@pugi/cli 0.1.0-beta.8 → 0.1.0-beta.88

package/dist/tui/repl-splash-mascot.js

@@ -1,14 +1,14 @@
 /**
- * Chafa-validated brand-pug ANSI loader (α6.14.4 wave 6, mascot regen).
+ * Chafa-validated brand-pug ANSI loader .
  *
- * CEO dogfood 2026-05-25 (first pass, α6.14.2 wave 5): the hand-crafted
+ * CEO dogfood (first pass, wave 5): the hand-crafted
  * 9-row ASCII pug in `repl-splash-art.ts` reads as "точно не похожа" —
  * too abstract to carry the brand at boot. This module loads a pre-baked
  * truecolor ANSI render of the canonical hero-pug PNG (cyber-zoo pug
  * face with cyan eyes + circuit + chip) so the splash matches the brand
  * glyph the operator already sees on pugi.io.
  *
- * CEO dogfood 2026-05-25 (α6.14.4): the first chafa bake at 32x16 still
+ * CEO dogfood : the first chafa bake at 32x16 still
  * read as "monitor on stand", not pug — too few rows to resolve the
  * snout / eyes / wrinkles. The vertical resolution was the bottleneck:
  * 16 char rows ≈ 16 pixel rows with the block symbol set. The fresh
@@ -21,9 +21,9 @@
  * gates at 100KB so we stay well under cap.
  *
  * Generation (operator-side, one-shot):
- *   chafa --size 80x40 --symbols=vhalf --colors=full \
- *     apps/clawhost-web/public/brand/hero-pug.png \
- *     > apps/pugi-cli/assets/pugi-mascot.ansi
+ *  chafa --size 80x40 --symbols=vhalf --colors=full \
+ *    apps/console-web/public/brand/hero-pug.png \
+ *    > apps/pugi-cli/assets/pugi-mascot.ansi
  *
  * The output is committed verbatim to the repo and shipped inside the
  * `@pugi/cli` npm tarball under `assets/pugi-mascot.ansi` (the
@@ -33,7 +33,7 @@
  * corruption, dev cwd drift), the splash falls back to the hand-crafted
  * `PUG_MASCOT` art so the boot never crashes.
  *
- * The pre-Ink write convention mirrors the Claude Code Chrome plugin
+ * The pre-Ink write convention mirrors the the upstream tool Chrome plugin
  * splash pattern: raw bytes go to `process.stdout` BEFORE the Ink
  * render mount, so the terminal interprets the truecolor escapes
  * directly instead of Ink trying to layout-engine over them.
@@ -48,9 +48,21 @@ import { fileURLToPath } from 'node:url';
  * — two directory hops up from this file. In a local `pnpm dev`
  * checkout the structure is the same (`src/tui/` ⇒ `../../assets/`)
  * because tsx re-resolves the same relative tree.
+ *
+ * CEO P0 #2 — banner mascot bake. The prozr2 portrait is
+ * the canonical brand-pug glyph from `apps/console-web/public/brand/
+ * Pugi-prozr2.png`, baked к а 16x8 vhalf truecolor render. We prefer
+ * the prozr2 bake when it ships alongside the CLI (small — ~900 bytes,
+ * shaped for the compact welcome-banner left column) and fall back к
+ * the legacy 40KB `pugi-mascot.ansi` (hero-pug 80x40) when prozr2 is
+ * missing — preserves the splash-mascot install surface for any
+ * tarball that predates the bake.
  */
 export function pugMascotAssetPath() {
     const here = dirname(fileURLToPath(import.meta.url));
+    const prozr2 = resolvePath(here, '..', '..', 'assets', 'pugi-prozr2-mascot.ansi');
+    if (existsSync(prozr2))
+        return prozr2;
     return resolvePath(here, '..', '..', 'assets', 'pugi-mascot.ansi');
 }
 /**
@@ -83,27 +95,39 @@ export function loadPugMascotAnsi() {
         if (!raw || raw.length === 0)
             return null;
         // 1. Drop OSC sequences. Two terminator forms:
-        //      ESC ] ... BEL          (0x1b 0x5d ... 0x07)
-        //      ESC ] ... ESC \        (0x1b 0x5d ... 0x1b 0x5c, the ST form)
-        //    A truecolor splash never needs OSC (those are for window title,
-        //    icon, clipboard, hyperlinks, color-palette change). Drop them
-        //    so a corrupted asset cannot rename the operator's terminal tab
-        //    or smuggle a hyperlink into the splash region.
-        // 2. Drop CSI ? <mode> [hl] for mouse-tracking and screen-buffer
-        //    switch modes (1000, 1001, 1002, 1003, 1004, 1005, 1006, 1015,
-        //    1049, 47, 1047, 1048). These would either start swallowing
-        //    mouse input or flip the terminal into the alternate screen.
+        //     ESC ] ... BEL         (0x1b 0x5d ... 0x07)
+        //     ESC ] ... ESC \       (0x1b 0x5d ... 0x1b 0x5c, the ST form)
+        //   A truecolor splash never needs OSC (those are for window title,
+        //   icon, clipboard, hyperlinks, color-palette change). Drop them
+        //   so a corrupted asset cannot rename the operator's terminal tab
+        //   or smuggle a hyperlink into the splash region.
+        // 2. Drop ALL CSI ? <numbers and semicolons> [lh] (DEC private-mode
+        //   set / reset). The legitimate chafa output for a splash is
+        //   truecolor SGR (`CSI 38;2;R;G;B m`) plus cursor-positioning —
+        //   no private-mode toggle ever appears там legitimately. A
+        //   permissive deny-all pattern covers every disruptive private
+        //   mode in one regex:
+        //     - cursor visibility (25)
+        //     - alt-screen buffer (47, 1047, 1048, 1049)
+        //     - mouse tracking    (1000, 1001, 1002, 1003, 1004, 1005, 1006, 1015)
+        //     - bracketed paste   (2004)
+        //     - focus reporting   (1004)
+        //     - multi-mode forms  (e.g. `CSI ? 47 ; 1049 h` — legal per
+        //       xterm ctlseqs but missed by the previous single-mode regex)
+        //     - any future private mode a corrupt asset might emit
+        //   Allowlisting the modes the splash needs is impossible because
+        //   the splash needs ZERO of them — chafa renders glyph-by-glyph,
+        //   not via private-mode toggles. A pure deny-all is strictly
+        //   safer than enumerating known-bad modes one-by-one.
         // 3. Drop CSI 6 n (cursor-position report). Would inject a fake
-        //    CPR into the operator's stdin stream.
+        //   CPR into the operator's stdin stream.
         // 4. Drop CSI [23]J / CSI [23]K (full screen / line clear). A
-        //    chafa render uses cursor-positioning per row, not bulk
-        //    erases; bulk clears would wipe whatever the operator already
-        //    had on screen above the splash.
-        // The cursor-hide/show wrappers (CSI ? 25 [lh]) are handled by
-        // the same CSI-?-mode pattern as the mouse / alt-screen modes.
+        //   chafa render uses cursor-positioning per row, not bulk
+        //   erases; bulk clears would wipe whatever the operator already
+        //   had on screen above the splash.
         const stripped = raw
             .replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, '')
-            .replace(/\x1b\[\?(?:25|47|1000|1001|1002|1003|1004|1005|1006|1015|1047|1048|1049)[lh]/g, '')
+            .replace(/\x1b\[\?[0-9;]+[lh]/g, '')
             .replace(/\x1b\[6n/g, '')
             .replace(/\x1b\[[23]?[JK]/g, '');
         if (stripped.trim().length === 0)

package/dist/tui/repl-splash.js

@@ -1,30 +1,30 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
- * REPL boot splash (α6.14 wave 3).
+ * REPL boot splash .
  *
  * Rendered on REPL first paint — before the conversation pane, before
- * any operator input lands. Mirrors the Claude Code / Codex / Gemini
+ * any operator input lands. Mirrors the the upstream tool / Codex / Gemini
  * CLI boot-screen aesthetic while staying Pugi-brand-pure:
  *
- *   [PUG ASCII]   Pugi.io  v0.1.0-alphaN
- *                 Plan:      <plan>
- *                 Model:     <model>
- *                 Tenant:    <customerId>
- *                 Workspace: <basename>
+ *  [PUG ASCII]  Pugi.io v0.1.0-alphaN
+ *                Plan:     <plan>
+ *                Model:    <model>
+ *                Tenant:   <customerId>
+ *                Workspace: <basename>
  *
- *   ─────────────────────────────────────
- *   Tips for getting started:
- *     1. Type a brief, the workforce dispatches
- *     2. /help for slash commands, /web <url> to pull a page
- *     3. /skills install <name> for Anthropic / OpenClaw skills
+ *  ─────────────────────────────────────
+ *  Tips for getting started:
+ *    1. Type a brief, the workforce dispatches
+ *    2. /help for slash commands, /web <url> to pull a page
+ *    3. /skills install <name> for Anthropic / OpenClaw skills
  *
  * The splash auto-dismisses on:
- *   - first operator keystroke (the REPL `<Repl />` host owns this and
- *     calls the `onInteract` callback we expose),
- *   - 10s idle timeout (built-in, configurable via `skipSplash`),
- *   - `--no-splash` CLI flag or PUGI_SKIP_SPLASH=1 env (host gates the
- *     mount entirely; we still respect the `skipSplash` prop as a belt
- *     so a stray render in a test environment produces nothing).
+ *  - first operator keystroke (the REPL `<Repl />` host owns this and
+ *    calls the `onInteract` callback we expose),
+ *  - 10s idle timeout (built-in, configurable via `skipSplash`),
+ *  - `--no-splash` CLI flag or PUGI_SKIP_SPLASH=1 env (host gates the
+ *    mount entirely; we still respect the `skipSplash` prop as a belt
+ *    so a stray render in a test environment produces nothing).
  *
  * Brand voice gate: every visible string here is reviewed against the
  * forbidden list (`journey / explore / delight / magical / friendly /
@@ -61,13 +61,13 @@ export function ReplSplash(props) {
     if (props.skipSplash) {
         return null;
     }
-    // α6.14.2 wave 5: when the host pre-printed the chafa-baked brand-pug
+    // wave 5: when the host pre-printed the chafa-baked brand-pug
     // ANSI render to stdout before Ink mounted, suppress the hand-crafted
     // PUG_MASCOT column here so the operator does not see two stacked
     // pugs. The header card still renders inline so wordmark + status
     // rows stay attached to the splash flow.
     const showHandCraftedMascot = props.mascotPrePrinted !== true;
-    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, paddingY: 1, children: [_jsxs(Box, { flexDirection: "row", children: [showHandCraftedMascot ? _jsx(MascotColumn, {}) : null, _jsxs(Box, { flexDirection: "column", marginLeft: showHandCraftedMascot ? 2 : 0, marginTop: 1, children: [_jsxs(Box, { children: [_jsx(Text, { bold: true, children: "Pugi" }), _jsx(Text, { bold: true, color: "cyan", children: ".io" }), _jsx(Text, { dimColor: true, children: `  v${props.cliVersion}` })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(HeaderRow, { label: "Plan", value: props.plan ?? PLACEHOLDER }), _jsx(HeaderRow, { label: "Model", value: props.model ?? PLACEHOLDER }), _jsx(HeaderRow, { label: "Tenant", value: props.tenant ?? PLACEHOLDER }), _jsx(HeaderRow, { label: "Workspace", value: props.workspaceLabel })] })] })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: '─'.repeat(40) }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { dimColor: true, children: "Tips for getting started:" }), _jsx(TipRow, { index: 1, text: "Type a brief, the workforce dispatches" }), _jsx(TipRow, { index: 2, text: "/help for slash commands, /web <url> to pull a page" }), _jsx(TipRow, { index: 3, text: "/skills install <name> for Anthropic / OpenClaw skills" })] })] }));
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, paddingY: 1, children: [_jsxs(Box, { flexDirection: "row", children: [showHandCraftedMascot ? _jsx(MascotColumn, {}) : null, _jsxs(Box, { flexDirection: "column", marginLeft: showHandCraftedMascot ? 2 : 0, marginTop: 1, children: [_jsxs(Box, { children: [_jsx(Text, { bold: true, children: "Pugi" }), _jsx(Text, { bold: true, color: "#3da9fc", children: ".io" }), _jsx(Text, { dimColor: true, children: ` v${props.cliVersion}` })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(HeaderRow, { label: "Plan", value: props.plan ?? PLACEHOLDER }), _jsx(HeaderRow, { label: "Model", value: props.model ?? PLACEHOLDER }), _jsx(HeaderRow, { label: "Tenant", value: props.tenant ?? PLACEHOLDER }), _jsx(HeaderRow, { label: "Workspace", value: props.workspaceLabel })] })] })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: '─'.repeat(40) }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { dimColor: true, children: "Tips for getting started:" }), _jsx(TipRow, { index: 1, text: "Type a brief, the workforce dispatches" }), _jsx(TipRow, { index: 2, text: "/help for slash commands, /web <url> to pull a page" }), _jsx(TipRow, { index: 3, text: "/skills install <name> for Anthropic / OpenClaw skills" })] })] }));
 }
 /**
  * Renders the multi-line ASCII pug. Each row is split into colored
@@ -105,13 +105,13 @@ function MascotRow({ row, mask, }) {
     if (buffer.length > 0) {
         runs.push({ text: buffer, cyan: bufferCyan });
     }
-    return (_jsx(Text, { children: runs.map((run, runIndex) => run.cyan ? (_jsx(Text, { color: "cyan", children: run.text }, runIndex)) : (_jsx(Text, { color: "gray", children: run.text }, runIndex))) }));
+    return (_jsx(Text, { children: runs.map((run, runIndex) => run.cyan ? (_jsx(Text, { color: "#3da9fc", children: run.text }, runIndex)) : (_jsx(Text, { color: "gray", children: run.text }, runIndex))) }));
 }
 function HeaderRow({ label, value }) {
     const padded = `${label}:`.padEnd(11, ' ');
     return (_jsxs(Text, { children: [_jsx(Text, { dimColor: true, children: padded }), _jsx(Text, { children: value })] }));
 }
 function TipRow({ index, text }) {
-    return (_jsxs(Text, { children: [_jsx(Text, { dimColor: true, children: `  ${index}. ` }), _jsx(Text, { children: text })] }));
+    return (_jsxs(Text, { children: [_jsx(Text, { dimColor: true, children: ` ${index}. ` }), _jsx(Text, { children: text })] }));
 }
 //# sourceMappingURL=repl-splash.js.map

package/dist/tui/repl.js

@@ -1,12 +1,12 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
- * REPL root component - Sprint α5.7 (ADR-0056 PR-PUGI-CLI-REPL-DEFAULT).
+ * REPL root component - Sprint .
  *
  * Three-zone layout:
  *
- *   header   - `Pugi.io · workspace: <name> · v<X> on watch`
- *   main     - conversation pane (top half) + agent tree (bottom half)
- *   footer   - input box + status bar + key hints
+ *  header  - `Pugi.io · workspace: <name> · v<X> on watch`
+ *  main    - conversation pane (top half) + agent tree (bottom half)
+ *  footer  - input box + status bar + key hints
  *
  * The component subscribes to a ReplSession instance for state. It does
  * NOT own the SSE client or the transport - the session module does.
@@ -26,14 +26,17 @@ import { ConversationPane } from './conversation-pane.js';
 import { InputBox } from './input-box.js';
 import { ReplSplash } from './repl-splash.js';
 import { StatusBar } from './status-bar.js';
+import { ThinkingSpinner } from './thinking-spinner.js';
 import { ToolStreamPane } from './tool-stream-pane.js';
 import { UpdateBanner } from './update-banner.js';
+import { WelcomeBanner } from './welcome-banner.js';
 import { collectWorkspaceContext } from './workspace-context.js';
+import { useTheme } from '../core/theme/context.js';
 import { slugForCwd } from '../core/repl/history.js';
 import { SLASH_COMMAND_HELP, SLASH_COMMAND_GROUPS } from '../core/repl/slash-commands.js';
 const TICK_INTERVAL_MS = 200;
 const PULSE_INTERVAL_MS = 700;
-// α6.12: maximum transcript rows the conversation pane renders at once.
+// : maximum transcript rows the conversation pane renders at once.
 // Older rows scroll off the top; full history stays in session state.
 const CONVERSATION_WINDOW = 12;
 export function Repl(props) {
@@ -41,22 +44,28 @@ export function Repl(props) {
     const [overlay, setOverlay] = useState('none');
     const [pulsePhase, setPulsePhase] = useState(0);
     const [tickNow, setTickNow] = useState((props.now ?? Date.now)());
-    // α6.12: operator-driven collapse for the tool stream pane. The CLI
+    // : operator-driven collapse for the tool stream pane. The CLI
     // host can hide the pane entirely via `--no-tool-stream`; this state
     // is the runtime toggle (Ctrl+T) for operators who want the pane on
     // screen but folded to a single row while they read a long reply.
     const [toolStreamCollapsed, setToolStreamCollapsed] = useState(false);
-    // α6.14 wave 3: boot splash visible until first input, first
+    // wave 3: boot splash visible until first input, first
     // `agent.spawned` event, or 10s idle. The host gates the initial
     // visibility on `--no-splash` / PUGI_SKIP_SPLASH via `skipSplash`.
-    // α6.14.6 CEO dogfood 2026-05-25: default splash to HIDDEN at boot
-    // (parity with Claude Code's minimal one-line banner). Operator can
+    // CEO dogfood: default splash to HIDDEN at boot
+    // (parity with the upstream tool's minimal one-line banner). Operator can
     // opt back in via `/splash` slash. The chafa pug pre-print + header
     // line already give the brand cue without the multi-row Plan/Model/
     // Tenant block crowding the top.
     const [splashVisible, setSplashVisible] = useState(false);
     const dismissSplash = useCallback(() => setSplashVisible(false), []);
-    // α6.14 wave 3: workspace context snapshot for the status bar. We
+    // CEO P0 #2 : welcome banner. Visible from boot
+    // until the operator submits the first brief OR the session emits
+    // its first agent event. The host owns dismissal lifecycle (kept
+    // symmetric with the splash) so the welcome card never lingers
+    // behind а live transcript.
+    const [welcomeVisible, setWelcomeVisible] = useState(Boolean(props.welcomeData));
+    // wave 3: workspace context snapshot for the status bar. We
     // read once at mount and freeze; a brand-new PUGI.md or skill is
     // surfaced on the next REPL boot rather than via a watcher.
     const workspaceContext = useMemo(() => props.workspaceContext ?? collectWorkspaceContext(process.cwd()), [props.workspaceContext]);
@@ -88,9 +97,9 @@ export function Repl(props) {
     useEffect(() => {
         props.onOverlayChange?.(overlay);
     }, [overlay, props]);
-    // α6.14 wave 3: dismiss the boot splash once the first agent spawns
+    // wave 3: dismiss the boot splash once the first agent spawns
     // (the operator has clearly engaged the system) or the transcript
-    // gains a row. Mirrors the natural attention shift Claude Code /
+    // gains a row. Mirrors the natural attention shift the upstream tool /
     // Codex / Gemini CLI all do on their boot screens.
     useEffect(() => {
         if (!splashVisible)
@@ -99,6 +108,20 @@ export function Repl(props) {
             setSplashVisible(false);
         }
     }, [splashVisible, state.agents.length, state.transcript.length]);
+    // CEO P0 #2 v2: welcome banner stays until the operator
+    // actively engages the loop — first agent spawn. Boot-time auto-init
+    // emits system rows into `state.transcript` (skip-trust hints, dirty
+    // tree warnings) which used к dismiss the banner within ~2s, hiding
+    // the brand mascot before the operator could read it. Drop the
+    // `transcript.length` trigger; agent spawn (= real dispatch) remains
+    // the sole signal that the operator stopped reading the banner.
+    useEffect(() => {
+        if (!welcomeVisible)
+            return;
+        if (state.agents.length > 0) {
+            setWelcomeVisible(false);
+        }
+    }, [welcomeVisible, state.agents.length]);
     const personaNames = useMemo(() => buildPersonaNameMap(), []);
     const { exit } = useApp();
     const handleSubmit = useCallback((line) => {
@@ -106,6 +129,10 @@ export function Repl(props) {
         // `setSplashVisible(false)` is a no-op once the state already
         // settled to false (timer fired or `agent.spawned` arrived).
         setSplashVisible(false);
+        // CEO P0 #2 : same dismissal for the welcome banner
+        // — the operator engaging the input box is the cleanest signal
+        // they have finished reading the boot card.
+        setWelcomeVisible(false);
         // Run async without awaiting - the session module owns the
         // network call, errors land in the transcript automatically.
         void props.session.handleInput(line).then((verdict) => {
@@ -137,7 +164,7 @@ export function Repl(props) {
             setOverlay('none');
         }
     }, { isActive: overlay === 'help' || overlay === 'roster' });
-    // α6.12: Ctrl+T toggles the tool stream pane between expanded and
+    // : Ctrl+T toggles the tool stream pane between expanded and
     // collapsed states. Active only while no overlay is open, so the
     // toggle never fights the help/roster dismiss handler. The input box
     // owns its own raw-input mode, so this listener only fires on the
@@ -147,7 +174,7 @@ export function Repl(props) {
             setToolStreamCollapsed((prev) => !prev);
         }
     }, { isActive: overlay === 'none' && props.hideToolStream !== true });
-    // α6.3 office-hours: a pending ask or plan-review modal pauses input
+    // office-hours: a pending ask or plan-review modal pauses input
     // until the operator resolves it. The modal owns its own useInput
     // hook, so the InputBox unmounts while a modal is open to avoid two
     // raw-input listeners competing for the same keystroke. Resolution
@@ -161,29 +188,69 @@ export function Repl(props) {
     const handlePlanReviewResolve = useCallback((result) => {
         void props.session.resolvePlanReview(result);
     }, [props.session]);
-    // α6.9: Ctrl+C abort handler. Forwards to ReplSession.cancel() which
+    // : Ctrl+C abort handler. Forwards to ReplSession.cancel() which
     // aborts the in-flight dispatch, closes the SSE stream, and surfaces
     // "Aborted." in the transcript.
     //
     // Return contract (consumed by InputBox):
-    //   - true        - dispatch was cancelled (keep the buffer + DO arm
-    //                   the press-again-to-exit timer; second Ctrl+C in
-    //                   the window exits).
-    //   - false       - idle / nothing to cancel (legacy: clear buffer +
-    //                   arm the exit timer so the operator sees the hint
-    //                   and can confirm exit on the next press).
-    //   - undefined   - bypassed entirely (e.g. a modal owns the input).
-    //                   InputBox MUST NOT arm the exit timer and MUST
-    //                   NOT clear the buffer. P2 fix: previously this
-    //                   returned `false` and the buffer-clear path wiped
-    //                   the operator's mid-typed modal text on the first
-    //                   Ctrl+C, costing a press of work.
+    //  - true       - dispatch was cancelled (keep the buffer + DO arm
+    //                  the press-again-to-exit timer; second Ctrl+C in
+    //                  the window exits).
+    //  - false      - idle / nothing to cancel (legacy: clear buffer +
+    //                  arm the exit timer so the operator sees the hint
+    //                  and can confirm exit on the next press).
+    //  - undefined  - bypassed entirely (e.g. a modal owns the input).
+    //                  InputBox MUST NOT arm the exit timer and MUST
+    //                  NOT clear the buffer. P2 fix: previously this
+    //                  returned `false` and the buffer-clear path wiped
+    //                  the operator's mid-typed modal text on the first
+    //                  Ctrl+C, costing a press of work.
     const handleCancel = useCallback(() => {
         if (modalActive)
             return undefined;
         return props.session.cancel();
     }, [props.session, modalActive]);
-    // α6.14.5 CEO dogfood 2026-05-25 (parity with Claude Code): input
+    // BT 8 (the upstream tool parity): Esc-Esc walkback. Forwards to
+    // ReplSession.walkbackLastTurn which trims the trailing operator
+    // turn + its persona response from the in-memory transcript. Returns
+    // `'walked-back'` so the input box knows the host did the work;
+    // `'nothing'` covers both the empty-transcript and dispatch-in-flight
+    // refusals (the session module owns the refusal copy in both cases).
+    const handleWalkback = useCallback(() => {
+        if (modalActive)
+            return 'nothing';
+        const verdict = props.session.walkbackLastTurn();
+        return verdict === 'walked-back' ? 'walked-back' : 'nothing';
+    }, [props.session, modalActive]);
+    // — Shift+Tab cycles the 6 canonical permission modes (CC
+    // parity). Refuses while a modal is active so the operator does not
+    // accidentally flip mode mid-prompt; otherwise resolves the current
+    // mode through the workspace > global > default merge, advances via
+    // `nextPermissionMode`, и persists к .pugi/session.json. Returns the
+    // new mode string so the InputBox can flash a one-line toast.
+    const handleCyclePermissionMode = useCallback(() => {
+        if (modalActive)
+            return null;
+        try {
+            // Lazy-require так this code path doesn't drag the permissions
+            // module into the splash + boot stages where it isn't needed.
+            // The require is sync but the inner work is pure JSON IO.
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const perm = require('../core/permissions/index.js');
+            const workspaceRoot = process.cwd();
+            const current = perm.resolveMode({ workspaceRoot });
+            const next = perm.nextPermissionMode(current);
+            perm.setCurrentMode(workspaceRoot, next);
+            return next;
+        }
+        catch {
+            // Persistence is best-effort — if .pugi/session.json is read-only
+            // или ENOENT-on-parent the toast is suppressed so we don't lie
+            // about the flip к the operator.
+            return null;
+        }
+    }, [modalActive]);
+    // CEO dogfood (parity with the upstream tool): input
     // box pinned to alt-screen BOTTOM, conversation grows above it.
     // Beta.3's height={rows} fix broke keystroke focus - raw echo at
     // viewport bottom. The right pattern is minHeight on the root +
@@ -191,29 +258,40 @@ export function Repl(props) {
     // input, and the input stays the sole focusable surface adjacent
     // to the cursor row, so all keystrokes route through it.
     const altScreenRows = process.stdout.rows ?? 24;
-    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, minHeight: altScreenRows, children: [props.updateBanner ? _jsx(UpdateBanner, { result: props.updateBanner }) : null, splashVisible ? (_jsx(ReplSplash, { cliVersion: state.cliVersion, workspaceLabel: state.workspaceLabel, plan: props.splashPlan, model: props.splashModel, tenant: props.splashTenant, onDismiss: dismissSplash, mascotPrePrinted: props.mascotPrePrinted === true })) : null, _jsx(Header, { state: state }), _jsx(Box, { flexDirection: "column", marginTop: 1, flexGrow: 1, justifyContent: "flex-end", children: overlay === 'help' ? (_jsx(HelpOverlay, {})) : overlay === 'roster' ? (_jsx(RosterOverlay, {})) : overlay === 'farewell' ? (_jsx(FarewellOverlay, {})) : (_jsx(MainArea, { state: state, personaNames: personaNames, nowEpochMs: tickNow, hideToolStream: props.hideToolStream === true, toolStreamCollapsed: toolStreamCollapsed })) }), state.pendingAsk ? (_jsx(Box, { marginTop: 1, children: _jsx(AskModal, { tag: state.pendingAsk, onResolve: handleAskResolve }) })) : null, state.pendingPlanReview ? (_jsx(Box, { marginTop: 1, children: _jsx(PlanReviewModal, { tag: state.pendingPlanReview, onResolve: handlePlanReviewResolve }) })) : null, _jsxs(Box, { flexDirection: "column", marginTop: 1, children: [overlay === 'farewell' || modalActive ? null : (_jsx(InputBox, { onSubmit: handleSubmit, onExit: handleExit, onCancel: handleCancel, now: props.now, 
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, minHeight: altScreenRows, children: [welcomeVisible && props.welcomeData ? (_jsx(WelcomeBanner, { data: props.welcomeData, mascotPrePrinted: props.mascotPrePrinted === true, autoInitStatus: props.autoInitStatus ?? null })) : null, splashVisible ? (_jsx(ReplSplash, { cliVersion: state.cliVersion, workspaceLabel: state.workspaceLabel, plan: props.splashPlan, model: props.splashModel, tenant: props.splashTenant, onDismiss: dismissSplash, mascotPrePrinted: props.mascotPrePrinted === true })) : null, _jsx(Header, { state: state }), _jsx(Box, { flexDirection: "column", marginTop: 1, flexGrow: 1, justifyContent: "flex-end", children: overlay === 'help' ? (_jsx(HelpOverlay, {})) : overlay === 'roster' ? (_jsx(RosterOverlay, {})) : overlay === 'farewell' ? (_jsx(FarewellOverlay, {})) : (_jsx(MainArea, { state: state, personaNames: personaNames, nowEpochMs: tickNow, hideToolStream: props.hideToolStream === true, toolStreamCollapsed: toolStreamCollapsed })) }), state.pendingAsk ? (_jsx(Box, { marginTop: 1, children: _jsx(AskModal, { tag: state.pendingAsk, onResolve: handleAskResolve }) })) : null, state.pendingPlanReview ? (_jsx(Box, { marginTop: 1, children: _jsx(PlanReviewModal, { tag: state.pendingPlanReview, onResolve: handlePlanReviewResolve }) })) : null, _jsxs(Box, { flexDirection: "column", marginTop: 1, children: [overlay === 'farewell' || modalActive ? null : (_jsx(InputBox, { onSubmit: handleSubmit, onExit: handleExit, onCancel: handleCancel, onWalkback: handleWalkback, onCyclePermissionMode: handleCyclePermissionMode, now: props.now, 
                         // Slug from process.cwd() (full path) so two workspaces with
                         // the same basename do not share history. state.workspaceLabel
                         // is the basename only. Codex review P2.
-                        workspaceSlug: slugForCwd(process.cwd()) })), _jsx(StatusBar, { connection: state.connection, activeAgentCount: countActive(state), tokensDownstreamTotal: state.tokensDownstreamTotal, briefStartedAtEpochMs: state.briefStartedAtEpochMs, nowEpochMs: tickNow, pulsePhase: pulsePhase, pugiMdCount: workspaceContext.pugiMdCount, mcpServerCount: workspaceContext.mcpServerCount, skillCount: workspaceContext.skillCount, quotaPct: props.quotaPct, dispatchState: state.dispatchState, dispatchToolLabel: state.dispatchToolLabel })] })] }));
+                        workspaceSlug: slugForCwd(process.cwd()) })), _jsx(ThinkingSpinner, { dispatchState: state.dispatchState, dispatchToolLabel: state.dispatchToolLabel }), _jsx(StatusBar, { connection: state.connection, activeAgentCount: countActive(state), tokensDownstreamTotal: state.tokensDownstreamTotal, briefStartedAtEpochMs: state.briefStartedAtEpochMs, nowEpochMs: tickNow, pulsePhase: pulsePhase, pugiMdCount: workspaceContext.pugiMdCount, mcpServerCount: workspaceContext.mcpServerCount, skillCount: workspaceContext.skillCount, quotaPct: props.quotaPct, dispatchState: state.dispatchState, dispatchToolLabel: state.dispatchToolLabel, lastCompletedOutcome: state.lastCompletedOutcome, 
+                        // cost-meter sprint — surface accumulated session totals
+                        // + per-turn delta flash on the status bar's top row. The
+                        // session module owns accumulation; the bar is a pure render.
+                        sessionTokensIn: state.sessionTokensIn, sessionTokensOut: state.sessionTokensOut, sessionCostUsd: state.sessionCostUsd, sessionStartedAtEpochMs: state.sessionStartedAtEpochMs, lastTurnDelta: state.lastTurnDelta }), props.updateBanner ? _jsx(UpdateBanner, { result: props.updateBanner }) : null] })] }));
 }
 function Header({ state }) {
-    return (_jsxs(Box, { children: [_jsx(Text, { bold: true, children: "Pugi" }), _jsx(Text, { bold: true, color: "cyan", children: ".io" }), _jsx(Text, { dimColor: true, children: `  ·  workspace: ${state.workspaceLabel}  ·  v${state.cliVersion}  ·  ` }), _jsx(Text, { color: "cyan", children: state.connection === 'on_watch' ? 'on watch' : state.connection.replace('_', ' ') })] }));
+    // the header `.io` brand accent + connection
+    // pill route through `useTheme()` so the operator's `/theme` flip
+    // (default / dark / light / colorblind) re-tints the chrome on
+    // re-mount. The `useTheme` hook returns the `default` preset's
+    // colors when no provider is mounted, preserving the previous
+    // `#3da9fc` constants for tests that import `<Repl />` standalone.
+    const theme = useTheme();
+    return (_jsxs(Box, { children: [_jsx(Text, { bold: true, children: "Pugi" }), _jsx(Text, { bold: true, color: theme.accent, children: ".io" }), _jsx(Text, { dimColor: true, children: ` · workspace: ${state.workspaceLabel} · v${state.cliVersion} · ` }), _jsx(Text, { color: theme.accent, children: state.connection === 'on_watch' ? 'on watch' : state.connection.replace('_', ' ') })] }));
 }
 function MainArea({ state, personaNames, nowEpochMs, hideToolStream, toolStreamCollapsed, }) {
-    // α6.12: three vertical panes stacked above the input box.
+    // : three vertical panes stacked above the input box.
     //
-    //   1. Conversation pane (top)  - transcript with Markdown render.
-    //   2. Tool stream pane (mid)   - live Read/Edit/Bash/Grep lines.
-    //                                  Hidden when `--no-tool-stream` is
-    //                                  set; collapsed via Ctrl+T while
-    //                                  the pane is visible.
-    //   3. Agent tree pane (bottom) - Cyber-Zoo roster with persona /
-    //                                  status / duration / token counts.
+    //  1. Conversation pane (top) - transcript with Markdown render.
+    //  2. Tool stream pane (mid)  - live Read/Edit/Bash/Grep lines.
+    //                                 Hidden when `--no-tool-stream` is
+    //                                 set; collapsed via Ctrl+T while
+    //                                 the pane is visible.
+    //  3. Agent tree pane (bottom) - Cyber-Zoo roster with persona /
+    //                                 status / duration / token counts.
     //
     // The window over the transcript is small (last 12 rows) so the
     // bottom of the frame stays anchored to the input box. New agents
-    // push the operator line up the screen, mirroring Claude Code /
+    // push the operator line up the screen, mirroring the upstream tool /
     // Codex CLI / Gemini CLI rendering.
     const conversationSlice = state.transcript.slice(-CONVERSATION_WINDOW);
     return (_jsxs(Box, { flexDirection: "column", children: [_jsx(ConversationPane, { rows: conversationSlice, personaNames: personaNames }), hideToolStream ? null : (_jsx(Box, { marginTop: 1, children: _jsx(ToolStreamPane, { calls: state.toolCalls, collapsed: toolStreamCollapsed }) })), _jsx(Box, { marginTop: 1, children: _jsx(AgentTreePane, { agents: state.agents, nowEpochMs: nowEpochMs }) })] }));
@@ -221,7 +299,7 @@ function MainArea({ state, personaNames, nowEpochMs, hideToolStream, toolStreamC
 function HelpOverlay() {
     // Group commands by their `group` field so the operator scans the
     // palette by intent (dispatch → session → tools → settings → meta).
-    // The α6.14 wave-2 expansion grew the surface from 6 to 20 commands;
+    // The wave-2 expansion grew the surface from 6 to 20 commands;
     // a flat list would force the operator to read 20 rows top-to-bottom
     // every time. Grouping cuts perceived complexity dramatically.
     const grouped = new Map();
@@ -238,14 +316,14 @@ function HelpOverlay() {
                 const rows = grouped.get(group);
                 if (!rows || rows.length === 0)
                     return null;
-                return (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsx(Text, { dimColor: true, children: `  -- ${group} --` }), rows.map((row) => (_jsxs(Box, { children: [_jsx(Text, { bold: true, color: "cyan", children: `  /${row.name} ${row.args}`.padEnd(22, ' ') }), _jsx(Text, { dimColor: true, children: row.gloss })] }, row.name)))] }, group));
+                return (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsx(Text, { dimColor: true, children: ` -- ${group} --` }), rows.map((row) => (_jsxs(Box, { children: [_jsx(Text, { bold: true, color: "#3da9fc", children: ` /${row.name} ${row.args}`.padEnd(22, ' ') }), _jsx(Text, { dimColor: true, children: row.gloss })] }, row.name)))] }, group));
             }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: `${PUGI_TAGLINE}` }) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: 'Press any key to dismiss.' }) })] }));
 }
 function RosterOverlay() {
-    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, children: "On-watch roster" }), _jsx(Box, { marginTop: 1, flexDirection: "column", children: THE_TEN.map((persona) => (_jsxs(Box, { children: [_jsx(Text, { bold: true, children: `  ${persona.name.padEnd(10, ' ')}` }), _jsx(Text, { dimColor: true, children: `${persona.role.padEnd(20, ' ')}` }), _jsx(Text, { children: persona.oneLiner })] }, persona.slug))) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: 'Press any key to dismiss.' }) })] }));
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, children: "On-watch roster" }), _jsx(Box, { marginTop: 1, flexDirection: "column", children: THE_TEN.map((persona) => (_jsxs(Box, { children: [_jsx(Text, { bold: true, children: ` ${persona.name.padEnd(10, ' ')}` }), _jsx(Text, { dimColor: true, children: `${persona.role.padEnd(20, ' ')}` }), _jsx(Text, { children: persona.oneLiner })] }, persona.slug))) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: 'Press any key to dismiss.' }) })] }));
 }
 function FarewellOverlay() {
-    return (_jsx(Box, { flexDirection: "column", alignItems: "center", paddingY: 2, children: _jsx(Text, { bold: true, color: "cyan", children: PUGI_TAGLINE }) }));
+    return (_jsx(Box, { flexDirection: "column", alignItems: "center", paddingY: 2, children: _jsx(Text, { bold: true, color: "#3da9fc", children: PUGI_TAGLINE }) }));
 }
 function applyVerdictSideEffects(verdict, handlers) {
     switch (verdict.kind) {
@@ -270,8 +348,10 @@ function applyVerdictSideEffects(verdict, handlers) {
         case 'consensus':
         case 'diff':
         case 'cost':
+        case 'quota':
         case 'status':
         case 'resume':
+        case 'mcp':
         case 'stub':
             // All non-overlay verdicts: the session module already appended
             // any operator-visible system lines (and, for `ask`, set

package/dist/tui/slash-palette.js

@@ -7,7 +7,7 @@ export const PALETTE_ROW_LIMIT = 8;
  * Centralises the "starts-with-slash → filter SLASH_COMMAND_HELP"
  * logic so the input box and the unit test agree on the shape.
  *
- * Wave 4 fix 2026-05-25: returns the FULL filtered set, not just the
+ * fix: returns the FULL filtered set, not just the
  * first PALETTE_ROW_LIMIT rows. The palette renderer now windows the
  * visible slice internally based on `focusedIndex`, so the operator
  * can scroll past row 7 via ↑/↓ on a long list (e.g. 20 commands when
@@ -15,9 +15,9 @@ export const PALETTE_ROW_LIMIT = 8;
  * shape for backward compatibility but always equals `rows.length`.
  *
  * Behaviour:
- *   - Empty / non-slash buffer → empty result; palette stays hidden.
- *   - `/` alone → all registry rows (the operator wants to browse).
- *   - `/he` → rows whose name starts with `he` (case-insensitive).
+ *  - Empty / non-slash buffer → empty result; palette stays hidden.
+ *  - `/` alone → all registry rows (the operator wants to browse).
+ *  - `/he` → rows whose name starts with `he` (case-insensitive).
  */
 export function filterPalette(buffer) {
     if (!buffer.startsWith('/')) {
@@ -86,7 +86,7 @@ export function completePalette(buffer, rows, focusedIndex) {
 export function SlashPalette(props) {
     if (props.rows.length === 0)
         return null;
-    // Wave 4 fix 2026-05-25: compute the visible window so the operator
+    // fix: compute the visible window so the operator
     // can scroll past row 7 on long lists. Focus indexes the full rows
     // array; the window slides to keep the focused row visible.
     const window = computePaletteWindow(props.rows, props.focusedIndex);
@@ -101,6 +101,6 @@ export function SlashPalette(props) {
                 const glyph = focused ? '▸' : '·';
                 const cmd = `/${row.name}${row.args ? ` ${row.args}` : ''}`.padEnd(22, ' ');
                 return (_jsxs(Box, { children: [_jsx(Text, { color: focused ? 'cyan' : 'gray', children: `${glyph} ` }), _jsx(Text, { bold: focused, color: focused ? 'cyan' : undefined, dimColor: !focused, children: cmd }), _jsx(Text, { dimColor: true, children: row.gloss })] }, row.name));
-            }), overflow ? (_jsx(Box, { children: _jsx(Text, { dimColor: true, children: `  → ${focusedDisplayIndex}/${window.total}` }) })) : null, _jsx(Box, { children: _jsx(Text, { dimColor: true, children: '  ↑/↓ select  ·  Tab complete  ·  Enter run  ·  Esc close' }) })] }));
+            }), overflow ? (_jsx(Box, { children: _jsx(Text, { dimColor: true, children: ` → ${focusedDisplayIndex}/${window.total}` }) })) : null, _jsx(Box, { children: _jsx(Text, { dimColor: true, children: ' ↑/↓ select · Tab complete · Enter run · Esc close' }) })] }));
 }
 //# sourceMappingURL=slash-palette.js.map

package/dist/tui/splash.js

@@ -21,11 +21,11 @@ export function Splash({ data }) {
             cmd: 'pugi login',
             gloss: 'Connect this terminal to your Pugi account',
         };
-    return (_jsxs(Box, { flexDirection: "column", paddingX: 2, paddingY: 1, children: [_jsx(Box, { children: _jsx(Text, { bold: true, color: "cyan", children: "pugi.io" }) }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: `v${data.cliVersion}  ·  ${data.apiUrl}` }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Text, { children: [_jsx(Text, { dimColor: true, children: "Account: " }), _jsx(Text, { children: accountLine })] }), data.isAuthenticated && data.plan ? (_jsxs(Text, { children: [_jsx(Text, { dimColor: true, children: "Plan: " }), _jsx(Text, { children: data.plan })] })) : null] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { dimColor: true, children: "Quick start:" }), _jsx(HintRow, { command: primaryHint.cmd, gloss: primaryHint.gloss }), data.isAuthenticated ? (_jsx(HintRow, { command: 'pugi login', gloss: 'Re-authenticate or switch accounts' })) : (_jsx(HintRow, { command: 'pugi code "fix the bug"', gloss: 'Run a one-shot coding task' })), _jsx(HintRow, { command: 'pugi review --triple', gloss: 'Run the Anvil triple-review gate' }), _jsx(HintRow, { command: 'pugi help', gloss: 'Full command reference' })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: "Docs: https://pugi.dev   \u00B7   Status: https://pugi.io/status" }) })] }));
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 2, paddingY: 1, children: [_jsx(Box, { children: _jsx(Text, { bold: true, color: "#3da9fc", children: "pugi.io" }) }), _jsx(Box, { children: _jsx(Text, { dimColor: true, children: `v${data.cliVersion} · ${data.apiUrl}` }) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Text, { children: [_jsx(Text, { dimColor: true, children: "Account: " }), _jsx(Text, { children: accountLine })] }), data.isAuthenticated && data.plan ? (_jsxs(Text, { children: [_jsx(Text, { dimColor: true, children: "Plan: " }), _jsx(Text, { children: data.plan })] })) : null] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { dimColor: true, children: "Quick start:" }), _jsx(HintRow, { command: primaryHint.cmd, gloss: primaryHint.gloss }), data.isAuthenticated ? (_jsx(HintRow, { command: 'pugi login', gloss: 'Re-authenticate or switch accounts' })) : (_jsx(HintRow, { command: 'pugi code "fix the bug"', gloss: 'Run a one-shot coding task' })), _jsx(HintRow, { command: 'pugi review --triple', gloss: 'Run the Anvil triple-review gate' }), _jsx(HintRow, { command: 'pugi help', gloss: 'Full command reference' })] }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: "Docs: https://pugi.dev  \u00B7  Status: https://pugi.io/status" }) })] }));
 }
 function HintRow({ command, gloss }) {
     // Pad command names so the gloss column lines up across rows.
     const padded = command.padEnd(28, ' ');
-    return (_jsxs(Text, { children: [_jsx(Text, { children: `  ${padded}` }), _jsx(Text, { dimColor: true, children: gloss })] }));
+    return (_jsxs(Text, { children: [_jsx(Text, { children: ` ${padded}` }), _jsx(Text, { dimColor: true, children: gloss })] }));
 }
 //# sourceMappingURL=splash.js.map