@with-logic/elwood 0.1.0 → 0.1.2

package/README.md

@@ -1,16 +1,54 @@
-# Elwood
-
-Elwood is a TypeScript library and command-line tool for driving interactive
-agentic coding CLIs through real terminal sessions. It starts tools like Claude
-Code and Codex the way they are designed to run, inside an interactive PTY, and
-lets a host application send prompts and key presses, render the live terminal,
-and observe a typed event stream for hooks, tool calls, transcript activity,
-warnings, and lifecycle state. The governing constraint is that the agent should
-not know it is wrapped: the process stays interactive, runs in the user's normal
-shell environment, and is controlled through the hooks and transcripts the CLI
-already provides. The first supported adapters are Claude Code and Codex CLI.
-
-`PRD.md` is the source of truth for observable behavior. If this README, the
+<div align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="site/assets/landing/robot-mark-dark.webp" />
+    <img src="site/assets/landing/robot-mark-light.webp" alt="" width="96" height="96" />
+  </picture>
+  <h1>Elwood</h1>
+  <p><a href="https://elwood.bot">elwood.bot</a></p>
+</div>
+
+**Automate real Claude Code and Codex sessions in headless PTYs.**
+
+Write scripts that control normal interactive Claude Code and Codex sessions,
+which use your regular subscription rather than metered API billing. Elwood
+starts the actual agent CLI in a hidden terminal and types into it the way you
+would. The agent keeps its tools, hooks, configuration, and login.
+
+```sh
+npm install -g @with-logic/elwood
+elwood "Explain this project's architecture."
+```
+
+```ts
+import { ClaudeSession } from "@with-logic/elwood";
+
+const session = new ClaudeSession({ cwd: "/path/to/project" });
+console.log(await session.send("Explain this project."));
+await session.close();
+```
+
+---
+
+## Why Elwood
+
+> **The agent should not know it is wrapped.**
+
+Headless agent APIs give you a different product than the CLI your team
+actually uses: different tools, different hooks, different billing. Elwood
+drives the real interactive CLI instead. The process stays interactive, runs in
+your normal shell environment, and is controlled through the hooks and
+transcripts the CLI already provides.
+
+- **Your subscription, not an API key.** It is the same interactive session you
+  run by hand, so it bills the way that session already bills.
+- **A small API over a real terminal.** `send()` returns a string. `stream()`
+  yields typed events. The CLI keeps its own tools and history.
+- **Typed activity, not screen scraping.** Assistant text, reasoning, tool
+  calls and results, hooks, warnings, and lifecycle arrive as one event stream.
+- **Two ways in.** A TypeScript library for applications, and an `elwood`
+  command for shell scripts and pipelines.
+
+[`prd/`](prd/README.md) is the source of truth for observable behavior. If this README, the
 tests, or the implementation disagree with the PRD, the PRD wins.
 
 ## Requirements
@@ -30,8 +68,11 @@ continues. Pass `strictVersionCheck: true` to fail closed instead.
 npm install @with-logic/elwood
 ```
 
-The package installs an `elwood` executable for the headless CLI. To work from a
-checkout instead, run `npm install && npm run build && npm link`.
+The package installs an `elwood` executable for the headless CLI. It ships a
+prebuilt `dist/`, so a global install runs no build step and no install scripts
+of its own. To work from a checkout instead, run
+`npm install && npm run build && npm link`; the build is explicit because
+`dist/` is not committed.
 
 ## Quickstart: library
 
@@ -54,9 +95,10 @@ for await (const event of session.stream("Run the test suite and report failures
 await session.close();
 ```
 
-`CodexSession` has the same shape. `autotrust: true` lets Elwood answer the
-CLI's workspace trust prompt for `cwd` on your behalf; leave it off when a human
-should make that decision. There is no default turn timeout; pass
+`CodexSession` has the same shape. `autotrust: true` lets Elwood answer its
+allowlisted workspace and extension trust prompts on your behalf; see
+[Security and privacy](#security-and-privacy) for the full scope. Leave it off
+when a human should make those decisions. There is no default turn timeout; pass
 `send(prompt, { timeoutMs })` (a `TurnOptions` field) to bound one turn.
 
 ## Quickstart: CLI
@@ -105,6 +147,194 @@ and `blocked` (a dialog needs a human) and ends in `stopped`, `exited`,
 `<cwd>/.elwood` by default, or under an explicit `stateDir`. It holds what
 resume needs and nothing else.
 
+## Headless CLI
+
+### Live terminal view
+
+Add `--head` when you want to watch the real agent interface while retaining a
+pipeline-friendly final result:
+
+```sh
+elwood --head "Run the test suite and fix the failure"
+elwood --head --output json "Review this repository" >result.json
+elwood --head --agent claude "Explain the architecture"
+```
+
+The display stays in the current terminal and receives the raw PTY byte stream on
+stderr. It is a real VT/ANSI mirror, so full-screen layouts, cursor-addressed
+updates, alternate-screen buffers, colors, spinners, and title changes render as
+they do in the underlying Claude or Codex client. Stdout remains only the final
+text or JSON protocol and can be redirected independently. Pending display work
+is capped at 4 MiB or 1,024 frames; a terminal that remains backpressured fails
+the run cleanly after draining accepted bytes instead of growing memory without
+bound.
+
+Head mode is deliberately view-only: while attached, ordinary keyboard, mouse,
+paste, and terminal-response bytes are discarded; Ctrl-C still interrupts using
+Elwood's normal first-interrupt/repeated-force-kill lifecycle. Terminal resizes
+propagate to the agent. Elwood restores raw/cooked input state, mouse and paste
+modes, attributes, cursor visibility, and the main screen before printing the
+final result. Both stdin and stderr must be terminals, and `--head` cannot be
+combined with `--stream`, `--verbose`, `--debug`, or `--output jsonl`.
+
+### Continuation and cleanup
+
+New runs are ephemeral unless `--keep` is supplied. A kept text run reports its
+session ID on stderr; JSON and JSONL include it in the terminal record:
+
+```sh
+first=$(elwood --keep --output json "Remember that the release color is teal")
+id=$(printf '%s' "$first" | jq -r .sessionId)
+elwood --resume "$id" "What is the release color?"
+elwood --resume "$id" --ephemeral "Finish this conversation"
+```
+
+Resume uses the exact stored agent and workspace; conflicting `--agent` and any
+`--cwd` are rejected. Resumed sessions stay preserved after success or failure unless
+`--ephemeral` requests teardown. Ephemeral teardown removes Elwood's session
+record and loop definitions; it does not undo workspace changes or delete
+conversation history owned by Claude or Codex. CLI state defaults to absolute
+`$XDG_STATE_HOME/elwood` or `~/.local/state/elwood`; its private records contain
+resume metadata, not ordinary prompts or output.
+
+Before launching, `elwood config effective [run options]` prints the resolved
+settings and where each came from. The JSON includes `head` and, for Claude,
+the effective `permissionMode`, `allowedTools`, `disallowedTools`, and `tools`;
+resume inspection reports persisted tool rules with stored-session provenance.
+
+Exit status is `0` for success or a closed consumer, `1` for agent/runtime or
+cleanup failure, `2` for usage/configuration failure, `124` for timeout, and
+`130` for interruption. The first Ctrl-C requests a clean interrupt; a repeated
+Ctrl-C force-kills before cleanup.
+
+`--persona` runs an actual extra agent turn before the requested turn. Elwood
+discards that setup turn's answer, but any tools it invokes or files it changes
+remain. It is therefore supported only for new sessions, never `--resume`.
+
+### Sessions, resume, and interactive mode
+
+`elwood sessions` lists the Elwood-owned session records in the effective state
+directory without starting an agent, and `elwood resume <id>` is the subcommand
+form of `--resume <id>`:
+
+```sh
+elwood sessions
+elwood sessions --state-dir ./state --output json | jq -r '.sessions[] | .id'
+elwood resume "$id" "What is the release color?"
+git diff | elwood resume "$id" --ephemeral "Does this diff match what we agreed?"
+```
+
+The table (or the `sessions` array in JSON) reports each session's id, agent,
+workspace, `createdAt`/`lastUsedAt` timestamps, whether it is `resumable`
+(the agent's own conversation id is stored), and `live` — whether a launch's
+bridge socket file is currently present. `live` is a cheap file-presence
+signal: a socket left behind by a force-killed owner reads as live until that
+session is next started or torn down. Unreadable records are skipped with a
+stderr warning, and an empty state directory is a normal empty result.
+`resume <id>` follows every `--resume` rule: stored agent and workspace, no
+`--cwd`, no `--keep`, no persona, and piped stdin composes the same way.
+
+`elwood interactive [id]` opens the real `claude` or `codex` TUI in the current
+terminal — no hidden PTY, no automation, no observation, no Elwood state — with
+Elwood's resolved agent, model, reasoning effort, workspace, and posture passed
+as the agent's own flags. It exits with the agent's exit status and needs a
+terminal on stdin and stdout:
+
+```sh
+elwood interactive                      # the configured agent, its own defaults
+elwood interactive --agent claude --model opus --claude-permission-mode plan
+elwood interactive "$id"                # the stored conversation, workspace, and posture
+```
+
+Built-in headless posture defaults (Claude `dontAsk`, Codex `workspace-write`
+and `never`) are not applied unless a flag, environment variable, config key,
+or stored record selected them, so an unconfigured launch is the agent's own
+default experience. A session kept by a headless run does store its headless
+posture; pass `--claude-permission-mode default` (or the Codex flags) to get the
+agent's prompts back when resuming one interactively. Because the agent owns
+the resumed conversation, a later `elwood resume <id>` sees what you said. The
+command rejects `--output json|jsonl`, `--stream`, `--verbose`, `--debug`,
+`--head`, `--timeout`, `--persona`, `--image`, `--keep`, `--ephemeral`, and
+`--resume`.
+
+### Listing models
+
+`elwood models` starts the selected agent briefly, opens and cancels its own
+model picker, tears the session down, and prints the rows. Text marks the
+current model with `*` and the default with `(default)`; JSON is one
+`{"schemaVersion":1,"type":"models",...}` document of `AgentModelOption` rows:
+
+```sh
+elwood models
+elwood models --agent claude --output json | jq -r '.models[] | select(.isCurrent) | .id'
+```
+
+Starting the agent is unavoidable because the picker is the only source of the
+list. The command honors `--agent`, `--cwd`, `--model`, `--reasoning-effort`,
+`--timeout`, `--state-dir`, trust, and posture flags, leaves no Elwood state
+behind, and maps failures (timeout, interruption, blocked prompts) to the usual
+statuses and error documents.
+
+### Trust and security
+
+Headless mode is non-interactive. With the default `--trust`, Elwood answers only
+its allowlisted workspace-directory and extension trust dialogs. Codex hook
+trust is bypassed session-wide, including hooks beyond Elwood’s own hooks. `--no-trust` disables the
+workspace/extension approvals. Any other recognized dialog fails safely as
+`blocked_prompt` instead of hanging or guessing.
+
+Piped text and image paths are prompt input with the same authority as text typed
+by the caller. Do not combine untrusted input with broad filesystem permissions.
+Global config is never loaded from the repository being opened.
+
+Head mode renders agent-controlled terminal escape sequences verbatim, just as
+running the selected interactive CLI directly would. Use it only with agents and
+workspaces you trust to control the current terminal display.
+
+## Try It Locally
+
+Elwood includes two local test apps.
+
+```sh
+# Terminal smoke app, Claude by default.
+npm run dev:app -- --cwd /path/to/project
+
+# Terminal smoke app with Codex.
+npm run dev:app -- --agent codex --cwd /path/to/project
+
+# Resume from Elwood metadata.
+npm run dev:app -- --cwd /path/to/project --resume <elwoodSessionId>
+
+# Browser debugger with xterm.js terminal mirror and structured event inspector.
+npm run dev:web
+```
+
+`dev:web` serves `http://localhost:4317`. It shows the live terminal on the left
+and a structured event timeline on the right. Use it to inspect hooks,
+activities, warnings, startup automation, status changes, and raw event payloads.
+
+The script is still invoked through npm, but the browser dev server process runs
+under Node so `node-pty` can own a real interactive PTY reliably.
+
+## Runnable Examples
+
+For the smallest real usage sample, run the minimal example. It constructs a
+`CodexSession`, which starts Codex lazily on the first `send`, then makes two
+ergonomic `send` calls — an initial prompt and a follow-up that refers back to it —
+printing each assistant response, and closes the session:
+
+```sh
+npm run example:minimal
+```
+
+For a fuller sample with Claude/Codex selection, custom prompts, richer logging,
+timeouts, and cleanup options, run `examples/full.ts`:
+
+```sh
+npm run example:full
+npm run example:full -- --agent codex --cwd . --prompt "Summarize this repo in one paragraph."
+```
+
 ## Hooks and policy
 
 Handlers return `undefined` for "no decision". Claude:
@@ -224,19 +454,29 @@ immediate; both are safe after the process has already exited.
 
 ## Security and privacy
 
-- Elwood answers only a narrow allowlist of prompts: workspace trust (opt-in via
-  `autotrust`), Codex hook-trust and update dialogs, and Claude's browser-tools
-  onboarding. Any other dialog leaves the session `blocked` for a human; the
-  CLI fails such runs as `blocked_prompt`.
+- With `autotrust`, Elwood answers allowlisted workspace, skill/plugin/MCP,
+  and Claude bypass-permissions acceptance dialogs. The library defaults to
+  `autotrust: false`; the CLI defaults to `--trust`. Codex hook trust is bypassed
+  for the entire launched session even without autotrust. Codex update dialogs
+  are skipped, and Claude browser-tools onboarding is dismissed. Other recognized
+  dialogs leave the session `blocked` for a human; the CLI fails such runs as
+  `blocked_prompt`.
+- `--high-trust` (library `highTrust: true`) is the agent-neutral "never ask"
+  switch: Claude `bypassPermissions`, or Codex `danger-full-access` with
+  approval policy `never`. It removes the agent's own guardrails, so point it
+  only at work you would let run unattended. Combining it with an explicit
+  per-agent posture is a usage error rather than a silent override.
 - `autotrust` changes the security posture of the launched agent. Point it only
   at directories you already trust. The standalone `listClaudeModels` /
   `listCodexModels` probes always start with `autotrust: true`.
 - The persisted session record holds schema version, `elwoodSessionId`,
   adapter, `cwd`, and per-adapter resume state. Loop definitions are the only
   persisted prompt text, in an owner-only `0600` sidecar.
-- Prompts, terminal output, hook payloads, hook responses, transcripts,
-  warnings, bridge tokens, and socket paths are never persisted. Tokens are
-  minted fresh on every start and never trusted from disk.
+- Elwood does not persist ordinary prompts, terminal output, hook payloads,
+  hook responses, transcripts, or warnings. Fresh bridge tokens and socket paths
+  are embedded in generated owner-only bridge scripts (`0600`), but excluded
+  from session records and never read back as credentials on resume. `teardown()`
+  removes these scripts; `stop()` preserves them with the session's runtime files.
 - Hook bridge traffic stays on local IPC with a per-session token and an 8 MiB
   request cap.
 - Elwood does not modify the user's global agent configuration. Claude gets
@@ -290,8 +530,30 @@ immediate; both are safe after the process has already exited.
   and hooks.
 - [examples/README.md](examples/README.md): runnable minimal, streaming, and
   low-level examples.
-- [PRD.md](PRD.md): the behavior specification and conformance criteria.
+- [prd/](prd/README.md): the behavior specification and conformance criteria.
 - [CHANGELOG.md](CHANGELOG.md): consumer-facing changes.
+- [site/](https://github.com/with-logic/elwood/tree/main/site): the landing page and the generated documentation site.
+
+## The website
+
+[`site/`](https://github.com/with-logic/elwood/tree/main/site) is the landing page and the generated documentation site,
+deployed to Vercel from this repository and served at [elwood.bot](https://elwood.bot). It is a static site with no framework
+and no build step: HTML, CSS, ES modules, and the robot's sprite sheets.
+
+```sh
+cd site && python3 -m http.server 8766 --bind 127.0.0.1
+```
+
+The documentation page is generated from Markdown sources in
+[`site/docs/guide/`](https://github.com/with-logic/elwood/tree/main/site/docs/guide) and reads the CLI's help text out of
+`src/cli/help.ts`, so the published flag reference cannot drift from the code:
+
+```sh
+cd site
+uv run scripts/build_docs.py        # regenerate guide/, llms.txt, llms-full.txt
+python3 scripts/check_doc_examples.py   # typecheck every documented example
+node --test tests/*.test.mjs        # the landing page's own tests
+```
 
 ## License
 
@@ -302,3 +564,10 @@ MIT. See [LICENSE](LICENSE).
 Setup, the merge gate, the e2e suite, the dev apps, and the repository map are
 in [CONTRIBUTING.md](CONTRIBUTING.md). Report vulnerabilities privately as
 described in [SECURITY.md](SECURITY.md).
+
+---
+
+<div align="center">
+  Prompted with ❤️ by <a href="https://logic.inc">Logic, Inc</a> in Seattle, WA
+  <img src="site/assets/landing/space-needle.svg" alt="" width="13" height="13" />
+</div>

package/SECURITY.md

@@ -0,0 +1,42 @@
+# Security Policy
+
+Elwood drives interactive agent CLIs (Claude Code and Codex) inside real
+terminal sessions, answers a narrow allowlist of their trust prompts on behalf
+of the embedding application, and can drive Claude's `/login` recovery flow.
+Bugs in those paths can change the security posture of the wrapped agent, so we
+treat them as security issues.
+
+## Reporting a vulnerability
+
+Please do not open a public issue for a suspected vulnerability. Use GitHub's
+private vulnerability reporting for this repository ("Report a vulnerability"
+under the Security tab). Include the Elwood version, the agent CLI and version,
+the operating system, and a minimal reproduction.
+
+We aim to acknowledge reports within five business days.
+
+## Scope
+
+In scope:
+
+- Elwood answering a prompt it should not have answered, or submitting input
+  into a dialog it should have treated as blocking.
+- Leakage of bridge tokens, hook payloads, terminal contents, or other secrets
+  into persisted state, warnings, structured CLI output, or logs.
+- Escapes from the session-scoped settings and configuration Elwood generates
+  (for example, mutating a user's global agent configuration when the
+  documentation says it will not).
+- Unsafe filesystem handling in Elwood-owned state: symlink following,
+  permission checks, or non-atomic writes.
+- Command construction that could execute attacker-controlled input.
+
+Out of scope:
+
+- Behavior of the wrapped agents themselves. Report those to Anthropic or
+  OpenAI.
+- Actions an agent takes inside a workspace you asked it to work in with the
+  permissions you granted it.
+
+## Supported versions
+
+Only the latest release receives security fixes.

package/dist/claude/command.d.ts

@@ -1,8 +1,15 @@
 /**
- * Builds the shell command used to launch interactive Claude.
- * Implements PRD §4.2 and §9.1.
+ * Builds the launch arguments and shell command used to start interactive Claude.
+ * The argument list is shared by the headless PTY launch and `elwood interactive`
+ * (§12A.9), so the Elwood-to-Claude flag mapping cannot drift between them.
+ * Implements PRD §4.2, §9.1, and §12A.9.
  */
 import type { StartClaudeOptions } from "../core/types.ts";
+import { type LaunchArgument } from "../runtime/launch-arguments.ts";
+/** The subset of start options that become Claude's own command-line flags. */
+export type ClaudeLaunchArgumentOptions = Pick<StartClaudeOptions, "model" | "reasoningEffort" | "permissionMode" | "allowedTools" | "disallowedTools" | "tools" | "name">;
+/** Claude's native flags for a launch, in stable order (no `--settings`). */
+export declare function claudeLaunchArguments(options: ClaudeLaunchArgumentOptions, resumeId?: string): readonly LaunchArgument[];
 export declare function buildClaudeShellCommand(settingsPath: string, options: StartClaudeOptions, resumeId?: string): string;
 export declare function shellLaunch(shell: string, command: string): {
     readonly command: string;

package/dist/claude/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/claude/command.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAG3D,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAoBR;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAEhE"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/claude/command.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,KAAK,cAAc,EAAoB,MAAM,gCAAgC,CAAC;AAGvF,+EAA+E;AAC/E,MAAM,MAAM,2BAA2B,GAAG,IAAI,CAC5C,kBAAkB,EAChB,OAAO,GACP,iBAAiB,GACjB,gBAAgB,GAChB,cAAc,GACd,iBAAiB,GACjB,OAAO,GACP,MAAM,CACT,CAAC;AAEF,6EAA6E;AAC7E,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,2BAA2B,EACpC,QAAQ,CAAC,EAAE,MAAM,GAChB,SAAS,cAAc,EAAE,CAgB3B;AAED,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAIR;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAEhE"}

package/dist/claude/command.js

@@ -1,31 +1,38 @@
 /**
- * Builds the shell command used to launch interactive Claude.
- * Implements PRD §4.2 and §9.1.
+ * Builds the launch arguments and shell command used to start interactive Claude.
+ * The argument list is shared by the headless PTY launch and `elwood interactive`
+ * (§12A.9), so the Elwood-to-Claude flag mapping cannot drift between them.
+ * Implements PRD §4.2, §9.1, and §12A.9.
  */
+import { launchShellWords } from "../runtime/launch-arguments.js";
 import { loginShellCommand, shellQuote } from "../runtime/shell.js";
-export function buildClaudeShellCommand(settingsPath, options, resumeId) {
-    const parts = ["exec", "claude", "--settings", shellQuote(settingsPath)];
+/** Claude's native flags for a launch, in stable order (no `--settings`). */
+export function claudeLaunchArguments(options, resumeId) {
+    const parts = [];
     if (resumeId)
-        parts.push("--resume", shellQuote(resumeId));
+        parts.push(["--resume", resumeId]);
     if (options.model)
-        parts.push("--model", shellQuote(options.model));
+        parts.push(["--model", options.model]);
     // Validated before spawn in the preflight (C-CLAUDE-20); forwarded verbatim here.
     if (options.reasoningEffort)
-        parts.push("--effort", shellQuote(options.reasoningEffort));
-    if (options.permissionMode) {
-        parts.push("--permission-mode", shellQuote(options.permissionMode));
-    }
+        parts.push(["--effort", options.reasoningEffort]);
+    if (options.permissionMode)
+        parts.push(["--permission-mode", options.permissionMode]);
     if (options.allowedTools && options.allowedTools.length > 0) {
-        parts.push("--allowedTools", shellQuote(options.allowedTools.join(",")));
+        parts.push(["--allowedTools", options.allowedTools.join(",")]);
     }
     if (options.disallowedTools && options.disallowedTools.length > 0)
-        parts.push("--disallowedTools", shellQuote(options.disallowedTools.join(",")));
+        parts.push(["--disallowedTools", options.disallowedTools.join(",")]);
     // --tools is a true allowlist; an empty list ("") disables all tools.
     if (options.tools !== undefined)
-        parts.push("--tools", shellQuote(options.tools.join(",")));
-    if (options.name) {
-        parts.push("--name", shellQuote(options.name));
-    }
+        parts.push(["--tools", options.tools.join(",")]);
+    if (options.name)
+        parts.push(["--name", options.name]);
+    return parts;
+}
+export function buildClaudeShellCommand(settingsPath, options, resumeId) {
+    const parts = ["exec", "claude", "--settings", shellQuote(settingsPath)];
+    parts.push(...launchShellWords(claudeLaunchArguments(options, resumeId)));
     return parts.join(" ");
 }
 export function shellLaunch(shell, command) {

package/dist/claude/command.js.map

@@ -1 +1 @@
-{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/claude/command.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEpE,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,OAA2B,EAC3B,QAAiB;IAEjB,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACzE,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,kFAAkF;IAClF,IAAI,OAAO,CAAC,eAAe;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;IACzF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjF,sEAAsE;IACtE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAa,EACb,OAAe;IAEf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/claude/command.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAuB,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAcpE,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CACnC,OAAoC,EACpC,QAAiB;IAEjB,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,kFAAkF;IAClF,IAAI,OAAO,CAAC,eAAe;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,sEAAsE;IACtE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,OAAO,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,OAA2B,EAC3B,QAAiB;IAEjB,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAa,EACb,OAAe;IAEf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC"}

package/dist/claude/model-picker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-picker.d.ts","sourceRoot":"","sources":["../../src/claude/model-picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAYhE,eAAO,MAAM,iBAAiB,EAAE,eAqC/B,CAAC"}
+{"version":3,"file":"model-picker.d.ts","sourceRoot":"","sources":["../../src/claude/model-picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAYhE,eAAO,MAAM,iBAAiB,EAAE,eAsC/B,CAAC"}

package/dist/claude/model-picker.js

@@ -2,6 +2,7 @@
  * Claude /model picker automation spec.
  * Implements PRD §5.3, C-API-23, and C-API-24.
  */
+import { sendPickerInput } from "../core/models/input.js";
 import { claudeModelPickerHeader, parseClaudeModelPicker } from "../core/models/rows.js";
 import { waitForScreen } from "../core/models/tui-screen.js";
 import { isClaudeIdleComposer, parseClaudeSwitchConfirmation, } from "./model-switch-confirmation.js";
@@ -15,16 +16,16 @@ export const claudeModelPicker = {
     // "s" applies for this session only. Enter or a number key would save the
     // selection as the user's default for new sessions, which §4.5 forbids.
     apply: async (io, timeoutMs) => {
-        await io.terminal.sendInput("s");
+        await sendPickerInput(io, "s", (text) => claudeModelPickerHeader.test(text));
         const next = await waitForScreen(io.terminal, (text) => cacheConfirmationWithCursor(text) || isClaudeIdleComposer(text), timeoutMs, "claude model switch confirmation or idle composer");
         const confirmation = parseClaudeSwitchConfirmation(next);
         if (confirmation?.isCacheWarning === true) {
             const delta = confirmation.affirmativeIndex - confirmation.selectedIndex;
             const key = delta > 0 ? arrowDown : arrowUp;
             for (let step = 0; step < Math.abs(delta); step += 1)
-                await io.terminal.sendInput(key);
+                await sendPickerInput(io, key, cacheConfirmationWithCursor, true);
             await waitForScreen(io.terminal, affirmativeCacheConfirmation, timeoutMs, "active Claude cache confirmation before apply");
-            await io.terminal.sendInput(enterKey);
+            await sendPickerInput(io, enterKey, affirmativeCacheConfirmation, true);
         }
         await waitForScreen(io.terminal, (text) => isClaudeIdleComposer(text) &&
             parseClaudeSwitchConfirmation(text) === undefined &&

package/dist/claude/model-picker.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-picker.js","sourceRoot":"","sources":["../../src/claude/model-picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,gCAAgC,CAAC;AAExC,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB,MAAM,SAAS,GAAG,UAAU,CAAC;AAC7B,MAAM,OAAO,GAAG,UAAU,CAAC;AAE3B,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;IACpD,KAAK,EAAE,sBAAsB;IAC7B,0EAA0E;IAC1E,wEAAwE;IACxE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;QAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,aAAa,CAC9B,EAAE,CAAC,QAAQ,EACX,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EACzE,SAAS,EACT,mDAAmD,CACpD,CAAC;QACF,MAAM,YAAY,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,YAAY,EAAE,cAAc,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,GAAG,YAAY,CAAC,aAAa,CAAC;YACzE,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5C,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC;gBAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvF,MAAM,aAAa,CACjB,EAAE,CAAC,QAAQ,EACX,4BAA4B,EAC5B,SAAS,EACT,+CAA+C,CAChD,CAAC;YACF,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,aAAa,CACjB,EAAE,CAAC,QAAQ,EACX,CAAC,IAAI,EAAE,EAAE,CACP,oBAAoB,CAAC,IAAI,CAAC;YAC1B,6BAA6B,CAAC,IAAI,CAAC,KAAK,SAAS;YACjD,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EACrC,SAAS,EACT,yCAAyC,CAC1C,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,2BAA2B,CAAC,IAAY;IAC/C,MAAM,YAAY,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,YAAY,EAAE,cAAc,KAAK,IAAI,IAAI,YAAY,CAAC,aAAa,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY;IAChD,MAAM,YAAY,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CACL,YAAY,EAAE,cAAc,KAAK,IAAI;QACrC,YAAY,CAAC,aAAa,KAAK,YAAY,CAAC,gBAAgB,CAC7D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"model-picker.js","sourceRoot":"","sources":["../../src/claude/model-picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,gCAAgC,CAAC;AAExC,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB,MAAM,SAAS,GAAG,UAAU,CAAC;AAC7B,MAAM,OAAO,GAAG,UAAU,CAAC;AAE3B,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;IACpD,KAAK,EAAE,sBAAsB;IAC7B,0EAA0E;IAC1E,wEAAwE;IACxE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;QAC7B,MAAM,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,aAAa,CAC9B,EAAE,CAAC,QAAQ,EACX,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EACzE,SAAS,EACT,mDAAmD,CACpD,CAAC;QACF,MAAM,YAAY,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,YAAY,EAAE,cAAc,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,GAAG,YAAY,CAAC,aAAa,CAAC;YACzE,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5C,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC;gBAClD,MAAM,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC;YACpE,MAAM,aAAa,CACjB,EAAE,CAAC,QAAQ,EACX,4BAA4B,EAC5B,SAAS,EACT,+CAA+C,CAChD,CAAC;YACF,MAAM,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,aAAa,CACjB,EAAE,CAAC,QAAQ,EACX,CAAC,IAAI,EAAE,EAAE,CACP,oBAAoB,CAAC,IAAI,CAAC;YAC1B,6BAA6B,CAAC,IAAI,CAAC,KAAK,SAAS;YACjD,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EACrC,SAAS,EACT,yCAAyC,CAC1C,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,2BAA2B,CAAC,IAAY;IAC/C,MAAM,YAAY,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,YAAY,EAAE,cAAc,KAAK,IAAI,IAAI,YAAY,CAAC,aAAa,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY;IAChD,MAAM,YAAY,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CACL,YAAY,EAAE,cAAc,KAAK,IAAI;QACrC,YAAY,CAAC,aAAa,KAAK,YAAY,CAAC,gBAAgB,CAC7D,CAAC;AACJ,CAAC"}

package/dist/claude/model-switch-confirmation.js

@@ -42,7 +42,15 @@ function switchDialogRegion(text) {
     }
     if (latest === undefined)
         return undefined;
-    return { subject: latest.subject, text: lines.slice(latest.index).join("\n") };
+    const region = lines.slice(latest.index);
+    const lastOption = region.findLastIndex((line) => optionPattern.test(line));
+    // A later dialog can lack a switch title. Its question/options must not inherit
+    // the earlier cache warning's authority merely because they share a viewport.
+    const footer = /^\s*(?:Enter to confirm|Esc to cancel)(?:\s*[·•]\s*(?:Enter to confirm|Esc to cancel))*\s*$/i;
+    if (region.slice(lastOption + 1).some((line) => line.trim() !== "" && !footer.test(line))) {
+        return undefined;
+    }
+    return { subject: latest.subject, text: region.join("\n") };
 }
 function switchOptions(text) {
     const options = text.split("\n").flatMap((line) => {

package/dist/claude/model-switch-confirmation.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-switch-confirmation.js","sourceRoot":"","sources":["../../src/claude/model-switch-confirmation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAkBH,MAAM,aAAa,GAAG,wEAAwE,CAAC;AAC/F,MAAM,SAAS,GAAG,uDAAuD,CAAC;AAC1E,MAAM,SAAS,GAAG,2DAA2D,CAAC;AAC9E,MAAM,QAAQ,GAAG,4CAA4C,CAAC;AAE9D,kFAAkF;AAClF,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS,IAAI,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChF,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxE,IAAI,gBAAgB,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,OAAO;QACL,gBAAgB;QAChB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC7D,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,OAAO,6BAA6B,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;AAC3D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,MAES,CAAC;IACd,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,KAAK,KAAK,eAAe;YAAE,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACpE,IAAI,KAAK,KAAK,sBAAsB;YAAE,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,MAA0B;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,CACL,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9B,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9B,UAAU,CAAC,QAAQ,CAAC,+CAA+C,MAAM,CAAC,OAAO,GAAG,CAAC;QACrF,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC/B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"model-switch-confirmation.js","sourceRoot":"","sources":["../../src/claude/model-switch-confirmation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAkBH,MAAM,aAAa,GAAG,wEAAwE,CAAC;AAC/F,MAAM,SAAS,GAAG,uDAAuD,CAAC;AAC1E,MAAM,SAAS,GAAG,2DAA2D,CAAC;AAC9E,MAAM,QAAQ,GAAG,4CAA4C,CAAC;AAE9D,kFAAkF;AAClF,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS,IAAI,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChF,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxE,IAAI,gBAAgB,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,OAAO;QACL,gBAAgB;QAChB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC7D,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,OAAO,6BAA6B,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;AAC3D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,MAES,CAAC;IACd,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,KAAK,KAAK,eAAe;YAAE,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACpE,IAAI,KAAK,KAAK,sBAAsB;YAAE,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,gFAAgF;IAChF,8EAA8E;IAC9E,MAAM,MAAM,GACV,8FAA8F,CAAC;IACjG,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,MAA0B;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,CACL,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9B,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9B,UAAU,CAAC,QAAQ,CAAC,+CAA+C,MAAM,CAAC,OAAO,GAAG,CAAC;QACrF,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC/B,CAAC;AACJ,CAAC"}

package/dist/claude/screen-table.js

@@ -39,7 +39,7 @@ export const claudeScreenFactTable = {
         {
             id: "claude-permission-dialog",
             fact: "blocking_prompt_visible",
-            all: [/Do you want to .+\?/i, /^\s*❯\s*1\.\s*Yes/im, /Esc to cancel/i],
+            all: [/Do you want to [^?]+\?/i, /^\s*(?:❯\s*)?1\.\s*Yes/im, /Esc to cancel/i],
         },
         {
             id: "claude-model-switch-confirmation",

package/dist/claude/screen-table.js.map

@@ -1 +1 @@
-{"version":3,"file":"screen-table.js","sourceRoot":"","sources":["../../src/claude/screen-table.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAE5E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAoB;IACpD,KAAK,EAAE,QAAQ;IACf,eAAe,EAAE,gBAAgB;IACjC,KAAK,EAAE;QACL,EAAE,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC3E,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE;QACpF;YACE,EAAE,EAAE,sBAAsB;YAC1B,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,CAAC,UAAU,CAAC;SAClB;QACD,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE;QAC/F;YACE,EAAE,EAAE,0BAA0B;YAC9B,IAAI,EAAE,yBAAyB;YAC/B,GAAG,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,gBAAgB,CAAC;SACvE;QACD;YACE,EAAE,EAAE,kCAAkC;YACtC,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,0BAA0B;SAClC;KACF;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,mCAAmC,CAAC,SAAkB;IACpE,OAAO,sBAAsB,CAAC,qBAAqB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC"}
+{"version":3,"file":"screen-table.js","sourceRoot":"","sources":["../../src/claude/screen-table.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAE5E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAoB;IACpD,KAAK,EAAE,QAAQ;IACf,eAAe,EAAE,gBAAgB;IACjC,KAAK,EAAE;QACL,EAAE,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC3E,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE;QACpF;YACE,EAAE,EAAE,sBAAsB;YAC1B,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,CAAC,UAAU,CAAC;SAClB;QACD,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE;QAC/F;YACE,EAAE,EAAE,0BAA0B;YAC9B,IAAI,EAAE,yBAAyB;YAC/B,GAAG,EAAE,CAAC,yBAAyB,EAAE,0BAA0B,EAAE,gBAAgB,CAAC;SAC/E;QACD;YACE,EAAE,EAAE,kCAAkC;YACtC,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,0BAA0B;SAClC;KACF;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,mCAAmC,CAAC,SAAkB;IACpE,OAAO,sBAAsB,CAAC,qBAAqB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC"}

package/dist/claude/session/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/claude/session/build.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAkB,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAQ9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EAAE,KAAK,sBAAsB,EAAkB,MAAM,iBAAiB,CAAC;AAK9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAUlD,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,SAAS,CAAC;CAC/D,CAAC;AAEF,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAkJ5B"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/claude/session/build.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAkB,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAQ9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EAAE,KAAK,sBAAsB,EAAkB,MAAM,iBAAiB,CAAC;AAK9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAUlD,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,SAAS,CAAC;CAC/D,CAAC;AAEF,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAoJ5B"}

package/dist/claude/session/build.js

@@ -111,6 +111,7 @@ export async function buildClaudeSession(input) {
         // Hook-backed readiness + deadline fallback; on resume the first composer also marks ready (C-API-28).
         ready.armDeadline();
         const reading = observeRenderedFrame(observers, frame, session);
+        active.inputBlocking = reading.facts.blocking_prompt_visible;
         observeReadinessFrame(reading.facts); // blocking gate + resume-composer mark
         // Surface a mid-session login-expiry banner once (C-CLAUDE-18); no-op pre-readiness.
         session?.noteLoginExpiry(frame.text);
@@ -135,6 +136,8 @@ export async function buildClaudeSession(input) {
         // Release the startup buffer once the check settles (§9.4).
         await assertStartupThenRelease("claude", startupOutput, () => startupExit);
         active.submitEvidence("startup_usable");
+        if (active.inputBlocking)
+            active.submitEvidence("blocking_prompt_shown");
     }, { before: beforeCleanup, pty, bridge, terminal, after: () => transcriptWatcher.stop() });
     // Open buffered startup warnings after return so synchronous subscribers see them (C-API-14).
     if (preflightWarning !== undefined) {