@north-light/crouter 0.3.176 → 0.3.177

package/dist/api/client.d.ts

@@ -33,7 +33,7 @@ export interface CrtrClientOptions {
      *  autostart is on; after it resolves, the client polls `/healthz` and retries
      *  the original request once. Absent → a cold socket throws `daemon_unavailable`. */
     onColdSocket?: () => Promise<void>;
-    /** Injected cold-start diagnostic (issue #516). Called ONLY when the bounded
+    /** Injected cold-start diagnostic. Called ONLY when the bounded
      *  `/healthz` poll times out after `onColdSocket`, so the caller can attach
      *  operator-useful context (e.g. a bounded tail of crtrd's stderr log) to the
      *  `daemon_unavailable` error instead of it staying a bare message. Must
@@ -43,7 +43,7 @@ export interface CrtrClientOptions {
     /** Bounded window (ms) to poll `/healthz` after `onColdSocket` resolves
      *  before giving up with `daemon_unavailable`. Defaults to
      *  `HEALTHZ_POLL_WINDOW_MS`. This must NOT silently drift from whatever
-     *  window actually governs "did the daemon start" (issue #508 follow-up):
+     *  window actually governs "did the daemon start":
      *  `onColdSocket` is fire-and-forget, so this poll is the ONLY deadline that
      *  determines whether the CLI reports success. A caller whose `onColdSocket`
      *  hook triggers a differently-windowed startup verifier (e.g. the CLI's
@@ -253,8 +253,8 @@ export declare class CrtrClient {
     private handleColdSocket;
 }
 /** Compose the cold-start `/healthz`-timeout `daemon_unavailable` message,
- *  appending the injected diagnostic (issue #516) when one is present instead
- *  of discarding the real startup failure behind a bare message. Exported (not
+ *  appending the injected diagnostic when one is present instead of discarding
+ *  the real startup failure behind a bare message. Exported (not
  *  from the package's public `index.ts` surface, which is dependency-light by
  *  design) purely so the regression test can assert the composition without
  *  waiting out the real poll window. */

package/dist/api/client.js

@@ -655,8 +655,8 @@ function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
 /** Compose the cold-start `/healthz`-timeout `daemon_unavailable` message,
- *  appending the injected diagnostic (issue #516) when one is present instead
- *  of discarding the real startup failure behind a bare message. Exported (not
+ *  appending the injected diagnostic when one is present instead of discarding
+ *  the real startup failure behind a bare message. Exported (not
  *  from the package's public `index.ts` surface, which is dependency-light by
  *  design) purely so the regression test can assert the composition without
  *  waiting out the real poll window. */

package/dist/api/dto/lifecycle.d.ts

@@ -3,7 +3,7 @@ import type { NodeIdDTO, NodeStatusDTO } from './common.js';
 export interface ReviveRequest {
     /** Resume the saved conversation (true) vs a fresh launch (false). */
     resume?: boolean;
-    /** Clear the finalization latch before reviving (#339 `--reopen` gate). The
+    /** Clear the finalization latch before reviving (the `--reopen` gate). The
      *  latch clear is a canvas write, so the gate is enforced server-side: with
      *  `reopen:false` (default) a finalized node is REJECTED (`node_finalized`);
      *  with `reopen:true` a node that is NOT finalized is rejected

package/dist/api/dto/reports.d.ts

@@ -20,7 +20,7 @@ export interface PushReportResultDTO {
     /** Present (and true) only for a `final` push whose reporting node owned a
      *  managed worktree with zero commits ahead of its base and no uncommitted
      *  changes: the server auto-dropped it instead of blocking on `node worktree
-     *  close` (#327/#333). A worktree with real unlanded work instead blocks with
+     *  close`. A worktree with real unlanded work instead blocks with
      *  an `open_managed_worktree` error. */
     worktree_auto_dropped?: boolean;
     /** Present only alongside `worktree_auto_dropped`: the checkout path dropped. */

package/dist/clients/attach/__tests__/group-activity.test.js

@@ -30,7 +30,7 @@ async function summarizedGroup(messages, key) {
         stats: {},
         state: { isStreaming: false },
         toolGroupSummaries: {
-            [key]: { bullets: ['broker recap'], nodesSpawned: 0, filesEdited: 0 },
+            [key]: { bullets: ['broker recap'], nodesSpawned: 0, filesDeleted: 0 },
         },
     });
     const group = internals.groups.find((candidate) => candidate.key === key);
@@ -70,7 +70,7 @@ test('a folded recap carries paths and counts, never diff or write payload bodie
         bashMode: tone('bashMode'), bashModeAlt: tone('bashModeAlt'),
     };
     const recap = new GroupRecapComponent();
-    recap.setRecap({ bullets: ['finished'], nodesSpawned: 0, filesEdited: 2 }, 2, { memories: [{ action: 'read', name: 'alpha', path: '/tmp/memories/alpha.md' }], files: recorder.activity().files }, true, palette);
+    recap.setRecap({ bullets: ['finished'], nodesSpawned: 0, filesDeleted: 2 }, 2, { memories: [{ action: 'read', name: 'alpha', path: '/tmp/memories/alpha.md' }], files: recorder.activity().files }, true, palette);
     const text = recap.render(120).join('\n');
     assert.match(text, /overwritten\.ts/, 'the recap still names what changed');
     assert.doesNotMatch(text, /sensitive-old-diff|sensitive-new-diff|sensitive-write-payload/, 'payload bodies never leak into a recap');

package/dist/clients/attach/config.js

@@ -29,10 +29,10 @@ export function defaultAgentDir() {
 }
 /**
  * pi's `app.*` editor keybindings — VENDORED from pi `core/keybindings.ts`
- * `KEYBINDINGS` (the const is not exported; review-C1 pattern). This is the
- * subset CustomEditor's main editor consults; the selector-internal bindings
- * (`app.tree.*`, `app.models.*`, session delete/rename) are omitted because the
- * attach viewer does not open those selectors in Phase 4. Re-sync on each SDK
+ * `KEYBINDINGS` (the const is not exported). This is the subset CustomEditor's
+ * main editor consults; the selector-internal bindings (`app.tree.*`,
+ * `app.models.*`, session delete/rename) are omitted because the attach viewer
+ * does not open those selectors. Re-sync on each SDK
  * bump against `core/keybindings.js`.
  */
 const APP_KEYBINDINGS = {
@@ -148,7 +148,7 @@ export async function mirrorKittyProtocolToEditor(active) {
  * Resolve the `fd` binary path the @-mention file picker needs. pi-tui's
  * `CombinedAutocompleteProvider` only returns file suggestions when handed an
  * `fdPath` (its third ctor arg) — without it, typing `@` triggers the picker but
- * `getFuzzyFileSuggestions` returns `[]`, so the picker never appears (issue #6).
+ * `getFuzzyFileSuggestions` returns `[]`, so the picker never appears.
  * pi's own interactive mode resolves this via `ensureTool('fd')` from its
  * internal `utils/tools-manager` (checks pi's managed bin dir + system PATH,
  * downloading the binary if missing). That module is NOT on pi-coding-agent's

package/dist/clients/attach/input/clipboard-image.js

@@ -1,4 +1,4 @@
-// input/clipboard-image.ts — read the clipboard image for `crtr surface attach` (T6, review M1).
+// input/clipboard-image.ts — read the clipboard image for `crtr surface attach`.
 //
 // pi's `readClipboardImage` is NOT re-exported (it lives behind a native
 // clipboard binding + Photon worker the package gates off `.`-only exports), so
@@ -21,7 +21,7 @@
 // JPEG and picks the smaller, so it doubles as format normalization;
 // `convertToPng` is the fallback when the Photon resizer is unavailable. The
 // fallbacks (convertToPng / raw bytes) are NOT size-bounded by `resizeImage`, so
-// each is gated on the SAME MAX_BYTES base64 ceiling (review M1): over it → the
+// each is gated on the SAME MAX_BYTES base64 ceiling: over it → the
 // image is DROPPED with a user-visible note rather than shipped as an over-cap
 // frame that would overflow BROKER_READ_CAPS.maxLineBytes (24 MiB) and destroy
 // the viewer socket. The result is an `ImageContent` (pi-ai) ready to drop

package/dist/clients/attach/input/ref-autocomplete.js

@@ -94,7 +94,7 @@ export class RefAwareAutocompleteProvider {
         }));
         // Filtering above used the full slash-form `prefix` (context.prefix always
         // starts with '/' for a matched token), but the RETURNED prefix strips that
-        // leading '/' (review Major 3). pi-tui's `handleInput` (tui.select.confirm
+        // leading '/'. pi-tui's `handleInput` (tui.select.confirm
         // branch) falls through to `submitValue()` whenever `autocompletePrefix`
         // (set verbatim from this return value) starts with '/' — that's its own
         // leading-command-completion submit shortcut, and a non-leading ref

package/dist/clients/attach/input/titled-editor.d.ts

@@ -91,7 +91,7 @@ export declare class TitledEditor extends CustomEditor {
      *  The base `Editor` resolves newLine against `getKeybindings()` on ITS pi-tui
      *  instance, which in a non-deduped install is a DIFFERENT module than the one
      *  carrying crtr's `alt+enter` override — so the override can silently never
-     *  reach it and Alt+Enter falls through to submit (issue #11). crtr's `km` (the
+     *  reach it and Alt+Enter falls through to submit. crtr's `km` (the
      *  same manager CustomEditor matches `app.*` against) always carries the
      *  override, so matching the chord here makes the newline behavior independent
      *  of cross-instance keybinding mirroring. Skipped while the autocomplete popup
@@ -159,8 +159,8 @@ export declare class TitledEditor extends CustomEditor {
     paneFocused: boolean;
     /** Canonical names the broker currently resolves — the exact-membership set
      *  a candidate ref token must be in to render as a resolved highlight.
-     *  Empty by default (no decoration) until the caller (T3, out of scope for
-     *  this wave) supplies the broker-supplied inventory. */
+     *  Empty by default (no decoration) until the caller supplies the
+     *  broker-supplied inventory. */
     private resolvedRefNames;
     /** Command names the VIEWER dispatches ENTIRELY locally (never reach the
      *  engine as prose) — checked against the TRIMMED leading-name rule
@@ -169,15 +169,14 @@ export declare class TitledEditor extends CustomEditor {
      *  `locallyConsumedCommandNames()` from `slash/dispatch.ts` — independent
      *  of `remote` and of the broker's `get_commands` reply (see that
      *  function's doc comment). Deliberately NEVER the merged display/
-     *  completion list (review Major 6 — `slashCommandList` is a different,
-     *  remote-filtered, broker-augmented list, not a dispatch predicate). */
+     *  completion list (`slashCommandList` is a different, remote-filtered,
+     *  broker-augmented list, not a dispatch predicate). */
     private localCommandNames;
     /** Leading tokens the ENGINE (broker) independently consumes as a leading
      *  command/skill/template dispatch — the broker's own
-     *  `engineLeadingCommandNames` (design: inline memory references, review
-     *  Major 6), checked against the UNTRIMMED leading-name rule
-     *  (`matchesEngineLeadingCommand`, mirroring the broker's own
-     *  `isLeadingEngineCommand` — review Minor 10). Populated from each
+     *  `engineLeadingCommandNames`, checked against the UNTRIMMED leading-name
+     *  rule (`matchesEngineLeadingCommand`, mirroring the broker's own
+     *  `isLeadingEngineCommand`). Populated from each
      *  `list_memory_refs` reply, alongside `resolvedRefNames`. */
     private engineCommandNames;
     setResolvedRefNames(names: Iterable<string>): void;
@@ -192,12 +191,12 @@ export declare class TitledEditor extends CustomEditor {
      *  is simply left undecorated. Suppressed entirely (command-wide) whenever
      *  the composer's own leading token dispatches — as a LOCAL viewer command
      *  (`localCommandNames`, TRIMMED rule) or as an ENGINE-consumed leading
-     *  command/skill/template (`engineCommandNames`, UNTRIMMED rule, review
-     *  Minor 10) — the ref grammar and slash-dispatch's name charset differ, so
+     *  command/skill/template (`engineCommandNames`, UNTRIMMED rule) — the ref
+     *  grammar and slash-dispatch's name charset differ, so
      *  highlighting a ref inside a command that's about to dispatch would be
      *  misleading chrome for text the command, not memory resolution, is about
-     *  to consume. The two rules are kept deliberately SEPARATE (review Major
-     *  6) rather than collapsed into one set/predicate: they classify against
+     *  to consume. The two rules are kept deliberately SEPARATE rather than
+     *  collapsed into one set/predicate: they classify against
      *  different text (trimmed vs. raw) and different authorities (this
      *  viewer's own dispatch vs. the broker's). */
     private decorateResolvedRefs;

package/dist/clients/attach/input/titled-editor.js

@@ -401,7 +401,7 @@ function extractLeadingCommandName(text) {
     return m ? m[1] : null;
 }
 /** Mirrors the broker's `isLeadingEngineCommand` (`core/runtime/broker.ts`)
- *  leading-token rule EXACTLY for classification purposes (review Minor 10):
+ *  leading-token rule EXACTLY for classification purposes:
  *  the RAW, un-trimmed `text` must itself start with `/` — no `.trim()` — for
  *  ANY token to be a candidate, matching the broker's own untrimmed
  *  `text.startsWith('/')` checks byte-for-byte (space-based name split,
@@ -447,7 +447,7 @@ export class TitledEditor extends CustomEditor {
     constructor(tui, theme, keybindings, options) {
         super(tui, theme, keybindings, options);
         this.km = keybindings;
-        // Preserve raw (untrimmed) submit text end-to-end (review Major 4). The base
+        // Preserve raw (untrimmed) submit text end-to-end. The base
         // `Editor.submitValue()` — private in the `.d.ts` (blocking a normal TS
         // `override`), hence the structural cast, same pattern as the other private-
         // internals casts throughout this file (`scrollOffset`, `historyIndex`,
@@ -497,7 +497,7 @@ export class TitledEditor extends CustomEditor {
      *  The base `Editor` resolves newLine against `getKeybindings()` on ITS pi-tui
      *  instance, which in a non-deduped install is a DIFFERENT module than the one
      *  carrying crtr's `alt+enter` override — so the override can silently never
-     *  reach it and Alt+Enter falls through to submit (issue #11). crtr's `km` (the
+     *  reach it and Alt+Enter falls through to submit. crtr's `km` (the
      *  same manager CustomEditor matches `app.*` against) always carries the
      *  override, so matching the chord here makes the newline behavior independent
      *  of cross-instance keybinding mirroring. Skipped while the autocomplete popup
@@ -655,8 +655,8 @@ export class TitledEditor extends CustomEditor {
     paneFocused = true;
     /** Canonical names the broker currently resolves — the exact-membership set
      *  a candidate ref token must be in to render as a resolved highlight.
-     *  Empty by default (no decoration) until the caller (T3, out of scope for
-     *  this wave) supplies the broker-supplied inventory. */
+     *  Empty by default (no decoration) until the caller supplies the
+     *  broker-supplied inventory. */
     resolvedRefNames = new Set();
     /** Command names the VIEWER dispatches ENTIRELY locally (never reach the
      *  engine as prose) — checked against the TRIMMED leading-name rule
@@ -665,15 +665,14 @@ export class TitledEditor extends CustomEditor {
      *  `locallyConsumedCommandNames()` from `slash/dispatch.ts` — independent
      *  of `remote` and of the broker's `get_commands` reply (see that
      *  function's doc comment). Deliberately NEVER the merged display/
-     *  completion list (review Major 6 — `slashCommandList` is a different,
-     *  remote-filtered, broker-augmented list, not a dispatch predicate). */
+     *  completion list (`slashCommandList` is a different, remote-filtered,
+     *  broker-augmented list, not a dispatch predicate). */
     localCommandNames = new Set();
     /** Leading tokens the ENGINE (broker) independently consumes as a leading
      *  command/skill/template dispatch — the broker's own
-     *  `engineLeadingCommandNames` (design: inline memory references, review
-     *  Major 6), checked against the UNTRIMMED leading-name rule
-     *  (`matchesEngineLeadingCommand`, mirroring the broker's own
-     *  `isLeadingEngineCommand` — review Minor 10). Populated from each
+     *  `engineLeadingCommandNames`, checked against the UNTRIMMED leading-name
+     *  rule (`matchesEngineLeadingCommand`, mirroring the broker's own
+     *  `isLeadingEngineCommand`). Populated from each
      *  `list_memory_refs` reply, alongside `resolvedRefNames`. */
     engineCommandNames = new Set();
     setResolvedRefNames(names) {
@@ -694,12 +693,12 @@ export class TitledEditor extends CustomEditor {
      *  is simply left undecorated. Suppressed entirely (command-wide) whenever
      *  the composer's own leading token dispatches — as a LOCAL viewer command
      *  (`localCommandNames`, TRIMMED rule) or as an ENGINE-consumed leading
-     *  command/skill/template (`engineCommandNames`, UNTRIMMED rule, review
-     *  Minor 10) — the ref grammar and slash-dispatch's name charset differ, so
+     *  command/skill/template (`engineCommandNames`, UNTRIMMED rule) — the ref
+     *  grammar and slash-dispatch's name charset differ, so
      *  highlighting a ref inside a command that's about to dispatch would be
      *  misleading chrome for text the command, not memory resolution, is about
-     *  to consume. The two rules are kept deliberately SEPARATE (review Major
-     *  6) rather than collapsed into one set/predicate: they classify against
+     *  to consume. The two rules are kept deliberately SEPARATE rather than
+     *  collapsed into one set/predicate: they classify against
      *  different text (trimmed vs. raw) and different authorities (this
      *  viewer's own dispatch vs. the broker's). */
     decorateResolvedRefs(lines, width) {

package/dist/clients/attach/overlays/dialogs.d.ts

@@ -19,7 +19,7 @@ export declare function isBlockingDialog(req: RpcExtensionUIRequest): boolean;
  *   `keybindings.matches(key, "app.editor.external")` for the Ctrl+G external-editor
  *   shortcut. Defaults to a fresh `KeybindingsManager(TUI_KEYBINDINGS)` — that
  *   knows the base TUI bindings but not pi's app-level `app.editor.external`, so
- *   Ctrl+G is inert until the input controller (T6) passes the app keybindings
+ *   Ctrl+G is inert until the input controller passes the app keybindings
  *   manager. `ExtensionEditorComponent` is typed against pi's CORE
  *   KeybindingsManager (a subclass of pi-tui's), so we widen via the constructor's
  *   own parameter type rather than importing the core class (type-only export).

package/dist/clients/attach/overlays/dialogs.js

@@ -1,4 +1,4 @@
-// overlays/dialogs.ts — the blocking-dialog renderer for `crtr surface attach` (T5).
+// overlays/dialogs.ts — the blocking-dialog renderer for `crtr surface attach`.
 //
 // The broker forwards an extension's user-blocking UI request as an
 // `extension_ui_request` frame (RpcExtensionUIRequest). The viewer renders it
@@ -45,7 +45,7 @@ const OVERLAY_OPTIONS = { anchor: 'center', width: '70%', maxHeight: '80%' };
  *   `keybindings.matches(key, "app.editor.external")` for the Ctrl+G external-editor
  *   shortcut. Defaults to a fresh `KeybindingsManager(TUI_KEYBINDINGS)` — that
  *   knows the base TUI bindings but not pi's app-level `app.editor.external`, so
- *   Ctrl+G is inert until the input controller (T6) passes the app keybindings
+ *   Ctrl+G is inert until the input controller passes the app keybindings
  *   manager. `ExtensionEditorComponent` is typed against pi's CORE
  *   KeybindingsManager (a subclass of pi-tui's), so we widen via the constructor's
  *   own parameter type rather than importing the core class (type-only export).

package/dist/clients/attach/overlays/mcp.js

@@ -40,12 +40,13 @@
 // installed adapter (pi-mcp-adapter index.ts: "auth-start" / "auth-complete" /
 // "ui-messages"; `connect: <name>`).
 import { createHash } from 'node:crypto';
-import { existsSync, readFileSync } from 'node:fs';
+import { existsSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
 import { piAgentDir } from '../../../core/runtime/package-health.js';
 import { SelectList, visibleWidth } from '@earendil-works/pi-tui';
 import { getSelectListTheme } from '@earendil-works/pi-coding-agent';
+import { readJsonOrNull } from '../../../core/fs-utils.js';
 /** Adapter metadata-cache.ts CACHE_MAX_AGE_MS — entries older than this are misses. */
 const CACHE_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000;
 /** The adapter's import-source table (pi-mcp-adapter config.ts IMPORT_PATHS).
@@ -72,14 +73,6 @@ function importPathCandidates(kind, home) {
             return [];
     }
 }
-function readJson(path) {
-    try {
-        return JSON.parse(readFileSync(path, 'utf-8'));
-    }
-    catch {
-        return null; // missing or corrupt → empty state, never a crash
-    }
-}
 /** Mirror of the adapter's validateConfig (config.ts): a source file's own
  *  servers may live under `mcpServers` OR the `mcp-servers` alias — but a
  *  non-object value invalidates the WHOLE file, dropping its `imports` too. */
@@ -130,7 +123,7 @@ function mergeServerMaps(base, next) {
 /** Read one config file: its own servers layered OVER any `imports` servers
  *  (first import wins per name, own config wins overall — adapter expandImports). */
 function readConfigSource(path, cwd, home) {
-    const raw = readJson(path);
+    const raw = readJsonOrNull(path);
     if (raw === null)
         return {};
     const { servers: own, imports } = validateConfigSource(raw);
@@ -144,7 +137,7 @@ function readConfigSource(path, cwd, home) {
             .find((candidate) => existsSync(candidate));
         if (full === undefined)
             continue;
-        const importedRaw = readJson(full);
+        const importedRaw = readJsonOrNull(full);
         if (importedRaw === null)
             continue;
         for (const [name, spec] of Object.entries(extractImportedServers(importedRaw, kind))) {
@@ -228,7 +221,7 @@ export function readMcpServers(home = homedir(), cwd = process.cwd()) {
     for (const path of sourcePaths) {
         servers = mergeServerMaps(servers, readConfigSource(path, cwd, home));
     }
-    const cache = readJson(join(agentDir, 'mcp-cache.json'));
+    const cache = readJsonOrNull(join(agentDir, 'mcp-cache.json'));
     return Object.entries(servers).map(([name, spec]) => {
         const transport = spec.type ?? (spec.url !== undefined ? 'http' : 'stdio');
         const target = spec.url ?? [spec.command, ...(spec.args ?? [])].filter(Boolean).join(' ');

package/dist/clients/attach/render/chat-view.d.ts

@@ -35,7 +35,7 @@ export interface ChatViewOptions {
     toolOutputExpanded?: boolean;
     /** Sink for footer/header-only events ChatView does not itself render
      *  (queue_update, session_info_changed, thinking_level_changed). The attach
-     *  command (T7) wires a footer here; absent → these events are no-ops. */
+     *  command wires a footer here; absent → these events are no-ops. */
     onFooterEvent?: (event: AgentSessionEvent) => void;
     /** Theme palette for the activity spinner / dim status / error lines. Absent →
      *  the module defaults (faint + ANSI red) are used. */

package/dist/clients/attach/render/chat-view.js

@@ -1,4 +1,4 @@
-// render/chat-view.ts — the render half of `crtr surface attach` (Phase 4, T5).
+// render/chat-view.ts — the render half of `crtr surface attach`.
 //
 // A direct port of pi's `InteractiveMode.handleEvent()`
 // (interactive-mode.js:2169-2462) + its rebuild path
@@ -11,7 +11,7 @@
 // Its activity state (working spinner, compaction/retry indicators) is signaled
 // to the viewer-owned fixed slot when one is supplied. It does NOT own the
 // editor, the footer, or the terminal title — those are chrome laid out by the
-// attach command (T7). Events that only affect that chrome
+// attach command. Events that only affect that chrome
 // (queue_update / session_info_changed / thinking_level_changed) are forwarded
 // to the optional `onFooterEvent` sink instead of rendered here.
 //

package/dist/clients/attach/render/group-recap.js

@@ -6,6 +6,8 @@ import { pathToFileURL } from 'node:url';
 import { ICON } from '../../../core/inspector/model.js';
 import { TOOL_ICON } from '../../../core/preview-registry.js';
 const MEMORY_ICON = String.fromCodePoint(0xf02d);
+// trash — deletion has no tool of its own, so it borrows no TOOL_ICON entry.
+const DELETE_ICON = String.fromCodePoint(0xf1f8);
 function count(value, singular, plural) {
     return `${value} ${value === 1 ? singular : plural}`;
 }
@@ -74,6 +76,11 @@ export class GroupRecapComponent extends Container {
             if (changedFiles >= 1) {
                 stats.push(`${palette.warning(TOOL_ICON.edit)} ${palette.muted(count(changedFiles, 'file changed', 'files changed'))}`);
             }
+            // Deletions never enter activity.files (only edit/write calls do), so the
+            // model's count covers a disjoint set and cannot double-count a change.
+            if (summary.filesDeleted >= 1) {
+                stats.push(`${palette.diffRemoved(DELETE_ICON)} ${palette.muted(count(summary.filesDeleted, 'file deleted', 'files deleted'))}`);
+            }
             const memoriesRead = countMemories(activity.memories, 'read');
             if (memoriesRead >= 1) {
                 stats.push(`${palette.info(MEMORY_ICON)} ${palette.muted(count(memoriesRead, 'memory read', 'memory reads'))}`);

package/dist/clients/attach/session/context.js

@@ -1,8 +1,8 @@
 // session/context.ts — the named home for an attach session's STABLE facts.
 //
-// `runAttach` used to hold every one of these as a closure local, which is why
-// pulling any block out of it meant inventing a bespoke parameter list for that
-// block alone. `AttachSession` gives the state one declaration; each
+// Held as closure locals inside `runAttach`, pulling any block out of it would
+// mean inventing a bespoke parameter list for that block alone.
+// `AttachSession` gives the state one declaration; each
 // collaborator then names the slice it needs as a `Pick<AttachSession, …>`
 // view, so the module's dependencies are a *projection* of one truth rather
 // than a hand-maintained bag that can drift from it.

package/dist/clients/attach/session/editor-inventory.js

@@ -62,8 +62,8 @@ export function createEditorInventory(ctx, capabilities, hooks) {
     let brokerCommands;
     let memoryRefs = [];
     // The broker's `engineLeadingCommandNames` from the latest `list_memory_refs`
-    // reply (design: inline memory references, review Major 6) — leading tokens
-    // the ENGINE independently consumes, kept separate from the viewer-local
+    // reply — leading tokens the ENGINE independently consumes, kept separate
+    // from the viewer-local
     // `locallyConsumedCommandNames()` set and fed to the editor's untrimmed
     // engine-suppression rule via `setEngineCommandNames`.
     let engineLeadingCommandNames = [];
@@ -82,9 +82,9 @@ export function createEditorInventory(ctx, capabilities, hooks) {
     // Atomically rebuild the editor's provider/highlight state from whatever
     // command + ref inventory is CURRENTLY known — the one seam `setCommands` and
     // `setMemoryRefs` both call, so a command-only or ref-only response can never
-    // rebuild the provider having silently dropped the other inventory (T3
-    // ownership note: this module combines command metadata, ref metadata,
-    // provider rebuild, and editor highlight sets in one place). Command-only
+    // rebuild the provider having silently dropped the other inventory. This
+    // module owns command metadata, ref metadata, provider rebuild, and editor
+    // highlight sets in one place. Command-only
     // autocomplete is unchanged: `RefAwareAutocompleteProvider` fully delegates
     // leading-slash and every non-ref context to the wrapped command provider, so
     // refs never enter command completion or the loaded-command preview (which
@@ -93,7 +93,7 @@ export function createEditorInventory(ctx, capabilities, hooks) {
         const commandProvider = buildAttachAutocompleteProvider(meta.cwd, hooks.fdPath, brokerCommands, capabilities);
         editor.setAutocompleteProvider(new RefAwareAutocompleteProvider(memoryRefs, commandProvider));
         editor.setResolvedRefNames(memoryRefs.map((ref) => ref.name));
-        // Two independent suppression inventories (review Major 6): the viewer-local
+        // Two independent suppression inventories: the viewer-local
         // set (everything `dispatchSlashCommand` handles entirely locally, trimmed
         // rule) and the broker's own `engineLeadingCommandNames` (untrimmed rule) —
         // never the merged display/completion list `slashCommandList` returns.

package/dist/clients/attach/session/input-wiring.js

@@ -36,7 +36,7 @@ export function createInputController(ctx, km, capabilities, hooks) {
     //
     // A read-only viewer wires NEITHER. A REMOTE attach (`--canvas`) disables both
     // because they target the LOCAL `auth.json` via `defaultAgentDir()`, the wrong
-    // host for a remote node (Phase 3 review Major 1, 1d); an OBSERVER because
+    // host for a remote node; an OBSERVER because
     // switching credentials and telling the broker to reload them mutates the
     // engine's auth, which a read-only viewer must not do. Unwired here means the
     // slash context carries no picker at all, so `/login` and `/logout` report

package/dist/clients/attach/session/teardown.js

@@ -57,18 +57,16 @@ export function createTeardown(s, hooks) {
         socket.close();
         restore();
         // A clean detach leaves the broker running (the engine runs on) — the
-        // documented "detach leaves the broker running" contract (B2). Per-action
-        // reaping of an empty husk used to run here (reapIfEmpty →
-        // teardown/deleteNode, which reaps EVEN a live broker since the user
-        // explicitly detached), but it required a direct canvas.db mutation the
-        // API-only client cannot reach and no per-node reap route exposes, so it is
-        // dropped (B-10). Disposition of an abandoned empty broker: `crtr canvas
+        // documented "detach leaves the broker running" contract. Teardown reaps
+        // nothing per-action: reaping an empty husk here would need a direct
+        // canvas.db mutation the API-only client cannot reach, and no per-node reap
+        // route exposes one. Disposition of an abandoned empty broker: `crtr canvas
         // prune --empty` (reapEmptyNodes) sweeps it, but only ONCE its pid is dead
         // — it deliberately spares a LIVE broker as the daemon's domain. So an empty
         // broker lingers until it idle-releases (or is closed) to a dormant husk,
-        // then prune reaps it. Net vs OLD: a narrow, transient live-empty window
-        // replaces immediate reap — the only faithful option under the API boundary;
-        // a per-node reap route would restore immediate cleanup (future work).
+        // then prune reaps it, leaving a narrow, transient live-empty window — the
+        // only faithful option under the API boundary. A per-node reap route would
+        // buy immediate cleanup (future work).
         if (reason === 'broker-gone') {
             const msg = hooks.lastSocketError() ??
                 `broker gone — node ${nodeId} is no longer running its engine. Re-focus to reattach.`;

package/dist/clients/attach/slash/dispatch.d.ts

@@ -87,8 +87,7 @@ export declare const CANVAS_SLASH_COMMANDS: ReadonlyArray<{
  *  `true` from `dispatchSlashCommand` — swallowed with a notice, never
  *  forwarded as prose — so it counts as consumed here too, independent of
  *  `remote`). Exactly BUILTIN_NAMES ∪ CANVAS_NAMES ∪ SCOPED_OUT — every name
- *  `dispatchSlashCommand` returns `true` for (design: inline memory
- *  references, review Major 6/terminal). Used ONLY for terminal
+ *  `dispatchSlashCommand` returns `true` for. Used ONLY for terminal
  *  ref-decoration suppression (`input/titled-editor.ts`); never merged into
  *  command completion, which is `slashCommandList` — a different,
  *  remote-filtered, broker-augmented list. */

package/dist/clients/attach/slash/dispatch.js

@@ -19,12 +19,13 @@
 // against pi 0.79.1 — `ScopedModelsSelectorComponent` is the one selector pi does
 // not re-export, so /scoped-models renders read-only via a SelectList.)
 //
-// SCOPED OUT (review m2 — no engine method): `/login`, `/logout`, `/share`,
+// SCOPED OUT (no engine method): `/login`, `/logout`, `/share`,
 // `/trust` — a brief "not supported in attach" notice, never a frame.
 import { execFile } from 'node:child_process';
 import { BUILTIN_SLASH_COMMANDS } from '../../../core/runtime/pi-vendored.js';
 import { surfaceTmuxStyleArgs } from '../../../core/runtime/surface-bg.js';
 import { viewerOperationForSlash } from '../input/capabilities.js';
+import { shellQuote } from '../../../shared/shell-quote.js';
 /** Canvas slash-commands — implemented NATIVE in the viewer, the ONLY live host:
  *  the broker binds mode:'rpc', so broker pi-extensions never run their
  *  interactive (mode==='tui') paths. `/promote` triggers a turn after shelling
@@ -58,7 +59,7 @@ const TMUX_NAMED_COLORS = new Set([
     'brightred', 'brightgreen', 'brightyellow', 'brightblue', 'brightmagenta', 'brightcyan',
     'orange', 'grey', 'gray', 'default',
 ]);
-/** Builtins with no Phase-4 engine method — scoped out (review m2). */
+/** Builtins with no engine method — scoped out. */
 const SCOPED_OUT = new Set(['trust']);
 /** Valid `/settings thinking` levels — the `SetThinkingLevelFrame['level']`
  *  union (= AgentSession['thinkingLevel'], pi-agent-core ThinkingLevel),
@@ -92,8 +93,7 @@ function readOnlyRefusal(name, ctx) {
  *  `true` from `dispatchSlashCommand` — swallowed with a notice, never
  *  forwarded as prose — so it counts as consumed here too, independent of
  *  `remote`). Exactly BUILTIN_NAMES ∪ CANVAS_NAMES ∪ SCOPED_OUT — every name
- *  `dispatchSlashCommand` returns `true` for (design: inline memory
- *  references, review Major 6/terminal). Used ONLY for terminal
+ *  `dispatchSlashCommand` returns `true` for. Used ONLY for terminal
  *  ref-decoration suppression (`input/titled-editor.ts`); never merged into
  *  command completion, which is `slashCommandList` — a different,
  *  remote-filtered, broker-augmented list. */
@@ -605,10 +605,6 @@ function popup(cmd) {
         /* best-effort */
     }
 }
-/** Single-quote a string for safe interpolation into a `sh -c` command line. */
-function shellQuote(s) {
-    return `'${s.replace(/'/g, `'\\''`)}'`;
-}
 // ---------------------------------------------------------------------------
 function usage(ctx, form) {
     ctx.notify(`Usage: ${form}`);