@with-logic/elwood 0.1.0

package/dist/core/hook-result.js

@@ -0,0 +1,40 @@
+/**
+ * Hook result display labels for adapter-neutral activity.
+ * Implements PRD §5.4.
+ */
+export function hookResultLabel(result, failedOpen) {
+    if (failedOpen)
+        return "error";
+    if (result === undefined)
+        return "no decision";
+    if (!result || typeof result !== "object")
+        return "response";
+    const record = result;
+    if (typeof record["permissionDecision"] === "string")
+        return record["permissionDecision"];
+    if (typeof record["behavior"] === "string")
+        return record["behavior"];
+    if (typeof record["decision"] === "string")
+        return record["decision"];
+    if (typeof record["additionalContext"] === "string")
+        return "context";
+    if (typeof record["action"] === "string")
+        return record["action"];
+    if (record["retry"] === true)
+        return "retry";
+    if (typeof record["worktreePath"] === "string")
+        return "worktree";
+    return "response";
+}
+export function transcriptActivityKind(kind) {
+    if (kind === "message")
+        return "assistant_message";
+    if (kind === "tool_call" ||
+        kind === "tool_result" ||
+        kind === "reasoning" ||
+        kind === "web_search") {
+        return kind;
+    }
+    return "other";
+}
+//# sourceMappingURL=hook-result.js.map

package/dist/core/hook-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-result.js","sourceRoot":"","sources":["../../src/core/hook-result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAmB;IAClE,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IAAI,OAAO,MAAM,CAAC,oBAAoB,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1F,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,OAAO,MAAM,CAAC,mBAAmB,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAC7C,IAAI,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAClE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,mBAAmB,CAAC;IACnD,IACE,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,aAAa;QACtB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,YAAY,EACrB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/hook-timeout.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Timeout race for hook dispatch that structurally distinguishes a genuine
+ * timeout from a handler that throws or rejects.
+ * Implements PRD §6.3 (timeout category and timeoutMs telemetry).
+ */
+/**
+ * Result of racing a hook handler against its timeout. A genuine timeout is a
+ * distinct variant so it can never be confused with a handler that itself throws
+ * `new Error("timeout")`: that handler still rejects `raceHookTimeout`, taking
+ * the caller's error path and the `handler_error` category. `timeoutMs` is only
+ * meaningful — and only attached by callers — on the `timedOut: true` branch.
+ */
+export type HookTimeoutResult<T> = {
+    readonly timedOut: false;
+    readonly value: T;
+} | {
+    readonly timedOut: true;
+};
+/**
+ * Resolves with the handler value if it settles before `timeoutMs`, or with a
+ * tagged timeout result if the timer wins. Rejects only when the handler itself
+ * rejects, so a handler error is never misreported as a timeout.
+ */
+export declare function raceHookTimeout<T>(promise: Promise<T>, timeoutMs: number): Promise<HookTimeoutResult<T>>;
+//# sourceMappingURL=hook-timeout.d.ts.map

package/dist/core/hook-timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-timeout.d.ts","sourceRoot":"","sources":["../../src/core/hook-timeout.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAEhC;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAa/B"}

package/dist/core/hook-timeout.js

@@ -0,0 +1,26 @@
+/**
+ * Timeout race for hook dispatch that structurally distinguishes a genuine
+ * timeout from a handler that throws or rejects.
+ * Implements PRD §6.3 (timeout category and timeoutMs telemetry).
+ */
+/**
+ * Resolves with the handler value if it settles before `timeoutMs`, or with a
+ * tagged timeout result if the timer wins. Rejects only when the handler itself
+ * rejects, so a handler error is never misreported as a timeout.
+ */
+export async function raceHookTimeout(promise, timeoutMs) {
+    let timeout;
+    const timeoutPromise = new Promise((resolve) => {
+        timeout = setTimeout(() => resolve({ timedOut: true }), timeoutMs);
+    });
+    try {
+        return await Promise.race([
+            promise.then((value) => ({ timedOut: false, value })),
+            timeoutPromise,
+        ]);
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+//# sourceMappingURL=hook-timeout.js.map

package/dist/core/hook-timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-timeout.js","sourceRoot":"","sources":["../../src/core/hook-timeout.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAmB,EACnB,SAAiB;IAEjB,IAAI,OAAkD,CAAC;IACvD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,EAAE;QACnE,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,cAAc;SACf,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/core/images/chip-wait.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Shared `[Image #N]` chip confirmation used by both adapter attach paths. An
+ * attach is CONFIRMED only when the composer's image-chip count increases; an
+ * unconfirmed image (timeout), or an abort (session closing), REJECTS with
+ * `image_attach_failed` so no text is ever submitted for an unconfirmed image.
+ * Implements PRD §5.3 (C-API-44/45/46).
+ */
+/** The terminal surface an attach needs: send bytes and read the rendered screen. */
+export type AttachTerminal = {
+    sendInput(data: string): void | Promise<void>;
+    snapshot(): {
+        readonly text: string;
+    };
+};
+/** True while a blocking human-decision dialog is on screen (C-API-37 safety). */
+export type BlockedGuard = () => boolean;
+/**
+ * Best-effort discard of any staged composer content (image chips, pasted paths)
+ * after a mid-attach failure, so the rejected submission's images cannot leak
+ * into a later caller's turn. Never throws (C-API-44).
+ */
+export declare function clearComposer(terminal: AttachTerminal): Promise<void>;
+/**
+ * Sends `data` to the terminal only once no blocking dialog is on screen — a
+ * paste path or Ctrl+V must never reach a permission/trust dialog and alter a
+ * human decision. Rejects with `image_attach_failed` if the signal aborts while
+ * held (the session closed) (C-API-37/44).
+ */
+export declare function sendWhenUnblocked(terminal: AttachTerminal, data: string, blocked: BlockedGuard | undefined, signal: AbortSignal): Promise<void>;
+export type ChipWaitOptions = {
+    readonly settleMs: number;
+    readonly timeoutMs: number;
+    readonly pollMs: number;
+};
+/** Counts `[Image #N]` chips on the composer prompt line(s) only. */
+export declare function imageChipCount(text: string): number;
+/**
+ * Resolves once the chip count rises above `before`; rejects with
+ * `image_attach_failed` on the confirmation timeout or an aborted signal, so an
+ * unconfirmed attach never silently degrades to a text-only turn.
+ */
+export declare function waitForImageChip(terminal: AttachTerminal, before: number, signal: AbortSignal, options: ChipWaitOptions): Promise<void>;
+//# sourceMappingURL=chip-wait.d.ts.map

package/dist/core/images/chip-wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chip-wait.d.ts","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,qFAAqF;AACrF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC;AAOzC;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3E;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CASf;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AASF,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/core/images/chip-wait.js

@@ -0,0 +1,80 @@
+/**
+ * Shared `[Image #N]` chip confirmation used by both adapter attach paths. An
+ * attach is CONFIRMED only when the composer's image-chip count increases; an
+ * unconfirmed image (timeout), or an abort (session closing), REJECTS with
+ * `image_attach_failed` so no text is ever submitted for an unconfirmed image.
+ * Implements PRD §5.3 (C-API-44/45/46).
+ */
+import { elwoodError } from "../errors.js";
+const blockedPollMs = 50;
+// Ctrl+U (kill to line start) + Ctrl+K (kill to line end) discard the composer
+// draft on both TUIs, clearing any staged image chips/paths.
+const clearComposerKeys = "\u0015\u000b";
+/**
+ * Best-effort discard of any staged composer content (image chips, pasted paths)
+ * after a mid-attach failure, so the rejected submission's images cannot leak
+ * into a later caller's turn. Never throws (C-API-44).
+ */
+export async function clearComposer(terminal) {
+    try {
+        await terminal.sendInput(clearComposerKeys);
+    }
+    catch {
+        // Best-effort: a clear failure must not replace the primary attach error.
+    }
+}
+/**
+ * Sends `data` to the terminal only once no blocking dialog is on screen — a
+ * paste path or Ctrl+V must never reach a permission/trust dialog and alter a
+ * human decision. Rejects with `image_attach_failed` if the signal aborts while
+ * held (the session closed) (C-API-37/44).
+ */
+export async function sendWhenUnblocked(terminal, data, blocked, signal) {
+    while (blocked?.()) {
+        if (signal.aborted)
+            throw elwoodError("image_attach_failed", "Image attach aborted.");
+        await delay(blockedPollMs);
+    }
+    // Re-check AFTER the loop: an abort that lands as the dialog clears in the same
+    // poll must not let a paste/Ctrl+V reach the PTY on a closing session.
+    if (signal.aborted)
+        throw elwoodError("image_attach_failed", "Image attach aborted.");
+    await terminal.sendInput(data);
+}
+// Both CLIs render the image chip on the composer PROMPT line (Codex `›`, Claude
+// `❯`), e.g. `› [Image #1]`. Counting chips only on lines bearing a prompt marker
+// means assistant/tool/transcript output elsewhere that happens to contain a
+// literal `[Image #N]` cannot spoof a confirmation (C-API-44/45/46).
+const promptLine = /^[^\S\r\n]*[›❯]/;
+const chip = /\[Image #\d+\]/g;
+/** Counts `[Image #N]` chips on the composer prompt line(s) only. */
+export function imageChipCount(text) {
+    return text
+        .split("\n")
+        .filter((line) => promptLine.test(line))
+        .reduce((sum, line) => sum + (line.match(chip)?.length ?? 0), 0);
+}
+/**
+ * Resolves once the chip count rises above `before`; rejects with
+ * `image_attach_failed` on the confirmation timeout or an aborted signal, so an
+ * unconfirmed attach never silently degrades to a text-only turn.
+ */
+export async function waitForImageChip(terminal, before, signal, options) {
+    await delay(options.settleMs);
+    const attempts = Math.max(1, Math.ceil(options.timeoutMs / options.pollMs));
+    for (let i = 0; i < attempts; i++) {
+        if (signal.aborted)
+            throw elwoodError("image_attach_failed", "Image attach aborted.");
+        if (imageChipCount(terminal.snapshot().text) > before)
+            return;
+        await delay(options.pollMs);
+    }
+    throw elwoodError("image_attach_failed", "Image attach was not confirmed before the timeout.");
+}
+function delay(ms) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(resolve, ms);
+        timer.unref?.();
+    });
+}
+//# sourceMappingURL=chip-wait.js.map

package/dist/core/images/chip-wait.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chip-wait.js","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAW3C,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,+EAA+E;AAC/E,6DAA6D;AAC7D,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAwB;IAC1D,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAwB,EACxB,IAAY,EACZ,OAAiC,EACjC,MAAmB;IAEnB,OAAO,OAAO,EAAE,EAAE,EAAE,CAAC;QACnB,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACtF,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IACD,gFAAgF;IAChF,uEAAuE;IACvE,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACtF,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAQD,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,qEAAqE;AACrE,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,IAAI,GAAG,iBAAiB,CAAC;AAE/B,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAwB,EACxB,MAAc,EACd,MAAmB,EACnB,OAAwB;IAExB,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACtF,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM;YAAE,OAAO;QAC9D,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,WAAW,CAAC,qBAAqB,EAAE,oDAAoD,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/images/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Barrel for shared, adapter-neutral image-attachment support (PRD §5.3,
+ * C-API-44/45/46). Codex/macOS clipboard mechanics live under `src/codex/`.
+ */
+export { type AttachTerminal, type ChipWaitOptions, imageChipCount, waitForImageChip, } from "./chip-wait.ts";
+export { type MaterializedImages, materializeImages } from "./materialize.ts";
+export { type ImageSnapshot, snapshotImages, validateImagePaths, validateImages, } from "./resolve.ts";
+export type { ImageFormat, ImageInput, SendOptions } from "./types.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/images/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/images/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,cAAc,EACd,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,KAAK,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,KAAK,aAAa,EAClB,cAAc,EACd,kBAAkB,EAClB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/core/images/index.js

@@ -0,0 +1,8 @@
+/**
+ * Barrel for shared, adapter-neutral image-attachment support (PRD §5.3,
+ * C-API-44/45/46). Codex/macOS clipboard mechanics live under `src/codex/`.
+ */
+export { imageChipCount, waitForImageChip, } from "./chip-wait.js";
+export { materializeImages } from "./materialize.js";
+export { snapshotImages, validateImagePaths, validateImages, } from "./resolve.js";
+//# sourceMappingURL=index.js.map

package/dist/core/images/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/images/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAGL,cAAc,EACd,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAA2B,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAEL,cAAc,EACd,kBAAkB,EAClB,cAAc,GACf,MAAM,cAAc,CAAC"}

package/dist/core/images/materialize.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Materializes a validated/snapshotted image set to readable absolute file paths.
+ * Byte inputs are written to a short-lived temp dir; path inputs pass through
+ * (already absolutized at snapshot). A materialize failure removes the temp dir and
+ * rethrows as the stable typed `image_attach_failed`, never a raw platform error
+ * out of the public send APIs. Implements PRD §5.3 (C-ERR-01/C-API-44).
+ */
+import { type ImageInput } from "./types.ts";
+/** A materialized set of image paths plus the cleanup for any temp files created. */
+export type MaterializedImages = {
+    readonly paths: readonly string[];
+    /** Best-effort removal of temp files; retryable (only clears on success). */
+    readonly cleanup: () => Promise<void>;
+};
+/**
+ * Materializes byte inputs (already validated/snapshotted) to one temp dir and
+ * returns every absolute path. A materialize failure (e.g. ENOSPC) removes the
+ * temp dir, then rethrows as the stable typed `image_attach_failed` — never a raw
+ * platform error out of the public send APIs (C-ERR-01/C-API-44).
+ */
+export declare function materializeImages(images: readonly ImageInput[]): Promise<MaterializedImages>;
+//# sourceMappingURL=materialize.d.ts.map

package/dist/core/images/materialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialize.d.ts","sourceRoot":"","sources":["../../../src/core/images/materialize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,EAAE,KAAK,UAAU,EAAwB,MAAM,YAAY,CAAC;AAEnE,qFAAqF;AACrF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,UAAU,EAAE,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CA0B7B"}

package/dist/core/images/materialize.js

@@ -0,0 +1,49 @@
+/**
+ * Materializes a validated/snapshotted image set to readable absolute file paths.
+ * Byte inputs are written to a short-lived temp dir; path inputs pass through
+ * (already absolutized at snapshot). A materialize failure removes the temp dir and
+ * rethrows as the stable typed `image_attach_failed`, never a raw platform error
+ * out of the public send APIs. Implements PRD §5.3 (C-ERR-01/C-API-44).
+ */
+import { randomUUID } from "node:crypto";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { elwoodError } from "../errors.js";
+import { imageFormatExtension } from "./types.js";
+/**
+ * Materializes byte inputs (already validated/snapshotted) to one temp dir and
+ * returns every absolute path. A materialize failure (e.g. ENOSPC) removes the
+ * temp dir, then rethrows as the stable typed `image_attach_failed` — never a raw
+ * platform error out of the public send APIs (C-ERR-01/C-API-44).
+ */
+export async function materializeImages(images) {
+    let dir;
+    const cleanup = async () => {
+        if (!dir)
+            return;
+        await rm(dir, { recursive: true, force: true });
+        dir = undefined; // cleared only on success → a transient failure stays retryable
+    };
+    try {
+        const paths = [];
+        for (const image of images) {
+            if (image.path !== undefined) {
+                paths.push(image.path);
+                continue;
+            }
+            dir ??= await mkdtemp(join(tmpdir(), "elwood-image-"));
+            const file = join(dir, `${randomUUID()}.${imageFormatExtension[image.format]}`);
+            await writeFile(file, image.data);
+            paths.push(file);
+        }
+        return { paths, cleanup };
+    }
+    catch (error) {
+        await cleanup().catch(() => undefined);
+        throw elwoodError("image_attach_failed", "Could not materialize an image for attachment.", {
+            cause: error instanceof Error ? error.message : String(error),
+        });
+    }
+}
+//# sourceMappingURL=materialize.js.map

package/dist/core/images/materialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialize.js","sourceRoot":"","sources":["../../../src/core/images/materialize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAmB,oBAAoB,EAAE,MAAM,YAAY,CAAC;AASnE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA6B;IAE7B,IAAI,GAAuB,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,GAAG,GAAG,SAAS,CAAC,CAAC,gEAAgE;IACnF,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,GAAG,KAAK,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,IAAI,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChF,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,WAAW,CAAC,qBAAqB,EAAE,gDAAgD,EAAE;YACzF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/core/images/resolve.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Validates + snapshots ImageInput values into a canonical copied form.
+ * Snapshotting is SYNCHRONOUS (narrows from `unknown`, enforces count/format/
+ * byte-size limits, CLONES byte buffers, absolutizes paths) so a caller who calls
+ * a send API and then mutates its buffer cannot change what is attached — the clone
+ * happens at the call, not later at queue dispatch. The async pass (filesystem
+ * readability + path sizes) is deferred to queue-front. Materialization to temp
+ * files lives in `materialize.ts`. Implements PRD §5.3 (C-API-44).
+ */
+import { type ImageInput } from "./types.ts";
+/**
+ * A synchronous snapshot: the canonical copied inputs plus the running byte total
+ * already accounted from BYTE inputs (path sizes are added later, async).
+ */
+export type ImageSnapshot = {
+    readonly images: readonly ImageInput[];
+    /** Bytes already counted toward the aggregate ceiling from byte inputs. */
+    readonly inlineByteTotal: number;
+};
+/**
+ * SYNCHRONOUSLY validates, bounds, and defensively COPIES every input without any
+ * filesystem access. Narrows each entry from `unknown` so a malformed JS input
+ * rejects with `invalid_image` (never a raw TypeError); clones byte buffers and
+ * absolutizes paths so a later mutation/`cwd` change cannot alter what is attached
+ * (C-API-44). Because this runs at the public send boundary (before the op is
+ * queued), the byte clone captures the caller's buffer AT THE CALL — a mutation
+ * after the call is inert. The returned snapshot is handed to `validateImagePaths`.
+ */
+export declare function snapshotImages(images: readonly ImageInput[]): ImageSnapshot;
+/**
+ * Async completion of validation: for every PATH entry, stat/readability/size are
+ * checked against the SAME aggregate ceiling the byte inputs already consumed. Byte
+ * entries need no filesystem work, so this is a no-op for a byte-only snapshot.
+ * Runs at queue dispatch (a stat is I/O); byte cloning already happened in
+ * `snapshotImages` at the call, so nothing here depends on caller-held state.
+ */
+export declare function validateImagePaths(snap: ImageSnapshot): Promise<readonly ImageInput[]>;
+/**
+ * Snapshots synchronously (validate/bound/copy, paths already absolutized here),
+ * then validates paths asynchronously (readability, file type, size) — the whole
+ * pipeline. A synchronous snapshot failure surfaces as a rejected promise (not a
+ * sync throw) so every failure mode reaches callers through one `Promise` channel.
+ */
+export declare function validateImages(images: readonly ImageInput[]): Promise<readonly ImageInput[]>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/core/images/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/core/images/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EAAoB,KAAK,UAAU,EAAqC,MAAM,YAAY,CAAC;AAElG;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,2EAA2E;IAC3E,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,aAAa,CAe3E;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAO5F;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAQ5F"}

package/dist/core/images/resolve.js

@@ -0,0 +1,137 @@
+/**
+ * Validates + snapshots ImageInput values into a canonical copied form.
+ * Snapshotting is SYNCHRONOUS (narrows from `unknown`, enforces count/format/
+ * byte-size limits, CLONES byte buffers, absolutizes paths) so a caller who calls
+ * a send API and then mutates its buffer cannot change what is attached — the clone
+ * happens at the call, not later at queue dispatch. The async pass (filesystem
+ * readability + path sizes) is deferred to queue-front. Materialization to temp
+ * files lives in `materialize.ts`. Implements PRD §5.3 (C-API-44).
+ */
+import { constants } from "node:fs";
+import { access, stat } from "node:fs/promises";
+import { resolve } from "node:path";
+import { ElwoodError, elwoodError } from "../errors.js";
+import { imageFormatExtension, imageLimits } from "./types.js";
+/**
+ * SYNCHRONOUSLY validates, bounds, and defensively COPIES every input without any
+ * filesystem access. Narrows each entry from `unknown` so a malformed JS input
+ * rejects with `invalid_image` (never a raw TypeError); clones byte buffers and
+ * absolutizes paths so a later mutation/`cwd` change cannot alter what is attached
+ * (C-API-44). Because this runs at the public send boundary (before the op is
+ * queued), the byte clone captures the caller's buffer AT THE CALL — a mutation
+ * after the call is inert. The returned snapshot is handed to `validateImagePaths`.
+ */
+export function snapshotImages(images) {
+    if (!Array.isArray(images))
+        throw elwoodError("invalid_image", "images must be an array.");
+    if (images.length > imageLimits.maxCount)
+        throw elwoodError("invalid_image", `Too many images: ${images.length} > ${imageLimits.maxCount}`);
+    const copied = [];
+    let inlineByteTotal = 0;
+    for (const entry of images) {
+        const [image, bytes] = snapshotOne(entry, inlineByteTotal);
+        copied.push(image);
+        inlineByteTotal += bytes;
+    }
+    return { images: copied, inlineByteTotal };
+}
+/**
+ * Async completion of validation: for every PATH entry, stat/readability/size are
+ * checked against the SAME aggregate ceiling the byte inputs already consumed. Byte
+ * entries need no filesystem work, so this is a no-op for a byte-only snapshot.
+ * Runs at queue dispatch (a stat is I/O); byte cloning already happened in
+ * `snapshotImages` at the call, so nothing here depends on caller-held state.
+ */
+export async function validateImagePaths(snap) {
+    let total = snap.inlineByteTotal;
+    for (const image of snap.images) {
+        if (image.path === undefined)
+            continue;
+        total += await validatePath(image.path, total);
+    }
+    return snap.images;
+}
+/**
+ * Snapshots synchronously (validate/bound/copy, paths already absolutized here),
+ * then validates paths asynchronously (readability, file type, size) — the whole
+ * pipeline. A synchronous snapshot failure surfaces as a rejected promise (not a
+ * sync throw) so every failure mode reaches callers through one `Promise` channel.
+ */
+export function validateImages(images) {
+    let snap;
+    try {
+        snap = snapshotImages(images);
+    }
+    catch (error) {
+        return Promise.reject(error);
+    }
+    return validateImagePaths(snap);
+}
+/** Narrows one entry (exactly one of path/data), returns its copy plus byte size. */
+function snapshotOne(entry, priorTotal) {
+    const r = entry;
+    const hasData = !!r && r.data !== undefined;
+    const hasPath = !!r && r.path !== undefined;
+    if (hasData === hasPath)
+        throw elwoodError("invalid_image", "Image must be exactly one of { path } or { data, format }.");
+    // The shape must be EXACTLY the selected variant's keys — no extra own keys — so a
+    // caller cannot smuggle unexpected fields past validation (C-API-44).
+    rejectExtraKeys(r, hasData ? ["data", "format"] : ["path"]);
+    if (hasData)
+        return validateBytes(r.data, r?.format, priorTotal);
+    if (typeof r?.path !== "string")
+        throw elwoodError("invalid_image", "Image path must be a string.");
+    // Reject an empty/blank path BEFORE `resolve()` — otherwise `resolve("")` yields
+    // the cwd and the later fs check would misreport it as "not a file" (C-API-44).
+    if (r.path.trim() === "")
+        throw elwoodError("invalid_image", "Image path is empty.");
+    // Path size/readability are checked later (async); absolutize now so the snapshot
+    // pins the file a later `cwd` change cannot move. Byte total is unchanged here.
+    return [{ path: resolve(r.path) }, 0];
+}
+/** Rejects an image entry that carries own keys outside its variant's exact shape. */
+function rejectExtraKeys(entry, allowed) {
+    for (const key of Object.keys(entry)) {
+        if (!allowed.includes(key))
+            throw elwoodError("invalid_image", `Image has an unexpected field: ${key}`);
+    }
+}
+// Only Uint8Array/Buffer bytes are accepted (other views would truncate/misread),
+// and BOTH size limits are checked BEFORE cloning so an over-limit input never
+// triggers a large duplicate allocation (C-API-44).
+function validateBytes(data, format, priorTotal) {
+    if (typeof format !== "string" || !Object.hasOwn(imageFormatExtension, format))
+        throw elwoodError("invalid_image", `Unsupported image format: ${String(format)}`);
+    if (!(data instanceof Uint8Array))
+        throw elwoodError("invalid_image", "Image data must be a Uint8Array.");
+    if (data.length === 0)
+        throw elwoodError("invalid_image", "Image data is empty.");
+    if (data.length > imageLimits.maxBytesPerImage)
+        throw elwoodError("invalid_image", "Image data exceeds the per-image size limit.");
+    if (priorTotal + data.length > imageLimits.maxBytesTotal)
+        throw elwoodError("invalid_image", `Images exceed the ${imageLimits.maxBytesTotal}-byte total.`);
+    return [{ data: Uint8Array.from(data), format: format }, data.length];
+}
+async function validatePath(path, priorTotal) {
+    let size;
+    try {
+        const info = await stat(path);
+        if (!info.isFile())
+            throw elwoodError("invalid_image", `Image path is not a file: ${path}`);
+        await access(path, constants.R_OK); // readability, not mere existence (C-API-44)
+        size = info.size;
+    }
+    catch (error) {
+        if (error instanceof ElwoodError)
+            throw error;
+        throw elwoodError("invalid_image", `Image path is not a readable file: ${path}`);
+    }
+    if (size > imageLimits.maxBytesPerImage)
+        throw elwoodError("invalid_image", `Image file exceeds the per-image size limit: ${path}`);
+    // Path images count toward the SAME aggregate ceiling as byte inputs, so a set of
+    // large files cannot bypass the total-size limit that byte inputs enforce (C-API-44).
+    if (priorTotal + size > imageLimits.maxBytesTotal)
+        throw elwoodError("invalid_image", `Images exceed the ${imageLimits.maxBytesTotal}-byte total.`);
+    return size;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/core/images/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/core/images/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAqC,oBAAoB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAYlG;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAA6B;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,WAAW,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,QAAQ;QACtC,MAAM,WAAW,CACf,eAAe,EACf,oBAAoB,MAAM,CAAC,MAAM,MAAM,WAAW,CAAC,QAAQ,EAAE,CAC9D,CAAC;IACJ,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,KAAK,MAAM,KAAK,IAAI,MAA4B,EAAE,CAAC;QACjD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,eAAe,IAAI,KAAK,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAmB;IAC1D,IAAI,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QACvC,KAAK,IAAI,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAA6B;IAC1D,IAAI,IAAmB,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,KAAc,EAAE,UAAkB;IACrD,MAAM,CAAC,GAAG,KAAoE,CAAC;IAC/E,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;IAC5C,IAAI,OAAO,KAAK,OAAO;QACrB,MAAM,WAAW,CACf,eAAe,EACf,4DAA4D,CAC7D,CAAC;IACJ,mFAAmF;IACnF,sEAAsE;IACtE,eAAe,CAAC,CAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO;QAAE,OAAO,aAAa,CAAE,CAAuB,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ;QAC7B,MAAM,WAAW,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;IACrE,iFAAiF;IACjF,gFAAgF;IAChF,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,WAAW,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IACrF,kFAAkF;IAClF,gFAAgF;IAChF,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,sFAAsF;AACtF,SAAS,eAAe,CAAC,KAAa,EAAE,OAA0B;IAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,MAAM,WAAW,CAAC,eAAe,EAAE,kCAAkC,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,+EAA+E;AAC/E,oDAAoD;AACpD,SAAS,aAAa,CACpB,IAAa,EACb,MAAe,EACf,UAAkB;IAElB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC;QAC5E,MAAM,WAAW,CAAC,eAAe,EAAE,6BAA6B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC;QAC/B,MAAM,WAAW,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,WAAW,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,gBAAgB;QAC5C,MAAM,WAAW,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC;IACrF,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,aAAa;QACtD,MAAM,WAAW,CACf,eAAe,EACf,qBAAqB,WAAW,CAAC,aAAa,cAAc,CAC7D,CAAC;IACJ,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAqB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AACvF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,UAAkB;IAC1D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,WAAW,CAAC,eAAe,EAAE,6BAA6B,IAAI,EAAE,CAAC,CAAC;QAC5F,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,6CAA6C;QACjF,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,WAAW,CAAC,eAAe,EAAE,sCAAsC,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,IAAI,GAAG,WAAW,CAAC,gBAAgB;QACrC,MAAM,WAAW,CAAC,eAAe,EAAE,gDAAgD,IAAI,EAAE,CAAC,CAAC;IAC7F,kFAAkF;IAClF,sFAAsF;IACtF,IAAI,UAAU,GAAG,IAAI,GAAG,WAAW,CAAC,aAAa;QAC/C,MAAM,WAAW,CACf,eAAe,EACf,qBAAqB,WAAW,CAAC,aAAa,cAAc,CAC7D,CAAC;IACJ,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/images/types.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Public types and limits for image attachments on message/prompt/guidance
+ * submissions. Implements PRD §5.3 (C-API-44).
+ */
+export declare const imageFormatExtension: {
+    readonly png: "png";
+    readonly jpeg: "jpg";
+    readonly gif: "gif";
+    readonly webp: "webp";
+};
+/** A supported in-memory image byte format. */
+export type ImageFormat = keyof typeof imageFormatExtension;
+/**
+ * An image to attach, given EITHER as a filesystem path OR as in-memory bytes
+ * with an explicit format — never both. The `never`-typed complementary fields
+ * make the union exclusive, so a typed caller cannot pass a path alongside bytes
+ * and slip an unvalidated field through (C-API-44).
+ */
+export type ImageInput = {
+    readonly path: string;
+    readonly data?: never;
+    readonly format?: never;
+} | {
+    readonly path?: never;
+    readonly data: Uint8Array;
+    readonly format: ImageFormat;
+};
+/** Optional per-submission options shared by sendPrompt/sendMessage/sendGuidance. */
+export type SendOptions = {
+    readonly images?: readonly ImageInput[];
+};
+/** Attachment limits enforced before any temp file is written (C-API-44). */
+export declare const imageLimits: {
+    readonly maxCount: 16;
+    readonly maxBytesPerImage: number;
+    readonly maxBytesTotal: number;
+    readonly maxQueuedBytes: number;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/images/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/images/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAC;AAEX,+CAA+C;AAC/C,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,oBAAoB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvF,qFAAqF;AACrF,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CACzC,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,WAAW;;;;;CAUd,CAAC"}

package/dist/core/images/types.js

@@ -0,0 +1,26 @@
+/**
+ * Public types and limits for image attachments on message/prompt/guidance
+ * submissions. Implements PRD §5.3 (C-API-44).
+ */
+// Single source of truth for supported byte formats: the type, the extension
+// map, and the runtime membership check are all derived from this one table so a
+// new format cannot be half-added (public union but rejected at runtime).
+export const imageFormatExtension = {
+    png: "png",
+    jpeg: "jpg",
+    gif: "gif",
+    webp: "webp",
+};
+/** Attachment limits enforced before any temp file is written (C-API-44). */
+export const imageLimits = {
+    maxCount: 16,
+    maxBytesPerImage: 25 * 1024 * 1024,
+    maxBytesTotal: 50 * 1024 * 1024,
+    // The aggregate byte ceiling for cloned image bytes held across ALL not-yet-attached
+    // queued submissions on ONE session. A slow paste/confirmation can hold many
+    // submissions in the control queue at once; without this a caller could queue enough
+    // legal 50 MiB submissions to retain gigabytes of clones. A submission whose bytes
+    // would push the session past this ceiling rejects with `invalid_image` (C-API-44).
+    maxQueuedBytes: 200 * 1024 * 1024,
+};
+//# sourceMappingURL=types.js.map

package/dist/core/images/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/images/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,6EAA6E;AAC7E,iFAAiF;AACjF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;CACJ,CAAC;AAoBX,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,QAAQ,EAAE,EAAE;IACZ,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC/B,qFAAqF;IACrF,6EAA6E;IAC7E,qFAAqF;IACrF,mFAAmF;IACnF,oFAAoF;IACpF,cAAc,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;CACzB,CAAC"}

package/dist/core/input/abort.d.ts

@@ -0,0 +1,10 @@
+/** Abort-aware timing and composer cleanup for queued input (PRD §5.3/§5.9). */
+/** The narrow PTY write surface the queued-input helpers drive. */
+export type InputTerminal = {
+    sendInput(data: string | Uint8Array): void | Promise<void>;
+};
+export declare function waitForInput(ms: number, signal?: AbortSignal): Promise<void>;
+export declare function throwIfInputAborted(signal?: AbortSignal): void;
+export declare function inputAbortError(signal: AbortSignal): Error;
+export declare function clearStagedComposer(terminal: InputTerminal): Promise<void>;
+//# sourceMappingURL=abort.d.ts.map