@namzu/cli 6.0.2 → 8.0.0

package/dist/doctor/checks/vault.js.map

@@ -1 +1 @@
-{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../src/doctor/checks/vault.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAChD,EAAE,EAAE,kBAAkB;IACtB,QAAQ,EAAE,OAAO;IACjB,GAAG,EAAE,KAAK,IAAgC,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,cAAc;QACtB,OAAO,EACN,6GAA6G;KAC9G,CAAC;CACF,CAAA"}
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../src/doctor/checks/vault.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAChD,EAAE,EAAE,kBAAkB;IACtB,QAAQ,EAAE,OAAO;IACjB,GAAG,EAAE,KAAK,IAAgC,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,SAAS;QACjB,OAAO,EACN,6GAA6G;KAC9G,CAAC;CACF,CAAA"}

package/dist/doctor/registry.js

@@ -182,9 +182,33 @@ function buildReport(records, version) {
         fail: records.filter((r) => r.status === 'fail').length,
         inconclusive: records.filter((r) => r.status === 'inconclusive').length,
         warn: records.filter((r) => r.status === 'warn').length,
+        skipped: records.filter((r) => r.status === 'skipped').length,
         total: records.length,
     };
-    const exit = summary.fail > 0 ? 1 : summary.total === 0 ? 2 : 0;
+    /**
+     * What this command's exit code means, decided here because here is where
+     * the codes are.
+     *
+     * `inconclusive` used not to appear in this expression at all, so a check
+     * that COULD NOT ANSWER exited `0` — the same number as a machine where
+     * everything passed. A script could not tell "namzu is healthy" from "namzu
+     * did not manage to look", in the one command whose entire job is to report
+     * state it read.
+     *
+     * The order is the ranking, and it is deliberate:
+     *
+     * - `fail` outranks `inconclusive`. A definite failure is the actionable
+     *   fact, and `1` does not claim health, so nothing is lost by reporting it
+     *   even when part of the run is also unknown.
+     * - `2` stays above `inconclusive` because an empty run has no checks to be
+     *   inconclusive about; the two cannot both be true.
+     * - `skipped` never moves this off `0`. A skipped check is an ordinary state
+     *   of a healthy machine — an optional package absent, a registry with
+     *   nothing to discover — and a diagnostic that went non-zero on every
+     *   healthy machine would be turned off within a week, which is the failure
+     *   mode of a check that fires where nothing is wrong.
+     */
+    const exit = summary.fail > 0 ? 1 : summary.total === 0 ? 2 : summary.inconclusive > 0 ? 69 : 0;
     return Object.freeze({
         version,
         timestamp: new Date().toISOString(),

package/dist/doctor/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/doctor/registry.ts"],"names":[],"mappings":"AAUA,MAAM,4BAA4B,GAAG,KAAK,CAAA;AAC1C,MAAM,6BAA6B,GAAG,MAAM,CAAA;AAmC5C,MAAM,OAAO,cAAc;IACT,MAAM,GAA6B,IAAI,GAAG,EAAE,CAAA;IACrD,GAAG,CAAS;IAEpB,SAAS,CAAC,GAAW;QACpB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,QAAQ,CAAC,KAAkB;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACd,yBAAyB,KAAK,CAAC,EAAE,qEAAqE,CACtG,CAAA;QACF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IACjC,CAAC;IAED,UAAU,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAED,IAAI;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAA2C,EAAE;QACtD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,IAAI,4BAA4B,CAAA;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,IAAI,6BAA6B,CAAA;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAE1B,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU;YACrC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,SAAS,GAAmC,IAAI,GAAG,EAAE,CAAA;QAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAuB,CAAC,CAAA;QAEjE,sDAAsD;QACtD,MAAM,YAAY,GAAuB,MAAM;YAC9C,CAAC,CAAC,MAAM,CAAC,OAAO;gBACf,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC5B,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;oBACxB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;wBAC1D,IAAI,EAAE,IAAI;qBACV,CAAC,CAAA;gBACH,CAAC,CAAC;YACJ,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAC,iBAAiB;QAE1C,MAAM,gBAAgB,GAAG,CAAC,MAAyB,EAAQ,EAAE;YAC5D,kEAAkE;YAClE,oEAAoE;YACpE,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAE,OAAM;YACpC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YAChC,mEAAmE;YACnE,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7E,CAAC,CAAA;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAiB,EAAE;YAClE,oEAAoE;YACpE,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;YAErE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACrB,MAAM,YAAY,GAAG,CAAC,KAAK,IAAgC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;YAC/E,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC1C,GAAsB,EAAE,CAAC,CAAC;gBACzB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,+BAA+B,QAAQ,IAAI;aACpD,CAAC,CACF,CAAA;YACD,IAAI,MAAyB,CAAA;YAC7B,IAAI,CAAC;gBACJ,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAA;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACtE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC/D,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,OAAO,EAAE,EAAE,CAAA;YAChE,CAAC;YACD,gBAAgB,CAAC;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;aAChD,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;QAE3E,IAAI,OAA4B,CAAA;QAChC,IAAI,UAAU,KAAK,cAAc,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,MAAM,GACX,UAAU,KAAK,SAAS;gBACvB,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,uBAAuB,IAAI,yCAAyC,CAAA;YACxE,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACrE,IAAI,CAAC,GAAG,EAAE,IAAI,CACb,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,2BAA2B,EACnF;gBACC,IAAI;gBACJ,KAAK,EAAE,cAAc,CAAC,MAAM;gBAC5B,UAAU,EAAE,UAAU,CAAC,MAAM;aAC7B,CACD,CAAA;YACD,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAqB,EAAE;gBACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,MAAM,MAAM,GAAsB;oBACjC,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,cAA8B;oBACtC,OAAO,EAAE,MAAM;oBACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAClC,CAAA;gBACD,4DAA4D;gBAC5D,2DAA2D;gBAC3D,6DAA6D;gBAC7D,wCAAwC;gBACxC,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBACxB,OAAO,MAAM,CAAA;YACd,CAAC,CAAC,CAAA;QACH,CAAC;aAAM,CAAC;YACP,sEAAsE;YACtE,+DAA+D;YAC/D,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAqB,EAAE;gBACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,8DAA8D;gBAC9D,gEAAgE;gBAChE,qCAAqC;gBACrC,OAAO;oBACN,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,cAA8B;oBACtC,OAAO,EAAE,sDAAsD;oBAC/D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAClC,CAAA;YACF,CAAC,CAAC,CAAA;QACH,CAAC;QAED,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,CAAA;IACvD,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,KAAyC,EAAE,EAAc;QAC/E,IAAI,CAAC;YACJ,EAAE,EAAE,CAAA;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC5D,CAAC;IACF,CAAC;CACD;AAED,MAAM,CAAC,MAAM,MAAM,GAAmB,IAAI,cAAc,EAAE,CAAA;AAE1D,MAAM,UAAU,oBAAoB;IACnC,OAAO,IAAI,cAAc,EAAE,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACrD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAyB,EAAE;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAA;IACxC,OAAO,QAAQ,CAAC,GAAG,CAAC;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAwC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAC9B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;KACrC,CAAC,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAqC,EAAE,OAAe;IAC1E,MAAM,OAAO,GAAG;QACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,MAAM;QACvE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,KAAK,EAAE,OAAO,CAAC,MAAM;KACrB,CAAA;IACD,MAAM,IAAI,GAAyB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACrF,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,OAAO;QACf,OAAO;QACP,IAAI;KACJ,CAAC,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAC7E,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/doctor/registry.ts"],"names":[],"mappings":"AAUA,MAAM,4BAA4B,GAAG,KAAK,CAAA;AAC1C,MAAM,6BAA6B,GAAG,MAAM,CAAA;AAmC5C,MAAM,OAAO,cAAc;IACT,MAAM,GAA6B,IAAI,GAAG,EAAE,CAAA;IACrD,GAAG,CAAS;IAEpB,SAAS,CAAC,GAAW;QACpB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,QAAQ,CAAC,KAAkB;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACd,yBAAyB,KAAK,CAAC,EAAE,qEAAqE,CACtG,CAAA;QACF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IACjC,CAAC;IAED,UAAU,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAED,IAAI;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAA2C,EAAE;QACtD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,IAAI,4BAA4B,CAAA;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,IAAI,6BAA6B,CAAA;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAE1B,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU;YACrC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,SAAS,GAAmC,IAAI,GAAG,EAAE,CAAA;QAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAuB,CAAC,CAAA;QAEjE,sDAAsD;QACtD,MAAM,YAAY,GAAuB,MAAM;YAC9C,CAAC,CAAC,MAAM,CAAC,OAAO;gBACf,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC5B,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;oBACxB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;wBAC1D,IAAI,EAAE,IAAI;qBACV,CAAC,CAAA;gBACH,CAAC,CAAC;YACJ,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAC,iBAAiB;QAE1C,MAAM,gBAAgB,GAAG,CAAC,MAAyB,EAAQ,EAAE;YAC5D,kEAAkE;YAClE,oEAAoE;YACpE,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAE,OAAM;YACpC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YAChC,mEAAmE;YACnE,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7E,CAAC,CAAA;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAiB,EAAE;YAClE,oEAAoE;YACpE,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;YAErE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACrB,MAAM,YAAY,GAAG,CAAC,KAAK,IAAgC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;YAC/E,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC1C,GAAsB,EAAE,CAAC,CAAC;gBACzB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,+BAA+B,QAAQ,IAAI;aACpD,CAAC,CACF,CAAA;YACD,IAAI,MAAyB,CAAA;YAC7B,IAAI,CAAC;gBACJ,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAA;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACtE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC/D,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,OAAO,EAAE,EAAE,CAAA;YAChE,CAAC;YACD,gBAAgB,CAAC;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;aAChD,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;QAE3E,IAAI,OAA4B,CAAA;QAChC,IAAI,UAAU,KAAK,cAAc,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,MAAM,GACX,UAAU,KAAK,SAAS;gBACvB,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,uBAAuB,IAAI,yCAAyC,CAAA;YACxE,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACrE,IAAI,CAAC,GAAG,EAAE,IAAI,CACb,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,2BAA2B,EACnF;gBACC,IAAI;gBACJ,KAAK,EAAE,cAAc,CAAC,MAAM;gBAC5B,UAAU,EAAE,UAAU,CAAC,MAAM;aAC7B,CACD,CAAA;YACD,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAqB,EAAE;gBACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,MAAM,MAAM,GAAsB;oBACjC,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,cAA8B;oBACtC,OAAO,EAAE,MAAM;oBACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAClC,CAAA;gBACD,4DAA4D;gBAC5D,2DAA2D;gBAC3D,6DAA6D;gBAC7D,wCAAwC;gBACxC,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBACxB,OAAO,MAAM,CAAA;YACd,CAAC,CAAC,CAAA;QACH,CAAC;aAAM,CAAC;YACP,sEAAsE;YACtE,+DAA+D;YAC/D,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAqB,EAAE;gBACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,8DAA8D;gBAC9D,gEAAgE;gBAChE,qCAAqC;gBACrC,OAAO;oBACN,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,cAA8B;oBACtC,OAAO,EAAE,sDAAsD;oBAC/D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAClC,CAAA;YACF,CAAC,CAAC,CAAA;QACH,CAAC;QAED,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,CAAA;IACvD,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,KAAyC,EAAE,EAAc;QAC/E,IAAI,CAAC;YACJ,EAAE,EAAE,CAAA;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC5D,CAAC;IACF,CAAC;CACD;AAED,MAAM,CAAC,MAAM,MAAM,GAAmB,IAAI,cAAc,EAAE,CAAA;AAE1D,MAAM,UAAU,oBAAoB;IACnC,OAAO,IAAI,cAAc,EAAE,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACrD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAyB,EAAE;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAA;IACxC,OAAO,QAAQ,CAAC,GAAG,CAAC;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAwC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAC9B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;KACrC,CAAC,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAqC,EAAE,OAAe;IAC1E,MAAM,OAAO,GAAG;QACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,MAAM;QACvE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QAC7D,KAAK,EAAE,OAAO,CAAC,MAAM;KACrB,CAAA;IACD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,IAAI,GACT,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,OAAO;QACf,OAAO;QACP,IAAI;KACJ,CAAC,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAC7E,CAAC"}

package/dist/exit-codes.d.ts

@@ -6,6 +6,22 @@
  *   1   EXIT_FAIL           — one or more checks reported `fail`
  *   2   EXIT_NO_CONFIG      — Namzu is not configured in this environment
  *                             (no checks registered, no config file found)
+ *   69  EXIT_UNAVAILABLE    — sysexits EX_UNAVAILABLE; something the command
+ *                             needed was not there, so it could not ESTABLISH
+ *                             what it was asked to report. Distinct from 0 for
+ *                             the reason 2 is distinct from 1: a report that
+ *                             could not look tells you nothing about the part
+ *                             it did look at, and collapsing the two lets
+ *                             "healthy" and "did not check" share a number.
+ *                             Distinct from 70 because a check that timed out
+ *                             on a loaded machine is not a bug in this CLI.
+ *
+ *                             `namzu eval` spells the same idea `2`
+ *                             (`EVAL_EXIT.inconclusive`) and that is not an
+ *                             oversight: `doctor` had already spent 2 on "no
+ *                             checks registered", and giving one number two
+ *                             meanings inside one command is worse than giving
+ *                             one meaning two numbers across two.
  *   64  EXIT_USAGE          — sysexits EX_USAGE; the caller's arguments are
  *                             wrong. Distinct from 70 on purpose: 70 says the
  *                             CLI is broken and is worth a bug report, 64 says
@@ -26,7 +42,8 @@ export declare const EXIT_OK = 0;
 export declare const EXIT_FAIL = 1;
 export declare const EXIT_NO_CONFIG = 2;
 export declare const EXIT_USAGE = 64;
+export declare const EXIT_UNAVAILABLE = 69;
 export declare const EXIT_INTERNAL_ERROR = 70;
 export declare const EXIT_UNTRUSTED = 77;
-export type CliExitCode = typeof EXIT_OK | typeof EXIT_FAIL | typeof EXIT_NO_CONFIG | typeof EXIT_USAGE | typeof EXIT_INTERNAL_ERROR | typeof EXIT_UNTRUSTED;
+export type CliExitCode = typeof EXIT_OK | typeof EXIT_FAIL | typeof EXIT_NO_CONFIG | typeof EXIT_USAGE | typeof EXIT_UNAVAILABLE | typeof EXIT_INTERNAL_ERROR | typeof EXIT_UNTRUSTED;
 //# sourceMappingURL=exit-codes.d.ts.map

package/dist/exit-codes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exit-codes.d.ts","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,OAAO,IAAI,CAAA;AACxB,eAAO,MAAM,SAAS,IAAI,CAAA;AAC1B,eAAO,MAAM,cAAc,IAAI,CAAA;AAC/B,eAAO,MAAM,UAAU,KAAK,CAAA;AAC5B,eAAO,MAAM,mBAAmB,KAAK,CAAA;AACrC,eAAO,MAAM,cAAc,KAAK,CAAA;AAEhC,MAAM,MAAM,WAAW,GACpB,OAAO,OAAO,GACd,OAAO,SAAS,GAChB,OAAO,cAAc,GACrB,OAAO,UAAU,GACjB,OAAO,mBAAmB,GAC1B,OAAO,cAAc,CAAA"}
+{"version":3,"file":"exit-codes.d.ts","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,OAAO,IAAI,CAAA;AACxB,eAAO,MAAM,SAAS,IAAI,CAAA;AAC1B,eAAO,MAAM,cAAc,IAAI,CAAA;AAC/B,eAAO,MAAM,UAAU,KAAK,CAAA;AAC5B,eAAO,MAAM,gBAAgB,KAAK,CAAA;AAClC,eAAO,MAAM,mBAAmB,KAAK,CAAA;AACrC,eAAO,MAAM,cAAc,KAAK,CAAA;AAEhC,MAAM,MAAM,WAAW,GACpB,OAAO,OAAO,GACd,OAAO,SAAS,GAChB,OAAO,cAAc,GACrB,OAAO,UAAU,GACjB,OAAO,gBAAgB,GACvB,OAAO,mBAAmB,GAC1B,OAAO,cAAc,CAAA"}

package/dist/exit-codes.js

@@ -6,6 +6,22 @@
  *   1   EXIT_FAIL           — one or more checks reported `fail`
  *   2   EXIT_NO_CONFIG      — Namzu is not configured in this environment
  *                             (no checks registered, no config file found)
+ *   69  EXIT_UNAVAILABLE    — sysexits EX_UNAVAILABLE; something the command
+ *                             needed was not there, so it could not ESTABLISH
+ *                             what it was asked to report. Distinct from 0 for
+ *                             the reason 2 is distinct from 1: a report that
+ *                             could not look tells you nothing about the part
+ *                             it did look at, and collapsing the two lets
+ *                             "healthy" and "did not check" share a number.
+ *                             Distinct from 70 because a check that timed out
+ *                             on a loaded machine is not a bug in this CLI.
+ *
+ *                             `namzu eval` spells the same idea `2`
+ *                             (`EVAL_EXIT.inconclusive`) and that is not an
+ *                             oversight: `doctor` had already spent 2 on "no
+ *                             checks registered", and giving one number two
+ *                             meanings inside one command is worse than giving
+ *                             one meaning two numbers across two.
  *   64  EXIT_USAGE          — sysexits EX_USAGE; the caller's arguments are
  *                             wrong. Distinct from 70 on purpose: 70 says the
  *                             CLI is broken and is worth a bug report, 64 says
@@ -26,6 +42,7 @@ export const EXIT_OK = 0;
 export const EXIT_FAIL = 1;
 export const EXIT_NO_CONFIG = 2;
 export const EXIT_USAGE = 64;
+export const EXIT_UNAVAILABLE = 69;
 export const EXIT_INTERNAL_ERROR = 70;
 export const EXIT_UNTRUSTED = 77;
 //# sourceMappingURL=exit-codes.js.map

package/dist/exit-codes.js.map

@@ -1 +1 @@
-{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAA;AACxB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAA;AAC1B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAA;AAC/B,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAA;AAC5B,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAA;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAA"}
+{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAA;AACxB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAA;AAC1B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAA;AAC/B,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAA;AAC5B,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAClC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAA;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAA"}

package/dist/tui/App.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../src/tui/App.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA0DH,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE/D,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;CACxB;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,MAAM,EAAE,CAY1F;AAGD,wBAAgB,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,2CAyoCpC"}
+{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../src/tui/App.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA0DH,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE/D,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;CACxB;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,MAAM,EAAE,CAY1F;AAGD,wBAAgB,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,2CA4zCpC"}

package/dist/tui/App.js

@@ -121,6 +121,28 @@ export function App({ ctx }) {
     // turns attribute to the resumed conversation.
     const sessionsRef = useRef(null);
     const scopeRef = useRef(null);
+    /**
+     * How many times the operator has switched conversations.
+     *
+     * `abort()` returns long before the `for await` in `runTurn` unwinds, so an
+     * abandoned turn keeps producing events for a while after `/resume` has
+     * already replaced the screen. This counter is what tells those events they
+     * are late: a turn captures the value at send time and renders nothing once
+     * it stops matching.
+     *
+     * Bumped ONLY by `resumeConversation`. `/clear` resets the transcript too and
+     * stays in the same conversation — its turn's rows are still that
+     * conversation's rows and must keep arriving.
+     */
+    const conversationGenRef = useRef(0);
+    /**
+     * Whether a conversation has been chosen and is still being read.
+     *
+     * The picker keeps the screen for that interval, and `Esc` stops cancelling:
+     * the choice is already being acted on, so a press landing here would close
+     * the picker over a switch that happens anyway.
+     */
+    const resumeCommittedRef = useRef(false);
     const idRef = useRef(0);
     const nextId = useCallback(() => {
         idRef.current += 1;
@@ -370,31 +392,6 @@ export function App({ ctx }) {
             pushMessage('system', `Could not list conversations: ${err instanceof Error ? err.message : String(err)}`);
         }
     }, [ensureSessions, pushMessage]);
-    // Load the chosen conversation into the transcript and continue in it.
-    const resumeConversation = useCallback(async (conv) => {
-        const sessions = sessionsRef.current;
-        const scope = scopeRef.current;
-        setPhase('ready');
-        if (!sessions || !scope)
-            return;
-        try {
-            const msgs = await loadConversation(sessions, conv.id);
-            const restored = msgs
-                .filter((m) => m.role === 'user' || m.role === 'assistant')
-                .map((m) => ({
-                id: nextId(),
-                role: m.role,
-                content: typeof m.content === 'string' ? m.content : '',
-            }));
-            resetTranscript();
-            setMessages(restored);
-            scope.sessionId = conv.id; // new turns now attribute to the resumed session
-            pushMessage('system', `Resumed: ${conv.title}`);
-        }
-        catch (err) {
-            pushMessage('system', `Could not resume: ${err instanceof Error ? err.message : String(err)}`);
-        }
-    }, [nextId, pushMessage]);
     // Resolve a pending permission prompt with the user's decision and tear
     // down the overlay. No-op if nothing is pending.
     const resolvePermission = useCallback((decision) => {
@@ -405,6 +402,123 @@ export function App({ ctx }) {
         if (resolve)
             resolve(decision);
     }, []);
+    /**
+     * Stop the running turn, and hand the screen back in a usable state.
+     *
+     * Returns whether there was one to stop, because the caller has different
+     * things to say in the two cases.
+     *
+     * The screen cleanup lives HERE, at the act that decided to stop, rather
+     * than in the turn's own `finally`. That was safe only while nothing could
+     * start another turn in between. `/resume` can — the abandoned loop unwinds
+     * long after the resumed conversation is on screen, and possibly after a
+     * turn in it has already begun — so a `finally` that resets the composer,
+     * the active tools and the abort handle would be resetting somebody else's.
+     *
+     * The pending permission prompt is settled first. A turn parked on that
+     * promise never reaches its own `finally` at all, so aborting alone would
+     * leave it hanging with its reply unsaved. It is the same decision Ctrl+C
+     * sends at that prompt, for the same reason.
+     */
+    const interruptTurn = useCallback(() => {
+        if (permissionResolveRef.current)
+            resolvePermission({ kind: 'reject', feedback: 'User interrupted.' });
+        const ac = abortRef.current;
+        if (!ac)
+            return false;
+        ac.abort();
+        // Dropped now so a second interrupt does not re-abort, and the queue with
+        // it: interrupting means stop, not "run the next one".
+        abortRef.current = null;
+        setQueued([]);
+        clearActiveTools();
+        setState('idle');
+        return true;
+    }, [clearActiveTools, resolvePermission]);
+    /**
+     * Load the chosen conversation into the transcript and continue in it.
+     *
+     * A turn may still be running when this happens — the composer stays live
+     * while the agent works, and a slash action is dispatched ahead of the
+     * message queue — and until this aborted it, three things went wrong at
+     * once. Its rows appended into the resumed transcript. Its queued follow-ups
+     * would have run against a conversation nobody asked them of. And, the one
+     * that outlived the process, its `appendMessages` wrote into the RESUMED
+     * conversation's durable record, because `sessionId` was mutated on a
+     * `RunScope` the running loop held the very same object of.
+     *
+     * The mutation below stays, and it is the sharing that makes it necessary:
+     * `createAgentSession` closed over this exact object and spreads it into
+     * every `query()`, so replacing it here would leave the agent attributing
+     * every future turn to the conversation the operator has left. `RunScope`
+     * says as much — `sessionId` is its one non-`readonly` field. What changed is
+     * on the other side: a turn now fixes its own destination when it starts
+     * (see `runTurn`), so a shared cursor moving under it can no longer decide
+     * where it lands.
+     *
+     * The abandoned turn is not dropped in silence. It goes on consuming its own
+     * events, so its reply is whole, and persists into the conversation it
+     * belongs to; the operator is told that here, because those rows are
+     * correctly absent from the transcript now in front of them, and a turn that
+     * vanishes with no account of where it went is the same defect as one that
+     * lands in the wrong place.
+     *
+     * Nothing is disturbed until the new conversation is actually in hand. A
+     * read that fails leaves a running turn running where it belongs, exactly as
+     * cancelling the picker does.
+     *
+     * And the picker stays up for the length of the read rather than handing the
+     * screen back first. A composer that is live over an unsettled switch takes
+     * a message with nowhere to go: queued against a conversation being left, and
+     * then either dropped by the interrupt below or sent to a conversation nobody
+     * addressed it to. The screen should not accept input for a conversation that
+     * is not decided yet, and a read is usually too fast to see.
+     */
+    const resumeConversation = useCallback(async (conv) => {
+        const sessions = sessionsRef.current;
+        const scope = scopeRef.current;
+        if (!sessions || !scope) {
+            setPhase('ready');
+            return;
+        }
+        // The operator has committed; `Esc` no longer cancels from here, or a
+        // press landing during the read would leave the picker closed and the
+        // switch happening anyway.
+        resumeCommittedRef.current = true;
+        let msgs;
+        try {
+            msgs = await loadConversation(sessions, conv.id);
+        }
+        catch (err) {
+            resumeCommittedRef.current = false;
+            setPhase('ready');
+            pushMessage('system', `Could not resume: ${err instanceof Error ? err.message : String(err)}`);
+            return;
+        }
+        resumeCommittedRef.current = false;
+        setPhase('ready');
+        const restored = msgs
+            .filter((m) => m.role === 'user' || m.role === 'assistant')
+            .map((m) => ({
+            id: nextId(),
+            role: m.role,
+            content: typeof m.content === 'string' ? m.content : '',
+        }));
+        const interrupted = interruptTurn();
+        conversationGenRef.current += 1;
+        resetTranscript();
+        setMessages(restored);
+        scope.sessionId = conv.id; // new turns now attribute to the resumed session
+        pushMessage('system', `Resumed: ${conv.title}`);
+        if (interrupted) {
+            // "is being saved", not "is saved". The write has not happened yet —
+            // it runs when the abandoned turn finishes unwinding, which is after
+            // this line — and a surface that reports a result it has not read is
+            // the defect class this whole change is about. If that write fails,
+            // the turn says so itself, in the same words `run-stream` uses.
+            pushMessage('system', 'The turn that was running was interrupted. Its reply so far is being saved to the conversation it started in, so it is not in the transcript above. A tool call already dispatched was not undone.');
+        }
+    }, [interruptTurn, nextId, pushMessage, resetTranscript]);
     // Bridge passed into session.send(): the agent calls this before a
     // non-read-only tool batch; it parks until the user presses y/n/a.
     const onPermission = useCallback((req) => new Promise((resolve) => {
@@ -547,6 +661,19 @@ export function App({ ctx }) {
         const st = { assistantId: null, text: '' };
         const ac = new AbortController();
         abortRef.current = ac;
+        // Where this turn will be saved, and which transcript its rows belong
+        // to. Both fixed HERE, at the one moment they are knowable.
+        //
+        // `/resume` can land between this line and the `finally` below, and
+        // `abort()` returns long before the loop unwinds — so after a mid-turn
+        // switch the finally ALWAYS runs on the far side of it. Reading
+        // `scopeRef.current` down there wrote this turn into whichever
+        // conversation happened to be open when it finished, and that record
+        // outlives the process. A string captured now cannot be reassigned by
+        // anyone.
+        const destination = scopeRef.current?.sessionId ?? null;
+        const turnGeneration = conversationGenRef.current;
+        const stillHere = () => conversationGenRef.current === turnGeneration;
         try {
             for await (const event of session.send(priorForSdk, {
                 signal: ac.signal,
@@ -555,30 +682,77 @@ export function App({ ctx }) {
                 onPermission: ctx.skipPermissions ? undefined : onPermission,
                 extraSystem: composeSkillsPrompt(activeSkills) ?? undefined,
             })) {
-                applyEvent(event, st);
+                // A turn the operator has left is consumed but not rendered: no row
+                // from it lands in a transcript it has nothing to do with, and its
+                // text keeps accumulating so that what gets saved does not depend
+                // on exactly when the switch happened.
+                //
+                // How much arrives after the switch is a property of the SESSION,
+                // not of this loop. The built-in one checks the signal at the top of
+                // each iteration and returns after a single `error: aborted`, so in
+                // practice very little does. The accumulation is here so a session
+                // that notices later — a different implementation, a generator
+                // parked in a tool call — still saves a whole reply rather than one
+                // truncated at the moment the operator happened to leave.
+                if (stillHere())
+                    applyEvent(event, st);
+                else if (event.kind === 'delta')
+                    st.text += event.text;
             }
         }
         catch (err) {
-            if (st.assistantId)
-                finalizeMessage(st.assistantId);
-            pushMessage('system', `Error: ${err instanceof Error ? err.message : String(err)}`);
+            // Reported only where it means something. In the conversation the
+            // operator has moved on from, this row would be the same misplacement
+            // the generation exists to stop — and it would be the more confusing
+            // half of it, because an abort reads as an error.
+            if (stillHere()) {
+                if (st.assistantId)
+                    finalizeMessage(st.assistantId);
+                pushMessage('system', `Error: ${err instanceof Error ? err.message : String(err)}`);
+            }
         }
         finally {
-            abortRef.current = null;
-            permissionResolveRef.current = null;
-            permissionOpenedAtRef.current = null;
-            setPermission(null);
-            clearActiveTools();
-            setState('idle');
-            // Persist the turn to the SDK session store (best-effort) so it can
-            // be resumed later. User message + the assistant's reply text.
+            // The screen belongs to the conversation on it, which after a
+            // `/resume` is no longer this turn's. `interruptTurn` already did this
+            // cleanup at the moment it decided to stop; repeating it here would
+            // clear the state of whatever has started since.
+            if (stillHere()) {
+                // Unguarded, and it can be: a second turn cannot start in the
+                // conversation this one is running in — the composer queues instead
+                // — so within one generation this handle is still ours. An
+                // `=== ac` comparison here read as prudence and was a check that
+                // could not fail, which teaches the next reader that the checks
+                // around it are decoration too.
+                abortRef.current = null;
+                permissionResolveRef.current = null;
+                permissionOpenedAtRef.current = null;
+                setPermission(null);
+                clearActiveTools();
+                setState('idle');
+            }
+            // Persisted either way, and into the conversation this turn was
+            // started in — captured above, never re-read.
+            //
+            // Best-effort is about not FAILING, not about staying quiet. The
+            // rejection used to be swallowed whole, and it is the one failure here
+            // that makes a LATER surface wrong: `/resume` comes back missing a
+            // turn that was on screen, and the next turn in that conversation
+            // silently lacks it as context, with nothing connecting either to a
+            // write that failed minutes ago. `run-stream` already says this, in
+            // these words and for this reason.
+            //
+            // Said wherever the operator is now, even when that is a different
+            // conversation, because there is no other channel and it is news they
+            // need. Naming the conversation is what keeps it from reading as a
+            // fault of the one in front of them.
             const sessions = sessionsRef.current;
-            const scope = scopeRef.current;
-            if (sessions && scope) {
+            if (sessions && destination) {
                 const turn = [createUserMessage(text)];
                 if (st.text.trim().length > 0)
                     turn.push(createAssistantMessage(st.text));
-                void appendMessages(sessions, scope.sessionId, turn).catch(() => { });
+                void appendMessages(sessions, destination, turn).catch((err) => {
+                    pushMessage('system', `A turn was not saved to conversation ${destination}: ${err instanceof Error ? err.message : String(err)}. That conversation's history will not include it, and its next turn will not have it as context.`);
+                });
             }
         }
     }, [activeSkills, applyEvent, ctx.cwd, ctx.skipPermissions, finalizeMessage, messages, onPermission, pushMessage, session]);
@@ -877,6 +1051,12 @@ export function App({ ctx }) {
         }
         // Resume picker owns the keyboard while open.
         if (phase === 'resume') {
+            // Once a conversation is being read, the keyboard does nothing here.
+            // The choice is already being acted on; a second Enter would start a
+            // second read and an Esc would hand back a screen that is about to be
+            // replaced regardless.
+            if (resumeCommittedRef.current)
+                return;
             if (key.upArrow)
                 setSelectedResume((i) => Math.max(0, i - 1));
             else if (key.downArrow)
@@ -948,9 +1128,7 @@ export function App({ ctx }) {
         // Esc interrupts a running turn (Ctrl+C stays reserved for exit). Mirrors
         // the Ctrl+C interrupt path: abort, drop the queue, one "Interrupted." line.
         if (key.escape && abortRef.current) {
-            abortRef.current.abort();
-            abortRef.current = null;
-            setQueued([]);
+            interruptTurn();
             pushMessage('system', 'Interrupted.');
             return;
         }
@@ -979,13 +1157,9 @@ export function App({ ctx }) {
         }
         if (key.ctrl && input === 'c') {
             // A turn is running → first Ctrl+C interrupts it, not exits.
-            if (abortRef.current) {
-                abortRef.current.abort();
-                // Drop the ref now so a second Ctrl+C arms exit instead of
-                // re-aborting (which spammed "Interrupted." lines), and clear any
-                // queued messages — interrupting means stop, not "run the next one".
-                abortRef.current = null;
-                setQueued([]);
+            // Drops the ref, so a second Ctrl+C arms exit instead of re-aborting
+            // (which spammed "Interrupted." lines).
+            if (interruptTurn()) {
                 pushMessage('system', 'Interrupted.');
                 return;
             }