@with-logic/elwood 0.1.0

package/dist/core/trust-prompts.js

@@ -0,0 +1,108 @@
+/**
+ * Allowlist of known adapter startup trust prompts and how to answer them.
+ * Implements PRD §5.1 and §5.5 (C-CLAUDE-10, C-CODEX-11, C-CLAUDE-14, C-CODEX-15).
+ *
+ * This is an EXPLICIT allowlist, not an open-ended matcher: each entry names one
+ * concrete prompt by its on-screen text and a fixed affirmative outcome. A new
+ * CLI prompt is trusted only by adding a deliberate entry here — Elwood never
+ * blanket-answers "any first-run confirmation", which would silently bypass a
+ * future CLI security gate for third-party code or config.
+ */
+import { nonOptionText } from "./terminal-options.js";
+// Affirmative option shapes. Each rejects decline words so "No, ..." never matches.
+const notDecline = "(?!.*\\b(no|without|not|quit|cancel|deny|don't)\\b)";
+const yesOption = new RegExp(`^${notDecline}.*\\b(yes|trust|continue|proceed)\\b`, "i");
+const useMcpOption = new RegExp(`^${notDecline}.*\\buse this(?:.*\\bMCP)? server`, "i");
+// Codex hook trust's real affirmative is "Trust all and continue" / "Trust
+// hooks" — matched specifically so a nearby unrelated dialog's generic "Yes,
+// continue" (e.g. a credential prompt) can never be selected for hook trust.
+const trustHooksOption = new RegExp(`^${notDecline}.*\\btrust\\b.*\\b(hooks?|all)\\b`, "i");
+/**
+ * The allowlist. Wording verified against claude 2.1.205–2.1.252 and codex-cli 0.142.5.
+ * `workspace`/`directory` trust are the folder-trust gates; `skill`, `plugin`,
+ * and `mcp` cover the CLI's first-run trust prompts for loading third-party
+ * skills, plugins, and MCP servers under a full-trust launch.
+ */
+// Each `headerPattern` matches the prompt's QUESTION/HEADER wording — never a
+// phrase that lives only in an affirmative option — so recognition anchors on a
+// header line (matched via `trustHeaderMatches` over the frame's non-option
+// text), which a hostile option cannot spoof (PRD §5.1).
+export const trustPromptAllowlist = [
+    {
+        // Header renders as "Do you trust this folder?" or "Quick safety check: Is
+        // this a project you created or one you trust?" (claude 2.1.205/2.1.206).
+        id: "workspace_trust",
+        agent: "claude",
+        headerPattern: /do you trust this folder|project you .*\bor one you trust/i,
+        accept: yesOption,
+        answerPolicy: "autotrust",
+    },
+    {
+        id: "skill_trust",
+        agent: "claude",
+        headerPattern: /do you (?:want to )?(?:trust|load) (?:this|the) skill|load this skill\?/i,
+        accept: yesOption,
+        answerPolicy: "autotrust",
+    },
+    {
+        id: "plugin_trust",
+        agent: "claude",
+        headerPattern: /do you (?:want to )?trust (?:this|the) plugin|trust the plugin\?/i,
+        accept: yesOption,
+        answerPolicy: "autotrust",
+    },
+    {
+        // Header "New MCP server found in this project"; the affirmative option is
+        // "Use this MCP server" (no yes/trust/continue word), needing a per-prompt
+        // accept — the generic yes-matcher would leave it wedged.
+        id: "mcp_trust",
+        agent: "claude",
+        headerPattern: /New MCP server found|do you trust (?:this|the) MCP server/i,
+        accept: useMcpOption,
+        answerPolicy: "autotrust",
+    },
+    {
+        // Codex's directory-trust gate keeps the stable `workspace_trust` label
+        // (PRD §5.4) even though its wording differs from Claude's.
+        id: "workspace_trust",
+        agent: "codex",
+        headerPattern: /Do you trust the contents of this directory/i,
+        accept: yesOption,
+        answerPolicy: "autotrust",
+    },
+    // Hook trust is Elwood's own integration, required for the session to work, so
+    // it is always answered (not gated on autotrust) — see `answerPolicy: "always"`.
+    {
+        id: "hook_trust",
+        agent: "codex",
+        headerPattern: /Hooks need review/i,
+        // Specific to hook trust's own option ("Trust all and continue"), never a
+        // generic "Yes" that could belong to a different dialog in the same frame.
+        accept: trustHooksOption,
+        answerPolicy: "always",
+    },
+];
+/**
+ * True when `spec`'s HEADER wording appears in `header` — the frame's NON-option
+ * text as produced by `nonOptionText`. This is the ONE shared, option-aware
+ * recognizer: the responder, the cursor navigator, and the screen-fact blocking
+ * rules all go through it (each computes `nonOptionText` once per frame and
+ * tests every spec against that), so a numbered or cursor-selectable option whose
+ * label merely contains a trust phrase is never recognized as a prompt. Matching
+ * joined non-option lines also keeps wrapped headers matchable (§5.1).
+ */
+export function trustHeaderMatches(header, spec) {
+    return spec.headerPattern.test(header);
+}
+/** `trustHeaderMatches` over a raw frame, for callers that test a single spec. */
+export function trustPromptHeaderVisible(frame, spec) {
+    return trustHeaderMatches(nonOptionText(frame), spec);
+}
+/** Specs for one agent that stay UNANSWERED under the effective policy (block on the human). */
+export function blockingTrustSpecs(agent, autotrust) {
+    return trustPromptAllowlist.filter(
+    // An `answerPolicy: "always"` prompt (hook trust) is auto-handled, so it must
+    // NOT be classified as human-blocking. Others block only when autotrust is off.
+    (spec) => spec.agent === agent && spec.answerPolicy !== "always" && !autotrust);
+}
+//# sourceMappingURL=trust-prompts.js.map

package/dist/core/trust-prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-prompts.js","sourceRoot":"","sources":["../../src/core/trust-prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AA8DtD,oFAAoF;AACpF,MAAM,UAAU,GAAG,qDAAqD,CAAC;AACzE,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,sCAAsC,EAAE,GAAG,CAAC,CAAC;AACxF,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,mCAAmC,EAAE,GAAG,CAAC,CAAC;AACxF,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,mCAAmC,EAAE,GAAG,CAAC,CAAC;AAE5F;;;;;GAKG;AACH,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC;QACE,2EAA2E;QAC3E,0EAA0E;QAC1E,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,4DAA4D;QAC3E,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,0EAA0E;QACzF,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,mEAAmE;QAClF,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,2EAA2E;QAC3E,2EAA2E;QAC3E,0DAA0D;QAC1D,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,4DAA4D;QAC3E,MAAM,EAAE,YAAY;QACpB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,wEAAwE;QACxE,4DAA4D;QAC5D,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,8CAA8C;QAC7D,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD,+EAA+E;IAC/E,iFAAiF;IACjF;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,oBAAoB;QACnC,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,QAAQ;KACvB;CAC4C,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAqB;IACtE,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,IAAqB;IAC3E,OAAO,kBAAkB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAiBD,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,SAAkB;IAElB,OAAO,oBAAoB,CAAC,MAAM;IAChC,8EAA8E;IAC9E,gFAAgF;IAChF,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,SAAS,CAC/E,CAAC;AACJ,CAAC"}

package/dist/core/trust-responder.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Detects and answers the allowlisted family of adapter startup trust prompts.
+ * Implements PRD §5.1 and §9.1 (C-CLAUDE-10, C-CODEX-11, C-CLAUDE-14, C-CODEX-15).
+ *
+ * Policy (PRD §5.1): an agent must NEVER be left waiting on a trust gate.
+ * Under the caller's full-trust posture, when an allowlisted trust prompt is
+ * visible in the current frame, Elwood selects its affirmative option and sends
+ * it — always say yes. Elwood only auto-answers ALLOWLISTED prompts (an
+ * off-allowlist confirmation is left to the human), and never re-answers the same
+ * prompt; those are the only limits.
+ */
+import type { ElwoodAgentKind } from "./activity.ts";
+import { type TrustPromptIdFor } from "./trust-prompts.ts";
+/** An answered trust prompt; `prompt` is narrowed to the responder's agent. */
+export type TrustPromptAutomation<A extends ElwoodAgentKind = ElwoodAgentKind> = {
+    readonly prompt: TrustPromptIdFor<A>;
+    readonly input: string;
+};
+/**
+ * The completion of an answered trust write: a `void | Promise<void>` write is
+ * normalized to a promise that resolves on success and rejects once the prompt
+ * has been un-settled (kept retryable) on a rejected write.
+ */
+export type TrustWriteResult = void | Promise<void>;
+/**
+ * The outcome of handling a frame: an answered prompt, a recognized prompt whose
+ * affirmative option has not rendered yet (a TRANSIENT render delay — under the
+ * say-yes policy a later frame carrying the option is still answered, so this is
+ * never a terminal wedge), or nothing.
+ */
+export type TrustPromptResult<A extends ElwoodAgentKind = ElwoodAgentKind> = {
+    readonly kind: "answered";
+    readonly automation: TrustPromptAutomation<A>;
+    readonly settled: Promise<void>;
+} | {
+    readonly kind: "option_pending";
+    readonly prompt: TrustPromptIdFor<A>;
+} | undefined;
+export declare class TrustPromptResponder<A extends ElwoodAgentKind> {
+    private readonly autotrust;
+    private readonly specs;
+    private readonly settled;
+    private readonly reportedPending;
+    constructor(agent: A, autotrust?: boolean);
+    /** `frame` MUST be the CURRENT rendered screen, not an accumulated buffer. */
+    handle(frame: string, write: (input: string) => TrustWriteResult, readFrame?: () => string): TrustPromptResult<A>;
+}
+//# sourceMappingURL=trust-responder.d.ts.map

package/dist/core/trust-responder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-responder.d.ts","sourceRoot":"","sources":["../../src/core/trust-responder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAQrD,OAAO,EACL,KAAK,gBAAgB,EAItB,MAAM,oBAAoB,CAAC;AAQ5B,+EAA+E;AAC/E,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IAAI;IAC/E,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IACrE;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAG9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,GACzE,SAAS,CAAC;AAEd,qBAAa,oBAAoB,CAAC,CAAC,SAAS,eAAe;IAGzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8B;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAI1D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;gBAEtD,KAAK,EAAE,CAAC,EAAE,SAAS,UAAQ;IAKvC,8EAA8E;IAC9E,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,EAC1C,SAAS,CAAC,EAAE,MAAM,MAAM,GACvB,iBAAiB,CAAC,CAAC,CAAC;CA0CxB"}

package/dist/core/trust-responder.js

@@ -0,0 +1,119 @@
+/**
+ * Detects and answers the allowlisted family of adapter startup trust prompts.
+ * Implements PRD §5.1 and §9.1 (C-CLAUDE-10, C-CODEX-11, C-CLAUDE-14, C-CODEX-15).
+ *
+ * Policy (PRD §5.1): an agent must NEVER be left waiting on a trust gate.
+ * Under the caller's full-trust posture, when an allowlisted trust prompt is
+ * visible in the current frame, Elwood selects its affirmative option and sends
+ * it — always say yes. Elwood only auto-answers ALLOWLISTED prompts (an
+ * off-allowlist confirmation is left to the human), and never re-answers the same
+ * prompt; those are the only limits.
+ */
+import { delay } from "./delay.js";
+import { nonOptionText, optionInput, optionKeystrokes, selectableOptions, } from "./terminal-options.js";
+import { trustHeaderMatches, trustPromptAllowlist, trustPromptHeaderVisible, } from "./trust-prompts.js";
+const cursorRetryMs = 250;
+const cursorNavigationTimeoutMs = 5_000;
+export class TrustPromptResponder {
+    // Whether the caller launched under full trust (`autotrust`). `answerPolicy:
+    // "always"` prompts (hook trust) are answered even when this is false.
+    autotrust;
+    specs;
+    settled = new Set();
+    // A prompt whose "option not rendered yet" state was reported once, kept
+    // SEPARATE from `settled` so a later frame with the real option can still be
+    // answered — the pending state is transient, not terminal.
+    reportedPending = new Set();
+    constructor(agent, autotrust = false) {
+        this.autotrust = autotrust;
+        this.specs = trustPromptAllowlist.filter((spec) => spec.agent === agent);
+    }
+    /** `frame` MUST be the CURRENT rendered screen, not an accumulated buffer. */
+    handle(frame, write, readFrame) {
+        const header = nonOptionText(frame);
+        for (const spec of this.specs) {
+            const id = spec.id;
+            // `answerPolicy: "always"` prompts (Elwood's own hook bridge) answer
+            // regardless of autotrust; every other trust prompt requires the caller's
+            // full-trust posture.
+            if (!(this.autotrust || spec.answerPolicy === "always"))
+                continue;
+            // Recognized when the prompt's HEADER wording appears on a NON-OPTION line
+            // (via the shared `trustHeaderMatches`), so a phrase living only inside an
+            // option label can't spoof a prompt. That is the ONLY guard — recognition
+            // means "say yes".
+            if (this.settled.has(id) || !trustHeaderMatches(header, spec))
+                continue;
+            const options = selectableOptions(frame);
+            const option = options.find((candidate) => spec.accept.test(candidate.label));
+            if (option === undefined) {
+                // Affirmative not rendered yet (partial frame). Report once, but DON'T
+                // settle — a later frame with the option can still be answered.
+                if (this.reportedPending.has(id))
+                    continue;
+                this.reportedPending.add(id);
+                return { kind: "option_pending", prompt: id };
+            }
+            // Settle OPTIMISTICALLY so a second frame in the same tick does not re-answer,
+            // but keep the settle contingent on the write: if the write is rejected we
+            // un-settle here so a later frame re-attempts it, and the returned `settled`
+            // promise rejects so the caller emits a warning instead of a false "answered".
+            this.settled.add(id);
+            const input = optionInput(option);
+            const operation = option.style === "cursor"
+                ? readFrame === undefined
+                    ? Promise.reject(new Error("Cursor trust navigation requires live screen reads."))
+                    : navigateCursorOption(spec, input, write, readFrame)
+                : writeOptionKeys(optionKeystrokes(option), write);
+            const settled = operation.catch((error) => {
+                this.settled.delete(id);
+                throw error;
+            });
+            return { kind: "answered", automation: { prompt: id, input }, settled };
+        }
+        return undefined;
+    }
+}
+/** Writes one option's keys in order (numbered prompts and parser-only tests). */
+async function writeOptionKeys(keys, write) {
+    for (const key of keys)
+        await write(key);
+}
+/** Navigates a cursor prompt one observed frame at a time, retrying swallowed startup input. */
+async function navigateCursorOption(spec, originalInput, write, readFrame) {
+    const deadline = Date.now() + cursorNavigationTimeoutMs;
+    while (Date.now() < deadline) {
+        const before = readFrame();
+        if (!trustPromptHeaderVisible(before, spec)) {
+            throw new Error("Cursor trust prompt disappeared before confirmation.");
+        }
+        const target = selectableOptions(before).find((option) => spec.accept.test(option.label));
+        if (target?.style !== "cursor") {
+            await delay(cursorRetryMs);
+            continue;
+        }
+        const key = target.offset === 0 ? "\r" : target.offset < 0 ? "\u001b[A" : "\u001b[B";
+        await write(key);
+        const progress = await waitForCursorProgress(spec, target.offset, readFrame);
+        if (progress === "cleared")
+            return;
+    }
+    throw new Error(`Cursor trust navigation timed out (${originalInput}).`);
+}
+async function waitForCursorProgress(spec, priorOffset, readFrame) {
+    const deadline = Date.now() + cursorRetryMs;
+    while (Date.now() < deadline) {
+        await delay(20);
+        const frame = readFrame();
+        if (!trustPromptHeaderVisible(frame, spec)) {
+            if (priorOffset === 0)
+                return "cleared";
+            throw new Error("Cursor trust prompt disappeared before confirmation.");
+        }
+        const target = selectableOptions(frame).find((option) => spec.accept.test(option.label));
+        if (target?.style === "cursor" && target.offset !== priorOffset)
+            return "retry";
+    }
+    return "retry";
+}
+//# sourceMappingURL=trust-responder.js.map

package/dist/core/trust-responder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-responder.js","sourceRoot":"","sources":["../../src/core/trust-responder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EACL,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAK5B,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAgCxC,MAAM,OAAO,oBAAoB;IAC/B,6EAA6E;IAC7E,uEAAuE;IACtD,SAAS,CAAU;IACnB,KAAK,CAA8B;IACnC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1D,yEAAyE;IACzE,6EAA6E;IAC7E,2DAA2D;IAC1C,eAAe,GAAG,IAAI,GAAG,EAAuB,CAAC;IAElE,YAAY,KAAQ,EAAE,SAAS,GAAG,KAAK;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,MAAM,CACJ,KAAa,EACb,KAA0C,EAC1C,SAAwB;QAExB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAyB,CAAC;YAC1C,qEAAqE;YACrE,0EAA0E;YAC1E,sBAAsB;YACtB,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC;gBAAE,SAAS;YAClE,2EAA2E;YAC3E,2EAA2E;YAC3E,0EAA0E;YAC1E,mBAAmB;YACnB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YACxE,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,uEAAuE;gBACvE,gEAAgE;gBAChE,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC3C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAChD,CAAC;YACD,+EAA+E;YAC/E,2EAA2E;YAC3E,6EAA6E;YAC7E,+EAA+E;YAC/E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,SAAS,GACb,MAAM,CAAC,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,SAAS,KAAK,SAAS;oBACvB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;oBAClF,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;gBACvD,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,kFAAkF;AAClF,KAAK,UAAU,eAAe,CAC5B,IAAuB,EACvB,KAA0C;IAE1C,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,oBAAoB,CACjC,IAAsB,EACtB,aAAqB,EACrB,KAA0C,EAC1C,SAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,yBAAyB,CAAC;IACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1F,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACrF,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7E,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;IACrC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,aAAa,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAsB,EACtB,WAAmB,EACnB,SAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,WAAW,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,OAAO,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/tui-screen.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Screen-state polling primitives for TUI automation flows.
+ * Implements PRD §5.3 model picker automation.
+ */
+export type ScreenTerminal = {
+    sendInput(data: string | Uint8Array): void | Promise<void>;
+    snapshot(): {
+        readonly text: string;
+    };
+};
+export declare const defaultModelTimeoutMs = 20000;
+export declare function waitForScreen(terminal: ScreenTerminal, test: (text: string) => boolean, timeoutMs: number, label: string): Promise<string>;
+export declare function openCommandScreen(input: {
+    readonly terminal: ScreenTerminal;
+    readonly submit: () => Promise<void>;
+    readonly isOpen: (text: string) => boolean;
+    readonly timeoutMs: number;
+    readonly label: string;
+    readonly nudgeDelayMs?: number;
+}): Promise<string>;
+//# sourceMappingURL=tui-screen.d.ts.map

package/dist/core/tui-screen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui-screen.d.ts","sourceRoot":"","sources":["../../src/core/tui-screen.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,QAAQ,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAI5C,wBAAsB,aAAa,CACjC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,EAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,OAAO,CAAC,MAAM,CAAC,CAiClB"}

package/dist/core/tui-screen.js

@@ -0,0 +1,56 @@
+/**
+ * Screen-state polling primitives for TUI automation flows.
+ * Implements PRD §5.3 model picker automation.
+ */
+import { delay } from "./delay.js";
+import { elwoodError } from "./errors.js";
+export const defaultModelTimeoutMs = 20_000;
+const pollMs = 100;
+const openNudgeDelayMs = 2_000;
+export async function waitForScreen(terminal, test, timeoutMs, label) {
+    const started = Date.now();
+    while (Date.now() - started < timeoutMs) {
+        const text = terminal.snapshot().text;
+        if (test(text))
+            return text;
+        await delay(pollMs);
+    }
+    throw elwoodError("model_automation_failed", `Timed out waiting for ${label}.`);
+}
+export async function openCommandScreen(input) {
+    await input.submit();
+    // The command text or its Enter can be dropped when the TUI is redrawing
+    // (e.g. an MCP-server boot streaming into the composer at startup). A bare
+    // Enter nudge cannot recover a lost command line, so re-submit the whole
+    // command on each nudge interval until the picker opens or the timeout
+    // fires. Re-typing an idempotent slash command on an empty composer, and a
+    // surplus Enter, are both no-ops once the picker is already open.
+    const nudgeDelayMs = input.nudgeDelayMs ?? openNudgeDelayMs;
+    let resubmitting = false;
+    let nudgeTimer;
+    // A re-submit that rejects (e.g. the session closed while polling) must
+    // settle this call with that error immediately, not be dropped as an
+    // unhandled rejection while the caller waits out the picker timeout.
+    const submitFailed = new Promise((_resolve, reject) => {
+        nudgeTimer = setInterval(() => {
+            if (resubmitting || input.isOpen(input.terminal.snapshot().text))
+                return;
+            resubmitting = true;
+            // A rejected re-submit (e.g. the session closed while polling) is
+            // propagated unchanged so the caller settles with the real error.
+            input.submit().then(() => {
+                resubmitting = false;
+            }, reject);
+        }, nudgeDelayMs);
+    });
+    try {
+        return await Promise.race([
+            waitForScreen(input.terminal, input.isOpen, input.timeoutMs, input.label),
+            submitFailed,
+        ]);
+    }
+    finally {
+        clearInterval(nudgeTimer);
+    }
+}
+//# sourceMappingURL=tui-screen.js.map

package/dist/core/tui-screen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui-screen.js","sourceRoot":"","sources":["../../src/core/tui-screen.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,MAAM,GAAG,GAAG,CAAC;AACnB,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAwB,EACxB,IAA+B,EAC/B,SAAiB,EACjB,KAAa;IAEb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,WAAW,CAAC,yBAAyB,EAAE,yBAAyB,KAAK,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAOvC;IACC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACrB,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,gBAAgB,CAAC;IAC5D,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,UAAsD,CAAC;IAC3D,wEAAwE;IACxE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,YAAY,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC3D,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;gBAAE,OAAO;YACzE,YAAY,GAAG,IAAI,CAAC;YACpB,kEAAkE;YAClE,kEAAkE;YAClE,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,EAAE,YAAY,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC;YACzE,YAAY;SACb,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/core/turn-state.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Rendered-TUI turn-state watching driven by adapter screen-fact tables for
+ * hook-independent turn boundaries. Frames carry both the viewport text and
+ * the OSC window title, so a width-independent title spinner can reveal a
+ * turn the elided footer hides.
+ * Implements PRD §5.3 and C-TURN-01 through C-TURN-05.
+ */
+import type { ScreenFacts } from "./screen-facts.ts";
+export type TurnEdge = "started" | "ended";
+export declare class TurnStateWatcher {
+    private running;
+    private bannerSeen;
+    private armed;
+    private replaySettling;
+    private quietStreak;
+    /**
+     * Watching starts only after initial readiness so startup spinners that borrow the
+     * same wording (Codex MCP boot) cannot fabricate turns.
+     *
+     * On RESUME (C-API-28's composer-marked readiness) the CLI marks ready on its FIRST
+     * composer frame, but the transcript replay that follows repaints prior turns —
+     * including footer lines the fact tables read as `working_visible`. Those flashes are
+     * history, not work: emitting a started/ended pair for them fabricates a phantom turn
+     * on EVERY resume (observed as one false unread per resumed conversation downstream).
+     * So `arm(true)` enters a settling state that swallows rendered turn edges until the
+     * first QUIET composer frame (composer visible, no working marker) — the replay has
+     * finished painting and the screen is genuinely idle; detection then behaves exactly
+     * like a cold start's post-ready watcher. Evidence-based turns (`caller_submitted`,
+     * hooks) are unaffected throughout.
+     */
+    arm(resumed?: boolean): void;
+    /** Consumes facts already classified from the frame (see observeRenderedFrame).
+     * `evidenceRunning` — the session is running from EVIDENCE (a caller
+     * submission or hook), not from rendered detection — also releases
+     * settling: a real turn began, so the replay is over by definition, and
+     * holding settling through it would swallow that turn's rendered end-edge
+     * (a message drained at resume-readiness can start its spinner before any
+     * quiet composer frame ever paints). */
+    observe(facts: ScreenFacts, evidenceRunning?: boolean): TurnEdge | undefined;
+}
+//# sourceMappingURL=turn-state.d.ts.map

package/dist/core/turn-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-state.d.ts","sourceRoot":"","sources":["../../src/core/turn-state.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;AAU3C,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,cAAc,CAAS;IAO/B,OAAO,CAAC,WAAW,CAAK;IAExB;;;;;;;;;;;;;;OAcG;IACH,GAAG,CAAC,OAAO,UAAQ,GAAG,IAAI;IAM1B;;;;;;4CAMwC;IACxC,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,eAAe,UAAQ,GAAG,QAAQ,GAAG,SAAS;CAqD3E"}

package/dist/core/turn-state.js

@@ -0,0 +1,109 @@
+/**
+ * Rendered-TUI turn-state watching driven by adapter screen-fact tables for
+ * hook-independent turn boundaries. Frames carry both the viewport text and
+ * the OSC window title, so a width-independent title spinner can reveal a
+ * turn the elided footer hides.
+ * Implements PRD §5.3 and C-TURN-01 through C-TURN-05.
+ */
+// Consecutive quiet, non-blocking composer frames required to declare the resume
+// transcript replay finished. The replay repaints working footers in bursts with
+// brief (1-frame) quiet gaps between them; requiring several quiet frames in a row
+// clears those gaps before detection resumes, so a post-replay burst can't fire a
+// phantom turn. A real post-resume turn is EVIDENCE-driven and bypasses settling, so
+// this only delays RENDERED detection by a few poll frames (C-TURN-03).
+const quietFramesToSettle = 5;
+export class TurnStateWatcher {
+    running = false;
+    bannerSeen = false;
+    armed = false;
+    replaySettling = false;
+    // Consecutive quiet, non-blocking composer frames seen while settling. The resume
+    // transcript replay repaints working-token footers in BURSTS with brief quiet gaps
+    // between them, so a SINGLE quiet composer frame is not proof the replay finished —
+    // releasing on it lets a later burst fire a phantom `started`. Require the composer
+    // to stay quiet for `quietFramesToSettle` consecutive frames; any working/blocking
+    // frame resets the run to 0 (C-TURN-03, real-Codex resume).
+    quietStreak = 0;
+    /**
+     * Watching starts only after initial readiness so startup spinners that borrow the
+     * same wording (Codex MCP boot) cannot fabricate turns.
+     *
+     * On RESUME (C-API-28's composer-marked readiness) the CLI marks ready on its FIRST
+     * composer frame, but the transcript replay that follows repaints prior turns —
+     * including footer lines the fact tables read as `working_visible`. Those flashes are
+     * history, not work: emitting a started/ended pair for them fabricates a phantom turn
+     * on EVERY resume (observed as one false unread per resumed conversation downstream).
+     * So `arm(true)` enters a settling state that swallows rendered turn edges until the
+     * first QUIET composer frame (composer visible, no working marker) — the replay has
+     * finished painting and the screen is genuinely idle; detection then behaves exactly
+     * like a cold start's post-ready watcher. Evidence-based turns (`caller_submitted`,
+     * hooks) are unaffected throughout.
+     */
+    arm(resumed = false) {
+        this.armed = true;
+        this.replaySettling = resumed;
+        this.quietStreak = 0;
+    }
+    /** Consumes facts already classified from the frame (see observeRenderedFrame).
+     * `evidenceRunning` — the session is running from EVIDENCE (a caller
+     * submission or hook), not from rendered detection — also releases
+     * settling: a real turn began, so the replay is over by definition, and
+     * holding settling through it would swallow that turn's rendered end-edge
+     * (a message drained at resume-readiness can start its spinner before any
+     * quiet composer frame ever paints). */
+    observe(facts, evidenceRunning = false) {
+        if (!this.armed)
+            return undefined;
+        if (this.replaySettling) {
+            if (evidenceRunning) {
+                // A real turn is ALREADY running from evidence — release settling and
+                // synchronize only to CURRENT rendered work. The stale resume composer
+                // can remain painted briefly after caller submission, so it is not an end
+                // edge until a working frame has established this turn. An interrupt
+                // banner remains a valid immediate end below even without a spinner.
+                this.replaySettling = false;
+                this.running = facts.working_visible || facts.interrupt_complete_visible;
+            }
+            else {
+                // Without evidence, settling releases only after the composer stays QUIET and
+                // non-blocking for `quietFramesToSettle` consecutive frames — one quiet frame
+                // is not enough because the replay repaints working footers in bursts with
+                // brief quiet gaps, and releasing on a lone quiet frame lets the next burst
+                // fire a phantom `started`. A blocking dialog's option caret is byte-identical
+                // to the composer marker, so a blocking frame is NOT quiet and resets the run
+                // (matches the end-edge gate, so queued sends never drain into a dialog).
+                const quiet = facts.composer_visible && !facts.working_visible && !facts.blocking_prompt_visible;
+                this.quietStreak = quiet ? this.quietStreak + 1 : 0;
+                if (this.quietStreak >= quietFramesToSettle)
+                    this.replaySettling = false;
+                return undefined;
+            }
+        }
+        if (!this.running && facts.working_visible) {
+            this.running = true;
+            return "started";
+        }
+        // The end banner fires the ended edge at any width — including narrow
+        // screens where the elided footer means "started" was never observed.
+        if (facts.interrupt_complete_visible && !this.bannerSeen) {
+            this.bannerSeen = true;
+            this.running = false;
+            return "ended";
+        }
+        if (!facts.interrupt_complete_visible)
+            this.bannerSeen = false;
+        // A screen with neither the working token nor the composer holds state.
+        // A blocking dialog also holds it: Claude's permission dialog renders a
+        // "❯ 1. Yes" caret that would otherwise read as the idle composer, and a
+        // false ready here would drain queued sends into the dialog.
+        if (this.running &&
+            !facts.working_visible &&
+            facts.composer_visible &&
+            !facts.blocking_prompt_visible) {
+            this.running = false;
+            return "ended";
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=turn-state.js.map

package/dist/core/turn-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-state.js","sourceRoot":"","sources":["../../src/core/turn-state.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,iFAAiF;AACjF,iFAAiF;AACjF,mFAAmF;AACnF,kFAAkF;AAClF,qFAAqF;AACrF,wEAAwE;AACxE,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,OAAO,gBAAgB;IACnB,OAAO,GAAG,KAAK,CAAC;IAChB,UAAU,GAAG,KAAK,CAAC;IACnB,KAAK,GAAG,KAAK,CAAC;IACd,cAAc,GAAG,KAAK,CAAC;IAC/B,kFAAkF;IAClF,mFAAmF;IACnF,oFAAoF;IACpF,oFAAoF;IACpF,mFAAmF;IACnF,4DAA4D;IACpD,WAAW,GAAG,CAAC,CAAC;IAExB;;;;;;;;;;;;;;OAcG;IACH,GAAG,CAAC,OAAO,GAAG,KAAK;QACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IACvB,CAAC;IAED;;;;;;4CAMwC;IACxC,OAAO,CAAC,KAAkB,EAAE,eAAe,GAAG,KAAK;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAClC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,eAAe,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,uEAAuE;gBACvE,0EAA0E;gBAC1E,qEAAqE;gBACrE,qEAAqE;gBACrE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;gBAC5B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,0BAA0B,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,8EAA8E;gBAC9E,8EAA8E;gBAC9E,2EAA2E;gBAC3E,4EAA4E;gBAC5E,+EAA+E;gBAC/E,8EAA8E;gBAC9E,0EAA0E;gBAC1E,MAAM,KAAK,GACT,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC;gBACrF,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,IAAI,IAAI,CAAC,WAAW,IAAI,mBAAmB;oBAAE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;gBACzE,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,sEAAsE;QACtE,sEAAsE;QACtE,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACzD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,0BAA0B;YAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QAC/D,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,6DAA6D;QAC7D,IACE,IAAI,CAAC,OAAO;YACZ,CAAC,KAAK,CAAC,eAAe;YACtB,KAAK,CAAC,gBAAgB;YACtB,CAAC,KAAK,CAAC,uBAAuB,EAC9B,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}