@with-logic/elwood 0.1.2 → 0.2.0

package/dist/codex/screen/empty-input.js

@@ -0,0 +1,10 @@
+/** Observe an empty Codex input during either idle or active work (PRD §5.3, C-API-56). */
+import { emptyInputFrame } from "../../core/input/empty-frame.js";
+import { codexComposerRowsEmpty } from "./clearance.js";
+export function codexEmptyInputFrame(terminal) {
+    return emptyInputFrame(terminal, codexEmptyInputRows);
+}
+export function codexEmptyInputRows(rows, cursorRow) {
+    return codexComposerRowsEmpty(rows, cursorRow);
+}
+//# sourceMappingURL=empty-input.js.map

package/dist/codex/screen/empty-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"empty-input.js","sourceRoot":"","sources":["../../../src/codex/screen/empty-input.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,UAAU,oBAAoB,CAAC,QAAwB;IAC3D,OAAO,eAAe,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAuB,EAAE,SAAiB;IAC5E,OAAO,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC"}

package/dist/codex/screen/live-clearance.d.ts

@@ -0,0 +1,6 @@
+/** Live native cursor, text, and title prove Codex trust clearance (C-TRUST-01). */
+import type { TrustClearance } from "../../core/trust/clearance.ts";
+import type { ElwoodTerminal } from "../../terminal/headless.ts";
+/** All reads are synchronous and require the latest received render to be complete. */
+export declare function liveCodexClearance(readTerminal: () => ElwoodTerminal): TrustClearance;
+//# sourceMappingURL=live-clearance.d.ts.map

package/dist/codex/screen/live-clearance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-clearance.d.ts","sourceRoot":"","sources":["../../../src/codex/screen/live-clearance.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAEpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGpE,OAAO,KAAK,EAAE,cAAc,EAAoB,MAAM,4BAA4B,CAAC;AAInF,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,cAAc,GAAG,cAAc,CA2BrF"}

package/dist/codex/screen/live-clearance.js

@@ -0,0 +1,34 @@
+/** Live native cursor, text, and title prove Codex trust clearance (C-TRUST-01). */
+import { cursorViewportRow } from "../../terminal/coordinates.js";
+import { currentRenderedFrame, settledCursorVisible } from "../../terminal/cursor.js";
+import { codexComposerRowsClearance } from "./clearance.js";
+import { codexWorkingTitle } from "./working.js";
+/** All reads are synchronous and require the latest received render to be complete. */
+export function liveCodexClearance(readTerminal) {
+    let previous;
+    let classification = false;
+    return (text) => {
+        const terminal = readTerminal();
+        if (codexWorkingTitle.test(terminal.title))
+            return false;
+        const frame = currentRenderedFrame(terminal);
+        // Native input follows the two-cell "› " prefix (zero-based column 2).
+        if (frame === undefined ||
+            !settledCursorVisible(terminal.xterm) ||
+            frame.text !== text ||
+            frame.cursorX !== 2)
+            return false;
+        const buffer = terminal.xterm.buffer.active;
+        // cursorY is relative to the active buffer base; snapshot rows start at viewportY.
+        // Example: cursorY=3, baseY=10, viewportY=8 identifies snapshot row 5.
+        const viewportCursorRow = cursorViewportRow(frame.cursorY, buffer);
+        // RenderCursor replaces this private snapshot on a render or viewport change.
+        // Live evidence above is rechecked even when its row classification is reusable.
+        if (frame !== previous) {
+            classification = codexComposerRowsClearance(frame.lines, viewportCursorRow);
+            previous = frame;
+        }
+        return classification;
+    };
+}
+//# sourceMappingURL=live-clearance.js.map

package/dist/codex/screen/live-clearance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-clearance.js","sourceRoot":"","sources":["../../../src/codex/screen/live-clearance.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAGpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,YAAkC;IACnE,IAAI,QAAsC,CAAC;IAC3C,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC7C,uEAAuE;QACvE,IACE,KAAK,KAAK,SAAS;YACnB,CAAC,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC;YACrC,KAAK,CAAC,IAAI,KAAK,IAAI;YACnB,KAAK,CAAC,OAAO,KAAK,CAAC;YAEnB,OAAO,KAAK,CAAC;QACf,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5C,mFAAmF;QACnF,uEAAuE;QACvE,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnE,8EAA8E;QAC9E,iFAAiF;QACjF,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,cAAc,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;YAC5E,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC;AACJ,CAAC"}

package/dist/codex/screen/retained-clearance.d.ts

@@ -0,0 +1,19 @@
+/** Preserve update holds across overlays on an old composer (intended C-CODEX-12 wiring). */
+import type { TrustClearance } from "../../core/trust/clearance.ts";
+/** Production shares the immutable snapshot already used for live clearance. */
+export type RetainedFrameReader = () => {
+    readonly text: string;
+    readonly lines: readonly string[];
+};
+/** Observes every frame; its result is whether a previously seen update still holds input. */
+export declare class CodexRetainedComposerHold {
+    private holding;
+    private priorComposer;
+    private frozenPrelude;
+    private readonly isClear;
+    private readonly readFrame;
+    constructor(isClear: TrustClearance, readFrame?: RetainedFrameReader);
+    observe(text: string, updateActive: boolean): boolean;
+    private isCompatibleWithFrozenPrelude;
+}
+//# sourceMappingURL=retained-clearance.d.ts.map

package/dist/codex/screen/retained-clearance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retained-clearance.d.ts","sourceRoot":"","sources":["../../../src/codex/screen/retained-clearance.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGpE,gFAAgF;AAChF,MAAM,MAAM,mBAAmB,GAAG,MAAM;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC,CAAC;AAGF,8FAA8F;AAC9F,qBAAa,yBAAyB;IACpC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,aAAa,CAAiC;IAGtD,OAAO,CAAC,aAAa,CAAuC;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;gBAChD,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,mBAAmB;IAKpE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO;IAiCrD,OAAO,CAAC,6BAA6B;CAQtC"}

package/dist/codex/screen/retained-clearance.js

@@ -0,0 +1,67 @@
+import { codexComposerRow } from "./clearance.js";
+/** Observes every frame; its result is whether a previously seen update still holds input. */
+export class CodexRetainedComposerHold {
+    holding = false;
+    priorComposer;
+    // undefined: no retained provenance; null: composer evidence at update entry
+    // without a verified idle prelude; array: the verified pre-update prelude.
+    frozenPrelude;
+    isClear;
+    readFrame;
+    constructor(isClear, readFrame) {
+        this.isClear = isClear;
+        this.readFrame = readFrame;
+    }
+    observe(text, updateActive) {
+        const frame = this.readFrame?.();
+        const rows = frame?.text === text ? frame.lines : text.split("\n");
+        const liveClear = this.isClear(text);
+        const composer = codexComposerRow(rows, liveClear);
+        if (updateActive && !this.holding) {
+            this.frozenPrelude =
+                composer < 0
+                    ? undefined
+                    : this.priorComposer === undefined
+                        ? null
+                        : prelude(this.priorComposer);
+            this.holding = true;
+        }
+        // Loss of verified composer evidence expires the old provenance, even if a
+        // welcome-only prompt remains visible with its cursor hidden. Later verified
+        // composer evidence can then clear newly loaded startup/resume history.
+        if (composer < 0) {
+            this.priorComposer = undefined;
+            this.frozenPrelude = undefined;
+        }
+        if (updateActive)
+            return true;
+        if (composer < 0 || !liveClear)
+            return this.holding;
+        const current = { rows, at: composer };
+        if (this.holding && !this.isCompatibleWithFrozenPrelude(prelude(current)))
+            return true;
+        this.holding = false;
+        this.frozenPrelude = undefined;
+        // Keep immutable snapshot provenance; normalize its history only if an update
+        // arrives. Ordinary output no longer copies and trims the whole prelude.
+        this.priorComposer = current;
+        return false;
+    }
+    isCompatibleWithFrozenPrelude(prelude) {
+        const frozen = this.frozenPrelude;
+        if (frozen === undefined)
+            return true;
+        if (frozen === null || prelude.length > frozen.length)
+            return false;
+        // Scrolling may remove old history from the top, but cannot introduce replacement text.
+        const offset = frozen.length - prelude.length;
+        return prelude.every((row, index) => row === frozen[offset + index]);
+    }
+}
+function prelude({ rows, at }) {
+    return rows
+        .slice(0, at)
+        .map((row) => row.trimEnd())
+        .filter(Boolean);
+}
+//# sourceMappingURL=retained-clearance.js.map

package/dist/codex/screen/retained-clearance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retained-clearance.js","sourceRoot":"","sources":["../../../src/codex/screen/retained-clearance.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AASlD,8FAA8F;AAC9F,MAAM,OAAO,yBAAyB;IAC5B,OAAO,GAAG,KAAK,CAAC;IAChB,aAAa,CAAiC;IACtD,6EAA6E;IAC7E,2EAA2E;IACnE,aAAa,CAAuC;IAC3C,OAAO,CAAiB;IACxB,SAAS,CAAkC;IAC5D,YAAY,OAAuB,EAAE,SAA+B;QAClE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,IAAY,EAAE,YAAqB;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,aAAa;gBAChB,QAAQ,GAAG,CAAC;oBACV,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS;wBAChC,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,2EAA2E;QAC3E,6EAA6E;QAC7E,wEAAwE;QACxE,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;YAC/B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;QACD,IAAI,YAAY;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACpD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACvF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC/B,8EAA8E;QAC9E,yEAAyE;QACzE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,6BAA6B,CAAC,OAA0B;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACpE,wFAAwF;QACxF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;CACF;AAED,SAAS,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAsB;IAC/C,OAAO,IAAI;SACR,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;SAC3B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC"}

package/dist/codex/screen/staged-input.d.ts

@@ -0,0 +1,7 @@
+import type { ElwoodTerminal } from "../../terminal/headless.ts";
+export declare function codexInputStaged(terminal: ElwoodTerminal, payload: string): boolean;
+export declare function createCodexRecoveryComposer(terminal: ElwoodTerminal): {
+    prepareStaged: (payload: string) => () => boolean;
+    emptyFrame: () => import("../../index.ts").TerminalSnapshot | undefined;
+};
+//# sourceMappingURL=staged-input.d.ts.map

package/dist/codex/screen/staged-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staged-input.d.ts","sourceRoot":"","sources":["../../../src/codex/screen/staged-input.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAIjE,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAEnF;AAgCD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,cAAc;6BAEvC,MAAM,WAhC2C,OAAO;;EAmCpF"}

package/dist/codex/screen/staged-input.js

@@ -0,0 +1,40 @@
+/** Codex recovery matches sanitized text or images only within the live idle composer (PRD §5.3). */
+import { imageChipCount } from "../../core/images/chip-wait.js";
+import { readIdleComposerFrame, readStagedComposerFrame, readStagedWhitespace, } from "../../core/input/staged-composer.js";
+import { codexScreenFactTable } from "../screen-table.js";
+import { codexEmptyInputFrame, codexEmptyInputRows } from "./empty-input.js";
+export function codexInputStaged(terminal, payload) {
+    return prepareCodexStaged(terminal, payload)();
+}
+function prepareCodexStaged(terminal, payload) {
+    let lastLine;
+    let whitespaceOnly;
+    return () => {
+        const current = readIdleComposerFrame(terminal, codexScreenFactTable);
+        const draft = readStagedComposerFrame(current, codexEmptyInputRows, "› Ask Codex to do anything");
+        if (draft === undefined) {
+            if (!readStagedWhitespace(current, codexEmptyInputRows, "› Ask Codex to do anything"))
+                return false;
+            whitespaceOnly ??= payload.length > 0 && payload.trim().length === 0;
+            return whitespaceOnly;
+        }
+        if (imageChipCount(draft) > 0)
+            return true;
+        // Derive only after a live draft exists; retain only for this recovery sequence.
+        lastLine ??= normalizedLastLine(payload);
+        return lastLine.length > 0 && draft.replace(/\s+/gu, " ").includes(lastLine);
+    };
+}
+function normalizedLastLine(payload) {
+    const trimmed = payload.trim();
+    // CR/LF delimit native rows; tabs and other whitespace normalize only within the last row.
+    const start = Math.max(trimmed.lastIndexOf("\r"), trimmed.lastIndexOf("\n")) + 1;
+    return trimmed.slice(start).trim().replace(/\s+/gu, " ");
+}
+export function createCodexRecoveryComposer(terminal) {
+    return {
+        prepareStaged: (payload) => prepareCodexStaged(terminal, payload),
+        emptyFrame: () => codexEmptyInputFrame(terminal),
+    };
+}
+//# sourceMappingURL=staged-input.js.map

package/dist/codex/screen/staged-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staged-input.js","sourceRoot":"","sources":["../../../src/codex/screen/staged-input.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE7E,MAAM,UAAU,gBAAgB,CAAC,QAAwB,EAAE,OAAe;IACxE,OAAO,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAwB,EAAE,OAAe;IACnE,IAAI,QAA4B,CAAC;IACjC,IAAI,cAAmC,CAAC;IACxC,OAAO,GAAG,EAAE;QACV,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,uBAAuB,CACnC,OAAO,EACP,mBAAmB,EACnB,4BAA4B,CAC7B,CAAC;QACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,CAAC;gBACnF,OAAO,KAAK,CAAC;YACf,cAAc,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;YACrE,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,iFAAiF;QACjF,QAAQ,KAAK,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,2FAA2F;IAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACjF,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,QAAwB;IAClE,OAAO;QACL,aAAa,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC;QACzE,UAAU,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/codex/screen/working.d.ts

@@ -0,0 +1,4 @@
+/** Native Codex working markers (PRD §5.3, C-TURN-01). */
+export declare const codexWorkingTitle: RegExp;
+export declare const codexWorkingScreen: RegExp;
+//# sourceMappingURL=working.d.ts.map

package/dist/codex/screen/working.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"working.d.ts","sourceRoot":"","sources":["../../../src/codex/screen/working.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,eAAO,MAAM,iBAAiB,QAAa,CAAC;AAE5C,eAAO,MAAM,kBAAkB,QACiE,CAAC"}

package/dist/codex/screen/working.js

@@ -0,0 +1,5 @@
+/** Native Codex working markers (PRD §5.3, C-TURN-01). */
+export const codexWorkingTitle = /^[⠀-⣿]\s/;
+// Native 0.163.0 pulses between • and ◦ while retaining its elapsed-time interrupt hint.
+export const codexWorkingScreen = /^[•◦] [^\n]+ \((?:\d+s|\d+m \d{2}s|\d+h \d{2}m \d{2}s) • esc to interrupt\)(?: · [^\n]+)?$/im;
+//# sourceMappingURL=working.js.map

package/dist/codex/screen/working.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"working.js","sourceRoot":"","sources":["../../../src/codex/screen/working.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAC5C,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAC7B,8FAA8F,CAAC"}

package/dist/codex/screen-table.d.ts

@@ -4,6 +4,9 @@
  * through C-ATTN-03.
  */
 import type { ScreenFactTable } from "../core/screen-facts.ts";
+import type { TrustClearance } from "../core/trust/clearance.ts";
+import { type RetainedFrameReader } from "./screen/retained-clearance.ts";
+export { codexComposerClearance as codexTrustClearance } from "./screen/clearance.ts";
 /** The stateless table (single-frame update matcher) for frame-level fact tests. */
 export declare const codexScreenFactTable: ScreenFactTable;
 /**
@@ -12,5 +15,5 @@ export declare const codexScreenFactTable: ScreenFactTable;
  * prompt (hook trust) is auto-handled and never blocks, so `blockingTrustSpecs`
  * already excludes it even when autotrust is off.
  */
-export declare function codexScreenFactTableForTrustPolicy(autotrust: boolean): ScreenFactTable;
+export declare function codexScreenFactTableForTrustPolicy(autotrust: boolean, clearsInput?: TrustClearance, readFrame?: RetainedFrameReader): ScreenFactTable;
 //# sourceMappingURL=screen-table.d.ts.map

package/dist/codex/screen-table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"screen-table.d.ts","sourceRoot":"","sources":["../../src/codex/screen-table.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,yBAAyB,CAAC;AA6C/E,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,EAAE,eAIlC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,OAAO,GAAG,eAAe,CAQtF"}
+{"version":3,"file":"screen-table.d.ts","sourceRoot":"","sources":["../../src/codex/screen-table.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAGjE,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAKxC,OAAO,EAAE,sBAAsB,IAAI,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAiDtF,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,EAAE,eAIlC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,OAAO,EAClB,WAAW,CAAC,EAAE,cAAc,EAC5B,SAAS,CAAC,EAAE,mBAAmB,GAC9B,eAAe,CA6BjB"}

package/dist/codex/screen-table.js

@@ -4,10 +4,17 @@
  * through C-ATTN-03.
  */
 import { withTrustBlockingRules } from "../core/trust/blocking.js";
-import { CodexUpdatePromptTracker, codexUpdatePromptVisible } from "./update-prompt.js";
-const verifiedAgainst = "codex-cli 0.142.5";
+import { blockingQuestionVisible } from "./questions/chrome.js";
+import { codexComposerClearance } from "./screen/clearance.js";
+import { CodexRetainedComposerHold, } from "./screen/retained-clearance.js";
+import { codexWorkingScreen, codexWorkingTitle } from "./screen/working.js";
+import { codexUpdatePromptVisible } from "./update/recognition.js";
+import { CodexUpdatePromptTracker } from "./update/tracker.js";
+export { codexComposerClearance as codexTrustClearance } from "./screen/clearance.js";
+const verifiedAgainst = "codex-cli 0.142.5; work pulses and question panels: 0.163.0";
 /**
- * Verified against codex-cli 0.142.5. The working spinner renders
+ * Original rules verified against codex-cli 0.142.5; 0.163.0 captures additionally
+ * verify pulsing work and native question panels. The working spinner renders
  * "• Working (3s • esc to interrupt)", the interrupt banner renders
  * "■ Conversation interrupted", and the idle composer marker is a
  * line-leading "›". Approval dialogs ask "Would you like to run the following
@@ -17,19 +24,19 @@ const verifiedAgainst = "codex-cli 0.142.5";
  * from reading as an idle composer. The OSC window title carries a
  * braille-spinner glyph (U+2800–U+28FF) while a turn runs and the plain
  * directory name when idle. The update-prompt rule takes its matcher as a
- * parameter: production injects a per-session `CodexUpdatePromptTracker` (a split
- * prompt stays blocking until a frame with no update evidence clears it), so the
- * rules that ship are built here, once, rather than rewritten after the fact.
+ * parameter: production injects per-session update generation tracking and a
+ * retained input hold until positive native composer clearance. Both belong to
+ * this table; startup automation only needs update generation tracking.
  */
 function codexScreenFactRules(updatePromptVisible) {
     return [
         { id: "codex-composer-marker", fact: "composer_visible", all: [/^\s*›/m] },
-        { id: "codex-working-spinner", fact: "working_visible", all: [/esc to interrupt/i] },
+        { id: "codex-working-spinner", fact: "working_visible", all: [codexWorkingScreen] },
         {
             id: "codex-working-title",
             fact: "working_visible",
             region: "title",
-            all: [/^[⠀-⣿]\s/],
+            all: [codexWorkingTitle],
         },
         {
             id: "codex-interrupt-banner",
@@ -42,6 +49,11 @@ function codexScreenFactRules(updatePromptVisible) {
             all: [/Would you like to|Allow command\?/i, /Press enter to confirm or esc to cancel/i],
         },
         { id: "codex-update-prompt", fact: "blocking_prompt_visible", match: updatePromptVisible },
+        {
+            id: "codex-native-question",
+            fact: "blocking_prompt_visible",
+            match: blockingQuestionVisible,
+        },
     ];
 }
 /** The stateless table (single-frame update matcher) for frame-level fact tests. */
@@ -56,13 +68,34 @@ export const codexScreenFactTable = {
  * prompt (hook trust) is auto-handled and never blocks, so `blockingTrustSpecs`
  * already excludes it even when autotrust is off.
  */
-export function codexScreenFactTableForTrustPolicy(autotrust) {
+export function codexScreenFactTableForTrustPolicy(autotrust, clearsInput, readFrame) {
     const updatePrompt = new CodexUpdatePromptTracker();
+    const retained = new CodexRetainedComposerHold(clearsInput ?? codexComposerClearance, readFrame);
+    let holdWithoutAppearance = false;
     const tracked = {
         agent: "codex",
         verifiedAgainst,
-        rules: codexScreenFactRules(updatePrompt.observe.bind(updatePrompt)),
+        rules: codexScreenFactRules((frame) => {
+            const visible = updatePrompt.observe(frame);
+            const held = retained.observe(frame, visible);
+            holdWithoutAppearance = held && !visible;
+            return visible;
+        }),
+    };
+    const table = withTrustBlockingRules(tracked, "codex", autotrust);
+    return {
+        ...table,
+        trustOwnedFallback: "codex-unidentified-dialog",
+        rules: [
+            ...table.rules,
+            // Specific approval/trust rules keep their diagnostic identity.
+            {
+                id: "codex-unidentified-dialog",
+                fact: "blocking_prompt_visible",
+                fallback: true,
+                match: (frame) => holdWithoutAppearance && !table.trustGateVisible(frame),
+            },
+        ],
     };
-    return withTrustBlockingRules(tracked, "codex", autotrust);
 }
 //# sourceMappingURL=screen-table.js.map

package/dist/codex/screen-table.js.map

@@ -1 +1 @@
-{"version":3,"file":"screen-table.js","sourceRoot":"","sources":["../../src/codex/screen-table.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAExF,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAE5C;;;;;;;;;;;;;;GAcG;AACH,SAAS,oBAAoB,CAAC,mBAA+C;IAC3E,OAAO;QACL,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC1E,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE;QACpF;YACE,EAAE,EAAE,qBAAqB;YACzB,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,CAAC,UAAU,CAAC;SAClB;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,IAAI,EAAE,4BAA4B;YAClC,GAAG,EAAE,CAAC,0BAA0B,CAAC;SAClC;QACD;YACE,EAAE,EAAE,uBAAuB;YAC3B,IAAI,EAAE,yBAAyB;YAC/B,GAAG,EAAE,CAAC,oCAAoC,EAAE,0CAA0C,CAAC;SACxF;QACD,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,mBAAmB,EAAE;KAC3F,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAoB;IACnD,KAAK,EAAE,OAAO;IACd,eAAe;IACf,KAAK,EAAE,oBAAoB,CAAC,wBAAwB,CAAC;CACtD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAAC,SAAkB;IACnE,MAAM,YAAY,GAAG,IAAI,wBAAwB,EAAE,CAAC;IACpD,MAAM,OAAO,GAAoB;QAC/B,KAAK,EAAE,OAAO;QACd,eAAe;QACf,KAAK,EAAE,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;KACrE,CAAC;IACF,OAAO,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"screen-table.js","sourceRoot":"","sources":["../../src/codex/screen-table.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,sBAAsB,IAAI,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEtF,MAAM,eAAe,GAAG,6DAA6D,CAAC;AAEtF;;;;;;;;;;;;;;;GAeG;AACH,SAAS,oBAAoB,CAAC,mBAA+C;IAC3E,OAAO;QACL,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC1E,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE;QACnF;YACE,EAAE,EAAE,qBAAqB;YACzB,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,CAAC,iBAAiB,CAAC;SACzB;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,IAAI,EAAE,4BAA4B;YAClC,GAAG,EAAE,CAAC,0BAA0B,CAAC;SAClC;QACD;YACE,EAAE,EAAE,uBAAuB;YAC3B,IAAI,EAAE,yBAAyB;YAC/B,GAAG,EAAE,CAAC,oCAAoC,EAAE,0CAA0C,CAAC;SACxF;QACD,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,mBAAmB,EAAE;QAC1F;YACE,EAAE,EAAE,uBAAuB;YAC3B,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,uBAAuB;SAC/B;KACF,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAoB;IACnD,KAAK,EAAE,OAAO;IACd,eAAe;IACf,KAAK,EAAE,oBAAoB,CAAC,wBAAwB,CAAC;CACtD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,SAAkB,EAClB,WAA4B,EAC5B,SAA+B;IAE/B,MAAM,YAAY,GAAG,IAAI,wBAAwB,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,WAAW,IAAI,sBAAsB,EAAE,SAAS,CAAC,CAAC;IACjG,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAClC,MAAM,OAAO,GAAoB;QAC/B,KAAK,EAAE,OAAO;QACd,eAAe;QACf,KAAK,EAAE,oBAAoB,CAAC,CAAC,KAAK,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC9C,qBAAqB,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC;YACzC,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;KACH,CAAC;IACF,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAClE,OAAO;QACL,GAAG,KAAK;QACR,kBAAkB,EAAE,2BAA2B;QAC/C,KAAK,EAAE;YACL,GAAG,KAAK,CAAC,KAAK;YACd,gEAAgE;YAChE;gBACE,EAAE,EAAE,2BAA2B;gBAC/B,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC;aAC1E;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/codex/session/build.d.ts

@@ -9,6 +9,7 @@ export type BuildCodexSessionInput = {
     readonly runtime: SessionRuntime;
     readonly options: StartCodexOptions;
     readonly resumed: boolean;
+    readonly activate: () => void;
     readonly preflightWarning: CodexPreflightWarning | undefined;
 };
 export declare function buildCodexSession(input: BuildCodexSessionInput): Promise<CodexSessionImpl>;

package/dist/codex/session/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/codex/session/build.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAE9E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAM7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,GAAG,SAAS,CAAC;CAC9D,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgJhG"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/codex/session/build.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAG9E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAS7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAIjD,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,GAAG,SAAS,CAAC;CAC9D,CAAC;AACF,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoJhG"}

package/dist/codex/session/build.js

@@ -1,59 +1,56 @@
-/** Builds a live CodexSessionApi from a record + runtime. Implements PRD §5.5, §5.6, §5.7, §7A, §8, §9. */
-import * as activity from "../../core/activity/index.js";
+import { activityFromTerminalExit as terminalExitActivity } from "../../core/activity/index.js";
 import { AttentionWatcher } from "../../core/attention.js";
 import { defaultTerminalSize } from "../../core/defaults.js";
 import { causeDetails, elwoodError } from "../../core/errors.js";
-import { observeRenderedFrame } from "../../core/rendered-observers.js";
-import { createStartupWarningGate, deliverFrameWarnings } from "../../core/startup/frame.js";
-import { emitSettledStartupOutcomes } from "../../core/startup/write.js";
+import { emitSettledStartupOutcomes as emitSettledStartup } from "../../core/startup/write.js";
 import { TerminalReplayBuffer } from "../../core/terminal-replay.js";
 import { TurnStateWatcher } from "../../core/turn-state.js";
 import { TypedEmitter } from "../../events/emitter.js";
 import { loadRuntimeLoopDefinitions as loadLoops } from "../../runtime/loop-restore.js";
 import { finishSessionExit } from "../../runtime/session/exit.js";
+import { bindStartupLifetime, createSessionFrameObserver } from "../../runtime/session/frames.js";
+import { withAutomatedInput } from "../../runtime/session/picker-input.js";
 import { createReadinessGate } from "../../runtime/session/readiness.js";
+import { bindTurnSubmission } from "../../runtime/session/turn-submission.js";
 import { assertStartupThenRelease, createStartupBuffer } from "../../runtime/startup/buffer.js";
 import { cleanupStartupResources, guardStartupRegion } from "../../runtime/startup/cleanup.js";
 import { secureMkdir } from "../../state/files.js";
 import { writeSessionRecord } from "../../state/store.js";
+import { currentRenderedFrame, renderedSnapshot } from "../../terminal/cursor.js";
 import { attachPtyTerminal } from "../../terminal/headless.js";
 import { spawnCodexPty } from "../pty.js";
+import { liveCodexClearance } from "../screen/live-clearance.js";
 import { codexScreenFactTableForTrustPolicy } from "../screen-table.js";
 import { CodexStartupPromptResponder } from "../startup-prompts.js";
+import { guardedCodexAutomationWrite } from "../update-prompt.js";
 import { currentCodexHookBridgeFactory } from "./bridge.js";
-import { dispatchHook, registerInitialHooks } from "./hooks.js";
+import { reportCallerInput } from "./caller-input.js";
+import { buildCodexHookErrorHandler, dispatchHook, registerInitialHooks } from "./hooks.js";
 import { CodexSessionImpl } from "./instance.js";
 import { writeCodexRuntimeFiles } from "./runtime.js";
-import * as sessionTranscript from "./transcript.js";
+import { createCodexStartupWarningGate, preflightEvent } from "./startup-warnings.js";
+import * as transcript from "./transcript.js";
+import { emitUpdateAttention } from "./update-attention.js";
 export async function buildCodexSession(input) {
     const { record, stateDir, runtime, options, resumed, preflightWarning } = input;
+    const elwoodSessionId = record.elwoodSessionId;
     secureMkdir(runtime.sessionDir);
-    writeSessionRecord(record, runtime.sessionDir);
+    writeSessionRecord(record, runtime.sessionDir, runtime.stateOwnership.publishFile);
     const loopDefinitions = resumed ? loadLoops(stateDir, record.elwoodSessionId) : [];
     writeCodexRuntimeFiles(runtime);
     const emitter = new TypedEmitter();
     registerInitialHooks(emitter, options.hooks);
     let session;
-    // ALL startup-region warnings — MCP/prompt-write (frame path) AND transcript
-    // drop/read-error diagnostics — route through ONE gate that buffers anything emitted
-    // before startCodex resolves and flushes it on a deferred macrotask after return, so
-    // every source stays observable without late-subscriber replay (C-API-14).
-    const warnGate = createStartupWarningGate({
-        emitWarnings: (w) => deliverFrameWarnings(session, w),
-    });
-    const wired = sessionTranscript.createCodexTranscriptWatcher(record.elwoodSessionId, emitter, () => warnGate);
+    const warnGate = createCodexStartupWarningGate(() => session, () => promptResponder.closingSignal.aborted, (deliver) => wired.duringDelivery(deliver));
+    // Transcript diagnostics flow through the same startup warning gate.
+    const wired = transcript.createCodexTranscriptWatcher(elwoodSessionId, emitter, () => warnGate);
     const { watcher: transcriptWatcher, flushPendingWarnings, finishSafely } = wired;
-    const bridge = currentCodexHookBridgeFactory()(runtime.socketPath, runtime.bridgeToken, record.elwoodSessionId, async (hook) => dispatchHook(hook, emitter, options, record, session), (event) => {
-        const hookError = { elwoodSessionId: record.elwoodSessionId, ...event };
-        emitter.emit("hookError", hookError);
-        emitter.emit("activity", activity.activityFromHookError("codex", hookError));
-    });
+    const bridge = currentCodexHookBridgeFactory()(runtime.socketPath, runtime.bridgeToken, record.elwoodSessionId, async (hook) => dispatchHook(hook, emitter, options, record, session), buildCodexHookErrorHandler(record, emitter, () => session));
     try {
         await bridge.start();
     }
     catch (error) {
-        // Best-effort shut down a partially-started bridge so its listener/socket is not
-        // leaked; contained so the original bridge-start error is the one that rejects.
+        // Preserve the startup error while cleaning up a partially started bridge.
         await bridge.stop().catch(() => undefined);
         throw elwoodError("hook_bridge_failed", "Could not start Elwood hook bridge.", {
             ...causeDetails(error),
@@ -65,78 +62,75 @@ export async function buildCodexSession(input) {
         throw error;
     });
     const startupOutput = createStartupBuffer();
-    let startupExit;
+    let observedExit;
     const terminalReplay = new TerminalReplayBuffer(record.elwoodSessionId);
     terminalReplay.captureStartupAttention(emitter);
-    const { ready, observeReadinessFrame } = createReadinessGate(() => {
-        turnWatcher.arm(resumed); // resume arms in settling mode (no phantom replay turn)
+    const readiness = createReadinessGate(() => {
+        observers.turn.arm(resumed); // resume arms in settling mode (no phantom replay turn)
         session?.completeInitialReady(); // shared anti-starvation ready boundary (C-API-42)
     }, resumed);
-    const autotrust = options.autotrust ?? false;
+    const clearance = liveCodexClearance(() => terminal);
+    const snapshot = () => renderedSnapshot(terminal);
     const observers = {
         turn: new TurnStateWatcher(),
         attention: new AttentionWatcher(),
-        table: codexScreenFactTableForTrustPolicy(autotrust),
+        table: codexScreenFactTableForTrustPolicy(options.autotrust ?? false, clearance, snapshot),
         agent: "codex",
         elwoodSessionId: record.elwoodSessionId,
         emitActivity: (event) => emitter.emit("activity", event),
     };
-    const turnWatcher = observers.turn;
-    const promptResponder = new CodexStartupPromptResponder(record.elwoodSessionId, autotrust);
+    const frameObserver = createSessionFrameObserver(observers, () => session, () => promptResponder, readiness, clearance);
+    const promptResponder = new CodexStartupPromptResponder(record.elwoodSessionId, options.autotrust ?? false, frameObserver.refresh, clearance, () => activeSession.inputBlocking || activeSession.trustInputBlocking);
     const terminal = attachPtyTerminal(options.initialSize ?? defaultTerminalSize, pty, (data, renderedTerminal) => {
-        startupOutput.push(data);
         terminalReplay.push(data);
-        // One snapshot per render: reused for prompt automation, readiness, detection.
-        const frame = { text: renderedTerminal.snapshot().text, title: renderedTerminal.title };
-        // The write RETURNS its completion: the responder settles only after it fulfills;
-        // a rejected write retries + warns (C-CODEX-17). Warning delivery is CONTAINED on
-        // the frame path so a throwing listener never skips readiness or terminal:data.
-        const result = promptResponder.handle(frame.text, (i) => renderedTerminal.sendInput(i), () => renderedTerminal.snapshot().text);
+        const frame = {
+            text: renderedSnapshot(renderedTerminal).text,
+            title: renderedTerminal.title,
+        };
+        const send = (input) => withAutomatedInput(renderedTerminal, () => callerInput.automation(input));
+        const read = () => renderedSnapshot(renderedTerminal).text;
+        const guarded = guardedCodexAutomationWrite(renderedTerminal, send, read, promptResponder.closingSignal);
+        const trustRead = () => currentRenderedFrame(renderedTerminal)?.text;
+        const result = promptResponder.handle(frame.text, send, read, guarded, trustRead);
         warnGate.emitWarnings(result.warnings);
-        emitSettledStartupOutcomes(emitter, "codex", record.elwoodSessionId, result.outcomes, {
-            emitWarnings: (w) => warnGate.emitWarnings(w),
-        });
-        ready.armDeadline(); // hook/deadline readiness; resume composer also marks (C-API-28)
-        const reading = observeRenderedFrame(observers, frame, session);
-        activeSession.inputBlocking = reading.facts.blocking_prompt_visible;
-        observeReadinessFrame(reading.facts); // blocking gate + resume-composer mark
+        emitSettledStartup(emitter, "codex", record.elwoodSessionId, result.outcomes, warnGate);
+        frameObserver.observe(frame);
+        emitUpdateAttention(emitter, record.elwoodSessionId, result.updateGeneration);
         emitter.emit("terminal:data", { elwoodSessionId: record.elwoodSessionId, data });
-    });
-    session = new CodexSessionImpl(record, stateDir, runtime, pty, terminal, bridge, emitter, terminalReplay, transcriptWatcher, loopDefinitions);
-    const id = record.elwoodSessionId;
-    const activeSession = session;
-    const beforeCleanup = () => activeSession.pauseLoopsForStartupCleanup(ready.cancel);
-    // Every post-construction failure tears down all live resources (§9.1/§9.4).
+    }, startupOutput.push);
+    const callerInput = reportCallerInput(terminal, () => promptResponder.endStartup(), resumed);
+    session = new CodexSessionImpl(record, stateDir, runtime, pty, callerInput.terminal, bridge, emitter, terminalReplay, transcriptWatcher, loopDefinitions);
+    const activeSession = bindTurnSubmission(session, observers);
+    bindStartupLifetime(activeSession, promptResponder, readiness);
+    frameObserver.refresh();
+    const beforeCleanup = () => activeSession.pauseLoopsForStartupCleanup(readiness.ready.cancel);
     await guardStartupRegion(async () => {
         activeSession.startLoops();
         flushPendingWarnings(); // inside the guard: a throwing sink tears down, not leaks (§5.4/§9.4)
-        activeSession.setInitialReadyHook(() => ready.mark());
-        ready.replay();
-        // C-LIFE-10: a failed final flush cannot skip exit or reaping.
+        activeSession.setInitialReadyHook(() => readiness.ready.mark());
+        readiness.ready.replay();
         pty.onExit((exit) => {
-            startupExit = exit;
-            ready.cancel();
+            if (observedExit)
+                return;
+            observedExit = exit;
+            activeSession.beginExitFinalization();
+            activeSession.closing.abort();
             const emitExit = () => {
-                emitter.emit("terminal:exit", { elwoodSessionId: id, ...exit });
-                emitter.emit("activity", activity.activityFromTerminalExit("codex", id, exit.exitCode));
+                emitter.emit("terminal:exit", { elwoodSessionId, ...exit });
+                emitter.emit("activity", terminalExitActivity("codex", elwoodSessionId, exit.exitCode));
             };
-            finishSessionExit(() => finishSafely(emitExit), () => activeSession.submitExit());
+            const finalize = () => finishSessionExit(emitExit, () => activeSession.submitExit());
+            finishSafely(() => warnGate.afterDelivery(finalize));
         });
-        await assertStartupThenRelease("codex", startupOutput, () => startupExit);
+        await assertStartupThenRelease("codex", startupOutput, () => observedExit);
         activeSession.submitEvidence("startup_usable");
-        if (activeSession.inputBlocking)
-            activeSession.submitEvidence("blocking_prompt_shown");
+        frameObserver.blockOnceLive(activeSession);
+        input.activate();
     }, { before: beforeCleanup, pty, bridge, terminal, after: () => transcriptWatcher.stop() });
-    // Buffer the preflight/version warning through the same gate, then open it: buffered
-    // startup warnings (MCP/transcript) AND the preflight all flush on one deferred
-    // macrotask after return, so a caller subscribing synchronously observes them all.
     if (preflightWarning !== undefined)
-        warnGate.emitWarnings([preflightEvent(id, preflightWarning)]);
+        warnGate.emitWarnings([preflightEvent(elwoodSessionId, preflightWarning)]);
     warnGate.openAfterReturn();
     terminalReplay.releaseStartupAttentionAfterReturn();
     return session;
 }
-function preflightEvent(elwoodSessionId, warning) {
-    return { elwoodSessionId, ...warning };
-}
 //# sourceMappingURL=build.js.map