@with-logic/elwood 0.1.2 → 0.2.0

package/dist/core/images/chip-wait.d.ts

@@ -1,12 +1,15 @@
 /**
  * Shared `[Image #N]` chip confirmation used by both adapter attach paths. An
  * attach is CONFIRMED only when the composer's image-chip count increases; an
- * unconfirmed image (timeout), or an abort (session closing), REJECTS with
- * `image_attach_failed` so no text is ever submitted for an unconfirmed image.
- * Implements PRD §5.3 (C-API-44/45/46).
+ * unconfirmed image (timeout) or abort (session closing) REJECTS with
+ * `image_attach_failed`. A detected permanent render failure rejects immediately
+ * with that error, without waiting for confirmation timeout. No text is submitted
+ * for an unconfirmed image.
+ * Implements PRD §5.3 (C-API-44/45/46/56).
  */
+import { type InputTerminal } from "../input/abort.ts";
 /** The terminal surface an attach needs: send bytes and read the rendered screen. */
-export type AttachTerminal = {
+export type AttachTerminal = Required<Pick<InputTerminal, "settled" | "renderFailed">> & {
     sendInput(data: string): void | Promise<void>;
     snapshot(): {
         readonly text: string;
@@ -15,18 +18,12 @@ export type AttachTerminal = {
 /** True while a blocking human-decision dialog is on screen (C-API-37 safety). */
 export type BlockedGuard = () => boolean;
 /**
- * Best-effort discard of any staged composer content (image chips, pasted paths)
- * after a mid-attach failure, so the rejected submission's images cannot leak
- * into a later caller's turn. Never throws (C-API-44).
+ * Observe received output and wait for dialogs before an image key. Capture the
+ * chip baseline in the same turn as that key, so the observation cannot confirm
+ * this image using an older chip. Cancellation or permanent render failure rejects
+ * with `image_attach_failed`; a failed Codex session must release its clipboard lease.
  */
-export declare function clearComposer(terminal: AttachTerminal): Promise<void>;
-/**
- * Sends `data` to the terminal only once no blocking dialog is on screen — a
- * paste path or Ctrl+V must never reach a permission/trust dialog and alter a
- * human decision. Rejects with `image_attach_failed` if the signal aborts while
- * held (the session closed) (C-API-37/44).
- */
-export declare function sendWhenUnblocked(terminal: AttachTerminal, data: string, blocked: BlockedGuard | undefined, signal: AbortSignal): Promise<void>;
+export declare function sendObservedImage(terminal: AttachTerminal, data: string, blocked: BlockedGuard | undefined, signal: AbortSignal): Promise<number>;
 export type ChipWaitOptions = {
     readonly settleMs: number;
     readonly timeoutMs: number;
@@ -37,7 +34,8 @@ export declare function imageChipCount(text: string): number;
 /**
  * Resolves once the chip count rises above `before`; rejects with
  * `image_attach_failed` on the confirmation timeout or an aborted signal, so an
- * unconfirmed attach never silently degrades to a text-only turn.
+ * unconfirmed attach never silently degrades to a text-only turn. A detected permanent
+ * render failure rejects immediately with that error rather than awaiting the timeout.
  */
 export declare function waitForImageChip(terminal: AttachTerminal, before: number, signal: AbortSignal, options: ChipWaitOptions): Promise<void>;
 //# sourceMappingURL=chip-wait.d.ts.map

package/dist/core/images/chip-wait.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chip-wait.d.ts","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,qFAAqF;AACrF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC;AAOzC;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3E;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CASf;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AASF,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CASf"}
+{"version":3,"file":"chip-wait.d.ts","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,KAAK,aAAa,EAAe,MAAM,mBAAmB,CAAC;AAIpE,qFAAqF;AACrF,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,cAAc,CAAC,CAAC,GAAG;IACvF,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC;AAEzC;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAajB;AAWD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AASF,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/core/images/chip-wait.js

@@ -1,45 +1,42 @@
 /**
  * Shared `[Image #N]` chip confirmation used by both adapter attach paths. An
  * attach is CONFIRMED only when the composer's image-chip count increases; an
- * unconfirmed image (timeout), or an abort (session closing), REJECTS with
- * `image_attach_failed` so no text is ever submitted for an unconfirmed image.
- * Implements PRD §5.3 (C-API-44/45/46).
+ * unconfirmed image (timeout) or abort (session closing) REJECTS with
+ * `image_attach_failed`. A detected permanent render failure rejects immediately
+ * with that error, without waiting for confirmation timeout. No text is submitted
+ * for an unconfirmed image.
+ * Implements PRD §5.3 (C-API-44/45/46/56).
  */
 import { elwoodError } from "../errors.js";
-const blockedPollMs = 50;
-// Ctrl+U (kill to line start) + Ctrl+K (kill to line end) discard the composer
-// draft on both TUIs, clearing any staged image chips/paths.
-const clearComposerKeys = "\u0015\u000b";
+import { writeUnsafe } from "../input/abort.js";
+import { stageComposer } from "../input/composer-cleanup.js";
+import { unsafeWriteRetryMs } from "../input/constants.js";
 /**
- * Best-effort discard of any staged composer content (image chips, pasted paths)
- * after a mid-attach failure, so the rejected submission's images cannot leak
- * into a later caller's turn. Never throws (C-API-44).
+ * Observe received output and wait for dialogs before an image key. Capture the
+ * chip baseline in the same turn as that key, so the observation cannot confirm
+ * this image using an older chip. Cancellation or permanent render failure rejects
+ * with `image_attach_failed`; a failed Codex session must release its clipboard lease.
  */
-export async function clearComposer(terminal) {
-    try {
-        await terminal.sendInput(clearComposerKeys);
-    }
-    catch {
-        // Best-effort: a clear failure must not replace the primary attach error.
+export async function sendObservedImage(terminal, data, blocked, signal) {
+    const guard = blocked === undefined ? undefined : { blocked };
+    for (;;) {
+        assertAttachNotAbortedOrRenderFailed(terminal, signal);
+        const unsafe = await writeUnsafe(terminal, guard, signal);
+        assertAttachNotAbortedOrRenderFailed(terminal, signal);
+        if (!unsafe)
+            break;
+        await delay(unsafeWriteRetryMs);
     }
+    const before = imageChipCount(terminal.snapshot().text);
+    stageComposer(terminal);
+    await terminal.sendInput(data);
+    return before;
 }
-/**
- * Sends `data` to the terminal only once no blocking dialog is on screen — a
- * paste path or Ctrl+V must never reach a permission/trust dialog and alter a
- * human decision. Rejects with `image_attach_failed` if the signal aborts while
- * held (the session closed) (C-API-37/44).
- */
-export async function sendWhenUnblocked(terminal, data, blocked, signal) {
-    while (blocked?.()) {
-        if (signal.aborted)
-            throw elwoodError("image_attach_failed", "Image attach aborted.");
-        await delay(blockedPollMs);
-    }
-    // Re-check AFTER the loop: an abort that lands as the dialog clears in the same
-    // poll must not let a paste/Ctrl+V reach the PTY on a closing session.
+function assertAttachNotAbortedOrRenderFailed(terminal, signal) {
     if (signal.aborted)
         throw elwoodError("image_attach_failed", "Image attach aborted.");
-    await terminal.sendInput(data);
+    if (terminal.renderFailed)
+        throw elwoodError("image_attach_failed", "Image attach cannot observe a failed terminal render.");
 }
 // Both CLIs render the image chip on the composer PROMPT line (Codex `›`, Claude
 // `❯`), e.g. `› [Image #1]`. Counting chips only on lines bearing a prompt marker
@@ -57,14 +54,14 @@ export function imageChipCount(text) {
 /**
  * Resolves once the chip count rises above `before`; rejects with
  * `image_attach_failed` on the confirmation timeout or an aborted signal, so an
- * unconfirmed attach never silently degrades to a text-only turn.
+ * unconfirmed attach never silently degrades to a text-only turn. A detected permanent
+ * render failure rejects immediately with that error rather than awaiting the timeout.
  */
 export async function waitForImageChip(terminal, before, signal, options) {
     await delay(options.settleMs);
     const attempts = Math.max(1, Math.ceil(options.timeoutMs / options.pollMs));
     for (let i = 0; i < attempts; i++) {
-        if (signal.aborted)
-            throw elwoodError("image_attach_failed", "Image attach aborted.");
+        assertAttachNotAbortedOrRenderFailed(terminal, signal);
         if (imageChipCount(terminal.snapshot().text) > before)
             return;
         await delay(options.pollMs);

package/dist/core/images/chip-wait.js.map

@@ -1 +1 @@
-{"version":3,"file":"chip-wait.js","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAW3C,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,+EAA+E;AAC/E,6DAA6D;AAC7D,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAwB;IAC1D,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAwB,EACxB,IAAY,EACZ,OAAiC,EACjC,MAAmB;IAEnB,OAAO,OAAO,EAAE,EAAE,EAAE,CAAC;QACnB,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACtF,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IACD,gFAAgF;IAChF,uEAAuE;IACvE,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACtF,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAQD,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,qEAAqE;AACrE,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,IAAI,GAAG,iBAAiB,CAAC;AAE/B,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAwB,EACxB,MAAc,EACd,MAAmB,EACnB,OAAwB;IAExB,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACtF,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM;YAAE,OAAO;QAC9D,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,WAAW,CAAC,qBAAqB,EAAE,oDAAoD,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"chip-wait.js","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAsB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAW3D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAwB,EACxB,IAAY,EACZ,OAAiC,EACjC,MAAmB;IAEnB,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAC9D,SAAS,CAAC;QACR,oCAAoC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1D,oCAAoC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxB,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oCAAoC,CAAC,QAAwB,EAAE,MAAmB;IACzF,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACtF,IAAI,QAAQ,CAAC,YAAY;QACvB,MAAM,WAAW,CACf,qBAAqB,EACrB,uDAAuD,CACxD,CAAC;AACN,CAAC;AAQD,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,qEAAqE;AACrE,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,IAAI,GAAG,iBAAiB,CAAC;AAE/B,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAwB,EACxB,MAAc,EACd,MAAmB,EACnB,OAAwB;IAExB,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,oCAAoC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM;YAAE,OAAO;QAC9D,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,WAAW,CAAC,qBAAqB,EAAE,oDAAoD,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/images/queued-budget.d.ts

@@ -0,0 +1,18 @@
+/**
+ * A per-session aggregate byte budget for image clones held across ALL not-yet-attached
+ * queued submissions. Reserved synchronously when a submission's bytes are cloned and
+ * released when it settles, so a slow paste can't let a caller retain gigabytes of
+ * queued clones (C-API-44).
+ */
+export declare class QueuedImageBudget {
+    private usedBytes;
+    private readonly maxQueuedBytes;
+    constructor(maxQueuedBytes?: number);
+    reserve(bytes: number): void;
+    release(bytes: number): void;
+}
+/** The budget every image submission on `session` reserves against (created on first use). */
+export declare function sessionImageBudget(session: object): QueuedImageBudget;
+/** Makes `budget` the one `session` reserves against, replacing the session's own. */
+export declare function shareImageBudget(session: object, budget: QueuedImageBudget): void;
+//# sourceMappingURL=queued-budget.d.ts.map

package/dist/core/images/queued-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queued-budget.d.ts","sourceRoot":"","sources":["../../../src/core/images/queued-budget.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;gBAC5B,cAAc,SAA6B;IAGvD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK5B,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAG7B;AAMD,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAMrE;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAEjF"}

package/dist/core/images/queued-budget.js

@@ -0,0 +1,41 @@
+/** Bounds queued image ownership across sends (PRD §5.3, C-API-44). */
+import { elwoodError } from "../errors.js";
+import { imageLimits } from "./types.js";
+/**
+ * A per-session aggregate byte budget for image clones held across ALL not-yet-attached
+ * queued submissions. Reserved synchronously when a submission's bytes are cloned and
+ * released when it settles, so a slow paste can't let a caller retain gigabytes of
+ * queued clones (C-API-44).
+ */
+export class QueuedImageBudget {
+    usedBytes = 0;
+    maxQueuedBytes;
+    constructor(maxQueuedBytes = imageLimits.maxQueuedBytes) {
+        this.maxQueuedBytes = maxQueuedBytes;
+    }
+    reserve(bytes) {
+        if (this.usedBytes + bytes > this.maxQueuedBytes)
+            throw elwoodError("invalid_image", "Too many queued image bytes for this session.");
+        this.usedBytes += bytes;
+    }
+    release(bytes) {
+        this.usedBytes = Math.max(0, this.usedBytes - bytes);
+    }
+}
+// ONE budget per session object. A facade registers its own before it exposes the session it
+// launched, so both surfaces reserve against the same ceiling rather than 200 MiB each.
+const sessionBudgets = new WeakMap();
+/** The budget every image submission on `session` reserves against (created on first use). */
+export function sessionImageBudget(session) {
+    const existing = sessionBudgets.get(session);
+    if (existing !== undefined)
+        return existing;
+    const created = new QueuedImageBudget();
+    sessionBudgets.set(session, created);
+    return created;
+}
+/** Makes `budget` the one `session` reserves against, replacing the session's own. */
+export function shareImageBudget(session, budget) {
+    sessionBudgets.set(session, budget);
+}
+//# sourceMappingURL=queued-budget.js.map

package/dist/core/images/queued-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queued-budget.js","sourceRoot":"","sources":["../../../src/core/images/queued-budget.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IACpB,SAAS,GAAG,CAAC,CAAC;IACL,cAAc,CAAS;IACxC,YAAY,cAAc,GAAG,WAAW,CAAC,cAAc;QACrD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,KAAa;QACnB,IAAI,IAAI,CAAC,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,cAAc;YAC9C,MAAM,WAAW,CAAC,eAAe,EAAE,+CAA+C,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC;IACvD,CAAC;CACF;AAED,6FAA6F;AAC7F,wFAAwF;AACxF,MAAM,cAAc,GAAG,IAAI,OAAO,EAA6B,CAAC;AAEhE,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACxC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAyB;IACzE,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/dist/core/inert-record.d.ts

@@ -0,0 +1,3 @@
+/** Prevent inherited then/toJSON execution on internal hook envelopes (PRD §6.3–6.4). */
+export declare function inertRecord<T extends object>(record: T): T;
+//# sourceMappingURL=inert-record.d.ts.map

package/dist/core/inert-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inert-record.d.ts","sourceRoot":"","sources":["../../src/core/inert-record.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAG1D"}

package/dist/core/inert-record.js

@@ -0,0 +1,6 @@
+/** Prevent inherited then/toJSON execution on internal hook envelopes (PRD §6.3–6.4). */
+export function inertRecord(record) {
+    Object.setPrototypeOf(record, null);
+    return record;
+}
+//# sourceMappingURL=inert-record.js.map

package/dist/core/inert-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inert-record.js","sourceRoot":"","sources":["../../src/core/inert-record.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAmB,MAAS;IACrD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/input/abort.d.ts

@@ -1,10 +1,41 @@
-/** Abort-aware timing and composer cleanup for queued input (PRD §5.3/§5.9). */
-/** The narrow PTY write surface the queued-input helpers drive. */
+/** Abort-aware timing, dialog holds, and composer cleanup for queued input (PRD §5.3/§5.9, C-API-56). */
+/**
+ * The narrow terminal surface the queued-input helpers drive. `settled` resolves once
+ * every PTY byte received so far has been rendered and observed, and `renderFailed`
+ * reports a render that did not happen; write-only test doubles omit both.
+ */
 export type InputTerminal = {
     sendInput(data: string | Uint8Array): void | Promise<void>;
+    settled?(): Promise<void>;
+    readonly renderFailed?: boolean;
 };
 export declare function waitForInput(ms: number, signal?: AbortSignal): Promise<void>;
+/** One bounded attempt to observe received output: sustained output or a render backlog can exceed it. */
+export declare const observeBudgetMs = 1000;
+/**
+ * Hold a queued write while it is unsafe (see `writeUnsafe`). The caller writes in the
+ * same turn this resolves, before any further PTY output can be delivered (C-API-56).
+ * Cancellation interrupts the wait; the caller then rejects instead of writing.
+ */
+export declare function holdWhileUnsafe(terminal: InputTerminal, guard?: {
+    readonly blocked?: () => boolean;
+}, signal?: AbortSignal): Promise<void>;
+/**
+ * True while a write must be withheld. `blocked` reads the last OBSERVED frame, and
+ * rendering is asynchronous (§4.1): a dialog can be received yet unrendered, where
+ * writing would type into it. So first observe everything received. When that cannot
+ * be done — observation does not complete within the budget, a render has failed,
+ * or the wait was cancelled — the screen cannot be
+ * vouched for and the answer is `true`: fail closed, never write through.
+ * Awaited ownership uses `waitForRender` to wait cancellably for the shared pass,
+ * rather than repeatedly timing out and retrying an unchanged render backlog.
+ */
+export declare function writeUnsafe(terminal: InputTerminal, guard?: {
+    readonly blocked?: () => boolean;
+}, signal?: AbortSignal, waitForRender?: boolean): Promise<boolean>;
 export declare function throwIfInputAborted(signal?: AbortSignal): void;
 export declare function inputAbortError(signal: AbortSignal): Error;
+/** Raw takeover of awaited turn input reports submission failure, preserving other errors (§5.3). */
+export declare function submissionError(error: unknown): unknown;
 export declare function clearStagedComposer(terminal: InputTerminal): Promise<void>;
 //# sourceMappingURL=abort.d.ts.map

package/dist/core/input/abort.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"abort.d.ts","sourceRoot":"","sources":["../../../src/core/input/abort.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,mEAAmE;AACnE,MAAM,MAAM,aAAa,GAAG;IAAE,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAE3F,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB5E;AAUD,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAE9D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,KAAK,CAE1D;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhF"}
+{"version":3,"file":"abort.d.ts","sourceRoot":"","sources":["../../../src/core/input/abort.ts"],"names":[],"mappings":"AAAA,yGAAyG;AAOzG;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC,CAAC;AAEF,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB5E;AAUD,0GAA0G;AAC1G,eAAO,MAAM,eAAe,OAAQ,CAAC;AAErC;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,aAAa,EACvB,KAAK,CAAC,EAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAA;CAAE,EAC5C,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,aAAa,EACvB,KAAK,CAAC,EAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAA;CAAE,EAC5C,MAAM,CAAC,EAAE,WAAW,EACpB,aAAa,UAAQ,GACpB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAE9D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,KAAK,CAE1D;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAIvD;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhF"}

package/dist/core/input/abort.js

@@ -1,4 +1,8 @@
-/** Abort-aware timing and composer cleanup for queued input (PRD §5.3/§5.9). */
+/** Abort-aware timing, dialog holds, and composer cleanup for queued input (PRD §5.3/§5.9, C-API-56). */
+import { elwoodError } from "../errors.js";
+import { isPickerIntervention } from "../models/intervention.js";
+import { composerClearKeys, unsafeWriteRetryMs } from "./constants.js";
+import { observeRender } from "./render-observation.js";
 export function waitForInput(ms, signal) {
     if (signal === undefined)
         return delayUnref(ms);
@@ -26,6 +30,36 @@ function delayUnref(ms) {
         timer.unref?.();
     });
 }
+/** One bounded attempt to observe received output: sustained output or a render backlog can exceed it. */
+export const observeBudgetMs = 1_000;
+/**
+ * Hold a queued write while it is unsafe (see `writeUnsafe`). The caller writes in the
+ * same turn this resolves, before any further PTY output can be delivered (C-API-56).
+ * Cancellation interrupts the wait; the caller then rejects instead of writing.
+ */
+export async function holdWhileUnsafe(terminal, guard, signal) {
+    while (!signal?.aborted && (await writeUnsafe(terminal, guard, signal))) {
+        await delayUnref(unsafeWriteRetryMs);
+    }
+}
+/**
+ * True while a write must be withheld. `blocked` reads the last OBSERVED frame, and
+ * rendering is asynchronous (§4.1): a dialog can be received yet unrendered, where
+ * writing would type into it. So first observe everything received. When that cannot
+ * be done — observation does not complete within the budget, a render has failed,
+ * or the wait was cancelled — the screen cannot be
+ * vouched for and the answer is `true`: fail closed, never write through.
+ * Awaited ownership uses `waitForRender` to wait cancellably for the shared pass,
+ * rather than repeatedly timing out and retrying an unchanged render backlog.
+ */
+export async function writeUnsafe(terminal, guard, signal, waitForRender = false) {
+    if (signal?.aborted)
+        return true; // an abort listener added now would never fire
+    if (terminal.settled &&
+        !(await observeRender(terminal.settled(), signal, waitForRender ? undefined : observeBudgetMs)))
+        return true;
+    return terminal.renderFailed === true || guard?.blocked?.() === true;
+}
 export function throwIfInputAborted(signal) {
     if (signal?.aborted)
         throw inputAbortError(signal);
@@ -33,9 +67,15 @@ export function throwIfInputAborted(signal) {
 export function inputAbortError(signal) {
     return signal.reason instanceof Error ? signal.reason : new Error("Submission aborted.");
 }
+/** Raw takeover of awaited turn input reports submission failure, preserving other errors (§5.3). */
+export function submissionError(error) {
+    return isPickerIntervention(error)
+        ? elwoodError("wait_timeout", "Raw input replaced the staged turn input.")
+        : error;
+}
 export async function clearStagedComposer(terminal) {
     try {
-        await terminal.sendInput("\u0015\u000b");
+        await terminal.sendInput(composerClearKeys);
     }
     catch {
         // Best-effort: preserve the cancellation as the primary outcome.

package/dist/core/input/abort.js.map

@@ -1 +1 @@
-{"version":3,"file":"abort.js","sourceRoot":"","sources":["../../../src/core/input/abort.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAKhF,MAAM,UAAU,YAAY,CAAC,EAAU,EAAE,MAAoB;IAC3D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAmB;IACjD,OAAO,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAuB;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC"}
+{"version":3,"file":"abort.js","sourceRoot":"","sources":["../../../src/core/input/abort.ts"],"names":[],"mappings":"AAAA,yGAAyG;AAEzG,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAaxD,MAAM,UAAU,YAAY,CAAC,EAAU,EAAE,MAAoB;IAC3D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC;AAErC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAuB,EACvB,KAA4C,EAC5C,MAAoB;IAEpB,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAuB,EACvB,KAA4C,EAC5C,MAAoB,EACpB,aAAa,GAAG,KAAK;IAErB,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,+CAA+C;IACjF,IACE,QAAQ,CAAC,OAAO;QAChB,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAE/F,OAAO,IAAI,CAAC;IACd,OAAO,QAAQ,CAAC,YAAY,KAAK,IAAI,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAmB;IACjD,OAAO,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAC3F,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,oBAAoB,CAAC,KAAK,CAAC;QAChC,CAAC,CAAC,WAAW,CAAC,cAAc,EAAE,2CAA2C,CAAC;QAC1E,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAuB;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC"}

package/dist/core/input/clear-ack.d.ts

@@ -0,0 +1,10 @@
+/** Observe native consumption of owned clear keys before releasing input (C-API-56). */
+import { type InputTerminal } from "./abort.ts";
+/**
+ * Positive empty-composer evidence: reuse one token for each completed frame and
+ * return a distinct token only for a later completed frame, never for each poll.
+ * Return undefined when there is no completed, positively empty native composer.
+ */
+export type EmptyComposerObserver = () => object | undefined;
+export declare function clearAndObserveComposer(terminal: InputTerminal, blocked: () => boolean, observeEmpty: EmptyComposerObserver, signal: AbortSignal): Promise<void>;
+//# sourceMappingURL=clear-ack.d.ts.map

package/dist/core/input/clear-ack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear-ack.d.ts","sourceRoot":"","sources":["../../../src/core/input/clear-ack.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EACL,KAAK,aAAa,EAKnB,MAAM,YAAY,CAAC;AAGpB;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,MAAM,GAAG,SAAS,CAAC;AAE7D,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,MAAM,OAAO,EACtB,YAAY,EAAE,qBAAqB,EACnC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/core/input/clear-ack.js

@@ -0,0 +1,26 @@
+/** Observe native consumption of owned clear keys before releasing input (C-API-56). */
+import { observeBudgetMs, throwIfInputAborted, waitForInput, writeUnsafe, } from "./abort.js";
+import { composerClearKeys, unsafeWriteRetryMs } from "./constants.js";
+export async function clearAndObserveComposer(terminal, blocked, observeEmpty, signal) {
+    const before = observeEmpty();
+    throwIfInputAborted(signal);
+    await terminal.sendInput(composerClearKeys);
+    const deadline = new AbortController();
+    const timer = setTimeout(() => deadline.abort(new Error("Composer clear was not observed.")), observeBudgetMs);
+    const waiting = AbortSignal.any([signal, deadline.signal]);
+    try {
+        for (;;) {
+            throwIfInputAborted(waiting);
+            if (await writeUnsafe(terminal, { blocked }, waiting))
+                throw new Error("Composer observation is unsafe.");
+            const after = observeEmpty();
+            if (after !== undefined && after !== before)
+                return;
+            await waitForInput(unsafeWriteRetryMs, waiting);
+        }
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=clear-ack.js.map

package/dist/core/input/clear-ack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear-ack.js","sourceRoot":"","sources":["../../../src/core/input/clear-ack.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAEL,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AASvE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAuB,EACvB,OAAsB,EACtB,YAAmC,EACnC,MAAmB;IAEnB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EACnE,eAAe,CAChB,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,SAAS,CAAC;YACR,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC7B,IAAI,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;YAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;gBAAE,OAAO;YACpD,MAAM,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/core/input/composer-cleanup.d.ts

@@ -0,0 +1,33 @@
+import { type InputTerminal } from "./abort.ts";
+import { type EmptyComposerObserver } from "./clear-ack.ts";
+/** Register ComposerCleanup before staging; unregistered terminals deliberately record no ownership. */
+export declare function stageComposer(terminal: InputTerminal): AbortSignal | undefined;
+/** Mark submission after staging; this is also a no-op without prior registration. */
+export declare function submittedComposer(terminal: InputTerminal): void;
+/**
+ * Registered session cleanup is deferred beyond attachment finalizers, including
+ * clipboard restoration. Unregistered direct callers instead attempt an immediate,
+ * observed, unblocked best-effort clear; they have no retained ownership token.
+ */
+export declare function requestComposerCleanup(terminal: InputTerminal, blocked?: () => boolean): Promise<void>;
+export declare class ComposerCleanup {
+    private draft;
+    private baseline;
+    private stagedGeneration;
+    private readonly terminal;
+    private readonly blocked;
+    private readonly closing;
+    private readonly rawInputSignal;
+    private readonly observeEmpty;
+    /** Register this owner before any stage/submit hooks or queued operation. */
+    constructor(terminal: InputTerminal, blocked: () => boolean, closing: AbortSignal, rawInputSignal: () => AbortSignal, observeEmpty: EmptyComposerObserver);
+    stage(): AbortSignal;
+    submitted(): void;
+    defer(): void;
+    /** Preparation may cancel before work; once invoked exactly once, work owns its task lifetime. */
+    run(work: () => Promise<void>, preparationSignal: AbortSignal): Promise<void>;
+    private reconcileDraftOwnership;
+    private flush;
+    private clear;
+}
+//# sourceMappingURL=composer-cleanup.d.ts.map

package/dist/core/input/composer-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composer-cleanup.d.ts","sourceRoot":"","sources":["../../../src/core/input/composer-cleanup.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,aAAa,EAInB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAA2B,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAMrF,wGAAwG;AACxG,wBAAgB,aAAa,CAAC,QAAQ,EAAE,aAAa,GAAG,WAAW,GAAG,SAAS,CAE9E;AACD,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,CAE/D;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,aAAa,EACvB,OAAO,CAAC,EAAE,MAAM,OAAO,GACtB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,QAAQ,CAAc;IAC9B,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwB;IACrD,6EAA6E;gBAE3E,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,MAAM,OAAO,EACtB,OAAO,EAAE,WAAW,EACpB,cAAc,EAAE,MAAM,WAAW,EACjC,YAAY,EAAE,qBAAqB;IAkBrC,KAAK,IAAI,WAAW;IAMpB,SAAS,IAAI,IAAI;IAMjB,KAAK,IAAI,IAAI;IAIb,kGAAkG;IAC5F,GAAG,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBnF,OAAO,CAAC,uBAAuB;YAKjB,KAAK;YAiBL,KAAK;CAYpB"}

package/dist/core/input/composer-cleanup.js

@@ -0,0 +1,127 @@
+/** Deferred draft cleanup owns a safe queue boundary, never caller-owned edits (PRD §5.3, C-API-56). */
+import { elwoodError } from "../errors.js";
+import { clearStagedComposer, throwIfInputAborted, waitForInput, writeUnsafe, } from "./abort.js";
+import { clearAndObserveComposer } from "./clear-ack.js";
+import { unsafeWriteRetryMs } from "./constants.js";
+const owners = new WeakMap();
+/** Register ComposerCleanup before staging; unregistered terminals deliberately record no ownership. */
+export function stageComposer(terminal) {
+    return owners.get(terminal)?.stage();
+}
+/** Mark submission after staging; this is also a no-op without prior registration. */
+export function submittedComposer(terminal) {
+    owners.get(terminal)?.submitted();
+}
+/**
+ * Registered session cleanup is deferred beyond attachment finalizers, including
+ * clipboard restoration. Unregistered direct callers instead attempt an immediate,
+ * observed, unblocked best-effort clear; they have no retained ownership token.
+ */
+export async function requestComposerCleanup(terminal, blocked) {
+    const owner = owners.get(terminal);
+    if (owner)
+        owner.defer();
+    else if (!(await writeUnsafe(terminal, { blocked: () => blocked?.() === true })))
+        await clearStagedComposer(terminal);
+}
+export class ComposerCleanup {
+    draft;
+    baseline;
+    stagedGeneration;
+    terminal;
+    blocked;
+    closing;
+    rawInputSignal;
+    observeEmpty;
+    /** Register this owner before any stage/submit hooks or queued operation. */
+    constructor(terminal, blocked, closing, rawInputSignal, observeEmpty) {
+        this.terminal = terminal;
+        this.blocked = blocked;
+        this.closing = closing;
+        this.rawInputSignal = rawInputSignal;
+        this.observeEmpty = observeEmpty;
+        this.baseline = rawInputSignal();
+        owners.set(terminal, this);
+        closing.addEventListener("abort", () => {
+            this.draft = undefined;
+        }, { once: true });
+    }
+    stage() {
+        this.stagedGeneration = this.rawInputSignal();
+        if (this.stagedGeneration === this.baseline)
+            this.draft ??= { rawInputSignal: this.stagedGeneration, pending: false };
+        return this.stagedGeneration;
+    }
+    submitted() {
+        // Only an uninterrupted submission establishes a fresh composer after raw edits.
+        if (this.stagedGeneration === this.rawInputSignal())
+            this.baseline = this.stagedGeneration;
+        this.stagedGeneration = undefined;
+        this.draft = undefined;
+    }
+    defer() {
+        if (this.reconcileDraftOwnership())
+            this.draft.pending = true;
+    }
+    /** Preparation may cancel before work; once invoked exactly once, work owns its task lifetime. */
+    async run(work, preparationSignal) {
+        await this.flush(preparationSignal);
+        throwIfInputAborted(preparationSignal);
+        try {
+            await work();
+        }
+        catch (error) {
+            this.defer();
+            // Never wait for a dialog in a failed operation or retain the clipboard lock for it.
+            if (this.reconcileDraftOwnership() &&
+                !(await writeUnsafe(this.terminal, { blocked: this.blocked }, this.closing))) {
+                try {
+                    await this.clear();
+                }
+                catch {
+                    /* The next operation must retry or reject. */
+                }
+            }
+            throw error;
+        }
+    }
+    reconcileDraftOwnership() {
+        if (this.closing.aborted || this.draft?.rawInputSignal.aborted)
+            this.draft = undefined;
+        return this.draft !== undefined;
+    }
+    async flush(signal) {
+        while (this.reconcileDraftOwnership() && this.draft.pending) {
+            const observe = AbortSignal.any([signal, this.closing, this.draft.rawInputSignal]);
+            try {
+                if (!(await writeUnsafe(this.terminal, { blocked: this.blocked }, observe))) {
+                    await this.clear(observe);
+                    break;
+                }
+                await waitForInput(unsafeWriteRetryMs, observe);
+            }
+            catch (error) {
+                if (this.reconcileDraftOwnership())
+                    throw error;
+            }
+        }
+        throwIfInputAborted(signal);
+        throwIfInputAborted(this.closing);
+    }
+    async clear(preparationSignal = this.closing) {
+        if (!this.reconcileDraftOwnership())
+            return;
+        const draft = this.draft;
+        const signal = AbortSignal.any([preparationSignal, this.closing, draft.rawInputSignal]);
+        try {
+            await clearAndObserveComposer(this.terminal, this.blocked, this.observeEmpty, signal);
+        }
+        catch {
+            throwIfInputAborted(signal);
+            throw elwoodError("wait_timeout", "Could not clear the staged composer draft.");
+        }
+        if (this.draft === draft)
+            this.draft = undefined;
+    }
+}
+//# sourceMappingURL=composer-cleanup.js.map

package/dist/core/input/composer-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composer-cleanup.js","sourceRoot":"","sources":["../../../src/core/input/composer-cleanup.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,mBAAmB,EAEnB,mBAAmB,EACnB,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,uBAAuB,EAA8B,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,MAAM,GAAG,IAAI,OAAO,EAAkC,CAAC;AAG7D,wGAAwG;AACxG,MAAM,UAAU,aAAa,CAAC,QAAuB;IACnD,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC;AACD,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,QAAuB;IACvD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAuB,EACvB,OAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,OAAO,eAAe;IAClB,KAAK,CAAoB;IACzB,QAAQ,CAAc;IACtB,gBAAgB,CAA0B;IACjC,QAAQ,CAAgB;IACxB,OAAO,CAAgB;IACvB,OAAO,CAAc;IACrB,cAAc,CAAoB;IAClC,YAAY,CAAwB;IACrD,6EAA6E;IAC7E,YACE,QAAuB,EACvB,OAAsB,EACtB,OAAoB,EACpB,cAAiC,EACjC,YAAmC;QAEnC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,gBAAgB,CACtB,OAAO,EACP,GAAG,EAAE;YACH,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,QAAQ;YACzC,IAAI,CAAC,KAAK,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IACD,SAAS;QACP,iFAAiF;QACjF,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,cAAc,EAAE;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC3F,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IACD,KAAK;QACH,IAAI,IAAI,CAAC,uBAAuB,EAAE;YAAE,IAAI,CAAC,KAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACjE,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,GAAG,CAAC,IAAyB,EAAE,iBAA8B;QACjE,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,qFAAqF;YACrF,IACE,IAAI,CAAC,uBAAuB,EAAE;gBAC9B,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,EAC5E,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC;oBACP,8CAA8C;gBAChD,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,uBAAuB;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO;YAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvF,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,MAAmB;QACrC,OAAO,IAAI,CAAC,uBAAuB,EAAE,IAAI,IAAI,CAAC,KAAM,CAAC,OAAO,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAM,CAAC,cAAc,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC;gBACH,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;oBAC5E,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC1B,MAAM;gBACR,CAAC;gBACD,MAAM,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,uBAAuB,EAAE;oBAAE,MAAM,KAAK,CAAC;YAClD,CAAC;QACH,CAAC;QACD,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5B,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,OAAO;QAClD,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE;YAAE,OAAO;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,WAAW,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACnD,CAAC;CACF"}