@sagmans/dsh-tui 0.6.0 → 0.8.0

package/lib/index.js

@@ -1,71 +1,37 @@
-import { randomUUID } from 'node:crypto';
-import { writeFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { ProcessTerminal, ScrollView, isKeyRelease, matchesKey } from '@earendil-works/pi-tui';
-import { startAgent } from "./agent/host.js";
-import { PICKER_LIMIT, createSessionHistory, presetOfStoredSession, readSessionTitle, } from "./agent/history.js";
-import { createPromptHistory } from "./agent/prompt-history.js";
-import { createPresetRoster, parsePresetArgument } from "./agent/presets.js";
-import { createToolPresenter } from "./agent/present.js";
-import { forkPoint } from "./agent/fork.js";
-import { hiddenTail, NO_UNDO, redoStep, resetUndo, turnsOf, UNDO_TURN_SETTLE_MS, undoStep } from "./agent/undo.js";
-import { PROFILE_NAME, resumeHint } from "./identity.js";
+import { ScrollView } from '@earendil-works/pi-tui';
+import { createSessionHistory, presetOfStoredSession } from "./agent/history.js";
+import { createPresetRoster } from "./agent/presets.js";
 import { createStatusFacts } from "./agent/status.js";
-import { ModelSwitch, createModelCatalog, parseModelArgument, readModelRouteKey } from "./agent/model.js";
-import { JOB_READ_LINES, createJobDirectory, describeJobs, parseJobsArgument } from "./jobs.js";
-import { SubagentRoster, createSubagentControl, describeSubagents, parseSubagentsArgument, resolveRun, } from "./subagents.js";
 import { describeMissingOptional, describeMissingRequired, probeComposition } from "./compat/probe.js";
-import { ApprovalGate, QuestionGate, toGateQuestions } from "./gates.js";
-import { cancelStep, quitStep } from "./input/cancel.js";
-import { createAnswerCompletionProvider, createCompletionProvider } from "./input/completion.js";
-import { createFileIndex } from "./input/file-search.js";
-import { ghostSuffix } from "./input/ghost.js";
-import { LOCAL_COMMANDS, classifySubmission } from "./input/submission.js";
-import { createDeferredNotice } from "./settings-notice.js";
-import { ChordReader, DEFAULT_PREFIX_KEYS, DEFAULT_PREFIX_WINDOW_S, chordBindings, chordKeysLine, installKeybindings, surfaceKeysLine, } from "./input/keymap.js";
-import { defaultKeymap, hintKeys, surfaceBindings } from "./input/actions.js";
-import { resolveConfig } from "./config.js";
-import { FoldCursor } from "./fold-cursor.js";
-import { createRestoreRegistry } from "./terminal/restore.js";
-import { ExternalEditor } from "./terminal/external-editor.js";
-import { installSignalRestore } from "./terminal/signals.js";
-import { WarningSafeTui } from "./terminal/warning-screen.js";
-import { BELL, shouldRingBell } from "./terminal/bell.js";
-import { clipboardSequence } from "./terminal/clipboard.js";
-import { CLEAR_TITLE, windowTitle } from "./terminal/title.js";
-import { driverReportFor, sessionStartReason } from "./herdr/state.js";
-import { createHerdrReporter } from "./herdr/reporter.js";
-import { defaultExportFile, transcriptToText } from "./export.js";
-import { createTheme, forwardEditorTheme, forwardMarkdownTheme } from "./theme.js";
-import { detectColourMode } from "./theme-capability.js";
-import { defaultSettings, readScope, settingsProblemMessage, toOverrides, TUI_SETTINGS_NAMESPACE, TuiSettingsSchema } from "./theme-settings.js";
+import { hasLiveRowSettings, readRowSettings, resolveConfig } from "./config.js";
+export { Config } from "./config.js";
+import { describeSkillDrift } from "./install-skills.js";
+import { windowTitle } from "./terminal/title.js";
 import { toolDisplayFor } from "./tool-display.js";
-import { pendingPrompts } from "./queue.js";
-import { renderThemeTable } from "./theme-command.js";
-import { DEFAULT_THEME, builtinNames, builtinThemesDir, ensureThemesHome, exportTheme, loadThemes, themesHomeDir, watchThemes } from "./theme-files.js";
-import { KEYMAP_LAYERS, keymapLayer } from "./keys-command.js";
-import { resetSequence } from "./theme-tokens.js";
+import { runModelList } from "./model-list.js";
+import { LIST_MODELS_SERVICE } from "./startup.js";
 import { SessionId } from '@deepseek-ai/dsh-session';
-import { formatTokens } from "./tokens.js";
-import { TranscriptModel } from "./transcript.js";
-import { WorkFold, describeTodos, planSelectedActive, planToggleLine, readPlanState } from "./work.js";
-import { cleanCopied } from "./ui/copy.js";
+import { createAppearance } from "./surface/appearance.js";
+import { createBackgroundWork } from "./surface/background-work.js";
+import { createCommands } from "./surface/commands.js";
+import { createModalInput } from "./surface/modal-input.js";
+import { createModelChoice } from "./surface/model-choice.js";
+import { createPromptInput } from "./surface/prompt-input.js";
+import { createPromptMemory } from "./surface/prompt-memory.js";
+import { createPresetChoice } from "./surface/preset-choice.js";
+import { createSessionLifecycle } from "./surface/session-lifecycle.js";
+import { backHint, createSessionView } from "./surface/session-view.js";
+import { createStagedTurns } from "./surface/staged-turns.js";
+import { createTerminalLifecycle } from "./surface/terminal-lifecycle.js";
 import { WorkDock } from "./ui/dock.js";
 import { GateInputBar } from "./ui/gate-input.js";
-import { HistoryPicker } from "./ui/history-picker.js";
 import { surfaceLayout } from "./ui/layout.js";
-import { KeymapPicker } from "./ui/keymap-picker.js";
-import { PickerPopup, POPUP_MAX_HEIGHT, popupWidth } from "./ui/picker-card.js";
 import { PromptBar } from "./ui/prompt.js";
 import { MarkdownRenderer } from "./ui/markdown.js";
 import { createMermaidTransform } from "./ui/mermaid.js";
-import { EffortPicker, ModelPicker, PROVIDER_DEFAULT_EFFORT_ID, PresetPicker, SessionPicker, effortChoices, } from "./ui/picker.js";
 import { QueueBar } from "./ui/queue.js";
 import { StatusBar } from "./ui/status.js";
-import { DEFAULT_VIEW_STATE, TranscriptView } from "./ui/view.js";
-import { PromptStash } from "./stash.js";
-import { confirmedClear, StashConfirmPicker, StashPicker } from "./ui/stash-picker.js";
-import { ThemePicker } from "./ui/theme-picker.js";
+import { TranscriptView } from "./ui/view.js";
 export const name = 'tui';
 /**
  * Services the surface cannot run without.
@@ -75,21 +41,6 @@ export const name = 'tui';
  * every card to a bare generic row.
  */
 export const inject = ['agents', 'tools'];
-/** One second in the unit a chord window is scheduled in. */
-const MS_PER_SECOND = 1000;
-/** What the back hint names when the reader has unbound the key it would advertise. */
-const BACK_HINT_FALLBACK = 'ctrl+b';
-/** What the reader presses to leave a view they did not open. */
-const backHint = (map) => `${hintKeys(map, 'surface.back') || BACK_HINT_FALLBACK} returns to this session`;
-/** Stored sessions titled at once when the picker opens. */
-const TITLE_CONCURRENCY = 4;
-/** How often the running-state clock repaints while a turn is open. */
-const STATUS_TICK_MS = 1000;
-/** Reverse video for the cell the cursor occupies, so a ghost keeps the cursor visible. */
-const GHOST_CURSOR_PREFIX = '\u001b[7m';
-function asRecord(value) {
-    return typeof value === 'object' && value !== null ? value : undefined;
-}
 /**
  * Refuse to run without a real terminal.
  *
@@ -112,6 +63,24 @@ export function assertInteractiveTerminal(input = {}) {
  * the composition rows around it.
  */
 export function apply(ctx, config) {
+    const appExit = ctx.get('appExit');
+    if (appExit === undefined) {
+        throw new Error('dsh-tui: the dsh launcher must provide appExit; start this surface with dsh --profile tui');
+    }
+    // The listing is a pipeable dump, not a surface: it answers before the
+    // config, the composition probe, and the TTY gate, claims no terminal, and
+    // leaves the exit code to the command that owns the process.
+    if (ctx.get(LIST_MODELS_SERVICE) === true) {
+        // Provider rows mount after this one, so an immediate read would report an
+        // empty catalog; the launcher's committed startup is the first moment the
+        // composed adapters exist, and a failed boot must not print a listing.
+        const appReady = ctx.get('appReady');
+        if (appReady === undefined) {
+            throw new Error('dsh-tui: the dsh launcher must provide appReady; start this surface with dsh --profile tui');
+        }
+        appReady.onReady(() => { void runModelList(ctx, appExit); });
+        return;
+    }
     const resolved = resolveConfig(config);
     assertInteractiveTerminal();
     // Fail before taking the screen over: a missing row is a composition mistake,
@@ -119,441 +88,306 @@ export function apply(ctx, config) {
     const probe = probeComposition(service => ctx.get(service) !== undefined);
     if (probe.missingRequired.length > 0)
         throw new Error(describeMissingRequired(probe));
-    const appExit = ctx.get('appExit');
-    if (appExit === undefined) {
-        throw new Error('dsh-tui: the dsh launcher must provide appExit; start this surface with dsh --profile tui');
-    }
-    /**
-     * The surface's appearance, rebuilt whenever the reader's settings change.
-     *
-     * Renderers hold this object for the life of the session, so the current
-     * theme is swapped *behind* a stable delegate rather than reassigned: every
-     * row then reads one whole table, and a repaint can never observe a
-     * half-applied one. `--no-color` still outranks anything configured.
-     */
-    const themeMode = () => (resolved.color ? detectColourMode(process.env) : 'none');
-    /**
-     * The reader's section, or nothing when the service is not mounted.
-     *
-     * The service is only readable inside an `inject` scope — asking for it
-     * outside one is a composition error, not a missing value — so this stays a
-     * late-bound read that the injection point and the change event both use.
-     */
-    let readSection = () => defaultSettings();
-    /**
-     * The themes this session can draw.
-     *
-     * Read from disk rather than compiled in, so a file the reader saves is a theme
-     * the moment the save lands. Held beside the settings rather than inside them
-     * because the two answer different questions: the section says which name the
-     * reader chose, and this says which names exist — including the one they typed
-     * into the directory a second ago.
-     */
-    const themesHome = themesHomeDir();
-    let themeLibrary = loadThemes(themesHome, builtinThemesDir());
-    /**
-     * Persist a theme choice, replaced once the section is registered.
-     *
-     * A theme picked mid-session has to outlive it, so the choice is written
-     * through the same scope the reader's document is read from instead of kept
-     * in memory: the host persists it, and the change comes back through
-     * `settings/updated` like any other edit — which is what restyles the screen.
-     */
-    let chooseTheme = (_name) => { };
-    /**
-     * A refused settings edit, kept until the surface can show it: stderr is
-     * behind the alt screen, and the section is read on a schedule of its own.
-     */
-    const settingsNotice = createDeferredNotice();
-    let current = createTheme(themeMode());
-    /**
-     * The section as it was last read.
-     *
-     * Held so a preview can rebuild the table without reading the document again:
-     * the picker repaints on every arrow key, and a read there would report a
-     * refused section once per press.
-     */
-    let appliedSection;
-    /**
-     * The theme the picker's cursor is on, while its list is open.
-     *
-     * A preview is a name and nothing else — the document is not written — so
-     * leaving the list is one more rebuild from the section, and a session that
-     * ends mid-preview has still persisted only what the reader chose.
-     */
-    let previewTheme;
-    const applyTheme = (section) => {
-        // The row under the cursor outranks the document while a list is open, so a
-        // theme is judged on the reader's own transcript before it is taken.
-        current = createTheme(themeMode(), toOverrides({ ...section, theme: previewTheme ?? section.theme }, themeLibrary));
-    };
-    /**
-     * Show a theme without choosing it.
-     *
-     * The list's cursor is the preview: every row paints the surface and writes
-     * nothing, so two themes are compared on the reader's own transcript rather
-     * than on a name. Clearing the name puts back what the document says, which is
-     * what cancelling the list has to leave behind.
-     */
-    const showTheme = (name) => {
-        previewTheme = name;
-        // Nothing to rebuild from before the first read, and nothing to show either.
-        if (appliedSection === undefined)
-            return;
-        applyTheme(appliedSection);
-        markdown.invalidate();
-        view.invalidate();
-        tui.requestRender();
-    };
-    const theme = {
-        get revision() { return current.revision; },
-        get color() { return current.color; },
-        style: (token, text) => current.style(token, text),
-        rich: (raw, options) => current.rich(raw, options),
-        cut: (text, width, ellipsis) => current.cut(text, width, ellipsis),
-        glyph: token => current.glyph(token),
-        visible: token => current.visible(token),
-        // Forwarded rather than read, because the editor and the markdown view keep
-        // the theme object they were built with: a settings change has to reach them
-        // through a stable delegate or they would keep the boot appearance.
-        editor: forwardEditorTheme(() => current.editor),
-        markdown: forwardMarkdownTheme(() => current.markdown),
-    };
-    /**
-     * Rows the reader has opened by key. The model stays untouched; only the view
-     * reads this, and a click on one message overrides it there. A thought starts
-     * folded: it is the longest, least scannable row in the transcript, so leaving
-     * it open pushes the answer a reader came for off the screen, and a folded row
-     * still names itself and its key. Cards start from the reader's own `tools:`
-     * settings, and a PTC card's calls start open for the opposite reason: each is
-     * one clipped line under a header that already names the program.
-     */
-    const viewState = { ...DEFAULT_VIEW_STATE };
-    /**
-     * How a reply's mermaid fences draw, seeded from the reader's section.
-     *
-     * The transform reads this per render instead of capturing it, because the
-     * settings document is hot-reloaded and a session already on screen has to
-     * follow the edit.
-     */
-    let mermaidMode = defaultSettings().mermaid;
-    /** How each tool's cards draw; the settings document owns it and the view reads it live. */
-    let toolDisplay = defaultSettings().tools;
-    /** The keys that start a chord, and how long one waits; the settings document owns all of it. */
-    let prefixKeys = DEFAULT_PREFIX_KEYS;
-    let prefixWindowMs = DEFAULT_PREFIX_WINDOW_S * MS_PER_SECOND;
-    /** Every action's keys in force; the settings document owns it and a press reads it live. */
-    let keymap = defaultKeymap();
-    /** Whether prompts are recorded and offered, and the cap on how many; the settings document owns all three. */
-    let historyEnabled = defaultSettings().history.enabled;
-    let historyGhost = defaultSettings().history.ghost;
-    let historyMaxEntries = defaultSettings().history.maxEntries;
-    /**
-     * The chord between a prefix and the action that follows it.
-     *
-     * Built here, before the terminal exists, because the settings scope applies
-     * first and has to be able to end a chord armed under the keymap it replaced.
-     * The repaint the window also wants is late-bound: only a key press reaches
-     * it, and no key can arrive before the surface has started.
-     */
-    const keyChord = new ChordReader(() => prefixKeys, () => chordBindings(keymap), () => prefixWindowMs, () => tui.requestRender());
-    /**
-     * Seed the display the reader configured.
-     *
-     * The key toggles nested calls for one session, but a settings edit is a
-     * deliberate act, so it re-seeds and becomes the new starting point; the
-     * mermaid mode and the per-tool card fold have no key of their own and only
-     * ever come from the document.
-     */
-    const applyDisplay = (section) => {
-        viewState.expandSubCalls = section.subcalls === 'inline';
-        mermaidMode = section.mermaid;
-        toolDisplay = section.tools;
-        prefixKeys = section.prefixes;
-        prefixWindowMs = section.prefixWindow * MS_PER_SECOND;
-        keymap = section.keymap;
-        // Installed where the library reads it, so a remap lands on the next press
-        // rather than at the next restart.
-        installKeybindings(keymap);
-        historyEnabled = section.history.enabled;
-        historyGhost = section.history.ghost;
-        historyMaxEntries = section.history.maxEntries;
-        // A chord armed under the keymap the reader just replaced is not their chord.
-        keyChord.disarm();
-    };
-    /**
-     * Read the reader's section once and apply everything it configures.
-     *
-     * One read per change, because a refused section is reported on the way past:
-     * reading it once per field would show the reader the same refusal twice.
-     */
-    const applySettings = () => {
-        const section = readSection();
-        appliedSection = section;
-        // A settings edit ends any preview: what the document says is now the choice,
-        // and a name left over from a list would outrank it.
-        previewTheme = undefined;
-        reportMissingTheme(section);
-        applyTheme(section);
-        applyDisplay(section);
-    };
-    /**
-     * Say so when the reader named a theme that nothing answers to.
-     *
-     * The schema cannot refuse the name: a theme is a file, so the set of names is
-     * known to the directory rather than to this build, and one can stop answering
-     * between two reads. Falling back to the default without a word would leave the
-     * reader looking at shades they did not choose, so the refusal lands here
-     * instead — beside the read that found it, and alongside the rest of the
-     * section, which is still theirs.
-     */
-    const reportMissingTheme = (section) => {
-        const name = section.theme;
-        if (name === undefined || themeLibrary.get(name) !== undefined)
-            return;
-        settingsNotice.post(`dsh-tui theme "${name}" is not a theme · themes: ${themeLibrary.names().join(' · ')} · the default, ${DEFAULT_THEME}, is drawn instead`);
-    };
     /**
-     * Own the section, so the harness validates and persists it for the reader.
+     * The reader's appearance, built first because everything this surface draws
+     * holds its theme delegate and reads its preferences live.
      *
-     * Registration is how the document learns the section exists at all; without
-     * it a hand-written `dsh-tui:` block would be dropped on the next save. The
-     * first read happens here too, because this is the only scope the service
-     * may be touched in.
+     * The settings scope is registered further down, because it re-seeds the prompt
+     * bar's own keys and may only apply once that owner exists.
      */
-    ctx.inject(['settings'], settingsCtx => {
-        // Registration parses the document against the schema, so a section the
-        // schema itself refuses throws here — inside a fiber whose failure the
-        // screen never shows. Reporting it through the same holder keeps a typo
-        // from costing the reader every setting they wrote, silently.
-        let scope;
-        try {
-            scope = settingsCtx.settings.register(TUI_SETTINGS_NAMESPACE, TuiSettingsSchema);
-        }
-        catch (error) {
-            // Nothing registered means nothing to read, so the reader's switch cannot
-            // be confirmed: recording stays off rather than falling back to on.
-            historyEnabled = false;
-            settingsNotice.post(settingsProblemMessage(error) + ' · prompt history stays off until the section parses');
-            return;
-        }
-        readSection = () => readScope(scope, message => settingsNotice.post(message));
-        chooseTheme = name => {
-            void scope.update({ theme: name }).then(() => model.notice(`theme · ${name} · written to the settings document`), (error) => settingsNotice.post(settingsProblemMessage(error)));
-        };
-        applySettings();
+    const appearance = createAppearance(ctx, {
+        color: () => resolved.color,
+        // The row's own theme is the layer a profile patch can pin on a harness
+        // that keeps settings per row, so it is read here beside the section.
+        rowTheme: resolved.theme,
+        rowSettings: () => readRowSettings(config),
+        rowSettingsLive: hasLiveRowSettings(config),
+        notice: message => sessionView.notice(message),
+        render: () => tui.requestRender(),
+        invalidateMarkdown: () => markdown.invalidate(),
+        invalidateView: () => view.invalidate(),
+        // The chord a settings edit has to end is armed in the bar's own owner, so it
+        // is reached through the thing that holds it rather than copied here.
+        keybindings: () => promptInput,
+        openPicker: picker => modalInput.openPicker(picker),
     });
+    const { theme } = appearance;
+    /**
+     * The prompt bar's own presses, built here rather than beside the bar.
+     *
+     * The settings scope below applies first and has to be able to end a chord
+     * armed under the keymap it replaced, so this owner exists before the terminal
+     * or the editor do; each port reads them at call time for that reason.
+     */
+    const promptInput = createPromptInput(ctx, {
+        keymap: appearance.keymap,
+        prefixKeys: appearance.prefixKeys,
+        prefixWindowMs: appearance.prefixWindowMs,
+        tui: () => tui,
+        editor: () => editor,
+        promptBar: () => promptBar,
+        modalHandleKey: data => modalInput.handleKey(data),
+        toggleCards: appearance.toggleCards,
+        toggleSubCalls: appearance.toggleSubCalls,
+        toggleReasoning: appearance.toggleReasoning,
+        openEffortPicker: () => {
+            void modelChoice.openEffortPicker();
+        },
+        openHistoryPicker: () => {
+            void promptMemory.openHistoryPicker();
+        },
+        back: () => {
+            if (sessionView.viewingChild())
+                void sessionView.showDriven();
+        },
+        queuedPrompts: () => sessionLifecycle.queuedPrompts(),
+        turnRunning: () => sessionLifecycle.turnRunning(),
+        viewingChild: () => sessionView.viewingChild(),
+        interrupt: () => {
+            sessionLifecycle.drivingAgent()?.interrupt();
+        },
+        notice: message => sessionView.notice(message),
+        requestExit: code => requestExit(code),
+        recordPrompt: text => promptMemory.record(text),
+        runSubmission: submission => commands.runSubmission(submission),
+        drivenAgent: () => sessionLifecycle.drivingAgent()?.agent,
+        registeredCommands: target => commands.registeredCommands(target),
+    });
+    appearance.registerSection();
     /**
-     * The agent scope the tool presenter resolves against.
+     * The transcript on screen, and the fold that feeds it.
      *
-     * Tools are registered in the scoped world the session's preset mounts, so a
-     * card can only read its tool's own render intent while this names that
-     * agent. It follows whatever session the transcript is folding, because a
-     * child on screen reads through the child's scope, not the parent's.
+     * Built before anything that draws it, and before the session it opens on is
+     * driven: every read it takes of the driven identity, the staged cutoff, and
+     * the render target is a port taken at call time, because all three move as
+     * the reader switches sessions.
      */
-    let presentScope;
-    const model = new TranscriptModel(createToolPresenter(ctx, () => presentScope));
+    const sessionView = createSessionView(ctx, {
+        initialSession: resolved.sessionId,
+        drivenSession: () => sessionLifecycle.activeSession(),
+        stagedCutoff: () => stagedTurns.stagedCutoff(),
+        agentScope: id => ctx.agents?.get(id),
+        liveEvents: id => liveSession(id)?.snapshotEvents?.(),
+        render: () => tui.requestRender(),
+    });
     /**
-     * The reader's prompt history: global across projects, recorded from every
-     * submitted line, and offered back as they type. Built before the bar so its
-     * first load cannot race the first suggestion.
-     */
-    const promptHistory = createPromptHistory({
-        cap: () => historyMaxEntries,
-        warn: message => {
-            model.notice(message);
+     * The prompt's own memory, constructed where the box that draws its ghost
+     * already exists; the settings readers stay live because the document is
+     * hot-reloaded.
+     */
+    const promptMemory = createPromptMemory({
+        historyEnabled: appearance.historyEnabled,
+        historyGhost: appearance.historyGhost,
+        historyMaxEntries: appearance.historyMaxEntries,
+        theme,
+        keymap: appearance.keymap,
+        notice: message => sessionView.notice(message),
+        render: () => tui.requestRender(),
+        editorText: () => editor.getExpandedText(),
+        setEditorText: text => {
+            editor.setText(text);
             tui.requestRender();
         },
+        // A question answers in this editor, so a draft written into a borrowed bar
+        // would become somebody's answer instead of a parked prompt. An editor
+        // holding the draft in another program owns it just as firmly: a pop that
+        // landed then would be deleted from the bank and then overwritten.
+        editorAvailable: () => !promptBar.isBorrowed() && !terminalLifecycle.handedOver(),
+        activeSession: () => sessionLifecycle.activeSession(),
+        // The keyboard's lifetime is the modal owner's, so the list is handed over
+        // rather than driven here.
+        openPicker: picker => modalInput.openPicker(picker),
     });
+    const ghostBrush = promptMemory.ghostBrush;
     /**
-     * The dimmed completion drawn from recorded prompts.
-     *
-     * Colour is the affordance: with styling off the suggestion would be
-     * unreadable text the reader could still accept, which is worse than none.
-     * The cursor cell is also reversed so the cursor stays visible on the ghost.
+     * The route this session runs with, built before the status facts that report
+     * it and read through ports because the screen, the keyboard and the settings
+     * document that supplies the default all belong to the surface around it.
      */
-    const ghostBrush = {
-        enabled: () => historyEnabled && historyGhost && theme.color && theme.visible('editor.ghost'),
-        suggestion: input => ghostSuffix({ entries: promptHistory.entries(), ...input }),
-        paint: (text, cell) => {
-            const styled = theme.style('editor.ghost', text);
-            return cell === 'cursor' ? GHOST_CURSOR_PREFIX + styled + resetSequence() : styled;
-        },
-    };
-    const work = new WorkFold();
-    const modelSwitch = new ModelSwitch();
+    const modelChoice = createModelChoice(ctx, {
+        statusFacts: () => statusFacts(),
+        keymap: appearance.keymap,
+        openPicker: picker => modalInput.openPicker(picker),
+        notice: message => sessionView.notice(message),
+        render: () => tui.requestRender(),
+    });
     const agentPresets = createPresetRoster(ctx);
-    /** The mode named on the command line, which is the only one that may conflict. */
-    const requestedPreset = resolved.preset;
-    /**
-     * The mode a session the reader starts from here on joins.
-     *
-     * A launch flag seeds it and a successful switch updates it, so `/new` and
-     * `/fork` land in the mode the reader last chose; nothing is written to
-     * settings, because the mode of a session is not a property of the machine.
-     * Unset means nobody chose, which is where the roster's default applies.
-     */
-    let seat = requestedPreset;
-    /**
-     * The mode a session takes its seat in: the reader's latest choice, or the
-     * roster's default read at this moment.
-     *
-     * The default cannot be captured when this row applies: it comes from the
-     * settings document, which may be read after that, so a captured copy would
-     * pin every later session to the mode the bundle happened to ship.
-     */
-    const seatMode = () => seat ?? agentPresets?.defaultId;
-    const catalog = createModelCatalog(ctx);
-    const jobDirectory = createJobDirectory(ctx);
-    let jobs = [];
-    const roster = new SubagentRoster();
-    const subagentControl = createSubagentControl(ctx);
-    const markdown = new MarkdownRenderer(theme.markdown, createMermaidTransform({ theme, mode: () => mermaidMode }));
-    const restore = createRestoreRegistry();
-    const terminal = new ProcessTerminal();
-    const tui = new WarningSafeTui(terminal, { copySelection });
-    // A frame that cannot be drawn leaves the last good screen up, so the failure
-    // has to reach the transcript: otherwise the surface looks frozen and nothing
-    // on screen can say why.
-    tui.onFrameError = error => model.reportError(error);
-    /** Whether a child process owns the terminal, which is when nothing here may write to it. */
-    let handedOver = false;
-    /** Whether the host has unloaded this surface, after which nothing may start it again. */
-    let disposed = false;
-    /** An exit asked for while a child owned the terminal, run once the screen is ours again. */
-    let deferredExit;
     /**
-     * Write to the tty, but only while this surface owns it.
-     *
-     * An editor the reader opened draws its own screen on the same terminal, so a
-     * title or a bell from here would land on top of it and, for a bell, sound as
-     * if the editor had failed. The title is written again when the screen comes
-     * back; a bell that fell in the gap is dropped rather than rung late.
-     */
-    const writeTerminal = (text) => {
-        if (!handedOver)
-            terminal.write(text);
-    };
-    /**
-     * Put a copied selection on the clipboard as the words it selected.
-     *
-     * A terminal copies the screen, so a drag across a message takes the box the
-     * message was drawn in along with it. The rows the last frame drew are the
-     * account of that frame, so the copy is read back through them: the shape the
-     * surface added comes off, and nothing the reader wrote does.
-     */
-    function copySelection(text) {
-        if (handedOver)
-            return Promise.resolve(false);
-        terminal.write(clipboardSequence(cleanCopied(text, view.copyRows())));
-        return Promise.resolve(true);
-    }
-    /** The session this surface drives: commands, approvals, and the bell belong to it. */
-    let activeSession = resolved.sessionId;
-    /** The session the transcript is showing, which can be one of its children. */
-    let viewedSession = resolved.sessionId;
-    let pending;
-    let pendingPicker;
-    /** A pick being vetted owns the list, not the keyboard: filtering stays live while its verdict is read. */
-    let vetting = false;
-    const view = new TranscriptView(model, theme, markdown, {
-        state: () => viewState,
-        gate: () => pending?.gate.card(),
-        picker: () => pendingPicker?.card?.(),
-        keys: () => keymap,
-        toolDisplay: tool => toolDisplayFor(toolDisplay, tool),
+     * Which mode a session takes, read through ports because the open path mounts
+     * through the same roster and the screen, the keyboard, the notice, and the
+     * session the reader watches all belong to the surface around it.
+     */
+    const presetChoice = createPresetChoice({
+        agentPresets,
+        requestedPreset: resolved.preset,
+        // The mode a session ran is a property of its own log, which is the same
+        // history this surface lists the stored sessions from.
+        storedPreset: async (id) => {
+            const history = createSessionHistory(ctx);
+            return history === undefined ? undefined : await presetOfStoredSession(history, id);
+        },
+        livePreset: id => agentPresets?.current(liveSession(id)),
+        drivingAgent: () => sessionLifecycle.drivingAgent(),
+        keymap: appearance.keymap,
+        openPicker: picker => modalInput.openPicker(picker),
+        notice: message => sessionView.notice(message),
+        render: () => tui.requestRender(),
+        returnToDrivenSession: async () => {
+            if (sessionView.viewingChild())
+                await sessionView.show(sessionLifecycle.activeSession());
+        },
+    });
+    const backgroundWork = createBackgroundWork(ctx, {
+        drivingAgent: () => sessionLifecycle.drivingAgent(),
+        activeSession: () => sessionLifecycle.activeSession(),
+        notice: text => sessionView.notice(text),
+        marker: text => sessionView.marker(text),
+        render: () => tui.requestRender(),
+        navigate: id => {
+            void sessionView.show(SessionId(id));
+        },
+        backgroundChanged: running => herdr.background(running),
+    });
+    const markdown = new MarkdownRenderer(theme.markdown, createMermaidTransform({ theme, mode: () => appearance.mermaidMode() }));
+    const terminalLifecycle = createTerminalLifecycle(ctx, {
+        reportFrameError: error => sessionView.reportError(error),
+        notice: message => sessionView.notice(message),
+        copyRows: () => view.copyRows(),
+        activeSession: () => sessionLifecycle.activeSession(),
+        sessionOpened: () => sessionLifecycle.sessionOpened(),
+        turnRunning: () => sessionLifecycle.turnRunning(),
+        stopClock: () => sessionLifecycle.stopClock(),
+        exit: appExit,
+        draftText: () => editor.getExpandedText(),
+        draftBorrowed: () => promptBar.isBorrowed(),
+        holdDraft: text => promptBar.replaceHeld(text),
+        writeDraft: text => editor.setText(text),
+    });
+    const { terminal, tui, herdr, disposers, writeTerminal, requestExit, exited } = terminalLifecycle;
+    const view = new TranscriptView(sessionView.model, theme, markdown, {
+        state: appearance.viewState,
+        gate: () => modalInput.gateCard(),
+        picker: () => modalInput.pickerCard(),
+        keys: appearance.keymap,
+        toolDisplay: tool => toolDisplayFor(appearance.toolDisplay(), tool),
     });
     // The key map goes in before the bar exists, so no press can be read as the
     // send the library submits on by default. A settings document read after this
     // point installs over it, which is why the bar reads the map per press.
-    installKeybindings(keymap);
-    const editor = new GateInputBar(tui, theme.editor, () => keymap, ghostBrush);
+    promptInput.installBindings();
+    const editor = new GateInputBar(tui, theme.editor, appearance.keymap, ghostBrush);
     // Answers are written in the reader's own editor, which is why a question
     // borrows the bar instead of drawing a second one beside it.
     const promptBar = new PromptBar(editor);
-    const disposers = [];
-    // The presenter closure outlives the composition's own teardown, so it must
-    // not keep an agent alive after its world unwinds.
-    disposers.push(() => {
-        presentScope = undefined;
-    });
-    let agent;
-    let turnOpen = false;
     /**
-     * The staged undo cursor for the session this terminal drives.
-     *
-     * Prompts are never deleted: the cursor chooses how much of the live log the
-     * transcript shows. A cursor counts the turns of one log, so openAgent resets it.
-     */
-    let undoState = NO_UNDO;
-    /** Event index the transcript must not fold past while turns are hidden. */
-    let stagedCut;
-    /** Whether an undo is settling an interrupt, so a second press cannot race it. */
-    let undoPending = false;
-    let turnStartedAt;
-    let exited = false;
-    /** Whether a session was really opened, which is what an exit hint can name. */
-    let sessionOpened = false;
-    /** Re-read the job board; it is live state, so nothing else can fold it. */
-    const refreshJobs = () => {
-        jobs = agent === undefined || jobDirectory === undefined ? [] : jobDirectory.list(agent.agent);
-        tui.requestRender();
-    };
+     * The one modal interaction at a time, and the keyboard it holds.
+     *
+     * Built before the transcript view so the view can ask it for a card: the
+     * card a gate or picker draws is read per paint, never copied.
+     */
+    const modalInput = createModalInput(ctx, {
+        herdr,
+        editor,
+        tui,
+        terminal,
+        theme,
+        keymap: appearance.keymap,
+        promptBar,
+        refreshCompletion: () => promptInput.applyCompletion(),
+        activeSession: () => sessionLifecycle.activeSession(),
+    });
+    disposers.push(sessionView.clearPresentScope);
+    /**
+     * The staged cursor over the session this terminal drives, and the prompts
+     * parked behind it.
+     *
+     * Every port is read at call time — the agent, the session, the draft, the
+     * queue all move while an undo settles an interrupt — so this owner can exist
+     * before the agent it replaces does.
+     */
+    const stagedTurns = createStagedTurns({
+        viewingChild: () => sessionView.viewingChild(),
+        activeSession: () => sessionLifecycle.activeSession(),
+        sessionEvents: id => sessionView.sessionEvents(id),
+        resetTranscript: () => sessionView.reset(),
+        foldTranscript: (id, cutoff) => sessionView.fold(id, cutoff),
+        drivingAgent: () => sessionLifecycle.drivingAgent(),
+        disposeOutgoing: () => sessionLifecycle.disposeOutgoing(),
+        openSession: (id, resume, fork) => sessionLifecycle.openAgent(id, resume, fork),
+        queuedPrompts: () => sessionLifecycle.queuedPrompts(),
+        canPark: () => stash !== undefined,
+        parkPrompt: text => stash?.stashEditor(text) ?? Promise.resolve(),
+        turnRunning: () => sessionLifecycle.turnRunning(),
+        draft: () => editor.getExpandedText(),
+        writeDraft: text => editor.setText(text),
+        notice: message => sessionView.notice(message),
+        render: () => tui.requestRender(),
+    });
     // The bank is built once the picker exists to answer for it, so the status
     // source is late-bound: the footer must not read a half-constructed stash.
     let stash;
     const statusFacts = createStatusFacts(ctx, {
-        sessionId: () => activeSession,
-        activity: () => ({ running: turnOpen, startedAt: turnStartedAt }),
-        override: () => modelSwitch.current(),
+        sessionId: () => sessionLifecycle.activeSession(),
+        activity: () => sessionLifecycle.activity(),
+        override: () => modelChoice.current(),
         home: process.env.HOME,
-        chord: () => keyChord.hint(),
+        chord: () => promptInput.chordHint(),
         // Read per paint rather than written into the marker the view left behind:
         // a hint stored with the transcript would keep naming the key of the day it
         // was written, and the reader may remap it with the row already on screen.
-        back: () => (viewedSession === activeSession ? undefined : backHint(keymap)),
+        back: () => (sessionView.viewingChild() ? backHint(appearance.keymap()) : undefined),
         stash: () => stash?.entryCount,
     });
     const statusBar = new StatusBar(statusFacts, theme);
-    const dock = new WorkDock(() => work.state(), theme, () => jobs, () => roster.list());
-    // The queue is read from the agent this terminal drives rather than from the
-    // session on screen, because it sits on the editor that submits to that agent.
-    const queuedPrompts = () => pendingPrompts(ctx, liveSession(activeSession));
-    const queue = new QueueBar(queuedPrompts, theme);
-    // Only a running turn has anything to say over time, so the clock stops with it.
-    const statusTicker = setInterval(() => {
-        if (turnOpen)
-            tui.requestRender();
-    }, STATUS_TICK_MS);
-    disposers.push(() => clearInterval(statusTicker));
-    // A window that outlived the surface would repaint a screen that is gone.
-    disposers.push(() => keyChord.disarm());
-    // A containing Herdr is told what this pane is doing; away from one the
-    // reporter is inert, so the surface never depends on being multiplexed.
-    const herdr = createHerdrReporter();
-    // Kept out of the disposal list on purpose: the row is handed back before
-    // this stops guarding it, so a host that leaves during the release still
-    // releases synchronously.
-    const unregisterExit = herdr.registerExitRelease();
-    restore.add(() => tui.stop());
-    ctx.effect(() => () => {
-        // A surface the host unloads owns no screen and keeps no listeners, so a
-        // child still running in another process must not be handed a start().
-        disposed = true;
-        // The pane stops being an agent before the process that claimed it unwinds:
-        // a release that ran after the reports were unregistered would race them,
-        // and one that never ran would leave a row that reads as a live agent. The
-        // reports already on the wire are settled first, because Herdr ignores a
-        // release for a pane nothing has claimed yet — the report that followed it
-        // would otherwise claim the row back. The promise is returned so a host that
-        // waits for teardown waits for the row too, and the exit listener outlives
-        // the wait, so one that does not still hands the row back synchronously.
-        const released = herdr.release().catch(() => undefined);
-        restore.restore();
-        for (const dispose of disposers.reverse())
-            dispose();
-        return released.finally(unregisterExit);
+    const dock = new WorkDock(() => sessionView.workState(), theme, () => backgroundWork.jobs(), () => backgroundWork.roster.list(), undefined, id => {
+        void sessionView.show(SessionId(id));
     });
+    const queue = new QueueBar(() => sessionLifecycle.queuedPrompts(), theme);
+    /**
+     * The agent this terminal drives, and the clock that repaints it while a turn
+     * is open.
+     *
+     * Built after the widgets that draw it and before the layout that mounts them,
+     * and every port is read at call time: the readers above exist before this
+     * owner does, and the session it drives moves under them.
+     */
+    const sessionLifecycle = createSessionLifecycle(ctx, {
+        initialSession: resolved.sessionId,
+        model: resolved.model,
+        provider: resolved.provider,
+        bell: resolved.bell,
+        presetFor: (id, resume, fork) => presetChoice.presetFor(id, resume, fork),
+        installModelChoice: agentCtx => modelChoice.setup(agentCtx),
+        mountPreset: async (agentCtx, preset) => {
+            await agentPresets?.mount(agentCtx, preset);
+        },
+        liveSession: id => liveSession(id),
+        installCompletion: () => promptInput.installCompletion(),
+        sessionEvents: id => sessionView.sessionEvents(id),
+        setViewed: id => sessionView.setViewed(id),
+        setPresentScope: scope => sessionView.setPresentScope(scope),
+        clearPresentScope: sessionView.clearPresentScope,
+        resetTranscript: () => sessionView.reset(),
+        replay: id => sessionView.replay(id),
+        fold: id => sessionView.fold(id),
+        notice: message => sessionView.notice(message),
+        render: () => tui.requestRender(),
+        promptMemorySessionOpened: () => promptMemory.sessionOpened(),
+        stagedSessionOpened: id => stagedTurns.sessionOpened(id),
+        turnSettled: () => stagedTurns.turnSettled(),
+        acceptCatalog: info => backgroundWork.acceptCatalog(info),
+        resetRoster: () => backgroundWork.resetRoster(),
+        refreshJobs: () => backgroundWork.refresh(),
+        herdr,
+        writeTerminal,
+        exiting: exited,
+        disposers,
+    });
+    // A window that outlived the surface would repaint a screen that is gone.
+    disposers.push(() => promptInput.disarmChord());
+    // Registered here rather than inside the terminal owner: this is the position
+    // the one teardown list gave the signal seam before the surface was split.
+    disposers.push(terminalLifecycle.signalShutdown());
     tui.setLayoutRoot(surfaceLayout({
         transcript: new ScrollView(view, { follow: 'end', primary: true, overscroll: 'chain' }),
         dock,
@@ -562,2147 +396,59 @@ export function apply(ctx, config) {
         status: statusBar,
     }));
     tui.setFocus(editor);
-    const requestExit = (code, reason) => {
-        if (exited)
-            return;
-        // A child owns the terminal: restoring it here would leave the reader a
-        // shell behind an editor that is still running, and would put its tty back
-        // into cooked mode under it. The exit waits for the screen to come back.
-        if (handedOver) {
-            deferredExit = { code, reason };
-            return;
-        }
-        exited = true;
-        clearInterval(statusTicker);
-        // The screen goes back at once, so leaving feels like leaving; the row goes
-        // back behind it. Reports already on the wire are settled first, because
-        // Herdr ignores the release of a pane nothing has claimed yet — the report
-        // that followed it would otherwise claim the row back during shutdown.
-        terminal.write(CLEAR_TITLE);
-        restore.restore();
-        void herdr
-            .release()
-            // Nobody is left to report a release that failed on the way out, and a
-            // row that could not be cleared is not a reason to keep the process.
-            .catch(() => undefined)
-            .finally(() => {
-            // Everything below is written after the release: a failure nobody can
-            // read is not a failure that was reported.
-            if (reason !== undefined)
-                terminal.write(`\ndsh-tui: ${reason}\n`);
-            // The hint is computed here rather than read from the context because
-            // only the surface knows which session it is leaving: a fork or a
-            // switch moves it. A run that opened nothing has nothing to offer back:
-            // the identity it was launched with names no log, so pointing at it
-            // would send the reader to a conversation that does not exist.
-            if (sessionOpened)
-                terminal.write(`\n${resumeHint(String(activeSession), PROFILE_NAME)}\n`);
-            appExit(code);
-        });
-    };
-    // A signal ends the process from outside the surface, and the default action
-    // would leave the reader on a screen no shell prompt is drawn in: the same
-    // shutdown a quit key runs goes to the signals a supervisor sends.
-    disposers.push(installSignalRestore({ shutdown: code => requestExit(code, 'interrupted') }));
-    const openGate = (next) => {
-        pending = next;
-        // The card's own title names the decision, which is what a reader glancing
-        // at a wall of panes needs in order to know which one to open.
-        herdr.block(next.gate.card().title);
-        // A gate owns the keyboard: the editor must not collect the decision keys.
-        editor.disableSubmit = true;
-        tui.setFocus(null);
-        // A question is answered in this editor, which the gate draws under the row
-        // being answered, so the hardware cursor belongs to it while it is borrowed.
-        // It is set after the focus is cleared, which unmarks the component it left.
-        editor.focused = next.kind === 'question';
-        tui.requestRender();
-    };
-    const closeGate = () => {
-        pending = undefined;
-        herdr.unblock();
-        editor.disableSubmit = false;
-        // The question is answered or skipped, so the reader gets their prompt back
-        // in the bar they left it in, with the menu the prompt bar offered.
-        promptBar.giveBack();
-        applyCompletion();
-        tui.setFocus(editor);
-        tui.requestRender();
-    };
-    /**
-     * Whether the bar holds anything the reader wrote.
-     *
-     * Whitespace counts: it is a character the editor holds, and a press that
-     * clears it is the press the reader asked for. A paste counts expanded,
-     * because a marker is content rather than an absence of it.
-     */
-    const barHasText = () => editor.getExpandedText() !== '';
+    disposers.push(promptInput.inputListener());
+    stash = promptMemory.buildStash();
     /**
-     * What each key the surface answers itself does; false hands the press back.
+     * The command plane, wired to the owners every submission is delegated to.
      *
-     * Keyed by the table's own ids, so a key added to {@link SURFACE_ACTIONS}
-     * without a handler here fails to compile rather than doing nothing.
+     * Built once the bank exists, because the parked-draft commands route to the
+     * very bank the footer counts; every other port is a live read, so a command
+     * typed after a session switch answers for the session now on screen.
      */
-    const surfaceActions = {
-        toolDetail: () => {
-            viewState.expandCards = !viewState.expandCards;
-            tui.requestRender();
-            return true;
-        },
-        subCalls: () => {
-            viewState.expandSubCalls = !viewState.expandSubCalls;
-            tui.requestRender();
-            return true;
-        },
-        reasoning: () => {
-            viewState.expandReasoning = !viewState.expandReasoning;
-            tui.requestRender();
-            return true;
+    const commands = createCommands(ctx, {
+        launch: {
+            sessionId: resolved.sessionId,
+            resume: resolved.resume,
+            resumePicker: resolved.resumePicker,
         },
-        effort: () => {
-            void openEffortPicker();
-            return true;
-        },
-        history: () => {
-            void openHistoryPicker();
-            return true;
-        },
-        back: () => {
-            if (viewedSession !== activeSession)
-                void showAgentSession();
-            return true;
-        },
-        interrupt: () => {
-            // In raw mode Ctrl+C never reaches the process as SIGINT, so the surface
-            // decides what one press takes back — and a press with nothing left to
-            // cancel is handed back rather than spent on leaving.
-            const queued = queuedPrompts();
-            const step = cancelStep({
-                barHasText: barHasText(),
-                queuedPrompts: queued.length,
-                turnRunning: turnOpen,
-                viewingChild: viewedSession !== activeSession,
-            });
-            switch (step) {
-                case 'clear-editor':
-                    editor.setText('');
-                    tui.requestRender();
-                    return true;
-                case 'reclaim-queued':
-                    // The interrupt drops whatever the agent had not started, so the words
-                    // are read before it is stopped and handed back to the bar: a key that
-                    // means "stop" must not be the key that loses the reader's own prompts.
-                    agent?.interrupt();
-                    editor.setText(queued.join('\n'));
-                    model.notice(`interrupt requested · ${queued.length} queued ${queued.length === 1 ? 'prompt' : 'prompts'} back in the bar`);
-                    tui.requestRender();
-                    return true;
-                case 'interrupt-turn':
-                    agent?.interrupt();
-                    model.notice('interrupt requested');
-                    tui.requestRender();
-                    return true;
-                case 'leave-child-view':
-                    void showAgentSession();
-                    return true;
-                case 'hand-back':
-                    return false;
-            }
-        },
-        quit: () => {
-            // The only key that leaves. Text in the bar keeps it for the editor, so
-            // the library's delete forward is never taken from a reader who is editing.
-            switch (quitStep({ barHasText: barHasText(), overlayOpen: tui.hasOverlay(), turnRunning: turnOpen })) {
-                case 'cancel-then-quit':
-                    // An exit that waits on a tool call is not an exit, so the turn is
-                    // asked to stop and the leave does not wait for the answer.
-                    agent?.interrupt();
-                    requestExit(0);
-                    return true;
-                case 'quit':
-                    requestExit(0);
-                    return true;
-                case 'hand-back':
-                    return false;
-            }
-        },
-    };
-    disposers.push(tui.addInputListener(data => {
-        // A key arrives as a press and a release once the surface asks the terminal
-        // to report key events, and this library drops the release only for the
-        // focused component: a listener sees both halves, so an arrow key that is
-        // acted on twice steps a picker two rows and answers a question two options
-        // on. Falls through rather than consuming, which leaves a component that
-        // asked for releases its own half.
-        if (isKeyRelease(data))
-            return undefined;
-        if (pending !== undefined) {
-            if (pending.kind === 'approval') {
-                const outcome = pending.gate.handleKey(data);
-                if (outcome === undefined)
-                    tui.requestRender();
-                else {
-                    pending.settle(outcome);
-                    closeGate();
-                }
-            }
-            else {
-                const answers = pending.gate.handleKey(data);
-                if (answers === undefined)
-                    tui.requestRender();
-                else {
-                    pending.settle(answers);
-                    closeGate();
-                }
-            }
-            return { consume: true };
-        }
-        if (pendingPicker !== undefined) {
-            const action = pendingPicker.picker.handleKey(data);
-            if (action === undefined) {
-                tui.requestRender();
-                return { consume: true };
-            }
-            if (vetting) {
-                // A refusal check must not take the keyboard with it: the reader keeps
-                // filtering and can still leave, while a second pick waits for the
-                // first verdict rather than racing it.
-                if (action.kind === 'cancel')
-                    settlePicker(undefined);
-                return { consume: true };
-            }
-            if (action.kind === 'cancel') {
-                settlePicker(undefined);
-                return { consume: true };
-            }
-            const vet = pendingPicker.vet;
-            if (vet === undefined) {
-                settlePicker(action.id);
-                return { consume: true };
-            }
-            vetting = true;
-            void (async () => {
-                let reason;
-                try {
-                    reason = await vet(action.id);
-                }
-                finally {
-                    // A check that fails must not take the keyboard with it.
-                    vetting = false;
-                }
-                if (pendingPicker === undefined)
-                    return;
-                if (reason === undefined) {
-                    settlePicker(action.id);
-                    return;
-                }
-                pendingPicker.picker.setNote(reason);
-                tui.requestRender();
-            })();
-            return { consume: true };
-        }
-        // A chord is the surface's second key: the prefix is consumed and the
-        // footer names what may follow, while a key that finishes nothing is handed
-        // on. Detail the reader asked for is always available, even mid-turn: the
-        // collapsed view is a default, not the only state.
-        const chorded = keyChord.handle(data);
-        if (chorded !== undefined) {
-            if (chorded.kind === 'action')
-                runSubmission(chorded.binding.submission);
-            tui.requestRender();
-            return { consume: true };
-        }
-        for (const binding of surfaceBindings(keymap)) {
-            if (!matchesKey(data, binding.key))
-                continue;
-            return surfaceActions[binding.action]() ? { consume: true } : undefined;
-        }
-        return undefined;
-    }));
-    const registry = () => ctx.get('commands');
-    /** One scan of the workspace, shared by both menus: the listing is read-only and cached. */
-    const fileIndex = createFileIndex(process.cwd());
-    /** The menu the prompt bar offers: the commands this session can run, and the workspace's files. */
-    let promptCompletion;
-    /** The menu an answer offers, which is the same menu without the commands. */
-    let answerCompletion;
-    /**
-     * Give the bar the menu its current role calls for.
-     *
-     * A question borrows the prompt bar's editor rather than drawing its own, so
-     * the provider has to follow the borrow: a slash command is a line this
-     * surface would run, and an answer is text the model reads, so the two roles
-     * must not share one menu.
-     */
-    const applyCompletion = () => {
-        const chosen = promptBar.isBorrowed() ? answerCompletion : promptCompletion;
-        if (chosen !== undefined)
-            editor.setAutocompleteProvider(chosen);
-    };
-    /**
-     * Offer completion for whatever this session can run right now.
-     *
-     * The registry is agent-scoped and still empty while the agent starts, so the
-     * menu is rebuilt when the agent arrives and whenever a package registers
-     * another command. Both providers are built here because the answer's is the
-     * prompt bar's own minus the commands, and a rebuild while a question is open
-     * must not leave the answer menu unreachable.
-     */
-    const installCompletion = () => {
-        const current = agent?.agent;
-        const commands = registry();
-        if (current === undefined || commands === undefined)
-            return;
-        answerCompletion = createAnswerCompletionProvider(process.cwd(), fileIndex);
-        promptCompletion = createCompletionProvider(commands.list(current), process.cwd(), fileIndex);
-        applyCompletion();
-    };
-    /**
-     * Take the keyboard for a picker.
-     *
-     * The list is already in hand, so the picker is interactive immediately while
-     * the titles that make its rows recognizable stream in behind it.
-     */
-    const askForSession = async (history, sessions) => {
-        const titles = new Map();
-        void loadTitles(history, sessions, titles);
-        const picked = await openPicker(new SessionPicker(sessions, () => titles, undefined, () => keymap), refuseReason);
-        return picked === undefined ? undefined : SessionId(picked);
-    };
-    /** Give the keyboard back to the editor and answer whoever opened the picker. */
-    const settlePicker = (id) => {
-        const settle = pendingPicker?.settle;
-        // The screen goes back before the keyboard does: a box left behind a settled
-        // list would sit over the transcript until something else repainted.
-        pendingPicker?.release?.();
-        pendingPicker = undefined;
-        herdr.unblock();
-        editor.disableSubmit = false;
-        tui.setFocus(editor);
-        settle?.(id);
-        tui.requestRender();
-    };
-    /**
-     * Why this run cannot open a stored session, or undefined when it can.
-     *
-     * A session runs the mode its own log recorded, so a `--preset` that
-     * disagrees with it can only be refused: the picker asks first so the refusal
-     * lands in the list rather than after the terminal has been handed back.
-     */
-    const refuseReason = async (id) => {
-        if (requestedPreset === undefined || agentPresets === undefined)
-            return undefined;
-        try {
-            await presetFor(SessionId(id), true, undefined);
-            return undefined;
-        }
-        catch (error) {
-            return error instanceof Error ? error.message : String(error);
-        }
-    };
-    /**
-     * Take the keyboard for a picker and answer with the id it settled on.
-     *
-     * Where the list is drawn is the caller's decision, because it is a decision
-     * about the reader's attention. A list that is the destination — a session to
-     * open, a model to switch to — joins the transcript and is read with it. A
-     * list that is a reference for the work in front of the reader is drawn over
-     * that work instead, so looking something up does not cost them their place.
-     * The keyboard is owned the same way either way.
-     */
-    const openPicker = (picker, vet, placement = 'inline') => new Promise(resolve => {
-        const overlay = placement === 'popup'
-            ? tui.showOverlay(new PickerPopup(rows => picker.card(rows), () => terminal.rows, theme), {
-                width: popupWidth(terminal.columns),
-                maxHeight: POPUP_MAX_HEIGHT,
-                anchor: 'center',
-                margin: 1,
-                // The surface's own listener reads every press before a focused
-                // component does, so the box needs no focus to be driven; taking it
-                // would only move focus away from where the reader left it.
-                nonCapturing: true,
-            })
-            : undefined;
-        pendingPicker = {
-            picker,
-            settle: resolve,
-            vet,
-            card: overlay === undefined ? () => picker.card() : undefined,
-            release: overlay === undefined ? undefined : () => overlay.hide(),
-        };
-        // A picker owns the keyboard exactly as a gate does: nothing moves until
-        // the reader chooses, so it is the same kind of wait.
-        herdr.block(picker.card().title);
-        editor.disableSubmit = true;
-        tui.setFocus(null);
-        tui.requestRender();
-    });
-    /**
-     * Open the key map over the surface.
-     *
-     * Nothing here is a pick: a row names an action and the keys reaching it, so
-     * the id the list settles on is thrown away. What the reader came for is the
-     * list itself, and the filter that narrows it.
-     */
-    const openKeyMap = (layer) => {
-        void openPicker(new KeymapPicker(() => keymap, layer), undefined, 'popup');
-    };
-    /**
-     * Choose a theme from a list the screen follows.
-     *
-     * Enter writes the choice through the settings document, the same path a typed
-     * name takes, so what lands is what the reader was looking at. Leaving the list
-     * restores the theme in force, because the document never changed while they
-     * looked.
-     */
-    const openThemePicker = async () => {
-        const picked = await openPicker(new ThemePicker(() => themeLibrary, () => appliedSection?.theme, () => keymap, theme => showTheme(theme?.name)));
-        if (picked === undefined) {
-            showTheme(undefined);
-            return;
-        }
-        // The row stays on screen until the document carries it: restoring first
-        // would flash the theme the reader just left. The write clears the preview as
-        // it lands, and a write that fails says so, leaving a theme that is still one
-        // of theirs rather than shades nothing chose.
-        chooseTheme(picked);
-    };
-    /**
-     * Reverse search over recorded prompts, seeded with whatever is in the bar.
-     *
-     * A pick replaces the draft; a cancel leaves it exactly as it was, because the
-     * list was opened to look rather than to lose what is already typed.
-     */
-    const openHistoryPicker = async () => {
-        if (!historyEnabled) {
-            model.notice('prompt history is disabled in ' + TUI_SETTINGS_NAMESPACE + ' settings');
-            tui.requestRender();
-            return;
-        }
-        if (promptHistory.entries().length === 0) {
-            const blocked = promptHistory.blockedReason();
-            model.notice(blocked === undefined ? 'no prompt history yet' : 'prompt history is unavailable: ' + blocked);
-            tui.requestRender();
-            return;
-        }
-        // The expanded text is what the reader wrote; a large paste sits in the bar
-        // as a marker, and seeding with it would filter out the prompt it came from.
-        const picked = await openPicker(new HistoryPicker(() => promptHistory.entries(), editor.getExpandedText(), () => keymap));
-        if (picked === undefined)
-            return;
-        editor.setText(picked);
-        tui.requestRender();
-    };
-    /** The roster as the picker paints it, refreshed when the picker opens. */
-    let presetRows = [];
-    /** Choose the mode a session that has not started yet will run. */
-    const askForPreset = async (currentId) => {
-        if (agentPresets === undefined)
-            return undefined;
-        presetRows = await agentPresets.list();
-        return await openPicker(new PresetPicker(() => presetRows, () => currentId, () => keymap));
-    };
-    /**
-     * The prompt bank for the session this surface drives.
-     *
-     * The surface owns the editor, the picker, and the notices, so the bank is
-     * handed the few things it needs to reach them and nothing else: the commands
-     * stay free of terminal state and are exercised without one in the tests.
-     */
-    stash = new PromptStash({
-        getEditorText: () => editor.getExpandedText(),
-        setEditorText: text => {
-            editor.setText(text);
-            tui.requestRender();
-        },
-        // A question answers in this editor, so a draft written into a borrowed bar
-        // would become somebody's answer instead of a parked prompt. An editor
-        // holding the draft in another program owns it just as firmly: a pop that
-        // landed then would be deleted from the bank and then overwritten.
-        editorIsAvailable: () => !promptBar.isBorrowed() && !handedOver,
-        notice: message => model.notice(message),
-        pick: (entries, label) => openPicker(new StashPicker(entries, label, () => keymap)),
-        confirm: async (count) => confirmedClear(await openPicker(new StashConfirmPicker(count, () => keymap))),
+        preset: resolved.preset,
+        presetRoster: agentPresets,
+        missingOptional: () => describeMissingOptional(probe),
+        // Read at start rather than at mount: the copy a reader installed can lag
+        // this build, and the surface is the only place left that can say so.
+        skillDrift: () => describeSkillDrift(),
+        session: sessionLifecycle,
+        transcript: sessionView,
+        route: modelChoice,
+        modes: presetChoice,
+        work: backgroundWork,
+        staged: stagedTurns,
+        memory: promptMemory,
+        appearance,
+        terminal: terminalLifecycle,
+        modals: modalInput,
+        statusFacts: () => statusFacts(),
+        stash: () => stash,
         render: () => tui.requestRender(),
-    }, 
-    // The bank follows the session this surface drives, not the directory it
-    // runs in: two terminals in one checkout keep separate drafts, and a resume
-    // finds the ones it parked. Read per command so a switch retargets it.
-    { sessionId: () => String(activeSession) });
-    /**
-     * The reader's own editor, opened over the draft the bar holds.
-     *
-     * The screen is handed over rather than drawn beside: an editor needs the
-     * terminal, so this is the one moment the surface is not the process painting
-     * on it. Every failure is reported as a notice and leaves the bar as it was,
-     * because the caller is a key press with nowhere to put an error.
-     */
-    const externalEditor = new ExternalEditor({
-        suspend: () => {
-            handedOver = true;
-            try {
-                // The frame is left in place rather than repainted into the normal
-                // buffer: the editor is about to paint over that same screen.
-                tui.stop({ preserveScreen: true });
-            }
-            catch (error) {
-                // A stop that failed leaves the screen ours; leaving the flag up would
-                // suppress every later title and defer every exit for good.
-                handedOver = false;
-                throw error;
-            }
-        },
-        resume: () => {
-            // Whatever the host unloaded is not coming back: starting it again would
-            // paint on a terminal this process is done with, into listeners that are gone.
-            if (disposed)
-                return;
-            try {
-                tui.start();
-            }
-            finally {
-                handedOver = false;
-            }
-            // Entering the alternate screen clears it, and any render asked for while
-            // the child owned the terminal was dropped after setting the very flag that
-            // makes the next ordinary request a no-op: without a forced one the reader
-            // would get a blank screen with a working keyboard under it.
-            tui.requestRender(true);
-            // The title is state this surface owns and the handoff swallowed any change
-            // to it, so a turn that ended while the editor was open would leave
-            // "working" up until the next turn.
-            writeTerminal(windowTitle(process.cwd(), turnOpen ? 'working' : 'ready'));
-        },
-        notice: message => model.notice(message),
     });
-    /** Title the listed sessions without making the reader wait for the slowest log. */
-    const loadTitles = async (history, sessions, titles) => {
-        const queue = [...sessions];
-        const worker = async () => {
-            for (;;) {
-                const next = queue.shift();
-                if (next === undefined)
-                    return;
-                try {
-                    const title = await readSessionTitle(history, next);
-                    if (title === undefined)
-                        continue;
-                    titles.set(next.id, title);
-                    tui.requestRender();
-                }
-                catch {
-                    // A log this build cannot read stays listed by id; the picker is not
-                    // the place to explain storage, and one bad session is not the list.
-                }
-            }
-        };
-        await Promise.all(Array.from({ length: TITLE_CONCURRENCY }, worker));
-    };
-    const storedSessions = async () => {
-        const history = createSessionHistory(ctx);
-        if (history === undefined) {
-            model.notice('this profile has no session storage, so there is nothing to resume');
-            tui.requestRender();
-            return undefined;
-        }
-        try {
-            const sessions = await history.list(PICKER_LIMIT);
-            if (sessions.length === 0) {
-                model.notice('no stored sessions to resume');
-                tui.requestRender();
-                return undefined;
-            }
-            return { history, sessions };
-        }
-        catch (error) {
-            model.notice(`could not list stored sessions: ${error instanceof Error ? error.message : String(error)}`);
-            tui.requestRender();
-            return undefined;
-        }
-    };
-    const chooseSession = async () => {
-        const listed = await storedSessions();
-        return listed === undefined ? undefined : askForSession(listed.history, listed.sessions);
-    };
-    /**
-     * Replay a stored session so a resumed run opens on the conversation the
-     * reader left, not on an empty screen: the durable log is the transcript.
-     */
-    /**
-     * Fold one session's history into the transcript.
-     *
-     * A live session answers from memory, which is the only source that includes
-     * events not yet flushed and the only one that works for a child that has not
-     * materialized; a session this process is not running falls back to storage.
-     */
+    /** The live session this process runs, which is the only source holding an unflushed tail. */
     const liveSession = (id) => ctx.get('sessions')?.get?.(id);
-    /**
-     * The fold's place in the viewed session's durable sequence.
-     *
-     * A resumed session is folded while its agent's loop is already live, so the
-     * same event can reach the surface twice: once on the stream and once from the
-     * log the fold is reading. The sequence number every durable event carries is
-     * what tells the two apart.
-     */
-    const foldCursor = new FoldCursor();
-    /**
-     * Fold one durable event into the view, unless a staged cursor hides it.
-     *
-     * Undo never deletes, so the log keeps the hidden suffix; this filter is the
-     * one place the transcript and the log disagree about where the session ends.
-     */
-    const applyDurable = (session, event) => {
-        if (stagedCut !== undefined && session === activeSession && typeof event.seq === 'number' && event.seq >= stagedCut)
-            return;
-        if (foldCursor.accept(session, event))
-            applyEvent(event);
-    };
-    const foldHistory = async (id, through) => {
-        // Resolved before the fold so every card reads its tool through the scope
-        // that actually registered it; a stored session nobody runs has none.
-        presentScope = ctx.agents?.get(id);
-        // Every fold starts a cleared transcript, so a session already known to the
-        // cursor is read from its first event rather than from where it left off.
-        foldCursor.reset();
-        const inMemory = liveSession(id)?.snapshotEvents?.();
-        if (inMemory !== undefined) {
-            const events = through === undefined ? inMemory : inMemory.slice(0, through);
-            for (const event of events)
-                applyDurable(id, event);
-            return events.length;
-        }
-        // Only a live session can be staged: undo acts on the agent this terminal
-        // drives, and a stored log has no cursor to hide a suffix from.
-        const history = createSessionHistory(ctx);
-        if (history === undefined)
-            return 0;
-        const events = await history.read(id);
-        for (const event of events)
-            applyDurable(id, event);
-        return events.length;
-    };
-    const replayHistory = async (id) => {
-        try {
-            const folded = await foldHistory(id);
-            if (folded > 0)
-                model.notice(`replayed ${folded} events from the stored log`);
-        }
-        catch (error) {
-            model.notice(`could not replay this session: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    };
-    /**
-     * Show another session in the transcript without leaving this one.
-     *
-     * A delegation is an ordinary session, so the reader can read what a child is
-     * doing rather than only that it exists; the agent this terminal drives does
-     * not change, which keeps commands, approvals, and the bell where they were.
-     */
-    const showSession = async (id) => {
-        const previous = viewedSession;
-        model.reset();
-        work.reset();
-        viewedSession = id;
-        try {
-            await foldHistory(id);
-        }
-        catch (error) {
-            model.notice(`could not read that session: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        const returned = id === activeSession && previous !== activeSession;
-        model.marker(returned ? 'back to the session this terminal drives' : `viewing ${id}`);
-        tui.requestRender();
-    };
-    const showAgentSession = async () => {
-        await showSession(activeSession);
-    };
-    /** Feed one durable event to everything that folds it. */
-    const applyEvent = (event) => {
-        model.apply(event);
-        work.apply(event);
-    };
-    /** Every event of a session, from memory when this process runs it. */
-    const sessionEvents = async (id) => {
-        const inMemory = liveSession(id)?.snapshotEvents?.();
-        if (inMemory !== undefined)
-            return inMemory;
-        const history = createSessionHistory(ctx);
-        return history === undefined ? [] : history.read(id);
-    };
-    /** The closed turns of the session this terminal drives, newest last. */
-    const currentTurns = async () => turnsOf(await sessionEvents(activeSession));
-    /** Fold the transcript through the staged cut, or the whole log at the tip. */
-    const redrawStaged = async () => {
-        model.reset();
-        work.reset();
-        await foldHistory(activeSession, stagedCut);
-    };
-    /** Park queued prompts one per stash entry, newest first so popping replays queue order. */
-    const parkQueued = async (queued) => {
-        for (const text of [...queued].reverse())
-            await stash?.stashEditor(text);
-    };
-    /** Resolver for the turn/end an undo is waiting on, set only while waiting. */
-    let turnSettled;
-    /** Wait for the interrupted turn to close, bounded so undo can give up honestly. */
-    const waitForTurnEnd = (timeoutMs) => new Promise(resolve => {
-        const timer = setTimeout(() => {
-            turnSettled = undefined;
-            resolve(false);
-        }, timeoutMs);
-        turnSettled = () => {
-            clearTimeout(timer);
-            turnSettled = undefined;
-            resolve(true);
-        };
-    });
-    /**
-     * Stop the running turn and empty the inbox so the cut lands on a closed
-     * turn/end; queued prompts are parked first because cancelling drops them.
-     *
-     * Returns undefined when the reader's words cannot be kept: a queue with no
-     * stash to park it in, or a turn that will not close. Both leave the cursor
-     * untouched, so the transcript keeps showing what the model actually saw; a
-     * number is how many queued prompts were parked before the turn was stopped.
-     */
-    const settleForUndo = async () => {
-        const queued = queuedPrompts();
-        if (!turnOpen && queued.length === 0)
-            return 0;
-        if (queued.length > 0 && stash === undefined) {
-            model.notice('queued prompts have no stash to park in; undo cancelled');
-            tui.requestRender();
-            return undefined;
-        }
-        agent?.interrupt();
-        if (queued.length > 0)
-            await parkQueued(queued);
-        if (turnOpen && !(await waitForTurnEnd(UNDO_TURN_SETTLE_MS))) {
-            model.notice('could not stop the turn; undo cancelled');
-            tui.requestRender();
-            return undefined;
-        }
-        return queued.length;
-    };
-    const runUndoCommand = () => {
-        if (undoPending)
-            return;
-        undoPending = true;
-        void (async () => {
-            if (viewedSession !== activeSession) {
-                model.notice('undo works on the session this terminal drives · ctrl+b comes back');
-                tui.requestRender();
-                return;
-            }
-            const turns = await currentTurns();
-            if (undoState.hidden >= turns.length && !turnOpen) {
-                model.notice('nothing to undo');
-                tui.requestRender();
-                return;
-            }
-            const draft = editor.getExpandedText();
-            // Text this state itself restored is not the reader's draft, so undoing
-            // again must not park it and end up with two copies.
-            const holdsDraft = draft !== '' && draft !== undoState.lastRestored;
-            if (holdsDraft && stash === undefined) {
-                model.notice('the bar holds a draft and there is no stash to park it in; undo cancelled');
-                tui.requestRender();
-                return;
-            }
-            const parked = await settleForUndo();
-            if (parked === undefined)
-                return;
-            const settled = await currentTurns();
-            const next = undoStep(undoState, settled);
-            if (next === undefined) {
-                model.notice('nothing to undo');
-                tui.requestRender();
-                return;
-            }
-            if (holdsDraft) {
-                await stash?.stashEditor(draft);
-                model.notice('the draft in the bar was parked in the stash');
-            }
-            undoState = next;
-            stagedCut = hiddenTail(next, settled)?.seedCount;
-            await redrawStaged();
-            editor.setText(next.lastRestored);
-            // The parking count rides the undo notice: a notice of its own would be
-            // replaced before the frame could show it.
-            const parkedNote = parked === 0 ? '' : ` · ${parked} queued prompt${parked === 1 ? '' : 's'} parked in the stash`;
-            model.notice(`undo · ${next.hidden} prompt${next.hidden === 1 ? '' : 's'} hidden${parkedNote} · prefix r redo`);
-            tui.requestRender();
-        })()
-            .catch((error) => {
-            model.notice(`undo failed: ${error instanceof Error ? error.message : String(error)}`);
-            tui.requestRender();
-        })
-            .finally(() => {
-            undoPending = false;
-        });
-    };
-    const runRedoCommand = () => {
-        void (async () => {
-            if (viewedSession !== activeSession) {
-                model.notice('redo works on the session this terminal drives · ctrl+b comes back');
-                tui.requestRender();
-                return;
-            }
-            const turns = await currentTurns();
-            const before = editor.getExpandedText();
-            const restored = undoState.lastRestored;
-            const next = redoStep(undoState, turns);
-            if (next === undefined) {
-                model.notice('nothing to redo');
-                tui.requestRender();
-                return;
-            }
-            undoState = next;
-            stagedCut = hiddenTail(next, turns)?.seedCount;
-            await redrawStaged();
-            // A composer the reader edited is theirs; only text this state wrote is replaced.
-            if (before === restored)
-                editor.setText(next.lastRestored);
-            model.notice(next.hidden === 0
-                ? 'redo · back at the newest prompt'
-                : `redo · ${next.hidden} prompt${next.hidden === 1 ? '' : 's'} hidden`);
-            tui.requestRender();
-        })().catch((error) => {
-            model.notice(`redo failed: ${error instanceof Error ? error.message : String(error)}`);
-            tui.requestRender();
-        });
-    };
-    /**
-     * Send the reader's prompt, branching first when the transcript is staged.
-     *
-     * Context is derived from the log, so a send while turns are hidden has to
-     * continue in a child seeded with the visible prefix; submitting in place would
-     * show the model the prompts the reader undid. Every send passes through here so
-     * the branch has one commit point, not one per caller.
-     */
-    const commitStagedSend = async (text) => {
-        try {
-            const previous = agent;
-            if (previous === undefined) {
-                model.notice('the agent is still starting; try again in a moment');
-                tui.requestRender();
-                return;
-            }
-            if (undoState.hidden === 0) {
-                previous.submit(text);
-                return;
-            }
-            const source = activeSession;
-            const events = await sessionEvents(source);
-            const turns = turnsOf(events);
-            const tail = hiddenTail(undoState, turns);
-            const seed = tail === undefined ? [] : events.slice(0, tail.seedCount);
-            const childId = SessionId(`tui-session-${randomUUID()}`);
-            agent = undefined;
-            turnOpen = false;
-            turnStartedAt = undefined;
-            presentScope = undefined;
-            model.reset();
-            work.reset();
-            roster.reset();
-            await previous.dispose();
-            const opened = await openAgent(childId, false, seed.length === 0 ? undefined : { from: source, events: seed });
-            model.notice(`continuing in a new branch · ${source} keeps the undone turns`);
-            opened.submit(text);
-        }
-        catch (error) {
-            model.notice(`could not send: ${error instanceof Error ? error.message : String(error)}`);
-            tui.requestRender();
-        }
-    };
-    /**
-     * The mode one agent joins.
-     *
-     * A resumed session keeps the composition its own log recorded, because
-     * swapping it would leave logged tool calls the new composition cannot make —
-     * the same reason the harness refuses a switch once a turn has run. A session
-     * that recorded none, which is every session written before modes existed,
-     * takes the seat; a branch inherits the mode its parent is running.
-     */
-    const presetFor = async (id, resume, fork) => {
-        if (agentPresets === undefined)
-            return undefined;
-        if (fork !== undefined)
-            return agentPresets.current(liveSession(fork.from)) ?? seatMode();
-        if (!resume)
-            return seatMode();
-        const history = createSessionHistory(ctx);
-        const stored = history === undefined ? undefined : await presetOfStoredSession(history, id);
-        if (stored === undefined)
-            return seatMode();
-        const resolvedStored = await resolveStored(id, stored);
-        if (resolvedStored === undefined) {
-            // The composition this session recorded is gone. Naming one explicitly is
-            // the reader's only way forward, so that is the one case an override is
-            // taken for a stored session.
-            if (requestedPreset !== undefined)
-                return (await agentPresets.resolve(requestedPreset)).id;
-            throw new Error(`session ${id} runs mode "${stored}", which this roster no longer offers; name another with --preset`);
-        }
-        if (requestedPreset !== undefined && requestedPreset !== resolvedStored) {
-            throw new Error(`session ${id} runs mode "${resolvedStored}", so --preset ${requestedPreset} does not apply; /preset ${requestedPreset} switches it before its first turn`);
-        }
-        return resolvedStored;
-    };
-    /** The stored mode's roster row, or undefined when the roster no longer offers it. */
-    const resolveStored = async (id, stored) => {
-        try {
-            return (await agentPresets?.resolve(stored))?.id;
-        }
-        catch {
-            return undefined;
-        }
-    };
-    const openAgent = async (id, resume, fork) => {
-        // Settled before the transcript is touched, so a refusal leaves neither a
-        // half-replayed session nor a half-composed agent behind.
-        const preset = await presetFor(id, resume, fork);
-        const handle = await startAgent(ctx, {
-            sessionId: id,
-            resume,
-            model: resolved.model,
-            provider: resolved.provider,
-            cwd: process.cwd(),
-            preset,
-            setup: async (agentCtx) => {
-                modelSwitch.install(agentCtx);
-                if (preset !== undefined)
-                    await agentPresets?.mount(agentCtx, preset);
-            },
-            ...(fork === undefined ? {} : { fork }),
-        });
-        sessionOpened = true;
-        activeSession = id;
-        viewedSession = id;
-        agent = handle;
-        // A cursor counts the turns of one log; the session just opened has its own.
-        undoState = resetUndo(id);
-        stagedCut = undefined;
-        // The bank follows the session, so the footer stops counting the drafts of
-        // the session just left and the next command reads this session's file.
-        void stash?.open();
-        // agent/status is emitted on transitions only, so a driver that was
-        // already running when this surface attached — a resume that wakes
-        // straight away — would otherwise stay unreported until it stops. The
-        // status is read once here and settled before the session identity, so the
-        // report that carries the new session id states the driver's real phase
-        // rather than the one the previous session left behind.
-        herdr.driver(handle.agent.status);
-        // The agent's own id is reported rather than the requested one: a resume can
-        // be answered by the session the log actually holds.
-        herdr.session({
-            id: String(handle.sessionId),
-            cwd: process.cwd(),
-            reason: sessionStartReason({ forked: fork !== undefined, resumed: resume }),
-        });
-        // A session with no history to fold still has to present its first live
-        // card through the right scope, so the scope is set before any event can.
-        presentScope = handle.agent;
-        // Replayed only once the agent exists, because the fold reads every card
-        // through the scope the preset mounted; a fold before that scope existed
-        // degraded each replayed card to a bare generic row. The agent's loop is
-        // live by now, so the fold and the stream race over the same events; the
-        // durable sequence number is what keeps one event from landing twice.
-        if (resume)
-            await replayHistory(id);
-        // A branch inherits the conversation the reader was already reading, so it
-        // opens on that history rather than on an empty screen.
-        if (fork !== undefined)
-            await foldHistory(id);
-        disposers.push(() => {
-            void handle.dispose();
-        });
-        installCompletion();
-        model.notice(`session ${handle.sessionId}${resume ? ' (resumed)' : ''}`);
-        tui.requestRender();
-        // Returned so a caller that replaced the handle can send through the new
-        // one without a fresh read of state TypeScript can no longer widen.
-        return handle;
-    };
-    /** Move the surface to another stored session without leaving the terminal. */
-    const switchSession = async (id) => {
-        const previous = agent;
-        agent = undefined;
-        // Drop the outgoing scope before its agent is disposed, so no card folded
-        // during the transition can read a torn-down world.
-        presentScope = undefined;
-        turnOpen = false;
-        // The outgoing turn's clock dies with its agent; leaving it set would time
-        // the session being joined by work it never ran.
-        turnStartedAt = undefined;
-        model.reset();
-        work.reset();
-        roster.reset();
-        if (previous !== undefined)
-            await previous.dispose();
-        await openAgent(id, true);
-    };
-    /**
-     * Show or choose the route the next step will use.
-     *
-     * The choice is session-scoped: it changes nothing about the settings a later
-     * run reads, and the loop logs its own durable notice when the route a request
-     * actually used changes.
-     */
-    /**
-     * Show, read, or kill a background job.
-     *
-     * A terminal has no second window, so a job started by the model is otherwise
-     * invisible: the board is the only place a reader can see what is still
-     * running and stop it.
-     */
-    /**
-     * List or stop the delegations this session started.
-     *
-     * A child runs in the same process as an ordinary agent, so a stop is the
-     * cancel a reader's Ctrl+C sends to the parent; nothing here reaches into the
-     * child's own session, which keeps its own transcript either way.
-     */
-    const runSubagentsCommand = (argument) => {
-        const command = parseSubagentsArgument(argument);
-        switch (command.kind) {
-            case 'list':
-                model.notice(describeSubagents(roster.list(), Date.now()));
-                tui.requestRender();
-                return;
-            case 'open': {
-                const run = resolveRun(roster.list(), command.id);
-                if (run === undefined) {
-                    model.notice(`${command.id}: no single child matches; /subagents lists them`);
-                    tui.requestRender();
-                    return;
-                }
-                void showSession(SessionId(run.id));
-                return;
-            }
-            case 'kill': {
-                const stopped = subagentControl?.stop(command.id) ?? false;
-                model.notice(stopped
-                    ? `${command.id}: stop requested`
-                    : `${command.id}: no live child with that id`);
-                tui.requestRender();
-                return;
-            }
-            case 'invalid':
-                model.notice(`/subagents: ${command.reason}`);
-                tui.requestRender();
-                return;
-        }
-    };
-    const runJobsCommand = (argument) => {
-        if (jobDirectory === undefined) {
-            model.notice('this profile has no job registry, so there is nothing to list');
-            tui.requestRender();
-            return;
-        }
-        if (agent === undefined) {
-            model.notice('the agent is still starting; try again in a moment');
-            tui.requestRender();
-            return;
-        }
-        const command = parseJobsArgument(argument);
-        switch (command.kind) {
-            case 'list':
-                refreshJobs();
-                model.notice(describeJobs(jobs, Date.now()));
-                tui.requestRender();
-                return;
-            case 'read': {
-                const result = jobDirectory.read(agent.agent, command.id);
-                const text = result?.text.trim() ?? '';
-                model.notice(text === ''
-                    ? `${command.id}: no output yet`
-                    : `${command.id} output\n${text.split('\n').slice(-JOB_READ_LINES).join('\n')}`);
-                refreshJobs();
-                return;
-            }
-            case 'kill': {
-                const outcome = jobDirectory.kill(agent.agent, command.id);
-                model.notice(outcome === undefined
-                    ? `${command.id}: no such job`
-                    : outcome === 'requested' ? `${command.id}: stop requested` : `${command.id} had already finished`);
-                refreshJobs();
-                return;
-            }
-            case 'invalid':
-                model.notice(`/jobs: ${command.reason}`);
-                tui.requestRender();
-                return;
-        }
-    };
-    /**
-     * Give this session a title.
-     *
-     * The title is what the resume picker shows and what every other surface
-     * displays, so a reader who has several sessions can name the one they are in
-     * without waiting for the harness to guess.
-     */
-    /**
-     * Write what the reader can see to a file.
-     *
-     * The base's `/export` downloads the log through the browser, which a
-     * terminal has no way to do, so this dumps the transcript the reader is
-     * looking at — the thing worth pasting into a message.
-     */
-    const runExportCommand = (argument) => {
-        const path = resolve(argument === '' ? defaultExportFile(String(activeSession)) : argument);
-        try {
-            writeFileSync(path, transcriptToText(model.entries()), 'utf8');
-            model.notice(`transcript written to ${path}`);
-        }
-        catch (error) {
-            model.notice(`could not write ${path}: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        tui.requestRender();
-    };
-    /**
-     * Branch this conversation and continue in the branch.
-     *
-     * The branch is a real session with its own identity that inherits a prefix
-     * of this one, so a reader can try something without spending the
-     * conversation they already had. The cut is anchored to the last completed
-     * turn, because half an exchange is not a state to hand a model.
-     */
-    /** Start a fresh session without leaving the terminal. */
-    const runNewCommand = (title) => {
-        if (agent === undefined) {
-            model.notice('the agent is still starting; try again in a moment');
-            tui.requestRender();
-            return;
-        }
-        void (async () => {
-            const previous = agent;
-            agent = undefined;
-            turnOpen = false;
-            turnStartedAt = undefined;
-            model.reset();
-            work.reset();
-            roster.reset();
-            if (previous !== undefined)
-                await previous.dispose();
-            await openAgent(SessionId(`tui-session-${randomUUID()}`), false);
-            if (title !== '')
-                runRenameCommand(title);
-            model.notice('started a new session');
-            tui.requestRender();
-        })().catch((error) => {
-            model.notice(`could not start a session: ${error instanceof Error ? error.message : String(error)}`);
-            tui.requestRender();
-        });
-    };
-    /**
-     * Compose this session's agent again without leaving the conversation.
-     *
-     * A preset's standing mount only re-reads its composition file for an agent
-     * that joins after the file changed, so an edited preset, skill, or prompt
-     * file reaches a running session only by joining anew. The durable log is
-     * replayed afterwards, so the reader keeps the conversation they were reading.
-     */
-    const runReloadCommand = () => {
-        // A failed reload leaves no agent behind, so the command has to be usable
-        // again: the retry is what makes a broken composition file recoverable,
-        // while a surface that has opened no session yet is still starting.
-        if (agent === undefined && !sessionOpened) {
-            model.notice('the agent is still starting; try again in a moment');
-            tui.requestRender();
-            return;
-        }
-        const queued = queuedPrompts();
-        // Work the reader would lose is a decision, and the interrupt key already
-        // owns that decision: it stops the turn and hands queued words back to the
-        // bar. Reopening the session drops the inbox, so a reload that would take
-        // those words asks for the key instead of asking a question of its own.
-        if (turnOpen || queued.length > 0) {
-            model.notice(queued.length > 0
-                ? `${queued.length} queued ${queued.length === 1 ? 'prompt' : 'prompts'} would be dropped — ctrl+c hands them back to the bar, then /reload`
-                : 'a turn is running — ctrl+c interrupts it first (delivered text is kept), then /reload');
-            tui.requestRender();
-            return;
-        }
-        const id = activeSession;
-        void (async () => {
-            // The same transition a session switch takes, aimed at the session
-            // already open: dispose, then join its preset generation anew.
-            await switchSession(id);
-            model.notice("reloaded this session's composition; the transcript was replayed");
-            tui.requestRender();
-        })().catch((error) => {
-            const reason = error instanceof Error ? error.message : String(error);
-            model.notice(`could not reload: ${reason} — fix the composition and /reload again`);
-            tui.requestRender();
-        });
-    };
-    /** Show the todo list the agent has been keeping. */
-    const runTodoCommand = () => {
-        model.notice(describeTodos(work.state().todos));
-        tui.requestRender();
-    };
-    /**
-     * Put the last answer on the reader's clipboard.
-     *
-     * The clipboard belongs to the terminal, so this asks it through OSC 52 —
-     * which is also the only route that works over SSH.
-     */
-    const runCopyCommand = () => {
-        const last = [...model.entries()].reverse().find(entry => entry.kind === 'assistant');
-        if (last === undefined || last.kind !== 'assistant') {
-            model.notice('nothing to copy yet');
-            tui.requestRender();
-            return;
-        }
-        terminal.write(clipboardSequence(last.text));
-        model.notice(`copied ${last.text.length} characters through the terminal`);
-        tui.requestRender();
-    };
-    const runForkCommand = (title) => {
-        if (agent === undefined) {
-            model.notice('the agent is still starting; try again in a moment');
-            tui.requestRender();
-            return;
-        }
-        void (async () => {
-            const source = activeSession;
-            const events = await sessionEvents(source);
-            const point = forkPoint(events);
-            if (point === undefined) {
-                model.notice('nothing to fork yet: this session has no completed turn');
-                tui.requestRender();
-                return;
-            }
-            const childId = SessionId(`tui-session-${randomUUID()}`);
-            const previous = agent;
-            agent = undefined;
-            turnOpen = false;
-            turnStartedAt = undefined;
-            model.reset();
-            work.reset();
-            roster.reset();
-            if (previous !== undefined)
-                await previous.dispose();
-            await openAgent(childId, false, { from: source, events: events.slice(0, point.inheritedEvents) });
-            if (title !== '')
-                runRenameCommand(title);
-            model.notice(`forked from ${source} at event ${point.boundarySeq} — ${point.inheritedEvents} inherited`);
-            tui.requestRender();
-        })().catch((error) => {
-            model.notice(`could not fork: ${error instanceof Error ? error.message : String(error)}`);
-            tui.requestRender();
-        });
-    };
-    const runRenameCommand = (title) => {
-        if (title === '') {
-            model.notice('use /rename <title>; the title is what the resume picker shows');
-            tui.requestRender();
-            return;
-        }
-        const session = ctx.get('sessions')?.get?.(activeSession);
-        const titles = ctx.get('sessionTitle');
-        if (session === undefined || typeof titles?.rename !== 'function') {
-            model.notice('this profile has no session-title service, so this session cannot be renamed');
-            tui.requestRender();
-            return;
-        }
-        try {
-            const accepted = titles.rename(session, title);
-            model.notice(`session renamed to "${typeof accepted?.title === 'string' ? accepted.title : title}"`);
-        }
-        catch (error) {
-            model.notice(`could not rename: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        tui.requestRender();
-    };
-    const runModelCommand = (argument) => {
-        if (catalog === undefined) {
-            model.notice('this profile has no llm service, so models cannot be listed or switched');
-            tui.requestRender();
-            return;
-        }
-        const command = parseModelArgument(argument, catalog.providers(), modelSwitch.current());
-        switch (command.kind) {
-            case 'current':
-                // Choosing by eye is the point of a terminal selector; the picker
-                // heads itself with the route the next step will actually use.
-                void openModelPicker();
-                return;
-            case 'list-models':
-                void catalog.models(command.provider).then(entries => {
-                    model.notice(entries.length === 0
-                        ? `${command.provider} advertises no models; an id may still work`
-                        : `${command.provider}: ${entries.map(entry => entry.id).join(' ')}`);
-                    tui.requestRender();
-                }).catch((error) => {
-                    model.notice(`could not list models: ${error instanceof Error ? error.message : String(error)}`);
-                    tui.requestRender();
-                });
-                return;
-            case 'switch': {
-                const choice = command.choice;
-                if (choice.reasoningEffort === undefined) {
-                    modelSwitch.choose(choice);
-                    model.notice(`model set to ${choice.provider}/${choice.model} for the next step`);
-                    tui.requestRender();
-                    return;
-                }
-                // The route decides which efforts exist, so an explicit one is checked
-                // against the adapter before it is put in force: a typo must not become
-                // a request the provider rejects.
-                void (async () => {
-                    try {
-                        const info = await catalog.efforts(choice.provider, choice.model);
-                        const efforts = info?.efforts ?? [];
-                        if (!efforts.some(effort => effort.id === choice.reasoningEffort)) {
-                            model.notice(efforts.length === 0
-                                ? `/model: ${choice.provider}/${choice.model} advertises no reasoning efforts`
-                                : `/model: ${choice.provider}/${choice.model} does not offer reasoning effort "${choice.reasoningEffort}" — offers: ${efforts.map(effort => effort.id).join(' ')}`);
-                            tui.requestRender();
-                            return;
-                        }
-                        modelSwitch.choose(choice);
-                        model.notice(`model set to ${choice.provider}/${choice.model} (${choice.reasoningEffort}) for the next step`);
-                    }
-                    catch (error) {
-                        model.notice(`/model: could not read reasoning efforts: ${error instanceof Error ? error.message : String(error)}`);
-                    }
-                    tui.requestRender();
-                })();
-                return;
-            }
-            case 'invalid':
-                model.notice(`/model: ${command.reason}`);
-                tui.requestRender();
-                return;
-        }
-    };
-    /** Whether a route's effort list is being read, so a second key cannot race it. */
-    let openingEfforts = false;
-    /** Put the reader's effort choice in force for the next step. */
-    const applyEffort = (provider, modelId, effortId) => {
-        modelSwitch.choose(effortId === PROVIDER_DEFAULT_EFFORT_ID
-            ? { provider, model: modelId }
-            : { provider, model: modelId, reasoningEffort: effortId });
-        model.notice(`reasoning effort for ${provider}/${modelId} set to ${effortId === PROVIDER_DEFAULT_EFFORT_ID ? 'provider default' : effortId} for the next step`);
-        tui.requestRender();
-    };
-    /** Whether a model picker's catalog is being read, so a second key cannot race it. */
-    let openingModels = false;
-    /**
-     * The route the next step would actually use.
-     *
-     * Without a choice of its own the surface reports the composition default,
-     * not that it has no opinion: the picker's heading and its marked row have to
-     * agree with the status line about the route in force.
-     */
-    const effectiveRoute = () => {
-        const chosen = modelSwitch.current();
-        if (chosen !== undefined)
-            return chosen;
-        const facts = statusFacts();
-        if (facts.provider === undefined || facts.model === undefined)
-            return undefined;
-        return {
-            provider: facts.provider,
-            model: facts.model,
-            ...facts.effort === undefined ? {} : { reasoningEffort: facts.effort },
-        };
-    };
-    /** Put the reader's route choice in force for the next step. */
-    const applyRoute = (route) => {
-        const current = effectiveRoute();
-        // The levels belong to the route, so a switch clears an explicit effort
-        // while re-picking the route already in force is not a switch.
-        const keep = current !== undefined && current.provider === route.provider && current.model === route.model
-            ? current.reasoningEffort
-            : undefined;
-        modelSwitch.choose({
-            provider: route.provider,
-            model: route.model,
-            ...keep === undefined ? {} : { reasoningEffort: keep },
-        });
-        model.notice(`model set to ${route.provider}/${route.model} for the next step`);
-        tui.requestRender();
-    };
-    /**
-     * Offer the levels a route advertises, after the route is already in force.
-     *
-     * Cancelling the list is a real choice — the reader keeps the model with the
-     * provider's own default — which is why the route is applied first. The list
-     * is read before the picker opens because the rows are the route's own
-     * metadata; a menu painted before that arrived could offer a level the
-     * request would then be refused for.
-     */
-    const offerRouteEfforts = async (route) => {
-        if (catalog === undefined)
-            return;
-        try {
-            const info = await catalog.efforts(route.provider, route.model);
-            const efforts = info?.efforts ?? [];
-            if (efforts.length === 0)
-                return;
-            const current = effectiveRoute();
-            const effective = current !== undefined && current.provider === route.provider && current.model === route.model
-                ? current.reasoningEffort
-                : undefined;
-            const picked = await openPicker(new EffortPicker(() => effortChoices(efforts, effective), `reasoning effort · ${route.provider}/${route.model}`, () => keymap));
-            if (picked !== undefined)
-                applyEffort(route.provider, route.model, picked);
-        }
-        catch (error) {
-            model.notice(`could not read reasoning efforts: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        tui.requestRender();
-    };
-    /**
-     * Offer every model the configured routes advertise.
-     *
-     * Rows come from the routes the llm service registered — the providers this
-     * deployment configured — and each provider's models join the open list as
-     * its catalog resolves, so the picker is filterable before the slowest
-     * adapter answers. A route whose catalog cannot be read stays reachable by
-     * name through the text form rather than by an explanation in the list.
-     */
-    const openModelPicker = async () => {
-        if (catalog === undefined) {
-            model.notice('this profile has no llm service, so models cannot be listed or switched');
-            tui.requestRender();
-            return;
-        }
-        const providers = catalog.providers();
-        if (providers.length === 0) {
-            model.notice('no provider is configured; add one before choosing a model');
-            tui.requestRender();
-            return;
-        }
-        if (openingModels)
-            return;
-        openingModels = true;
-        try {
-            const routes = [];
-            for (const provider of providers) {
-                void catalog.models(provider.id).then(entries => {
-                    if (entries.length === 0)
-                        return;
-                    routes.push(...entries.map(entry => ({ provider: provider.id, model: entry.id, name: entry.name })));
-                    tui.requestRender();
-                }).catch(() => {
-                    // One adapter's discovery failure is not the list's to explain.
-                });
-            }
-            const picked = await openPicker(new ModelPicker(() => routes, effectiveRoute, () => keymap));
-            if (picked === undefined)
-                return;
-            const route = readModelRouteKey(picked);
-            if (route === undefined)
-                return;
-            applyRoute(route);
-            await offerRouteEfforts(route);
-        }
-        finally {
-            openingModels = false;
-            tui.requestRender();
-        }
-    };
-    /**
-     * Offer the efforts the route in force advertises.
-     *
-     * The list is read before the picker opens because the rows are the route's
-     * own metadata; a menu painted before that arrived could offer a level the
-     * request would then be refused for.
-     */
-    const openEffortPicker = async () => {
-        if (catalog === undefined) {
-            model.notice('this profile has no llm service, so reasoning efforts cannot be read');
-            tui.requestRender();
-            return;
-        }
-        const facts = statusFacts();
-        if (facts.provider === undefined || facts.model === undefined) {
-            model.notice('no model route is in use; /model <provider>/<model> picks one first');
-            tui.requestRender();
-            return;
-        }
-        if (openingEfforts)
-            return;
-        openingEfforts = true;
-        try {
-            const info = await catalog.efforts(facts.provider, facts.model);
-            const efforts = info?.efforts ?? [];
-            if (efforts.length === 0) {
-                model.notice(`${facts.provider}/${facts.model} advertises no reasoning efforts`);
-                return;
-            }
-            const picked = await openPicker(new EffortPicker(() => effortChoices(efforts, facts.effort), `reasoning effort · ${facts.provider}/${facts.model}`, () => keymap));
-            if (picked !== undefined)
-                applyEffort(facts.provider, facts.model, picked);
-        }
-        catch (error) {
-            model.notice(`could not read reasoning efforts: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        finally {
-            openingEfforts = false;
-            tui.requestRender();
-        }
-    };
-    /**
-     * Show or choose the mode this session runs.
-     *
-     * The mode decides which tools, prompt sections, and skills exist at all, so
-     * it is fixed once a turn has run: the harness refuses the swap and this
-     * surface explains why rather than pretending otherwise. Before the first
-     * turn the switch is recorded in the log, which is what keeps the transcript
-     * honest about the composition later turns ran under.
-     */
-    const runPresetCommand = (argument) => {
-        if (agentPresets === undefined) {
-            model.notice('this profile has no agent roster, so there is no mode to choose');
-            tui.requestRender();
-            return;
-        }
-        if (agent === undefined) {
-            model.notice('the agent is still starting; try again in a moment');
-            tui.requestRender();
-            return;
-        }
-        const session = agent.agent.session;
-        const current = agentPresets.current(session);
-        const command = parsePresetArgument(argument);
-        if (command.kind === 'pick') {
-            if (agentPresets.started(session)) {
-                model.notice(`this session runs ${current === undefined ? 'a mode' : `"${current}"`} and has already started, so its mode is fixed — /new starts a fresh session`);
-                tui.requestRender();
-                return;
-            }
-            void askForPreset(current).then(picked => picked === undefined ? undefined : applyPreset(picked));
-            return;
-        }
-        void applyPreset(command.id);
-    };
-    /** Join this session to another mode and remember it for the next session. */
-    const applyPreset = async (id) => {
-        if (agentPresets === undefined || agent === undefined)
-            return;
-        try {
-            const chosen = await agentPresets.select(agent.agent, id);
-            seat = chosen;
-            // The durable selection is folded as a marker on the session it belongs
-            // to, so a reader watching a child has to come back to see it.
-            if (viewedSession !== activeSession)
-                await showSession(activeSession);
-        }
-        catch (error) {
-            model.notice(`could not switch the mode: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        tui.requestRender();
-    };
-    const helpText = () => {
-        const current = agent?.agent;
-        const registered = current === undefined || registry() === undefined
-            ? []
-            : registry()?.list(current).map(command => `/${command.name}`) ?? [];
-        const commands = registered.length === 0 ? 'none registered yet' : registered.join(' ');
-        return `commands: ${commands} · surface: ${LOCAL_COMMANDS.join(' ')} · keys: ${surfaceKeysLine(keymap)} · ${chordKeysLine(keymap)}`;
-    };
-    /**
-     * Whether the agent this surface is driving is in plan mode.
-     *
-     * The dock's fold is the fallback, for a composition without the plan
-     * package: with the controller present its answer is the agent's own state
-     * rather than a replay of the events this surface happened to see.
-     */
-    const planState = () => {
-        const current = agent?.agent;
-        if (current === undefined)
-            return undefined;
-        const presets = ctx.get('agentPresets');
-        return readPlanState({
-            direct: name => ctx.get(name),
-            forAgent: (target, name) => presets?.serviceFor(target, name),
-        }, current);
-    };
-    const planActive = () => planSelectedActive(planState(), work.state().planMode);
-    const runCommand = (name, line) => {
-        const current = agent;
-        const commands = registry();
-        if (current === undefined) {
-            model.notice('the agent is still starting; try again in a moment');
-            tui.requestRender();
-            return;
-        }
-        if (commands === undefined || commands.find(current.agent, name) === undefined) {
-            model.notice(`unknown command: /${name} — ${helpText()}`);
-            tui.requestRender();
-            return;
-        }
-        const controller = new AbortController();
-        void commands.execute(current.agent, line, [], controller.signal).then(execution => {
-            const result = execution?.result;
-            if (result === undefined)
-                return;
-            model.notice(result.kind === 'error' ? `/${name} failed: ${result.text ?? 'no detail'}` : `/${name} ${result.text ?? 'done'}`);
-            tui.requestRender();
-        }).catch((error) => {
-            model.notice(`/${name} failed: ${error instanceof Error ? error.message : String(error)}`);
-            tui.requestRender();
-        });
-    };
-    /**
-     * Put the deployment default in force before the first turn.
-     *
-     * The agent is created before the settings file has been read, so the route
-     * its loop captured is the composition placeholder; the reader's default —
-     * effort included — only exists by the time they can type. Adopting it here
-     * is what makes the status line's route the one the request actually uses.
-     */
-    const adoptDefaultRoute = () => {
-        if (modelSwitch.current() !== undefined)
-            return;
-        const facts = statusFacts();
-        if (facts.provider === undefined || facts.model === undefined)
-            return;
-        modelSwitch.adopt({
-            provider: facts.provider,
-            model: facts.model,
-            ...(facts.effort === undefined ? {} : { reasoningEffort: facts.effort }),
-        });
-    };
-    /** Show where history is kept, or forget it; the file is global to this machine. */
-    const runHistoryCommand = (argument) => {
-        // The line that asked for this is recorded before the command runs, but that
-        // write rides the store's queue; waiting for it lets the count describe the
-        // file the reader has, not the state before their own line landed.
-        void promptHistory.flush().then(() => {
-            if (argument === '') {
-                const count = promptHistory.entries().length;
-                const blocked = promptHistory.blockedReason();
-                model.notice([
-                    count + (count === 1 ? ' prompt recorded' : ' prompts recorded'),
-                    promptHistory.path(),
-                    blocked === undefined ? undefined : 'writes disabled: ' + blocked,
-                ].filter(part => part !== undefined).join(' · '));
-                tui.requestRender();
-                return;
-            }
-            if (argument !== 'clear') {
-                model.notice('usage: /history shows where history is kept · /history clear forgets every prompt');
-                tui.requestRender();
-                return;
-            }
-            // A refused write cannot remove anything, so saying "forgot 0 prompts"
-            // would describe a successful clear the file never had.
-            const blocked = promptHistory.blockedReason();
-            if (blocked !== undefined) {
-                model.notice('prompt history is unavailable: ' + blocked);
-                tui.requestRender();
-                return;
-            }
-            return promptHistory.clear().then(removed => {
-                model.notice('forgot ' + removed + (removed === 1 ? ' prompt' : ' prompts'));
-                tui.requestRender();
-            });
-        }).catch(error => {
-            // The store keeps what the file still holds, so the reader is told the
-            // clear failed rather than being shown a count that never landed.
-            model.notice('could not clear prompt history: ' + (error instanceof Error ? error.message : String(error)));
-            tui.requestRender();
-        });
-    };
-    /**
-     * Carry out one classified line, wherever it was asked for.
-     *
-     * A chord asks for the same things the command line does, so both arrive
-     * here: a chord cannot behave differently from the command it stands for.
-     */
-    const runSubmission = (submission) => {
-        switch (submission.kind) {
-            case 'empty':
-                return;
-            case 'quit':
-                requestExit(0);
-                return;
-            case 'model':
-                runModelCommand(submission.argument);
-                return;
-            case 'preset':
-                runPresetCommand(submission.argument);
-                return;
-            case 'jobs':
-                runJobsCommand(submission.argument);
-                return;
-            case 'rename':
-                runRenameCommand(submission.title);
-                return;
-            case 'export':
-                runExportCommand(submission.path);
-                return;
-            case 'subagents':
-                runSubagentsCommand(submission.argument);
-                return;
-            case 'fork':
-                runForkCommand(submission.title);
-                return;
-            case 'new':
-                runNewCommand(submission.title);
-                return;
-            case 'reload':
-                runReloadCommand();
-                return;
-            case 'todo':
-                runTodoCommand();
-                return;
-            case 'theme': {
-                const argument = submission.argument;
-                // A bare command is the list: a theme is judged by looking at it, so
-                // choosing one belongs in a list the screen follows rather than in a name
-                // the reader has to already know.
-                if (argument === '') {
-                    void openThemePicker();
-                    return;
-                }
-                const [head = '', ...rest] = argument.split(/\s+/u);
-                // The table answers the other question a theme raises — which layer drew a
-                // shade — and stays reachable by name now that the list has the command.
-                if (head === 'tokens') {
-                    for (const line of renderThemeTable(toOverrides(readSection(), themeLibrary), themeLibrary))
-                        model.notice(line);
-                    tui.requestRender();
-                    return;
-                }
-                // The one way a built-in becomes editable. Its file ships inside the
-                // package and the next version replaces it, so a reader who wants to
-                // change one needs a copy that is theirs — and the copy is a theme the
-                // moment it lands, which is why the table is re-read rather than patched.
-                if (head === 'export') {
-                    const chosen = rest.join(' ').trim();
-                    if (chosen === '') {
-                        model.notice(`theme export · which built-in? ${builtinNames(themeLibrary).join(' · ')}`);
-                        tui.requestRender();
-                        return;
-                    }
-                    const outcome = exportTheme(themeLibrary, chosen);
-                    if (outcome.ok) {
-                        themeLibrary = loadThemes(themesHome, builtinThemesDir());
-                        model.notice(`theme · exported ${chosen} to ${outcome.path} · /theme ${outcome.select} applies it`);
-                    }
-                    else {
-                        model.notice(outcome.problem);
-                    }
-                    tui.requestRender();
-                    return;
-                }
-                // A name nothing answers to is refused by name, like an unknown key
-                // layer: the reader asked for something, so the answer lists names.
-                if (themeLibrary.get(head) === undefined) {
-                    model.notice(`unknown theme "${head}" · themes: ${themeLibrary.names().join(' · ')}`);
-                    tui.requestRender();
-                    return;
-                }
-                chooseTheme(head);
-                return;
-            }
-            case 'keys': {
-                const layer = submission.argument === '' ? undefined : keymapLayer(submission.argument);
-                // A layer that does not exist is not a filter that matches nothing: the
-                // reader asked for something by name, so the answer names the names.
-                if (submission.argument !== '' && layer === undefined) {
-                    model.notice(`unknown layer "${submission.argument}" · ${KEYMAP_LAYERS.join(' ')}`);
-                    tui.requestRender();
-                    return;
-                }
-                openKeyMap(layer);
-                return;
-            }
-            case 'copy':
-                runCopyCommand();
-                return;
-            case 'history':
-                runHistoryCommand(submission.argument);
-                return;
-            case 'stash':
-                // Submitting a command consumes the line it was typed on, so this path
-                // can only carry a draft it was given; parking the bar's own draft is
-                // what the chord is for.
-                if (submission.argument.trim() === '')
-                    model.notice('usage: /stash <draft>, or ctrl+x then s to park the editor');
-                else
-                    void stash?.stashEditor(submission.argument);
-                return;
-            case 'stash-draft':
-                void stash?.stashEditor();
-                return;
-            case 'stash-pop':
-                void stash?.pop(submission.selector);
-                return;
-            case 'stash-apply':
-                void stash?.apply(submission.selector);
-                return;
-            case 'stash-list':
-                void stash?.list(String(activeSession));
-                return;
-            case 'stash-drop':
-                void stash?.drop(submission.selector);
-                return;
-            case 'stash-clear':
-                void stash?.clear();
-                return;
-            case 'editor':
-                void externalEditor.edit(editor.getExpandedText()).then(text => {
-                    if (text !== undefined) {
-                        // A gate can open while the child owns the screen, and the bar then
-                        // holds somebody's answer: the edited draft waits behind it instead
-                        // of being written into a question the reader never answered.
-                        if (promptBar.isBorrowed())
-                            promptBar.replaceHeld(text);
-                        else
-                            editor.setText(text);
-                        tui.requestRender();
-                    }
-                    const pendingExit = deferredExit;
-                    deferredExit = undefined;
-                    if (pendingExit !== undefined)
-                        requestExit(pendingExit.code, pendingExit.reason);
-                });
-                return;
-            case 'status': {
-                const facts = statusFacts();
-                const context = facts.contextTokens === undefined
-                    ? undefined
-                    : `context ${formatTokens(facts.contextTokens)}${facts.contextWindow === undefined ? '' : `/${formatTokens(facts.contextWindow)}`}`;
-                model.notice([
-                    `session ${activeSession}`,
-                    viewedSession === activeSession ? undefined : `viewing ${viewedSession}`,
-                    facts.model === undefined
-                        ? undefined
-                        : `model ${facts.provider === undefined ? '' : `${facts.provider}/`}${facts.model}${facts.effort === undefined ? '' : ` (${facts.effort})`}`,
-                    facts.agentPreset === undefined ? undefined : `mode ${facts.agentPreset}`,
-                    facts.preset === undefined ? undefined : `permissions ${facts.preset}`,
-                    context,
-                    facts.uncachedInputTokens === undefined && facts.outputTokens === undefined
-                        ? undefined
-                        : `tokens in ${formatTokens(facts.uncachedInputTokens ?? 0)} out ${formatTokens(facts.outputTokens ?? 0)}`,
-                    `cwd ${facts.cwd}`,
-                ].filter(part => part !== undefined).join(' · '));
-                tui.requestRender();
-                return;
-            }
-            case 'clear':
-                model.reset();
-                work.reset();
-                tui.requestRender();
-                return;
-            case 'undo':
-                runUndoCommand();
-                return;
-            case 'redo':
-                runRedoCommand();
-                return;
-            case 'help':
-                model.notice(helpText());
-                tui.requestRender();
-                return;
-            case 'resume':
-                void chooseSession().then(picked => picked === undefined ? undefined : switchSession(picked)).catch((error) => {
-                    model.notice(`could not resume: ${error instanceof Error ? error.message : String(error)}`);
-                    tui.requestRender();
-                });
-                return;
-            // Plan mode is a command the harness owns, so the chord asks the host for
-            // the state and names the command for the other one: one key, both ways.
-            case 'plan':
-                runCommand('plan', planToggleLine(planActive()));
-                return;
-            case 'command':
-                runCommand(submission.name, submission.line);
-                return;
-            case 'prompt':
-                if (agent === undefined) {
-                    model.notice('the agent is still starting; try again in a moment');
-                    tui.requestRender();
-                    return;
-                }
-                // While a turn is running the human is steering it, not opening another.
-                if (turnOpen)
-                    agent.steer(submission.text);
-                else {
-                    adoptDefaultRoute();
-                    void commitStagedSend(submission.text);
-                }
-        }
-    };
-    editor.onSubmit = text => {
-        const submission = classifySubmission(text);
-        if (submission.kind === 'empty')
-            return;
-        // The library's own history feeds the up/down keys; the store below feeds
-        // ghost completion and reverse search, and is global rather than per-session.
-        editor.addToHistory(text);
-        if (historyEnabled)
-            promptHistory.record(text);
-        runSubmission(submission);
-    };
+    promptInput.attachSubmit();
     disposers.push(ctx.on('session/event', (session, event) => {
-        // The surface state — activity, timer, title, bell, job board — belongs to
-        // the agent this terminal drives, even while a child is on screen.
-        if (session.id === activeSession) {
-            if (event.type === 'turn/start') {
-                turnOpen = true;
-                turnStartedAt = Date.now();
-                writeTerminal(windowTitle(process.cwd(), 'working'));
-            }
-            if (event.type === 'turn/end') {
-                const ranFor = turnStartedAt === undefined ? 0 : Date.now() - turnStartedAt;
-                turnOpen = false;
-                turnStartedAt = undefined;
-                // An undo may be parked waiting for exactly this boundary.
-                turnSettled?.();
-                writeTerminal(windowTitle(process.cwd(), 'ready'));
-                if (shouldRingBell({ bell: resolved.bell, ranForMs: ranFor, exiting: exited }))
-                    writeTerminal(BELL);
-                // A job the turn started may have settled while the reader was watching
-                // something else, and nothing else refreshes a live board.
-                refreshJobs();
-            }
-            // A claim or a discard changes what is queued, and that belongs to this
-            // session even while the transcript shows a child's conversation.
-            if (event.type === 'agent/inbox/spliced')
-                tui.requestRender();
-        }
-        if (session.id !== viewedSession)
-            return;
-        presentScope = ctx.agents?.get(session.id);
-        applyDurable(session.id, event);
-        tui.requestRender();
-    }));
-    /**
-     * Subagent lifecycle arrives as a service event rather than a session event,
-     * so it is decoration in the transcript: the durable record of a delegation
-     * is the tool call that asked for it. The name is cast so a rename in the
-     * harness cannot break compilation of this surface.
-     */
-    const listenFor = (name, handler) => ctx.on(name, handler);
-    // Herdr hears the driver rather than each turn: a run that chains turns
-    // through a pending inbox is one stretch of work, and a turn boundary inside
-    // it would read as done between two turns of an agent that is still working.
-    // The turn listeners above keep the title and the bell, which are about the
-    // reader's own conversation.
-    disposers.push(listenFor('agent/status', payload => {
-        // Read against the driven session at delivery time: the reader can switch
-        // sessions between two transitions, and the row must follow the one this
-        // terminal now drives.
-        const status = driverReportFor(payload, activeSession);
-        if (status === undefined)
-            return;
-        herdr.driver(status);
-    }));
-    disposers.push(listenFor('subagent/start', info => {
-        roster.start(info);
-        const record = asRecord(info);
-        const provider = typeof record?.provider === 'string' ? record.provider : 'subagent';
-        const id = typeof record?.id === 'string' ? record.id : '';
-        model.marker(`subagent ${provider} started${id === '' ? '' : ` · ${id}`}`);
-        tui.requestRender();
-    }));
-    disposers.push(listenFor('subagent/end', info => {
-        roster.end(info);
-        const record = asRecord(info);
-        const provider = typeof record?.provider === 'string' ? record.provider : 'subagent';
-        const stop = typeof record?.stopReason === 'string' ? record.stopReason : undefined;
-        model.marker(`subagent ${provider} finished${stop === undefined ? '' : ` · ${stop}`}`);
-        tui.requestRender();
+        sessionLifecycle.observe(session, event);
+        sessionView.observe(session.id, event);
     }));
-    // Answering these two waterfalls is what makes a terminal surface usable at
-    // all: without an answerer every gated tool fails closed, and the model's
-    // questions never reach the human.
-    disposers.push(ctx.on('approval/request', (request, next) => {
-        if (request.agent.id !== activeSession)
-            return next();
-        return new Promise(resolve => {
-            const gate = new ApprovalGate(request.toolName, request.reason, () => keymap);
-            request.signal?.addEventListener('abort', () => {
-                gate.cancel();
-                if (pending?.gate === gate)
-                    closeGate();
-                resolve('cancelled');
-            }, { once: true });
-            openGate({ kind: 'approval', gate, settle: resolve });
-        });
-    }));
-    disposers.push(ctx.on('user-questions/request', (request, next) => {
-        const agentId = request.agent?.id;
-        if (agentId !== undefined && agentId !== activeSession)
-            return next();
-        const questions = toGateQuestions(request);
-        if (questions.length === 0)
-            return next();
-        return new Promise(resolve => {
-            const gate = promptBar.borrow(() => {
-                // The bar is an answer's for as long as the gate holds it, so the menu
-                // it once offered commands through is replaced before a key can reach it.
-                const built = new QuestionGate(questions, editor, () => keymap);
-                applyCompletion();
-                return built;
-            });
-            // The seam takes mutable selection arrays and an optional custom field, so
-            // the read-only gate answer is copied into that exact shape here.
-            const settle = (answers) => {
-                request.signal?.removeEventListener('abort', onAbort);
-                resolve({
-                    answers: answers.map(answer => ({
-                        id: answer.id,
-                        selected: [...answer.selected],
-                        ...(answer.custom === undefined ? {} : { custom: answer.custom }),
-                    })),
-                });
-            };
-            // A question whose caller is gone has no reader, so the gate must release
-            // the keyboard instead of collecting an answer the aborted call discards.
-            const onAbort = () => {
-                gate.cancel();
-                if (pending?.gate === gate)
-                    closeGate();
-                settle([]);
-            };
-            openGate({ kind: 'question', gate, settle });
-            request.signal?.addEventListener('abort', onAbort, { once: true });
-            // A signal that aborted before the listener existed never emits, so the
-            // state has to be read once after subscribing.
-            if (request.signal?.aborted === true)
-                onAbort();
-        });
-    }));
-    disposers.push(ctx.on('commands/change', () => installCompletion()));
+    disposers.push(...sessionLifecycle.driverListeners());
+    disposers.push(...backgroundWork.subagentListeners());
+    disposers.push(...modalInput.requestListeners());
+    disposers.push(...promptInput.commandListeners());
     // The board is live state: watch it directly rather than folding events.
-    disposers.push(jobDirectory?.watch(owner => {
-        if (owner !== undefined && owner.id !== activeSession)
-            return;
-        refreshJobs();
-    }) ?? (() => { }));
-    // The transcript belongs to the session on screen, while status, the bell,
-    // and the queue stay with the agent this terminal drives. A live delta or a
-    // failure folded into the wrong model would print one session's words as
-    // another's, and the durable copy that follows would never correct it.
-    disposers.push(ctx.on('agent/error', payload => {
-        if (payload.agent.id !== viewedSession)
-            return;
-        model.reportError(payload.error);
-        tui.requestRender();
-    }));
-    disposers.push(ctx.on('agent/assistant-stream', payload => {
-        if (payload.agent.id !== viewedSession)
-            return;
-        if (payload.frame.type !== 'chunk')
-            return;
-        model.applyStreamChunk(payload.frame.chunk);
-        tui.requestRender();
-    }));
-    /**
-     * Restyle a running session when the reader's section changes.
-     *
-     * The settings document is hot-reloaded by the host, so a reader watching a
-     * shade land never has to leave the session to see it — which is what makes
-     * tuning one bearable instead of a restart per attempt. The event is
-     * namespace-filtered: another surface's preferences are not our repaint.
-     */
-    disposers.push(ctx.on('settings/updated', ns => {
-        if (String(ns) !== TUI_SETTINGS_NAMESPACE)
-            return;
-        applySettings();
-        // Both caches hold rows under the old table, so they have to be told the
-        // table moved; a repaint alone would reuse what they already stored.
-        markdown.invalidate();
-        view.invalidate();
-        tui.requestRender();
-    }));
-    /**
-     * The reader's own themes: created, reported, and then watched.
-     *
-     * Created because a directory that is not there is a command that cannot work —
-     * `/theme export` names a path the reader should find where the surface said it
-     * would be. Watched because a theme is a file they are editing by hand, so
-     * saving one is how they ask for it; a session that needed a restart per shade
-     * would make the whole table useless for tuning. Everything unreadable is
-     * reported through the deferred notice rather than stderr, which the alternate
-     * screen is drawn over.
-     */
-    let reportedThemes = new Set();
-    const reportThemes = () => {
-        // Only what is newly wrong: the watcher re-reads the whole directory on every
-        // save, so an unfixed file would otherwise repeat its complaint on each one,
-        // and a reader who has just been told is not helped by being told again.
-        const problems = themeLibrary.problems();
-        for (const problem of problems) {
-            if (!reportedThemes.has(problem))
-                settingsNotice.post(problem);
-        }
-        reportedThemes = new Set(problems);
-    };
-    for (const problem of ensureThemesHome(themesHome))
-        settingsNotice.post(problem);
-    reportThemes();
-    disposers.push(watchThemes(themesHome, () => {
-        themeLibrary = loadThemes(themesHome, builtinThemesDir());
-        reportThemes();
-        // The file that was just saved may be the theme already in force, so the
-        // table is rebuilt rather than only repainted.
-        applySettings();
-        markdown.invalidate();
-        view.invalidate();
-        tui.requestRender();
-    }));
-    const degraded = describeMissingOptional(probe);
-    if (degraded !== undefined)
-        model.notice(degraded);
-    /**
-     * Open the session this run was launched for.
-     *
-     * A bare `--resume` asks a question only the reader can answer, so the
-     * picker runs before anything is created: the agent is then opened on the
-     * chosen session rather than swapped afterwards, which would leave the first
-     * one's turn half-started.
-     */
-    const boot = async () => {
-        if (!resolved.resumePicker) {
-            await openAgent(resolved.sessionId, resolved.resume);
-            return;
-        }
-        const picked = await chooseSession();
-        if (picked === undefined) {
-            requestExit(0);
-            return;
-        }
-        await openAgent(picked, true);
-    };
-    /**
-     * Take the screen, then open the session this run was launched for.
-     *
-     * A mode named on the command line is resolved FIRST: the alt screen swallows
-     * the launcher's own error output, so a mode this roster does not offer has to
-     * be answered while the shell still owns the terminal.
-     */
-    const start = async () => {
-        if (requestedPreset !== undefined && agentPresets !== undefined) {
-            seat = (await agentPresets.resolve(requestedPreset)).id;
-        }
-        // A named mode that disagrees with the one this session recorded is refused
-        // here as well as at the open, because the alternate screen closes over
-        // whatever was painted on it: the reader would see the failure, not the
-        // reason. With a picker the session is not known yet, so it waits for one.
-        if (!resolved.resumePicker)
-            await presetFor(resolved.sessionId, resolved.resume, undefined);
-        tui.start();
-        writeTerminal(windowTitle(process.cwd(), 'ready'));
-        // Claiming the pane's agent row does not wait for a session: the pane is
-        // already on screen and already idle, and a session may still be chosen.
-        herdr.publish();
-        // A refused settings edit is only visible now that the surface owns the
-        // screen; whatever the scope found before this point prints here instead.
-        settingsNotice.open(message => model.notice(message));
-        await boot();
-    };
-    void start().catch((error) => {
+    disposers.push(backgroundWork.watchJobs());
+    disposers.push(...sessionView.agentListeners());
+    disposers.push(appearance.settingsListener());
+    appearance.createThemesHome();
+    disposers.push(appearance.watchThemes());
+    void commands.start().catch((error) => {
         requestExit(1, error instanceof Error ? error.message : String(error));
     });
 }