@scotthuang/agent-knock-knock 0.13.14 → 0.13.16

package/dist/src/terminal-permission-control-bridge.js

@@ -0,0 +1,93 @@
+import { createHash } from "node:crypto";
+import { observeCodexPermissionSurface } from "./codex-permission-surface.js";
+import { exactCodexFullscreenBareCommandCapture, exactCodexFullscreenSlashComposerCapture } from "./codex-fullscreen-composer-proof.js";
+import { exactCodexReadyStyledComposerCapture, stripTerminalEscapeSequences } from "./terminal-native-inspection-bridge.js";
+import { codexActiveWriterViewerVisible, codexBlockingModalVisible, inspectCodexAsyncQuestionInputMode } from "./terminal-composer-classifier.js";
+import { inspectNativeQuestionnaire } from "./terminal-questionnaire-adapter.js";
+import { TerminalPermissionInputUncertainError, terminalPermissionControlProfileFor } from "./terminal-permission-control.js";
+/** The caller holds the terminal lock; every input consumes a fresh exact frame. */
+export function createTerminalPermissionControlPorts(ports) {
+    if (ports.adapter.agent !== "codex" ||
+        !terminalPermissionControlProfileFor(ports.agentVersion) ||
+        ports.runtime.agentVersion !== ports.agentVersion) {
+        throw new Error("permission control requires an exact matching Codex behavior profile");
+    }
+    let inputPermit;
+    const captureFrame = async () => {
+        await ports.verifyIdentity();
+        const styled = await ports.captureStyled();
+        await ports.verifyIdentity();
+        const owned = observeCodexPermissionSurface(styled);
+        if (owned.state === "picker" || owned.state === "full_access_confirmation")
+            return owned;
+        const fingerprint = createHash("sha256").update(styled).digest("hex");
+        if (owned.state === "ambiguous")
+            return { state: "blocked", fingerprint };
+        const plain = stripTerminalEscapeSequences(styled);
+        const inspected = ports.adapter.inspectScreen({ screen: plain, runtime: ports.runtime });
+        const question = inspectNativeQuestionnaire({ agent: "codex", version: ports.agentVersion, screen: styled });
+        const asyncMode = inspectCodexAsyncQuestionInputMode(styled);
+        if (inspected.approval.blocked || inspected.activity.state === "working" ||
+            inspected.activity.state === "awaiting_approval" || codexBlockingModalVisible(styled) ||
+            question.status !== "none" || codexActiveWriterViewerVisible(styled) ||
+            asyncMode !== "absent")
+            return { state: "blocked", fingerprint };
+        // Native slash completions intentionally replace the idle shortcut footer,
+        // so the general activity classifier reports unknown. Their exact styled
+        // command grammar is the input proof; positive activity still blocks above.
+        const command = exactCodexFullscreenSlashComposerCapture(styled, "/permissions", ["› /permissions  choose what Codex is allowed to do"], true, ports.agentVersion);
+        if (command)
+            return { state: "command", fingerprint: command.digest };
+        const bare = exactCodexFullscreenBareCommandCapture(styled, "/permissions", ports.agentVersion);
+        if (bare)
+            return { state: "bare_command", fingerprint: bare.digest };
+        const empty = exactCodexReadyStyledComposerCapture(styled, ports.agentVersion);
+        return empty && inspected.activity.state === "idle"
+            ? { state: "idle", fingerprint: empty.digest } : { state: "blocked", fingerprint };
+    };
+    const capture = async () => {
+        inputPermit = undefined;
+        const observed = await captureFrame();
+        inputPermit = observed;
+        return observed;
+    };
+    return {
+        capture, inspectStatus: ports.inspectStatus, sleep: ports.sleep,
+        input: async (action, expected) => {
+            const permitted = inputPermit === expected;
+            inputPermit = undefined;
+            if (!permitted)
+                throw new Error("permission input requires one fresh operation-local surface permit");
+            if (!inputAllowed(action, expected))
+                throw new Error("permission input is not authorized by the observed native surface");
+            await ports.beforeInput();
+            const fresh = await captureFrame();
+            if (fresh.state !== expected.state || fresh.fingerprint !== expected.fingerprint ||
+                !inputAllowed(action, fresh)) {
+                throw new Error("native permission surface changed immediately before terminal input");
+            }
+            await ports.verifyIdentity();
+            try {
+                if (action === "command")
+                    await ports.sendText("/permissions");
+                else
+                    await ports.sendKeys([action]);
+            }
+            catch (error) {
+                throw new TerminalPermissionInputUncertainError("native permission input outcome is uncertain; do not retry automatically", { cause: error });
+            }
+        }
+    };
+}
+function inputAllowed(action, frame) {
+    switch (action) {
+        case "command": return frame.state === "idle";
+        case "Up":
+        case "Down": return frame.state === "picker" || frame.state === "full_access_confirmation";
+        case "Escape": return frame.state === "picker" || frame.state === "command";
+        case "C-u": return frame.state === "bare_command";
+        case "C-m": return frame.state === "command" || frame.state === "picker" ||
+            frame.state === "full_access_confirmation" && frame.selectedIndex === 0;
+    }
+}
+//# sourceMappingURL=terminal-permission-control-bridge.js.map

package/dist/src/terminal-permission-control-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-permission-control-bridge.js","sourceRoot":"","sources":["../../src/terminal-permission-control-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EACL,sCAAsC,EACtC,wCAAwC,EACzC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,oCAAoC,EACpC,4BAA4B,EAC7B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,kCAAkC,EACnC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEjF,OAAO,EACL,qCAAqC,EACrC,mCAAmC,EAIpC,MAAM,kCAAkC,CAAC;AAe1C,oFAAoF;AACpF,MAAM,UAAU,oCAAoC,CAClD,KAA8B;IAE9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO;QAC/B,CAAC,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC;QACxD,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,WAA0C,CAAC;IAC/C,MAAM,YAAY,GAAG,KAAK,IAAgC,EAAE;QAC1D,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,0BAA0B;YAAE,OAAO,KAAK,CAAC;QACzF,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7G,MAAM,SAAS,GAAG,kCAAkC,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;YACpE,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,mBAAmB,IAAI,yBAAyB,CAAC,MAAM,CAAC;YACrF,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,8BAA8B,CAAC,MAAM,CAAC;YACpE,SAAS,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,OAAO,GAAG,wCAAwC,CAAC,MAAM,EAAE,cAAc,EAC7E,CAAC,oDAAoD,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACpF,IAAI,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,sCAAsC,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAChG,IAAI,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,oCAAoC,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/E,OAAO,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,MAAM;YACjD,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACvF,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,IAAgC,EAAE;QACrD,WAAW,GAAG,SAAS,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,WAAW,GAAG,QAAQ,CAAC;QACvB,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,OAAO;QACL,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QAC/D,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YAChC,MAAM,SAAS,GAAG,WAAW,KAAK,QAAQ,CAAC;YAC3C,WAAW,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;YACtG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YAC1H,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;gBAC5E,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;;oBAC1D,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,qCAAqC,CAC7C,0EAA0E,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAC7F,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,MAA8D,EAAE,KAAwB;IAExF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,SAAS,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC;QAC9C,KAAK,IAAI,CAAC;QAAC,KAAK,MAAM,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,0BAA0B,CAAC;QACtG,KAAK,QAAQ,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;QAC5E,KAAK,KAAK,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC;QAClD,KAAK,KAAK,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ;YACtE,KAAK,CAAC,KAAK,KAAK,0BAA0B,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}

package/dist/src/terminal-permission-control-cli-adapter.d.ts

@@ -0,0 +1,31 @@
+import type { FileLockAcquisitionOptions } from "./file-lock-cli-adapter.js";
+import type { TerminalNativeControlCliOptions as NativeLifecycleCliOptions, TerminalNativeControlCliBoundary } from "./terminal-native-control-cli-contract.js";
+import type { ResolvedTerminalConversation } from "./terminal-agent-bridge.js";
+import type { TerminalControlRef, TerminalRuntimeIdentity } from "./terminal-agent-adapter.js";
+import type { TerminalRuntimeCliAdapter } from "./terminal-runtime-cli-adapter.js";
+export interface TerminalPermissionControlCliPorts {
+    readonly runtime: {
+        forOptions(options: NativeLifecycleCliOptions): TerminalRuntimeCliAdapter;
+        physicalProcessIncarnation(pid: number): {
+            processUuid: string;
+            processBirth: string;
+        };
+        physicalRuntime(terminal: ResolvedTerminalConversation): TerminalRuntimeIdentity;
+    };
+    readonly lifecycle: TerminalNativeControlCliBoundary;
+    readonly state: {
+        storeDir(options: NativeLifecycleCliOptions): string;
+        inspectStore(storeDir: string): {
+            writable: boolean;
+        };
+        acquireTerminal(storeDir: string, terminalControl: TerminalControlRef, options?: FileLockAcquisitionOptions): () => void;
+    };
+    readonly output: {
+        print(value: unknown): void;
+    };
+}
+/** Closed native permission operations; no task, Session, or Watch is created. */
+export declare function createTerminalPermissionControlCliAdapter(ports: TerminalPermissionControlCliPorts): {
+    runPermissionOptions(options: NativeLifecycleCliOptions): Promise<void>;
+    runSetPermissions(options: NativeLifecycleCliOptions): Promise<void>;
+};

package/dist/src/terminal-permission-control-cli-adapter.js

@@ -0,0 +1,152 @@
+import { terminalPermissionControlBindingToken, terminalPermissionControlProfileFor } from "./terminal-permission-control.js";
+import { nonBlankString } from "./value-guards.js";
+/** Closed native permission operations; no task, Session, or Watch is created. */
+export function createTerminalPermissionControlCliAdapter(ports) {
+    const app = new TerminalPermissionControlCliApplication(ports);
+    return Object.freeze({
+        runPermissionOptions: (options) => app.runPermissionOptions(options),
+        runSetPermissions: (options) => app.runSetPermissions(options)
+    });
+}
+class TerminalPermissionControlCliApplication {
+    ports;
+    constructor(ports) {
+        this.ports = ports;
+    }
+    async runPermissionOptions(options) {
+        const token = validateOptions(options, false);
+        const result = await this.withPrepared(options, token, async (context) => {
+            const catalog = await context.bridge.permissionOptions(context.terminal.terminalControl, context.profile.agentVersion, {
+                runtime: context.runtime,
+                beforeInput: () => this.assertFreshBoundary(context)
+            });
+            await this.assertFreshBoundary(context);
+            return {
+                terminal_id: context.terminal.conversationId,
+                agent: catalog.agent,
+                agent_version: catalog.agentVersion,
+                behavior_profile: catalog.behaviorProfile,
+                scope: catalog.scope,
+                current: catalog.current,
+                choices: catalog.choices.map((choice) => ({
+                    id: choice.id,
+                    label: choice.label,
+                    description: choice.description
+                })),
+                catalog_fingerprint: catalog.catalogFingerprint,
+                available_actions: {
+                    set_permissions: {
+                        tool: "agent_knock_knock_set_permissions",
+                        arguments: {
+                            terminal_id: context.terminal.conversationId,
+                            expected_binding_token: context.expectedBindingToken,
+                            expected_catalog_fingerprint: catalog.catalogFingerprint
+                        }
+                    }
+                }
+            };
+        });
+        this.ports.output.print(result);
+    }
+    async runSetPermissions(options) {
+        const token = validateOptions(options, true);
+        const mode = required(options.mode, "--mode is required");
+        if (!/^[a-z][a-z0-9_-]{0,63}$/u.test(mode)) {
+            throw new Error("--mode must be one semantic id from permission-options");
+        }
+        const fingerprint = required(options.expectedCatalogFingerprint, "--expected-catalog-fingerprint is required");
+        if (!/^[0-9a-f]{64}$/u.test(fingerprint)) {
+            throw new Error("--expected-catalog-fingerprint must come from permission-options");
+        }
+        const result = await this.withPrepared(options, token, async (context) => {
+            const switched = await context.bridge.setPermissions(context.terminal.terminalControl, context.profile.agentVersion, mode, fingerprint, {
+                runtime: context.runtime,
+                beforeInput: () => this.assertFreshBoundary(context)
+            });
+            return {
+                terminal_id: context.terminal.conversationId,
+                agent: "codex",
+                agent_version: context.profile.agentVersion,
+                behavior_profile: context.profile.behaviorProfile,
+                outcome: switched.outcome,
+                requested: switched.requested,
+                scope: switched.scope,
+                defaults_changed: switched.defaultsChanged,
+                ...(switched.effective ? { effective: switched.effective } : {}),
+                do_not_retry: switched.doNotRetry,
+                ...(switched.reason ? { reason: switched.reason } : {})
+            };
+        });
+        this.ports.output.print(result);
+    }
+    async withPrepared(options, expectedBindingToken, operation) {
+        const storeDir = this.ports.state.storeDir(options);
+        if (!this.ports.state.inspectStore(storeDir).writable) {
+            throw new Error("permission control requires a compatible AKK Store");
+        }
+        const initial = await this.ports.lifecycle.resolveLifecycleTerminal(options);
+        if (initial.agent !== "codex") {
+            throw new Error("native permission control is supported only for Codex");
+        }
+        const release = this.ports.state.acquireTerminal(storeDir, initial.terminalControl, { timeoutMs: 30_000 });
+        try {
+            const facade = this.ports.runtime.forOptions(options);
+            const bridge = facade.createBridge();
+            const terminal = await bridge.resolveStoredTerminal("codex", initial.pid, initial.terminalControl, this.ports.runtime.physicalRuntime(initial));
+            this.ports.lifecycle.assertSameInspectionTerminal(initial, terminal, "while waiting for permission-control ownership");
+            const version = facade.agentVersionForRunningProcess("codex", terminal.pid);
+            const profile = version ? terminalPermissionControlProfileFor(version) : undefined;
+            if (!profile)
+                throw new Error("Codex has no verified native permission-control profile");
+            const runtime = { ...this.ports.runtime.physicalRuntime(terminal), agentVersion: version };
+            const context = { options, terminal, bridge, runtime, profile, expectedBindingToken };
+            await this.assertFreshBoundary(context);
+            const status = await bridge.status("codex", terminal.terminalControl, { runtime });
+            if (status.approval_state.scanned !== true) {
+                throw new Error("permission control requires a fresh approval scan");
+            }
+            this.ports.lifecycle.assertInspectionReady({ options, terminal, terminalStatus: status });
+            return await operation(context);
+        }
+        finally {
+            release();
+        }
+    }
+    async assertFreshBoundary(context) {
+        const terminal = await context.bridge.resolveStoredTerminal("codex", context.terminal.pid, context.terminal.terminalControl, context.runtime);
+        this.ports.lifecycle.assertSameInspectionTerminal(context.terminal, terminal, "before permission-control input");
+        const version = this.ports.runtime.forOptions(context.options)
+            .agentVersionForRunningProcess("codex", terminal.pid);
+        const incarnation = this.ports.runtime.physicalProcessIncarnation(terminal.pid);
+        if (version !== context.profile.agentVersion ||
+            terminalPermissionControlBindingToken({
+                terminalId: terminal.conversationId,
+                terminalControl: terminal.terminalControl,
+                pid: terminal.pid,
+                workspace: required(terminal.terminalControl.currentPath, "terminal cwd is unavailable"),
+                ...incarnation,
+                agentVersion: context.profile.agentVersion,
+                behaviorProfile: context.profile.behaviorProfile
+            }) !== context.expectedBindingToken) {
+            throw new Error("permission-control terminal binding or version changed; refresh AKK list");
+        }
+        this.ports.lifecycle.assertInspectionReady({ options: context.options, terminal });
+        this.ports.lifecycle.assertForegroundHasNoLifecycleTransition(context.options, terminal);
+    }
+}
+function validateOptions(options, set) {
+    const forbidden = ["command", "message", "request", "scope", "keys", "index", "model", "reasoningEffort"];
+    if (!set)
+        forbidden.push("mode", "expectedCatalogFingerprint");
+    if (forbidden.some((name) => options[name] !== undefined)) {
+        throw new Error("permission control accepts only typed permission fields, never raw commands, keys, indexes, or scope");
+    }
+    return required(options.expectedBindingToken, "--expected-binding-token is required");
+}
+function required(value, message) {
+    const text = nonBlankString(value);
+    if (!text)
+        throw new Error(message);
+    return text;
+}
+//# sourceMappingURL=terminal-permission-control-cli-adapter.js.map

package/dist/src/terminal-permission-control-cli-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-permission-control-cli-adapter.js","sourceRoot":"","sources":["../../src/terminal-permission-control-cli-adapter.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,qCAAqC,EACrC,mCAAmC,EAEpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAiCnD,kFAAkF;AAClF,MAAM,UAAU,yCAAyC,CACvD,KAAwC;IAKxC,MAAM,GAAG,GAAG,IAAI,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC;QACpE,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,uCAAuC;IACd,KAAK;IAAlC,YAA6B,KAAwC;qBAAxC,KAAK;IAAsC,CAAC;IAEzE,KAAK,CAAC,oBAAoB,CAAC,OAAkC;QAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,iBAAiB,CACpD,OAAO,CAAC,QAAQ,CAAC,eAAe,EAChC,OAAO,CAAC,OAAO,CAAC,YAAY,EAC5B;gBACE,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;aACrD,CACF,CAAC;YACF,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO;gBACL,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAC5C,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,YAAY;gBACnC,gBAAgB,EAAE,OAAO,CAAC,eAAe;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACxC,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;iBAChC,CAAC,CAAC;gBACH,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;gBAC/C,iBAAiB,EAAE;oBACjB,eAAe,EAAE;wBACf,IAAI,EAAE,mCAAmC;wBACzC,SAAS,EAAE;4BACT,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc;4BAC5C,sBAAsB,EAAE,OAAO,CAAC,oBAAoB;4BACpD,4BAA4B,EAAE,OAAO,CAAC,kBAAkB;yBACzD;qBACF;iBACF;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAkC;QACxD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAC1D,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,0BAA0B,EAC7D,4CAA4C,CAAC,CAAC;QAChD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,cAAc,CAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,EAChC,OAAO,CAAC,OAAO,CAAC,YAAY,EAC5B,IAAI,EACJ,WAAW,EACX;gBACE,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;aACrD,CACF,CAAC;YACF,OAAO;gBACL,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAC5C,KAAK,EAAE,OAAO;gBACd,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;gBAC3C,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe;gBACjD,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,gBAAgB,EAAE,QAAQ,CAAC,eAAe;gBAC1C,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,YAAY,EAAE,QAAQ,CAAC,UAAU;gBACjC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,OAAkC,EAClC,oBAA4B,EAC5B,SAA4D;QAE5D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAC9C,QAAQ,EAAE,OAAO,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CACzD,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,qBAAqB,CACjD,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,eAAe,EAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAC5C,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,4BAA4B,CAC/C,OAAO,EAAE,QAAQ,EAAE,gDAAgD,CACpE,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,6BAA6B,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;YAC3F,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;YACtF,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACnF,IAAI,MAAM,CAAC,cAAc,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1F,OAAO,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAiC;QACzD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,qBAAqB,CACzD,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,OAAO,CACjF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,4BAA4B,CAC/C,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,iCAAiC,CAC9D,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;aAC3D,6BAA6B,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChF,IAAI,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,YAAY;YACxC,qCAAqC,CAAC;gBACpC,UAAU,EAAE,QAAQ,CAAC,cAAc;gBACnC,eAAe,EAAE,QAAQ,CAAC,eAAe;gBACzC,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,EAAE,6BAA6B,CAAC;gBACxF,GAAG,WAAW;gBACd,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY;gBAC1C,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe;aACjD,CAAC,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,wCAAwC,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3F,CAAC;CACF;AAED,SAAS,eAAe,CAAC,OAAkC,EAAE,GAAY;IACvE,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC1G,IAAI,CAAC,GAAG;QAAE,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAC/D,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,OAAe;IAC/C,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/terminal-permission-control-list-projection.d.ts

@@ -0,0 +1,23 @@
+import type { ExecutorKind } from "./executors.js";
+import type { ActiveTerminalProcess, TerminalControlRef } from "./terminal-agent-adapter.js";
+import type { TerminalListTerminalFacts } from "./terminal-list-facts.js";
+export declare function permissionControlCapability(agent: ExecutorKind, version?: string): {
+    status: string;
+    agentVersion: string;
+    behaviorProfile: string;
+    scope: "current_session";
+    reason?: undefined;
+} | {
+    agentVersion?: undefined;
+    behaviorProfile?: undefined;
+    scope?: undefined;
+    status: string;
+    reason: string;
+};
+/** Project existing fresh List facts without another terminal read or identity guess. */
+export declare function renderPermissionControlListActions(input: {
+    session: ActiveTerminalProcess;
+    terminalControl: TerminalControlRef;
+    facts: TerminalListTerminalFacts;
+    renderedActions: Record<string, unknown>;
+}): Record<string, unknown>;

package/dist/src/terminal-permission-control-list-projection.js

@@ -0,0 +1,47 @@
+import { renderTerminalPermissionControlActions } from "./terminal-list-renderer.js";
+import { terminalPermissionControlAvailability } from "./terminal-permission-control-availability.js";
+import { terminalPermissionControlProfileFor } from "./terminal-permission-control.js";
+export function permissionControlCapability(agent, version) {
+    const profile = agent === "codex" && version
+        ? terminalPermissionControlProfileFor(version)
+        : undefined;
+    return profile
+        ? {
+            status: "supported",
+            agentVersion: profile.agentVersion,
+            behaviorProfile: profile.behaviorProfile,
+            scope: profile.scope
+        }
+        : {
+            status: "unsupported",
+            reason: "No verified native permission-control profile for this agent version."
+        };
+}
+/** Project existing fresh List facts without another terminal read or identity guess. */
+export function renderPermissionControlListActions(input) {
+    const { facts, session } = input;
+    return renderTerminalPermissionControlActions({
+        renderedActions: input.renderedActions,
+        availability: terminalPermissionControlAvailability({
+            exactTerminalRow: true,
+            terminalId: facts.physical.terminalId,
+            processState: "active",
+            agent: session.agent,
+            pid: session.pid,
+            terminalControl: input.terminalControl,
+            processUuid: facts.physical.processIncarnation?.processUuid,
+            processBirth: facts.physical.processIncarnation?.processBirth,
+            agentVersion: facts.runtime.agentVersion,
+            approvalScanned: facts.status.projected.approval_state.scanned === true,
+            approvalBlocked: facts.status.projected.approval_state.blocked === true,
+            terminalHasInteraction: facts.status.hasInteraction,
+            terminalHasBlockingTurn: facts.store.terminalHasBlockingTurn,
+            hasOrphanedDispatch: facts.store.hasOrphanedDispatch,
+            inputOwnerBlocked: facts.composer.inputOwnerBlocked,
+            exactEmptyComposer: facts.composer.automatedInputComposerReady,
+            screenState: facts.status.projected.screen_state,
+            activityState: facts.status.projected.activity_state
+        })
+    });
+}
+//# sourceMappingURL=terminal-permission-control-list-projection.js.map

package/dist/src/terminal-permission-control-list-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-permission-control-list-projection.js","sourceRoot":"","sources":["../../src/terminal-permission-control-list-projection.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sCAAsC,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,qCAAqC,EAAE,MAC9C,+CAA+C,CAAC;AAClD,OAAO,EAAE,mCAAmC,EAAE,MAC5C,kCAAkC,CAAC;AAErC,MAAM,UAAU,2BAA2B,CAAC,KAAmB,EAAE,OAAgB;IAC/E,MAAM,OAAO,GAAG,KAAK,KAAK,OAAO,IAAI,OAAO;QAC1C,CAAC,CAAC,mCAAmC,CAAC,OAAO,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,OAAO;QACZ,CAAC,CAAC;YACE,MAAM,EAAE,WAAW;YACnB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB;QACH,CAAC,CAAC;YACE,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,uEAAuE;SAChF,CAAC;AACR,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kCAAkC,CAAC,KAKlD;IACC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACjC,OAAO,sCAAsC,CAAC;QAC5C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,qCAAqC,CAAC;YAClD,gBAAgB,EAAE,IAAI;YACtB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;YACrC,YAAY,EAAE,QAAQ;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,kBAAkB,EAAE,WAAW;YAC3D,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,kBAAkB,EAAE,YAAY;YAC7D,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;YACxC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,KAAK,IAAI;YACvE,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,KAAK,IAAI;YACvE,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;YACnD,uBAAuB,EAAE,KAAK,CAAC,KAAK,CAAC,uBAAuB;YAC5D,mBAAmB,EAAE,KAAK,CAAC,KAAK,CAAC,mBAAmB;YACpD,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,iBAAiB;YACnD,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC,2BAA2B;YAC9D,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY;YAChD,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc;SACrD,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/src/terminal-permission-control-runtime.d.ts

@@ -0,0 +1,28 @@
+import type { TerminalAgentAdapter, TerminalRuntimeIdentity, TerminalControlRef } from "./terminal-agent-adapter.js";
+import type { TerminalControlProvider } from "./terminal-control-provider.js";
+import { type TerminalCodexStatusProbeResult, type TerminalNativeInspectionOptions } from "./terminal-native-inspection-bridge.js";
+import { type TerminalPermissionCatalog, type TerminalPermissionSwitchResult } from "./terminal-permission-control.js";
+export interface TerminalPermissionControlBridgeOptions {
+    runtime?: TerminalRuntimeIdentity;
+    beforeInput?: () => void | Promise<void>;
+}
+interface PermissionRuntimePorts {
+    provider: TerminalControlProvider;
+    adapter: TerminalAgentAdapter;
+    verifyIdentity(control: TerminalControlRef, runtime: TerminalRuntimeIdentity): Promise<TerminalControlRef>;
+    submitStatus(control: TerminalControlRef, version: string, options: TerminalNativeInspectionOptions): Promise<TerminalCodexStatusProbeResult>;
+    captureStatus(control: TerminalControlRef, runtime: TerminalRuntimeIdentity, submission: TerminalCodexStatusProbeResult): Promise<{
+        screen: string;
+        emptyComposer: boolean;
+    }>;
+    sleep(milliseconds: number): Promise<void>;
+}
+/** Native permission UI composition, isolated from task execution and app-server writes. */
+export declare class TerminalPermissionControlRuntime {
+    private readonly ports;
+    constructor(ports: PermissionRuntimePorts);
+    permissionOptions: (control: TerminalControlRef, version: string, options: TerminalPermissionControlBridgeOptions) => Promise<TerminalPermissionCatalog>;
+    setPermissions: (control: TerminalControlRef, version: string, mode: string, fingerprint: string, options: TerminalPermissionControlBridgeOptions) => Promise<TerminalPermissionSwitchResult>;
+    private permissionControlPorts;
+}
+export {};

package/dist/src/terminal-permission-control-runtime.js

@@ -0,0 +1,88 @@
+import { createHash } from "node:crypto";
+import { sameTerminalControlIncarnation } from "./terminal-control-ref.js";
+import { assertTerminalMutationCapabilities, stripTerminalEscapeSequences, NativeInspectionSubmissionError } from "./terminal-native-inspection-bridge.js";
+import { createTerminalPermissionControlPorts } from "./terminal-permission-control-bridge.js";
+import { discoverTerminalPermissionOptions, switchTerminalPermissions, terminalPermissionControlProfileFor, permissionModeFromStatus, TerminalPermissionInputUncertainError } from "./terminal-permission-control.js";
+/** Native permission UI composition, isolated from task execution and app-server writes. */
+export class TerminalPermissionControlRuntime {
+    ports;
+    constructor(ports) {
+        this.ports = ports;
+    }
+    permissionOptions = async (control, version, options) => {
+        const profile = terminalPermissionControlProfileFor(version);
+        if (!profile)
+            throw new Error("Codex has no verified permission-control profile");
+        return discoverTerminalPermissionOptions(profile, this.permissionControlPorts(control, version, options));
+    };
+    setPermissions = async (control, version, mode, fingerprint, options) => {
+        const profile = terminalPermissionControlProfileFor(version);
+        if (!profile)
+            throw new Error("Codex has no verified permission-control profile");
+        return switchTerminalPermissions(profile, mode, fingerprint, this.permissionControlPorts(control, version, options));
+    };
+    permissionControlPorts(control, version, options) {
+        if (!options.beforeInput || !options.runtime?.pid) {
+            throw new Error("permission control requires exact physical identity and an in-lock input fence");
+        }
+        assertTerminalMutationCapabilities({
+            provider: this.ports.provider, terminal: this.ports.provider.endpoint(control),
+            semantic: ["send_keys", "screen_status"],
+            transport: ["stable_resource_resolution", "screen_capture", "ansi_capture", "text_delivery", "key_delivery"]
+        });
+        const beforeInput = options.beforeInput;
+        const runtime = { ...options.runtime, agentVersion: version };
+        const adapter = this.ports.adapter;
+        const verifyIdentity = async () => {
+            const verified = await this.ports.verifyIdentity(control, runtime);
+            if (!sameTerminalControlIncarnation(control, verified)) {
+                throw new Error("permission-control terminal incarnation changed");
+            }
+        };
+        return createTerminalPermissionControlPorts({
+            agentVersion: version, runtime, adapter, verifyIdentity, beforeInput,
+            captureStyled: () => this.ports.provider.capture(this.ports.provider.endpoint(control), {
+                scrollbackLines: 160, preserveEscapes: true
+            }),
+            sendText: (text) => this.ports.provider.sendText(this.ports.provider.endpoint(control), text),
+            sendKeys: (keys) => this.ports.provider.sendKeys(this.ports.provider.endpoint(control), keys),
+            sleep: this.ports.sleep,
+            inspectStatus: async () => {
+                await beforeInput();
+                let submitted = false;
+                try {
+                    const submission = await this.ports.submitStatus(control, version, {
+                        runtime, beforeEnter: beforeInput
+                    });
+                    submitted = true;
+                    for (let attempt = 0; attempt < 40; attempt += 1) {
+                        const frame = await this.ports.captureStatus(control, runtime, submission);
+                        const observed = adapter.observeNativeInspection?.({
+                            operation: { kind: "status" }, expectedAgentVersion: version,
+                            screen: stripTerminalEscapeSequences(frame.screen),
+                            previousScreenFingerprint: submission.preEnterScreenDigest
+                        });
+                        if (frame.emptyComposer && observed?.status === "observed" && observed.nativeThreadId &&
+                            createHash("sha256").update(frame.screen).digest("hex") !== submission.observationBaselineDigest) {
+                            const permission = observed.result?.fields.filter((field) => field.name === "Permissions");
+                            const mode = permission?.length === 1 ? permissionModeFromStatus(permission[0].value) : undefined;
+                            if (!mode)
+                                throw new Error("Codex /status does not expose a supported exact permission mode");
+                            await verifyIdentity();
+                            return { threadId: observed.nativeThreadId, mode };
+                        }
+                        await this.ports.sleep(100);
+                    }
+                    throw new Error("Codex permission control could not prove a fresh native /status result; do not retry automatically");
+                }
+                catch (error) {
+                    if (submitted || error instanceof NativeInspectionSubmissionError && error.doNotRetry) {
+                        throw new TerminalPermissionInputUncertainError("native permission status probe is uncertain; inspect the terminal and do not retry automatically", { cause: error });
+                    }
+                    throw error;
+                }
+            }
+        });
+    }
+}
+//# sourceMappingURL=terminal-permission-control-runtime.js.map

package/dist/src/terminal-permission-control-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-permission-control-runtime.js","sourceRoot":"","sources":["../../src/terminal-permission-control-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,kCAAkC,EAAE,4BAA4B,EAAE,+BAA+B,EAC7B,MAAM,wCAAwC,CAAC;AAC5H,OAAO,EAAE,oCAAoC,EAAE,MAAM,yCAAyC,CAAC;AAC/F,OAAO,EAAE,iCAAiC,EAAE,yBAAyB,EACnE,mCAAmC,EAAE,wBAAwB,EAAE,qCAAqC,EAEhC,MAAM,kCAAkC,CAAC;AAe/G,4FAA4F;AAC5F,MAAM,OAAO,gCAAgC;IACd,KAAK;IAAlC,YAA6B,KAA6B;qBAA7B,KAAK;IAA2B,CAAC;IAC9D,iBAAiB,GAAG,KAAK,EACvB,OAA2B,EAAE,OAAe,EAAE,OAA+C,EACzD,EAAE;QACtC,MAAM,OAAO,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClF,OAAO,iCAAiC,CAAC,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5G,CAAC,CAAA;IAED,cAAc,GAAG,KAAK,EACpB,OAA2B,EAAE,OAAe,EAAE,IAAY,EAC1D,WAAmB,EAAE,OAA+C,EAC3B,EAAE;QAC3C,MAAM,OAAO,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClF,OAAO,yBAAyB,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACvH,CAAC,CAAA;IAEO,sBAAsB,CAC5B,OAA2B,EAAE,OAAe,EAAE,OAA+C;QAE7F,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,kCAAkC,CAAC;YACjC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC9E,QAAQ,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;YACxC,SAAS,EAAE,CAAC,4BAA4B,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,CAAC;SAC7G,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACnC,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnE,IAAI,CAAC,8BAA8B,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CAAC;QACF,OAAO,oCAAoC,CAAC;YAC1C,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW;YACpE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;gBACtF,eAAe,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI;aAC5C,CAAC;YACF,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;YAC7F,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;YAC7F,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;YACvB,aAAa,EAAE,KAAK,IAAuC,EAAE;gBAC3D,MAAM,WAAW,EAAE,CAAC;gBACpB,IAAI,SAAS,GAAG,KAAK,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;wBACjE,OAAO,EAAE,WAAW,EAAE,WAAW;qBAClC,CAAC,CAAC;oBACH,SAAS,GAAG,IAAI,CAAC;oBACjB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;wBACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;wBAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;4BACjD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,oBAAoB,EAAE,OAAO;4BAC5D,MAAM,EAAE,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC;4BAClD,yBAAyB,EAAE,UAAU,CAAC,oBAAoB;yBAC3D,CAAC,CAAC;wBACH,IAAI,KAAK,CAAC,aAAa,IAAI,QAAQ,EAAE,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,cAAc;4BACjF,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,yBAAyB,EAAE,CAAC;4BACrG,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;4BAC3F,MAAM,IAAI,GAAG,UAAU,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;4BACnG,IAAI,CAAC,IAAI;gCAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;4BAC9F,MAAM,cAAc,EAAE,CAAC;4BACvB,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;wBACrD,CAAC;wBACD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC9B,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;gBACxH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,SAAS,IAAI,KAAK,YAAY,+BAA+B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;wBACtF,MAAM,IAAI,qCAAqC,CAC7C,kGAAkG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CACrH,CAAC;oBACJ,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CAEF"}

package/dist/src/terminal-permission-control.d.ts

@@ -0,0 +1,69 @@
+import { type TerminalControlRef } from "./terminal-control-ref.js";
+import type { CodexPermissionSurface } from "./codex-permission-surface.js";
+export interface TerminalPermissionControlProfile {
+    readonly agentVersion: string;
+    readonly behaviorProfile: string;
+    readonly scope: "current_session";
+}
+/** Permission writes have their own reviewed UI contract, separate from reads/model control. */
+export declare function terminalPermissionControlProfileFor(version: string): TerminalPermissionControlProfile | undefined;
+export declare function terminalPermissionControlBindingToken(value: {
+    terminalId: string;
+    terminalControl: TerminalControlRef;
+    pid: number;
+    workspace: string;
+    processUuid: string;
+    processBirth: string;
+    agentVersion: string;
+    behaviorProfile: string;
+}): string;
+export interface TerminalPermissionChoice {
+    readonly id: string;
+    readonly label: string;
+    readonly description: string;
+}
+export interface TerminalPermissionCatalog {
+    readonly agent: "codex";
+    readonly agentVersion: string;
+    readonly behaviorProfile: string;
+    readonly scope: "current_session";
+    readonly current: string;
+    readonly choices: readonly TerminalPermissionChoice[];
+    readonly catalogFingerprint: string;
+}
+export interface TerminalPermissionSwitchResult {
+    readonly outcome: "changed" | "already_effective" | "uncertain";
+    readonly requested: {
+        readonly mode: string;
+    };
+    readonly effective?: {
+        readonly mode: string;
+    };
+    readonly scope: "current_session";
+    readonly defaultsChanged: false;
+    readonly doNotRetry: boolean;
+    readonly reason?: string;
+}
+export interface TerminalPermissionStatus {
+    readonly threadId: string;
+    readonly mode: string;
+}
+export type PermissionCapture = {
+    readonly state: "idle" | "command" | "bare_command" | "blocked";
+    readonly fingerprint: string;
+} | Extract<CodexPermissionSurface, {
+    state: "picker" | "full_access_confirmation";
+}>;
+export interface TerminalPermissionControlPorts {
+    capture(): Promise<PermissionCapture>;
+    inspectStatus(): Promise<TerminalPermissionStatus>;
+    input(action: "command" | "Up" | "Down" | "C-m" | "Escape" | "C-u", expected: PermissionCapture): Promise<void>;
+    sleep(milliseconds: number): Promise<void>;
+}
+/** A transport failure may have delivered input; no cleanup or retry follows it. */
+export declare class TerminalPermissionInputUncertainError extends Error {
+    readonly doNotRetry = true;
+}
+export declare function permissionModeFromStatus(value: string): string | undefined;
+export declare function discoverTerminalPermissionOptions(profile: TerminalPermissionControlProfile, ports: TerminalPermissionControlPorts): Promise<TerminalPermissionCatalog>;
+export declare function switchTerminalPermissions(profile: TerminalPermissionControlProfile, mode: string, expectedCatalogFingerprint: string, ports: TerminalPermissionControlPorts): Promise<TerminalPermissionSwitchResult>;