@agentdeck/bridge 0.2.3 → 1.0.1

package/dist/observed-steering.js

@@ -0,0 +1,247 @@
+/**
+ * Steering state for observed (direct `claude`, no PTY) sessions.
+ *
+ * The daemon cannot type into an observed session's terminal, but Claude Code
+ * hooks form a synchronous RPC channel that supports three steering
+ * primitives, all resolved here:
+ *
+ *   1. Device approval — a held PreToolUse response (permission-resolver.ts)
+ *      answers a genuine permission prompt with allow/deny. Gate eligibility
+ *      is decided by `shouldHoldPreToolUse` below (precision-first: every
+ *      uncertainty resolves to "don't hold" — see claude-permission-rules.ts).
+ *   2. Soft STOP — a stop flag consumed by the next PreToolUse, which returns
+ *      `deny` with an instruction to halt. Not an instant Ctrl+C (pure text
+ *      generation runs to the next tool call), but a real stop at the next
+ *      tool boundary.
+ *   3. Turn-end directives — prompts queued while the session is processing,
+ *      delivered by the Stop hook as `{decision:'block', reason}` so Claude
+ *      continues with the queued instruction instead of ending the turn.
+ *      Bounded by design: each Stop drains at most one directive, the queue
+ *      is hard-capped, and an empty queue always lets the turn end (no
+ *      stop_hook_active loop).
+ *
+ * Keyed by the Claude session UUID (same key as awaiting-overlay.ts). Lives
+ * outside the state machine for the same reason: per-session attribution.
+ */
+import { randomUUID } from 'crypto';
+import { evaluatePermissionRules, isNeverPromptTool, isPromptProneTool, } from './claude-permission-rules.js';
+import { shouldGatePreToolUse } from './awaiting-overlay.js';
+import { debug } from './logger.js';
+const STOP_FLAG_TTL_MS = 10 * 60_000; // stale STOP must not deny a tool an hour later
+const DIRECTIVE_TTL_MS = 60 * 60_000;
+const DIRECTIVE_QUEUE_CAP = 3;
+/** After a hold releases undecided, how long we correlate PostToolUse-without-
+ *  Notification to learn "this signature was auto-approved" (session
+ *  "always allow" answers live only in Claude's memory — this is the only way
+ *  to see them). */
+const ASK_RELEASE_LEARN_WINDOW_MS = 8_000;
+const sessions = new Map();
+function ses(sid) {
+    let s = sessions.get(sid);
+    if (!s) {
+        s = { directives: [], suppressed: new Set(), recentAskReleases: [] };
+        sessions.set(sid, s);
+    }
+    return s;
+}
+/** Bash signature = first two command tokens (the granularity of Claude's own
+ *  "always allow `git push`"-style session approvals); other tools = tool name. */
+export function gateSignature(tool, toolInput) {
+    if (tool === 'Bash' && typeof toolInput?.command === 'string') {
+        const head = toolInput.command.trim().split(/\s+/).slice(0, 2).join(' ');
+        return `Bash|${head}`;
+    }
+    return tool;
+}
+/** Human-readable question for the gate's awaiting overlay — device-native
+ *  semantics ("Allow Bash: git push …?"), never a fabricated mirror of the
+ *  TUI prompt's option labels. Overlay caps length at 120 chars. */
+export function buildGateQuestion(tool, toolInput) {
+    const preview = tool === 'Bash' && typeof toolInput?.command === 'string' ? toolInput.command
+        : typeof toolInput?.file_path === 'string' ? toolInput.file_path
+            : typeof toolInput?.url === 'string' ? toolInput.url : '';
+    return preview ? `Allow ${tool}: ${preview}` : `Allow ${tool}?`;
+}
+// ─── Soft STOP ───
+export function requestStop(sid) {
+    ses(sid).stopRequestedAt = Date.now();
+    debug('steering', `stop requested for ${sid}`);
+}
+export function clearStop(sid) {
+    const s = sessions.get(sid);
+    if (!s || s.stopRequestedAt === undefined)
+        return false;
+    s.stopRequestedAt = undefined;
+    return true;
+}
+export function isStopRequested(sid) {
+    const s = sessions.get(sid);
+    if (!s || s.stopRequestedAt === undefined)
+        return false;
+    if (Date.now() - s.stopRequestedAt > STOP_FLAG_TTL_MS) {
+        s.stopRequestedAt = undefined;
+        return false;
+    }
+    return true;
+}
+/** One-shot consume by the PreToolUse deny path. */
+export function consumeStop(sid) {
+    if (!isStopRequested(sid))
+        return false;
+    ses(sid).stopRequestedAt = undefined;
+    debug('steering', `stop consumed by PreToolUse deny for ${sid}`);
+    return true;
+}
+export const STOP_DENY_REASON = 'AgentDeck: the user pressed STOP on their AgentDeck controller. '
+    + 'Halt the current work now, briefly summarize where you left off, and wait '
+    + 'for the user\'s next instruction. Do not start new tool calls.';
+// ─── Turn-end directive queue ───
+export function queueDirective(sid, text) {
+    const trimmed = text.trim();
+    if (!trimmed)
+        return false;
+    const s = ses(sid);
+    const now = Date.now();
+    s.directives = s.directives.filter((d) => now - d.ts < DIRECTIVE_TTL_MS);
+    if (s.directives.length >= DIRECTIVE_QUEUE_CAP)
+        return false;
+    s.directives.push({ text: trimmed, ts: now });
+    debug('steering', `directive queued for ${sid}: "${trimmed.slice(0, 60)}" (${s.directives.length} queued)`);
+    return true;
+}
+/** Pop exactly one directive (Stop hook drains one per turn end). A pending
+ *  STOP outranks directives: stopping wins, the queue is discarded. */
+export function takeDirective(sid) {
+    const s = sessions.get(sid);
+    if (!s)
+        return undefined;
+    if (isStopRequested(sid)) {
+        s.directives = [];
+        return undefined;
+    }
+    const now = Date.now();
+    s.directives = s.directives.filter((d) => now - d.ts < DIRECTIVE_TTL_MS);
+    return s.directives.shift()?.text;
+}
+export function queuedDirectiveCount(sid) {
+    const s = sessions.get(sid);
+    if (!s)
+        return 0;
+    const now = Date.now();
+    s.directives = s.directives.filter((d) => now - d.ts < DIRECTIVE_TTL_MS);
+    return s.directives.length;
+}
+/** User re-engaged in the terminal — their own prompt supersedes anything the
+ *  deck queued, and a pending STOP is moot. */
+export function clearOnUserPrompt(sid) {
+    const s = sessions.get(sid);
+    if (!s)
+        return false;
+    const had = s.directives.length > 0 || s.stopRequestedAt !== undefined;
+    s.directives = [];
+    s.stopRequestedAt = undefined;
+    return had;
+}
+export function clearSession(sid) {
+    sessions.delete(sid);
+}
+/**
+ * Should this PreToolUse be held for device approval? Precision-first: hold
+ * ONLY when every check says Claude would genuinely prompt the user. Any
+ * uncertainty → pass through untouched (Claude's normal flow, zero latency).
+ */
+export function shouldHoldPreToolUse(ctx) {
+    if (!ctx.enabled)
+        return { hold: false, reason: 'disabled' };
+    if (ctx.clientCount < 1)
+        return { hold: false, reason: 'no clients' };
+    if (!ctx.tool)
+        return { hold: false, reason: 'no tool name' };
+    if (ctx.tool.startsWith('mcp__'))
+        return { hold: false, reason: 'mcp tool (trust state unknown)' };
+    if (isNeverPromptTool(ctx.tool))
+        return { hold: false, reason: 'never-prompt tool' };
+    if (!isPromptProneTool(ctx.tool))
+        return { hold: false, reason: 'not prompt-prone' };
+    if (!shouldGatePreToolUse(ctx.permissionMode, ctx.tool)) {
+        return { hold: false, reason: `permission_mode=${ctx.permissionMode ?? 'default'} auto-approves` };
+    }
+    const s = ses(ctx.sessionId);
+    const signature = gateSignature(ctx.tool, ctx.toolInput);
+    if (s.suppressed.has(signature))
+        return { hold: false, reason: 'signature learned auto-approved' };
+    if (s.heldRequestId)
+        return { hold: false, reason: 'another gate already held' };
+    const verdict = evaluatePermissionRules(ctx.tool, ctx.toolInput, ctx.cwd);
+    if (verdict === 'unknown')
+        return { hold: false, reason: 'settings unreadable' };
+    if (verdict === 'deny')
+        return { hold: false, reason: 'deny rule may match' };
+    if (verdict === 'allow')
+        return { hold: false, reason: 'allow rule may match' };
+    const requestId = randomUUID();
+    s.heldRequestId = requestId;
+    return { hold: true, requestId, reason: verdict === 'ask' ? 'ask rule matches' : 'prompt-prone, no rule match' };
+}
+/** The held gate resolved (device decision, timeout, sweep). `undecided` marks
+ *  a pass-through release, which arms the auto-approval learner below. */
+export function gateReleased(sid, requestId, opts) {
+    const s = sessions.get(sid);
+    if (!s)
+        return;
+    if (s.heldRequestId === requestId)
+        s.heldRequestId = undefined;
+    if (opts.undecided) {
+        s.recentAskReleases.push({
+            tool: opts.tool,
+            signature: gateSignature(opts.tool, opts.toolInput),
+            ts: Date.now(),
+        });
+        if (s.recentAskReleases.length > 8)
+            s.recentAskReleases.shift();
+    }
+}
+/** A permission_prompt Notification arrived — every recent undecided release
+ *  was a GENUINE prompt, so nothing should be learned as auto-approved. */
+export function notePermissionPromptShown(sid) {
+    const s = sessions.get(sid);
+    if (s)
+        s.recentAskReleases = [];
+}
+/**
+ * PostToolUse arrived. If a recent undecided release matches this tool and no
+ * permission_prompt Notification came in between, Claude auto-approved it
+ * (session-scoped "always allow" we cannot read) — suppress the signature so
+ * it is never held again this session.
+ */
+export function noteToolEnd(sid, tool) {
+    const s = sessions.get(sid);
+    if (!s || !tool || s.recentAskReleases.length === 0)
+        return;
+    const now = Date.now();
+    const kept = [];
+    for (const r of s.recentAskReleases) {
+        if (now - r.ts > ASK_RELEASE_LEARN_WINDOW_MS)
+            continue; // expired
+        if (r.tool === tool) {
+            s.suppressed.add(r.signature);
+            debug('steering', `learned auto-approved signature for ${sid}: ${r.signature}`);
+        }
+        else {
+            kept.push(r);
+        }
+    }
+    s.recentAskReleases = kept;
+}
+/** Enrichment snapshot for sessions_list (devices render STOPPING / queue badges). */
+export function steeringSnapshot(sid) {
+    return {
+        stopRequested: isStopRequested(sid),
+        queuedDirectives: queuedDirectiveCount(sid),
+    };
+}
+/** Test helper. */
+export function _resetSteering() {
+    sessions.clear();
+}
+//# sourceMappingURL=observed-steering.js.map

package/dist/observed-steering.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observed-steering.js","sourceRoot":"","sources":["../src/observed-steering.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,MAAM,gBAAgB,GAAG,EAAE,GAAG,MAAM,CAAC,CAAM,gDAAgD;AAC3F,MAAM,gBAAgB,GAAG,EAAE,GAAG,MAAM,CAAC;AACrC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B;;;oBAGoB;AACpB,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAe1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEpD,SAAS,GAAG,CAAC,GAAW;IACtB,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;QACrE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;mFACmF;AACnF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,SAA8C;IACxF,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,SAAS,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzE,OAAO,QAAQ,IAAI,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;oEAEoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAmC;IACjF,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,IAAI,OAAO,SAAS,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO;QAC3F,CAAC,CAAC,OAAO,SAAS,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS;YAC9D,CAAC,CAAC,OAAO,SAAS,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;AAClE,CAAC;AAED,oBAAoB;AAEpB,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,GAAG,CAAC,GAAG,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,KAAK,CAAC,UAAU,EAAE,sBAAsB,GAAG,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,CAAC,CAAC,eAAe,GAAG,SAAS,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,eAAe,GAAG,gBAAgB,EAAE,CAAC;QACtD,CAAC,CAAC,eAAe,GAAG,SAAS,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,GAAG,CAAC,GAAG,CAAC,CAAC,eAAe,GAAG,SAAS,CAAC;IACrC,KAAK,CAAC,UAAU,EAAE,wCAAwC,GAAG,EAAE,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAC3B,kEAAkE;MAChE,4EAA4E;MAC5E,gEAAgE,CAAC;AAErE,mCAAmC;AAEnC,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,IAAY;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,mBAAmB;QAAE,OAAO,KAAK,CAAC;IAC7D,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9C,KAAK,CAAC,UAAU,EAAE,wBAAwB,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,MAAM,UAAU,CAAC,CAAC;IAC5G,OAAO,IAAI,CAAC;AACd,CAAC;AAED;uEACuE;AACvE,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC;IACzE,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC;IACzE,OAAO,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED;+CAC+C;AAC/C,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,CAAC;IACvE,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC,CAAC,eAAe,GAAG,SAAS,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAqBD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAgB;IACnD,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC7D,IAAI,GAAG,CAAC,WAAW,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACtE,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC9D,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACnG,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACrF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACrF,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,cAAc,IAAI,SAAS,gBAAgB,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACnG,IAAI,CAAC,CAAC,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACjF,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACjF,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC9E,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAChF,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,CAAC,CAAC,aAAa,GAAG,SAAS,CAAC;IAC5B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,6BAA6B,EAAE,CAAC;AACnH,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,SAAiB,EACjB,IAA+E;IAE/E,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS;QAAE,CAAC,CAAC,aAAa,GAAG,SAAS,CAAC;IAC/D,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;SACf,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAClE,CAAC;AACH,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC;QAAE,CAAC,CAAC,iBAAiB,GAAG,EAAE,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,IAAwB;IAC/D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAiB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACpC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,2BAA2B;YAAE,SAAS,CAAC,UAAU;QAClE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACpB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9B,KAAK,CAAC,UAAU,EAAE,uCAAuC,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,CAAC,CAAC,iBAAiB,GAAG,IAAI,CAAC;AAC7B,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO;QACL,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC;QACnC,gBAAgB,EAAE,oBAAoB,CAAC,GAAG,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,mBAAmB;AACnB,MAAM,UAAU,cAAc;IAC5B,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/opencode-steering.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Command queue for observed (standalone TUI) OpenCode sessions.
+ *
+ * Unlike Claude Code, OpenCode gives its observer plugin a full in-process
+ * server client — so steering is DIRECT, not hook-mediated: the AgentDeck
+ * plugin (hooks/src/opencode-install.ts) long-polls
+ * `GET /opencode/commands?sid=<sessionID>` and executes what it receives via
+ * the SDK (`session.abort`, `session.prompt`). That makes interrupt immediate
+ * and prompt injection possible even while the session is idle — near-managed
+ * steering with zero PTY.
+ *
+ * The daemon side is deliberately dumb: a bounded per-session FIFO plus
+ * long-poll waiters. Commands are enqueued from device session_command
+ * routing; the plugin drains them within one poll round-trip.
+ */
+export interface OpenCodeCommand {
+    type: 'interrupt' | 'send_prompt' | 'permission_respond';
+    text?: string;
+    /** permission_respond: the OpenCode permission id (from permission.asked). */
+    permissionId?: string;
+    /** permission_respond: device decision; the plugin maps allow→"once", deny→"reject". */
+    response?: 'allow' | 'deny';
+}
+/** Queue a command; wakes a pending long-poll immediately. Returns false when
+ *  the queue is full (device keeps its button semantics honest via this). */
+export declare function enqueueOpenCodeCommand(sid: string, cmd: OpenCodeCommand): boolean;
+/** Long-poll: resolve immediately when commands are queued, otherwise hold up
+ *  to waitMs and resolve with an empty batch. */
+export declare function pollOpenCodeCommands(sid: string, waitMs: number): Promise<OpenCodeCommand[]>;
+/** Is a plugin actively polling this session (steerable right now)? */
+export declare function isOpenCodeSteerable(sid: string, now?: number): boolean;
+/** Release all waiters (daemon shutdown). */
+export declare function drainOpenCodeSteering(): void;
+/** Test helper. */
+export declare function _resetOpenCodeSteering(): void;
+//# sourceMappingURL=opencode-steering.d.ts.map

package/dist/opencode-steering.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-steering.d.ts","sourceRoot":"","sources":["../src/opencode-steering.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,GAAG,aAAa,GAAG,oBAAoB,CAAC;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC7B;AA0BD;6EAC6E;AAC7E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAWjF;AAED;iDACiD;AACjD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAiB5F;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAKlF;AAED,6CAA6C;AAC7C,wBAAgB,qBAAqB,IAAI,IAAI,CAQ5C;AAED,mBAAmB;AACnB,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}

package/dist/opencode-steering.js

@@ -0,0 +1,84 @@
+/**
+ * Command queue for observed (standalone TUI) OpenCode sessions.
+ *
+ * Unlike Claude Code, OpenCode gives its observer plugin a full in-process
+ * server client — so steering is DIRECT, not hook-mediated: the AgentDeck
+ * plugin (hooks/src/opencode-install.ts) long-polls
+ * `GET /opencode/commands?sid=<sessionID>` and executes what it receives via
+ * the SDK (`session.abort`, `session.prompt`). That makes interrupt immediate
+ * and prompt injection possible even while the session is idle — near-managed
+ * steering with zero PTY.
+ *
+ * The daemon side is deliberately dumb: a bounded per-session FIFO plus
+ * long-poll waiters. Commands are enqueued from device session_command
+ * routing; the plugin drains them within one poll round-trip.
+ */
+const QUEUE_CAP = 8;
+const queues = new Map();
+function entry(sid) {
+    let e = queues.get(sid);
+    if (!e) {
+        e = { commands: [], waiters: [], lastPollAt: 0 };
+        queues.set(sid, e);
+    }
+    return e;
+}
+/** Queue a command; wakes a pending long-poll immediately. Returns false when
+ *  the queue is full (device keeps its button semantics honest via this). */
+export function enqueueOpenCodeCommand(sid, cmd) {
+    const e = entry(sid);
+    if (e.commands.length >= QUEUE_CAP)
+        return false;
+    e.commands.push(cmd);
+    const waiter = e.waiters.shift();
+    if (waiter) {
+        clearTimeout(waiter.timer);
+        const cmds = e.commands.splice(0, e.commands.length);
+        waiter.resolve(cmds);
+    }
+    return true;
+}
+/** Long-poll: resolve immediately when commands are queued, otherwise hold up
+ *  to waitMs and resolve with an empty batch. */
+export function pollOpenCodeCommands(sid, waitMs) {
+    const e = entry(sid);
+    e.lastPollAt = Date.now();
+    if (e.commands.length > 0) {
+        return Promise.resolve(e.commands.splice(0, e.commands.length));
+    }
+    return new Promise((resolve) => {
+        const waiter = {
+            resolve,
+            timer: setTimeout(() => {
+                const idx = e.waiters.indexOf(waiter);
+                if (idx >= 0)
+                    e.waiters.splice(idx, 1);
+                resolve([]);
+            }, Math.max(1_000, Math.min(50_000, waitMs))),
+        };
+        e.waiters.push(waiter);
+    });
+}
+/** Is a plugin actively polling this session (steerable right now)? */
+export function isOpenCodeSteerable(sid, now = Date.now()) {
+    const e = queues.get(sid);
+    if (!e)
+        return false;
+    // A live long-poll re-arms at least every wait window + margin.
+    return e.waiters.length > 0 || now - e.lastPollAt < 40_000;
+}
+/** Release all waiters (daemon shutdown). */
+export function drainOpenCodeSteering() {
+    for (const e of queues.values()) {
+        for (const w of e.waiters.splice(0)) {
+            clearTimeout(w.timer);
+            w.resolve([]);
+        }
+    }
+    queues.clear();
+}
+/** Test helper. */
+export function _resetOpenCodeSteering() {
+    drainOpenCodeSteering();
+}
+//# sourceMappingURL=opencode-steering.js.map

package/dist/opencode-steering.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-steering.js","sourceRoot":"","sources":["../src/opencode-steering.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAuBH,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE7C,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,GAAoB;IACtE,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IACjD,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;iDACiD;AACjD,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,MAAc;IAC9D,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAW;YACrB,OAAO;YACP,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE;gBACrB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,GAAG,IAAI,CAAC;oBAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACvC,OAAO,CAAC,EAAE,CAAC,CAAC;YACd,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAC9C,CAAC;QACF,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACvE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,gEAAgE;IAChE,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC;AAC7D,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,qBAAqB;IACnC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,mBAAmB;AACnB,MAAM,UAAU,sBAAsB;IACpC,qBAAqB,EAAE,CAAC;AAC1B,CAAC"}

package/dist/output-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output-parser.d.ts","sourceRoot":"","sources":["../src/output-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AA+HtC,qBAAa,YAAa,SAAQ,YAAY;IAC5C,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,WAAW,CAA8C;IACjE,OAAO,CAAC,WAAW,CAAuB;IAC1C,2EAA2E;IAC3E,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,WAAW,CAAuB;IAG1C,OAAO,CAAC,aAAa,CAAS;IAE9B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,eAAe,CAA8C;IAErE,OAAO,CAAC,oBAAoB,CAA8C;IAC1E,OAAO,CAAC,mBAAmB,CAAuB;IAElD,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,WAAW,CAAM;IAGzB,OAAO,CAAC,mBAAmB,CAA8C;IACzE,OAAO,CAAC,SAAS,CAAuB;IAExC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAqB3B,OAAO,CAAC,WAAW;IA8BnB,0FAA0F;IAC1F,OAAO,CAAC,eAAe;IAqEvB,wDAAwD;IACxD,OAAO,CAAC,kBAAkB;IAgE1B,6CAA6C;IAC7C,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,cAAc;IAoTtB,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,cAAc;IA+BtB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,eAAe;IA6BvB,OAAO,CAAC,cAAc;IAuCtB,OAAO,CAAC,mBAAmB;IAmB3B,iFAAiF;IACjF,oBAAoB,IAAI,IAAI;IAa5B,sEAAsE;IACtE,OAAO,CAAC,sBAAsB;IAuB9B;;;sFAGkF;IAClF,OAAO,CAAC,0BAA0B;IAYlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,mBAAmB;IAsC3B,8DAA8D;IAC9D,OAAO,CAAC,gBAAgB;IAoBxB,qDAAqD;IACrD,OAAO,CAAC,aAAa;IAYrB,+FAA+F;IAC/F,OAAO,CAAC,mBAAmB;IAK3B,oFAAoF;IACpF,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,YAAY;IAoIpB,OAAO,CAAC,qBAAqB;IAO7B;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAwDxB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,gBAAgB;IAIxB,kGAAkG;IAClG,wBAAwB,IAAI,IAAI;IAOhC,OAAO,CAAC,wBAAwB;IAIhC;;;;;;;OAOG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAOnC,cAAc,IAAI,MAAM,GAAG,IAAI;IAC/B,YAAY,IAAI,MAAM,GAAG,IAAI;IAC7B,cAAc,IAAI,MAAM,GAAG,IAAI;IAE/B,KAAK,IAAI,IAAI;CAyBd"}
+{"version":3,"file":"output-parser.d.ts","sourceRoot":"","sources":["../src/output-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AA8ItC,qBAAa,YAAa,SAAQ,YAAY;IAC5C,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,WAAW,CAA8C;IACjE,OAAO,CAAC,WAAW,CAAuB;IAC1C,2EAA2E;IAC3E,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,WAAW,CAAuB;IAG1C,OAAO,CAAC,aAAa,CAAS;IAE9B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,eAAe,CAA8C;IAErE,OAAO,CAAC,oBAAoB,CAA8C;IAC1E,OAAO,CAAC,mBAAmB,CAAuB;IAElD,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,WAAW,CAAM;IAGzB,OAAO,CAAC,mBAAmB,CAA8C;IACzE,OAAO,CAAC,SAAS,CAAuB;IAExC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAqB3B,OAAO,CAAC,WAAW;IAmCnB,0FAA0F;IAC1F,OAAO,CAAC,eAAe;IAqEvB,wDAAwD;IACxD,OAAO,CAAC,kBAAkB;IAgE1B,6CAA6C;IAC7C,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,cAAc;IAoTtB,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,cAAc;IA+BtB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,eAAe;IA6BvB,OAAO,CAAC,cAAc;IAuCtB,OAAO,CAAC,mBAAmB;IAmB3B,iFAAiF;IACjF,oBAAoB,IAAI,IAAI;IAa5B,sEAAsE;IACtE,OAAO,CAAC,sBAAsB;IAuB9B;;;sFAGkF;IAClF,OAAO,CAAC,0BAA0B;IAYlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,mBAAmB;IAsC3B,8DAA8D;IAC9D,OAAO,CAAC,gBAAgB;IAoBxB,qDAAqD;IACrD,OAAO,CAAC,aAAa;IAYrB,+FAA+F;IAC/F,OAAO,CAAC,mBAAmB;IAK3B,oFAAoF;IACpF,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,YAAY;IAuJpB,OAAO,CAAC,qBAAqB;IAO7B;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAwDxB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,gBAAgB;IAIxB,kGAAkG;IAClG,wBAAwB,IAAI,IAAI;IAOhC,OAAO,CAAC,wBAAwB;IAIhC;;;;;;;OAOG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAOnC,cAAc,IAAI,MAAM,GAAG,IAAI;IAC/B,YAAY,IAAI,MAAM,GAAG,IAAI;IAC7B,cAAc,IAAI,MAAM,GAAG,IAAI;IAE/B,KAAK,IAAI,IAAI;CAyBd"}

package/dist/output-parser.js

@@ -11,6 +11,19 @@ const DIFF_PROMPT = /\(V\)iew diff.*\(A\)pply.*\(D\)eny|\(a\)pply.*\(d\)eny.*\(v
 // ANSI stripping can remove spaces (e.g. "❯3.Haiku" instead of "❯ 3. Haiku")
 const OPTION_NUMBERED = /^\s*❯?\s*\d{1,2}[.)]\s*.+/m;
 const OPTION_BULLET = /^\s*[►▸●○]\s+.+/m;
+// Bounded window (chars) the option-block parser scans back over. Must fit a tall
+// AskUserQuestion prompt (question + per-option descriptions + trailing
+// affordances) once oversized rules are collapsed (see BOX_RULE_RUN). The
+// backward block-scan + longest-run filter in parseOptions keep stale numbered
+// lists from earlier in the buffer out, so extra headroom is safe.
+const OPTION_SCAN_WINDOW = 3000;
+// Oversized full-width rule. Claude Code's AskUserQuestion draws a horizontal rule
+// (─────) between options; ANSI cursor positioning strips its newline, so hundreds
+// of box-drawing chars (U+2500–U+257F, optionally interspersed with the spaces the
+// cursor-forward→space step inserts) get glued onto the adjacent option label AND
+// exhaust OPTION_SCAN_WINDOW — dropping the real leading options. Collapse any long
+// run to a short newline-delimited rule.
+const BOX_RULE_RUN = /(?:[─-╿][ \t]*){12,}/g;
 // Claude Code uses ❯ as its prompt char. May have \u00A0 (nbsp) or spaces around it.
 // v2.1.49+: autocomplete suggestions appear on the same line (e.g. "❯ Try "refactor..."")
 // so we can't require end-of-line. Just check for ❯ at start of line.
@@ -167,7 +180,12 @@ export class OutputParser extends EventEmitter {
             .replace(/\x1b\[\d*(?:;\d*)?[Hf]/g, '\n') // CUP/HVP → newline
             .replace(/\x1b\[\d*[ABEF]/g, '\n'); // CUU/CUD/CNL/CPL → newline
         const clean = stripAnsi(spaced);
-        this.buffer += clean;
+        // Collapse oversized box-drawing rules (AskUserQuestion full-width separators)
+        // before buffering. A newline-stripped rule otherwise glues hundreds of box
+        // chars onto the adjacent option label AND exhausts the bounded option-scan
+        // window, dropping the real leading options. Raw `clean` is still used for the
+        // chunk-level pattern triggers below.
+        this.buffer += clean.replace(BOX_RULE_RUN, '\n──\n');
         if (this.buffer.length > 8192) {
             this.buffer = this.buffer.slice(-4096);
         }
@@ -441,7 +459,7 @@ export class OutputParser extends EventEmitter {
             // numbered/bulleted lines, box-drawing chrome, cursor overwrite, and
             // recommended/selected, and block-scopes so unrelated numbered response
             // text isn't pulled in.
-            const rich = this.parseOptions(this.buffer.slice(-2000));
+            const rich = this.parseOptions(this.buffer.slice(-OPTION_SCAN_WINDOW));
             if (rich.options.length >= 2) {
                 const options = rich.options.map(opt => ({
                     ...opt,
@@ -496,7 +514,7 @@ export class OutputParser extends EventEmitter {
             this.resetOptionTimer();
             this.optionTimer = setTimeout(() => {
                 this.optionTimer = null;
-                const parsed = this.parseOptions(this.buffer.slice(-2000));
+                const parsed = this.parseOptions(this.buffer.slice(-OPTION_SCAN_WINDOW));
                 if (parsed.options.length > 0) {
                     // Check if this looks like a permission prompt (Yes/No style from tool approval)
                     if (this.looksLikePermission(parsed.options) && !this.isCursorSelectionUI()) {
@@ -547,7 +565,7 @@ export class OutputParser extends EventEmitter {
                 this.resetOptionTimer();
                 this.optionTimer = setTimeout(() => {
                     this.optionTimer = null;
-                    const parsed = this.parseOptions(this.buffer.slice(-2000));
+                    const parsed = this.parseOptions(this.buffer.slice(-OPTION_SCAN_WINDOW));
                     if (parsed.navigable) {
                         // Options still present — emit cursor_update if index changed
                         if (parsed.cursorIndex !== this.lastCursorIndex) {
@@ -580,7 +598,7 @@ export class OutputParser extends EventEmitter {
             this.resetOptionTimer();
             this.optionTimer = setTimeout(() => {
                 this.optionTimer = null;
-                const parsed = this.parseOptions(this.buffer.slice(-2000));
+                const parsed = this.parseOptions(this.buffer.slice(-OPTION_SCAN_WINDOW));
                 if (parsed.navigable && parsed.cursorIndex !== this.lastCursorIndex) {
                     this.lastCursorIndex = parsed.cursorIndex;
                     debug('Parser', `EMIT cursor_update (ANSI reposition): cursorIndex=${parsed.cursorIndex}`);
@@ -988,15 +1006,20 @@ export class OutputParser extends EventEmitter {
                 // Blank or separator line — always tolerate (TUI redraws create variable blank runs)
                 blockStart--;
             }
-            else if (foundOption && /^\s/.test(line)) {
-                // Indented text line — likely option description, tolerate within limit
+            else if (foundOption && (/^\s/.test(line) || optLineRe.test(allLines[blockStart - 2] ?? ''))) {
+                // Option description between options. Two shapes: classic INDENTED text,
+                // OR an UNINDENTED (col 0) description sitting directly under its option —
+                // which is how Claude Code's AskUserQuestion renders them. For the
+                // unindented case we require an option on the line directly above, so the
+                // scan can't bridge into a stale numbered list separated from the real
+                // prompt by prose (e.g. "Would you like to proceed?"). Tolerate within limit.
                 descGap++;
                 if (descGap > MAX_DESC_GAP)
                     break;
                 blockStart--;
             }
             else {
-                // Unindented text or no options found yet — hard block boundary
+                // Unindented prose (not a description) or no option seen yet — hard boundary.
                 break;
             }
         }
@@ -1005,14 +1028,22 @@ export class OutputParser extends EventEmitter {
         let cursorIndex = 0;
         // Use a Map keyed by index so later (newer) lines overwrite earlier (stale) ones
         const byIndex = new Map();
+        // Indices whose option carried the ❯ cursor — authoritative for the ACTIVE
+        // prompt. A ❯-marked option must never be clobbered by a later non-cursor
+        // line at the same index (e.g. a stale markdown "1. …" from chat scrollback
+        // that got scanned into this block).
+        const cursorLocked = new Set();
         for (const line of lines) {
             const hasCursor = /^\s*❯/.test(line);
             const nm = line.match(/^\s*❯?\s*(\d{1,2})[.)]\s*(.+)/);
             if (nm) {
                 const idx = parseInt(nm[1], 10) - 1;
+                if (!hasCursor && cursorLocked.has(idx))
+                    continue;
                 if (hasCursor) {
                     navigable = true;
                     cursorIndex = idx;
+                    cursorLocked.add(idx);
                 }
                 let raw = nm[2].trim();
                 // Strip TUI footer text concatenated after last option (no newline from cursor positioning)
@@ -1085,8 +1116,15 @@ export class OutputParser extends EventEmitter {
         }
         if (currentRun.length > bestRun.length)
             bestRun = currentRun;
-        // Re-index to 0-based for downstream consumers
-        const contiguous = bestRun.map((opt, i) => ({ ...opt, index: i }));
+        // Re-index to 0-based ONLY when the leading options were genuinely truncated
+        // off the top (run doesn't start at option 0 — e.g. a long list scrolled so
+        // "1." was cut off). When option 0 is present we keep the true parsed indices
+        // so `select_option` targets the right cursor row — never silently renumber a
+        // trailing subset as 1..N when the real leading options exist but were dropped.
+        const runStart = bestRun.length > 0 ? bestRun[0].index : 0;
+        const contiguous = runStart > 0
+            ? bestRun.map((opt, i) => ({ ...opt, index: i }))
+            : bestRun.map((opt) => ({ ...opt }));
         const finalOptions = contiguous.length >= 2 ? contiguous : sorted;
         return { options: finalOptions, navigable, cursorIndex };
     }