@with-logic/elwood 0.1.0

package/dist/cli/stream.js

@@ -0,0 +1,92 @@
+/**
+ * Serialized, backpressure-aware output writes with graceful downstream closure.
+ * Implements PRD §12A.3 and C-CLI-12.
+ */
+export class AsyncOutputSink {
+    target;
+    tail = Promise.resolve();
+    downstreamClosed = false;
+    streamFailure;
+    activeFailure;
+    constructor(target) {
+        this.target = target;
+        target.on?.("error", this.onError);
+    }
+    get closed() {
+        return this.downstreamClosed;
+    }
+    write(value) {
+        const pending = this.tail.then(() => this.writeNow(value));
+        this.tail = pending.catch(() => undefined);
+        return pending;
+    }
+    async flush() {
+        await this.tail;
+    }
+    dispose() {
+        this.target.off?.("error", this.onError);
+    }
+    writeNow(value) {
+        if (this.downstreamClosed)
+            return Promise.resolve(false);
+        if (this.streamFailure !== undefined)
+            return Promise.reject(this.streamFailure);
+        return new Promise((resolve, reject) => {
+            let callbackDone = false;
+            let drainDone = true;
+            const settle = () => {
+                if (callbackDone && drainDone) {
+                    this.activeFailure = undefined;
+                    resolve(true);
+                }
+            };
+            const fail = (error) => {
+                this.activeFailure = undefined;
+                if (isEpipe(error)) {
+                    this.downstreamClosed = true;
+                    resolve(false);
+                }
+                else {
+                    this.streamFailure = error;
+                    reject(error);
+                }
+            };
+            this.activeFailure = fail;
+            let accepted;
+            try {
+                accepted = this.target.write(value, (error) => {
+                    if (error)
+                        return fail(error);
+                    callbackDone = true;
+                    settle();
+                });
+            }
+            catch (error) {
+                fail(asError(error));
+                return;
+            }
+            if (!accepted) {
+                drainDone = false;
+                this.target.once("drain", () => {
+                    drainDone = true;
+                    settle();
+                });
+            }
+            settle();
+        });
+    }
+    onError = (error) => {
+        if (isEpipe(error))
+            this.downstreamClosed = true;
+        else
+            this.streamFailure = error;
+        this.activeFailure?.(error);
+    };
+}
+function isEpipe(error) {
+    return error.code === "EPIPE";
+}
+function asError(error) {
+    return error instanceof Error ? error : new Error("Output write failed.");
+}
+//# sourceMappingURL=stream.js.map

package/dist/cli/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/cli/stream.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,OAAO,eAAe;IACT,MAAM,CAAc;IAC7B,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3C,gBAAgB,GAAG,KAAK,CAAC;IACzB,aAAa,CAAoB;IACjC,aAAa,CAAuC;IAE5D,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAEO,QAAQ,CAAC,KAAa;QAC5B,IAAI,IAAI,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,IAAI,SAAS,GAAG,IAAI,CAAC;YACrB,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,IAAI,YAAY,IAAI,SAAS,EAAE,CAAC;oBAC9B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;oBAC/B,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;gBAC5B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;gBAC/B,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;oBAC7B,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;oBAC3B,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC;YACF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,IAAI,QAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC5C,IAAI,KAAK;wBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC9B,YAAY,GAAG,IAAI,CAAC;oBACpB,MAAM,EAAE,CAAC;gBACX,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,SAAS,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBAC7B,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM,EAAE,CAAC;gBACX,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAEgB,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE;QAChD,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;;YAC5C,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC;CACH;AAED,SAAS,OAAO,CAAC,KAAY;IAC3B,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;AAC3D,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAC5E,CAAC"}

package/dist/cli/types.d.ts

@@ -0,0 +1,148 @@
+/**
+ * Shared types for CLI parsing, configuration, and effective requests.
+ * Implements PRD §12A.1/§12A.2/§12A.4 and C-CLI-02 through C-CLI-16.
+ */
+import type { CodexApprovalPolicy, CodexSandboxMode } from "../codex/session/types.ts";
+import type { ImageInput } from "../core/images/types.ts";
+import type { ClaudeReasoningEffort, CodexReasoningEffort } from "../core/reasoning-effort.ts";
+import type { ClaudePermissionMode, TerminalSize } from "../core/types.ts";
+import type { CliRequestResolution } from "./request/resolution-types.ts";
+export type { CliRequestResolution, CliSettingSources } from "./request/resolution-types.ts";
+export { type CliValidationCode, CliValidationError } from "./validation-error.ts";
+export declare const cliAgents: readonly ["claude", "codex"];
+/** Human-facing adapter name for diagnostics and progress lines. */
+export declare function agentDisplayName(agent: CliAgent): "Claude" | "Codex";
+export declare const cliOutputModes: readonly ["text", "json", "jsonl"];
+export declare const claudePermissionModes: readonly ["default", "acceptEdits", "plan", "auto", "dontAsk", "bypassPermissions"];
+export declare const codexSandboxModes: readonly ["read-only", "workspace-write", "danger-full-access"];
+export declare const codexApprovalPolicies: readonly ["untrusted", "on-request", "never"];
+export type CliAgent = (typeof cliAgents)[number];
+export type CliOutputMode = (typeof cliOutputModes)[number];
+export type CliEnvironment = Readonly<Record<string, string | undefined>>;
+export type AgentConfig = {
+    readonly model?: string;
+    readonly reasoningEffort?: string;
+};
+export type CliConfig = {
+    readonly schemaVersion: 1;
+    readonly agent?: CliAgent;
+    readonly output?: CliOutputMode;
+    readonly timeout?: string;
+    readonly trust?: boolean;
+    readonly stateDir?: string;
+    readonly verbose?: boolean;
+    readonly stream?: boolean;
+    readonly persona?: string;
+    readonly claude?: AgentConfig & {
+        readonly permissionMode?: ClaudePermissionMode;
+    };
+    readonly codex?: AgentConfig & {
+        readonly sandbox?: CodexSandboxMode;
+        readonly approvalPolicy?: CodexApprovalPolicy;
+    };
+};
+export type RunFlags = {
+    readonly agent?: string;
+    readonly output?: string;
+    readonly timeout?: string;
+    readonly trust?: boolean;
+    readonly stateDir?: string;
+    readonly verbose?: boolean;
+    readonly stream?: boolean;
+    readonly debug?: boolean;
+    readonly ignoreDefaults?: boolean;
+    readonly head?: boolean;
+    readonly persona?: string;
+    readonly model?: string;
+    readonly reasoningEffort?: string;
+    readonly claudePermissionMode?: string;
+    readonly codexSandbox?: string;
+    readonly codexApprovalPolicy?: string;
+    readonly cwd?: string;
+    readonly images: readonly string[];
+    readonly keep?: boolean;
+    readonly resume?: string;
+    readonly ephemeral?: boolean;
+};
+/** Every `RunFlags` field an explicit long option can set. */
+export type RunOptionKey = keyof RunFlags;
+export type ParsedRunCommand = {
+    readonly command: "run";
+    readonly flags: RunFlags;
+    readonly explicit: ReadonlySet<RunOptionKey>;
+    readonly promptWords: readonly string[];
+};
+export type ParsedCliCommand = ParsedRunCommand | {
+    readonly command: "help";
+} | {
+    readonly command: "version";
+} | {
+    readonly command: "config";
+    readonly args: readonly string[];
+};
+export type PromptStdin = {
+    readonly isTTY?: boolean;
+    readonly source: AsyncIterable<string | Uint8Array>;
+};
+export type RequestContext = {
+    readonly env: CliEnvironment;
+    readonly invocationCwd: string;
+    readonly homeDir: string;
+    readonly stdin: PromptStdin;
+};
+export type ResolvedRunRequest = {
+    readonly agent: CliAgent;
+    readonly explicitAgent?: CliAgent;
+    readonly output: CliOutputMode;
+    readonly outputExplicit: boolean;
+    readonly timeoutMs?: number;
+    readonly trust: boolean;
+    readonly stateDir: string;
+    readonly verbose: boolean;
+    readonly stream: boolean;
+    readonly debug?: boolean;
+    readonly head?: boolean;
+    readonly initialSize?: TerminalSize;
+    readonly persona?: string;
+    readonly model?: string;
+    readonly reasoningEffort?: string;
+    readonly agentOptions?: Readonly<Record<CliAgent, EffectiveAgentOptions>>;
+    readonly claudeOptionsExplicit?: boolean;
+    readonly codexOptionsExplicit?: boolean;
+    readonly permissionMode?: ClaudePermissionMode;
+    readonly sandbox?: CodexSandboxMode;
+    readonly approvalPolicy?: CodexApprovalPolicy;
+    readonly cwd?: string;
+    readonly cwdExplicit?: boolean;
+    readonly imagePaths: readonly string[];
+    readonly prompt: string;
+    readonly keep: boolean;
+    readonly resume?: string;
+    readonly ephemeral: boolean;
+    readonly resolution?: CliRequestResolution;
+};
+/**
+ * The effective adapter with its effort already narrowed to that adapter's
+ * vocabulary (C-CLI-06): `finalizeRunRequest` validates before launch, so the
+ * launch mapping never re-checks the value.
+ */
+export type EffectiveAgentEffort = {
+    readonly agent: "claude";
+    readonly reasoningEffort?: ClaudeReasoningEffort;
+} | {
+    readonly agent: "codex";
+    readonly reasoningEffort?: CodexReasoningEffort;
+};
+export type EffectiveRunRequest = Omit<ResolvedRunRequest, "agent" | "cwd" | "imagePaths" | "agentOptions" | "claudeOptionsExplicit" | "codexOptionsExplicit" | "model" | "reasoningEffort" | "permissionMode" | "sandbox" | "approvalPolicy" | "head"> & {
+    readonly cwd: string;
+    readonly images: readonly ImageInput[];
+    readonly model?: string;
+    readonly permissionMode?: ClaudePermissionMode;
+    readonly sandbox?: CodexSandboxMode;
+    readonly approvalPolicy?: CodexApprovalPolicy;
+} & EffectiveAgentEffort;
+export type EffectiveAgentOptions = {
+    readonly model?: string;
+    readonly reasoningEffort?: string | CodexReasoningEffort;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/cli/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,KAAK,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACnF,eAAO,MAAM,SAAS,8BAA+B,CAAC;AACtD,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAEpE;AACD,eAAO,MAAM,cAAc,oCAAqC,CAAC;AACjE,eAAO,MAAM,qBAAqB,qFAOkB,CAAC;AACrD,eAAO,MAAM,iBAAiB,iEAIkB,CAAC;AACjD,eAAO,MAAM,qBAAqB,+CAIiB,CAAC;AAEpD,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAClD,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAE1E,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAA;KAAE,CAAC;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG;QAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;QACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;KAC/C,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,8DAA8D;AAC9D,MAAM,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC;AAE1C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAErE,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;CAC5C,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEjF,MAAM,MAAM,mBAAmB,GAAG,IAAI,CACpC,kBAAkB,EAChB,OAAO,GACP,KAAK,GACL,YAAY,GACZ,cAAc,GACd,uBAAuB,GACvB,sBAAsB,GACtB,OAAO,GACP,iBAAiB,GACjB,gBAAgB,GAChB,SAAS,GACT,gBAAgB,GAChB,MAAM,CACT,GAAG;IACF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;CAC/C,GAAG,oBAAoB,CAAC;AAEzB,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAAC;CAC1D,CAAC"}

package/dist/cli/types.js

@@ -0,0 +1,30 @@
+/**
+ * Shared types for CLI parsing, configuration, and effective requests.
+ * Implements PRD §12A.1/§12A.2/§12A.4 and C-CLI-02 through C-CLI-16.
+ */
+export { CliValidationError } from "./validation-error.js";
+export const cliAgents = ["claude", "codex"];
+/** Human-facing adapter name for diagnostics and progress lines. */
+export function agentDisplayName(agent) {
+    return agent === "claude" ? "Claude" : "Codex";
+}
+export const cliOutputModes = ["text", "json", "jsonl"];
+export const claudePermissionModes = [
+    "default",
+    "acceptEdits",
+    "plan",
+    "auto",
+    "dontAsk",
+    "bypassPermissions",
+];
+export const codexSandboxModes = [
+    "read-only",
+    "workspace-write",
+    "danger-full-access",
+];
+export const codexApprovalPolicies = [
+    "untrusted",
+    "on-request",
+    "never",
+];
+//# sourceMappingURL=types.js.map

package/dist/cli/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,EAA0B,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACnF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;AACtD,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,KAAe;IAC9C,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AACjD,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AACjE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS;IACT,aAAa;IACb,MAAM;IACN,MAAM;IACN,SAAS;IACT,mBAAmB;CAC+B,CAAC;AACrD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW;IACX,iBAAiB;IACjB,oBAAoB;CAC0B,CAAC;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,WAAW;IACX,YAAY;IACZ,OAAO;CAC0C,CAAC"}

package/dist/cli/update-attention.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Bounds CLI ownership of Codex's automatically skipped update prompt.
+ * Implements PRD §5.5 and C-CODEX-12/C-CLI-05.
+ */
+import type { ElwoodSessionStatus } from "../core/types.ts";
+import type { CliLifecycleClock } from "./lifecycle/index.ts";
+export declare const codexUpdateAttentionGraceMs = 5500;
+type UpdateAttentionSession = {
+    readonly status: ElwoodSessionStatus;
+};
+type UpdateAttentionLifecycle = {
+    readonly block: (label: string) => void;
+};
+type UpdateAttentionClock = Pick<CliLifecycleClock, "setTimer" | "clearTimer">;
+/** Gives safe update automation a short grace period without allowing a permanent CLI stall. */
+export declare class CodexUpdateAttentionGuard {
+    private readonly session;
+    private readonly lifecycle;
+    private readonly clock;
+    private timer;
+    private disposed;
+    constructor(session: UpdateAttentionSession, lifecycle: UpdateAttentionLifecycle, clock?: UpdateAttentionClock);
+    attention(): void;
+    status(status: ElwoodSessionStatus): void;
+    succeeded(): void;
+    writeFailed(): void;
+    dispose(): void;
+    private expire;
+    private cancel;
+}
+export {};
+//# sourceMappingURL=update-attention.d.ts.map

package/dist/cli/update-attention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-attention.d.ts","sourceRoot":"","sources":["../../src/cli/update-attention.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,eAAO,MAAM,2BAA2B,OAAQ,CAAC;AAEjD,KAAK,sBAAsB,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,CAAC;AACvE,KAAK,wBAAwB,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,CAAC;AAC5E,KAAK,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;AAW/E,gGAAgG;AAChG,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuB;IAC7C,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,QAAQ,CAAS;gBAGvB,OAAO,EAAE,sBAAsB,EAC/B,SAAS,EAAE,wBAAwB,EACnC,KAAK,GAAE,oBAAgC;IAOzC,SAAS,IAAI,IAAI;IAKjB,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI;IAIzC,SAAS,IAAI,IAAI;IAIjB,WAAW,IAAI,IAAI;IAMnB,OAAO,IAAI,IAAI;IAKf,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;CAIf"}

package/dist/cli/update-attention.js

@@ -0,0 +1,60 @@
+/**
+ * Bounds CLI ownership of Codex's automatically skipped update prompt.
+ * Implements PRD §5.5 and C-CODEX-12/C-CLI-05.
+ */
+export const codexUpdateAttentionGraceMs = 5_500;
+const realClock = {
+    setTimer: (handler, delayMs) => {
+        const timer = setTimeout(handler, delayMs);
+        timer.unref();
+        return timer;
+    },
+    clearTimer: (timer) => clearTimeout(timer),
+};
+/** Gives safe update automation a short grace period without allowing a permanent CLI stall. */
+export class CodexUpdateAttentionGuard {
+    session;
+    lifecycle;
+    clock;
+    timer;
+    disposed = false;
+    constructor(session, lifecycle, clock = realClock) {
+        this.session = session;
+        this.lifecycle = lifecycle;
+        this.clock = clock;
+    }
+    attention() {
+        if (this.disposed || this.timer !== undefined || this.session.status !== "blocked")
+            return;
+        this.timer = this.clock.setTimer(() => this.expire(), codexUpdateAttentionGraceMs);
+    }
+    status(status) {
+        if (status !== "blocked")
+            this.cancel();
+    }
+    succeeded() {
+        this.cancel();
+    }
+    writeFailed() {
+        if (this.disposed)
+            return;
+        this.cancel();
+        this.lifecycle.block("codex-update-prompt");
+    }
+    dispose() {
+        this.disposed = true;
+        this.cancel();
+    }
+    expire() {
+        this.timer = undefined;
+        if (!this.disposed && this.session.status === "blocked") {
+            this.lifecycle.block("codex-update-prompt");
+        }
+    }
+    cancel() {
+        if (this.timer !== undefined)
+            this.clock.clearTimer(this.timer);
+        this.timer = undefined;
+    }
+}
+//# sourceMappingURL=update-attention.js.map

package/dist/cli/update-attention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-attention.js","sourceRoot":"","sources":["../../src/cli/update-attention.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAMjD,MAAM,SAAS,GAAyB;IACtC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAsC,CAAC;CAC5E,CAAC;AAEF,gGAAgG;AAChG,MAAM,OAAO,yBAAyB;IACnB,OAAO,CAAyB;IAChC,SAAS,CAA2B;IACpC,KAAK,CAAuB;IACrC,KAAK,CAAU;IACf,QAAQ,GAAG,KAAK,CAAC;IAEzB,YACE,OAA+B,EAC/B,SAAmC,EACnC,QAA8B,SAAS;QAEvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QAC3F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,CAAC,MAA2B;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,SAAS;QACP,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,WAAW;QACT,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;CACF"}

package/dist/cli/validation-error.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Stable usage/configuration failure carried to the CLI boundary as status 2.
+ * Implements PRD §12A.5 and C-CLI-17/C-CLI-20/C-CLI-21.
+ */
+export type CliValidationCode = "invalid_arguments" | "invalid_config" | "no_agent_found";
+export declare class CliValidationError extends Error {
+    readonly name = "CliValidationError";
+    readonly code: CliValidationCode;
+    constructor(code: CliValidationCode, message: string);
+}
+//# sourceMappingURL=validation-error.d.ts.map

package/dist/cli/validation-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-error.d.ts","sourceRoot":"","sources":["../../src/cli/validation-error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAE1F,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,SAAkB,IAAI,wBAAwB;IAC9C,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBAErB,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM;CAIrD"}

package/dist/cli/validation-error.js

@@ -0,0 +1,13 @@
+/**
+ * Stable usage/configuration failure carried to the CLI boundary as status 2.
+ * Implements PRD §12A.5 and C-CLI-17/C-CLI-20/C-CLI-21.
+ */
+export class CliValidationError extends Error {
+    name = "CliValidationError";
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+//# sourceMappingURL=validation-error.js.map

package/dist/cli/validation-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-error.js","sourceRoot":"","sources":["../../src/cli/validation-error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACzB,IAAI,GAAG,oBAAoB,CAAC;IACrC,IAAI,CAAoB;IAEjC,YAAY,IAAuB,EAAE,OAAe;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/cli/version.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Reads the package version from the installed package boundary.
+ * Implements PRD §12A.1 and C-CLI-02.
+ */
+/** Return the version belonging to this compiled CLI installation. */
+export declare function readCliVersion(): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/cli/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/cli/version.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,sEAAsE;AACtE,wBAAgB,cAAc,IAAI,MAAM,CAKvC"}

package/dist/cli/version.js

@@ -0,0 +1,11 @@
+/**
+ * Reads the package version from the installed package boundary.
+ * Implements PRD §12A.1 and C-CLI-02.
+ */
+import { readFileSync } from "node:fs";
+/** Return the version belonging to this compiled CLI installation. */
+export function readCliVersion() {
+    const packageJson = JSON.parse(readFileSync(new URL("../../package.json", import.meta.url), "utf8"));
+    return packageJson.version;
+}
+//# sourceMappingURL=version.js.map

package/dist/cli/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/cli/version.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,sEAAsE;AACtE,MAAM,UAAU,cAAc;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAC5B,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACrC,CAAC;IAClC,OAAO,WAAW,CAAC,OAAO,CAAC;AAC7B,CAAC"}

package/dist/codex/attach-images.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Codex image attachment: Codex ingests an interactive image only from the OS
+ * clipboard via Ctrl+V (it reads `public.tiff` off the macOS NSPasteboard), so
+ * Elwood snapshots the clipboard TEXT once (only text is captured), then for each
+ * image sets it + Ctrl+V + waits for the `[Image #N]` chip, then restores the text
+ * snapshot. macOS-only, and
+ * the whole transaction holds a process-wide clipboard lock so concurrent Codex
+ * sessions cannot cross-attach. Implements PRD §5.3 (C-API-46).
+ */
+import { type AttachTerminal, type BlockedGuard } from "../core/images/chip-wait.ts";
+/**
+ * Attaches every image via the clipboard under a process-wide lock, restoring
+ * the user's clipboard text afterward (best-effort). Rejects with
+ * `unsupported_platform` on non-macOS BEFORE touching the clipboard, and with
+ * `image_attach_failed`/`invalid_image` on a snapshot/set/confirm failure; the
+ * caller then submits no text. The Ctrl+V is held while a blocking dialog is on
+ * screen so it never confirms a dialog (C-API-37/46).
+ */
+export declare function attachCodexImages(terminal: AttachTerminal, paths: readonly string[], signal: AbortSignal, blocked?: BlockedGuard, onRestoreFailed?: () => void): Promise<void>;
+//# sourceMappingURL=attach-images.d.ts.map

package/dist/codex/attach-images.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-images.d.ts","sourceRoot":"","sources":["../../src/codex/attach-images.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,YAAY,EAMlB,MAAM,6BAA6B,CAAC;AAYrC;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,YAAY,EACtB,eAAe,CAAC,EAAE,MAAM,IAAI,GAC3B,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/codex/attach-images.js

@@ -0,0 +1,66 @@
+/**
+ * Codex image attachment: Codex ingests an interactive image only from the OS
+ * clipboard via Ctrl+V (it reads `public.tiff` off the macOS NSPasteboard), so
+ * Elwood snapshots the clipboard TEXT once (only text is captured), then for each
+ * image sets it + Ctrl+V + waits for the `[Image #N]` chip, then restores the text
+ * snapshot. macOS-only, and
+ * the whole transaction holds a process-wide clipboard lock so concurrent Codex
+ * sessions cannot cross-attach. Implements PRD §5.3 (C-API-46).
+ */
+import { elwoodError } from "../core/errors.js";
+import { clearComposer, imageChipCount, sendWhenUnblocked, waitForImageChip, } from "../core/images/chip-wait.js";
+import { clipboardImageSupported, restoreClipboardText, setClipboardImage, snapshotClipboardText, } from "./clipboard.js";
+import { withClipboardLock } from "./clipboard-lock.js";
+const CTRL_V = "\u0016"; // Ctrl+V triggers Codex clipboard-image paste
+const chipWait = { settleMs: 200, timeoutMs: 10_000, pollMs: 100 };
+/**
+ * Attaches every image via the clipboard under a process-wide lock, restoring
+ * the user's clipboard text afterward (best-effort). Rejects with
+ * `unsupported_platform` on non-macOS BEFORE touching the clipboard, and with
+ * `image_attach_failed`/`invalid_image` on a snapshot/set/confirm failure; the
+ * caller then submits no text. The Ctrl+V is held while a blocking dialog is on
+ * screen so it never confirms a dialog (C-API-37/46).
+ */
+export async function attachCodexImages(terminal, paths, signal, blocked, onRestoreFailed) {
+    if (!clipboardImageSupported())
+        throw elwoodError("unsupported_platform", "Codex image attachment requires macOS.");
+    await withClipboardLock(() => attachUnderLock(terminal, paths, signal, blocked, onRestoreFailed));
+}
+async function attachUnderLock(terminal, paths, signal, blocked, onRestoreFailed) {
+    // A waiter that acquired the lock only after its session closed must touch
+    // nothing — check abort FIRST, before snapshotting or mutating the clipboard.
+    if (signal.aborted)
+        throw elwoodError("image_attach_failed", "Image attach aborted.");
+    // Snapshot BEFORE mutating; a snapshot failure rejects here so we never
+    // overwrite then "restore" an empty string over the user's clipboard.
+    const priorClipboard = await snapshotClipboardText();
+    let staged = false;
+    try {
+        for (const path of paths) {
+            const before = imageChipCount(terminal.snapshot().text);
+            await setClipboardImage(path);
+            // sendWhenUnblocked rejects if the signal is already aborted, so a mid-attach
+            // close is caught here before the Ctrl+V reaches the PTY (C-API-46).
+            await sendWhenUnblocked(terminal, CTRL_V, blocked, signal);
+            staged = true;
+            await waitForImageChip(terminal, before, signal, chipWait);
+        }
+    }
+    catch (error) {
+        if (staged)
+            await clearComposer(terminal); // discard staged chips on failure (C-API-44)
+        throw error;
+    }
+    finally {
+        // Best-effort and fully isolated: neither the restore nor its warning callback
+        // may reject or mask the primary attach result/error (C-API-46).
+        try {
+            if (!(await restoreClipboardText(priorClipboard)))
+                onRestoreFailed?.();
+        }
+        catch {
+            // A throwing warning sink must not turn a successful attach into a failure.
+        }
+    }
+}
+//# sourceMappingURL=attach-images.js.map

package/dist/codex/attach-images.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-images.js","sourceRoot":"","sources":["../../src/codex/attach-images.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAIL,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,8CAA8C;AACvE,MAAM,QAAQ,GAAoB,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAEpF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAwB,EACxB,KAAwB,EACxB,MAAmB,EACnB,OAAsB,EACtB,eAA4B;IAE5B,IAAI,CAAC,uBAAuB,EAAE;QAC5B,MAAM,WAAW,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAC;IACtF,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAwB,EACxB,KAAwB,EACxB,MAAmB,EACnB,OAAiC,EACjC,eAAyC;IAEzC,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACtF,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,cAAc,GAAG,MAAM,qBAAqB,EAAE,CAAC;IACrD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC9B,8EAA8E;YAC9E,qEAAqE;YACrE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM;YAAE,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,6CAA6C;QACxF,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,+EAA+E;QAC/E,iEAAiE;QACjE,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,cAAc,CAAC,CAAC;gBAAE,eAAe,EAAE,EAAE,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/codex/clipboard-lock.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Process-wide async mutex for the macOS clipboard. The clipboard is a single
+ * global resource, but Elwood sessions serialize only per-session, so two
+ * concurrent Codex image attaches could interleave their snapshot/set/paste/
+ * restore transactions and cross-attach each other's images. This serializes the
+ * whole transaction across all sessions in the process. Implements PRD §5.3
+ * (C-API-46).
+ */
+/**
+ * Runs `task` while holding the clipboard lock: each caller waits for the prior
+ * holder to finish before starting, and the lock is released when `task`
+ * settles (success or failure), so a failing attach never wedges the queue.
+ */
+export declare const withClipboardLock: import("../core/async-mutex.ts").AsyncMutex;
+//# sourceMappingURL=clipboard-lock.d.ts.map

package/dist/codex/clipboard-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard-lock.d.ts","sourceRoot":"","sources":["../../src/codex/clipboard-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,6CAAqB,CAAC"}

package/dist/codex/clipboard-lock.js

@@ -0,0 +1,16 @@
+/**
+ * Process-wide async mutex for the macOS clipboard. The clipboard is a single
+ * global resource, but Elwood sessions serialize only per-session, so two
+ * concurrent Codex image attaches could interleave their snapshot/set/paste/
+ * restore transactions and cross-attach each other's images. This serializes the
+ * whole transaction across all sessions in the process. Implements PRD §5.3
+ * (C-API-46).
+ */
+import { createAsyncMutex } from "../core/async-mutex.js";
+/**
+ * Runs `task` while holding the clipboard lock: each caller waits for the prior
+ * holder to finish before starting, and the lock is released when `task`
+ * settles (success or failure), so a failing attach never wedges the queue.
+ */
+export const withClipboardLock = createAsyncMutex();
+//# sourceMappingURL=clipboard-lock.js.map

package/dist/codex/clipboard-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard-lock.js","sourceRoot":"","sources":["../../src/codex/clipboard-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,EAAE,CAAC"}

package/dist/codex/clipboard.d.ts

@@ -0,0 +1,32 @@
+/**
+ * macOS clipboard save / set-image / restore for Codex image attachment. Codex
+ * ingests an interactive image only from the OS clipboard (it reads `public.tiff`
+ * off `NSPasteboard`), so Elwood writes the image there, triggers a paste, then
+ * restores the user's prior clipboard TEXT (only text is snapshotted). Async (never blocks the event loop) and
+ * Codex-local, since this is Codex/macOS-specific mechanics. Implements PRD §5.3
+ * (C-API-46).
+ */
+/** Canonical, content-free copy for the clipboard-restore-failed warning (C-API-46). */
+export declare const CLIPBOARD_RESTORE_FAILED_MESSAGE = "Elwood could not restore the clipboard after attaching an image.";
+/** True only on macOS, where the NSPasteboard-backed attach path is available. */
+export declare function clipboardImageSupported(): boolean;
+/**
+ * The current clipboard text. Rejects with `image_attach_failed` when `pbpaste`
+ * fails, so the caller can abort BEFORE mutating the clipboard rather than later
+ * "restoring" an empty string over the user's real clipboard (C-API-46).
+ */
+export declare function snapshotClipboardText(): Promise<string>;
+/**
+ * Restores clipboard text captured by `snapshotClipboardText` (best-effort).
+ * Returns whether the restore succeeded, so the caller can surface a content-free
+ * warning if the user's prior clipboard may have been lost (C-API-46).
+ */
+export declare function restoreClipboardText(text: string): Promise<boolean>;
+/**
+ * Writes the image file at `path` onto the macOS clipboard as a native image.
+ * A file the decoder cannot load is a bad INPUT → `invalid_image`; a pasteboard
+ * write failure, process failure, or timeout is an OS/attach failure →
+ * `image_attach_failed`. Either way the caller aborts before pasting (C-API-46).
+ */
+export declare function setClipboardImage(path: string): Promise<void>;
+//# sourceMappingURL=clipboard.d.ts.map

package/dist/codex/clipboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.d.ts","sourceRoot":"","sources":["../../src/codex/clipboard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAyBH,wFAAwF;AACxF,eAAO,MAAM,gCAAgC,qEACuB,CAAC;AAErE,kFAAkF;AAClF,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAS7D;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASzE;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASnE"}