wyrm-mcp 7.2.0 → 7.2.2

package/dist/trace-harvest.js

@@ -1,244 +1,6 @@
-/**
- * Trace harvest (v7 F4 T040) — turn a harness's working trace into run-tagged
- * review-queue candidates, OFFLINE.
- *
- * Three trace shapes are ingested into one normalized prose stream that feeds
- * the EXISTING auto_capture extractor (src/auto-capture.ts — local Ollama
- * WYRM_EXTRACT_MODEL / deterministic fallback, NEVER a cloud LLM, Article III):
- *
- *   1. Claude Code session JSONL — one JSON object per line, each
- *      { message: { role, content }, … } (the same shape
- *      scripts/hooks/wyrm-session-capture.mjs already parses). User prose +
- *      assistant text are kept; tool-result / system-reminder blocks dropped.
- *   2. ~/.dragon/traces — the dragon-cli flywheel trace records. Tolerant of
- *      both line-delimited JSON and a top-level JSON array; each record's
- *      prompt/response/text/content fields are harvested.
- *   3. WYRM_TRACE_TOOL_CALLS output — the `tool_call` Live Memory events the
- *      PostToolUse hook emits ({ kind:'tool_call', actor, payload, … }) or the
- *      raw stdin shape the hook reads ({ tool_name, tool_input, … }). Collapsed
- *      into a deterministic per-tool activity summary.
- *
- * SECRET REDACTION: every harvested segment passes through redactSecrets()
- * BEFORE extraction, so an API key / bearer token / password that scrolled
- * through a transcript never lands in the review queue. Deterministic, no
- * network. Tool-call payloads are collapsed to keys (never values) for the same
- * reason — a secret passed as a tool argument is summarized, not stored.
- *
- * Pure: parsing + redaction are total string functions (no I/O, no clock, no
- * RNG). The MCP handler injects the DB writes + the extractor.
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- */
-/** Control chars (ANSI/BEL/NUL) must never reach the review queue or a TUI. */
-// eslint-disable-next-line no-control-regex
-const CTRL = /[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;
-/**
- * Redact common secret shapes from a string so they never enter the review
- * queue. Deterministic + offline. Conservative (favours over-redaction): the
- * goal is "a leaked credential is never stored", not perfect classification.
- * Each rule replaces the SECRET portion with `[REDACTED]`, preserving
- * surrounding prose so the candidate is still meaningful.
- */
-export function redactSecrets(input) {
-    if (!input)
-        return '';
-    let s = input;
-    // High-entropy / vendor-prefixed token shapes (order matters — specific first).
-    const rules = [
-        // sk-... / sk-ant-api03-... / rk_live_... (OpenAI/Anthropic/Stripe-style);
-        // the token body may carry internal -/_ separators (sk-ant-api03-<rand>).
-        [/\b(?:sk|rk|pk)[-_][A-Za-z0-9][A-Za-z0-9_-]{14,}\b/g, '[REDACTED]'],
-        // GitHub tokens (ghp_/gho_/ghu_/ghs_/ghr_) + fine-grained github_pat_
-        [/\bgh[posru]_[A-Za-z0-9]{20,}\b/g, '[REDACTED]'],
-        [/\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, '[REDACTED]'],
-        // AWS access key id
-        [/\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g, '[REDACTED]'],
-        // Slack tokens
-        [/\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, '[REDACTED]'],
-        // Google API key
-        [/\bAIza[A-Za-z0-9_-]{30,}\b/g, '[REDACTED]'],
-        // JWTs (three dot-separated base64url segments)
-        [/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g, '[REDACTED]'],
-        // Authorization: Bearer <token>
-        [/\b([Bb]earer)\s+[A-Za-z0-9._-]{12,}/g, '$1 [REDACTED]'],
-        // key=value / "key": "value" for secret-ish key names (api_key, token,
-        // password, secret, passwd, authorization, access_token, private_key).
-        [/((?:api[_-]?key|secret|token|password|passwd|auth(?:orization)?|access[_-]?token|private[_-]?key|client[_-]?secret)["']?\s*[:=]\s*["']?)([A-Za-z0-9._/+\-]{6,})/gi, '$1[REDACTED]'],
-    ];
-    for (const [re, repl] of rules)
-        s = s.replace(re, repl);
-    return s;
-}
-/** Pull plain text out of a Claude/Anthropic message `content` (string or block array). */
-function extractMessageText(content) {
-    if (content == null)
-        return '';
-    if (typeof content === 'string')
-        return content;
-    if (!Array.isArray(content))
-        return '';
-    const out = [];
-    for (const b of content) {
-        if (typeof b === 'string') {
-            out.push(b);
-            continue;
-        }
-        if (b && typeof b === 'object') {
-            const block = b;
-            if (block.type === 'text' && typeof block.text === 'string')
-                out.push(block.text);
-        }
-    }
-    return out.join('\n');
-}
-/** Tidy a candidate chunk: strip control chars, collapse whitespace, clip. */
-function clean(text) {
-    return redactSecrets(text).replace(CTRL, '').replace(/[ \t]+/g, ' ').replace(/\n{3,}/g, '\n\n').trim().slice(0, 4000);
-}
-/** Parse a JSONL/array trace body into per-line JSON objects (tolerant). */
-function parseRecords(raw) {
-    const trimmed = raw.trim();
-    if (!trimmed)
-        return [];
-    // Whole-body JSON array (dragon traces sometimes export one).
-    if (trimmed.startsWith('[')) {
-        try {
-            const arr = JSON.parse(trimmed);
-            if (Array.isArray(arr))
-                return arr.filter((x) => !!x && typeof x === 'object');
-        }
-        catch { /* fall through to line mode */ }
-    }
-    const out = [];
-    for (const line of trimmed.split('\n')) {
-        const t = line.trim();
-        if (!t || (t[0] !== '{' && t[0] !== '['))
-            continue;
-        try {
-            const obj = JSON.parse(t);
-            if (obj && typeof obj === 'object' && !Array.isArray(obj))
-                out.push(obj);
-        }
-        catch { /* skip non-JSON line */ }
-    }
-    return out;
-}
-/** Claude Code session JSONL → user/assistant prose segments. */
-export function parseClaudeJsonl(raw) {
-    const out = [];
-    for (const obj of parseRecords(raw)) {
-        const msg = (obj.message && typeof obj.message === 'object' ? obj.message : obj);
-        const role = String(msg.role ?? obj.role ?? '');
-        if (role !== 'user' && role !== 'assistant')
-            continue;
-        const text = extractMessageText(msg.content).trim();
-        if (!text)
-            continue;
-        // Drop tool-result / system-reminder blocks (same rule as the capture hook).
-        if (role === 'user' && (text.startsWith('<') || text.startsWith('[{')))
-            continue;
-        const cleaned = clean(text);
-        if (cleaned.length >= 12)
-            out.push({ role, text: cleaned });
-    }
-    return out;
-}
-/** dragon-cli flywheel trace → prose segments (prompt/response/text/content). */
-export function parseDragonTrace(raw) {
-    const out = [];
-    const fields = [['prompt', 'user'], ['input', 'user'], ['response', 'assistant'], ['output', 'assistant'], ['text', 'note'], ['content', 'note']];
-    for (const rec of parseRecords(raw)) {
-        for (const [field, role] of fields) {
-            const v = rec[field];
-            const text = typeof v === 'string' ? v : extractMessageText(v);
-            if (!text)
-                continue;
-            const cleaned = clean(text);
-            if (cleaned.length >= 12)
-                out.push({ role, text: cleaned });
-        }
-    }
-    return out;
-}
-/**
- * WYRM_TRACE_TOOL_CALLS output → ONE deterministic activity-summary segment.
- *
- * Accepts both the Live Memory `tool_call` event shape ({ kind:'tool_call',
- * actor:<toolName>, payload }) and the raw PostToolUse stdin shape
- * ({ tool_name, tool_input }). Payloads are collapsed to argument KEYS only
- * (never values) so a secret passed as a tool argument is never stored. The
- * order of first appearance is preserved (deterministic); counts are summed.
- */
-export function parseToolCalls(raw) {
-    const counts = new Map();
-    const order = [];
-    for (const rec of parseRecords(raw)) {
-        const kind = String(rec.kind ?? '');
-        let tool = '';
-        if (kind === 'tool_call')
-            tool = String(rec.actor ?? rec.tool ?? '');
-        else if (typeof rec.tool_name === 'string')
-            tool = rec.tool_name;
-        else if (typeof rec.tool === 'string')
-            tool = rec.tool;
-        tool = tool.replace(CTRL, '').trim().slice(0, 80);
-        if (!tool)
-            continue;
-        if (!counts.has(tool))
-            order.push(tool);
-        counts.set(tool, (counts.get(tool) ?? 0) + 1);
-    }
-    if (order.length === 0)
-        return [];
-    const summary = order.map((t) => `${t}×${counts.get(t)}`).join(', ');
-    return [{ role: 'tool', text: `Tool activity in this run: ${summary}.` }];
-}
-/** Sniff the trace format from the content (best-effort, deterministic). */
-export function detectTraceFormat(raw) {
-    const recs = parseRecords(raw).slice(0, 50);
-    if (recs.length === 0)
-        return 'claude-jsonl';
-    let toolish = 0, claudeish = 0;
-    for (const r of recs) {
-        if (r.kind === 'tool_call' || typeof r.tool_name === 'string')
-            toolish++;
-        const msg = (r.message && typeof r.message === 'object' ? r.message : r);
-        const role = msg.role ?? r.role;
-        if (role === 'user' || role === 'assistant' || role === 'system')
-            claudeish++;
-    }
-    if (toolish > 0 && toolish >= claudeish)
-        return 'tool-calls';
-    if (claudeish > 0)
-        return 'claude-jsonl';
-    return 'dragon';
-}
-/** Parse a trace body into normalized segments using the chosen (or sniffed) format. */
-export function parseTrace(raw, format = 'auto') {
-    const fmt = format === 'auto' ? detectTraceFormat(raw) : format;
-    const segments = fmt === 'tool-calls' ? parseToolCalls(raw) :
-        fmt === 'dragon' ? parseDragonTrace(raw) :
-            parseClaudeJsonl(raw);
-    return { segments, format: fmt };
-}
-/**
- * Fold parsed segments into ONE prose blob for the extractor. Deterministic
- * (preserves segment order); bounded so a huge transcript can't materialize an
- * unbounded segment array downstream (the deterministic extractor splits the
- * FULL text). Caps total chars; drops the tail past the cap rather than
- * silently mangling.
- */
-export function segmentsToText(segments, maxChars = 24_000) {
-    const parts = [];
-    let total = 0;
-    for (const s of segments) {
-        const line = s.text;
-        if (total + line.length > maxChars)
-            break;
-        parts.push(line);
-        total += line.length + 1;
-    }
-    return parts.join('\n');
-}
-//# sourceMappingURL=trace-harvest.js.map
+const l=/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;function g(s){if(!s)return"";let o=s;const e=[[/\b(?:sk|rk|pk)[-_][A-Za-z0-9][A-Za-z0-9_-]{14,}\b/g,"[REDACTED]"],[/\bgh[posru]_[A-Za-z0-9]{20,}\b/g,"[REDACTED]"],[/\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,"[REDACTED]"],[/\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g,"[REDACTED]"],[/\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,"[REDACTED]"],[/\bAIza[A-Za-z0-9_-]{30,}\b/g,"[REDACTED]"],[/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,"[REDACTED]"],[/\b([Bb]earer)\s+[A-Za-z0-9._-]{12,}/g,"$1 [REDACTED]"],[/((?:api[_-]?key|secret|token|password|passwd|auth(?:orization)?|access[_-]?token|private[_-]?key|client[_-]?secret)["']?\s*[:=]\s*["']?)([A-Za-z0-9._/+\-]{6,})/gi,"$1[REDACTED]"]];for(const[r,t]of e)o=o.replace(r,t);return o}function u(s){if(s==null)return"";if(typeof s=="string")return s;if(!Array.isArray(s))return"";const o=[];for(const e of s){if(typeof e=="string"){o.push(e);continue}if(e&&typeof e=="object"){const r=e;r.type==="text"&&typeof r.text=="string"&&o.push(r.text)}}return o.join(`
+`)}function p(s){return g(s).replace(l,"").replace(/[ \t]+/g," ").replace(/\n{3,}/g,`
+
+`).trim().slice(0,4e3)}function i(s){const o=s.trim();if(!o)return[];if(o.startsWith("["))try{const r=JSON.parse(o);if(Array.isArray(r))return r.filter(t=>!!t&&typeof t=="object")}catch{}const e=[];for(const r of o.split(`
+`)){const t=r.trim();if(!(!t||t[0]!=="{"&&t[0]!=="["))try{const c=JSON.parse(t);c&&typeof c=="object"&&!Array.isArray(c)&&e.push(c)}catch{}}return e}function A(s){const o=[];for(const e of i(s)){const r=e.message&&typeof e.message=="object"?e.message:e,t=String(r.role??e.role??"");if(t!=="user"&&t!=="assistant")continue;const c=u(r.content).trim();if(!c||t==="user"&&(c.startsWith("<")||c.startsWith("[{")))continue;const n=p(c);n.length>=12&&o.push({role:t,text:n})}return o}function m(s){const o=[],e=[["prompt","user"],["input","user"],["response","assistant"],["output","assistant"],["text","note"],["content","note"]];for(const r of i(s))for(const[t,c]of e){const n=r[t],a=typeof n=="string"?n:u(n);if(!a)continue;const f=p(a);f.length>=12&&o.push({role:c,text:f})}return o}function b(s){const o=new Map,e=[];for(const t of i(s)){const c=String(t.kind??"");let n="";c==="tool_call"?n=String(t.actor??t.tool??""):typeof t.tool_name=="string"?n=t.tool_name:typeof t.tool=="string"&&(n=t.tool),n=n.replace(l,"").trim().slice(0,80),n&&(o.has(n)||e.push(n),o.set(n,(o.get(n)??0)+1))}return e.length===0?[]:[{role:"tool",text:`Tool activity in this run: ${e.map(t=>`${t}\xD7${o.get(t)}`).join(", ")}.`}]}function x(s){const o=i(s).slice(0,50);if(o.length===0)return"claude-jsonl";let e=0,r=0;for(const t of o){(t.kind==="tool_call"||typeof t.tool_name=="string")&&e++;const n=(t.message&&typeof t.message=="object"?t.message:t).role??t.role;(n==="user"||n==="assistant"||n==="system")&&r++}return e>0&&e>=r?"tool-calls":r>0?"claude-jsonl":"dragon"}function y(s,o="auto"){const e=o==="auto"?x(s):o;return{segments:e==="tool-calls"?b(s):e==="dragon"?m(s):A(s),format:e}}function h(s,o=24e3){const e=[];let r=0;for(const t of s){const c=t.text;if(r+c.length>o)break;e.push(c),r+=c.length+1}return e.join(`
+`)}export{x as detectTraceFormat,A as parseClaudeJsonl,m as parseDragonTrace,b as parseToolCalls,y as parseTrace,g as redactSecrets,h as segmentsToText};

package/dist/types.js

@@ -1,30 +1 @@
-/**
- * Wyrm Types - Core type definitions
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- * @module types
- * @version 3.0.0
- */
-export const DEFAULT_CONFIG = {
-    database: {
-        wal: true,
-        cacheSize: 64000,
-    },
-    encryption: {
-        enabled: false,
-    },
-    logging: {
-        level: 'info',
-        console: true,
-    },
-    http: {
-        port: 3333,
-        host: '127.0.0.1',
-    },
-    sync: {
-        autoImport: true,
-        autoExport: false,
-    },
-};
-//# sourceMappingURL=types.js.map
+const e={database:{wal:!0,cacheSize:64e3},encryption:{enabled:!1},logging:{level:"info",console:!0},http:{port:3333,host:"127.0.0.1"},sync:{autoImport:!0,autoExport:!1}};export{e as DEFAULT_CONFIG};

package/dist/ui-dashboard.js

@@ -1,11 +1,4 @@
-/**
- * Wyrm Visual Web Dashboard — Self-contained HTML SPA
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- */
-export function getUIDashboardHTML() {
-    return `<!DOCTYPE html>
+function e(){return`<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="UTF-8">
@@ -261,7 +254,7 @@ main { padding: calc(var(--nav-h) + 24px) 24px 24px; max-width: 1200px; margin:
 (function() {
 'use strict';
 
-// ── Helpers ─────────────────────────────────────────────────────────────────
+// \u2500\u2500 Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 function el(tag, cls, text) {
   const e = document.createElement(tag);
   if (cls) e.className = cls;
@@ -313,7 +306,7 @@ async function apiPost(path) {
 
 function truncate(s, n) {
   if (!s) return '';
-  return s.length > n ? s.slice(0, n) + '…' : s;
+  return s.length > n ? s.slice(0, n) + '\u2026' : s;
 }
 
 function clearEl(e) {
@@ -381,7 +374,7 @@ function staleBar(staleness) {
   return wrap;
 }
 
-// ── Router ───────────────────────────────────────────────────────────────────
+// \u2500\u2500 Router \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 const TABS = ['overview', 'impact', 'memories', 'quests', 'truths', 'skills', 'review'];
 let currentTab = '';
 // Set from GET /ui/account.readonly at boot (WYRM_UI_READONLY=1 on the server).
@@ -413,7 +406,7 @@ document.querySelectorAll('.tab-btn').forEach(btn => {
 });
 window.addEventListener('hashchange', router);
 
-// ── Overview ─────────────────────────────────────────────────────────────────
+// \u2500\u2500 Overview \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 async function loadOverview() {
   const pane = document.getElementById('pane-overview');
   clearEl(pane);
@@ -456,13 +449,13 @@ async function loadOverview() {
         card.replaceChild(vEl, skel);
       }
     });
-    // Recent sessions — remove skeleton list, then insert real data
+    // Recent sessions \u2014 remove skeleton list, then insert real data
     pane.querySelector('.list')?.remove();
     const sl = el('div', 'sessions-list');
     const sessions = data.recent_sessions || [];
     if (sessions.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '📭'));
+      em.appendChild(el('div', 'empty-icon', '\u{1F4ED}'));
       em.appendChild(el('div', null, 'No sessions yet'));
       sl.appendChild(em);
     } else {
@@ -477,7 +470,7 @@ async function loadOverview() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// ── Memories ─────────────────────────────────────────────────────────────────
+// \u2500\u2500 Memories \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 let memPage = 1, memKind = '', memSearch = '', memDebounce = null;
 
 async function loadMemories(page, kind, search) {
@@ -503,7 +496,7 @@ async function loadMemories(page, kind, search) {
     const newList = el('div', 'list');
     if (!data.items || data.items.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '🧠'));
+      em.appendChild(el('div', 'empty-icon', '\u{1F9E0}'));
       em.appendChild(el('div', null, 'No memory artifacts found'));
       newList.appendChild(em);
     } else {
@@ -551,7 +544,7 @@ function initMemoriesPane() {
   const filters = el('div', 'filters');
   const si = el('input', 'filter-input');
   si.type = 'search';
-  si.placeholder = 'Search memories…';
+  si.placeholder = 'Search memories\u2026';
   si.addEventListener('input', () => {
     memSearch = si.value;
     clearTimeout(memDebounce);
@@ -578,7 +571,7 @@ function initMemoriesPane() {
   pane.insertBefore(filters, pane.firstChild);
 }
 
-// ── Quests ───────────────────────────────────────────────────────────────────
+// \u2500\u2500 Quests \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 async function loadQuests() {
   const pane = document.getElementById('pane-quests');
   clearEl(pane);
@@ -590,7 +583,7 @@ async function loadQuests() {
     const col = el('div', 'kanban-col');
     const hdr = el('div', 'kanban-header');
     hdr.appendChild(el('span', 'kanban-title', colLabels[status]));
-    const cnt = el('span', 'kanban-count', '…');
+    const cnt = el('span', 'kanban-count', '\u2026');
     hdr.appendChild(cnt);
     col.appendChild(hdr);
     col.dataset.status = status;
@@ -627,7 +620,7 @@ async function loadQuests() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// ── Truths ───────────────────────────────────────────────────────────────────
+// \u2500\u2500 Truths \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 let truthPage = 1;
 
 async function loadTruths(page) {
@@ -646,7 +639,7 @@ async function loadTruths(page) {
     const list = el('div', 'list');
     if (!data.items || data.items.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '📚'));
+      em.appendChild(el('div', 'empty-icon', '\u{1F4DA}'));
       em.appendChild(el('div', null, 'No ground truths yet'));
       list.appendChild(em);
     } else {
@@ -656,7 +649,7 @@ async function loadTruths(page) {
         row1.appendChild(el('span', 'truth-cat', t.category));
         row1.appendChild(el('span', 'truth-key', t.key));
         if (t.staleness != null && t.staleness > 0.7) {
-          row1.appendChild(el('span', null, '⚠️'));
+          row1.appendChild(el('span', null, '\u26A0\uFE0F'));
         }
         item.appendChild(row1);
         item.appendChild(el('div', 'truth-value', truncate(t.value, 150)));
@@ -689,7 +682,7 @@ async function loadTruths(page) {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// ── Review ───────────────────────────────────────────────────────────────────
+// \u2500\u2500 Review \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 async function loadReview() {
   const pane = document.getElementById('pane-review');
   clearEl(pane);
@@ -701,7 +694,7 @@ async function loadReview() {
     const items = data.items || [];
     if (items.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '✅'));
+      em.appendChild(el('div', 'empty-icon', '\u2705'));
       em.appendChild(el('div', null, 'Review queue is empty'));
       pane.appendChild(em);
       return;
@@ -719,8 +712,8 @@ async function loadReview() {
       // Approve/reject mutate the queue, withheld in read-only/public view.
       if (!READONLY) {
       const actions = el('div', 'review-actions');
-      const approveBtn = el('button', 'btn btn-approve', '✓ Approve');
-      const rejectBtn = el('button', 'btn btn-reject', '✕ Reject');
+      const approveBtn = el('button', 'btn btn-approve', '\u2713 Approve');
+      const rejectBtn = el('button', 'btn btn-reject', '\u2715 Reject');
       approveBtn.addEventListener('click', async () => {
         try {
           await apiPost('/ui/review/' + m.id + '/approve');
@@ -729,7 +722,7 @@ async function loadReview() {
           if (list.querySelectorAll('.review-item').length === 0) {
             list.remove();
             const em = el('div', 'empty');
-            em.appendChild(el('div', 'empty-icon', '✅'));
+            em.appendChild(el('div', 'empty-icon', '\u2705'));
             em.appendChild(el('div', null, 'Review queue is empty'));
             pane.appendChild(em);
           }
@@ -743,7 +736,7 @@ async function loadReview() {
           if (list.querySelectorAll('.review-item').length === 0) {
             list.remove();
             const em = el('div', 'empty');
-            em.appendChild(el('div', 'empty-icon', '✅'));
+            em.appendChild(el('div', 'empty-icon', '\u2705'));
             em.appendChild(el('div', null, 'Review queue is empty'));
             pane.appendChild(em);
           }
@@ -759,7 +752,7 @@ async function loadReview() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// ── Skills ─────────────────────────────────────────────────────────────────
+// \u2500\u2500 Skills \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 async function loadSkills() {
   const pane = document.getElementById('pane-skills');
   clearEl(pane);
@@ -770,7 +763,7 @@ async function loadSkills() {
     const items = data.items || [];
     if (items.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '🧩'));
+      em.appendChild(el('div', 'empty-icon', '\u{1F9E9}'));
       em.appendChild(el('div', null, 'No skills registered yet'));
       pane.appendChild(em);
       return;
@@ -798,7 +791,7 @@ async function loadSkills() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// ── Impact ───────────────────────────────────────────────────────────────────
+// \u2500\u2500 Impact \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 function fmtNum(n) {
   if (n >= 1000) return (n / 1000).toFixed(n >= 10000 ? 0 : 1).replace(/\\.0$/, '') + 'k';
   return String(n || 0);
@@ -857,15 +850,15 @@ async function loadImpact() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// ── Memory detail modal ───────────────────────────────────────────────────────
+// \u2500\u2500 Memory detail modal \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 let modalReq = 0;
 async function openMemoryModal(id) {
   const myReq = ++modalReq;
   const ov = document.getElementById('modal-overlay');
   const card = document.getElementById('modal-card');
   clearEl(card);
-  const close = el('span', 'modal-close', '✕'); close.onclick = closeModal; card.appendChild(close);
-  card.appendChild(el('div', 'item-sub', 'Loading…'));
+  const close = el('span', 'modal-close', '\u2715'); close.onclick = closeModal; card.appendChild(close);
+  card.appendChild(el('div', 'item-sub', 'Loading\u2026'));
   ov.classList.add('open');
   try {
     const d = await apiFetch('/ui/memory?id=' + id);
@@ -873,7 +866,7 @@ async function openMemoryModal(id) {
     if (myReq !== modalReq || !ov.classList.contains('open')) return;
     const it = d.item;
     clearEl(card);
-    const cl = el('span', 'modal-close', '✕'); cl.onclick = closeModal; card.appendChild(cl);
+    const cl = el('span', 'modal-close', '\u2715'); cl.onclick = closeModal; card.appendChild(cl);
     if (!it) { card.appendChild(el('div', 'item-sub', 'Memory not found.')); return; }
     const row = el('div', 'item-row');
     if (it.kind) row.appendChild(kindBadge(it.kind));
@@ -902,12 +895,12 @@ async function openMemoryModal(id) {
     const used = (it.access_count || 0), reused = (it.reuse_count || 0);
     // "Surfaced" = times recalled (auto); "Confirmed helpful" = times an agent
     // called wyrm_feedback after applying it. 0 here means no feedback yet, not broken.
-    card.appendChild(el('div', 'item-sub', 'Surfaced ' + used + '×  ·  confirmed helpful ' + reused + '×'));
+    card.appendChild(el('div', 'item-sub', 'Surfaced ' + used + '\xD7  \xB7  confirmed helpful ' + reused + '\xD7'));
   } catch(e) { if (myReq === modalReq) closeModal(); }
 }
 function closeModal() { const ov = document.getElementById('modal-overlay'); if (ov) ov.classList.remove('open'); }
 
-// ── Account badge ────────────────────────────────────────────────────────────
+// \u2500\u2500 Account badge \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 async function loadAccount() {
   const box = document.getElementById('acct');
   if (!box) return;
@@ -927,14 +920,14 @@ async function loadAccount() {
       box.classList.add('ro');
       box.title = 'Read-only public view';
     } else {
-      box.appendChild(el('span', 'acct-caret', '▾'));
+      box.appendChild(el('span', 'acct-caret', '\u25BE'));
       box.title = 'Click to switch account / home';
       box.onclick = toggleAcctMenu;
     }
   } catch(e) { /* badge stays empty on failure */ }
 }
 
-// ── Account switcher dropdown ─────────────────────────────────────────────────
+// \u2500\u2500 Account switcher dropdown \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 let acctMenuOpen = false;
 async function toggleAcctMenu(ev) {
   if (ev) ev.stopPropagation();
@@ -943,7 +936,7 @@ async function toggleAcctMenu(ev) {
   if (acctMenuOpen) { menu.classList.remove('open'); acctMenuOpen = false; return; }
   clearEl(menu);
   menu.appendChild(el('div', 'acct-menu-label', 'Switch account / home'));
-  menu.appendChild(el('div', 'acct-menu-label', 'Loading…'));
+  menu.appendChild(el('div', 'acct-menu-label', 'Loading\u2026'));
   menu.classList.add('open'); acctMenuOpen = true;
   try {
     const r = await fetch('/ui/homes');
@@ -956,9 +949,9 @@ async function toggleAcctMenu(ev) {
       const it = el('div', 'acct-menu-item' + (h.active ? ' active' : ''));
       const a = el('div', 'ai-acct');
       a.appendChild(el('span', null, h.account || h.name));
-      if (h.active) a.appendChild(el('span', 'ai-check', '● active'));
+      if (h.active) a.appendChild(el('span', 'ai-check', '\u25CF active'));
       it.appendChild(a);
-      it.appendChild(el('div', 'ai-meta', (h.tier || 'free') + '  ·  ' + h.name));
+      it.appendChild(el('div', 'ai-meta', (h.tier || 'free') + '  \xB7  ' + h.name));
       if (!h.active) it.addEventListener('click', () => switchHome(h.dbPath));
       menu.appendChild(it);
     });
@@ -990,22 +983,22 @@ document.getElementById('modal-overlay').addEventListener('click', (e) => {
 });
 document.addEventListener('keydown', (e) => { if (e.key === 'Escape') closeModal(); });
 
-// ── Pagination helper ─────────────────────────────────────────────────────────
+// \u2500\u2500 Pagination helper \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 function buildPagination(current, total, onPage) {
   const pgn = el('div', 'pagination');
-  const prev = el('button', 'page-btn', '← Prev');
+  const prev = el('button', 'page-btn', '\u2190 Prev');
   prev.disabled = current <= 1;
   prev.addEventListener('click', () => onPage(current - 1));
   pgn.appendChild(prev);
   pgn.appendChild(el('span', 'page-info', 'Page ' + current + ' of ' + total));
-  const next = el('button', 'page-btn', 'Next →');
+  const next = el('button', 'page-btn', 'Next \u2192');
   next.disabled = current >= total;
   next.addEventListener('click', () => onPage(current + 1));
   pgn.appendChild(next);
   return pgn;
 }
 
-// ── Tab loader ────────────────────────────────────────────────────────────────
+// \u2500\u2500 Tab loader \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 function loadTab(name) {
   if (name === 'overview') loadOverview();
   else if (name === 'impact') loadImpact();
@@ -1021,8 +1014,6 @@ function loadTab(name) {
 // so the Review pane knows whether to show approve/reject controls.
 loadAccount().then(router);
 })();
-</script>
+<\/script>
 </body>
-</html>`;
-}
-//# sourceMappingURL=ui-dashboard.js.map
+</html>`}export{e as getUIDashboardHTML};