@with-logic/elwood 0.1.0

package/dist/claude/validate-permission-update.js

@@ -0,0 +1,72 @@
+/**
+ * Runtime validation for Claude `updatedPermissions` (PermissionUpdate[]).
+ *
+ * Implements PRD §6.4: a `PermissionRequest` result may return
+ * `updatedPermissions`, which is serialized to Claude. Each entry must match one
+ * of the documented PermissionUpdate variants (see permissions.ts) rather than
+ * merely being an array, so a malformed entry cannot slip through.
+ */
+import { isOneOf, isRecord, optionalString } from "../core/predicates.js";
+import { claudeHookPermissionModes } from "./hook-names.js";
+const destinations = ["session", "localSettings", "projectSettings", "userSettings"];
+const ruleBehaviors = ["allow", "deny", "ask"];
+const updateTypes = [
+    "addRules",
+    "replaceRules",
+    "removeRules",
+    "setMode",
+    "addDirectories",
+    "removeDirectories",
+];
+// Bidirectional exactness guards (see Exact above). Each stops compiling the moment
+// its allowlist and the public union disagree.
+const _destinationsExact = destinations[0];
+const _behaviorsExact = ruleBehaviors[0];
+const _typesExact = updateTypes[0];
+void _destinationsExact;
+void _behaviorsExact;
+void _typesExact;
+export function isPermissionUpdateArray(value) {
+    return Array.isArray(value) && value.every(isPermissionUpdate);
+}
+function isPermissionUpdate(value) {
+    if (!isRecord(value))
+        return false;
+    if (!isOneOf(value["destination"], destinations))
+        return false;
+    const type = value["type"];
+    if (type === "addRules" || type === "replaceRules" || type === "removeRules") {
+        return isRulesUpdate(value);
+    }
+    if (type === "setMode")
+        return isSetModeUpdate(value);
+    if (type === "addDirectories" || type === "removeDirectories")
+        return isDirectoriesUpdate(value);
+    return false;
+}
+function isRulesUpdate(value) {
+    return (keysAllowed(value, ["type", "rules", "behavior", "destination"]) &&
+        isOneOf(value["behavior"], ruleBehaviors) &&
+        Array.isArray(value["rules"]) &&
+        value["rules"].every(isPermissionRule));
+}
+function isSetModeUpdate(value) {
+    return (keysAllowed(value, ["type", "mode", "destination"]) &&
+        isOneOf(value["mode"], claudeHookPermissionModes));
+}
+function isDirectoriesUpdate(value) {
+    return (keysAllowed(value, ["type", "directories", "destination"]) &&
+        Array.isArray(value["directories"]) &&
+        value["directories"].every((entry) => typeof entry === "string"));
+}
+function isPermissionRule(value) {
+    if (!isRecord(value))
+        return false;
+    return (keysAllowed(value, ["toolName", "ruleContent"]) &&
+        typeof value["toolName"] === "string" &&
+        optionalString(value["ruleContent"]));
+}
+function keysAllowed(value, allowed) {
+    return Object.keys(value).every((key) => allowed.includes(key));
+}
+//# sourceMappingURL=validate-permission-update.js.map

package/dist/claude/validate-permission-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-permission-update.js","sourceRoot":"","sources":["../../src/claude/validate-permission-update.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAc5D,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,CAAU,CAAC;AAC9F,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AACxD,MAAM,WAAW,GAAG;IAClB,UAAU;IACV,cAAc;IACd,aAAa;IACb,SAAS;IACT,gBAAgB;IAChB,mBAAmB;CACX,CAAC;AAEX,oFAAoF;AACpF,+CAA+C;AAC/C,MAAM,kBAAkB,GACtB,YAAY,CAAC,CAAC,CAAC,CAAC;AAClB,MAAM,eAAe,GACnB,aAAa,CAAC,CAAC,CAAC,CAAC;AACnB,MAAM,WAAW,GAAkE,WAAW,CAAC,CAAC,CAAC,CAAC;AAClG,KAAK,kBAAkB,CAAC;AACxB,KAAK,eAAe,CAAC;AACrB,KAAK,WAAW,CAAC;AAEjB,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC7E,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAwC;IAC7D,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QACzC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAwC;IAC/D,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAwC;IACnE,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QAC1D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACnC,KAAK,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;QACrC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAwC,EACxC,OAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/claude/validate-result.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Runtime validation for Claude hook handler results.
+ * Implements PRD §6.4.
+ */
+import type { ClaudeHookEvent, ClaudeHookEventName, ClaudeHookResult } from "./hooks.ts";
+export declare function isClaudeHookResult(event: ClaudeHookEventName | ClaudeHookEvent, value: unknown): value is ClaudeHookResult;
+//# sourceMappingURL=validate-result.d.ts.map

package/dist/claude/validate-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-result.d.ts","sourceRoot":"","sources":["../../src/claude/validate-result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAkBzF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,mBAAmB,GAAG,eAAe,EAC5C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,gBAAgB,CAuB3B"}

package/dist/claude/validate-result.js

@@ -0,0 +1,118 @@
+/**
+ * Runtime validation for Claude hook handler results.
+ * Implements PRD §6.4.
+ */
+import { isOneOf, isRecord, optionalBoolean, optionalString, optionalStringArray, } from "../core/predicates.js";
+import { isPermissionUpdateArray } from "./validate-permission-update.js";
+import { isClaudeToolInputUpdate } from "./validate-tool-update.js";
+const contextResultEvents = new Set(["SessionStart", "Setup", "SubagentStart"]);
+const blockResultEvents = new Set([
+    "UserPromptSubmit",
+    "UserPromptExpansion",
+    "PostToolUse",
+    "PostToolUseFailure",
+    "PostToolBatch",
+    "Stop",
+    "SubagentStop",
+    "ConfigChange",
+    "PreCompact",
+]);
+const continueFalseEvents = new Set(["TeammateIdle", "TaskCreated", "TaskCompleted"]);
+export function isClaudeHookResult(event, value) {
+    const eventName = typeof event === "string" ? event : event.hook_event_name;
+    const toolName = typeof event === "string" || !("tool_name" in event) || typeof event.tool_name !== "string"
+        ? undefined
+        : event.tool_name;
+    if (value === undefined)
+        return true;
+    if (!isRecord(value))
+        return false;
+    if ("permissionDecision" in value)
+        return isPreToolUseResult(eventName, value, toolName);
+    if (eventName === "PreToolUse" && "additionalContext" in value) {
+        return isPreToolUseResult(eventName, value, toolName);
+    }
+    if ("behavior" in value)
+        return isPermissionRequestResult(eventName, value, toolName);
+    if ("retry" in value)
+        return eventName === "PermissionDenied" && value["retry"] === true;
+    if ("worktreePath" in value) {
+        return eventName === "WorktreeCreate" && typeof value["worktreePath"] === "string";
+    }
+    if ("action" in value)
+        return isElicitationResult(eventName, value);
+    if ("decision" in value)
+        return isBlockResult(eventName, value);
+    if ("continue" in value)
+        return isContinueFalseResult(eventName, value);
+    if (eventName === "PostToolUse")
+        return isPostToolUseResult(value);
+    if (!contextResultEvents.has(eventName))
+        return false;
+    return isContextResult(value);
+}
+function isPreToolUseResult(eventName, value, toolName) {
+    if (eventName !== "PreToolUse")
+        return false;
+    if (!("permissionDecision" in value)) {
+        return keysAre(value, ["additionalContext"]) && typeof value["additionalContext"] === "string";
+    }
+    return (keysAre(value, [
+        "permissionDecision",
+        "permissionDecisionReason",
+        "updatedInput",
+        "additionalContext",
+    ]) &&
+        isOneOf(value["permissionDecision"], ["allow", "deny", "ask", "defer"]) &&
+        optionalString(value["permissionDecisionReason"]) &&
+        optionalString(value["additionalContext"]) &&
+        isClaudeToolInputUpdate(toolName, value["updatedInput"]));
+}
+function isPermissionRequestResult(eventName, value, toolName) {
+    return (eventName === "PermissionRequest" &&
+        keysAre(value, ["behavior", "updatedInput", "updatedPermissions", "message", "interrupt"]) &&
+        isOneOf(value["behavior"], ["allow", "deny"]) &&
+        optionalString(value["message"]) &&
+        optionalBoolean(value["interrupt"]) &&
+        optionalPermissionUpdates(value["updatedPermissions"]) &&
+        isClaudeToolInputUpdate(toolName, value["updatedInput"]));
+}
+function optionalPermissionUpdates(value) {
+    return value === undefined || isPermissionUpdateArray(value);
+}
+function isElicitationResult(eventName, value) {
+    return ((eventName === "Elicitation" || eventName === "ElicitationResult") &&
+        keysAre(value, ["action", "content"]) &&
+        isOneOf(value["action"], ["accept", "decline", "cancel"]) &&
+        // `content` is an OPTIONAL non-array record; a string/array/null must fail
+        // rather than be serialized as if valid (matches ElicitationResult.content).
+        (value["content"] === undefined || isRecord(value["content"])));
+}
+function isBlockResult(eventName, value) {
+    return (blockResultEvents.has(eventName) &&
+        keysAre(value, ["decision", "reason", "additionalContext"]) &&
+        value["decision"] === "block" &&
+        typeof value["reason"] === "string" &&
+        optionalString(value["additionalContext"]));
+}
+function isContinueFalseResult(eventName, value) {
+    return (continueFalseEvents.has(eventName) &&
+        keysAre(value, ["continue", "stopReason"]) &&
+        value["continue"] === false &&
+        optionalString(value["stopReason"]));
+}
+function keysAre(value, allowed) {
+    return Object.keys(value).every((key) => allowed.includes(key));
+}
+// Every field is optional, so `{}` is a valid (no-op) result, as it is for context events.
+function isPostToolUseResult(value) {
+    return (keysAre(value, ["additionalContext", "updatedToolOutput", "updatedMCPToolOutput"]) &&
+        optionalString(value["additionalContext"]));
+}
+function isContextResult(value) {
+    return (keysAre(value, ["additionalContext", "initialUserMessage", "watchPaths"]) &&
+        optionalString(value["additionalContext"]) &&
+        optionalString(value["initialUserMessage"]) &&
+        optionalStringArray(value["watchPaths"]));
+}
+//# sourceMappingURL=validate-result.js.map

package/dist/claude/validate-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-result.js","sourceRoot":"","sources":["../../src/claude/validate-result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,OAAO,EACP,QAAQ,EACR,eAAe,EACf,cAAc,EACd,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,CAAC,cAAc,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;AACxF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS;IACxC,kBAAkB;IAClB,qBAAqB;IACrB,aAAa;IACb,oBAAoB;IACpB,eAAe;IACf,MAAM;IACN,cAAc;IACd,cAAc;IACd,YAAY;CACb,CAAC,CAAC;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,CAAC,cAAc,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;AAE9F,MAAM,UAAU,kBAAkB,CAChC,KAA4C,EAC5C,KAAc;IAEd,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC5E,MAAM,QAAQ,GACZ,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACzF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACtB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,oBAAoB,IAAI,KAAK;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzF,IAAI,SAAS,KAAK,YAAY,IAAI,mBAAmB,IAAI,KAAK,EAAE,CAAC;QAC/D,OAAO,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,UAAU,IAAI,KAAK;QAAE,OAAO,yBAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtF,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,SAAS,KAAK,kBAAkB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACzF,IAAI,cAAc,IAAI,KAAK,EAAE,CAAC;QAC5B,OAAO,SAAS,KAAK,gBAAgB,IAAI,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC;IACrF,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK;QAAE,OAAO,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACpE,IAAI,UAAU,IAAI,KAAK;QAAE,OAAO,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,IAAI,UAAU,IAAI,KAAK;QAAE,OAAO,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,kBAAkB,CACzB,SAA8B,EAC9B,KAAwC,EACxC,QAAiB;IAEjB,IAAI,SAAS,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,CAAC,CAAC,oBAAoB,IAAI,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,mBAAmB,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC;IACjG,CAAC;IACD,OAAO,CACL,OAAO,CAAC,KAAK,EAAE;QACb,oBAAoB;QACpB,0BAA0B;QAC1B,cAAc;QACd,mBAAmB;KACpB,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACvE,cAAc,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACjD,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1C,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,SAA8B,EAC9B,KAAwC,EACxC,QAAiB;IAEjB,OAAO,CACL,SAAS,KAAK,mBAAmB;QACjC,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,oBAAoB,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC1F,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnC,yBAAyB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,OAAO,KAAK,KAAK,SAAS,IAAI,uBAAuB,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAA8B,EAC9B,KAAwC;IAExC,OAAO,CACL,CAAC,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,mBAAmB,CAAC;QAClE,OAAO,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzD,2EAA2E;QAC3E,6EAA6E;QAC7E,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,SAA8B,EAC9B,KAAwC;IAExC,OAAO,CACL,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;QAChC,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC3D,KAAK,CAAC,UAAU,CAAC,KAAK,OAAO;QAC7B,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;QACnC,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAA8B,EAC9B,KAAwC;IAExC,OAAO,CACL,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1C,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK;QAC3B,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CACpC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAwC,EAAE,OAA0B;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,2FAA2F;AAC3F,SAAS,mBAAmB,CAAC,KAAwC;IACnE,OAAO,CACL,OAAO,CAAC,KAAK,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;QAClF,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAwC;IAC/D,OAAO,CACL,OAAO,CAAC,KAAK,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;QACzE,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1C,cAAc,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3C,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CACzC,CAAC;AACJ,CAAC"}

package/dist/claude/validate-shapes.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Field-shape validation tables for Claude hook payloads, built on the shared
+ * trust-boundary predicates in core/predicates.ts.
+ * Implements PRD §6.4: value TYPES, not merely key names, are validated.
+ */
+export { isRecord, optionalBoolean, optionalNumber, optionalString, optionalStringArray, } from "../core/predicates.ts";
+export type FieldCheck = (value: unknown) => boolean;
+/**
+ * A validator table COUPLED to a public tool input `T`: exactly one field check per
+ * key of `T` (required, so adding a field to the public type forces a matching check
+ * and can't silently pass validation). Declare each table `satisfies FieldChecks<T>`.
+ */
+export type FieldChecks<T> = {
+    readonly [K in keyof Required<T>]-?: FieldCheck;
+};
+/**
+ * Validates a partial record: every present key must be one of `checks` and its
+ * value must pass that field's check. Absent keys pass (partial rewrites and
+ * optional fields), unknown keys fail.
+ */
+export declare function partial(value: Readonly<Record<string, unknown>>, checks: Readonly<Record<string, FieldCheck>>): boolean;
+//# sourceMappingURL=validate-shapes.d.ts.map

package/dist/claude/validate-shapes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-shapes.d.ts","sourceRoot":"","sources":["../../src/claude/validate-shapes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI;IAAE,QAAQ,EAAE,CAAC,IAAI,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU;CAAE,CAAC;AAEjF;;;;GAIG;AACH,wBAAgB,OAAO,CACrB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GAC3C,OAAO,CAIT"}

package/dist/claude/validate-shapes.js

@@ -0,0 +1,15 @@
+/**
+ * Field-shape validation tables for Claude hook payloads, built on the shared
+ * trust-boundary predicates in core/predicates.ts.
+ * Implements PRD §6.4: value TYPES, not merely key names, are validated.
+ */
+export { isRecord, optionalBoolean, optionalNumber, optionalString, optionalStringArray, } from "../core/predicates.js";
+/**
+ * Validates a partial record: every present key must be one of `checks` and its
+ * value must pass that field's check. Absent keys pass (partial rewrites and
+ * optional fields), unknown keys fail.
+ */
+export function partial(value, checks) {
+    return Object.keys(value).every((key) => Object.hasOwn(checks, key) && checks[key](value[key]));
+}
+//# sourceMappingURL=validate-shapes.js.map

package/dist/claude/validate-shapes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-shapes.js","sourceRoot":"","sources":["../../src/claude/validate-shapes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAW/B;;;;GAIG;AACH,MAAM,UAAU,OAAO,CACrB,KAAwC,EACxC,MAA4C;IAE5C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAC7B,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAK,MAAM,CAAC,GAAG,CAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAC/E,CAAC;AACJ,CAAC"}

package/dist/claude/validate-tool-update.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Runtime validation for Claude tool input rewrite payloads.
+ *
+ * Implements PRD §6.4: a returned `updatedInput` MUST be validated against the
+ * actual tool input shape for known built-in tools before it is serialized to
+ * Claude. `updatedInput` is a partial rewrite, so every documented field is
+ * optional, but each present field must match the tool's documented value TYPE
+ * (not merely be a permitted key). Unknown/MCP tools accept any record.
+ *
+ * Each per-tool table is `satisfies FieldChecks<Input>`, so adding a field to the
+ * public tool input type forces a matching check here (a missing key fails to
+ * compile) — the validator can no longer silently drift from the shape it guards.
+ */
+export declare function isClaudeToolInputUpdate(toolName: string | undefined, value: unknown): boolean;
+//# sourceMappingURL=validate-tool-update.d.ts.map

package/dist/claude/validate-tool-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-tool-update.d.ts","sourceRoot":"","sources":["../../src/claude/validate-tool-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA0BH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAM7F"}

package/dist/claude/validate-tool-update.js

@@ -0,0 +1,122 @@
+/**
+ * Runtime validation for Claude tool input rewrite payloads.
+ *
+ * Implements PRD §6.4: a returned `updatedInput` MUST be validated against the
+ * actual tool input shape for known built-in tools before it is serialized to
+ * Claude. `updatedInput` is a partial rewrite, so every documented field is
+ * optional, but each present field must match the tool's documented value TYPE
+ * (not merely be a permitted key). Unknown/MCP tools accept any record.
+ *
+ * Each per-tool table is `satisfies FieldChecks<Input>`, so adding a field to the
+ * public tool input type forces a matching check here (a missing key fails to
+ * compile) — the validator can no longer silently drift from the shape it guards.
+ */
+import { isRecord, optionalBoolean, optionalNumber, optionalString, optionalStringArray, partial, } from "./validate-shapes.js";
+export function isClaudeToolInputUpdate(toolName, value) {
+    if (value === undefined)
+        return true;
+    if (!isRecord(value))
+        return false;
+    // An unknown/MCP tool (or absent name) has no table, so it accepts any record.
+    const checks = toolChecks[toolName ?? ""];
+    return checks === undefined ? true : partial(value, checks);
+}
+const agentChecks = {
+    prompt: optionalString,
+    description: optionalString,
+    subagent_type: optionalString,
+    model: optionalString,
+};
+const askUserQuestionChecks = {
+    questions: optionalQuestions,
+    answers: optionalAnswers,
+};
+// Shared by the Bash AND PowerShell tools (same documented BashInput shape).
+const shellChecks = {
+    command: optionalString,
+    description: optionalString,
+    timeout: optionalNumber,
+    run_in_background: optionalBoolean,
+};
+const editChecks = {
+    file_path: optionalString,
+    old_string: optionalString,
+    new_string: optionalString,
+    replace_all: optionalBoolean,
+};
+const exitPlanModeChecks = {
+    allowedPrompts: optionalStringArray,
+    plan: optionalString,
+    planFilePath: optionalString,
+};
+const globChecks = {
+    pattern: optionalString,
+    path: optionalString,
+};
+const grepChecks = {
+    pattern: optionalString,
+    path: optionalString,
+    glob: optionalString,
+    output_mode: optionalOutputMode,
+    "-i": optionalBoolean,
+    multiline: optionalBoolean,
+};
+const readChecks = {
+    file_path: optionalString,
+    offset: optionalNumber,
+    limit: optionalNumber,
+};
+const webFetchChecks = {
+    url: optionalString,
+    prompt: optionalString,
+};
+const webSearchChecks = {
+    query: optionalString,
+    allowed_domains: optionalStringArray,
+    blocked_domains: optionalStringArray,
+};
+const writeChecks = {
+    file_path: optionalString,
+    content: optionalString,
+};
+/** Maps each known built-in tool name to its field-check table; others accept any record. */
+const toolChecks = {
+    Agent: agentChecks,
+    AskUserQuestion: askUserQuestionChecks,
+    Bash: shellChecks,
+    PowerShell: shellChecks,
+    Edit: editChecks,
+    ExitPlanMode: exitPlanModeChecks,
+    Glob: globChecks,
+    Grep: grepChecks,
+    Read: readChecks,
+    WebFetch: webFetchChecks,
+    WebSearch: webSearchChecks,
+    Write: writeChecks,
+};
+function optionalOutputMode(value) {
+    return (value === undefined ||
+        value === "content" ||
+        value === "files_with_matches" ||
+        value === "count");
+}
+function optionalQuestions(value) {
+    return value === undefined || (Array.isArray(value) && value.every(isQuestion));
+}
+function isQuestion(value) {
+    if (!isRecord(value))
+        return false;
+    return (typeof value["question"] === "string" &&
+        typeof value["header"] === "string" &&
+        Array.isArray(value["options"]) &&
+        value["options"].every(isQuestionOption) &&
+        optionalBoolean(value["multiSelect"]));
+}
+function isQuestionOption(value) {
+    return (isRecord(value) && typeof value["label"] === "string" && optionalString(value["description"]));
+}
+function optionalAnswers(value) {
+    return (value === undefined ||
+        (isRecord(value) && Object.values(value).every((entry) => typeof entry === "string")));
+}
+//# sourceMappingURL=validate-tool-update.js.map

package/dist/claude/validate-tool-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-tool-update.js","sourceRoot":"","sources":["../../src/claude/validate-tool-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH,OAAO,EAGL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,OAAO,GACR,MAAM,sBAAsB,CAAC;AAE9B,MAAM,UAAU,uBAAuB,CAAC,QAA4B,EAAE,KAAc;IAClF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,+EAA+E;IAC/E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,cAAc;IACtB,WAAW,EAAE,cAAc;IAC3B,aAAa,EAAE,cAAc;IAC7B,KAAK,EAAE,cAAc;CACY,CAAC;AAEpC,MAAM,qBAAqB,GAAG;IAC5B,SAAS,EAAE,iBAAiB;IAC5B,OAAO,EAAE,eAAe;CACmB,CAAC;AAE9C,6EAA6E;AAC7E,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,cAAc;IACvB,iBAAiB,EAAE,eAAe;CACF,CAAC;AAEnC,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE,cAAc;IACzB,UAAU,EAAE,cAAc;IAC1B,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,eAAe;CACI,CAAC;AAEnC,MAAM,kBAAkB,GAAG;IACzB,cAAc,EAAE,mBAAmB;IACnC,IAAI,EAAE,cAAc;IACpB,YAAY,EAAE,cAAc;CACY,CAAC;AAE3C,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,cAAc;CACY,CAAC;AAEnC,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,kBAAkB;IAC/B,IAAI,EAAE,eAAe;IACrB,SAAS,EAAE,eAAe;CACM,CAAC;AAEnC,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,cAAc;IACtB,KAAK,EAAE,cAAc;CACW,CAAC;AAEnC,MAAM,cAAc,GAAG;IACrB,GAAG,EAAE,cAAc;IACnB,MAAM,EAAE,cAAc;CACc,CAAC;AAEvC,MAAM,eAAe,GAAG;IACtB,KAAK,EAAE,cAAc;IACrB,eAAe,EAAE,mBAAmB;IACpC,eAAe,EAAE,mBAAmB;CACC,CAAC;AAExC,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE,cAAc;IACzB,OAAO,EAAE,cAAc;CACU,CAAC;AAEpC,6FAA6F;AAC7F,MAAM,UAAU,GAAmE;IACjF,KAAK,EAAE,WAAW;IAClB,eAAe,EAAE,qBAAqB;IACtC,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE,WAAW;IACvB,IAAI,EAAE,UAAU;IAChB,YAAY,EAAE,kBAAkB;IAChC,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,eAAe;IAC1B,KAAK,EAAE,WAAW;CACnB,CAAC;AAEF,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,oBAAoB;QAC9B,KAAK,KAAK,OAAO,CAClB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;QACrC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;QACnC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACxC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CACtF,CAAC;AACJ,CAAC"}

package/dist/cli/agent-detect.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Selects the CLI agent, auto-detecting one when no flag, environment variable,
+ * or config key chooses it. Implements PRD §12A.1/§12A.4 and C-CLI-03/C-CLI-21:
+ * probe `claude` and `codex` concurrently and keep the first, in that order,
+ * whose command resolves in the user's login shell — the same resolution the
+ * agent PTY launch uses (§4.2) — without running either agent. A probe that
+ * cannot run at all is reported as such, not as "no agent installed".
+ */
+import { type SourcedValue } from "./request-sources.ts";
+import { type CliAgent } from "./types.ts";
+/** Detection order: the first agent whose command resolves wins. */
+export declare const agentDetectionOrder: readonly ["claude", "codex"];
+/** Provenance reported for an auto-detected agent (`config effective`, JSON, verbose). */
+export declare const autoDetectedSource = "auto-detected";
+export type AgentDetector = () => Promise<CliAgent>;
+type AgentProbe = (agent: CliAgent) => Promise<boolean>;
+export declare const noAgentFoundMessage: string;
+/**
+ * True when the login shell resolves `agent` as a command. Uses the same
+ * interactive login shell as the agent PTY so PATH resolution is identical, but
+ * asks only `command -v`, so the agent itself never starts (C-CLI-14). A probe
+ * that could not run at all (missing or broken shell, probe timeout) is a
+ * distinct failure: it says nothing about which agents are installed.
+ */
+export declare function loginShellResolves(agent: CliAgent, shell?: string): Promise<boolean>;
+/**
+ * Probes every agent concurrently and returns the first in detection order that
+ * `probe` reports available; `no_agent_found` when none is.
+ */
+export declare function detectAvailableAgent(probe?: AgentProbe): Promise<CliAgent>;
+type AgentSelection = {
+    readonly flag: string | undefined;
+    readonly env: CliAgent | undefined;
+    readonly config: SourcedValue<CliAgent>;
+    readonly resuming: boolean;
+};
+/**
+ * Flag > env > config precedence for the agent (C-CLI-14). Without a choice, a
+ * new session auto-detects; a resume keeps a placeholder that
+ * `finalizeRunRequest` replaces with the stored adapter, so resume never probes.
+ */
+export declare function selectAgent(selection: AgentSelection, detect: AgentDetector): Promise<SourcedValue<string>>;
+export {};
+//# sourceMappingURL=agent-detect.d.ts.map

package/dist/cli/agent-detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-detect.d.ts","sourceRoot":"","sources":["../../src/cli/agent-detect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAW,KAAK,YAAY,EAAW,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,KAAK,QAAQ,EAAsB,MAAM,YAAY,CAAC;AAE/D,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,8BAA6D,CAAC;AAE9F,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAElD,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;AACpD,KAAK,UAAU,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAExD,eAAO,MAAM,mBAAmB,QAIgB,CAAC;AAEjD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,QAAQ,EACf,KAAK,GAAE,MAAoB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAOlB;AAWD;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,GAAE,UAA+B,GACrC,OAAO,CAAC,QAAQ,CAAC,CAKnB;AAED,KAAK,cAAc,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,cAAc,EACzB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAU/B"}

package/dist/cli/agent-detect.js

@@ -0,0 +1,66 @@
+/**
+ * Selects the CLI agent, auto-detecting one when no flag, environment variable,
+ * or config key chooses it. Implements PRD §12A.1/§12A.4 and C-CLI-03/C-CLI-21:
+ * probe `claude` and `codex` concurrently and keep the first, in that order,
+ * whose command resolves in the user's login shell — the same resolution the
+ * agent PTY launch uses (§4.2) — without running either agent. A probe that
+ * cannot run at all is reported as such, not as "no agent installed".
+ */
+import { currentCommandRunner } from "../runtime/seams.js";
+import { probeShellCommand, shellQuote, userShell } from "../runtime/shell.js";
+import { layered, sourced } from "./request-sources.js";
+import { CliValidationError } from "./types.js";
+/** Detection order: the first agent whose command resolves wins. */
+export const agentDetectionOrder = ["claude", "codex"];
+/** Provenance reported for an auto-detected agent (`config effective`, JSON, verbose). */
+export const autoDetectedSource = "auto-detected";
+export const noAgentFoundMessage = "No agent was found: neither `claude` nor `codex` resolves in your login shell. " +
+    "Install Claude Code (npm install -g @anthropic-ai/claude-code) or Codex " +
+    "(npm install -g @openai/codex), or select one with --agent, ELWOOD_AGENT, " +
+    "or `elwood config set agent <claude|codex>`.";
+/**
+ * True when the login shell resolves `agent` as a command. Uses the same
+ * interactive login shell as the agent PTY so PATH resolution is identical, but
+ * asks only `command -v`, so the agent itself never starts (C-CLI-14). A probe
+ * that could not run at all (missing or broken shell, probe timeout) is a
+ * distinct failure: it says nothing about which agents are installed.
+ */
+export async function loginShellResolves(agent, shell = userShell()) {
+    const command = probeShellCommand(`command -v ${shellQuote(agent)}`);
+    const result = await currentCommandRunner()(shell, command);
+    if (result.error !== undefined) {
+        throw new CliValidationError("no_agent_found", probeFailedMessage(shell, result.error));
+    }
+    return result.status === 0;
+}
+function probeFailedMessage(shell, error) {
+    const reason = error.code === undefined ? "did not run" : `failed with ${error.code}`;
+    return (`No agent was found because the probe itself failed: login shell ${JSON.stringify(shell)} ` +
+        `${reason} while checking for \`claude\` and \`codex\`. Fix the shell, or select an agent ` +
+        "with --agent, ELWOOD_AGENT, or `elwood config set agent <claude|codex>`.");
+}
+/**
+ * Probes every agent concurrently and returns the first in detection order that
+ * `probe` reports available; `no_agent_found` when none is.
+ */
+export async function detectAvailableAgent(probe = loginShellResolves) {
+    const available = await Promise.all(agentDetectionOrder.map((agent) => probe(agent)));
+    const found = agentDetectionOrder.find((_agent, index) => available[index] === true);
+    if (found === undefined)
+        throw new CliValidationError("no_agent_found", noAgentFoundMessage);
+    return found;
+}
+/**
+ * Flag > env > config precedence for the agent (C-CLI-14). Without a choice, a
+ * new session auto-detects; a resume keeps a placeholder that
+ * `finalizeRunRequest` replaces with the stored adapter, so resume never probes.
+ */
+export async function selectAgent(selection, detect) {
+    const chosen = layered(sourced(selection.flag, "--agent"), sourced(selection.env, "ELWOOD_AGENT"), selection.config, sourced(undefined, autoDetectedSource));
+    if (chosen.value !== undefined)
+        return chosen;
+    if (selection.resuming)
+        return sourced("codex", "stored session");
+    return sourced(await detect(), autoDetectedSource);
+}
+//# sourceMappingURL=agent-detect.js.map

package/dist/cli/agent-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-detect.js","sourceRoot":"","sources":["../../src/cli/agent-detect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAqB,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAiB,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE/D,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAwC,CAAC;AAE9F,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAKlD,MAAM,CAAC,MAAM,mBAAmB,GAC9B,iFAAiF;IACjF,0EAA0E;IAC1E,4EAA4E;IAC5E,8CAA8C,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAe,EACf,QAAgB,SAAS,EAAE;IAE3B,MAAM,OAAO,GAAG,iBAAiB,CAAC,cAAc,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAA6C;IACtF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,IAAI,EAAE,CAAC;IACtF,OAAO,CACL,mEAAmE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG;QAC3F,GAAG,MAAM,kFAAkF;QAC3F,0EAA0E,CAC3E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAoB,kBAAkB;IAEtC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACrF,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAyB,EACzB,MAAqB;IAErB,MAAM,MAAM,GAAG,OAAO,CACpB,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAClC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,EACtC,SAAS,CAAC,MAAM,EAChB,OAAO,CAAS,SAAS,EAAE,kBAAkB,CAAC,CAC/C,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,SAAS,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC,MAAM,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACrD,CAAC"}

package/dist/cli/arg-errors.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Converts Node argument-parser failures into concise, actionable CLI diagnostics.
+ * Implements PRD §12A.5 and C-CLI-20.
+ */
+export declare function argumentErrorMessage(error: unknown): string;
+//# sourceMappingURL=arg-errors.d.ts.map

package/dist/cli/arg-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arg-errors.d.ts","sourceRoot":"","sources":["../../src/cli/arg-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAS3D"}

package/dist/cli/arg-errors.js

@@ -0,0 +1,44 @@
+/**
+ * Converts Node argument-parser failures into concise, actionable CLI diagnostics.
+ * Implements PRD §12A.5 and C-CLI-20.
+ */
+import { longOptions } from "./arg-options.js";
+export function argumentErrorMessage(error) {
+    if (!(error instanceof Error))
+        return "Could not parse command-line arguments.";
+    const code = error.code;
+    const match = code === "ERR_PARSE_ARGS_UNKNOWN_OPTION" ? unknownOption(error.message) : undefined;
+    if (match === undefined)
+        return error.message;
+    const suggestion = nearestOption(match);
+    return suggestion === undefined
+        ? `Unknown option '${match}'.`
+        : `Unknown option '${match}'. Did you mean '${suggestion}'?`;
+}
+function unknownOption(message) {
+    return /Unknown option '([^']+)'/u.exec(message)?.[1];
+}
+function nearestOption(input) {
+    if (!input.startsWith("--"))
+        return undefined;
+    const ranked = longOptions
+        .map((option) => ({ option, distance: editDistance(input, option) }))
+        .sort((left, right) => left.distance - right.distance);
+    const best = ranked[0];
+    if (best === undefined || best.distance > 2 || ranked[1]?.distance === best.distance)
+        return undefined;
+    return best.option;
+}
+function editDistance(left, right) {
+    let row = Array.from({ length: right.length + 1 }, (_, index) => index);
+    for (let leftIndex = 1; leftIndex <= left.length; leftIndex += 1) {
+        const next = [leftIndex];
+        for (let rightIndex = 1; rightIndex <= right.length; rightIndex += 1) {
+            const substitution = row[rightIndex - 1] + (left[leftIndex - 1] === right[rightIndex - 1] ? 0 : 1);
+            next[rightIndex] = Math.min(row[rightIndex] + 1, next[rightIndex - 1] + 1, substitution);
+        }
+        row = next;
+    }
+    return row[right.length];
+}
+//# sourceMappingURL=arg-errors.js.map

package/dist/cli/arg-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arg-errors.js","sourceRoot":"","sources":["../../src/cli/arg-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,yCAAyC,CAAC;IAChF,MAAM,IAAI,GAAI,KAA6C,CAAC,IAAI,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC9C,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,mBAAmB,KAAK,IAAI;QAC9B,CAAC,CAAC,mBAAmB,KAAK,oBAAoB,UAAU,IAAI,CAAC;AACjE,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,WAAW;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;SACpE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC,QAAQ;QAClF,OAAO,SAAS,CAAC;IACnB,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC/C,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACxE,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACzB,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,YAAY,GAChB,GAAG,CAAC,UAAU,GAAG,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAE,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;QAC7F,CAAC;QACD,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC;AAC5B,CAAC"}

package/dist/cli/arg-options.d.ts

@@ -0,0 +1,26 @@
+/**
+ * One static table for the run command's long options. It drives argument
+ * parsing, explicit-flag tracking, flag decoding, and "Did you mean" suggestions,
+ * so a new option cannot be registered in one place and forgotten in another.
+ * Implements PRD §12A.1/§12A.5 and C-CLI-02/C-CLI-06/C-CLI-20.
+ */
+import type { ParseArgsOptionsConfig } from "node:util";
+import type { RunOptionKey } from "./types.ts";
+export type RunOptionSpec = {
+    readonly type: "string";
+    /** `RunFlags` field the option sets. */
+    readonly key: RunOptionKey;
+    readonly short?: string;
+    readonly multiple?: true;
+} | {
+    readonly type: "boolean";
+    readonly key: RunOptionKey;
+    /** Value assigned when the option is present; negative flags assign `false`. */
+    readonly value: boolean;
+};
+export declare const runOptionTable: Readonly<Record<string, RunOptionSpec>>;
+/** `node:util` parseArgs configuration: every run option plus the two metadata switches. */
+export declare const parseOptions: ParseArgsOptionsConfig;
+/** Every long option the parser accepts, for near-miss suggestions (C-CLI-20). */
+export declare const longOptions: readonly string[];
+//# sourceMappingURL=arg-options.d.ts.map

package/dist/cli/arg-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arg-options.d.ts","sourceRoot":"","sources":["../../src/cli/arg-options.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,MAAM,aAAa,GACrB;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,wCAAwC;IACxC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,CAAC;AAEN,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAyBlE,CAAC;AAEF,4FAA4F;AAC5F,eAAO,MAAM,YAAY,EAAE,sBAM1B,CAAC;AAEF,kFAAkF;AAClF,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAAyD,CAAC"}