@north-light/crouter 0.3.179 → 0.3.181

package/dist/builtin-pi-packages/pi-crtr-extensions/__tests__/insights-active-init.test.ts

@@ -0,0 +1,98 @@
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+
+// Integration test: /insights:init --active spawns an explorer and coordinates
+// insight capture flow. This test verifies that:
+// 1. The active mode doc exists and has slash: true
+// 2. The active mode instructions are present and executable
+// 3. A reader following the instructions can spawn an explorer
+
+test('insights/init has active mode documentation with executable commands', async () => {
+  const { readFileSync } = await import('fs');
+  const initPath = new URL('../../../builtin-memory/insights/init.md', import.meta.url);
+  const content = readFileSync(initPath, 'utf-8');
+
+  // Must be marked as a slash command
+  assert(content.includes('slash: true'), 'init.md must have slash: true frontmatter');
+
+  // Must have active mode section
+  assert(
+    content.includes('## Active mode: research and surface claims'),
+    'init.md must document active mode'
+  );
+
+  // Must have active flag check
+  assert(
+    content.includes('Check for --active flag') || content.includes('--active'),
+    'init.md must explain --active flag'
+  );
+
+  // Must have executable crtr commands for spawning explorer
+  assert(
+    content.includes('crtr node new --kind explore'),
+    'init.md must include crtr command to spawn explorer'
+  );
+
+  // Must reference the capture workflow
+  assert(
+    content.includes('[[insights/capture]]'),
+    'init.md must link to capture workflow'
+  );
+
+  // Must document waiting for explorer report
+  assert(
+    content.includes('Wait for the explorer to report') || content.includes('explorer'),
+    'init.md must explain waiting for explorer'
+  );
+
+  // Must document coordinating user responses
+  assert(
+    content.includes('user response') || content.includes('Turn user responses'),
+    'init.md must explain handling user responses'
+  );
+});
+
+test('active mode provides concrete bash commands agent can execute', async () => {
+  const { readFileSync } = await import('fs');
+  const initPath = new URL('../../../builtin-memory/insights/init.md', import.meta.url);
+  const content = readFileSync(initPath, 'utf-8');
+
+  // The active mode section should have a bash code block
+  const bashBlockMatch = content.match(/```bash\n([\s\S]*?)\n```/);
+  assert(bashBlockMatch, 'active mode must have a bash code block');
+
+  const bashContent = bashBlockMatch[1];
+
+  // Must have the crtr node new command
+  assert(bashContent.includes('crtr node new'), 'bash block must invoke crtr node new');
+
+  // Must specify --kind explore
+  assert(
+    bashContent.includes('--kind explore'),
+    'bash command must spawn explore kind'
+  );
+
+  // Must have the task heredoc
+  assert(
+    bashContent.includes('<<') || bashContent.includes('TASK'),
+    'bash command must include task definition'
+  );
+
+  // Must document the explorer task
+  assert(
+    bashContent.includes('investigate') || bashContent.includes('domain'),
+    'explorer task must mention domain investigation'
+  );
+
+  // Must ask explorer to surface claims
+  assert(
+    bashContent.includes('claim') || bashContent.includes('surface'),
+    'explorer task must ask for claims/surface evidence'
+  );
+
+  // Must reference output location
+  assert(
+    bashContent.includes('$CRTR_CONTEXT_DIR') || bashContent.includes('context'),
+    'explorer task must reference context directory output'
+  );
+});

package/dist/builtin-pi-packages/pi-crtr-extensions/extensions/claude-plugin-commands.ts

@@ -1,5 +1,4 @@
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { truncateTail, formatSize, DEFAULT_MAX_LINES, DEFAULT_MAX_BYTES } from "@earendil-works/pi-coding-agent";
 import {
   readFileSync,
   readdirSync,
@@ -14,6 +13,8 @@ import { homedir } from "node:os";
 import { join, resolve, dirname } from "node:path";
 import { loadProfileManifest } from "../../../core/profiles/manifest.js";
 import { stripMarkdownComments } from "../../../core/runtime/command-expansion.js";
+import { expandShellBlocks, DEFAULT_SHELL_TIMEOUT_MS } from "../../../core/runtime/shell-expansion.js";
+import { piShellRunner } from "./pi-shell-runner.js";
 
 // ---------------------------------------------------------------------------
 // claude-plugin-commands: surfaces Claude Code commands AND skills as pi slash
@@ -367,57 +368,13 @@ function shellTimeoutMs(fm: string): number {
 }
 
 // ---- shell execution (mirrors @juicesharp/rpiv-args) -----------------------
-
-const SHELL_INLINE = /!`([^`\n]+)`/g;
-const SHELL_BLOCK = /```!\n([\s\S]*?)\n```/g;
-const DEFAULT_SHELL_TIMEOUT_MS = 120_000;
-
-function truncateForLLM(content: string): string {
-  const t = truncateTail(content, { maxLines: DEFAULT_MAX_LINES, maxBytes: DEFAULT_MAX_BYTES });
-  let out = t.content;
-  if (t.truncated) {
-    const limit = t.truncatedBy === "lines" ? `${t.maxLines} lines` : formatSize(t.maxBytes);
-    out += `\n[truncated: hit ${limit}]`;
-  }
-  return out;
-}
-
-async function runShell(cmd: string, pi: ExtensionAPI, cwd: string, timeoutMs: number): Promise<string> {
-  const [sh, flag] = process.platform === "win32" ? ["powershell.exe", "-Command"] : ["sh", "-c"];
-  const res: any = await pi.exec(sh, [flag, cmd], { cwd, timeout: timeoutMs });
-  if (res.killed) return `[Shell error: timed out after ${Math.max(1, Math.round(timeoutMs / 1000))}s]`;
-  if (res.code !== 0) return `[Shell error: exit code ${res.code}]\n${truncateForLLM(res.stderr ?? "")}`;
-  let combined = res.stdout ?? "";
-  if (res.stderr) {
-    const sep = combined.length === 0 || combined.endsWith("\n") ? "" : "\n";
-    combined = `${combined}${sep}[stderr]\n${res.stderr}`;
-  }
-  return truncateForLLM(combined);
-}
+//
+// The `!`cmd`` / ```! grammar and substitution order are shared with every
+// other surface that expands a Markdown body (`core/runtime/shell-expansion`);
+// the pi-engine execution strategy is shared through `pi-shell-runner`.
 
 async function executeShell(body: string, pi: ExtensionAPI, cwd: string, timeoutMs: number): Promise<string> {
-  // blocks first (mask with sentinels), then inlines, then restore.
-  const blockOut: string[] = [];
-  let masked = "";
-  let last = 0;
-  for (const m of body.matchAll(SHELL_BLOCK)) {
-    const idx = m.index ?? 0;
-    masked += body.slice(last, idx) + `\x00B${blockOut.length}\x00`;
-    blockOut.push(await runShell(m[1] ?? "", pi, cwd, timeoutMs));
-    last = idx + m[0].length;
-  }
-  masked += body.slice(last);
-
-  let inlined = "";
-  last = 0;
-  for (const m of masked.matchAll(SHELL_INLINE)) {
-    const idx = m.index ?? 0;
-    inlined += masked.slice(last, idx) + (await runShell(m[1] ?? "", pi, cwd, timeoutMs));
-    last = idx + m[0].length;
-  }
-  inlined += masked.slice(last);
-
-  return inlined.replace(/\x00B(\d+)\x00/g, (_, n) => blockOut[parseInt(n, 10)] ?? "");
+  return expandShellBlocks(body, piShellRunner(pi, cwd, timeoutMs));
 }
 
 // ---------------------------------------------------------------------------

package/dist/builtin-pi-packages/pi-crtr-extensions/extensions/memory-slash-commands.ts

@@ -5,6 +5,8 @@ import {
   expandDeterministicCommand,
   type DeterministicCommandExpansion,
 } from "../../../core/runtime/command-expansion.js";
+import { expandShellBlocks, hasShellBlocks, DEFAULT_SHELL_TIMEOUT_MS } from "../../../core/runtime/shell-expansion.js";
+import { piShellRunner } from "./pi-shell-runner.js";
 
 // ---------------------------------------------------------------------------
 // memory-slash-commands: any memory doc frontmatter-flagged `slash: true`
@@ -136,10 +138,23 @@ export default async function (pi: ExtensionAPI) {
           );
           return;
         }
+        // Shell runs HERE and only here. `expandDeterministicCommand` stays
+        // inert because it also drives the attach viewer's pre-submit preview,
+        // which re-expands on every keystroke — executing there would run the
+        // document's commands repeatedly while the user is still typing. This
+        // handler fires once, at submit, so the preview shows the command text
+        // and the submitted turn carries its output.
+        const expanded = expandDeterministicCommand(expansion, args ?? "");
+        const content = hasShellBlocks(expanded)
+          ? await expandShellBlocks(
+              expanded,
+              piShellRunner(pi, (ctx as { cwd?: string }).cwd ?? process.cwd(), DEFAULT_SHELL_TIMEOUT_MS),
+            )
+          : expanded;
         pi.sendMessage(
           {
             customType: "memory-slash-command",
-            content: expandDeterministicCommand(expansion, args ?? ""),
+            content,
             display: true,
           },
           { triggerTurn: true },

package/dist/builtin-pi-packages/pi-crtr-extensions/extensions/pi-shell-runner.ts

@@ -0,0 +1,34 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { truncateTail, formatSize, DEFAULT_MAX_LINES, DEFAULT_MAX_BYTES } from "@earendil-works/pi-coding-agent";
+
+// The broker-side execution strategy for `core/runtime/shell-expansion`. Every
+// command surface that expands a Markdown body inside a pi engine shares it, so
+// the engine owns the subprocess and truncation uses pi's own limits. The
+// grammar and substitution order live in the shared module; only this strategy
+// is pi-specific, and it stays out of that module so CLI leaves can import the
+// expander without loading the pi runtime.
+
+function truncateForLLM(content: string): string {
+  const t = truncateTail(content, { maxLines: DEFAULT_MAX_LINES, maxBytes: DEFAULT_MAX_BYTES });
+  let out = t.content;
+  if (t.truncated) {
+    const limit = t.truncatedBy === "lines" ? `${t.maxLines} lines` : formatSize(t.maxBytes);
+    out += `\n[truncated: hit ${limit}]`;
+  }
+  return out;
+}
+
+export function piShellRunner(pi: ExtensionAPI, cwd: string, timeoutMs: number) {
+  const [sh, flag] = process.platform === "win32" ? ["powershell.exe", "-Command"] : ["sh", "-c"];
+  return async (cmd: string): Promise<string> => {
+    const res: any = await pi.exec(sh, [flag, cmd], { cwd, timeout: timeoutMs });
+    if (res.killed) return `[Shell error: timed out after ${Math.max(1, Math.round(timeoutMs / 1000))}s]`;
+    if (res.code !== 0) return `[Shell error: exit code ${res.code}]\n${truncateForLLM(res.stderr ?? "")}`;
+    let combined = res.stdout ?? "";
+    if (res.stderr) {
+      const sep = combined.length === 0 || combined.endsWith("\n") ? "" : "\n";
+      combined = `${combined}${sep}[stderr]\n${res.stderr}`;
+    }
+    return truncateForLLM(combined);
+  };
+}

package/dist/cli.js

@@ -7,7 +7,7 @@ import { runCli } from './core/command.js';
 import { resolveRoot } from './build-root.js';
 import { maybeBootRoot } from './core/runtime/front-door.js';
 import { maybeAutoUpdate } from './core/auto-update.js';
-import { ensureOfficialMarketplace, ensureProjectScope } from './core/bootstrap.js';
+import { ensureProjectScope } from './core/bootstrap.js';
 import { provisionExports, pruneLegacyExports } from './core/host-exports/export.js';
 import { installStdoutErrorPolicy } from './core/stdout-errors.js';
 import { handle } from './core/io.js';
@@ -54,7 +54,6 @@ async function main() {
     const root = await resolveRoot(process.argv[2]);
     mark('cli.root_resolved');
     provisionExports(root, process.argv);
-    ensureOfficialMarketplace(process.argv);
     ensureProjectScope(process.argv);
     maybeAutoUpdate(process.argv);
     mark('cli.dispatch_start');

package/dist/clients/attach/__tests__/context-message.test.js

@@ -11,7 +11,7 @@ import test from 'node:test';
 import { Container } from '@earendil-works/pi-tui';
 import { applyTheme } from '../config.js';
 import { ChatView } from '../render/chat-view.js';
-import { CONTEXT_INTRO_CUSTOM_TYPE, CONTEXT_NUDGE_CUSTOM_TYPE, REVIVE_KICKOFF_SENTINEL, RUNTIME_RESTART_CONTINUATION, formatModelFallbackRecovery, generatedContextPresentation, } from '../../../shared/generated-context.js';
+import { CONTEXT_INTRO_CUSTOM_TYPE, CONTEXT_NUDGE_CUSTOM_TYPE, REVIVE_KICKOFF_SENTINEL, RUNTIME_RESTART_CONTINUATION, formatModelFallbackRecovery, formatReviewApproval, generatedContextPresentation, } from '../../../shared/generated-context.js';
 applyTheme();
 test('collapsed generated context never leaks its body; Ctrl+O restores it', async () => {
     const container = new Container();
@@ -38,11 +38,12 @@ test('collapsed generated context never leaks its body; Ctrl+O restores it', asy
                 content: '[crtr] Context ~150k. private context reminder',
             },
             { role: 'user', content: 'From child-node-123 — 1 update:\n  [update] private inbox detail' },
+            { role: 'user', content: formatReviewApproval('The human reviewed and approved private-review.md.') },
         ],
         stats: {},
         state: { isStreaming: false },
     });
-    assert.doesNotMatch(container.render(80).join('\n'), /loaded INDEX\.md content|resume from this note|runtime-restart-continuation|private context reminder|private inbox detail/);
+    assert.doesNotMatch(container.render(80).join('\n'), /loaded INDEX\.md content|resume from this note|runtime-restart-continuation|private context reminder|private inbox detail|private-review\.md/);
     assert.deepEqual(view.toggleToolsExpanded(), { kind: 'summaries', shown: false });
     assert.equal(internals.toolOutputExpanded, true);
     const expanded = container.render(80).join('\n');
@@ -50,6 +51,7 @@ test('collapsed generated context never leaks its body; Ctrl+O restores it', asy
     assert.match(expanded, /resume from this note/);
     assert.doesNotMatch(expanded, /runtime-restart-continuation|private context reminder/);
     assert.match(expanded, /private inbox detail/, 'an expanded inbox card shows the actual delivered update');
+    assert.match(expanded, /private-review\.md/, 'an expanded review card shows the approval');
     assert.deepEqual(view.toggleToolsExpanded(), { kind: 'summaries', shown: true });
     assert.equal(internals.toolOutputExpanded, false);
     assert.doesNotMatch(container.render(80).join('\n'), /loaded INDEX\.md content|resume from this note|runtime-restart-continuation|private context reminder|private inbox detail/);
@@ -61,4 +63,5 @@ test('a human message that reads like runtime recovery is not folded as generate
     const marked = formatModelFallbackRecovery('custom(provider)/model', 'new/model:high', 'not-found');
     assert.equal(generatedContextPresentation({ role: 'user', content: marked })?.kind, 'recovery');
     assert.equal(generatedContextPresentation({ role: 'user', content: marked.split('\n').slice(1, -1).join('\n') }), null, 'a human message matching the recovery prose lacks the producer marker');
+    assert.equal(generatedContextPresentation({ role: 'user', content: 'The human reviewed and approved private-review.md.' }), null, 'a human message matching the approval prose lacks the producer marker');
 });

package/dist/clients/attach/assets/README.md

@@ -0,0 +1,7 @@
+# Whip sounds
+
+These files are the first three results for [“whip crack” on Pixabay](https://pixabay.com/sound-effects/search/whip%20crack/), downloaded from the playable audio URLs embedded in each result page on 2026-08-04. They are available under the [Pixabay Content License](https://pixabay.com/service/license-summary/).
+
+- `whip-snap.mp3` — [“Whip Snap” by Universfield](https://pixabay.com/sound-effects/film-special-effects-whip-snap-242215/), with 100ms removed from its start to align its crack with the animation flash
+- `whip-crack.mp3` — [“Whip Crack” by Universfield](https://pixabay.com/sound-effects/film-special-effects-whip-crack-123738/)
+- `whip-06.mp3` — [“Whip 06” by Universfield](https://pixabay.com/sound-effects/film-special-effects-whip-06-487886/)

package/dist/clients/attach/chrome/canvas-panels.d.ts

@@ -1,5 +1,6 @@
 import type { CanvasSource } from '../../../core/canvas/source.js';
 import type { CronDTO } from '../../../api/dto/crons.js';
+import type { ReviewDTO } from '../../../api/dto/reviews.js';
 import type { BashJobStatus } from '../../../core/bash-jobs.js';
 import type { AttachPalette } from '../config.js';
 export type CanvasPanelItem = {
@@ -11,6 +12,11 @@ export type CanvasPanelItem = {
     key: 'human';
     kind: 'human';
     line: string;
+} | {
+    key: string;
+    kind: 'review';
+    companionNodeId: string;
+    line: string;
 } | {
     key: 'bash';
     kind: 'bash';
@@ -33,4 +39,4 @@ export interface CanvasPanelLines {
  *  `{}` to omit the ⚑ badges. `crons` are this node's armed schedules.
  *  `palette`
  *  drives the headers + dim cells; omit it and the panels render uncolored. */
-export declare function buildCanvasPanelLines(nodeId: string, asks: Record<string, number>, palette: AttachPalette | undefined, source: CanvasSource, crons?: readonly CronDTO[], jobs?: readonly BashJobStatus[]): Promise<CanvasPanelLines>;
+export declare function buildCanvasPanelLines(nodeId: string, asks: Record<string, number>, palette: AttachPalette | undefined, source: CanvasSource, crons?: readonly CronDTO[], jobs?: readonly BashJobStatus[], reviews?: readonly ReviewDTO[]): Promise<CanvasPanelLines>;

package/dist/clients/attach/chrome/canvas-panels.js

@@ -5,8 +5,8 @@
 // into Containers around the editor:
 //   reports   → BELOW the editor: this node's manager (↑), its live
 //               (↓, active|idle) reports, and trailing wait rows for human
-//               tickets, live background bash jobs, and armed crons. Backs
-//               inline scroll+open/swap.
+//               tickets, open document reviews, live background bash jobs, and
+//               armed crons. Backs inline scroll+open/swap.
 //
 // Pure: given a node id + the per-node ticket-count map it returns ANSI strings; the
 // caller owns the Containers and the refresh trigger. beginFrameTelem() clears the
@@ -16,9 +16,13 @@ import { beginFrameTelem, navLabel, nodeGlyph, truncate, tokensCell, cycleBadge,
 /** Columns the bash row spends on everything except the command itself:
  *  ` ⚙ ` + `bash job · ` + elapsed + ` · ` + ` · ↵ details`. */
 const BASH_ROW_CHROME = 34;
+/** Columns the review row spends on everything except the file name:
+ *  ` ✎ ` + the longest state prefix + ` · ` + ` · ↵ companion`. */
+const REVIEW_ROW_CHROME = 40;
 import { RemoteCanvasSource } from '../../../core/canvas/remote-canvas-source.js';
 import { cronWaitSummary } from './cron-wait.js';
 import { bashJobsWaitSummary } from './bash-jobs.js';
+import { reviewWaitSummary } from './review-wait.js';
 /** Column widths for the aligned panel rows (visible columns). name is sized to
  *  the widest label across BOTH panels (capped); kind is wide enough for the
  *  longest persona kind (`orchestrator` = 12) so real kinds never truncate;
@@ -39,7 +43,7 @@ function padStartVisible(s, w) {
  *  `{}` to omit the ⚑ badges. `crons` are this node's armed schedules.
  *  `palette`
  *  drives the headers + dim cells; omit it and the panels render uncolored. */
-export async function buildCanvasPanelLines(nodeId, asks, palette, source, crons = [], jobs = []) {
+export async function buildCanvasPanelLines(nodeId, asks, palette, source, crons = [], jobs = [], reviews = []) {
     // A remote source provides only graph structure + node metadata; tokens/
     // activity/status-glyph adornments are local disk reads (telemetry.json,
     // fault state, pid liveness) and are suppressed to safe defaults below —
@@ -159,6 +163,19 @@ export async function buildCanvasPanelLines(nodeId, asks, palette, source, crons
     const selfAsks = asks[nodeId] ?? 0;
     if (selfAsks > 0)
         items.push({ key: 'human', kind: 'human', line: ` ${YELLOW}⚑ waiting on human · ${selfAsks} pending${RESET}` });
+    // Review rows sit with the human row: an open review is either waiting on the
+    // person or already submitted and finishing behind its companion, and either
+    // way this node resumes only when the review completes.
+    for (const review of reviews) {
+        const pen = palette ? palette.info('✎') : '✎';
+        const summary = reviewWaitSummary(review, Math.max(8, fillWidth() - REVIEW_ROW_CHROME));
+        items.push({
+            key: `review:${review.review_id}`,
+            kind: 'review',
+            companionNodeId: review.companion_node_id,
+            line: ` ${pen} ${muted(`${summary} · ↵ companion`)}${RESET}`,
+        });
+    }
     // Bash wait row: attention (human) -> active-now (running background work) ->
     // scheduled-future (armed crons). The leading glyph distinguishes the row type.
     // `x stop` is advertised on the row because it is the roster's only

package/dist/clients/attach/chrome/review-wait.d.ts

@@ -0,0 +1,6 @@
+import type { ReviewDTO } from '../../../api/dto/reviews.js';
+/** Compact cockpit row for one open review: state first (matching the cron and
+ *  bash rows), then the file it is about. A review whose submit is already in
+ *  reads as off the human's hands — the daemon approves it the moment the
+ *  companion stops editing, and the origin node resumes on that approval. */
+export declare function reviewWaitSummary(review: ReviewDTO, fileCap?: number): string;

package/dist/clients/attach/chrome/review-wait.js

@@ -0,0 +1,22 @@
+// chrome/review-wait.ts — the attach-side formatter for this node's open
+// document reviews, mirroring chrome/cron-wait.ts and chrome/bash-jobs.ts: one
+// compact cockpit row per awaited review. Pure — takes the already-listed
+// reviews, never calls the daemon itself (that's the roster's job). Enter on
+// the row opens the review's companion viewer, which is where the editing the
+// row reports on is actually happening.
+import { basename } from 'node:path';
+/** The reviewed file as one cell, ellipsized to `cap` columns. */
+function fileCell(file, cap) {
+    const name = basename(file);
+    return name.length <= cap ? name : `${name.slice(0, Math.max(1, cap - 1))}…`;
+}
+/** Compact cockpit row for one open review: state first (matching the cron and
+ *  bash rows), then the file it is about. A review whose submit is already in
+ *  reads as off the human's hands — the daemon approves it the moment the
+ *  companion stops editing, and the origin node resumes on that approval. */
+export function reviewWaitSummary(review, fileCap = 28) {
+    const file = fileCell(review.file, Math.max(8, fileCap));
+    return review.submit_requested_at === undefined
+        ? `review open · ${file} · waiting on you`
+        : `review submitted · ${file} · companion still editing`;
+}

package/dist/clients/attach/chrome/roster.js

@@ -5,7 +5,8 @@
 // highlight, ↑ off the TOP row returns to the editor, ↓ CLAMPS at the bottom,
 // Enter opens the row (SWAPS this pane in place onto a node, or opens the wait
 // detail surface for a human/cron/bash row: a human row opens the inbox, a cron
-// row the Inspector's schedule section, a bash row the Inspector's jobs section),
+// row the Inspector's schedule section, a bash row the Inspector's jobs section,
+// a review row the review's companion viewer),
 // Esc / any typed key returns to the editor. Disabled entirely for a REMOTE
 // attach: a remote graph id has no local pane to swap into and no local
 // jobs/crons to inspect.
@@ -91,7 +92,13 @@ export function createRoster(s, hooks) {
         // Local-only, same gate as ownedCrons: a remote graph has no local jobs dir
         // to scan (and a local nodeId collision must never leak background jobs).
         const bashJobs = remote ? [] : activeBackgroundBashJobs(contextDir(nodeId));
-        const built = await buildCanvasPanelLines(nodeId, hooks.asks(), pal, canvasSource, ownedCrons, bashJobs);
+        // Reviews this node is the origin of: the person still holds an open one, or
+        // the daemon is finishing a submitted one behind its companion. Local-only,
+        // like the crons above — a remote graph id has no local review surface.
+        const reviews = remote
+            ? []
+            : (await cliClient().listReviews({ state: 'open', origin_node_id: nodeId })).reviews;
+        const built = await buildCanvasPanelLines(nodeId, hooks.asks(), pal, canvasSource, ownedCrons, bashJobs, reviews);
         items = built.items;
         // After an in-place swap, land on the previously open node, which has taken
         // the swapped-to node's place in this self-excluding roster.
@@ -198,6 +205,20 @@ export function createRoster(s, hooks) {
             hooks.openInspector('schedule');
             return;
         }
+        if (item.kind === 'review') {
+            if (role !== 'controller') {
+                hooks.setNotice('Read-only observer attach — cannot open the review companion');
+                return;
+            }
+            exit();
+            // Beside this pane, never in place: the person is asking to watch the
+            // companion, not to give up the view they are asking from.
+            execFile('crtr', ['surface', 'node', 'focus', item.companionNodeId], (err) => {
+                if (err !== null)
+                    hooks.setNotice(`Could not open the companion: ${err.message.split('\n')[0]}`);
+            });
+            return;
+        }
         if (item.kind === 'bash') {
             if (activeBackgroundBashJobs(contextDir(nodeId)).length === 0) {
                 hooks.setNotice('Background job already finished');

package/dist/clients/attach/chrome/widgets.js

@@ -41,7 +41,7 @@ export function createChromeWidgets(ctx, state) {
             const span = Math.max(1, (process.stdout.columns ?? 80) - 4);
             queued.addChild(new Text(pal.muted(`queued (${session.queued.length}):`), 1, 0));
             for (const msg of session.queued) {
-                const oneLine = msg.replace(/\s+/g, ' ').trim();
+                const oneLine = msg.text.replace(/\s+/g, ' ').trim();
                 queued.addChild(new Text(pal.faint(`  ⋯ ${truncateToWidth(oneLine, span, '…')}`), 1, 0));
             }
         }

package/dist/clients/attach/input/controller.js

@@ -2,6 +2,7 @@
 // lifetime belongs to InputOverlayOwner; viewer permission belongs to the single
 // ViewerCapabilities value supplied by session/input-wiring.
 import { spawn } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
 import { readFileSync, unlinkSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
@@ -45,7 +46,7 @@ export class InputController {
         this.emitCommand({ type: 'cycle_ladder', direction });
     }
     sendInterrupting(text) {
-        return this.emitDrive({ type: 'prompt', text, interrupt: true });
+        return this.emitDrive({ type: 'prompt', text, interrupt: true, message_id: randomUUID() });
     }
     attachDialog(request) {
         this.overlays.attachDialog(request);
@@ -181,7 +182,7 @@ export class InputController {
         if (delivery !== 'steer' && delivery !== 'prompt')
             return;
         const expanded = this.expandImagePlaceholders(classification.kind === 'slash' ? text : classification.text);
-        if (!this.emitDrive(delivery === 'steer' ? { type: 'steer', text: expanded } : { type: 'prompt', text: expanded }))
+        if (!this.emitDrive(delivery === 'steer' ? { type: 'steer', text: expanded, message_id: randomUUID() } : { type: 'prompt', text: expanded, message_id: randomUUID() }))
             return;
         this.editor.addToHistory(classification.trimmed);
         this.editor.setText('');
@@ -193,7 +194,7 @@ export class InputController {
         const trimmed = text.trim();
         if (!trimmed)
             return;
-        if (!this.emitDrive({ type: 'follow_up', text: this.expandImagePlaceholders(text) }))
+        if (!this.emitDrive({ type: 'follow_up', text: this.expandImagePlaceholders(text), message_id: randomUUID() }))
             return;
         this.editor.addToHistory(trimmed);
         this.editor.setText('');

package/dist/clients/attach/overlays/mcp.js

@@ -39,7 +39,7 @@
 // as cached but fails to reconnect). Action names verified against the
 // installed adapter (pi-mcp-adapter index.ts: "auth-start" / "auth-complete" /
 // "ui-messages"; `connect: <name>`).
-import { createHash } from 'node:crypto';
+import { createHash, randomUUID } from 'node:crypto';
 import { existsSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
@@ -257,6 +257,7 @@ export function startMcpServerAction(row, send, notify) {
         send({
             type: 'prompt',
             text: `Run mcp({ action: "auth-start", server: ${nameJson} }) and show me the returned OAuth URL verbatim (with any instructions). If the server does not need OAuth, run mcp({ connect: ${nameJson} }) instead and report the result.`,
+            message_id: randomUUID(),
         });
         notify(`Asking the engine to start OAuth for ${row.name}…`);
     }
@@ -264,6 +265,7 @@ export function startMcpServerAction(row, send, notify) {
         send({
             type: 'prompt',
             text: `Run mcp({ connect: ${nameJson} }) to reconnect that MCP server and report the result. If it fails with an authentication or authorization error, run mcp({ action: "auth-start", server: ${nameJson} }) and show me the returned OAuth URL verbatim (with any instructions).`,
+            message_id: randomUUID(),
         });
         notify(`Asking the engine to reconnect ${row.name}…`);
     }

package/dist/clients/attach/render/chat-view.js

@@ -1018,7 +1018,7 @@ export class ChatView {
         if (generated !== null &&
             (message.role !== 'custom' || message.display === true)) {
             this.pushTranscriptText(generated.body);
-            const component = new ContextMessageComponent(generatedContextExpandedBody(generated), this.toolOutputExpanded, this.dimStyle, (s) => this.spinnerStyle(this.labelStyle(s)), generated.label, ` ${generated.summary} — ctrl+o to expand`, generated.label === 'crtr context' || generated.kind === 'revive' || generated.kind === 'inbox');
+            const component = new ContextMessageComponent(generatedContextExpandedBody(generated), this.toolOutputExpanded, this.dimStyle, (s) => this.spinnerStyle(this.labelStyle(s)), generated.label, ` ${generated.summary} — ctrl+o to expand`, generated.label === 'crtr context' || generated.kind === 'revive' || generated.kind === 'inbox' || generated.kind === 'review-approval');
             // A successor broker's exact restart continuation is a visible seam, not
             // a group member: the preceding span keeps its own recap and the next tool
             // call begins a broker-aligned fresh group.

package/dist/clients/attach/session/whip.d.ts

@@ -7,6 +7,7 @@ export declare class WhipAnimation implements Component {
     private readonly tui;
     private readonly pal;
     private frame;
+    private nextSound;
     private timer;
     constructor(tui: TUI, pal: Pick<AttachPalette, 'accent'>);
     play(): void;

package/dist/clients/attach/session/whip.js

@@ -1,6 +1,29 @@
 // session/whip.ts — viewer-local Sisyphus whip animation and steering cues.
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
 import { truncateToWidth } from '@earendil-works/pi-tui';
 const FRAME_MS = 40;
+// The build copies this beside bundled viewer.js, whose import.meta.url is the
+// runtime location after esbuild folds this module into that entrypoint.
+const WHIP_SOUND_PATHS = [
+    fileURLToPath(new URL('./assets/whip-snap.mp3', import.meta.url)),
+    fileURLToPath(new URL('./assets/whip-crack.mp3', import.meta.url)),
+    fileURLToPath(new URL('./assets/whip-06.mp3', import.meta.url)),
+];
+/** Play a bundled crack without delaying the animation or input handling. */
+function playWhipSound(soundPath) {
+    const command = process.platform === 'darwin' ? 'afplay' : process.platform === 'linux' ? 'aplay' : undefined;
+    if (command === undefined)
+        return;
+    try {
+        const child = spawn(command, [soundPath], { stdio: 'ignore', detached: true });
+        child.on('error', () => { });
+        child.unref();
+    }
+    catch {
+        /* Sound playback must never interfere with the whip action. */
+    }
+}
 const WHIP_FRAMES = [
     [
         "",
@@ -296,6 +319,7 @@ export class WhipAnimation {
     tui;
     pal;
     frame = -1;
+    nextSound = 0;
     timer;
     constructor(tui, pal) {
         this.tui = tui;
@@ -303,6 +327,8 @@ export class WhipAnimation {
     }
     play() {
         this.stop();
+        playWhipSound(WHIP_SOUND_PATHS[this.nextSound]);
+        this.nextSound = (this.nextSound + 1) % WHIP_SOUND_PATHS.length;
         this.frame = 0;
         this.tui.requestRender();
         this.timer = setInterval(() => {

package/dist/clients/attach/slash/dispatch.js

@@ -22,6 +22,7 @@
 // SCOPED OUT (no engine method): `/login`, `/logout`, `/share`,
 // `/trust` — a brief "not supported in attach" notice, never a frame.
 import { execFile } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
 import { BUILTIN_SLASH_COMMANDS } from '../../../core/runtime/pi-vendored.js';
 import { surfaceTmuxStyleArgs } from '../../../core/runtime/surface-bg.js';
 import { viewerOperationForSlash } from '../input/capabilities.js';
@@ -448,6 +449,7 @@ function promoteNode(arg, ctx) {
         ctx.send({
             type: 'prompt',
             text: 'You have just been promoted to an orchestrator. Your new-role guidance is arriving — read it, author your roadmap, and start delegating.',
+            message_id: randomUUID(),
         });
     });
     child.stdin?.end();