@with-logic/elwood 0.1.3 → 0.2.0

package/dist/core/hook-dispatch.js

@@ -1,12 +1,16 @@
 /**
  * Shared hook-handler dispatch with fail-open validation for both adapters.
  * Implements PRD §6.3 (Claude) and §7A.2 (Codex): a handler is raced against
- * the hook timeout, its return value is runtime-validated for the event, and a
+ * the hook timeout, its return value and registration provenance are validated, and a
  * timeout, throw, rejection, or invalid value yields no decision plus a
  * categorized `hookError` (with `timeoutMs` only on a genuine timeout).
  */
 import { activityFromHookError, } from "./activity/index.js";
 import { raceHookTimeout } from "./hook-timeout.js";
+import { inertRecord } from "./inert-record.js";
+import { snapshotJsonData } from "./json-snapshot.js";
+import { isRecord } from "./predicates.js";
+const invalidResponse = Symbol("invalid hook response");
 /**
  * Builds an adapter's dispatcher from its agent tag (for `hook_error` activity)
  * and its per-event result validator.
@@ -17,12 +21,12 @@ export function createHookDispatcher(agent, isValidResult) {
             const hookError = { elwoodSessionId, hookEventName: event.hook_event_name, ...error };
             emitter.emit("hookError", hookError);
             emitter.emit("activity", activityFromHookError(agent, hookError));
-            return { result: undefined, failedOpen: true };
+            return inertRecord({ result: undefined, failedOpen: true });
         };
         try {
             const hookName = `hook:${event.hook_event_name}`;
             const hasListener = emitter.hasListeners(hookName);
-            const outcome = await raceHookTimeout(emitter.request(hookName, event), timeoutMs);
+            const outcome = await raceHookTimeout(emitter.requestWithProvenance(hookName, event), timeoutMs);
             if (outcome.timedOut) {
                 return failOpen({
                     category: "timeout",
@@ -31,14 +35,18 @@ export function createHookDispatcher(agent, isValidResult) {
                 });
             }
             if (!hasListener)
-                return { result: undefined, failedOpen: false };
-            if (!isValidResult(event, outcome.value)) {
+                return inertRecord({ result: undefined, failedOpen: false });
+            const response = outcome.value;
+            const snapshot = snapshotJsonData(response?.value);
+            const result = snapshot.valid ? snapshot.value : invalidResponse;
+            const forbiddenRewrite = response?.provenance !== "tool-keyed" && isRecord(result) && "updatedInput" in result;
+            if (forbiddenRewrite || !isValidResult(event, result)) {
                 return failOpen({
                     category: "invalid_response",
                     message: "Hook handler returned an invalid response for this event.",
                 });
             }
-            return { result: outcome.value, failedOpen: false };
+            return inertRecord({ result, failedOpen: false });
         }
         catch (error) {
             return failOpen({

package/dist/core/hook-dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook-dispatch.js","sourceRoot":"","sources":["../../src/core/hook-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,qBAAqB,GAGtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAiCpD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAsB,EACtB,aAAgE;IAEhE,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE;QAC1D,MAAM,QAAQ,GAAG,CAAC,KAAgE,EAAE,EAAE;YACpF,MAAM,SAAS,GAAG,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,eAAe,EAAE,GAAG,KAAK,EAAE,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YAClE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,QAAQ,KAAK,CAAC,eAAe,EAAW,CAAC;YAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;YACnF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,OAAO,QAAQ,CAAC;oBACd,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,gCAAgC,SAAS,MAAM;oBACxD,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,WAAW;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YAClE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzC,OAAO,QAAQ,CAAC;oBACd,QAAQ,EAAE,kBAAkB;oBAC5B,OAAO,EAAE,2DAA2D;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC;gBACd,QAAQ,EAAE,eAAe;gBACzB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"hook-dispatch.js","sourceRoot":"","sources":["../../src/core/hook-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,qBAAqB,GAGtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAG3C,MAAM,eAAe,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC;AAmCxD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAsB,EACtB,aAAgE;IAEhE,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE;QAC1D,MAAM,QAAQ,GAAG,CAAC,KAAgE,EAAE,EAAE;YACpF,MAAM,SAAS,GAAG,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,eAAe,EAAE,GAAG,KAAK,EAAE,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YAClE,OAAO,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,QAAQ,KAAK,CAAC,eAAe,EAAW,CAAC;YAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,eAAe,CACnC,OAAO,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAC9C,SAAS,CACV,CAAC;YACF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,OAAO,QAAQ,CAAC;oBACd,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,gCAAgC,SAAS,MAAM;oBACxD,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,WAAW;gBAAE,OAAO,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;YAC/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;YACjE,MAAM,gBAAgB,GACpB,QAAQ,EAAE,UAAU,KAAK,YAAY,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,cAAc,IAAI,MAAM,CAAC;YACxF,IAAI,gBAAgB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;gBACtD,OAAO,QAAQ,CAAC;oBACd,QAAQ,EAAE,kBAAkB;oBAC5B,OAAO,EAAE,2DAA2D;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC;gBACd,QAAQ,EAAE,eAAe;gBACzB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/hook-observation.d.ts

@@ -0,0 +1,24 @@
+/** Contains hook notifications without changing wire decisions or lifecycle (C-HOOK-22). */
+import { type ElwoodActivityEvent, type ElwoodAgentKind } from "./activity/index.ts";
+import type { HookObserverFailedWarning, ObserverFailureWarning } from "./warnings/lifecycle.ts";
+type Phase = HookObserverFailedWarning["phase"];
+type ObservationEmitter = {
+    observeErrors<T>(onError: (error: unknown) => void, operation: () => T): T;
+    observeRejections<T>(onError: (error: unknown) => void, operation: () => T): T;
+    emit(event: "warning", payload: ObserverFailureWarning): void;
+    emit(event: "activity", payload: ElwoodActivityEvent): void;
+};
+export declare function hookObservationBoundary(emitter: ObservationEmitter, elwoodSessionId: string, agent: ElwoodAgentKind): {
+    run(phase: Phase, operation: () => void): void;
+    runRejections(phase: Phase, operation: () => void): void;
+    report(): void;
+};
+export type HookObservation = ReturnType<typeof hookObservationBoundary>;
+/** Standalone readiness is a lifecycle transition, not a hook invocation. */
+export declare function initialReadyObservationBoundary(emitter: ObservationEmitter, elwoodSessionId: string): {
+    run(phase: Phase, operation: () => void): void;
+    runRejections(phase: Phase, operation: () => void): void;
+    report(): void;
+};
+export {};
+//# sourceMappingURL=hook-observation.d.ts.map

package/dist/core/hook-observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-observation.d.ts","sourceRoot":"","sources":["../../src/core/hook-observation.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjG,KAAK,KAAK,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;AAChD,KAAK,kBAAkB,GAAG;IACxB,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3E,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC7D,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,eAAe;eA6BT,KAAK,aAAa,MAAM,IAAI,GAAG,IAAI;yBAOzB,KAAK,aAAa,MAAM,IAAI,GAAG,IAAI;cAG9C,IAAI;EApCjB;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEzE,6EAA6E;AAC7E,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,kBAAkB,EAC3B,eAAe,EAAE,MAAM;eAmBV,KAAK,aAAa,MAAM,IAAI,GAAG,IAAI;yBAOzB,KAAK,aAAa,MAAM,IAAI,GAAG,IAAI;cAG9C,IAAI;EA1BjB"}

package/dist/core/hook-observation.js

@@ -0,0 +1,68 @@
+/** Contains hook notifications without changing wire decisions or lifecycle (C-HOOK-22). */
+import { activityFromWarning, } from "./activity/index.js";
+export function hookObservationBoundary(emitter, elwoodSessionId, agent) {
+    return observationBoundary(emitter, elwoodSessionId, agent, false);
+}
+/** Standalone readiness is a lifecycle transition, not a hook invocation. */
+export function initialReadyObservationBoundary(emitter, elwoodSessionId) {
+    return observationBoundary(emitter, elwoodSessionId, "codex", true);
+}
+function observationBoundary(emitter, elwoodSessionId, agent, initialReady) {
+    let failedPhase;
+    let finished = false;
+    let reported = false;
+    function fail(phase) {
+        failedPhase ??= phase;
+        if (finished)
+            boundary.report();
+    }
+    const boundary = {
+        run(phase, operation) {
+            try {
+                emitter.observeErrors(() => fail(phase), operation);
+            }
+            catch {
+                fail(phase);
+            }
+        },
+        runRejections(phase, operation) {
+            emitter.observeRejections(() => fail(phase), operation);
+        },
+        report() {
+            finished = true;
+            if (failedPhase === undefined || reported)
+                return;
+            reported = true;
+            const warning = initialReady
+                ? Object.freeze({
+                    elwoodSessionId,
+                    agent: "codex",
+                    source: "lifecycle",
+                    code: "initial_ready_observer_failed",
+                    severity: "warning",
+                    message: "A Codex initial-ready notification failed; readiness was preserved.",
+                    phase: "lifecycle",
+                    raw: "initial_ready_observer_failed phase=lifecycle",
+                })
+                : Object.freeze({
+                    elwoodSessionId,
+                    agent,
+                    source: "lifecycle",
+                    code: "hook_observer_failed",
+                    severity: "warning",
+                    message: `A ${agent === "claude" ? "Claude" : "Codex"} hook notification failed; hook decisions and lifecycle were preserved.`,
+                    phase: failedPhase,
+                    raw: `hook_observer_failed phase=${failedPhase}`,
+                });
+            const activity = activityFromWarning(warning);
+            emitter.observeErrors(() => {
+                /* Diagnostic throws and rejections must not recursively warn. */
+            }, () => {
+                emitter.emit("warning", warning);
+                emitter.emit("activity", activity);
+            });
+        },
+    };
+    return boundary;
+}
+//# sourceMappingURL=hook-observation.js.map

package/dist/core/hook-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-observation.js","sourceRoot":"","sources":["../../src/core/hook-observation.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,EACL,mBAAmB,GAGpB,MAAM,qBAAqB,CAAC;AAW7B,MAAM,UAAU,uBAAuB,CACrC,OAA2B,EAC3B,eAAuB,EACvB,KAAsB;IAEtB,OAAO,mBAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAID,6EAA6E;AAC7E,MAAM,UAAU,+BAA+B,CAC7C,OAA2B,EAC3B,eAAuB;IAEvB,OAAO,mBAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAA2B,EAC3B,eAAuB,EACvB,KAAsB,EACtB,YAAqB;IAErB,IAAI,WAA8B,CAAC;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,SAAS,IAAI,CAAC,KAAY;QACxB,WAAW,KAAK,KAAK,CAAC;QACtB,IAAI,QAAQ;YAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,KAAY,EAAE,SAAqB;YACrC,IAAI,CAAC;gBACH,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,aAAa,CAAC,KAAY,EAAE,SAAqB;YAC/C,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM;YACJ,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,WAAW,KAAK,SAAS,IAAI,QAAQ;gBAAE,OAAO;YAClD,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,OAAO,GAA2B,YAAY;gBAClD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;oBACZ,eAAe;oBACf,KAAK,EAAE,OAAgB;oBACvB,MAAM,EAAE,WAAoB;oBAC5B,IAAI,EAAE,+BAAwC;oBAC9C,QAAQ,EAAE,SAAkB;oBAC5B,OAAO,EAAE,qEAAqE;oBAC9E,KAAK,EAAE,WAAoB;oBAC3B,GAAG,EAAE,+CAA+C;iBACrD,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;oBACZ,eAAe;oBACf,KAAK;oBACL,MAAM,EAAE,WAAoB;oBAC5B,IAAI,EAAE,sBAA+B;oBACrC,QAAQ,EAAE,SAAkB;oBAC5B,OAAO,EAAE,KAAK,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,yEAAyE;oBAC9H,KAAK,EAAE,WAAW;oBAClB,GAAG,EAAE,8BAA8B,WAAW,EAAE;iBACjD,CAAC,CAAC;YACP,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,aAAa,CACnB,GAAG,EAAE;gBACH,iEAAiE;YACnE,CAAC,EACD,GAAG,EAAE;gBACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACrC,CAAC,CACF,CAAC;QACJ,CAAC;KACF,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/hook-result.d.ts

@@ -2,7 +2,17 @@
  * Hook result display labels for adapter-neutral activity.
  * Implements PRD §5.4.
  */
-import type { ElwoodActivityKind } from "./activity/index.ts";
+import type { CodexTranscriptSummary } from "../codex/transcript/types.ts";
 export declare function hookResultLabel(result: unknown, failedOpen: boolean): string;
-export declare function transcriptActivityKind(kind: string): ElwoodActivityKind;
+declare const transcriptActivityKinds: {
+    readonly commentary: "assistant_progress";
+    readonly message: "assistant_message";
+    readonly tool_call: "tool_call";
+    readonly tool_result: "tool_result";
+    readonly reasoning: "reasoning";
+    readonly web_search: "web_search";
+    readonly other: "other";
+};
+export declare function transcriptActivityKind<Kind extends CodexTranscriptSummary["kind"]>(kind: Kind): (typeof transcriptActivityKinds)[Kind];
+export {};
 //# sourceMappingURL=hook-result.d.ts.map

package/dist/core/hook-result.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook-result.d.ts","sourceRoot":"","sources":["../../src/core/hook-result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,CAa5E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAWvE"}
+{"version":3,"file":"hook-result.d.ts","sourceRoot":"","sources":["../../src/core/hook-result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAG3E,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,CAa5E;AAED,QAAA,MAAM,uBAAuB;;;;;;;;CAQkD,CAAC;AAEhF,wBAAgB,sBAAsB,CAAC,IAAI,SAAS,sBAAsB,CAAC,MAAM,CAAC,EAChF,IAAI,EAAE,IAAI,GACT,CAAC,OAAO,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAExC"}

package/dist/core/hook-result.js

@@ -26,15 +26,16 @@ export function hookResultLabel(result, failedOpen) {
         return "worktree";
     return "response";
 }
+const transcriptActivityKinds = {
+    commentary: "assistant_progress",
+    message: "assistant_message",
+    tool_call: "tool_call",
+    tool_result: "tool_result",
+    reasoning: "reasoning",
+    web_search: "web_search",
+    other: "other",
+};
 export function transcriptActivityKind(kind) {
-    if (kind === "message")
-        return "assistant_message";
-    if (kind === "tool_call" ||
-        kind === "tool_result" ||
-        kind === "reasoning" ||
-        kind === "web_search") {
-        return kind;
-    }
-    return "other";
+    return transcriptActivityKinds[kind];
 }
 //# sourceMappingURL=hook-result.js.map

package/dist/core/hook-result.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook-result.js","sourceRoot":"","sources":["../../src/core/hook-result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAmB;IAClE,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IAAI,OAAO,MAAM,CAAC,oBAAoB,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1F,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,OAAO,MAAM,CAAC,mBAAmB,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAC7C,IAAI,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAClE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,mBAAmB,CAAC;IACnD,IACE,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,aAAa;QACtB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,YAAY,EACrB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"hook-result.js","sourceRoot":"","sources":["../../src/core/hook-result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAmB;IAClE,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IAAI,OAAO,MAAM,CAAC,oBAAoB,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1F,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,OAAO,MAAM,CAAC,mBAAmB,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAC7C,IAAI,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAClE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,uBAAuB,GAAG;IAC9B,UAAU,EAAE,oBAAoB;IAChC,OAAO,EAAE,mBAAmB;IAC5B,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,OAAO;CAC+D,CAAC;AAEhF,MAAM,UAAU,sBAAsB,CACpC,IAAU;IAEV,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/core/hook-timeout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook-timeout.d.ts","sourceRoot":"","sources":["../../src/core/hook-timeout.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAEhC;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAa/B"}
+{"version":3,"file":"hook-timeout.d.ts","sourceRoot":"","sources":["../../src/core/hook-timeout.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAEhC;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAa/B"}

package/dist/core/hook-timeout.js

@@ -3,6 +3,7 @@
  * timeout from a handler that throws or rejects.
  * Implements PRD §6.3 (timeout category and timeoutMs telemetry).
  */
+import { inertRecord } from "./inert-record.js";
 /**
  * Resolves with the handler value if it settles before `timeoutMs`, or with a
  * tagged timeout result if the timer wins. Rejects only when the handler itself
@@ -11,11 +12,11 @@
 export async function raceHookTimeout(promise, timeoutMs) {
     let timeout;
     const timeoutPromise = new Promise((resolve) => {
-        timeout = setTimeout(() => resolve({ timedOut: true }), timeoutMs);
+        timeout = setTimeout(() => resolve(inertRecord({ timedOut: true })), timeoutMs);
     });
     try {
         return await Promise.race([
-            promise.then((value) => ({ timedOut: false, value })),
+            promise.then((value) => inertRecord({ timedOut: false, value })),
             timeoutPromise,
         ]);
     }

package/dist/core/hook-timeout.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook-timeout.js","sourceRoot":"","sources":["../../src/core/hook-timeout.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAmB,EACnB,SAAiB;IAEjB,IAAI,OAAkD,CAAC;IACvD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,EAAE;QACnE,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,cAAc;SACf,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}
+{"version":3,"file":"hook-timeout.js","sourceRoot":"","sources":["../../src/core/hook-timeout.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAahD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAmB,EACnB,SAAiB;IAEjB,IAAI,OAAkD,CAAC;IACvD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,EAAE;QACnE,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,cAAc;SACf,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/core/images/capture.d.ts

@@ -0,0 +1,14 @@
+import { type ImageSnapshot } from "./resolve.ts";
+import type { ImageInput, SendOptions } from "./types.ts";
+export declare function capturedImageSnapshot(images: readonly ImageInput[]): ImageSnapshot | undefined;
+export declare class ImageCaptures {
+    private readonly budget;
+    constructor(maxQueuedBytes?: number);
+    /** Bound the launched raw `session` by this same budget, so the two surfaces share a ceiling. */
+    shareWith(session: object): void;
+    capture<T extends SendOptions>(options: T | undefined): {
+        readonly options: T | undefined;
+        readonly release: () => void;
+    };
+}
+//# sourceMappingURL=capture.d.ts.map

package/dist/core/images/capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.d.ts","sourceRoot":"","sources":["../../../src/core/images/capture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,aAAa,EAAkB,MAAM,cAAc,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAM1D,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,aAAa,GAAG,SAAS,CAE9F;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;gBAC/B,cAAc,CAAC,EAAE,MAAM;IAInC,iGAAiG;IACjG,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIhC,OAAO,CAAC,CAAC,SAAS,WAAW,EAC3B,OAAO,EAAE,CAAC,GAAG,SAAS,GACrB;QACD,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC;QAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;KAC9B;CAeF"}

package/dist/core/images/capture.js

@@ -0,0 +1,35 @@
+/** Private facade-owned image copies shared with submission (PRD §5.3/§5.8, C-API-44). */
+import { QueuedImageBudget, shareImageBudget } from "./queued-budget.js";
+import { snapshotImages } from "./resolve.js";
+// Only copies made here are registered. Callers cannot brand mutable input as safe.
+const owned = new WeakMap();
+const noRelease = () => undefined;
+export function capturedImageSnapshot(images) {
+    return owned.get(images);
+}
+export class ImageCaptures {
+    budget;
+    constructor(maxQueuedBytes) {
+        this.budget = new QueuedImageBudget(maxQueuedBytes);
+    }
+    /** Bound the launched raw `session` by this same budget, so the two surfaces share a ceiling. */
+    shareWith(session) {
+        shareImageBudget(session, this.budget);
+    }
+    capture(options) {
+        if (options?.images === undefined) {
+            return { options: options === undefined ? undefined : { ...options }, release: noRelease };
+        }
+        const snapshot = snapshotImages(options.images);
+        this.budget.reserve(snapshot.inlineByteTotal);
+        owned.set(snapshot.images, snapshot);
+        return {
+            options: { ...options, images: snapshot.images },
+            release: () => {
+                owned.delete(snapshot.images);
+                this.budget.release(snapshot.inlineByteTotal);
+            },
+        };
+    }
+}
+//# sourceMappingURL=capture.js.map

package/dist/core/images/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../src/core/images/capture.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAsB,cAAc,EAAE,MAAM,cAAc,CAAC;AAGlE,oFAAoF;AACpF,MAAM,KAAK,GAAG,IAAI,OAAO,EAAwC,CAAC;AAClE,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC;AAElC,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO,aAAa;IACP,MAAM,CAAoB;IAC3C,YAAY,cAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC,cAAc,CAAC,CAAC;IACtD,CAAC;IAED,iGAAiG;IACjG,SAAS,CAAC,OAAe;QACvB,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CACL,OAAsB;QAKtB,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC7F,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC9C,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrC,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;YAChD,OAAO,EAAE,GAAG,EAAE;gBACZ,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAChD,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/core/images/chip-wait.d.ts

@@ -1,12 +1,15 @@
 /**
  * Shared `[Image #N]` chip confirmation used by both adapter attach paths. An
  * attach is CONFIRMED only when the composer's image-chip count increases; an
- * unconfirmed image (timeout), or an abort (session closing), REJECTS with
- * `image_attach_failed` so no text is ever submitted for an unconfirmed image.
- * Implements PRD §5.3 (C-API-44/45/46).
+ * unconfirmed image (timeout) or abort (session closing) REJECTS with
+ * `image_attach_failed`. A detected permanent render failure rejects immediately
+ * with that error, without waiting for confirmation timeout. No text is submitted
+ * for an unconfirmed image.
+ * Implements PRD §5.3 (C-API-44/45/46/56).
  */
+import { type InputTerminal } from "../input/abort.ts";
 /** The terminal surface an attach needs: send bytes and read the rendered screen. */
-export type AttachTerminal = {
+export type AttachTerminal = Required<Pick<InputTerminal, "settled" | "renderFailed">> & {
     sendInput(data: string): void | Promise<void>;
     snapshot(): {
         readonly text: string;
@@ -15,18 +18,12 @@ export type AttachTerminal = {
 /** True while a blocking human-decision dialog is on screen (C-API-37 safety). */
 export type BlockedGuard = () => boolean;
 /**
- * Best-effort discard of any staged composer content (image chips, pasted paths)
- * after a mid-attach failure, so the rejected submission's images cannot leak
- * into a later caller's turn. Never throws (C-API-44).
+ * Observe received output and wait for dialogs before an image key. Capture the
+ * chip baseline in the same turn as that key, so the observation cannot confirm
+ * this image using an older chip. Cancellation or permanent render failure rejects
+ * with `image_attach_failed`; a failed Codex session must release its clipboard lease.
  */
-export declare function clearComposer(terminal: AttachTerminal): Promise<void>;
-/**
- * Sends `data` to the terminal only once no blocking dialog is on screen — a
- * paste path or Ctrl+V must never reach a permission/trust dialog and alter a
- * human decision. Rejects with `image_attach_failed` if the signal aborts while
- * held (the session closed) (C-API-37/44).
- */
-export declare function sendWhenUnblocked(terminal: AttachTerminal, data: string, blocked: BlockedGuard | undefined, signal: AbortSignal): Promise<void>;
+export declare function sendObservedImage(terminal: AttachTerminal, data: string, blocked: BlockedGuard | undefined, signal: AbortSignal): Promise<number>;
 export type ChipWaitOptions = {
     readonly settleMs: number;
     readonly timeoutMs: number;
@@ -37,7 +34,8 @@ export declare function imageChipCount(text: string): number;
 /**
  * Resolves once the chip count rises above `before`; rejects with
  * `image_attach_failed` on the confirmation timeout or an aborted signal, so an
- * unconfirmed attach never silently degrades to a text-only turn.
+ * unconfirmed attach never silently degrades to a text-only turn. A detected permanent
+ * render failure rejects immediately with that error rather than awaiting the timeout.
  */
 export declare function waitForImageChip(terminal: AttachTerminal, before: number, signal: AbortSignal, options: ChipWaitOptions): Promise<void>;
 //# sourceMappingURL=chip-wait.d.ts.map

package/dist/core/images/chip-wait.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chip-wait.d.ts","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,qFAAqF;AACrF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC;AAOzC;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3E;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CASf;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AASF,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CASf"}
+{"version":3,"file":"chip-wait.d.ts","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,KAAK,aAAa,EAAe,MAAM,mBAAmB,CAAC;AAIpE,qFAAqF;AACrF,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,cAAc,CAAC,CAAC,GAAG;IACvF,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC;AAEzC;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAajB;AAWD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AASF,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/core/images/chip-wait.js

@@ -1,45 +1,42 @@
 /**
  * Shared `[Image #N]` chip confirmation used by both adapter attach paths. An
  * attach is CONFIRMED only when the composer's image-chip count increases; an
- * unconfirmed image (timeout), or an abort (session closing), REJECTS with
- * `image_attach_failed` so no text is ever submitted for an unconfirmed image.
- * Implements PRD §5.3 (C-API-44/45/46).
+ * unconfirmed image (timeout) or abort (session closing) REJECTS with
+ * `image_attach_failed`. A detected permanent render failure rejects immediately
+ * with that error, without waiting for confirmation timeout. No text is submitted
+ * for an unconfirmed image.
+ * Implements PRD §5.3 (C-API-44/45/46/56).
  */
 import { elwoodError } from "../errors.js";
-const blockedPollMs = 50;
-// Ctrl+U (kill to line start) + Ctrl+K (kill to line end) discard the composer
-// draft on both TUIs, clearing any staged image chips/paths.
-const clearComposerKeys = "\u0015\u000b";
+import { writeUnsafe } from "../input/abort.js";
+import { stageComposer } from "../input/composer-cleanup.js";
+import { unsafeWriteRetryMs } from "../input/constants.js";
 /**
- * Best-effort discard of any staged composer content (image chips, pasted paths)
- * after a mid-attach failure, so the rejected submission's images cannot leak
- * into a later caller's turn. Never throws (C-API-44).
+ * Observe received output and wait for dialogs before an image key. Capture the
+ * chip baseline in the same turn as that key, so the observation cannot confirm
+ * this image using an older chip. Cancellation or permanent render failure rejects
+ * with `image_attach_failed`; a failed Codex session must release its clipboard lease.
  */
-export async function clearComposer(terminal) {
-    try {
-        await terminal.sendInput(clearComposerKeys);
-    }
-    catch {
-        // Best-effort: a clear failure must not replace the primary attach error.
+export async function sendObservedImage(terminal, data, blocked, signal) {
+    const guard = blocked === undefined ? undefined : { blocked };
+    for (;;) {
+        assertAttachNotAbortedOrRenderFailed(terminal, signal);
+        const unsafe = await writeUnsafe(terminal, guard, signal);
+        assertAttachNotAbortedOrRenderFailed(terminal, signal);
+        if (!unsafe)
+            break;
+        await delay(unsafeWriteRetryMs);
     }
+    const before = imageChipCount(terminal.snapshot().text);
+    stageComposer(terminal);
+    await terminal.sendInput(data);
+    return before;
 }
-/**
- * Sends `data` to the terminal only once no blocking dialog is on screen — a
- * paste path or Ctrl+V must never reach a permission/trust dialog and alter a
- * human decision. Rejects with `image_attach_failed` if the signal aborts while
- * held (the session closed) (C-API-37/44).
- */
-export async function sendWhenUnblocked(terminal, data, blocked, signal) {
-    while (blocked?.()) {
-        if (signal.aborted)
-            throw elwoodError("image_attach_failed", "Image attach aborted.");
-        await delay(blockedPollMs);
-    }
-    // Re-check AFTER the loop: an abort that lands as the dialog clears in the same
-    // poll must not let a paste/Ctrl+V reach the PTY on a closing session.
+function assertAttachNotAbortedOrRenderFailed(terminal, signal) {
     if (signal.aborted)
         throw elwoodError("image_attach_failed", "Image attach aborted.");
-    await terminal.sendInput(data);
+    if (terminal.renderFailed)
+        throw elwoodError("image_attach_failed", "Image attach cannot observe a failed terminal render.");
 }
 // Both CLIs render the image chip on the composer PROMPT line (Codex `›`, Claude
 // `❯`), e.g. `› [Image #1]`. Counting chips only on lines bearing a prompt marker
@@ -57,14 +54,14 @@ export function imageChipCount(text) {
 /**
  * Resolves once the chip count rises above `before`; rejects with
  * `image_attach_failed` on the confirmation timeout or an aborted signal, so an
- * unconfirmed attach never silently degrades to a text-only turn.
+ * unconfirmed attach never silently degrades to a text-only turn. A detected permanent
+ * render failure rejects immediately with that error rather than awaiting the timeout.
  */
 export async function waitForImageChip(terminal, before, signal, options) {
     await delay(options.settleMs);
     const attempts = Math.max(1, Math.ceil(options.timeoutMs / options.pollMs));
     for (let i = 0; i < attempts; i++) {
-        if (signal.aborted)
-            throw elwoodError("image_attach_failed", "Image attach aborted.");
+        assertAttachNotAbortedOrRenderFailed(terminal, signal);
         if (imageChipCount(terminal.snapshot().text) > before)
             return;
         await delay(options.pollMs);

package/dist/core/images/chip-wait.js.map

@@ -1 +1 @@
-{"version":3,"file":"chip-wait.js","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAW3C,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,+EAA+E;AAC/E,6DAA6D;AAC7D,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAwB;IAC1D,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAwB,EACxB,IAAY,EACZ,OAAiC,EACjC,MAAmB;IAEnB,OAAO,OAAO,EAAE,EAAE,EAAE,CAAC;QACnB,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACtF,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IACD,gFAAgF;IAChF,uEAAuE;IACvE,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACtF,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAQD,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,qEAAqE;AACrE,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,IAAI,GAAG,iBAAiB,CAAC;AAE/B,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAwB,EACxB,MAAc,EACd,MAAmB,EACnB,OAAwB;IAExB,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACtF,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM;YAAE,OAAO;QAC9D,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,WAAW,CAAC,qBAAqB,EAAE,oDAAoD,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"chip-wait.js","sourceRoot":"","sources":["../../../src/core/images/chip-wait.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAsB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAW3D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAwB,EACxB,IAAY,EACZ,OAAiC,EACjC,MAAmB;IAEnB,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAC9D,SAAS,CAAC;QACR,oCAAoC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1D,oCAAoC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxB,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oCAAoC,CAAC,QAAwB,EAAE,MAAmB;IACzF,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACtF,IAAI,QAAQ,CAAC,YAAY;QACvB,MAAM,WAAW,CACf,qBAAqB,EACrB,uDAAuD,CACxD,CAAC;AACN,CAAC;AAQD,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,qEAAqE;AACrE,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,IAAI,GAAG,iBAAiB,CAAC;AAE/B,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAwB,EACxB,MAAc,EACd,MAAmB,EACnB,OAAwB;IAExB,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,oCAAoC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM;YAAE,OAAO;QAC9D,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,WAAW,CAAC,qBAAqB,EAAE,oDAAoD,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/images/queued-budget.d.ts

@@ -0,0 +1,18 @@
+/**
+ * A per-session aggregate byte budget for image clones held across ALL not-yet-attached
+ * queued submissions. Reserved synchronously when a submission's bytes are cloned and
+ * released when it settles, so a slow paste can't let a caller retain gigabytes of
+ * queued clones (C-API-44).
+ */
+export declare class QueuedImageBudget {
+    private usedBytes;
+    private readonly maxQueuedBytes;
+    constructor(maxQueuedBytes?: number);
+    reserve(bytes: number): void;
+    release(bytes: number): void;
+}
+/** The budget every image submission on `session` reserves against (created on first use). */
+export declare function sessionImageBudget(session: object): QueuedImageBudget;
+/** Makes `budget` the one `session` reserves against, replacing the session's own. */
+export declare function shareImageBudget(session: object, budget: QueuedImageBudget): void;
+//# sourceMappingURL=queued-budget.d.ts.map

package/dist/core/images/queued-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queued-budget.d.ts","sourceRoot":"","sources":["../../../src/core/images/queued-budget.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;gBAC5B,cAAc,SAA6B;IAGvD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK5B,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAG7B;AAMD,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAMrE;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAEjF"}

package/dist/core/images/queued-budget.js

@@ -0,0 +1,41 @@
+/** Bounds queued image ownership across sends (PRD §5.3, C-API-44). */
+import { elwoodError } from "../errors.js";
+import { imageLimits } from "./types.js";
+/**
+ * A per-session aggregate byte budget for image clones held across ALL not-yet-attached
+ * queued submissions. Reserved synchronously when a submission's bytes are cloned and
+ * released when it settles, so a slow paste can't let a caller retain gigabytes of
+ * queued clones (C-API-44).
+ */
+export class QueuedImageBudget {
+    usedBytes = 0;
+    maxQueuedBytes;
+    constructor(maxQueuedBytes = imageLimits.maxQueuedBytes) {
+        this.maxQueuedBytes = maxQueuedBytes;
+    }
+    reserve(bytes) {
+        if (this.usedBytes + bytes > this.maxQueuedBytes)
+            throw elwoodError("invalid_image", "Too many queued image bytes for this session.");
+        this.usedBytes += bytes;
+    }
+    release(bytes) {
+        this.usedBytes = Math.max(0, this.usedBytes - bytes);
+    }
+}
+// ONE budget per session object. A facade registers its own before it exposes the session it
+// launched, so both surfaces reserve against the same ceiling rather than 200 MiB each.
+const sessionBudgets = new WeakMap();
+/** The budget every image submission on `session` reserves against (created on first use). */
+export function sessionImageBudget(session) {
+    const existing = sessionBudgets.get(session);
+    if (existing !== undefined)
+        return existing;
+    const created = new QueuedImageBudget();
+    sessionBudgets.set(session, created);
+    return created;
+}
+/** Makes `budget` the one `session` reserves against, replacing the session's own. */
+export function shareImageBudget(session, budget) {
+    sessionBudgets.set(session, budget);
+}
+//# sourceMappingURL=queued-budget.js.map

package/dist/core/images/queued-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queued-budget.js","sourceRoot":"","sources":["../../../src/core/images/queued-budget.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IACpB,SAAS,GAAG,CAAC,CAAC;IACL,cAAc,CAAS;IACxC,YAAY,cAAc,GAAG,WAAW,CAAC,cAAc;QACrD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,KAAa;QACnB,IAAI,IAAI,CAAC,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,cAAc;YAC9C,MAAM,WAAW,CAAC,eAAe,EAAE,+CAA+C,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC;IACvD,CAAC;CACF;AAED,6FAA6F;AAC7F,wFAAwF;AACxF,MAAM,cAAc,GAAG,IAAI,OAAO,EAA6B,CAAC;AAEhE,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACxC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAyB;IACzE,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/dist/core/inert-record.d.ts

@@ -0,0 +1,3 @@
+/** Prevent inherited then/toJSON execution on internal hook envelopes (PRD §6.3–6.4). */
+export declare function inertRecord<T extends object>(record: T): T;
+//# sourceMappingURL=inert-record.d.ts.map

package/dist/core/inert-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inert-record.d.ts","sourceRoot":"","sources":["../../src/core/inert-record.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAG1D"}

package/dist/core/inert-record.js

@@ -0,0 +1,6 @@
+/** Prevent inherited then/toJSON execution on internal hook envelopes (PRD §6.3–6.4). */
+export function inertRecord(record) {
+    Object.setPrototypeOf(record, null);
+    return record;
+}
+//# sourceMappingURL=inert-record.js.map

package/dist/core/inert-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inert-record.js","sourceRoot":"","sources":["../../src/core/inert-record.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAmB,MAAS;IACrD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC;AAChB,CAAC"}