@with-logic/elwood 0.1.0

package/dist/codex/hooks/validate-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-result.js","sourceRoot":"","sources":["../../../src/codex/hooks/validate-result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG7E,MAAM,UAAU,iBAAiB,CAC/B,KAA0C,EAC1C,KAAc;IAEd,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC5E,MAAM,QAAQ,GACZ,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACrF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,oBAAoB,IAAI,KAAK;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzF,IAAI,SAAS,KAAK,YAAY,IAAI,mBAAmB,IAAI,KAAK;QAC5D,OAAO,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,UAAU,IAAI,KAAK;QAAE,OAAO,yBAAyB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5E,IAAI,UAAU,IAAI,KAAK;QAAE,OAAO,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,kBAAkB,CACzB,SAA6B,EAC7B,KAAwC,EACxC,QAAiB;IAEjB,IAAI,SAAS,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAC7C,IACE,CAAC,OAAO,CAAC,KAAK,EAAE;QACd,oBAAoB;QACpB,0BAA0B;QAC1B,cAAc;QACd,mBAAmB;KACpB,CAAC,EACF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,mBAAmB,IAAI,KAAK,IAAI,CAAC,CAAC,oBAAoB,IAAI,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC;IAC3F,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB,CAAC,KAAK,MAAM,EAAE,CAAC;QAC3C,OAAO,CACL,OAAO,KAAK,CAAC,0BAA0B,CAAC,KAAK,QAAQ;YACrD,CAAC,CAAC,cAAc,IAAI,KAAK,CAAC;YAC1B,CAAC,CAAC,mBAAmB,IAAI,KAAK,CAAC,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,CACL,KAAK,CAAC,oBAAoB,CAAC,KAAK,OAAO;QACvC,CAAC,CAAC,0BAA0B,IAAI,KAAK,CAAC;QACtC,CAAC,CAAC,mBAAmB,IAAI,KAAK,CAAC;QAC/B,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,SAA6B,EAC7B,KAAwC;IAExC,OAAO,CACL,SAAS,KAAK,mBAAmB;QACjC,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,SAA6B,EAC7B,KAAwC;IAExC,OAAO,CACL,OAAO,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC5C,KAAK,CAAC,UAAU,CAAC,KAAK,OAAO;QAC7B,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;QACnC,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,SAA6B,EAC7B,KAAwC;IAExC,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAwC;IACrE,OAAO,CACL,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC/D,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK;QAC3B,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,QAAQ;QACvC,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAwC,EAAE,OAA0B;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA4B,EAAE,KAAc;IAC1E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO,CACL,OAAO,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC1C,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACpC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CACnE,CAAC;AACJ,CAAC"}

package/dist/codex/hooks/validate.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Runtime validation for Codex hook payloads and handler results.
+ * Implements PRD §7A.2.
+ */
+import type { CodexHookEvent } from "./index.ts";
+export { isCodexHookResult } from "./validate-result.ts";
+export declare function normalizeCodexHookEvent(event: CodexHookEvent): CodexHookEvent;
+export declare function isCodexHookEvent(value: unknown): value is CodexHookEvent;
+/** True for the built-in command tools whose `tool_input` Elwood narrows (§7A.2). */
+export declare function isKnownCommandTool(value: string): boolean;
+//# sourceMappingURL=validate.d.ts.map

package/dist/codex/hooks/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/codex/hooks/validate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAG7E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CA8BxE;AAqCD,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD"}

package/dist/codex/hooks/validate.js

@@ -0,0 +1,88 @@
+/**
+ * Runtime validation for Codex hook payloads and handler results.
+ * Implements PRD §7A.2.
+ */
+import { isOneOf, isRecord, optionalString } from "../../core/predicates.js";
+export { isCodexHookResult } from "./validate-result.js";
+export function normalizeCodexHookEvent(event) {
+    if (!("tool_name" in event) || isPublicToolName(event.tool_name))
+        return event;
+    return { ...event, tool_name: `unknown:${event.tool_name}` };
+}
+export function isCodexHookEvent(value) {
+    if (!isRecord(value))
+        return false;
+    const record = value;
+    if (!hasCommonFields(record))
+        return false;
+    const eventName = record["hook_event_name"];
+    if (eventName === "SessionStart")
+        return typeof record["source"] === "string";
+    if (!hasTurnFields(record))
+        return false;
+    switch (eventName) {
+        case "SubagentStart":
+            return hasSubagentFields(record);
+        case "PreToolUse":
+        case "PermissionRequest":
+        case "PostToolUse":
+            return hasToolFields(record);
+        case "PreCompact":
+        case "PostCompact":
+            return typeof record["trigger"] === "string";
+        case "UserPromptSubmit":
+            return typeof record["prompt"] === "string";
+        case "SubagentStop":
+            return (hasSubagentFields(record) &&
+                hasStopFields(record) &&
+                optionalNullableString(record["agent_transcript_path"]));
+        case "Stop":
+            return hasStopFields(record);
+        default:
+            return false;
+    }
+}
+function hasCommonFields(record) {
+    return (typeof record["hook_event_name"] === "string" &&
+        typeof record["session_id"] === "string" &&
+        typeof record["cwd"] === "string" &&
+        optionalString(record["model"]) &&
+        optionalPermissionMode(record["permission_mode"]));
+}
+function hasTurnFields(record) {
+    return typeof record["turn_id"] === "string";
+}
+function hasSubagentFields(record) {
+    return typeof record["agent_id"] === "string" && typeof record["agent_type"] === "string";
+}
+function hasStopFields(record) {
+    return (typeof record["stop_hook_active"] === "boolean" &&
+        optionalNullableString(record["last_assistant_message"]));
+}
+function hasToolFields(record) {
+    if (typeof record["tool_name"] !== "string")
+        return false;
+    if (!isRecord(record["tool_input"]))
+        return false;
+    if (!optionalString(record["tool_use_id"]))
+        return false;
+    return isKnownCommandTool(record["tool_name"])
+        ? typeof record["tool_input"]["command"] === "string" &&
+            optionalNullableString(record["tool_input"]["description"])
+        : true;
+}
+/** True for the built-in command tools whose `tool_input` Elwood narrows (§7A.2). */
+export function isKnownCommandTool(value) {
+    return value === "Bash" || value === "apply_patch";
+}
+function isPublicToolName(value) {
+    return isKnownCommandTool(value) || value.startsWith("mcp__") || value.startsWith("unknown:");
+}
+function optionalNullableString(value) {
+    return value === undefined || value === null || typeof value === "string";
+}
+function optionalPermissionMode(value) {
+    return (value === undefined ||
+        isOneOf(value, ["default", "acceptEdits", "plan", "auto", "dontAsk", "bypassPermissions"]));
+}
+//# sourceMappingURL=validate.js.map

package/dist/codex/hooks/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/codex/hooks/validate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,UAAU,uBAAuB,CAAC,KAAqB;IAC3D,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,WAAW,KAAK,CAAC,SAAS,EAAE,EAAoB,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC;IAC9E,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,eAAe;YAClB,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,YAAY,CAAC;QAClB,KAAK,mBAAmB,CAAC;QACzB,KAAK,aAAa;YAChB,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/B,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa;YAChB,OAAO,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC;QAC/C,KAAK,kBAAkB;YACrB,OAAO,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC;QAC9C,KAAK,cAAc;YACjB,OAAO,CACL,iBAAiB,CAAC,MAAM,CAAC;gBACzB,aAAa,CAAC,MAAM,CAAC;gBACrB,sBAAsB,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CACxD,CAAC;QACJ,KAAK,MAAM;YACT,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/B;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAyC;IAChE,OAAO,CACL,OAAO,MAAM,CAAC,iBAAiB,CAAC,KAAK,QAAQ;QAC7C,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;QACjC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,sBAAsB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAyC;IAC9D,OAAO,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAyC;IAClE,OAAO,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,MAAyC;IAC9D,OAAO,CACL,OAAO,MAAM,CAAC,kBAAkB,CAAC,KAAK,SAAS;QAC/C,sBAAsB,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAyC;IAC9D,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC,CAAC,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ;YACjD,sBAAsB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,CAAC;QAC/D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,aAAa,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC5E,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,OAAO,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAC3F,CAAC;AACJ,CAAC"}

package/dist/codex/hooks.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Public Codex hook event and response types.
+ * Implements PRD §7A.
+ */
+import type { CodexCommonHookFields, CodexHookEventName, CodexTurnFields } from "./hook-names.ts";
+import type { CodexToolEventFields, CodexUnknownToolName } from "./tool-types.ts";
+type MaybePromise<T> = T | Promise<T>;
+export type { CodexCommonHookFields, CodexHookEventName, CodexPermissionMode, } from "./hook-names.ts";
+export { codexHookEventNames } from "./hook-names.ts";
+export type { CodexCommandToolInput, CodexGenericToolInput, CodexKnownToolName, CodexToolEventFields, CodexUnknownToolName, } from "./tool-types.ts";
+type CodexToolEventName = "PreToolUse" | "PermissionRequest" | "PostToolUse";
+export type CodexToolEvent = CodexCommonHookFields & CodexTurnFields & CodexToolEventFields & {
+    readonly hook_event_name: CodexToolEventName;
+};
+export type CodexHookEvent = (CodexCommonHookFields & {
+    readonly hook_event_name: "SessionStart";
+    readonly source: string;
+}) | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "SubagentStart";
+    readonly agent_id: string;
+    readonly agent_type: string;
+}) | CodexToolEvent | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "PreCompact" | "PostCompact";
+    readonly trigger: string;
+}) | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "UserPromptSubmit";
+    readonly prompt: string;
+}) | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "SubagentStop";
+    readonly agent_id: string;
+    readonly agent_type: string;
+    readonly agent_transcript_path?: string | null;
+    readonly stop_hook_active: boolean;
+    readonly last_assistant_message?: string | null;
+}) | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "Stop";
+    readonly stop_hook_active: boolean;
+    readonly last_assistant_message?: string | null;
+});
+export type CodexHookEventFor<K extends CodexHookEventName> = CodexHookEvent extends infer Event ? Event extends {
+    readonly hook_event_name: infer EventName;
+} ? K extends EventName ? Event & {
+    readonly hook_event_name: K;
+} : never : never : never;
+type CodexToolInputUpdateForEvent<Event> = Event extends {
+    readonly tool_input: infer Input;
+} ? Partial<Input> : never;
+export type CodexPreToolUseResultFor<Event> = {
+    readonly permissionDecision: "deny";
+    readonly permissionDecisionReason: string;
+} | {
+    readonly permissionDecision: "allow";
+    readonly updatedInput?: CodexToolInputUpdateForEvent<Event>;
+} | {
+    readonly additionalContext: string;
+};
+export type CodexPreToolUseResult = CodexPreToolUseResultFor<CodexHookEventFor<"PreToolUse">>;
+type CodexPreToolUseCommonResult = {
+    readonly permissionDecision: "deny";
+    readonly permissionDecisionReason: string;
+} | {
+    readonly permissionDecision: "allow";
+    readonly updatedInput?: never;
+} | {
+    readonly additionalContext: string;
+};
+export type CodexPermissionRequestResult = {
+    readonly behavior: "allow" | "deny";
+    readonly message?: string;
+};
+export type CodexBlockResult = {
+    readonly decision: "block";
+    readonly reason: string;
+    readonly additionalContext?: string;
+};
+export type CodexStopResult = {
+    readonly continue: false;
+    readonly stopReason: string;
+    readonly additionalContext?: string;
+};
+/** Return undefined for no decision; empty objects are invalid and fail open. */
+export type CodexHookResultFor<K extends CodexHookEventName> = K extends "PreToolUse" ? CodexPreToolUseResult | undefined : K extends "PermissionRequest" ? CodexPermissionRequestResult | undefined : K extends "Stop" | "SubagentStop" ? CodexBlockResult | CodexStopResult | undefined : undefined;
+export type CodexHookResultForEvent<Event extends CodexHookEvent> = Event["hook_event_name"] extends "PreToolUse" ? CodexPreToolUseResultFor<Event> | undefined : CodexHookResultFor<Event["hook_event_name"]>;
+export type CodexHookResult = {
+    [K in CodexHookEventName]: CodexHookResultFor<K>;
+}[CodexHookEventName];
+type CodexToolEventForTool<Tool extends string> = CodexHookEventFor<"PreToolUse"> & {
+    readonly tool_name: Tool;
+};
+type CodexToolSpecificHandler = {
+    readonly [Tool in Exclude<CodexHookEventFor<"PreToolUse">["tool_name"], CodexUnknownToolName> & string]?: (event: CodexToolEventForTool<Tool>) => MaybePromise<CodexHookResultForEvent<CodexToolEventForTool<Tool>>>;
+} & {
+    readonly unknown?: (event: CodexToolEventForTool<CodexUnknownToolName>) => MaybePromise<CodexHookResultForEvent<CodexToolEventForTool<CodexUnknownToolName>>>;
+};
+type CodexHandlerFor<K extends CodexHookEventName> = K extends "PreToolUse" ? ((event: CodexHookEventFor<K>) => MaybePromise<CodexPreToolUseCommonResult | undefined>) | CodexToolSpecificHandler : (event: CodexHookEventFor<K>) => MaybePromise<CodexHookResultFor<K>>;
+export type CodexHookHandlers = {
+    readonly [K in CodexHookEventName]?: CodexHandlerFor<K>;
+};
+//# sourceMappingURL=hooks.d.ts.map

package/dist/codex/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/codex/hooks.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAElF,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,YAAY,EACV,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAEzB,KAAK,kBAAkB,GAAG,YAAY,GAAG,mBAAmB,GAAG,aAAa,CAAC;AAE7E,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAChD,eAAe,GACf,oBAAoB,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAE1E,MAAM,MAAM,cAAc,GACtB,CAAC,qBAAqB,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC/F,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAChB,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC,GACJ,cAAc,GACd,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAChB,QAAQ,CAAC,eAAe,EAAE,YAAY,GAAG,aAAa,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC,GACJ,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9F,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAChB,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD,CAAC,GACJ,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAChB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD,CAAC,CAAC;AAET,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,kBAAkB,IAAI,cAAc,SAAS,MAAM,KAAK,GAC5F,KAAK,SAAS;IAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,SAAS,CAAA;CAAE,GACzD,CAAC,SAAS,SAAS,GACjB,KAAK,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAA;CAAE,GACvC,KAAK,GACP,KAAK,GACP,KAAK,CAAC;AAEV,KAAK,4BAA4B,CAAC,KAAK,IAAI,KAAK,SAAS;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,KAAK,CAAC;CAClC,GACG,OAAO,CAAC,KAAK,CAAC,GACd,KAAK,CAAC;AAEV,MAAM,MAAM,wBAAwB,CAAC,KAAK,IACtC;IAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE,GAClF;IACE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC,KAAK,CAAC,CAAC;CAC7D,GACD;IAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC;AAC3C,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9F,KAAK,2BAA2B,GAC5B;IAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,kBAAkB,IAAI,CAAC,SAAS,YAAY,GACjF,qBAAqB,GAAG,SAAS,GACjC,CAAC,SAAS,mBAAmB,GAC3B,4BAA4B,GAAG,SAAS,GACxC,CAAC,SAAS,MAAM,GAAG,cAAc,GAC/B,gBAAgB,GAAG,eAAe,GAAG,SAAS,GAC9C,SAAS,CAAC;AAElB,MAAM,MAAM,uBAAuB,CAAC,KAAK,SAAS,cAAc,IAC9D,KAAK,CAAC,iBAAiB,CAAC,SAAS,YAAY,GACzC,wBAAwB,CAAC,KAAK,CAAC,GAAG,SAAS,GAC3C,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAEnD,MAAM,MAAM,eAAe,GAAG;KAC3B,CAAC,IAAI,kBAAkB,GAAG,kBAAkB,CAAC,CAAC,CAAC;CACjD,CAAC,kBAAkB,CAAC,CAAC;AAEtB,KAAK,qBAAqB,CAAC,IAAI,SAAS,MAAM,IAAI,iBAAiB,CAAC,YAAY,CAAC,GAAG;IAClF,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,GAC3F,MAAM,CAAC,CAAC,EAAE,CACV,KAAK,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAC/B,YAAY,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;CACxE,GAAG;IACF,QAAQ,CAAC,OAAO,CAAC,EAAE,CACjB,KAAK,EAAE,qBAAqB,CAAC,oBAAoB,CAAC,KAC/C,YAAY,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;CACzF,CAAC;AAEF,KAAK,eAAe,CAAC,CAAC,SAAS,kBAAkB,IAAI,CAAC,SAAS,YAAY,GAEnE,CAAC,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAAC,GACxF,wBAAwB,GAC5B,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,CAAC,IAAI,kBAAkB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;CACxD,CAAC"}

package/dist/codex/hooks.js

@@ -0,0 +1,6 @@
+/**
+ * Public Codex hook event and response types.
+ * Implements PRD §7A.
+ */
+export { codexHookEventNames } from "./hook-names.js";
+//# sourceMappingURL=hooks.js.map

package/dist/codex/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/codex/hooks.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/codex/images/attach.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Codex image attachment: Codex ingests an interactive image only from the OS
+ * clipboard via Ctrl+V (it reads `public.tiff` off the macOS NSPasteboard), so
+ * Elwood snapshots the clipboard TEXT once (only text is captured), then for each
+ * image sets it + Ctrl+V + waits for the `[Image #N]` chip, then restores the text
+ * snapshot. macOS-only, and
+ * the whole transaction holds a process-wide clipboard lock so concurrent Codex
+ * sessions cannot cross-attach. Implements PRD §5.3 (C-API-46).
+ */
+import { type AttachTerminal, type BlockedGuard } from "../../core/images/chip-wait.ts";
+/**
+ * Attaches every image via the clipboard under a process-wide lock, restoring
+ * the user's clipboard text afterward (best-effort). Rejects with
+ * `unsupported_platform` on non-macOS BEFORE touching the clipboard, and with
+ * `image_attach_failed`/`invalid_image` on a snapshot/set/confirm failure; the
+ * caller then submits no text. The Ctrl+V is held while a blocking dialog is on
+ * screen so it never confirms a dialog (C-API-37/46).
+ */
+export declare function attachCodexImages(terminal: AttachTerminal, paths: readonly string[], signal: AbortSignal, blocked?: BlockedGuard, onRestoreFailed?: () => void): Promise<void>;
+//# sourceMappingURL=attach.d.ts.map

package/dist/codex/images/attach.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach.d.ts","sourceRoot":"","sources":["../../../src/codex/images/attach.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,YAAY,EAMlB,MAAM,gCAAgC,CAAC;AAYxC;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,YAAY,EACtB,eAAe,CAAC,EAAE,MAAM,IAAI,GAC3B,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/codex/images/attach.js

@@ -0,0 +1,66 @@
+/**
+ * Codex image attachment: Codex ingests an interactive image only from the OS
+ * clipboard via Ctrl+V (it reads `public.tiff` off the macOS NSPasteboard), so
+ * Elwood snapshots the clipboard TEXT once (only text is captured), then for each
+ * image sets it + Ctrl+V + waits for the `[Image #N]` chip, then restores the text
+ * snapshot. macOS-only, and
+ * the whole transaction holds a process-wide clipboard lock so concurrent Codex
+ * sessions cannot cross-attach. Implements PRD §5.3 (C-API-46).
+ */
+import { elwoodError } from "../../core/errors.js";
+import { clearComposer, imageChipCount, sendWhenUnblocked, waitForImageChip, } from "../../core/images/chip-wait.js";
+import { clipboardImageSupported, restoreClipboardText, setClipboardImage, snapshotClipboardText, } from "./clipboard.js";
+import { withClipboardLock } from "./clipboard-lock.js";
+const CTRL_V = "\u0016"; // Ctrl+V triggers Codex clipboard-image paste
+const chipWait = { settleMs: 200, timeoutMs: 10_000, pollMs: 100 };
+/**
+ * Attaches every image via the clipboard under a process-wide lock, restoring
+ * the user's clipboard text afterward (best-effort). Rejects with
+ * `unsupported_platform` on non-macOS BEFORE touching the clipboard, and with
+ * `image_attach_failed`/`invalid_image` on a snapshot/set/confirm failure; the
+ * caller then submits no text. The Ctrl+V is held while a blocking dialog is on
+ * screen so it never confirms a dialog (C-API-37/46).
+ */
+export async function attachCodexImages(terminal, paths, signal, blocked, onRestoreFailed) {
+    if (!clipboardImageSupported())
+        throw elwoodError("unsupported_platform", "Codex image attachment requires macOS.");
+    await withClipboardLock(() => attachUnderLock(terminal, paths, signal, blocked, onRestoreFailed));
+}
+async function attachUnderLock(terminal, paths, signal, blocked, onRestoreFailed) {
+    // A waiter that acquired the lock only after its session closed must touch
+    // nothing — check abort FIRST, before snapshotting or mutating the clipboard.
+    if (signal.aborted)
+        throw elwoodError("image_attach_failed", "Image attach aborted.");
+    // Snapshot BEFORE mutating; a snapshot failure rejects here so we never
+    // overwrite then "restore" an empty string over the user's clipboard.
+    const priorClipboard = await snapshotClipboardText();
+    let staged = false;
+    try {
+        for (const path of paths) {
+            const before = imageChipCount(terminal.snapshot().text);
+            await setClipboardImage(path);
+            // sendWhenUnblocked rejects if the signal is already aborted, so a mid-attach
+            // close is caught here before the Ctrl+V reaches the PTY (C-API-46).
+            await sendWhenUnblocked(terminal, CTRL_V, blocked, signal);
+            staged = true;
+            await waitForImageChip(terminal, before, signal, chipWait);
+        }
+    }
+    catch (error) {
+        if (staged)
+            await clearComposer(terminal); // discard staged chips on failure (C-API-44)
+        throw error;
+    }
+    finally {
+        // Best-effort and fully isolated: neither the restore nor its warning callback
+        // may reject or mask the primary attach result/error (C-API-46).
+        try {
+            if (!(await restoreClipboardText(priorClipboard)))
+                onRestoreFailed?.();
+        }
+        catch {
+            // A throwing warning sink must not turn a successful attach into a failure.
+        }
+    }
+}
+//# sourceMappingURL=attach.js.map

package/dist/codex/images/attach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach.js","sourceRoot":"","sources":["../../../src/codex/images/attach.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAIL,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,8CAA8C;AACvE,MAAM,QAAQ,GAAoB,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAEpF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAwB,EACxB,KAAwB,EACxB,MAAmB,EACnB,OAAsB,EACtB,eAA4B;IAE5B,IAAI,CAAC,uBAAuB,EAAE;QAC5B,MAAM,WAAW,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAC;IACtF,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAwB,EACxB,KAAwB,EACxB,MAAmB,EACnB,OAAiC,EACjC,eAAyC;IAEzC,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACtF,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,cAAc,GAAG,MAAM,qBAAqB,EAAE,CAAC;IACrD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC9B,8EAA8E;YAC9E,qEAAqE;YACrE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM;YAAE,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,6CAA6C;QACxF,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,+EAA+E;QAC/E,iEAAiE;QACjE,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,cAAc,CAAC,CAAC;gBAAE,eAAe,EAAE,EAAE,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/codex/images/clipboard-lock.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Process-wide async mutex for the macOS clipboard. The clipboard is a single
+ * global resource, but Elwood sessions serialize only per-session, so two
+ * concurrent Codex image attaches could interleave their snapshot/set/paste/
+ * restore transactions and cross-attach each other's images. This serializes the
+ * whole transaction across all sessions in the process. Implements PRD §5.3
+ * (C-API-46).
+ */
+/**
+ * Runs `task` while holding the clipboard lock: each caller waits for the prior
+ * holder to finish before starting, and the lock is released when `task`
+ * settles (success or failure), so a failing attach never wedges the queue.
+ */
+export declare const withClipboardLock: import("../../core/async-mutex.ts").AsyncMutex;
+//# sourceMappingURL=clipboard-lock.d.ts.map

package/dist/codex/images/clipboard-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard-lock.d.ts","sourceRoot":"","sources":["../../../src/codex/images/clipboard-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,gDAAqB,CAAC"}

package/dist/codex/images/clipboard-lock.js

@@ -0,0 +1,16 @@
+/**
+ * Process-wide async mutex for the macOS clipboard. The clipboard is a single
+ * global resource, but Elwood sessions serialize only per-session, so two
+ * concurrent Codex image attaches could interleave their snapshot/set/paste/
+ * restore transactions and cross-attach each other's images. This serializes the
+ * whole transaction across all sessions in the process. Implements PRD §5.3
+ * (C-API-46).
+ */
+import { createAsyncMutex } from "../../core/async-mutex.js";
+/**
+ * Runs `task` while holding the clipboard lock: each caller waits for the prior
+ * holder to finish before starting, and the lock is released when `task`
+ * settles (success or failure), so a failing attach never wedges the queue.
+ */
+export const withClipboardLock = createAsyncMutex();
+//# sourceMappingURL=clipboard-lock.js.map

package/dist/codex/images/clipboard-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard-lock.js","sourceRoot":"","sources":["../../../src/codex/images/clipboard-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,EAAE,CAAC"}

package/dist/codex/images/clipboard.d.ts

@@ -0,0 +1,32 @@
+/**
+ * macOS clipboard save / set-image / restore for Codex image attachment. Codex
+ * ingests an interactive image only from the OS clipboard (it reads `public.tiff`
+ * off `NSPasteboard`), so Elwood writes the image there, triggers a paste, then
+ * restores the user's prior clipboard TEXT (only text is snapshotted). Async (never blocks the event loop) and
+ * Codex-local, since this is Codex/macOS-specific mechanics. Implements PRD §5.3
+ * (C-API-46).
+ */
+/** Canonical, content-free copy for the clipboard-restore-failed warning (C-API-46). */
+export declare const CLIPBOARD_RESTORE_FAILED_MESSAGE = "Elwood could not restore the clipboard after attaching an image.";
+/** True only on macOS, where the NSPasteboard-backed attach path is available. */
+export declare function clipboardImageSupported(): boolean;
+/**
+ * The current clipboard text. Rejects with `image_attach_failed` when `pbpaste`
+ * fails, so the caller can abort BEFORE mutating the clipboard rather than later
+ * "restoring" an empty string over the user's real clipboard (C-API-46).
+ */
+export declare function snapshotClipboardText(): Promise<string>;
+/**
+ * Restores clipboard text captured by `snapshotClipboardText` (best-effort).
+ * Returns whether the restore succeeded, so the caller can surface a content-free
+ * warning if the user's prior clipboard may have been lost (C-API-46).
+ */
+export declare function restoreClipboardText(text: string): Promise<boolean>;
+/**
+ * Writes the image file at `path` onto the macOS clipboard as a native image.
+ * A file the decoder cannot load is a bad INPUT → `invalid_image`; a pasteboard
+ * write failure, process failure, or timeout is an OS/attach failure →
+ * `image_attach_failed`. Either way the caller aborts before pasting (C-API-46).
+ */
+export declare function setClipboardImage(path: string): Promise<void>;
+//# sourceMappingURL=clipboard.d.ts.map

package/dist/codex/images/clipboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.d.ts","sourceRoot":"","sources":["../../../src/codex/images/clipboard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAyBH,wFAAwF;AACxF,eAAO,MAAM,gCAAgC,qEACuB,CAAC;AAErE,kFAAkF;AAClF,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAS7D;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASzE;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASnE"}

package/dist/codex/images/clipboard.js

@@ -0,0 +1,92 @@
+/**
+ * macOS clipboard save / set-image / restore for Codex image attachment. Codex
+ * ingests an interactive image only from the OS clipboard (it reads `public.tiff`
+ * off `NSPasteboard`), so Elwood writes the image there, triggers a paste, then
+ * restores the user's prior clipboard TEXT (only text is snapshotted). Async (never blocks the event loop) and
+ * Codex-local, since this is Codex/macOS-specific mechanics. Implements PRD §5.3
+ * (C-API-46).
+ */
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { elwoodError } from "../../core/errors.js";
+import { currentPlatform } from "../../runtime/seams.js";
+const run = promisify(execFile);
+const OSASCRIPT = "/usr/bin/osascript";
+const PBPASTE = "/usr/bin/pbpaste";
+const PBCOPY = "/usr/bin/pbcopy";
+// JXA hosting AppKit: load the file as an NSImage and lay it on the pasteboard
+// with writeObjects, which writes the canonical `public.tiff` representation the
+// `arboard` reader Codex uses expects. A bare JS array becomes an NSDictionary
+// under the bridge and is rejected, so the image is wrapped in a real NSArray.
+const SET_IMAGE_JXA = 'function run(argv){ObjC.import("AppKit");' +
+    "var img=$.NSImage.alloc.initWithContentsOfFile(argv[0]);" +
+    'if(!img||img.isNil())throw new Error("image load failed");' +
+    "var pb=$.NSPasteboard.generalPasteboard;pb.clearContents;" +
+    "if(!pb.writeObjects($.NSArray.arrayWithObject(img)))" +
+    'throw new Error("clipboard write failed");return "ok";}';
+/** Canonical, content-free copy for the clipboard-restore-failed warning (C-API-46). */
+export const CLIPBOARD_RESTORE_FAILED_MESSAGE = "Elwood could not restore the clipboard after attaching an image.";
+/** True only on macOS, where the NSPasteboard-backed attach path is available. */
+export function clipboardImageSupported() {
+    return currentPlatform() === "darwin";
+}
+/**
+ * The current clipboard text. Rejects with `image_attach_failed` when `pbpaste`
+ * fails, so the caller can abort BEFORE mutating the clipboard rather than later
+ * "restoring" an empty string over the user's real clipboard (C-API-46).
+ */
+export async function snapshotClipboardText() {
+    try {
+        const { stdout } = await run(PBPASTE, [], { timeout: 5_000, encoding: "utf8" });
+        return stdout;
+    }
+    catch (error) {
+        throw elwoodError("image_attach_failed", "Could not read the clipboard.", {
+            cause: error instanceof Error ? error.message : String(error),
+        });
+    }
+}
+/**
+ * Restores clipboard text captured by `snapshotClipboardText` (best-effort).
+ * Returns whether the restore succeeded, so the caller can surface a content-free
+ * warning if the user's prior clipboard may have been lost (C-API-46).
+ */
+export async function restoreClipboardText(text) {
+    try {
+        const child = run(PBCOPY, [], { timeout: 5_000 });
+        child.child.stdin?.end(text); // inside try so a synchronous spawn/stdin failure can't escape
+        await child;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Writes the image file at `path` onto the macOS clipboard as a native image.
+ * A file the decoder cannot load is a bad INPUT → `invalid_image`; a pasteboard
+ * write failure, process failure, or timeout is an OS/attach failure →
+ * `image_attach_failed`. Either way the caller aborts before pasting (C-API-46).
+ */
+export async function setClipboardImage(path) {
+    try {
+        await run(OSASCRIPT, ["-l", "JavaScript", "-e", SET_IMAGE_JXA, path], { timeout: 10_000 });
+    }
+    catch (error) {
+        const reason = clipboardErrorReason(error);
+        // The JXA throws "image load failed" only when NSImage cannot decode the file.
+        const code = /image load failed/i.test(reason) ? "invalid_image" : "image_attach_failed";
+        throw elwoodError(code, `Could not place image on clipboard: ${reason}`, { path });
+    }
+}
+function clipboardErrorReason(error) {
+    if (error && typeof error === "object") {
+        const { stderr, message } = error;
+        if (typeof stderr === "string" && stderr.trim())
+            return stderr.trim();
+        if (typeof message === "string" && message.trim())
+            return message.trim();
+    }
+    return "clipboard image write failed";
+}
+//# sourceMappingURL=clipboard.js.map

package/dist/codex/images/clipboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.js","sourceRoot":"","sources":["../../../src/codex/images/clipboard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC,MAAM,SAAS,GAAG,oBAAoB,CAAC;AACvC,MAAM,OAAO,GAAG,kBAAkB,CAAC;AACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC;AAEjC,+EAA+E;AAC/E,iFAAiF;AACjF,+EAA+E;AAC/E,+EAA+E;AAC/E,MAAM,aAAa,GACjB,2CAA2C;IAC3C,0DAA0D;IAC1D,4DAA4D;IAC5D,2DAA2D;IAC3D,sDAAsD;IACtD,yDAAyD,CAAC;AAE5D,wFAAwF;AACxF,MAAM,CAAC,MAAM,gCAAgC,GAC3C,kEAAkE,CAAC;AAErE,kFAAkF;AAClF,MAAM,UAAU,uBAAuB;IACrC,OAAO,eAAe,EAAE,KAAK,QAAQ,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,qBAAqB,EAAE,+BAA+B,EAAE;YACxE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,+DAA+D;QAC7F,MAAM,KAAK,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC3C,+EAA+E;QAC/E,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC;QACzF,MAAM,WAAW,CAAC,IAAI,EAAE,uCAAuC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAgD,CAAC;QAC7E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACtE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,8BAA8B,CAAC;AACxC,CAAC"}

package/dist/codex/initial-ready.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Codex initial-readiness marker: hook-backed, with a starvation deadline.
+ * Implements PRD §5.3, C-API-19, and C-API-28.
+ *
+ * On a COLD start readiness fires from the `SessionStart` hook — Codex's
+ * authoritative pre-input signal (`mark`) — and the rendered composer marker is NOT
+ * used: it is a boot-time placeholder that paints ~1s before input is accepted, so
+ * releasing the first queued message on it would swallow the message (C-API-28). On
+ * RESUME the CLI does not re-fire `SessionStart`, but its input loop is live when the
+ * composer paints, so `markReadyOnResumeComposer` releases readiness on the first
+ * composer marker instead of waiting the deadline. `armDeadline` is the ultimate
+ * fallback for both: if neither a hook nor (cold start) a composer signal arrives,
+ * readiness still fires after a fixed deadline rather than never.
+ *
+ * The mechanism is shared with Claude (`InstructionsLoaded`); it lives in
+ * `../runtime/initial-ready.ts` and is re-exported here for the Codex adapter.
+ */
+export { type InitialReady, initialReady, markReadyOnResumeComposer, } from "../runtime/initial-ready.ts";
+//# sourceMappingURL=initial-ready.d.ts.map

package/dist/codex/initial-ready.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initial-ready.d.ts","sourceRoot":"","sources":["../../src/codex/initial-ready.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,KAAK,YAAY,EACjB,YAAY,EACZ,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC"}

package/dist/codex/initial-ready.js

@@ -0,0 +1,19 @@
+/**
+ * Codex initial-readiness marker: hook-backed, with a starvation deadline.
+ * Implements PRD §5.3, C-API-19, and C-API-28.
+ *
+ * On a COLD start readiness fires from the `SessionStart` hook — Codex's
+ * authoritative pre-input signal (`mark`) — and the rendered composer marker is NOT
+ * used: it is a boot-time placeholder that paints ~1s before input is accepted, so
+ * releasing the first queued message on it would swallow the message (C-API-28). On
+ * RESUME the CLI does not re-fire `SessionStart`, but its input loop is live when the
+ * composer paints, so `markReadyOnResumeComposer` releases readiness on the first
+ * composer marker instead of waiting the deadline. `armDeadline` is the ultimate
+ * fallback for both: if neither a hook nor (cold start) a composer signal arrives,
+ * readiness still fires after a fixed deadline rather than never.
+ *
+ * The mechanism is shared with Claude (`InstructionsLoaded`); it lives in
+ * `../runtime/initial-ready.ts` and is re-exported here for the Codex adapter.
+ */
+export { initialReady, markReadyOnResumeComposer, } from "../runtime/initial-ready.js";
+//# sourceMappingURL=initial-ready.js.map

package/dist/codex/initial-ready.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initial-ready.js","sourceRoot":"","sources":["../../src/codex/initial-ready.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAEL,YAAY,EACZ,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC"}

package/dist/codex/list-models.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Session-less Codex model enumeration. Implements PRD §5.3 and C-API-41.
+ */
+import { type ListModelsOptions } from "../core/models/list.ts";
+import type { AgentModelOption } from "../core/models/rows.ts";
+/**
+ * Lists the models available to Codex WITHOUT a caller-held session: starts a
+ * throwaway session (autotrust implied per C-API-41 so a trust prompt cannot stall
+ * the probe), lists its models, and always cleans up — the session AND its owned
+ * temp state directory, even if startup fails after allocating it. The probe runs
+ * read-only with approvals off, and the picker is opened and cancelled only, so
+ * the user's saved MODEL default stays untouched (Codex's own boot config
+ * bookkeeping is outside Elwood's control and is not a model change).
+ */
+export declare function listCodexModels(options: ListModelsOptions): Promise<readonly AgentModelOption[]>;
+//# sourceMappingURL=list-models.d.ts.map

package/dist/codex/list-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-models.d.ts","sourceRoot":"","sources":["../../src/codex/list-models.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,iBAAiB,EAAe,MAAM,wBAAwB,CAAC;AAE7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAsBhG"}

package/dist/codex/list-models.js

@@ -0,0 +1,35 @@
+/**
+ * Session-less Codex model enumeration. Implements PRD §5.3 and C-API-41.
+ */
+import { probeModels } from "../core/models/list.js";
+import { ownedProbeStateDir } from "../core/models/probe-state.js";
+import { startCodex } from "./session/index.js";
+/**
+ * Lists the models available to Codex WITHOUT a caller-held session: starts a
+ * throwaway session (autotrust implied per C-API-41 so a trust prompt cannot stall
+ * the probe), lists its models, and always cleans up — the session AND its owned
+ * temp state directory, even if startup fails after allocating it. The probe runs
+ * read-only with approvals off, and the picker is opened and cancelled only, so
+ * the user's saved MODEL default stays untouched (Codex's own boot config
+ * bookkeeping is outside Elwood's control and is not a model change).
+ */
+export function listCodexModels(options) {
+    const state = ownedProbeStateDir("codex", options.stateDir);
+    return probeModels({
+        start: () => startCodex({
+            cwd: options.cwd,
+            stateDir: state.dir,
+            autotrust: true,
+            sandbox: "read-only",
+            approvalPolicy: "never",
+            hooks: {},
+            ...(options.autoupdate === undefined ? {} : { autoupdate: options.autoupdate }),
+            ...(options.hookTimeoutMs === undefined ? {} : { hookTimeoutMs: options.hookTimeoutMs }),
+            ...(options.strictVersionCheck === undefined
+                ? {}
+                : { strictVersionCheck: options.strictVersionCheck }),
+        }),
+        removeState: state.remove,
+    }, options);
+}
+//# sourceMappingURL=list-models.js.map