token currently ending at the cursor, excluding email-like text. */
+export declare function activeFileMention(text: string, cursor: number): ActiveFileMention | null;
+/**
+ * List tracked and unignored project files once per hydrated TUI session.
+ *
+ * The command is argument-vector based (no shell), bounded by time, output and
+ * result count, and returns no candidates outside a repository. Exact `@path`
+ * input keeps working outside Git; only the convenience picker is absent.
+ */
+export declare function listMentionableFiles(cwd: string, signal?: AbortSignal): Promise<readonly string[]>;
+/** Deterministic fuzzy file matches for the active token, bounded for rendering. */
+export declare function matchMentionableFiles(query: string, files: readonly string[], limit?: number): readonly string[];
 export interface ExpandedMessage {
     /** Text to send to the model (original + inlined `<file>` blocks). */
     readonly sendText: string;

package/dist/tui/mentions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mentions.d.ts","sourceRoot":"","sources":["../../src/tui/mentions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,MAAM,WAAW,eAAe;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAuC,GAC7E,eAAe,CAmBjB"}
+{"version":3,"file":"mentions.d.ts","sourceRoot":"","sources":["../../src/tui/mentions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAgBH,MAAM,WAAW,iBAAiB;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,+DAA+D;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACtB;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CASxF;AAOD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACzC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAsB5B;AAuBD,oFAAoF;AACpF,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,SAAM,GACT,SAAS,MAAM,EAAE,CAcnB;AAED,MAAM,WAAW,eAAe;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAuC,GAC7E,eAAe,CAmBjB"}

package/dist/tui/mentions.js

@@ -8,11 +8,102 @@
  * file is capped so a huge file can't blow up the turn. Non-existent or
  * unreadable tokens are left as literal text.
  */
-import { readFileSync, statSync } from 'node:fs';
+import { execFile } from 'node:child_process';
+import { readFileSync, realpathSync, statSync } from 'node:fs';
 import { resolve, sep } from 'node:path';
+import { promisify } from 'node:util';
 /** Path-ish characters only, so `@a.ts,` or `@a.ts)` don't swallow punctuation. */
 const MENTION = /@([\w./~-]+)/g;
+const MENTION_PATH = /^[\w./~-]+$/u;
 const MAX_FILE_CHARS = 60_000;
+const MAX_MENTION_FILES = 20_000;
+const FILE_LIST_TIMEOUT_MS = 5_000;
+const run = promisify(execFile);
+/** The file token currently ending at the cursor, excluding email-like text. */
+export function activeFileMention(text, cursor) {
+    const prefix = text.slice(0, Math.max(0, Math.min(cursor, text.length)));
+    const start = prefix.lastIndexOf('@');
+    if (start < 0)
+        return null;
+    const query = prefix.slice(start + 1);
+    if (query.length > 0 && !MENTION_PATH.test(query))
+        return null;
+    const before = start > 0 ? prefix[start - 1] : undefined;
+    if (before !== undefined && /[\w./~-]/u.test(before))
+        return null;
+    return { start, end: prefix.length, query };
+}
+function isMentionablePath(path) {
+    if (path.length === 0 || path.startsWith('/') || !MENTION_PATH.test(path))
+        return false;
+    return !path.split('/').some((part) => part === '' || part === '.' || part === '..');
+}
+/**
+ * List tracked and unignored project files once per hydrated TUI session.
+ *
+ * The command is argument-vector based (no shell), bounded by time, output and
+ * result count, and returns no candidates outside a repository. Exact `@path`
+ * input keeps working outside Git; only the convenience picker is absent.
+ */
+export async function listMentionableFiles(cwd, signal) {
+    try {
+        const { stdout } = await run('git', ['ls-files', '--cached', '--others', '--exclude-standard', '-z', '--'], {
+            cwd,
+            signal,
+            timeout: FILE_LIST_TIMEOUT_MS,
+            maxBuffer: 2 * 1024 * 1024,
+        });
+        const files = [];
+        for (const path of stdout.split('\0')) {
+            if (!isMentionablePath(path))
+                continue;
+            files.push(path);
+            if (files.length === MAX_MENTION_FILES)
+                break;
+        }
+        return files;
+    }
+    catch {
+        return [];
+    }
+}
+function subsequenceMatch(candidate, query) {
+    let index = 0;
+    for (const character of candidate) {
+        if (character === query[index])
+            index += 1;
+        if (index === query.length)
+            return true;
+    }
+    return query.length === 0;
+}
+function mentionRank(path, query) {
+    if (query.length === 0)
+        return [0, path.length, path];
+    const normalized = path.toLowerCase();
+    const basename = normalized.slice(normalized.lastIndexOf('/') + 1);
+    if (basename.startsWith(query))
+        return [0, path.length, path];
+    if (normalized.startsWith(query))
+        return [1, path.length, path];
+    if (basename.includes(query))
+        return [2, path.length, path];
+    if (normalized.includes(query))
+        return [3, path.length, path];
+    if (subsequenceMatch(normalized, query))
+        return [4, path.length, path];
+    return null;
+}
+/** Deterministic fuzzy file matches for the active token, bounded for rendering. */
+export function matchMentionableFiles(query, files, limit = 100) {
+    const normalizedQuery = query.toLowerCase();
+    return files
+        .map((path) => ({ path, rank: mentionRank(path, normalizedQuery) }))
+        .filter((candidate) => candidate.rank !== null)
+        .sort((a, b) => a.rank[0] - b.rank[0] || a.rank[1] - b.rank[1] || a.rank[2].localeCompare(b.rank[2]))
+        .slice(0, Math.max(0, limit))
+        .map(({ path }) => path);
+}
 /**
  * Expand `@path` tokens in `text`. `readFile` is injectable for tests; the
  * default reads from disk, scoped to `cwd` and size-capped.
@@ -42,11 +133,11 @@ export function expandFileMentions(text, cwd, readFile = (rel) => safeReadInCwd(
     return { sendText: `${text}\n\n${blocks.join('\n\n')}`, attached };
 }
 function safeReadInCwd(cwd, rel) {
-    const root = resolve(cwd);
-    const abs = resolve(root, rel);
-    if (abs !== root && !abs.startsWith(root + sep))
-        return null;
     try {
+        const root = realpathSync(resolve(cwd));
+        const abs = realpathSync(resolve(root, rel));
+        if (abs !== root && !abs.startsWith(root + sep))
+            return null;
         if (!statSync(abs).isFile())
             return null;
         const raw = readFileSync(abs, 'utf8');

package/dist/tui/mentions.js.map

@@ -1 +1 @@
-{"version":3,"file":"mentions.js","sourceRoot":"","sources":["../../src/tui/mentions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAChD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAExC,mFAAmF;AACnF,MAAM,OAAO,GAAG,eAAe,CAAA;AAE/B,MAAM,cAAc,GAAG,MAAM,CAAA;AAS7B;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CACjC,IAAY,EACZ,GAAW,EACX,WAA+C,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC;IAE/E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC1B,wEAAwE;QACxE,wCAAwC;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;QAClD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC/C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,OAAO,KAAK,IAAI;YAAE,SAAQ;QAC9B,MAAM,CAAC,IAAI,CAAC,eAAe,GAAG,OAAO,OAAO,WAAW,CAAC,CAAA;QACxD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAChE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAA;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,GAAW;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5D,IAAI,CAAC;QACJ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAA;QACxC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACrC,OAAO,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAA;IAC5F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC"}
+{"version":3,"file":"mentions.js","sourceRoot":"","sources":["../../src/tui/mentions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC9D,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,mFAAmF;AACnF,MAAM,OAAO,GAAG,eAAe,CAAA;AAC/B,MAAM,YAAY,GAAG,cAAc,CAAA;AAEnC,MAAM,cAAc,GAAG,MAAM,CAAA;AAC7B,MAAM,iBAAiB,GAAG,MAAM,CAAA;AAChC,MAAM,oBAAoB,GAAG,KAAK,CAAA;AAClC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAU/B,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAc;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC9D,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,IAAI,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACjE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACvF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAA;AACrF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,GAAW,EACX,MAAoB;IAEpB,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAC3B,KAAK,EACL,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,IAAI,CAAC,EACtE;YACC,GAAG;YACH,MAAM;YACN,OAAO,EAAE,oBAAoB;YAC7B,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;SAC1B,CACD,CAAA;QACD,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACtC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,IAAI,KAAK,CAAC,MAAM,KAAK,iBAAiB;gBAAE,MAAK;QAC9C,CAAC;QACD,OAAO,KAAK,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAA;IACV,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,KAAa;IACzD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;QACnC,IAAI,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAA;QAC1C,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;IACxC,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAClE,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7D,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/D,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC3D,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7D,IAAI,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACtE,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CACpC,KAAa,EACb,KAAwB,EACxB,KAAK,GAAG,GAAG;IAEX,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IAC3C,OAAO,KAAK;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;SACnE,MAAM,CACN,CAAC,SAAS,EAA0E,EAAE,CACrF,SAAS,CAAC,IAAI,KAAK,IAAI,CACxB;SACA,IAAI,CACJ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACR,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACrF;SACA,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;SAC5B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;AAC1B,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CACjC,IAAY,EACZ,GAAW,EACX,WAA+C,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC;IAE/E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC1B,wEAAwE;QACxE,wCAAwC;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;QAClD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC/C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,OAAO,KAAK,IAAI;YAAE,SAAQ;QAC9B,MAAM,CAAC,IAAI,CAAC,eAAe,GAAG,OAAO,OAAO,WAAW,CAAC,CAAA;QACxD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAChE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAA;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,GAAW;IAC9C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QACvC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;QAC5C,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAA;QACxC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACrC,OAAO,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAA;IAC5F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC"}

package/dist/tui/permission-review.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Maximum exact permission envelope handed to an interactive reviewer.
+ *
+ * This is a refusal boundary, not a display truncation boundary. A call above
+ * it is not offered for approval and is not executed. Keeping the limit on the
+ * complete batch also prevents many individually-small calls from turning one
+ * consent prompt into an unbounded allocation.
+ */
+export declare const MAX_PERMISSION_REVIEW_BYTES = 8000;
+/** Physical rows kept visible in the exact-input pager. */
+export declare const PERMISSION_REVIEW_PAGE_ROWS = 8;
+export interface PermissionReviewCall {
+    readonly id: string;
+    readonly name: string;
+    readonly input: unknown;
+    readonly isDestructive: boolean;
+}
+export type PermissionReviewResult = {
+    readonly ok: true;
+    readonly text: string;
+    readonly bytes: number;
+} | {
+    readonly ok: false;
+    readonly reason: 'too_large' | 'unrepresentable';
+};
+/** Actionable fail-closed feedback for a TUI review that cannot be exact. */
+export declare function permissionReviewRefusal(reason: 'too_large' | 'unrepresentable'): string;
+/** One terminal row of the source-preserving permission projection. */
+export interface PermissionReviewRow {
+    /** Stable absolute position in the projected review. */
+    readonly index: number;
+    readonly text: string;
+    /** True when this row continues the logical line above it. */
+    readonly continuation: boolean;
+}
+/**
+ * Serialize the exact executable batch without invoking getters or `toJSON`.
+ *
+ * `ToolRegistry.prepareExecution()` already publishes detached JSON values,
+ * but this is a host boundary and structural SDK implementations can still
+ * supply `unknown`. Ordinary `JSON.stringify` would execute an accessor and
+ * could silently turn a Date/Map/custom object into something other than the
+ * value being approved. The bounded writer accepts only the JSON graph the
+ * permission protocol can preserve and stops building as soon as the complete
+ * envelope crosses the limit.
+ */
+export declare function buildPermissionReview(calls: readonly PermissionReviewCall[], maxBytes?: number): PermissionReviewResult;
+/**
+ * Project and wrap exact review text into PHYSICAL terminal rows.
+ *
+ * JSON strings can contain thousands of characters on one logical line. Ink
+ * would wrap that line after pagination, leaving the suffix below the viewport
+ * while the pager still believed there was only one row. Wrapping first makes
+ * the pager's unit the same row the operator sees. Non-ASCII code points count
+ * conservatively as two cells; overestimating produces shorter rows, never a
+ * hidden tail.
+ */
+export declare function permissionReviewRows(review: string, terminalColumns: number | undefined): readonly PermissionReviewRow[];
+//# sourceMappingURL=permission-review.d.ts.map

package/dist/tui/permission-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-review.d.ts","sourceRoot":"","sources":["../../src/tui/permission-review.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,OAAQ,CAAA;AAEhD,2DAA2D;AAC3D,eAAO,MAAM,2BAA2B,IAAI,CAAA;AAE5C,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAE3E,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAIvF;AAED,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IACnC,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAC9B;AAKD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,SAAS,oBAAoB,EAAE,EACtC,QAAQ,SAA8B,GACpC,sBAAsB,CAqJxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,GAAG,SAAS,GACjC,SAAS,mBAAmB,EAAE,CA6BhC"}

package/dist/tui/permission-review.js

@@ -0,0 +1,219 @@
+import { terminalDisplayText } from './terminal-display.js';
+/**
+ * Maximum exact permission envelope handed to an interactive reviewer.
+ *
+ * This is a refusal boundary, not a display truncation boundary. A call above
+ * it is not offered for approval and is not executed. Keeping the limit on the
+ * complete batch also prevents many individually-small calls from turning one
+ * consent prompt into an unbounded allocation.
+ */
+export const MAX_PERMISSION_REVIEW_BYTES = 8_000;
+/** Physical rows kept visible in the exact-input pager. */
+export const PERMISSION_REVIEW_PAGE_ROWS = 8;
+/** Actionable fail-closed feedback for a TUI review that cannot be exact. */
+export function permissionReviewRefusal(reason) {
+    return reason === 'too_large'
+        ? `Refused: the complete tool batch exceeds the ${MAX_PERMISSION_REVIEW_BYTES}-byte interactive review limit. Split it into smaller calls or add an explicit allow rule after reviewing the operation another way.`
+        : 'Refused: this tool batch contains input the interactive permission protocol cannot represent exactly. Use JSON-compatible input or add an explicit allow rule after reviewing the operation another way.';
+}
+class ReviewLimitError extends Error {
+}
+class ReviewShapeError extends Error {
+}
+/**
+ * Serialize the exact executable batch without invoking getters or `toJSON`.
+ *
+ * `ToolRegistry.prepareExecution()` already publishes detached JSON values,
+ * but this is a host boundary and structural SDK implementations can still
+ * supply `unknown`. Ordinary `JSON.stringify` would execute an accessor and
+ * could silently turn a Date/Map/custom object into something other than the
+ * value being approved. The bounded writer accepts only the JSON graph the
+ * permission protocol can preserve and stops building as soon as the complete
+ * envelope crosses the limit.
+ */
+export function buildPermissionReview(calls, maxBytes = MAX_PERMISSION_REVIEW_BYTES) {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1) {
+        return { ok: false, reason: 'unrepresentable' };
+    }
+    const chunks = [];
+    let bytes = 0;
+    const active = new WeakSet();
+    const append = (chunk) => {
+        bytes += Buffer.byteLength(chunk, 'utf8');
+        if (bytes > maxBytes)
+            throw new ReviewLimitError();
+        chunks.push(chunk);
+    };
+    const appendString = (value) => {
+        // JSON escaping only grows a string. Avoid materialising an escaped copy
+        // when the source alone has already crossed the complete-envelope cap.
+        if (Buffer.byteLength(value, 'utf8') > maxBytes - bytes)
+            throw new ReviewLimitError();
+        append(JSON.stringify(value));
+    };
+    const write = (value, indent) => {
+        if (value === null) {
+            append('null');
+            return;
+        }
+        switch (typeof value) {
+            case 'string':
+                appendString(value);
+                return;
+            case 'boolean':
+                append(value ? 'true' : 'false');
+                return;
+            case 'number':
+                if (!Number.isFinite(value) || Object.is(value, -0))
+                    throw new ReviewShapeError();
+                append(String(value));
+                return;
+            case 'object':
+                break;
+            default:
+                throw new ReviewShapeError();
+        }
+        const object = value;
+        if (active.has(object))
+            throw new ReviewShapeError();
+        active.add(object);
+        try {
+            if (Array.isArray(value)) {
+                const descriptors = Object.getOwnPropertyDescriptors(value);
+                if (Object.getOwnPropertySymbols(value).length > 0)
+                    throw new ReviewShapeError();
+                const names = Object.getOwnPropertyNames(value);
+                if (names.some((name) => name !== 'length' && (!/^(0|[1-9]\d*)$/.test(name) || Number(name) >= value.length)))
+                    throw new ReviewShapeError();
+                append('[');
+                if (value.length > 0)
+                    append('\n');
+                for (let index = 0; index < value.length; index += 1) {
+                    const descriptor = descriptors[String(index)];
+                    if (!descriptor || !('value' in descriptor) || !descriptor.enumerable)
+                        throw new ReviewShapeError();
+                    append(' '.repeat(indent + 2));
+                    write(descriptor.value, indent + 2);
+                    append(index === value.length - 1 ? '\n' : ',\n');
+                }
+                if (value.length > 0)
+                    append(' '.repeat(indent));
+                append(']');
+                return;
+            }
+            const prototype = Object.getPrototypeOf(value);
+            if (prototype !== Object.prototype && prototype !== null)
+                throw new ReviewShapeError();
+            if (Object.getOwnPropertySymbols(value).length > 0)
+                throw new ReviewShapeError();
+            const descriptors = Object.getOwnPropertyDescriptors(value);
+            const entries = Object.keys(value);
+            for (const name of Object.getOwnPropertyNames(value)) {
+                const descriptor = descriptors[name];
+                if (!descriptor || !descriptor.enumerable || !('value' in descriptor))
+                    throw new ReviewShapeError();
+            }
+            append('{');
+            if (entries.length > 0)
+                append('\n');
+            for (let index = 0; index < entries.length; index += 1) {
+                const key = entries[index];
+                const descriptor = descriptors[key];
+                if (!descriptor || !('value' in descriptor))
+                    throw new ReviewShapeError();
+                append(' '.repeat(indent + 2));
+                appendString(key);
+                append(': ');
+                write(descriptor.value, indent + 2);
+                append(index === entries.length - 1 ? '\n' : ',\n');
+            }
+            if (entries.length > 0)
+                append(' '.repeat(indent));
+            append('}');
+        }
+        finally {
+            active.delete(object);
+        }
+    };
+    try {
+        const exactCalls = calls.map((call) => {
+            const prototype = Object.getPrototypeOf(call);
+            if (prototype !== Object.prototype && prototype !== null)
+                throw new ReviewShapeError();
+            if (Object.getOwnPropertySymbols(call).length > 0)
+                throw new ReviewShapeError();
+            const descriptors = Object.getOwnPropertyDescriptors(call);
+            const id = descriptors.id;
+            const name = descriptors.name;
+            const input = descriptors.input;
+            const isDestructive = descriptors.isDestructive;
+            if (!id ||
+                !('value' in id) ||
+                typeof id.value !== 'string' ||
+                !name ||
+                !('value' in name) ||
+                typeof name.value !== 'string' ||
+                !input ||
+                !('value' in input) ||
+                !isDestructive ||
+                !('value' in isDestructive) ||
+                typeof isDestructive.value !== 'boolean')
+                throw new ReviewShapeError();
+            return {
+                id: id.value,
+                name: name.value,
+                input: input.value,
+                isDestructive: isDestructive.value,
+            };
+        });
+        write({
+            calls: exactCalls,
+        }, 0);
+        return { ok: true, text: chunks.join(''), bytes };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: error instanceof ReviewLimitError ? 'too_large' : 'unrepresentable',
+        };
+    }
+}
+/**
+ * Project and wrap exact review text into PHYSICAL terminal rows.
+ *
+ * JSON strings can contain thousands of characters on one logical line. Ink
+ * would wrap that line after pagination, leaving the suffix below the viewport
+ * while the pager still believed there was only one row. Wrapping first makes
+ * the pager's unit the same row the operator sees. Non-ASCII code points count
+ * conservatively as two cells; overestimating produces shorter rows, never a
+ * hidden tail.
+ */
+export function permissionReviewRows(review, terminalColumns) {
+    // App padding (2), border (2), horizontal padding (2), inner indentation
+    // (2) and the row marker (2) are outside the source text. Keep wrapping at
+    // one cell even in an unusually narrow terminal; truncating would make the
+    // exact approval envelope incomplete precisely where it matters most.
+    const width = Math.max(1, (terminalColumns ?? 80) - 10);
+    const visible = terminalDisplayText(review);
+    const rows = [];
+    for (const logical of visible.split('\n')) {
+        let text = '';
+        let cells = 0;
+        let continuation = false;
+        for (const point of logical) {
+            const codePoint = point.codePointAt(0);
+            const pointCells = codePoint !== undefined && codePoint <= 0x7e ? 1 : 2;
+            if (text.length > 0 && cells + pointCells > width) {
+                rows.push({ index: rows.length, text, continuation });
+                text = '';
+                cells = 0;
+                continuation = true;
+            }
+            text += point;
+            cells += pointCells;
+        }
+        rows.push({ index: rows.length, text, continuation });
+    }
+    return rows;
+}
+//# sourceMappingURL=permission-review.js.map