rtrt-agent 0.1.7 → 0.2.0

package/README.ko.md

@@ -4,23 +4,25 @@
 agent, worktree, invocation 및 permission broker 문맥을 보존하고 로컬 대시보드를
 백그라운드에서 사용할 수 있게 유지합니다.
 
-## 설치
+## 설치 (v1 setup-managed wiring, v0.2.0)
+
+이 소스는 v0.2.0을 대상으로 합니다. 설치하려면 버전이 일치하는 게시된 npm release가 필요하며, 소스의 버전 표시는 게시 증명이 아닙니다. 이전 `rtrt-agent@0.1.7` release는 그대로이며 아래 native v2 진입점을 포함하지 않습니다.
+
+버전이 일치하는 npm release의 설치 형태는 다음과 같습니다.
 
 ```sh
-npm install rtrt-agent@0.1.7
+npm install rtrt-agent@0.2.0
 ```
 
 `opencode.json`의 단수형 `plugin` 배열에 패키지를 등록합니다.
 
 ```json
 {
-  "plugin": ["rtrt-agent@0.1.7"]
+  "plugin": ["rtrt-agent@0.2.0"]
 }
 ```
 
-OpenCode는 이름 있는 `RtrtProvenance` export를 로드합니다. 이 패키지는 의도적으로
-default export를 제공하지 않습니다. 선택 사항인 RTRT TUI statusline은 별도 소스
-통합으로 유지되며 이 패키지에서 export하거나 pack하지 않습니다.
+v1 패키지 root는 이름 있는 export `RtrtProvenance` 하나를 그대로 유지하며 v0.2.0에서도 이름은 바뀌지 않습니다. 선택 사항인 v1 TUI statusline은 별도 setup-managed 통합으로 남고 v1 패키지는 이를 export하거나 pack하지 않습니다. 새로 staged 된 native v2 소스는 아래에서 설명하며 `rtrt-agent@0.1.7`에는 게시되지 않습니다.
 
 ## 대시보드
 
@@ -44,20 +46,53 @@ state가 안전하지 않거나 없으면 시작만 fail-soft로 중단되고 Op
 
 `rtrt setup --agent opencode --apply`는 전체 RTRT 통합을 관리하지만 npm 설치는 수행하지
 않으며, 설정된 패키지는 OpenCode가 시작할 때 설치합니다. Setup은 먼저 정확한
-`rtrt-agent@0.1.7` 등록과 모든 대체 관리 asset을 기록합니다. 이 기록이 성공한 뒤에만
+`rtrt-agent@0.2.0` 등록과 모든 대체 관리 asset을 기록합니다. 이 기록이 성공한 뒤에만
 인식된 legacy RTRT plugin을 제거하며, 이전 단계가 실패하면 legacy runtime을 보존합니다.
 Setup은 `rtrt-agent`의 정확히 일치하는 bare, pinned, ranged, tuple, object 형식만 소유하고
-정확한 `"rtrt-agent@0.1.7"` string 하나로 정규화합니다. 이전의 미게시 `rtrt`와 초안
+정확한 `"rtrt-agent@0.2.0"` string 하나로 정규화합니다. 이전의 미게시 `rtrt`와 초안
 `rtrt-opencode` 패키지 spec은 외부 값이며 순서를 유지합니다. 위 직접 등록과
-`opencode plugin rtrt-agent@0.1.7 --global`은 계속 유효합니다.
+`opencode plugin rtrt-agent@0.2.0 --global`은 계속 유효합니다.
 
 관리 agent 소유권 상태는 다음 순서의 첫 비어 있지 않은 root에서 읽습니다.
 `$OPENCODE_CONFIG_DIR`, `$XDG_CONFIG_HOME/opencode`, `~/.config/opencode`. 공존은 OMO
 4.19.4를 대상으로 CI에서 검사하고 OpenCode 1.18.29에서 직접 검증했으며, 어느 쪽도
 미래 버전 지원을 보장하지 않습니다. 통합 RTRT 릴리스 워크플로는 정확한 버전의
-대시보드 플랫폼 패키지 5개를 `rtrt-agent@0.1.7`보다 먼저 게시한 뒤 일치하는 Rust
+대시보드 플랫폼 패키지 5개를 `rtrt-agent@0.2.0`보다 먼저 게시한 뒤 일치하는 Rust
 릴리스 artifact를 게시합니다.
 
+## Native OpenCode 2.0.20 진입점
+
+v0.2.0 source manifest의 pack 목록에는 native v2 server와 TUI 파일이 추가되지만, npm registry의 `rtrt-agent@0.1.7`에는 **포함되지 않습니다**. 게시된 `rtrt-agent@0.1.7`은 native v2 진입점을 설치·등록하지 않으며, 과거 `0.1.7` 패키지 계약은 게시된 그대로 유지됩니다. v0.2.0 native 소스의 검증 대상은 정확히 `@opencode/cli@2.0.20`과 `@opencode/plugin@2.0.20`이며, 1.x SDK의 v2 preview가 아닙니다. 패키지 root는 v1 이름 있는 export `RtrtProvenance`를 유지합니다 (이름만, v0.2.0에서도 변경 없음).
+
+v0.2.0 source pack에 staged 된 항목:
+
+- `./server`의 native `Plugin.Definition` default export. 이름 있는 `createNativeServer` 팩토리가 `{ id: "rtrt-agent", setup }` 형태로 생성합니다. v1 `RtrtProvenance` 경로는 그대로 별도입니다.
+- `package.json`의 `exports`에서 `./server`와 `./tui`에 사용하는 single-element 배열. OpenCode 1.18.33 legacy resolver는 배열을 무시하고 `main`인 `index.js`로 fallback 하며, native 2.0.20은 정상적으로 해석합니다.
+- v1 TUI statusline은 여전히 별도의 `app_bottom` 등록입니다. v2 native `rtrt-statusline.tsx`는 `tui/v2/` 아래에 있고 2.x에서만 동작하며 v1 연결은 그대로입니다.
+- Native `prompt.footer.status` 등록과 server·TUI hook의 cleanup.
+
+Tool-arg provenance, 대시보드 자동 시작, 명시적 `rtrt_dashboard_open`은 모두 native server 뒤에 있습니다. Permission 정책은 fail-closed이며 명시적 `deny`는 v1 broker와 v2 evaluator 양쪽에서 그대로 보존됩니다. 외부 Claude CLI permission broker 지원과 per-call shell identity / provider-limit recovery는 native v2 build에서 **지원되지 않습니다**. 이는 2.0.20 public API에 해당 표면이 없기 때문이며 어떤 workaround로도 자동 승인되지 않습니다. 기본 deny 정책은 v1 broker에서와 동일합니다.
+
+### 로컬 소스 checkout (npm 설치 없음)
+
+로컬 checkout으로 개발할 때는 OpenCode의 native `plugins` config가 디렉터리 참조를 받습니다. 정확한 경로는 checkout에 따라 다르므로 형식만 보여 줍니다.
+
+```json
+{
+  "plugins": [
+    "/absolute/path/to/rtrt/plugins/opencode"
+  ]
+}
+```
+
+이 디렉터리 형식은 격리된 HOME/XDG 환경에서 실제 `@opencode/cli@2.0.20` host로 로컬 검증했습니다. 그 정확한 버전에서 `server.js`가 active이고 native TUI 탐색 결과는 `features.tui: true`이며 RTRT stdio MCP가 연결됩니다. TUI strict typecheck, 번들 빌드, 120열·40열 headless footer 렌더링도 통과합니다. 검증은 전체 interactive OpenCode TUI를 다루지 않으며 다른 OpenCode 버전을 보장하지 않습니다. 검증 대상은 정확히 테스트한 `@opencode/cli@2.0.20` host에 한정됩니다.
+
+### Native MCP 형식 (정보 제공, OpenCode 2 공식 schema)
+
+Native local MCP 형식은 `mcp.servers.rtrt.type: "local"`과 `["/absolute/path/to/rtrt-mcp", "--transport", "stdio"]` 같은 `command` 배열을 사용합니다. 옵션 이름은 `disabled`와 `codemode`이며 sandbox source config에서는 둘 다 `false`입니다. Release에 고정된 v1 등록은 `rtrt-agent@0.2.0`입니다. `rtrt setup --agent opencode --apply`는 여전히 v1 설정을 기록하며 native v2 설치가 아닙니다. Setup 자체는 npm 패키지를 설치하지 않고, OpenCode가 시작할 때 설정된 패키지를 해석합니다.
+
+게시된 `rtrt-agent@0.1.7`은 npm registry에서 그대로입니다. Sandbox의 기본 v2 설정은 MCP-only이며 staged native plugin·footer·forwarding adapter는 그 경로에서 활성화되지 않습니다. 이 소스 작업은 Docker 배포, `rtrt collector` 서비스, 운영자 측 `forward` 배선 또는 다른 운영 서비스를 promote, 활성화, 연결하지 않습니다 — 이 표면은 분리되어 있고 v0.2.0 소스 변경으로 켜지지 않습니다.
+
 ## 라이선스
 
 MIT

package/README.md

@@ -4,23 +4,25 @@
 worktree, invocation, and permission-broker context across supported hooks and keeps
 the local dashboard available in the background.
 
-## Install
+## Install (v1 setup-managed wiring, v0.2.0)
+
+This source targets v0.2.0. Installation requires the matching published npm release; a source version marker is not proof of publication. The older `rtrt-agent@0.1.7` release remains unchanged and does not include the native v2 entries described below.
+
+For the matching npm release:
 
 ```sh
-npm install rtrt-agent@0.1.7
+npm install rtrt-agent@0.2.0
 ```
 
 Register the package in the singular `plugin` array in `opencode.json`:
 
 ```json
 {
-  "plugin": ["rtrt-agent@0.1.7"]
+  "plugin": ["rtrt-agent@0.2.0"]
 }
 ```
 
-OpenCode loads the named `RtrtProvenance` export. The package intentionally has no
-default export. The optional RTRT TUI statusline remains a separate source integration
-and is not exported or packed by this package.
+The v1 package root remains the named export `RtrtProvenance` only — its name is unchanged across the v0.2.0 source. The optional v1 TUI statusline stays a separate setup-managed integration and is not exported or packed by the v1 package. The newly staged native v2 source is described below and is not published in `rtrt-agent@0.1.7`.
 
 ## Dashboard
 
@@ -43,21 +45,54 @@ Existing `~/.rtrt` data is preserved.
 
 `rtrt setup --agent opencode --apply` manages the full RTRT integration but performs no
 npm installation; OpenCode installs the configured package at startup. Setup first writes
-the exact `rtrt-agent@0.1.7` registration and every replacement managed asset. Only after
+the exact `rtrt-agent@0.2.0` registration and every replacement managed asset. Only after
 those writes succeed does it remove a recognized legacy RTRT plugin; an earlier failure
 preserves the legacy runtime. Setup owns exact bare, pinned, ranged, tuple, and object forms
-of `rtrt-agent` only and normalizes them to one exact `"rtrt-agent@0.1.7"` string. Old
+of `rtrt-agent` only and normalizes them to one exact `"rtrt-agent@0.2.0"` string. Old
 unpublished `rtrt` and draft `rtrt-opencode` package specs are foreign and retain their
-order. The direct registration above and `opencode plugin rtrt-agent@0.1.7 --global`
+order. The direct registration above and `opencode plugin rtrt-agent@0.2.0 --global`
 remain valid.
 
 Managed-agent ownership state is read from the first nonempty root in this order:
 `$OPENCODE_CONFIG_DIR`, `$XDG_CONFIG_HOME/opencode`, then `~/.config/opencode`.
 Coexistence is CI-gated against OMO 4.19.4 and was verified on OpenCode 1.18.29; neither
 is a future-version guarantee. The unified RTRT release workflow publishes the exact
-five exact-version dashboard platform packages before `rtrt-agent@0.1.7`, then publishes
+five exact-version dashboard platform packages before `rtrt-agent@0.2.0`, then publishes
 the matching Rust release artifacts.
 
+## Native OpenCode 2.0.20 Entries
+
+The v0.2.0 manifest includes native v2 server and TUI files in the pack inventory. The older `rtrt-agent@0.1.7` release does not include or register those entries and remains unchanged. The native source targets exactly `@opencode/cli@2.0.20` and `@opencode/plugin@2.0.20`, not the 1.x SDK's v2 preview. The package root remains the v1 named export `RtrtProvenance` (name-only, unchanged across v0.2.0).
+
+What is staged in the v0.2.0 source pack:
+
+- A native `Plugin.Definition` default export at `./server`, constructed by the named `createNativeServer` factory and exposing `{ id: "rtrt-agent", setup }`. The v1 `RtrtProvenance` path stays separate.
+- Single-element arrays for `./server` and `./tui` in `package.json` `exports`. OpenCode 1.18.33's legacy resolver ignores those arrays and falls back to `main` `index.js`; native 2.0.20 resolves them normally.
+- A v1 TUI statusline that remains a separate `app_bottom` registration. The v2 native `rtrt-statusline.tsx` lives under `tui/v2/` and only runs in 2.x; v1 wiring is unchanged.
+- A native `prompt.footer.status` registration and cleanup for both server and TUI hooks.
+
+Tool-arg provenance, dashboard auto-startup, and an explicit `rtrt_dashboard_open` all live behind the native server. Permission policies are fail-closed: explicit `deny` is preserved across the v1 broker and the v2 evaluator. External Claude CLI permission broker support and per-call shell identity / provider-limit recovery are **unsupported** in the native v2 build because those surfaces are not in the 2.0.20 public API; they are not auto-approved via any workaround. The deny-by-default policy is unchanged from the v1 broker.
+
+### Local source checkout (no npm install)
+
+For development against a local checkout, OpenCode's native `plugins` config accepts a directory reference. Exact paths depend on your checkout, so only the shape is shown:
+
+```json
+{
+  "plugins": [
+    "/absolute/path/to/rtrt/plugins/opencode"
+  ]
+}
+```
+
+This directory form was verified locally with the actual `@opencode/cli@2.0.20` host in an isolated HOME/XDG environment. With that exact version: `server.js` is active, native TUI discovery reports `features.tui: true`, RTRT stdio MCP connects, strict TUI typechecking and bundling pass, and headless footer rendering at 120 and 40 columns passes. The verification does not cover the full interactive OpenCode TUI and is not a guarantee for other OpenCode versions; it is specific to the exact `@opencode/cli@2.0.20` host that was tested.
+
+### Native MCP shape (informational, OpenCode 2 official schema)
+
+The native local MCP shape uses `mcp.servers.rtrt.type: "local"` and a `command` array such as `["/absolute/path/to/rtrt-mcp", "--transport", "stdio"]`; the option names are `disabled` and `codemode`, both `false` in the sandbox source config. The release-pinned v1 registration is `rtrt-agent@0.2.0`. `rtrt setup --agent opencode --apply` still writes v1 configuration, not native v2 installation; setup itself does not install npm packages, and OpenCode resolves the configured package at startup.
+
+Published `rtrt-agent@0.1.7` remains unchanged on the npm registry. The sandbox's default v2 configuration is MCP-only; the staged native plugin, footer, and forwarding adapter are not activated there. This source work does not promote, activate, or wire up a Docker deployment, the `rtrt collector` service, the operator-side `forward` plumbing, or any other operational services — those remain separate surfaces and are not enabled by the v0.2.0 source change.
+
 ## License
 
 MIT

package/THIRD_PARTY_NOTICES/INDEX.md

@@ -1,10 +1,11 @@
 # Version-pinned distribution notices
 
 These are unmodified LICENSE files extracted from the specified public npm and
-crates.io archives. `LICENSE` at the distribution root remains RTRT's own MIT
-license. This directory accompanies the source, the five GitHub binary archives,
-the five dashboard platform npm packages, and `rtrt-agent`. It is a targeted
-notice set, not an exhaustive dependency inventory or a legal certification.
+crates.io archives, plus the complete unmodified `option-ext@0.2.0` source crate.
+`LICENSE` at the distribution root remains RTRT's own MIT license. This directory
+accompanies the source, the five GitHub binary archives, the five dashboard
+platform npm packages, and `rtrt-agent`. It is a targeted notice set, not an
+exhaustive dependency inventory or a legal certification.
 
 The five MIT JS bundles `cytoscape-fcose`, `cytoscape-cola`, `cose-base`,
 `layout-base`, and `webcola` are embedded in the dashboard without their upstream
@@ -32,9 +33,11 @@ the matching `https://registry.npmjs.org/<name>/<version>` `dist.integrity`
 | webpki-roots@1.0.7 | https://static.crates.io/crates/webpki-roots/webpki-roots-1.0.7.crate | `52f5ee44c96cf55f1b349600768e3ece3a8f26010c05265ab73f945bb1a2eb9d` |
 | option-ext@0.2.0 | https://static.crates.io/crates/option-ext/option-ext-0.2.0.crate | `04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d` |
 
-Paths below are relative to this directory; SHA-256 is of the extracted file,
-not the archive. For npm, the upstream path is `package/LICENSE`. For crates,
-the upstream path is `<name>-<version>/<path below>`.
+Paths below are relative to this directory; SHA-256 is of the distributed local
+file. LICENSE rows hash extracted files, not their upstream archives. For npm,
+the upstream path is `package/LICENSE`. For crates, the upstream license path
+is `<name>-<version>/<path below>`. The `SOURCE.crate` row instead hashes the
+unmodified complete upstream archive bytes (also listed in the archive table).
 
 | Extracted file | SHA-256 |
 |---|---|
@@ -54,10 +57,20 @@ the upstream path is `<name>-<version>/<path below>`.
 | `webpki-roots@0.26.11/LICENSE` | `e271993808fec50ab29350b39539cdec611a9103f827e0aa26d61da70e2d33f8` |
 | `webpki-roots@1.0.7/LICENSE` | `e271993808fec50ab29350b39539cdec611a9103f827e0aa26d61da70e2d33f8` |
 | `option-ext@0.2.0/LICENSE.txt` | `66a3107d5ad6a058aab753eaac2047ccb2ed0e39465dd0fe5844da3e300d5172` |
+| `option-ext@0.2.0/SOURCE.crate` | `04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d` |
 
 `ring`'s top-level LICENSE explains its ISC/Apache-2.0 BoringSSL split and
 points to the included once_cell subpart texts. The included fiat subpart
-license is copied from the same crate. `option-ext` is MPL-2.0: this notice
-alone is not a substitute for assessment of source-code availability under
-MPL-2.0 section 3.2; the versioned source is available from the crate URL
-above, but counsel should assess whether additional delivery is required.
+license is copied from the same crate. `option-ext@0.2.0` is MPL-2.0: its
+complete, unchanged upstream source archive is bundled at
+`THIRD_PARTY_NOTICES/option-ext@0.2.0/SOURCE.crate` inside each of the five
+GitHub binary archives, five dashboard platform npm packages, and the
+`rtrt-agent` npm package. It is the same version and SHA-256 as `Cargo.lock`;
+recipients need no network download. From the distribution root, run
+`mkdir option-ext-source && tar -xzf THIRD_PARTY_NOTICES/option-ext@0.2.0/SOURCE.crate -C option-ext-source`
+to read the original `option-ext-0.2.0/src/`, `Cargo.toml`, `Cargo.toml.orig`,
+`README.md`, and `LICENSE.txt` beneath `option-ext-source/`. The URL above is
+an additional upstream retrieval option, not the only source offer. This
+source-code copy applies only to the MPL-covered `option-ext` component; it
+does not relicense RTRT. Qualified counsel should assess any remaining
+distribution obligations, including MPL-2.0 section 3.2.

package/package.json

@@ -1,11 +1,17 @@
 {
   "name": "rtrt-agent",
-  "version": "0.1.7",
+  "version": "0.2.0",
   "description": "RTRT provenance, permission-broker, and local dashboard plugin for OpenCode",
   "type": "module",
   "main": "./index.js",
   "exports": {
-    ".": "./index.js"
+    ".": "./index.js",
+    "./server": [
+      "./server.js"
+    ],
+    "./tui": [
+      "./tui/v2/rtrt-statusline.tsx"
+    ]
   },
   "bin": {
     "rtrt-dashboard-open": "./bin/rtrt-dashboard-open.js"
@@ -13,12 +19,20 @@
   "files": [
     "index.js",
     "rtrt-provenance.js",
+    "server.js",
+    "v2/permissions.js",
     "bin/rtrt-dashboard-open.js",
     "runtime/dashboard-binary.js",
     "runtime/dashboard-files.js",
     "runtime/dashboard-plugin.js",
     "runtime/dashboard-process.js",
     "runtime/dashboard-supervisor.js",
+    "tui/index.js",
+    "tui/rtrt-statusline-core.mjs",
+    "tui/rtrt-statusline-core.d.mts",
+    "tui/v2/native-runtime.mjs",
+    "tui/v2/native-state.mjs",
+    "tui/v2/rtrt-statusline.tsx",
     "README.md",
     "README.ko.md",
     "LICENSE",
@@ -38,12 +52,9 @@
     "THIRD_PARTY_NOTICES/subtle@2.6.1/LICENSE",
     "THIRD_PARTY_NOTICES/webpki-roots@0.26.11/LICENSE",
     "THIRD_PARTY_NOTICES/webpki-roots@1.0.7/LICENSE",
-    "THIRD_PARTY_NOTICES/option-ext@0.2.0/LICENSE.txt"
+    "THIRD_PARTY_NOTICES/option-ext@0.2.0/LICENSE.txt",
+    "THIRD_PARTY_NOTICES/option-ext@0.2.0/SOURCE.crate"
   ],
-  "scripts": {
-    "test": "node --test rtrt-provenance.test.mjs dashboard-binary.test.mjs dashboard-open.test.mjs dashboard-supervisor.test.mjs package.test.mjs notices-package.test.mjs platform-package.test.mjs platform-publish.test.mjs tui/rtrt-statusline.test.mjs",
-    "sync:platforms": "node ../../packaging/npm/agent-contract.mjs --sync"
-  },
   "engines": {
     "node": ">=20"
   },
@@ -67,11 +78,31 @@
   "dependencies": {
     "@opencode-ai/sdk": "1.15.13"
   },
+  "peerDependencies": {
+    "@opencode/plugin": ">=1.18.33 <3",
+    "@opentui/core": ">=0.4.5",
+    "@opentui/solid": ">=0.4.5",
+    "solid-js": ">=1.9.0"
+  },
+  "peerDependenciesMeta": {
+    "@opencode/plugin": {
+      "optional": true
+    },
+    "@opentui/core": {
+      "optional": true
+    },
+    "@opentui/solid": {
+      "optional": true
+    },
+    "solid-js": {
+      "optional": true
+    }
+  },
   "optionalDependencies": {
-    "rtrt-dashboard-linux-x64": "0.1.7",
-    "rtrt-dashboard-linux-arm64": "0.1.7",
-    "rtrt-dashboard-darwin-x64": "0.1.7",
-    "rtrt-dashboard-darwin-arm64": "0.1.7",
-    "rtrt-dashboard-win32-x64": "0.1.7"
+    "rtrt-dashboard-linux-x64": "0.2.0",
+    "rtrt-dashboard-linux-arm64": "0.2.0",
+    "rtrt-dashboard-darwin-x64": "0.2.0",
+    "rtrt-dashboard-darwin-arm64": "0.2.0",
+    "rtrt-dashboard-win32-x64": "0.2.0"
   }
 }

package/server.js

@@ -0,0 +1,98 @@
+import { randomUUID } from "node:crypto"
+import path from "node:path"
+
+import { createDashboardSupervisor } from "./runtime/dashboard-supervisor.js"
+import { createPermissionEvaluator } from "./v2/permissions.js"
+
+const RTRT_TOOLS = new Set(["rtrt_agent_call", "rtrt_agent_route"])
+const DASHBOARD_INPUT = { type: "object", properties: {}, additionalProperties: false }
+
+function scheduleStartup(start) {
+  const timer = setTimeout(() => { void start() }, 0)
+  timer.unref?.()
+  return { cancel: () => clearTimeout(timer) }
+}
+
+// The native server contract is @opencode/plugin 2.0.20. The v1 root remains
+// separate: v2 has no permission.create or shell call identity, so it cannot
+// provide the legacy Claude permission broker or per-call shell provenance.
+export function createNativeServer({ supervisor, schedule = scheduleStartup, managedAgentStatePath, report = (message) => process.emitWarning(message, "RTRT_NATIVE_PLUGIN") } = {}) {
+  return {
+    id: "rtrt-agent",
+    async setup(ctx) {
+      const dashboard = supervisor ?? createDashboardSupervisor()
+      const invocations = new Map()
+      const registrations = []
+      let disposed = false
+      let cleanupPromise
+      const notify = (message) => {
+        try { report(message) } catch {
+          process.emitWarning("RTRT native diagnostic unavailable.", "RTRT_NATIVE_PLUGIN")
+        }
+      }
+      const startup = schedule(() => Promise.resolve()
+        .then(() => { if (!disposed) return dashboard.ensure() })
+        .catch(() => { if (!disposed) notify("RTRT dashboard unavailable.") }))
+      const dispose = () => {
+        if (cleanupPromise) return cleanupPromise
+        disposed = true
+        invocations.clear()
+        cleanupPromise = (async () => {
+          const failures = []
+          try { startup.cancel() } catch { failures.push(new Error("RTRT startup cancellation failed.")) }
+          const outcomes = await Promise.allSettled(registrations.reverse().map((registration) =>
+            Promise.resolve().then(() => registration.dispose())))
+          for (const [index, outcome] of outcomes.entries()) {
+            if (outcome.status === "rejected") failures.push(new Error(`RTRT registration ${index} disposal failed.`))
+          }
+          if (failures.length) throw new AggregateError(failures, "RTRT native cleanup failed.")
+        })()
+        return cleanupPromise
+      }
+      try {
+        registrations.push(await ctx.tool.hook("execute.before", (event) => {
+          if (disposed || !RTRT_TOOLS.has(event.tool) || !event.input || typeof event.input !== "object" || Array.isArray(event.input)) return
+          const key = `${event.sessionID}\0${event.id}`
+          let invocationID = invocations.get(key)
+          if (!invocationID) {
+            invocationID = randomUUID()
+            invocations.set(key, invocationID)
+          }
+          Object.assign(event.input, {
+            invocation_id: invocationID,
+            parent_project: path.basename(ctx.location.project.canonical),
+            parent_session_id: event.sessionID,
+            parent_call_id: event.id,
+            caller_agent: event.agent,
+            parent_cwd: ctx.location.directory,
+            parent_worktree: ctx.location.project.canonical,
+          })
+        }))
+        registrations.push(await ctx.tool.hook("execute.after", (event) => {
+          if (!disposed && RTRT_TOOLS.has(event.tool)) invocations.delete(`${event.sessionID}\0${event.id}`)
+        }))
+        registrations.push(await ctx.tool.transform((editor) => {
+          if (disposed) return
+          editor.add({
+            name: "rtrt_dashboard_open",
+            description: "Open the RTRT dashboard in the operator's browser when explicitly requested.",
+            input: DASHBOARD_INPUT,
+            async execute() {
+              if (disposed) return { content: "Dashboard unavailable." }
+              const status = await dashboard.open().catch(() => "Dashboard unavailable.")
+              return { content: status === "Dashboard open requested." ? status : "Dashboard unavailable." }
+            },
+          })
+        }))
+        const evaluate = await createPermissionEvaluator(ctx, managedAgentStatePath, () => !disposed)
+        registrations.push(await ctx.permission.hook("evaluate", evaluate))
+        return dispose
+      } catch (error) {
+        try { await dispose() } catch { notify("RTRT native cleanup failed.") }
+        throw error
+      }
+    },
+  }
+}
+
+export default createNativeServer()

package/tui/index.js

@@ -0,0 +1 @@
+export { default } from "./v2/rtrt-statusline.tsx"

package/tui/rtrt-statusline-core.d.mts

@@ -0,0 +1,205 @@
+export type StatuslineTone =
+  | "accent"
+  | "good"
+  | "warn"
+  | "bad"
+  | "muted"
+
+export type StatuslineSegment = {
+  id: string
+  text: string
+  compact: string | null
+  tone: StatuslineTone
+  priority: number
+}
+
+export type StatuslinePayload = {
+  version: 1
+  stale: boolean
+  degraded: string[]
+  segments: StatuslineSegment[]
+}
+export type StatuslineViewRole = "badge" | "label" | "value" | "separator"
+export type StatuslineViewPart = {
+  id: string
+  text: string
+  role: StatuslineViewRole
+  tone: StatuslineTone
+}
+export type StatuslineViewRow = { id: string; parts: StatuslineViewPart[] }
+export type StatuslineViewModel = {
+  layout: "wide" | "medium" | "narrow"
+  width: number
+  rows: StatuslineViewRow[]
+}
+export type StatuslineEconomicsValue = {
+  text: string
+  tone: StatuslineTone
+  used?: number
+  limit?: number
+  percent?: number
+  headroom?: number
+}
+export type StatuslineEconomics = {
+  cost: StatuslineEconomicsValue
+  context: StatuslineEconomicsValue
+  model: StatuslineEconomicsValue
+  status: StatuslineEconomicsValue
+  week: StatuslineEconomicsValue
+  modelRef?: string
+}
+export type StatuslineViewOptions = {
+  width?: number
+  economics?: StatuslineEconomics
+  promptRight?: boolean
+}
+export type StatuslineState = {
+  payload: StatuslinePayload
+  lastGood: StatuslinePayload | undefined
+  stale: boolean
+  unavailable: boolean
+}
+export type StatuslineContext = { cwd: string; session: string; width: number; model?: string }
+export type StatuslineRefreshEvent =
+  | "server.connected"
+  | "project.updated"
+  | "session.created"
+  | "session.updated"
+  | "session.compacted"
+  | "session.deleted"
+  | "session.diff"
+  | "session.error"
+  | "session.idle"
+  | "session.status"
+export type StatuslineRefreshTarget = { app: boolean; sessionID?: string }
+
+export const STATUSLINE_VERSION: 1
+export const STATUSLINE_SEPARATOR: string
+export const STATUSLINE_FALLBACK: string
+export const STATUSLINE_GROUP_SEPARATOR: string
+export const STATUSLINE_WIDE_WIDTH: number
+export const STATUSLINE_MEDIUM_WIDTH: number
+export const DEFAULT_DEBOUNCE_MS: number
+export const DEFAULT_INTERVAL_MS: number
+export const DEFAULT_TIMEOUT_MS: number
+export const STATUSLINE_REFRESH_EVENTS: readonly StatuslineRefreshEvent[]
+
+export function parseStatuslineJson(raw: string): StatuslinePayload | undefined
+export function statuslineRefreshTarget(event: unknown, activeSessionID?: string): StatuslineRefreshTarget
+export function statuslineCommandArgs(context: StatuslineContext): string[]
+export function statuslineBinaryCandidates(bin?: unknown, env?: Record<string, string | undefined>): string[]
+export function runStatusline(input: StatuslineContext & {
+  bin?: unknown
+  env?: Record<string, string | undefined>
+  spawnImpl?: (...args: any[]) => any
+  timeoutMs?: number
+  signal?: AbortSignal
+  nowFn?: () => number
+  setTimeoutFn?: typeof setTimeout
+  clearTimeoutFn?: typeof clearTimeout
+}): Promise<StatuslinePayload | undefined>
+export function createSpawnLimiter(input?: { concurrency?: number }): {
+  run<Value>(
+    task: (signal: AbortSignal) => Value | Promise<Value>,
+    options?: { signal?: AbortSignal; priority?: number },
+  ): Promise<Value | undefined>
+  activeCount(): number
+  queuedCount(): number
+  dispose(): void
+}
+export function cellWidth(text: string): number
+export function deriveSessionEconomics(input?: {
+  session?: {
+    cost?: number
+    model?: { id: string; providerID: string }
+  }
+  messages?: ReadonlyArray<{
+    role: string
+    providerID?: string
+    modelID?: string
+    time?: { completed?: number }
+    error?: unknown
+    tokens?: {
+      input?: number
+      output?: number
+      reasoning?: number
+      cache?: { read?: number; write?: number }
+    }
+  }>
+  providers?: ReadonlyArray<{
+    id: string
+    models: Readonly<Record<string, {
+      id: string
+      providerID?: string
+      name?: string
+      limit?: { context?: number }
+    }>>
+  }>
+  status?: { type?: string }
+}): StatuslineEconomics
+export function selectSegments(
+  payload: StatuslinePayload,
+  options?: { width?: number; compact?: boolean },
+): StatuslineSegment[]
+export function initialStatuslineState(): StatuslineState
+export function nextStatuslineState(previous: StatuslineState, payload?: StatuslinePayload): StatuslineState
+export function renderSegments(
+  state: StatuslineState,
+  options?: { width?: number; compact?: boolean },
+): StatuslineSegment[]
+export function renderStatuslineText(
+  state: StatuslineState,
+  options?: StatuslineViewOptions & { compact?: boolean },
+): string
+export function createStatuslineViewModel(
+  state: StatuslineState,
+  options?: StatuslineViewOptions,
+): StatuslineViewModel
+export function renderStatuslineViewText(
+  state: StatuslineState,
+  options?: StatuslineViewOptions,
+): string
+
+export function createRefreshScheduler(input: {
+  run: () => void | Promise<void>
+  debounceMs?: number
+  intervalMs?: number
+  setTimeoutFn?: typeof setTimeout
+  clearTimeoutFn?: typeof clearTimeout
+  setIntervalFn?: typeof setInterval
+  clearIntervalFn?: typeof clearInterval
+}): {
+  start(): void
+  request(immediate?: boolean): void
+  flush(): Promise<void>
+  dispose(): void
+}
+
+export function createStatuslineController(input: {
+  load: (
+    context: StatuslineContext,
+    signal: AbortSignal,
+  ) => StatuslinePayload | undefined | Promise<StatuslinePayload | undefined>
+  onState?: (state: StatuslineState) => void
+  debounceMs?: number
+  intervalMs?: number
+  timers?: Record<string, unknown>
+}): {
+  start(): void
+  request(immediate?: boolean): void
+  refreshNow(): Promise<void>
+  dispose(): void
+  setContext(context: Partial<StatuslineContext>): void
+  getState(): StatuslineState
+  getContext(): StatuslineContext
+}
+
+export function createKeyedControllerPool<Key, Value extends { dispose(): void }>(input: {
+  create: (key: Key) => Value
+}): {
+  acquire(key: Key): { value: Value; release(): void }
+  get(key: Key): Value | undefined
+  forEach(callback: (value: Value, key: Key) => void): void
+  size(): number
+  dispose(): void
+}