@with-logic/elwood 0.1.3 → 0.2.0

package/dist/core/startup/write.js

@@ -4,14 +4,15 @@
  * `startup_prompt` activity emitted) ONLY after its `sendInput` write actually
  * fulfills. A rejected write leaves the prompt retryable and surfaces a bounded,
  * content-free `startup_prompt_write_failed` warning instead of false telemetry
- * (C-CLAUDE-16, C-CODEX-17).
+ * (C-CLAUDE-16, C-CODEX-17). Logical cancellation during trust navigation or Codex update retries
+ * emits neither success activity nor a write-failure warning (C-TRUST-01, C-CODEX-12).
  */
 import { emitStartupPromptActivity, } from "./automation.js";
 /**
  * Emit each settled automation's activity at the RIGHT time: an `option_pending`
- * or write-less outcome emits immediately; a write-backed `answered` outcome emits
+ * or write-less outcome emits immediately; an `attempted` outcome emits
  * its `startup_prompt` activity only once the write resolves, and on rejection
- * emits a bounded warning instead — never a false "answered" activity.
+ * emits a bounded warning instead. A safely cancelled attempt emits neither.
  */
 export function emitSettledStartupOutcomes(emitter, agent, elwoodSessionId, 
 // `NoInfer` blocks inference of `A` from the outcomes, so `A` is pinned by the
@@ -35,7 +36,7 @@ settledOutcomes, warnings) {
             }
             continue;
         }
-        // An `answered` outcome always carries the write-completion promise: its
+        // An `attempted` outcome always carries the write-completion promise: its
         // activity is emitted only once the write fulfills, and a rejected write
         // surfaces a bounded warning instead of a false "answered" activity.
         const { outcome, settled } = settledOutcome;
@@ -44,7 +45,13 @@ settledOutcomes, warnings) {
         // warning recording can fail), and a floated rejection would be an unhandled
         // rejection that can terminate the host during startup. Swallow it here.
         settled
-            .then(() => emitStartupPromptActivity(emitter, agent, elwoodSessionId, outcome), () => warnings?.emitWarnings([writeFailedWarning(agent, elwoodSessionId, outcome)]))
+            .then((completion) => {
+            if (completion !== "cancelled")
+                emitStartupPromptActivity(emitter, agent, elwoodSessionId, {
+                    ...outcome,
+                    kind: "answered",
+                });
+        }, () => warnings?.emitWarnings([writeFailedWarning(agent, elwoodSessionId, outcome)]))
             .catch(() => undefined);
     }
 }

package/dist/core/startup/write.js.map

@@ -1 +1 @@
-{"version":3,"file":"write.js","sourceRoot":"","sources":["../../../src/core/startup/write.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EACL,yBAAyB,GAI1B,MAAM,iBAAiB,CAAC;AA8BzB;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA+B,EAC/B,KAAQ,EACR,eAAuB;AACvB,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,eAA6D,EAC7D,QAAwC;IAExC,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACzC,yEAAyE;YACzE,2EAA2E;YAC3E,2EAA2E;YAC3E,gFAAgF;YAChF,2EAA2E;YAC3E,mFAAmF;YACnF,6EAA6E;YAC7E,IAAI,CAAC;gBACH,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;YAC7E,CAAC;YACD,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;QAC5C,+EAA+E;QAC/E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,OAAO;aACJ,IAAI,CACH,GAAG,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EACzE,GAAG,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CACpF;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,gFAAgF;AAChF,+EAA+E;AAC/E,SAAS,kBAAkB,CACzB,KAAQ,EACR,eAAuB,EACvB,OAAgC;IAEhC,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAgC;QAC3C,eAAe;QACf,KAAK;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,kBAAkB,KAAK,uEAAuE;QACvG,KAAK;QACL,GAAG,EAAE,qCAAqC,KAAK,EAAE;KAClD,CAAC;IACF,mFAAmF;IACnF,8EAA8E;IAC9E,sEAAsE;IACtE,OAAO,OAA6B,CAAC;AACvC,CAAC"}
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../../src/core/startup/write.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EACL,yBAAyB,GAG1B,MAAM,iBAAiB,CAAC;AAiCzB;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA+B,EAC/B,KAAQ,EACR,eAAuB;AACvB,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,eAA6D,EAC7D,QAAwC;IAExC,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACzC,yEAAyE;YACzE,2EAA2E;YAC3E,2EAA2E;YAC3E,gFAAgF;YAChF,2EAA2E;YAC3E,mFAAmF;YACnF,6EAA6E;YAC7E,IAAI,CAAC;gBACH,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;YAC7E,CAAC;YACD,SAAS;QACX,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,qEAAqE;QACrE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;QAC5C,+EAA+E;QAC/E,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,OAAO;aACJ,IAAI,CACH,CAAC,UAAU,EAAE,EAAE;YACb,IAAI,UAAU,KAAK,WAAW;gBAC5B,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE;oBACzD,GAAG,OAAO;oBACV,IAAI,EAAE,UAAU;iBACjB,CAAC,CAAC;QACP,CAAC,EACD,GAAG,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CACpF;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,gFAAgF;AAChF,+EAA+E;AAC/E,SAAS,kBAAkB,CACzB,KAAQ,EACR,eAAuB,EACvB,OAAsD;IAEtD,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAgC;QAC3C,eAAe;QACf,KAAK;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,kBAAkB,KAAK,uEAAuE;QACvG,KAAK;QACL,GAAG,EAAE,qCAAqC,KAAK,EAAE;KAClD,CAAC;IACF,mFAAmF;IACnF,8EAA8E;IAC9E,sEAAsE;IACtE,OAAO,OAA6B,CAAC;AACvC,CAAC"}

package/dist/core/stop-input.d.ts

@@ -0,0 +1,19 @@
+type StopInputSession = {
+    readonly elwoodSessionId: string;
+};
+type StopScope = {
+    readonly hookName: string;
+    readonly session: StopInputSession;
+};
+/** Persistent internal work must not inherit a short-lived Stop callback's context. */
+export declare function outsideStopInput<T>(work: () => T): T;
+/** Observers, handlers, and reply diagnostics share a lifetime until dispatch settles. */
+export declare function withStopInput<T>({ hookName, session }: StopScope, observeAndRequest: () => Promise<T>): Promise<T>;
+/** Malformed recognized Stop diagnostics close at sink return, not socket acknowledgment. */
+export declare function withStopInputNotification<T>({ hookName, session }: StopScope, notify: () => T): T;
+/** An opaque token identifies the live instance without retaining its session graph.
+ * This is an internal check; dispatch plumbing alone does not enforce public input admission.
+ */
+export declare function assertStopInput(session: StopInputSession): void;
+export {};
+//# sourceMappingURL=stop-input.d.ts.map

package/dist/core/stop-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-input.d.ts","sourceRoot":"","sources":["../../src/core/stop-input.ts"],"names":[],"mappings":"AAIA,KAAK,gBAAgB,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7D,KAAK,SAAS,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAKnF,uFAAuF;AACvF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAEpD;AAQD,0FAA0F;AAC1F,wBAAsB,aAAa,CAAC,CAAC,EACnC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,SAAS,EAChC,iBAAiB,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAClC,OAAO,CAAC,CAAC,CAAC,CAQZ;AAED,6FAA6F;AAC7F,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAQjG;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAI/D"}

package/dist/core/stop-input.js

@@ -0,0 +1,47 @@
+/** Internal Stop callback lifetimes for hook dispatch (C-HOOK-04/22); no admission policy. */
+import { AsyncLocalStorage } from "node:async_hooks";
+import { ElwoodError } from "./errors.js";
+const sessionIdentities = new WeakMap();
+const inputContext = new AsyncLocalStorage();
+/** Persistent internal work must not inherit a short-lived Stop callback's context. */
+export function outsideStopInput(work) {
+    return inputContext.exit(work);
+}
+function stopContext(session) {
+    const identity = sessionIdentities.get(session) ?? {};
+    sessionIdentities.set(session, identity);
+    return { identity, closed: false };
+}
+/** Observers, handlers, and reply diagnostics share a lifetime until dispatch settles. */
+export async function withStopInput({ hookName, session }, observeAndRequest) {
+    if (hookName !== "Stop")
+        return observeAndRequest();
+    const context = stopContext(session);
+    try {
+        return await inputContext.run(context, observeAndRequest);
+    }
+    finally {
+        context.closed = true;
+    }
+}
+/** Malformed recognized Stop diagnostics close at sink return, not socket acknowledgment. */
+export function withStopInputNotification({ hookName, session }, notify) {
+    if (hookName !== "Stop")
+        return notify();
+    const context = stopContext(session);
+    try {
+        return inputContext.run(context, notify);
+    }
+    finally {
+        context.closed = true;
+    }
+}
+/** An opaque token identifies the live instance without retaining its session graph.
+ * This is an internal check; dispatch plumbing alone does not enforce public input admission.
+ */
+export function assertStopInput(session) {
+    const context = inputContext.getStore();
+    if (context && context.identity === sessionIdentities.get(session) && context.closed)
+        throw new ElwoodError("wait_timeout", "The Stop input boundary has already completed.");
+}
+//# sourceMappingURL=stop-input.js.map

package/dist/core/stop-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-input.js","sourceRoot":"","sources":["../../src/core/stop-input.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK1C,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAA4B,CAAC;AAClE,MAAM,YAAY,GAAG,IAAI,iBAAiB,EAAa,CAAC;AAExD,uFAAuF;AACvF,MAAM,UAAU,gBAAgB,CAAI,IAAa;IAC/C,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,OAAyB;IAC5C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACtD,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAE,QAAQ,EAAE,OAAO,EAAa,EAChC,iBAAmC;IAEnC,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,iBAAiB,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,yBAAyB,CAAI,EAAE,QAAQ,EAAE,OAAO,EAAa,EAAE,MAAe;IAC5F,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,MAAM,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;IACxC,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM;QAClF,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,gDAAgD,CAAC,CAAC;AAC5F,CAAC"}

package/dist/core/terminal-options.d.ts

@@ -1,9 +1,9 @@
 /**
  * Parses numbered and cursor-selected options from rendered terminal prompts,
  * and exposes the option/non-option split that trust HEADER matching anchors on.
- * Implements PRD §5.1/§5.5: the single option-parsing rule shared by trust-prompt
- * automation and Codex update-prompt skipping, so a CLI format change updates
- * both at once instead of letting them diverge. `nonOptionText` is shared by the
+ * Implements PRD §5.1/§5.3/§5.5: shared option parsing for trust automation,
+ * Codex composer clearance, and update-prompt skipping. One grammar keeps those
+ * consumers consistent across CLI layout changes. `nonOptionText` is shared by the
  * responder and screen-fact blocking rules, so option text cannot spoof a header.
  */
 export type NumberedOption = {
@@ -36,4 +36,14 @@ export declare function optionKeystrokes(option: SelectableOption): readonly str
  * matchable so a later completed frame can still be answered.
  */
 export declare function nonOptionText(frame: string): string;
+/**
+ * Inclusive row span of the frame's cursor-option block, or `undefined` when it has
+ * none. Header scanning excludes these rows so an option label that reads like a
+ * header cannot register as its own candidate region. `startRow` bounds a resumed
+ * scan without copying or revisiting an already classified prefix.
+ */
+export declare function cursorOptionRows(lines: readonly string[], startRow?: number): {
+    readonly firstRow: number;
+    readonly lastRow: number;
+} | undefined;
 //# sourceMappingURL=terminal-options.d.ts.map

package/dist/core/terminal-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-options.d.ts","sourceRoot":"","sources":["../../src/core/terminal-options.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjF,iEAAiE;AACjE,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAOlF,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAKvE;AAED,yDAAyD;AACzD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAK3E;AAED,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAK5D;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,MAAM,EAAE,CAI5E;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnD"}
+{"version":3,"file":"terminal-options.d.ts","sourceRoot":"","sources":["../../src/core/terminal-options.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjF,iEAAiE;AACjE,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAOlF,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAKvE;AAED,yDAAyD;AACzD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAK3E;AAED,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAK5D;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,MAAM,EAAE,CAI5E;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnD;AAsBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,QAAQ,SAAI,GACX;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAGrE"}

package/dist/core/terminal-options.js

@@ -1,9 +1,9 @@
 /**
  * Parses numbered and cursor-selected options from rendered terminal prompts,
  * and exposes the option/non-option split that trust HEADER matching anchors on.
- * Implements PRD §5.1/§5.5: the single option-parsing rule shared by trust-prompt
- * automation and Codex update-prompt skipping, so a CLI format change updates
- * both at once instead of letting them diverge. `nonOptionText` is shared by the
+ * Implements PRD §5.1/§5.3/§5.5: shared option parsing for trust automation,
+ * Codex composer clearance, and update-prompt skipping. One grammar keeps those
+ * consumers consistent across CLI layout changes. `nonOptionText` is shared by the
  * responder and screen-fact blocking rules, so option text cannot spoof a header.
  */
 /** Extracts `N. label` / `N) label` options from `text`, tolerating `›`/`>` prefixes. */
@@ -68,6 +68,16 @@ function firstNumberedRow(lines) {
     const row = lines.findIndex((line) => pattern.test(line));
     return row < 0 ? undefined : row;
 }
+/**
+ * Inclusive row span of the frame's cursor-option block, or `undefined` when it has
+ * none. Header scanning excludes these rows so an option label that reads like a
+ * header cannot register as its own candidate region. `startRow` bounds a resumed
+ * scan without copying or revisiting an already classified prefix.
+ */
+export function cursorOptionRows(lines, startRow = 0) {
+    const bounds = cursorOptionBounds(lines, startRow);
+    return bounds && { firstRow: bounds.firstRow, lastRow: bounds.lastRow };
+}
 function positionedCursorOptions(lines) {
     const bounds = cursorOptionBounds(lines);
     if (bounds === undefined)
@@ -83,12 +93,12 @@ function positionedCursorOptions(lines) {
         };
     });
 }
-function cursorOptionBounds(lines) {
+function cursorOptionBounds(lines, startRow = 0) {
     const cursorPattern = /^(\s*)[❯›](\s+)(?!\d+[.)]\s)(\S.*)$/;
     let selected;
     let selectedRow = -1;
-    for (const [row, line] of lines.entries()) {
-        const match = cursorPattern.exec(line);
+    for (let row = startRow; row < lines.length; row++) {
+        const match = cursorPattern.exec(lines[row]);
         if (match === null)
             continue;
         selected = match;
@@ -99,7 +109,7 @@ function cursorOptionBounds(lines) {
         return undefined;
     const labelColumn = selected[1].length + 1 + selected[2].length;
     let firstRow = selectedRow;
-    while (firstRow > 0 && cursorSiblingLabel(lines[firstRow - 1], labelColumn))
+    while (firstRow > startRow && cursorSiblingLabel(lines[firstRow - 1], labelColumn))
         firstRow--;
     let lastRow = selectedRow;
     while (lastRow + 1 < lines.length &&

package/dist/core/terminal-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-options.js","sourceRoot":"","sources":["../../src/core/terminal-options.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAcH,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM;QACN,KAAK;KACN,CAAC,CAAC,CAAC;AACN,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;SAC5E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;SAC7B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,MAAwB;IAClD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,GAAG,GAAG,SAAS,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACxD,OAAO,CAAC,GAAG,IAAI,KAAK,CAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAwB;IACzD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,OAAO;gBACL,GAAG;gBACH,KAAK,EAAE,UAAmB;gBAC1B,KAAK,EAAG,KAAK,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE;gBAClC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAW;aAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAwB;IAChD,MAAM,OAAO,GAAG,0BAA0B,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AACnC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAwB;IACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC5D,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,QAAQ,GAAG,KAAK,CAAC;QAC7B,OAAO;YACL,GAAG;YACH,KAAK,EAAE,QAAiB;YACxB,KAAK,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC,CAAE,QAAQ,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;YACzE,MAAM,EAAE,GAAG,GAAG,WAAW;SAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAwB;IAClD,MAAM,aAAa,GAAG,qCAAqC,CAAC;IAC5D,IAAI,QAAqC,CAAC;IAC1C,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,QAAQ,GAAG,KAAK,CAAC;QACjB,WAAW,GAAG,GAAG,CAAC;QAClB,MAAM;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,WAAW,GAAI,QAAQ,CAAC,CAAC,CAAY,CAAC,MAAM,GAAG,CAAC,GAAI,QAAQ,CAAC,CAAC,CAAY,CAAC,MAAM,CAAC;IACxF,IAAI,QAAQ,GAAG,WAAW,CAAC;IAC3B,OAAO,QAAQ,GAAG,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAW,EAAE,WAAW,CAAC;QAAE,QAAQ,EAAE,CAAC;IAClG,IAAI,OAAO,GAAG,WAAW,CAAC;IAC1B,OACE,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;QAC1B,kBAAkB,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAW,EAAE,WAAW,CAAC;QAE7D,OAAO,EAAE,CAAC;IACZ,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,WAAmB;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,IAAI,IAAK,KAAK,CAAC,CAAC,CAAY,CAAC,MAAM,KAAK,WAAW,CAAC;AACvE,CAAC"}
+{"version":3,"file":"terminal-options.js","sourceRoot":"","sources":["../../src/core/terminal-options.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAcH,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM;QACN,KAAK;KACN,CAAC,CAAC,CAAC;AACN,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;SAC5E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;SAC7B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,MAAwB;IAClD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,GAAG,GAAG,SAAS,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACxD,OAAO,CAAC,GAAG,IAAI,KAAK,CAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAwB;IACzD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,OAAO;gBACL,GAAG;gBACH,KAAK,EAAE,UAAmB;gBAC1B,KAAK,EAAG,KAAK,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE;gBAClC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAW;aAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAwB;IAChD,MAAM,OAAO,GAAG,0BAA0B,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAwB,EACxB,QAAQ,GAAG,CAAC;IAEZ,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,OAAO,MAAM,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAwB;IACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC5D,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,QAAQ,GAAG,KAAK,CAAC;QAC7B,OAAO;YACL,GAAG;YACH,KAAK,EAAE,QAAiB;YACxB,KAAK,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC,CAAE,QAAQ,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;YACzE,MAAM,EAAE,GAAG,GAAG,WAAW;SAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAwB,EAAE,QAAQ,GAAG,CAAC;IAChE,MAAM,aAAa,GAAG,qCAAqC,CAAC;IAC5D,IAAI,QAAqC,CAAC;IAC1C,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,IAAI,GAAG,GAAG,QAAQ,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,QAAQ,GAAG,KAAK,CAAC;QACjB,WAAW,GAAG,GAAG,CAAC;QAClB,MAAM;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,WAAW,GAAI,QAAQ,CAAC,CAAC,CAAY,CAAC,MAAM,GAAG,CAAC,GAAI,QAAQ,CAAC,CAAC,CAAY,CAAC,MAAM,CAAC;IACxF,IAAI,QAAQ,GAAG,WAAW,CAAC;IAC3B,OAAO,QAAQ,GAAG,QAAQ,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAW,EAAE,WAAW,CAAC;QAC1F,QAAQ,EAAE,CAAC;IACb,IAAI,OAAO,GAAG,WAAW,CAAC;IAC1B,OACE,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;QAC1B,kBAAkB,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAW,EAAE,WAAW,CAAC;QAE7D,OAAO,EAAE,CAAC;IACZ,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,WAAmB;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,IAAI,IAAK,KAAK,CAAC,CAAC,CAAY,CAAC,MAAM,KAAK,WAAW,CAAC;AACvE,CAAC"}

package/dist/core/terminal-replay.d.ts

@@ -18,6 +18,7 @@ export declare class TerminalReplayBuffer {
     private stopAttentionCapture;
     constructor(elwoodSessionId: string, maxBytes?: number);
     push(data: string): void;
+    replayFor(event: string, handler: (event: never) => unknown): void;
     replay(handler: (event: TerminalDataEvent) => unknown): void;
     /** Capture stable attention activities until the eager start promise has returned. */
     captureStartupAttention(source: {

package/dist/core/terminal-replay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-replay.d.ts","sourceRoot":"","sources":["../../src/core/terminal-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,KAAK,iBAAiB,GAAG;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,oBAAoB,CAA2B;gBAE3C,eAAe,EAAE,MAAM,EAAE,QAAQ,SAAU;IAKvD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAaxB,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,GAAG,IAAI;IAK5D,sFAAsF;IACtF,uBAAuB,CAAC,MAAM,EAAE;QAC9B,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;KAClF,GAAG,IAAI;IAMR,sFAAsF;IACtF,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,GAAG,IAAI;IAIvE,oFAAoF;IACpF,kCAAkC,IAAI,IAAI;CAQ3C"}
+{"version":3,"file":"terminal-replay.d.ts","sourceRoot":"","sources":["../../src/core/terminal-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,KAAK,iBAAiB,GAAG;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,oBAAoB,CAA2B;gBAE3C,eAAe,EAAE,MAAM,EAAE,QAAQ,SAAU;IAKvD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAaxB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,GAAG,IAAI;IAMlE,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,GAAG,IAAI;IAK5D,sFAAsF;IACtF,uBAAuB,CAAC,MAAM,EAAE;QAC9B,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;KAClF,GAAG,IAAI;IAMR,sFAAsF;IACtF,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,GAAG,IAAI;IAIvE,oFAAoF;IACpF,kCAAkC,IAAI,IAAI;CAQ3C"}

package/dist/core/terminal-replay.js

@@ -27,6 +27,12 @@ export class TerminalReplayBuffer {
             this.size = Buffer.byteLength(this.chunks[0]);
         }
     }
+    replayFor(event, handler) {
+        if (event === "terminal:data")
+            this.replay(handler);
+        if (event === "activity")
+            this.replayAttention(handler);
+    }
     replay(handler) {
         if (this.chunks.length === 0)
             return;

package/dist/core/terminal-replay.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-replay.js","sourceRoot":"","sources":["../../src/core/terminal-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,OAAO,oBAAoB;IACd,eAAe,CAAS;IACxB,QAAQ,CAAS;IACjB,MAAM,GAAa,EAAE,CAAC;IAC/B,IAAI,GAAG,CAAC,CAAC;IACA,gBAAgB,GAA0B,EAAE,CAAC;IACtD,oBAAoB,CAA2B;IAEvD,YAAY,eAAuB,EAAE,QAAQ,GAAG,OAAO;QACrD,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,IAAY;QACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,6EAA6E;YAC7E,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAG,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7E,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,OAA8C;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACrC,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,sFAAsF;IACtF,uBAAuB,CAAC,MAEvB;QACC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sFAAsF;IACtF,eAAe,CAAC,OAAgD;QAC9D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,oFAAoF;IACpF,kCAAkC;QAChC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,oBAAoB,GAAG,SAAS,CAAC;YACtC,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAa,EAAE,QAAgB;IACtD,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;IACpC,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,CAAE,KAAK,CAAC,KAAK,CAAY,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,KAAK,IAAI,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"terminal-replay.js","sourceRoot":"","sources":["../../src/core/terminal-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,OAAO,oBAAoB;IACd,eAAe,CAAS;IACxB,QAAQ,CAAS;IACjB,MAAM,GAAa,EAAE,CAAC;IAC/B,IAAI,GAAG,CAAC,CAAC;IACA,gBAAgB,GAA0B,EAAE,CAAC;IACtD,oBAAoB,CAA2B;IAEvD,YAAY,eAAuB,EAAE,QAAQ,GAAG,OAAO;QACrD,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,IAAY;QACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,6EAA6E;YAC7E,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAG,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7E,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,SAAS,CAAC,KAAa,EAAE,OAAkC;QACzD,IAAI,KAAK,KAAK,eAAe;YAAE,IAAI,CAAC,MAAM,CAAC,OAAgD,CAAC,CAAC;QAC7F,IAAI,KAAK,KAAK,UAAU;YACtB,IAAI,CAAC,eAAe,CAAC,OAAkD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,CAAC,OAA8C;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACrC,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,sFAAsF;IACtF,uBAAuB,CAAC,MAEvB;QACC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sFAAsF;IACtF,eAAe,CAAC,OAAgD;QAC9D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,oFAAoF;IACpF,kCAAkC;QAChC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,oBAAoB,GAAG,SAAS,CAAC;YACtC,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAa,EAAE,QAAgB;IACtD,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;IACpC,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,CAAE,KAAK,CAAC,KAAK,CAAY,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,KAAK,IAAI,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC"}

package/dist/core/timers.d.ts

@@ -0,0 +1,15 @@
+/** Node's maximum safe timer delay shared by bounded deadlines (PRD §4/§12A). */
+export declare const MAX_TIMER_DELAY_MS = 2147483647;
+export type DeadlineClock = {
+    readonly now: () => number;
+    readonly setTimer: (handler: () => void, delayMs: number) => unknown;
+    readonly clearTimer: (timer: unknown) => void;
+};
+/** Keep an absolute deadline across capped timer intervals; cancellation clears the latest one.
+ * deadlineAtMs is an absolute millisecond reading in the supplied clock's time base.
+ * The caller supplies its first delay to preserve when its deadline starts counting. */
+export declare function scheduleDeadline(options: {
+    readonly deadlineAtMs: number;
+    readonly initialDelayMs: number;
+}, expire: () => void, clock: DeadlineClock): () => void;
+//# sourceMappingURL=timers.d.ts.map

package/dist/core/timers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timers.d.ts","sourceRoot":"","sources":["../../src/core/timers.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,aAAgB,CAAC;AAEhD,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC/C,CAAC;AAEF;;wFAEwF;AACxF,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE;IAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC3E,MAAM,EAAE,MAAM,IAAI,EAClB,KAAK,EAAE,aAAa,GACnB,MAAM,IAAI,CAQZ"}

package/dist/core/timers.js

@@ -0,0 +1,17 @@
+/** Node's maximum safe timer delay shared by bounded deadlines (PRD §4/§12A). */
+export const MAX_TIMER_DELAY_MS = 2_147_483_647;
+/** Keep an absolute deadline across capped timer intervals; cancellation clears the latest one.
+ * deadlineAtMs is an absolute millisecond reading in the supplied clock's time base.
+ * The caller supplies its first delay to preserve when its deadline starts counting. */
+export function scheduleDeadline(options, expire, clock) {
+    const tick = () => {
+        const remaining = options.deadlineAtMs - clock.now();
+        if (remaining > 0)
+            timer = clock.setTimer(tick, Math.min(remaining, MAX_TIMER_DELAY_MS));
+        else
+            expire();
+    };
+    let timer = clock.setTimer(tick, Math.min(options.initialDelayMs, MAX_TIMER_DELAY_MS));
+    return () => clock.clearTimer(timer);
+}
+//# sourceMappingURL=timers.js.map

package/dist/core/timers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timers.js","sourceRoot":"","sources":["../../src/core/timers.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAQhD;;wFAEwF;AACxF,MAAM,UAAU,gBAAgB,CAC9B,OAA2E,EAC3E,MAAkB,EAClB,KAAoB;IAEpB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACrD,IAAI,SAAS,GAAG,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;;YACpF,MAAM,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,IAAI,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACvF,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC"}

package/dist/core/trust/allowlist.d.ts

@@ -5,7 +5,8 @@
  * Implements PRD §5.1/§5.4/§5.5 (C-CLAUDE-10, C-CLAUDE-14, C-CLAUDE-21, C-CODEX-15).
  */
 /**
- * The allowlist. Wording verified against claude 2.1.205–2.1.268 and codex-cli 0.142.5.
+ * The allowlist. Claude folder captures: 2.1.206/2.1.252; bypass copy: 2.1.268.
+ * Codex directory/hooks: native 0.154.0 PTY captures (docs/cli-behavior.md).
  * `workspace`/`directory` trust are the folder-trust gates; `skill`, `plugin`,
  * and `mcp` cover the CLI's first-run trust prompts for loading third-party
  * skills, plugins, and MCP servers under a full-trust launch.
@@ -14,42 +15,64 @@ export declare const trustPromptAllowlist: readonly [{
     readonly id: "workspace_trust";
     readonly agent: "claude";
     readonly headerPattern: RegExp;
+    readonly descriptionPattern: RegExp;
+    readonly optionPattern: RegExp;
     readonly accept: RegExp;
     readonly answerPolicy: "autotrust";
 }, {
     readonly id: "skill_trust";
     readonly agent: "claude";
     readonly headerPattern: RegExp;
+    readonly descriptionPattern: RegExp;
+    readonly optionPattern: RegExp;
     readonly accept: RegExp;
     readonly answerPolicy: "autotrust";
 }, {
     readonly id: "plugin_trust";
     readonly agent: "claude";
     readonly headerPattern: RegExp;
+    readonly descriptionPattern: RegExp;
+    readonly optionPattern: RegExp;
     readonly accept: RegExp;
     readonly answerPolicy: "autotrust";
 }, {
     readonly id: "mcp_trust";
     readonly agent: "claude";
     readonly headerPattern: RegExp;
+    readonly descriptionPattern: RegExp;
+    readonly optionPattern: RegExp;
     readonly accept: RegExp;
     readonly answerPolicy: "autotrust";
 }, {
     readonly id: "bypass_permissions";
     readonly agent: "claude";
     readonly headerPattern: RegExp;
+    readonly descriptionPattern: RegExp;
+    readonly optionPattern: RegExp;
     readonly accept: RegExp;
     readonly answerPolicy: "autotrust";
 }, {
     readonly id: "workspace_trust";
     readonly agent: "codex";
     readonly headerPattern: RegExp;
+    readonly descriptionPattern: RegExp;
+    readonly optionPattern: RegExp;
+    readonly accept: RegExp;
+    readonly answerPolicy: "autotrust";
+}, {
+    readonly id: "workspace_trust";
+    readonly agent: "codex";
+    readonly headerPattern: RegExp;
+    readonly descriptionPattern: RegExp;
+    readonly optionPattern: RegExp;
     readonly accept: RegExp;
     readonly answerPolicy: "autotrust";
 }, {
     readonly id: "hook_trust";
     readonly agent: "codex";
     readonly headerPattern: RegExp;
+    readonly descriptionPattern: RegExp;
+    readonly optionPattern: RegExp;
     readonly accept: RegExp;
     readonly answerPolicy: "always";
 }];

package/dist/core/trust/allowlist.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"allowlist.d.ts","sourceRoot":"","sources":["../../../src/core/trust/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH;;;;;GAKG;AAKH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgEc,CAAC"}
+{"version":3,"file":"allowlist.d.ts","sourceRoot":"","sources":["../../../src/core/trust/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA+BH;;;;;;GAMG;AAKH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2Fc,CAAC"}

package/dist/core/trust/allowlist.js

@@ -4,6 +4,8 @@
  * table can grow without crowding it.
  * Implements PRD §5.1/§5.4/§5.5 (C-CLAUDE-10, C-CLAUDE-14, C-CLAUDE-21, C-CODEX-15).
  */
+import { claudeBypassDescription, claudeWorkspaceDescription, codexFolderAccessDescription, codexHooksDescription, codexWorkspaceDescription, noTrustDescription, } from "./copy.js";
+import { claudeBypassOptions, claudeExtensionOptions, claudeMcpOptions, claudeWorkspaceOptions, codexFolderAccessOptions, codexHooksOptions, codexWorkspaceOptions, } from "./options.js";
 // Affirmative option shapes. Each rejects decline words so "No, ..." never
 // matches. Prompts with a SPECIFIC affirmative (MCP, hook trust, bypass
 // acceptance) get their own matcher so a nearby dialog's generic "Yes" cannot
@@ -14,36 +16,43 @@ const useMcpOption = new RegExp(`^${notDecline}.*\\buse this(?:.*\\bMCP)? server
 const trustHooksOption = new RegExp(`^${notDecline}.*\\btrust\\b.*\\b(hooks?|all)\\b`, "i");
 const acceptOption = new RegExp(`^${notDecline}.*\\byes\\b.*\\baccept\\b`, "i");
 /**
- * The allowlist. Wording verified against claude 2.1.205–2.1.268 and codex-cli 0.142.5.
+ * The allowlist. Claude folder captures: 2.1.206/2.1.252; bypass copy: 2.1.268.
+ * Codex directory/hooks: native 0.154.0 PTY captures (docs/cli-behavior.md).
  * `workspace`/`directory` trust are the folder-trust gates; `skill`, `plugin`,
  * and `mcp` cover the CLI's first-run trust prompts for loading third-party
  * skills, plugins, and MCP servers under a full-trust launch.
  */
 // Each `headerPattern` matches the prompt's QUESTION/HEADER wording — never a
 // phrase that lives only in an affirmative option — so recognition anchors on a
-// header line (matched via `trustHeaderMatches` over the frame's non-option
-// text), which a hostile option cannot spoof (PRD §5.1).
+// standalone header inside the active dialog; option and transcript wording
+// cannot supply authority to another dialog (PRD §5.4).
 export const trustPromptAllowlist = [
     {
         // Header renders as "Do you trust this folder?" or "Quick safety check: Is
         // this a project you created or one you trust?" (claude 2.1.205/2.1.206).
         id: "workspace_trust",
         agent: "claude",
-        headerPattern: /do you trust this folder|project you .*\bor one you trust/i,
+        headerPattern: /^(?:do you trust this folder|(?:Quick safety check:\s*)?Is this a project you created or one you trust)\?(?:\s|$)/i,
+        descriptionPattern: claudeWorkspaceDescription,
+        optionPattern: claudeWorkspaceOptions,
         accept: yesOption,
         answerPolicy: "autotrust",
     },
     {
         id: "skill_trust",
         agent: "claude",
-        headerPattern: /do you (?:want to )?(?:trust|load) (?:this|the) skill|load this skill\?/i,
+        headerPattern: /^(?:do you (?:want to )?(?:trust|load) (?:this|the) skill|load this skill)\?(?:\s|$)/i,
+        descriptionPattern: noTrustDescription,
+        optionPattern: claudeExtensionOptions,
         accept: yesOption,
         answerPolicy: "autotrust",
     },
     {
         id: "plugin_trust",
         agent: "claude",
-        headerPattern: /do you (?:want to )?trust (?:this|the) plugin|trust the plugin\?/i,
+        headerPattern: /^(?:do you (?:want to )?trust (?:this|the) plugin|trust the plugin)\?(?:\s|$)/i,
+        descriptionPattern: noTrustDescription,
+        optionPattern: claudeExtensionOptions,
         accept: yesOption,
         answerPolicy: "autotrust",
     },
@@ -53,7 +62,9 @@ export const trustPromptAllowlist = [
         // accept — the generic yes-matcher would leave it wedged.
         id: "mcp_trust",
         agent: "claude",
-        headerPattern: /New MCP server found|do you trust (?:this|the) MCP server/i,
+        headerPattern: /^(?:New MCP server found in this project(?:: [\w.:-]+)?|do you trust (?:this|the) MCP server\?)(?:\s|$)/i,
+        descriptionPattern: noTrustDescription,
+        optionPattern: claudeMcpOptions,
         accept: useMcpOption,
         answerPolicy: "autotrust",
     },
@@ -63,7 +74,9 @@ export const trustPromptAllowlist = [
         // (C-CLAUDE-21). "running in" keeps the live footer from matching.
         id: "bypass_permissions",
         agent: "claude",
-        headerPattern: /running in Bypass Permissions mode/i,
+        headerPattern: /^(?:WARNING:\s*)?Claude Code running in Bypass Permissions mode(?:\s|$)/i,
+        descriptionPattern: claudeBypassDescription,
+        optionPattern: claudeBypassOptions,
         accept: acceptOption,
         answerPolicy: "autotrust",
     },
@@ -72,16 +85,30 @@ export const trustPromptAllowlist = [
         // (PRD §5.4) even though its wording differs from Claude's.
         id: "workspace_trust",
         agent: "codex",
-        headerPattern: /Do you trust the contents of this directory/i,
+        headerPattern: /^Do you trust the contents of this directory\?(?:\s|$)/i,
+        descriptionPattern: codexWorkspaceDescription,
+        optionPattern: codexWorkspaceOptions,
         accept: yesOption,
         answerPolicy: "autotrust",
     },
-    // Hook trust is Elwood's own integration, required for the session to work, so
-    // it is always answered (not gated on autotrust) — see `answerPolicy: "always"`.
+    {
+        // Codex 0.156.1's Folder access dialog keeps the existing workspace policy/label.
+        id: "workspace_trust",
+        agent: "codex",
+        headerPattern: /^Trust this folder\?(?:\s|$)/,
+        descriptionPattern: codexFolderAccessDescription,
+        optionPattern: codexFolderAccessOptions,
+        accept: /^Trust and continue$/,
+        answerPolicy: "autotrust",
+    },
+    // Codex trusts every configured hook, including third-party hooks, because the
+    // bridge requires hook trust. This is session-wide and independent of autotrust.
     {
         id: "hook_trust",
         agent: "codex",
-        headerPattern: /Hooks need review/i,
+        headerPattern: /^Hooks need review(?:\s|$)/i,
+        descriptionPattern: codexHooksDescription,
+        optionPattern: codexHooksOptions,
         // Specific to hook trust's own option ("Trust all and continue"), never a
         // generic "Yes" that could belong to a different dialog in the same frame.
         accept: trustHooksOption,

package/dist/core/trust/allowlist.js.map

@@ -1 +1 @@
-{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../../src/core/trust/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,2EAA2E;AAC3E,wEAAwE;AACxE,8EAA8E;AAC9E,wBAAwB;AACxB,MAAM,UAAU,GAAG,qDAAqD,CAAC;AACzE,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,sCAAsC,EAAE,GAAG,CAAC,CAAC;AACxF,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,mCAAmC,EAAE,GAAG,CAAC,CAAC;AACxF,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,mCAAmC,EAAE,GAAG,CAAC,CAAC;AAC5F,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,2BAA2B,EAAE,GAAG,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC;QACE,2EAA2E;QAC3E,0EAA0E;QAC1E,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,4DAA4D;QAC3E,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,0EAA0E;QACzF,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,mEAAmE;QAClF,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,2EAA2E;QAC3E,2EAA2E;QAC3E,0DAA0D;QAC1D,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,4DAA4D;QAC3E,MAAM,EAAE,YAAY;QACpB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,wEAAwE;QACxE,oEAAoE;QACpE,mEAAmE;QACnE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,qCAAqC;QACpD,MAAM,EAAE,YAAY;QACpB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,wEAAwE;QACxE,4DAA4D;QAC5D,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,8CAA8C;QAC7D,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD,+EAA+E;IAC/E,iFAAiF;IACjF;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,oBAAoB;QACnC,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,QAAQ;KACvB;CAC4C,CAAC"}
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../../src/core/trust/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAGtB,2EAA2E;AAC3E,wEAAwE;AACxE,8EAA8E;AAC9E,wBAAwB;AACxB,MAAM,UAAU,GAAG,qDAAqD,CAAC;AACzE,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,sCAAsC,EAAE,GAAG,CAAC,CAAC;AACxF,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,mCAAmC,EAAE,GAAG,CAAC,CAAC;AACxF,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,mCAAmC,EAAE,GAAG,CAAC,CAAC;AAC5F,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,2BAA2B,EAAE,GAAG,CAAC,CAAC;AAEhF;;;;;;GAMG;AACH,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,wDAAwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC;QACE,2EAA2E;QAC3E,0EAA0E;QAC1E,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,QAAQ;QACf,aAAa,EACX,oHAAoH;QACtH,kBAAkB,EAAE,0BAA0B;QAC9C,aAAa,EAAE,sBAAsB;QACrC,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,QAAQ;QACf,aAAa,EACX,uFAAuF;QACzF,kBAAkB,EAAE,kBAAkB;QACtC,aAAa,EAAE,sBAAsB;QACrC,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,gFAAgF;QAC/F,kBAAkB,EAAE,kBAAkB;QACtC,aAAa,EAAE,sBAAsB;QACrC,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,2EAA2E;QAC3E,2EAA2E;QAC3E,0DAA0D;QAC1D,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,QAAQ;QACf,aAAa,EACX,0GAA0G;QAC5G,kBAAkB,EAAE,kBAAkB;QACtC,aAAa,EAAE,gBAAgB;QAC/B,MAAM,EAAE,YAAY;QACpB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,wEAAwE;QACxE,oEAAoE;QACpE,mEAAmE;QACnE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,0EAA0E;QACzF,kBAAkB,EAAE,uBAAuB;QAC3C,aAAa,EAAE,mBAAmB;QAClC,MAAM,EAAE,YAAY;QACpB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,wEAAwE;QACxE,4DAA4D;QAC5D,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,yDAAyD;QACxE,kBAAkB,EAAE,yBAAyB;QAC7C,aAAa,EAAE,qBAAqB;QACpC,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,WAAW;KAC1B;IACD;QACE,kFAAkF;QAClF,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,8BAA8B;QAC7C,kBAAkB,EAAE,4BAA4B;QAChD,aAAa,EAAE,wBAAwB;QACvC,MAAM,EAAE,sBAAsB;QAC9B,YAAY,EAAE,WAAW;KAC1B;IACD,+EAA+E;IAC/E,iFAAiF;IACjF;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,6BAA6B;QAC5C,kBAAkB,EAAE,qBAAqB;QACzC,aAAa,EAAE,iBAAiB;QAChC,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,QAAQ;KACvB;CAC4C,CAAC"}

package/dist/core/trust/blocking.d.ts

@@ -4,19 +4,30 @@
  * under the policy classifies as a blocking prompt. Both adapters build these
  * rules identically, so the construction — option-aware header recognition,
  * stable semantic ids, base-table append — lives here once instead of diverging
- * across `claude/screen-table.ts` and `codex/screen-table.ts`.
+ * across `claude/screen-table.ts` and `codex/screen-table.ts`. A native-shaped gate
+ * whose header is OFF the allowlist is hold-only under every policy (C-TRUST-01).
  */
 import type { ElwoodAgentKind } from "../activity/index.ts";
 import type { ScreenFactTable } from "../screen-facts.ts";
 /**
- * `base` plus one `blocking_prompt_visible` rule per trust prompt that stays
- * unanswered under `autotrust`. Each rule recognizes the prompt only by its
- * HEADER outside the option region (`trustHeaderMatches`, the same recognizer
- * the responder uses; the non-option text is computed once per frame and cached
- * across the rules), so an unrelated numbered/cursor option containing a trust
- * phrase is NOT mistaken for a blocking trust prompt (PRD §5.1). Returns `base`
- * unchanged when no trust prompt blocks (e.g. every allowlisted prompt is
- * auto-answered).
+ * Blocking rules for every native trust candidate: allowlisted gates the human owns
+ * (held even when their body is unsafe to automate) plus the off-allowlist fallback.
  */
-export declare function withTrustBlockingRules(base: ScreenFactTable, agent: ElwoodAgentKind, autotrust: boolean): ScreenFactTable;
+export declare function withTrustBlockingRules(base: ScreenFactTable, agent: ElwoodAgentKind, autotrust: boolean): ScreenFactTable & {
+    readonly trustGateVisible: (frame: string) => boolean;
+};
+/**
+ * Any trust gate is on screen: an allowlisted candidate (even a hold-only one whose body
+ * or options are unsupported) or an off-allowlist gate. Non-trust startup automation
+ * (update skip, browser-tools decline) consults this before EVERY write and MUST NOT
+ * write while it holds. Of the frames it covers, only allowlisted candidates are ever
+ * answered, and only by `TrustPromptResponder` under the trust policy; an off-allowlist
+ * gate is hold-only and stays for the human, so nothing here may answer it.
+ *
+ * Boundary, deliberately narrow: "off-allowlist gate" means the grammar `unknownGateVisible`
+ * documents — a recognized header prefix, a complete option dialog, a native footer ending
+ * the frame, no conversation row above. A prompt outside that grammar is NOT reported here,
+ * so this is a positive signal to withhold a write, never a proof that a frame is safe.
+ */
+export declare function trustGateVisible(frame: string, agent: ElwoodAgentKind): boolean;
 //# sourceMappingURL=blocking.d.ts.map

package/dist/core/trust/blocking.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blocking.d.ts","sourceRoot":"","sources":["../../../src/core/trust/blocking.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAI1E;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,OAAO,GACjB,eAAe,CAgBjB"}
+{"version":3,"file":"blocking.d.ts","sourceRoot":"","sources":["../../../src/core/trust/blocking.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAM1E;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,OAAO,GACjB,eAAe,GAAG;IAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,CA+B7E;AAmBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAE/E"}