tickmarkr 2.5.4 → 2.5.6

package/dist/tui/ink/fleet-app.js

@@ -4,6 +4,8 @@ import { useRef, useState } from "react";
 import { MODEL_ID_RE } from "../../adapters/types.js";
 import { retiredModelReason } from "../../adapters/model-lints.js";
 import { fleetFirstTouchProvenance } from "../../config/fleet-overlay.js";
+import { exclusionReason } from "../../config/fleet-why.js";
+import { entryMatchesChannel, exclusionCollector } from "../../route/preference.js";
 import { TIERS } from "../../graph/schema.js";
 import { windowRows } from "./components.js";
 import { clip, clipPathTail, ElisionMark, enterAltScreen, fmtCtx, fmtMs, fmtUsdPair, Glyph, INK, inkInput, inkOutput, KeyBar, OverlayPanel, padCell, padCellStart, Pointer, SearchRow, } from "./frame.js";
@@ -23,7 +25,7 @@ function splitSeat(seat) {
     const at = seat.indexOf(":");
     return { adapter: seat.slice(0, at), model: seat.slice(at + 1) };
 }
-export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels, modelGroups, initialMode, modeOptions, initialMap, modePreview, shapeRows, candidatesForShape, preferOptionsForShape, initialSteering, steeringOptionsFor, reviewOverlay, reloadGuard, entry = "probe", initialJudge = "", judgeSeats = [], viewRows = Number.POSITIVE_INFINITY, frameColumns = 100, frameRows, }) {
+export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels, initialAllowOut = [], initialDenyWorkersAdapters = [], initialDenyWorkersModels = [], modelGroups, initialMode, modeOptions, initialMap, modePreview, shapeRows, candidatesForShape, preferOptionsForShape, initialSteering, steeringOptionsFor, reviewOverlay, reloadGuard, stagedRouting, entry = "probe", initialJudge = "", judgeSeats = [], viewRows = Number.POSITIVE_INFINITY, frameColumns = 100, frameRows, }) {
     const { exit } = useApp();
     const [, setRevision] = useState(0);
     const uiRef = useRef(null);
@@ -40,8 +42,12 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
         showAll: false,
         presetsSeen: false,
         notice: "",
+        lastEdit: null,
         deny: new Set(initialDenyAdapters),
         denyModels: new Set(initialDenyModels),
+        allowOut: new Set(initialAllowOut),
+        denyWorkersAdapters: new Set(initialDenyWorkersAdapters),
+        denyWorkersModels: new Set(initialDenyWorkersModels),
         classifications: [],
         selectedMode: initialMode,
         map: structuredClone(initialMap),
@@ -59,6 +65,9 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
     // chip, and the empty-`w` notice all read it. Counts staged EDITS, not diff hunks.
     const initialDenySet = new Set(initialDenyAdapters);
     const initialDenyModelSet = new Set(initialDenyModels);
+    const initialAllowOutSet = new Set(initialAllowOut);
+    const initialDenyWorkersAdapterSet = new Set(initialDenyWorkersAdapters);
+    const initialDenyWorkersModelSet = new Set(initialDenyWorkersModels);
     const stagedCount = () => {
         let n = ui.classifications.length
             + (ui.selectedMode !== initialMode ? 1 : 0)
@@ -75,6 +84,21 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
         for (const model of initialDenyModelSet)
             if (!ui.denyModels.has(model))
                 n += 1;
+        for (const key of initialAllowOutSet)
+            if (!ui.allowOut.has(key))
+                n += 1;
+        for (const adapter of ui.denyWorkersAdapters)
+            if (!initialDenyWorkersAdapterSet.has(adapter))
+                n += 1;
+        for (const adapter of initialDenyWorkersAdapterSet)
+            if (!ui.denyWorkersAdapters.has(adapter))
+                n += 1;
+        for (const model of ui.denyWorkersModels)
+            if (!initialDenyWorkersModelSet.has(model))
+                n += 1;
+        for (const model of initialDenyWorkersModelSet)
+            if (!ui.denyWorkersModels.has(model))
+                n += 1;
         for (const shape of new Set([...Object.keys(initialMap), ...Object.keys(ui.map)])) {
             // {} ≡ absent: pin-then-auto leaves an empty entry that writes nothing — not staged work
             if (JSON.stringify(initialMap[shape] ?? {}) !== JSON.stringify(ui.map[shape] ?? {}))
@@ -87,17 +111,55 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
         return n;
     };
     // ── derived data ───────────────────────────────────────────────────────────
-    const enabledGroups = () => modelGroups.filter((group) => !ui.deny.has(group.adapter));
+    // OBS-994/FL-1 repair: a flatly (or workers-) denied adapter's channels stay VISIBLE here —
+    // every channel needs a reach cell, and Space below can only cycle a scope it can see.
+    const enabledGroups = () => modelGroups;
     const scopedGroups = () => {
         if (ui.adapterAt === -1)
             return enabledGroups();
         const group = modelGroups[ui.adapterAt];
-        return group && !ui.deny.has(group.adapter) ? [group] : [];
+        return group ? [group] : [];
+    };
+    // LEG2-T3 finding 1: a channel's reach and every reason come from the exclusion collector over
+    // the STAGED policy (fleet loads the candidate bytes; see stagedRouting) and the recorded
+    // identity — never literal membership of the staged sets, which missed identity, bare-model and
+    // family entries and could not tell an allowlist exclusion from a deny.
+    let routingMemo = null;
+    const stagedPolicy = () => {
+        const deny = stagedDeny();
+        const key = JSON.stringify(deny);
+        if (routingMemo?.key !== key) {
+            routingMemo = {
+                key,
+                policy: stagedRouting
+                    ? stagedRouting(deny)
+                    : { ok: true, routing: { deny: { adapters: deny.adapters, models: deny.models, workers: { adapters: deny.workersAdapters, models: deny.workersModels } } } },
+            };
+        }
+        return routingMemo.policy;
+    };
+    const reachFor = (adapter, model, identity) => {
+        const policy = stagedPolicy();
+        if (!policy.ok)
+            return { reach: "unknown", reasons: [`preview unavailable (${policy.error})`], uncoveredAlias: false };
+        const channel = { adapter, model, ...(identity !== undefined ? { identity } : {}) };
+        const worker = exclusionCollector(channel, policy.routing, "worker");
+        const allSeats = exclusionCollector(channel, policy.routing, "judge");
+        const reach = allSeats.some((scope) => scope.by === "deny") ? "out-all"
+            : allSeats.length ? "out-allow"
+                : worker.length ? "out-workers"
+                    : "in";
+        return {
+            reach,
+            reasons: worker.map(exclusionReason),
+            uncoveredAlias: identity !== undefined && !worker.some((scope) => scope.by === "deny"),
+        };
     };
     const groupRows = (group) => {
         const rows = group.rows.map((row) => {
             const staged = ui.classifications.find((classification) => classification.adapter === group.adapter
                 && (classification.model === row.model || classification.model === row.classifyModel));
+            const reach = reachFor(group.adapter, row.model, row.evidence?.identity);
             return {
                 adapter: group.adapter,
                 model: row.model,
@@ -110,18 +172,21 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
                 variants: row.variants,
                 foldedModels: row.foldedModels,
                 score: row.score,
-                denied: ui.denyModels.has(`${group.adapter}:${row.model}`),
+                denied: reach.reach !== "in",
+                ...reach,
             };
         });
         const known = new Set(rows.flatMap((row) => row.classifyModel ? [row.model, row.classifyModel] : [row.model]));
         for (const staged of ui.classifications) {
             if (staged.adapter === group.adapter && !known.has(staged.model)) {
+                const reach = reachFor(group.adapter, staged.model);
                 rows.push({
                     adapter: group.adapter,
                     model: staged.model,
                     tier: staged.tier,
                     channel: group.channel,
-                    denied: ui.denyModels.has(`${group.adapter}:${staged.model}`),
+                    denied: reach.reach !== "in",
+                    ...reach,
                 });
             }
         }
@@ -151,8 +216,15 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
         return groups.flatMap(groupRows)
             .filter((row) => ui.showAll || row.tier !== undefined || retiredModelReason(row.model) === null).length;
     };
-    // three preview callbacks share it in lockstep — the staged deny truth every preview ranks under
-    const stagedDeny = () => ({ adapters: [...ui.deny].sort(), models: [...ui.denyModels].sort() });
+    // three preview callbacks share it in lockstep — the staged deny truth every preview ranks under.
+    // LEG2-T3 finding 2: all four scopes travel distinct; the preview loads them as written.
+    const stagedDeny = () => ({
+        adapters: [...ui.deny].sort(),
+        models: [...ui.denyModels].sort(),
+        workersAdapters: [...ui.denyWorkersAdapters].sort(),
+        workersModels: [...ui.denyWorkersModels].sort(),
+        allowOut: [...ui.allowOut].sort(),
+    });
     const shapeList = () => shapeRows(ui.selectedMode, ui.map, stagedDeny());
     const steeringList = () => [
         ...STEERING_KEYS.map((key) => ({
@@ -179,6 +251,9 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
     const editorState = () => ({
         denyAdapters: [...ui.deny].sort(),
         denyModels: [...ui.denyModels].sort(),
+        allowOut: [...ui.allowOut].sort(),
+        denyWorkersAdapters: [...ui.denyWorkersAdapters].sort(),
+        denyWorkersModels: [...ui.denyWorkersModels].sort(),
         classifications: ui.classifications.map((classification) => classification.vendor && classification.channel
             ? {
                 ...classification,
@@ -605,12 +680,13 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
             }
             if (overlay.kind === "candidates") {
                 const rows = overlay.rows.filter((candidate) => matches(candidate.label, ui.filter));
+                const ledger = overlay.ledger.filter((line) => matches(line, ui.filter));
                 if (key.escape) {
                     setOverlay(null);
                     return;
                 }
                 if (key.downArrow) {
-                    overlay.at = Math.min(overlay.at + 1, Math.max(rows.length - 1, 0));
+                    overlay.at = Math.min(overlay.at + 1, Math.max(rows.length + ledger.length - 1, 0));
                     bump();
                     return;
                 }
@@ -644,7 +720,8 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
                     }
                     return;
                 }
-                editFilter((f) => overlay.rows.filter((candidate) => matches(candidate.label, f)).length, (max) => {
+                editFilter((f) => overlay.rows.filter((candidate) => matches(candidate.label, f)).length
+                    + overlay.ledger.filter((line) => matches(line, f)).length, (max) => {
                     overlay.at = Math.min(overlay.at, max);
                 });
                 return;
@@ -870,12 +947,18 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
                 if (agents.find((agent) => agent.id === id)?.authed === false) {
                     ui.notice = `${id} is not authed — Space only toggles fleet membership; re-auth the ${id} CLI, then run tickmarkr doctor`;
                 }
-                const next = new Set(ui.deny);
-                if (next.has(id))
-                    next.delete(id);
-                else
-                    next.add(id);
-                ui.deny = next;
+                // OBS-1046: an adapter routing.allow leaves out comes back in by clearing THAT reason
+                if (ui.allowOut.has(id)) {
+                    ui.allowOut = new Set([...ui.allowOut].filter((key) => key !== id));
+                }
+                else {
+                    const next = new Set(ui.deny);
+                    if (next.has(id))
+                        next.delete(id);
+                    else
+                        next.add(id);
+                    ui.deny = next;
+                }
                 clampList();
                 bump();
                 return;
@@ -931,13 +1014,76 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
                     beginClassification(row.adapter, row.model);
                     return;
                 }
+                // OBS-994/FL-1: membership can't fix an auth failure either — the row's reach stays
+                // whatever it is and the operator is pointed at doctor instead of a toggle that lies.
+                if (row.evidence?.unauthed !== undefined) {
+                    ui.notice = `${row.adapter}:${row.model} is unauthed — re-probe with tickmarkr doctor before its fleet reach can change`;
+                    bump();
+                    return;
+                }
                 const id = `${row.adapter}:${row.model}`;
-                const next = new Set(ui.denyModels);
-                if (next.has(id))
-                    next.delete(id);
-                else
-                    next.add(id);
-                ui.denyModels = next;
+                // OBS-994/FL-1, LEG2-T3 finding 3: Space cycles in → out(workers) → out(all) → in by editing
+                // only THIS channel's own entries in the per-model scopes — its adapter:model key, or an
+                // identity/bare-model entry no other browser row matches. An adapter-wide or shared entry
+                // is never promoted or cleared from a channel row: that would move sibling channels and
+                // wipe reasons that are not this row's to clear. The row's detail line names the entry each
+                // press edited; a refused press names the shared entry in the notice instead.
+                const self = { adapter: row.adapter, model: row.model, identity: row.evidence?.identity };
+                const others = modelGroups.flatMap((group) => group.rows
+                    .filter((other) => group.adapter !== row.adapter || other.model !== row.model)
+                    .map((other) => ({ adapter: group.adapter, model: other.model, identity: other.evidence?.identity })));
+                // Judge c3 (R107): exactly ONE selected entry per press — the channel's adapter:model key when
+                // it is a candidate, else the first candidate in sorted order. The cycle is three states over
+                // two scopes, so the out-workers → out-all press re-scopes that one entry from
+                // routing.deny.workers.models to routing.deny.models; every other press adds or clears one
+                // entry in one scope. The channel's other entries keep their reasons for later presses.
+                // LEG2-T3 round 2 finding 1: promotion widens the selected ban as spelled — a bare model id
+                // then excludes every seat serving that model — while a CLEAR only takes an entry no other
+                // row matches, so no sibling is ever admitted by a channel toggle.
+                const select = (entries, ownOnly) => {
+                    const candidates = [...entries].filter((entry) => entryMatchesChannel(entry, self, true)
+                        && (!ownOnly || !others.some((other) => entryMatchesChannel(entry, other, true))));
+                    return candidates.includes(id) ? id : candidates.sort()[0];
+                };
+                if (row.reach === "unknown") {
+                    ui.notice = `${id} reach is unknown — Space does not toggle it until the staged overlay loads: ${row.reasons.join("; ")}`;
+                    bump();
+                    return;
+                }
+                if (row.reach === "in") {
+                    ui.denyWorkersModels = new Set([...ui.denyWorkersModels, id]);
+                    ui.lastEdit = { id, text: `space: added ${id} to routing.deny.workers.models` };
+                }
+                else if (row.reach === "out-workers") {
+                    const entry = select(ui.denyWorkersModels, false) ?? id;
+                    ui.denyWorkersModels = new Set([...ui.denyWorkersModels].filter((staged) => staged !== entry));
+                    ui.denyModels = new Set([...ui.denyModels, entry]);
+                    ui.lastEdit = { id, text: `space: moved ${entry} to routing.deny.models` };
+                }
+                else {
+                    // round 2 finding 2: either flat list may carry this channel's own reason; OBS-1046: an
+                    // allow exclusion is the LAST reason cleared, and never together with an authored deny
+                    const fromModels = select(ui.denyModels, true);
+                    const fromAdapters = fromModels === undefined ? select(ui.deny, true) : undefined;
+                    const fromAllow = fromModels === undefined && fromAdapters === undefined ? select(ui.allowOut, true) : undefined;
+                    const entry = fromModels ?? fromAdapters ?? fromAllow;
+                    if (entry === undefined) {
+                        const shared = ui.deny.has(row.adapter) || ui.allowOut.has(row.adapter)
+                            ? `every ${row.adapter} channel is out together — take the adapter back in on the rail`
+                            : "a shared entry covers other channels too";
+                        ui.notice = `${id} stays out — ${row.reasons.join("; ")} — Space edits only this channel's own entries; ${shared}`;
+                        bump();
+                        return;
+                    }
+                    if (fromModels !== undefined)
+                        ui.denyModels = new Set([...ui.denyModels].filter((staged) => staged !== entry));
+                    else if (fromAdapters !== undefined)
+                        ui.deny = new Set([...ui.deny].filter((staged) => staged !== entry));
+                    else
+                        ui.allowOut = new Set([...ui.allowOut].filter((staged) => staged !== entry));
+                    const scope = fromModels !== undefined ? "routing.deny.models" : fromAdapters !== undefined ? "routing.deny.adapters" : "routing.allow";
+                    ui.lastEdit = { id, text: `space: cleared ${entry} from ${scope}` };
+                }
                 bump();
                 return;
             }
@@ -1051,6 +1197,7 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
                     shape,
                     rows: picked.rows,
                     excludedNote: picked.excludedNote,
+                    ledger: picked.ledger ?? [],
                     // OBS-525: an existing pool round-trips — reopening the picker starts from the staged
                     // channels instead of an empty selection that would silently replace the pool with a pin.
                     chain: ui.map[shape]?.pool?.channels.slice() ?? [],
@@ -1116,10 +1263,37 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
             return "sub";
         return usd;
     };
+    // OBS-994/FL-1: the reach line — every collector scope that excludes this row, each with its
+    // config path and matching entry (an unauthed row instead points at the doctor re-probe).
+    const reachDetail = (row) => {
+        if (row.evidence?.unauthed !== undefined)
+            return "unauthed — re-probe with tickmarkr doctor (Space does not toggle reach)";
+        const reasons = row.reasons.join("; ");
+        if (row.reach === "out-all")
+            return `reach: out · all seats — ${reasons}`;
+        if (row.reach === "out-allow")
+            return `reach: out · all seats · allow — ${reasons}`;
+        if (row.reach === "out-workers")
+            return `reach: out · workers only (judge/review/consult unaffected) — ${reasons}`;
+        if (row.reach === "unknown")
+            return `reach: unknown — ${reasons}`;
+        return "reach: in — Space cycles to out · workers";
+    };
+    const reachCell = (row) => row.reach === "in" || row.reach === "unknown" ? row.reach : `out ${row.reach === "out-workers" ? "workers" : row.reach.slice(4)}`;
+    const identityDetail = (row) => {
+        if (row.evidence?.identity === undefined)
+            return "";
+        return row.uncoveredAlias
+            ? `resolved identity ${row.evidence.identity} — no deny entry covers it`
+            : `resolved identity ${row.evidence.identity}`;
+    };
     const modelDetail = (row) => {
         const parts = [
             `${row.adapter}:${row.model}`,
             row.tier ?? "unclassified",
+            ui.lastEdit?.id === `${row.adapter}:${row.model}` ? ui.lastEdit.text : "",
+            identityDetail(row),
+            row.tier ? reachDetail(row) : "",
             row.variants?.length ? `variants ${row.variants.join(", ")}` : "",
             row.classifyModel ? `classify writes ${row.classifyModel}` : "",
             row.foldedModels?.length ? `${row.foldedModels.length} gateway ids folded: ${row.foldedModels.join(", ")}` : "",
@@ -1138,20 +1312,22 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
         const tier = tierCell(row);
         const showProbe = bodyW >= 76;
         const showPrice = bodyW >= 60;
-        // every cell accounted for: pointer 2 + glyph 1 + gap 1 + tier 11 + ctx 6 (+ price 12 + probe 7)
-        const nameW = bodyW - 4 - 11 - 6 - (showPrice ? 12 : 0) - (showProbe ? 7 : 0);
+        // every cell accounted for: pointer 2 + glyph 1 + gap 1 + tier 11 + reach 12 + ctx 6 (+ price 12 + probe 7)
+        const nameW = bodyW - 4 - 11 - 12 - 6 - (showPrice ? 12 : 0) - (showProbe ? 7 : 0);
         // OBS-531: deep router ids (omp/prime-agent) clip tail-preserving — the LAST segment is the
         // distinguishing half; end-clipping rendered ten identical "prime-agent/anthropic/claude-…" rows.
         const folded = row.foldedModels?.length ?? 1;
         const name = clipPathTail(`${row.adapter}/${row.model}${folded > 1 ? ` ×${folded}` : ""}`, nameW);
         const prefixLen = Math.min(name.length, row.adapter.length + 1);
-        return (_jsxs(Text, { wrap: "truncate", children: [_jsx(Pointer, { on: selected }), row.denied
+        return (_jsxs(Text, { wrap: "truncate", children: [_jsx(Pointer, { on: selected }), row.reach === "out-all" || row.reach === "out-allow"
                     ? _jsx(Glyph, { kind: "off" })
-                    : row.evidence?.unauthed !== undefined
+                    : row.evidence?.unauthed !== undefined || row.reach === "unknown"
                         ? _jsx(Glyph, { kind: "fail" })
-                        : row.tier
-                            ? _jsx(Glyph, { kind: "on" })
-                            : _jsx(Glyph, { kind: "unknown" }), _jsx(Text, { children: " " }), _jsxs(Text, { dimColor: row.denied, children: [_jsx(Text, { dimColor: true, children: name.slice(0, prefixLen) }), _jsx(Text, { bold: selected, children: name.slice(prefixLen).padEnd(Math.max(nameW - prefixLen, 0)) })] }), _jsx(Text, { color: tier.color, dimColor: tier.dim, children: padCellStart(tier.text, 11) }), _jsx(Text, { dimColor: true, children: padCellStart(fmtCtx(row.evidence?.contextWindow), 6) }), showPrice && _jsx(Text, { dimColor: priceCell(row) === "sub", children: padCellStart(priceCell(row), 12) }), showProbe && _jsx(Text, { dimColor: true, children: padCellStart(fmtMs(row.evidence?.probeMs), 7) })] }, `${row.adapter}:${row.model}`));
+                        : row.reach === "out-workers"
+                            ? _jsx(Glyph, { kind: "warn" })
+                            : row.tier
+                                ? _jsx(Glyph, { kind: "on" })
+                                : _jsx(Glyph, { kind: "unknown" }), _jsx(Text, { children: " " }), _jsxs(Text, { dimColor: row.denied, children: [_jsx(Text, { dimColor: true, children: name.slice(0, prefixLen) }), _jsx(Text, { bold: selected, children: name.slice(prefixLen).padEnd(Math.max(nameW - prefixLen, 0)) })] }), _jsx(Text, { color: tier.color, dimColor: tier.dim, children: padCellStart(tier.text, 11) }), _jsx(Text, { dimColor: row.reach === "in", children: padCellStart(row.tier ? reachCell(row) : "", 12) }), _jsx(Text, { dimColor: true, children: padCellStart(fmtCtx(row.evidence?.contextWindow), 6) }), showPrice && _jsx(Text, { dimColor: priceCell(row) === "sub", children: padCellStart(priceCell(row), 12) }), showProbe && _jsx(Text, { dimColor: true, children: padCellStart(fmtMs(row.evidence?.probeMs), 7) })] }, `${row.adapter}:${row.model}`));
     };
     const renderPlainRow = (id, label, selected, rowW = bodyW - 2) => (_jsxs(Text, { wrap: "truncate", children: [_jsx(Pointer, { on: selected }), _jsx(Text, { bold: selected, children: clip(label, rowW) })] }, id));
     const renderShapeRow = (row, selected, rowW = bodyW - 2) => {
@@ -1175,7 +1351,7 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
     const railAdapter = (index, railIndex) => {
         const group = modelGroups[index];
         const agent = agents.find((candidate) => candidate.id === group.adapter);
-        const denied = ui.deny.has(group.adapter);
+        const denied = ui.deny.has(group.adapter) || ui.allowOut.has(group.adapter);
         const active = ui.view === "models" && ui.adapterAt === index;
         const selected = ui.focus === "rail" && ui.railAt === railIndex;
         return (_jsxs(Text, { children: [selected ? _jsx(Text, { color: INK.brand, children: "❯ " }) : _jsx(Text, { children: "  " }), denied ? _jsx(Glyph, { kind: "off" }) : agent?.authed === false ? _jsx(Glyph, { kind: "fail" }) : _jsx(Glyph, { kind: "on" }), _jsx(Text, { children: " " }), _jsx(Text, { bold: active, color: active ? INK.brand : undefined, dimColor: denied, children: padCell(group.adapter, 12) }), _jsx(Text, { dimColor: true, children: padCellStart(String(visibleCount(index)), 4) })] }, group.adapter));
@@ -1213,12 +1389,24 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
         }
         if (overlay.kind === "candidates") {
             const rows = overlay.rows.filter((candidate) => matches(candidate.label, ui.filter));
-            const { visible, start, above, below } = windowRows(rows, overlay.at, capacity);
+            // the shape-wide captions, bounded to half the list; per-channel ledger rows are list items below
+            const notes = overlay.excludedNote?.split("\n") ?? [];
+            const noteRoom = Math.max(2, Math.floor(capacity / 2));
+            const noteLines = notes.length > noteRoom
+                ? [...notes.slice(0, noteRoom - 1), `… +${notes.length - noteRoom + 1} more notes`]
+                : notes;
+            const items = [
+                ...rows.map((candidate) => ({ candidate, line: candidate.label })),
+                ...overlay.ledger.filter((line) => matches(line, ui.filter)).map((line) => ({ candidate: undefined, line })),
+            ];
+            const { visible, start, above, below } = windowRows(items, overlay.at, Math.max(1, capacity - noteLines.length + 1));
             const chained = overlay.chain.length > 0;
-            return (_jsxs(OverlayPanel, { title: chained ? `pool · ${overlay.shape}` : `pin · ${overlay.shape}`, width: bodyW, children: [_jsx(Text, { dimColor: true, wrap: "truncate", children: clip("Enter pins one channel · Space selects a pool in order — Enter then asks its mode (pool replaces pin)", bodyW - 4) }), _jsx(SearchRow, { filter: ui.filter, active: true }), overlay.excludedNote !== undefined
-                        && _jsx(Text, { dimColor: true, wrap: "truncate", children: clip(overlay.excludedNote, bodyW - 4) }), above > 0 && _jsx(ElisionMark, { count: above, side: "above" }), visible.map((candidate, index) => {
-                        const at = overlay.chain.indexOf(candidate.id);
+            return (_jsxs(OverlayPanel, { title: chained ? `pool · ${overlay.shape}` : `pin · ${overlay.shape}`, width: bodyW, children: [_jsx(Text, { dimColor: true, wrap: "truncate", children: clip("Enter pins one channel · Space selects a pool in order — Enter then asks its mode (pool replaces pin)", bodyW - 4) }), _jsx(SearchRow, { filter: ui.filter, active: true }), noteLines.map((line, index) => _jsx(Text, { dimColor: true, wrap: "truncate", children: clip(line, bodyW - 4) }, `excluded-${index}`)), above > 0 && _jsx(ElisionMark, { count: above, side: "above" }), visible.map(({ candidate, line }, index) => {
                         const selected = start + index === overlay.at;
+                        if (candidate === undefined) {
+                            return (_jsxs(Text, { wrap: "truncate", children: [_jsx(Pointer, { on: selected }), _jsx(Text, { dimColor: true, children: "✗ " }), _jsx(Text, { bold: selected, dimColor: !selected, children: clip(line, bodyW - 10) })] }, `ledger-${start + index}`));
+                        }
+                        const at = overlay.chain.indexOf(candidate.id);
                         return (_jsxs(Text, { wrap: "truncate", children: [_jsx(Pointer, { on: selected }), at === -1 ? _jsx(Text, { dimColor: true, children: "· " }) : _jsx(Text, { color: INK.brand, children: `${at + 1} ` }), _jsx(Text, { bold: selected, children: clip(candidate.label, bodyW - 10) })] }, candidate.id));
                     }), below > 0 && _jsx(ElisionMark, { count: below, side: "below" })] }));
         }
@@ -1263,8 +1451,9 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
             const scopeLabel = ui.adapterAt === -1
                 ? "All models"
                 : modelGroups[ui.adapterAt]?.adapter ?? "";
-            const scopeDenied = ui.adapterAt !== -1 && ui.deny.has(modelGroups[ui.adapterAt]?.adapter ?? "");
-            return (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Text, { children: [_jsx(Text, { bold: true, children: scopeLabel }), _jsx(Text, { dimColor: true, children: `  ${rows.length}` })] }), _jsx(SearchRow, { filter: ui.filter, active: ui.searching, hint: "/ to search" }), modelVisibilityLine() && _jsx(Text, { dimColor: true, children: `  ${modelVisibilityLine()}` }), scopeDenied && _jsx(Text, { color: INK.warn, children: `${modelGroups[ui.adapterAt]?.adapter} is out of the fleet — Space on its rail row adds it back` }), above > 0 && _jsx(ElisionMark, { count: above, side: "above" }), visible.map((row, index) => renderModelRow(row, ui.focus === "list" && start + index === ui.listAt)), below > 0 && _jsx(ElisionMark, { count: below, side: "below", hint: "/ to search" }), rows.length === 0 && !scopeDenied && _jsx(Text, { dimColor: true, children: "  no models match" })] }));
+            // OBS-994/FL-1 repair: an adapter-wide deny (flat or workers) no longer hides this
+            // scope's rows — every channel still needs its own reach cell, toggleable right here.
+            return (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Text, { children: [_jsx(Text, { bold: true, children: scopeLabel }), _jsx(Text, { dimColor: true, children: `  ${rows.length}` })] }), _jsx(SearchRow, { filter: ui.filter, active: ui.searching, hint: "/ to search" }), modelVisibilityLine() && _jsx(Text, { dimColor: true, children: `  ${modelVisibilityLine()}` }), above > 0 && _jsx(ElisionMark, { count: above, side: "above" }), visible.map((row, index) => renderModelRow(row, ui.focus === "list" && start + index === ui.listAt)), below > 0 && _jsx(ElisionMark, { count: below, side: "below", hint: "/ to search" }), rows.length === 0 && _jsx(Text, { dimColor: true, children: "  no models match" })] }));
         }
         if (ui.view === "shapes") {
             const rows = shapeList();
@@ -1281,7 +1470,9 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
         if (overlay) {
             if (overlay.kind === "candidates") {
                 const rows = overlay.rows.filter((candidate) => matches(candidate.label, ui.filter));
-                return rows[overlay.at] ? [rows[overlay.at].label] : [];
+                const ledger = overlay.ledger.filter((line) => matches(line, ui.filter));
+                const line = rows[overlay.at]?.label ?? ledger[overlay.at - rows.length];
+                return line ? [line] : [];
             }
             if (overlay.kind === "prefer") {
                 return overlay.chain.length ? [`chain: ${overlay.chain.join(" → ")}`] : [];
@@ -1405,7 +1596,7 @@ export function FleetApp({ ageMs, agents, initialDenyAdapters, initialDenyModels
                 ? _jsx(Text, { color: INK.warn, children: ` ! ${clip(ui.notice, width - 4)}` })
                 : details.map((line) => _jsx(Text, { dimColor: true, children: ` ${clip(line, width - 2)}` }, line)), _jsx(KeyBar, { binds: keyBinds() })] }));
 }
-export async function runFleetInkEditor({ ageMs, adapters, health, initialDenyAdapters, initialDenyModels, modelGroups, initialMode, modeOptions, initialMap, modePreview, shapeRows, candidatesForShape, preferOptionsForShape, initialSteering, steeringOptionsFor, reviewOverlay, reloadGuard, entry = "probe", initialJudge = "", judgeSeats = [], initialInput = [], input, output, debug = false, }) {
+export async function runFleetInkEditor({ ageMs, adapters, health, initialDenyAdapters, initialDenyModels, initialAllowOut = [], initialDenyWorkersAdapters = [], initialDenyWorkersModels = [], modelGroups, initialMode, modeOptions, initialMap, modePreview, shapeRows, candidatesForShape, preferOptionsForShape, initialSteering, steeringOptionsFor, reviewOverlay, reloadGuard, stagedRouting, entry = "probe", initialJudge = "", judgeSeats = [], initialInput = [], input, output, debug = false, }) {
     const agents = adapters.flatMap((adapter) => {
         const state = health[adapter.id];
         if (!state?.installed)
@@ -1429,7 +1620,7 @@ export async function runFleetInkEditor({ ageMs, adapters, health, initialDenyAd
     // rebuilt from output.columns/rows so a pane resize re-renders at the new size. Same root
     // element type on every rerender ⇒ React keeps the component instance, so staged edits,
     // cursor, and overlays all survive the resize.
-    const editorElement = () => (_jsx(FleetApp, { ageMs: ageMs, agents: agents, initialDenyAdapters: initialDenyAdapters, initialDenyModels: initialDenyModels, modelGroups: declaredModelGroups, initialMode: initialMode, modeOptions: modeOptions, initialMap: initialMap, modePreview: modePreview, shapeRows: shapeRows, candidatesForShape: candidatesForShape, preferOptionsForShape: preferOptionsForShape, initialSteering: initialSteering, steeringOptionsFor: steeringOptionsFor, reviewOverlay: reviewOverlay, reloadGuard: reloadGuard, entry: entry, initialJudge: initialJudge, judgeSeats: judgeSeats, 
+    const editorElement = () => (_jsx(FleetApp, { ageMs: ageMs, agents: agents, initialDenyAdapters: initialDenyAdapters, initialDenyModels: initialDenyModels, initialAllowOut: initialAllowOut, initialDenyWorkersAdapters: initialDenyWorkersAdapters, initialDenyWorkersModels: initialDenyWorkersModels, modelGroups: declaredModelGroups, initialMode: initialMode, modeOptions: modeOptions, initialMap: initialMap, modePreview: modePreview, shapeRows: shapeRows, candidatesForShape: candidatesForShape, preferOptionsForShape: preferOptionsForShape, initialSteering: initialSteering, steeringOptionsFor: steeringOptionsFor, reviewOverlay: reviewOverlay, reloadGuard: reloadGuard, stagedRouting: stagedRouting, entry: entry, initialJudge: initialJudge, judgeSeats: judgeSeats, 
         // v1.90.9: cap every list to the terminal minus chrome so the cursor and header can
         // never scroll off-screen (omp's 218-model list did exactly that pre-cap).
         // OBS-523: chrome is ≤12 rows worst case (header, borders, padding, scope+search,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tickmarkr",
-  "version": "2.5.4",
+  "version": "2.5.6",
   "description": "Spec in, verified work out.",
   "type": "module",
   "license": "MIT",
@@ -17,7 +17,7 @@
   },
   "homepage": "https://github.com/alzahrani-khalid/tickmarkr",
   "engines": {
-    "node": ">=20"
+    "node": ">=20.3"
   },
   "bin": {
     "tickmarkr": "dist/cli/index.js",