shep 0.4.0

The shep binary: a process manager that keeps a flock of long-running processes alive on macOS, Linux and Windows, with logs, watch and cron restarts, and webhook alerts
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
//! `draw`: one `App`, one `Frame`, six regions of arithmetic.
//!
//! No `Layout`, no `Constraint`, no widget. The upstream surface this whole
//! module touches is six items wide: `Frame::area`, `Frame::buffer_mut`,
//! `Buffer::set_line`, `Line`, `Span`, `Style`, which keeps the render path
//! both testable and cheap to keep working across a ratatui release.

pub mod bleats;
pub mod detail;
pub mod flock;
pub mod host;
pub mod pane;
pub mod scroll;
pub mod settings;
pub mod status;

// `pub`, not private: a test in `super::super`'s own `mod tests` (it drives
// `run_ui`) needs `fixtures::sample()` from here. `#[cfg(test)]` still keeps
// every item out of the ordinary build.
#[cfg(test)]
pub mod fixtures;

use ratatui::Frame;
use ratatui::layout::Rect;
use ratatui::text::{Line, Span};

use self::flock::MIN_HEIGHT;
use super::app::App;

/// The narrowest terminal the dashboard draws into.
///
/// The table's own floor ([`flock::MIN_WIDTH`], 31) plus the selection
/// marker's gutter ([`flock::GUTTER`], 2). Below this the whole draw becomes
/// two short lines saying so.
pub const MIN_TERM_WIDTH: u16 = flock::MIN_WIDTH + flock::GUTTER;

/// Rows the chrome always takes: title, column header, rule, status bar.
///
/// The banner is not in this count: it is one row only when the link is
/// not live, and callers that need the worst case add it separately.
///
/// `#[cfg(test)]`: `draw` lays these out one `y += 1` at a time rather than
/// summing them, so this constant has no production call site.
#[cfg(test)]
const CHROME_ROWS: u16 = 4;

/// The host strip is one line.
const HOST_ROWS: u16 = 1;

/// The detail pane: one rule and four lines.
const DETAIL_ROWS: u16 = 5;

/// The bleats feed: one rule, one header, five lines.
const FEED_ROWS: u16 = 7;

/// Which optional panes a terminal of a given height gets.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub struct Panes {
    /// The host-usage strip, under the title.
    pub host: bool,
    /// The sheep detail pane, under the table.
    pub detail: bool,
    /// The bleats feed, under that.
    pub feed: bool,
}

impl Panes {
    /// The flock table alone, what every terminal shorter than
    /// [`PANE_TIERS`]' last threshold gets.
    pub const NONE: Self = Self {
        host: false,
        detail: false,
        feed: false,
    };

    /// How many rows these panes take together.
    ///
    /// `#[cfg(test)]`: `draw` claims each pane's rows off `floor` one
    /// constant at a time, so only
    /// `every_pane_tier_fits_the_height_it_claims` needs the sum.
    #[cfg(test)]
    #[must_use]
    pub const fn rows(self) -> u16 {
        let mut rows = 0;
        if self.host {
            rows += HOST_ROWS;
        }
        if self.detail {
            rows += DETAIL_ROWS;
        }
        if self.feed {
            rows += FEED_ROWS;
        }
        rows
    }
}

/// Height thresholds, tallest first. Each entry is the shortest terminal that
/// still gets that pane set.
///
/// The drop order is least-diagnostic first. 24 is the classic terminal
/// height, chosen so a plain 80x24 gets all three panes with a flock table
/// worth reading.
const PANE_TIERS: &[(u16, Panes)] = &[
    (
        24,
        Panes {
            host: true,
            detail: true,
            feed: true,
        },
    ),
    (
        18,
        Panes {
            host: true,
            detail: false,
            feed: true,
        },
    ),
    (
        14,
        Panes {
            host: true,
            detail: false,
            feed: false,
        },
    ),
    (MIN_HEIGHT, Panes::NONE),
];

/// The widest pane set that fits `height`.
#[must_use]
pub fn panes_for(height: u16) -> Panes {
    PANE_TIERS
        .iter()
        .find(|(threshold, _)| height >= *threshold)
        .map_or(Panes::NONE, |(_, panes)| *panes)
}

/// Renders the whole dashboard.
///
/// Synchronous, and every branch draws something except a zero-area frame,
/// which returns without drawing. A degenerate case draws a sentence rather
/// than nothing, since a blank pane cannot say whether the shepherd has
/// nothing to run or the dashboard is broken.
///
/// How tall the settings screen's body is for a terminal of `area`, between
/// the title line and the status bar. Zero for a terminal too small to draw
/// at all, so a caller that asks before checking size gets a viewport that
/// never scrolls rather than an underflowed height.
///
/// `run_ui` calls this before each draw, so [`App::note_body_rows`] always
/// reflects the terminal about to be drawn to.
#[must_use]
pub fn body_rows(area: Rect) -> u16 {
    if area.width < MIN_TERM_WIDTH || area.height < MIN_HEIGHT {
        return 0;
    }
    // One row for the title, one for the status bar.
    area.height - 2
}

/// Real caller: `super::mod`'s `run_ui`, once per frame.
pub fn draw(app: &App, frame: &mut Frame<'_>) {
    let area = frame.area();
    let (width, height) = (area.width, area.height);
    let palette = app.palette();

    if width < MIN_TERM_WIDTH || height < MIN_HEIGHT {
        // Two short lines, not one long sentence: `Buffer::set_line`
        // truncates at `max_width` in silence, and this branch exists for
        // terminals narrower than `MIN_TERM_WIDTH`.
        if width == 0 || height == 0 {
            return;
        }
        let first = Line::from(Span::raw("too small"));
        frame.buffer_mut().set_line(area.x, area.y, &first, width);
        if height >= 2 {
            let second = Line::from(Span::raw(format!("need {MIN_TERM_WIDTH}x{MIN_HEIGHT}")));
            frame
                .buffer_mut()
                .set_line(area.x, area.y + 1, &second, width);
        }
        return;
    }

    let panes = panes_for(height);
    let mut y = area.y;
    // The status bar's own row. Held once, up front: the bottom stack below
    // is laid out UPWARD from it, so nothing has to know the flock table's
    // length before deciding where the table ends.
    let bottom = area.y + height - 1;
    let buffer = frame.buffer_mut();

    buffer.set_line(
        area.x,
        y,
        &status::title_line(app, app.home(), width),
        width,
    );
    y += 1;

    // The settings screen owns the whole body between the title and the
    // status bar. That is a swap, not an overlay: the banner, the host
    // strip, the flock table and the two bottom panes all belong to the
    // body this branch replaces, so none of them draw while it is open.
    // The config pane owns the same body and is checked first, the same
    // order `App::on_key` uses.
    if let Some(pane) = app.config_pane() {
        let body = Rect {
            x: area.x,
            y,
            width,
            height: body_rows(area),
        };
        pane::draw_pane(app, pane, body, buffer);
        buffer.set_line(area.x, bottom, &status::status_line(app, width), width);
        return;
    }

    if let Some(settings) = app.settings() {
        let body = Rect {
            x: area.x,
            y,
            width,
            height: body_rows(area),
        };
        settings::draw_settings(app, settings, body, buffer);
        buffer.set_line(area.x, bottom, &status::status_line(app, width), width);
        return;
    }

    if let Some(banner) = status::banner_line(app) {
        buffer.set_line(area.x, y, &banner, width);
        y += 1;
    }

    if panes.host {
        buffer.set_line(area.x, y, &host::strip_line(app, width), width);
        y += HOST_ROWS;
    }

    // width >= MIN_TERM_WIDTH, checked above, so this never underflows.
    let table_width = width - flock::GUTTER;
    let columns = flock::columns_for(table_width);
    buffer.set_line(
        area.x + flock::GUTTER,
        y,
        &flock::header_line(columns, table_width, palette.muted()),
        table_width,
    );
    y += 1;
    // The rule stays full width: it is chrome, and a rule that stopped two
    // columns short of the left edge would look like a rendering bug.
    buffer.set_line(area.x, y, &status::rule_line(palette.muted(), width), width);
    y += 1;

    // The bottom stack, laid out upward from the status bar: whichever of
    // the detail pane and the feed are up claim their rows off `bottom`
    // first, and the table gets whatever is left between `y` and `floor`.
    let mut floor = bottom;
    let feed_at = panes.feed.then(|| {
        floor -= FEED_ROWS;
        floor
    });
    let detail_at = panes.detail.then(|| {
        floor -= DETAIL_ROWS;
        floor
    });

    // Everything from `y` up to `floor`: the viewport stops at `floor`
    // rather than at the status bar.
    let viewport = usize::from(floor - y);
    let keys = app.visible_rows();
    if keys.is_empty() {
        // Two sentences, because there are two reasons and an operator cannot
        // tell them apart from a blank table. `the flock is empty` stays for
        // the case it describes and no other.
        let text = if app.flock_len() == 0 {
            "the flock is empty".to_string()
        } else {
            format!("no sheep's name contains \"{}\"", app.filter())
        };
        let line = Line::from(Span::styled(text, palette.muted()));
        buffer.set_line(area.x, y, &line, width);
    } else {
        let offset = flock::scroll_offset(app.selected_index().unwrap_or(0), viewport, keys.len());
        let selected = app.selected();
        for (slot, key) in keys.iter().skip(offset).take(viewport).enumerate() {
            let slot = u16::try_from(slot).unwrap_or(0);
            let is_selected = selected.as_ref() == Some(key);
            buffer.set_line(
                area.x,
                y + slot,
                &Line::from(Span::raw(flock::mark(is_selected))),
                1,
            );
            buffer.set_line(
                area.x + flock::GUTTER,
                y + slot,
                &flock::key_line(app, key, columns, table_width),
                table_width,
            );
        }
    }

    if let Some(top) = detail_at {
        buffer.set_line(
            area.x,
            top,
            &status::rule_line(palette.muted(), width),
            width,
        );
        for (offset, line) in detail::detail_lines(app, width).iter().enumerate() {
            let offset = u16::try_from(offset).unwrap_or(0);
            buffer.set_line(area.x, top + 1 + offset, line, width);
        }
    }
    if let Some(top) = feed_at {
        buffer.set_line(
            area.x,
            top,
            &status::rule_line(palette.muted(), width),
            width,
        );
        let rows = usize::from(FEED_ROWS - 1);
        for (offset, line) in bleats::feed_lines(app, width, rows).iter().enumerate() {
            let offset = u16::try_from(offset).unwrap_or(0);
            buffer.set_line(area.x, top + 1 + offset, line, width);
        }
    }

    buffer.set_line(area.x, bottom, &status::status_line(app, width), width);
}

#[cfg(test)]
mod tests {
    use std::time::Instant;

    use ratatui::Terminal;
    use ratatui::backend::TestBackend;
    use shep_core::protocol::ProcessInfo;
    use shep_core::status::ProcStatus;

    use super::*;
    use crate::lookout::app::{App, Control, KeyPress, Msg};
    use crate::lookout::theme::Palette;

    fn draw_to(app: &App, width: u16, height: u16) -> String {
        let mut terminal = Terminal::new(TestBackend::new(width, height)).unwrap();
        terminal.draw(|frame| draw(app, frame)).unwrap();
        crate::lookout::frames::render_text(terminal.backend().buffer())
    }

    /// The refusal itself must fit the narrow terminal it is refusing
    /// about: `Buffer::set_line` truncates in silence, so a refusal written
    /// as one long sentence could lose its own numbers. Asserted on the
    /// whole line, trimmed, since `contains` passes on a truncated line as
    /// happily as a whole one.
    #[test]
    fn a_terminal_below_the_floor_says_so_instead_of_drawing() {
        let app = App::new(
            Palette::detect(None, None, None),
            Control::ReadOnly,
            "/home/ada/.shep".to_string(),
            Instant::now(),
        );
        let frame = draw_to(&app, 28, 8);
        let mut lines = frame.lines();
        assert_eq!(lines.next().unwrap().trim_end(), "too small");
        assert_eq!(lines.next().unwrap().trim_end(), "need 33x6");
        assert!(!frame.contains("STATUS"), "no header was drawn");

        // Narrower still, and taller than the floor in rows: the numbers
        // must survive here too, because a 12-column terminal is precisely
        // the case this message exists for.
        let cramped = draw_to(&app, 12, 8);
        assert!(
            cramped.lines().nth(1).unwrap().trim_end() == "need 33x6",
            "the dimensions were cut off in the terminal that needed them"
        );

        // One row to write into: the second line has nowhere to go, and the
        // draw must not reach past the buffer for it.
        let single = draw_to(&app, 20, 1);
        assert_eq!(single.lines().next().unwrap().trim_end(), "too small");
        assert_eq!(single.lines().count(), 1);
    }

    /// A bare empty screen does not tell an operator whether the shepherd
    /// has nothing to run or the dashboard is broken.
    #[test]
    fn an_empty_flock_still_prints_the_header_and_says_it_is_empty() {
        let app = App::new(
            Palette::detect(None, None, None),
            Control::ReadOnly,
            "/home/ada/.shep".to_string(),
            Instant::now(),
        );
        let frame = draw_to(&app, 100, 12);
        assert!(frame.contains("STATUS"));
        assert!(frame.contains("the flock is empty"));
    }

    /// A filter matching nothing is not the same as an empty flock; that
    /// sentence belongs to the case it describes.
    #[test]
    fn a_filter_matching_nothing_does_not_say_the_flock_is_empty() {
        let app = fixtures::filtered_app("zzz");
        let frame = draw_to(&app, 120, 30);
        assert!(
            frame.contains("no sheep's name contains \"zzz\""),
            "the table body names the query: {frame:?}"
        );
        assert!(
            !frame.contains("the flock is empty"),
            "and does not claim the flock is: {frame:?}"
        );
        assert!(
            frame.contains("no sheep selected: no name contains \"zzz\""),
            "the detail pane says its own reason: {frame:?}"
        );
        assert!(
            frame.contains("bleats  no sheep is selected"),
            "the feed's sentence is already true and is unchanged: {frame:?}"
        );
    }

    /// The mirror of the test above: swapped branches would still pass
    /// either test alone.
    #[test]
    fn an_empty_flock_still_says_the_flock_is_empty() {
        let app = fixtures::filtered_app_of(Vec::new(), "");
        let frame = draw_to(&app, 120, 30);
        assert!(frame.contains("the flock is empty"), "got {frame:?}");
        assert!(!frame.contains("no sheep's name contains"), "got {frame:?}");
    }

    /// Asserted on the whole line rather than with `contains`, since a `>`
    /// somewhere in a log path would satisfy `contains` and prove nothing.
    #[test]
    fn the_marker_sits_in_the_gutter_of_the_selected_row_and_nowhere_else() {
        let mut app = App::new(
            Palette::detect(None, None, None),
            Control::ReadOnly,
            "/home/ada/.shep".to_string(),
            Instant::now(),
        );
        app.update(Msg::Snapshot {
            rows: (0..4)
                .map(|id| {
                    ProcessInfo::builder(id, format!("sheep-{id}"), ProcStatus::Online).build()
                })
                .collect(),
            at: Instant::now(),
        });
        app.update(Msg::Key(KeyPress::SelectDown));

        let frame = draw_to(&app, 100, 12);
        let rows: Vec<&str> = frame.lines().skip(3).take(5).collect();
        assert!(
            rows[0].starts_with("  Flock "),
            "the section header keeps a blank gutter too: {:?}",
            rows[0]
        );
        assert!(
            rows[1].starts_with("  0 "),
            "unselected rows keep a blank gutter: {:?}",
            rows[1]
        );
        assert!(
            rows[2].starts_with("> 1 "),
            "the marker is on row 1: {:?}",
            rows[2]
        );
        assert!(
            rows[3].starts_with("  2 "),
            "and on no other row: {:?}",
            rows[3]
        );
        assert_eq!(
            frame.lines().filter(|line| line.starts_with('>')).count(),
            1,
            "exactly one marker on the frame"
        );
    }

    /// Last values stay on screen, with a sentence admitting they are
    /// stale.
    #[test]
    fn a_frozen_link_puts_the_banner_under_the_title() {
        let mut app = App::new(
            Palette::detect(None, None, None),
            Control::ReadOnly,
            "/home/ada/.shep".to_string(),
            Instant::now(),
        );
        app.update(Msg::Frozen {
            at_local: "2026-08-14 14:32:07".to_string(),
        });
        let frame = draw_to(&app, 100, 12);
        let banner = frame.lines().nth(1).expect("a second line").to_string();
        assert!(banner.contains("the shepherd has died"));
        assert!(banner.contains("2026-08-14 14:32:07"));
    }

    /// An operator who does not know the control state is one keystroke
    /// from finding out the wrong way.
    #[test]
    fn the_status_bar_always_says_which_control_state_is_in_force() {
        let now = Instant::now();
        let read_only = App::new(
            Palette::detect(None, None, None),
            Control::ReadOnly,
            "/home/ada/.shep".to_string(),
            now,
        );
        assert!(draw_to(&read_only, 100, 12).contains("read-only"));

        let allowed = App::new(
            Palette::detect(None, None, None),
            Control::Allowed,
            "/home/ada/.shep".to_string(),
            now,
        );
        let frame = draw_to(&allowed, 100, 12);
        assert!(frame.contains("control enabled"));
        assert!(!frame.contains("read-only"));
    }

    /// The failure mode this catches is an arithmetic underflow on
    /// `height - 1` in a one-row terminal.
    #[test]
    fn drawing_never_panics_across_the_size_sweep() {
        let mut app = App::new(
            Palette::detect(None, None, None),
            Control::ReadOnly,
            "/home/ada/.shep".to_string(),
            Instant::now(),
        );
        app.update(Msg::Snapshot {
            rows: (0..200)
                .map(|id| {
                    ProcessInfo::builder(id, format!("sheep-{id}"), ProcStatus::Online).build()
                })
                .collect(),
            at: Instant::now(),
        });
        for (width, height) in [(1, 1), (20, 3), (31, 6), (80, 24), (250, 60), (400, 200)] {
            let _ = draw_to(&app, width, height);
        }
    }

    /// The settings screen's own twin of the sweep above. `Rect::height`
    /// is `bottom - y`, computed once per frame rather than checked, so
    /// this is what proves `MIN_HEIGHT` (6) actually keeps it from
    /// underflowing at the floor the guard claims to cover.
    #[test]
    fn drawing_the_settings_screen_never_panics_across_the_size_sweep() {
        let app = fixtures::app_in_settings();
        for (width, height) in [(1, 1), (20, 3), (33, 6), (80, 24), (250, 60), (400, 200)] {
            let _ = draw_to(&app, width, height);
        }
    }

    /// The pending confirm must survive even when the body is too short to
    /// show `content_lines`' own copy of it: `status_line`'s fixed row
    /// always draws, so an armed edit is never invisible.
    #[test]
    fn an_armed_settings_candidate_survives_a_body_too_short_to_hold_it() {
        let mut app = fixtures::app_in_settings_with_control();
        let _ = app.update(Msg::Key(KeyPress::Cycle));
        let text = app.settings().unwrap().pending().unwrap().text.to_string();

        // 10 rows, 8 of them body: nowhere near the ~20 rows
        // `settings_snapshot` needs, so the body's own echo of this line is
        // not on screen at this height.
        let rendered = draw_to(&app, 200, 10);
        let last_line = rendered.lines().last().expect("at least one row");
        assert!(
            last_line.contains(text.trim()),
            "the confirm must survive on the status bar's fixed row: {last_line:?}"
        );
    }

    #[test]
    fn every_pane_tier_fits_the_height_it_claims() {
        for height in flock::MIN_HEIGHT..=200 {
            let panes = panes_for(height);
            let fixed = CHROME_ROWS + 1 /* banner */ + panes.rows();
            // A tier that shows a pane must leave the table at least three
            // rows; the floor tier, which shows none, only has to leave one.
            let floor = if panes.rows() == 0 { 1 } else { 3 };
            assert!(
                fixed + floor <= height,
                "height {height} chose {panes:?}, needing {} rows",
                fixed + floor
            );
        }
    }

    /// `every_pane_tier_fits_the_height_it_claims` picks up `DETAIL_ROWS`
    /// automatically, so a failure there means the tier table is wrong, not
    /// this test.
    #[test]
    fn the_detail_pane_claims_the_rows_it_draws() {
        let app = fixtures::with_selection(fixtures::sheep_with_lambs());
        assert_eq!(
            detail::detail_lines(&app, 120).len(),
            usize::from(DETAIL_ROWS - 1),
            "one rule plus its content lines"
        );
    }

    /// Detail goes first, the most redundant pane on the screen. Feed goes
    /// second: its content exists nowhere else, but five lines of a busy
    /// log is thin. The host strip goes last, at one row.
    #[test]
    fn panes_drop_in_a_fixed_order_as_the_terminal_shortens() {
        assert_eq!(
            panes_for(60),
            Panes {
                host: true,
                detail: true,
                feed: true
            }
        );
        assert_eq!(
            panes_for(24),
            Panes {
                host: true,
                detail: true,
                feed: true
            }
        );
        assert_eq!(
            panes_for(23),
            Panes {
                host: true,
                detail: false,
                feed: true
            }
        );
        assert_eq!(
            panes_for(18),
            Panes {
                host: true,
                detail: false,
                feed: true
            }
        );
        assert_eq!(
            panes_for(17),
            Panes {
                host: true,
                detail: false,
                feed: false
            }
        );
        assert_eq!(
            panes_for(14),
            Panes {
                host: true,
                detail: false,
                feed: false
            }
        );
        assert_eq!(panes_for(13), Panes::NONE);
        assert_eq!(
            panes_for(flock::MIN_HEIGHT),
            Panes::NONE,
            "12a's frame, untouched"
        );
    }

    /// `Buffer::set_line` outside the area is a panic in debug and a silent
    /// no-op otherwise, and the arithmetic here has four moving parts.
    #[test]
    fn every_pane_lands_inside_its_own_rows_across_the_size_sweep() {
        let mut app = fixtures::full_app();
        app.update(Msg::Frozen {
            at_local: "2026-08-14 14:32:07".to_string(),
        });
        for height in flock::MIN_HEIGHT..=60 {
            for width in [MIN_TERM_WIDTH, 40, 51, 80, 120, 200] {
                let frame = draw_to(&app, width, height);
                let lines: Vec<&str> = frame.lines().collect();
                let panes = panes_for(height);

                // The table's own row band, recomputed independently of
                // `draw`: title (1) + banner (1, this fixture is frozen) +
                // host strip if up + header/rule (2) is where it starts;
                // `floor`, walked the same way `draw` does, is where it ends.
                let table_body_start = 2 + if panes.host { HOST_ROWS } else { 0 } + 2;
                let mut floor = height - 1;
                if panes.feed {
                    floor -= FEED_ROWS;
                }
                if panes.detail {
                    floor -= DETAIL_ROWS;
                }
                let table_body_end = floor;
                for (i, line) in lines.iter().enumerate() {
                    let i = u16::try_from(i).unwrap_or(u16::MAX);
                    if i < table_body_start || i >= table_body_end {
                        continue;
                    }
                    assert!(
                        !line.starts_with("bleats  "),
                        "the feed header sits inside the table's own rows at \
                         {width}x{height}, row {i}"
                    );
                    assert!(
                        !line.starts_with("out  /home/ada/.shep/logs/"),
                        "the detail pane's out path sits inside the table's \
                         own rows at {width}x{height}, row {i}"
                    );
                }

                // Not `lines.len() == height`: `frames::render_text` maps
                // `(0..area.height)` by construction, so that holds even for
                // a `draw` that drew nothing. It is a property of the
                // renderer, not of this layout.
                let last = lines.last().unwrap();
                assert!(
                    last.contains("read-only"),
                    "the status bar survived at {width}x{height}: {last:?}"
                );
                // The row above the status bar belongs to the bottom-most
                // pane that is up, so it is never blank: a blank one means
                // the upward layout left a hole.
                if panes.feed || panes.detail {
                    let above = lines[lines.len() - 2];
                    assert!(
                        !above.trim().is_empty(),
                        "a blank row above the status bar at {width}x{height}"
                    );
                }
                // Every pane that is up appears exactly once and sits in
                // its own band.
                if panes.host {
                    let positions: Vec<usize> = lines
                        .iter()
                        .enumerate()
                        .filter(|(_, l)| l.starts_with("host  "))
                        .map(|(i, _)| i)
                        .collect();
                    assert_eq!(positions.len(), 1, "the strip at {width}x{height}");
                    assert!(
                        u16::try_from(positions[0]).unwrap_or(u16::MAX) < table_body_start,
                        "the strip at {width}x{height} sits at row {}, at or below the table",
                        positions[0]
                    );
                }
                if panes.feed {
                    let positions: Vec<usize> = lines
                        .iter()
                        .enumerate()
                        .filter(|(_, l)| l.starts_with("bleats  "))
                        .map(|(i, _)| i)
                        .collect();
                    assert_eq!(positions.len(), 1, "the feed header at {width}x{height}");
                    assert!(
                        u16::try_from(positions[0]).unwrap_or(0) >= table_body_end,
                        "the feed header at {width}x{height} sits at row {}, inside or above the table",
                        positions[0]
                    );
                }
                if panes.detail {
                    // The path prefix, not a bare `out  `: the feed's own
                    // body lines are tagged `out  ` too.
                    let positions: Vec<usize> = lines
                        .iter()
                        .enumerate()
                        .filter(|(_, l)| l.starts_with("out  /home/ada/.shep/logs/"))
                        .map(|(i, _)| i)
                        .collect();
                    assert_eq!(
                        positions.len(),
                        1,
                        "the detail pane's out path at {width}x{height}"
                    );
                    assert!(
                        u16::try_from(positions[0]).unwrap_or(0) >= table_body_end,
                        "the detail pane's out path at {width}x{height} sits at row {}, inside or above the table",
                        positions[0]
                    );
                }
            }
        }
    }

    /// Whatever else is on screen, the table gets the remainder, and at the
    /// tier where all three panes are up it still has room for more than a
    /// couple of rows.
    #[test]
    fn the_flock_table_keeps_the_middle_of_the_screen() {
        let app = fixtures::full_app(); // twelve sheep
        let frame = draw_to(&app, 120, 24);
        let data_rows = frame
            .lines()
            .filter(|line| line.starts_with("  ") || line.starts_with("> "))
            .filter(|line| line.trim_start().starts_with(|c: char| c.is_ascii_digit()))
            .count();
        assert!(data_rows >= 5, "the table got {data_rows} rows at 120x24");
    }
}