@with-logic/elwood 0.1.0 → 0.1.1

package/dist/core/session-input.js

@@ -1,154 +0,0 @@
-/**
- * Shared PTY input submission helpers for adapter sessions.
- * Implements PRD §5.3 prompt and command submission semantics (C-API-31).
- */
-import { clearStagedComposer, throwIfInputAborted, waitForInput, } from "./session-input-abort.js";
-export const commandEnterDelayMs = 150;
-export const pasteSettleDelayMs = 150;
-export const pasteNudgeDelayMs = 1_000;
-export const pasteNudgeAttempts = 2;
-/** How often the submitting Enter re-checks a blocking dialog before firing. */
-export const blockedPollMs = 50;
-/** Explicitly best-effort input for startup/recovery automation. */
-export function ignoreInputFailure(input) {
-    void Promise.resolve(input).catch(() => undefined);
-}
-// C0 (\u0000-\u001f) and C1 (\u007f-\u009f) control chars EXCEPT tab,
-// newline, and carriage return, which are legitimate multi-line whitespace.
-// Stripping ESC (\u001b) alone already defuses the ESC[200~ / ESC[201~
-// bracketed-paste sentinels, leaving only inert `[20x~` text.
-// biome-ignore lint/suspicious/noControlCharactersInRegex: neutralizing control input is the point.
-const pasteUnsafe = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g;
-/**
- * Neutralizes caller/model text before it is framed as a bracketed paste (§5.3).
- * Message text is data, so an embedded `ESC[201~` end sentinel (or a bare control
- * byte) MUST NOT terminate paste mode early and turn following bytes into live
- * keystrokes — e.g. an Enter that confirms a permission dialog. Tab, newline, and
- * carriage return survive as legitimate multi-line text; everything else is
- * stripped. `sendKeys` is the raw escape hatch and never goes through here.
- */
-export function sanitizePasteText(text) {
-    return text.replace(pasteUnsafe, "");
-}
-/**
- * Writes a bracketed paste and submits it.
- *
- * The TUIs ingest bracketed pastes asynchronously; an Enter concatenated into
- * the same PTY write races that ingestion and can be dropped, leaving the prompt
- * staged but never submitted (long personas hit this reliably). The Enter
- * therefore follows as a separate keystroke after a settle delay, and bounded
- * re-Enters fire while the screen still shows staged content — a lone Enter from
- * the staged state submits, and a surplus Enter on an empty composer is a no-op,
- * so the recovery is safe on both adapters.
- *
- * While a blocking human-decision dialog is on screen, the WHOLE submission is
- * held: neither the paste nor any Enter reaches the terminal until the dialog
- * clears, so caller/model text can never be interpreted as the dialog's
- * shortcuts or confirm its highlighted option (C-API-37 dialog safety). Paste
- * text is sanitized first so an embedded end sentinel or control byte cannot
- * escape paste mode into live keystrokes (§5.3).
- *
- * The returned promise resolves once the first submitting Enter has been
- * dispatched (after the settle delay), so the control queue does not drain the
- * next operation into the composer before this prompt has actually been
- * submitted. Bounded recovery re-Enters continue in the background afterwards
- * and are idempotent.
- */
-async function writePastedPrompt(terminal, prompt, guard, signal, settleDelayMs = pasteSettleDelayMs, nudgeDelayMs = pasteNudgeDelayMs) {
-    // Hold the WHOLE submission — paste included — while a blocking dialog is on
-    // screen. A dialog can appear before an overtaking guidance's paste dispatches;
-    // pasting caller/model text into it risks the TUI interpreting shortcuts, so no
-    // bytes may reach a dialog until it clears (C-API-37 dialog safety). Only await
-    // when actually blocked, so the common path still writes the paste synchronously.
-    if (guard?.blocked?.())
-        await waitWhileBlocked(guard, signal);
-    throwIfInputAborted(signal);
-    // Sanitize: caller/model text is data, so an embedded end sentinel or control
-    // byte must not escape paste mode into live keystrokes (§5.3).
-    await terminal.sendInput(`\u001b[200~${sanitizePasteText(prompt)}\u001b[201~`);
-    const schedule = (work, ms) => {
-        const timer = setTimeout(work, ms);
-        timer.unref?.();
-    };
-    let nudges = 0;
-    const nudge = async () => {
-        // Stop once a LATER submission has begun: a stale nudge must never fire an
-        // Enter into a newer prompt's paste (the staged chip is not prompt-specific).
-        if (signal?.aborted || !guard || nudges >= pasteNudgeAttempts)
-            return;
-        // A dialog that appears after the first Enter must not be confirmed by a
-        // recovery Enter either; skip this attempt and re-check on the next tick.
-        if (guard.blocked?.()) {
-            schedule(nudge, nudgeDelayMs);
-            return;
-        }
-        nudges += 1;
-        if (!guard.staged(guard.snapshot(), prompt))
-            return;
-        try {
-            await terminal.sendInput("\r");
-        }
-        catch {
-            // Recovery nudges are best-effort after the first Enter already landed.
-        }
-        schedule(nudge, nudgeDelayMs);
-    };
-    try {
-        await waitForInput(settleDelayMs, signal);
-        // Hold the submitting Enter while a blocking dialog is on screen: firing it
-        // would confirm the dialog's highlighted option instead of submitting the
-        // staged paste (C-API-37 dialog safety). The paste stays staged behind the
-        // dialog and submits once it clears.
-        await waitWhileBlocked(guard, signal);
-        throwIfInputAborted(signal);
-        await terminal.sendInput("\r");
-    }
-    catch (error) {
-        if (signal?.aborted)
-            await clearStagedComposer(terminal);
-        throw error;
-    }
-    schedule(nudge, nudgeDelayMs);
-}
-function waitWhileBlocked(guard, signal) {
-    if (!guard?.blocked?.())
-        return Promise.resolve();
-    return new Promise((resolve) => {
-        const poll = () => {
-            if (signal?.aborted) {
-                resolve();
-                return;
-            }
-            if (!guard.blocked?.()) {
-                resolve();
-                return;
-            }
-            const timer = setTimeout(poll, blockedPollMs);
-            timer.unref?.();
-        };
-        const timer = setTimeout(poll, blockedPollMs);
-        timer.unref?.();
-    });
-}
-export async function writeQueuedInput(terminal, input, mode, guard, signal, enterDelayMs = commandEnterDelayMs) {
-    // Dispatch through a Record keyed by ControlSubmitMode: a new mode must add an
-    // entry here or the object fails to type-check, so it can never silently reuse
-    // pasted-input behavior. The map has no unreachable default arm, so 100%
-    // coverage holds (both entries are exercised).
-    const submitters = {
-        // Resolve only after the input's submitting Enter has dispatched, so the next
-        // queued operation cannot write into the composer first (FIFO).
-        pasted_input: () => writePastedPrompt(terminal, input, guard, signal),
-        // Slash-command popups (Codex) swallow an Enter that arrives in the same PTY
-        // chunk as the command text, so Enter follows as a separate keystroke. The
-        // returned promise resolves only after that Enter is dispatched, so a queued
-        // command's Enter always lands before the next operation writes.
-        command: async () => {
-            await terminal.sendInput(input);
-            await waitForInput(enterDelayMs, signal);
-            await terminal.sendInput("\r");
-        },
-    };
-    await submitters[mode]();
-}
-//# sourceMappingURL=session-input.js.map

package/dist/core/session-input.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-input.js","sourceRoot":"","sources":["../../src/core/session-input.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EACL,mBAAmB,EAEnB,mBAAmB,EACnB,YAAY,GACb,MAAM,0BAA0B,CAAC;AAelC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEhC,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,sEAAsE;AACtE,4EAA4E;AAC5E,uEAAuE;AACvE,8DAA8D;AAC9D,oGAAoG;AACpG,MAAM,WAAW,GAAG,wDAAwD,CAAC;AAE7E;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,KAAK,UAAU,iBAAiB,CAC9B,QAAuB,EACvB,MAAc,EACd,KAAkB,EAClB,MAAoB,EACpB,aAAa,GAAG,kBAAkB,EAClC,YAAY,GAAG,iBAAiB;IAEhC,6EAA6E;IAC7E,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE;QAAE,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9D,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,8EAA8E;IAC9E,+DAA+D;IAC/D,MAAM,QAAQ,CAAC,SAAS,CAAC,cAAc,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,CAAC,IAAgB,EAAE,EAAU,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,2EAA2E;QAC3E,8EAA8E;QAC9E,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,kBAAkB;YAAE,OAAO;QACtE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;YACtB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC;YAAE,OAAO;QACpD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,qCAAqC;QACrC,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAkB,EAAE,MAAoB;IAChE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;gBACvB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAC9C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC9C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAuB,EACvB,KAAa,EACb,IAAuB,EACvB,KAAkB,EAClB,MAAoB,EACpB,YAAY,GAAG,mBAAmB;IAElC,+EAA+E;IAC/E,+EAA+E;IAC/E,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,UAAU,GAA6D;QAC3E,8EAA8E;QAC9E,gEAAgE;QAChE,YAAY,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;QACrE,6EAA6E;QAC7E,2EAA2E;QAC3E,6EAA6E;QAC7E,iEAAiE;QACjE,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;IACF,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3B,CAAC"}

package/dist/core/session-warnings.d.ts

@@ -1,20 +0,0 @@
-/**
- * Shared live-only warning emission for all adapter sessions.
- * Implements PRD §5.7: a warning is emitted ONCE when observed, as a `warning`
- * event plus its `activity`, and is never persisted, replayed, deduplicated, or
- * counted. This mirrors the human experience — a banner flashes live, then it's gone.
- */
-import { type ElwoodActivityEvent } from "./activity.ts";
-import type { ElwoodWarningEvent } from "./types.ts";
-/**
- * Separately-typed emit callbacks for the two events a warning produces. Each
- * adapter supplies its own emitter's `emit` bound to the correlated event name,
- * so a mismatch between an adapter's event map and these payload types is a
- * compile error at the call site — no unchecked cast bridges the two.
- */
-export type WarningEmit = {
-    readonly warning: (event: ElwoodWarningEvent) => void;
-    readonly activity: (event: ElwoodActivityEvent) => void;
-};
-export declare function emitSessionWarnings(warnings: readonly ElwoodWarningEvent[], emit: WarningEmit): void;
-//# sourceMappingURL=session-warnings.d.ts.map

package/dist/core/session-warnings.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-warnings.d.ts","sourceRoot":"","sources":["../../src/core/session-warnings.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;CACzD,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,IAAI,EAAE,WAAW,GAChB,IAAI,CAYN"}

package/dist/core/session-warnings.js

@@ -1,32 +0,0 @@
-/**
- * Shared live-only warning emission for all adapter sessions.
- * Implements PRD §5.7: a warning is emitted ONCE when observed, as a `warning`
- * event plus its `activity`, and is never persisted, replayed, deduplicated, or
- * counted. This mirrors the human experience — a banner flashes live, then it's gone.
- */
-import { activityFromWarning } from "./activity.js";
-export function emitSessionWarnings(warnings, emit) {
-    // EVERY warning (and both of its two events) is attempted, even if an earlier
-    // listener throws — a throwing listener for warning #1 must not silently drop
-    // warnings #2+, whose identities/buffer were already consumed upstream and cannot
-    // be recovered. The FIRST error is retained and rethrown only after the whole batch
-    // fired, so an enclosing boundary still sees a failure without losing siblings.
-    let firstError;
-    for (const warning of warnings) {
-        firstError = deliver(() => emit.warning(warning), firstError);
-        firstError = deliver(() => emit.activity(activityFromWarning(warning)), firstError);
-    }
-    if (firstError !== undefined)
-        throw firstError;
-}
-/** Run a fan-out step; return the FIRST error seen so both steps always run. */
-function deliver(step, prior) {
-    try {
-        step();
-        return prior;
-    }
-    catch (error) {
-        return prior ?? error;
-    }
-}
-//# sourceMappingURL=session-warnings.js.map

package/dist/core/session-warnings.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-warnings.js","sourceRoot":"","sources":["../../src/core/session-warnings.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAA4B,MAAM,eAAe,CAAC;AAc9E,MAAM,UAAU,mBAAmB,CACjC,QAAuC,EACvC,IAAiB;IAEjB,8EAA8E;IAC9E,8EAA8E;IAC9E,kFAAkF;IAClF,oFAAoF;IACpF,gFAAgF;IAChF,IAAI,UAAmB,CAAC;IACxB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9D,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,UAAU,CAAC;AACjD,CAAC;AAED,gFAAgF;AAChF,SAAS,OAAO,CAAC,IAAgB,EAAE,KAAe;IAChD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,IAAI,KAAK,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/core/simple/loop-controls.d.ts

@@ -1,7 +0,0 @@
-/**
- * Import-path shim: `LoopControls` now lives in `core/loops/loop-controls.ts` (it is a loop
- * contract, not an ergonomic-session concern). Kept only until the adapter session interfaces
- * switch their import; new code must import from `../loops/loop-controls.ts`.
- */
-export type { LoopControls } from "../loops/loop-controls.ts";
-//# sourceMappingURL=loop-controls.d.ts.map

package/dist/core/simple/loop-controls.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"loop-controls.d.ts","sourceRoot":"","sources":["../../../src/core/simple/loop-controls.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/core/simple/loop-controls.js

@@ -1,7 +0,0 @@
-/**
- * Import-path shim: `LoopControls` now lives in `core/loops/loop-controls.ts` (it is a loop
- * contract, not an ergonomic-session concern). Kept only until the adapter session interfaces
- * switch their import; new code must import from `../loops/loop-controls.ts`.
- */
-export {};
-//# sourceMappingURL=loop-controls.js.map

package/dist/core/simple/loop-controls.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loop-controls.js","sourceRoot":"","sources":["../../../src/core/simple/loop-controls.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/core/startup-automation.d.ts

@@ -1,54 +0,0 @@
-/**
- * Emits activity for automated startup prompt responses.
- * Implements PRD §5.4 and C-API-18.
- */
-import type { ElwoodActivityEvent, ElwoodAgentKind } from "./activity.ts";
-import type { TrustPromptIdFor } from "./trust-prompts.ts";
-export type { TrustPromptIdFor } from "./trust-prompts.ts";
-/**
- * The single source of truth for the non-trust startup-prompt labels, keyed by
- * owning agent: the browser-tools onboarding decline is Claude-only (C-CLAUDE-11)
- * and the skip-update prompt is Codex-only (C-CODEX-12). Every non-trust union
- * and the runtime label set below are DERIVED from this table, so they cannot
- * drift from each other or from the §5.4 label contract. Adding an agent's label
- * here automatically extends both the type and the validator.
- */
-declare const nonTrustStartupLabels: {
-    readonly claude: readonly ["browser_tools"];
-    readonly codex: readonly ["update"];
-};
-/**
- * The non-trust startup-prompt labels for one agent, derived from the table so
- * each impossible pairing (Claude + `update`, Codex + `browser_tools`) stays
- * unrepresentable, matching the §5.4 label table exactly.
- */
-type NonTrustStartupLabel<A extends ElwoodAgentKind> = (typeof nonTrustStartupLabels)[A][number];
-/**
- * Every startup-prompt label for one agent: its own allowlisted trust ids plus
- * its own non-trust prompts. Matches the PRD's exact per-agent label contract
- * (§5.4) so a second implementation and this type can never drift.
- */
-export type StartupPromptLabelFor<A extends ElwoodAgentKind> = TrustPromptIdFor<A> | NonTrustStartupLabel<A>;
-/**
- * The outcome of handling a startup prompt for agent `A`, discriminated so the
- * two states cannot be confused: an `answered` prompt ALWAYS carries the `input`
- * sent and is labeled with any of the agent's startup labels, while an
- * `option_pending` prompt (recognized allowlisted trust prompt whose affirmative
- * option has not rendered yet — a TRANSIENT render delay, C-CLAUDE-14) NEVER
- * carries an input and is limited to the agent's TRUST ids (a non-trust prompt
- * like `browser_tools`/`update` is never "recognized but option-pending"). Both
- * correlate the label to `A`, so an off-agent or impossible label does not compile.
- */
-export type StartupPromptOutcome<A extends ElwoodAgentKind = ElwoodAgentKind> = {
-    readonly kind: "answered";
-    readonly prompt: StartupPromptLabelFor<A>;
-    readonly input: string;
-} | {
-    readonly kind: "option_pending";
-    readonly prompt: TrustPromptIdFor<A>;
-};
-export type StartupActivityEmitter = {
-    emit(event: "activity", payload: ElwoodActivityEvent): void;
-};
-export declare function emitStartupPromptActivity<A extends ElwoodAgentKind>(emitter: StartupActivityEmitter, agent: A, elwoodSessionId: string, automation: StartupPromptOutcome<A>): void;
-//# sourceMappingURL=startup-automation.d.ts.map

package/dist/core/startup-automation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"startup-automation.d.ts","sourceRoot":"","sources":["../../src/core/startup-automation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;GAOG;AACH,QAAA,MAAM,qBAAqB;;;CAGoC,CAAC;AAEhE;;;;GAIG;AACH,KAAK,oBAAoB,CAAC,CAAC,SAAS,eAAe,IAAI,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjG;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,IACvD,gBAAgB,CAAC,CAAC,CAAC,GACnB,oBAAoB,CAAC,CAAC,CAAC,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IACxE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,CAAC;AAE9E,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC7D,CAAC;AA2BF,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,eAAe,EACjE,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,CAAC,EACR,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAClC,IAAI,CAEN"}

package/dist/core/startup-automation.js

@@ -1,40 +0,0 @@
-/**
- * Emits activity for automated startup prompt responses.
- * Implements PRD §5.4 and C-API-18.
- */
-/**
- * The single source of truth for the non-trust startup-prompt labels, keyed by
- * owning agent: the browser-tools onboarding decline is Claude-only (C-CLAUDE-11)
- * and the skip-update prompt is Codex-only (C-CODEX-12). Every non-trust union
- * and the runtime label set below are DERIVED from this table, so they cannot
- * drift from each other or from the §5.4 label contract. Adding an agent's label
- * here automatically extends both the type and the validator.
- */
-const nonTrustStartupLabels = {
-    claude: ["browser_tools"],
-    codex: ["update"],
-};
-function activityFromStartupPrompt(agent, elwoodSessionId, automation) {
-    if (automation.kind === "option_pending") {
-        return {
-            elwoodSessionId,
-            agent,
-            source: "terminal",
-            kind: "attention",
-            label: automation.prompt,
-            text: `Recognized ${agent} ${automation.prompt} prompt; affirmative option not rendered yet, awaiting a later frame.`,
-        };
-    }
-    return {
-        elwoodSessionId,
-        agent,
-        source: "terminal",
-        kind: "startup_prompt",
-        label: automation.prompt,
-        text: `Detected ${agent} ${automation.prompt} prompt; sent ${automation.input}.`,
-    };
-}
-export function emitStartupPromptActivity(emitter, agent, elwoodSessionId, automation) {
-    emitter.emit("activity", activityFromStartupPrompt(agent, elwoodSessionId, automation));
-}
-//# sourceMappingURL=startup-automation.js.map

package/dist/core/startup-automation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"startup-automation.js","sourceRoot":"","sources":["../../src/core/startup-automation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,KAAK,EAAE,CAAC,QAAQ,CAAC;CAC4C,CAAC;AAoChE,SAAS,yBAAyB,CAChC,KAAQ,EACR,eAAuB,EACvB,UAAmC;IAEnC,IAAI,UAAU,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACzC,OAAO;YACL,eAAe;YACf,KAAK;YACL,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,IAAI,EAAE,cAAc,KAAK,IAAI,UAAU,CAAC,MAAM,uEAAuE;SACtH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,eAAe;QACf,KAAK;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,UAAU,CAAC,MAAM;QACxB,IAAI,EAAE,YAAY,KAAK,IAAI,UAAU,CAAC,MAAM,iBAAiB,UAAU,CAAC,KAAK,GAAG;KACjF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAA+B,EAC/B,KAAQ,EACR,eAAuB,EACvB,UAAmC;IAEnC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/core/startup-frame.d.ts

@@ -1,39 +0,0 @@
-/**
- * Shared startup-frame helpers keeping telemetry off the critical frame path.
- * Implements PRD §5.7/§9.1 (C-API-14, C-API-37): a warning is TELEMETRY and must
- * never control session progress. On the hot terminal-frame callback a throwing
- * `warning`/`activity` listener must not skip the rest of the frame (readiness
- * detection, prompt automation, login/attention detection, `terminal:data`), and the
- * preflight/version warning must reach a caller that subscribes in the same turn it
- * receives the session — so it is delivered on a deferred macrotask AFTER start
- * resolves, not on an early startup frame a caller cannot yet observe.
- */
-import type { ElwoodWarningEvent } from "./types.ts";
-/** A session's live warning sink (emits a batch as `warning` + `activity`). */
-export type FrameWarningSink = {
-    readonly emitWarnings: (warnings: readonly ElwoodWarningEvent[]) => void;
-};
-/**
- * Delivers `warnings` through `sink` but CONTAINS a throwing listener so frame
- * processing continues. Warnings are live-only: a contained throw drops the warning
- * (it is not retried), exactly as a human's terminal does not re-show a flashed banner.
- */
-export declare function deliverFrameWarnings(sink: FrameWarningSink | undefined, warnings: readonly ElwoodWarningEvent[]): void;
-/**
- * A buffer-then-live warning sink for the STARTUP region. Warnings emitted BEFORE the
- * caller can subscribe (during the pre-return startup gate — MCP/transcript/preflight
- * diagnostics) are BUFFERED, then flushed on a deferred macrotask AFTER start resolves,
- * so a caller attaching a `warning` listener in the same turn it receives the session
- * still observes them (C-API-14) — WITHOUT restoring general late-subscriber replay.
- * Once opened, delivery is live pass-through. Every observed startup warning is
- * delivered: PRD §5.7/C-API-14 defines no overflow exception, and the buffer drains one
- * macrotask after start resolves, so it is inherently short-lived (the finite set of
- * startup diagnostics), not an unbounded queue — a silent cap could drop the guaranteed
- * `version_unparseable` warning. A macrotask (not a microtask) is required: a microtask
- * runs before the caller's post-`await` continuation, so it would fire into no listener.
- */
-export declare function createStartupWarningGate(sink: FrameWarningSink): {
-    readonly emitWarnings: (warnings: readonly ElwoodWarningEvent[]) => void;
-    readonly openAfterReturn: () => void;
-};
-//# sourceMappingURL=startup-frame.d.ts.map

package/dist/core/startup-frame.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"startup-frame.d.ts","sourceRoot":"","sources":["../../src/core/startup-frame.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,KAAK,IAAI,CAAC;CAC1E,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,gBAAgB,GAAG,SAAS,EAClC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GACtC,IAAI,CAQN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,gBAAgB,GAAG;IAChE,QAAQ,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,KAAK,IAAI,CAAC;IACzE,QAAQ,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC;CACtC,CAiBA"}

package/dist/core/startup-frame.js

@@ -1,60 +0,0 @@
-/**
- * Shared startup-frame helpers keeping telemetry off the critical frame path.
- * Implements PRD §5.7/§9.1 (C-API-14, C-API-37): a warning is TELEMETRY and must
- * never control session progress. On the hot terminal-frame callback a throwing
- * `warning`/`activity` listener must not skip the rest of the frame (readiness
- * detection, prompt automation, login/attention detection, `terminal:data`), and the
- * preflight/version warning must reach a caller that subscribes in the same turn it
- * receives the session — so it is delivered on a deferred macrotask AFTER start
- * resolves, not on an early startup frame a caller cannot yet observe.
- */
-/**
- * Delivers `warnings` through `sink` but CONTAINS a throwing listener so frame
- * processing continues. Warnings are live-only: a contained throw drops the warning
- * (it is not retried), exactly as a human's terminal does not re-show a flashed banner.
- */
-export function deliverFrameWarnings(sink, warnings) {
-    if (!sink || warnings.length === 0)
-        return;
-    try {
-        sink.emitWarnings(warnings);
-    }
-    catch {
-        // Telemetry must not wedge the frame: a throwing listener is contained here so
-        // readiness, prompt automation, login detection, and terminal:data still run.
-    }
-}
-/**
- * A buffer-then-live warning sink for the STARTUP region. Warnings emitted BEFORE the
- * caller can subscribe (during the pre-return startup gate — MCP/transcript/preflight
- * diagnostics) are BUFFERED, then flushed on a deferred macrotask AFTER start resolves,
- * so a caller attaching a `warning` listener in the same turn it receives the session
- * still observes them (C-API-14) — WITHOUT restoring general late-subscriber replay.
- * Once opened, delivery is live pass-through. Every observed startup warning is
- * delivered: PRD §5.7/C-API-14 defines no overflow exception, and the buffer drains one
- * macrotask after start resolves, so it is inherently short-lived (the finite set of
- * startup diagnostics), not an unbounded queue — a silent cap could drop the guaranteed
- * `version_unparseable` warning. A macrotask (not a microtask) is required: a microtask
- * runs before the caller's post-`await` continuation, so it would fire into no listener.
- */
-export function createStartupWarningGate(sink) {
-    let open = false;
-    const buffered = [];
-    return {
-        emitWarnings: (warnings) => {
-            if (open)
-                return deliverFrameWarnings(sink, warnings);
-            buffered.push(...warnings);
-        },
-        openAfterReturn: () => {
-            const timer = setTimeout(() => {
-                open = true; // subsequent startup-frame warnings deliver live from here on
-                const batch = buffered.splice(0);
-                if (batch.length > 0)
-                    deliverFrameWarnings(sink, batch);
-            }, 0);
-            timer.unref?.();
-        },
-    };
-}
-//# sourceMappingURL=startup-frame.js.map

package/dist/core/startup-frame.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"startup-frame.js","sourceRoot":"","sources":["../../src/core/startup-frame.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAkC,EAClC,QAAuC;IAEvC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC3C,IAAI,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAsB;IAI7D,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,OAAO;QACL,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE;YACzB,IAAI,IAAI;gBAAE,OAAO,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC7B,CAAC;QACD,eAAe,EAAE,GAAG,EAAE;YACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,GAAG,IAAI,CAAC,CAAC,8DAA8D;gBAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1D,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/startup-write.d.ts

@@ -1,47 +0,0 @@
-/**
- * Completion-aware settlement for automated startup-prompt PTY writes.
- * Implements PRD §5.1, §5.4, and §5.7: a startup prompt is marked answered (its
- * `startup_prompt` activity emitted) ONLY after its `sendInput` write actually
- * fulfills. A rejected write leaves the prompt retryable and surfaces a bounded,
- * content-free `startup_prompt_write_failed` warning instead of false telemetry
- * (C-CLAUDE-16, C-CODEX-17).
- */
-import type { ElwoodAgentKind } from "./activity.ts";
-import type { TrustPromptIdFor } from "./startup-automation.ts";
-import { type StartupActivityEmitter, type StartupPromptLabelFor } from "./startup-automation.ts";
-import type { ElwoodWarningEvent } from "./warnings.ts";
-/**
- * A settled startup-prompt automation, discriminated by `outcome.kind` so the
- * invalid pairings are unrepresentable: an `answered` outcome ALWAYS carries the
- * write-completion `settled` promise (resolves on write success, rejects — after
- * the responder un-settles the prompt — on a rejected write), and an
- * `option_pending` outcome (no write happened) NEVER carries one. This makes a
- * false success ("answered" with no write to await) and a silently lost warning
- * (write present on a non-answered outcome) impossible to construct (§5.4, §5.7).
- */
-export type SettledStartupOutcome<A extends ElwoodAgentKind> = {
-    readonly outcome: {
-        readonly kind: "answered";
-        readonly prompt: StartupPromptLabelFor<A>;
-        readonly input: string;
-    };
-    readonly settled: Promise<void>;
-} | {
-    readonly outcome: {
-        readonly kind: "option_pending";
-        readonly prompt: TrustPromptIdFor<A>;
-    };
-    readonly settled?: undefined;
-};
-/** Where a rejected startup-prompt write is reported. */
-export type StartupWarningSink = {
-    emitWarnings(warnings: readonly ElwoodWarningEvent[]): void;
-};
-/**
- * Emit each settled automation's activity at the RIGHT time: an `option_pending`
- * or write-less outcome emits immediately; a write-backed `answered` outcome emits
- * its `startup_prompt` activity only once the write resolves, and on rejection
- * emits a bounded warning instead — never a false "answered" activity.
- */
-export declare function emitSettledStartupOutcomes<A extends ElwoodAgentKind>(emitter: StartupActivityEmitter, agent: A, elwoodSessionId: string, settledOutcomes: readonly SettledStartupOutcome<NoInfer<A>>[], warnings: StartupWarningSink | undefined): void;
-//# sourceMappingURL=startup-write.d.ts.map

package/dist/core/startup-write.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"startup-write.d.ts","sourceRoot":"","sources":["../../src/core/startup-write.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAE3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,kBAAkB,EAA4B,MAAM,eAAe,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,IACvD;IACE,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC;IAC5F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;CAC9B,CAAC;AAEN,yDAAyD;AACzD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI,CAAC;CAC7D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,eAAe,EAClE,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,CAAC,EACR,eAAe,EAAE,MAAM,EAIvB,eAAe,EAAE,SAAS,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAC7D,QAAQ,EAAE,kBAAkB,GAAG,SAAS,GACvC,IAAI,CAgCN"}

package/dist/core/startup-write.js

@@ -1,73 +0,0 @@
-/**
- * Completion-aware settlement for automated startup-prompt PTY writes.
- * Implements PRD §5.1, §5.4, and §5.7: a startup prompt is marked answered (its
- * `startup_prompt` activity emitted) ONLY after its `sendInput` write actually
- * fulfills. A rejected write leaves the prompt retryable and surfaces a bounded,
- * content-free `startup_prompt_write_failed` warning instead of false telemetry
- * (C-CLAUDE-16, C-CODEX-17).
- */
-import { emitStartupPromptActivity, } from "./startup-automation.js";
-/**
- * Emit each settled automation's activity at the RIGHT time: an `option_pending`
- * or write-less outcome emits immediately; a write-backed `answered` outcome emits
- * its `startup_prompt` activity only once the write resolves, and on rejection
- * emits a bounded warning instead — never a false "answered" activity.
- */
-export function emitSettledStartupOutcomes(emitter, agent, elwoodSessionId, 
-// `NoInfer` blocks inference of `A` from the outcomes, so `A` is pinned by the
-// `agent` argument alone. Passing Codex outcomes with `agent: "claude"` no
-// longer widens `A` to the union and cannot construct a cross-agent warning.
-settledOutcomes, warnings) {
-    for (const settledOutcome of settledOutcomes) {
-        if (settledOutcome.settled === undefined) {
-            // An `option_pending` outcome: no write happened, so there is nothing to
-            // await — emit its attention activity immediately. The discriminated union
-            // guarantees this branch is only ever `option_pending`. CONTAIN a throwing
-            // activity listener exactly as the promise-backed branch does: this runs on the
-            // hot startup frame, so an escaping throw would skip the rest of the frame
-            // (readiness/blocking observation, `terminal:data`) and could let an already-armed
-            // readiness deadline drain queued input into an unlatched dialog (C-API-28).
-            try {
-                emitStartupPromptActivity(emitter, agent, elwoodSessionId, settledOutcome.outcome);
-            }
-            catch {
-                // Telemetry must not wedge the frame; the activity is dropped (live-only).
-            }
-            continue;
-        }
-        // An `answered` outcome always carries the write-completion promise: its
-        // activity is emitted only once the write fulfills, and a rejected write
-        // surfaces a bounded warning instead of a false "answered" activity.
-        const { outcome, settled } = settledOutcome;
-        // A terminal `.catch` OWNS the derived promise: both continuations call public
-        // event paths that can throw (activity emission rethrows listener failures;
-        // warning recording can fail), and a floated rejection would be an unhandled
-        // rejection that can terminate the host during startup. Swallow it here.
-        settled
-            .then(() => emitStartupPromptActivity(emitter, agent, elwoodSessionId, outcome), () => warnings?.emitWarnings([writeFailedWarning(agent, elwoodSessionId, outcome)]))
-            .catch(() => undefined);
-    }
-}
-// `agent` and `outcome` are always the SAME concrete `A` here — the caller
-// (`emitSettledStartupOutcomes`) already pins `A` via NoInfer, so this internal
-// helper needs no extra guard and its correlation is enforced by construction.
-function writeFailedWarning(agent, elwoodSessionId, outcome) {
-    // `outcome.prompt` is already the agent-correlated label, so no cast discards
-    // the correlation: an off-agent (label, agent) pairing cannot be constructed.
-    const label = outcome.prompt;
-    const warning = {
-        elwoodSessionId,
-        agent,
-        source: "terminal",
-        code: "startup_prompt_write_failed",
-        severity: "warning",
-        message: `Startup prompt ${label} could not be answered: PTY write was rejected; leaving it retryable.`,
-        label,
-        raw: `startup_prompt_write_failed label=${label}`,
-    };
-    // A concrete `StartupPromptWriteFailed<"claude"|"codex">` IS an ElwoodWarningEvent
-    // member; the widening bridges TS's generic-union assignability gap only (the
-    // agent/label correlation above is already enforced at construction).
-    return warning;
-}
-//# sourceMappingURL=startup-write.js.map

package/dist/core/startup-write.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"startup-write.js","sourceRoot":"","sources":["../../src/core/startup-write.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EACL,yBAAyB,GAI1B,MAAM,yBAAyB,CAAC;AA+BjC;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA+B,EAC/B,KAAQ,EACR,eAAuB;AACvB,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,eAA6D,EAC7D,QAAwC;IAExC,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACzC,yEAAyE;YACzE,2EAA2E;YAC3E,2EAA2E;YAC3E,gFAAgF;YAChF,2EAA2E;YAC3E,mFAAmF;YACnF,6EAA6E;YAC7E,IAAI,CAAC;gBACH,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;YAC7E,CAAC;YACD,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;QAC5C,+EAA+E;QAC/E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,OAAO;aACJ,IAAI,CACH,GAAG,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EACzE,GAAG,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CACpF;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,gFAAgF;AAChF,+EAA+E;AAC/E,SAAS,kBAAkB,CACzB,KAAQ,EACR,eAAuB,EACvB,OAAgC;IAEhC,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAgC;QAC3C,eAAe;QACf,KAAK;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,kBAAkB,KAAK,uEAAuE;QACvG,KAAK;QACL,GAAG,EAAE,qCAAqC,KAAK,EAAE;KAClD,CAAC;IACF,mFAAmF;IACnF,8EAA8E;IAC9E,sEAAsE;IACtE,OAAO,OAA6B,CAAC;AACvC,CAAC"}

package/dist/core/trust-blocking.d.ts

@@ -1,22 +0,0 @@
-/**
- * Shared builder for the per-agent trust blocking screen-fact rules.
- * Implements PRD §5.1/§5.5 (C-ATTN-03): a trust prompt that stays UNANSWERED
- * under the policy classifies as a blocking prompt. Both adapters build these
- * rules identically, so the construction — option-aware header recognition,
- * stable semantic ids, base-table append — lives here once instead of diverging
- * across `claude/screen-table.ts` and `codex/screen-table.ts`.
- */
-import type { ElwoodAgentKind } from "./activity.ts";
-import type { ScreenFactTable } from "./screen-facts.ts";
-/**
- * `base` plus one `blocking_prompt_visible` rule per trust prompt that stays
- * unanswered under `autotrust`. Each rule recognizes the prompt only by its
- * HEADER outside the option region (`trustHeaderMatches`, the same recognizer
- * the responder uses; the non-option text is computed once per frame and cached
- * across the rules), so an unrelated numbered/cursor option containing a trust
- * phrase is NOT mistaken for a blocking trust prompt (PRD §5.1). Returns `base`
- * unchanged when no trust prompt blocks (e.g. every allowlisted prompt is
- * auto-answered).
- */
-export declare function withTrustBlockingRules(base: ScreenFactTable, agent: ElwoodAgentKind, autotrust: boolean): ScreenFactTable;
-//# sourceMappingURL=trust-blocking.d.ts.map

package/dist/core/trust-blocking.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-blocking.d.ts","sourceRoot":"","sources":["../../src/core/trust-blocking.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIzE;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,OAAO,GACjB,eAAe,CAgBjB"}