@with-logic/elwood 0.1.3 → 0.2.0

package/dist/codex/update/layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.js","sourceRoot":"","sources":["../../../src/codex/update/layout.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,EAAuB,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEtF,sGAAsG;AACtG,MAAM,CAAC,MAAM,kBAAkB,GAC7B,mJAAmJ,CAAC;AAEtJ,6FAA6F;AAC7F,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAChG,MAAM,MAAM,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,IAAuB,EAAE,SAAkB;IAClE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QAChC,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,MAAM,GAAG,IAAI,CAAC;gBACd,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAW,CAAC;YAC7C,IAAI,CAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;gBAClD,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChE,SAAS;YACX,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;IAC7D,CAAC;IACD,OAAO,oBAAoB,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAkC;IAC9D,IACE,OAAO,CAAC,IAAI,CACV,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAChB,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC;QAChC,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,CAC7E;QAED,OAAO,SAAS,CAAC;IACnB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,YAAY,GAChB,0GAA0G,CAAC;AAE7G,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,CACL,wFAAwF,CAAC,IAAI,CAC3F,KAAK,CACN;QACD,KAAK,KAAK,kDAAkD;QAC5D,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB,EAAE,GAAW;IACxD,OAAO,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,CACL,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5B,+EAA+E,CAAC,IAAI,CAAC,GAAG,CAAC,CAC1F,CAAC;AACJ,CAAC"}

package/dist/codex/update/recognition.d.ts

@@ -0,0 +1,3 @@
+export { updateScreenBanner } from "./layout.ts";
+export declare function codexUpdatePromptVisible(frameText: string): boolean;
+//# sourceMappingURL=recognition.d.ts.map

package/dist/codex/update/recognition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recognition.d.ts","sourceRoot":"","sources":["../../../src/codex/update/recognition.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEnE"}

package/dist/codex/update/recognition.js

@@ -0,0 +1,7 @@
+/** Recognizes native update appearances and continuation rows (PRD §5.5, C-CODEX-12). */
+import { classifyCodexUpdateFrame } from "./classification.js";
+export { updateScreenBanner } from "./layout.js";
+export function codexUpdatePromptVisible(frameText) {
+    return classifyCodexUpdateFrame(frameText).visible;
+}
+//# sourceMappingURL=recognition.js.map

package/dist/codex/update/recognition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recognition.js","sourceRoot":"","sources":["../../../src/codex/update/recognition.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,OAAO,wBAAwB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;AACrD,CAAC"}

package/dist/codex/update/selection.d.ts

@@ -0,0 +1,7 @@
+/** Selects the safe Codex update option in native menu order (PRD §5.5, C-CODEX-12). */
+import type { NumberedOption } from "../../core/terminal-options.ts";
+export declare const codexUpdateOptionPattern: RegExp;
+export declare const codexUpdateActionPattern: RegExp;
+/** Initial dispatch and retries must never select a skip-shaped row before the action. */
+export declare function safeUpdateOption(frameText: string, options?: readonly NumberedOption[]): NumberedOption | undefined;
+//# sourceMappingURL=selection.d.ts.map

package/dist/codex/update/selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selection.d.ts","sourceRoot":"","sources":["../../../src/codex/update/selection.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGrE,eAAO,MAAM,wBAAwB,QAAqD,CAAC;AAC3F,eAAO,MAAM,wBAAwB,QAAkB,CAAC;AAExD,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,SAAS,cAAc,EAAyC,GACxE,cAAc,GAAG,SAAS,CAO5B"}

package/dist/codex/update/selection.js

@@ -0,0 +1,10 @@
+import { updateDialogOptions } from "./layout.js";
+export const codexUpdateOptionPattern = /continue\s*without\s*updat|skip|not\s*now|later/i;
+export const codexUpdateActionPattern = /update\s+now/i;
+/** Initial dispatch and retries must never select a skip-shaped row before the action. */
+export function safeUpdateOption(frameText, options = updateDialogOptions(frameText) ?? []) {
+    const actionIndex = options.findIndex((option) => codexUpdateActionPattern.test(option.label));
+    const candidates = actionIndex < 0 ? options : options.slice(actionIndex + 1);
+    return candidates.find((option) => codexUpdateOptionPattern.test(option.label) && !codexUpdateActionPattern.test(option.label));
+}
+//# sourceMappingURL=selection.js.map

package/dist/codex/update/selection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selection.js","sourceRoot":"","sources":["../../../src/codex/update/selection.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,CAAC,MAAM,wBAAwB,GAAG,kDAAkD,CAAC;AAC3F,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAExD,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,UAAqC,mBAAmB,CAAC,SAAS,CAAC,IAAI,EAAE;IAEzE,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;IAC9E,OAAO,UAAU,CAAC,IAAI,CACpB,CAAC,MAAM,EAAE,EAAE,CACT,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAC9F,CAAC;AACJ,CAAC"}

package/dist/codex/update/skip-attempt.d.ts

@@ -0,0 +1,25 @@
+/** Reconcile a bounded update attempt with its owning appearance (PRD §5.5, C-CODEX-12). */
+import type { AutomationWriteResult } from "../../core/startup/barrier.ts";
+import type { StartupWriteCompletion } from "../../core/startup/write.ts";
+import type { TrustClearance } from "../../core/trust/clearance.ts";
+import type { TrustWriteResult } from "../../core/trust/responder.ts";
+import type { CodexUpdatePromptTracker } from "./tracker.ts";
+type UpdateSkipRequest = {
+    readonly option: string;
+    readonly generation: number;
+    readonly screenText: string;
+    readonly tracker: CodexUpdatePromptTracker;
+    readonly writeAutomation: (input: string) => TrustWriteResult | Promise<AutomationWriteResult>;
+    readonly readFrame: (() => string) | undefined;
+    readonly signal: AbortSignal;
+    readonly clearance: TrustClearance;
+    readonly inputHeld: () => boolean;
+    readonly releaseLatch: () => void;
+};
+type UpdateSkipAttempt = {
+    readonly settled: Promise<StartupWriteCompletion>;
+    readonly observeClearance: (frame: string) => void;
+};
+export declare function startCodexUpdateSkip(request: UpdateSkipRequest): UpdateSkipAttempt;
+export {};
+//# sourceMappingURL=skip-attempt.d.ts.map

package/dist/codex/update/skip-attempt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-attempt.d.ts","sourceRoot":"","sources":["../../../src/codex/update/skip-attempt.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGtE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7D,KAAK,iBAAiB,GAAG;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC/F,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC;CACnC,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAClD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAgElF"}

package/dist/codex/update/skip-attempt.js

@@ -0,0 +1,64 @@
+import { trustGateVisible } from "../../core/trust/blocking.js";
+import { writeCodexUpdateSkip } from "../update-prompt.js";
+import { safeUpdateOption } from "./selection.js";
+export function startCodexUpdateSkip(request) {
+    const { tracker, generation, readFrame, screenText, signal, releaseLatch } = request;
+    const completion = Promise.withResolvers();
+    const retries = new AbortController();
+    const retrySignal = AbortSignal.any([signal, retries.signal]);
+    const sameUpdate = tracker.currentFramePredicate();
+    const current = (frame) => !retrySignal.aborted && sameUpdate(frame) && !trustGateVisible(frame, "codex");
+    const invalidated = (frame) => trustGateVisible(frame, "codex") || request.inputHeld();
+    const ownsAttempt = () => !(signal.aborted || tracker.hasSupersedingGeneration(generation));
+    let written = false;
+    let cleared = false;
+    const finish = (result) => {
+        completion.resolve(result);
+        retries.abort();
+    };
+    const answerIfCleared = () => {
+        if (!retries.signal.aborted && written && cleared && ownsAttempt())
+            finish("answered");
+    };
+    void writeCodexUpdateSkip(request.option, request.writeAutomation, readFrame, current, invalidated, retrySignal, request.clearance, () => {
+        written = true;
+        answerIfCleared();
+    }, (frame) => safeUpdateOption(frame, tracker.classify(frame).options)).then((result) => {
+        if (retries.signal.aborted)
+            return;
+        if (!ownsAttempt() || result === "exhausted" || result === "unobserved") {
+            finish("cancelled");
+            return;
+        }
+        if (result === "cancelled")
+            releaseLatch();
+        finish(result);
+    }, (error) => {
+        if (retries.signal.aborted)
+            return;
+        if (signal.aborted)
+            return finish("cancelled");
+        const replaced = tracker.hasSupersedingGeneration(generation);
+        if (!replaced)
+            releaseLatch();
+        // The live screen can clear before the next responder observation.
+        if (!current(readFrame?.() ?? screenText))
+            return finish("cancelled");
+        completion.reject(error);
+        retries.abort();
+    });
+    return {
+        settled: completion.promise,
+        observeClearance(frame) {
+            if (retries.signal.aborted || readFrame === undefined || !ownsAttempt())
+                return;
+            if (invalidated(frame) || !request.clearance(frame))
+                return;
+            // Keep this attempt's native edge before queued input can repaint it. A
+            // pending write still has to fulfill; withheld/rejected writes never answer.
+            cleared = true;
+            answerIfCleared();
+        },
+    };
+}
+//# sourceMappingURL=skip-attempt.js.map

package/dist/codex/update/skip-attempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-attempt.js","sourceRoot":"","sources":["../../../src/codex/update/skip-attempt.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAGhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAqBlD,MAAM,UAAU,oBAAoB,CAAC,OAA0B;IAC7D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACrF,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAA0B,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAChC,CAAC,WAAW,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAC/F,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5F,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,MAAM,GAAG,CAAC,MAA8B,EAAE,EAAE;QAChD,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,IAAI,OAAO,IAAI,WAAW,EAAE;YAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACzF,CAAC,CAAC;IACF,KAAK,oBAAoB,CACvB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,eAAe,EACvB,SAAS,EACT,OAAO,EACP,WAAW,EACX,WAAW,EACX,OAAO,CAAC,SAAS,EACjB,GAAG,EAAE;QACH,OAAO,GAAG,IAAI,CAAC;QACf,eAAe,EAAE,CAAC;IACpB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CACpE,CAAC,IAAI,CACJ,CAAC,MAAM,EAAE,EAAE;QACT,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACnC,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YACxE,MAAM,CAAC,WAAW,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,WAAW;YAAE,YAAY,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACnC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ;YAAE,YAAY,EAAE,CAAC;QAC9B,mEAAmE;QACnE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;QACtE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IACF,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,gBAAgB,CAAC,KAAa;YAC5B,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO;YAChF,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,OAAO;YAC5D,wEAAwE;YACxE,6EAA6E;YAC7E,OAAO,GAAG,IAAI,CAAC;YACf,eAAe,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/codex/update/tracker.d.ts

@@ -0,0 +1,37 @@
+/** Tracks native update generations for bounded automation (PRD §5.5, C-CODEX-12). */
+import type { TrustClearance } from "../../core/trust/clearance.ts";
+import { type CodexUpdateFrame } from "./classification.ts";
+/** Tracks update eligibility separately from the session’s retained input hold. */
+export declare class CodexUpdatePromptTracker {
+    private readonly frames;
+    private evidence;
+    private active;
+    private generation;
+    private requiresBanner;
+    private pendingClearance;
+    private readonly clearance;
+    private readonly deferClearance;
+    /** Live responders confirm after classification; standalone callers use the supplied clearance. */
+    constructor(clearance?: TrustClearance, deferClearance?: boolean);
+    /** Identifies the current appearance; it changes when the screen clears, appears, or revokes an attempt. */
+    get currentGeneration(): number;
+    /** Ordinary frames need no clearance parsing without a pending or revoked update. */
+    get needsClearance(): boolean;
+    /** A replacement revokes the attempt; its positive clear is only `generation + 1`. */
+    hasSupersedingGeneration(generation: number): boolean;
+    appearanceChanged(frameText: string): boolean;
+    /** Fresh unambiguous evidence gives a revoked generation its own bounded grace. */
+    renewsAttention(frameText: string): boolean;
+    /** Cache only this instance’s most recent exact viewport classification. */
+    classify(frameText: string): CodexUpdateFrame;
+    observe(frameText: string): boolean;
+    /** Only a current banner and validated block may authorize a write. */
+    private observeEvidence;
+    /** Only a fresh complete bounded block may retire an overflowed appearance. */
+    private freshBoundedEvidence;
+    /** Called after the current frame's live clearance and retained input hold are known. */
+    observeClearance(cleared: boolean): void;
+    /** Captures the current prompt generation so an async retry cannot enter a later dialog. */
+    currentFramePredicate(): (frameText: string) => boolean;
+}
+//# sourceMappingURL=tracker.d.ts.map

package/dist/codex/update/tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.d.ts","sourceRoot":"","sources":["../../../src/codex/update/tracker.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE,OAAO,EAAE,KAAK,gBAAgB,EAA8B,MAAM,qBAAqB,CAAC;AAYxF,mFAAmF;AACnF,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,gBAAgB,CAAS;IAEjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,mGAAmG;gBACvF,SAAS,GAAE,cAAuC,EAAE,cAAc,UAAQ;IAKtF,4GAA4G;IAC5G,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,qFAAqF;IACrF,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED,sFAAsF;IACtF,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAIrD,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAkB7C,mFAAmF;IACnF,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAY3C,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB;IAI7C,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IA0CnC,uEAAuE;IACvE,OAAO,CAAC,eAAe;IAsBvB,+EAA+E;IAC/E,OAAO,CAAC,oBAAoB;IAU5B,yFAAyF;IACzF,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAQxC,4FAA4F;IAC5F,qBAAqB,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO;CAcxD"}

package/dist/codex/update/tracker.js

@@ -0,0 +1,156 @@
+import { codexComposerClearance } from "../screen/clearance.js";
+import { CodexUpdateFrameClassifier } from "./classification.js";
+import { bannerContradictsAppearance, currentOptionBindingsMatch, emptyUpdateEvidence, retainedOptionLabelsAgree, retainedSafeOptionsPresent, withUpdateFrameEvidence, } from "./evidence.js";
+import { updateScreenBanner } from "./layout.js";
+import { safeUpdateOption } from "./selection.js";
+/** Tracks update eligibility separately from the session’s retained input hold. */
+export class CodexUpdatePromptTracker {
+    frames = new CodexUpdateFrameClassifier();
+    evidence = emptyUpdateEvidence();
+    active = false;
+    generation = 0;
+    requiresBanner = false;
+    pendingClearance = false;
+    clearance;
+    deferClearance;
+    /** Live responders confirm after classification; standalone callers use the supplied clearance. */
+    constructor(clearance = codexComposerClearance, deferClearance = false) {
+        this.clearance = clearance;
+        this.deferClearance = deferClearance;
+    }
+    /** Identifies the current appearance; it changes when the screen clears, appears, or revokes an attempt. */
+    get currentGeneration() {
+        return this.generation;
+    }
+    /** Ordinary frames need no clearance parsing without a pending or revoked update. */
+    get needsClearance() {
+        return this.pendingClearance || this.requiresBanner;
+    }
+    /** A replacement revokes the attempt; its positive clear is only `generation + 1`. */
+    hasSupersedingGeneration(generation) {
+        return this.generation > generation + 1;
+    }
+    appearanceChanged(frameText) {
+        const banner = updateScreenBanner.exec(frameText)?.[0].trim();
+        const options = this.classify(frameText).options;
+        return (this.active &&
+            banner !== undefined &&
+            !bannerContradictsAppearance({ observedBanner: banner }, frameText) &&
+            (bannerContradictsAppearance(this.evidence, frameText) ||
+                (options !== undefined &&
+                    safeUpdateOption(frameText, options) !== undefined &&
+                    !this.evidence.overflowed &&
+                    !(retainedOptionLabelsAgree(this.evidence, frameText, options) &&
+                        retainedSafeOptionsPresent(this.evidence, options)))));
+    }
+    /** Fresh unambiguous evidence gives a revoked generation its own bounded grace. */
+    renewsAttention(frameText) {
+        const frame = this.classify(frameText);
+        return (frame.options !== undefined &&
+            (!this.evidence.overflowed ||
+                this.appearanceChanged(frameText) ||
+                this.freshBoundedEvidence(frameText, frame)) &&
+            (!this.requiresBanner || safeUpdateOption(frameText, frame.options) !== undefined) &&
+            (this.appearanceChanged(frameText) || (this.requiresBanner && frame.hasBanner)));
+    }
+    /** Cache only this instance’s most recent exact viewport classification. */
+    classify(frameText) {
+        return this.frames.read(frameText);
+    }
+    observe(frameText) {
+        // Missing classification cannot lend a provisional clear to another frame.
+        if (this.pendingClearance)
+            this.observeClearance(false);
+        if (this.appearanceChanged(frameText)) {
+            this.generation += 1;
+            this.active = false;
+            this.evidence = emptyUpdateEvidence();
+        }
+        const frame = this.classify(frameText);
+        const validEvidence = this.observeEvidence(frameText, frame);
+        if (frame.visible && this.active && !this.requiresBanner && !validEvidence) {
+            // Retire the attempt and its positive-clear edge; ambiguity is not success.
+            this.generation += 2;
+            this.requiresBanner = true;
+        }
+        if (frame.visible) {
+            if (!this.active)
+                this.generation += 1;
+            if (validEvidence &&
+                this.requiresBanner &&
+                frame.hasBanner &&
+                safeUpdateOption(frameText, frame.options)) {
+                this.generation += 1;
+                this.requiresBanner = false;
+            }
+            this.active = true;
+            if (!validEvidence)
+                this.requiresBanner = true;
+        }
+        else {
+            if (this.active) {
+                this.generation += 1;
+                this.requiresBanner = true;
+                this.pendingClearance = true;
+            }
+            this.active = false;
+            this.evidence = emptyUpdateEvidence();
+            if (!this.deferClearance && this.needsClearance)
+                this.observeClearance(this.clearance(frameText));
+        }
+        return this.active;
+    }
+    /** Only a current banner and validated block may authorize a write. */
+    observeEvidence(frameText, frame) {
+        const firstParty = frame.hasBanner;
+        if (this.freshBoundedEvidence(frameText, frame))
+            this.evidence = emptyUpdateEvidence();
+        const priorBindingsAgree = frame.options !== undefined &&
+            retainedOptionLabelsAgree(this.evidence, frameText, frame.options) &&
+            retainedSafeOptionsPresent(this.evidence, frame.options);
+        if (firstParty && frame.options !== undefined) {
+            this.evidence = withUpdateFrameEvidence(this.evidence, frameText, true, frame.options);
+        }
+        if (frame.visible) {
+            this.evidence = {
+                ...this.evidence,
+                observedBanner: this.evidence.observedBanner || (updateScreenBanner.exec(frameText)?.[0]?.trim() ?? ""),
+            };
+        }
+        return (firstParty && frame.options !== undefined && !this.evidence.overflowed && priorBindingsAgree);
+    }
+    /** Only a fresh complete bounded block may retire an overflowed appearance. */
+    freshBoundedEvidence(frameText, frame) {
+        return (this.requiresBanner &&
+            frame.hasBanner &&
+            frame.options !== undefined &&
+            safeUpdateOption(frameText, frame.options) !== undefined &&
+            !withUpdateFrameEvidence(emptyUpdateEvidence(), frameText, true, frame.options).overflowed);
+    }
+    /** Called after the current frame's live clearance and retained input hold are known. */
+    observeClearance(cleared) {
+        if (this.pendingClearance) {
+            if (!cleared)
+                this.generation += 1;
+            this.pendingClearance = false;
+        }
+        if (cleared && !this.active)
+            this.requiresBanner = false;
+    }
+    /** Captures the current prompt generation so an async retry cannot enter a later dialog. */
+    currentFramePredicate() {
+        const generation = this.generation;
+        return (frameText) => {
+            if (!(this.active && !this.requiresBanner && this.generation === generation))
+                return false;
+            if (bannerContradictsAppearance(this.evidence, frameText))
+                return false;
+            const frame = this.classify(frameText);
+            return (frame.hasBanner &&
+                frame.options !== undefined &&
+                retainedSafeOptionsPresent(this.evidence, frame.options) &&
+                currentOptionBindingsMatch(this.evidence, frameText, frame.options));
+        };
+    }
+}
+//# sourceMappingURL=tracker.js.map

package/dist/codex/update/tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.js","sourceRoot":"","sources":["../../../src/codex/update/tracker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAyB,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,mBAAmB,EACnB,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,mFAAmF;AACnF,MAAM,OAAO,wBAAwB;IAClB,MAAM,GAAG,IAAI,0BAA0B,EAAE,CAAC;IACnD,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACjC,MAAM,GAAG,KAAK,CAAC;IACf,UAAU,GAAG,CAAC,CAAC;IACf,cAAc,GAAG,KAAK,CAAC;IACvB,gBAAgB,GAAG,KAAK,CAAC;IAEhB,SAAS,CAAiB;IAC1B,cAAc,CAAU;IACzC,mGAAmG;IACnG,YAAY,YAA4B,sBAAsB,EAAE,cAAc,GAAG,KAAK;QACpF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED,4GAA4G;IAC5G,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,qFAAqF;IACrF,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,cAAc,CAAC;IACtD,CAAC;IAED,sFAAsF;IACtF,wBAAwB,CAAC,UAAkB;QACzC,OAAO,IAAI,CAAC,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,iBAAiB,CAAC,SAAiB;QACjC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;QACjD,OAAO,CACL,IAAI,CAAC,MAAM;YACX,MAAM,KAAK,SAAS;YACpB,CAAC,2BAA2B,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC;YACnE,CAAC,2BAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACpD,CAAC,OAAO,KAAK,SAAS;oBACpB,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,SAAS;oBAClD,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU;oBACzB,CAAC,CACC,yBAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;wBAC5D,0BAA0B,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CACnD,CAAC,CAAC,CACR,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,eAAe,CAAC,SAAiB;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,CACL,KAAK,CAAC,OAAO,KAAK,SAAS;YAC3B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU;gBACxB,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC;gBACjC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;YAClF,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAChF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,QAAQ,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,2EAA2E;QAC3E,IAAI,IAAI,CAAC,gBAAgB;YAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3E,4EAA4E;YAC5E,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACvC,IACE,aAAa;gBACb,IAAI,CAAC,cAAc;gBACnB,KAAK,CAAC,SAAS;gBACf,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAC1C,CAAC;gBACD,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;gBACrB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,aAAa;gBAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;gBACrB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;gBAC7C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,uEAAuE;IAC/D,eAAe,CAAC,SAAiB,EAAE,KAAuB;QAChE,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACnC,IAAI,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACvF,MAAM,kBAAkB,GACtB,KAAK,CAAC,OAAO,KAAK,SAAS;YAC3B,yBAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;YAClE,0BAA0B,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,GAAG;gBACd,GAAG,IAAI,CAAC,QAAQ;gBAChB,cAAc,EACZ,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;aAC1F,CAAC;QACJ,CAAC;QACD,OAAO,CACL,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,kBAAkB,CAC7F,CAAC;IACJ,CAAC;IAED,+EAA+E;IACvE,oBAAoB,CAAC,SAAiB,EAAE,KAAuB;QACrE,OAAO,CACL,IAAI,CAAC,cAAc;YACnB,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,OAAO,KAAK,SAAS;YAC3B,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;YACxD,CAAC,uBAAuB,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,CAC3F,CAAC;IACJ,CAAC;IAED,yFAAyF;IACzF,gBAAgB,CAAC,OAAgB;QAC/B,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAChC,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAC3D,CAAC;IAED,4FAA4F;IAC5F,qBAAqB;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,OAAO,CAAC,SAAS,EAAE,EAAE;YACnB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC3F,IAAI,2BAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,CACL,KAAK,CAAC,SAAS;gBACf,KAAK,CAAC,OAAO,KAAK,SAAS;gBAC3B,0BAA0B,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC;gBACxD,0BAA0B,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CACpE,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/codex/update-identity.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The identity an update-skip attempt captures, so a post-settlement check can prove the
+ * settled frame is still the dialog it started on. Implements PRD §5.5 / C-CODEX-12 (#42).
+ */
+import { type NumberedOption } from "../core/terminal-options.ts";
+/**
+ * The identity of the update choice an attempt captured: the dialog's own non-option
+ * text plus the exact option it decided to press (number AND label). Modelled on
+ * `choiceIdentity` in the trust responder, for the same reason — a post-settlement check
+ * must prove the frame is still the ONE the attempt started on, not merely that it looks
+ * similar. Nothing outside this tuple can satisfy the guard: a new generation repaints
+ * different non-option text, a renumbered dialog changes the number, a replacement
+ * dialog changes the label, and an unrelated prompt changes all three (#42).
+ */
+export declare function codexUpdateChoiceIdentity(frameText: string, option: NumberedOption): string;
+/**
+ * The post-settlement guard an attempt binds to its key: the settled frame must still be
+ * the dialog the attempt captured. Named and exported rather than an inline closure so
+ * every branch is directly testable — `stillThisUpdate` carries the generation check,
+ * and the identity comparison carries the dialog and option.
+ */
+export declare function settledFrameKeepsChoice(settledFrame: string, capturedIdentity: string, optionNumber: string, stillThisUpdate: (frameText: string) => boolean): boolean;
+//# sourceMappingURL=update-identity.d.ts.map

package/dist/codex/update-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-identity.d.ts","sourceRoot":"","sources":["../../src/codex/update-identity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,cAAc,EAAkC,MAAM,6BAA6B,CAAC;AAGlG;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,CAe3F;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,GAC9C,OAAO,CAOT"}

package/dist/codex/update-identity.js

@@ -0,0 +1,46 @@
+/**
+ * The identity an update-skip attempt captures, so a post-settlement check can prove the
+ * settled frame is still the dialog it started on. Implements PRD §5.5 / C-CODEX-12 (#42).
+ */
+import { nonOptionText, numberedOptions } from "../core/terminal-options.js";
+import { updateScreenBanner } from "./update/recognition.js";
+/**
+ * The identity of the update choice an attempt captured: the dialog's own non-option
+ * text plus the exact option it decided to press (number AND label). Modelled on
+ * `choiceIdentity` in the trust responder, for the same reason — a post-settlement check
+ * must prove the frame is still the ONE the attempt started on, not merely that it looks
+ * similar. Nothing outside this tuple can satisfy the guard: a new generation repaints
+ * different non-option text, a renumbered dialog changes the number, a replacement
+ * dialog changes the label, and an unrelated prompt changes all three (#42).
+ */
+export function codexUpdateChoiceIdentity(frameText, option) {
+    // The banner carries the version pair, which is what distinguishes one appearance of
+    // the update screen from the next; `nonOptionText` alone can be empty when the caret
+    // row is parsed as an option, which would make two generations look identical.
+    const banner = updateScreenBanner.exec(frameText)?.[0]?.trim() ?? "";
+    const labels = numberedOptions(frameText)
+        .map((candidate) => `${candidate.number}:${candidate.label}`)
+        .join("|");
+    return JSON.stringify([
+        nonOptionText(frameText).trim(),
+        banner,
+        labels,
+        option.number,
+        option.label,
+    ]);
+}
+/**
+ * The post-settlement guard an attempt binds to its key: the settled frame must still be
+ * the dialog the attempt captured. Named and exported rather than an inline closure so
+ * every branch is directly testable — `stillThisUpdate` carries the generation check,
+ * and the identity comparison carries the dialog and option.
+ */
+export function settledFrameKeepsChoice(settledFrame, capturedIdentity, optionNumber, stillThisUpdate) {
+    if (!stillThisUpdate(settledFrame))
+        return false;
+    const settledOption = numberedOptions(settledFrame).find((candidate) => candidate.number === optionNumber);
+    if (settledOption === undefined)
+        return false;
+    return codexUpdateChoiceIdentity(settledFrame, settledOption) === capturedIdentity;
+}
+//# sourceMappingURL=update-identity.js.map

package/dist/codex/update-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-identity.js","sourceRoot":"","sources":["../../src/codex/update-identity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAuB,aAAa,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAAiB,EAAE,MAAsB;IACjF,qFAAqF;IACrF,qFAAqF;IACrF,+EAA+E;IAC/E,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC;SACtC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;SAC5D,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE;QAC/B,MAAM;QACN,MAAM;QACN,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,gBAAwB,EACxB,YAAoB,EACpB,eAA+C;IAE/C,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,aAAa,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,IAAI,CACtD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,YAAY,CACjD,CAAC;IACF,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,yBAAyB,CAAC,YAAY,EAAE,aAAa,CAAC,KAAK,gBAAgB,CAAC;AACrF,CAAC"}

package/dist/codex/update-prompt.d.ts

@@ -1,23 +1,32 @@
 /**
- * Recognizes first-party Codex in-TUI update screens and their safe options.
- * Implements PRD §5.5 and C-CODEX-12 for both prompt automation and input blocking.
+ * Orchestrates guarded Codex update-skip writes and bounded retries (PRD §5.5, C-CODEX-12).
+ * Active classification lives in update/classification.ts and update/layout.ts;
+ * update/recognition.ts is the visibility facade.
  */
+import { type InputTerminal } from "../core/input/abort.ts";
+import { type AutomationWriteResult, type NonTrustAutomationWriter } from "../core/startup/barrier.ts";
+import type { StartupWriteCompletion } from "../core/startup/write.ts";
+import type { TrustClearance } from "../core/trust/clearance.ts";
 import type { TrustWriteResult } from "../core/trust/responder.ts";
-export declare const codexUpdateOptionPattern: RegExp;
+import { safeUpdateOption } from "./update/selection.ts";
+/** The Codex non-trust automation barrier, with update-option revalidation bound in. */
+export declare function guardedCodexAutomationWrite(terminal: InputTerminal, write: NonTrustAutomationWriter, readFrame: () => string, signal?: AbortSignal): (input: string, perWrite?: (frameText: string) => boolean) => Promise<AutomationWriteResult>;
 /**
- * A captured first-party banner alone counts so a partial layout fails safe
- * before its options paint. Generic "update available" prose does not count;
- * an option-only frame must carry both the update and safe choices.
+ * Revalidates an update-skip key against the SETTLED frame. The option number was read
+ * from a pre-settle frame, so a replacement or renumbered update screen can move the safe
+ * choice; sending the old number would select whatever now sits at that position. Keys
+ * that are not update-screen option numbers (other automation) are left alone.
  */
-export declare function codexUpdatePromptVisible(frameText: string): boolean;
-/** Keeps a split prompt blocking until a frame with no update evidence clears it. */
-export declare class CodexUpdatePromptTracker {
-    private active;
-    private generation;
-    observe(frameText: string): boolean;
-    /** Captures the current prompt generation so an async retry cannot enter a later dialog. */
-    currentFramePredicate(): (frameText: string) => boolean;
-}
-/** Retries a possibly swallowed startup hotkey only while its safe option remains visible. */
-export declare function writeCodexUpdateSkip(option: string, write: (input: string) => TrustWriteResult, readFrame?: () => string, currentUpdateFrame?: (frameText: string) => boolean): Promise<void>;
+export declare function codexOptionStillSafe(frameText: string, input: string): boolean;
+/** `exhausted`: the retry budget ended while the safe option was still visible. */
+export type CodexUpdateSkipCompletion = StartupWriteCompletion | "exhausted" | "unobserved";
+/**
+ * Retries a possibly swallowed startup hotkey only while its safe option remains visible.
+ *
+ * `answered` requires a fulfilled physical write and positive native composer
+ * clearance with no invalidating session input hold. Unknown replacements and
+ * missing readers cannot prove success; an unobserved fulfilled write remains
+ * latched so persistent frames cannot start another skip (C-CODEX-12/17).
+ */
+export declare function writeCodexUpdateSkip(option: string, write: (input: string, perWrite?: (frameText: string) => boolean) => TrustWriteResult | Promise<AutomationWriteResult>, readFrame?: () => string, currentUpdateFrame?: (frameText: string) => boolean, invalidated?: (frameText: string) => boolean, signal?: AbortSignal, clearance?: TrustClearance, onWritten?: () => void, selectOption?: typeof safeUpdateOption): Promise<CodexUpdateSkipCompletion>;
 //# sourceMappingURL=update-prompt.d.ts.map

package/dist/codex/update-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-prompt.d.ts","sourceRoot":"","sources":["../../src/codex/update-prompt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,eAAO,MAAM,wBAAwB,QAAqD,CAAC;AAI3F;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAOnE;AAED,qFAAqF;AACrF,qBAAa,wBAAwB;IACnC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAK;IAEvB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAWnC,4FAA4F;IAC5F,qBAAqB,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO;CAOxD;AAYD,8FAA8F;AAC9F,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,EAC1C,SAAS,CAAC,EAAE,MAAM,MAAM,EACxB,kBAAkB,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAkC,GAC5E,OAAO,CAAC,IAAI,CAAC,CAmBf"}
+{"version":3,"file":"update-prompt.d.ts","sourceRoot":"","sources":["../../src/codex/update-prompt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,aAAa,EAAgB,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,wBAAwB,EAC9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAInE,OAAO,EAA4B,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAMnF,wFAAwF;AACxF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,wBAAwB,EAC/B,SAAS,EAAE,MAAM,MAAM,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAY9F;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAU9E;AAED,mFAAmF;AACnF,MAAM,MAAM,yBAAyB,GAAG,sBAAsB,GAAG,WAAW,GAAG,YAAY,CAAC;AAE5F;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,CACL,KAAK,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,KACtC,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC,EACtD,SAAS,CAAC,EAAE,MAAM,MAAM,EACxB,kBAAkB,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAmD,EAC9F,WAAW,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAqB,EACzD,MAAM,CAAC,EAAE,WAAW,EACpB,SAAS,GAAE,cAAuC,EAClD,SAAS,CAAC,EAAE,MAAM,IAAI,EACtB,YAAY,GAAE,OAAO,gBAAmC,GACvD,OAAO,CAAC,yBAAyB,CAAC,CAiCpC"}