Fix TUI bugs and UX issues from real hardware testing

README.md

@@ -161,7 +161,7 @@ NeuralDrive images are built using Debian's `live-build` toolchain inside a Dock
 
 ```bash
 # Clone and build
-git clone https://github.com/NeuralDrive/NeuralDrive.git
+git clone https://github.com/Rightbracket/NeuralDrive.git
 cd NeuralDrive
 docker compose run --rm builder
 

config/hooks/live/01-setup-system.chroot

@@ -15,6 +15,12 @@ echo "neuraldrive-admin:neuraldrive" | chpasswd
 echo "neuraldrive-admin ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/neuraldrive-admin
 chmod 440 /etc/sudoers.d/neuraldrive-admin
 
+# Scoped NOPASSWD rules for TUI — survives wizard _finalize() which only
+# modifies neuraldrive-admin.  File is baked in via includes.chroot; just
+# ensure correct ownership and permissions here.
+chmod 440 /etc/sudoers.d/neuraldrive-tui
+chown root:root /etc/sudoers.d/neuraldrive-tui
+
 mkdir -p /etc/neuraldrive/tls \
          /var/lib/neuraldrive/models/{manifests,blobs} \
          /var/lib/neuraldrive/ollama \

config/hooks/live/04-install-python-apps.chroot

@@ -118,11 +118,11 @@ git clone --depth 1 https://github.com/psalias2006/gpu-hot.git /usr/lib/neuraldr
 # --- TUI (terminal interface) ---
 python3 -m venv /usr/lib/neuraldrive/tui/venv
 /usr/lib/neuraldrive/tui/venv/bin/pip install --no-cache-dir --upgrade pip
-/usr/lib/neuraldrive/tui/venv/bin/pip install --no-cache-dir textual psutil httpx rich
+/usr/lib/neuraldrive/tui/venv/bin/pip install --no-cache-dir textual psutil httpx rich pyyaml
 
 cat > /usr/local/bin/neuraldrive-tui << 'LAUNCHER'
 #!/bin/sh
-exec /usr/lib/neuraldrive/tui/venv/bin/python /usr/lib/neuraldrive/tui/main.py
+exec /usr/lib/neuraldrive/tui/venv/bin/python /usr/lib/neuraldrive/tui/main.py "$@"
 LAUNCHER
 chmod +x /usr/local/bin/neuraldrive-tui
 

config/hooks/live/05-generate-configs.chroot

@@ -7,7 +7,7 @@ cat > /etc/neuraldrive/ollama.conf << 'EOF'
 OLLAMA_HOST=127.0.0.1:11434
 OLLAMA_MODELS=/var/lib/neuraldrive/models/
 OLLAMA_KEEP_ALIVE=5m
-OLLAMA_MAX_LOADED_MODELS=1
+OLLAMA_MAX_LOADED_MODELS=0
 OLLAMA_NUM_PARALLEL=1
 EOF
 

config/includes.chroot/etc/modules-load.d/nvidia-uvm.conf

@@ -0,0 +1,4 @@
+# Load NVIDIA Unified Virtual Memory module at boot.
+# Required for CUDA GPU memory allocation (Ollama inference).
+# Harmless on systems without NVIDIA GPUs (modprobe fails silently).
+nvidia-current-uvm

config/includes.chroot/etc/neuraldrive/ollama.conf

@@ -1,5 +1,5 @@
 OLLAMA_HOST=127.0.0.1:11434
 OLLAMA_MODELS=/var/lib/neuraldrive/models/
 OLLAMA_KEEP_ALIVE=5m
-OLLAMA_MAX_LOADED_MODELS=1
+OLLAMA_MAX_LOADED_MODELS=0
 OLLAMA_NUM_PARALLEL=1

config/includes.chroot/etc/sudoers.d/neuraldrive-tui

@@ -0,0 +1,30 @@
+# Scoped NOPASSWD rules for NeuralDrive TUI operations.
+# This file is NOT modified by the first-boot wizard's _finalize()
+# (which only touches /etc/sudoers.d/neuraldrive-admin).
+# Processed AFTER neuraldrive-admin (alphabetical), so these NOPASSWD
+# rules override the password-required ALL rule for matched commands.
+
+# Service management
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/systemctl start neuraldrive-*
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/systemctl stop neuraldrive-*
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart neuraldrive-*
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/systemctl is-active neuraldrive-*
+
+# Partition creation and storage management
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/sbin/parted *
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/sbin/mkfs.ext4 *
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/mount *
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/umount *
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/sbin/partprobe *
+
+# File operations (wizard config writing, directory setup)
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/tee *
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/mkdir *
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/chmod *
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/chown *
+
+# Password management (wizard security step)
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/sbin/chpasswd
+
+# Sudoers self-read (wizard _finalize reads neuraldrive-admin to strip NOPASSWD)
+neuraldrive-admin ALL=(ALL) NOPASSWD: /usr/bin/cat /etc/sudoers.d/neuraldrive-admin

config/includes.chroot/etc/systemd/system/neuraldrive-ollama.service

@@ -6,7 +6,10 @@ Requires=neuraldrive-gpu-detect.service
 [Service]
 Environment=HOME=/var/lib/neuraldrive/ollama
 EnvironmentFile=/etc/neuraldrive/ollama.conf
+EnvironmentFile=-/var/lib/neuraldrive/config/ollama.conf
 ExecStartPre=/usr/bin/mkdir -p /var/lib/neuraldrive/models
+ExecStartPre=-/sbin/modprobe nvidia-current-uvm
+ExecStartPre=-/usr/bin/nvidia-modprobe -u
 ExecStart=/usr/local/bin/ollama serve
 User=neuraldrive-ollama
 Group=neuraldrive-ollama
@@ -26,8 +29,6 @@ PrivateTmp=yes
 PrivateDevices=no
 ProtectKernelTunables=yes
 ProtectControlGroups=yes
-DeviceAllow=/dev/nvidia* rw
-DeviceAllow=/dev/dri/* rw
 ReadWritePaths=/var/lib/neuraldrive /var/log/neuraldrive /etc/neuraldrive /run/neuraldrive
 
 [Install]

config/includes.chroot/usr/lib/neuraldrive/dev-reset.sh

@@ -0,0 +1,38 @@
+#!/bin/bash
+# /usr/lib/neuraldrive/dev-reset.sh
+# Development reset script — restores a post-wizard system to a
+# development-friendly state.  Included in builds for convenience.
+#
+# Usage:  sudo /usr/lib/neuraldrive/dev-reset.sh
+
+set -e
+
+echo "=== NeuralDrive Development Reset ==="
+echo ""
+
+# 1. Reset admin password to the build default
+echo "neuraldrive-admin:neuraldrive" | chpasswd
+echo "[ok] Admin password reset to 'neuraldrive'"
+
+# 2. Restore blanket NOPASSWD for development
+echo "neuraldrive-admin ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/neuraldrive-admin
+chmod 440 /etc/sudoers.d/neuraldrive-admin
+echo "[ok] Blanket NOPASSWD sudo restored"
+
+# 3. Remove wizard sentinel so it runs again on next TUI start
+rm -f /etc/neuraldrive/first-boot-complete
+echo "[ok] Wizard sentinel removed"
+
+# 4. Clear config files so wizard starts fresh
+rm -f /var/lib/neuraldrive/config/config.yaml
+rm -f /etc/neuraldrive/config.yaml
+echo "[ok] Config files cleared"
+
+# 5. Clear generated credentials
+rm -f /etc/neuraldrive/api.key
+rm -f /etc/neuraldrive/credentials.conf
+echo "[ok] API key and credentials cleared"
+
+echo ""
+echo "Development reset complete."
+echo "Restart the TUI to re-run the first-boot wizard."

config/includes.chroot/usr/lib/neuraldrive/tui/main.py

@@ -9,21 +9,74 @@
 from screens.chat import ChatScreen
 from screens.wizard import FirstBootWizard
 
+import argparse
 import os
+import subprocess
+import sys
+import traceback
+from datetime import datetime
+
+PERSIST_DIR = "/var/lib/neuraldrive"
+OVERLAY_LOG_DIR = "/var/log/neuraldrive"
+
+
+def _persistent_available() -> bool:
+    return os.path.ismount(PERSIST_DIR)
+
+
+def _log_dir() -> str:
+    if _persistent_available():
+        p = os.path.join(PERSIST_DIR, "logs")
+        try:
+            os.makedirs(p, exist_ok=True)
+            return p
+        except PermissionError:
+            pass
+    os.makedirs(OVERLAY_LOG_DIR, exist_ok=True)
+    return OVERLAY_LOG_DIR
+
+
+def _screenshot_dir() -> str:
+    if _persistent_available():
+        p = os.path.join(PERSIST_DIR, "screenshots")
+        try:
+            os.makedirs(p, exist_ok=True)
+            return p
+        except PermissionError:
+            pass
+    os.makedirs(OVERLAY_LOG_DIR, exist_ok=True)
+    return OVERLAY_LOG_DIR
+
+
+def _write_crash_dump(error: BaseException) -> str | None:
+    try:
+        crash_dir = _log_dir()
+        ts = datetime.now().strftime("%Y%m%d-%H%M%S")
+        dump_path = os.path.join(crash_dir, f"tui-crash-{ts}.log")
+        with open(dump_path, "w") as f:
+            f.write(f"NeuralDrive TUI crash at {ts}\n")
+            f.write(f"Python: {sys.version}\n")
+            f.write(f"Args: {sys.argv}\n\n")
+            traceback.print_exception(type(error), error, error.__traceback__, file=f)
+        return dump_path
+    except Exception:
+        return None
 
 
 class NeuralDriveTUI(App):
     CSS_PATH = "styles.tcss"
     TITLE = "NeuralDrive"
+    ENABLE_COMMAND_PALETTE = False
 
     BINDINGS = [
-        Binding("m", "switch_screen('models')", "Models"),
-        Binding("s", "switch_screen('services')", "Services"),
-        Binding("n", "switch_screen('network')", "Network"),
-        Binding("l", "switch_screen('logs')", "Logs"),
-        Binding("c", "switch_screen('chat')", "Chat"),
-        Binding("d", "switch_screen('dashboard')", "Dashboard"),
+        Binding("f1", "switch_screen('dashboard')", "F1 Dash", priority=True),
+        Binding("f2", "switch_screen('models')", "F2 Models", priority=True),
+        Binding("f3", "switch_screen('services')", "F3 Svc", priority=True),
+        Binding("f4", "switch_screen('logs')", "F4 Logs", priority=True),
+        Binding("f5", "switch_screen('chat')", "F5 Chat", priority=True),
         Binding("q", "quit", "Quit"),
+        Binding("up", "focus_previous", "Previous", show=False),
+        Binding("down", "focus_next", "Next", show=False),
     ]
 
     SCREENS = {
@@ -40,11 +93,43 @@ def on_mount(self) -> None:
         if not os.path.exists("/etc/neuraldrive/first-boot-complete"):
             self.push_screen(FirstBootWizard())
 
+    def _handle_exception(self, error: Exception) -> None:
+        dump_path = _write_crash_dump(error)
+        if dump_path:
+            self.log(f"Crash dump saved to {dump_path}")
+        super()._handle_exception(error)
+
+    def action_focus_next(self) -> None:
+        self.screen.focus_next()
+
+    def action_focus_previous(self) -> None:
+        self.screen.focus_previous()
+
     def action_switch_screen(self, screen_name: str) -> None:
         if screen_name in self.SCREENS:
             self.switch_screen(screen_name)
 
 
 if __name__ == "__main__":
-    app = NeuralDriveTUI()
-    app.run(mouse=False)
+    parser = argparse.ArgumentParser(description="NeuralDrive TUI")
+    parser.add_argument(
+        "--wizard", action="store_true", help="Force the first-boot wizard to run"
+    )
+    args = parser.parse_args()
+
+    if args.wizard:
+        sentinel = "/etc/neuraldrive/first-boot-complete"
+        if os.path.exists(sentinel):
+            subprocess.run(["sudo", "rm", "-f", sentinel], timeout=5)
+
+    screenshot_dir = _screenshot_dir()
+    os.environ["TEXTUAL_SCREENSHOT_LOCATION"] = screenshot_dir
+    try:
+        app = NeuralDriveTUI()
+        app.run(mouse=False)
+    except Exception as exc:
+        dump_path = _write_crash_dump(exc)
+        traceback.print_exc()
+        if dump_path:
+            print(f"\nCrash dump saved to {dump_path}")
+        sys.exit(1)