@sigrun/tui 0.8.0 → 0.10.0

package/CHANGELOG.md

@@ -6,6 +6,18 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [0.10.0] - 2026-11-06
+
+- Extension views render in the main pane (mount, key routing, overlay-aware Esc
+  back-to-list/close, dispose) with block navigation (`SurfaceState.onNavigate`), notice
+  flashes on the status bar, and the ext-transport URL fix (suffix routes after `?params=`).
+
+## [0.9.0] - 2026-11-05
+
+- Decline on declinable interaction cards (`alt+s` in answer mode; `alt+d` is the
+  notices dismiss), the armed-hint chord, and the stepper review fixes (answer
+  labels, "Not answered yet" naming, Enter guard).
+
 ## [0.8.0] - 2026-11-04
 
 - Notices: an inline line for the current conversation's newest notice (a key dismisses

package/dist/actions.d.ts

@@ -63,6 +63,12 @@ export type Action = {
     readonly reverse: boolean;
 } | {
     readonly type: "answer-interaction";
+}
+/** Ask-user Task 5 (spec §5.2): decline the armed interaction record
+ *  (alt+s in every keymap — alt+d is the notices dismiss). Acts ONLY
+ *  in answer mode on a declinable record. */
+ | {
+    readonly type: "decline-interaction";
 } | {
     readonly type: "cancel-run";
 } | {

package/dist/api.d.ts

@@ -21,8 +21,8 @@ import type { NoticeActionResponse, NoticesResponse } from "@sigrun/shared/notic
 import type { JobsResponse, JobRunResponse } from "@sigrun/shared/views";
 import type { JobRevisionWire, JobRunWire } from "@sigrun/shared/jobs";
 import type { SessionMeta, SessionMetaPatch } from "@sigrun/shared/session-meta";
-import type { AbortResponse, AmbientList, CompactResponse, ConfigureResponse, ConversationCreateResponse, ConversationForkResponse, ConversationList, ConversationViewWire, InteractionAnswered, InteractionList, InteractionWire, MetaResponse, ModelsResponse, SettingsResponse, SettingsSectionsResponse, SubmissionResponse, WhoamiResponse } from "@sigrun/shared/views";
-export type { AbortResponse, AmbientList, AmbientWire, CompactResponse, ConfigureResponse, ConversationCreateResponse, ConversationForkResponse, ConversationList, ConversationSummary, ConversationViewWire, InteractionAnswered, InteractionList, InteractionWire, MetaResponse, ModelEntry, ModelsResponse, SettingsResponse, SettingsSectionsResponse, SettingsSectionEntry, SettingsSectionIndexEntry, SubmissionResponse, WhoamiResponse, } from "@sigrun/shared/views";
+import type { AbortResponse, AmbientList, CompactResponse, ConfigureResponse, ConversationCreateResponse, ConversationForkResponse, ConversationList, ConversationViewWire, InteractionAnswered, InteractionDeclined, InteractionList, InteractionWire, MetaResponse, ModelsResponse, SettingsResponse, SettingsSectionsResponse, SubmissionResponse, WhoamiResponse } from "@sigrun/shared/views";
+export type { AbortResponse, AmbientList, AmbientWire, CompactResponse, ConfigureResponse, ConversationCreateResponse, ConversationForkResponse, ConversationList, ConversationSummary, ConversationViewWire, InteractionAnswered, InteractionDeclined, InteractionList, InteractionWire, MetaResponse, ModelEntry, ModelsResponse, SettingsResponse, SettingsSectionsResponse, SettingsSectionEntry, SettingsSectionIndexEntry, SubmissionResponse, WhoamiResponse, } from "@sigrun/shared/views";
 export type { CommandRunResponse, CommandsResponse, SlashCommand } from "@sigrun/shared/commands";
 export type { JobSpec, JobSchedule, JobAction, JobWire, JobRunWire, JobRevisionWire, } from "@sigrun/shared/jobs";
 export type { JobsResponse, JobRunResponse } from "@sigrun/shared/views";
@@ -151,6 +151,12 @@ export declare class SigrunClient {
     getInteraction(id: number, callId: string): Promise<InteractionWire>;
     /** `POST .../interactions/:callId/answer` — the ONE generic answer route. */
     answerInteraction(id: number, callId: string, answer: InteractionAnswerInput): Promise<InteractionAnswered>;
+    /** `POST .../interactions/:callId/decline` — decline a pending
+     *  declinable record (ask-user spec §5.2; settles `skipped` with
+     *  `declinedVia: "button"`). A 404 `not_pending` means the record
+     *  settled under the user's fingers — the caller refetches through
+     *  {@link getInteraction} (the mid-stepper settle path). */
+    declineInteraction(id: number, callId: string): Promise<InteractionDeclined>;
     /** `GET /v1/conversations/:id/ambient`. */
     getAmbient(id: number): Promise<AmbientList>;
     /** `GET /v1/commands` — the slash-command catalog (a boot constant). */

package/dist/api.js

@@ -181,6 +181,14 @@ export class SigrunClient {
     answerInteraction(id, callId, answer) {
         return this.#send("POST", `/v1/conversations/${id}/interactions/${encodeURIComponent(callId)}/answer`, answer);
     }
+    /** `POST .../interactions/:callId/decline` — decline a pending
+     *  declinable record (ask-user spec §5.2; settles `skipped` with
+     *  `declinedVia: "button"`). A 404 `not_pending` means the record
+     *  settled under the user's fingers — the caller refetches through
+     *  {@link getInteraction} (the mid-stepper settle path). */
+    declineInteraction(id, callId) {
+        return this.#send("POST", `/v1/conversations/${id}/interactions/${encodeURIComponent(callId)}/decline`, {});
+    }
     /** `GET /v1/conversations/:id/ambient`. */
     getAmbient(id) {
         return this.#get(`/v1/conversations/${id}/ambient`);

package/dist/blocks/ext-transport.d.ts

@@ -2,8 +2,8 @@
  * The TUI's extension-surface transport (UI-blocks U3 Task 5): implements
  * the shared `SurfaceTransport` contract over the U3 routes (spec §7.2)
  * as the TUI's remote client. One transport = one surface instance
- * (slug + id + params); the wire `k` (hashed instance key) keys the
- * change-event routing in {@link ExtSurfaceHub}.
+ * (slug + id + params); the hub routes change events by (slug, id) —
+ * the wire `k` is not matched (see ExtSurfaceHub).
  *
  * Like the webui twin, every fetch carries `X-Sigrun-Stream` once the
  * launcher hands the stream id in (the watcher entry's stream);
@@ -52,14 +52,22 @@ export declare function createExtSurfaceTransport(options: ExtSurfaceTransportOp
 /**
  * The change-event router (the launcher's dispatch seam): `attach`
  * creates a transport whose `onChanged` subscribes into the hub under
- * the instance's (slug, id, k); `dispatch` fans a `surface.changed`
- * event out to the matching subscriptions only.
+ * the instance's (slug, id); `dispatch` fans a `surface.changed` event
+ * out to every subscription of the event's view. The event's `k` is NOT
+ * matched: the server hashes the principal-scoped instance key (jobs /
+ * skills / curator fold the user in), which no client hash can
+ * reproduce. The server already targets the event at the streams
+ * watching that exact instance (watchers.streamsFor), so matching the
+ * view is safe; a second instance of the same view refetches once.
  */
 export declare class ExtSurfaceHub {
     #private;
-    /** Create a transport whose `onChanged` subscribes into this hub. */
-    attach(options: ExtSurfaceTransportOptions, keyHash: string): ExtSurfaceTransportHandle;
-    /** Fire every subscription matching the event's (slug, id, k). */
+    /** Create a transport whose `onChanged` subscribes into this hub. The
+     *  `keyHash` argument is retained for call-site compatibility (dispatch
+     *  no longer routes on it — see the class doc). */
+    attach(options: ExtSurfaceTransportOptions, _keyHash: string): ExtSurfaceTransportHandle;
+    /** Fire every subscription of the event's (slug, id), whatever the
+     *  event's `k`. */
     dispatch(event: {
         readonly slug: string;
         readonly id: string;

package/dist/blocks/ext-transport.js

@@ -2,8 +2,8 @@
  * The TUI's extension-surface transport (UI-blocks U3 Task 5): implements
  * the shared `SurfaceTransport` contract over the U3 routes (spec §7.2)
  * as the TUI's remote client. One transport = one surface instance
- * (slug + id + params); the wire `k` (hashed instance key) keys the
- * change-event routing in {@link ExtSurfaceHub}.
+ * (slug + id + params); the hub routes change events by (slug, id) —
+ * the wire `k` is not matched (see ExtSurfaceHub).
  *
  * Like the webui twin, every fetch carries `X-Sigrun-Stream` once the
  * launcher hands the stream id in (the watcher entry's stream);
@@ -28,13 +28,24 @@ export function surfaceKeyHash(slug, id, key) {
 export function transportKey(options) {
     return instanceKey(options.params ?? {});
 }
+/** The surface path WITHOUT any query — suffix routes (/data, /actions,
+ *  /uploads) build from this and add their own query last (appending a
+ *  suffix after `?params=` would land after the query string — the
+ *  webui's E8 find, now the TUI's fetchData fix). */
+function surfaceBase(options) {
+    return `/v1/ext/${encodeURIComponent(options.slug)}/surfaces/${encodeURIComponent(options.id)}`;
+}
+/** The URL-encoded params JSON. */
+function paramsQuery(options) {
+    return encodeURIComponent(JSON.stringify(options.params ?? {}));
+}
 /** The base path for one surface instance (`?params=` omitted when `{}`). */
 function surfacePath(options) {
-    const base = `/v1/ext/${encodeURIComponent(options.slug)}/surfaces/${encodeURIComponent(options.id)}`;
+    const base = surfaceBase(options);
     if (options.params === undefined || Object.keys(options.params).length === 0) {
         return base;
     }
-    return `${base}?params=${encodeURIComponent(JSON.stringify(options.params))}`;
+    return `${base}?params=${paramsQuery(options)}`;
 }
 function withQuery(path, key, value) {
     return `${path}${path.includes("?") ? "&" : "?"}${key}=${value}`;
@@ -75,11 +86,11 @@ export function createExtSurfaceTransport(options) {
             return get(surfacePath(options));
         },
         fetchData(since) {
-            const path = `${surfacePath(options)}/data`;
+            const path = `${surfaceBase(options)}/data?params=${paramsQuery(options)}`;
             return get(since === undefined ? path : withQuery(path, "since", String(since)));
         },
         async act(body) {
-            const response = await doFetch(`${baseUrl}${surfacePath(options)}/actions`, {
+            const response = await doFetch(`${baseUrl}${surfaceBase(options)}/actions`, {
                 method: "POST",
                 headers: { ...headers(), "content-type": "application/json" },
                 body: JSON.stringify({ ...body, params: options.params ?? {} }),
@@ -87,7 +98,7 @@ export function createExtSurfaceTransport(options) {
             return (await response.json());
         },
         async upload(body) {
-            const base = surfacePath(options);
+            const base = surfaceBase(options);
             const path = withQuery(`${baseUrl}${base}/uploads/${encodeURIComponent(body.field)}/${encodeURIComponent(body.name)}`, "params", encodeURIComponent(JSON.stringify(options.params ?? {})));
             const response = await doFetch(path, {
                 method: "PUT",
@@ -119,13 +130,20 @@ export function createExtSurfaceTransport(options) {
 /**
  * The change-event router (the launcher's dispatch seam): `attach`
  * creates a transport whose `onChanged` subscribes into the hub under
- * the instance's (slug, id, k); `dispatch` fans a `surface.changed`
- * event out to the matching subscriptions only.
+ * the instance's (slug, id); `dispatch` fans a `surface.changed` event
+ * out to every subscription of the event's view. The event's `k` is NOT
+ * matched: the server hashes the principal-scoped instance key (jobs /
+ * skills / curator fold the user in), which no client hash can
+ * reproduce. The server already targets the event at the streams
+ * watching that exact instance (watchers.streamsFor), so matching the
+ * view is safe; a second instance of the same view refetches once.
  */
 export class ExtSurfaceHub {
     #subscriptions = new Set();
-    /** Create a transport whose `onChanged` subscribes into this hub. */
-    attach(options, keyHash) {
+    /** Create a transport whose `onChanged` subscribes into this hub. The
+     *  `keyHash` argument is retained for call-site compatibility (dispatch
+     *  no longer routes on it — see the class doc). */
+    attach(options, _keyHash) {
         const base = createExtSurfaceTransport(options);
         const hub = this;
         const transport = {
@@ -138,7 +156,6 @@ export class ExtSurfaceHub {
                 const subscription = {
                     slug: options.slug,
                     id: options.id,
-                    keyHash,
                     listener,
                 };
                 hub.#subscriptions.add(subscription);
@@ -152,12 +169,12 @@ export class ExtSurfaceHub {
             setStreamId: (next) => base.setStreamId(next),
         };
     }
-    /** Fire every subscription matching the event's (slug, id, k). */
+    /** Fire every subscription of the event's (slug, id), whatever the
+     *  event's `k`. */
     dispatch(event) {
         for (const subscription of this.#subscriptions) {
             if (subscription.slug === event.slug &&
-                subscription.id === event.id &&
-                subscription.keyHash === event.k) {
+                subscription.id === event.id) {
                 subscription.listener({ rev: event.rev, treeRev: event.treeRev });
             }
         }

package/dist/blocks/form/form.js

@@ -60,6 +60,21 @@ export function stepperSections(block, interaction) {
         child.type === "choice"));
     return allChoice ? sections : null;
 }
+/** The unanswered REQUIRED choices of the stepper (the review names
+ *  them and holds the submit — §7.2 of the ask-user design). Answered
+ *  means choiceValueText yields text (absent/""/[]/{other: ""} do not
+ *  count). */
+function unansweredSections(sections, ctx, values) {
+    return sections.filter((section) => {
+        for (const field of sectionFields(section)) {
+            if (field.type !== "choice" || field.required !== true)
+                continue;
+            if (choiceValueText(field, ctx, values[field.name] ?? null) === "")
+                return true;
+        }
+        return false;
+    });
+}
 /** The answerable fields of a stepper section (every field the review
  *  summarizes — §9.1's review step covers ALL of a section's fields,
  *  not only the choice). */
@@ -310,6 +325,9 @@ export class FormComponent {
                 const summary = answers.filter((text) => text !== "").join(", ");
                 lines.push(truncate(`  ${title}: ${summary}`, width));
             });
+            for (const section of unansweredSections(sections, this.#ctx, this.#values)) {
+                lines.push(truncate(`Not answered yet: ${bindText(section.title, this.#ctx)}`, width));
+            }
             if (!this.#readOnly && !this.#submitted) {
                 lines.push(truncate(`> [ ${this.#submitLabel} ]`, width));
             }
@@ -435,6 +453,10 @@ export class FormComponent {
                 return;
             }
             if (data === "\r" && !this.#submitted) {
+                // The review holds the submit while a required question is
+                // unanswered (§7.2) — Enter is ignored, not an error.
+                if (unansweredSections(sections, this.#ctx, this.#values).length > 0)
+                    return;
                 if (this.#submit())
                     this.#submitted = true;
             }

package/dist/blocks/surface.d.ts

@@ -27,7 +27,7 @@
  * identical to U1 (a move against an unknown handler still goes to the
  * transport, unoverlaid).
  */
-import type { Action, JsonObject, JsonValue, SurfaceTransport, Tree } from "@sigrun/shared/blocks";
+import type { Action, CoreTarget, JsonObject, JsonValue, SurfaceTransport, Tree } from "@sigrun/shared/blocks";
 /** An action has 10 s to answer before it counts as a reject (§6.3). */
 export declare const ACT_TIMEOUT_MS = 10000;
 /** The notice cap: pending notices drop oldest-first past 50 (a flood
@@ -49,6 +49,14 @@ export interface SurfaceView {
 /** The surface state container (class shape — the TUI has no hook layer). */
 export declare class SurfaceState {
     #private;
+    /** The shell's navigate sink (jobs-editor Task 7): navigate actions
+     *  and accepted results' `navigate` route here — shell-local, never
+     *  posted (spec §6.1; the webui's useSurface.onNavigate). */
+    onNavigate: ((action: {
+        type: "navigate";
+        params?: JsonObject;
+        target?: CoreTarget;
+    }) => void) | undefined;
     constructor(transport: SurfaceTransport);
     /** The current snapshot: confirmed data with the overlay applied. */
     get view(): SurfaceView;
@@ -75,6 +83,8 @@ export declare class SurfaceState {
     load(): Promise<void>;
     /** Stop listening and cancel every pending action timer. */
     dispose(): void;
-    /** Dispatch an action to the surface; a move joins the overlay first. */
+    /** Dispatch an action to the surface; a move joins the overlay first.
+     *  A navigate action is SHELL-LOCAL: it routes through `onNavigate`
+     *  and never reaches the transport (spec §6.1). */
     dispatch(action: Action, payload: JsonValue): void;
 }

package/dist/blocks/surface.js

@@ -190,6 +190,10 @@ export class SurfaceState {
      *  never reaches the transport. */
     #viewBranch = {};
     #actionSeq = 0;
+    /** The shell's navigate sink (jobs-editor Task 7): navigate actions
+     *  and accepted results' `navigate` route here — shell-local, never
+     *  posted (spec §6.1; the webui's useSurface.onNavigate). */
+    onNavigate;
     /** The highest rev a change event announced (gap detect). */
     #announcedRev = 0;
     #timers = new Map();
@@ -403,8 +407,14 @@ export class SurfaceState {
             // event or keepalive retries (§7.3).
         }
     }
-    /** Dispatch an action to the surface; a move joins the overlay first. */
+    /** Dispatch an action to the surface; a move joins the overlay first.
+     *  A navigate action is SHELL-LOCAL: it routes through `onNavigate`
+     *  and never reaches the transport (spec §6.1). */
     dispatch(action, payload) {
+        if (action.type === "navigate") {
+            this.onNavigate?.(action);
+            return;
+        }
         const payloadObject = typeof payload === "object" && payload !== null && !Array.isArray(payload)
             ? payload
             : {};
@@ -451,8 +461,17 @@ export class SurfaceState {
                 return;
             }
             this.#serverErrors = {};
-            if (result.toast !== undefined)
-                this.#notice(result.toast);
+            // An accepted act's `navigate` routes through the shell LAST
+            // (jobs-editor Task 7, plan-review P2): after the toast and
+            // after the non-move refetch is kicked off — the app's
+            // handler may dispose this state.
+            const finishAccept = () => {
+                if (result.toast !== undefined)
+                    this.#notice(result.toast);
+                if (result.navigate?.type === "navigate") {
+                    this.onNavigate?.(result.navigate);
+                }
+            };
             if (!isMove) {
                 // A non-move accept (the settings save): the rev already
                 // bumped server-side (the optimistic check needs the form's
@@ -462,6 +481,7 @@ export class SurfaceState {
                 // surface.changed hub — the app owns the probe).
                 this.#rev = result.rev;
                 void this.#fullRefetch();
+                finishAccept();
                 return;
             }
             if (result.ops !== undefined) {
@@ -471,6 +491,7 @@ export class SurfaceState {
                 catch (error) {
                     if (error instanceof DataOpError) {
                         void this.#fullRefetch();
+                        finishAccept();
                         return;
                     }
                     throw error;
@@ -483,6 +504,7 @@ export class SurfaceState {
                 }
                 this.#overlay = this.#overlay.filter((entry) => entry.actionId !== actionId);
                 this.#emit();
+                finishAccept();
             }
             else {
                 // Accept without ops: hold the entry until confirmed reaches
@@ -495,6 +517,7 @@ export class SurfaceState {
                 this.#rev = Math.max(this.#rev, result.rev);
                 this.#overlay = this.#overlay.map((entry) => entry.actionId === actionId ? { ...entry, untilRev: result.rev } : entry);
                 this.#emit();
+                finishAccept();
             }
         })
             .catch(() => {

package/dist/keymaps/emacs.js

@@ -32,6 +32,7 @@ const BINDINGS = [
     { keys: "C-n / C-p", action: "move down / up" },
     { keys: "enter", action: "open / fold" },
     { keys: "C-o", action: "answer interaction" },
+    { keys: "M-s", action: "decline interaction (answer mode)" },
     { keys: "C-l", action: "redraw" },
     { keys: "C-h", action: "key reference" },
     { keys: "M-N", action: "notices" },
@@ -147,6 +148,10 @@ export function createEmacsKeymap() {
                 return { type: "prompt-jump", delta: 1 };
             if (data === "\x0f")
                 return { type: "answer-interaction" };
+            // Ask-user Task 5: M-s declines the armed interaction (M-d stays
+            // the notices dismiss; the app gates decline to answer mode).
+            if (data === "\x1bs")
+                return { type: "decline-interaction" };
             if (data === "\x0c")
                 return { type: "redraw" };
             if (data === "\x08")

package/dist/keymaps/standard.js

@@ -21,6 +21,7 @@ const BINDINGS = [
     { keys: "ctrl+n", action: "new conversation" },
     { keys: "ctrl+t", action: "cycle thinking" },
     { keys: "ctrl+o", action: "answer interaction" },
+    { keys: "alt+s", action: "decline interaction (answer mode)" },
     { keys: "ctrl+g", action: "notices" },
     { keys: "alt+d", action: "dismiss newest notice" },
     { keys: "ctrl+l", action: "redraw" },
@@ -60,6 +61,11 @@ export function createStandardKeymap() {
             return { type: "cycle-thinking" };
         if (matchesKey(data, Key.ctrl("o")))
             return { type: "answer-interaction" };
+        // Ask-user Task 5: alt+s declines the armed interaction (answer
+        // mode only — the app gates the action; outside answer mode this
+        // falls through as a no-op). alt+d stays the notices dismiss.
+        if (matchesKey(data, Key.alt("s")))
+            return { type: "decline-interaction" };
         // Notices Task 8: ctrl+g (the notices overlay — a control code,
         // never typed text) and alt+d (dismiss the inline notice; M-d is
         // readline's kill-word, a chord reserved readline never sends).

package/dist/keymaps/vim.js

@@ -47,6 +47,7 @@ const BINDINGS = [
     { keys: ":", action: "command line" },
     { keys: "ctrl+p", action: "conversation picker" },
     { keys: "ctrl+o", action: "answer interaction" },
+    { keys: "alt+s", action: "decline interaction (answer mode)" },
     { keys: "ctrl+l", action: "redraw" },
     { keys: "ctrl+c", action: "abort run (busy)" },
     { keys: "g?", action: "key reference" },
@@ -132,6 +133,10 @@ export function createVimKeymap(options) {
         }
         if (matchesKey(data, Key.ctrl("o")))
             return { type: "answer-interaction" };
+        // Ask-user Task 5: alt+s declines the armed interaction (the app
+        // gates the action to answer mode + a declinable record).
+        if (matchesKey(data, Key.alt("s")))
+            return { type: "decline-interaction" };
         return "pass";
     };
     /** Block-surface keys (spec §12.4): NORMAL mode over a `surface`

package/dist/ui/app.d.ts

@@ -49,6 +49,7 @@
 import { Editor, type Component, type TUI } from "@earendil-works/pi-tui";
 import type { SigrunClient } from "../api.js";
 import type { CoreTarget, JsonObject } from "@sigrun/shared/blocks";
+import { SurfaceState } from "../blocks/surface.js";
 import { type Unwatch, type WatchHandlers, type WatchOptions } from "../sse.js";
 import { type TuiTheme } from "../theme.js";
 import type { Action, ActionHost, Focus } from "../actions.js";
@@ -150,7 +151,10 @@ export declare class TuiApp implements Component, ActionHost {
     get extView(): {
         readonly slug: string;
         readonly id: string;
+        readonly params: JsonObject;
     } | undefined;
+    /** The open view's surface state (tests + Task 7's navigation). */
+    get extViewState(): SurfaceState | undefined;
     /**
      * Open an extension VIEW in the main pane (U3 Task 5, spec §7.1):
      * the sidebar's view selection swaps the pane's content to the

package/dist/ui/app.js

@@ -50,6 +50,8 @@ import { Editor, HStack, Key, matchesKey, VStack, } from "@earendil-works/pi-tui
 import { SigrunApiError } from "../api.js";
 import { ExtSurfaceHub, surfaceKeyHash, transportKey, } from "../blocks/ext-transport.js";
 import { ChatSurfaceHub } from "../blocks/chat-transport.js";
+import { SurfaceState } from "../blocks/surface.js";
+import { SurfaceView } from "../blocks/surface-view.js";
 import { watchConversation } from "../sse.js";
 import { spawnSync } from "node:child_process";
 import { plainTuiTheme } from "../theme.js";
@@ -306,7 +308,15 @@ export class TuiApp {
     get extView() {
         return this.#extView === undefined
             ? undefined
-            : { slug: this.#extView.slug, id: this.#extView.id };
+            : {
+                slug: this.#extView.slug,
+                id: this.#extView.id,
+                params: this.#extView.params,
+            };
+    }
+    /** The open view's surface state (tests + Task 7's navigation). */
+    get extViewState() {
+        return this.#extView?.state;
     }
     /**
      * Open an extension VIEW in the main pane (U3 Task 5, spec §7.1):
@@ -315,11 +325,12 @@ export class TuiApp {
      * the transport + identity here so U2's mount is one prop pass.
      */
     async openExtView(slug, id, params) {
-        const key = transportKey({ slug, id, baseUrl: this.#watchOptions.baseUrl, ...(params === undefined ? {} : { params }) });
+        const instanceParams = params ?? {};
+        const key = transportKey({ slug, id, baseUrl: this.#watchOptions.baseUrl, params: instanceParams });
         const handle = this.#extHub.attach({
             slug,
             id,
-            ...(params === undefined ? {} : { params }),
+            params: instanceParams,
             baseUrl: this.#watchOptions.baseUrl,
             ...(this.#watchOptions.user === undefined
                 ? {}
@@ -330,8 +341,44 @@ export class TuiApp {
             ...(this.#eventsStreamId === undefined
                 ? {}
                 : { streamId: this.#eventsStreamId }),
+            // A test-injected client fetch carries the view's loads (the
+            // settings view's shape; production's client leaves it ambient).
+            ...(this.#client.fetch === undefined
+                ? {}
+                : { fetch: this.#client.fetch }),
         }, surfaceKeyHash(slug, id, key));
-        this.#extView = { slug, id, handle };
+        // A swap disposes the previous view's state BEFORE the new one
+        // opens (the settings view's openSection shape): no orphaned
+        // subscriptions or action timers survive a re-open.
+        this.#extView?.state.dispose();
+        const state = new SurfaceState(handle.transport);
+        // Navigation wiring (jobs-editor Task 7): a navigate action or an
+        // accepted result's `navigate` reopens THIS view with the params
+        // (params-only) or routes a core target through the shell — never
+        // posted to the server (SurfaceState.dispatch short-circuits it).
+        state.onNavigate = (nav) => nav.target !== undefined
+            ? void this.navigateCoreTarget(nav.target)
+            : void this.openExtView(slug, id, nav.params ?? {});
+        const view = new SurfaceView(state, {
+            theme: this.#theme,
+            unicode: this.#unicode,
+        });
+        state.onChange(() => {
+            // The surface's notices (action toasts, rejections) land as
+            // pane notices (the post-close backlog) AND flash the status
+            // bar while mounted — the pane is not painted while this view
+            // owns the main slot, so the flash is the visible channel
+            // (SurfaceState's contract names the status bar as the host
+            // notice seam).
+            for (const notice of state.consumeNotices()) {
+                this.pane.showNotice(notice);
+                this.#flashStatus(notice);
+            }
+            this.#tui.requestRender();
+        });
+        this.#extView = { slug, id, params: instanceParams, handle, state, view };
+        this.mainContent.set(view);
+        void state.load();
         this.#tui.requestRender();
     }
     /**
@@ -388,7 +435,9 @@ export class TuiApp {
     closeExtView() {
         if (this.#extView === undefined)
             return false;
+        this.#extView.state.dispose();
         this.#extView = undefined;
+        this.mainContent.set(this.pane);
         this.#tui.requestRender();
         return true;
     }
@@ -725,11 +774,28 @@ export class TuiApp {
             this.#abortActive();
             return true;
         }
-        // Esc closes an open extension view — back to the
-        // conversation pane; the surface's fetches stop (the keepalive
-        // stops with the view, spec §7.3's stop-when-hidden).
-        if (matchesKey(data, Key.escape) && this.#extView !== undefined) {
-            return this.closeExtView();
+        // The open extension view owns its keys (Task 6): Esc forwards to
+        // the view while its page has an overlay (actions menu, sidebar
+        // drawer, pushed detail — spec §12.3's page contract); otherwise
+        // Esc with params reopens the view at the list (`{}`), and Esc at
+        // the list closes the view. Non-Esc keys route to the view.
+        if (this.#extView !== undefined) {
+            if (matchesKey(data, Key.escape)) {
+                const inner = this.#extView.view.inner;
+                if (inner?.hasOverlay === true) {
+                    this.#extView.view.handleInput(data);
+                    return true;
+                }
+                if (Object.keys(this.#extView.params).length > 0) {
+                    void this.openExtView(this.#extView.slug, this.#extView.id, {}).catch((error) => {
+                        this.pane.showError(describeCommandError("open view", error));
+                    });
+                    return true;
+                }
+                return this.closeExtView();
+            }
+            this.#extView.view.handleInput(data);
+            return true;
         }
         return false;
     }
@@ -970,6 +1036,8 @@ export class TuiApp {
         this.#restartGeneration += 1;
         this.interactions.dispose();
         this.ambient.dispose();
+        this.#extView?.state.dispose();
+        this.#extView = undefined;
         // The pane's chat-block surface states hold live hub subscriptions
         // + action timers — the shell owns their teardown (the pane never
         // leaves a subscription behind).
@@ -1149,6 +1217,10 @@ export class TuiApp {
                 if (!this.interactions.answerMode)
                     this.interactions.beginAnswer();
                 return;
+            case "decline-interaction":
+                // Gated inside: answer mode + a declinable record only.
+                await this.interactions.decline();
+                return;
             case "cancel-run":
                 this.#abortActive();
                 return;

package/dist/ui/interactions.d.ts

@@ -79,6 +79,18 @@ export declare class InteractionPrompter implements Component {
      * keep typing while a prompt waits).
      */
     handleKey(data: string): boolean;
+    /**
+     * Decline the armed interaction (ask-user spec §5.2 — the keymap's
+     *  `decline-interaction` action routes here). Gated exactly like the
+     *  affordance: answer mode armed on the top record, and the record is
+     *  declinable. Success exits answer mode (the list poll drops the
+     *  settled record). A 404 `not_pending` — the record settled under
+     *  the user's fingers — refetches through
+     *  {@link SigrunClient.getInteraction} and swaps the settled envelope
+     *  in read-only (the mid-edit settle path); any other failure reports
+     *  loud and keeps the card writable.
+     */
+    decline(): Promise<void>;
     /** Detach (the app calls this on dispose): stale fetches never land. */
     dispose(): void;
     /**

package/dist/ui/interactions.js

@@ -174,6 +174,13 @@ export class InteractionPrompter {
             this.#changed();
             return true;
         }
+        // The decline chord is the KEYMAP's (decline-interaction action,
+        // dispatched by the launcher): pass it through so the keymap sees
+        // it — the surface fall-through below would swallow it and the
+        // chord would never fire (review fix; the same ownership rule as
+        // the prompt's other action keys).
+        if (matchesKey(data, Key.alt("s")))
+            return false;
         this.#ensureSurface(top);
         if (this.#surface === undefined) {
             this.#exitAnswer();
@@ -332,6 +339,67 @@ export class InteractionPrompter {
         this.#answerMode = false;
         this.#answerCallId = undefined;
     }
+    /**
+     * Decline the armed interaction (ask-user spec §5.2 — the keymap's
+     *  `decline-interaction` action routes here). Gated exactly like the
+     *  affordance: answer mode armed on the top record, and the record is
+     *  declinable. Success exits answer mode (the list poll drops the
+     *  settled record). A 404 `not_pending` — the record settled under
+     *  the user's fingers — refetches through
+     *  {@link SigrunClient.getInteraction} and swaps the settled envelope
+     *  in read-only (the mid-edit settle path); any other failure reports
+     *  loud and keeps the card writable.
+     */
+    async decline() {
+        const top = this.#pending[0];
+        if (!this.#answerMode || top === undefined)
+            return;
+        if (this.#answerCallId !== top.callId)
+            return;
+        if (top.declinable !== true)
+            return;
+        const id = this.#conversationId;
+        if (id === undefined)
+            return;
+        try {
+            await this.#client.declineInteraction(id, top.callId);
+        }
+        catch (cause) {
+            const isNotPending = typeof cause === "object" &&
+                cause !== null &&
+                cause.status === 404;
+            if (!isNotPending) {
+                this.onError?.(describeCommandError("decline", cause));
+                this.#changed();
+                return;
+            }
+            // 404 not_pending: the settle raced the user. Refetch; a still-
+            // pending record must NOT wedge the card read-only.
+            try {
+                const fresh = await this.#client.getInteraction(id, top.callId);
+                if (this.#surface?.record.callId !== top.callId)
+                    return;
+                if (fresh.status === "pending") {
+                    this.onError?.(describeCommandError("decline", cause));
+                    this.#changed();
+                    return;
+                }
+                this.#surface =
+                    this.#surface === undefined
+                        ? undefined
+                        : { ...this.#surface, settled: fresh, access: "read" };
+                this.#surface?.state.setAccess("read");
+            }
+            catch {
+                this.onError?.(describeCommandError("decline", cause));
+                this.#changed();
+                return;
+            }
+        }
+        this.#exitAnswer();
+        void this.#refresh();
+        this.#changed();
+    }
     /** Generation-guarded, coalesced fetch of the pending list. */
     async #refresh() {
         const id = this.#conversationId;
@@ -408,11 +476,18 @@ export class InteractionPrompter {
             return [];
         const lines = [];
         const shown = this.#surface?.settled ?? top;
+        // Settled declines name their outcome (spec §5.2's "declined" /
+        // "declined — replied in chat"), never the raw 'skipped'.
+        const statusText = shown.status === "skipped" && shown.declinedVia !== undefined
+            ? shown.declinedVia === "message"
+                ? "declined — replied in chat"
+                : "declined"
+            : shown.status;
         const suffix = this.#answerMode
             ? " — answering"
             : shown.status === "pending"
                 ? ""
-                : ` — ${shown.status}`;
+                : ` — ${statusText}`;
         lines.push(`[interaction] ${shown.kind}${suffix}`);
         if (top.body !== undefined) {
             this.#ensureSurface(top);
@@ -428,7 +503,9 @@ export class InteractionPrompter {
         }
         if (top.body !== undefined) {
             lines.push(this.#answerMode
-                ? "1-9 answer · Tab next · esc cancel"
+                ? top.declinable === true
+                    ? "1-9 answer · alt+s decline · Tab next · esc cancel"
+                    : "1-9 answer · Tab next · esc cancel"
                 : "ctrl+o to answer");
         }
         return lines;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sigrun/tui",
-	"version": "0.8.0",
+	"version": "0.10.0",
 	"description": "sigrun terminal client (pi-tui based) over the \u00a75 API \u2014 spawned by the sigrun CLI, or standalone against a server URL",
 	"type": "module",
 	"bin": {
@@ -21,7 +21,7 @@
 	},
 	"dependencies": {
 		"@earendil-works/pi-tui": "^1.3.0",
-		"@sigrun/shared": "0.8.0"
+		"@sigrun/shared": "0.10.0"
 	},
 	"devDependencies": {
 		"typescript": "^7.0.2",
@@ -48,4 +48,4 @@
 		"access": "public",
 		"provenance": true
 	}
-}
+}