aegis-desktop 1.0.13 → 1.0.15

package/renderer/avatar/avatar.js

@@ -1,382 +1,3 @@
 // SPDX-License-Identifier: AGPL-3.0-or-later
 // Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
-// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
-// Conveying a modified copy, or running one as a network service, owes the
-// corresponding source under this licence (§5/§13) — see LICENSING.md.
-'use strict';
-
-/**
- * avatar.js — the mount: stage, HUD, pane, and the rules that keep the avatar
- * out of everything else's way.
- *
- * The three modules beside this one are pure or nearly so (`parts.js` is data,
- * `assemble.js` builds a string, `hud.js` builds a view model, `machine.js`
- * owns the face's state). This file is where they meet the document, and that
- * makes it the only place the phase's non-functional promises can be kept or
- * broken:
- *
- *  1. **Never blocks input.** No key listener is registered anywhere in
- *     `renderer/avatar/`, so the avatar cannot consume a keystroke — Escape
- *     still reaches the interrupt handler and typing still reaches the
- *     composer, whatever the avatar is doing. Painting is coalesced to at most
- *     one write per animation frame (`schedule()`), so a stream that emits
- *     fifty deltas in a frame still costs one repaint, and every entry point is
- *     wrapped: a throw inside the avatar is swallowed and reported, never
- *     propagated into the chat path. `desktop/test/electron-smoke-main.js`
- *     proves the two behaviours this protects (scroll-hold and interrupt) with
- *     the avatar mounted and streaming.
- *
- *  2. **Never claims a level it was not given.** There is no arithmetic on XP
- *     in this file. It renders whatever projection main hands it, and when main
- *     has nothing to hand it it says `level unknown` (see hud.js).
- *
- *  3. **Accessible by construction.** The SVG is `aria-hidden` +
- *     `focusable="false"` (the assembler sets it), the layer that matters is a
- *     `role="status"` text readout beside it, the XP bar is `aria-hidden` and
- *     its numbers live in that readout, and `prefers-reduced-motion` is read
- *     from the OS and forced through `persona.appliesMotion` — the same
- *     function the storage layer uses, so a persona cannot opt out of the
- *     accessibility preference.
- *
- * Source resolution is deliberately forward-compatible: `window.avatar` is
- * used when it exists, and `preview()` exists so the
- * harnesses (and the customization pane, which previews edits before anything
- * is written) can drive the avatar without it. Both are one code path — the
- * preview state is an override layer over the real one, and it is labelled as
- * such in the readout's own vocabulary (`source`), never presented as truth.
- */
-
-const pkg = typeof window !== 'undefined' && window.AegisAvatarAssemble
-  ? {
-      parts: window.AegisAvatarParts,
-      assemble: window.AegisAvatarAssemble.assemble,
-      hud: window.AegisAvatarHud,
-      machine: window.AegisAvatarMachine,
-      pane: window.AegisAvatarPane,
-      persona: window.AegisAvatarPersona,
-    }
-  : typeof module !== 'undefined' && module.exports
-    ? {
-        parts: require('./parts.js'),
-        assemble: require('./assemble.js').assemble,
-        hud: require('./hud.js'),
-        machine: require('./machine.js'),
-        pane: require('./pane.js'),
-        persona: require('../../lib/avatar/persona.js'),
-      }
-    : null;
-
-if (!pkg) throw new Error('avatar/avatar.js: the avatar modules must be loaded first');
-
-/** How long a quiet `idle` state sits before the face dozes off. */
-const IDLE_TIMEOUT_MS = 5 * 60 * 1000;
-/** The clock the idle timeout is evaluated on. Not a frame loop — see §6. */
-const TICK_INTERVAL_MS = 30000;
-
-function safe(fn, fallback) {
-  try {
-    return fn();
-  } catch {
-    return fallback;
-  }
-}
-
-/**
- * The data source. `window.avatar` is the preload bridge the host will expose
- * (`state()` returning `{ persona, projection, capabilities, warnings }`); when
- * it is missing the avatar renders the honest unknown state rather than
- * inventing numbers.
- */
-function resolveSource(win) {
-  const bridge = win && win.avatar;
-  if (bridge && typeof bridge.state === 'function') {
-    return {
-      kind: 'main',
-      reason: '',
-      state: () => Promise.resolve(bridge.state()),
-      set: typeof bridge.set === 'function' ? (patch) => Promise.resolve(bridge.set(patch)) : null,
-    };
-  }
-  return {
-    kind: 'none',
-    reason: 'main has no avatar surface yet',
-    state: () => Promise.resolve(null),
-    set: null,
-  };
-}
-
-/**
- * Mount the avatar.
- *
- * @param {object} input
- * @param {object} input.doc
- * @param {object} input.win
- * @param {object} input.els element handles (see ELEMENT_IDS in app.js); any
- *   missing handle is skipped rather than thrown on
- * @param {object} [input.source] override the bridge lookup (tests)
- * @param {object} [input.persona] starting persona
- * @param {object} [input.projection] starting level projection
- * @param {object} [input.capabilities] starting capabilities
- * @param {number} [input.idleTimeoutMs]
- */
-function mountAvatar(input = {}) {
-  const doc = input.doc;
-  const win = input.win || (typeof window !== 'undefined' ? window : null);
-  if (!doc || typeof doc.createElement !== 'function') {
-    throw new Error('mountAvatar: a document is required');
-  }
-  const els = input.els || {};
-  const source = input.source || resolveSource(win);
-
-  const signals = pkg.machine.createAvatarSignals({ idleTimeoutMs: input.idleTimeoutMs || IDLE_TIMEOUT_MS });
-
-  let persona = input.persona && typeof input.persona === 'object'
-    ? input.persona
-    : pkg.persona
-      ? pkg.persona.defaultPersona()
-      : pkg.parts.defaultPersona();
-  let projection = input.projection && typeof input.projection === 'object' ? input.projection : null;
-  let capabilities = input.capabilities && typeof input.capabilities === 'object' ? input.capabilities : null;
-  let reason = input.reason || source.reason || '';
-
-  const overrides = { persona: null, projection: null, capabilities: null, reason: null, active: false };
-  let reducedMotion = false;
-  let frame = null;
-  let destroyed = false;
-  let lastPainting = null;
-  let tickTimer = null;
-
-  // ---- OS preference -----------------------------------------------------
-  const media = safe(() => (win && typeof win.matchMedia === 'function'
-    ? win.matchMedia('(prefers-reduced-motion: reduce)')
-    : null), null);
-  reducedMotion = Boolean(media && media.matches);
-  if (media && typeof media.addEventListener === 'function') {
-    safe(() => media.addEventListener('change', (event) => {
-      reducedMotion = Boolean(event && 'matches' in event ? event.matches : media.matches);
-      schedule();
-    }));
-  }
-
-  // ---- the customization pane -------------------------------------------
-  const pane = safe(() => pkg.pane.buildPane({
-    doc,
-    persona,
-    capabilities,
-    onPatch: (patch) => {
-      const validated = safe(() => (pkg.persona ? pkg.persona.update(persona, patch).persona : persona), persona);
-      applyPersona(validated.persona || validated, { repaint: true });
-      return persist(patch);
-    },
-  }), null);
-  if (pane && els.paneHost && typeof els.paneHost.appendChild === 'function') {
-    els.paneHost.appendChild(pane.root);
-  }
-
-  /**
-   * Persist a patch through the bridge. Returns the shape the pane's status
-   * line prints, so "saved" is only ever shown for a write that really landed.
-   */
-  function persist(patch) {
-    if (!source.set) return { ok: true, saved: false, reason: source.reason || 'no write surface' };
-    return source.set(patch).then(
-      (res) => {
-        if (res && res.ok === false) return { ok: false, reason: res.reason || 'refused' };
-        if (res && res.persona) applyPersona(res.persona, { repaint: false });
-        return { ok: true, saved: true };
-      },
-      (err) => ({ ok: false, reason: (err && err.message) || 'write failed' })
-    );
-  }
-
-  // ---- painting ----------------------------------------------------------
-  function schedule() {
-    if (destroyed) return;
-    if (frame !== null) return;
-    const raf = win && typeof win.requestAnimationFrame === 'function' ? win.requestAnimationFrame : null;
-    if (raf) {
-      frame = safe(() => raf(paint), null);
-      if (frame !== null) return;
-    }
-    // No rAF (a bare test document): coalesce on the microtask queue instead, so
-    // the "one repaint per burst" property still holds without a timer.
-    frame = 0;
-    Promise.resolve().then(() => {
-      frame = null;
-      paint();
-    });
-  }
-
-  function effective() {
-    return {
-      persona: overrides.active && overrides.persona ? overrides.persona : persona,
-      projection: overrides.active ? overrides.projection : projection,
-      capabilities: overrides.active ? overrides.capabilities : capabilities,
-      reason: overrides.active && overrides.reason !== null ? overrides.reason : reason,
-    };
-  }
-
-  function paint() {
-    if (destroyed) return;
-    const now = effective();
-    const assembled = safe(
-      () => pkg.assemble(now.persona, { expression: signals.expression, reducedMotion }),
-      null
-    );
-    if (!assembled) {
-      // A manifest that cannot assemble must not leave a stale face claiming to
-      // be current: blank the stage and say so in the readout.
-      if (els.stage) els.stage.innerHTML = '';
-    } else if (els.stage) {
-      // Generated markup only: ids, geometry and colour roles from the manifest.
-      // No persona text ever reaches this string (see assemble.js rule 2), so
-      // there is nothing here for a persona to inject through.
-      els.stage.innerHTML = assembled.svg;
-    }
-
-    const model = pkg.hud.hudModel({
-      persona: now.persona,
-      projection: now.projection,
-      capabilities: now.capabilities,
-      expression: signals.expression,
-      expressionLabel: signals.label,
-      reason: now.reason,
-    });
-    safe(() => pkg.hud.renderHud(els, model));
-    if (pane && typeof pane.update === 'function') safe(() => pane.update(now.persona));
-    lastPainting = {
-      expression: assembled ? assembled.expression : null,
-      motion: assembled ? assembled.motion : null,
-      warnings: assembled ? assembled.warnings.slice() : ['assemble failed'],
-      missing: assembled ? assembled.missing.slice() : [],
-      hud: model,
-      source: overrides.active ? 'preview' : source.kind,
-    };
-    return lastPainting;
-  }
-
-  function applyPersona(next, opts = {}) {
-    if (!next || typeof next !== 'object') return persona;
-    const validated = safe(() => (pkg.persona ? pkg.persona.validate(next).persona : next), next);
-    persona = validated && validated.persona ? validated.persona : validated;
-    if (opts.repaint !== false) schedule();
-    return persona;
-  }
-
-  // ---- reads from main ---------------------------------------------------
-  function refresh() {
-    if (destroyed) return Promise.resolve(null);
-    return Promise.resolve(safe(() => source.state(), null)).then(
-      (state) => {
-        if (destroyed || !state || typeof state !== 'object') {
-          if (!state && !reason) reason = source.reason || 'main has not published a level yet';
-          schedule();
-          return null;
-        }
-        if (state.persona) applyPersona(state.persona, { repaint: false });
-        if (state.projection && typeof state.projection === 'object') projection = state.projection;
-        else if (typeof state.level === 'number') projection = state;
-        if (state.capabilities && typeof state.capabilities === 'object') capabilities = state.capabilities;
-        reason = '';
-        schedule();
-        return state;
-      },
-      (err) => {
-        reason = `level unavailable — ${(err && err.message) || 'read failed'}`;
-        schedule();
-        return null;
-      }
-    );
-  }
-
-  // ---- the face follows the engine ---------------------------------------
-  function signal(name, meta) {
-    const out = safe(() => signals.signal(name, meta), null);
-    if (out) schedule();
-    return out;
-  }
-
-  const api = {
-    get expression() {
-      return signals.expression;
-    },
-    get state() {
-      return signals.state;
-    },
-    get persona() {
-      return persona;
-    },
-    get painting() {
-      return lastPainting;
-    },
-    signal,
-    turnStart: (meta) => signal('turn.start', meta),
-    stream: () => signal('turn.stream'),
-    turnEnd: (meta) => signal('turn.end', meta),
-    tool: (tool) => signal(pkg.machine.signalForTool(tool), { tool: pkg.machine.toolName(tool) }),
-    approvalCard: () => signal('approval.card'),
-    approvalDecided: () => signal('approval.decided'),
-    queue: () => signal('queue.progress'),
-    syncOk: () => signal('sync.ok'),
-    syncError: (meta) => signal('sync.error', meta),
-    poke: () => signal('poke'),
-    celebrateDone: () => signal('celebrate.done'),
-    reset: () => signal('reset'),
-    tick: (now) => {
-      const out = safe(() => signals.tick(now), null);
-      if (out && out.changed) schedule();
-      return out;
-    },
-    on: (fn) => signals.on(fn),
-    setPersona: (next) => applyPersona(next),
-    /** Ask main for a fresh projection (a turn that saved memory moved XP). */
-    refresh,
-    /**
-     * The preview seam. Harnesses (the Electron smoke leg and the marketing
-     * shot driver) and the pane use it to render a persona/level this process
-     * was not handed by main, and `painting.source` reports it as `preview` so
-     * the evidence can never read as if main had published it.
-     */
-    preview(next = {}) {
-      overrides.active = true;
-      if (next.persona) overrides.persona = next.persona;
-      if ('projection' in next) overrides.projection = next.projection;
-      if ('capabilities' in next) overrides.capabilities = next.capabilities;
-      if ('reason' in next) overrides.reason = next.reason === undefined ? null : next.reason;
-      schedule();
-      return lastPainting;
-    },
-    clearPreview() {
-      overrides.active = false;
-      schedule();
-      return lastPainting;
-    },
-    /** The readout text, for harnesses that assert on what a user would read. */
-    readout() {
-      return els.readout ? String(els.readout.textContent || '') : '';
-    },
-    destroy() {
-      destroyed = true;
-      if (tickTimer !== null) safe(() => win.clearInterval(tickTimer));
-      tickTimer = null;
-      if (pane && typeof pane.destroy === 'function') safe(() => pane.destroy());
-      if (els.stage) els.stage.innerHTML = '';
-    },
-  };
-
-  // ---- the idle clock ----------------------------------------------------
-  // One 30s interval for the doze timeout — not a frame loop. §6 of the plan
-  // spells out why: "pure SVG, no WebGL, no per-frame work". The interval only
-  // evaluates a comparison; it paints only when the machine actually changes.
-  if (win && typeof win.setInterval === 'function') {
-    tickTimer = safe(() => win.setInterval(() => api.tick(Date.now()), TICK_INTERVAL_MS), null);
-  }
-
-  schedule();
-  return api;
-}
-
-const API = Object.freeze({ mountAvatar, resolveSource, IDLE_TIMEOUT_MS, TICK_INTERVAL_MS });
-
-if (typeof module !== 'undefined' && module.exports) module.exports = API;
-else if (typeof globalThis !== 'undefined') globalThis.AegisAvatar = API;
+"use strict";const pkg="undefined"!=typeof window&&window.AegisAvatarAssemble?{parts:window.AegisAvatarParts,assemble:window.AegisAvatarAssemble.assemble,hud:window.AegisAvatarHud,machine:window.AegisAvatarMachine,pane:window.AegisAvatarPane,persona:window.AegisAvatarPersona}:"undefined"!=typeof module&&module.exports?{parts:require("./parts.js"),assemble:require("./assemble.js").assemble,hud:require("./hud.js"),machine:require("./machine.js"),pane:require("./pane.js"),persona:require("../../lib/avatar/persona.js")}:null;if(!pkg)throw new Error("avatar/avatar.js: the avatar modules must be loaded first");const IDLE_TIMEOUT_MS=3e5,TICK_INTERVAL_MS=3e4;function safe(e,n){try{return e()}catch{return n}}function resolveSource(e){const n=e&&e.avatar;return n&&"function"==typeof n.state?{kind:"main",reason:"",state:()=>Promise.resolve(n.state()),set:"function"==typeof n.set?e=>Promise.resolve(n.set(e)):null}:{kind:"none",reason:"main has no avatar surface yet",state:()=>Promise.resolve(null),set:null}}function mountAvatar(e={}){const n=e.doc,a=e.win||("undefined"!=typeof window?window:null);if(!n||"function"!=typeof n.createElement)throw new Error("mountAvatar: a document is required");const t=e.els||{},o=e.source||resolveSource(a),r=pkg.machine.createAvatarSignals({idleTimeoutMs:e.idleTimeoutMs||3e5});let s=e.persona&&"object"==typeof e.persona?e.persona:pkg.persona?pkg.persona.defaultPersona():pkg.parts.defaultPersona(),i=e.projection&&"object"==typeof e.projection?e.projection:null,l=e.capabilities&&"object"==typeof e.capabilities?e.capabilities:null,p=e.reason||o.reason||"";const u={persona:null,projection:null,capabilities:null,reason:null,active:!1};let c=!1,d=null,f=!1,m=null,v=null;const g=safe((()=>a&&"function"==typeof a.matchMedia?a.matchMedia("(prefers-reduced-motion: reduce)"):null),null);c=Boolean(g&&g.matches),g&&"function"==typeof g.addEventListener&&safe((()=>g.addEventListener("change",(e=>{c=Boolean(e&&"matches"in e?e.matches:g.matches),h()}))));const b=safe((()=>pkg.pane.buildPane({doc:n,persona:s,capabilities:l,onPatch:e=>{const n=safe((()=>pkg.persona?pkg.persona.update(s,e).persona:s),s);return y(n.persona||n,{repaint:!0}),function(e){return o.set?o.set(e).then((e=>e&&!1===e.ok?{ok:!1,reason:e.reason||"refused"}:(e&&e.persona&&y(e.persona,{repaint:!1}),{ok:!0,saved:!0})),(e=>({ok:!1,reason:e&&e.message||"write failed"}))):{ok:!0,saved:!1,reason:o.reason||"no write surface"}}(e)}})),null);function h(){if(f)return;if(null!==d)return;const e=a&&"function"==typeof a.requestAnimationFrame?a.requestAnimationFrame:null;e&&(d=safe((()=>e(w)),null),null!==d)||(d=0,Promise.resolve().then((()=>{d=null,w()})))}function w(){if(f)return;const e={persona:u.active&&u.persona?u.persona:s,projection:u.active?u.projection:i,capabilities:u.active?u.capabilities:l,reason:u.active&&null!==u.reason?u.reason:p},n=safe((()=>pkg.assemble(e.persona,{expression:r.expression,reducedMotion:c})),null);n?t.stage&&(t.stage.innerHTML=n.svg):t.stage&&(t.stage.innerHTML="");const a=pkg.hud.hudModel({persona:e.persona,projection:e.projection,capabilities:e.capabilities,expression:r.expression,expressionLabel:r.label,reason:e.reason});return safe((()=>pkg.hud.renderHud(t,a))),b&&"function"==typeof b.update&&safe((()=>b.update(e.persona))),m={expression:n?n.expression:null,motion:n?n.motion:null,warnings:n?n.warnings.slice():["assemble failed"],missing:n?n.missing.slice():[],hud:a,source:u.active?"preview":o.kind},m}function y(e,n={}){if(!e||"object"!=typeof e)return s;const a=safe((()=>pkg.persona?pkg.persona.validate(e).persona:e),e);return s=a&&a.persona?a.persona:a,!1!==n.repaint&&h(),s}function k(e,n){const a=safe((()=>r.signal(e,n)),null);return a&&h(),a}b&&t.paneHost&&"function"==typeof t.paneHost.appendChild&&t.paneHost.appendChild(b.root);const A={get expression(){return r.expression},get state(){return r.state},get persona(){return s},get painting(){return m},signal:k,turnStart:e=>k("turn.start",e),stream:()=>k("turn.stream"),turnEnd:e=>k("turn.end",e),tool:e=>k(pkg.machine.signalForTool(e),{tool:pkg.machine.toolName(e)}),approvalCard:()=>k("approval.card"),approvalDecided:()=>k("approval.decided"),queue:()=>k("queue.progress"),syncOk:()=>k("sync.ok"),syncError:e=>k("sync.error",e),poke:()=>k("poke"),celebrateDone:()=>k("celebrate.done"),reset:()=>k("reset"),tick:e=>{const n=safe((()=>r.tick(e)),null);return n&&n.changed&&h(),n},on:e=>r.on(e),setPersona:e=>y(e),refresh:function(){return f?Promise.resolve(null):Promise.resolve(safe((()=>o.state()),null)).then((e=>f||!e||"object"!=typeof e?(e||p||(p=o.reason||"main has not published a level yet"),h(),null):(e.persona&&y(e.persona,{repaint:!1}),e.projection&&"object"==typeof e.projection?i=e.projection:"number"==typeof e.level&&(i=e),e.capabilities&&"object"==typeof e.capabilities&&(l=e.capabilities),p="",h(),e)),(e=>(p=`level unavailable — ${e&&e.message||"read failed"}`,h(),null)))},preview:(e={})=>(u.active=!0,e.persona&&(u.persona=e.persona),"projection"in e&&(u.projection=e.projection),"capabilities"in e&&(u.capabilities=e.capabilities),"reason"in e&&(u.reason=void 0===e.reason?null:e.reason),h(),m),clearPreview:()=>(u.active=!1,h(),m),readout:()=>t.readout?String(t.readout.textContent||""):"",destroy(){f=!0,null!==v&&safe((()=>a.clearInterval(v))),v=null,b&&"function"==typeof b.destroy&&safe((()=>b.destroy())),t.stage&&(t.stage.innerHTML="")}};return a&&"function"==typeof a.setInterval&&(v=safe((()=>a.setInterval((()=>A.tick(Date.now())),3e4)),null)),h(),A}const API=Object.freeze({mountAvatar:mountAvatar,resolveSource:resolveSource,IDLE_TIMEOUT_MS:3e5,TICK_INTERVAL_MS:3e4});"undefined"!=typeof module&&module.exports?module.exports=API:"undefined"!=typeof globalThis&&(globalThis.AegisAvatar=API);

package/renderer/avatar/cards.js

@@ -1,143 +1,3 @@
 // SPDX-License-Identifier: AGPL-3.0-or-later
 // Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
-// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
-// Conveying a modified copy, or running one as a network service, owes the
-// corresponding source under this licence (§5/§13) — see LICENSING.md.
-'use strict';
-
-/**
- * cards.js — the companion card, rendered in the shape of the tool approval
- * card.
- *
- * Two things make that more than a styling choice:
- *
- *  1. **It is genuinely the same card.** The class names, the action-row
- *     structure, the disable-on-first-click behaviour and the "what just
- *     happened" line are the approval card's, not a lookalike: a companion
- *     proposal and a tool request read as the same kind of event, because they
- *     are — an offer that does nothing until the user says yes.
- *  2. **It presumes nothing.** The decision is sent to `onDecision(cardId,
- *     'accept'|'dismiss')` and the card is dead afterwards. There is no
- *     "auto-accept after N seconds", no default focus that a stray Enter could
- *     resolve, and no path from rendering to acting: main's `dispatch()`
- *     (`lib/avatar/companion.js`) still refuses anything without the ticket the
- *     accept click produced. Rendering a card cannot cause an effect.
- *
- * Dependency-free and DOM-injectable (`doc`), so a test drives it without
- * jsdom, exactly like `renderer/diffview.js` and `renderer/avatar/assemble.js`.
- */
-
-const COMPANION_CARD_CLASS = 'companion-card';
-const APPROVAL_CARD_CLASS = 'approval-card';
-
-function textEl(doc, className, text) {
-  const el = doc.createElement('div');
-  el.className = className;
-  el.textContent = text;
-  return el;
-}
-
-/**
- * Build one companion card element.
- *
- * @param {Document} doc   the document (injected: this module touches nothing global)
- * @param {object} card    a card from `companion.createSession().consider(...)`
- *                         — `{id, title, body, facts, actions, behaviour}`
- * @param {(cardId: string, decision: 'accept'|'dismiss') => void} onDecision
- * @returns {HTMLElement|null} null for a malformed card (never throws)
- */
-function buildCompanionCard(doc, card, onDecision) {
-  if (!doc || !card || !card.id) return null;
-
-  const el = doc.createElement('div');
-  // Both classes: `.approval-card` for the shared look, `.companion-card` so a
-  // theme or a test can tell a proposal from a tool gate.
-  el.className = `${APPROVAL_CARD_CLASS} ${COMPANION_CARD_CLASS}`;
-  el.dataset.companionId = String(card.id);
-  if (card.behaviour) el.dataset.companionBehaviour = String(card.behaviour);
-  el.dataset.proactive = card.proactive ? 'true' : 'false';
-
-  el.appendChild(textEl(doc, 'approval-title', String(card.title || card.label || 'Suggestion')));
-
-  if (card.body) el.appendChild(textEl(doc, 'approval-summary', String(card.body)));
-
-  const facts = Array.isArray(card.facts) ? card.facts.filter(Boolean) : [];
-  if (facts.length) {
-    const list = doc.createElement('ul');
-    list.className = 'companion-facts';
-    for (const fact of facts.slice(0, 6)) {
-      const li = doc.createElement('li');
-      li.textContent = String(fact);
-      list.appendChild(li);
-    }
-    el.appendChild(list);
-  }
-
-  const actions = doc.createElement('div');
-  actions.className = 'approval-actions';
-
-  // Every button this card made, so resolving it can disable exactly those —
-  // no `querySelectorAll` on the container (a card is self-contained).
-  const buttons = [];
-  let resolved = false;
-
-  // No decision is sent until a click. Anything else (Enter on a focused card,
-  // a timer, a programmatic "accept") is not a path this card offers.
-  //
-  // The `resolved` flag is belt-and-braces alongside `disabled`: a browser will
-  // not fire a click on a disabled button, but the approval card's promise is
-  // that one card produces at most one decision, and that must not depend on
-  // the browser's event dispatch. main's `dispatch()` refuses the replayed
-  // ticket anyway — three independent layers, none of them trusted alone.
-  const decide = (action) => {
-    if (resolved) return;
-    resolved = true;
-    for (const btn of buttons) btn.disabled = true;
-    el.classList.add('resolved');
-    const tag = textEl(doc, 'approval-decision', String(action.doneLabel || (action.decision === 'accept' ? 'Accepted' : 'Not now')));
-    el.appendChild(tag);
-    if (typeof onDecision === 'function') onDecision(String(card.id), action.decision);
-  };
-
-  for (const action of Array.isArray(card.actions) ? card.actions : []) {
-    const btn = doc.createElement('button');
-    btn.type = 'button';
-    btn.className = `approval-btn ${action.decision === 'accept' ? 'allow' : 'deny'}`;
-    btn.textContent = String(action.label || action.decision);
-    btn.dataset.decision = String(action.decision);
-    btn.addEventListener('click', () => decide(action));
-    buttons.push(btn);
-    actions.appendChild(btn);
-  }
-
-  if (!buttons.length) {
-    // A card with no actions is a bug in the caller, not something to render
-    // as a dead end.
-    return null;
-  }
-
-  el.appendChild(actions);
-  return el;
-}
-
-/**
- * Mount a card into `container`, reusing the approval card's `.approval-slot`
- * so the two can never interleave in the transcript.
- */
-function mountCompanionCard(doc, container, card, onDecision) {
-  if (!container || typeof container.appendChild !== 'function') return null;
-  const el = buildCompanionCard(doc, card, onDecision);
-  if (!el) return null;
-  let slot = typeof container.querySelector === 'function' ? container.querySelector('.approval-slot') : null;
-  if (!slot) {
-    slot = doc.createElement('div');
-    slot.className = 'approval-slot';
-    container.appendChild(slot);
-  }
-  slot.appendChild(el);
-  return el;
-}
-
-if (typeof module !== 'undefined' && module.exports) {
-  module.exports = { buildCompanionCard, mountCompanionCard, COMPANION_CARD_CLASS, APPROVAL_CARD_CLASS };
-}
+"use strict";const COMPANION_CARD_CLASS="companion-card",APPROVAL_CARD_CLASS="approval-card";function textEl(t,e,n){const o=t.createElement("div");return o.className=e,o.textContent=n,o}function buildCompanionCard(t,e,n){if(!t||!e||!e.id)return null;const o=t.createElement("div");o.className=`${APPROVAL_CARD_CLASS} ${COMPANION_CARD_CLASS}`,o.dataset.companionId=String(e.id),e.behaviour&&(o.dataset.companionBehaviour=String(e.behaviour)),o.dataset.proactive=e.proactive?"true":"false",o.appendChild(textEl(t,"approval-title",String(e.title||e.label||"Suggestion"))),e.body&&o.appendChild(textEl(t,"approval-summary",String(e.body)));const a=Array.isArray(e.facts)?e.facts.filter(Boolean):[];if(a.length){const e=t.createElement("ul");e.className="companion-facts";for(const n of a.slice(0,6)){const o=t.createElement("li");o.textContent=String(n),e.appendChild(o)}o.appendChild(e)}const i=t.createElement("div");i.className="approval-actions";const l=[];let r=!1;const d=a=>{if(r)return;r=!0;for(const t of l)t.disabled=!0;o.classList.add("resolved");const i=textEl(t,"approval-decision",String(a.doneLabel||("accept"===a.decision?"Accepted":"Not now")));o.appendChild(i),"function"==typeof n&&n(String(e.id),a.decision)};for(const n of Array.isArray(e.actions)?e.actions:[]){const e=t.createElement("button");e.type="button",e.className="approval-btn "+("accept"===n.decision?"allow":"deny"),e.textContent=String(n.label||n.decision),e.dataset.decision=String(n.decision),e.addEventListener("click",(()=>d(n))),l.push(e),i.appendChild(e)}return l.length?(o.appendChild(i),o):null}function mountCompanionCard(t,e,n,o){if(!e||"function"!=typeof e.appendChild)return null;const a=buildCompanionCard(t,n,o);if(!a)return null;let i="function"==typeof e.querySelector?e.querySelector(".approval-slot"):null;return i||(i=t.createElement("div"),i.className="approval-slot",e.appendChild(i)),i.appendChild(a),a}"undefined"!=typeof module&&module.exports&&(module.exports={buildCompanionCard:buildCompanionCard,mountCompanionCard:mountCompanionCard,COMPANION_CARD_CLASS:COMPANION_CARD_CLASS,APPROVAL_CARD_CLASS:APPROVAL_CARD_CLASS});