@openrig/cli 0.5.0 → 0.5.2

package/tui/dist/crash-cart/ledger-explorer.d.ts

@@ -0,0 +1,21 @@
+export interface LedgerExplorerRow {
+    label: string;
+    rigName: string;
+    seatCount: number;
+}
+export interface LedgerExplorer {
+    /** Always true here — this sidebar is fed from the ledger (the crash-cart one-JSON), not the daemon. */
+    ledgerSourced: true;
+    /** The honest marker shown on the sidebar (the founder's ledger-sourced honesty requirement). */
+    note: string;
+    rows: LedgerExplorerRow[];
+}
+/** The per-rig shape the ledger explorer reads — the crash-cart MODEL's foundOnHost (built from the
+ *  SAME one-JSON discovery, so this is not a second read). */
+export interface LedgerRigInput {
+    name: string;
+    seatCount: number;
+}
+/** Build the ledger-fed explorer from the model's rigs (the SAME one-JSON — no second read). */
+export declare function buildLedgerExplorer(foundOnHost: LedgerRigInput[]): LedgerExplorer;
+//# sourceMappingURL=ledger-explorer.d.ts.map

package/tui/dist/crash-cart/ledger-explorer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-explorer.d.ts","sourceRoot":"","sources":["../../src/crash-cart/ledger-explorer.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,wGAAwG;IACxG,aAAa,EAAE,IAAI,CAAC;IACpB,iGAAiG;IACjG,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,iBAAiB,EAAE,CAAC;CAC3B;AAED;8DAC8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,cAAc,CAMjF"}

package/tui/dist/crash-cart/ledger-explorer.js

@@ -0,0 +1,9 @@
+/** Build the ledger-fed explorer from the model's rigs (the SAME one-JSON — no second read). */
+export function buildLedgerExplorer(foundOnHost) {
+    return {
+        ledgerSourced: true,
+        note: "ledger-sourced · daemon down",
+        rows: foundOnHost.map((r) => ({ label: `▦ ${r.name}`, rigName: r.name, seatCount: r.seatCount })),
+    };
+}
+//# sourceMappingURL=ledger-explorer.js.map

package/tui/dist/crash-cart/ledger-explorer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-explorer.js","sourceRoot":"","sources":["../../src/crash-cart/ledger-explorer.ts"],"names":[],"mappings":"AAyBA,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,WAA6B;IAC/D,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,8BAA8B;QACpC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;KAClG,CAAC;AACJ,CAAC"}

package/tui/dist/crash-cart/one-click-gate.d.ts

@@ -0,0 +1,28 @@
+export interface OneClickRigInput {
+    rigName: string;
+    seatCount: number;
+    resumableCount: number;
+}
+/** A rig that is NOT fully resumable — the seats that would be fresh-primed/awaiting-decision. */
+export interface OneClickDelta {
+    rigName: string;
+    seatCount: number;
+    resumableCount: number;
+    nonResumable: number;
+}
+export interface OneClickGate {
+    /** True ⇒ ⏎ RESTORE EVERYTHING is a single keystroke (no confirm). */
+    zeroGeneration: boolean;
+    /** Rigs with non-resumable seats — the confirm screen names exactly these. Empty ⇔ zeroGeneration. */
+    deltas: OneClickDelta[];
+}
+/** The confirm-screen message for a non-zero-generation restore. TRUTHFUL (r2 HIGH-2): the restore
+ *  does NOT auto-fresh-prime — non-resumable seats land in the triage list AWAITING A DECISION
+ *  (fresh-prime or skip). It NAMES the deltas (R7: no silent resume→fresh downgrade) and describes the
+ *  decision that follows; it never promises an action the restore doesn't request. */
+export declare function restoreConfirmMessage(deltas: OneClickDelta[]): string;
+/** Evaluate the one-click gate over the C2 discovery's per-rig resumable/seat counts. */
+export declare function evaluateOneClickGate(discovery: {
+    foundOnHost: OneClickRigInput[];
+}): OneClickGate;
+//# sourceMappingURL=one-click-gate.d.ts.map

package/tui/dist/crash-cart/one-click-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-click-gate.d.ts","sourceRoot":"","sources":["../../src/crash-cart/one-click-gate.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,cAAc,EAAE,OAAO,CAAC;IACxB,sGAAsG;IACtG,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED;;;sFAGsF;AACtF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAGrE;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,SAAS,EAAE;IAAE,WAAW,EAAE,gBAAgB,EAAE,CAAA;CAAE,GAAG,YAAY,CAUjG"}

package/tui/dist/crash-cart/one-click-gate.js

@@ -0,0 +1,25 @@
+// Crash-cart C3 — the one-click gate (founder rule, binding on ⏎). ⏎ is ONE keystroke IFF the restore
+// plan is ZERO GENERATION (every seat resume-original). Daemon-DOWN, we compute the proxy from the C2
+// read: a rig is fully recoverable when resumableCount == seatCount. Any rig with non-resumable seats
+// makes ⏎ lead to a confirm screen naming those deltas — never a silent resume→fresh downgrade.
+/** The confirm-screen message for a non-zero-generation restore. TRUTHFUL (r2 HIGH-2): the restore
+ *  does NOT auto-fresh-prime — non-resumable seats land in the triage list AWAITING A DECISION
+ *  (fresh-prime or skip). It NAMES the deltas (R7: no silent resume→fresh downgrade) and describes the
+ *  decision that follows; it never promises an action the restore doesn't request. */
+export function restoreConfirmMessage(deltas) {
+    const names = deltas.map((d) => `${d.rigName} (${d.nonResumable}/${d.seatCount})`).join(", ");
+    return `⏎ RESTORE: ${names} have seats that can't resume — they'll need a decision (fresh-prime or skip) in the triage list. Press ⏎ to proceed, Esc to cancel.`;
+}
+/** Evaluate the one-click gate over the C2 discovery's per-rig resumable/seat counts. */
+export function evaluateOneClickGate(discovery) {
+    const deltas = discovery.foundOnHost
+        .filter((r) => r.resumableCount < r.seatCount)
+        .map((r) => ({
+        rigName: r.rigName,
+        seatCount: r.seatCount,
+        resumableCount: r.resumableCount,
+        nonResumable: r.seatCount - r.resumableCount,
+    }));
+    return { zeroGeneration: deltas.length === 0, deltas };
+}
+//# sourceMappingURL=one-click-gate.js.map

package/tui/dist/crash-cart/one-click-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-click-gate.js","sourceRoot":"","sources":["../../src/crash-cart/one-click-gate.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,sGAAsG;AACtG,sGAAsG;AACtG,gGAAgG;AAuBhG;;;sFAGsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,MAAuB;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9F,OAAO,cAAc,KAAK,sIAAsI,CAAC;AACnK,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,SAA8C;IACjF,MAAM,MAAM,GAAoB,SAAS,CAAC,WAAW;SAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,SAAS,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,YAAY,EAAE,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,cAAc;KAC7C,CAAC,CAAC,CAAC;IACN,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AACzD,CAAC"}

package/tui/dist/crash-cart/render-crash-cart.d.ts

@@ -0,0 +1,48 @@
+import type { Token } from "../theme.js";
+import type { CrashCartModel } from "./crash-cart-model.js";
+import type { DaemonUnverifiedEvidence } from "./contract.js";
+import type { RestoreLifecycleVM } from "./restore-lifecycle.js";
+interface Seg {
+    text: string;
+    token?: Token;
+    bold?: boolean;
+    bg?: Token;
+    inverse?: boolean;
+}
+interface Line {
+    text: string;
+    segs?: Seg[];
+    selected?: boolean;
+}
+/** The daemon-down header: `◌ daemon not running` (warn) + the dim status tail. The uptime + reason
+ *  slots render EXPLICIT honest-unknown text (PM ruling) — structure/ordering per the mock. */
+export declare function renderCrashCartHeader(model: CrashCartModel): Line;
+/** `FOUND ON THIS HOST` + one row per rig: `▦ <name>  <n> seats · last active <t> · <r> sessions resumable`.
+ *  Name column is padded to the widest name + a 4-space gap so the details align (the mock's fixed columns). */
+export declare function renderFoundOnHost(model: CrashCartModel): Line[];
+/** `WHERE WORK STOPPED (from the durable ledgers)` + one `◌ <session> — qitem in-progress: "<summary>" (<t>)`
+ *  per in-progress item, then always the `✓ everything else idle-clean at stop` closing line. */
+export declare function renderWhereWorkStopped(model: CrashCartModel): Line[];
+/** The actions block: the highlighted primary `⏎ RESTORE EVERYTHING …` row + the secondary key row. */
+export declare function renderActions(): Line[];
+/** First-run framing (DOWN + no DB): a fresh host, NOT a crash — onboarding, never a crash header or
+ *  a RESTORE-of-nothing (PM ruling: crash language requires evidence of prior life). */
+export declare function renderFirstRunView(): Line[];
+/** The whole crash-cart cockpit view: recovery = header → FOUND ON THIS HOST → WHERE WORK STOPPED →
+ *  actions (mock-verbatim ordering); first-run = onboarding framing. */
+export declare function renderCrashCartView(model: CrashCartModel): Line[];
+/** The RESTORE LIFECYCLE view (B1 ROUND 2). While running: a live header + a per-rig progress list
+ *  updated from each poll (the rollup stream) + the cancel affordance. When done: the verdict + counts
+ *  and the SHIPPED keyboard-walkable triage list (renderTriage) — each seat/rig on its own row with its
+ *  EXACT need, NOT a width-clipped one-line footer summary. */
+export declare function renderRestoreLifecycleView(vm: RestoreLifecycleVM): Line[];
+/** B1 ROUND 10 — the ⏎ confirm banner, rendered at the TOP of the cockpit so the operator SEES the
+ *  confirmation where they look. The first ⏎ used to be invisible because the confirm went to
+ *  ViewState.notice, which the daemon-down cockpit does not render. The message already names the deltas
+ *  and the ⏎-proceed / Esc-cancel affordance. */
+export declare function renderConfirmBanner(message: string): Line[];
+/** The UNVERIFIED screen (planner+PM ruling): a minimal DISTINCT view — evidence VERBATIM + retry +
+ *  quit + the rig-status hint, and ZERO recovery actions (never the cockpit, never RESTORE). */
+export declare function renderUnverifiedView(evidence: DaemonUnverifiedEvidence): Line[];
+export {};
+//# sourceMappingURL=render-crash-cart.d.ts.map

package/tui/dist/crash-cart/render-crash-cart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-crash-cart.d.ts","sourceRoot":"","sources":["../../src/crash-cart/render-crash-cart.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,UAAU,GAAG;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,EAAE,CAAC,EAAE,KAAK,CAAC;IACX,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AACD,UAAU,IAAI;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAOD;+FAC+F;AAC/F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CASjE;AAED;gHACgH;AAChH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,EAAE,CAkB/D;AAED;iGACiG;AACjG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,EAAE,CAkBpE;AAED,uGAAuG;AACvG,wBAAgB,aAAa,IAAI,IAAI,EAAE,CAgBtC;AAED;wFACwF;AACxF,wBAAgB,kBAAkB,IAAI,IAAI,EAAE,CAY3C;AAED;wEACwE;AACxE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,EAAE,CAWjE;AA8BD;;;+DAG+D;AAC/D,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,kBAAkB,GAAG,IAAI,EAAE,CA2EzE;AAED;;;iDAGiD;AACjD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,CAM3D;AAED;gGACgG;AAChG,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,EAAE,CAa/E"}

package/tui/dist/crash-cart/render-crash-cart.js

@@ -0,0 +1,233 @@
+import { renderTriage } from "./triage.js";
+/** Build a Line whose plain `text` is the concat of its segs (capture/width truth). */
+function line(segs, opts) {
+    return { text: segs.map((s) => s.text).join(""), segs, ...(opts?.selected ? { selected: true } : {}) };
+}
+/** The daemon-down header: `◌ daemon not running` (warn) + the dim status tail. The uptime + reason
+ *  slots render EXPLICIT honest-unknown text (PM ruling) — structure/ordering per the mock. */
+export function renderCrashCartHeader(model) {
+    const h = model.header;
+    return line([
+        { text: "◌ daemon not running", token: "warn" },
+        {
+            text: ` — last seen ${h.lastSeen} (uptime ${h.uptimeText}) · reason: ${h.reasonText}`,
+            token: "dim",
+        },
+    ]);
+}
+/** `FOUND ON THIS HOST` + one row per rig: `▦ <name>  <n> seats · last active <t> · <r> sessions resumable`.
+ *  Name column is padded to the widest name + a 4-space gap so the details align (the mock's fixed columns). */
+export function renderFoundOnHost(model) {
+    const out = [line([{ text: "FOUND ON THIS HOST", token: "dim" }])];
+    const nameCol = Math.max(0, ...model.foundOnHost.map((r) => r.name.length)) + 4;
+    for (const r of model.foundOnHost) {
+        const pad = " ".repeat(Math.max(0, nameCol - r.name.length));
+        out.push(line([
+            { text: " ▦ " },
+            { text: r.name, token: "bright", bold: true },
+            { text: pad },
+            {
+                text: `${r.seatCount} seats · last active ${r.lastActive} · ${r.resumableCount} sessions resumable`,
+                token: "dim",
+            },
+        ]));
+    }
+    return out;
+}
+/** `WHERE WORK STOPPED (from the durable ledgers)` + one `◌ <session> — qitem in-progress: "<summary>" (<t>)`
+ *  per in-progress item, then always the `✓ everything else idle-clean at stop` closing line. */
+export function renderWhereWorkStopped(model) {
+    const out = [
+        line([
+            { text: "WHERE WORK STOPPED", token: "dim" },
+            { text: " (from the durable ledgers)", token: "dim" },
+        ]),
+    ];
+    for (const w of model.whereWorkStopped) {
+        out.push(line([
+            { text: " ◌ ", token: "warn" },
+            { text: w.session },
+            { text: ` — qitem in-progress: "${w.summary}" (${w.time})`, token: "dim" },
+        ]));
+    }
+    out.push(line([{ text: " ✓ ", token: "ok" }, { text: "everything else idle-clean at stop" }]));
+    return out;
+}
+/** The actions block: the highlighted primary `⏎ RESTORE EVERYTHING …` row + the secondary key row. */
+export function renderActions() {
+    return [
+        line([
+            {
+                text: " ⏎ RESTORE EVERYTHING — daemon + kernel + all rigs, sessions resumed in their seats ",
+                bg: "accent",
+            },
+        ], { selected: true }),
+        line([
+            { text: "  s start daemon only  ·  i inspect a rig  ·  n new here? onboarding" },
+            { text: " (policy menu lives here now)", token: "dim" },
+        ]),
+    ];
+}
+/** First-run framing (DOWN + no DB): a fresh host, NOT a crash — onboarding, never a crash header or
+ *  a RESTORE-of-nothing (PM ruling: crash language requires evidence of prior life). */
+export function renderFirstRunView() {
+    return [
+        line([
+            { text: "◌ no daemon running", token: "warn" },
+            { text: " — no rigs found on this host yet (a fresh host)", token: "dim" },
+        ]),
+        { text: "" },
+        line([{ text: "Nothing to restore — this looks like a first run.", token: "dim" }]),
+        { text: "" },
+        line([{ text: " ⏎ n new here? onboarding (policy menu lives here now) ", bg: "accent" }], { selected: true }),
+        line([{ text: "  s start daemon only" }]),
+    ];
+}
+/** The whole crash-cart cockpit view: recovery = header → FOUND ON THIS HOST → WHERE WORK STOPPED →
+ *  actions (mock-verbatim ordering); first-run = onboarding framing. */
+export function renderCrashCartView(model) {
+    if (model.mode === "first-run")
+        return renderFirstRunView();
+    return [
+        renderCrashCartHeader(model),
+        { text: "" },
+        ...renderFoundOnHost(model),
+        { text: "" },
+        ...renderWhereWorkStopped(model),
+        { text: "" },
+        ...renderActions(),
+    ];
+}
+/** Glyph + token for the DONE header by the DERIVED fleet verdict — the conclusion must match the
+ *  truth: only an all-restored fleet wears the success ✓; all_failed is ✗; none_attempted / mixed carry
+ *  a warning, never a success glyph (BLOCKER 2 — the rollup was truthful, the header was not). */
+function verdictGlyph(verdict) {
+    switch (verdict) {
+        case "all_fully_restored":
+            return { glyph: "✓", token: "ok" };
+        case "all_failed":
+            return { glyph: "✗", token: "error" };
+        default:
+            return { glyph: "⚠", token: "warn" }; // none_attempted / mixed / partially — not a success
+    }
+}
+/** Glyph for a per-rig progress row by its rollup outcome. */
+function outcomeGlyph(outcome) {
+    switch (outcome) {
+        case "fully_restored":
+            return { glyph: "✓", token: "ok" };
+        case "partially_restored":
+            return { glyph: "◑", token: "warn" };
+        case "failed":
+            return { glyph: "✗", token: "error" };
+        default:
+            return { glyph: "◌", token: "dim" }; // not_attempted
+    }
+}
+/** The RESTORE LIFECYCLE view (B1 ROUND 2). While running: a live header + a per-rig progress list
+ *  updated from each poll (the rollup stream) + the cancel affordance. When done: the verdict + counts
+ *  and the SHIPPED keyboard-walkable triage list (renderTriage) — each seat/rig on its own row with its
+ *  EXACT need, NOT a width-clipped one-line footer summary. */
+export function renderRestoreLifecycleView(vm) {
+    const c = vm.counts;
+    const total = c.fully_restored + c.partially_restored + c.failed + c.not_attempted;
+    const countsSeg = {
+        text: `${c.fully_restored} restored · ${c.partially_restored} partial · ${c.failed} failed · ${c.not_attempted} not attempted`,
+        token: "dim",
+    };
+    if (vm.phase === "running") {
+        const out = [
+            line([
+                { text: "⟳ RESTORING FLEET", token: "bright", bold: true },
+                { text: `  — ${total} of the fleet done so far`, token: "dim" },
+            ]),
+            line([countsSeg]),
+        ];
+        // HIGH-1 — an ACCEPTED cancel is honestly rendered: the state SAYS cancellation was requested and
+        // the current rig will finish, and it no longer offers the initial `c cancel` affordance.
+        if (vm.cancelled)
+            out.push(line([{ text: "⚠ cancellation requested — the current rig will finish, then stop", token: "warn" }]));
+        out.push({ text: "" });
+        for (const p of vm.progress) {
+            const g = outcomeGlyph(p.outcome);
+            out.push(line([{ text: ` ${g.glyph} `, token: g.token }, { text: p.rigId, token: "bright" }, { text: `  ${p.outcome}`, token: "dim" }]));
+        }
+        out.push({ text: "" });
+        out.push(vm.cancelled
+            ? line([{ text: "  cancellation accepted — waiting for the current rig; the restore stops before the next", token: "dim" }])
+            : line([{ text: "  c cancel (stop-before-next-rig)  ·  restore continues per rig", token: "dim" }]));
+        return out;
+    }
+    if (vm.phase === "detached") {
+        // The live view paused past its window (poll ceiling, or a sustained poll-error streak) — the
+        // restore is CONTINUING on the daemon, not stopped. An explicit, OPERABLE state: reattach resumes
+        // the live view, cancel stops-before-next-rig by the retained id (both observable via the resumed poll).
+        const out = [
+            line([
+                { text: "⚠ RESTORE STILL RUNNING ON THE DAEMON", token: "warn", bold: true },
+                { text: `  — attempt ${vm.attemptId}`, token: "dim" },
+            ]),
+            line([{ text: "the live view paused past its window; the restore is CONTINUING on the daemon, not stopped.", token: "dim" }]),
+            line([countsSeg]),
+        ];
+        // HIGH-1 — if cancel was already requested, say so and drop the `c cancel` offer; reattach confirms it.
+        if (vm.cancelled)
+            out.push(line([{ text: "⚠ cancellation requested — reattach to confirm it lands on the daemon", token: "warn" }]));
+        out.push({ text: "" });
+        for (const p of vm.progress) {
+            const g = outcomeGlyph(p.outcome);
+            out.push(line([{ text: ` ${g.glyph} `, token: g.token }, { text: p.rigId, token: "bright" }, { text: `  ${p.outcome}`, token: "dim" }]));
+        }
+        out.push({ text: "" });
+        out.push(vm.cancelled
+            ? line([{ text: "  r reattach (confirm the cancellation)  ·  any key dismiss", token: "dim" }])
+            : line([{ text: "  r reattach (resume the live view)  ·  c cancel (stop-before-next-rig)  ·  any key dismiss", token: "dim" }]));
+        return out;
+    }
+    // done
+    const vg = verdictGlyph(vm.verdict);
+    const out = [
+        line([
+            { text: `${vg.glyph} FLEET RESTORE: ${vm.verdict}`, token: vg.token, bold: true },
+            ...(vm.cancelled ? [{ text: " (cancelled)", token: "warn" }] : []),
+        ]),
+        line([countsSeg]),
+        { text: "" },
+        // The shipped triage renderer — one keyboard-walkable row per need (seat + exact remediation),
+        // or the all-clean line. This is the surface the door test asserts.
+        ...renderTriage(vm.triage),
+    ];
+    return out;
+}
+/** B1 ROUND 10 — the ⏎ confirm banner, rendered at the TOP of the cockpit so the operator SEES the
+ *  confirmation where they look. The first ⏎ used to be invisible because the confirm went to
+ *  ViewState.notice, which the daemon-down cockpit does not render. The message already names the deltas
+ *  and the ⏎-proceed / Esc-cancel affordance. */
+export function renderConfirmBanner(message) {
+    return [
+        line([{ text: "⚠ CONFIRM RESTORE", token: "warn", bold: true }]),
+        line([{ text: message, token: "bright" }]),
+        { text: "" },
+    ];
+}
+/** The UNVERIFIED screen (planner+PM ruling): a minimal DISTINCT view — evidence VERBATIM + retry +
+ *  quit + the rig-status hint, and ZERO recovery actions (never the cockpit, never RESTORE). */
+export function renderUnverifiedView(evidence) {
+    return [
+        line([
+            { text: "◌ cannot verify the daemon", token: "warn" },
+            { text: " — may be busy/wedged, not confirmed down", token: "dim" },
+        ]),
+        { text: "" },
+        line([{ text: " pid:    ", token: "dim" }, { text: evidence.pidState }]),
+        line([{ text: " probe:  ", token: "dim" }, { text: evidence.probeResult }]),
+        line([{ text: " signal: ", token: "dim" }, { text: evidence.failedSignal }]),
+        { text: "" },
+        line([{ text: "  r retry  ·  q quit  ·  try: rig status", token: "dim" }]),
+    ];
+}
+// The full-width Screen wrappers (renderCrashCartScreen/renderUnverifiedScreen/linesToScreen) were
+// REMOVED in the shell-placement rework (ruling 3c6c2be0): the cockpit now renders as a content-pane
+// view inside the standard shell (render.ts crashCartShell), so the content builders above produce
+// Line[] and the shell owns the Screen. The full-width stylize branch that only they used is gone too.
+//# sourceMappingURL=render-crash-cart.js.map

package/tui/dist/crash-cart/render-crash-cart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-crash-cart.js","sourceRoot":"","sources":["../../src/crash-cart/render-crash-cart.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAe3C,uFAAuF;AACvF,SAAS,IAAI,CAAC,IAAW,EAAE,IAA6B;IACtD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzG,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,qBAAqB,CAAC,KAAqB;IACzD,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,OAAO,IAAI,CAAC;QACV,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE;QAC/C;YACE,IAAI,EAAE,gBAAgB,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,UAAU,eAAe,CAAC,CAAC,UAAU,EAAE;YACrF,KAAK,EAAE,KAAK;SACb;KACF,CAAC,CAAC;AACL,CAAC;AAED;gHACgH;AAChH,MAAM,UAAU,iBAAiB,CAAC,KAAqB;IACrD,MAAM,GAAG,GAAW,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CACN,IAAI,CAAC;YACH,EAAE,IAAI,EAAE,KAAK,EAAE;YACf,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;YAC7C,EAAE,IAAI,EAAE,GAAG,EAAE;YACb;gBACE,IAAI,EAAE,GAAG,CAAC,CAAC,SAAS,wBAAwB,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,cAAc,qBAAqB;gBACnG,KAAK,EAAE,KAAK;aACb;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;iGACiG;AACjG,MAAM,UAAU,sBAAsB,CAAC,KAAqB;IAC1D,MAAM,GAAG,GAAW;QAClB,IAAI,CAAC;YACH,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE;YAC5C,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,KAAK,EAAE;SACtD,CAAC;KACH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CACN,IAAI,CAAC;YACH,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE;YAC9B,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;YACnB,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE;SAC3E,CAAC,CACH,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,IAAI,CACF;YACE;gBACE,IAAI,EAAE,sFAAsF;gBAC5F,EAAE,EAAE,QAAQ;aACb;SACF,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB;QACD,IAAI,CAAC;YACH,EAAE,IAAI,EAAE,sEAAsE,EAAE;YAChF,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,KAAK,EAAE;SACxD,CAAC;KACH,CAAC;AACJ,CAAC;AAED;wFACwF;AACxF,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,IAAI,CAAC;YACH,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE;YAC9C,EAAE,IAAI,EAAE,kDAAkD,EAAE,KAAK,EAAE,KAAK,EAAE;SAC3E,CAAC;QACF,EAAE,IAAI,EAAE,EAAE,EAAE;QACZ,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,mDAAmD,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,EAAE,IAAI,EAAE,EAAE,EAAE;QACZ,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,yDAAyD,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC7G,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,KAAqB;IACvD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,kBAAkB,EAAE,CAAC;IAC5D,OAAO;QACL,qBAAqB,CAAC,KAAK,CAAC;QAC5B,EAAE,IAAI,EAAE,EAAE,EAAE;QACZ,GAAG,iBAAiB,CAAC,KAAK,CAAC;QAC3B,EAAE,IAAI,EAAE,EAAE,EAAE;QACZ,GAAG,sBAAsB,CAAC,KAAK,CAAC;QAChC,EAAE,IAAI,EAAE,EAAE,EAAE;QACZ,GAAG,aAAa,EAAE;KACnB,CAAC;AACJ,CAAC;AAED;;kGAEkG;AAClG,SAAS,YAAY,CAAC,OAAe;IACnC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,oBAAoB;YACvB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACrC,KAAK,YAAY;YACf,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACxC;YACE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,qDAAqD;IAC/F,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,SAAS,YAAY,CAAC,OAAe;IACnC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,gBAAgB;YACnB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACrC,KAAK,oBAAoB;YACvB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACvC,KAAK,QAAQ;YACX,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACxC;YACE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,gBAAgB;IACzD,CAAC;AACH,CAAC;AAED;;;+DAG+D;AAC/D,MAAM,UAAU,0BAA0B,CAAC,EAAsB;IAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,aAAa,CAAC;IACnF,MAAM,SAAS,GAAQ;QACrB,IAAI,EAAE,GAAG,CAAC,CAAC,cAAc,eAAe,CAAC,CAAC,kBAAkB,cAAc,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,aAAa,gBAAgB;QAC9H,KAAK,EAAE,KAAK;KACb,CAAC;IAEF,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAW;YAClB,IAAI,CAAC;gBACH,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC1D,EAAE,IAAI,EAAE,OAAO,KAAK,2BAA2B,EAAE,KAAK,EAAE,KAAK,EAAE;aAChE,CAAC;YACF,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;SAClB,CAAC;QACF,kGAAkG;QAClG,0FAA0F;QAC1F,IAAI,EAAE,CAAC,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,mEAAmE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACjI,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3I,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,GAAG,CAAC,IAAI,CACN,EAAE,CAAC,SAAS;YACV,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,0FAA0F,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5H,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,iEAAiE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CACtG,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,EAAE,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAC5B,8FAA8F;QAC9F,kGAAkG;QAClG,yGAAyG;QACzG,MAAM,GAAG,GAAW;YAClB,IAAI,CAAC;gBACH,EAAE,IAAI,EAAE,uCAAuC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC5E,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;aACtD,CAAC;YACF,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,6FAA6F,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7H,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;SAClB,CAAC;QACF,wGAAwG;QACxG,IAAI,EAAE,CAAC,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,uEAAuE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACrI,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3I,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,GAAG,CAAC,IAAI,CACN,EAAE,CAAC,SAAS;YACV,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,6DAA6D,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/F,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,6FAA6F,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAClI,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO;IACP,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,GAAG,GAAW;QAClB,IAAI,CAAC;YACH,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,mBAAmB,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;YACjF,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;QACF,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;QACjB,EAAE,IAAI,EAAE,EAAE,EAAE;QACZ,+FAA+F;QAC/F,oEAAoE;QACpE,GAAG,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC;KAC3B,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;iDAGiD;AACjD,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO;QACL,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1C,EAAE,IAAI,EAAE,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED;gGACgG;AAChG,MAAM,UAAU,oBAAoB,CAAC,QAAkC;IACrE,OAAO;QACL,IAAI,CAAC;YACH,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,MAAM,EAAE;YACrD,EAAE,IAAI,EAAE,2CAA2C,EAAE,KAAK,EAAE,KAAK,EAAE;SACpE,CAAC;QACF,EAAE,IAAI,EAAE,EAAE,EAAE;QACZ,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5E,EAAE,IAAI,EAAE,EAAE,EAAE;QACZ,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,0CAA0C,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,qGAAqG;AACrG,mGAAmG;AACnG,uGAAuG"}

package/tui/dist/crash-cart/restore-input.d.ts

@@ -0,0 +1,32 @@
+export interface RestoreInputEvent {
+    type: string;
+    ch?: string;
+    key?: string;
+}
+export interface RestoreInputContext {
+    phase: "running" | "detached" | "done";
+    cancelled: boolean;
+    offset: number;
+    maxOffset: number;
+}
+export type RestoreAction = {
+    kind: "quit";
+} | {
+    kind: "scroll";
+    offset: number;
+} | {
+    kind: "cancel";
+} | {
+    kind: "reattach";
+} | {
+    kind: "cancel-reattach";
+} | {
+    kind: "dismiss";
+} | {
+    kind: "none";
+};
+/** Resolve one key in a restore phase to an action. Order: quit, then scroll (advertised in EVERY phase
+ *  when the content overflows — so it must ACT in every phase), then the phase-specific lifecycle keys.
+ *  A cancel already requested is NOT re-offered (the render drops `c cancel` once `cancelled`). */
+export declare function restoreKeyAction(ev: RestoreInputEvent, ctx: RestoreInputContext): RestoreAction;
+//# sourceMappingURL=restore-input.d.ts.map

package/tui/dist/crash-cart/restore-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-input.d.ts","sourceRoot":"","sources":["../../src/crash-cart/restore-input.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB;;mGAEmG;AACnG,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,mBAAmB,GAAG,aAAa,CA0B/F"}

package/tui/dist/crash-cart/restore-input.js

@@ -0,0 +1,37 @@
+// B1 ROUND 4 — the restore view's key handling as a PURE reducer, so the operator affordances the
+// screen advertises can be driven and asserted (r1: drive the test matrix from what the UI ADVERTISES,
+// not from the handlers — an advertised-but-unwired key has no handler to enumerate from). main.ts is a
+// thin executor over this reducer. The rule this closes: every affordance the screen offers in a state
+// MUST act in that state, and the screen must never offer one the state cannot honour.
+import { scrollKeyOf, nextScrollOffset } from "./restore-scroll.js";
+/** Resolve one key in a restore phase to an action. Order: quit, then scroll (advertised in EVERY phase
+ *  when the content overflows — so it must ACT in every phase), then the phase-specific lifecycle keys.
+ *  A cancel already requested is NOT re-offered (the render drops `c cancel` once `cancelled`). */
+export function restoreKeyAction(ev, ctx) {
+    if (ev.type === "char" && ev.ch === "q")
+        return { kind: "quit" };
+    const sk = scrollKeyOf(ev);
+    if (sk) {
+        const next = nextScrollOffset(sk, ctx.offset, ctx.maxOffset);
+        return next === null ? { kind: "none" } : { kind: "scroll", offset: next };
+    }
+    if (ctx.phase === "running") {
+        // c cancels only while it is actually offerable (not already requested); other keys are swallowed
+        // (the fleet is restoring — no accidental dismissal).
+        if (ev.type === "char" && ev.ch === "c" && !ctx.cancelled)
+            return { kind: "cancel" };
+        return { kind: "none" };
+    }
+    if (ctx.phase === "detached") {
+        if (ev.type === "char" && ev.ch === "r")
+            return { kind: "reattach" };
+        // c: if not yet requested, cancel + reattach (observable); if already requested, the render no
+        // longer offers `c cancel`, so c just reattaches to confirm.
+        if (ev.type === "char" && ev.ch === "c")
+            return ctx.cancelled ? { kind: "reattach" } : { kind: "cancel-reattach" };
+        return { kind: "dismiss" };
+    }
+    // done: the triage list is scrollable (handled above); any other key dismisses.
+    return { kind: "dismiss" };
+}
+//# sourceMappingURL=restore-input.js.map

package/tui/dist/crash-cart/restore-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-input.js","sourceRoot":"","sources":["../../src/crash-cart/restore-input.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,uGAAuG;AACvG,wGAAwG;AACxG,uGAAuG;AACvG,uFAAuF;AACvF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAwBpE;;mGAEmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,EAAqB,EAAE,GAAwB;IAC9E,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,EAAE,CAAC,EAAE,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEjE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7D,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5B,kGAAkG;QAClG,sDAAsD;QACtD,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,EAAE,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACrF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,EAAE,CAAC,EAAE,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACrE,+FAA+F;QAC/F,6DAA6D;QAC7D,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,EAAE,CAAC,EAAE,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QACnH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,gFAAgF;IAChF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC"}

package/tui/dist/crash-cart/restore-lifecycle.d.ts

@@ -0,0 +1,66 @@
+import type { RestoreFleetStatus } from "../daemon-client.js";
+import type { TriageRow } from "./triage.js";
+/** The daemon surface the lifecycle needs — a structural subset of DaemonClient (injectable for tests). */
+export interface RestoreLifecycleClient {
+    restoreFleet(): Promise<{
+        fleetAttemptId: string;
+    }>;
+    restoreFleetStatus(id: string): Promise<RestoreFleetStatus>;
+    cancelRestoreFleet(id: string): Promise<unknown>;
+}
+/** One rendered frame of the lifecycle — a poll's status plus the retained attempt id + phase.
+ *  `detached` = the driver stopped polling (poll ceiling reached, or repeated poll errors) while the
+ *  restore is STILL running on the daemon — an explicit, operable state (reattach / cancel by id), NEVER
+ *  a frozen `running` screen with a dead cancel key. */
+export interface RestoreFrame extends RestoreFleetStatus {
+    attemptId: string;
+    phase: "running" | "done" | "detached";
+}
+/** Per-rig progress row for the running view (one per rig in the rollup sequence so far). */
+export interface RestoreProgressRow {
+    rigId: string;
+    outcome: string;
+}
+/** The render model for the restore lifecycle surface — progress while running, rollup + the
+ *  keyboard-walkable triage list when done. Built purely from a frame so the render stays testable. */
+export interface RestoreLifecycleVM {
+    phase: "running" | "done" | "detached";
+    cancelled: boolean;
+    verdict: string;
+    counts: RestoreFleetStatus["rollup"]["counts"];
+    progress: RestoreProgressRow[];
+    /** The triage list (attention seats + not_attempted rigs) as shipped TriageRow[] — fed to renderTriage. */
+    triage: TriageRow[];
+    /** The retained attempt id — the detached view needs it for the reattach / direct-cancel affordances. */
+    attemptId: string;
+}
+/** Adapt a lifecycle frame into the render VM. The triage list is the UNION of two honest sources,
+ *  each carrying its EXACT need on its own row (never a clipped one-line summary): the per-seat
+ *  attention rows (Claude picker / Codex auth / awaiting-decision), red; and the not_attempted rigs
+ *  that carry a remediation (no usable snapshot / cancelled), yellow (a caveat, not a failed seat). */
+export declare function buildRestoreLifecycleVM(frame: RestoreFrame): RestoreLifecycleVM;
+export interface RestoreLifecycleDeps {
+    client: RestoreLifecycleClient;
+    /** Called with EVERY poll (running + detached frames included) — the progress stream the TUI renders. */
+    onFrame: (frame: RestoreFrame) => void;
+    /** Polled each tick; when true, the driver POSTs cancel once (stop-before-next-rig). */
+    isCancelRequested: () => boolean;
+    /** Reattach to an EXISTING attempt (skip the kick) — the detached view's `r` re-enters the loop. */
+    attemptId?: string;
+    /** Injected in tests (no real delay); production uses setTimeout. */
+    sleep?: (ms: number) => Promise<void>;
+    pollIntervalMs?: number;
+    maxPolls?: number;
+    /** Consecutive poll ERRORS tolerated before detaching (a transient blip must NOT kill the driver). */
+    maxConsecutiveErrors?: number;
+}
+/** Drive one fleet restore from the TUI: kick (or reattach), retain the attempt id, poll emitting a
+ *  frame each time (mid-run observable), request cancel when the operator asks, resolve on done. Two
+ *  guarantees the operator lifecycle depends on:
+ *   - a TRANSIENT poll error never ends the lifecycle — it is tolerated and retried; only
+ *     `maxConsecutiveErrors` in a row (a genuinely unreachable daemon) DETACHES.
+ *   - reaching the poll ceiling DETACHES (phase "detached"), it does NOT return a frozen "running"
+ *     frame — so the caller never renders a live-looking screen whose cancel key is dead. A detached
+ *     frame is an explicit, operable state: the caller reattaches or cancels by the retained id. */
+export declare function driveRestoreLifecycle(deps: RestoreLifecycleDeps): Promise<RestoreFrame>;
+//# sourceMappingURL=restore-lifecycle.d.ts.map

package/tui/dist/crash-cart/restore-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-lifecycle.d.ts","sourceRoot":"","sources":["../../src/crash-cart/restore-lifecycle.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,2GAA2G;AAC3G,MAAM,WAAW,sBAAsB;IACrC,YAAY,IAAI,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC5D,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClD;AAED;;;wDAGwD;AACxD,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;CACxC;AAED,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;uGACuG;AACvG,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/C,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,2GAA2G;IAC3G,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,yGAAyG;IACzG,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;uGAGuG;AACvG,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,YAAY,GAAG,kBAAkB,CA4B/E;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,yGAAyG;IACzG,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IACvC,wFAAwF;IACxF,iBAAiB,EAAE,MAAM,OAAO,CAAC;IACjC,oGAAoG;IACpG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;oGAOoG;AACpG,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,YAAY,CAAC,CAkD7F"}