@with-logic/elwood 0.1.0

package/dist/core/startup-automation.js

@@ -0,0 +1,40 @@
+/**
+ * Emits activity for automated startup prompt responses.
+ * Implements PRD §5.4 and C-API-18.
+ */
+/**
+ * The single source of truth for the non-trust startup-prompt labels, keyed by
+ * owning agent: the browser-tools onboarding decline is Claude-only (C-CLAUDE-11)
+ * and the skip-update prompt is Codex-only (C-CODEX-12). Every non-trust union
+ * and the runtime label set below are DERIVED from this table, so they cannot
+ * drift from each other or from the §5.4 label contract. Adding an agent's label
+ * here automatically extends both the type and the validator.
+ */
+const nonTrustStartupLabels = {
+    claude: ["browser_tools"],
+    codex: ["update"],
+};
+function activityFromStartupPrompt(agent, elwoodSessionId, automation) {
+    if (automation.kind === "option_pending") {
+        return {
+            elwoodSessionId,
+            agent,
+            source: "terminal",
+            kind: "attention",
+            label: automation.prompt,
+            text: `Recognized ${agent} ${automation.prompt} prompt; affirmative option not rendered yet, awaiting a later frame.`,
+        };
+    }
+    return {
+        elwoodSessionId,
+        agent,
+        source: "terminal",
+        kind: "startup_prompt",
+        label: automation.prompt,
+        text: `Detected ${agent} ${automation.prompt} prompt; sent ${automation.input}.`,
+    };
+}
+export function emitStartupPromptActivity(emitter, agent, elwoodSessionId, automation) {
+    emitter.emit("activity", activityFromStartupPrompt(agent, elwoodSessionId, automation));
+}
+//# sourceMappingURL=startup-automation.js.map

package/dist/core/startup-automation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-automation.js","sourceRoot":"","sources":["../../src/core/startup-automation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,KAAK,EAAE,CAAC,QAAQ,CAAC;CAC4C,CAAC;AAoChE,SAAS,yBAAyB,CAChC,KAAQ,EACR,eAAuB,EACvB,UAAmC;IAEnC,IAAI,UAAU,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACzC,OAAO;YACL,eAAe;YACf,KAAK;YACL,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,IAAI,EAAE,cAAc,KAAK,IAAI,UAAU,CAAC,MAAM,uEAAuE;SACtH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,eAAe;QACf,KAAK;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,UAAU,CAAC,MAAM;QACxB,IAAI,EAAE,YAAY,KAAK,IAAI,UAAU,CAAC,MAAM,iBAAiB,UAAU,CAAC,KAAK,GAAG;KACjF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAA+B,EAC/B,KAAQ,EACR,eAAuB,EACvB,UAAmC;IAEnC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/core/startup-frame.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Shared startup-frame helpers keeping telemetry off the critical frame path.
+ * Implements PRD §5.7/§9.1 (C-API-14, C-API-37): a warning is TELEMETRY and must
+ * never control session progress. On the hot terminal-frame callback a throwing
+ * `warning`/`activity` listener must not skip the rest of the frame (readiness
+ * detection, prompt automation, login/attention detection, `terminal:data`), and the
+ * preflight/version warning must reach a caller that subscribes in the same turn it
+ * receives the session — so it is delivered on a deferred macrotask AFTER start
+ * resolves, not on an early startup frame a caller cannot yet observe.
+ */
+import type { ElwoodWarningEvent } from "./types.ts";
+/** A session's live warning sink (emits a batch as `warning` + `activity`). */
+export type FrameWarningSink = {
+    readonly emitWarnings: (warnings: readonly ElwoodWarningEvent[]) => void;
+};
+/**
+ * Delivers `warnings` through `sink` but CONTAINS a throwing listener so frame
+ * processing continues. Warnings are live-only: a contained throw drops the warning
+ * (it is not retried), exactly as a human's terminal does not re-show a flashed banner.
+ */
+export declare function deliverFrameWarnings(sink: FrameWarningSink | undefined, warnings: readonly ElwoodWarningEvent[]): void;
+/**
+ * A buffer-then-live warning sink for the STARTUP region. Warnings emitted BEFORE the
+ * caller can subscribe (during the pre-return startup gate — MCP/transcript/preflight
+ * diagnostics) are BUFFERED, then flushed on a deferred macrotask AFTER start resolves,
+ * so a caller attaching a `warning` listener in the same turn it receives the session
+ * still observes them (C-API-14) — WITHOUT restoring general late-subscriber replay.
+ * Once opened, delivery is live pass-through. Every observed startup warning is
+ * delivered: PRD §5.7/C-API-14 defines no overflow exception, and the buffer drains one
+ * macrotask after start resolves, so it is inherently short-lived (the finite set of
+ * startup diagnostics), not an unbounded queue — a silent cap could drop the guaranteed
+ * `version_unparseable` warning. A macrotask (not a microtask) is required: a microtask
+ * runs before the caller's post-`await` continuation, so it would fire into no listener.
+ */
+export declare function createStartupWarningGate(sink: FrameWarningSink): {
+    readonly emitWarnings: (warnings: readonly ElwoodWarningEvent[]) => void;
+    readonly openAfterReturn: () => void;
+};
+//# sourceMappingURL=startup-frame.d.ts.map

package/dist/core/startup-frame.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-frame.d.ts","sourceRoot":"","sources":["../../src/core/startup-frame.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,KAAK,IAAI,CAAC;CAC1E,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,gBAAgB,GAAG,SAAS,EAClC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GACtC,IAAI,CAQN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,gBAAgB,GAAG;IAChE,QAAQ,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,KAAK,IAAI,CAAC;IACzE,QAAQ,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC;CACtC,CAiBA"}

package/dist/core/startup-frame.js

@@ -0,0 +1,60 @@
+/**
+ * Shared startup-frame helpers keeping telemetry off the critical frame path.
+ * Implements PRD §5.7/§9.1 (C-API-14, C-API-37): a warning is TELEMETRY and must
+ * never control session progress. On the hot terminal-frame callback a throwing
+ * `warning`/`activity` listener must not skip the rest of the frame (readiness
+ * detection, prompt automation, login/attention detection, `terminal:data`), and the
+ * preflight/version warning must reach a caller that subscribes in the same turn it
+ * receives the session — so it is delivered on a deferred macrotask AFTER start
+ * resolves, not on an early startup frame a caller cannot yet observe.
+ */
+/**
+ * Delivers `warnings` through `sink` but CONTAINS a throwing listener so frame
+ * processing continues. Warnings are live-only: a contained throw drops the warning
+ * (it is not retried), exactly as a human's terminal does not re-show a flashed banner.
+ */
+export function deliverFrameWarnings(sink, warnings) {
+    if (!sink || warnings.length === 0)
+        return;
+    try {
+        sink.emitWarnings(warnings);
+    }
+    catch {
+        // Telemetry must not wedge the frame: a throwing listener is contained here so
+        // readiness, prompt automation, login detection, and terminal:data still run.
+    }
+}
+/**
+ * A buffer-then-live warning sink for the STARTUP region. Warnings emitted BEFORE the
+ * caller can subscribe (during the pre-return startup gate — MCP/transcript/preflight
+ * diagnostics) are BUFFERED, then flushed on a deferred macrotask AFTER start resolves,
+ * so a caller attaching a `warning` listener in the same turn it receives the session
+ * still observes them (C-API-14) — WITHOUT restoring general late-subscriber replay.
+ * Once opened, delivery is live pass-through. Every observed startup warning is
+ * delivered: PRD §5.7/C-API-14 defines no overflow exception, and the buffer drains one
+ * macrotask after start resolves, so it is inherently short-lived (the finite set of
+ * startup diagnostics), not an unbounded queue — a silent cap could drop the guaranteed
+ * `version_unparseable` warning. A macrotask (not a microtask) is required: a microtask
+ * runs before the caller's post-`await` continuation, so it would fire into no listener.
+ */
+export function createStartupWarningGate(sink) {
+    let open = false;
+    const buffered = [];
+    return {
+        emitWarnings: (warnings) => {
+            if (open)
+                return deliverFrameWarnings(sink, warnings);
+            buffered.push(...warnings);
+        },
+        openAfterReturn: () => {
+            const timer = setTimeout(() => {
+                open = true; // subsequent startup-frame warnings deliver live from here on
+                const batch = buffered.splice(0);
+                if (batch.length > 0)
+                    deliverFrameWarnings(sink, batch);
+            }, 0);
+            timer.unref?.();
+        },
+    };
+}
+//# sourceMappingURL=startup-frame.js.map

package/dist/core/startup-frame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-frame.js","sourceRoot":"","sources":["../../src/core/startup-frame.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAkC,EAClC,QAAuC;IAEvC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC3C,IAAI,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAsB;IAI7D,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,OAAO;QACL,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE;YACzB,IAAI,IAAI;gBAAE,OAAO,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC7B,CAAC;QACD,eAAe,EAAE,GAAG,EAAE;YACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,GAAG,IAAI,CAAC,CAAC,8DAA8D;gBAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1D,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/startup-write.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Completion-aware settlement for automated startup-prompt PTY writes.
+ * Implements PRD §5.1, §5.4, and §5.7: a startup prompt is marked answered (its
+ * `startup_prompt` activity emitted) ONLY after its `sendInput` write actually
+ * fulfills. A rejected write leaves the prompt retryable and surfaces a bounded,
+ * content-free `startup_prompt_write_failed` warning instead of false telemetry
+ * (C-CLAUDE-16, C-CODEX-17).
+ */
+import type { ElwoodAgentKind } from "./activity.ts";
+import type { TrustPromptIdFor } from "./startup-automation.ts";
+import { type StartupActivityEmitter, type StartupPromptLabelFor } from "./startup-automation.ts";
+import type { ElwoodWarningEvent } from "./warnings.ts";
+/**
+ * A settled startup-prompt automation, discriminated by `outcome.kind` so the
+ * invalid pairings are unrepresentable: an `answered` outcome ALWAYS carries the
+ * write-completion `settled` promise (resolves on write success, rejects — after
+ * the responder un-settles the prompt — on a rejected write), and an
+ * `option_pending` outcome (no write happened) NEVER carries one. This makes a
+ * false success ("answered" with no write to await) and a silently lost warning
+ * (write present on a non-answered outcome) impossible to construct (§5.4, §5.7).
+ */
+export type SettledStartupOutcome<A extends ElwoodAgentKind> = {
+    readonly outcome: {
+        readonly kind: "answered";
+        readonly prompt: StartupPromptLabelFor<A>;
+        readonly input: string;
+    };
+    readonly settled: Promise<void>;
+} | {
+    readonly outcome: {
+        readonly kind: "option_pending";
+        readonly prompt: TrustPromptIdFor<A>;
+    };
+    readonly settled?: undefined;
+};
+/** Where a rejected startup-prompt write is reported. */
+export type StartupWarningSink = {
+    emitWarnings(warnings: readonly ElwoodWarningEvent[]): void;
+};
+/**
+ * Emit each settled automation's activity at the RIGHT time: an `option_pending`
+ * or write-less outcome emits immediately; a write-backed `answered` outcome emits
+ * its `startup_prompt` activity only once the write resolves, and on rejection
+ * emits a bounded warning instead — never a false "answered" activity.
+ */
+export declare function emitSettledStartupOutcomes<A extends ElwoodAgentKind>(emitter: StartupActivityEmitter, agent: A, elwoodSessionId: string, settledOutcomes: readonly SettledStartupOutcome<NoInfer<A>>[], warnings: StartupWarningSink | undefined): void;
+//# sourceMappingURL=startup-write.d.ts.map

package/dist/core/startup-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-write.d.ts","sourceRoot":"","sources":["../../src/core/startup-write.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAE3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,kBAAkB,EAA4B,MAAM,eAAe,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,IACvD;IACE,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC;IAC5F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;CAC9B,CAAC;AAEN,yDAAyD;AACzD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI,CAAC;CAC7D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,eAAe,EAClE,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,CAAC,EACR,eAAe,EAAE,MAAM,EAIvB,eAAe,EAAE,SAAS,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAC7D,QAAQ,EAAE,kBAAkB,GAAG,SAAS,GACvC,IAAI,CAgCN"}

package/dist/core/startup-write.js

@@ -0,0 +1,73 @@
+/**
+ * Completion-aware settlement for automated startup-prompt PTY writes.
+ * Implements PRD §5.1, §5.4, and §5.7: a startup prompt is marked answered (its
+ * `startup_prompt` activity emitted) ONLY after its `sendInput` write actually
+ * fulfills. A rejected write leaves the prompt retryable and surfaces a bounded,
+ * content-free `startup_prompt_write_failed` warning instead of false telemetry
+ * (C-CLAUDE-16, C-CODEX-17).
+ */
+import { emitStartupPromptActivity, } from "./startup-automation.js";
+/**
+ * Emit each settled automation's activity at the RIGHT time: an `option_pending`
+ * or write-less outcome emits immediately; a write-backed `answered` outcome emits
+ * its `startup_prompt` activity only once the write resolves, and on rejection
+ * emits a bounded warning instead — never a false "answered" activity.
+ */
+export function emitSettledStartupOutcomes(emitter, agent, elwoodSessionId, 
+// `NoInfer` blocks inference of `A` from the outcomes, so `A` is pinned by the
+// `agent` argument alone. Passing Codex outcomes with `agent: "claude"` no
+// longer widens `A` to the union and cannot construct a cross-agent warning.
+settledOutcomes, warnings) {
+    for (const settledOutcome of settledOutcomes) {
+        if (settledOutcome.settled === undefined) {
+            // An `option_pending` outcome: no write happened, so there is nothing to
+            // await — emit its attention activity immediately. The discriminated union
+            // guarantees this branch is only ever `option_pending`. CONTAIN a throwing
+            // activity listener exactly as the promise-backed branch does: this runs on the
+            // hot startup frame, so an escaping throw would skip the rest of the frame
+            // (readiness/blocking observation, `terminal:data`) and could let an already-armed
+            // readiness deadline drain queued input into an unlatched dialog (C-API-28).
+            try {
+                emitStartupPromptActivity(emitter, agent, elwoodSessionId, settledOutcome.outcome);
+            }
+            catch {
+                // Telemetry must not wedge the frame; the activity is dropped (live-only).
+            }
+            continue;
+        }
+        // An `answered` outcome always carries the write-completion promise: its
+        // activity is emitted only once the write fulfills, and a rejected write
+        // surfaces a bounded warning instead of a false "answered" activity.
+        const { outcome, settled } = settledOutcome;
+        // A terminal `.catch` OWNS the derived promise: both continuations call public
+        // event paths that can throw (activity emission rethrows listener failures;
+        // warning recording can fail), and a floated rejection would be an unhandled
+        // rejection that can terminate the host during startup. Swallow it here.
+        settled
+            .then(() => emitStartupPromptActivity(emitter, agent, elwoodSessionId, outcome), () => warnings?.emitWarnings([writeFailedWarning(agent, elwoodSessionId, outcome)]))
+            .catch(() => undefined);
+    }
+}
+// `agent` and `outcome` are always the SAME concrete `A` here — the caller
+// (`emitSettledStartupOutcomes`) already pins `A` via NoInfer, so this internal
+// helper needs no extra guard and its correlation is enforced by construction.
+function writeFailedWarning(agent, elwoodSessionId, outcome) {
+    // `outcome.prompt` is already the agent-correlated label, so no cast discards
+    // the correlation: an off-agent (label, agent) pairing cannot be constructed.
+    const label = outcome.prompt;
+    const warning = {
+        elwoodSessionId,
+        agent,
+        source: "terminal",
+        code: "startup_prompt_write_failed",
+        severity: "warning",
+        message: `Startup prompt ${label} could not be answered: PTY write was rejected; leaving it retryable.`,
+        label,
+        raw: `startup_prompt_write_failed label=${label}`,
+    };
+    // A concrete `StartupPromptWriteFailed<"claude"|"codex">` IS an ElwoodWarningEvent
+    // member; the widening bridges TS's generic-union assignability gap only (the
+    // agent/label correlation above is already enforced at construction).
+    return warning;
+}
+//# sourceMappingURL=startup-write.js.map

package/dist/core/startup-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-write.js","sourceRoot":"","sources":["../../src/core/startup-write.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EACL,yBAAyB,GAI1B,MAAM,yBAAyB,CAAC;AA+BjC;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA+B,EAC/B,KAAQ,EACR,eAAuB;AACvB,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,eAA6D,EAC7D,QAAwC;IAExC,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACzC,yEAAyE;YACzE,2EAA2E;YAC3E,2EAA2E;YAC3E,gFAAgF;YAChF,2EAA2E;YAC3E,mFAAmF;YACnF,6EAA6E;YAC7E,IAAI,CAAC;gBACH,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;YAC7E,CAAC;YACD,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;QAC5C,+EAA+E;QAC/E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,OAAO;aACJ,IAAI,CACH,GAAG,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EACzE,GAAG,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CACpF;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,gFAAgF;AAChF,+EAA+E;AAC/E,SAAS,kBAAkB,CACzB,KAAQ,EACR,eAAuB,EACvB,OAAgC;IAEhC,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAgC;QAC3C,eAAe;QACf,KAAK;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,kBAAkB,KAAK,uEAAuE;QACvG,KAAK;QACL,GAAG,EAAE,qCAAqC,KAAK,EAAE;KAClD,CAAC;IACF,mFAAmF;IACnF,8EAA8E;IAC9E,sEAAsE;IACtE,OAAO,OAA6B,CAAC;AACvC,CAAC"}

package/dist/core/status-categories.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Single source of truth for session-status literals and their categories.
+ * `ElwoodSessionStatus` is derived from these tuples, and the live/terminal
+ * category sets are built from the same source — so adding a status is one edit
+ * and cannot silently desync the type or lifecycle guards. Status is live-only and
+ * is never persisted (§8.2).
+ * Implements PRD §5 lifecycle guarantees.
+ */
+/** Statuses of a started, not-yet-terminated interactive session. */
+export declare const liveStatusList: readonly ["running", "ready", "blocked"];
+/** Statuses a session cannot leave under normal work (teardown may supersede). */
+export declare const terminalStatusList: readonly ["exited", "stopped", "killed", "torn_down"];
+/** The pre-live bootstrap status, before startup health has produced a live one. */
+export declare const startingStatus: "starting";
+export declare const allStatusList: readonly ["starting", "running", "ready", "blocked", "exited", "stopped", "killed", "torn_down"];
+export type ElwoodSessionStatus = (typeof allStatusList)[number];
+/** Statuses a session cannot leave under normal work; teardown may still supersede. */
+export declare const terminalStatuses: ReadonlySet<ElwoodSessionStatus>;
+/** Statuses of a started, not-yet-terminated interactive session. */
+export declare const liveStatuses: ReadonlySet<ElwoodSessionStatus>;
+//# sourceMappingURL=status-categories.d.ts.map

package/dist/core/status-categories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-categories.d.ts","sourceRoot":"","sources":["../../src/core/status-categories.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qEAAqE;AACrE,eAAO,MAAM,cAAc,0CAA2C,CAAC;AACvE,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,uDAAwD,CAAC;AACxF,oFAAoF;AACpF,eAAO,MAAM,cAAc,EAAG,UAAmB,CAAC;AAElD,eAAO,MAAM,aAAa,kGAAsE,CAAC;AAEjG,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,uFAAuF;AACvF,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,mBAAmB,CAA+B,CAAC;AAC9F,qEAAqE;AACrE,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,mBAAmB,CAA2B,CAAC"}

package/dist/core/status-categories.js

@@ -0,0 +1,20 @@
+/**
+ * Single source of truth for session-status literals and their categories.
+ * `ElwoodSessionStatus` is derived from these tuples, and the live/terminal
+ * category sets are built from the same source — so adding a status is one edit
+ * and cannot silently desync the type or lifecycle guards. Status is live-only and
+ * is never persisted (§8.2).
+ * Implements PRD §5 lifecycle guarantees.
+ */
+/** Statuses of a started, not-yet-terminated interactive session. */
+export const liveStatusList = ["running", "ready", "blocked"];
+/** Statuses a session cannot leave under normal work (teardown may supersede). */
+export const terminalStatusList = ["exited", "stopped", "killed", "torn_down"];
+/** The pre-live bootstrap status, before startup health has produced a live one. */
+export const startingStatus = "starting";
+export const allStatusList = [startingStatus, ...liveStatusList, ...terminalStatusList];
+/** Statuses a session cannot leave under normal work; teardown may still supersede. */
+export const terminalStatuses = new Set(terminalStatusList);
+/** Statuses of a started, not-yet-terminated interactive session. */
+export const liveStatuses = new Set(liveStatusList);
+//# sourceMappingURL=status-categories.js.map

package/dist/core/status-categories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-categories.js","sourceRoot":"","sources":["../../src/core/status-categories.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qEAAqE;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;AACvE,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAU,CAAC;AACxF,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,UAAmB,CAAC;AAElD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,cAAc,EAAE,GAAG,cAAc,EAAE,GAAG,kBAAkB,CAAU,CAAC;AAIjG,uFAAuF;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAqC,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC9F,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAqC,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC"}

package/dist/core/terminal-options.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Parses numbered and cursor-selected options from rendered terminal prompts,
+ * and exposes the option/non-option split that trust HEADER matching anchors on.
+ * Implements PRD §5.1/§5.5: the single option-parsing rule shared by trust-prompt
+ * automation and Codex update-prompt skipping, so a CLI format change updates
+ * both at once instead of letting them diverge. `nonOptionText` is shared by the
+ * responder and screen-fact blocking rules, so option text cannot spoof a header.
+ */
+export type NumberedOption = {
+    readonly number: string;
+    readonly label: string;
+};
+/** One answerable option, with style-specific selection data. */
+export type SelectableOption = {
+    readonly style: "numbered";
+    readonly label: string;
+    readonly number: string;
+} | {
+    readonly style: "cursor";
+    readonly label: string;
+    readonly offset: number;
+};
+/** Extracts `N. label` / `N) label` options from `text`, tolerating `›`/`>` prefixes. */
+export declare function numberedOptions(text: string): readonly NumberedOption[];
+/** Numbered and cursor-style options in screen order. */
+export declare function selectableOptions(text: string): readonly SelectableOption[];
+/** Bounded, printable selection description used in startup-prompt activity. */
+export declare function optionInput(option: SelectableOption): string;
+/** Raw PTY writes for a numbered option or cursor movement plus confirmation. */
+export declare function optionKeystrokes(option: SelectableOption): readonly string[];
+/**
+ * The frame's HEADER text: everything strictly before the first numbered option
+ * or cursor-option block. Cutting at the whole cursor block (including unselected
+ * rows above its caret) keeps option-only trust wording and wrapped continuations
+ * out of header recognition. With no option yet, the whole partial frame remains
+ * matchable so a later completed frame can still be answered.
+ */
+export declare function nonOptionText(frame: string): string;
+//# sourceMappingURL=terminal-options.d.ts.map

package/dist/core/terminal-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-options.d.ts","sourceRoot":"","sources":["../../src/core/terminal-options.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjF,iEAAiE;AACjE,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAOlF,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAKvE;AAED,yDAAyD;AACzD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAK3E;AAED,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAK5D;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,MAAM,EAAE,CAI5E;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnD"}

package/dist/core/terminal-options.js

@@ -0,0 +1,114 @@
+/**
+ * Parses numbered and cursor-selected options from rendered terminal prompts,
+ * and exposes the option/non-option split that trust HEADER matching anchors on.
+ * Implements PRD §5.1/§5.5: the single option-parsing rule shared by trust-prompt
+ * automation and Codex update-prompt skipping, so a CLI format change updates
+ * both at once instead of letting them diverge. `nonOptionText` is shared by the
+ * responder and screen-fact blocking rules, so option text cannot spoof a header.
+ */
+/** Extracts `N. label` / `N) label` options from `text`, tolerating `›`/`>` prefixes. */
+export function numberedOptions(text) {
+    return positionedNumberedOptions(text.split("\n")).map(({ number, label }) => ({
+        number,
+        label,
+    }));
+}
+/** Numbered and cursor-style options in screen order. */
+export function selectableOptions(text) {
+    const lines = text.split("\n");
+    return [...positionedNumberedOptions(lines), ...positionedCursorOptions(lines)]
+        .sort((a, b) => a.row - b.row)
+        .map(({ row: _row, ...option }) => option);
+}
+/** Bounded, printable selection description used in startup-prompt activity. */
+export function optionInput(option) {
+    if (option.style === "numbered")
+        return option.number;
+    if (option.offset === 0)
+        return "enter";
+    const direction = option.offset < 0 ? "up" : "down";
+    return `${`${direction}+`.repeat(Math.abs(option.offset))}enter`;
+}
+/** Raw PTY writes for a numbered option or cursor movement plus confirmation. */
+export function optionKeystrokes(option) {
+    if (option.style === "numbered")
+        return [`${option.number}\r`];
+    const key = option.offset < 0 ? "\u001b[A" : "\u001b[B";
+    return [...new Array(Math.abs(option.offset)).fill(key), "\r"];
+}
+/**
+ * The frame's HEADER text: everything strictly before the first numbered option
+ * or cursor-option block. Cutting at the whole cursor block (including unselected
+ * rows above its caret) keeps option-only trust wording and wrapped continuations
+ * out of header recognition. With no option yet, the whole partial frame remains
+ * matchable so a later completed frame can still be answered.
+ */
+export function nonOptionText(frame) {
+    const lines = frame.split("\n");
+    const numberedRow = firstNumberedRow(lines);
+    const cursorRow = cursorOptionBounds(lines)?.firstRow;
+    const firstOption = Math.min(numberedRow ?? lines.length, cursorRow ?? lines.length);
+    return lines.slice(0, firstOption).join(" ");
+}
+function positionedNumberedOptions(lines) {
+    return lines.flatMap((line, row) => {
+        const matches = line.matchAll(/(?:^|[\s›>])(\d+)[.)]\s*(.+?)(?=\s*\d+[.)]\s*|$)/g);
+        return [...matches].map((match) => {
+            return {
+                row,
+                style: "numbered",
+                label: match[2].trim(),
+                number: match[1],
+            };
+        });
+    });
+}
+function firstNumberedRow(lines) {
+    const pattern = /(?:^|[\s›>])\d+[.)]\s*\S/;
+    const row = lines.findIndex((line) => pattern.test(line));
+    return row < 0 ? undefined : row;
+}
+function positionedCursorOptions(lines) {
+    const bounds = cursorOptionBounds(lines);
+    if (bounds === undefined)
+        return [];
+    const { selected, selectedRow, firstRow, lastRow } = bounds;
+    return lines.slice(firstRow, lastRow + 1).map((line, index) => {
+        const row = firstRow + index;
+        return {
+            row,
+            style: "cursor",
+            label: row === selectedRow ? selected[3].trim() : line.trim(),
+            offset: row - selectedRow,
+        };
+    });
+}
+function cursorOptionBounds(lines) {
+    const cursorPattern = /^(\s*)[❯›](\s+)(?!\d+[.)]\s)(\S.*)$/;
+    let selected;
+    let selectedRow = -1;
+    for (const [row, line] of lines.entries()) {
+        const match = cursorPattern.exec(line);
+        if (match === null)
+            continue;
+        selected = match;
+        selectedRow = row;
+        break;
+    }
+    if (selected === undefined)
+        return undefined;
+    const labelColumn = selected[1].length + 1 + selected[2].length;
+    let firstRow = selectedRow;
+    while (firstRow > 0 && cursorSiblingLabel(lines[firstRow - 1], labelColumn))
+        firstRow--;
+    let lastRow = selectedRow;
+    while (lastRow + 1 < lines.length &&
+        cursorSiblingLabel(lines[lastRow + 1], labelColumn))
+        lastRow++;
+    return { selected, selectedRow, labelColumn, firstRow, lastRow };
+}
+function cursorSiblingLabel(line, labelColumn) {
+    const match = /^(\s*)(\S.*)$/.exec(line);
+    return match !== null && match[1].length === labelColumn;
+}
+//# sourceMappingURL=terminal-options.js.map

package/dist/core/terminal-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-options.js","sourceRoot":"","sources":["../../src/core/terminal-options.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAcH,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM;QACN,KAAK;KACN,CAAC,CAAC,CAAC;AACN,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;SAC5E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;SAC7B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,MAAwB;IAClD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,GAAG,GAAG,SAAS,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACxD,OAAO,CAAC,GAAG,IAAI,KAAK,CAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAwB;IACzD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,OAAO;gBACL,GAAG;gBACH,KAAK,EAAE,UAAmB;gBAC1B,KAAK,EAAG,KAAK,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE;gBAClC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAW;aAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAwB;IAChD,MAAM,OAAO,GAAG,0BAA0B,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AACnC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAwB;IACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC5D,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,QAAQ,GAAG,KAAK,CAAC;QAC7B,OAAO;YACL,GAAG;YACH,KAAK,EAAE,QAAiB;YACxB,KAAK,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC,CAAE,QAAQ,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;YACzE,MAAM,EAAE,GAAG,GAAG,WAAW;SAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAwB;IAClD,MAAM,aAAa,GAAG,qCAAqC,CAAC;IAC5D,IAAI,QAAqC,CAAC;IAC1C,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,QAAQ,GAAG,KAAK,CAAC;QACjB,WAAW,GAAG,GAAG,CAAC;QAClB,MAAM;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,WAAW,GAAI,QAAQ,CAAC,CAAC,CAAY,CAAC,MAAM,GAAG,CAAC,GAAI,QAAQ,CAAC,CAAC,CAAY,CAAC,MAAM,CAAC;IACxF,IAAI,QAAQ,GAAG,WAAW,CAAC;IAC3B,OAAO,QAAQ,GAAG,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAW,EAAE,WAAW,CAAC;QAAE,QAAQ,EAAE,CAAC;IAClG,IAAI,OAAO,GAAG,WAAW,CAAC;IAC1B,OACE,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;QAC1B,kBAAkB,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAW,EAAE,WAAW,CAAC;QAE7D,OAAO,EAAE,CAAC;IACZ,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,WAAmB;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,IAAI,IAAK,KAAK,CAAC,CAAC,CAAY,CAAC,MAAM,KAAK,WAAW,CAAC;AACvE,CAAC"}

package/dist/core/terminal-replay.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Live-only startup replay for terminal data and pre-return attention.
+ * Implements PRD §5.3, §8.3, and C-CLI-05. The buffer is bounded in BYTES (128 KB
+ * default) but trims on a UTF-8 code-point boundary, so a replayed `terminal:data`
+ * never opens with a split multibyte sequence decoded as U+FFFD.
+ */
+import type { ElwoodActivityEvent } from "./activity/index.ts";
+type TerminalDataEvent = {
+    readonly elwoodSessionId: string;
+    readonly data: string;
+};
+export declare class TerminalReplayBuffer {
+    private readonly elwoodSessionId;
+    private readonly maxBytes;
+    private readonly chunks;
+    private size;
+    private readonly startupAttention;
+    private stopAttentionCapture;
+    constructor(elwoodSessionId: string, maxBytes?: number);
+    push(data: string): void;
+    replay(handler: (event: TerminalDataEvent) => unknown): void;
+    /** Capture stable attention activities until the eager start promise has returned. */
+    captureStartupAttention(source: {
+        on(event: "activity", handler: (event: ElwoodActivityEvent) => void): () => void;
+    }): void;
+    /** Replay pre-return attention to a synchronously attached lazy-facade subscriber. */
+    replayAttention(handler: (event: ElwoodActivityEvent) => unknown): void;
+    /** End the narrow replay window on a macrotask after the start promise resolves. */
+    releaseStartupAttentionAfterReturn(): void;
+}
+export {};
+//# sourceMappingURL=terminal-replay.d.ts.map

package/dist/core/terminal-replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-replay.d.ts","sourceRoot":"","sources":["../../src/core/terminal-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,KAAK,iBAAiB,GAAG;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,oBAAoB,CAA2B;gBAE3C,eAAe,EAAE,MAAM,EAAE,QAAQ,SAAU;IAKvD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAaxB,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,GAAG,IAAI;IAK5D,sFAAsF;IACtF,uBAAuB,CAAC,MAAM,EAAE;QAC9B,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;KAClF,GAAG,IAAI;IAMR,sFAAsF;IACtF,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,GAAG,IAAI;IAIvE,oFAAoF;IACpF,kCAAkC,IAAI,IAAI;CAQ3C"}

package/dist/core/terminal-replay.js

@@ -0,0 +1,69 @@
+/**
+ * Live-only startup replay for terminal data and pre-return attention.
+ * Implements PRD §5.3, §8.3, and C-CLI-05. The buffer is bounded in BYTES (128 KB
+ * default) but trims on a UTF-8 code-point boundary, so a replayed `terminal:data`
+ * never opens with a split multibyte sequence decoded as U+FFFD.
+ */
+export class TerminalReplayBuffer {
+    elwoodSessionId;
+    maxBytes;
+    chunks = [];
+    size = 0;
+    startupAttention = [];
+    stopAttentionCapture;
+    constructor(elwoodSessionId, maxBytes = 128_000) {
+        this.elwoodSessionId = elwoodSessionId;
+        this.maxBytes = maxBytes;
+    }
+    push(data) {
+        this.chunks.push(data);
+        this.size += Buffer.byteLength(data);
+        while (this.size > this.maxBytes && this.chunks.length > 1) {
+            // The loop guard keeps the buffer non-empty, so shift always yields a chunk.
+            this.size -= Buffer.byteLength(this.chunks.shift());
+        }
+        if (this.size > this.maxBytes && this.chunks[0] !== undefined) {
+            this.chunks[0] = trimToCodePoint(Buffer.from(this.chunks[0]), this.maxBytes);
+            this.size = Buffer.byteLength(this.chunks[0]);
+        }
+    }
+    replay(handler) {
+        if (this.chunks.length === 0)
+            return;
+        handler({ elwoodSessionId: this.elwoodSessionId, data: this.chunks.join("") });
+    }
+    /** Capture stable attention activities until the eager start promise has returned. */
+    captureStartupAttention(source) {
+        this.stopAttentionCapture = source.on("activity", (event) => {
+            if (event.kind === "attention")
+                this.startupAttention.push(event);
+        });
+    }
+    /** Replay pre-return attention to a synchronously attached lazy-facade subscriber. */
+    replayAttention(handler) {
+        for (const event of this.startupAttention)
+            handler(event);
+    }
+    /** End the narrow replay window on a macrotask after the start promise resolves. */
+    releaseStartupAttentionAfterReturn() {
+        const timer = setTimeout(() => {
+            this.stopAttentionCapture?.();
+            this.stopAttentionCapture = undefined;
+            this.startupAttention.length = 0;
+        }, 0);
+        timer.unref?.();
+    }
+}
+/**
+ * The last at-most-`maxBytes` bytes of `bytes`, decoded from a code-point boundary: a cut that
+ * lands inside a multibyte sequence skips its leading continuation bytes (0b10xxxxxx) so the
+ * kept tail is never shorter than the bound by more than one code point and never starts with
+ * U+FFFD.
+ */
+function trimToCodePoint(bytes, maxBytes) {
+    let start = bytes.length - maxBytes;
+    while (start < bytes.length && (bytes[start] & 0xc0) === 0x80)
+        start += 1;
+    return bytes.subarray(start).toString("utf8");
+}
+//# sourceMappingURL=terminal-replay.js.map

package/dist/core/terminal-replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-replay.js","sourceRoot":"","sources":["../../src/core/terminal-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,OAAO,oBAAoB;IACd,eAAe,CAAS;IACxB,QAAQ,CAAS;IACjB,MAAM,GAAa,EAAE,CAAC;IAC/B,IAAI,GAAG,CAAC,CAAC;IACA,gBAAgB,GAA0B,EAAE,CAAC;IACtD,oBAAoB,CAA2B;IAEvD,YAAY,eAAuB,EAAE,QAAQ,GAAG,OAAO;QACrD,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,IAAY;QACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,6EAA6E;YAC7E,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAG,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7E,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,OAA8C;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACrC,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,sFAAsF;IACtF,uBAAuB,CAAC,MAEvB;QACC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sFAAsF;IACtF,eAAe,CAAC,OAAgD;QAC9D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,oFAAoF;IACpF,kCAAkC;QAChC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,oBAAoB,GAAG,SAAS,CAAC;YACtC,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAa,EAAE,QAAgB;IACtD,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;IACpC,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,CAAE,KAAK,CAAC,KAAK,CAAY,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,KAAK,IAAI,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC"}