fix(mention-open): a guessed repo you cannot override is a prompt with one wrong answer

[ZacxDev]

Reported from the real click path 2026-09-07. Clicking audit-pr 1291 in Alacritty
gave a one-row picker holding the tmux pane's repo, above the note "audit-pr 1291
names no repository". The operator's words:

in this case the guess is right, but in practice it's not

The defect

#1336 was right to suppress the auto-open — a default-sourced repo is evidence about
the window, not about the reference, so it must never open unconfirmed. But having
declined to act on the guess, the handler offered nothing else: confirm the wrong repo,
or dismiss and type the URL by hand. Both are worse than the refusal the picker
replaced, and it defeats the 392-row fuzzy universe from #1369 — which was already
built and sitting right there, unreached by this one arm.

The guess now leads a picker instead of being all of it: still first (most likely
answer, one Enter), with the universe appended and deduped beneath it.

Scoped to the guess that is ALONE — this is the substance, not a detail

A bare #N the pane attributes already offers two rows (clawgate task + the pane's
repo), and test_a_bare_hash_N_that_the_PANE_already_attributes_does_NOT_get_the_universe
pins that deliberately: it's the most common interaction in this handler, and burying
two good rows under several hundred is a regression dressed as a feature. My first
version wasn't scoped and broke exactly that test — the suite caught it.

⚠ The same complaint partly applies there: if the pane guess is wrong on a bare
#N, the right repo is still unreachable. Fixing it costs every ordinary click a
full-height picker — the operator's trade to make, not one to smuggle in beside a bug
fix. Left alone and written down; open question on the PR.

The note needed two wordings

"Confirm, or dismiss" is now false on the common path — neither is what to do. With
alternatives on offer it says the first row is a guess and the rest are searchable. The
one-row wording is kept, not deleted: with no mapping file the universe is empty and
a lone guessed row is still reachable.

🔴 The note is chosen by branch order, and both conditions are now true at once.
universe_note opens "nothing here knows X", which is false when the first row is a
recommendation the handler is asking about. Swapping the branches leaves the rows
correct and only the words wrong, so no behavioural test sees it —
test_a_guessed_picker_is_NOT_described_as_nothing_here_knows is the guard.

Superseded, not deleted

test_the_one_row_picker_for_a_guessed_repo_SAYS_WHY asserted n == 1 — which is
the reported defect. Renamed and now asserts n > 1; its real claims (the note explains
itself, and never names a repository) are unchanged.

Caught by the gates, not by review

The new branch adds a second offered_universe = True, which made mutation-battery rows
K38 and K19 match 2 sites instead of 1. A 2× anchor mutates a place the row doesn't
describe. Re-anchored onto unique context — and, per the guard's own instruction,
re-ran the battery rather than stopping at "the anchors parse now":

P1  control     KILLED                (the battery can observe)
K38 disclosure  KILLED(attributed)    f=1
K19 deletion    KILLED(attributed)    f=6
3/3 killed for the stated reason, restore OK

Verification

Real click path, rofi stubbed so no window is raised:

clicked	before	after
audit-pr 1291	1 row, no way out	392 rows, guess first, "type to search"
#1291	2 rows, no note	unchanged
civitai/talos-infra#1065	opens directly	unchanged

Both tiers green on the merged tree fb57872f (origin/main confirmed an ancestor):
dev-host gate.sh --tier both PASS (20,904 pytest + 1,449 node, 0 failed);
sandbox built one derivation at a time from a git archive extract — pytests PASS,
nodetests PASS.

⚠ One of my own new tests was wrong in a way worth recording: universe=[] does not
empty the universe, because repo_universe() unions the generated file with
discover_repos(). It asserted 1 row and got 4. The helper now takes the mapping as a
parameter so the empty case is actually reachable.

🤖 Generated with Claude Code

https://claude.ai/code/session_01FENxxrZztNTsrKgChnGT1X