@with-logic/elwood 0.1.0

package/dist/core/models/picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker.d.ts","sourceRoot":"","sources":["../../../src/core/models/picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAGL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAEzB,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE/E;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzE,CAAC;AAOF,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAUtC;AAED,wBAAsB,cAAc,CAClC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA2Bf"}

package/dist/core/models/picker.js

@@ -0,0 +1,58 @@
+/**
+ * Shared /model picker automation for adapter sessions.
+ * Implements PRD §5.3, §5.7, C-API-23, and C-API-24.
+ */
+import { delay } from "../delay.js";
+import { elwoodError } from "../errors.js";
+import { defaultModelTimeoutMs, openCommandScreen, waitForScreen, } from "./tui-screen.js";
+export function pickerTimeout(options) {
+    return options?.timeoutMs ?? defaultModelTimeoutMs;
+}
+const escapeKey = "\u001b";
+const arrowDown = "\u001b[B";
+const arrowUp = "\u001b[A";
+const arrowStepMs = 80;
+export async function listPickerModels(io, spec, timeoutMs) {
+    const parsed = await openAndParse(io, spec, timeoutMs);
+    await io.terminal.sendInput(escapeKey);
+    await waitForScreen(io.terminal, (text) => !spec.isOpen(text), timeoutMs, `${spec.agent} model picker to close`);
+    return parsed.options;
+}
+export async function setPickerModel(io, spec, id, timeoutMs) {
+    const parsed = await openAndParse(io, spec, timeoutMs);
+    const wanted = id.toLowerCase();
+    // Row ids are already lower-cased labels (`rows.ts`), so matching the id
+    // alone covers a caller that passes the display label in any case.
+    const target = parsed.options.findIndex((option) => option.id === wanted);
+    if (target === -1 || parsed.cursorIndex === -1) {
+        await io.terminal.sendInput(escapeKey);
+        const reason = target === -1 ? `Unknown model id "${id}".` : "Could not locate the picker cursor.";
+        throw elwoodError("model_automation_failed", reason, {
+            available: parsed.options.map((option) => option.id),
+        });
+    }
+    const delta = target - parsed.cursorIndex;
+    const key = delta > 0 ? arrowDown : arrowUp;
+    for (let step = 0; step < Math.abs(delta); step += 1) {
+        await io.terminal.sendInput(key);
+        await delay(arrowStepMs);
+    }
+    await waitForScreen(io.terminal, (text) => spec.parse(text).cursorIndex === target, timeoutMs, `${spec.agent} picker cursor on "${id}"`);
+    await spec.apply(io, timeoutMs);
+}
+async function openAndParse(io, spec, timeoutMs) {
+    const text = await openCommandScreen({
+        terminal: io.terminal,
+        submit: () => io.submit("/model"),
+        isOpen: spec.isOpen,
+        timeoutMs,
+        label: `${spec.agent} model picker`,
+    });
+    const parsed = spec.parse(text);
+    if (parsed.options.length === 0) {
+        await io.terminal.sendInput(escapeKey);
+        throw elwoodError("model_automation_failed", "Could not parse any model picker rows.");
+    }
+    return parsed;
+}
+//# sourceMappingURL=picker.js.map

package/dist/core/models/picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker.js","sourceRoot":"","sources":["../../../src/core/models/picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EAEjB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,MAAM,UAAU,aAAa,CAAC,OAAyC;IACrE,OAAO,OAAO,EAAE,SAAS,IAAI,qBAAqB,CAAC;AACrD,CAAC;AAcD,MAAM,SAAS,GAAG,QAAQ,CAAC;AAC3B,MAAM,SAAS,GAAG,UAAU,CAAC;AAC7B,MAAM,OAAO,GAAG,UAAU,CAAC;AAC3B,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAiB,EACjB,IAAqB,EACrB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,aAAa,CACjB,EAAE,CAAC,QAAQ,EACX,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAC5B,SAAS,EACT,GAAG,IAAI,CAAC,KAAK,wBAAwB,CACtC,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAiB,EACjB,IAAqB,EACrB,EAAU,EACV,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAChC,yEAAyE;IACzE,mEAAmE;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC1E,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,MAAM,GACV,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,qCAAqC,CAAC;QACtF,MAAM,WAAW,CAAC,yBAAyB,EAAE,MAAM,EAAE;YACnD,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5C,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,aAAa,CACjB,EAAE,CAAC,QAAQ,EACX,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EACjD,SAAS,EACT,GAAG,IAAI,CAAC,KAAK,sBAAsB,EAAE,GAAG,CACzC,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,EAAiB,EACjB,IAAqB,EACrB,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS;QACT,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,eAAe;KACpC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,WAAW,CAAC,yBAAyB,EAAE,wCAAwC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/models/probe-state.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Elwood-owned temp state directory for a session-less probe (C-API-41).
+ * The probe creates a fresh directory it fully owns, so it can remove EVERYTHING
+ * it allocated — even when adapter startup fails after writing the session
+ * directory or runtime files — without touching any caller-owned state.
+ */
+export type OwnedProbeStateDir = {
+    /** The fresh, probe-owned state directory to launch the throwaway session in. */
+    readonly dir: string;
+    /** Removes the owned directory and everything under it; best-effort, never throws. */
+    readonly remove: () => void;
+};
+/**
+ * Creates a fresh probe-owned state directory. When the caller supplies a `parent`
+ * (the `ListModelsOptions.stateDir`), the temp directory is created inside it so
+ * the caller can locate the probe's state; otherwise it lands under the OS temp
+ * dir. Either way Elwood OWNS the created directory and removes exactly it — never
+ * a caller-owned tree — on cleanup.
+ */
+export declare function ownedProbeStateDir(agent: string, parent?: string): OwnedProbeStateDir;
+//# sourceMappingURL=probe-state.d.ts.map

package/dist/core/models/probe-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-state.d.ts","sourceRoot":"","sources":["../../../src/core/models/probe-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAMrF"}

package/dist/core/models/probe-state.js

@@ -0,0 +1,39 @@
+/**
+ * Elwood-owned temp state directory for a session-less probe (C-API-41).
+ * The probe creates a fresh directory it fully owns, so it can remove EVERYTHING
+ * it allocated — even when adapter startup fails after writing the session
+ * directory or runtime files — without touching any caller-owned state.
+ */
+import { mkdirSync, mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+/**
+ * Creates a fresh probe-owned state directory. When the caller supplies a `parent`
+ * (the `ListModelsOptions.stateDir`), the temp directory is created inside it so
+ * the caller can locate the probe's state; otherwise it lands under the OS temp
+ * dir. Either way Elwood OWNS the created directory and removes exactly it — never
+ * a caller-owned tree — on cleanup.
+ */
+export function ownedProbeStateDir(agent, parent) {
+    const root = parent ?? tmpdir();
+    // A caller-supplied `stateDir` need not exist yet; mkdtemp requires its parent.
+    if (parent !== undefined)
+        mkdirSync(root, { recursive: true });
+    const dir = mkdtempSync(join(root, `elwood-${agent}-models-`));
+    return { dir, remove: () => removeProbeStateDir(dir) };
+}
+/**
+ * Removes a probe-owned directory and everything under it. Best-effort: `force`
+ * already ignores an already-gone directory, and any other fs error (EPERM, a
+ * file where a directory was expected, and so on) is swallowed so a cleanup
+ * failure never masks the probe's real result.
+ */
+function removeProbeStateDir(dir) {
+    try {
+        rmSync(dir, { recursive: true, force: true });
+    }
+    catch {
+        // Best-effort cleanup: a failure here is never surfaced to the caller.
+    }
+}
+//# sourceMappingURL=probe-state.js.map

package/dist/core/models/probe-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-state.js","sourceRoot":"","sources":["../../../src/core/models/probe-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAe;IAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;IAChC,gFAAgF;IAChF,IAAI,MAAM,KAAK,SAAS;QAAE,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC"}

package/dist/core/models/rows.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Parses rendered adapter model picker rows into typed options.
+ * Implements PRD §5.3 AgentModelOption and C-API-23.
+ */
+export type AgentModelOption = {
+    readonly id: string;
+    readonly label: string;
+    readonly description?: string;
+    readonly isCurrent: boolean;
+    readonly isDefault: boolean;
+    readonly raw: string;
+};
+export type ParsedModelPicker = {
+    readonly options: readonly AgentModelOption[];
+    readonly cursorIndex: number;
+};
+export declare const claudeModelPickerHeader: RegExp;
+export declare const codexModelPickerHeader: RegExp;
+export declare function parseClaudeModelPicker(text: string): ParsedModelPicker;
+export declare function parseCodexModelPicker(text: string): ParsedModelPicker;
+//# sourceMappingURL=rows.d.ts.map

package/dist/core/models/rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../../../src/core/models/rows.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,uBAAuB,QAAiB,CAAC;AACtD,eAAO,MAAM,sBAAsB,QAA4B,CAAC;AAIhE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAUtE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAarE"}

package/dist/core/models/rows.js

@@ -0,0 +1,57 @@
+/**
+ * Parses rendered adapter model picker rows into typed options.
+ * Implements PRD §5.3 AgentModelOption and C-API-23.
+ */
+export const claudeModelPickerHeader = /Select model/;
+export const codexModelPickerHeader = /Select Model and Effort/;
+const rowPattern = /^\s*(❯|›)?\s*\d+\.\s+(.+?)\s{2,}(\S.*?)\s*$/;
+export function parseClaudeModelPicker(text) {
+    return parseRows(pickerRegion(text, claudeModelPickerHeader), (labelText) => {
+        const isCurrent = labelText.includes("✔");
+        const isDefault = /\(recommended\)/i.test(labelText);
+        const label = labelText
+            .replace("✔", "")
+            .replace(/\(recommended\)/i, "")
+            .trim();
+        return { label, id: label.toLowerCase(), isCurrent, isDefault };
+    });
+}
+export function parseCodexModelPicker(text) {
+    const parsed = parseRows(pickerRegion(text, codexModelPickerHeader), (labelText) => {
+        const isCurrent = /\(current\)/i.test(labelText);
+        const isDefault = /\(default\)/i.test(labelText);
+        const label = labelText.replace(/\((?:current|default)\)/gi, "").trim();
+        return { label, id: label.toLowerCase(), isCurrent, isDefault };
+    });
+    // Codex omits the default marker when the current model is the default.
+    if (parsed.options.some((option) => option.isDefault))
+        return parsed;
+    const options = parsed.options.map((option) => option.isCurrent ? { ...option, isDefault: true } : option);
+    return { options, cursorIndex: parsed.cursorIndex };
+}
+function parseRows(region, decorate) {
+    const options = [];
+    let cursorIndex = -1;
+    for (const line of region.split("\n")) {
+        const match = rowPattern.exec(line);
+        if (!match)
+            continue;
+        if (match[1])
+            cursorIndex = options.length;
+        options.push({
+            ...decorate(match[2]),
+            description: match[3],
+            raw: line.trim(),
+        });
+    }
+    return { options, cursorIndex };
+}
+function pickerRegion(text, header) {
+    const lines = text.split("\n");
+    for (let index = lines.length - 1; index >= 0; index -= 1) {
+        if (header.test(lines[index]))
+            return lines.slice(index).join("\n");
+    }
+    return "";
+}
+//# sourceMappingURL=rows.js.map

package/dist/core/models/rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.js","sourceRoot":"","sources":["../../../src/core/models/rows.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC;AACtD,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAEhE,MAAM,UAAU,GAAG,6CAA6C,CAAC;AAEjE,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE;QAC1E,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,SAAS;aACpB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;aAChB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;aAC/B,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE;QACjF,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,wEAAwE;IACxE,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3D,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAID,SAAS,SAAS,CAAC,MAAc,EAAE,QAAyC;IAC1E,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,KAAK,CAAC,CAAC,CAAC;YAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC;YAC/B,WAAW,EAAE,KAAK,CAAC,CAAC,CAAW;YAC/B,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAW,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/core/models/tui-screen.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Screen-state polling primitives for TUI automation flows.
+ * Implements PRD §5.3 model picker automation.
+ */
+export type ScreenTerminal = {
+    sendInput(data: string | Uint8Array): void | Promise<void>;
+    snapshot(): {
+        readonly text: string;
+    };
+};
+export declare const defaultModelTimeoutMs = 20000;
+export declare function waitForScreen(terminal: ScreenTerminal, test: (text: string) => boolean, timeoutMs: number, label: string): Promise<string>;
+export declare function openCommandScreen(input: {
+    readonly terminal: ScreenTerminal;
+    readonly submit: () => Promise<void>;
+    readonly isOpen: (text: string) => boolean;
+    readonly timeoutMs: number;
+    readonly label: string;
+    readonly nudgeDelayMs?: number;
+}): Promise<string>;
+//# sourceMappingURL=tui-screen.d.ts.map

package/dist/core/models/tui-screen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui-screen.d.ts","sourceRoot":"","sources":["../../../src/core/models/tui-screen.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,QAAQ,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAI5C,wBAAsB,aAAa,CACjC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,EAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,OAAO,CAAC,MAAM,CAAC,CAiClB"}

package/dist/core/models/tui-screen.js

@@ -0,0 +1,56 @@
+/**
+ * Screen-state polling primitives for TUI automation flows.
+ * Implements PRD §5.3 model picker automation.
+ */
+import { delay } from "../delay.js";
+import { elwoodError } from "../errors.js";
+export const defaultModelTimeoutMs = 20_000;
+const pollMs = 100;
+const openNudgeDelayMs = 2_000;
+export async function waitForScreen(terminal, test, timeoutMs, label) {
+    const started = Date.now();
+    while (Date.now() - started < timeoutMs) {
+        const text = terminal.snapshot().text;
+        if (test(text))
+            return text;
+        await delay(pollMs);
+    }
+    throw elwoodError("model_automation_failed", `Timed out waiting for ${label}.`);
+}
+export async function openCommandScreen(input) {
+    await input.submit();
+    // The command text or its Enter can be dropped when the TUI is redrawing
+    // (e.g. an MCP-server boot streaming into the composer at startup). A bare
+    // Enter nudge cannot recover a lost command line, so re-submit the whole
+    // command on each nudge interval until the picker opens or the timeout
+    // fires. Re-typing an idempotent slash command on an empty composer, and a
+    // surplus Enter, are both no-ops once the picker is already open.
+    const nudgeDelayMs = input.nudgeDelayMs ?? openNudgeDelayMs;
+    let resubmitting = false;
+    let nudgeTimer;
+    // A re-submit that rejects (e.g. the session closed while polling) must
+    // settle this call with that error immediately, not be dropped as an
+    // unhandled rejection while the caller waits out the picker timeout.
+    const submitFailed = new Promise((_resolve, reject) => {
+        nudgeTimer = setInterval(() => {
+            if (resubmitting || input.isOpen(input.terminal.snapshot().text))
+                return;
+            resubmitting = true;
+            // A rejected re-submit (e.g. the session closed while polling) is
+            // propagated unchanged so the caller settles with the real error.
+            input.submit().then(() => {
+                resubmitting = false;
+            }, reject);
+        }, nudgeDelayMs);
+    });
+    try {
+        return await Promise.race([
+            waitForScreen(input.terminal, input.isOpen, input.timeoutMs, input.label),
+            submitFailed,
+        ]);
+    }
+    finally {
+        clearInterval(nudgeTimer);
+    }
+}
+//# sourceMappingURL=tui-screen.js.map

package/dist/core/models/tui-screen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui-screen.js","sourceRoot":"","sources":["../../../src/core/models/tui-screen.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAO3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,MAAM,GAAG,GAAG,CAAC;AACnB,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAwB,EACxB,IAA+B,EAC/B,SAAiB,EACjB,KAAa;IAEb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,WAAW,CAAC,yBAAyB,EAAE,yBAAyB,KAAK,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAOvC;IACC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACrB,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,gBAAgB,CAAC;IAC5D,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,UAAsD,CAAC;IAC3D,wEAAwE;IACxE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,YAAY,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC3D,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;gBAAE,OAAO;YACzE,YAAY,GAAG,IAAI,CAAC;YACpB,kEAAkE;YAClE,kEAAkE;YAClE,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,EAAE,YAAY,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC;YACzE,YAAY;SACb,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/core/module-require.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CJS-bundler-safe createRequire construction.
+ * Bundlers that lower this library to CJS (Electron main bundles, rollup)
+ * rewrite import.meta.url to undefined but provide the CJS __filename, so
+ * callers pass import.meta.url and this falls back when it was lowered away.
+ */
+export declare function moduleRequire(metaUrl: string | undefined): NodeJS.Require;
+//# sourceMappingURL=module-require.d.ts.map

package/dist/core/module-require.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-require.d.ts","sourceRoot":"","sources":["../../src/core/module-require.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,OAAO,CAGzE"}

package/dist/core/module-require.js

@@ -0,0 +1,14 @@
+/**
+ * CJS-bundler-safe createRequire construction.
+ * Bundlers that lower this library to CJS (Electron main bundles, rollup)
+ * rewrite import.meta.url to undefined but provide the CJS __filename, so
+ * callers pass import.meta.url and this falls back when it was lowered away.
+ */
+import { createRequire } from "node:module";
+import { pathToFileURL } from "node:url";
+export function moduleRequire(metaUrl) {
+    if (metaUrl !== undefined)
+        return createRequire(metaUrl);
+    return createRequire(pathToFileURL(__filename).href);
+}
+//# sourceMappingURL=module-require.js.map

package/dist/core/module-require.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-require.js","sourceRoot":"","sources":["../../src/core/module-require.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,MAAM,UAAU,aAAa,CAAC,OAA2B;IACvD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC"}

package/dist/core/persona.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Persona enqueue helper shared by adapter start paths.
+ * Implements PRD §5.1, §5.5, and C-API-21.
+ */
+type MessageTarget = {
+    sendMessage(message: string): Promise<void>;
+};
+export declare function queuePersonaMessage<T extends MessageTarget>(session: T, persona: string | undefined): T;
+export {};
+//# sourceMappingURL=persona.d.ts.map

package/dist/core/persona.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persona.d.ts","sourceRoot":"","sources":["../../src/core/persona.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,KAAK,aAAa,GAAG;IACnB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,aAAa,EACzD,OAAO,EAAE,CAAC,EACV,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,CAAC,CAWH"}

package/dist/core/persona.js

@@ -0,0 +1,18 @@
+/**
+ * Persona enqueue helper shared by adapter start paths.
+ * Implements PRD §5.1, §5.5, and C-API-21.
+ */
+export function queuePersonaMessage(session, persona) {
+    // The queued persona is a floated submission: the start path returns the
+    // session before it dispatches, so its promise has no caller to reject into.
+    // The expected rejection is `session_not_running` (the session terminated
+    // before its first ready transition) — the PRD specifies the undelivered
+    // persona is discarded. Any other rejection (a PTY write failure) has no
+    // reporting channel here either and would otherwise surface as an unhandled
+    // rejection that terminates the host, so it is contained the same way; the
+    // failure remains observable through the session's own status/warning events.
+    if (persona !== undefined)
+        void session.sendMessage(persona).catch(() => undefined);
+    return session;
+}
+//# sourceMappingURL=persona.js.map

package/dist/core/persona.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persona.js","sourceRoot":"","sources":["../../src/core/persona.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,UAAU,mBAAmB,CACjC,OAAU,EACV,OAA2B;IAE3B,yEAAyE;IACzE,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,OAAO,KAAK,SAAS;QAAE,KAAK,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/predicates.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Shared runtime shape predicates for values crossing a trust boundary: hook
+ * payloads (PRD §6.4, §7A.3), persisted records (§8.2), and CLI config (§12A.4).
+ * Every adapter and store validates value TYPES, not merely key names, and they
+ * all do it with these primitives.
+ */
+export declare function isRecord(value: unknown): value is Readonly<Record<string, unknown>>;
+export declare function isString(value: unknown): value is string;
+export declare function isStringArray(value: unknown): value is readonly string[];
+export declare function optionalString(value: unknown): boolean;
+export declare function optionalNumber(value: unknown): boolean;
+export declare function optionalBoolean(value: unknown): boolean;
+export declare function optionalStringArray(value: unknown): boolean;
+/** True when `value` is one of the allowed string literals; narrows to that union. */
+export declare function isOneOf<T extends string>(value: unknown, allowed: readonly T[]): value is T;
+//# sourceMappingURL=predicates.d.ts.map

package/dist/core/predicates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"predicates.d.ts","sourceRoot":"","sources":["../../src/core/predicates.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAEnF;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,MAAM,EAAE,CAExE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEtD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEtD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEvD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED,sFAAsF;AACtF,wBAAgB,OAAO,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,CAE3F"}

package/dist/core/predicates.js

@@ -0,0 +1,32 @@
+/**
+ * Shared runtime shape predicates for values crossing a trust boundary: hook
+ * payloads (PRD §6.4, §7A.3), persisted records (§8.2), and CLI config (§12A.4).
+ * Every adapter and store validates value TYPES, not merely key names, and they
+ * all do it with these primitives.
+ */
+export function isRecord(value) {
+    return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+export function isString(value) {
+    return typeof value === "string";
+}
+export function isStringArray(value) {
+    return Array.isArray(value) && value.every(isString);
+}
+export function optionalString(value) {
+    return value === undefined || typeof value === "string";
+}
+export function optionalNumber(value) {
+    return value === undefined || typeof value === "number";
+}
+export function optionalBoolean(value) {
+    return value === undefined || typeof value === "boolean";
+}
+export function optionalStringArray(value) {
+    return value === undefined || isStringArray(value);
+}
+/** True when `value` is one of the allowed string literals; narrows to that union. */
+export function isOneOf(value, allowed) {
+    return typeof value === "string" && allowed.includes(value);
+}
+//# sourceMappingURL=predicates.js.map

package/dist/core/predicates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"predicates.js","sourceRoot":"","sources":["../../src/core/predicates.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,OAAO,CAAmB,KAAc,EAAE,OAAqB;IAC7E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC"}

package/dist/core/private-output-secrets.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Keeps per-launch credentials available to trusted serializers without exposing them publicly.
+ * Implements PRD §12A.3 and C-CLI-12.
+ */
+/** Associate an in-memory session with secrets that must be redacted from normalized output. */
+export declare function registerPrivateOutputSecrets(owner: object, secrets: readonly string[]): void;
+/** Read a defensive copy of a session's private output-redaction values. */
+export declare function privateOutputSecrets(owner: object): readonly string[];
+//# sourceMappingURL=private-output-secrets.d.ts.map

package/dist/core/private-output-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-output-secrets.d.ts","sourceRoot":"","sources":["../../src/core/private-output-secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,gGAAgG;AAChG,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAE5F;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAErE"}

package/dist/core/private-output-secrets.js

@@ -0,0 +1,14 @@
+/**
+ * Keeps per-launch credentials available to trusted serializers without exposing them publicly.
+ * Implements PRD §12A.3 and C-CLI-12.
+ */
+const outputSecrets = new WeakMap();
+/** Associate an in-memory session with secrets that must be redacted from normalized output. */
+export function registerPrivateOutputSecrets(owner, secrets) {
+    outputSecrets.set(owner, [...secrets]);
+}
+/** Read a defensive copy of a session's private output-redaction values. */
+export function privateOutputSecrets(owner) {
+    return [...(outputSecrets.get(owner) ?? [])];
+}
+//# sourceMappingURL=private-output-secrets.js.map

package/dist/core/private-output-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-output-secrets.js","sourceRoot":"","sources":["../../src/core/private-output-secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,aAAa,GAAG,IAAI,OAAO,EAA6B,CAAC;AAE/D,gGAAgG;AAChG,MAAM,UAAU,4BAA4B,CAAC,KAAa,EAAE,OAA0B;IACpF,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/core/probe-state.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Elwood-owned temp state directory for a session-less probe (C-API-41).
+ * The probe creates a fresh directory it fully owns, so it can remove EVERYTHING
+ * it allocated — even when adapter startup fails after writing the session
+ * directory or runtime files — without touching any caller-owned state.
+ */
+export type OwnedProbeStateDir = {
+    /** The fresh, probe-owned state directory to launch the throwaway session in. */
+    readonly dir: string;
+    /** Removes the owned directory and everything under it; best-effort, never throws. */
+    readonly remove: () => void;
+};
+/**
+ * Creates a fresh probe-owned state directory. When the caller supplies a `parent`
+ * (the `ListModelsOptions.stateDir`), the temp directory is created inside it so
+ * the caller can locate the probe's state; otherwise it lands under the OS temp
+ * dir. Either way Elwood OWNS the created directory and removes exactly it — never
+ * a caller-owned tree — on cleanup.
+ */
+export declare function ownedProbeStateDir(agent: string, parent?: string): OwnedProbeStateDir;
+//# sourceMappingURL=probe-state.d.ts.map

package/dist/core/probe-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-state.d.ts","sourceRoot":"","sources":["../../src/core/probe-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAMrF"}

package/dist/core/probe-state.js

@@ -0,0 +1,39 @@
+/**
+ * Elwood-owned temp state directory for a session-less probe (C-API-41).
+ * The probe creates a fresh directory it fully owns, so it can remove EVERYTHING
+ * it allocated — even when adapter startup fails after writing the session
+ * directory or runtime files — without touching any caller-owned state.
+ */
+import { mkdirSync, mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+/**
+ * Creates a fresh probe-owned state directory. When the caller supplies a `parent`
+ * (the `ListModelsOptions.stateDir`), the temp directory is created inside it so
+ * the caller can locate the probe's state; otherwise it lands under the OS temp
+ * dir. Either way Elwood OWNS the created directory and removes exactly it — never
+ * a caller-owned tree — on cleanup.
+ */
+export function ownedProbeStateDir(agent, parent) {
+    const root = parent ?? tmpdir();
+    // A caller-supplied `stateDir` need not exist yet; mkdtemp requires its parent.
+    if (parent !== undefined)
+        mkdirSync(root, { recursive: true });
+    const dir = mkdtempSync(join(root, `elwood-${agent}-models-`));
+    return { dir, remove: () => removeProbeStateDir(dir) };
+}
+/**
+ * Removes a probe-owned directory and everything under it. Best-effort: `force`
+ * already ignores an already-gone directory, and any other fs error (EPERM, a
+ * file where a directory was expected, and so on) is swallowed so a cleanup
+ * failure never masks the probe's real result.
+ */
+function removeProbeStateDir(dir) {
+    try {
+        rmSync(dir, { recursive: true, force: true });
+    }
+    catch {
+        // Best-effort cleanup: a failure here is never surfaced to the caller.
+    }
+}
+//# sourceMappingURL=probe-state.js.map

package/dist/core/probe-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-state.js","sourceRoot":"","sources":["../../src/core/probe-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAe;IAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;IAChC,gFAAgF;IAChF,IAAI,MAAM,KAAK,SAAS;QAAE,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC"}

package/dist/core/reasoning-effort.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Per-adapter reasoning-effort enums and a shared before-spawn validator.
+ * Implements PRD §5.1/§5.2 (C-CLAUDE-20) and §5.5/§5.6 (C-CODEX-21).
+ *
+ * The two CLIs accept DIFFERENT effort sets (Codex adds `none`/`minimal`; both
+ * share `low`..`max`), and both are version-coupled to the installed CLI, so the
+ * value is a fixed per-adapter allowlist rather than a shared Elwood enum. Elwood
+ * validates BEFORE spawning: Claude's `--effort` would reject inconsistently and
+ * Codex validates server-side (a bad value launches, then fails at the first turn
+ * with a provider 400), so a start-time check turns both into one fast, clear error.
+ */
+import type { ClaudeEffortLevel } from "../claude/hooks/names.ts";
+import { type ElwoodErrorName } from "./errors.ts";
+/**
+ * Claude's `--effort` levels (claude 2.1.245: `low, medium, high, xhigh, max`).
+ * `ClaudeReasoningEffort` is the SAME set Claude already reports in hook payloads
+ * (`ClaudeEffortLevel`), aliased so the launch option and the hook input never
+ * drift. The coupling is enforced at COMPILE time in both directions with no
+ * runtime statement: `satisfies` rejects a tuple member outside the union, and
+ * `Covers` (whose constraint requires every union member to be in the tuple)
+ * rejects a union member the tuple omits.
+ */
+export type ClaudeReasoningEffort = ClaudeEffortLevel;
+export declare const claudeReasoningEfforts: readonly ["low", "medium", "high", "xhigh", "max"];
+/** `T` itself, instantiable only when `U` (the union) is covered by `T`'s members. */
+type Covers<T extends readonly string[], U extends T[number]> = readonly U[] extends T ? never : T;
+/** The launch tuple, proven to cover the hook-payload union (fails to compile on drift). */
+export type ClaudeReasoningEfforts = Covers<typeof claudeReasoningEfforts, ClaudeReasoningEffort>;
+/** Codex `model_reasoning_effort` values (codex 0.149.1, API-enforced enum). */
+export declare const codexReasoningEfforts: readonly ["none", "minimal", "low", "medium", "high", "xhigh", "max"];
+export type CodexReasoningEffort = (typeof codexReasoningEfforts)[number];
+/**
+ * Narrows a caller-supplied `reasoningEffort` to the adapter's enum, throwing the
+ * typed `*_invalid_reasoning_effort` error (listing the valid values) when it is out
+ * of range. `undefined` passes through unchanged — the option is absent, not invalid.
+ * Returning the narrowed literal lets callers forward it without a second cast.
+ */
+export declare function validateReasoningEffort<T extends string>(value: T | undefined, valid: readonly T[], errorCode: ElwoodErrorName): T | undefined;
+export {};
+//# sourceMappingURL=reasoning-effort.d.ts.map

package/dist/core/reasoning-effort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reasoning-effort.d.ts","sourceRoot":"","sources":["../../src/core/reasoning-effort.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,KAAK,eAAe,EAAe,MAAM,aAAa,CAAC;AAEhE;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AACtD,eAAO,MAAM,sBAAsB,oDAMkB,CAAC;AACtD,sFAAsF;AACtF,KAAK,MAAM,CAAC,CAAC,SAAS,SAAS,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,EAAE,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AACnG,4FAA4F;AAC5F,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,sBAAsB,EAAE,qBAAqB,CAAC,CAAC;AAElG,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,uEAQxB,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,MAAM,EACtD,KAAK,EAAE,CAAC,GAAG,SAAS,EACpB,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,SAAS,EAAE,eAAe,GACzB,CAAC,GAAG,SAAS,CAMf"}