@with-logic/elwood 0.1.0 → 0.1.1

package/dist/core/trust-blocking.js

@@ -1,38 +0,0 @@
-/**
- * Shared builder for the per-agent trust blocking screen-fact rules.
- * Implements PRD §5.1/§5.5 (C-ATTN-03): a trust prompt that stays UNANSWERED
- * under the policy classifies as a blocking prompt. Both adapters build these
- * rules identically, so the construction — option-aware header recognition,
- * stable semantic ids, base-table append — lives here once instead of diverging
- * across `claude/screen-table.ts` and `codex/screen-table.ts`.
- */
-import { nonOptionText } from "./terminal-options.js";
-import { blockingTrustSpecs, trustHeaderMatches } from "./trust-prompts.js";
-/**
- * `base` plus one `blocking_prompt_visible` rule per trust prompt that stays
- * unanswered under `autotrust`. Each rule recognizes the prompt only by its
- * HEADER outside the option region (`trustHeaderMatches`, the same recognizer
- * the responder uses; the non-option text is computed once per frame and cached
- * across the rules), so an unrelated numbered/cursor option containing a trust
- * phrase is NOT mistaken for a blocking trust prompt (PRD §5.1). Returns `base`
- * unchanged when no trust prompt blocks (e.g. every allowlisted prompt is
- * auto-answered).
- */
-export function withTrustBlockingRules(base, agent, autotrust) {
-    let cachedFrame;
-    let cachedHeader = "";
-    const headerFor = (text) => {
-        if (text !== cachedFrame) {
-            cachedFrame = text;
-            cachedHeader = nonOptionText(text);
-        }
-        return cachedHeader;
-    };
-    const rules = blockingTrustSpecs(agent, autotrust).map((spec) => ({
-        id: `${agent}-${spec.id}-prompt`,
-        fact: "blocking_prompt_visible",
-        match: (text) => trustHeaderMatches(headerFor(text), spec),
-    }));
-    return rules.length === 0 ? base : { ...base, rules: [...base.rules, ...rules] };
-}
-//# sourceMappingURL=trust-blocking.js.map

package/dist/core/trust-blocking.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-blocking.js","sourceRoot":"","sources":["../../src/core/trust-blocking.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE5E;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAqB,EACrB,KAAsB,EACtB,SAAkB;IAElB,IAAI,WAA+B,CAAC;IACpC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE;QACjC,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,WAAW,GAAG,IAAI,CAAC;YACnB,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IACF,MAAM,KAAK,GAAqB,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClF,EAAE,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,EAAE,SAAS;QAChC,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;KAC3D,CAAC,CAAC,CAAC;IACJ,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;AACnF,CAAC"}

package/dist/core/trust-prompts.d.ts

@@ -1,135 +0,0 @@
-/**
- * Allowlist of known adapter startup trust prompts and how to answer them.
- * Implements PRD §5.1 and §5.5 (C-CLAUDE-10, C-CODEX-11, C-CLAUDE-14, C-CODEX-15).
- *
- * This is an EXPLICIT allowlist, not an open-ended matcher: each entry names one
- * concrete prompt by its on-screen text and a fixed affirmative outcome. A new
- * CLI prompt is trusted only by adding a deliberate entry here — Elwood never
- * blanket-answers "any first-run confirmation", which would silently bypass a
- * future CLI security gate for third-party code or config.
- */
-import type { ElwoodAgentKind } from "./activity.ts";
-/**
- * The fields common to every allowlisted trust prompt. The prompt and its answer
- * are BOTH matched within the same current frame: `headerPattern` identifies the
- * prompt by its HEADER wording, and `accept` matches the exact affirmative option
- * label in that same prompt. This prevents a stale phrase from one frame pairing
- * with a "Yes" from a different, current dialog (which could auto-confirm an
- * unrelated security gate). `headerPattern` is a HEADER matcher, not a
- * whole-frame matcher: it is only safe when tested against the frame's non-option
- * lines (via `trustHeaderMatches`), never applied raw to the full frame.
- */
-type TrustPromptBase = {
-    /**
-     * Identifies the prompt by its HEADER wording. MUST be tested only against the
-     * frame's non-option lines (see `trustHeaderMatches`) — applying it raw to the
-     * full frame would let an option-only trust phrase spoof recognition.
-     * Verified against the CLI versions below.
-     */
-    readonly headerPattern: RegExp;
-    /** Matches the exact affirmative option label for THIS prompt (per-prompt, not generic). */
-    readonly accept: RegExp;
-};
-/**
- * When an allowlisted prompt is answered. `"autotrust"` prompts are answered ONLY
- * under the caller's full-trust posture; `"always"` prompts are answered
- * regardless of it (Elwood's own hook bridge, never third-party code).
- */
-export type TrustAnswerPolicy = "always" | "autotrust";
-/**
- * One allowlisted trust prompt, as an agent+id-DISCRIMINATED union so that (a) a
- * typo in `id` cannot compile into a public startup label, and (b)
- * `answerPolicy: "always"` — answered regardless of `autotrust` — is permitted
- * ONLY on Codex `hook_trust`, Elwood's OWN integration (the hook bridge) that the
- * session requires to work. Every third-party trust prompt (skills, plugins, MCP
- * servers, folder trust) is `answerPolicy: "autotrust"`, staying gated on the
- * caller's full-trust posture, so the invalid "third-party prompt answered
- * always" state is unrepresentable.
- */
-export type TrustPromptSpec = ({
-    readonly agent: "claude";
-    readonly id: ClaudeTrustPromptId;
-    readonly answerPolicy: "autotrust";
-} & TrustPromptBase) | ({
-    readonly agent: "codex";
-    readonly id: "workspace_trust";
-    readonly answerPolicy: "autotrust";
-} & TrustPromptBase) | ({
-    readonly agent: "codex";
-    readonly id: "hook_trust";
-    /** Answered regardless of `autotrust`: Elwood's own hook bridge (never third-party code). */
-    readonly answerPolicy: "always";
-} & TrustPromptBase);
-/** The Claude trust-prompt ids: folder trust plus the CLI's first-run skill/plugin/MCP gates. */
-type ClaudeTrustPromptId = "workspace_trust" | "skill_trust" | "plugin_trust" | "mcp_trust";
-/**
- * The allowlist. Wording verified against claude 2.1.205–2.1.252 and codex-cli 0.142.5.
- * `workspace`/`directory` trust are the folder-trust gates; `skill`, `plugin`,
- * and `mcp` cover the CLI's first-run trust prompts for loading third-party
- * skills, plugins, and MCP servers under a full-trust launch.
- */
-export declare const trustPromptAllowlist: readonly [{
-    readonly id: "workspace_trust";
-    readonly agent: "claude";
-    readonly headerPattern: RegExp;
-    readonly accept: RegExp;
-    readonly answerPolicy: "autotrust";
-}, {
-    readonly id: "skill_trust";
-    readonly agent: "claude";
-    readonly headerPattern: RegExp;
-    readonly accept: RegExp;
-    readonly answerPolicy: "autotrust";
-}, {
-    readonly id: "plugin_trust";
-    readonly agent: "claude";
-    readonly headerPattern: RegExp;
-    readonly accept: RegExp;
-    readonly answerPolicy: "autotrust";
-}, {
-    readonly id: "mcp_trust";
-    readonly agent: "claude";
-    readonly headerPattern: RegExp;
-    readonly accept: RegExp;
-    readonly answerPolicy: "autotrust";
-}, {
-    readonly id: "workspace_trust";
-    readonly agent: "codex";
-    readonly headerPattern: RegExp;
-    readonly accept: RegExp;
-    readonly answerPolicy: "autotrust";
-}, {
-    readonly id: "hook_trust";
-    readonly agent: "codex";
-    readonly headerPattern: RegExp;
-    readonly accept: RegExp;
-    readonly answerPolicy: "always";
-}];
-/**
- * True when `spec`'s HEADER wording appears in `header` — the frame's NON-option
- * text as produced by `nonOptionText`. This is the ONE shared, option-aware
- * recognizer: the responder, the cursor navigator, and the screen-fact blocking
- * rules all go through it (each computes `nonOptionText` once per frame and
- * tests every spec against that), so a numbered or cursor-selectable option whose
- * label merely contains a trust phrase is never recognized as a prompt. Matching
- * joined non-option lines also keeps wrapped headers matchable (§5.1).
- */
-export declare function trustHeaderMatches(header: string, spec: TrustPromptBase): boolean;
-/** `trustHeaderMatches` over a raw frame, for callers that test a single spec. */
-export declare function trustPromptHeaderVisible(frame: string, spec: TrustPromptBase): boolean;
-/**
- * The stable public `startup_prompt` trust labels (§5.4), derived from the
- * allowlist so the two can never drift: deleting, adding, or renaming an entry
- * updates this union automatically. Because `TrustPromptSpec` fixes each agent's
- * ids to a closed literal union, a typo in an entry's `id` fails to compile
- * against `satisfies` rather than silently widening this derived label union.
- */
-export type TrustPromptId = (typeof trustPromptAllowlist)[number]["id"];
-/** The trust label ids for one specific agent (e.g. Codex automation cannot use a Claude-only id). */
-export type TrustPromptIdFor<A extends ElwoodAgentKind> = Extract<(typeof trustPromptAllowlist)[number], {
-    readonly agent: A;
-}>["id"];
-/** Specs for one agent that stay UNANSWERED under the effective policy (block on the human). */
-export declare function blockingTrustSpecs(agent: ElwoodAgentKind, autotrust: boolean): readonly TrustPromptSpec[];
-export {};
-//# sourceMappingURL=trust-prompts.d.ts.map

package/dist/core/trust-prompts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-prompts.d.ts","sourceRoot":"","sources":["../../src/core/trust-prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;;;;;;;GASG;AACH,KAAK,eAAe,GAAG;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEvD;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GACvB,CAAC;IACC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,mBAAmB,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;CACpC,GAAG,eAAe,CAAC,GACpB,CAAC;IACC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;CACpC,GAAG,eAAe,CAAC,GACpB,CAAC;IACC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B,6FAA6F;IAC7F,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC;CACjC,GAAG,eAAe,CAAC,CAAC;AAEzB,iGAAiG;AACjG,KAAK,mBAAmB,GAAG,iBAAiB,GAAG,aAAa,GAAG,cAAc,GAAG,WAAW,CAAC;AAW5F;;;;;GAKG;AAKH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsDc,CAAC;AAEhD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAEjF;AAED,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAEtF;AAED;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAExE,sGAAsG;AACtG,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,eAAe,IAAI,OAAO,CAC/D,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,EACrC;IAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CACtB,CAAC,IAAI,CAAC,CAAC;AAER,gGAAgG;AAChG,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,OAAO,GACjB,SAAS,eAAe,EAAE,CAM5B"}

package/dist/core/trust-prompts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-prompts.js","sourceRoot":"","sources":["../../src/core/trust-prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AA8DtD,oFAAoF;AACpF,MAAM,UAAU,GAAG,qDAAqD,CAAC;AACzE,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,sCAAsC,EAAE,GAAG,CAAC,CAAC;AACxF,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,mCAAmC,EAAE,GAAG,CAAC,CAAC;AACxF,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,mCAAmC,EAAE,GAAG,CAAC,CAAC;AAE5F;;;;;GAKG;AACH,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC;QACE,2EAA2E;QAC3E,0EAA0E;QAC1E,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,4DAA4D;QAC3E,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,0EAA0E;QACzF,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,mEAAmE;QAClF,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,2EAA2E;QAC3E,2EAA2E;QAC3E,0DAA0D;QAC1D,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,4DAA4D;QAC3E,MAAM,EAAE,YAAY;QACpB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,wEAAwE;QACxE,4DAA4D;QAC5D,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,8CAA8C;QAC7D,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD,+EAA+E;IAC/E,iFAAiF;IACjF;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,oBAAoB;QACnC,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,QAAQ;KACvB;CAC4C,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAqB;IACtE,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,IAAqB;IAC3E,OAAO,kBAAkB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAiBD,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,SAAkB;IAElB,OAAO,oBAAoB,CAAC,MAAM;IAChC,8EAA8E;IAC9E,gFAAgF;IAChF,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,SAAS,CAC/E,CAAC;AACJ,CAAC"}

package/dist/core/trust-responder.d.ts

@@ -1,48 +0,0 @@
-/**
- * Detects and answers the allowlisted family of adapter startup trust prompts.
- * Implements PRD §5.1 and §9.1 (C-CLAUDE-10, C-CODEX-11, C-CLAUDE-14, C-CODEX-15).
- *
- * Policy (PRD §5.1): an agent must NEVER be left waiting on a trust gate.
- * Under the caller's full-trust posture, when an allowlisted trust prompt is
- * visible in the current frame, Elwood selects its affirmative option and sends
- * it — always say yes. Elwood only auto-answers ALLOWLISTED prompts (an
- * off-allowlist confirmation is left to the human), and never re-answers the same
- * prompt; those are the only limits.
- */
-import type { ElwoodAgentKind } from "./activity.ts";
-import { type TrustPromptIdFor } from "./trust-prompts.ts";
-/** An answered trust prompt; `prompt` is narrowed to the responder's agent. */
-export type TrustPromptAutomation<A extends ElwoodAgentKind = ElwoodAgentKind> = {
-    readonly prompt: TrustPromptIdFor<A>;
-    readonly input: string;
-};
-/**
- * The completion of an answered trust write: a `void | Promise<void>` write is
- * normalized to a promise that resolves on success and rejects once the prompt
- * has been un-settled (kept retryable) on a rejected write.
- */
-export type TrustWriteResult = void | Promise<void>;
-/**
- * The outcome of handling a frame: an answered prompt, a recognized prompt whose
- * affirmative option has not rendered yet (a TRANSIENT render delay — under the
- * say-yes policy a later frame carrying the option is still answered, so this is
- * never a terminal wedge), or nothing.
- */
-export type TrustPromptResult<A extends ElwoodAgentKind = ElwoodAgentKind> = {
-    readonly kind: "answered";
-    readonly automation: TrustPromptAutomation<A>;
-    readonly settled: Promise<void>;
-} | {
-    readonly kind: "option_pending";
-    readonly prompt: TrustPromptIdFor<A>;
-} | undefined;
-export declare class TrustPromptResponder<A extends ElwoodAgentKind> {
-    private readonly autotrust;
-    private readonly specs;
-    private readonly settled;
-    private readonly reportedPending;
-    constructor(agent: A, autotrust?: boolean);
-    /** `frame` MUST be the CURRENT rendered screen, not an accumulated buffer. */
-    handle(frame: string, write: (input: string) => TrustWriteResult, readFrame?: () => string): TrustPromptResult<A>;
-}
-//# sourceMappingURL=trust-responder.d.ts.map

package/dist/core/trust-responder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-responder.d.ts","sourceRoot":"","sources":["../../src/core/trust-responder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAQrD,OAAO,EACL,KAAK,gBAAgB,EAItB,MAAM,oBAAoB,CAAC;AAQ5B,+EAA+E;AAC/E,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IAAI;IAC/E,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IACrE;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAG9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,GACzE,SAAS,CAAC;AAEd,qBAAa,oBAAoB,CAAC,CAAC,SAAS,eAAe;IAGzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8B;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAI1D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;gBAEtD,KAAK,EAAE,CAAC,EAAE,SAAS,UAAQ;IAKvC,8EAA8E;IAC9E,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,EAC1C,SAAS,CAAC,EAAE,MAAM,MAAM,GACvB,iBAAiB,CAAC,CAAC,CAAC;CA0CxB"}

package/dist/core/trust-responder.js

@@ -1,119 +0,0 @@
-/**
- * Detects and answers the allowlisted family of adapter startup trust prompts.
- * Implements PRD §5.1 and §9.1 (C-CLAUDE-10, C-CODEX-11, C-CLAUDE-14, C-CODEX-15).
- *
- * Policy (PRD §5.1): an agent must NEVER be left waiting on a trust gate.
- * Under the caller's full-trust posture, when an allowlisted trust prompt is
- * visible in the current frame, Elwood selects its affirmative option and sends
- * it — always say yes. Elwood only auto-answers ALLOWLISTED prompts (an
- * off-allowlist confirmation is left to the human), and never re-answers the same
- * prompt; those are the only limits.
- */
-import { delay } from "./delay.js";
-import { nonOptionText, optionInput, optionKeystrokes, selectableOptions, } from "./terminal-options.js";
-import { trustHeaderMatches, trustPromptAllowlist, trustPromptHeaderVisible, } from "./trust-prompts.js";
-const cursorRetryMs = 250;
-const cursorNavigationTimeoutMs = 5_000;
-export class TrustPromptResponder {
-    // Whether the caller launched under full trust (`autotrust`). `answerPolicy:
-    // "always"` prompts (hook trust) are answered even when this is false.
-    autotrust;
-    specs;
-    settled = new Set();
-    // A prompt whose "option not rendered yet" state was reported once, kept
-    // SEPARATE from `settled` so a later frame with the real option can still be
-    // answered — the pending state is transient, not terminal.
-    reportedPending = new Set();
-    constructor(agent, autotrust = false) {
-        this.autotrust = autotrust;
-        this.specs = trustPromptAllowlist.filter((spec) => spec.agent === agent);
-    }
-    /** `frame` MUST be the CURRENT rendered screen, not an accumulated buffer. */
-    handle(frame, write, readFrame) {
-        const header = nonOptionText(frame);
-        for (const spec of this.specs) {
-            const id = spec.id;
-            // `answerPolicy: "always"` prompts (Elwood's own hook bridge) answer
-            // regardless of autotrust; every other trust prompt requires the caller's
-            // full-trust posture.
-            if (!(this.autotrust || spec.answerPolicy === "always"))
-                continue;
-            // Recognized when the prompt's HEADER wording appears on a NON-OPTION line
-            // (via the shared `trustHeaderMatches`), so a phrase living only inside an
-            // option label can't spoof a prompt. That is the ONLY guard — recognition
-            // means "say yes".
-            if (this.settled.has(id) || !trustHeaderMatches(header, spec))
-                continue;
-            const options = selectableOptions(frame);
-            const option = options.find((candidate) => spec.accept.test(candidate.label));
-            if (option === undefined) {
-                // Affirmative not rendered yet (partial frame). Report once, but DON'T
-                // settle — a later frame with the option can still be answered.
-                if (this.reportedPending.has(id))
-                    continue;
-                this.reportedPending.add(id);
-                return { kind: "option_pending", prompt: id };
-            }
-            // Settle OPTIMISTICALLY so a second frame in the same tick does not re-answer,
-            // but keep the settle contingent on the write: if the write is rejected we
-            // un-settle here so a later frame re-attempts it, and the returned `settled`
-            // promise rejects so the caller emits a warning instead of a false "answered".
-            this.settled.add(id);
-            const input = optionInput(option);
-            const operation = option.style === "cursor"
-                ? readFrame === undefined
-                    ? Promise.reject(new Error("Cursor trust navigation requires live screen reads."))
-                    : navigateCursorOption(spec, input, write, readFrame)
-                : writeOptionKeys(optionKeystrokes(option), write);
-            const settled = operation.catch((error) => {
-                this.settled.delete(id);
-                throw error;
-            });
-            return { kind: "answered", automation: { prompt: id, input }, settled };
-        }
-        return undefined;
-    }
-}
-/** Writes one option's keys in order (numbered prompts and parser-only tests). */
-async function writeOptionKeys(keys, write) {
-    for (const key of keys)
-        await write(key);
-}
-/** Navigates a cursor prompt one observed frame at a time, retrying swallowed startup input. */
-async function navigateCursorOption(spec, originalInput, write, readFrame) {
-    const deadline = Date.now() + cursorNavigationTimeoutMs;
-    while (Date.now() < deadline) {
-        const before = readFrame();
-        if (!trustPromptHeaderVisible(before, spec)) {
-            throw new Error("Cursor trust prompt disappeared before confirmation.");
-        }
-        const target = selectableOptions(before).find((option) => spec.accept.test(option.label));
-        if (target?.style !== "cursor") {
-            await delay(cursorRetryMs);
-            continue;
-        }
-        const key = target.offset === 0 ? "\r" : target.offset < 0 ? "\u001b[A" : "\u001b[B";
-        await write(key);
-        const progress = await waitForCursorProgress(spec, target.offset, readFrame);
-        if (progress === "cleared")
-            return;
-    }
-    throw new Error(`Cursor trust navigation timed out (${originalInput}).`);
-}
-async function waitForCursorProgress(spec, priorOffset, readFrame) {
-    const deadline = Date.now() + cursorRetryMs;
-    while (Date.now() < deadline) {
-        await delay(20);
-        const frame = readFrame();
-        if (!trustPromptHeaderVisible(frame, spec)) {
-            if (priorOffset === 0)
-                return "cleared";
-            throw new Error("Cursor trust prompt disappeared before confirmation.");
-        }
-        const target = selectableOptions(frame).find((option) => spec.accept.test(option.label));
-        if (target?.style === "cursor" && target.offset !== priorOffset)
-            return "retry";
-    }
-    return "retry";
-}
-//# sourceMappingURL=trust-responder.js.map

package/dist/core/trust-responder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-responder.js","sourceRoot":"","sources":["../../src/core/trust-responder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EACL,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAK5B,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAgCxC,MAAM,OAAO,oBAAoB;IAC/B,6EAA6E;IAC7E,uEAAuE;IACtD,SAAS,CAAU;IACnB,KAAK,CAA8B;IACnC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1D,yEAAyE;IACzE,6EAA6E;IAC7E,2DAA2D;IAC1C,eAAe,GAAG,IAAI,GAAG,EAAuB,CAAC;IAElE,YAAY,KAAQ,EAAE,SAAS,GAAG,KAAK;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,MAAM,CACJ,KAAa,EACb,KAA0C,EAC1C,SAAwB;QAExB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAyB,CAAC;YAC1C,qEAAqE;YACrE,0EAA0E;YAC1E,sBAAsB;YACtB,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC;gBAAE,SAAS;YAClE,2EAA2E;YAC3E,2EAA2E;YAC3E,0EAA0E;YAC1E,mBAAmB;YACnB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YACxE,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,uEAAuE;gBACvE,gEAAgE;gBAChE,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC3C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAChD,CAAC;YACD,+EAA+E;YAC/E,2EAA2E;YAC3E,6EAA6E;YAC7E,+EAA+E;YAC/E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,SAAS,GACb,MAAM,CAAC,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,SAAS,KAAK,SAAS;oBACvB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;oBAClF,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;gBACvD,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,kFAAkF;AAClF,KAAK,UAAU,eAAe,CAC5B,IAAuB,EACvB,KAA0C;IAE1C,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,oBAAoB,CACjC,IAAsB,EACtB,aAAqB,EACrB,KAA0C,EAC1C,SAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,yBAAyB,CAAC;IACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1F,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACrF,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7E,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;IACrC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,aAAa,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAsB,EACtB,WAAmB,EACnB,SAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,WAAW,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,OAAO,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/tui-screen.d.ts

@@ -1,21 +0,0 @@
-/**
- * Screen-state polling primitives for TUI automation flows.
- * Implements PRD §5.3 model picker automation.
- */
-export type ScreenTerminal = {
-    sendInput(data: string | Uint8Array): void | Promise<void>;
-    snapshot(): {
-        readonly text: string;
-    };
-};
-export declare const defaultModelTimeoutMs = 20000;
-export declare function waitForScreen(terminal: ScreenTerminal, test: (text: string) => boolean, timeoutMs: number, label: string): Promise<string>;
-export declare function openCommandScreen(input: {
-    readonly terminal: ScreenTerminal;
-    readonly submit: () => Promise<void>;
-    readonly isOpen: (text: string) => boolean;
-    readonly timeoutMs: number;
-    readonly label: string;
-    readonly nudgeDelayMs?: number;
-}): Promise<string>;
-//# sourceMappingURL=tui-screen.d.ts.map

package/dist/core/tui-screen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tui-screen.d.ts","sourceRoot":"","sources":["../../src/core/tui-screen.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,QAAQ,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAI5C,wBAAsB,aAAa,CACjC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,EAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,OAAO,CAAC,MAAM,CAAC,CAiClB"}

package/dist/core/tui-screen.js

@@ -1,56 +0,0 @@
-/**
- * Screen-state polling primitives for TUI automation flows.
- * Implements PRD §5.3 model picker automation.
- */
-import { delay } from "./delay.js";
-import { elwoodError } from "./errors.js";
-export const defaultModelTimeoutMs = 20_000;
-const pollMs = 100;
-const openNudgeDelayMs = 2_000;
-export async function waitForScreen(terminal, test, timeoutMs, label) {
-    const started = Date.now();
-    while (Date.now() - started < timeoutMs) {
-        const text = terminal.snapshot().text;
-        if (test(text))
-            return text;
-        await delay(pollMs);
-    }
-    throw elwoodError("model_automation_failed", `Timed out waiting for ${label}.`);
-}
-export async function openCommandScreen(input) {
-    await input.submit();
-    // The command text or its Enter can be dropped when the TUI is redrawing
-    // (e.g. an MCP-server boot streaming into the composer at startup). A bare
-    // Enter nudge cannot recover a lost command line, so re-submit the whole
-    // command on each nudge interval until the picker opens or the timeout
-    // fires. Re-typing an idempotent slash command on an empty composer, and a
-    // surplus Enter, are both no-ops once the picker is already open.
-    const nudgeDelayMs = input.nudgeDelayMs ?? openNudgeDelayMs;
-    let resubmitting = false;
-    let nudgeTimer;
-    // A re-submit that rejects (e.g. the session closed while polling) must
-    // settle this call with that error immediately, not be dropped as an
-    // unhandled rejection while the caller waits out the picker timeout.
-    const submitFailed = new Promise((_resolve, reject) => {
-        nudgeTimer = setInterval(() => {
-            if (resubmitting || input.isOpen(input.terminal.snapshot().text))
-                return;
-            resubmitting = true;
-            // A rejected re-submit (e.g. the session closed while polling) is
-            // propagated unchanged so the caller settles with the real error.
-            input.submit().then(() => {
-                resubmitting = false;
-            }, reject);
-        }, nudgeDelayMs);
-    });
-    try {
-        return await Promise.race([
-            waitForScreen(input.terminal, input.isOpen, input.timeoutMs, input.label),
-            submitFailed,
-        ]);
-    }
-    finally {
-        clearInterval(nudgeTimer);
-    }
-}
-//# sourceMappingURL=tui-screen.js.map

package/dist/core/tui-screen.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tui-screen.js","sourceRoot":"","sources":["../../src/core/tui-screen.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,MAAM,GAAG,GAAG,CAAC;AACnB,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAwB,EACxB,IAA+B,EAC/B,SAAiB,EACjB,KAAa;IAEb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,WAAW,CAAC,yBAAyB,EAAE,yBAAyB,KAAK,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAOvC;IACC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACrB,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,gBAAgB,CAAC;IAC5D,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,UAAsD,CAAC;IAC3D,wEAAwE;IACxE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,YAAY,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC3D,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;gBAAE,OAAO;YACzE,YAAY,GAAG,IAAI,CAAC;YACpB,kEAAkE;YAClE,kEAAkE;YAClE,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,EAAE,YAAY,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC;YACzE,YAAY;SACb,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/core/update-warning.d.ts

@@ -1,25 +0,0 @@
-/**
- * Builds the best-effort `agent_update_failed` warning (PRD §9.2, C-LIFE-11) shared by both
- * adapter preflights. A `claude update` / `codex update` that fails is contained (never fatal
- * when the installed CLI is compatible) and surfaced as this live warning with the diagnostics
- * the PRD allows — the installed version in use, the update probe's errno, and the updater's own
- * stderr capped at 2 KB in `raw` (the CLI updater's output, never session transcripts or
- * prompts).
- */
-import type { ElwoodAgentKind } from "./activity.ts";
-import type { AgentUpdateFailedWarning } from "./warning-lifecycle.ts";
-/**
- * `Omit` that DISTRIBUTES over a union (`W extends unknown` triggers distribution), unlike the
- * built-in `Omit`, which collapses `A | B` into a single merged object and loses the discriminant.
- * Preflight warning types are unions, so they must use this to stay discriminable after `omit`.
- */
-export type DistributiveOmit<W, K extends PropertyKey> = W extends unknown ? Omit<W, K> : never;
-/** The `agent_update_failed` warning without `elwoodSessionId` (attached when emitted). */
-export type UpdateFailedWarning = Omit<AgentUpdateFailedWarning, "elwoodSessionId">;
-/**
- * Build the warning from the contained update error. `installedVersion` is the parsed version the
- * session will actually run (the preflight re-read it after the failed update). `errorCode` is the
- * update probe's allowlisted `errno` (e.g. `ETIMEDOUT`) when present, else a generic token.
- */
-export declare function updateFailedWarning(agent: ElwoodAgentKind, installedVersion: string, error: unknown): UpdateFailedWarning;
-//# sourceMappingURL=update-warning.d.ts.map

package/dist/core/update-warning.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"update-warning.d.ts","sourceRoot":"","sources":["../../src/core/update-warning.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEvE;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AAEhG,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAAC;AAMpF;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,eAAe,EACtB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,OAAO,GACb,mBAAmB,CAcrB"}

package/dist/core/update-warning.js

@@ -1,33 +0,0 @@
-/**
- * Builds the best-effort `agent_update_failed` warning (PRD §9.2, C-LIFE-11) shared by both
- * adapter preflights. A `claude update` / `codex update` that fails is contained (never fatal
- * when the installed CLI is compatible) and surfaced as this live warning with the diagnostics
- * the PRD allows — the installed version in use, the update probe's errno, and the updater's own
- * stderr capped at 2 KB in `raw` (the CLI updater's output, never session transcripts or
- * prompts).
- */
-import { ElwoodError } from "./errors.js";
-// Cap on the stderr carried in the warning's `raw`, so a hostile/verbose updater cannot flood a
-// warning payload. The probe layer already bounds captured output; this is a second, tighter cap.
-const maxStderr = 2_000;
-/**
- * Build the warning from the contained update error. `installedVersion` is the parsed version the
- * session will actually run (the preflight re-read it after the failed update). `errorCode` is the
- * update probe's allowlisted `errno` (e.g. `ETIMEDOUT`) when present, else a generic token.
- */
-export function updateFailedWarning(agent, installedVersion, error) {
-    const details = error instanceof ElwoodError ? error.details : {};
-    const errno = typeof details["errno"] === "string" ? details["errno"] : undefined;
-    const stderr = typeof details["stderr"] === "string" ? details["stderr"] : "";
-    return {
-        agent,
-        source: "lifecycle",
-        code: "agent_update_failed",
-        severity: "warning",
-        message: `\`${agent} update\` failed; continuing with the installed CLI ${installedVersion}.`,
-        installedVersion,
-        errorCode: errno ?? "update_failed",
-        raw: stderr.slice(0, maxStderr),
-    };
-}
-//# sourceMappingURL=update-warning.js.map

package/dist/core/update-warning.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"update-warning.js","sourceRoot":"","sources":["../../src/core/update-warning.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa1C,gGAAgG;AAChG,kGAAkG;AAClG,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,gBAAwB,EACxB,KAAc;IAEd,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO;QACL,KAAK;QACL,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,KAAK,KAAK,uDAAuD,gBAAgB,GAAG;QAC7F,gBAAgB;QAChB,SAAS,EAAE,KAAK,IAAI,eAAe;QACnC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;KAChC,CAAC;AACJ,CAAC"}

package/dist/core/warning-lifecycle.d.ts

@@ -1,23 +0,0 @@
-/**
- * Lifecycle preflight warning shapes split out of the main warning union (§9.2, C-LIFE-11) to
- * keep `warnings.ts` under the file-size cap. These are ordinary `ElwoodWarningEvent` members.
- */
-import type { ElwoodAgentKind } from "./activity.ts";
-/**
- * Best-effort `claude update` / `codex update` failed but the INSTALLED CLI still meets the
- * minimum, so the session started from it. Safe diagnostics only: the installed version in use,
- * an allowlisted `errorCode` (a probe timeout/`errno`), and bounded `raw` stderr — never terminal
- * transcripts, prompts, tokens, or environment secrets.
- */
-export type AgentUpdateFailedWarning = {
-    readonly elwoodSessionId: string;
-    readonly agent: ElwoodAgentKind;
-    readonly source: "lifecycle";
-    readonly code: "agent_update_failed";
-    readonly severity: "warning";
-    readonly message: string;
-    readonly installedVersion: string;
-    readonly errorCode: string;
-    readonly raw: string;
-};
-//# sourceMappingURL=warning-lifecycle.d.ts.map

package/dist/core/warning-lifecycle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"warning-lifecycle.d.ts","sourceRoot":"","sources":["../../src/core/warning-lifecycle.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC"}

package/dist/core/warning-lifecycle.js

@@ -1,6 +0,0 @@
-/**
- * Lifecycle preflight warning shapes split out of the main warning union (§9.2, C-LIFE-11) to
- * keep `warnings.ts` under the file-size cap. These are ordinary `ElwoodWarningEvent` members.
- */
-export {};
-//# sourceMappingURL=warning-lifecycle.js.map

package/dist/core/warning-lifecycle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"warning-lifecycle.js","sourceRoot":"","sources":["../../src/core/warning-lifecycle.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/core/warning-reasons.d.ts

@@ -1,62 +0,0 @@
-/**
- * The fixed allowlists of bounded reason/error-code tokens carried by content-free
- * warnings, and their derived types + guards.
- * Implements PRD §5.7 (C-CLAUDE-15, C-LIFE-10): the `reason` field of a
- * `transcript_poll_stopped` warning and the `errorCode` field of a `reap_failed`
- * warning may carry ONLY a value from a fixed allowlist — never a raw system
- * message or a caller-controlled string that could leak content into a live
- * warning. This module is the single source of truth the unions and their
- * producers derive from, so a producer and its type can never drift apart.
- */
-/** The fixed fallback token every bounded error-token allowlist collapses to. */
-export declare const unknownErrorToken = "UnknownError";
-/**
- * Maps an arbitrary thrown value to a bounded, ALLOWLISTED token, shared by every
- * content-free warning that carries a normalized error code (reap, transcript
- * poll, resize restore). An error's `.code` (errno), `Error.name`, and message are
- * all system/caller-controlled and can embed an env path or conversation text, so
- * only a value the caller's `allow` guard accepts passes through; anything else —
- * including a raw system message — collapses to `UnknownError`. This is the single
- * place the sanitizing rule lives, so no producer can weaken it (§5.7).
- */
-export declare function boundedErrorToken<T extends string>(error: unknown, allow: (value: unknown) => value is T): T | typeof unknownErrorToken;
-/**
- * The allowlisted tokens for `transcript_poll_stopped.reason`: standard JS error
- * constructor names + common Node filesystem/stream errnos, plus the fixed
- * `UnknownError` fallback that any unrecognized value collapses to.
- */
-export declare const pollErrorReasons: readonly ["UnknownError", "Error", "TypeError", "RangeError", "ReferenceError", "SyntaxError", "EvalError", "URIError", "AggregateError", "ENOENT", "EACCES", "EPERM", "EISDIR", "ENOTDIR", "EBADF", "EMFILE", "ENFILE", "ELOOP", "ENAMETOOLONG", "EBUSY", "EAGAIN", "EIO"];
-/** A bounded, allowlisted `transcript_poll_stopped.reason` token. */
-export type PollErrorReason = (typeof pollErrorReasons)[number];
-export declare function isPollErrorReason(value: unknown): value is PollErrorReason;
-/**
- * The allowlisted tokens for `reap_failed.errorCode`: standard JS error
- * constructor names + the process-signalling errnos a group SIGKILL can surface,
- * plus the fixed `UnknownError` fallback any unrecognized value collapses to. A
- * reap failure's error `name`/`.code`/message are caller/system-controlled, so
- * only a value on this allowlist may reach the live warning.
- */
-export declare const reapErrorCodes: readonly ["UnknownError", "Error", "TypeError", "RangeError", "ReferenceError", "EPERM", "ESRCH", "EINVAL", "EACCES", "EAGAIN"];
-/** A bounded, allowlisted `reap_failed.errorCode` token. */
-export type ReapErrorCode = (typeof reapErrorCodes)[number];
-export declare function isReapErrorCode(value: unknown): value is ReapErrorCode;
-/** Why transcript data was lost, so cause is never mislabeled. */
-export declare const dropCauses: readonly ["unparseable", "oversized", "unread_backlog"];
-/** A bounded `transcript_records_dropped.cause` token. */
-export type DropCause = (typeof dropCauses)[number];
-/**
- * The allowlisted tokens for `resize_restore_failed.errorCode`: standard JS error
- * constructor names + the errnos a native PTY resize can surface, plus the fixed
- * `UnknownError` fallback any unrecognized value collapses to. A resize failure's
- * error `name`/`.code`/message are system-controlled, so only a value on this
- * allowlist may reach the live warning (§5.7).
- */
-export declare const resizeErrorCodes: readonly ["UnknownError", "Error", "TypeError", "RangeError", "ReferenceError", "EBADF", "EINVAL", "EIO", "ENXIO", "EPERM", "EACCES"];
-/** A bounded, allowlisted `resize_restore_failed.errorCode` token. */
-export type ResizeErrorCode = (typeof resizeErrorCodes)[number];
-export declare function isResizeErrorCode(value: unknown): value is ResizeErrorCode;
-/** Which lifecycle phase a transcript failure occurred in. */
-export declare const pollPhases: readonly ["poll", "final_flush"];
-/** A bounded `transcript_poll_stopped.phase` token. */
-export type PollPhase = (typeof pollPhases)[number];
-//# sourceMappingURL=warning-reasons.d.ts.map