@wrongstack/tui 0.289.0 → 0.291.1

package/dist/input-validation.d.ts

@@ -0,0 +1,263 @@
+/**
+ * Central input validation for the TUI.
+ *
+ * EVERY external data source that crosses a trust boundary passes through
+ * this module. Uses an **allow-list** approach: define the exact allowed
+ * shape, types, ranges, and formats for each input; reject everything else.
+ *
+ * ── Trust boundaries ─────────────────────────────────────────────────
+ *
+ *   Boundary          | Source              | Validator
+ *   ------------------|---------------------|--------------------------
+ *   stdin             | terminal emulator   | validateStdinFragment()
+ *   paste             | bracketed-paste     | validatePasteContent()
+ *   AppProps          | CLI host            | validateAppProps()
+ *   Reducer Action    | handleKey dispatch  | validateAction()
+ *   Host callbacks    | CLI/plugin return   | validateCallbackReturn()
+ *   Mouse events      | SGR protocol        | validateMouseEvent()
+ *   Fleet telemetry   | Director/FleetBus   | validateFleetEntry()
+ *   Restore data      | session JSONL       | validateRestoreEntry()
+ *
+ * ── Rejection over coercion ──────────────────────────────────────────
+ *
+ * This module **rejects** invalid input rather than coercing it, for
+ * three reasons:
+ *
+ * 1. **Coercion masks injection.** Trimming whitespace from a string
+ *    that contains an ANSI escape sequence leaves the sequence intact.
+ * 2. **Semantic gap.** Coercing a value (e.g. clamping a PID to a valid
+ *    range) creates a gap between what was validated and what the
+ *    application actually uses — a future code path may use the raw
+ *    value, not the clamped one.
+ * 3. **Predictable failure.** Silent data transformation makes security
+ *    debugging harder — rejection produces a clear error at the point
+ *    of violation; coercion produces subtly wrong behavior downstream.
+ *
+ * The single exception is **normalization before comparison**: trimming
+ * whitespace from an enum label before comparing it to the allow-list
+ * prevents trivial bypasses (e.g. `"  off  "` vs `"off"`). This is
+ * NOT the same as coercing the input — the normalized comparison only
+ * determines allow/deny; the caller receives the original value.
+ *
+ * ── Conventions ──────────────────────────────────────────────────────
+ *
+ * - Every `validate*` function returns `ValidationResult<T>`:
+ *     `{ valid: true; value: T }` — the validated, ready-to-use value
+ *     `{ valid: false; error: string }` — a specific, actionable message
+ * - Every error message follows the pattern:
+ *     `"{path}": {what went wrong} ({detail}).`
+ * - Size limits are defined as module-level constants with doc comments.
+ * - Enum/union allow-lists are defined as `const` arrays and kept in
+ *   ONE place so the allowed set is auditable.
+ */
+export interface ValidationOk<T> {
+    valid: true;
+    value: T;
+}
+export interface ValidationError {
+    valid: false;
+    error: string;
+}
+export type ValidationResult<T> = ValidationOk<T> | ValidationError;
+/** Maximum length of a single input line from stdin (before Enter). */
+export declare const MAX_INPUT_BUFFER_CHARS = 100000;
+/** Maximum size of a single paste operation (prevents OOM from 10MB paste). */
+export declare const MAX_PASTE_CHARS = 50000;
+/** Maximum length of a single history entry text payload. */
+export declare const MAX_ENTRY_TEXT_CHARS = 500000;
+/** Maximum entries in the history array (matches history-retention.ts). */
+export declare const MAX_HISTORY_ENTRIES = 400;
+/** Maximum actions in a fleetBatch dispatch (prevents render-thrashing). */
+export declare const MAX_BATCHED_ACTIONS = 500;
+/** Maximum length of a single action payload string field. */
+export declare const MAX_ACTION_STRING_FIELD = 10000;
+/** Maximum subagents tracked in fleet state. */
+export declare const MAX_FLEET_ENTRIES = 200;
+/** Maximum tools tracked per-subagent. */
+export declare const MAX_RECENT_TOOLS = 100;
+/** Maximum messages tracked per-subagent. */
+export declare const MAX_RECENT_MESSAGES = 50;
+/** Maximum depth of nested action payload objects. */
+export declare const MAX_ACTION_DEPTH = 8;
+/** Maximum characters in a paste fragment (single stdin chunk). */
+export declare const MAX_PASTE_FRAGMENT_CHARS = 100000;
+/** Maximum length for any host-provided string (model, provider, etc). */
+export declare const MAX_HOST_STRING_FIELD = 500;
+/** Maximum entries in a picker matches list. */
+export declare const MAX_PICKER_MATCHES = 500;
+/** Known reducer action types — the authoritative allow-list. */
+export declare const ALLOWED_ACTION_TYPES: readonly ['addEntry', 'compactHistory', 'setBuffer', 'clearInput', 'clearHistory', 'replaceHistory', 'replaceEntry', 'historyRoll', 'setHistoryIndex', 'setHistoryDraft', 'scrollBy', 'scrollTo', 'scrollPage', 'scrollToBottom', 'scrollToTop', 'setMeasuredLines', 'setViewportRows', 'pickerOpen', 'pickerMove', 'pickerClose', 'pickerQuery', 'pickerSetMatches', 'slashPickerOpen', 'slashPickerMove', 'slashPickerClose', 'slashPickerQuery', 'slashPickerSetMatches', 'modelPickerOpen', 'modelPickerMove', 'modelPickerClose', 'modelPickerSelect', 'modelPickerSetProviders', 'autonomyPickerOpen', 'autonomyPickerMove', 'autonomyPickerClose', 'autonomyPickerSelect', 'cancelSend', 'submit', 'afterSubmit', 'streamStart', 'streamToken', 'streamToolUse', 'streamToolResult', 'streamEnd', 'setMode', 'toggleHelp', 'toggleMonitor', 'toggleAgentsMonitor', 'toggleTodosMonitor', 'toggleQueuePanel', 'toggleProcessList', 'toggleCronMonitor', 'toggleAuditPanel', 'togglePlanPanel', 'closeAllPanels', 'toggleKanbanPanel', 'toggleGoalPanel', 'toggleGoalKanbanPanel', 'toggleContextPanel', 'toggleSessionsPanel', 'sessionsPanelSet', 'sessionsPanelMove', 'sessionsPanelBusy', 'sessionResumeConfirmSet', 'sessionResumeConfirmClear', 'settingsPickerOpen', 'settingsPickerMove', 'settingsPickerClose', 'settingsPick', 'statuslinePickerOpen', 'statuslinePickerMove', 'statuslinePickerClose', 'pluginPickerOpen', 'pluginPickerMove', 'pluginPickerClose', 'mcpPickerOpen', 'mcpPickerMove', 'mcpPickerClose', 'toolsPickerOpen', 'toolsPickerMove', 'toolsPickerClose', 'projectPickerOpen', 'projectPickerMove', 'projectPickerClose', 'projectPickerSelect', 'projectPickerSetItems', 'fKeyPickerOpen', 'fKeyPickerMove', 'fKeyPickerClose', 'confirmPromptOpen', 'confirmPromptClose', 'clearConfirmOpen', 'clearConfirmClose', 'clearConfirmSetValue', 'exitConfirmOpen', 'exitConfirmClose', 'slashConfirmOpen', 'slashConfirmClose', 'escConfirmOpen', 'escConfirmClose', 'sendModePickerOpen', 'sendModePickerMove', 'sendModePickerClose', 'resetContextChip', 'fleetSeed', 'fleetSpawn', 'fleetToolStart', 'fleetToolEnd', 'fleetStart', 'fleetDelta', 'fleetMessage', 'fleetTool', 'fleetUsage', 'fleetDone', 'fleetRemove', 'fleetBudgetWarning', 'fleetBudgetExtended', 'fleetCtxPct', 'fleetCost', 'fleetConcurrency', 'fleetBatch', 'leaderIterStart', 'leaderIterEnd', 'leaderToolStart', 'leaderToolEnd', 'leaderCtxPct', 'setFleetChat', 'enhanceOpen', 'enhanceClose', 'enhanceBusy', 'enhanceBusyDone', 'enhanceResult', 'enhanceCancel', 'enhanceDismiss', 'refineFailureOpen', 'refineFailureClose', 'continueConfirmOpen', 'continueConfirmClose', 'checkpointReceived', 'rewindOverlayOpen', 'rewindOverlayClose', 'rewindOverlayMove', 'setDeadline', 'setLiveProvider', 'setLiveModel', 'setCapability', 'setDesignKit', 'setAnimationStyle', 'setEffectiveMaxContext', 'setStreamingText', 'setToolStream', 'toolStreamClear', 'setThinkingWord', 'setFleetVerbosity', 'setAutonomyMode', 'setSendMode', 'setSteering', 'setSteeringPending', 'clearSteering', 'setGoalText', 'setGoalPanelGoal', 'showGoal', 'goalSummary', 'goalRunInit', 'goalRunPhaseUpdate', 'goalRunRunningPhases', 'goalRunElapsed', 'goalRunTaskActive', 'goalRunMonitorToggle', 'goalRunReset', 'sddBoardSnapshot', 'toggleSddBoardMonitor', 'sddBoardFocusNext', 'sddBoardFocusPrev', 'worktreeUpsert', 'worktreeRemove', 'toggleWorktreeMonitor', 'collabBugFound', 'collabPlanEmitted', 'collabEvalComplete', 'collabSessionDone', 'collabSubagentSpawned', 'debugStreamStats', 'debugStreamStatsClear', 'countdownTick', 'countdownEnded', 'coordinatorEvent', 'toggleCoordinatorMonitor', 'setEnhancedPrompt', 'enhanceConfirmOpen', 'enhanceConfirmClose', 'setShowModelReasoning'];
+export type AllowedActionType = (typeof ALLOWED_ACTION_TYPES)[number];
+/** History entry kinds that carry text (must be non-empty to be stored). */
+export declare const TEXT_BEARING_ENTRY_KINDS: Set<string>;
+/** All valid history entry kinds. */
+export declare const ALLOWED_ENTRY_KINDS: Set<string>;
+/** Fleet subagent status values. */
+export declare const ALLOWED_FLEET_STATUSES: Set<string>;
+/** Mouse event kinds */
+export declare const ALLOWED_MOUSE_KINDS: Set<string>;
+/** Mouse buttons */
+export declare const ALLOWED_MOUSE_BUTTONS: Set<string>;
+/** Keyboard modifier keys. */
+export declare const ALLOWED_KEY_EVENT_FIELDS: Set<string>;
+/** Scroll direction for scrollPage. */
+export declare const ALLOWED_SCROLL_DIRS: Set<string>;
+/** Autonomy mode values. */
+export declare const ALLOWED_AUTONOMY_MODES: Set<string>;
+/** Known send modes. */
+export declare const ALLOWED_SEND_MODES: Set<string>;
+/** FleetChat verbosity modes. */
+export declare const ALLOWED_FLEET_CHAT_MODES: Set<string>;
+/** SDD lifecycle ops. */
+export declare const ALLOWED_SDD_OPS: Set<string>;
+/** Project picker item kinds. */
+export declare const ALLOWED_PICKER_KINDS: Set<string>;
+/** Collaboration verdicts. */
+export declare const ALLOWED_COLLAB_VERDICTS: Set<string>;
+/** Known terminal capability keys. */
+export declare const ALLOWED_CAPABILITY_FIELDS: Set<string>;
+/**
+ * Validate a keyboard input fragment from stdin.
+ *
+ * This catches raw bytes from the terminal BEFORE they enter the input
+ * buffer. The allow-list is: known control sequences, printable ASCII,
+ * and common Unicode (which terminals emit as normal keystrokes).
+ *
+ * Rejects:
+ *  - Raw escape sequences that don't match known patterns
+ *  - Fragments containing C0 control chars other than tab/newline (0x09, 0x0a)
+ *  - Fragments longer than MAX_PASTE_FRAGMENT_CHARS (likely a flood)
+ */
+export declare function validateStdinFragment(data: Buffer | string): ValidationResult<string>;
+/**
+ * Validate a fully-assembled paste payload AFTER the terminal markers
+ * have been stripped by paste-accumulator.ts.
+ *
+ * Rejects:
+ *  - Paste > MAX_PASTE_CHARS
+ *  - Paste containing C0 control chars (except \n, \t)
+ *  - Paste that looks binary (>30% non-printable)
+ *  - Paste with unbalanced surrogate pairs
+ */
+export declare function validatePasteContent(content: string): ValidationResult<string>;
+/**
+ * Validate a parsed mouse event from the SGR protocol.
+ *
+ * Rejects:
+ *  - Unknown mouse event kinds
+ *  - Unknown button values
+ *  - Coordinates outside reasonable terminal bounds (0 < x < 5000, 0 < y < 5000)
+ *  - Wheel values other than -1, 0, 1
+ */
+export declare function validateMouseEvent(event: {
+    kind: string;
+    button: string;
+    x: number;
+    y: number;
+    wheel: number;
+    shift?: boolean;
+    meta?: boolean;
+    ctrl?: boolean;
+    motion?: boolean;
+}): ValidationResult<{
+    kind: string;
+    button: string;
+    x: number;
+    y: number;
+    wheel: number;
+    shift: boolean;
+    meta: boolean;
+    ctrl: boolean;
+    motion: boolean;
+}>;
+/**
+ * Validate a KeyEvent from stdin against the known allow-list.
+ *
+ * Every boolean field in a KeyEvent must be exactly `true` or `false`.
+ * `fn` must be 1–12 when present. `wheelDeltaY` must be an integer.
+ *
+ * Rejects:
+ *  - Unknown fields on the key event object
+ *  - Non-boolean values for boolean fields
+ *  - fn outside 1–12
+ *  - wheelDeltaY that is not an integer
+ */
+export declare function validateKeyEventFields(key: Record<string, unknown>): ValidationResult<Record<string, unknown>>;
+/**
+ * Validate a reducer Action before dispatch.
+ *
+ * This is the central gate for all state mutations. EVERY dispatch from
+ * external sources (keyboard, host callbacks, fleet events, restore data)
+ * should run through this before reaching the reducer.
+ *
+ * Rejects:
+ *  - Unknown action types
+ *  - Malformed payload types
+ *  - Oversized strings/arrays
+ *  - Out-of-range numeric values
+ *  - Deeply nested payloads (prototype poison / DoS)
+ */
+export declare function validateAction(action: {
+    type: string;
+    [key: string]: any;
+}): ValidationResult<Record<string, unknown>>;
+/**
+ * Validate a fleet subagent entry from telemetry.
+ *
+ * Rejects:
+ *  - Unknown status
+ *  - Oversized streamingText
+ *  - Malformed recent tools/messages arrays
+ *  - Non-finite cost
+ */
+export declare function validateFleetEntry(entry: {
+    id: string;
+    name: string;
+    status: string;
+    streamingText?: string;
+    iterations?: number;
+    toolCalls?: number;
+    recentTools?: unknown[];
+    recentMessages?: unknown[];
+    cost?: number;
+}): ValidationResult<Record<string, unknown>>;
+/**
+ * Validate a restored session entry (from JSONL).
+ *
+ * Rejects:
+ *  - Non-object entries
+ *  - Unknown entry kinds
+ *  - Oversized payloads
+ */
+export declare function validateRestoreEntry(entry: unknown, index: number): ValidationResult<Record<string, unknown>>;
+/**
+ * Validate that an action dispatch is safe for the reducer.
+ * This is a convenience wrapper used at the dispatch boundary.
+ * Returns the original action untouched if valid, or throws with the
+ * specific error message if invalid.
+ *
+ * In production, the caller can log the error and drop the action
+ * instead of crashing — but for security boundaries, throwing is the
+ * safe default because it prevents any partially-valid state from
+ * reaching the reducer.
+ */
+export declare function ensureValidAction(action: {
+    type: string;
+    [key: string]: any;
+}): Record<string, unknown>;
+/**
+ * Safe dispatch wrapper: validates the action, then calls dispatch
+ * only if validation passes. Returns true if dispatched, false if rejected
+ * (with the error logged).
+ */
+export declare function safeDispatch(action: {
+    type: string;
+    [key: string]: any;
+}, dispatch: (action: Record<string, unknown>) => void): boolean;
+/**
+ * Normalize a string by trimming whitespace.
+ * This is the ONLY normalization we do — and it's only used for
+ * allow-list comparison, never for the returned value.
+ */
+export declare function normalizedEquals(a: string, b: string): boolean;
+//# sourceMappingURL=input-validation.d.ts.map

package/dist/input-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validation.d.ts","sourceRoot":"","sources":["../src/input-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAMH,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,KAAK,EAAE,IAAI,CAAC;IACZ,KAAK,EAAE,CAAC,CAAC;CACV;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC;AAIpE,uEAAuE;AACvE,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C,+EAA+E;AAC/E,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,6DAA6D;AAC7D,eAAO,MAAM,oBAAoB,SAAU,CAAC;AAE5C,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,8DAA8D;AAC9D,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,gDAAgD;AAChD,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,0CAA0C;AAC1C,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAEpC,6CAA6C;AAC7C,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC,sDAAsD;AACtD,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,SAAU,CAAC;AAEhD,0EAA0E;AAC1E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC,gDAAgD;AAChD,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAItC,iEAAiE;AACjE,eAAO,MAAM,oBAAoB,YAC/B,UAAU,EACV,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,aAAa,EACb,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,WAAW,EACX,YAAY,EACZ,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,cAAc,EACd,aAAa,EACb,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,CACf,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,aAQnC,CAAC;AAEH,qCAAqC;AACrC,eAAO,MAAM,mBAAmB,aAK9B,CAAC;AAEH,oCAAoC;AACpC,eAAO,MAAM,sBAAsB,aAOjC,CAAC;AAEH,wBAAwB;AACxB,eAAO,MAAM,mBAAmB,aAAiD,CAAC;AAElF,oBAAoB;AACpB,eAAO,MAAM,qBAAqB,aAA+C,CAAC;AAElF,8BAA8B;AAC9B,eAAO,MAAM,wBAAwB,aAoBnC,CAAC;AAEH,uCAAuC;AACvC,eAAO,MAAM,mBAAmB,aAA0B,CAAC;AAE3D,4BAA4B;AAC5B,eAAO,MAAM,sBAAsB,aAMjC,CAAC;AAEH,wBAAwB;AACxB,eAAO,MAAM,kBAAkB,aAA+C,CAAC;AAE/E,iCAAiC;AACjC,eAAO,MAAM,wBAAwB,aAAsC,CAAC;AAE5E,yBAAyB;AACzB,eAAO,MAAM,eAAe,aAAwD,CAAC;AAErF,iCAAiC;AACjC,eAAO,MAAM,oBAAoB,aAAiC,CAAC;AAEnE,8BAA8B;AAC9B,eAAO,MAAM,uBAAuB,aAAmD,CAAC;AAExF,sCAAsC;AACtC,eAAO,MAAM,yBAAyB,aAIpC,CAAC;AAIH;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,GAAG,MAAM,GACpB,gBAAgB,CAAC,MAAM,CAAC,CA+C1B;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAkC9E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,gBAAgB,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC,CAuDD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAwC9G;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IAEb,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAovB5C;AAuCD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA+C5C;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA+B3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,IAAI,EAAE,MAAM,CAAC;IAEb,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAM1B;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE;IACN,IAAI,EAAE,MAAM,CAAC;IAEb,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,EACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAClD,OAAO,CAST;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAE9D"}

package/dist/kanban-audit.d.ts

@@ -0,0 +1,116 @@
+/**
+ * `kanban-audit.ts` — Pure, dependency-free Kanban Cleaner audit for the TUI.
+ *
+ * Mirrors the WebUI's `packages/webui/src/lib/kanban-cleaner.ts` but
+ * lives in the TUI package so we don't have to thread `@wrongstack/webui`
+ * (which depends on React) into a server-side TUI pipeline. The two
+ * implementations intentionally share the same audit-code vocabulary
+ * (10 codes) and severity levels (`error`, `warning`) so a board audited
+ * from either surface produces the same findings.
+ *
+ * The output of `auditKanbanBoard()` feeds the TUI panel header badge so
+ * users see Cleaner warnings inline — mirroring the WebUI's
+ * `KanbanCleanerAlert` component, but inline-pinned to the project root.
+ */
+import type { KanbanBoard } from '@wrongstack/kanban';
+export type KanbanAuditSeverity = 'error' | 'warning';
+export type KanbanAuditIssueCode = 'missing-description' | 'missing-assignee' | 'missing-due-date' | 'missing-labels' | 'missing-subtasks' | 'missing-success-criteria' | 'skipped-lifecycle-state' | 'abandoned-running-task' | 'stale-running-task' | 'stale-review';
+export interface KanbanAuditIssue {
+    id: string;
+    taskId: string;
+    taskTitle: string;
+    code: KanbanAuditIssueCode;
+    severity: KanbanAuditSeverity;
+    message: string;
+}
+export interface KanbanAuditSummary {
+    /** Wall-clock time the audit ran (ISO-8601). Used by the renderer to
+     *  label the report and by tests to pin the audit's age. */
+    generatedAt: string;
+    /** IDs of every board this summary aggregated across. */
+    boardIds: readonly string[];
+    /** Aggregate severity counters. */
+    counts: Readonly<Record<KanbanAuditSeverity, number>>;
+    /** Detail buckets surfaced by the WebUI Cleaner `KanbanCleanerAlert`.
+     *  Each entry lists the tasks that triggered the signal. */
+    dependencyBlocked: {
+        count: number;
+        tasks: ReadonlyArray<{
+            board: {
+                title: string;
+            };
+            task: {
+                title: string;
+            };
+        }>;
+    };
+    staleAssignments: {
+        count: number;
+        tasks: ReadonlyArray<{
+            board: {
+                title: string;
+            };
+            task: {
+                title: string;
+            };
+        }>;
+    };
+    failedRetryable: {
+        count: number;
+        tasks: ReadonlyArray<{
+            board: {
+                title: string;
+            };
+            task: {
+                title: string;
+            };
+        }>;
+    };
+    heartbeatDue: {
+        count: number;
+        tasks: ReadonlyArray<{
+            board: {
+                title: string;
+            };
+            task: {
+                title: string;
+            };
+        }>;
+    };
+    /** Activity stamps for last dispatch / last recovery. */
+    lastDispatchedAt: string | undefined;
+    lastStaleRecoveredAt: string | undefined;
+    /** All issues raised by the audit, sorted error-first. */
+    issues: readonly KanbanAuditIssue[];
+    /** Distinct task IDs across `issues`. */
+    affectedTaskCount: number;
+}
+export interface KanbanAuditOptions {
+    /** Explicit time input keeps the audit pure, deterministic, and unit-testable. */
+    now: number | Date;
+    /** IDs or names of agents currently reported as running by the WebUI fleet roster. */
+    liveAgentIdentities?: ReadonlySet<string> | readonly string[] | undefined;
+    /** Enable only when the shared Kanban task contract exposes a due date. */
+    requireDueDate?: boolean | undefined;
+    /** Used when the board has no review-age policy. */
+    defaultReviewStaleAfterMs?: number | undefined;
+}
+export declare function auditKanbanBoard(board: KanbanBoard, options: KanbanAuditOptions): KanbanAuditSummary;
+/**
+ * Short headline string used by the panel header badge. Returns null when
+ * the summary is empty so callers can hide the badge entirely instead of
+ * rendering a noisy "0 warnings" chip.
+ */
+export declare function summarizeAuditHeadline(summary: KanbanAuditSummary): string | null;
+/**
+ * Top-N issues, biased toward `error` severity first. The TUI panel
+ * surfaces these inline; the full list is still available via
+ * `summary.issues` for tooling.
+ *
+ * We sort defensively (rather than rely on `auditKanbanBoard`'s in-place
+ * order) so callers that hand us a manually-built summary — for example
+ * a test fixture, or a future caller that aggregates issues from
+ * multiple boards — still get the error-first ordering.
+ */
+export declare function topAuditIssues(summary: KanbanAuditSummary, limit?: number): readonly KanbanAuditIssue[];
+//# sourceMappingURL=kanban-audit.d.ts.map

package/dist/kanban-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kanban-audit.d.ts","sourceRoot":"","sources":["../src/kanban-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAEV,WAAW,EAGZ,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,SAAS,CAAC;AAEtD,MAAM,MAAM,oBAAoB,GAC5B,qBAAqB,GACrB,kBAAkB,GAClB,kBAAkB,GAClB,gBAAgB,GAChB,kBAAkB,GAClB,0BAA0B,GAC1B,yBAAyB,GACzB,wBAAwB,GACxB,oBAAoB,GACpB,cAAc,CAAC;AAEnB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC;gEAC4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,mCAAmC;IACnC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD;gEAC4D;IAC5D,iBAAiB,EAAE;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,aAAa,CAAC;YAAE,KAAK,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,IAAI,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC7E,CAAC;IACF,gBAAgB,EAAE;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,aAAa,CAAC;YAAE,KAAK,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,IAAI,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC7E,CAAC;IACF,eAAe,EAAE;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,aAAa,CAAC;YAAE,KAAK,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,IAAI,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC7E,CAAC;IACF,YAAY,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,aAAa,CAAC;YAAE,KAAK,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,IAAI,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC7E,CAAC;IACF,yDAAyD;IACzD,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,0DAA0D;IAC1D,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACpC,yCAAyC;IACzC,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,sFAAsF;IACtF,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC1E,2EAA2E;IAC3E,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,oDAAoD;IACpD,yBAAyB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAyCD,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,GAC1B,kBAAkB,CA2CpB;AAMD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAOjF;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,kBAAkB,EAC3B,KAAK,SAAI,GACR,SAAS,gBAAgB,EAAE,CAG7B"}

package/dist/kanban-slash.d.ts

@@ -0,0 +1,178 @@
+/**
+ * `/kanban` — Open the project kanban panel and perform common board/task
+ * operations from the TUI composer.
+ *
+ * Subcommands (no subcommand → opens the kanban panel):
+ *
+ *   /kanban                          — open the project kanban panel
+ *   /kanban create <title>               — create a new board, then open the panel
+ *   /kanban add <title> [--column X]     — add a task to the active board
+ *   /kanban use <boardId|title|tag>      — open the kanban panel on a specific board
+ *   /kanban boards                       — list every board in the project
+ *   /kanban health                       — show kanban queue health summary
+ *   /kanban audit [boardId|all]          — show kanban cleaner audit (KanbanAuditSummary)
+ *   /kanban help                         — show usage
+ *
+ * The slash command intentionally mirrors the WebUI `kanban` surface so
+ * users can perform the same operations in either surface. The TUI panel
+ * remains the rich interactive view (navigate, move, assign); this command
+ * is the text-first equivalent for when the panel is closed.
+ */
+import type { SlashCommand } from '@wrongstack/core';
+import type { KanbanBoundaryAccess, KanbanBoundaryPolicy, KanbanBoundarySelectorKind, KanbanBoardSummary, KanbanQueueHealth } from '@wrongstack/kanban';
+import { type KanbanAuditSummary } from './kanban-audit.js';
+/**
+ * Result of resolving the board that an `add` operation should target.
+ *
+ * `KanbanPanel` resolves the active board from the session tag
+ * (`session:<sessionId>`) and falls back to the most-recently-updated board.
+ * We mirror that exact precedence so a `/kanban add` issued while the panel
+ * is open lands on the same board the user is looking at.
+ */
+export interface KanbanAddTarget {
+    boardId: string;
+    boardTitle: string;
+    /** Column that the task will be placed in. Defaults to the first column. */
+    columnId: string;
+}
+export interface KanbanSlashDeps {
+    /**
+     * Absolute project root used by the kanban file store. Must match the
+     * value `KanbanPanel` reads from `agent.ctx.projectRoot` — using
+     * `agent.ctx.cwd` would diverge when the user launches the TUI from a
+     * subdirectory of the project.
+     */
+    projectRoot: string;
+    /** Optional session id; when present, prefer a `session:<id>`-tagged board. */
+    sessionId?: string | null | undefined;
+    /**
+     * Panel-open bridge installed by `App`. Calling `onPanelOpen.current(...)`
+     * with `'toggleKanbanPanel'` opens the kanban panel — same mechanism the
+     * other slash commands use. When absent, slash command returns text-only.
+     */
+    onPanelOpen?: {
+        current: ((action: string) => boolean) | null;
+    } | undefined;
+    /**
+     * Optional hook that selects a specific board in the kanban panel. Used
+     * by `/kanban use <boardId|title|tag>` and the Goal → Kanban bridge.
+     * The callback receives a board id and returns true on success.
+     */
+    onBoardFocus?: {
+        current: ((boardId: string) => boolean) | null;
+    } | undefined;
+    /** Terminal width (cols) for help / boards table rendering. */
+    terminalWidth?: number | undefined;
+}
+export declare function createKanbanSlashCommand(deps: KanbanSlashDeps): SlashCommand;
+export type ParsedKanbanArgs = {
+    kind: 'open';
+} | {
+    kind: 'help';
+} | {
+    kind: 'boards';
+} | {
+    kind: 'create';
+    title: string;
+} | {
+    kind: 'add';
+    title: string;
+    column: string | null;
+} | {
+    kind: 'use';
+    query: string;
+} | {
+    kind: 'health';
+} | {
+    kind: 'audit';
+    boardQuery: string;
+} | {
+    kind: 'boundary';
+    boardQuery: string;
+    action: 'show' | 'allow' | 'deny' | 'clear';
+    taskQuery?: string | undefined;
+    selectorKind?: KanbanBoundarySelectorKind | undefined;
+    access?: KanbanBoundaryAccess | undefined;
+    path?: string | undefined;
+    enforcement?: KanbanBoundaryPolicy['enforcement'] | undefined;
+    shellAccess?: KanbanBoundaryPolicy['shellAccess'] | undefined;
+};
+/**
+ * Parse the raw `args` string (everything after `/kanban`) into a tagged
+ * union. Exported so tests can exercise the grammar in isolation.
+ *
+ * Grammar (whitespace-separated; quoted titles supported for the `create`
+ * subcommand):
+ *
+ *   args       ::= ε | "help" | "boards" | "create" title
+ *                |  "add" title ("--" "column" columnId)?
+ *   title      ::= token+
+ *   columnId   ::= token
+ */
+export declare function parseKanbanArgs(raw: string): ParsedKanbanArgs;
+/**
+ * Resolve the board that an `/kanban add` should target, matching the
+ * precedence used by `KanbanPanel`:
+ *
+ *   1. The board tagged with `session:<sessionId>` (when a session id is known).
+ *   2. The most-recently-updated board (sort by `updatedAt` desc).
+ *
+ * If `column` is given, prefer a column whose id or title matches. The match is
+ * case-insensitive and falls back to the first column when nothing matches.
+ *
+ * Exported so tests can validate the precedence rules against fixture boards.
+ */
+export declare function resolveAddTarget(deps: Pick<KanbanSlashDeps, 'projectRoot' | 'sessionId'>, column: string | null): Promise<KanbanAddTarget | null>;
+/**
+ * Resolve a user-supplied board query to a specific board. Three match
+ * strategies are tried in order:
+ *
+ *   1. **Exact id match** — fastest, never ambiguous.
+ *   2. **Exact title match** (case-insensitive) — what `/kanban use Sprint 2`
+ *      should hit when the user types the title verbatim.
+ *   3. **Tag match** — for `goal:<text>` or `session:<id>` tags so the
+ *      Goal → Kanban bridge can navigate by tag without knowing the id.
+ *
+ * Returns null when no summary matches. The caller can then surface a
+ * helpful error pointing at `/kanban boards`.
+ */
+export declare function resolveBoardByQuery(deps: Pick<KanbanSlashDeps, 'projectRoot'>, query: string): Promise<KanbanBoardSummary | null>;
+/**
+ * Render the kanban queue health report as a compact markdown block.
+ * Surfaces the same Sprint-2 fields the WebUI's `KanbanView` shows
+ * (dependencyBlocked, staleAssignments, failedRetryable, heartbeatDue)
+ * plus per-status counts and the last dispatch / last recovery stamps.
+ */
+export declare function renderHealthReport(health: KanbanQueueHealth): string;
+/**
+ * Render the Kanban Cleaner audit across the project. Mirrors the WebUI
+ * `KanbanCleanerAlert` vocabulary so a user running either surface gets
+ * the same findings.
+ *
+ * Two modes:
+ *   - `boardQuery` empty   → audit every board (per-board table).
+ *   - `boardQuery` present → audit the single matching board, or report
+ *     a clear "not found" error.
+ *
+ * Each board's row shows the issue counts (error · warning) and the
+ * top-3 issues, biasing toward error severity first.
+ */
+export declare function renderProjectAudit(deps: Pick<KanbanSlashDeps, 'projectRoot'>, boardQuery: string): Promise<string>;
+/**
+ * Render a board-row table from a list of audited boards. The output
+ * is a compact markdown block suitable for the slash composer.
+ *
+ * When `multi` is true (audit-all mode) each row is prefixed with the
+ * board title; in single-board mode the title appears once as a header.
+ */
+export declare function renderAuditReport(rows: ReadonlyArray<{
+    title: string;
+    summary: KanbanAuditSummary;
+    error?: string;
+}>, multi: boolean): string;
+/**
+ * Render a compact boards table. Width-aware so a 60-col terminal still gets
+ * useful output (column titles truncated, counts abbreviated).
+ */
+export declare function renderBoardsList(boards: readonly KanbanBoardSummary[], width?: number): string;
+//# sourceMappingURL=kanban-slash.d.ts.map

package/dist/kanban-slash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kanban-slash.d.ts","sourceRoot":"","sources":["../src/kanban-slash.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAEV,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,kBAAkB,EAElB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAU5B,OAAO,EAAoB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAI9E;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACtC;;;;OAIG;IACH,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,CAAC;IAC5E;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,CAAC;IAC9E,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAoBD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,eAAe,GAAG,YAAY,CA8G5E;AAID,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACrC;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,YAAY,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IACtD,MAAM,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IAC9D,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;CAC/D,CAAC;AAEN;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAgH7D;AAmKD;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,GAAG,WAAW,CAAC,EACxD,MAAM,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAuBjC;AAcD;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EAC1C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAwBpC;AAID;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CA2DpE;AAWD;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EAC1C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAuDjB;AAmBD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,aAAa,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EACnF,KAAK,EAAE,OAAO,GACb,MAAM,CA8CR;AA4BD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,EAAE,KAAK,SAAK,GAAG,MAAM,CA8C1F"}

package/dist/run-tui.d.ts

@@ -15,6 +15,7 @@ export interface RunTuiOptions {
     /** Host-owned mutable bridge for slash commands that need masked input. */
     secretInputController?: {
         readSecret(prompt: string): Promise<string>;
+        readText?(prompt: string): Promise<string>;
     } | undefined;
     attachments: AttachmentStore;
     events: EventBus;
@@ -85,6 +86,8 @@ export interface RunTuiOptions {
     family?: string | undefined;
     /** Last 3 chars of the active API key — shown in the banner for visual key-pick verification. */
     keyTail?: string | undefined;
+    /** Active fallback profile name, shown in the banner (e.g. "default"). */
+    profile?: string | undefined;
     /** Background autonomy agents to display in the banner (Brain, Shadow,
      *  Kanban, Mailbox, Memory, etc.). Read from the mailbox at boot. */
     autonomyAgents?: import('./components/history/types.js').AutonomyAgentStatus[] | undefined;
@@ -166,6 +169,7 @@ export interface RunTuiOptions {
     onClearHistory?: ((dispatch: React.Dispatch<{
         type: 'clearHistory';
         model?: string | undefined;
+        provider?: string | undefined;
     } | {
         type: 'resetContextChip';
     } | {
@@ -224,6 +228,11 @@ export interface RunTuiOptions {
     interruptController?: {
         abortLeader: () => boolean;
         isRunning?: (() => boolean) | undefined;
+        confirmClear?: ((info: {
+            leaderActive: boolean;
+            subagentCount: number;
+        }) => Promise<boolean>) | undefined;
+        confirmSlash?: ((question: string, defaultYes: boolean) => Promise<boolean | null>) | undefined;
         resetSession?: (() => void) | undefined;
         waitForIdle?: (() => Promise<void>) | undefined;
     } | undefined;
@@ -243,6 +252,8 @@ export interface RunTuiOptions {
     buildEnhancerProvider?: ((providerId: string, modelId: string) => Promise<import('@wrongstack/core').Provider | undefined>) | undefined;
     /** Resolve the one-key "retry with another model" fallback ref on a refine failure. */
     getEnhanceFallbackRef?: (() => string | undefined) | undefined;
+    /** Resolve the dedicated refiner target for the initial refinement attempt. */
+    getConfiguredRefinerRef?: (() => string | undefined) | undefined;
     /**
      * Controller for status bar hidden items. App installs a dispatch-backed
      * setter on mount so the /statusline slash command can update the TUI's