@with-logic/elwood 0.1.0

package/dist/core/simple/turn.js

@@ -0,0 +1,173 @@
+/**
+ * One ergonomic turn: submit a prompt and drive the agent turn to its REAL boundary,
+ * feeding a gate the consumer reads (PRD §5.8, C-API-48/49/50).
+ *
+ * The turn boundary is a COMPLETENESS ORACLE, not a timer. A turn's assistant text is
+ * transcript-sourced (C-CLAUDE-15) and the transcript is written ASYNCHRONOUSLY, arriving
+ * shortly AFTER the `ready` status. The turn-boundary `Stop` hook carries
+ * `last_assistant_message` — the final assistant text of the just-completed turn — used
+ * ONLY as a completeness signal (never displayed — it can be ghost text): the turn ends
+ * once the transcript-collected assistant text CONTAINS it. With no such signal (a
+ * pure-tool turn, or an empty/`null` `last_assistant_message`) the turn ends after a
+ * bounded quiet window with no new content.
+ *
+ * The runner is decoupled from its consumer. `completion` always resolves when the consumer
+ * settles; its error travels through `events`. The serializer instead holds `boundary`, which
+ * resolves on a successful oracle/quiet settle or terminal status. After consumer failure it
+ * waits for real `ready`/terminal evidence plus transcript drain, so abandoned streams cannot
+ * release their slot while the agent is still producing.
+ *
+ * Timeouts: a turn may run for HOURS (a test suite, a PR poll), so there is NO whole-turn
+ * timeout by default; callers may pass an opt-in `timeoutMs`, armed only AFTER submission (a
+ * turn begins on submission — the timer must never reject a caller for a prompt still queued
+ * behind readiness that then submits anyway). The tight cap is `catchUpMs` (default 10s),
+ * armed only ONCE `ready` fires — the flush should be near-instant, so a longer stall rejects
+ * with `wait_timeout`. A terminal status ends the turn at once.
+ */
+import { elwoodError, toError } from "../errors.js";
+import { terminalStatuses } from "../status-categories.js";
+import { toTurnEvent } from "./events.js";
+import { TurnAcceptance } from "./turn-acceptance.js";
+import { TurnBoundary } from "./turn-boundary.js";
+import { TurnGate } from "./turn-gate.js";
+import { defaultAcceptanceSignal, defaultBoundarySignal, } from "./turn-types.js";
+export { defaultAcceptanceSignal, defaultBoundarySignal } from "./turn-types.js";
+/** Quiet window (ms) after `ready` for a no-oracle turn to settle once content stops. */
+const FALLBACK_QUIET_MS = 2_000;
+/** Cap (ms) on the POST-`ready` transcript catch-up: a stalled flush bails, not hangs. */
+const CATCH_UP_MS = 10_000;
+/**
+ * Start a turn: attach listeners, submit the prompt, and drive the gate to the turn's real
+ * boundary. Returns the consumer `events` generator, an always-resolving `completion` signal,
+ * and the `boundary` promise the serializer holds its slot on (so the next turn never starts
+ * before the AGENT settles — see `RunningTurn` and the file docstring).
+ */
+export function runTurn(session, prompt, options = {}) {
+    const catchUpMs = options.catchUpMs ?? CATCH_UP_MS;
+    const gate = new TurnGate(options.fallbackQuietMs ?? FALLBACK_QUIET_MS, catchUpMs, options.maxPendingEvents, options.maxPendingBytes);
+    const sendOptions = options.images === undefined ? undefined : { images: options.images };
+    const send = () => session.sendMessage(prompt, sendOptions);
+    const acceptance = new TurnAcceptance(options.fallbackQuietMs ?? FALLBACK_QUIET_MS, {
+        replay: send,
+        acceptReady: () => gate.observeReady(),
+        fail: (error) => gate.fail(toError(error)),
+    });
+    // Bound to the first content event that CARRIES a `turnId` (Codex tags; Claude never does);
+    // untagged events always belong to this turn, a differently tagged one is a prior turn's.
+    let turnId;
+    // The turn only ENDS on a settle once it has demonstrably STARTED — a `running` status or
+    // the first content event — so the idle `ready` the session sits at when the prompt is
+    // submitted does not end the turn before any work runs. This (with the serializer holding
+    // the prior turn to its real boundary before this one starts) is why no explicit
+    // "is this my submission" gate is needed: there are no prior-turn events left to mis-collect.
+    let started = false;
+    let sawReady = false; // a `ready` after the turn started was observed (agent turn is idle/done)
+    let consumerSettled = false;
+    // Listeners are removed only once BOTH the consumer has settled AND the real boundary is
+    // reached: the boundary observer must outlive a consumer failure (a timed-out turn whose agent
+    // is still running), and the consumer view must outlive an early boundary (buffered drain).
+    const maybeCleanup = () => {
+        if (!(consumerSettled && boundary.isReached))
+            return;
+        gate.dispose();
+        offActivity();
+        offHook();
+        offStatus();
+    };
+    const boundary = new TurnBoundary(maybeCleanup, options.drainMs);
+    // The gate's SUCCESSFUL settle means the transcript drained — the real boundary. Its rejection
+    // (a consumer failure) does NOT reach it here; a post-failure `ready`/terminal does.
+    gate.done().then(() => boundary.reach(), () => undefined);
+    const offActivity = session.on("activity", (event) => {
+        const simple = toTurnEvent(event);
+        if (simple || (event.kind === "user_message" && event.text === prompt))
+            acceptance.accept();
+        if (simple) {
+            started = true;
+            turnId ??= event.turnId; // bind on the FIRST tagged event, not merely the first event
+        }
+        if (simple && (event.turnId === undefined || event.turnId === turnId)) {
+            // Queue the event FIRST, then feed the oracle: observeText can end() the turn, and
+            // push() drops events once ended — so the text that COMPLETES the turn is enqueued
+            // before the completion check runs.
+            gate.push(simple);
+            if (simple.type === "text")
+                gate.observeText(simple.text);
+        }
+        if (boundary.draining)
+            boundary.armDrain(); // trailing post-failure flush re-arms the drain
+    });
+    const readBoundarySignal = options.readBoundarySignal ?? defaultBoundarySignal;
+    const offHook = session.on("hook", (event) => {
+        // The adapter NORMALIZES its raw hook into the completeness signal (the expected final
+        // assistant text of a turn-BOUNDARY hook; `undefined` for any other hook, which the gate
+        // ignores so a late `Notification` cannot wipe an installed oracle). The core reads only
+        // that — never raw hook fields. Used as a completeness ORACLE only (never displayed —
+        // respects C-CLAUDE-15).
+        if (defaultAcceptanceSignal(event, prompt))
+            acceptance.accept();
+        gate.expectText(readBoundarySignal(event));
+    });
+    const offStatus = session.on("status", ({ status }) => {
+        if (status === "running") {
+            started = true;
+            acceptance.running();
+        }
+        if (terminalStatuses.has(status)) {
+            acceptance.dispose();
+            gate.end();
+            return boundary.reach(); // agent is gone — the real boundary, regardless of consumer state
+        }
+        if (status === "ready" && started) {
+            sawReady = true;
+            if (acceptance.ready())
+                gate.observeReady();
+            boundary.armDrain(); // failure path: agent reached ready → drain then release the slot
+        }
+    });
+    // Drive the consumer lifecycle EAGERLY and independently of iteration: submit, then wait for
+    // the gate to settle. Always resolves — the turn error reaches the consumer via `events`.
+    const completion = (async () => {
+        let timer;
+        try {
+            // A turn BEGINS on submission (PRD §5.8), so the opt-in ceiling is armed only AFTER
+            // `sendMessage` resolves — never rejecting a prompt still queued behind readiness.
+            await send(); // listeners attached — no early event lost
+        }
+        catch (error) {
+            // The SUBMISSION failed → no agent turn is in flight and no status transition is coming:
+            // fail the consumer with the typed error AND reach the boundary at once (else the
+            // serializer waits forever). A terminal-status race is a benign idempotent no-op; otherwise
+            // a submit-on-a-dead-session `session_not_running` propagates to the consumer (C-API-25).
+            gate.fail(toError(error));
+            boundary.reach();
+            consumerSettled = true;
+            maybeCleanup();
+            return;
+        }
+        if (options.timeoutMs !== undefined) {
+            timer = setTimeout(() => gate.fail(elwoodError("wait_timeout", "turn timed out")), options.timeoutMs);
+            timer.unref?.(); // a pending ceiling must not keep the host alive by itself
+        }
+        try {
+            await gate.done(); // resolves on genuine settle (→ boundary); rejects on consumer failure
+        }
+        catch {
+            // Consumer failure after submission: the agent turn ran and may not be done, so the boundary
+            // waits for a real `ready`/terminal (not a quiet window). If `ready` was ALREADY seen (a
+            // catch-up failure — agent idle, transcript stalled), arm the drain now; no `ready` re-fires.
+            boundary.markConsumerFailed();
+            if (sawReady)
+                boundary.armDrain();
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+            acceptance.dispose();
+            consumerSettled = true;
+            maybeCleanup();
+        }
+    })();
+    return { events: gate.drain(), completion, boundary: boundary.promise };
+}
+//# sourceMappingURL=turn.js.map

package/dist/core/simple/turn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn.js","sourceRoot":"","sources":["../../../src/core/simple/turn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AAYzB,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,yFAAyF;AACzF,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,0FAA0F;AAC1F,MAAM,WAAW,GAAG,MAAM,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CACrB,OAAoB,EACpB,MAAc,EACd,UAA6B,EAAE;IAE/B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,QAAQ,CACvB,OAAO,CAAC,eAAe,IAAI,iBAAiB,EAC5C,SAAS,EACT,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,eAAe,CACxB,CAAC;IACF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC1F,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,eAAe,IAAI,iBAAiB,EAAE;QAClF,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE;QACtC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,4FAA4F;IAC5F,0FAA0F;IAC1F,IAAI,MAA0B,CAAC;IAC/B,0FAA0F;IAC1F,uFAAuF;IACvF,0FAA0F;IAC1F,iFAAiF;IACjF,8FAA8F;IAC9F,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAC,CAAC,0EAA0E;IAChG,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,yFAAyF;IACzF,+FAA+F;IAC/F,4FAA4F;IAC5F,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,IAAI,CAAC,CAAC,eAAe,IAAI,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,WAAW,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,CAAC;IACd,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,+FAA+F;IAC/F,qFAAqF;IACrF,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CACd,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EACtB,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IAEF,MAAM,WAAW,GAAG,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;YAAE,UAAU,CAAC,MAAM,EAAE,CAAC;QAC5F,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,6DAA6D;QACxF,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACtE,mFAAmF;YACnF,mFAAmF;YACnF,oCAAoC;YACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ;YAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,gDAAgD;IAC9F,CAAC,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,qBAAqB,CAAC;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAC3C,uFAAuF;QACvF,yFAAyF;QACzF,yFAAyF;QACzF,sFAAsF;QACtF,yBAAyB;QACzB,IAAI,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,UAAU,CAAC,MAAM,EAAE,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC;YACf,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,UAAU,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,kEAAkE;QAC7F,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,IAAI,OAAO,EAAE,CAAC;YAClC,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,UAAU,CAAC,KAAK,EAAE;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,kEAAkE;QACzF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,0FAA0F;IAC1F,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE;QAC7B,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,oFAAoF;YACpF,mFAAmF;YACnF,MAAM,IAAI,EAAE,CAAC,CAAC,2CAA2C;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yFAAyF;YACzF,kFAAkF;YAClF,4FAA4F;YAC5F,0FAA0F;YAC1F,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1B,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,eAAe,GAAG,IAAI,CAAC;YACvB,YAAY,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,EAC9D,OAAO,CAAC,SAAS,CAClB,CAAC;YACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,2DAA2D;QAC9E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,uEAAuE;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,6FAA6F;YAC7F,yFAAyF;YACzF,8FAA8F;YAC9F,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YAC9B,IAAI,QAAQ;gBAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,UAAU,CAAC,OAAO,EAAE,CAAC;YACrB,eAAe,GAAG,IAAI,CAAC;YACvB,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;AAC1E,CAAC"}

package/dist/core/start-or-resume.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Shared try-resume-else-start policy for adapter entry points.
+ * Implements PRD §5.2, §5.6, and C-API-26.
+ */
+export type StartOrResumeResult<S> = {
+    readonly session: S;
+    readonly resumed: boolean;
+};
+export declare function startOrResume<S>(elwoodSessionId: string | undefined, resume: (elwoodSessionId: string) => Promise<S>, start: () => Promise<S>): Promise<StartOrResumeResult<S>>;
+//# sourceMappingURL=start-or-resume.d.ts.map

package/dist/core/start-or-resume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-or-resume.d.ts","sourceRoot":"","sources":["../../src/core/start-or-resume.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,MAAM,mBAAmB,CAAC,CAAC,IAAI;IACnC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,CAAC;AASF,wBAAsB,aAAa,CAAC,CAAC,EACnC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,MAAM,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,EAC/C,KAAK,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CASjC"}

package/dist/core/start-or-resume.js

@@ -0,0 +1,24 @@
+/**
+ * Shared try-resume-else-start policy for adapter entry points.
+ * Implements PRD §5.2, §5.6, and C-API-26.
+ */
+import { ElwoodError } from "./errors.js";
+/** Error names that mean "no resumable session exists" rather than failure. */
+const fallbackCodes = new Set([
+    "state_not_found",
+    "resume_unavailable",
+    "adapter_mismatch",
+]);
+export async function startOrResume(elwoodSessionId, resume, start) {
+    if (elwoodSessionId !== undefined) {
+        try {
+            return { session: await resume(elwoodSessionId), resumed: true };
+        }
+        catch (error) {
+            if (!(error instanceof ElwoodError && fallbackCodes.has(error.code)))
+                throw error;
+        }
+    }
+    return { session: await start(), resumed: false };
+}
+//# sourceMappingURL=start-or-resume.js.map

package/dist/core/start-or-resume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-or-resume.js","sourceRoot":"","sources":["../../src/core/start-or-resume.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAwB,MAAM,aAAa,CAAC;AAOhE,+EAA+E;AAC/E,MAAM,aAAa,GAAiC,IAAI,GAAG,CAAC;IAC1D,iBAAiB;IACjB,oBAAoB;IACpB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,eAAmC,EACnC,MAA+C,EAC/C,KAAuB;IAEvB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACpD,CAAC"}

package/dist/core/startup/automation.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Emits activity for automated startup prompt responses.
+ * Implements PRD §5.4 and C-API-18.
+ */
+import type { ElwoodActivityEvent, ElwoodAgentKind } from "../activity/index.ts";
+import type { TrustPromptIdFor } from "../trust/prompts.ts";
+export type { TrustPromptIdFor } from "../trust/prompts.ts";
+/**
+ * The single source of truth for the non-trust startup-prompt labels, keyed by
+ * owning agent: the browser-tools onboarding decline is Claude-only (C-CLAUDE-11)
+ * and the skip-update prompt is Codex-only (C-CODEX-12). Every non-trust union
+ * and the runtime label set below are DERIVED from this table, so they cannot
+ * drift from each other or from the §5.4 label contract. Adding an agent's label
+ * here automatically extends both the type and the validator.
+ */
+declare const nonTrustStartupLabels: {
+    readonly claude: readonly ["browser_tools"];
+    readonly codex: readonly ["update"];
+};
+/**
+ * The non-trust startup-prompt labels for one agent, derived from the table so
+ * each impossible pairing (Claude + `update`, Codex + `browser_tools`) stays
+ * unrepresentable, matching the §5.4 label table exactly.
+ */
+type NonTrustStartupLabel<A extends ElwoodAgentKind> = (typeof nonTrustStartupLabels)[A][number];
+/**
+ * Every startup-prompt label for one agent: its own allowlisted trust ids plus
+ * its own non-trust prompts. Matches the PRD's exact per-agent label contract
+ * (§5.4) so a second implementation and this type can never drift.
+ */
+export type StartupPromptLabelFor<A extends ElwoodAgentKind> = TrustPromptIdFor<A> | NonTrustStartupLabel<A>;
+/**
+ * The outcome of handling a startup prompt for agent `A`, discriminated so the
+ * two states cannot be confused: an `answered` prompt ALWAYS carries the `input`
+ * sent and is labeled with any of the agent's startup labels, while an
+ * `option_pending` prompt (recognized allowlisted trust prompt whose affirmative
+ * option has not rendered yet — a TRANSIENT render delay, C-CLAUDE-14) NEVER
+ * carries an input and is limited to the agent's TRUST ids (a non-trust prompt
+ * like `browser_tools`/`update` is never "recognized but option-pending"). Both
+ * correlate the label to `A`, so an off-agent or impossible label does not compile.
+ */
+export type StartupPromptOutcome<A extends ElwoodAgentKind = ElwoodAgentKind> = {
+    readonly kind: "answered";
+    readonly prompt: StartupPromptLabelFor<A>;
+    readonly input: string;
+} | {
+    readonly kind: "option_pending";
+    readonly prompt: TrustPromptIdFor<A>;
+};
+export type StartupActivityEmitter = {
+    emit(event: "activity", payload: ElwoodActivityEvent): void;
+};
+export declare function emitStartupPromptActivity<A extends ElwoodAgentKind>(emitter: StartupActivityEmitter, agent: A, elwoodSessionId: string, automation: StartupPromptOutcome<A>): void;
+//# sourceMappingURL=automation.d.ts.map

package/dist/core/startup/automation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.d.ts","sourceRoot":"","sources":["../../../src/core/startup/automation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;GAOG;AACH,QAAA,MAAM,qBAAqB;;;CAGoC,CAAC;AAEhE;;;;GAIG;AACH,KAAK,oBAAoB,CAAC,CAAC,SAAS,eAAe,IAAI,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjG;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,IACvD,gBAAgB,CAAC,CAAC,CAAC,GACnB,oBAAoB,CAAC,CAAC,CAAC,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IACxE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,CAAC;AAE9E,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC7D,CAAC;AA2BF,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,eAAe,EACjE,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,CAAC,EACR,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAClC,IAAI,CAEN"}

package/dist/core/startup/automation.js

@@ -0,0 +1,40 @@
+/**
+ * Emits activity for automated startup prompt responses.
+ * Implements PRD §5.4 and C-API-18.
+ */
+/**
+ * The single source of truth for the non-trust startup-prompt labels, keyed by
+ * owning agent: the browser-tools onboarding decline is Claude-only (C-CLAUDE-11)
+ * and the skip-update prompt is Codex-only (C-CODEX-12). Every non-trust union
+ * and the runtime label set below are DERIVED from this table, so they cannot
+ * drift from each other or from the §5.4 label contract. Adding an agent's label
+ * here automatically extends both the type and the validator.
+ */
+const nonTrustStartupLabels = {
+    claude: ["browser_tools"],
+    codex: ["update"],
+};
+function activityFromStartupPrompt(agent, elwoodSessionId, automation) {
+    if (automation.kind === "option_pending") {
+        return {
+            elwoodSessionId,
+            agent,
+            source: "terminal",
+            kind: "attention",
+            label: automation.prompt,
+            text: `Recognized ${agent} ${automation.prompt} prompt; affirmative option not rendered yet, awaiting a later frame.`,
+        };
+    }
+    return {
+        elwoodSessionId,
+        agent,
+        source: "terminal",
+        kind: "startup_prompt",
+        label: automation.prompt,
+        text: `Detected ${agent} ${automation.prompt} prompt; sent ${automation.input}.`,
+    };
+}
+export function emitStartupPromptActivity(emitter, agent, elwoodSessionId, automation) {
+    emitter.emit("activity", activityFromStartupPrompt(agent, elwoodSessionId, automation));
+}
+//# sourceMappingURL=automation.js.map

package/dist/core/startup/automation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.js","sourceRoot":"","sources":["../../../src/core/startup/automation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,KAAK,EAAE,CAAC,QAAQ,CAAC;CAC4C,CAAC;AAoChE,SAAS,yBAAyB,CAChC,KAAQ,EACR,eAAuB,EACvB,UAAmC;IAEnC,IAAI,UAAU,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACzC,OAAO;YACL,eAAe;YACf,KAAK;YACL,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,IAAI,EAAE,cAAc,KAAK,IAAI,UAAU,CAAC,MAAM,uEAAuE;SACtH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,eAAe;QACf,KAAK;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,UAAU,CAAC,MAAM;QACxB,IAAI,EAAE,YAAY,KAAK,IAAI,UAAU,CAAC,MAAM,iBAAiB,UAAU,CAAC,KAAK,GAAG;KACjF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAA+B,EAC/B,KAAQ,EACR,eAAuB,EACvB,UAAmC;IAEnC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/core/startup/frame.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Shared startup-frame helpers keeping telemetry off the critical frame path.
+ * Implements PRD §5.7/§9.1 (C-API-14, C-API-37): a warning is TELEMETRY and must
+ * never control session progress. On the hot terminal-frame callback a throwing
+ * `warning`/`activity` listener must not skip the rest of the frame (readiness
+ * detection, prompt automation, login/attention detection, `terminal:data`), and the
+ * preflight/version warning must reach a caller that subscribes in the same turn it
+ * receives the session — so it is delivered on a deferred macrotask AFTER start
+ * resolves, not on an early startup frame a caller cannot yet observe.
+ */
+import type { ElwoodWarningEvent } from "../types.ts";
+/** A session's live warning sink (emits a batch as `warning` + `activity`). */
+export type FrameWarningSink = {
+    readonly emitWarnings: (warnings: readonly ElwoodWarningEvent[]) => void;
+};
+/**
+ * Delivers `warnings` through `sink` but CONTAINS a throwing listener so frame
+ * processing continues. Warnings are live-only: a contained throw drops the warning
+ * (it is not retried), exactly as a human's terminal does not re-show a flashed banner.
+ */
+export declare function deliverFrameWarnings(sink: FrameWarningSink | undefined, warnings: readonly ElwoodWarningEvent[]): void;
+/**
+ * A buffer-then-live warning sink for the STARTUP region. Warnings emitted BEFORE the
+ * caller can subscribe (during the pre-return startup gate — MCP/transcript/preflight
+ * diagnostics) are BUFFERED, then flushed on a deferred macrotask AFTER start resolves,
+ * so a caller attaching a `warning` listener in the same turn it receives the session
+ * still observes them (C-API-14) — WITHOUT restoring general late-subscriber replay.
+ * Once opened, delivery is live pass-through. Every observed startup warning is
+ * delivered: PRD §5.7/C-API-14 defines no overflow exception, and the buffer drains one
+ * macrotask after start resolves, so it is inherently short-lived (the finite set of
+ * startup diagnostics), not an unbounded queue — a silent cap could drop the guaranteed
+ * `version_unparseable` warning. A macrotask (not a microtask) is required: a microtask
+ * runs before the caller's post-`await` continuation, so it would fire into no listener.
+ */
+export declare function createStartupWarningGate(sink: FrameWarningSink): {
+    readonly emitWarnings: (warnings: readonly ElwoodWarningEvent[]) => void;
+    readonly openAfterReturn: () => void;
+};
+//# sourceMappingURL=frame.d.ts.map

package/dist/core/startup/frame.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame.d.ts","sourceRoot":"","sources":["../../../src/core/startup/frame.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,KAAK,IAAI,CAAC;CAC1E,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,gBAAgB,GAAG,SAAS,EAClC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GACtC,IAAI,CAQN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,gBAAgB,GAAG;IAChE,QAAQ,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,KAAK,IAAI,CAAC;IACzE,QAAQ,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC;CACtC,CAiBA"}

package/dist/core/startup/frame.js

@@ -0,0 +1,60 @@
+/**
+ * Shared startup-frame helpers keeping telemetry off the critical frame path.
+ * Implements PRD §5.7/§9.1 (C-API-14, C-API-37): a warning is TELEMETRY and must
+ * never control session progress. On the hot terminal-frame callback a throwing
+ * `warning`/`activity` listener must not skip the rest of the frame (readiness
+ * detection, prompt automation, login/attention detection, `terminal:data`), and the
+ * preflight/version warning must reach a caller that subscribes in the same turn it
+ * receives the session — so it is delivered on a deferred macrotask AFTER start
+ * resolves, not on an early startup frame a caller cannot yet observe.
+ */
+/**
+ * Delivers `warnings` through `sink` but CONTAINS a throwing listener so frame
+ * processing continues. Warnings are live-only: a contained throw drops the warning
+ * (it is not retried), exactly as a human's terminal does not re-show a flashed banner.
+ */
+export function deliverFrameWarnings(sink, warnings) {
+    if (!sink || warnings.length === 0)
+        return;
+    try {
+        sink.emitWarnings(warnings);
+    }
+    catch {
+        // Telemetry must not wedge the frame: a throwing listener is contained here so
+        // readiness, prompt automation, login detection, and terminal:data still run.
+    }
+}
+/**
+ * A buffer-then-live warning sink for the STARTUP region. Warnings emitted BEFORE the
+ * caller can subscribe (during the pre-return startup gate — MCP/transcript/preflight
+ * diagnostics) are BUFFERED, then flushed on a deferred macrotask AFTER start resolves,
+ * so a caller attaching a `warning` listener in the same turn it receives the session
+ * still observes them (C-API-14) — WITHOUT restoring general late-subscriber replay.
+ * Once opened, delivery is live pass-through. Every observed startup warning is
+ * delivered: PRD §5.7/C-API-14 defines no overflow exception, and the buffer drains one
+ * macrotask after start resolves, so it is inherently short-lived (the finite set of
+ * startup diagnostics), not an unbounded queue — a silent cap could drop the guaranteed
+ * `version_unparseable` warning. A macrotask (not a microtask) is required: a microtask
+ * runs before the caller's post-`await` continuation, so it would fire into no listener.
+ */
+export function createStartupWarningGate(sink) {
+    let open = false;
+    const buffered = [];
+    return {
+        emitWarnings: (warnings) => {
+            if (open)
+                return deliverFrameWarnings(sink, warnings);
+            buffered.push(...warnings);
+        },
+        openAfterReturn: () => {
+            const timer = setTimeout(() => {
+                open = true; // subsequent startup-frame warnings deliver live from here on
+                const batch = buffered.splice(0);
+                if (batch.length > 0)
+                    deliverFrameWarnings(sink, batch);
+            }, 0);
+            timer.unref?.();
+        },
+    };
+}
+//# sourceMappingURL=frame.js.map

package/dist/core/startup/frame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame.js","sourceRoot":"","sources":["../../../src/core/startup/frame.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAkC,EAClC,QAAuC;IAEvC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC3C,IAAI,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAsB;IAI7D,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,OAAO;QACL,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE;YACzB,IAAI,IAAI;gBAAE,OAAO,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC7B,CAAC;QACD,eAAe,EAAE,GAAG,EAAE;YACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,GAAG,IAAI,CAAC,CAAC,8DAA8D;gBAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1D,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/startup/write.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Completion-aware settlement for automated startup-prompt PTY writes.
+ * Implements PRD §5.1, §5.4, and §5.7: a startup prompt is marked answered (its
+ * `startup_prompt` activity emitted) ONLY after its `sendInput` write actually
+ * fulfills. A rejected write leaves the prompt retryable and surfaces a bounded,
+ * content-free `startup_prompt_write_failed` warning instead of false telemetry
+ * (C-CLAUDE-16, C-CODEX-17).
+ */
+import type { ElwoodAgentKind } from "../activity/index.ts";
+import type { ElwoodWarningEvent } from "../warnings/index.ts";
+import type { TrustPromptIdFor } from "./automation.ts";
+import { type StartupActivityEmitter, type StartupPromptLabelFor } from "./automation.ts";
+/**
+ * A settled startup-prompt automation, discriminated by `outcome.kind` so the
+ * invalid pairings are unrepresentable: an `answered` outcome ALWAYS carries the
+ * write-completion `settled` promise (resolves on write success, rejects — after
+ * the responder un-settles the prompt — on a rejected write), and an
+ * `option_pending` outcome (no write happened) NEVER carries one. This makes a
+ * false success ("answered" with no write to await) and a silently lost warning
+ * (write present on a non-answered outcome) impossible to construct (§5.4, §5.7).
+ */
+export type SettledStartupOutcome<A extends ElwoodAgentKind> = {
+    readonly outcome: {
+        readonly kind: "answered";
+        readonly prompt: StartupPromptLabelFor<A>;
+        readonly input: string;
+    };
+    readonly settled: Promise<void>;
+} | {
+    readonly outcome: {
+        readonly kind: "option_pending";
+        readonly prompt: TrustPromptIdFor<A>;
+    };
+    readonly settled?: undefined;
+};
+/** Where a rejected startup-prompt write is reported. */
+export type StartupWarningSink = {
+    emitWarnings(warnings: readonly ElwoodWarningEvent[]): void;
+};
+/**
+ * Emit each settled automation's activity at the RIGHT time: an `option_pending`
+ * or write-less outcome emits immediately; a write-backed `answered` outcome emits
+ * its `startup_prompt` activity only once the write resolves, and on rejection
+ * emits a bounded warning instead — never a false "answered" activity.
+ */
+export declare function emitSettledStartupOutcomes<A extends ElwoodAgentKind>(emitter: StartupActivityEmitter, agent: A, elwoodSessionId: string, settledOutcomes: readonly SettledStartupOutcome<NoInfer<A>>[], warnings: StartupWarningSink | undefined): void;
+//# sourceMappingURL=write.d.ts.map

package/dist/core/startup/write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../src/core/startup/write.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAA4B,MAAM,sBAAsB,CAAC;AACzF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAE3B,MAAM,iBAAiB,CAAC;AAEzB;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,IACvD;IACE,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC;IAC5F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;CAC9B,CAAC;AAEN,yDAAyD;AACzD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI,CAAC;CAC7D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,eAAe,EAClE,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,CAAC,EACR,eAAe,EAAE,MAAM,EAIvB,eAAe,EAAE,SAAS,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAC7D,QAAQ,EAAE,kBAAkB,GAAG,SAAS,GACvC,IAAI,CAgCN"}

package/dist/core/startup/write.js

@@ -0,0 +1,73 @@
+/**
+ * Completion-aware settlement for automated startup-prompt PTY writes.
+ * Implements PRD §5.1, §5.4, and §5.7: a startup prompt is marked answered (its
+ * `startup_prompt` activity emitted) ONLY after its `sendInput` write actually
+ * fulfills. A rejected write leaves the prompt retryable and surfaces a bounded,
+ * content-free `startup_prompt_write_failed` warning instead of false telemetry
+ * (C-CLAUDE-16, C-CODEX-17).
+ */
+import { emitStartupPromptActivity, } from "./automation.js";
+/**
+ * Emit each settled automation's activity at the RIGHT time: an `option_pending`
+ * or write-less outcome emits immediately; a write-backed `answered` outcome emits
+ * its `startup_prompt` activity only once the write resolves, and on rejection
+ * emits a bounded warning instead — never a false "answered" activity.
+ */
+export function emitSettledStartupOutcomes(emitter, agent, elwoodSessionId, 
+// `NoInfer` blocks inference of `A` from the outcomes, so `A` is pinned by the
+// `agent` argument alone. Passing Codex outcomes with `agent: "claude"` no
+// longer widens `A` to the union and cannot construct a cross-agent warning.
+settledOutcomes, warnings) {
+    for (const settledOutcome of settledOutcomes) {
+        if (settledOutcome.settled === undefined) {
+            // An `option_pending` outcome: no write happened, so there is nothing to
+            // await — emit its attention activity immediately. The discriminated union
+            // guarantees this branch is only ever `option_pending`. CONTAIN a throwing
+            // activity listener exactly as the promise-backed branch does: this runs on the
+            // hot startup frame, so an escaping throw would skip the rest of the frame
+            // (readiness/blocking observation, `terminal:data`) and could let an already-armed
+            // readiness deadline drain queued input into an unlatched dialog (C-API-28).
+            try {
+                emitStartupPromptActivity(emitter, agent, elwoodSessionId, settledOutcome.outcome);
+            }
+            catch {
+                // Telemetry must not wedge the frame; the activity is dropped (live-only).
+            }
+            continue;
+        }
+        // An `answered` outcome always carries the write-completion promise: its
+        // activity is emitted only once the write fulfills, and a rejected write
+        // surfaces a bounded warning instead of a false "answered" activity.
+        const { outcome, settled } = settledOutcome;
+        // A terminal `.catch` OWNS the derived promise: both continuations call public
+        // event paths that can throw (activity emission rethrows listener failures;
+        // warning recording can fail), and a floated rejection would be an unhandled
+        // rejection that can terminate the host during startup. Swallow it here.
+        settled
+            .then(() => emitStartupPromptActivity(emitter, agent, elwoodSessionId, outcome), () => warnings?.emitWarnings([writeFailedWarning(agent, elwoodSessionId, outcome)]))
+            .catch(() => undefined);
+    }
+}
+// `agent` and `outcome` are always the SAME concrete `A` here — the caller
+// (`emitSettledStartupOutcomes`) already pins `A` via NoInfer, so this internal
+// helper needs no extra guard and its correlation is enforced by construction.
+function writeFailedWarning(agent, elwoodSessionId, outcome) {
+    // `outcome.prompt` is already the agent-correlated label, so no cast discards
+    // the correlation: an off-agent (label, agent) pairing cannot be constructed.
+    const label = outcome.prompt;
+    const warning = {
+        elwoodSessionId,
+        agent,
+        source: "terminal",
+        code: "startup_prompt_write_failed",
+        severity: "warning",
+        message: `Startup prompt ${label} could not be answered: PTY write was rejected; leaving it retryable.`,
+        label,
+        raw: `startup_prompt_write_failed label=${label}`,
+    };
+    // A concrete `StartupPromptWriteFailed<"claude"|"codex">` IS an ElwoodWarningEvent
+    // member; the widening bridges TS's generic-union assignability gap only (the
+    // agent/label correlation above is already enforced at construction).
+    return warning;
+}
+//# sourceMappingURL=write.js.map

package/dist/core/startup/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../../src/core/startup/write.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EACL,yBAAyB,GAI1B,MAAM,iBAAiB,CAAC;AA8BzB;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA+B,EAC/B,KAAQ,EACR,eAAuB;AACvB,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,eAA6D,EAC7D,QAAwC;IAExC,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACzC,yEAAyE;YACzE,2EAA2E;YAC3E,2EAA2E;YAC3E,gFAAgF;YAChF,2EAA2E;YAC3E,mFAAmF;YACnF,6EAA6E;YAC7E,IAAI,CAAC;gBACH,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;YAC7E,CAAC;YACD,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;QAC5C,+EAA+E;QAC/E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,OAAO;aACJ,IAAI,CACH,GAAG,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EACzE,GAAG,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CACpF;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,gFAAgF;AAChF,+EAA+E;AAC/E,SAAS,kBAAkB,CACzB,KAAQ,EACR,eAAuB,EACvB,OAAgC;IAEhC,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAgC;QAC3C,eAAe;QACf,KAAK;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,kBAAkB,KAAK,uEAAuE;QACvG,KAAK;QACL,GAAG,EAAE,qCAAqC,KAAK,EAAE;KAClD,CAAC;IACF,mFAAmF;IACnF,8EAA8E;IAC9E,sEAAsE;IACtE,OAAO,OAA6B,CAAC;AACvC,CAAC"}

package/dist/core/startup-automation.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Emits activity for automated startup prompt responses.
+ * Implements PRD §5.4 and C-API-18.
+ */
+import type { ElwoodActivityEvent, ElwoodAgentKind } from "./activity.ts";
+import type { TrustPromptIdFor } from "./trust-prompts.ts";
+export type { TrustPromptIdFor } from "./trust-prompts.ts";
+/**
+ * The single source of truth for the non-trust startup-prompt labels, keyed by
+ * owning agent: the browser-tools onboarding decline is Claude-only (C-CLAUDE-11)
+ * and the skip-update prompt is Codex-only (C-CODEX-12). Every non-trust union
+ * and the runtime label set below are DERIVED from this table, so they cannot
+ * drift from each other or from the §5.4 label contract. Adding an agent's label
+ * here automatically extends both the type and the validator.
+ */
+declare const nonTrustStartupLabels: {
+    readonly claude: readonly ["browser_tools"];
+    readonly codex: readonly ["update"];
+};
+/**
+ * The non-trust startup-prompt labels for one agent, derived from the table so
+ * each impossible pairing (Claude + `update`, Codex + `browser_tools`) stays
+ * unrepresentable, matching the §5.4 label table exactly.
+ */
+type NonTrustStartupLabel<A extends ElwoodAgentKind> = (typeof nonTrustStartupLabels)[A][number];
+/**
+ * Every startup-prompt label for one agent: its own allowlisted trust ids plus
+ * its own non-trust prompts. Matches the PRD's exact per-agent label contract
+ * (§5.4) so a second implementation and this type can never drift.
+ */
+export type StartupPromptLabelFor<A extends ElwoodAgentKind> = TrustPromptIdFor<A> | NonTrustStartupLabel<A>;
+/**
+ * The outcome of handling a startup prompt for agent `A`, discriminated so the
+ * two states cannot be confused: an `answered` prompt ALWAYS carries the `input`
+ * sent and is labeled with any of the agent's startup labels, while an
+ * `option_pending` prompt (recognized allowlisted trust prompt whose affirmative
+ * option has not rendered yet — a TRANSIENT render delay, C-CLAUDE-14) NEVER
+ * carries an input and is limited to the agent's TRUST ids (a non-trust prompt
+ * like `browser_tools`/`update` is never "recognized but option-pending"). Both
+ * correlate the label to `A`, so an off-agent or impossible label does not compile.
+ */
+export type StartupPromptOutcome<A extends ElwoodAgentKind = ElwoodAgentKind> = {
+    readonly kind: "answered";
+    readonly prompt: StartupPromptLabelFor<A>;
+    readonly input: string;
+} | {
+    readonly kind: "option_pending";
+    readonly prompt: TrustPromptIdFor<A>;
+};
+export type StartupActivityEmitter = {
+    emit(event: "activity", payload: ElwoodActivityEvent): void;
+};
+export declare function emitStartupPromptActivity<A extends ElwoodAgentKind>(emitter: StartupActivityEmitter, agent: A, elwoodSessionId: string, automation: StartupPromptOutcome<A>): void;
+//# sourceMappingURL=startup-automation.d.ts.map

package/dist/core/startup-automation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-automation.d.ts","sourceRoot":"","sources":["../../src/core/startup-automation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;GAOG;AACH,QAAA,MAAM,qBAAqB;;;CAGoC,CAAC;AAEhE;;;;GAIG;AACH,KAAK,oBAAoB,CAAC,CAAC,SAAS,eAAe,IAAI,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjG;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,IACvD,gBAAgB,CAAC,CAAC,CAAC,GACnB,oBAAoB,CAAC,CAAC,CAAC,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IACxE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,CAAC;AAE9E,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC7D,CAAC;AA2BF,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,eAAe,EACjE,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,CAAC,EACR,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAClC,IAAI,CAEN"}