@with-logic/elwood 0.1.0

package/dist/codex/list-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-models.js","sourceRoot":"","sources":["../../src/codex/list-models.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAA0B,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5D,OAAO,WAAW,CAChB;QACE,KAAK,EAAE,GAAG,EAAE,CACV,UAAU,CAAC;YACT,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,KAAK,CAAC,GAAG;YACnB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,WAAW;YACpB,cAAc,EAAE,OAAO;YACvB,KAAK,EAAE,EAAE;YACT,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;YACxF,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;SACxD,CAAC;QACJ,WAAW,EAAE,KAAK,CAAC,MAAM;KAC1B,EACD,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/codex/model-picker.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Codex /model picker automation spec.
+ * Implements PRD §5.7, C-API-23, and C-API-24.
+ */
+import type { ModelPickerSpec } from "../core/models/picker.ts";
+export declare const codexModelPicker: ModelPickerSpec;
+//# sourceMappingURL=model-picker.d.ts.map

package/dist/codex/model-picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-picker.d.ts","sourceRoot":"","sources":["../../src/codex/model-picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAOhE,eAAO,MAAM,gBAAgB,EAAE,eAsB9B,CAAC"}

package/dist/codex/model-picker.js

@@ -0,0 +1,22 @@
+/**
+ * Codex /model picker automation spec.
+ * Implements PRD §5.7, C-API-23, and C-API-24.
+ */
+import { codexModelPickerHeader, parseCodexModelPicker } from "../core/models/rows.js";
+import { waitForScreen } from "../core/models/tui-screen.js";
+const reasoningHeader = /Select Reasoning Level/;
+const changeConfirmed = /Model changed to/;
+export const codexModelPicker = {
+    agent: "codex",
+    isOpen: (text) => codexModelPickerHeader.test(text),
+    parse: parseCodexModelPicker,
+    // Enter confirms the model, then Codex asks for a reasoning level with the
+    // cursor pre-set on that model's default; a second Enter keeps it.
+    apply: async (io, timeoutMs) => {
+        await io.terminal.sendInput("\r");
+        await waitForScreen(io.terminal, (text) => reasoningHeader.test(text), timeoutMs, "codex reasoning level screen");
+        await io.terminal.sendInput("\r");
+        await waitForScreen(io.terminal, (text) => changeConfirmed.test(text) && !reasoningHeader.test(text), timeoutMs, "codex model change confirmation");
+    },
+};
+//# sourceMappingURL=model-picker.js.map

package/dist/codex/model-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-picker.js","sourceRoot":"","sources":["../../src/codex/model-picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;IACnD,KAAK,EAAE,qBAAqB;IAC5B,2EAA2E;IAC3E,mEAAmE;IACnE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;QAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,aAAa,CACjB,EAAE,CAAC,QAAQ,EACX,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EACpC,SAAS,EACT,8BAA8B,CAC/B,CAAC;QACF,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,aAAa,CACjB,EAAE,CAAC,QAAQ,EACX,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EACnE,SAAS,EACT,iCAAiC,CAClC,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/codex/preflight.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Codex CLI availability and version checks.
+ * Implements PRD §9.2 and §10.
+ */
+import type { ElwoodWarningEvent } from "../core/types.ts";
+import { type DistributiveOmit } from "../core/warnings/update.ts";
+export declare const minimumCodexVersion = "0.124.0";
+export type CodexCliCapabilities = {
+    readonly supportsHookTrustBypass: boolean;
+};
+export type CodexPreflightWarning = DistributiveOmit<Extract<ElwoodWarningEvent, {
+    readonly code: "version_unparseable" | "agent_update_failed";
+}>, "elwoodSessionId">;
+export declare function preflightCodex(strictVersionCheck: boolean, autoupdate?: boolean): Promise<CodexPreflightWarning | undefined>;
+export declare function detectCodexCliCapabilities(): Promise<CodexCliCapabilities>;
+export declare function resetCodexPreflightCacheForTests(): void;
+//# sourceMappingURL=preflight.d.ts.map

package/dist/codex/preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../src/codex/preflight.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAAE,KAAK,gBAAgB,EAAuB,MAAM,4BAA4B,CAAC;AAOxF,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAC7C,MAAM,MAAM,oBAAoB,GAAG;IAAE,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAA;CAAE,CAAC;AACjF,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,CAClD,OAAO,CAAC,kBAAkB,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,qBAAqB,CAAA;CAAE,CAAC,EAC7F,iBAAiB,CAClB,CAAC;AAMF,wBAAsB,cAAc,CAClC,kBAAkB,EAAE,OAAO,EAC3B,UAAU,UAAQ,GACjB,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAqC5C;AA4BD,wBAAgB,0BAA0B,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAI1E;AAaD,wBAAgB,gCAAgC,IAAI,IAAI,CAEvD"}

package/dist/codex/preflight.js

@@ -0,0 +1,94 @@
+/**
+ * Codex CLI availability and version checks.
+ * Implements PRD §9.2 and §10.
+ */
+import { elwoodError, probeFailureDetails } from "../core/errors.js";
+import { compareVersions, parseVersion } from "../core/versions.js";
+import { updateFailedWarning } from "../core/warnings/update.js";
+import { currentCommandRunner, currentPlatform } from "../runtime/seams.js";
+import { probeShellCommand, userShell } from "../runtime/shell.js";
+import { cachedAutoupdate, cachedVersionRead, dedupeInFlight } from "../runtime/update/once.js";
+// Re-exported for existing importers; the implementation lives in core/versions.ts.
+export const minimumCodexVersion = "0.124.0";
+// Single-entry cache for the capability probe. `dedupeInFlight` shares one in-flight `codex --help`
+// across concurrent first spawns AND evicts on rejection, so a transient `--help` failure does not
+// poison every later Codex start in the process (C-LIFE-11) — a later start re-probes.
+const capabilityProbe = new Map();
+export async function preflightCodex(strictVersionCheck, autoupdate = false) {
+    // Platform check is synchronous and first: unsupported hosts throw before
+    // any subprocess is spawned.
+    if (currentPlatform() !== "darwin") {
+        throw elwoodError("unsupported_platform", "Elwood currently supports macOS only.");
+    }
+    let updateError;
+    if (autoupdate) {
+        // Best-effort: the shared update never rejects; on failure we re-read and fall through to the
+        // compatibility gate — fatal only when the INSTALLED CLI is below the minimum (C-LIFE-11).
+        const outcome = await cachedAutoupdate("codex", async () => {
+            await readCodexVersion(); // verify existence only after owning the cross-process lease
+            await runCodexUpdate();
+        }, () => capabilityProbe.clear());
+        if (!outcome.ok)
+            updateError = outcome.error;
+    }
+    const result = await readCodexVersion();
+    const version = parseVersion(result.stdout);
+    if (!version) {
+        if (strictVersionCheck) {
+            throw elwoodError("codex_version_unsupported", "Could not parse Codex CLI version.");
+        }
+        return versionWarning(result.stdout);
+    }
+    if (compareVersions(version, minimumCodexVersion) < 0) {
+        throw elwoodError("codex_version_unsupported", `Codex CLI ${minimumCodexVersion} or newer is required for Elwood hooks.`, { version, minimumCodexVersion });
+    }
+    // Installed CLI is compatible: a failed best-effort update is a warning, not a start failure.
+    return updateError === undefined ? undefined : updateFailedWarning("codex", version, updateError);
+}
+async function runCodexUpdate() {
+    const result = await currentCommandRunner()(userShell(), probeShellCommand("codex update"));
+    if (result.status !== 0) {
+        throw elwoodError("codex_update_failed", "`codex update` failed.", probeFailureDetails(result));
+    }
+}
+async function readCodexVersion() {
+    // The mapping to typed errors runs on every call (cache hit or miss) so all
+    // callers throw identically; only the subprocess is deduped.
+    const result = await cachedVersionRead("codex", () => Promise.resolve(currentCommandRunner()(userShell(), probeShellCommand("codex --version"))));
+    if (result.error?.code === "ENOENT" || result.status === 127) {
+        throw elwoodError("codex_not_found", "Could not find `codex` on PATH.");
+    }
+    if (result.status !== 0) {
+        throw elwoodError("codex_start_failed", "`codex --version` failed.", probeFailureDetails(result));
+    }
+    return result;
+}
+export function detectCodexCliCapabilities() {
+    // Shared once across concurrent first spawns; a rejected probe is evicted so a later start
+    // re-probes rather than inheriting the failure.
+    return dedupeInFlight(capabilityProbe, "codex", detectCapabilities);
+}
+async function detectCapabilities() {
+    const result = await currentCommandRunner()(userShell(), probeShellCommand("codex --help"));
+    // A bounded probe (timeout/overflow) or nonzero exit is a diagnosable
+    // startup failure, not "capability unsupported" — surface it with cause.
+    if (result.error !== undefined || result.status !== 0) {
+        throw elwoodError("codex_start_failed", "`codex --help` failed.", probeFailureDetails(result));
+    }
+    const help = `${result.stdout}\n${result.stderr}`;
+    return { supportsHookTrustBypass: help.includes("--dangerously-bypass-hook-trust") };
+}
+export function resetCodexPreflightCacheForTests() {
+    capabilityProbe.clear();
+}
+function versionWarning(output) {
+    return {
+        agent: "codex",
+        source: "lifecycle",
+        code: "version_unparseable",
+        severity: "warning",
+        message: "Could not parse Codex CLI version; compatibility was not verified.",
+        raw: output,
+    };
+}
+//# sourceMappingURL=preflight.js.map

package/dist/codex/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/codex/preflight.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAyB,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,EAAsB,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhG,oFAAoF;AAEpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAM7C,oGAAoG;AACpG,mGAAmG;AACnG,uFAAuF;AACvF,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0C,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,kBAA2B,EAC3B,UAAU,GAAG,KAAK;IAElB,0EAA0E;IAC1E,6BAA6B;IAC7B,IAAI,eAAe,EAAE,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,WAAW,CAAC,sBAAsB,EAAE,uCAAuC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,WAAoB,CAAC;IACzB,IAAI,UAAU,EAAE,CAAC;QACf,8FAA8F;QAC9F,2FAA2F;QAC3F,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,OAAO,EACP,KAAK,IAAI,EAAE;YACT,MAAM,gBAAgB,EAAE,CAAC,CAAC,6DAA6D;YACvF,MAAM,cAAc,EAAE,CAAC;QACzB,CAAC,EACD,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAC9B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,WAAW,CAAC,2BAA2B,EAAE,oCAAoC,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,eAAe,CAAC,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,WAAW,CACf,2BAA2B,EAC3B,aAAa,mBAAmB,yCAAyC,EACzE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CACjC,CAAC;IACJ,CAAC;IACD,8FAA8F;IAC9F,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AACpG,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,WAAW,CAAC,qBAAqB,EAAE,wBAAwB,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,CACnD,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAC3F,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7D,MAAM,WAAW,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,WAAW,CACf,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,CAAC,MAAM,CAAC,CAC5B,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,2FAA2F;IAC3F,gDAAgD;IAChD,OAAO,cAAc,CAAC,eAAe,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5F,sEAAsE;IACtE,yEAAyE;IACzE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,WAAW,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;IAClD,OAAO,EAAE,uBAAuB,EAAE,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO;QACL,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,oEAAoE;QAC7E,GAAG,EAAE,MAAM;KACZ,CAAC;AACJ,CAAC"}

package/dist/codex/pty.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Codex PTY spawning with login-shell semantics.
+ * Implements PRD §4.1, §4.2, and §5.5.
+ */
+import type { PtyProcess } from "../pty/types.ts";
+import type { SessionRecord } from "../state/store.ts";
+import type { StartCodexOptions } from "./session/types.ts";
+export declare function spawnCodexPty(record: SessionRecord, bridgeScriptPath: string, options: StartCodexOptions): Promise<PtyProcess>;
+//# sourceMappingURL=pty.d.ts.map

package/dist/codex/pty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty.d.ts","sourceRoot":"","sources":["../../src/codex/pty.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,UAAU,CAAC,CAerB"}

package/dist/codex/pty.js

@@ -0,0 +1,26 @@
+/**
+ * Codex PTY spawning with login-shell semantics.
+ * Implements PRD §4.1, §4.2, and §5.5.
+ */
+import { defaultTerminalSize } from "../core/defaults.js";
+import { causeDetails, elwoodError } from "../core/errors.js";
+import { currentPtyFactory } from "../runtime/seams.js";
+import { loginShellCommand, userShell } from "../runtime/shell.js";
+import { buildCodexShellCommand } from "./command.js";
+import * as preflight from "./preflight.js";
+export async function spawnCodexPty(record, bridgeScriptPath, options) {
+    const capabilities = await preflight.detectCodexCliCapabilities();
+    try {
+        return currentPtyFactory()({
+            command: userShell(),
+            args: loginShellCommand(buildCodexShellCommand(record, bridgeScriptPath, options, capabilities)),
+            cwd: record.cwd,
+            env: { ...process.env, ELWOOD_SESSION_ID: record.elwoodSessionId },
+            size: options.initialSize ?? defaultTerminalSize,
+        });
+    }
+    catch (error) {
+        throw elwoodError("pty_start_failed", "Could not start Codex PTY.", causeDetails(error));
+    }
+}
+//# sourceMappingURL=pty.js.map

package/dist/codex/pty.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty.js","sourceRoot":"","sources":["../../src/codex/pty.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAG5C,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,gBAAwB,EACxB,OAA0B;IAE1B,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,0BAA0B,EAAE,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,iBAAiB,EAAE,CAAC;YACzB,OAAO,EAAE,SAAS,EAAE;YACpB,IAAI,EAAE,iBAAiB,CACrB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,CAAC,CACxE;YACD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,CAAC,eAAe,EAAE;YAClE,IAAI,EAAE,OAAO,CAAC,WAAW,IAAI,mBAAmB;SACjD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,kBAAkB,EAAE,4BAA4B,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC"}

package/dist/codex/screen-table.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Codex rendered-screen fact table for turn-state and attention detection.
+ * Implements PRD §5.3, C-API-28, C-TURN-01 through C-TURN-05, and C-ATTN-01
+ * through C-ATTN-03.
+ */
+import type { ScreenFactTable } from "../core/screen-facts.ts";
+/** The stateless table (single-frame update matcher) for frame-level fact tests. */
+export declare const codexScreenFactTable: ScreenFactTable;
+/**
+ * The table a session actually runs: a per-session update-prompt tracker plus the
+ * shared per-agent trust blocking rules (C-ATTN-03; PRD §5.1). An `always`-answered
+ * prompt (hook trust) is auto-handled and never blocks, so `blockingTrustSpecs`
+ * already excludes it even when autotrust is off.
+ */
+export declare function codexScreenFactTableForTrustPolicy(autotrust: boolean): ScreenFactTable;
+//# sourceMappingURL=screen-table.d.ts.map

package/dist/codex/screen-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"screen-table.d.ts","sourceRoot":"","sources":["../../src/codex/screen-table.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,yBAAyB,CAAC;AA6C/E,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,EAAE,eAIlC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,OAAO,GAAG,eAAe,CAQtF"}

package/dist/codex/screen-table.js

@@ -0,0 +1,68 @@
+/**
+ * Codex rendered-screen fact table for turn-state and attention detection.
+ * Implements PRD §5.3, C-API-28, C-TURN-01 through C-TURN-05, and C-ATTN-01
+ * through C-ATTN-03.
+ */
+import { withTrustBlockingRules } from "../core/trust/blocking.js";
+import { CodexUpdatePromptTracker, codexUpdatePromptVisible } from "./update-prompt.js";
+const verifiedAgainst = "codex-cli 0.142.5";
+/**
+ * Verified against codex-cli 0.142.5. The working spinner renders
+ * "• Working (3s • esc to interrupt)", the interrupt banner renders
+ * "■ Conversation interrupted", and the idle composer marker is a
+ * line-leading "›". Approval dialogs ask "Would you like to run the following
+ * command?" (or an apply-patch variant) with a numbered option list and a
+ * "Press enter to confirm or esc to cancel" footer; the dialog also renders a
+ * "›" option caret, so the turn watcher's blocking-prompt guard keeps that
+ * from reading as an idle composer. The OSC window title carries a
+ * braille-spinner glyph (U+2800–U+28FF) while a turn runs and the plain
+ * directory name when idle. The update-prompt rule takes its matcher as a
+ * parameter: production injects a per-session `CodexUpdatePromptTracker` (a split
+ * prompt stays blocking until a frame with no update evidence clears it), so the
+ * rules that ship are built here, once, rather than rewritten after the fact.
+ */
+function codexScreenFactRules(updatePromptVisible) {
+    return [
+        { id: "codex-composer-marker", fact: "composer_visible", all: [/^\s*›/m] },
+        { id: "codex-working-spinner", fact: "working_visible", all: [/esc to interrupt/i] },
+        {
+            id: "codex-working-title",
+            fact: "working_visible",
+            region: "title",
+            all: [/^[⠀-⣿]\s/],
+        },
+        {
+            id: "codex-interrupt-banner",
+            fact: "interrupt_complete_visible",
+            all: [/Conversation interrupted/],
+        },
+        {
+            id: "codex-approval-dialog",
+            fact: "blocking_prompt_visible",
+            all: [/Would you like to|Allow command\?/i, /Press enter to confirm or esc to cancel/i],
+        },
+        { id: "codex-update-prompt", fact: "blocking_prompt_visible", match: updatePromptVisible },
+    ];
+}
+/** The stateless table (single-frame update matcher) for frame-level fact tests. */
+export const codexScreenFactTable = {
+    agent: "codex",
+    verifiedAgainst,
+    rules: codexScreenFactRules(codexUpdatePromptVisible),
+};
+/**
+ * The table a session actually runs: a per-session update-prompt tracker plus the
+ * shared per-agent trust blocking rules (C-ATTN-03; PRD §5.1). An `always`-answered
+ * prompt (hook trust) is auto-handled and never blocks, so `blockingTrustSpecs`
+ * already excludes it even when autotrust is off.
+ */
+export function codexScreenFactTableForTrustPolicy(autotrust) {
+    const updatePrompt = new CodexUpdatePromptTracker();
+    const tracked = {
+        agent: "codex",
+        verifiedAgainst,
+        rules: codexScreenFactRules(updatePrompt.observe.bind(updatePrompt)),
+    };
+    return withTrustBlockingRules(tracked, "codex", autotrust);
+}
+//# sourceMappingURL=screen-table.js.map

package/dist/codex/screen-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screen-table.js","sourceRoot":"","sources":["../../src/codex/screen-table.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAExF,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAE5C;;;;;;;;;;;;;;GAcG;AACH,SAAS,oBAAoB,CAAC,mBAA+C;IAC3E,OAAO;QACL,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC1E,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE;QACpF;YACE,EAAE,EAAE,qBAAqB;YACzB,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,CAAC,UAAU,CAAC;SAClB;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,IAAI,EAAE,4BAA4B;YAClC,GAAG,EAAE,CAAC,0BAA0B,CAAC;SAClC;QACD;YACE,EAAE,EAAE,uBAAuB;YAC3B,IAAI,EAAE,yBAAyB;YAC/B,GAAG,EAAE,CAAC,oCAAoC,EAAE,0CAA0C,CAAC;SACxF;QACD,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,mBAAmB,EAAE;KAC3F,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAoB;IACnD,KAAK,EAAE,OAAO;IACd,eAAe;IACf,KAAK,EAAE,oBAAoB,CAAC,wBAAwB,CAAC;CACtD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAAC,SAAkB;IACnE,MAAM,YAAY,GAAG,IAAI,wBAAwB,EAAE,CAAC;IACpD,MAAM,OAAO,GAAoB;QAC/B,KAAK,EAAE,OAAO;QACd,eAAe;QACf,KAAK,EAAE,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;KACrE,CAAC;IACF,OAAO,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC"}

package/dist/codex/serialize.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Converts typed hook handler results to Codex hook process output.
+ * Implements PRD §7A.2.
+ */
+import type { BridgeProcessResult } from "../bridge/types.ts";
+import type { CodexHookEventName, CodexHookResult } from "./hooks.ts";
+export declare function serializeCodexHookResult(eventName: CodexHookEventName, result: CodexHookResult): BridgeProcessResult;
+//# sourceMappingURL=serialize.d.ts.map

package/dist/codex/serialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.d.ts","sourceRoot":"","sources":["../../src/codex/serialize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEtE,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,eAAe,GACtB,mBAAmB,CAOrB"}

package/dist/codex/serialize.js

@@ -0,0 +1,48 @@
+/**
+ * Converts typed hook handler results to Codex hook process output.
+ * Implements PRD §7A.2.
+ */
+export function serializeCodexHookResult(eventName, result) {
+    if (result === undefined)
+        return { exitCode: 0, stdout: "", stderr: "" };
+    if ("permissionDecision" in result)
+        return jsonOutput({ hookSpecificOutput: named(eventName, result) });
+    if ("behavior" in result)
+        return jsonOutput(permissionRequest(eventName, result));
+    if ("decision" in result)
+        return jsonOutput(block(eventName, result));
+    return jsonOutput(common(eventName, result));
+}
+function jsonOutput(value) {
+    return { exitCode: 0, stdout: `${JSON.stringify(value)}\n`, stderr: "" };
+}
+function named(eventName, result) {
+    return { hookEventName: eventName, ...result };
+}
+function permissionRequest(eventName, result) {
+    return { hookSpecificOutput: { hookEventName: eventName, decision: result } };
+}
+function block(eventName, result) {
+    return {
+        decision: result.decision,
+        reason: result.reason,
+        ...(result.additionalContext === undefined
+            ? {}
+            : {
+                hookSpecificOutput: {
+                    hookEventName: eventName,
+                    additionalContext: result.additionalContext,
+                },
+            }),
+    };
+}
+function common(eventName, result) {
+    const { additionalContext, ...commonFields } = result;
+    return {
+        ...commonFields,
+        ...(typeof additionalContext === "string"
+            ? { hookSpecificOutput: { hookEventName: eventName, additionalContext } }
+            : {}),
+    };
+}
+//# sourceMappingURL=serialize.js.map

package/dist/codex/serialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.js","sourceRoot":"","sources":["../../src/codex/serialize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,UAAU,wBAAwB,CACtC,SAA6B,EAC7B,MAAuB;IAEvB,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzE,IAAI,oBAAoB,IAAI,MAAM;QAChC,OAAO,UAAU,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,UAAU,IAAI,MAAM;QAAE,OAAO,UAAU,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,IAAI,UAAU,IAAI,MAAM;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,OAAO,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,KAAK,CAAC,SAAiB,EAAE,MAAyC;IACzE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CACxB,SAAiB,EACjB,MAA0E;IAE1E,OAAO,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,KAAK,CACZ,SAAiB,EACjB,MAIC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,kBAAkB,EAAE;oBAClB,aAAa,EAAE,SAAS;oBACxB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;iBAC5C;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,SAAiB,EAAE,MAAyC;IAC1E,MAAM,EAAE,iBAAiB,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;IACtD,OAAO;QACL,GAAG,YAAY;QACf,GAAG,CAAC,OAAO,iBAAiB,KAAK,QAAQ;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE;YACzE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/codex/session/bridge.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Codex session hook bridge factory seam.
+ * Implements PRD §7A and §13.
+ */
+import { HookBridgeServer } from "../../bridge/server.ts";
+export type CodexHookBridge = {
+    readonly start: () => Promise<void>;
+    readonly stop: () => Promise<void>;
+};
+export type CodexHookBridgeFactory = (socketPath: string, token: string, elwoodSessionId: string, dispatch: ConstructorParameters<typeof HookBridgeServer>[2], onError: ConstructorParameters<typeof HookBridgeServer>[3]) => CodexHookBridge;
+export declare function currentCodexHookBridgeFactory(): CodexHookBridgeFactory;
+export declare function setCodexHookBridgeFactoryForTests(next: CodexHookBridgeFactory): void;
+export declare function resetCodexSessionSeamsForTests(): void;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/codex/session/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/codex/session/bridge.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI1D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,CACnC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,qBAAqB,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAC3D,OAAO,EAAE,qBAAqB,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,KACvD,eAAe,CAAC;AAOrB,wBAAgB,6BAA6B,IAAI,sBAAsB,CAEtE;AAED,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,sBAAsB,GAAG,IAAI,CAEpF;AAED,wBAAgB,8BAA8B,IAAI,IAAI,CAGrD"}

package/dist/codex/session/bridge.js

@@ -0,0 +1,20 @@
+/**
+ * Codex session hook bridge factory seam.
+ * Implements PRD §7A and §13.
+ */
+import { HookBridgeServer } from "../../bridge/server.js";
+import { isCodexHookEvent } from "../hooks/validate.js";
+import { resetCodexPreflightCacheForTests } from "../preflight.js";
+const realFactory = (socketPath, token, id, dispatch, onError) => new HookBridgeServer(socketPath, token, dispatch, onError, isCodexHookEvent, id);
+let factory = realFactory;
+export function currentCodexHookBridgeFactory() {
+    return factory;
+}
+export function setCodexHookBridgeFactoryForTests(next) {
+    factory = next;
+}
+export function resetCodexSessionSeamsForTests() {
+    factory = realFactory;
+    resetCodexPreflightCacheForTests();
+}
+//# sourceMappingURL=bridge.js.map

package/dist/codex/session/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/codex/session/bridge.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AAenE,MAAM,WAAW,GAA2B,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CACvF,IAAI,gBAAgB,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;AAEnF,IAAI,OAAO,GAAG,WAAW,CAAC;AAE1B,MAAM,UAAU,6BAA6B;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,IAA4B;IAC5E,OAAO,GAAG,IAAI,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,OAAO,GAAG,WAAW,CAAC;IACtB,gCAAgC,EAAE,CAAC;AACrC,CAAC"}

package/dist/codex/session/build.d.ts

@@ -0,0 +1,15 @@
+import type { SessionRuntime } from "../../state/runtime-paths.ts";
+import { type SessionRecord } from "../../state/store.ts";
+import type { CodexPreflightWarning } from "../preflight.ts";
+import { CodexSessionImpl } from "./instance.ts";
+import type { StartCodexOptions } from "./types.ts";
+export type BuildCodexSessionInput = {
+    readonly record: SessionRecord;
+    readonly stateDir: string;
+    readonly runtime: SessionRuntime;
+    readonly options: StartCodexOptions;
+    readonly resumed: boolean;
+    readonly preflightWarning: CodexPreflightWarning | undefined;
+};
+export declare function buildCodexSession(input: BuildCodexSessionInput): Promise<CodexSessionImpl>;
+//# sourceMappingURL=build.d.ts.map

package/dist/codex/session/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/codex/session/build.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAE9E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAM7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,GAAG,SAAS,CAAC;CAC9D,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmJhG"}

package/dist/codex/session/build.js

@@ -0,0 +1,144 @@
+/** Builds a live CodexSessionApi from a record + runtime. Implements PRD §5.5, §5.6, §5.7, §7A, §8, §9. */
+import * as activity from "../../core/activity/index.js";
+import { AttentionWatcher } from "../../core/attention.js";
+import { defaultTerminalSize } from "../../core/defaults.js";
+import { causeDetails, elwoodError } from "../../core/errors.js";
+import { observeRenderedFrame } from "../../core/rendered-observers.js";
+import { createStartupWarningGate, deliverFrameWarnings } from "../../core/startup/frame.js";
+import { emitSettledStartupOutcomes } from "../../core/startup/write.js";
+import { TerminalReplayBuffer } from "../../core/terminal-replay.js";
+import { TurnStateWatcher } from "../../core/turn-state.js";
+import { TypedEmitter } from "../../events/emitter.js";
+import { loadRuntimeLoopDefinitions as loadLoops } from "../../runtime/loop-restore.js";
+import { finishSessionExit } from "../../runtime/session/exit.js";
+import { createReadinessGate } from "../../runtime/session/readiness.js";
+import { assertStartupThenRelease, createStartupBuffer } from "../../runtime/startup/buffer.js";
+import { cleanupStartupResources, guardStartupRegion } from "../../runtime/startup/cleanup.js";
+import { secureMkdir } from "../../state/files.js";
+import { writeSessionRecord } from "../../state/store.js";
+import { attachPtyTerminal } from "../../terminal/headless.js";
+import { spawnCodexPty } from "../pty.js";
+import { codexScreenFactTableForTrustPolicy } from "../screen-table.js";
+import { CodexStartupPromptResponder } from "../startup-prompts.js";
+import { currentCodexHookBridgeFactory } from "./bridge.js";
+import { dispatchHook, registerInitialHooks } from "./hooks.js";
+import { CodexSessionImpl } from "./instance.js";
+import { writeCodexRuntimeFiles } from "./runtime.js";
+import * as sessionTranscript from "./transcript.js";
+export async function buildCodexSession(input) {
+    const { record, stateDir, runtime, options, resumed, preflightWarning } = input;
+    secureMkdir(runtime.sessionDir);
+    writeSessionRecord(record, runtime.sessionDir);
+    const loopDefinitions = resumed ? loadLoops(stateDir, record.elwoodSessionId) : [];
+    writeCodexRuntimeFiles(runtime);
+    const emitter = new TypedEmitter();
+    registerInitialHooks(emitter, options.hooks);
+    let session;
+    // ALL startup-region warnings — MCP/prompt-write (frame path) AND transcript
+    // drop/read-error diagnostics — route through ONE gate that buffers anything emitted
+    // before startCodex resolves and flushes it on a deferred macrotask after return, so
+    // every source stays observable without late-subscriber replay (C-API-14).
+    const warnGate = createStartupWarningGate({
+        emitWarnings: (w) => deliverFrameWarnings(session, w),
+    });
+    const wired = sessionTranscript.createCodexTranscriptWatcher(record.elwoodSessionId, emitter, () => warnGate);
+    const { watcher: transcriptWatcher, flushPendingWarnings, finishSafely } = wired;
+    const bridge = currentCodexHookBridgeFactory()(runtime.socketPath, runtime.bridgeToken, record.elwoodSessionId, async (hook) => dispatchHook(hook, emitter, options, record, session), (event) => {
+        const hookError = { elwoodSessionId: record.elwoodSessionId, ...event };
+        emitter.emit("hookError", hookError);
+        emitter.emit("activity", activity.activityFromHookError("codex", hookError));
+    });
+    try {
+        await bridge.start();
+    }
+    catch (error) {
+        // Best-effort shut down a partially-started bridge so its listener/socket is not
+        // leaked; contained so the original bridge-start error is the one that rejects.
+        await bridge.stop().catch(() => undefined);
+        throw elwoodError("hook_bridge_failed", "Could not start Elwood hook bridge.", {
+            ...causeDetails(error),
+            socketPath: runtime.socketPath,
+        });
+    }
+    const pty = await spawnCodexPty(record, runtime.bridgeScriptPath, options).catch(async (error) => {
+        await cleanupStartupResources({ bridge });
+        throw error;
+    });
+    const startupOutput = createStartupBuffer();
+    let startupExit;
+    const terminalReplay = new TerminalReplayBuffer(record.elwoodSessionId);
+    terminalReplay.captureStartupAttention(emitter);
+    const { ready, observeReadinessFrame } = createReadinessGate(() => {
+        turnWatcher.arm(resumed); // resume arms in settling mode (no phantom replay turn)
+        session?.completeInitialReady(); // shared anti-starvation ready boundary (C-API-42)
+    }, resumed);
+    const autotrust = options.autotrust ?? false;
+    const observers = {
+        turn: new TurnStateWatcher(),
+        attention: new AttentionWatcher(),
+        table: codexScreenFactTableForTrustPolicy(autotrust),
+        agent: "codex",
+        elwoodSessionId: record.elwoodSessionId,
+        emitActivity: (event) => emitter.emit("activity", event),
+    };
+    const turnWatcher = observers.turn;
+    const promptResponder = new CodexStartupPromptResponder(record.elwoodSessionId, autotrust);
+    const terminal = attachPtyTerminal(options.initialSize ?? defaultTerminalSize, pty, (data, renderedTerminal) => {
+        startupOutput.push(data);
+        terminalReplay.push(data);
+        // One snapshot per render: reused for prompt automation, readiness, detection.
+        const frame = { text: renderedTerminal.snapshot().text, title: renderedTerminal.title };
+        // The write RETURNS its completion: the responder settles only after it fulfills;
+        // a rejected write retries + warns (C-CODEX-17). Warning delivery is CONTAINED on
+        // the frame path so a throwing listener never skips readiness or terminal:data.
+        const result = promptResponder.handle(frame.text, (i) => renderedTerminal.sendInput(i), () => renderedTerminal.snapshot().text);
+        warnGate.emitWarnings(result.warnings);
+        emitSettledStartupOutcomes(emitter, "codex", record.elwoodSessionId, result.outcomes, {
+            emitWarnings: (w) => warnGate.emitWarnings(w),
+        });
+        ready.armDeadline(); // hook/deadline readiness; resume composer also marks (C-API-28)
+        const reading = observeRenderedFrame(observers, frame, session);
+        observeReadinessFrame(reading.facts); // blocking gate + resume-composer mark
+        emitter.emit("terminal:data", { elwoodSessionId: record.elwoodSessionId, data });
+    });
+    session = new CodexSessionImpl(record, stateDir, runtime, pty, terminal, bridge, emitter, terminalReplay, transcriptWatcher, loopDefinitions);
+    const id = record.elwoodSessionId;
+    const activeSession = session;
+    const beforeCleanup = () => activeSession.pauseLoopsForStartupCleanup(ready.cancel);
+    // ONE guarded region for every live-resource step after the session exists (readiness
+    // wiring/replay, exit registration, startup assertion/evidence): a failure in ANY tears
+    // down the now-live PTY/bridge/terminal/watchers before rethrowing (§9.1/§9.4). Mirrors Claude.
+    await guardStartupRegion(async () => {
+        activeSession.startLoops();
+        flushPendingWarnings(); // inside the guard: a throwing sink tears down, not leaks (§5.4/§9.4)
+        // The `SessionStart` hook releases the first queued message (C-API-28).
+        activeSession.setInitialReadyHook(() => ready.mark());
+        ready.replay();
+        // C-LIFE-10: the FINAL flush runs behind finishSafely's boundary, so a throwing
+        // final-flush listener can't skip terminal:exit; submitExit always reaps last.
+        pty.onExit((exit) => {
+            startupExit = exit;
+            ready.cancel();
+            const emitExit = () => {
+                emitter.emit("terminal:exit", { elwoodSessionId: id, ...exit });
+                emitter.emit("activity", activity.activityFromTerminalExit("codex", id, exit.exitCode));
+            };
+            finishSessionExit(() => finishSafely(emitExit), () => activeSession.submitExit());
+        });
+        // Release the startup buffer once the check settles (no lingering transcript, §9.4).
+        await assertStartupThenRelease("codex", startupOutput, () => startupExit);
+        activeSession.submitEvidence("startup_usable");
+    }, { before: beforeCleanup, pty, bridge, terminal, after: () => transcriptWatcher.stop() });
+    // Buffer the preflight/version warning through the same gate, then open it: buffered
+    // startup warnings (MCP/transcript) AND the preflight all flush on one deferred
+    // macrotask after return, so a caller subscribing synchronously observes them all.
+    if (preflightWarning !== undefined)
+        warnGate.emitWarnings([preflightEvent(id, preflightWarning)]);
+    warnGate.openAfterReturn();
+    terminalReplay.releaseStartupAttentionAfterReturn();
+    return session;
+}
+function preflightEvent(elwoodSessionId, warning) {
+    return { elwoodSessionId, ...warning };
+}
+//# sourceMappingURL=build.js.map

package/dist/codex/session/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../src/codex/session/build.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,OAAO,KAAK,QAAQ,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,0BAA0B,IAAI,SAAS,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAsB,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,kCAAkC,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,iBAAiB,MAAM,iBAAiB,CAAC;AAYrD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA6B;IACnE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;IAChF,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,YAAY,EAAiB,CAAC;IAClD,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,OAAqC,CAAC;IAC1C,6EAA6E;IAC7E,qFAAqF;IACrF,qFAAqF;IACrF,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC;KACtD,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,iBAAiB,CAAC,4BAA4B,CAC1D,MAAM,CAAC,eAAe,EACtB,OAAO,EACP,GAAG,EAAE,CAAC,QAAQ,CACf,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACjF,MAAM,MAAM,GAAG,6BAA6B,EAAE,CAC5C,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,WAAW,EACnB,MAAM,CAAC,eAAe,EACtB,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EACrE,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,SAAS,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,GAAG,KAAK,EAAE,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/E,CAAC,CACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iFAAiF;QACjF,gFAAgF;QAChF,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,WAAW,CAAC,oBAAoB,EAAE,qCAAqC,EAAE;YAC7E,GAAG,YAAY,CAAC,KAAK,CAAC;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAe,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,KAAK,CAC1F,KAAK,EAAE,KAAc,EAAE,EAAE;QACvB,MAAM,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;IAC5C,IAAI,WAAgC,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACxE,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,GAAG,mBAAmB,CAAC,GAAG,EAAE;QAChE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wDAAwD;QAClF,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC,mDAAmD;IACtF,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,IAAI,gBAAgB,EAAE;QAC5B,SAAS,EAAE,IAAI,gBAAgB,EAAE;QACjC,KAAK,EAAE,kCAAkC,CAAC,SAAS,CAAC;QACpD,KAAK,EAAE,OAAgB;QACvB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,YAAY,EAAE,CAAC,KAAmC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC;KACvF,CAAC;IACF,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC;IACnC,MAAM,eAAe,GAAG,IAAI,2BAA2B,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,iBAAiB,CAChC,OAAO,CAAC,WAAW,IAAI,mBAAmB,EAC1C,GAAG,EACH,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE;QACzB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,+EAA+E;QAC/E,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACxF,kFAAkF;QAClF,kFAAkF;QAClF,gFAAgF;QAChF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CACnC,KAAK,CAAC,IAAI,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EACpC,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,IAAI,CACvC,CAAC;QACF,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE;YACpF,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;SAC9C,CAAC,CAAC;QACH,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,iEAAiE;QACtF,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAChE,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,uCAAuC;QAC7E,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC,CACF,CAAC;IACF,OAAO,GAAG,IAAI,gBAAgB,CAC5B,MAAM,EACN,QAAQ,EACR,OAAO,EACP,GAAG,EACH,QAAQ,EACR,MAAM,EACN,OAAO,EACP,cAAc,EACd,iBAAiB,EACjB,eAAe,CAChB,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC;IAClC,MAAM,aAAa,GAAG,OAAO,CAAC;IAC9B,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpF,sFAAsF;IACtF,wFAAwF;IACxF,gGAAgG;IAChG,MAAM,kBAAkB,CACtB,KAAK,IAAI,EAAE;QACT,aAAa,CAAC,UAAU,EAAE,CAAC;QAC3B,oBAAoB,EAAE,CAAC,CAAC,sEAAsE;QAC9F,wEAAwE;QACxE,aAAa,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,gFAAgF;QAChF,+EAA+E;QAC/E,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAClB,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,GAAG,EAAE;gBACpB,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;gBAChE,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,wBAAwB,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1F,CAAC,CAAC;YACF,iBAAiB,CACf,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAC5B,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,CACjC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,qFAAqF;QACrF,MAAM,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QAC1E,aAAa,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC,EACD,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CACxF,CAAC;IACF,qFAAqF;IACrF,gFAAgF;IAChF,mFAAmF;IACnF,IAAI,gBAAgB,KAAK,SAAS;QAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAClG,QAAQ,CAAC,eAAe,EAAE,CAAC;IAC3B,cAAc,CAAC,kCAAkC,EAAE,CAAC;IACpD,OAAO,OAAO,CAAC;AACjB,CAAC;AAMD,SAAS,cAAc,CACrB,eAAuB,EACvB,OAA8B;IAE9B,OAAO,EAAE,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;AACzC,CAAC"}

package/dist/codex/session/cleanup.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Codex session runtime cleanup helpers.
+ * Implements PRD §9.3.
+ */
+import type { ElwoodTerminal } from "../../terminal/headless.ts";
+import type { CodexTranscriptWatcher } from "../transcript/index.ts";
+type CodexRuntimeBridge = {
+    readonly stop: () => Promise<void>;
+};
+export declare function stopCodexRuntime(bridge: CodexRuntimeBridge, transcriptWatcher: CodexTranscriptWatcher | undefined, terminal: ElwoodTerminal): Promise<void>;
+export {};
+//# sourceMappingURL=cleanup.d.ts.map