wyrm-mcp 7.3.2 → 7.3.3

package/dist/trace-harvest.js

@@ -1,6 +1,244 @@
-const l=/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;function g(s){if(!s)return"";let o=s;const e=[[/\b(?:sk|rk|pk)[-_][A-Za-z0-9][A-Za-z0-9_-]{14,}\b/g,"[REDACTED]"],[/\bgh[posru]_[A-Za-z0-9]{20,}\b/g,"[REDACTED]"],[/\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,"[REDACTED]"],[/\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g,"[REDACTED]"],[/\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,"[REDACTED]"],[/\bAIza[A-Za-z0-9_-]{30,}\b/g,"[REDACTED]"],[/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,"[REDACTED]"],[/\b([Bb]earer)\s+[A-Za-z0-9._-]{12,}/g,"$1 [REDACTED]"],[/((?:api[_-]?key|secret|token|password|passwd|auth(?:orization)?|access[_-]?token|private[_-]?key|client[_-]?secret)["']?\s*[:=]\s*["']?)([A-Za-z0-9._/+\-]{6,})/gi,"$1[REDACTED]"]];for(const[r,t]of e)o=o.replace(r,t);return o}function u(s){if(s==null)return"";if(typeof s=="string")return s;if(!Array.isArray(s))return"";const o=[];for(const e of s){if(typeof e=="string"){o.push(e);continue}if(e&&typeof e=="object"){const r=e;r.type==="text"&&typeof r.text=="string"&&o.push(r.text)}}return o.join(`
-`)}function p(s){return g(s).replace(l,"").replace(/[ \t]+/g," ").replace(/\n{3,}/g,`
-
-`).trim().slice(0,4e3)}function i(s){const o=s.trim();if(!o)return[];if(o.startsWith("["))try{const r=JSON.parse(o);if(Array.isArray(r))return r.filter(t=>!!t&&typeof t=="object")}catch{}const e=[];for(const r of o.split(`
-`)){const t=r.trim();if(!(!t||t[0]!=="{"&&t[0]!=="["))try{const c=JSON.parse(t);c&&typeof c=="object"&&!Array.isArray(c)&&e.push(c)}catch{}}return e}function A(s){const o=[];for(const e of i(s)){const r=e.message&&typeof e.message=="object"?e.message:e,t=String(r.role??e.role??"");if(t!=="user"&&t!=="assistant")continue;const c=u(r.content).trim();if(!c||t==="user"&&(c.startsWith("<")||c.startsWith("[{")))continue;const n=p(c);n.length>=12&&o.push({role:t,text:n})}return o}function m(s){const o=[],e=[["prompt","user"],["input","user"],["response","assistant"],["output","assistant"],["text","note"],["content","note"]];for(const r of i(s))for(const[t,c]of e){const n=r[t],a=typeof n=="string"?n:u(n);if(!a)continue;const f=p(a);f.length>=12&&o.push({role:c,text:f})}return o}function b(s){const o=new Map,e=[];for(const t of i(s)){const c=String(t.kind??"");let n="";c==="tool_call"?n=String(t.actor??t.tool??""):typeof t.tool_name=="string"?n=t.tool_name:typeof t.tool=="string"&&(n=t.tool),n=n.replace(l,"").trim().slice(0,80),n&&(o.has(n)||e.push(n),o.set(n,(o.get(n)??0)+1))}return e.length===0?[]:[{role:"tool",text:`Tool activity in this run: ${e.map(t=>`${t}\xD7${o.get(t)}`).join(", ")}.`}]}function x(s){const o=i(s).slice(0,50);if(o.length===0)return"claude-jsonl";let e=0,r=0;for(const t of o){(t.kind==="tool_call"||typeof t.tool_name=="string")&&e++;const n=(t.message&&typeof t.message=="object"?t.message:t).role??t.role;(n==="user"||n==="assistant"||n==="system")&&r++}return e>0&&e>=r?"tool-calls":r>0?"claude-jsonl":"dragon"}function y(s,o="auto"){const e=o==="auto"?x(s):o;return{segments:e==="tool-calls"?b(s):e==="dragon"?m(s):A(s),format:e}}function h(s,o=24e3){const e=[];let r=0;for(const t of s){const c=t.text;if(r+c.length>o)break;e.push(c),r+=c.length+1}return e.join(`
-`)}export{x as detectTraceFormat,A as parseClaudeJsonl,m as parseDragonTrace,b as parseToolCalls,y as parseTrace,g as redactSecrets,h as segmentsToText};
+/**
+ * Trace harvest (v7 F4 T040) — turn a harness's working trace into run-tagged
+ * review-queue candidates, OFFLINE.
+ *
+ * Three trace shapes are ingested into one normalized prose stream that feeds
+ * the EXISTING auto_capture extractor (src/auto-capture.ts — local Ollama
+ * WYRM_EXTRACT_MODEL / deterministic fallback, NEVER a cloud LLM, Article III):
+ *
+ *   1. Claude Code session JSONL — one JSON object per line, each
+ *      { message: { role, content }, … } (the same shape
+ *      scripts/hooks/wyrm-session-capture.mjs already parses). User prose +
+ *      assistant text are kept; tool-result / system-reminder blocks dropped.
+ *   2. ~/.dragon/traces — the dragon-cli flywheel trace records. Tolerant of
+ *      both line-delimited JSON and a top-level JSON array; each record's
+ *      prompt/response/text/content fields are harvested.
+ *   3. WYRM_TRACE_TOOL_CALLS output — the `tool_call` Live Memory events the
+ *      PostToolUse hook emits ({ kind:'tool_call', actor, payload, … }) or the
+ *      raw stdin shape the hook reads ({ tool_name, tool_input, … }). Collapsed
+ *      into a deterministic per-tool activity summary.
+ *
+ * SECRET REDACTION: every harvested segment passes through redactSecrets()
+ * BEFORE extraction, so an API key / bearer token / password that scrolled
+ * through a transcript never lands in the review queue. Deterministic, no
+ * network. Tool-call payloads are collapsed to keys (never values) for the same
+ * reason — a secret passed as a tool argument is summarized, not stored.
+ *
+ * Pure: parsing + redaction are total string functions (no I/O, no clock, no
+ * RNG). The MCP handler injects the DB writes + the extractor.
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license Proprietary — (c) 2026 Ghost Protocol (Pvt) Ltd. All rights reserved. See LICENSE.
+ */
+/** Control chars (ANSI/BEL/NUL) must never reach the review queue or a TUI. */
+// eslint-disable-next-line no-control-regex
+const CTRL = /[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;
+/**
+ * Redact common secret shapes from a string so they never enter the review
+ * queue. Deterministic + offline. Conservative (favours over-redaction): the
+ * goal is "a leaked credential is never stored", not perfect classification.
+ * Each rule replaces the SECRET portion with `[REDACTED]`, preserving
+ * surrounding prose so the candidate is still meaningful.
+ */
+export function redactSecrets(input) {
+    if (!input)
+        return '';
+    let s = input;
+    // High-entropy / vendor-prefixed token shapes (order matters — specific first).
+    const rules = [
+        // sk-... / sk-ant-api03-... / rk_live_... (OpenAI/Anthropic/Stripe-style);
+        // the token body may carry internal -/_ separators (sk-ant-api03-<rand>).
+        [/\b(?:sk|rk|pk)[-_][A-Za-z0-9][A-Za-z0-9_-]{14,}\b/g, '[REDACTED]'],
+        // GitHub tokens (ghp_/gho_/ghu_/ghs_/ghr_) + fine-grained github_pat_
+        [/\bgh[posru]_[A-Za-z0-9]{20,}\b/g, '[REDACTED]'],
+        [/\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, '[REDACTED]'],
+        // AWS access key id
+        [/\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g, '[REDACTED]'],
+        // Slack tokens
+        [/\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, '[REDACTED]'],
+        // Google API key
+        [/\bAIza[A-Za-z0-9_-]{30,}\b/g, '[REDACTED]'],
+        // JWTs (three dot-separated base64url segments)
+        [/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g, '[REDACTED]'],
+        // Authorization: Bearer <token>
+        [/\b([Bb]earer)\s+[A-Za-z0-9._-]{12,}/g, '$1 [REDACTED]'],
+        // key=value / "key": "value" for secret-ish key names (api_key, token,
+        // password, secret, passwd, authorization, access_token, private_key).
+        [/((?:api[_-]?key|secret|token|password|passwd|auth(?:orization)?|access[_-]?token|private[_-]?key|client[_-]?secret)["']?\s*[:=]\s*["']?)([A-Za-z0-9._/+\-]{6,})/gi, '$1[REDACTED]'],
+    ];
+    for (const [re, repl] of rules)
+        s = s.replace(re, repl);
+    return s;
+}
+/** Pull plain text out of a Claude/Anthropic message `content` (string or block array). */
+function extractMessageText(content) {
+    if (content == null)
+        return '';
+    if (typeof content === 'string')
+        return content;
+    if (!Array.isArray(content))
+        return '';
+    const out = [];
+    for (const b of content) {
+        if (typeof b === 'string') {
+            out.push(b);
+            continue;
+        }
+        if (b && typeof b === 'object') {
+            const block = b;
+            if (block.type === 'text' && typeof block.text === 'string')
+                out.push(block.text);
+        }
+    }
+    return out.join('\n');
+}
+/** Tidy a candidate chunk: strip control chars, collapse whitespace, clip. */
+function clean(text) {
+    return redactSecrets(text).replace(CTRL, '').replace(/[ \t]+/g, ' ').replace(/\n{3,}/g, '\n\n').trim().slice(0, 4000);
+}
+/** Parse a JSONL/array trace body into per-line JSON objects (tolerant). */
+function parseRecords(raw) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return [];
+    // Whole-body JSON array (dragon traces sometimes export one).
+    if (trimmed.startsWith('[')) {
+        try {
+            const arr = JSON.parse(trimmed);
+            if (Array.isArray(arr))
+                return arr.filter((x) => !!x && typeof x === 'object');
+        }
+        catch { /* fall through to line mode */ }
+    }
+    const out = [];
+    for (const line of trimmed.split('\n')) {
+        const t = line.trim();
+        if (!t || (t[0] !== '{' && t[0] !== '['))
+            continue;
+        try {
+            const obj = JSON.parse(t);
+            if (obj && typeof obj === 'object' && !Array.isArray(obj))
+                out.push(obj);
+        }
+        catch { /* skip non-JSON line */ }
+    }
+    return out;
+}
+/** Claude Code session JSONL → user/assistant prose segments. */
+export function parseClaudeJsonl(raw) {
+    const out = [];
+    for (const obj of parseRecords(raw)) {
+        const msg = (obj.message && typeof obj.message === 'object' ? obj.message : obj);
+        const role = String(msg.role ?? obj.role ?? '');
+        if (role !== 'user' && role !== 'assistant')
+            continue;
+        const text = extractMessageText(msg.content).trim();
+        if (!text)
+            continue;
+        // Drop tool-result / system-reminder blocks (same rule as the capture hook).
+        if (role === 'user' && (text.startsWith('<') || text.startsWith('[{')))
+            continue;
+        const cleaned = clean(text);
+        if (cleaned.length >= 12)
+            out.push({ role, text: cleaned });
+    }
+    return out;
+}
+/** dragon-cli flywheel trace → prose segments (prompt/response/text/content). */
+export function parseDragonTrace(raw) {
+    const out = [];
+    const fields = [['prompt', 'user'], ['input', 'user'], ['response', 'assistant'], ['output', 'assistant'], ['text', 'note'], ['content', 'note']];
+    for (const rec of parseRecords(raw)) {
+        for (const [field, role] of fields) {
+            const v = rec[field];
+            const text = typeof v === 'string' ? v : extractMessageText(v);
+            if (!text)
+                continue;
+            const cleaned = clean(text);
+            if (cleaned.length >= 12)
+                out.push({ role, text: cleaned });
+        }
+    }
+    return out;
+}
+/**
+ * WYRM_TRACE_TOOL_CALLS output → ONE deterministic activity-summary segment.
+ *
+ * Accepts both the Live Memory `tool_call` event shape ({ kind:'tool_call',
+ * actor:<toolName>, payload }) and the raw PostToolUse stdin shape
+ * ({ tool_name, tool_input }). Payloads are collapsed to argument KEYS only
+ * (never values) so a secret passed as a tool argument is never stored. The
+ * order of first appearance is preserved (deterministic); counts are summed.
+ */
+export function parseToolCalls(raw) {
+    const counts = new Map();
+    const order = [];
+    for (const rec of parseRecords(raw)) {
+        const kind = String(rec.kind ?? '');
+        let tool = '';
+        if (kind === 'tool_call')
+            tool = String(rec.actor ?? rec.tool ?? '');
+        else if (typeof rec.tool_name === 'string')
+            tool = rec.tool_name;
+        else if (typeof rec.tool === 'string')
+            tool = rec.tool;
+        tool = tool.replace(CTRL, '').trim().slice(0, 80);
+        if (!tool)
+            continue;
+        if (!counts.has(tool))
+            order.push(tool);
+        counts.set(tool, (counts.get(tool) ?? 0) + 1);
+    }
+    if (order.length === 0)
+        return [];
+    const summary = order.map((t) => `${t}×${counts.get(t)}`).join(', ');
+    return [{ role: 'tool', text: `Tool activity in this run: ${summary}.` }];
+}
+/** Sniff the trace format from the content (best-effort, deterministic). */
+export function detectTraceFormat(raw) {
+    const recs = parseRecords(raw).slice(0, 50);
+    if (recs.length === 0)
+        return 'claude-jsonl';
+    let toolish = 0, claudeish = 0;
+    for (const r of recs) {
+        if (r.kind === 'tool_call' || typeof r.tool_name === 'string')
+            toolish++;
+        const msg = (r.message && typeof r.message === 'object' ? r.message : r);
+        const role = msg.role ?? r.role;
+        if (role === 'user' || role === 'assistant' || role === 'system')
+            claudeish++;
+    }
+    if (toolish > 0 && toolish >= claudeish)
+        return 'tool-calls';
+    if (claudeish > 0)
+        return 'claude-jsonl';
+    return 'dragon';
+}
+/** Parse a trace body into normalized segments using the chosen (or sniffed) format. */
+export function parseTrace(raw, format = 'auto') {
+    const fmt = format === 'auto' ? detectTraceFormat(raw) : format;
+    const segments = fmt === 'tool-calls' ? parseToolCalls(raw) :
+        fmt === 'dragon' ? parseDragonTrace(raw) :
+            parseClaudeJsonl(raw);
+    return { segments, format: fmt };
+}
+/**
+ * Fold parsed segments into ONE prose blob for the extractor. Deterministic
+ * (preserves segment order); bounded so a huge transcript can't materialize an
+ * unbounded segment array downstream (the deterministic extractor splits the
+ * FULL text). Caps total chars; drops the tail past the cap rather than
+ * silently mangling.
+ */
+export function segmentsToText(segments, maxChars = 24_000) {
+    const parts = [];
+    let total = 0;
+    for (const s of segments) {
+        const line = s.text;
+        if (total + line.length > maxChars)
+            break;
+        parts.push(line);
+        total += line.length + 1;
+    }
+    return parts.join('\n');
+}
+//# sourceMappingURL=trace-harvest.js.map

package/dist/types.js

@@ -1 +1,30 @@
-const e={database:{wal:!0,cacheSize:64e3},encryption:{enabled:!1},logging:{level:"info",console:!0},http:{port:3333,host:"127.0.0.1"},sync:{autoImport:!0,autoExport:!1}};export{e as DEFAULT_CONFIG};
+/**
+ * Wyrm Types - Core type definitions
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license Proprietary — (c) 2026 Ghost Protocol (Pvt) Ltd. All rights reserved. See LICENSE.
+ * @module types
+ * @version 3.0.0
+ */
+export const DEFAULT_CONFIG = {
+    database: {
+        wal: true,
+        cacheSize: 64000,
+    },
+    encryption: {
+        enabled: false,
+    },
+    logging: {
+        level: 'info',
+        console: true,
+    },
+    http: {
+        port: 3333,
+        host: '127.0.0.1',
+    },
+    sync: {
+        autoImport: true,
+        autoExport: false,
+    },
+};
+//# sourceMappingURL=types.js.map

package/dist/ui-dashboard.js

@@ -1,4 +1,11 @@
-function e(){return`<!DOCTYPE html>
+/**
+ * Wyrm Visual Web Dashboard — Self-contained HTML SPA
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license Proprietary — (c) 2026 Ghost Protocol (Pvt) Ltd. All rights reserved. See LICENSE.
+ */
+export function getUIDashboardHTML() {
+    return `<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="UTF-8">
@@ -254,7 +261,7 @@ main { padding: calc(var(--nav-h) + 24px) 24px 24px; max-width: 1200px; margin:
 (function() {
 'use strict';
 
-// \u2500\u2500 Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Helpers ─────────────────────────────────────────────────────────────────
 function el(tag, cls, text) {
   const e = document.createElement(tag);
   if (cls) e.className = cls;
@@ -306,7 +313,7 @@ async function apiPost(path) {
 
 function truncate(s, n) {
   if (!s) return '';
-  return s.length > n ? s.slice(0, n) + '\u2026' : s;
+  return s.length > n ? s.slice(0, n) + '…' : s;
 }
 
 function clearEl(e) {
@@ -374,7 +381,7 @@ function staleBar(staleness) {
   return wrap;
 }
 
-// \u2500\u2500 Router \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Router ───────────────────────────────────────────────────────────────────
 const TABS = ['overview', 'impact', 'memories', 'quests', 'truths', 'skills', 'review'];
 let currentTab = '';
 // Set from GET /ui/account.readonly at boot (WYRM_UI_READONLY=1 on the server).
@@ -406,7 +413,7 @@ document.querySelectorAll('.tab-btn').forEach(btn => {
 });
 window.addEventListener('hashchange', router);
 
-// \u2500\u2500 Overview \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Overview ─────────────────────────────────────────────────────────────────
 async function loadOverview() {
   const pane = document.getElementById('pane-overview');
   clearEl(pane);
@@ -449,13 +456,13 @@ async function loadOverview() {
         card.replaceChild(vEl, skel);
       }
     });
-    // Recent sessions \u2014 remove skeleton list, then insert real data
+    // Recent sessions — remove skeleton list, then insert real data
     pane.querySelector('.list')?.remove();
     const sl = el('div', 'sessions-list');
     const sessions = data.recent_sessions || [];
     if (sessions.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '\u{1F4ED}'));
+      em.appendChild(el('div', 'empty-icon', '📭'));
       em.appendChild(el('div', null, 'No sessions yet'));
       sl.appendChild(em);
     } else {
@@ -470,7 +477,7 @@ async function loadOverview() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// \u2500\u2500 Memories \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Memories ─────────────────────────────────────────────────────────────────
 let memPage = 1, memKind = '', memSearch = '', memDebounce = null;
 
 async function loadMemories(page, kind, search) {
@@ -496,7 +503,7 @@ async function loadMemories(page, kind, search) {
     const newList = el('div', 'list');
     if (!data.items || data.items.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '\u{1F9E0}'));
+      em.appendChild(el('div', 'empty-icon', '🧠'));
       em.appendChild(el('div', null, 'No memory artifacts found'));
       newList.appendChild(em);
     } else {
@@ -544,7 +551,7 @@ function initMemoriesPane() {
   const filters = el('div', 'filters');
   const si = el('input', 'filter-input');
   si.type = 'search';
-  si.placeholder = 'Search memories\u2026';
+  si.placeholder = 'Search memories…';
   si.addEventListener('input', () => {
     memSearch = si.value;
     clearTimeout(memDebounce);
@@ -571,7 +578,7 @@ function initMemoriesPane() {
   pane.insertBefore(filters, pane.firstChild);
 }
 
-// \u2500\u2500 Quests \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Quests ───────────────────────────────────────────────────────────────────
 async function loadQuests() {
   const pane = document.getElementById('pane-quests');
   clearEl(pane);
@@ -583,7 +590,7 @@ async function loadQuests() {
     const col = el('div', 'kanban-col');
     const hdr = el('div', 'kanban-header');
     hdr.appendChild(el('span', 'kanban-title', colLabels[status]));
-    const cnt = el('span', 'kanban-count', '\u2026');
+    const cnt = el('span', 'kanban-count', '…');
     hdr.appendChild(cnt);
     col.appendChild(hdr);
     col.dataset.status = status;
@@ -620,7 +627,7 @@ async function loadQuests() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// \u2500\u2500 Truths \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Truths ───────────────────────────────────────────────────────────────────
 let truthPage = 1;
 
 async function loadTruths(page) {
@@ -639,7 +646,7 @@ async function loadTruths(page) {
     const list = el('div', 'list');
     if (!data.items || data.items.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '\u{1F4DA}'));
+      em.appendChild(el('div', 'empty-icon', '📚'));
       em.appendChild(el('div', null, 'No ground truths yet'));
       list.appendChild(em);
     } else {
@@ -649,7 +656,7 @@ async function loadTruths(page) {
         row1.appendChild(el('span', 'truth-cat', t.category));
         row1.appendChild(el('span', 'truth-key', t.key));
         if (t.staleness != null && t.staleness > 0.7) {
-          row1.appendChild(el('span', null, '\u26A0\uFE0F'));
+          row1.appendChild(el('span', null, '⚠️'));
         }
         item.appendChild(row1);
         item.appendChild(el('div', 'truth-value', truncate(t.value, 150)));
@@ -682,7 +689,7 @@ async function loadTruths(page) {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// \u2500\u2500 Review \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Review ───────────────────────────────────────────────────────────────────
 async function loadReview() {
   const pane = document.getElementById('pane-review');
   clearEl(pane);
@@ -694,7 +701,7 @@ async function loadReview() {
     const items = data.items || [];
     if (items.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '\u2705'));
+      em.appendChild(el('div', 'empty-icon', '✅'));
       em.appendChild(el('div', null, 'Review queue is empty'));
       pane.appendChild(em);
       return;
@@ -712,8 +719,8 @@ async function loadReview() {
       // Approve/reject mutate the queue, withheld in read-only/public view.
       if (!READONLY) {
       const actions = el('div', 'review-actions');
-      const approveBtn = el('button', 'btn btn-approve', '\u2713 Approve');
-      const rejectBtn = el('button', 'btn btn-reject', '\u2715 Reject');
+      const approveBtn = el('button', 'btn btn-approve', '✓ Approve');
+      const rejectBtn = el('button', 'btn btn-reject', '✕ Reject');
       approveBtn.addEventListener('click', async () => {
         try {
           await apiPost('/ui/review/' + m.id + '/approve');
@@ -722,7 +729,7 @@ async function loadReview() {
           if (list.querySelectorAll('.review-item').length === 0) {
             list.remove();
             const em = el('div', 'empty');
-            em.appendChild(el('div', 'empty-icon', '\u2705'));
+            em.appendChild(el('div', 'empty-icon', '✅'));
             em.appendChild(el('div', null, 'Review queue is empty'));
             pane.appendChild(em);
           }
@@ -736,7 +743,7 @@ async function loadReview() {
           if (list.querySelectorAll('.review-item').length === 0) {
             list.remove();
             const em = el('div', 'empty');
-            em.appendChild(el('div', 'empty-icon', '\u2705'));
+            em.appendChild(el('div', 'empty-icon', '✅'));
             em.appendChild(el('div', null, 'Review queue is empty'));
             pane.appendChild(em);
           }
@@ -752,7 +759,7 @@ async function loadReview() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// \u2500\u2500 Skills \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Skills ─────────────────────────────────────────────────────────────────
 async function loadSkills() {
   const pane = document.getElementById('pane-skills');
   clearEl(pane);
@@ -763,7 +770,7 @@ async function loadSkills() {
     const items = data.items || [];
     if (items.length === 0) {
       const em = el('div', 'empty');
-      em.appendChild(el('div', 'empty-icon', '\u{1F9E9}'));
+      em.appendChild(el('div', 'empty-icon', '🧩'));
       em.appendChild(el('div', null, 'No skills registered yet'));
       pane.appendChild(em);
       return;
@@ -791,7 +798,7 @@ async function loadSkills() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// \u2500\u2500 Impact \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Impact ───────────────────────────────────────────────────────────────────
 function fmtNum(n) {
   if (n >= 1000) return (n / 1000).toFixed(n >= 10000 ? 0 : 1).replace(/\\.0$/, '') + 'k';
   return String(n || 0);
@@ -850,15 +857,15 @@ async function loadImpact() {
   } catch(e) { showToast(String(e), 'error'); }
 }
 
-// \u2500\u2500 Memory detail modal \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Memory detail modal ───────────────────────────────────────────────────────
 let modalReq = 0;
 async function openMemoryModal(id) {
   const myReq = ++modalReq;
   const ov = document.getElementById('modal-overlay');
   const card = document.getElementById('modal-card');
   clearEl(card);
-  const close = el('span', 'modal-close', '\u2715'); close.onclick = closeModal; card.appendChild(close);
-  card.appendChild(el('div', 'item-sub', 'Loading\u2026'));
+  const close = el('span', 'modal-close', '✕'); close.onclick = closeModal; card.appendChild(close);
+  card.appendChild(el('div', 'item-sub', 'Loading…'));
   ov.classList.add('open');
   try {
     const d = await apiFetch('/ui/memory?id=' + id);
@@ -866,7 +873,7 @@ async function openMemoryModal(id) {
     if (myReq !== modalReq || !ov.classList.contains('open')) return;
     const it = d.item;
     clearEl(card);
-    const cl = el('span', 'modal-close', '\u2715'); cl.onclick = closeModal; card.appendChild(cl);
+    const cl = el('span', 'modal-close', '✕'); cl.onclick = closeModal; card.appendChild(cl);
     if (!it) { card.appendChild(el('div', 'item-sub', 'Memory not found.')); return; }
     const row = el('div', 'item-row');
     if (it.kind) row.appendChild(kindBadge(it.kind));
@@ -895,12 +902,12 @@ async function openMemoryModal(id) {
     const used = (it.access_count || 0), reused = (it.reuse_count || 0);
     // "Surfaced" = times recalled (auto); "Confirmed helpful" = times an agent
     // called wyrm_feedback after applying it. 0 here means no feedback yet, not broken.
-    card.appendChild(el('div', 'item-sub', 'Surfaced ' + used + '\xD7  \xB7  confirmed helpful ' + reused + '\xD7'));
+    card.appendChild(el('div', 'item-sub', 'Surfaced ' + used + '×  ·  confirmed helpful ' + reused + '×'));
   } catch(e) { if (myReq === modalReq) closeModal(); }
 }
 function closeModal() { const ov = document.getElementById('modal-overlay'); if (ov) ov.classList.remove('open'); }
 
-// \u2500\u2500 Account badge \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Account badge ────────────────────────────────────────────────────────────
 async function loadAccount() {
   const box = document.getElementById('acct');
   if (!box) return;
@@ -920,14 +927,14 @@ async function loadAccount() {
       box.classList.add('ro');
       box.title = 'Read-only public view';
     } else {
-      box.appendChild(el('span', 'acct-caret', '\u25BE'));
+      box.appendChild(el('span', 'acct-caret', '▾'));
       box.title = 'Click to switch account / home';
       box.onclick = toggleAcctMenu;
     }
   } catch(e) { /* badge stays empty on failure */ }
 }
 
-// \u2500\u2500 Account switcher dropdown \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Account switcher dropdown ─────────────────────────────────────────────────
 let acctMenuOpen = false;
 async function toggleAcctMenu(ev) {
   if (ev) ev.stopPropagation();
@@ -936,7 +943,7 @@ async function toggleAcctMenu(ev) {
   if (acctMenuOpen) { menu.classList.remove('open'); acctMenuOpen = false; return; }
   clearEl(menu);
   menu.appendChild(el('div', 'acct-menu-label', 'Switch account / home'));
-  menu.appendChild(el('div', 'acct-menu-label', 'Loading\u2026'));
+  menu.appendChild(el('div', 'acct-menu-label', 'Loading…'));
   menu.classList.add('open'); acctMenuOpen = true;
   try {
     const r = await fetch('/ui/homes');
@@ -949,9 +956,9 @@ async function toggleAcctMenu(ev) {
       const it = el('div', 'acct-menu-item' + (h.active ? ' active' : ''));
       const a = el('div', 'ai-acct');
       a.appendChild(el('span', null, h.account || h.name));
-      if (h.active) a.appendChild(el('span', 'ai-check', '\u25CF active'));
+      if (h.active) a.appendChild(el('span', 'ai-check', '● active'));
       it.appendChild(a);
-      it.appendChild(el('div', 'ai-meta', (h.tier || 'free') + '  \xB7  ' + h.name));
+      it.appendChild(el('div', 'ai-meta', (h.tier || 'free') + '  ·  ' + h.name));
       if (!h.active) it.addEventListener('click', () => switchHome(h.dbPath));
       menu.appendChild(it);
     });
@@ -983,22 +990,22 @@ document.getElementById('modal-overlay').addEventListener('click', (e) => {
 });
 document.addEventListener('keydown', (e) => { if (e.key === 'Escape') closeModal(); });
 
-// \u2500\u2500 Pagination helper \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Pagination helper ─────────────────────────────────────────────────────────
 function buildPagination(current, total, onPage) {
   const pgn = el('div', 'pagination');
-  const prev = el('button', 'page-btn', '\u2190 Prev');
+  const prev = el('button', 'page-btn', '← Prev');
   prev.disabled = current <= 1;
   prev.addEventListener('click', () => onPage(current - 1));
   pgn.appendChild(prev);
   pgn.appendChild(el('span', 'page-info', 'Page ' + current + ' of ' + total));
-  const next = el('button', 'page-btn', 'Next \u2192');
+  const next = el('button', 'page-btn', 'Next →');
   next.disabled = current >= total;
   next.addEventListener('click', () => onPage(current + 1));
   pgn.appendChild(next);
   return pgn;
 }
 
-// \u2500\u2500 Tab loader \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+// ── Tab loader ────────────────────────────────────────────────────────────────
 function loadTab(name) {
   if (name === 'overview') loadOverview();
   else if (name === 'impact') loadImpact();
@@ -1014,6 +1021,8 @@ function loadTab(name) {
 // so the Review pane knows whether to show approve/reject controls.
 loadAccount().then(router);
 })();
-<\/script>
+</script>
 </body>
-</html>`}export{e as getUIDashboardHTML};
+</html>`;
+}
+//# sourceMappingURL=ui-dashboard.js.map