@north-light/crouter 0.3.154 → 0.3.157

package/dist/core/__tests__/full/broker-dialogs.test.js

@@ -3,35 +3,31 @@
 // FULL TIER (real-boot-bound): tmux-free, but it boots a REAL broker process
 // (~5s pi-SDK load), so it lives in full/ (CI), not the fast local loop.
 //
-// Broker dialog handling under MULTI-WRITER attachments — the T8 attach gates
-// G5/G5b/G6 cover fan-out + first-response settlement, mid-dialog attach replay,
-// and attended-dialog timeout behavior.
+// Broker dialog handling — the T8 attach gates G5/G5b/G6 cover retained answers,
+// controller handoff, and attended-dialog timeout behavior.
 //
 // 3-PART HEADER (headless):
-//  (1) CONTRACT — every client whose `hello` claimed the writable role is fanned a
-//      blocking dialog as extension_ui_request; the FIRST extension_ui_response
-//      settles it with that answer (not the default), every fanned client receives
-//      the correlated extension_ui_dismiss, and a later peer response for the same
-//      id is a silent no-op (G5). A dialog stays pending through a peer's detach and
-//      is handed to any writable client attaching mid-dialog via
-//      welcome.pending_dialog; observers never receive an answerable dialog (G5b).
-//      An attended dialog nobody answers resolves on the short per-dialog timeout
-//      with the default answer and a correlated dismiss to EVERY writable peer (G6).
+//  (1) CONTRACT — a controller receives a blocking dialog as
+//      extension_ui_request, and extension_ui_response unblocks the engine with
+//      the controller's answer rather than the default (G5). A dialog raised under
+//      one controller remains pending through its detach and reaches the next
+//      controller through welcome.pending_dialog (G5b). An attended dialog that is
+//      not answered resolves on the short per-dialog timeout with the default answer
+//      and a correlated extension_ui_dismiss (G6).
 //  (2) WHY BROKER/SOCKET-LEVEL, NOT PANE/WINDOW — the dialog round-trip is an async
-//      promise inside makeBrokerUiContext, fanned out and answered over view.sock to
+//      promise inside makeBrokerUiContext, forwarded and answered over view.sock to
 //      the production ViewSocketClient. The real broker process provides the
 //      uiContext and timeout machinery without a tmux pane, window, or pi-session
 //      read.
 //  (3) HOW THE HEADLESS DRIVE ASSERTS THE CONTRACT — the fake engine raises real
-//      confirm() dialogs through the broker, and the tests assert on the frames of
-//      several concurrently attached clients plus the value and latency recorded in
-//      fake-pi.dialog.jsonl.
+//      confirm() dialogs through the broker, and the tests assert on controller
+//      frames plus the value and latency recorded in fake-pi.dialog.jsonl.
 //
 // One shared broker is booted in before() and reused across all three gates. Because
 // fake-pi.dialog.jsonl is append-only across the shared broker, each gate snapshots
-// the count before it drives (`base`) and asserts on its newly appended entry. Role
-// is fixed by `hello` and never reassigned, so every writable attach is a plain
-// attach — there is no control handoff to wait out.
+// the count before it drives (`base`) and asserts on its newly appended entry. Gates
+// whose first attach must hold control use attachUntil(controller) to settle a prior
+// gate's controller-detach handoff.
 import { test, before, after, afterEach } from 'node:test';
 import assert from 'node:assert/strict';
 import { createHeadlessHarness } from '../helpers/harness.js';
@@ -40,29 +36,9 @@ import { createAttachKit } from '../helpers/broker-clients.js';
 let h;
 let id; // ONE shared broker, reused across G5/G5b/G6 (1 real boot, not 3)
 const kit = createAttachKit(() => h);
-const { attach, attachUntil } = kit;
-// Attach a writable client. Every `hello` claiming `controller` is admitted
-// writable — attaching a peer never demotes an already-attached one.
-const writer = async (cid) => {
-    const a = await attach(id, 'controller', cid);
-    assert.equal(a.welcome.role, 'controller', `${cid}: admitted writable, not demoted by an existing peer`);
-    return a;
-};
-const observer = async (cid) => {
-    const a = await attach(id, 'observer', cid);
-    assert.equal(a.welcome.role, 'observer', `${cid}: an observer hello stays read-only`);
-    return a;
-};
-// The broker handles one client's frames in order, so an `ack` for a get_commands
-// sent AFTER some other frame proves that earlier frame was already processed.
-// Used to make "a late peer answer changed nothing" a deterministic assertion
-// instead of a sleep.
-const barrier = async (c, label) => {
-    c.send({ type: 'get_commands' });
-    await c.waitFrame((f) => f.type === 'ack' && f.for === 'get_commands', label);
-};
-const isRequest = (f) => f.type === 'extension_ui_request';
-const dismissFor = (reqId) => (f) => f.type === 'extension_ui_dismiss' && f.id === reqId;
+const { attachUntil } = kit;
+// Admit a controller, waiting out any prior gate's controller-detach handoff.
+const ctrl = (cid) => attachUntil(id, 'controller', cid, (a) => a.welcome.role === 'controller', `${cid} admitted controller`);
 // dialog.jsonl is append-only across the shared broker — snapshot the count, then
 // wait for AT LEAST `want` new entries and return the full (cumulative) array.
 const dialogCount = () => h.dialogResults(id).length;
@@ -81,100 +57,65 @@ afterEach(() => {
 });
 const brokerPid = () => h.node(id).pi_pid;
 // ---------------------------------------------------------------------------
-// G5 — fan-out + first-response settlement. Guards: ONE blocking dialog reaches
-// EVERY writable client (never a single owner), the first answer unblocks the
-// engine with ITS value (not the default), every fanned client gets the correlated
-// extension_ui_dismiss, and a peer answering afterwards is a no-op. Failure modes:
-// a dialog only one viewer can see (the others sit blind), peers left holding an
-// overlay nothing can answer, or a late peer answer re-settling a dead dialog.
+// G5 — dialog forward + answer. Guards: a blocking dialog reaches the controller
+// as extension_ui_request and the controller's extension_ui_response unblocks the
+// engine with ITS answer (not the default). Failure mode: a dialog the controller
+// can't see/answer (silent deadlock).
 // ---------------------------------------------------------------------------
-test('G5 — one dialog fans out to both writable clients, the first response settles it, both are dismissed, and a late peer response is a no-op', async () => {
+test('G5 — controller receives an extension_ui_request, answers it, and the engine proceeds with that answer', async () => {
     const base = dialogCount();
-    const a = await writer('g5-A');
-    const b = await writer('g5-B');
-    const obs = await observer('g5-obs'); // must never be fanned an answerable dialog
-    h.fakeCmd(id, { cmd: 'dialog', timeout: 20_000 }); // generous: a writable client answers first
-    const reqA = await a.waitFrame(isRequest, 'G5 dialog fanned out to writable A');
-    const reqB = await b.waitFrame(isRequest, 'G5 dialog fanned out to writable B');
-    const reqId = reqA.id;
-    assert.equal(reqB.id, reqId, 'G5: both writable clients were fanned the SAME dialog id, not two dialogs');
-    assert.equal(reqA.method, 'confirm', 'G5: the fanned dialog is the confirm() the engine raised');
-    // A answers first — the engine must proceed with A's true, not the false default.
-    a.send({ type: 'extension_ui_response', id: reqId, confirmed: true });
-    await a.waitFrame(dismissFor(reqId), 'G5 answerer A receives the correlated dismiss');
-    await b.waitFrame(dismissFor(reqId), 'G5 peer B receives the correlated dismiss for the dialog it never answered');
-    const results = await awaitDialogs(base + 1, 'G5 dialog settled by the first response');
-    assert.equal(results[base].resolved, true, 'G5: the engine proceeded with the first answer (true), not the default (false)');
-    // The observer was attached the whole time: it saw the broadcast dismiss but was
-    // never handed the answerable request.
-    await obs.waitFrame(dismissFor(reqId), 'G5 observer sees the broadcast dismiss (ordering barrier)');
-    assert.equal(obs.frames.filter(isRequest).length, 0, 'G5: an observer is never fanned an answerable dialog');
-    assert.equal(obs.welcome.pending_dialog, null, 'G5: an observer welcome never carries a pending dialog');
-    // B answers the already-settled dialog. The broker deleted the entry on the first
-    // response, so this finds nothing and is a silent no-op: no second engine
-    // resolution, and the recorded answer stays A's.
-    b.send({ type: 'extension_ui_response', id: reqId, confirmed: false });
-    await barrier(b, 'G5 broker processed B late response (ordered ack)');
-    const settled = h.dialogResults(id);
-    assert.equal(settled.length, base + 1, 'G5: the late peer response resolved nothing — no second dialog entry');
-    assert.equal(settled[base].resolved, true, "G5: the late peer response did not overwrite the first answerer's value");
-    assert.equal(isPidAlive(brokerPid()), true, 'G5: the late no-op response did not fault the broker');
+    const c = await ctrl('g5-ctrl');
+    h.fakeCmd(id, { cmd: 'dialog', timeout: 20_000 }); // generous: the controller answers first
+    const req = await c.waitFrame((f) => f.type === 'extension_ui_request', 'G5 dialog forwarded to controller');
+    assert.equal(req.method, 'confirm', 'G5: the forwarded dialog is the confirm() the engine raised');
+    const reqId = req.id;
+    c.send({ type: 'extension_ui_response', id: reqId, confirmed: true });
+    const results = await awaitDialogs(base + 1, 'G5 dialog resolved by the controller');
+    assert.equal(results[base].resolved, true, 'G5: the engine proceeded with the controller answer (true), not the default (false)');
 });
 // ---------------------------------------------------------------------------
-// G5b (mid-dialog attach) — Guards: a pending dialog survives a writable peer's
-// detach (M2) and is handed to a writable client that attaches MID-dialog via
-// welcome.pending_dialog, which makes it a full peer in the race to answer. An
-// observer attaching mid-dialog gets nothing answerable. Failure modes: a pending
-// dialog lost when the raising viewer detaches, a late-joining writable viewer
-// blind to an in-flight dialog, or an observer handed one it cannot answer.
+// G5 (mid-dialog attach) — Guards: a dialog raised under a prior controller stays
+// pending across that controller's detach (M2) and is delivered to whoever takes
+// control next via welcome.pending_dialog. Failure mode: a pending dialog lost on
+// controller handoff.
 // ---------------------------------------------------------------------------
-test('G5b — a writable client attaching MID-dialog receives the pending dialog; an observer does not', async () => {
+test('G5 — a controller attaching MID-dialog receives the pending dialog via welcome.pending_dialog', async () => {
     const base = dialogCount();
-    const a = await writer('g5b-A');
-    h.fakeCmd(id, { cmd: 'dialog', timeout: 30_000 }); // stays pending long enough for the late attach
-    const reqA = await a.waitFrame(isRequest, 'G5b dialog fanned out to writable A');
+    const a = await ctrl('g5b-A');
+    h.fakeCmd(id, { cmd: 'dialog', timeout: 30_000 }); // stays pending long enough for the handoff
+    const reqA = await a.waitFrame((f) => f.type === 'extension_ui_request', 'G5b dialog forwarded to controller A');
     const reqId = reqA.id;
     a.send({ type: 'bye' });
-    a.close(); // M2: a writable peer detaching does NOT cancel the pending dialog
-    // An observer attaching mid-dialog is never handed it.
-    const obs = await observer('g5b-obs');
-    assert.equal(obs.welcome.pending_dialog, null, 'G5b: an observer attaching mid-dialog gets no pending dialog');
-    // A writable client attaching mid-dialog IS handed it (retry covers the beat
-    // between the raise and this attach) and can settle it.
-    const b = await attachUntil(id, 'controller', 'g5b-B', (x) => x.welcome.role === 'controller' && x.welcome.pending_dialog != null, 'G5b writable B attaches mid-dialog and is handed the pending dialog');
-    assert.equal(b.welcome.pending_dialog.id, reqId, 'G5b: welcome.pending_dialog is the same dialog raised while A was attached');
+    a.close(); // M2: detach frees control but does NOT cancel the pending dialog
+    // Controller B takes control (retry covers the close→controllerId=null beat) and
+    // its welcome carries the still-pending dialog.
+    const b = await attachUntil(id, 'controller', 'g5b-B', (x) => x.welcome.role === 'controller' && x.welcome.pending_dialog != null, 'G5b controller B takes control with the pending dialog');
+    assert.equal(b.welcome.pending_dialog.id, reqId, 'G5b: welcome.pending_dialog is the same dialog raised under A');
     assert.equal(b.welcome.pending_dialog.method, 'confirm', 'G5b: the pending dialog is the confirm()');
     b.send({ type: 'extension_ui_response', id: reqId, confirmed: true });
-    const results = await awaitDialogs(base + 1, 'G5b dialog settled by the mid-dialog joiner');
-    assert.equal(results[base].resolved, true, 'G5b: the mid-dialog joiner answered and the engine proceeded');
-    await obs.waitFrame(dismissFor(reqId), 'G5b dismiss broadcast follows the settlement (ordering barrier)');
-    assert.equal(obs.frames.filter(isRequest).length, 0, 'G5b: the observer was never fanned the dialog it saw dismissed');
+    const results = await awaitDialogs(base + 1, 'G5b dialog resolved by controller B');
+    assert.equal(results[base].resolved, true, 'G5b: controller B answered the handed-off dialog and the engine proceeded');
 });
 // ---------------------------------------------------------------------------
-// G6 — anti-deadlock. An ATTENDED dialog NO writable client answers resolves on a
-// SHORT per-dialog broker timeout, and every fanned peer is dismissed by id.
-// Guards: the engine never hangs on a dialog whose viewers all stay silent.
-// Failure mode: a forever-blocked turn, or overlays left up on every viewer.
+// G6 — anti-deadlock. An ATTENDED dialog the controller never answers resolves on
+// a SHORT per-dialog broker timeout. Guards: the engine never hangs on a dialog
+// with no answerer. Failure mode: a forever-blocked turn.
 // ---------------------------------------------------------------------------
-test('G6 — an attended dialog no writable client answers resolves on the broker timeout and dismisses every peer', async () => {
+test('G6 — an unanswered attended dialog resolves on the broker timeout', async () => {
     const pid = brokerPid();
     const base = dialogCount();
-    // Two writable clients attached but silent → the broker resolves on the SHORT
-    // explicit per-dialog timeout (800ms), never the 120s default. On timeout it
-    // broadcasts a correlated `extension_ui_dismiss` keyed to the dialog's id, so
-    // EVERY peer's overlay (none has an independent timer) is torn down by id.
-    const a = await writer('g6-A');
-    const b = await writer('g6-B');
+    // A controller attached but silent → the broker resolves on the SHORT explicit
+    // per-dialog timeout (800ms), never the 120s default. On timeout the broker also
+    // broadcasts a correlated `extension_ui_dismiss` keyed to the dialog's id, so the
+    // controller's overlay (which has no independent timer) is torn down by id.
+    const c = await ctrl('g6-ctrl');
     h.fakeCmd(id, { cmd: 'dialog', timeout: 800 });
-    const reqA = await a.waitFrame(isRequest, 'G6 dialog fanned out to writable A'); // received, deliberately NOT answered
-    const reqB = await b.waitFrame(isRequest, 'G6 dialog fanned out to writable B'); // received, deliberately NOT answered
-    const reqId = reqA.id;
-    assert.equal(reqB.id, reqId, 'G6: both silent peers hold the SAME dialog id');
-    const dismissA = await a.waitFrame(dismissFor(reqId), 'G6 broker emits a correlated dismiss to A on timeout');
-    await b.waitFrame(dismissFor(reqId), 'G6 broker emits the same correlated dismiss to peer B');
-    assert.equal(dismissA.id, reqId, 'G6: the dismiss frame carries the timed-out dialog id, not another');
-    const results = await awaitDialogs(base + 1, 'G6 attended dialog resolved on timeout');
-    assert.equal(results[base].resolved, false, 'G6: a dialog no writable client answered resolves to the default (deny)');
-    assert.ok(results[base].ms >= 600 && results[base].ms < 5000, `G6: resolved on the ~800ms per-dialog timeout, not instantly and not the 120s default — got ${results[base].ms}ms`);
+    const req = await c.waitFrame((f) => f.type === 'extension_ui_request', 'G6b dialog forwarded to controller'); // received, deliberately NOT answered
+    const reqId = req.id;
+    const dismiss = await c.waitFrame((f) => f.type === 'extension_ui_dismiss' && f.id === reqId, 'G6b broker emits a correlated extension_ui_dismiss on timeout');
+    assert.equal(dismiss.id, reqId, 'G6b: the dismiss frame carries the timed-out dialog id, not another');
+    const results = await awaitDialogs(base + 1, 'G6b attended dialog resolved on timeout');
+    assert.equal(results[base].resolved, false, 'G6b: an unanswered attended dialog resolves to the default (deny)');
+    assert.ok(results[base].ms >= 600 && results[base].ms < 5000, `G6b: resolved on the ~800ms per-dialog timeout, not instantly and not the 120s default — got ${results[base].ms}ms`);
     assert.equal(isPidAlive(pid), true, 'G6: the engine made forward progress (still alive)');
 });

package/dist/core/__tests__/helpers/broker-clients.js

@@ -91,8 +91,8 @@ export function createAttachKit(getH) {
         return { client, frames, welcome, send: (f) => client.send(f), waitFrame, close: () => client.close() };
     }
     // Attach (as `role`) and retry until the welcome satisfies `pred` — used where the
-    // observable lands a beat after a prior action, such as snapshot accrual or
-    // persisted presence after a socket closes. Deterministic: it polls an observable.
+    // observable lands a beat after a prior action (G3 snapshot accrual, G5b control
+    // handoff after a controller detaches). Deterministic: it polls an observable.
     async function attachUntil(id, role, clientId, pred, label) {
         for (let attempt = 0;; attempt++) {
             const a = await attach(id, role, `${clientId}-${attempt}`);

package/dist/core/__tests__/session-model.test.js

@@ -16,6 +16,7 @@
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import { applySnapshot, initialSessionState, reduce, } from '../session-model/session-state.js';
+const CLIENT = 'viewer-1';
 const engine = (patch = {}) => ({
     model: undefined,
     thinkingLevel: 'off',
@@ -34,6 +35,7 @@ const engine = (patch = {}) => ({
 const welcome = (over = {}, state = engine(), display) => ({
     type: 'welcome',
     role: 'controller',
+    controller_id: CLIENT,
     agentDir: '/home/u/.pi/agent',
     snapshot: {
         messages: [],
@@ -43,7 +45,7 @@ const welcome = (over = {}, state = engine(), display) => ({
     },
     ...over,
 });
-const fold = (from, frames) => frames.reduce((s, f) => reduce(s, f), from);
+const fold = (from, frames) => frames.reduce((s, f) => reduce(s, f, CLIENT), from);
 test('applySnapshot(welcome) equals folding the edges that produced the same broker state', () => {
     // The live path: a viewer attached from t=0 watches these edges go by.
     const edges = [
@@ -73,42 +75,42 @@ test('applySnapshot(welcome) equals folding the edges that produced the same bro
     assert.deepEqual(late, live, 'the two ways to learn a session must agree');
 });
 test('agent_settled clears isStreaming (the frozen-Working… fix, now shared by both viewers)', () => {
-    const s0 = reduce(initialSessionState(), welcome());
-    const streaming = reduce(s0, { type: 'agent_start' });
+    const s0 = reduce(initialSessionState(), welcome(), CLIENT);
+    const streaming = reduce(s0, { type: 'agent_start' }, CLIENT);
     assert.equal(streaming.engine?.isStreaming, true);
     // agent_settled ALONE — no agent_end — must settle it. A dormant orchestrator
     // between wakes showed a frozen spinner when this was missed.
-    const settled = reduce(streaming, { type: 'agent_settled' });
+    const settled = reduce(streaming, { type: 'agent_settled' }, CLIENT);
     assert.equal(settled.engine?.isStreaming, false);
 });
 test('a notify is never a dialog, and never disturbs one that is pending', () => {
-    const s0 = reduce(initialSessionState(), welcome());
-    const asked = reduce(s0, { type: 'extension_ui_request', id: 'ask-1', method: 'input', title: 'Paste the code' });
+    const s0 = reduce(initialSessionState(), welcome(), CLIENT);
+    const asked = reduce(s0, { type: 'extension_ui_request', id: 'ask-1', method: 'input', title: 'Paste the code' }, CLIENT);
     assert.equal(asked.dialog?.id, 'ask-1');
-    const notified = reduce(asked, { type: 'extension_ui_request', id: 'n-1', method: 'notify', message: 'background progress' });
+    const notified = reduce(asked, { type: 'extension_ui_request', id: 'n-1', method: 'notify', message: 'background progress' }, CLIENT);
     assert.equal(notified, asked, 'a notify carries no session state — same reference, dialog untouched');
     // A display paint is equally inert with respect to the pending dialog.
-    const painted = reduce(asked, { type: 'extension_ui_request', id: 's-1', method: 'setStatus', statusKey: 'k', statusText: 'v' });
+    const painted = reduce(asked, { type: 'extension_ui_request', id: 's-1', method: 'setStatus', statusKey: 'k', statusText: 'v' }, CLIENT);
     assert.equal(painted.dialog?.id, 'ask-1', 'a chrome paint must not clear a pending dialog');
     // And only the MATCHING correlated dismiss clears it.
-    assert.equal(reduce(asked, { type: 'extension_ui_dismiss', id: 'other' }), asked);
-    assert.equal(reduce(asked, { type: 'extension_ui_dismiss', id: 'ask-1' }).dialog, null);
+    assert.equal(reduce(asked, { type: 'extension_ui_dismiss', id: 'other' }, CLIENT), asked);
+    assert.equal(reduce(asked, { type: 'extension_ui_dismiss', id: 'ask-1' }, CLIENT).dialog, null);
 });
 test('frames that carry no session state return the SAME state reference', () => {
-    const s0 = reduce(initialSessionState(), welcome());
+    const s0 = reduce(initialSessionState(), welcome(), CLIENT);
     const inert = [
-        { type: 'error', code: 'read_only', message: 'read-only' },
+        { type: 'error', code: 'not_controller', message: 'read-only' },
         { type: 'ack', for: 'get_commands', ok: true, detail: '[]' },
         { type: 'bash_start', command: 'ls' },
         { type: 'bash_output', chunk: 'a\n' },
         { type: 'bash_end', exitCode: 0, cancelled: false, truncated: false },
     ];
     for (const f of inert) {
-        assert.equal(reduce(s0, f), s0, `${f.type} must not allocate a new state`);
+        assert.equal(reduce(s0, f, CLIENT), s0, `${f.type} must not allocate a new state`);
     }
     // Slice identity is what viewers repaint off: an engine-only change must leave
     // the display slice untouched by reference.
-    const started = reduce(s0, { type: 'agent_start' });
+    const started = reduce(s0, { type: 'agent_start' }, CLIENT);
     assert.notEqual(started, s0);
     assert.equal(started.display, s0.display, 'an engine change must not dirty the display slice');
 });
@@ -123,7 +125,16 @@ test('a welcome is a COMPLETE catch-up: a re-welcome drops a dead broker s level
     assert.equal(s0.engine?.pendingMessageCount, 1);
     // A fresh broker (post-revive) welcomes with its OWN levels and an empty queue,
     // and emits no queue_update to overwrite the panel — so the welcome must.
-    const s1 = reduce(s0, welcome());
+    const s1 = reduce(s0, welcome(), CLIENT);
     assert.deepEqual(s1.display.statuses, {}, 'a dead broker s status keys must not survive');
     assert.deepEqual(s1.queued, [], 'a dead broker s queued rows must not survive');
 });
+test('role follows the broker: control_changed re-derives it from our own client id', () => {
+    const s0 = reduce(initialSessionState(), welcome({ role: 'controller', controller_id: CLIENT }), CLIENT);
+    assert.equal(s0.role, 'controller');
+    const demoted = reduce(s0, { type: 'control_changed', controller_id: 'someone-else' }, CLIENT);
+    assert.equal(demoted.role, 'observer');
+    assert.equal(demoted.controllerId, 'someone-else');
+    const back = reduce(demoted, { type: 'control_changed', controller_id: CLIENT }, CLIENT);
+    assert.equal(back.role, 'controller');
+});

package/dist/core/keybindings/__tests__/resolve.test.js

@@ -25,7 +25,7 @@ const REQUIRED_IDS = [
     ...ids('crtr.graph.confirm', ['accept', 'cancel']),
     ...ids('crtr.view.host', ['force-quit', 'editor.backspace']),
     ...ids('crtr.view.canvas', ['down', 'up', 'refresh', 'quit']),
-    ...ids('crtr.view.chat', ['submit', 'contextual-cancel', 'reconnect', 'quit']),
+    ...ids('crtr.view.chat', ['submit', 'contextual-cancel', 'reconnect', 'request-control', 'release-control', 'quit']),
     ...ids('crtr.view.git-pr', ['down', 'up', 'refresh', 'quit']),
     ...ids('crtr.view.inbox', ['down', 'up', 'open', 'reply', 'react', 'filter', 'refresh', 'connect-linkedin', 'connect-gmail', 'quit', 'submit-reply', 'cancel', 'reaction-previous', 'reaction-next', 'submit-reaction']),
     ...ids('crtr.view.linkedin', ['down', 'up', 'open', 'reply', 'react', 'refresh', 'quit', 'submit-reply', 'cancel', 'reaction-previous', 'reaction-next', 'submit-reaction']),

package/dist/core/keybindings/catalog.d.ts

@@ -8,8 +8,8 @@ type ProfileMenuAction = 'up' | 'down' | 'select' | 'accept-default' | 'abort' |
 type SetupAction = 'cancel' | 'tab-next' | 'tab-previous' | 'open' | 'list-down' | 'list-up' | 'toggle' | 'details' | 'advance' | 'cell-previous' | 'cell-next';
 type SetupKeybindingAction = 'edit' | 'commit-edit' | 'cancel-edit' | 'unbind' | 'reset-row' | 'reset-all' | 'save' | 'discard' | 'page-up' | 'page-down' | 'filter' | 'filter-delete' | 'filter-clear';
 type SetupModelsAction = 'open' | 'commit' | 'cancel' | 'scope-next';
-export type BindingId = `crtr.tmux.menu.${TmuxMenuAction}` | `crtr.tmux.menu.issue.${'idea' | 'bug'}` | `crtr.tmux.node.${'next' | 'previous'}` | `crtr.tmux.view.${'next' | 'previous'}` | 'crtr.tmux.inbox.toggle' | `crtr.attach.${'detach' | 'clear-or-detach' | 'graph.toggle' | 'model-ladder.next' | 'model-ladder.previous' | 'command.inspect' | 'file-review'}` | 'crtr.mode.cycle' | `crtr.graph.${GraphAction}` | `crtr.graph.confirm.${'accept' | 'cancel'}` | `crtr.view.host.${'force-quit' | 'editor.backspace'}` | `crtr.view.canvas.${'down' | 'up' | 'refresh' | 'quit'}` | `crtr.view.chat.${'submit' | 'contextual-cancel' | 'reconnect' | 'quit'}` | `crtr.view.git-pr.${'down' | 'up' | 'refresh' | 'quit'}` | `crtr.view.inbox.${InboxAction}` | `crtr.view.linkedin.${LinkedinAction}` | `crtr.view.prompt-review.${'down' | 'up' | 'compare-previous' | 'compare-next' | 'toggle-mode' | 'expand' | 'export' | 'refresh' | 'quit'}` | `crtr.view.workspace-sidebar.${'down' | 'up' | 'open' | 'refresh' | 'quit'}` | `crtr.view.inspector.${'down' | 'up' | 'section-next' | 'section-prev' | 'page-down' | 'page-up' | 'toggle-detail' | 'cancel-item' | 'confirm' | 'dismiss' | 'retarget' | 'refresh' | 'quit'}` | `crtr.view-picker.${'down' | 'up' | 'run' | 'quit'}` | `crtr.browse.${BrowseAction}` | `crtr.browse.search.${'cancel' | 'commit' | 'delete' | 'quit'}` | `crtr.profile.menu.${ProfileMenuAction}` | `crtr.profile.search.${'up' | 'down' | 'pick' | 'back' | 'delete' | 'abort'}` | `crtr.setup.${SetupAction}` | `crtr.setup.confirm.${'accept' | 'back'}` | `crtr.setup.keybindings.${SetupKeybindingAction}` | `crtr.setup.models.${SetupModelsAction}`;
-export declare const BINDING_CATALOG: readonly [BindingDefinition<"crtr.tmux.menu.open">, BindingDefinition<"crtr.tmux.menu.promote">, BindingDefinition<"crtr.tmux.menu.resume">, BindingDefinition<"crtr.tmux.menu.fork">, BindingDefinition<"crtr.tmux.menu.demote">, BindingDefinition<"crtr.tmux.menu.detach">, BindingDefinition<"crtr.tmux.menu.close-subtree">, BindingDefinition<"crtr.tmux.menu.background-bash">, BindingDefinition<"crtr.tmux.menu.file-review">, BindingDefinition<"crtr.tmux.menu.pin">, BindingDefinition<"crtr.tmux.menu.show">, BindingDefinition<"crtr.tmux.menu.metadata">, BindingDefinition<"crtr.tmux.menu.context">, BindingDefinition<"crtr.tmux.menu.providers">, BindingDefinition<"crtr.tmux.menu.graph">, BindingDefinition<"crtr.tmux.menu.focus-manager">, BindingDefinition<"crtr.tmux.menu.copy-id">, BindingDefinition<"crtr.tmux.menu.reload-viewer">, BindingDefinition<"crtr.tmux.menu.issues">, BindingDefinition<"crtr.tmux.menu.issue.idea">, BindingDefinition<"crtr.tmux.menu.issue.bug">, BindingDefinition<"crtr.tmux.node.next">, BindingDefinition<"crtr.tmux.node.previous">, BindingDefinition<"crtr.tmux.inbox.toggle">, BindingDefinition<"crtr.tmux.view.next">, BindingDefinition<"crtr.tmux.view.previous">, BindingDefinition<"crtr.attach.detach">, BindingDefinition<"crtr.attach.clear-or-detach">, BindingDefinition<"crtr.attach.graph.toggle">, BindingDefinition<"crtr.attach.model-ladder.next">, BindingDefinition<"crtr.attach.model-ladder.previous">, BindingDefinition<"crtr.attach.command.inspect">, BindingDefinition<"crtr.attach.file-review">, BindingDefinition<"crtr.mode.cycle">, BindingDefinition<"crtr.graph.down">, BindingDefinition<"crtr.graph.up">, BindingDefinition<"crtr.graph.first">, BindingDefinition<"crtr.graph.last">, BindingDefinition<"crtr.graph.collapse-or-manager">, BindingDefinition<"crtr.graph.expand-or-child">, BindingDefinition<"crtr.graph.focus">, BindingDefinition<"crtr.graph.revive">, BindingDefinition<"crtr.graph.focus-manager">, BindingDefinition<"crtr.graph.close-subtree">, BindingDefinition<"crtr.graph.dismiss">, BindingDefinition<"crtr.graph.confirm.accept">, BindingDefinition<"crtr.graph.confirm.cancel">, BindingDefinition<"crtr.view.host.force-quit">, BindingDefinition<"crtr.view.host.editor.backspace">, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<"crtr.view.chat.submit">, BindingDefinition<"crtr.view.chat.contextual-cancel">, BindingDefinition<"crtr.view.chat.reconnect">, BindingDefinition<"crtr.view.chat.quit">, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, ...(BindingDefinition<BindingId> | BindingDefinition<"crtr.view.prompt-review.down"> | BindingDefinition<"crtr.view.prompt-review.up"> | BindingDefinition<"crtr.view.prompt-review.compare-previous"> | BindingDefinition<"crtr.view.prompt-review.compare-next"> | BindingDefinition<"crtr.view.prompt-review.toggle-mode"> | BindingDefinition<"crtr.view.prompt-review.expand"> | BindingDefinition<"crtr.view.prompt-review.export"> | BindingDefinition<"crtr.view.prompt-review.refresh"> | BindingDefinition<"crtr.view.prompt-review.quit"> | BindingDefinition<"crtr.view.workspace-sidebar.down"> | BindingDefinition<"crtr.view.workspace-sidebar.up"> | BindingDefinition<"crtr.view.workspace-sidebar.open"> | BindingDefinition<"crtr.view.workspace-sidebar.refresh"> | BindingDefinition<"crtr.view.workspace-sidebar.quit"> | BindingDefinition<"crtr.view.inspector.down"> | BindingDefinition<"crtr.view.inspector.up"> | BindingDefinition<"crtr.view.inspector.section-next"> | BindingDefinition<"crtr.view.inspector.section-prev"> | BindingDefinition<"crtr.view.inspector.page-down"> | BindingDefinition<"crtr.view.inspector.page-up"> | BindingDefinition<"crtr.view.inspector.toggle-detail"> | BindingDefinition<"crtr.view.inspector.cancel-item"> | BindingDefinition<"crtr.view.inspector.confirm"> | BindingDefinition<"crtr.view.inspector.dismiss"> | BindingDefinition<"crtr.view.inspector.retarget"> | BindingDefinition<"crtr.view.inspector.refresh"> | BindingDefinition<"crtr.view.inspector.quit"> | BindingDefinition<"crtr.view-picker.down"> | BindingDefinition<"crtr.view-picker.up"> | BindingDefinition<"crtr.view-picker.run"> | BindingDefinition<"crtr.view-picker.quit"> | BindingDefinition<"crtr.browse.quit"> | BindingDefinition<"crtr.browse.down"> | BindingDefinition<"crtr.browse.up"> | BindingDefinition<"crtr.browse.first"> | BindingDefinition<"crtr.browse.last"> | BindingDefinition<"crtr.browse.expand-or-child"> | BindingDefinition<"crtr.browse.collapse-or-parent"> | BindingDefinition<"crtr.browse.toggle-fold"> | BindingDefinition<"crtr.browse.tab-next"> | BindingDefinition<"crtr.browse.tab-previous"> | BindingDefinition<"crtr.browse.tab.2" | "crtr.browse.tab.1" | "crtr.browse.tab.3" | "crtr.browse.tab.4" | "crtr.browse.tab.5"> | BindingDefinition<"crtr.browse.close-subtree"> | BindingDefinition<"crtr.browse.confirm-close"> | BindingDefinition<"crtr.browse.sort"> | BindingDefinition<"crtr.browse.scope"> | BindingDefinition<"crtr.browse.profile"> | BindingDefinition<"crtr.browse.residents"> | BindingDefinition<"crtr.browse.preview"> | BindingDefinition<"crtr.browse.search"> | BindingDefinition<"crtr.browse.revive-now"> | BindingDefinition<"crtr.browse.focus"> | BindingDefinition<"crtr.browse.focus-background"> | BindingDefinition<"crtr.browse.search.cancel"> | BindingDefinition<"crtr.browse.search.commit"> | BindingDefinition<"crtr.browse.search.delete"> | BindingDefinition<"crtr.browse.search.quit"> | BindingDefinition<"crtr.profile.menu.up"> | BindingDefinition<"crtr.profile.menu.down"> | BindingDefinition<"crtr.profile.menu.select"> | BindingDefinition<"crtr.profile.menu.accept-default"> | BindingDefinition<"crtr.profile.menu.abort"> | BindingDefinition<"crtr.profile.menu.slot.2" | "crtr.profile.menu.slot.1" | "crtr.profile.menu.slot.3" | "crtr.profile.menu.slot.4" | "crtr.profile.menu.slot.5" | "crtr.profile.menu.slot.9" | "crtr.profile.menu.slot.8" | "crtr.profile.menu.slot.7" | "crtr.profile.menu.slot.6">)[], BindingDefinition<"crtr.profile.menu.create">, BindingDefinition<"crtr.profile.menu.search-existing">, BindingDefinition<"crtr.profile.menu.use-root">, BindingDefinition<"crtr.profile.menu.set-default">, BindingDefinition<"crtr.profile.menu.add-directory">, BindingDefinition<"crtr.profile.menu.unpin">, BindingDefinition<"crtr.profile.search.up">, BindingDefinition<"crtr.profile.search.down">, BindingDefinition<"crtr.profile.search.pick">, BindingDefinition<"crtr.profile.search.back">, BindingDefinition<"crtr.profile.search.delete">, BindingDefinition<"crtr.profile.search.abort">, BindingDefinition<"crtr.setup.cancel">, BindingDefinition<"crtr.setup.tab-next">, BindingDefinition<"crtr.setup.tab-previous">, BindingDefinition<"crtr.setup.open">, BindingDefinition<"crtr.setup.list-down">, BindingDefinition<"crtr.setup.list-up">, BindingDefinition<"crtr.setup.toggle">, BindingDefinition<"crtr.setup.details">, BindingDefinition<"crtr.setup.advance">, BindingDefinition<"crtr.setup.confirm.accept">, BindingDefinition<"crtr.setup.confirm.back">, BindingDefinition<"crtr.setup.keybindings.edit">, BindingDefinition<"crtr.setup.keybindings.commit-edit">, BindingDefinition<"crtr.setup.keybindings.cancel-edit">, BindingDefinition<"crtr.setup.keybindings.unbind">, BindingDefinition<"crtr.setup.keybindings.reset-row">, BindingDefinition<"crtr.setup.keybindings.reset-all">, BindingDefinition<"crtr.setup.keybindings.save">, BindingDefinition<"crtr.setup.keybindings.discard">, BindingDefinition<"crtr.setup.keybindings.page-up">, BindingDefinition<"crtr.setup.keybindings.page-down">, BindingDefinition<"crtr.setup.keybindings.filter">, BindingDefinition<"crtr.setup.keybindings.filter-delete">, BindingDefinition<"crtr.setup.keybindings.filter-clear">, BindingDefinition<"crtr.setup.cell-previous">, BindingDefinition<"crtr.setup.cell-next">, BindingDefinition<"crtr.setup.models.open">, BindingDefinition<"crtr.setup.models.scope-next">, BindingDefinition<"crtr.setup.models.commit">, BindingDefinition<"crtr.setup.models.cancel">];
+export type BindingId = `crtr.tmux.menu.${TmuxMenuAction}` | `crtr.tmux.menu.issue.${'idea' | 'bug'}` | `crtr.tmux.node.${'next' | 'previous'}` | `crtr.tmux.view.${'next' | 'previous'}` | 'crtr.tmux.inbox.toggle' | `crtr.attach.${'detach' | 'clear-or-detach' | 'graph.toggle' | 'model-ladder.next' | 'model-ladder.previous' | 'command.inspect' | 'file-review'}` | 'crtr.mode.cycle' | `crtr.graph.${GraphAction}` | `crtr.graph.confirm.${'accept' | 'cancel'}` | `crtr.view.host.${'force-quit' | 'editor.backspace'}` | `crtr.view.canvas.${'down' | 'up' | 'refresh' | 'quit'}` | `crtr.view.chat.${'submit' | 'contextual-cancel' | 'reconnect' | 'request-control' | 'release-control' | 'quit'}` | `crtr.view.git-pr.${'down' | 'up' | 'refresh' | 'quit'}` | `crtr.view.inbox.${InboxAction}` | `crtr.view.linkedin.${LinkedinAction}` | `crtr.view.prompt-review.${'down' | 'up' | 'compare-previous' | 'compare-next' | 'toggle-mode' | 'expand' | 'export' | 'refresh' | 'quit'}` | `crtr.view.workspace-sidebar.${'down' | 'up' | 'open' | 'refresh' | 'quit'}` | `crtr.view.inspector.${'down' | 'up' | 'section-next' | 'section-prev' | 'page-down' | 'page-up' | 'toggle-detail' | 'cancel-item' | 'confirm' | 'dismiss' | 'retarget' | 'refresh' | 'quit'}` | `crtr.view-picker.${'down' | 'up' | 'run' | 'quit'}` | `crtr.browse.${BrowseAction}` | `crtr.browse.search.${'cancel' | 'commit' | 'delete' | 'quit'}` | `crtr.profile.menu.${ProfileMenuAction}` | `crtr.profile.search.${'up' | 'down' | 'pick' | 'back' | 'delete' | 'abort'}` | `crtr.setup.${SetupAction}` | `crtr.setup.confirm.${'accept' | 'back'}` | `crtr.setup.keybindings.${SetupKeybindingAction}` | `crtr.setup.models.${SetupModelsAction}`;
+export declare const BINDING_CATALOG: readonly [BindingDefinition<"crtr.tmux.menu.open">, BindingDefinition<"crtr.tmux.menu.promote">, BindingDefinition<"crtr.tmux.menu.resume">, BindingDefinition<"crtr.tmux.menu.fork">, BindingDefinition<"crtr.tmux.menu.demote">, BindingDefinition<"crtr.tmux.menu.detach">, BindingDefinition<"crtr.tmux.menu.close-subtree">, BindingDefinition<"crtr.tmux.menu.background-bash">, BindingDefinition<"crtr.tmux.menu.file-review">, BindingDefinition<"crtr.tmux.menu.pin">, BindingDefinition<"crtr.tmux.menu.show">, BindingDefinition<"crtr.tmux.menu.metadata">, BindingDefinition<"crtr.tmux.menu.context">, BindingDefinition<"crtr.tmux.menu.providers">, BindingDefinition<"crtr.tmux.menu.graph">, BindingDefinition<"crtr.tmux.menu.focus-manager">, BindingDefinition<"crtr.tmux.menu.copy-id">, BindingDefinition<"crtr.tmux.menu.reload-viewer">, BindingDefinition<"crtr.tmux.menu.issues">, BindingDefinition<"crtr.tmux.menu.issue.idea">, BindingDefinition<"crtr.tmux.menu.issue.bug">, BindingDefinition<"crtr.tmux.node.next">, BindingDefinition<"crtr.tmux.node.previous">, BindingDefinition<"crtr.tmux.inbox.toggle">, BindingDefinition<"crtr.tmux.view.next">, BindingDefinition<"crtr.tmux.view.previous">, BindingDefinition<"crtr.attach.detach">, BindingDefinition<"crtr.attach.clear-or-detach">, BindingDefinition<"crtr.attach.graph.toggle">, BindingDefinition<"crtr.attach.model-ladder.next">, BindingDefinition<"crtr.attach.model-ladder.previous">, BindingDefinition<"crtr.attach.command.inspect">, BindingDefinition<"crtr.attach.file-review">, BindingDefinition<"crtr.mode.cycle">, BindingDefinition<"crtr.graph.down">, BindingDefinition<"crtr.graph.up">, BindingDefinition<"crtr.graph.first">, BindingDefinition<"crtr.graph.last">, BindingDefinition<"crtr.graph.collapse-or-manager">, BindingDefinition<"crtr.graph.expand-or-child">, BindingDefinition<"crtr.graph.focus">, BindingDefinition<"crtr.graph.revive">, BindingDefinition<"crtr.graph.focus-manager">, BindingDefinition<"crtr.graph.close-subtree">, BindingDefinition<"crtr.graph.dismiss">, BindingDefinition<"crtr.graph.confirm.accept">, BindingDefinition<"crtr.graph.confirm.cancel">, BindingDefinition<"crtr.view.host.force-quit">, BindingDefinition<"crtr.view.host.editor.backspace">, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<"crtr.view.chat.submit">, BindingDefinition<"crtr.view.chat.contextual-cancel">, BindingDefinition<"crtr.view.chat.reconnect">, BindingDefinition<"crtr.view.chat.request-control">, BindingDefinition<"crtr.view.chat.release-control">, BindingDefinition<"crtr.view.chat.quit">, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, BindingDefinition<BindingId>, ...(BindingDefinition<BindingId> | BindingDefinition<"crtr.view.prompt-review.down"> | BindingDefinition<"crtr.view.prompt-review.up"> | BindingDefinition<"crtr.view.prompt-review.compare-previous"> | BindingDefinition<"crtr.view.prompt-review.compare-next"> | BindingDefinition<"crtr.view.prompt-review.toggle-mode"> | BindingDefinition<"crtr.view.prompt-review.expand"> | BindingDefinition<"crtr.view.prompt-review.export"> | BindingDefinition<"crtr.view.prompt-review.refresh"> | BindingDefinition<"crtr.view.prompt-review.quit"> | BindingDefinition<"crtr.view.workspace-sidebar.down"> | BindingDefinition<"crtr.view.workspace-sidebar.up"> | BindingDefinition<"crtr.view.workspace-sidebar.open"> | BindingDefinition<"crtr.view.workspace-sidebar.refresh"> | BindingDefinition<"crtr.view.workspace-sidebar.quit"> | BindingDefinition<"crtr.view.inspector.down"> | BindingDefinition<"crtr.view.inspector.up"> | BindingDefinition<"crtr.view.inspector.section-next"> | BindingDefinition<"crtr.view.inspector.section-prev"> | BindingDefinition<"crtr.view.inspector.page-down"> | BindingDefinition<"crtr.view.inspector.page-up"> | BindingDefinition<"crtr.view.inspector.toggle-detail"> | BindingDefinition<"crtr.view.inspector.cancel-item"> | BindingDefinition<"crtr.view.inspector.confirm"> | BindingDefinition<"crtr.view.inspector.dismiss"> | BindingDefinition<"crtr.view.inspector.retarget"> | BindingDefinition<"crtr.view.inspector.refresh"> | BindingDefinition<"crtr.view.inspector.quit"> | BindingDefinition<"crtr.view-picker.down"> | BindingDefinition<"crtr.view-picker.up"> | BindingDefinition<"crtr.view-picker.run"> | BindingDefinition<"crtr.view-picker.quit"> | BindingDefinition<"crtr.browse.quit"> | BindingDefinition<"crtr.browse.down"> | BindingDefinition<"crtr.browse.up"> | BindingDefinition<"crtr.browse.first"> | BindingDefinition<"crtr.browse.last"> | BindingDefinition<"crtr.browse.expand-or-child"> | BindingDefinition<"crtr.browse.collapse-or-parent"> | BindingDefinition<"crtr.browse.toggle-fold"> | BindingDefinition<"crtr.browse.tab-next"> | BindingDefinition<"crtr.browse.tab-previous"> | BindingDefinition<"crtr.browse.tab.2" | "crtr.browse.tab.1" | "crtr.browse.tab.3" | "crtr.browse.tab.4" | "crtr.browse.tab.5"> | BindingDefinition<"crtr.browse.close-subtree"> | BindingDefinition<"crtr.browse.confirm-close"> | BindingDefinition<"crtr.browse.sort"> | BindingDefinition<"crtr.browse.scope"> | BindingDefinition<"crtr.browse.profile"> | BindingDefinition<"crtr.browse.residents"> | BindingDefinition<"crtr.browse.preview"> | BindingDefinition<"crtr.browse.search"> | BindingDefinition<"crtr.browse.revive-now"> | BindingDefinition<"crtr.browse.focus"> | BindingDefinition<"crtr.browse.focus-background"> | BindingDefinition<"crtr.browse.search.cancel"> | BindingDefinition<"crtr.browse.search.commit"> | BindingDefinition<"crtr.browse.search.delete"> | BindingDefinition<"crtr.browse.search.quit"> | BindingDefinition<"crtr.profile.menu.up"> | BindingDefinition<"crtr.profile.menu.down"> | BindingDefinition<"crtr.profile.menu.select"> | BindingDefinition<"crtr.profile.menu.accept-default"> | BindingDefinition<"crtr.profile.menu.abort"> | BindingDefinition<"crtr.profile.menu.slot.2" | "crtr.profile.menu.slot.1" | "crtr.profile.menu.slot.3" | "crtr.profile.menu.slot.4" | "crtr.profile.menu.slot.5" | "crtr.profile.menu.slot.9" | "crtr.profile.menu.slot.8" | "crtr.profile.menu.slot.7" | "crtr.profile.menu.slot.6">)[], BindingDefinition<"crtr.profile.menu.create">, BindingDefinition<"crtr.profile.menu.search-existing">, BindingDefinition<"crtr.profile.menu.use-root">, BindingDefinition<"crtr.profile.menu.set-default">, BindingDefinition<"crtr.profile.menu.add-directory">, BindingDefinition<"crtr.profile.menu.unpin">, BindingDefinition<"crtr.profile.search.up">, BindingDefinition<"crtr.profile.search.down">, BindingDefinition<"crtr.profile.search.pick">, BindingDefinition<"crtr.profile.search.back">, BindingDefinition<"crtr.profile.search.delete">, BindingDefinition<"crtr.profile.search.abort">, BindingDefinition<"crtr.setup.cancel">, BindingDefinition<"crtr.setup.tab-next">, BindingDefinition<"crtr.setup.tab-previous">, BindingDefinition<"crtr.setup.open">, BindingDefinition<"crtr.setup.list-down">, BindingDefinition<"crtr.setup.list-up">, BindingDefinition<"crtr.setup.toggle">, BindingDefinition<"crtr.setup.details">, BindingDefinition<"crtr.setup.advance">, BindingDefinition<"crtr.setup.confirm.accept">, BindingDefinition<"crtr.setup.confirm.back">, BindingDefinition<"crtr.setup.keybindings.edit">, BindingDefinition<"crtr.setup.keybindings.commit-edit">, BindingDefinition<"crtr.setup.keybindings.cancel-edit">, BindingDefinition<"crtr.setup.keybindings.unbind">, BindingDefinition<"crtr.setup.keybindings.reset-row">, BindingDefinition<"crtr.setup.keybindings.reset-all">, BindingDefinition<"crtr.setup.keybindings.save">, BindingDefinition<"crtr.setup.keybindings.discard">, BindingDefinition<"crtr.setup.keybindings.page-up">, BindingDefinition<"crtr.setup.keybindings.page-down">, BindingDefinition<"crtr.setup.keybindings.filter">, BindingDefinition<"crtr.setup.keybindings.filter-delete">, BindingDefinition<"crtr.setup.keybindings.filter-clear">, BindingDefinition<"crtr.setup.cell-previous">, BindingDefinition<"crtr.setup.cell-next">, BindingDefinition<"crtr.setup.models.open">, BindingDefinition<"crtr.setup.models.scope-next">, BindingDefinition<"crtr.setup.models.commit">, BindingDefinition<"crtr.setup.models.cancel">];
 export declare const BINDING_IDS: ReadonlySet<string>;
 export declare const SAFETY_REQUIREMENTS: readonly SafetyRequirement[];
 export {};

package/dist/core/keybindings/catalog.js

@@ -79,6 +79,8 @@ export const BINDING_CATALOG = Object.freeze([
     b('crtr.view.chat.submit', 'Views', 'Submit chat', 'Submit the current chat input.', ['enter'], 'terminal', ['view.chat']),
     b('crtr.view.chat.contextual-cancel', 'Views', 'Cancel chat action', 'Cancel the active chat action.', ['escape'], 'terminal', ['view.chat']),
     b('crtr.view.chat.reconnect', 'Views', 'Reconnect chat', 'Reconnect the chat stream.', ['r'], 'terminal', ['view.chat']),
+    b('crtr.view.chat.request-control', 'Views', 'Request control', 'Request control of the chat.', ['c'], 'terminal', ['view.chat']),
+    b('crtr.view.chat.release-control', 'Views', 'Release control', 'Release control of the chat.', ['shift+c', 'ctrl+r'], 'terminal', ['view.chat']),
     b('crtr.view.chat.quit', 'Views', 'Quit chat', 'Leave the chat view.', ['q'], 'terminal', ['view.chat'], 'leave-screen'),
     ...viewNavigation('git-pr', 'Git PR view'),
     ...listView('inbox', 'Inbox', [

package/dist/core/runtime/auth-reload.d.ts

@@ -1,7 +1,7 @@
-/** Reload a LIVE node's credentials over its view.sock. Connects as an
- *  OBSERVER, sends `reload_auth`, and resolves on its ack. The handler is open
- *  to any role, but observer accurately describes this role-independent operation.
- *  Rejects on the broker's `error` frame,
+/** Reload a LIVE node's credentials over its view.sock. Connects as an OBSERVER
+ *  (hello only — NO request_control, so an attached human keeps control through
+ *  the fan; the broker's reload_auth handler is open to any client), sends
+ *  `reload_auth`, and resolves on its ack. Rejects on the broker's `error` frame,
  *  connect failure, a premature close, or timeout — the caller (the daemon fan)
  *  isolates each broker so one failure never aborts the rest. */
 export declare function reloadAuthLive(nodeId: string): Promise<void>;

package/dist/core/runtime/auth-reload.js

@@ -9,9 +9,11 @@
 // live broker, so the whole canvas follows one account switch with no per-broker
 // re-login.
 //
-// connect → observer hello → reload_auth → await ack. The broker's reload_auth
-// handler is open to any client (it is an idempotent local re-read that does not
-// steer the conversation), so this deliberately remains an observer operation.
+// connect → hello → reload_auth → await ack. NO request_control: the broker's
+// reload_auth handler is open to any client (it's an idempotent local re-read
+// that doesn't steer the conversation), so the fan must NOT claim controller —
+// request_control ALWAYS preempts, which would silently demote any human
+// attached-and-driving a node every time /login fans canvas-wide.
 import { randomUUID } from 'node:crypto';
 import { BrokerClient } from '../broker-client/index.js';
 /** How long to wait for the broker's `reload_auth` ack before giving up. The
@@ -19,10 +21,10 @@ import { BrokerClient } from '../broker-client/index.js';
  *  supervision loop awaits this on a real change — so the timeout is kept tight
  *  to cap the worst-case stall if a broker connects but never acks. */
 const ACK_TIMEOUT_MS = 3_000;
-/** Reload a LIVE node's credentials over its view.sock. Connects as an
- *  OBSERVER, sends `reload_auth`, and resolves on its ack. The handler is open
- *  to any role, but observer accurately describes this role-independent operation.
- *  Rejects on the broker's `error` frame,
+/** Reload a LIVE node's credentials over its view.sock. Connects as an OBSERVER
+ *  (hello only — NO request_control, so an attached human keeps control through
+ *  the fan; the broker's reload_auth handler is open to any client), sends
+ *  `reload_auth`, and resolves on its ack. Rejects on the broker's `error` frame,
  *  connect failure, a premature close, or timeout — the caller (the daemon fan)
  *  isolates each broker so one failure never aborts the rest. */
 export function reloadAuthLive(nodeId) {
@@ -49,8 +51,10 @@ export function reloadAuthLive(nodeId) {
         client.on('error', (err) => finish(() => reject(err)));
         client.on('close', () => finish(() => reject(new Error('broker connection closed before it acked the auth reload'))));
         client.on('connect', () => {
-            // Hello as OBSERVER — reload_auth is role-independent, and this helper
-            // does not drive the conversation.
+            // Hello as OBSERVER — reload_auth is open to any client, and an observer
+            // hello never touches controllerId, so a human driving this broker keeps
+            // control through the fan. (A `controller` hello also only takes control
+            // when none is held, which is safe; observer is the more honest signal.)
             client.send({ type: 'hello', role: 'observer', client_id: clientId });
             client.send({ type: 'reload_auth' });
         });

package/dist/core/runtime/boot-root.d.ts

@@ -17,8 +17,8 @@ export interface BootRootOpts {
 }
 /** Boot the front-door root: create the resident root through crtrd (broker
  *  launched + view socket ready server-side), register THIS terminal's pane as
- *  its foreground viewer, then exec `crtr surface attach` inline so this terminal
- *  becomes a writable viewer. Does not return — it process.exit()s
+ *  its one viewer, then exec `crtr surface attach` inline so this terminal
+ *  becomes the broker's controller-viewer. Does not return — it process.exit()s
  *  when the inline attach exits (detach leaves the resident broker running, to
  *  be reconnected later). */
 export declare function bootRoot(opts: BootRootOpts): Promise<never>;

package/dist/core/runtime/boot-root.js

@@ -3,7 +3,7 @@
 // bootRoot creates the resident root through crtrd (`createNode({root:true})`,
 // which the daemon serves at readiness 'await' — node birth, broker launch, and
 // view-socket readiness ALL happen server-side), then execs `crtr surface
-// attach` inline so THIS terminal becomes the broker's writable viewer.
+// attach` inline so THIS terminal becomes the broker's controller-viewer.
 //
 // crtrd is the sole owner of canvas state (see crtrd-sole-state-owner), so this
 // module opens NO canvas.db: node creation and the viewer-focus row both route
@@ -18,13 +18,13 @@ import { cliClient } from '../../commands/api-client.js';
 import { mark } from '../timing.js';
 /** Boot the front-door root: create the resident root through crtrd (broker
  *  launched + view socket ready server-side), register THIS terminal's pane as
- *  its foreground viewer, then exec `crtr surface attach` inline so this terminal
- *  becomes a writable viewer. Does not return — it process.exit()s
+ *  its one viewer, then exec `crtr surface attach` inline so this terminal
+ *  becomes the broker's controller-viewer. Does not return — it process.exit()s
  *  when the inline attach exits (detach leaves the resident broker running, to
  *  be reconnected later). */
 export async function bootRoot(opts) {
     // crtr is tmux-only: the front door execs `crtr surface attach` inline in THIS
-    // pane to become the root's writable viewer, so there must be a tmux pane to
+    // pane to become the root's controller-viewer, so there must be a tmux pane to
     // anchor on. Outside tmux there is no viewer surface — throw with a friendly
     // message rather than boot a root nobody can see.
     if (!inTmux()) {
@@ -71,8 +71,8 @@ export async function bootRoot(opts) {
     // so its window stays where the user already is. The node row carries NO
     // presence — a broker node's pane/window/tmux_session stay NULL; the viewer
     // pane lives in the focuses table. Register the FOREGROUND front-door pane as
-    // this node's focus (canvas write, routed through crtrd) so focus/nav can find
-    // it. Best-effort — attach works regardless.
+    // the node's one viewer focus (canvas write, routed through crtrd) so focus/nav
+    // can find it. Best-effort — attach works regardless.
     const here = currentTmux();
     if (here !== null) {
         try {
@@ -82,7 +82,7 @@ export async function bootRoot(opts) {
     }
     // Broker is the only host: the root runs as a detached broker engine (already
     // launched above), and THIS terminal execs `crtr surface attach` inline to
-    // become its writable viewer. The attach's own ensureAttach is an idempotent
+    // become its controller-viewer. The attach's own ensureAttach is an idempotent
     // no-op on the already-live broker. CRTR_ATTACH_WAIT_MS tells the viewer to
     // poll view.sock until it accepts instead of failing fast on a not-yet-bound
     // socket. CRTR_ATTACH_BORROWED_PANE tells the viewer that its pane is the