@scotthuang/agent-knock-knock 0.13.2 → 0.13.4

package/dist/src/terminal-model-control-bridge.js

@@ -0,0 +1,259 @@
+import { inspectNativeQuestionnaire } from "./terminal-questionnaire-adapter.js";
+import { CODEX_MODEL_CONTROL_AGENT_VERSION, isTerminalModelControlPlanForAgent, terminalModelControlSlashCompletionRows } from "./terminal-model-control.js";
+/**
+ * Bind model-control's semantic transaction to the terminal transport.
+ *
+ * Every input permit below is deliberately operation-local and one-shot. The
+ * factory neither owns terminal locks nor writes Store state: callers retain
+ * those boundaries and the domain state machine retains `beforeInput` timing.
+ */
+export function createTerminalModelControlPorts(input) {
+    const { adapter, plan, runtime, beforeInput, loadCodexCatalog, runtimePorts, classifiers } = input;
+    let claudeModelDialogInputPermit;
+    let codexModelInputPermit;
+    const consumeCodexModelInputPermit = () => {
+        const permit = codexModelInputPermit;
+        codexModelInputPermit = undefined;
+        return permit;
+    };
+    const verifyModelControlTerminalIdentity = async (terminalControl, options) => {
+        const canUseClaudeModelDialog = adapter.agent === "claude" &&
+            isTerminalModelControlPlanForAgent(plan, "claude") &&
+            runtime?.requireExactClaudeAgentRow === true &&
+            runtime.exactClaudeAgentState === "idle";
+        if (options.claudeModelDialog === "require") {
+            if (!canUseClaudeModelDialog) {
+                throw new Error("Claude model-dialog identity cannot be required outside its exact profile");
+            }
+            return runtimePorts.verifyTerminalIdentity(adapter.agent, terminalControl, { ...runtime, exactClaudeAgentState: "status_dialog" });
+        }
+        try {
+            return await runtimePorts.verifyTerminalIdentity(adapter.agent, terminalControl, runtime);
+        }
+        catch (idleError) {
+            if (options.claudeModelDialog !== "allow" ||
+                !canUseClaudeModelDialog) {
+                throw idleError;
+            }
+            try {
+                return await runtimePorts.verifyTerminalIdentity(adapter.agent, terminalControl, { ...runtime, exactClaudeAgentState: "status_dialog" });
+            }
+            catch {
+                // Preserve the original current-snapshot failure. Both attempts use
+                // the same PID, process incarnation, native Session, cwd, and terminal
+                // control fence; the second changes only the exact allowed agents row
+                // state from idle to `waiting` / `dialog open`.
+                throw idleError;
+            }
+        }
+    };
+    const capture = async (captureInput) => {
+        claudeModelDialogInputPermit = undefined;
+        codexModelInputPermit = undefined;
+        const original = captureInput.terminalControl;
+        const verified = await verifyModelControlTerminalIdentity(original, {
+            claudeModelDialog: "allow"
+        });
+        const styledScreen = await runtimePorts.captureStyled(verified);
+        const screen = classifiers.stripEscapes(styledScreen);
+        const inspection = adapter.inspectScreen({ screen, runtime });
+        const modelObservation = adapter.observeModelControl?.(plan, screen);
+        const exactCodexModelSurface = adapter.agent === "codex" &&
+            modelObservation !== undefined &&
+            modelObservation.state !== "none" &&
+            modelObservation.state !== "ambiguous";
+        const exactClaudeModelDialog = adapter.agent === "claude" &&
+            modelObservation?.state === "claude_model_picker";
+        const reverified = await verifyModelControlTerminalIdentity(verified, {
+            claudeModelDialog: exactClaudeModelDialog ? "require" : "forbid"
+        });
+        if (!classifiers.sameIdentity(verified, reverified)) {
+            throw new Error("terminal control identity changed across model-control capture");
+        }
+        if (exactClaudeModelDialog) {
+            claudeModelDialogInputPermit = {
+                terminalControl: reverified,
+                fingerprint: modelObservation.fingerprint
+            };
+        }
+        const codexComposer = adapter.agent === "codex"
+            ? classifiers.currentCodexComposer(styledScreen, captureInput.expectedComposer ?? "", false, false, captureInput.expectedComposer === plan.command
+                ? terminalModelControlSlashCompletionRows(plan)
+                : undefined)
+            : undefined;
+        let codexInputBlocked = false;
+        if (adapter.agent === "codex") {
+            try {
+                const questionnaire = inspectNativeQuestionnaire({
+                    agent: "codex",
+                    version: CODEX_MODEL_CONTROL_AGENT_VERSION,
+                    screen: styledScreen
+                });
+                const asyncQuestionMode = classifiers.inspectCodexAsyncQuestionInputMode(styledScreen);
+                codexInputBlocked = !exactCodexModelSurface && (questionnaire.status !== "none" ||
+                    classifiers.codexActiveWriterViewerVisible(styledScreen) ||
+                    asyncQuestionMode === "expanded" ||
+                    asyncQuestionMode === "ambiguous");
+            }
+            catch {
+                codexInputBlocked = !exactCodexModelSurface;
+            }
+        }
+        const exactEmptyComposer = adapter.agent === "codex"
+            ? codexComposer?.state === "exact_empty"
+            : classifiers.isExactClaudeIdleComposer(screen);
+        const claudeProfiledCommand = adapter.agent === "claude" &&
+            captureInput.expectedComposer === plan.command &&
+            classifiers.exactClaudeModelControlComposer(screen, plan, captureInput.expectedComposer) !== undefined;
+        const claudeBareCommand = adapter.agent === "claude" &&
+            captureInput.expectedComposer !== undefined &&
+            classifiers.exactTerminalComposer("claude", screen, captureInput.expectedComposer) !== undefined;
+        const exactCommandComposer = captureInput.expectedComposer !== undefined && (adapter.agent === "codex"
+            ? codexComposer?.state === "exact_draft"
+            : claudeProfiledCommand || claudeBareCommand);
+        const exactCommandReady = adapter.agent === "codex"
+            ? codexComposer?.state === "exact_draft" &&
+                codexComposer.profiledSlashPopup === true
+            : claudeProfiledCommand;
+        const exactBareCommand = adapter.agent === "codex"
+            ? codexComposer?.state === "exact_draft" &&
+                codexComposer.bareCommand === true
+            : claudeBareCommand && !claudeProfiledCommand;
+        if (adapter.agent === "codex") {
+            const exactModelSurface = modelObservation &&
+                modelObservation.state !== "none" &&
+                modelObservation.state !== "ambiguous"
+                ? {
+                    kind: "model_surface",
+                    fingerprint: modelObservation.fingerprint
+                }
+                : undefined;
+            const exactComposerSurface = codexComposer?.state === "exact_empty"
+                ? {
+                    kind: "composer_empty",
+                    fingerprint: codexComposer.digest
+                }
+                : codexComposer?.state === "exact_draft"
+                    ? {
+                        kind: "composer_command",
+                        fingerprint: codexComposer.digest
+                    }
+                    : undefined;
+            const proof = exactModelSurface ?? exactComposerSurface;
+            if (proof) {
+                codexModelInputPermit = {
+                    terminalControl: reverified,
+                    expectedComposer: captureInput.expectedComposer,
+                    ...proof
+                };
+            }
+        }
+        return {
+            terminalControl: reverified,
+            screen,
+            // The exact profiled picker is the current input owner. Generic
+            // lifecycle/questionnaire detectors may still see stale transcript
+            // markers behind that overlay, so keep their result from vetoing the
+            // model-control state machine. Unknown or partial pickers receive no
+            // such override and remain fail-closed.
+            activityState: exactCodexModelSurface
+                ? "unknown"
+                : inspection.activity.state,
+            approvalBlocked: exactCodexModelSurface
+                ? false
+                : inspection.approval.blocked,
+            exactEmptyComposer,
+            exactCommandReady,
+            exactCommandComposer,
+            exactBareCommand,
+            ...(codexComposer?.state === "exact_draft"
+                ? { exactCommandFingerprint: codexComposer.digest }
+                : {}),
+            inputBlocked: codexInputBlocked
+        };
+    };
+    return {
+        beforeInput,
+        loadCodexCatalog,
+        capture,
+        sendText: async (control, text) => {
+            claudeModelDialogInputPermit = undefined;
+            if (adapter.agent === "codex") {
+                const permit = consumeCodexModelInputPermit();
+                if (!permit || permit.kind !== "composer_empty") {
+                    throw new Error("Codex /model text requires one fresh exact empty-composer permit");
+                }
+                const fresh = await capture({
+                    terminalControl: control,
+                    expectedComposer: permit.expectedComposer
+                });
+                const freshPermit = consumeCodexModelInputPermit();
+                if (!freshPermit ||
+                    freshPermit.kind !== permit.kind ||
+                    freshPermit.fingerprint !== permit.fingerprint ||
+                    !classifiers.sameIdentity(permit.terminalControl, freshPermit.terminalControl) ||
+                    fresh.inputBlocked === true ||
+                    fresh.approvalBlocked ||
+                    fresh.activityState === "working" ||
+                    fresh.activityState === "awaiting_approval" ||
+                    !fresh.exactEmptyComposer) {
+                    throw new Error("the exact Codex empty composer changed before /model text delivery");
+                }
+                await runtimePorts.sendText(freshPermit.terminalControl, text);
+                return;
+            }
+            const verified = await runtimePorts.verifyTerminalIdentity(adapter.agent, control, runtime);
+            await runtimePorts.sendText(verified, text);
+        },
+        sendKeys: async (control, keys) => {
+            const requestedControl = control;
+            if (adapter.agent === "codex") {
+                const permit = consumeCodexModelInputPermit();
+                claudeModelDialogInputPermit = undefined;
+                if (!permit ||
+                    !classifiers.sameIdentity(permit.terminalControl, requestedControl)) {
+                    throw new Error("Codex model-control key requires one fresh exact input-surface permit");
+                }
+                const fresh = await capture({
+                    terminalControl: requestedControl,
+                    expectedComposer: permit.expectedComposer
+                });
+                const freshPermit = consumeCodexModelInputPermit();
+                if (!freshPermit ||
+                    freshPermit.kind !== permit.kind ||
+                    freshPermit.fingerprint !== permit.fingerprint ||
+                    !classifiers.sameIdentity(permit.terminalControl, freshPermit.terminalControl) ||
+                    fresh.inputBlocked === true ||
+                    fresh.approvalBlocked ||
+                    fresh.activityState === "working" ||
+                    fresh.activityState === "awaiting_approval") {
+                    throw new Error("the exact Codex model-control input surface changed before key dispatch");
+                }
+                await runtimePorts.sendKeys(freshPermit.terminalControl, keys);
+                return;
+            }
+            const permit = claudeModelDialogInputPermit;
+            claudeModelDialogInputPermit = undefined;
+            const requireClaudeModelDialog = permit !== undefined &&
+                classifiers.sameIdentity(permit.terminalControl, requestedControl);
+            const verified = await verifyModelControlTerminalIdentity(requestedControl, {
+                claudeModelDialog: requireClaudeModelDialog ? "require" : "forbid"
+            });
+            if (requireClaudeModelDialog) {
+                const styledScreen = await runtimePorts.captureStyled(verified);
+                const screen = classifiers.stripEscapes(styledScreen);
+                const inspection = adapter.inspectScreen({ screen, runtime });
+                const observation = adapter.observeModelControl?.(plan, screen);
+                if (inspection.approval.blocked ||
+                    inspection.activity.state === "working" ||
+                    observation?.state !== "claude_model_picker" ||
+                    observation.fingerprint !== permit?.fingerprint) {
+                    throw new Error("the exact Claude model picker changed before key dispatch");
+                }
+            }
+            await runtimePorts.sendKeys(verified, keys);
+        },
+        sleep: runtimePorts.sleep
+    };
+}
+//# sourceMappingURL=terminal-model-control-bridge.js.map

package/dist/src/terminal-model-control-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-model-control-bridge.js","sourceRoot":"","sources":["../../src/terminal-model-control-bridge.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,0BAA0B,EAAE,MACnC,qCAAqC,CAAC;AACxC,OAAO,EACL,iCAAiC,EACjC,kCAAkC,EAClC,uCAAuC,EAGxC,MAAM,6BAA6B,CAAC;AAgErC;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC7C,KAA2C;IAE3C,MAAM,EACJ,OAAO,EACP,IAAI,EACJ,OAAO,EACP,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACZ,GAAG,KAAK,CAAC;IACV,IAAI,4BAGS,CAAC;IAOd,IAAI,qBAAwD,CAAC;IAC7D,MAAM,4BAA4B,GAChC,GAAsC,EAAE;QACtC,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACrC,qBAAqB,GAAG,SAAS,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEJ,MAAM,kCAAkC,GAAG,KAAK,EAC9C,eAAmC,EACnC,OAEC,EAC4B,EAAE;QAC/B,MAAM,uBAAuB,GAC3B,OAAO,CAAC,KAAK,KAAK,QAAQ;YAC1B,kCAAkC,CAAC,IAAI,EAAE,QAAQ,CAAC;YAClD,OAAO,EAAE,0BAA0B,KAAK,IAAI;YAC5C,OAAO,CAAC,qBAAqB,KAAK,MAAM,CAAC;QAC3C,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;YACJ,CAAC;YACD,OAAO,YAAY,CAAC,sBAAsB,CACxC,OAAO,CAAC,KAAK,EACb,eAAe,EACf,EAAE,GAAG,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,YAAY,CAAC,sBAAsB,CAC9C,OAAO,CAAC,KAAK,EACb,eAAe,EACf,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IACE,OAAO,CAAC,iBAAiB,KAAK,OAAO;gBACrC,CAAC,uBAAuB,EACxB,CAAC;gBACD,MAAM,SAAS,CAAC;YAClB,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,YAAY,CAAC,sBAAsB,CAC9C,OAAO,CAAC,KAAK,EACb,eAAe,EACf,EAAE,GAAG,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,CACvD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,uEAAuE;gBACvE,sEAAsE;gBACtE,gDAAgD;gBAChD,MAAM,SAAS,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAyC,KAAK,EAAE,YAAY,EAAE,EAAE;QAC3E,4BAA4B,GAAG,SAAS,CAAC;QACzC,qBAAqB,GAAG,SAAS,CAAC;QAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,eAAqC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC,QAAQ,EAAE;YAClE,iBAAiB,EAAE,OAAO;SAC3B,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,sBAAsB,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO;YACtD,gBAAgB,KAAK,SAAS;YAC9B,gBAAgB,CAAC,KAAK,KAAK,MAAM;YACjC,gBAAgB,CAAC,KAAK,KAAK,WAAW,CAAC;QACzC,MAAM,sBAAsB,GAAG,OAAO,CAAC,KAAK,KAAK,QAAQ;YACvD,gBAAgB,EAAE,KAAK,KAAK,qBAAqB,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,kCAAkC,CAAC,QAAQ,EAAE;YACpE,iBAAiB,EAAE,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;SACjE,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,IAAI,sBAAsB,EAAE,CAAC;YAC3B,4BAA4B,GAAG;gBAC7B,eAAe,EAAE,UAAU;gBAC3B,WAAW,EAAE,gBAAgB,CAAC,WAAW;aAC1C,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO;YAC7C,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAC9B,YAAY,EACZ,YAAY,CAAC,gBAAgB,IAAI,EAAE,EACnC,KAAK,EACL,KAAK,EACL,YAAY,CAAC,gBAAgB,KAAK,IAAI,CAAC,OAAO;gBAC5C,CAAC,CAAC,uCAAuC,CAAC,IAAI,CAAC;gBAC/C,CAAC,CAAC,SAAS,CACd;YACH,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,0BAA0B,CAAC;oBAC/C,KAAK,EAAE,OAAO;oBACd,OAAO,EAAE,iCAAiC;oBAC1C,MAAM,EAAE,YAAY;iBACrB,CAAC,CAAC;gBACH,MAAM,iBAAiB,GACrB,WAAW,CAAC,kCAAkC,CAAC,YAAY,CAAC,CAAC;gBAC/D,iBAAiB,GAAG,CAAC,sBAAsB,IAAI,CAC7C,aAAa,CAAC,MAAM,KAAK,MAAM;oBAC/B,WAAW,CAAC,8BAA8B,CAAC,YAAY,CAAC;oBACxD,iBAAiB,KAAK,UAAU;oBAChC,iBAAiB,KAAK,WAAW,CAClC,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB,GAAG,CAAC,sBAAsB,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,MAAM,kBAAkB,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO;YAClD,CAAC,CAAC,aAAa,EAAE,KAAK,KAAK,aAAa;YACxC,CAAC,CAAC,WAAW,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,qBAAqB,GAAG,OAAO,CAAC,KAAK,KAAK,QAAQ;YACtD,YAAY,CAAC,gBAAgB,KAAK,IAAI,CAAC,OAAO;YAC9C,WAAW,CAAC,+BAA+B,CACzC,MAAM,EACN,IAAI,EACJ,YAAY,CAAC,gBAAgB,CAC9B,KAAK,SAAS,CAAC;QAClB,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,KAAK,QAAQ;YAClD,YAAY,CAAC,gBAAgB,KAAK,SAAS;YAC3C,WAAW,CAAC,qBAAqB,CAC/B,QAAQ,EACR,MAAM,EACN,YAAY,CAAC,gBAAgB,CAC9B,KAAK,SAAS,CAAC;QAClB,MAAM,oBAAoB,GAAG,YAAY,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAC1E,OAAO,CAAC,KAAK,KAAK,OAAO;YACvB,CAAC,CAAC,aAAa,EAAE,KAAK,KAAK,aAAa;YACxC,CAAC,CAAC,qBAAqB,IAAI,iBAAiB,CAC/C,CAAC;QACF,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO;YACjD,CAAC,CAAC,aAAa,EAAE,KAAK,KAAK,aAAa;gBACtC,aAAa,CAAC,kBAAkB,KAAK,IAAI;YAC3C,CAAC,CAAC,qBAAqB,CAAC;QAC1B,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO;YAChD,CAAC,CAAC,aAAa,EAAE,KAAK,KAAK,aAAa;gBACtC,aAAa,CAAC,WAAW,KAAK,IAAI;YACpC,CAAC,CAAC,iBAAiB,IAAI,CAAC,qBAAqB,CAAC;QAChD,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,iBAAiB,GAAG,gBAAgB;gBACxC,gBAAgB,CAAC,KAAK,KAAK,MAAM;gBACjC,gBAAgB,CAAC,KAAK,KAAK,WAAW;gBACtC,CAAC,CAAC;oBACE,IAAI,EAAE,eAAwB;oBAC9B,WAAW,EAAE,gBAAgB,CAAC,WAAW;iBAC1C;gBACH,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,oBAAoB,GAAG,aAAa,EAAE,KAAK,KAAK,aAAa;gBACjE,CAAC,CAAC;oBACE,IAAI,EAAE,gBAAyB;oBAC/B,WAAW,EAAE,aAAa,CAAC,MAAM;iBAClC;gBACH,CAAC,CAAC,aAAa,EAAE,KAAK,KAAK,aAAa;oBACtC,CAAC,CAAC;wBACE,IAAI,EAAE,kBAA2B;wBACjC,WAAW,EAAE,aAAa,CAAC,MAAM;qBAClC;oBACH,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,KAAK,GAAG,iBAAiB,IAAI,oBAAoB,CAAC;YACxD,IAAI,KAAK,EAAE,CAAC;gBACV,qBAAqB,GAAG;oBACtB,eAAe,EAAE,UAAU;oBAC3B,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;oBAC/C,GAAG,KAAK;iBACT,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,eAAe,EAAE,UAAU;YAC3B,MAAM;YACN,gEAAgE;YAChE,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,wCAAwC;YACxC,aAAa,EAAE,sBAAsB;gBACnC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK;YAC7B,eAAe,EAAE,sBAAsB;gBACrC,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO;YAC/B,kBAAkB;YAClB,iBAAiB;YACjB,oBAAoB;YACpB,gBAAgB;YAChB,GAAG,CAAC,aAAa,EAAE,KAAK,KAAK,aAAa;gBACxC,CAAC,CAAC,EAAE,uBAAuB,EAAE,aAAa,CAAC,MAAM,EAAE;gBACnD,CAAC,CAAC,EAAE,CAAC;YACP,YAAY,EAAE,iBAAiB;SAChC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,WAAW;QACX,gBAAgB;QAChB,OAAO;QACP,QAAQ,EAAE,KAAK,EAAE,OAAgB,EAAE,IAAc,EAAE,EAAE;YACnD,4BAA4B,GAAG,SAAS,CAAC;YACzC,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,4BAA4B,EAAE,CAAC;gBAC9C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAChD,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;oBAC1B,eAAe,EAAE,OAAO;oBACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC,CAAC;gBACH,MAAM,WAAW,GAAG,4BAA4B,EAAE,CAAC;gBACnD,IACE,CAAC,WAAW;oBACZ,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;oBAChC,WAAW,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;oBAC9C,CAAC,WAAW,CAAC,YAAY,CACvB,MAAM,CAAC,eAAe,EACtB,WAAW,CAAC,eAAe,CAC5B;oBACD,KAAK,CAAC,YAAY,KAAK,IAAI;oBAC3B,KAAK,CAAC,eAAe;oBACrB,KAAK,CAAC,aAAa,KAAK,SAAS;oBACjC,KAAK,CAAC,aAAa,KAAK,mBAAmB;oBAC3C,CAAC,KAAK,CAAC,kBAAkB,EACzB,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;gBACJ,CAAC;gBACD,MAAM,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,sBAAsB,CACxD,OAAO,CAAC,KAAK,EACb,OAA6B,EAC7B,OAAO,CACR,CAAC;YACF,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,OAAgB,EAAE,IAAuB,EAAE,EAAE;YAC5D,MAAM,gBAAgB,GAAG,OAA6B,CAAC;YACvD,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,4BAA4B,EAAE,CAAC;gBAC9C,4BAA4B,GAAG,SAAS,CAAC;gBACzC,IACE,CAAC,MAAM;oBACP,CAAC,WAAW,CAAC,YAAY,CACvB,MAAM,CAAC,eAAe,EACtB,gBAAgB,CACjB,EACD,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;oBAC1B,eAAe,EAAE,gBAAgB;oBACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC,CAAC;gBACH,MAAM,WAAW,GAAG,4BAA4B,EAAE,CAAC;gBACnD,IACE,CAAC,WAAW;oBACZ,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;oBAChC,WAAW,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;oBAC9C,CAAC,WAAW,CAAC,YAAY,CACvB,MAAM,CAAC,eAAe,EACtB,WAAW,CAAC,eAAe,CAC5B;oBACD,KAAK,CAAC,YAAY,KAAK,IAAI;oBAC3B,KAAK,CAAC,eAAe;oBACrB,KAAK,CAAC,aAAa,KAAK,SAAS;oBACjC,KAAK,CAAC,aAAa,KAAK,mBAAmB,EAC3C,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;gBACJ,CAAC;gBACD,MAAM,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC5C,4BAA4B,GAAG,SAAS,CAAC;YACzC,MAAM,wBAAwB,GAAG,MAAM,KAAK,SAAS;gBACnD,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CACvD,gBAAgB,EAChB;gBACE,iBAAiB,EAAE,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;aACnE,CACF,CAAC;YACF,IAAI,wBAAwB,EAAE,CAAC;gBAC7B,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBACtD,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAChE,IACE,UAAU,CAAC,QAAQ,CAAC,OAAO;oBAC3B,UAAU,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;oBACvC,WAAW,EAAE,KAAK,KAAK,qBAAqB;oBAC5C,WAAW,CAAC,WAAW,KAAK,MAAM,EAAE,WAAW,EAC/C,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,EAAE,YAAY,CAAC,KAAK;KAC1B,CAAC;AACJ,CAAC"}

package/dist/src/terminal-model-control-profile.d.ts

@@ -0,0 +1,55 @@
+import type { ExecutorKind } from "./executors.js";
+/**
+ * Verified native model-control behavior profiles.
+ *
+ * Keep every version/profile pairing here. Callers must consume this registry
+ * instead of independently deciding that a running TUI is compatible.
+ */
+export declare const TERMINAL_MODEL_CONTROL_PROFILE_IDS: Readonly<{
+    readonly codex: "codex-model-control-0.154.0";
+    readonly claude: "claude-model-control-2.1.266";
+}>;
+export type TerminalModelControlBehaviorProfile = typeof TERMINAL_MODEL_CONTROL_PROFILE_IDS[keyof typeof TERMINAL_MODEL_CONTROL_PROFILE_IDS];
+export type TerminalModelControlScope = "current_session" | "current_and_new_sessions";
+export interface TerminalModelControlCapabilities {
+    readonly status: "supported" | "unsupported" | "unknown";
+    readonly agentVersion?: string;
+    readonly behaviorProfile?: string;
+    readonly scope?: TerminalModelControlScope;
+    readonly modelSelection: boolean;
+    readonly reasoningEffortSelection: boolean;
+    readonly reason: string;
+}
+export interface TerminalModelControlPlan {
+    readonly behaviorProfile: TerminalModelControlBehaviorProfile;
+    readonly command: "/model";
+    readonly scope: TerminalModelControlScope;
+    readonly requiresIdle: true;
+    readonly requiresExactEmptyComposer: true;
+}
+export interface TerminalModelControlProfile {
+    readonly agent: ExecutorKind;
+    readonly agentVersion: string;
+    readonly behaviorProfile: TerminalModelControlBehaviorProfile;
+    readonly plan: TerminalModelControlPlan;
+    readonly supportsZeroRolloutPhysicalAuthority: boolean;
+    readonly supportsResidualContinuation: boolean;
+    readonly supportsResidualRepair: boolean;
+    /** Exact native slash-completion rows accepted before dispatching Enter. */
+    readonly slashCompletionRows: readonly string[];
+    readonly reason: string;
+}
+export declare const CODEX_MODEL_CONTROL_AGENT_VERSION = "0.154.0";
+export declare const CLAUDE_MODEL_CONTROL_AGENT_VERSION = "2.1.266";
+export declare function terminalModelControlProfiles(): readonly TerminalModelControlProfile[];
+export declare function terminalModelControlProfileFor(agent: ExecutorKind, agentVersion: string | undefined): TerminalModelControlProfile | undefined;
+export declare function terminalModelControlProfileForPlan(plan: TerminalModelControlPlan): TerminalModelControlProfile | undefined;
+export declare function terminalModelControlPlanConforms(input: {
+    readonly agent: ExecutorKind;
+    readonly agentVersion: string | undefined;
+    readonly plan: TerminalModelControlPlan;
+}): boolean;
+export declare function isTerminalModelControlPlanForAgent(plan: TerminalModelControlPlan, agent: ExecutorKind): boolean;
+export declare function terminalModelControlSlashCompletionRows(plan: TerminalModelControlPlan): readonly string[];
+export declare function probeTerminalModelControlProfile(agent: ExecutorKind, agentVersion: string | undefined): TerminalModelControlCapabilities;
+export declare function planTerminalModelControlProfile(capabilities: TerminalModelControlCapabilities): TerminalModelControlPlan;

package/dist/src/terminal-model-control-profile.js

@@ -0,0 +1,137 @@
+/**
+ * Verified native model-control behavior profiles.
+ *
+ * Keep every version/profile pairing here. Callers must consume this registry
+ * instead of independently deciding that a running TUI is compatible.
+ */
+export const TERMINAL_MODEL_CONTROL_PROFILE_IDS = Object.freeze({
+    codex: "codex-model-control-0.154.0",
+    claude: "claude-model-control-2.1.266"
+});
+export const CODEX_MODEL_CONTROL_AGENT_VERSION = "0.154.0";
+export const CLAUDE_MODEL_CONTROL_AGENT_VERSION = "2.1.266";
+const MODEL_CONTROL_PROFILES = Object.freeze([
+    Object.freeze({
+        agent: "codex",
+        agentVersion: CODEX_MODEL_CONTROL_AGENT_VERSION,
+        behaviorProfile: TERMINAL_MODEL_CONTROL_PROFILE_IDS.codex,
+        plan: Object.freeze({
+            behaviorProfile: TERMINAL_MODEL_CONTROL_PROFILE_IDS.codex,
+            command: "/model",
+            scope: "current_and_new_sessions",
+            requiresIdle: true,
+            requiresExactEmptyComposer: true
+        }),
+        supportsZeroRolloutPhysicalAuthority: true,
+        supportsResidualContinuation: true,
+        supportsResidualRepair: true,
+        slashCompletionRows: Object.freeze([
+            "  /model  choose what model and reasoning effort to use"
+        ]),
+        reason: `Codex ${CODEX_MODEL_CONTROL_AGENT_VERSION} /model control changes the ` +
+            "current session and persisted defaults"
+    }),
+    Object.freeze({
+        agent: "claude",
+        agentVersion: CLAUDE_MODEL_CONTROL_AGENT_VERSION,
+        behaviorProfile: TERMINAL_MODEL_CONTROL_PROFILE_IDS.claude,
+        plan: Object.freeze({
+            behaviorProfile: TERMINAL_MODEL_CONTROL_PROFILE_IDS.claude,
+            command: "/model",
+            scope: "current_session",
+            requiresIdle: true,
+            requiresExactEmptyComposer: true
+        }),
+        supportsZeroRolloutPhysicalAuthority: false,
+        supportsResidualContinuation: false,
+        supportsResidualRepair: false,
+        slashCompletionRows: Object.freeze([]),
+        reason: `Claude Code ${CLAUDE_MODEL_CONTROL_AGENT_VERSION} /model supports the ` +
+            "explicit session-only selection path"
+    })
+]);
+export function terminalModelControlProfiles() {
+    return MODEL_CONTROL_PROFILES;
+}
+export function terminalModelControlProfileFor(agent, agentVersion) {
+    const version = nonBlank(agentVersion);
+    if (!version)
+        return undefined;
+    return MODEL_CONTROL_PROFILES.find((profile) => profile.agent === agent && profile.agentVersion === version);
+}
+export function terminalModelControlProfileForPlan(plan) {
+    return MODEL_CONTROL_PROFILES.find((profile) => profile.behaviorProfile === plan.behaviorProfile &&
+        samePlan(profile.plan, plan));
+}
+export function terminalModelControlPlanConforms(input) {
+    const profile = terminalModelControlProfileFor(input.agent, input.agentVersion);
+    return profile !== undefined && samePlan(profile.plan, input.plan);
+}
+export function isTerminalModelControlPlanForAgent(plan, agent) {
+    return terminalModelControlProfileForPlan(plan)?.agent === agent;
+}
+export function terminalModelControlSlashCompletionRows(plan) {
+    return terminalModelControlProfileForPlan(plan)?.slashCompletionRows ?? [];
+}
+export function probeTerminalModelControlProfile(agent, agentVersion) {
+    const version = nonBlank(agentVersion);
+    if (!version) {
+        return {
+            status: "unknown",
+            modelSelection: false,
+            reasoningEffortSelection: false,
+            reason: `the running ${agent === "codex" ? "Codex" : "Claude Code"} ` +
+                "version could not be verified"
+        };
+    }
+    const profile = terminalModelControlProfileFor(agent, version);
+    if (!profile) {
+        return {
+            status: "unsupported",
+            agentVersion: version,
+            modelSelection: false,
+            reasoningEffortSelection: false,
+            reason: `${agent === "codex" ? "Codex" : "Claude Code"} ${version} ` +
+                "has no verified model-control profile"
+        };
+    }
+    return {
+        status: "supported",
+        agentVersion: profile.agentVersion,
+        behaviorProfile: profile.behaviorProfile,
+        scope: profile.plan.scope,
+        modelSelection: true,
+        reasoningEffortSelection: true,
+        reason: profile.reason
+    };
+}
+export function planTerminalModelControlProfile(capabilities) {
+    if (capabilities.status !== "supported" ||
+        capabilities.modelSelection !== true ||
+        capabilities.reasoningEffortSelection !== true ||
+        !capabilities.behaviorProfile ||
+        !capabilities.scope) {
+        throw new Error(capabilities.reason);
+    }
+    const profile = MODEL_CONTROL_PROFILES.find((candidate) => (!capabilities.agentVersion ||
+        candidate.agentVersion === capabilities.agentVersion.trim()) &&
+        candidate.behaviorProfile === capabilities.behaviorProfile &&
+        candidate.plan.scope === capabilities.scope);
+    if (!profile) {
+        throw new Error("refusing an unprofiled terminal model-control plan");
+    }
+    return profile.plan;
+}
+function samePlan(left, right) {
+    return left.behaviorProfile === right.behaviorProfile &&
+        left.command === right.command &&
+        left.scope === right.scope &&
+        left.requiresIdle === right.requiresIdle &&
+        left.requiresExactEmptyComposer === right.requiresExactEmptyComposer;
+}
+function nonBlank(value) {
+    return typeof value === "string" && value.trim().length > 0
+        ? value.trim()
+        : undefined;
+}
+//# sourceMappingURL=terminal-model-control-profile.js.map

package/dist/src/terminal-model-control-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-model-control-profile.js","sourceRoot":"","sources":["../../src/terminal-model-control-profile.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9D,KAAK,EAAE,6BAA6B;IACpC,MAAM,EAAE,8BAA8B;CAC9B,CAAC,CAAC;AAyCZ,MAAM,CAAC,MAAM,iCAAiC,GAAG,SAAS,CAAC;AAC3D,MAAM,CAAC,MAAM,kCAAkC,GAAG,SAAS,CAAC;AAE5D,MAAM,sBAAsB,GAC1B,MAAM,CAAC,MAAM,CAAC;IACZ,MAAM,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,iCAAiC;QAC/C,eAAe,EAAE,kCAAkC,CAAC,KAAK;QACzD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YAClB,eAAe,EAAE,kCAAkC,CAAC,KAAK;YACzD,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,0BAA0B;YACjC,YAAY,EAAE,IAAI;YAClB,0BAA0B,EAAE,IAAI;SACjC,CAAC;QACF,oCAAoC,EAAE,IAAI;QAC1C,4BAA4B,EAAE,IAAI;QAClC,sBAAsB,EAAE,IAAI;QAC5B,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC;YACjC,yDAAyD;SAC1D,CAAC;QACF,MAAM,EACJ,SAAS,iCAAiC,8BAA8B;YACxE,wCAAwC;KAC3C,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,QAAQ;QACf,YAAY,EAAE,kCAAkC;QAChD,eAAe,EAAE,kCAAkC,CAAC,MAAM;QAC1D,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YAClB,eAAe,EAAE,kCAAkC,CAAC,MAAM;YAC1D,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,iBAAiB;YACxB,YAAY,EAAE,IAAI;YAClB,0BAA0B,EAAE,IAAI;SACjC,CAAC;QACF,oCAAoC,EAAE,KAAK;QAC3C,4BAA4B,EAAE,KAAK;QACnC,sBAAsB,EAAE,KAAK;QAC7B,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,EACJ,eAAe,kCAAkC,uBAAuB;YACxE,sCAAsC;KACzC,CAAC;CAC8C,CAAC,CAAC;AAEtD,MAAM,UAAU,4BAA4B;IAE1C,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAmB,EACnB,YAAgC;IAEhC,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7C,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,YAAY,KAAK,OAAO,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,IAA8B;IAE9B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7C,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe;QAChD,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAIhD;IACC,MAAM,OAAO,GAAG,8BAA8B,CAC5C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,YAAY,CACnB,CAAC;IACF,OAAO,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,IAA8B,EAC9B,KAAmB;IAEnB,OAAO,kCAAkC,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,IAA8B;IAE9B,OAAO,kCAAkC,CAAC,IAAI,CAAC,EAAE,mBAAmB,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAmB,EACnB,YAAgC;IAEhC,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,cAAc,EAAE,KAAK;YACrB,wBAAwB,EAAE,KAAK;YAC/B,MAAM,EACJ,eAAe,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,GAAG;gBAC7D,+BAA+B;SAClC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,8BAA8B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,YAAY,EAAE,OAAO;YACrB,cAAc,EAAE,KAAK;YACrB,wBAAwB,EAAE,KAAK;YAC/B,MAAM,EACJ,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,IAAI,OAAO,GAAG;gBAC5D,uCAAuC;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,cAAc,EAAE,IAAI;QACpB,wBAAwB,EAAE,IAAI;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,YAA8C;IAE9C,IACE,YAAY,CAAC,MAAM,KAAK,WAAW;QACnC,YAAY,CAAC,cAAc,KAAK,IAAI;QACpC,YAAY,CAAC,wBAAwB,KAAK,IAAI;QAC9C,CAAC,YAAY,CAAC,eAAe;QAC7B,CAAC,YAAY,CAAC,KAAK,EACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACxD,CAAC,CAAC,YAAY,CAAC,YAAY;QACzB,SAAS,CAAC,YAAY,KAAK,YAAY,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC9D,SAAS,CAAC,eAAe,KAAK,YAAY,CAAC,eAAe;QAC1D,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,CAC5C,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,QAAQ,CACf,IAA8B,EAC9B,KAA+B;IAE/B,OAAO,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;QACnD,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC1B,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;QACxC,IAAI,CAAC,0BAA0B,KAAK,KAAK,CAAC,0BAA0B,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/src/terminal-model-control-subject.d.ts

@@ -0,0 +1,34 @@
+import type { ExecutorKind } from "./executors.js";
+import { type TerminalModelControlBehaviorProfile } from "./terminal-model-control-profile.js";
+import { type TerminalControlRef } from "./terminal-control-ref.js";
+export interface TerminalModelControlSubjectInput {
+    readonly terminalId?: string;
+    readonly terminalControl?: TerminalControlRef;
+    readonly agent?: ExecutorKind;
+    readonly pid?: number;
+    readonly workspace?: string;
+    readonly processUuid?: string;
+    readonly processBirth?: string;
+    readonly agentVersion?: string;
+    readonly behaviorProfile?: string;
+}
+/** Canonical physical and profile identity shared by projection and mutation. */
+export interface CanonicalTerminalModelControlSubject {
+    readonly terminalId: string;
+    readonly terminalControl: TerminalControlRef;
+    readonly terminalEndpointIdentity: string;
+    readonly terminalProcessAnchorPid: number;
+    readonly agent: ExecutorKind;
+    readonly pid: number;
+    readonly workspace: string;
+    readonly processUuid: string;
+    readonly processBirth: string;
+    readonly agentVersion: string;
+    readonly behaviorProfile: TerminalModelControlBehaviorProfile;
+}
+/**
+ * Normalize one model-control subject without granting an action. Invalid or
+ * unsupported facts return undefined so read-only projection remains closed;
+ * mutation callers may turn that result into an action-specific error.
+ */
+export declare function canonicalModelControlSubject(input: TerminalModelControlSubjectInput): CanonicalTerminalModelControlSubject | undefined;

package/dist/src/terminal-model-control-subject.js

@@ -0,0 +1,58 @@
+import { terminalModelControlProfileFor } from "./terminal-model-control-profile.js";
+import { hasCanonicalTerminalEndpoint, terminalEndpointFromControlRef, terminalEndpointIdentityKey } from "./terminal-control-ref.js";
+/**
+ * Normalize one model-control subject without granting an action. Invalid or
+ * unsupported facts return undefined so read-only projection remains closed;
+ * mutation callers may turn that result into an action-specific error.
+ */
+export function canonicalModelControlSubject(input) {
+    const terminalId = nonBlank(input.terminalId);
+    const terminalControl = input.terminalControl;
+    const workspace = nonBlank(input.workspace);
+    const processUuid = nonBlank(input.processUuid);
+    const processBirth = nonBlank(input.processBirth);
+    const agentVersion = nonBlank(input.agentVersion);
+    const behaviorProfile = nonBlank(input.behaviorProfile);
+    const pid = input.pid;
+    if (!terminalId ||
+        !terminalControl ||
+        !input.agent ||
+        !workspace ||
+        !processUuid ||
+        !processBirth ||
+        !agentVersion ||
+        !behaviorProfile ||
+        !Number.isSafeInteger(pid) ||
+        Number(pid) <= 1 ||
+        !hasCanonicalTerminalEndpoint(terminalControl)) {
+        return undefined;
+    }
+    const profile = terminalModelControlProfileFor(input.agent, agentVersion);
+    if (!profile || profile.behaviorProfile !== behaviorProfile) {
+        return undefined;
+    }
+    const endpoint = terminalEndpointFromControlRef(terminalControl);
+    if (!Number.isSafeInteger(endpoint.processAnchorPid) ||
+        Number(endpoint.processAnchorPid) <= 1) {
+        return undefined;
+    }
+    return Object.freeze({
+        terminalId,
+        terminalControl,
+        terminalEndpointIdentity: terminalEndpointIdentityKey(endpoint),
+        terminalProcessAnchorPid: Number(endpoint.processAnchorPid),
+        agent: input.agent,
+        pid: Number(pid),
+        workspace,
+        processUuid,
+        processBirth,
+        agentVersion,
+        behaviorProfile: profile.behaviorProfile
+    });
+}
+function nonBlank(value) {
+    return typeof value === "string" && value.trim().length > 0
+        ? value.trim()
+        : undefined;
+}
+//# sourceMappingURL=terminal-model-control-subject.js.map

package/dist/src/terminal-model-control-subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-model-control-subject.js","sourceRoot":"","sources":["../../src/terminal-model-control-subject.ts"],"names":[],"mappings":"AACA,OAAO,EACL,8BAA8B,EAE/B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,2BAA2B,EAE5B,MAAM,2BAA2B,CAAC;AA6BnC;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAAuC;IAEvC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IACE,CAAC,UAAU;QACX,CAAC,eAAe;QAChB,CAAC,KAAK,CAAC,KAAK;QACZ,CAAC,SAAS;QACV,CAAC,WAAW;QACZ,CAAC,YAAY;QACb,CAAC,YAAY;QACb,CAAC,eAAe;QAChB,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAChB,CAAC,4BAA4B,CAAC,eAAe,CAAC,EAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC1E,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,eAAe,EAAE,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,8BAA8B,CAAC,eAAe,CAAC,CAAC;IACjE,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EACtC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU;QACV,eAAe;QACf,wBAAwB,EAAE,2BAA2B,CAAC,QAAQ,CAAC;QAC/D,wBAAwB,EAAE,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC3D,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;QAChB,SAAS;QACT,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,eAAe,EAAE,OAAO,CAAC,eAAe;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/src/terminal-model-control-transaction.d.ts

@@ -0,0 +1,19 @@
+export declare const TERMINAL_MODEL_CONTROL_TRANSACTION_PHASES: readonly ["no_input", "reversible_input", "commit_attempted", "postcondition_proven"];
+export type TerminalModelControlTransactionPhase = typeof TERMINAL_MODEL_CONTROL_TRANSACTION_PHASES[number];
+export type TerminalModelControlTransactionEvent = "reversible_input_attempted" | "commit_attempted" | "postcondition_proven";
+export type TerminalModelControlCleanupOutcome = "not_attempted" | "proven" | "failed";
+export interface TerminalModelControlFailureDecision {
+    readonly unwind: boolean;
+    readonly outcome: "throw" | "uncertain";
+    readonly doNotRetry: boolean;
+    /** Repair authority can only come from a later exact live residual scan. */
+    readonly residualRepair: "none" | "fresh_inspection_required";
+}
+/** Pure monotonic reducer for every native model-control input boundary. */
+export declare function reduceTerminalModelControlTransactionPhase(phase: TerminalModelControlTransactionPhase, event: TerminalModelControlTransactionEvent): TerminalModelControlTransactionPhase;
+/**
+ * One failure policy for unwind, uncertainty and automatic-retry safety.
+ * A failed cleanup never grants repair directly; List must freshly inspect an
+ * exact residual before advertising its separately fenced repair action.
+ */
+export declare function decideTerminalModelControlFailure(phase: TerminalModelControlTransactionPhase, cleanup: TerminalModelControlCleanupOutcome): TerminalModelControlFailureDecision;

package/dist/src/terminal-model-control-transaction.js

@@ -0,0 +1,39 @@
+export const TERMINAL_MODEL_CONTROL_TRANSACTION_PHASES = [
+    "no_input",
+    "reversible_input",
+    "commit_attempted",
+    "postcondition_proven"
+];
+/** Pure monotonic reducer for every native model-control input boundary. */
+export function reduceTerminalModelControlTransactionPhase(phase, event) {
+    if (phase === "postcondition_proven") {
+        throw new Error("model-control transaction cannot accept input after its postcondition");
+    }
+    if (event === "postcondition_proven")
+        return "postcondition_proven";
+    if (phase === "commit_attempted" || event === "commit_attempted") {
+        return "commit_attempted";
+    }
+    return "reversible_input";
+}
+/**
+ * One failure policy for unwind, uncertainty and automatic-retry safety.
+ * A failed cleanup never grants repair directly; List must freshly inspect an
+ * exact residual before advertising its separately fenced repair action.
+ */
+export function decideTerminalModelControlFailure(phase, cleanup) {
+    const reversible = phase === "reversible_input";
+    const committed = phase === "commit_attempted";
+    const inputAttempted = reversible || committed;
+    const cleanupFailedAfterInput = inputAttempted && cleanup === "failed";
+    const uncertain = committed || cleanupFailedAfterInput;
+    return {
+        unwind: inputAttempted && cleanup === "not_attempted",
+        outcome: uncertain ? "uncertain" : "throw",
+        doNotRetry: uncertain,
+        residualRepair: cleanupFailedAfterInput
+            ? "fresh_inspection_required"
+            : "none"
+    };
+}
+//# sourceMappingURL=terminal-model-control-transaction.js.map

package/dist/src/terminal-model-control-transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-model-control-transaction.js","sourceRoot":"","sources":["../../src/terminal-model-control-transaction.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,UAAU;IACV,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;CACd,CAAC;AAuBX,4EAA4E;AAC5E,MAAM,UAAU,0CAA0C,CACxD,KAA2C,EAC3C,KAA2C;IAE3C,IAAI,KAAK,KAAK,sBAAsB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,sBAAsB;QAAE,OAAO,sBAAsB,CAAC;IACpE,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;QACjE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAA2C,EAC3C,OAA2C;IAE3C,MAAM,UAAU,GAAG,KAAK,KAAK,kBAAkB,CAAC;IAChD,MAAM,SAAS,GAAG,KAAK,KAAK,kBAAkB,CAAC;IAC/C,MAAM,cAAc,GAAG,UAAU,IAAI,SAAS,CAAC;IAC/C,MAAM,uBAAuB,GAAG,cAAc,IAAI,OAAO,KAAK,QAAQ,CAAC;IACvE,MAAM,SAAS,GAAG,SAAS,IAAI,uBAAuB,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,cAAc,IAAI,OAAO,KAAK,eAAe;QACrD,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;QAC1C,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,uBAAuB;YACrC,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,MAAM;KACX,CAAC;AACJ,CAAC"}