@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/src/tui/sshtriage.js

@@ -0,0 +1,393 @@
+// Connection triage — the TUI does the ssh diagnosis so the operator does not
+// have to.
+//
+// Three failure classes are routinely confused: a key that is simply not in
+// the agent looks, on the board, like a dead daemon with no PRs. Each class
+// gets its own CAUSE sentence and its own EXACT remedy command, and the TUI
+// never runs the remedy itself — there is deliberately no self-healing: the
+// TUI reports, the operator acts, and `s` re-runs the check.
+//
+// Everything here is probe-in / diagnosis-out. `classifyConnection` is PURE and
+// carries all the judgment; `triageConnection` only collects the probes. Every
+// probe is local-ish, bounded and non-interactive (BatchMode), so a triage can
+// never hang the TUI and never prompts for a passphrase behind the alt screen.
+import { sshIdentityLines, sshAgentUnavailable, sshConfigRows, SSH_HOST_KEY_FAILURE, SSH_DNS_FAILURE, SSH_TIMEOUT_FAILURE, SSH_ROUTE_FAILURE, } from "../ssh-observation.js";
+import { execFile } from "node:child_process";
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { masterCheckArgv } from "./connect.js";
+import { shellQuote, transportOf } from "./remote.js";
+/**
+ * The methods OpenSSH says it offered: `Permission denied (publickey,password)`
+ * → `["publickey", "password"]`. This is the only reliable way to tell "a key
+ * would have worked" from "a key is irrelevant here", and BatchMode collapses
+ * both into the same "Permission denied" sentence.
+ */
+export function offeredAuthMethods(stderr) {
+    const m = /permission denied \(([^)]*)\)/i.exec(stderr);
+    return m
+        ? m[1]
+            .split(",")
+            .map((x) => x.trim().toLowerCase())
+            .filter((x) => x.length > 0)
+        : [];
+}
+/** Refusals that a key in the agent would have fixed, outside a method list. */
+const AUTH_PATTERNS = [
+    /publickey/i,
+    /too many authentication failures/i,
+    /agent refused operation/i,
+    /sign_and_send_pubkey/i,
+];
+/**
+ * Refusals a key CANNOT fix: an interactive second factor, an account
+ * restriction. Answering one of these with `ssh-add` is a confidently wrong
+ * remedy, which is the failure mode triage exists to prevent — so this is
+ * checked FIRST, and it reports rather than guessing.
+ */
+const INTERACTIVE_AUTH_PATTERNS = [
+    /keyboard-interactive/i,
+    /two-factor|2fa|verification code|one-time password/i,
+    /account is locked|account is disabled/i,
+];
+const MUX_PATTERNS = [/control socket connect/i, /mux_client/i, /multiplexing/i, /controlpath/i];
+/** The host's key is unknown or has changed. Nothing about the AGENT can fix
+ * it, and the fallback below would otherwise report "no usable key is loaded"
+ * — a confidently wrong remedy for a host-identity problem. */
+const HOST_KEY_PATTERNS = [
+    SSH_HOST_KEY_FAILURE,
+    /no matching host key/i,
+    /host key for .* has changed/i,
+];
+const NETWORK_PATTERNS = [
+    SSH_DNS_FAILURE,
+    SSH_TIMEOUT_FAILURE,
+    SSH_ROUTE_FAILURE,
+    /connection closed by/i,
+    /kex_exchange_identification/i,
+    /broken pipe/i,
+];
+/**
+ * The first line of ssh's stderr that actually SAYS something.
+ *
+ * Not simply the first non-empty one: OpenSSH frames its loudest messages in
+ * banner rules, so a changed host key leads with
+ * `@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@` and the operator's "cause" would
+ * have been a row of at-signs. A line with no letters or digits in it is
+ * decoration, not evidence.
+ */
+function firstLine(text) {
+    const line = text
+        .split("\n")
+        .map((l) => l.trim())
+        .find((l) => l.length > 0 && /[a-z0-9]/i.test(l));
+    return line ?? "";
+}
+/** Does the agent hold the key ssh would offer for this host? */
+export function agentHoldsIdentity(p) {
+    if (!p.agent.reachable || p.agent.identities.length === 0)
+        return "no";
+    if (p.identityFingerprint)
+        return p.agent.identities.some((l) => l.includes(p.identityFingerprint)) ? "yes" : "no";
+    // No fingerprint to match on (no readable `.pub`): ssh-add prints the key's
+    // path as the comment for most keys, so a name match is still evidence.
+    // Anything else is UNKNOWN, never "yes" — reading an agent holding somebody
+    // else's key as holding this one turns a diagnosis into a guess and hands
+    // the operator a remedy that cannot work.
+    if (p.identity) {
+        const base = p.identity.split("/").pop() ?? p.identity;
+        if (p.agent.identities.some((l) => l.includes(base)))
+            return "yes";
+    }
+    return "unknown";
+}
+/** The `ssh-add` line for this host's key, or the generic one when ssh named
+ * no identity file at all. An unreachable agent needs starting first. */
+export function sshAddRemedy(p) {
+    const named = p.identity ?? p.identityFiles[0];
+    // A resolved path is quoted so a space in it stays one argument; the generic
+    // fallback is left bare so the shell expands its `~`.
+    const add = `ssh-add ${named === undefined ? "~/.ssh/id_ed25519" : shellQuote(named)}`;
+    return p.agent.reachable ? add : `eval "$(ssh-agent -s)" && ${add}`;
+}
+/**
+ * The whole judgment, in one pure function.
+ *
+ * Order matters and is deliberate: an explicit auth refusal outranks a stale
+ * socket (ssh falls back to a direct connection when the mux socket is dead,
+ * so a socket on disk is not by itself the fault), a mux complaint outranks a
+ * generic network error, and an agent holding NOTHING is read as the key case
+ * even when ssh was vague — that combination is a key missing from the agent.
+ */
+export function classifyConnection(p) {
+    if (p.masterAlive) {
+        return { kind: "ok", cause: `the shared ssh master to ${p.host} is up`, remedy: "" };
+    }
+    if (p.connect?.ok) {
+        return {
+            kind: "ok",
+            cause: `ssh to ${p.host} works (a fresh connection succeeded)`,
+            remedy: "",
+        };
+    }
+    const stderr = p.connect?.stderr ?? "";
+    const evidence = firstLine(stderr);
+    const holdsKey = agentHoldsIdentity(p);
+    // A method list is authoritative when ssh printed one: publickey among the
+    // offered methods means a loaded key really is the missing piece; its absence
+    // means nothing in the agent could ever have helped.
+    const methods = offeredAuthMethods(stderr);
+    const keyIsRelevant = methods.length > 0
+        ? methods.includes("publickey")
+        : AUTH_PATTERNS.some((re) => re.test(stderr));
+    const interactiveOnly = methods.length > 0
+        ? !methods.includes("publickey")
+        : INTERACTIVE_AUTH_PATTERNS.some((re) => re.test(stderr));
+    if (interactiveOnly) {
+        // Says exactly what it knows and no more: an `ssh-add` here would be a
+        // confidently wrong remedy.
+        return {
+            kind: "unknown",
+            cause: `${p.host} refused the non-interactive probe with something a key cannot fix — ${evidence || "an interactive authentication step"}`,
+            remedy: `ssh -v ${p.host} true`,
+            ...(evidence ? { detail: evidence } : {}),
+        };
+    }
+    if (keyIsRelevant) {
+        return {
+            kind: "no-agent-key",
+            cause: agentCause(p, holdsKey, `ssh to ${p.host} was refused for lack of a usable key`),
+            remedy: sshAddRemedy(p),
+            ...(evidence ? { detail: evidence } : {}),
+        };
+    }
+    if (MUX_PATTERNS.some((re) => re.test(stderr)) ||
+        (p.controlSocketExists && p.connect?.timedOut === true)) {
+        return {
+            kind: "wedged-master",
+            cause: `the shared ssh ControlMaster for ${p.host} is wedged — ${p.controlPath ? `${p.controlPath} is there` : "the control socket is there"} and does not answer`,
+            remedy: `ssh -O exit ${p.host}`,
+            ...(evidence ? { detail: evidence } : {}),
+        };
+    }
+    if (HOST_KEY_PATTERNS.some((re) => re.test(stderr))) {
+        return {
+            kind: "unknown",
+            cause: `${p.host}'s host key is not the one in known_hosts (or is not there at all) — ${evidence || "host key verification failed"}`,
+            remedy: `ssh -o StrictHostKeyChecking=ask ${p.host} true`,
+            ...(evidence ? { detail: evidence } : {}),
+        };
+    }
+    if (NETWORK_PATTERNS.some((re) => re.test(stderr))) {
+        return {
+            kind: "host-unreachable",
+            cause: `${p.host} did not answer — ${evidence || "the connection failed"}`,
+            remedy: `ssh -v ${p.host} true`,
+            ...(evidence ? { detail: evidence } : {}),
+        };
+    }
+    if (holdsKey === "no") {
+        return {
+            kind: "no-agent-key",
+            cause: agentCause(p, holdsKey, `ssh to ${p.host} failed and no usable key is loaded`),
+            remedy: sshAddRemedy(p),
+            ...(evidence ? { detail: evidence } : {}),
+        };
+    }
+    return {
+        kind: "unknown",
+        cause: `ssh to ${p.host} failed — ${evidence || "no error text"}`,
+        remedy: `ssh -v ${p.host} true`,
+        ...(evidence ? { detail: evidence } : {}),
+    };
+}
+function agentCause(p, holdsKey, lead) {
+    const key = p.identity ?? p.identityFiles[0];
+    const n = p.agent.identities.length;
+    if (!p.agent.reachable)
+        return `${lead}: no ssh agent is reachable (SSH_AUTH_SOCK is unset or the agent is not running)`;
+    if (n === 0)
+        return `${lead}: the agent holds no identities${key ? ` — ${key} is not loaded` : ""}`;
+    if (holdsKey === "no")
+        return `${lead}: the agent holds ${n} identit${n === 1 ? "y" : "ies"}${key ? `, and ${key} is not one of them` : ""}`;
+    // UNKNOWN: no readable `.pub` to fingerprint against, so we cannot tell one
+    // of those keys from another. Say that, rather than asserting either way.
+    if (holdsKey === "unknown") {
+        return `${lead}: the agent holds ${n} identit${n === 1 ? "y" : "ies"}, and without a readable ${key ?? "key"}.pub the TUI cannot tell whether ${key ?? "the right key"} is among them`;
+    }
+    return `${lead}: the agent holds ${key ?? "a key"} but ${p.host} would not take it`;
+}
+export const realProbeRunner = (cmd, argv, timeoutMs) => new Promise((resolve) => {
+    // stdin is closed immediately and BatchMode rides the argv: nothing here
+    // may ever stop on a prompt — this runs behind the alt screen.
+    const child = execFile(cmd, argv, { timeout: timeoutMs, encoding: "utf8" }, (err, stdout, stderr) => {
+        const e = err;
+        const timedOut = Boolean(e?.killed) || e?.signal === "SIGTERM";
+        // A string code is a failure to RUN the probe (`ENOENT`: no such
+        // program) — it printed nothing, so its own message is the evidence.
+        const runError = e && typeof e.code === "string" && !timedOut ? e.message : "";
+        resolve({
+            status: e ? (typeof e.code === "number" ? e.code : null) : 0,
+            stdout: String(stdout ?? ""),
+            stderr: String(stderr ?? "") || (timedOut ? `timed out after ${timeoutMs}ms` : runError),
+            timedOut,
+        });
+    });
+    child.stdin?.end();
+});
+/**
+ * Expand `~` and the ssh tokens we can resolve.
+ *
+ * Modern OpenSSH already expands ControlPath in `ssh -G` output, so on most
+ * configs this is a pass-through; the token handling earns its keep on older
+ * ssh and on a config read some other way. `%C` (a hash of the connection
+ * parameters) is NOT reproducible here, and returning "" for it would demote a
+ * wedged master to `unknown` (`controlSocketExists` would go false). So it
+ * leaves the unresolved token in the path, and `controlSocketPresent` falls
+ * back to the socket's DIRECTORY: if that exists we still
+ * know multiplexing is configured, `mux` stderr still classifies, and the
+ * remedy (`ssh -O exit <host>`, which needs no path) is unchanged.
+ */
+export function expandControlPath(raw, tokens, home) {
+    if (raw === "" || raw.toLowerCase() === "none")
+        return "";
+    return expandHome(raw, home)
+        .replace(/%h/g, tokens.host ?? "%h")
+        .replace(/%n/g, tokens.host ?? "%n")
+        .replace(/%r/g, tokens.user ?? "%r")
+        .replace(/%p/g, tokens.port ?? "%p");
+}
+/** A leading `~/` against `home` — the one home-prefix spelling ssh's
+ * config paths (IdentityFile, ControlPath) are read with here. */
+export function expandHome(path, home) {
+    return path.startsWith("~/") ? `${home}/${path.slice(2)}` : path;
+}
+/** True when SOMETHING is multiplexing at that path. An unexpandable token
+ * (`%C`) leaves a path we cannot stat, so fall back to its directory rather
+ * than reporting "no control socket", which is a different claim. */
+export function controlSocketPresent(path, exists) {
+    if (path === "")
+        return false;
+    if (!/%[a-zA-Z]/.test(path))
+        return exists(path);
+    const dir = path.slice(0, path.lastIndexOf("/"));
+    return dir !== "" && exists(dir);
+}
+/** `ssh -G <host>` output → the fields the triage uses. */
+export function parseSshConfigDump(text) {
+    const identityFiles = [];
+    let controlPath = "";
+    let host;
+    let user;
+    let port;
+    for (const [key, value] of sshConfigRows(text)) {
+        if (key === "identityfile")
+            identityFiles.push(value);
+        else if (key === "controlpath" && controlPath === "")
+            controlPath = value;
+        else if (key === "hostname")
+            host ??= value;
+        else if (key === "user")
+            user ??= value;
+        else if (key === "port")
+            port ??= value;
+    }
+    return {
+        identityFiles,
+        controlPath,
+        ...(host ? { host } : {}),
+        ...(user ? { user } : {}),
+        ...(port ? { port } : {}),
+    };
+}
+/** `ssh-add -l` → the agent probe. Exit 1 = no identities, 2 = no agent. */
+export function parseAgentList(res) {
+    if (sshAgentUnavailable(res.status, res.stderr))
+        return { reachable: false, identities: [] };
+    const identities = sshIdentityLines(res.stdout);
+    return { reachable: true, identities };
+}
+const CONFIG_TIMEOUT_MS = 5_000;
+const CONNECT_TIMEOUT_MS = 12_000;
+/**
+ * The ONE probe that touches the network. Non-interactive (`BatchMode`) so it
+ * can never stop on a prompt behind the alt screen, and — this is the part
+ * that matters — it must neither CHANGE anything nor weaken anything.
+ *
+ * `StrictHostKeyChecking=yes` is doing both jobs. It is read-only: `yes` never
+ * writes `known_hosts`, where `accept-new` PERSISTS a new host key as a side
+ * effect of asking a diagnostic question, and `no` both accepts an unverified
+ * key and may append it — harmless only while paired with
+ * `UserKnownHostsFile=/dev/null`, a pairing one edit away from silently
+ * writing again. And it keeps VERIFYING
+ * against the operator's real file, so the probe cannot quietly succeed
+ * against a host whose key changed. A key that is unknown or does not match
+ * fails with "Host key verification failed", which the classifier reads and
+ * reports with its own remedy — the honest outcome, and never a lie about
+ * reachability.
+ */
+export function batchProbeArgv(host) {
+    return [
+        "-o",
+        "BatchMode=yes",
+        "-o",
+        "ConnectTimeout=8",
+        "-o",
+        "StrictHostKeyChecking=yes",
+        host,
+        "true",
+    ];
+}
+/**
+ * Collect the probes and classify. One probe per class:
+ * `ssh -G` (what key and socket ssh would use — no network), `ssh -O check`
+ * (is the master alive), `ssh-add -l` (what the agent holds), and, only when
+ * the master is down, ONE bounded BatchMode connection.
+ */
+export async function triageConnection(cfg, deps = {}) {
+    if (transportOf(cfg) === "local") {
+        return {
+            kind: "local",
+            cause: "local transport — the daemon runs on this machine, no ssh involved",
+            remedy: "",
+        };
+    }
+    const run = deps.run ?? realProbeRunner;
+    const exists = deps.exists ?? existsSync;
+    const home = deps.home ?? homedir();
+    const host = cfg.ssh_host;
+    const dump = parseSshConfigDump((await run("ssh", ["-G", host], CONFIG_TIMEOUT_MS)).stdout);
+    const identityFiles = dump.identityFiles.map((p) => expandHome(p, home));
+    const identity = identityFiles.find((p) => exists(p)) ?? identityFiles[0];
+    const controlPath = expandControlPath(dump.controlPath, dump, home);
+    // `connect.ts` already owns this argv — one spelling of "is the master
+    // alive", shared with the `s` path, so the two can never drift.
+    const master = await run("ssh", masterCheckArgv(cfg), CONFIG_TIMEOUT_MS);
+    const masterAlive = master.status === 0;
+    const agent = parseAgentList(await run("ssh-add", ["-l"], CONFIG_TIMEOUT_MS));
+    let identityFingerprint;
+    if (identity && exists(`${identity}.pub`)) {
+        const fp = await run("ssh-keygen", ["-lf", `${identity}.pub`], CONFIG_TIMEOUT_MS);
+        identityFingerprint = fp.stdout.split(/\s+/).find((t) => t.includes(":"));
+    }
+    const probes = {
+        host,
+        masterAlive,
+        ...(controlPath ? { controlPath } : {}),
+        controlSocketExists: controlSocketPresent(controlPath, exists),
+        identityFiles,
+        ...(identity ? { identity } : {}),
+        ...(identityFingerprint ? { identityFingerprint } : {}),
+        agent,
+    };
+    if (!masterAlive) {
+        const res = await run("ssh", batchProbeArgv(host), CONNECT_TIMEOUT_MS);
+        probes.connect = { ok: res.status === 0, stderr: res.stderr, timedOut: res.timedOut };
+    }
+    return classifyConnection(probes);
+}
+/** The one-line summary the board's top bar and the notice line share. */
+export function diagnosisLine(d) {
+    return d.remedy === "" ? d.cause : `${d.cause} · fix: ${d.remedy}`;
+}
+//# sourceMappingURL=sshtriage.js.map

package/dist/src/tui/sshtriage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sshtriage.js","sourceRoot":"","sources":["../../../src/tui/sshtriage.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,WAAW;AACX,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,6DAA6D;AAC7D,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAqDtD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,CAAC;QACN,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE;aACF,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAChC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,gFAAgF;AAChF,MAAM,aAAa,GAAG;IACpB,YAAY;IACZ,mCAAmC;IACnC,0BAA0B;IAC1B,uBAAuB;CACxB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG;IAChC,uBAAuB;IACvB,qDAAqD;IACrD,wCAAwC;CACzC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,yBAAyB,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;AAEjG;;+DAE+D;AAC/D,MAAM,iBAAiB,GAAG;IACxB,oBAAoB;IACpB,uBAAuB;IACvB,8BAA8B;CAC/B,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,eAAe;IACf,mBAAmB;IACnB,iBAAiB;IACjB,uBAAuB;IACvB,8BAA8B;IAC9B,cAAc;CACf,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,IAAI,GAAG,IAAI;SACd,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,kBAAkB,CAAC,CAAmB;IACpD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,CAAC,CAAC,mBAAmB;QACvB,OAAO,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,0CAA0C;IAC1C,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,YAAY,CAAC,CAAmB;IAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC/C,6EAA6E;IAC7E,sDAAsD;IACtD,MAAM,GAAG,GAAG,WAAW,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,OAAO,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,6BAA6B,GAAG,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAmB;IACpD,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC,IAAI,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,uCAAuC;YAC9D,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAEvC,2EAA2E;IAC3E,8EAA8E;IAC9E,qDAAqD;IACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,aAAa,GACjB,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC/B,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,MAAM,eAAe,GACnB,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAE9D,IAAI,eAAe,EAAE,CAAC;QACpB,uEAAuE;QACvE,4BAA4B;QAC5B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,wEAAwE,QAAQ,IAAI,oCAAoC,EAAE;YAC1I,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,OAAO;YAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,uCAAuC,CAAC;YACvF,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IACE,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC,EACvD,CAAC;QACD,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,oCAAoC,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,WAAW,CAAC,CAAC,CAAC,6BAA6B,sBAAsB;YAClK,MAAM,EAAE,eAAe,CAAC,CAAC,IAAI,EAAE;YAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,wEAAwE,QAAQ,IAAI,8BAA8B,EAAE;YACpI,MAAM,EAAE,oCAAoC,CAAC,CAAC,IAAI,OAAO;YACzD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,qBAAqB,QAAQ,IAAI,uBAAuB,EAAE;YAC1E,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,OAAO;YAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,qCAAqC,CAAC;YACrF,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,aAAa,QAAQ,IAAI,eAAe,EAAE;QACjE,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,OAAO;QAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAmB,EAAE,QAAkC,EAAE,IAAY;IACvF,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IACpC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS;QACpB,OAAO,GAAG,IAAI,kFAAkF,CAAC;IACnG,IAAI,CAAC,KAAK,CAAC;QACT,OAAO,GAAG,IAAI,kCAAkC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACzF,IAAI,QAAQ,KAAK,IAAI;QACnB,OAAO,GAAG,IAAI,qBAAqB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACxH,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,GAAG,IAAI,qBAAqB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,4BAA4B,GAAG,IAAI,KAAK,oCAAoC,GAAG,IAAI,eAAe,gBAAgB,CAAC;IACzL,CAAC;IACD,OAAO,GAAG,IAAI,qBAAqB,GAAG,IAAI,OAAO,QAAQ,CAAC,CAAC,IAAI,oBAAoB,CAAC;AACtF,CAAC;AAcD,MAAM,CAAC,MAAM,eAAe,GAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CACnE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,KAAK,GAAG,QAAQ,CACpB,GAAG,EACH,IAAI,EACJ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EACxC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,CAAC,GAAG,GACsE,CAAC;QACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,SAAS,CAAC;QAC/D,iEAAiE;QACjE,qEAAqE;QACrE,MAAM,QAAQ,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,CAAC;YACN,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,SAAS,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YACxF,QAAQ;SACT,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,MAAuD,EACvD,IAAY;IAEZ,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAC1D,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;SACzB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;SACnC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;SACnC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;SACnC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACnD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED;;qEAEqE;AACrE,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,MAA8B;IAC/E,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,GAAG,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAO7C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,IAAwB,CAAC;IAC7B,IAAI,IAAwB,CAAC;IAC7B,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,KAAK,cAAc;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACjD,IAAI,GAAG,KAAK,aAAa,IAAI,WAAW,KAAK,EAAE;YAAE,WAAW,GAAG,KAAK,CAAC;aACrE,IAAI,GAAG,KAAK,UAAU;YAAE,IAAI,KAAK,KAAK,CAAC;aACvC,IAAI,GAAG,KAAK,MAAM;YAAE,IAAI,KAAK,KAAK,CAAC;aACnC,IAAI,GAAG,KAAK,MAAM;YAAE,IAAI,KAAK,KAAK,CAAC;IAC1C,CAAC;IACD,OAAO;QACL,aAAa;QACb,WAAW;QACX,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,GAAgB;IAC7C,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC7F,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AAQD,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO;QACL,IAAI;QACJ,eAAe;QACf,IAAI;QACJ,kBAAkB;QAClB,IAAI;QACJ,2BAA2B;QAC3B,IAAI;QACJ,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc,EACd,OAAmB,EAAE;IAErB,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,oEAAoE;YAC3E,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,eAAe,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAE1B,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5F,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAEpE,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC9E,IAAI,mBAAuC,CAAC;IAC5C,IAAI,QAAQ,IAAI,MAAM,CAAC,GAAG,QAAQ,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,GAAG,QAAQ,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAClF,mBAAmB,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAqB;QAC/B,IAAI;QACJ,WAAW;QACX,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,mBAAmB,EAAE,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC;QAC9D,aAAa;QACb,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,KAAK;KACN,CAAC;IACF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACvE,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,CAAsB;IAClD,OAAO,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;AACrE,CAAC"}

package/dist/src/tui/startup.js

@@ -0,0 +1,172 @@
+// Startup progress — the bring-up, reported IN the companion column.
+//
+// The column is empty at that moment and already the right shape (its width
+// comes from config), so it costs no new surface: memory forward, OpenViking
+// namespaces, container bring-up, day rollover and the first poll each report
+// there, and when the companion is up the mirror takes the space back. Lines
+// printed on the NORMAL screen would be erased by the alt screen's clear.
+//
+// A step that never completes must be distinguishable from one still working:
+// past STALL_AFTER_MS a running step stops looking like a spinner and says so,
+// with the elapsed time, in warning colour. Nothing here has a timeout of its
+// own — the bring-up steps own their deadlines; this only tells the truth about
+// how long one has been going.
+import { ACCENT, BAD, MUTED, OK, RESET, WARN } from "./design.js";
+/** After this long a running step is flagged as overdue rather than working. */
+export const STALL_AFTER_MS = 20_000;
+/** The bring-up, in the order it runs. Declared here so the column shows every
+ * step from the first frame — a step nobody has reached yet is `pending`, which
+ * is a different thing from one that failed. */
+export const STARTUP_STEPS = [
+    { key: "ssh", label: "vm ssh" },
+    { key: "poll", label: "daemon status" },
+    { key: "memory-forward", label: "memory forward" },
+    { key: "memory-namespaces", label: "memory namespaces" },
+    { key: "container", label: "companion container" },
+    { key: "rollover", label: "day rollover" },
+    { key: "companion-pi", label: "companion pi" },
+];
+/** Re-render cadence while the bring-up is unsettled. Deliberately slower than
+ * a second is not worth it (the elapsed counter would visibly stutter) and
+ * faster is pointless; it is independent of the 3s poll and never triggers
+ * one — it only repaints what is already known. */
+export const DEFAULT_TICK_MS = 1_000;
+/**
+ * The bring-up's state. Total by construction: an unknown key is ignored rather
+ * than throwing — a progress reporter must never be able to break the startup
+ * it is reporting on.
+ */
+export class StartupProgress {
+    opts;
+    order;
+    byKey = new Map();
+    constructor(steps = STARTUP_STEPS, opts = {}) {
+        this.opts = opts;
+        this.order = steps.map((s) => ({ key: s.key, label: s.label, state: "pending" }));
+        for (const s of this.order)
+            this.byKey.set(s.key, s);
+    }
+    now() {
+        return this.opts.now?.() ?? Date.now();
+    }
+    set(key, patch) {
+        const step = this.byKey.get(key);
+        if (!step)
+            return;
+        Object.assign(step, patch);
+        if (this.settled())
+            this.stop();
+        else
+            this.ensureTicker();
+        this.opts.onUpdate?.(this);
+    }
+    /** The re-render tick. Unref'd, so it can never hold the process open at
+     * quit, and self-stopping the moment nothing is running any more. */
+    ticker;
+    ensureTicker() {
+        const ms = this.opts.tickMs ?? DEFAULT_TICK_MS;
+        if (this.ticker !== undefined || ms <= 0)
+            return;
+        const t = setInterval(() => {
+            if (this.settled()) {
+                this.stop();
+                return;
+            }
+            this.opts.onUpdate?.(this);
+        }, ms);
+        t.unref?.();
+        this.ticker = t;
+    }
+    /** Stop ticking. Called on settle and from the TUI's teardown. */
+    stop() {
+        if (this.ticker !== undefined)
+            clearInterval(this.ticker);
+        this.ticker = undefined;
+    }
+    /** Start (or restart) a step: what a previous attempt said — a failure's
+     * detail, its end time — is cleared, never carried into this one. */
+    begin(key, detail) {
+        const step = this.byKey.get(key);
+        if (step) {
+            delete step.detail;
+            delete step.endedAt;
+        }
+        this.set(key, {
+            state: "running",
+            startedAt: this.now(),
+            ...(detail !== undefined ? { detail } : {}),
+        });
+    }
+    /** Update a running step's detail WITHOUT restarting its clock — "what it is
+     * doing right now". Restarting it would hide a stall behind chatter. */
+    note(key, detail) {
+        if (this.byKey.get(key)?.state !== "running")
+            return;
+        this.set(key, { detail });
+    }
+    done(key, detail) {
+        this.set(key, {
+            state: "done",
+            endedAt: this.now(),
+            ...(detail !== undefined ? { detail } : {}),
+        });
+    }
+    fail(key, detail) {
+        this.set(key, { state: "failed", endedAt: this.now(), detail });
+    }
+    skip(key, detail) {
+        this.set(key, {
+            state: "skipped",
+            endedAt: this.now(),
+            ...(detail !== undefined ? { detail } : {}),
+        });
+    }
+    steps() {
+        return this.order.map((s) => ({ ...s }));
+    }
+    /** Every step has reached a terminal state — nothing left to re-render for,
+     * which is what stops the ticker. */
+    settled() {
+        return this.order.every((s) => s.state !== "pending" && s.state !== "running");
+    }
+    lines() {
+        return startupLines(this.order, this.now());
+    }
+}
+/** ` · 400ms` for a step that actually ran; "" for one that never began. */
+function took(s) {
+    return s.startedAt !== undefined && s.endedAt !== undefined
+        ? ` · ${secs(s.endedAt - s.startedAt)}`
+        : "";
+}
+function secs(ms) {
+    return ms < 1_000 ? `${Math.max(0, Math.round(ms))}ms` : `${Math.round(ms / 1000)}s`;
+}
+/** Pure render: one line per step, in declaration order. */
+export function startupLines(steps, nowMs) {
+    return steps.map((s) => {
+        const detail = s.detail && s.detail.trim() !== "" ? ` · ${s.detail.trim()}` : "";
+        switch (s.state) {
+            case "pending":
+                return `${MUTED}○ ${s.label} · waiting${RESET}`;
+            case "running": {
+                const elapsed = s.startedAt === undefined ? 0 : Math.max(0, nowMs - s.startedAt);
+                if (elapsed >= STALL_AFTER_MS) {
+                    return `${WARN}⚠ ${s.label} · ${secs(elapsed)} — still running, no result yet${RESET}${MUTED}${detail}${RESET}`;
+                }
+                return `${ACCENT}⟳ ${s.label} · ${secs(elapsed)}${RESET}${MUTED}${detail}${RESET}`;
+            }
+            case "done": {
+                return `${OK}✓ ${s.label}${RESET}${MUTED}${took(s)}${detail}${RESET}`;
+            }
+            case "failed":
+                // The duration matters on a failure too: 12s says the probe timed out,
+                // 40ms says it was refused outright. Its ABSENCE is also information —
+                // a step that failed without ever starting never ran at all.
+                return `${BAD}✗ ${s.label}${RESET}${MUTED}${took(s)}${RESET}${BAD}${detail}${RESET}`;
+            case "skipped":
+                return `${MUTED}– ${s.label}${detail}${RESET}`;
+        }
+    });
+}
+//# sourceMappingURL=startup.js.map

package/dist/src/tui/startup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup.js","sourceRoot":"","sources":["../../../src/tui/startup.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,+BAA+B;AAC/B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAclE,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC;;gDAEgD;AAChD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC/B,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE;IACvC,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAClD,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,EAAE;IACxD,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAClD,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE;IAC1C,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE;CACkB,CAAC;AAgCnE;;;mDAGmD;AACnD,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC;AAErC;;;;GAIG;AACH,MAAM,OAAO,eAAe;IASP;IARF,KAAK,CAAgB;IACrB,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAExD,YACE,QAAkD,aAGhD,EACe,OAAoB,EAAE;QAAtB,SAAI,GAAJ,IAAI,CAAkB;QAEvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAClF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACzC,CAAC;IAEO,GAAG,CAAC,GAAM,EAAE,KAA2B;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,OAAO,EAAE;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;;YAC3B,IAAI,CAAC,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;yEACqE;IAC7D,MAAM,CAA6C;IAEnD,YAAY;QAClB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO;QACjD,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE;YACzB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACZ,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,kEAAkE;IAClE,IAAI;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IAC1B,CAAC;IAED;yEACqE;IACrE,KAAK,CAAC,GAAM,EAAE,MAAe;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,IAAI,CAAC,MAAM,CAAC;YACnB,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;YACZ,KAAK,EAAE,SAAS;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED;4EACwE;IACxE,IAAI,CAAC,GAAM,EAAE,MAAc;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,SAAS;YAAE,OAAO;QACrD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,GAAM,EAAE,MAAe;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;YACZ,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;YACnB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,GAAM,EAAE,MAAc;QACzB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC,GAAM,EAAE,MAAe;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;YACZ,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;YACnB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;yCACqC;IACrC,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACjF,CAAC;IAED,KAAK;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,4EAA4E;AAC5E,SAAS,IAAI,CAAC,CAAc;IAC1B,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QACzD,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE;QACvC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,IAAI,CAAC,EAAU;IACtB,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;AACvF,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,YAAY,CAAC,KAA6B,EAAE,KAAa;IACvE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,SAAS;gBACZ,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,KAAK,aAAa,KAAK,EAAE,CAAC;YAClD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;gBACjF,IAAI,OAAO,IAAI,cAAc,EAAE,CAAC;oBAC9B,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,kCAAkC,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;gBAClH,CAAC;gBACD,OAAO,GAAG,MAAM,KAAK,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;YACrF,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;YACxE,CAAC;YACD,KAAK,QAAQ;gBACX,uEAAuE;gBACvE,uEAAuE;gBACvE,6DAA6D;gBAC7D,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;YACvF,KAAK,SAAS;gBACZ,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,KAAK,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/tui/tabs.js

@@ -0,0 +1,41 @@
+// The TUI's eight surfaces, in the order their digit keys reach them. One
+// vocabulary, applied everywhere: the identifier here IS the label on the nav
+// bar, the word in the help overlay, the tab name the companion's `switch_tab`
+// verb accepts, and the heading in docs/tui.md.
+//
+//   board     what the reviewer is doing right now, PR by PR
+//   memory    the reviewer's durable store — the timeline, day by day
+//   digest    what the EOD sweep wrote — a document, read top to bottom
+//   tickets   the tracker tickets adjudication filed
+//   deploy    what the VM runs versus this checkout, and the button that ships
+//   metrics   whether the reviewer is working well over time
+//   feedback  the loop: signal → adjudication → proposal → change → revert
+//   scan      the whole-repo scan's report — findings by unit, triage, the
+//             stage 2 plan, the run and its stop
+//
+// This module imports nothing, so keys.ts, cmdbar.ts and actions.ts can all
+// read the order without a cycle through app.ts.
+export const TABS = [
+    "board",
+    "memory",
+    "digest",
+    "tickets",
+    "deploy",
+    "metrics",
+    "feedback",
+    "scan",
+];
+export function isTab(value) {
+    return typeof value === "string" && TABS.includes(value);
+}
+/** The digit key that opens each tab: `1`…`8` in TABS order. */
+export function tabDigit(tab) {
+    return String(TABS.indexOf(tab) + 1);
+}
+/** The tab a digit key opens, or undefined for a digit no tab owns. */
+export function tabForDigit(ch) {
+    if (!/^[1-9]$/.test(ch))
+        return undefined;
+    return TABS[Number(ch) - 1];
+}
+//# sourceMappingURL=tabs.js.map

package/dist/src/tui/tabs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tabs.js","sourceRoot":"","sources":["../../../src/tui/tabs.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAC/E,gDAAgD;AAChD,EAAE;AACF,6DAA6D;AAC7D,sEAAsE;AACtE,wEAAwE;AACxE,qDAAqD;AACrD,+EAA+E;AAC/E,6DAA6D;AAC7D,2EAA2E;AAC3E,2EAA2E;AAC3E,iDAAiD;AACjD,EAAE;AACF,4EAA4E;AAC5E,iDAAiD;AAEjD,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,UAAU;IACV,MAAM;CACE,CAAC;AAIX,MAAM,UAAU,KAAK,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,IAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,QAAQ,CAAC,GAAQ;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9B,CAAC"}