@north-light/crouter 0.3.318 → 0.3.320

package/dist/clients/attach/overlays/auth.js

@@ -1,271 +1,2 @@
-// overlays/auth.ts — native /login and /logout overlays for `crtr surface attach`.
-//
-// Runs pi's REAL OAuth/API-key login flow locally in the viewer process.
-// Since crtr surface attach is tmux-local only (viewer + broker = same machine, same
-// filesystem), we can construct a local ModelRuntime over the SAME auth.json the
-// broker uses — no socket round-trip needed for auth mutations.
-//
-// The OAuthSelectorComponent (provider picker) and LoginDialogComponent (the
-// actual login flow UI) are pi's own exported components, used verbatim.
-import { join } from 'node:path';
-import { execFile } from 'node:child_process';
-import { CredentialSynchronizationError, ModelRuntime, OAuthSelectorComponent, LoginDialogComponent, } from '@earendil-works/pi-coding-agent';
-import { deleteAuthCredential, setAuthCredential } from '../../../core/auth-file.js';
-import { PoolCredentialStore } from '../../../core/pool-credential-store.js';
-import { dialogAuthInteraction } from '../../../core/auth-interaction.js';
-import { commitManagedLogin, isManagedProvider, readSubscriptionPool, removeManagedProvider, } from '../../../core/subscription-state.js';
-/** Build a ModelRuntime over the broker's agentDir (or pi's default). It reads the
- *  SAME auth.json the broker uses — the viewer and broker share the filesystem
- *  (tmux-local invariant). */
-async function buildLocalAuth(agentDir) {
-    const authPath = join(agentDir, 'auth.json');
-    const modelsPath = join(agentDir, 'models.json');
-    const store = new PoolCredentialStore(authPath);
-    let mutationBoundary;
-    const credentials = {
-        read: (providerId) => store.read(providerId),
-        list: () => store.list(),
-        modify: (providerId, fn) => {
-            const enter = mutationBoundary;
-            mutationBoundary = undefined;
-            if (enter !== undefined && !enter())
-                return Promise.reject(new Error('Login cancelled'));
-            return store.modify(providerId, fn);
-        },
-        delete: (providerId) => store.delete(providerId),
-    };
-    const runtime = await ModelRuntime.create({ credentials, modelsPath });
-    return {
-        runtime,
-        authPath,
-        beforeNextCredentialMutation: (callback) => { mutationBoundary = callback; },
-    };
-}
-/** Assemble the AuthSelectorProvider list for the OAuth selector: every composed
- *  provider, OAuth ones first, each carrying its current auth status (which the
- *  selector renders as the configured indicator). */
-async function buildProviderList(runtime) {
-    const all = runtime.getProviders();
-    const ordered = [
-        ...all.filter((provider) => provider.auth.oauth !== undefined),
-        ...all.filter((provider) => provider.auth.oauth === undefined),
-    ];
-    return Promise.all(ordered.map(async (provider) => ({
-        id: provider.id,
-        name: provider.name,
-        authType: provider.auth.oauth !== undefined ? 'oauth' : 'api_key',
-        status: await runtime.checkAuth(provider.id),
-    })));
-}
-/** Open the browser with a URL (best-effort; platform-specific). */
-function openBrowser(url) {
-    const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';
-    execFile(cmd, [url], { timeout: 5_000 }, () => {
-        /* best-effort: browser open is fire-and-forget */
-    });
-}
-/** `/login` — show the provider selector, then run pi's native login flow in
- *  the viewer. On success, notifies the broker to reload auth via reload_auth.
- *
- *  Two-stage: composing the ModelRuntime and reading each provider's auth status
- *  is async (pi 0.82), while the picker itself must be built synchronously from
- *  the controls the overlay host hands out. So this resolves the runtime first and
- *  returns the sync picker factory. */
-export async function buildLoginPicker(tui, agentDir, onAuthReloaded, notify) {
-    const { runtime, authPath, beforeNextCredentialMutation } = await buildLocalAuth(agentDir);
-    const providers = await buildProviderList(runtime);
-    return ({ close, replace }) => {
-        const onSelect = (providerId) => {
-            const provider = providers.find((p) => p.id === providerId);
-            if (provider === undefined) {
-                notify(`Unknown provider: ${providerId}`);
-                close();
-                return;
-            }
-            // `finish()` is the single idempotent exit for the login dialog: tear the
-            // whole picker down (which restores editor focus), exactly once, no matter
-            // which path (success, failure, or an Esc-cancel that aborts mid-flow) gets
-            // there first. The OAuth/cancel paths resolve through DIFFERENT channels (the
-            // login() promise vs the dialog's onComplete), so the guard prevents a double
-            // close + double notify.
-            let settled = false;
-            let committing = false;
-            const finish = () => {
-                if (settled)
-                    return;
-                settled = true;
-                close();
-            };
-            const dialog = new LoginDialogComponent(tui, providerId, (success, message) => {
-                // The dialog's own completion (chiefly an Esc-cancel). On a real OAuth
-                // success the login() promise below already finished + notified, so the
-                // settled guard makes this a no-op then.
-                if (settled)
-                    return;
-                if (success) {
-                    notify(`Logged in to ${provider.name}`);
-                    onAuthReloaded();
-                }
-                else {
-                    notify(message ? `Login failed: ${message}` : `Login to ${provider.name} was cancelled`);
-                }
-                finish();
-            }, provider.name);
-            // Swap the provider selector for the login dialog IN PLACE — it renders
-            // inline under the editor (same slot as the model picker), not as a centered
-            // overlay. `replace` focuses the dialog; `close()` (via finish) unmounts it.
-            replace(dialog, dialog);
-            const handleDialogInput = dialog.handleInput.bind(dialog);
-            dialog.handleInput = (data) => { if (!committing)
-                handleDialogInput(data); };
-            const beginCommit = () => {
-                if (settled || dialog.signal.aborted)
-                    return false;
-                committing = true;
-                dialog.showDetails(['Saving credentials…']);
-                return true;
-            };
-            const interaction = dialogAuthInteraction(dialog, {
-                openBrowser,
-                isActive: () => !settled && !dialog.signal.aborted,
-            });
-            const fail = (err) => {
-                // ModelRuntime persists the credential before synchronizing its provider
-                // state. A synchronization failure is therefore a successful login with
-                // a refresh warning, not a failed login.
-                if (err instanceof CredentialSynchronizationError) {
-                    notify(`Logged in to ${provider.name}; provider refresh failed: ${err.message}`);
-                    onAuthReloaded();
-                    finish();
-                    return;
-                }
-                // An Esc-cancel aborts the flow; the dialog's onComplete already notified +
-                // finished, so only report a genuine error here.
-                const error = err;
-                if (error?.name !== 'AbortError' && error?.message !== 'Login cancelled') {
-                    notify(`Login error: ${String(error?.message ?? err)}`);
-                }
-                finish();
-            };
-            if (isManagedProvider(providerId)) {
-                // Managed provider OAuth is collected here and persisted through the coordinated pool
-                // writer rather than runtime.login(). The pool is the credential store and owns account
-                // identity, deduplication, and label selection.
-                const oauth = runtime.getProvider(providerId)?.auth.oauth;
-                if (oauth === undefined) {
-                    notify(`Provider "${provider.name}" has no OAuth flow`);
-                    finish();
-                    return;
-                }
-                // Snapshot the pool's newest cooldown before OAuth. A later 429 remains authoritative
-                // when the successful login updates that account.
-                const lastRateLimitedAt = Math.max(0, ...readSubscriptionPool(providerId).map((entry) => entry.lastRateLimitedAt));
-                // `auth.oauth.login()` RETURNS the credential without persisting it (0.82 made
-                // persistence app-owned), which is exactly the collect-without-persist half we need.
-                oauth
-                    .login(interaction)
-                    .then(async (credential) => {
-                    if (!beginCommit())
-                        return;
-                    const accountId = typeof credential.accountId === 'string' && credential.accountId.trim()
-                        ? credential.accountId.trim()
-                        : undefined;
-                    await commitManagedLogin(providerId, providerId, {
-                        refresh: credential.refresh,
-                        access: credential.access,
-                        expires: credential.expires,
-                        accountId,
-                        lastRateLimitedAt,
-                        autoLabel: true,
-                    });
-                    notify(`Logged in to ${provider.name}`);
-                    onAuthReloaded();
-                    finish();
-                })
-                    .catch(fail);
-                return;
-            }
-            if (provider.authType === 'oauth') {
-                if (runtime.getProvider(providerId)?.auth.oauth === undefined) {
-                    // An extension-registered provider: its OAuth impl lives in the broker's
-                    // runtime, not the viewer's local one, so we cannot drive the flow here.
-                    dialog.showInfo([
-                        `Provider "${provider.name}" is extension-registered and cannot be logged in`,
-                        `from the viewer (the extension runs in the broker, not here).`,
-                        `Run /login directly in the node's terminal, or log in via the pi CLI.`,
-                    ].join('\n'));
-                    // The dialog stays up; an Esc routes through onComplete → finish().
-                    return;
-                }
-                // Non-managed OAuth: `runtime.login` persists through crouter's own credential
-                // store, so auth.json lands exactly where the broker reads it.
-                beforeNextCredentialMutation(beginCommit);
-                runtime
-                    .login(providerId, 'oauth', interaction)
-                    .then(() => {
-                    if (settled)
-                        return; // a cancel/abort already closed it
-                    notify(`Logged in to ${provider.name}`);
-                    onAuthReloaded();
-                    finish();
-                })
-                    .catch(fail)
-                    .finally(() => beforeNextCredentialMutation(undefined));
-            }
-            else {
-                // API-key provider: prompt for the key and persist it locally.
-                dialog
-                    .showPrompt(`Enter API key for ${provider.name}:`, 'sk-...')
-                    .then(async (key) => {
-                    if (settled)
-                        return;
-                    if (key.trim()) {
-                        if (!beginCommit())
-                            return;
-                        await setAuthCredential(providerId, { type: 'api_key', key: key.trim() }, authPath);
-                        notify(`API key saved for ${provider.name}`);
-                        onAuthReloaded();
-                    }
-                    else {
-                        notify('No key entered — login cancelled');
-                    }
-                    finish();
-                })
-                    .catch(() => finish());
-            }
-        };
-        const component = new OAuthSelectorComponent('login', providers, onSelect, () => close());
-        return { component, focus: component };
-    };
-}
-/** `/logout` — show the provider selector in logout mode. On select, deletes the
- *  provider's credential directly, then notifies the broker to reload. */
-export async function buildLogoutPicker(agentDir, onAuthReloaded, notify) {
-    const { runtime, authPath } = await buildLocalAuth(agentDir);
-    const providers = await buildProviderList(runtime);
-    return ({ close }) => {
-        const onSelect = (providerId) => {
-            const provider = providers.find((p) => p.id === providerId);
-            void (async () => {
-                try {
-                    // Managed providers tear down the WHOLE provider (every rotation account) through the
-                    // coordinated service, never a raw credential delete that would strip only auth.json and
-                    // orphan the pool.
-                    if (isManagedProvider(providerId))
-                        await removeManagedProvider(providerId);
-                    else
-                        await deleteAuthCredential(providerId, authPath);
-                    close();
-                    notify(`Logged out of ${provider?.name ?? providerId}`);
-                    onAuthReloaded();
-                }
-                catch (error) {
-                    close();
-                    notify(`Logout error: ${error instanceof Error ? error.message : String(error)}`);
-                }
-            })();
-        };
-        const component = new OAuthSelectorComponent('logout', providers, onSelect, () => close());
-        return { component, focus: component };
-    };
-}
+var N=Object.defineProperty;var t=(o,i)=>N(o,"name",{value:i,configurable:!0});import{join as C}from"node:path";import{execFile as _}from"node:child_process";import{CredentialSynchronizationError as B,ModelRuntime as D,OAuthSelectorComponent as A,LoginDialogComponent as O}from"@earendil-works/pi-coding-agent";import{deleteAuthCredential as T,setAuthCredential as z}from"../../../core/auth-file.js";import{PoolCredentialStore as F}from"../../../core/pool-credential-store.js";import{dialogAuthInteraction as U}from"../../../core/auth-interaction.js";import{commitManagedLogin as q,isManagedProvider as S,readSubscriptionPool as G,removeManagedProvider as H}from"../../../core/subscription-state.js";async function M(o){const i=C(o,"auth.json"),a=C(o,"models.json"),e=new F(i);let l;const P={read:t(r=>e.read(r),"read"),list:t(()=>e.list(),"list"),modify:t((r,d)=>{const m=l;return l=void 0,m!==void 0&&!m()?Promise.reject(new Error("Login cancelled")):e.modify(r,d)},"modify"),delete:t(r=>e.delete(r),"delete")};return{runtime:await D.create({credentials:P,modelsPath:a}),authPath:i,beforeNextCredentialMutation:t(r=>{l=r},"beforeNextCredentialMutation")}}t(M,"buildLocalAuth");async function j(o){const i=o.getProviders(),a=[...i.filter(e=>e.auth.oauth!==void 0),...i.filter(e=>e.auth.oauth===void 0)];return Promise.all(a.map(async e=>({id:e.id,name:e.name,authType:e.auth.oauth!==void 0?"oauth":"api_key",status:await o.checkAuth(e.id)})))}t(j,"buildProviderList");function J(o){const i=process.platform==="darwin"?"open":process.platform==="win32"?"start":"xdg-open";_(i,[o],{timeout:5e3},()=>{})}t(J,"openBrowser");async function I(o,i,a,e){const{runtime:l,authPath:P,beforeNextCredentialMutation:w}=await M(i),r=await j(l);return({close:d,replace:m})=>{const b=t(u=>{const s=r.find(n=>n.id===u);if(s===void 0){e(`Unknown provider: ${u}`),d();return}let L=!1,y=!1;const h=t(()=>{L||(L=!0,d())},"finish"),c=new O(o,u,(n,g)=>{L||(n?(e(`Logged in to ${s.name}`),a()):e(g?`Login failed: ${g}`:`Login to ${s.name} was cancelled`),h())},s.name);m(c,c);const E=c.handleInput.bind(c);c.handleInput=n=>{y||E(n)};const $=t(()=>L||c.signal.aborted?!1:(y=!0,c.showDetails(["Saving credentials\u2026"]),!0),"beginCommit"),k=U(c,{openBrowser:J,isActive:t(()=>!L&&!c.signal.aborted,"isActive")}),x=t(n=>{if(n instanceof B){e(`Logged in to ${s.name}; provider refresh failed: ${n.message}`),a(),h();return}const g=n;g?.name!=="AbortError"&&g?.message!=="Login cancelled"&&e(`Login error: ${String(g?.message??n)}`),h()},"fail");if(S(u)){const n=l.getProvider(u)?.auth.oauth;if(n===void 0){e(`Provider "${s.name}" has no OAuth flow`),h();return}const g=Math.max(0,...G(u).map(p=>p.lastRateLimitedAt));n.login(k).then(async p=>{if(!$())return;const v=typeof p.accountId=="string"&&p.accountId.trim()?p.accountId.trim():void 0;await q(u,u,{refresh:p.refresh,access:p.access,expires:p.expires,accountId:v,lastRateLimitedAt:g,autoLabel:!0}),e(`Logged in to ${s.name}`),a(),h()}).catch(x);return}if(s.authType==="oauth"){if(l.getProvider(u)?.auth.oauth===void 0){c.showInfo([`Provider "${s.name}" is extension-registered and cannot be logged in`,"from the viewer (the extension runs in the broker, not here).","Run /login directly in the node's terminal, or log in via the pi CLI."].join(`
+`));return}w($),l.login(u,"oauth",k).then(()=>{L||(e(`Logged in to ${s.name}`),a(),h())}).catch(x).finally(()=>w(void 0))}else c.showPrompt(`Enter API key for ${s.name}:`,"sk-...").then(async n=>{if(!L){if(n.trim()){if(!$())return;await z(u,{type:"api_key",key:n.trim()},P),e(`API key saved for ${s.name}`),a()}else e("No key entered \u2014 login cancelled");h()}}).catch(()=>h())},"onSelect"),f=new A("login",r,b,()=>d());return{component:f,focus:f}}}t(I,"buildLoginPicker");async function ee(o,i,a){const{runtime:e,authPath:l}=await M(o),P=await j(e);return({close:w})=>{const r=t(m=>{const b=P.find(f=>f.id===m);(async()=>{try{S(m)?await H(m):await T(m,l),w(),a(`Logged out of ${b?.name??m}`),i()}catch(f){w(),a(`Logout error: ${f instanceof Error?f.message:String(f)}`)}})()},"onSelect"),d=new A("logout",P,r,()=>w());return{component:d,focus:d}}}t(ee,"buildLogoutPicker");export{I as buildLoginPicker,ee as buildLogoutPicker};

package/dist/clients/attach/overlays/dialogs.js

@@ -1,102 +1,2 @@
-// overlays/dialogs.ts — the blocking-dialog renderer for `crtr surface attach`.
-//
-// The broker forwards an extension's user-blocking UI request as an
-// `extension_ui_request` frame (RpcExtensionUIRequest). The viewer renders it
-// with pi's matching exported component and ships the resolved
-// `extension_ui_response` (RpcExtensionUIResponse) back over the socket.
-//
-// Every `ctx.ui.*` call arrives in that ONE envelope, discriminated by `method`;
-// only the 4 blocking methods render overlays here. The non-blocking rest are
-// handled by the viewer before calling `renderDialog` (notify becomes the normal
-// notice line; setStatus/setWidget/setTitle paint footer/widget/title chrome).
-// If one still reaches `renderDialog`, it returns an inert handle — no overlay,
-// no response, because there is nothing to answer. `InputController.attachDialog`
-// additionally refuses them BEFORE its supersede-teardown, so a chrome paint can
-// never orphan a live blocking request.
-//
-// Mapping (mirrors interactive-mode.js): select → ExtensionSelectorComponent;
-// confirm → the SAME selector over ["Yes","No"] (pi has no separate confirm
-// component, :1658); input → ExtensionInputComponent; editor →
-// ExtensionEditorComponent. The select/input components run their own
-// timeout/countdown when `req.timeout` is present; editor takes none. The broker
-// ALSO arms a default timeout, so a dialog may be superseded by the broker
-// resolving first — `dismiss()` tears the overlay down cleanly without
-// responding (the response would be a no-op the broker drops by id).
-import { KeybindingsManager, TUI_KEYBINDINGS, } from '@earendil-works/pi-tui';
-import { ExtensionEditorComponent, ExtensionInputComponent, ExtensionSelectorComponent, } from '@earendil-works/pi-coding-agent';
-/** The 4 user-blocking dialog methods. Other RpcExtensionUIRequest methods are
- *  non-blocking display ops; callers handle them before rendering a dialog. */
-export function isBlockingDialog(req) {
-    return (req.method === 'select' ||
-        req.method === 'confirm' ||
-        req.method === 'input' ||
-        req.method === 'editor');
-}
-const INERT = { dismiss: () => { } };
-const OVERLAY_OPTIONS = { anchor: 'center', width: '70%', maxHeight: '80%' };
-/**
- * Render a blocking extension dialog as a focused overlay over `tui`, and resolve
- * by invoking `onRespond` with the matching `extension_ui_response` (or a
- * `cancelled` response on user-cancel/timeout). Returns a {@link DialogHandle}
- * whose `dismiss()` removes the overlay without responding (idempotent; safe to
- * call after the dialog already resolved).
- *
- * @param keybindings - used only by the `editor` dialog, which calls
- *   `keybindings.matches(key, "app.editor.external")` for the Ctrl+G external-editor
- *   shortcut. Defaults to a fresh `KeybindingsManager(TUI_KEYBINDINGS)` — that
- *   knows the base TUI bindings but not pi's app-level `app.editor.external`, so
- *   Ctrl+G is inert until the input controller passes the app keybindings
- *   manager. `ExtensionEditorComponent` is typed against pi's CORE
- *   KeybindingsManager (a subclass of pi-tui's), so we widen via the constructor's
- *   own parameter type rather than importing the core class (type-only export).
- */
-export function renderDialog(tui, req, onRespond, keybindings) {
-    if (!isBlockingDialog(req))
-        return INERT;
-    let done = false;
-    let handle;
-    let component;
-    const teardown = () => {
-        handle?.hide();
-        const disposable = component;
-        try {
-            disposable?.dispose?.();
-        }
-        catch {
-            /* ignore dispose errors during teardown */
-        }
-    };
-    const respond = (resp) => {
-        if (done)
-            return;
-        done = true;
-        teardown();
-        onRespond(resp);
-    };
-    const cancel = () => respond({ type: 'extension_ui_response', id: req.id, cancelled: true });
-    switch (req.method) {
-        case 'select':
-            component = new ExtensionSelectorComponent(req.title, req.options, (option) => respond({ type: 'extension_ui_response', id: req.id, value: option }), cancel, { tui, timeout: req.timeout });
-            break;
-        case 'confirm':
-            component = new ExtensionSelectorComponent(`${req.title}\n${req.message}`, ['Yes', 'No'], (option) => respond({ type: 'extension_ui_response', id: req.id, confirmed: option === 'Yes' }), cancel, { tui, timeout: req.timeout });
-            break;
-        case 'input':
-            component = new ExtensionInputComponent(req.title, req.placeholder, (value) => respond({ type: 'extension_ui_response', id: req.id, value }), cancel, { tui, timeout: req.timeout });
-            break;
-        case 'editor':
-            component = new ExtensionEditorComponent(tui, (keybindings ?? new KeybindingsManager(TUI_KEYBINDINGS)), req.title, req.prefill, (value) => respond({ type: 'extension_ui_response', id: req.id, value }), cancel);
-            break;
-        default:
-            return INERT;
-    }
-    handle = tui.showOverlay(component, OVERLAY_OPTIONS);
-    return {
-        dismiss: () => {
-            if (done)
-                return;
-            done = true;
-            teardown();
-        },
-    };
-}
+var h=Object.defineProperty;var o=(t,e)=>h(t,"name",{value:e,configurable:!0});import{KeybindingsManager as f,TUI_KEYBINDINGS as _}from"@earendil-works/pi-tui";import{ExtensionEditorComponent as x,ExtensionInputComponent as w,ExtensionSelectorComponent as a}from"@earendil-works/pi-coding-agent";function y(t){return t.method==="select"||t.method==="confirm"||t.method==="input"||t.method==="editor"}o(y,"isBlockingDialog");const l={dismiss:o(()=>{},"dismiss")},g={anchor:"center",width:"70%",maxHeight:"80%"};function k(t,e,m,u){if(!y(e))return l;let d=!1,r,i;const p=o(()=>{r?.hide();const n=i;try{n?.dispose?.()}catch{}},"teardown"),s=o(n=>{d||(d=!0,p(),m(n))},"respond"),c=o(()=>s({type:"extension_ui_response",id:e.id,cancelled:!0}),"cancel");switch(e.method){case"select":i=new a(e.title,e.options,n=>s({type:"extension_ui_response",id:e.id,value:n}),c,{tui:t,timeout:e.timeout});break;case"confirm":i=new a(`${e.title}
+${e.message}`,["Yes","No"],n=>s({type:"extension_ui_response",id:e.id,confirmed:n==="Yes"}),c,{tui:t,timeout:e.timeout});break;case"input":i=new w(e.title,e.placeholder,n=>s({type:"extension_ui_response",id:e.id,value:n}),c,{tui:t,timeout:e.timeout});break;case"editor":i=new x(t,u??new f(_),e.title,e.prefill,n=>s({type:"extension_ui_response",id:e.id,value:n}),c);break;default:return l}return r=t.showOverlay(i,g),{dismiss:o(()=>{d||(d=!0,p())},"dismiss")}}o(k,"renderDialog");export{y as isBlockingDialog,k as renderDialog};

package/dist/clients/attach/overlays/file-review.js

@@ -1,128 +1,2 @@
-import { homedir } from 'node:os';
-import { isAbsolute, join, relative, resolve } from 'node:path';
-import { Input, SelectList, getKeybindings, } from '@earendil-works/pi-tui';
-import { getSelectListTheme } from '@earendil-works/pi-coding-agent';
-import { openReviewWindow } from '../../inbox/review/launch.js';
-import { createReviewClient, ReviewTerminalError, terminalRefusalNotice } from '../../inbox/review/review-client.js';
-import { checkReviewableFile, extractFilePaths } from '#core/human/visible-paths';
-const MAX_VISIBLE_ROWS = 12;
-function labelForPath(file, cwd) {
-    const rel = relative(cwd, file);
-    if (rel !== '' && !rel.startsWith('..') && !isAbsolute(rel))
-        return rel;
-    const home = homedir();
-    return file === home || file.startsWith(`${home}/`) ? `~${file.slice(home.length)}` : file;
-}
-function resolveTypedPath(value, cwd) {
-    const expanded = value === '~' ? homedir() : value.startsWith('~/') ? join(homedir(), value.slice(2)) : value;
-    return resolve(cwd, expanded);
-}
-class FileReviewPicker {
-    candidates;
-    cwd;
-    onChoose;
-    close;
-    notify;
-    focused = false;
-    input = new Input();
-    list = new SelectList([], MAX_VISIBLE_ROWS, getSelectListTheme());
-    constructor(candidates, cwd, onChoose, close, notify) {
-        this.candidates = candidates;
-        this.cwd = cwd;
-        this.onChoose = onChoose;
-        this.close = close;
-        this.notify = notify;
-        this.input.onEscape = close;
-        this.input.onSubmit = () => this.chooseSelected();
-        this.refreshList();
-    }
-    render(width) {
-        this.input.focused = this.focused;
-        const inputWidth = Math.max(1, width - 8);
-        return [
-            'Review a file named in this transcript',
-            ...this.input.render(inputWidth).map((line) => `Path: ${line}`),
-            ...this.list.render(width),
-        ];
-    }
-    handleInput(data) {
-        const kb = getKeybindings();
-        if (kb.matches(data, 'tui.select.up') || kb.matches(data, 'tui.select.down')) {
-            this.list.handleInput(data);
-            return;
-        }
-        if (kb.matches(data, 'tui.select.confirm') || data === '\n') {
-            this.chooseSelected();
-            return;
-        }
-        const before = this.input.getValue();
-        this.input.handleInput(data);
-        if (this.input.getValue() !== before)
-            this.refreshList();
-    }
-    invalidate() {
-        this.input.invalidate();
-        this.list.invalidate();
-    }
-    refreshList() {
-        const typed = this.input.getValue();
-        const query = typed.toLowerCase();
-        const matches = this.candidates.filter((file) => {
-            const label = labelForPath(file, this.cwd).toLowerCase();
-            return query === '' || label.includes(query) || file.toLowerCase().includes(query);
-        });
-        const typedPath = typed === '' ? undefined : resolveTypedPath(typed, this.cwd);
-        const hasExactCandidate = typedPath !== undefined && this.candidates.some((file) => file === typedPath);
-        // Matches first: typing is primarily a filter, so Enter picks the best
-        // visible match. The free-typed path is the escape hatch and sits last —
-        // it is selected by default only when nothing matches.
-        const items = [
-            // No description: the label already IS the path, and a detail column
-            // repeating it just spends width twice on the same string.
-            ...matches.map((file) => ({ value: file, label: labelForPath(file, this.cwd) })),
-            ...(typedPath !== undefined && !hasExactCandidate
-                ? [{ value: typedPath, label: `use ${JSON.stringify(typed)}`, description: typedPath }]
-                : []),
-        ];
-        this.list = new SelectList(items, MAX_VISIBLE_ROWS, getSelectListTheme());
-        this.list.onSelect = () => this.chooseSelected();
-        this.list.onCancel = this.close;
-    }
-    chooseSelected() {
-        const typed = this.input.getValue();
-        const item = this.list.getSelectedItem();
-        const picked = item?.value ?? typed;
-        if (picked === '')
-            return;
-        const file = resolveTypedPath(picked, this.cwd);
-        const check = checkReviewableFile(file);
-        if (!check.ok) {
-            this.notify(check.reason);
-            return;
-        }
-        this.onChoose(file);
-        this.close();
-    }
-}
-export function buildFileReviewPicker(candidates, cwd, onChoose, close, notify) {
-    const picker = new FileReviewPicker(candidates, cwd, onChoose, close, notify);
-    return { component: picker, focus: picker };
-}
-export async function launchFileReview(host, file, opts) {
-    // The refusal precedes the record creation: a remote viewer can reach neither
-    // the reviewed file nor the companion's pane.
-    if (host.capabilities.remote) {
-        opts.onNotice('The review is unavailable in a remote attach — the file and companion live on the host.');
-        return;
-    }
-    let review;
-    try {
-        review = await createReviewClient().createInline({ originNodeId: opts.originNodeId, file });
-    }
-    catch (err) {
-        opts.onNotice(err instanceof ReviewTerminalError ? terminalRefusalNotice(err) : err instanceof Error ? err.message : String(err));
-        return;
-    }
-    openReviewWindow(host, review);
-}
-export { extractFilePaths };
+var w=Object.defineProperty;var c=(n,e)=>w(n,"name",{value:e,configurable:!0});import{homedir as h}from"node:os";import{isAbsolute as v,join as g,relative as b,resolve as S}from"node:path";import{Input as y,SelectList as a,getKeybindings as I}from"@earendil-works/pi-tui";import{getSelectListTheme as l}from"@earendil-works/pi-coding-agent";import{openReviewWindow as R}from"../../inbox/review/launch.js";import{createReviewClient as C,ReviewTerminalError as L,terminalRefusalNotice as k}from"../../inbox/review/review-client.js";import{checkReviewableFile as x,extractFilePaths as P}from"#core/human/visible-paths";const u=12;function d(n,e){const t=b(e,n);if(t!==""&&!t.startsWith("..")&&!v(t))return t;const i=h();return n===i||n.startsWith(`${i}/`)?`~${n.slice(i.length)}`:n}c(d,"labelForPath");function p(n,e){const t=n==="~"?h():n.startsWith("~/")?g(h(),n.slice(2)):n;return S(e,t)}c(p,"resolveTypedPath");class F{static{c(this,"FileReviewPicker")}candidates;cwd;onChoose;close;notify;focused=!1;input=new y;list=new a([],u,l());constructor(e,t,i,s,o){this.candidates=e,this.cwd=t,this.onChoose=i,this.close=s,this.notify=o,this.input.onEscape=s,this.input.onSubmit=()=>this.chooseSelected(),this.refreshList()}render(e){this.input.focused=this.focused;const t=Math.max(1,e-8);return["Review a file named in this transcript",...this.input.render(t).map(i=>`Path: ${i}`),...this.list.render(e)]}handleInput(e){const t=I();if(t.matches(e,"tui.select.up")||t.matches(e,"tui.select.down")){this.list.handleInput(e);return}if(t.matches(e,"tui.select.confirm")||e===`
+`){this.chooseSelected();return}const i=this.input.getValue();this.input.handleInput(e),this.input.getValue()!==i&&this.refreshList()}invalidate(){this.input.invalidate(),this.list.invalidate()}refreshList(){const e=this.input.getValue(),t=e.toLowerCase(),i=this.candidates.filter(r=>{const f=d(r,this.cwd).toLowerCase();return t===""||f.includes(t)||r.toLowerCase().includes(t)}),s=e===""?void 0:p(e,this.cwd),o=s!==void 0&&this.candidates.some(r=>r===s),m=[...i.map(r=>({value:r,label:d(r,this.cwd)})),...s!==void 0&&!o?[{value:s,label:`use ${JSON.stringify(e)}`,description:s}]:[]];this.list=new a(m,u,l()),this.list.onSelect=()=>this.chooseSelected(),this.list.onCancel=this.close}chooseSelected(){const e=this.input.getValue(),i=this.list.getSelectedItem()?.value??e;if(i==="")return;const s=p(i,this.cwd),o=x(s);if(!o.ok){this.notify(o.reason);return}this.onChoose(s),this.close()}}function O(n,e,t,i,s){const o=new F(n,e,t,i,s);return{component:o,focus:o}}c(O,"buildFileReviewPicker");async function _(n,e,t){if(n.capabilities.remote){t.onNotice("The review is unavailable in a remote attach \u2014 the file and companion live on the host.");return}let i;try{i=await C().createInline({originNodeId:t.originNodeId,file:e})}catch(s){t.onNotice(s instanceof L?k(s):s instanceof Error?s.message:String(s));return}R(n,i)}c(_,"launchFileReview");export{O as buildFileReviewPicker,P as extractFilePaths,_ as launchFileReview};