@with-logic/elwood 0.1.3 → 0.2.0

package/dist/core/trust/responder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"responder.d.ts","sourceRoot":"","sources":["../../../src/core/trust/responder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAQ5D,OAAO,EACL,KAAK,gBAAgB,EAItB,MAAM,cAAc,CAAC;AAQtB,+EAA+E;AAC/E,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IAAI;IAC/E,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IACrE;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAG9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,GACzE,SAAS,CAAC;AAEd,qBAAa,oBAAoB,CAAC,CAAC,SAAS,eAAe;IAGzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8B;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAI1D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;gBAEtD,KAAK,EAAE,CAAC,EAAE,SAAS,UAAQ;IAKvC,8EAA8E;IAC9E,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,EAC1C,SAAS,CAAC,EAAE,MAAM,MAAM,GACvB,iBAAiB,CAAC,CAAC,CAAC;CA0CxB;AAuDD,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAIhF"}
+{"version":3,"file":"responder.d.ts","sourceRoot":"","sources":["../../../src/core/trust/responder.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,KAAK,EAAW,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAK/E,YAAY,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAG/C,qBAAa,oBAAoB,CAAC,CAAC,SAAS,eAAe;IACzD,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,KAAK,CAA4C;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAI;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;IACzD,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;gBAC/B,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,UAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,IAAI;IAM9F,IAAI,aAAa,IAAI,OAAO,CAE3B;IACD,IAAI,aAAa,IAAI,gBAAgB,CAAC,CAAC,CAAC,GAAG,SAAS,CAGnD;IACD;iGAC6F;IAC7F,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,EAC1C,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GACnC,iBAAiB,CAAC,CAAC,CAAC;IAqFvB,0FAA0F;IAC1F,OAAO,IAAI,IAAI;IAOf,OAAO,CAAC,OAAO;IAmCf,OAAO,CAAC,GAAG;IAcX,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,MAAM;CAOf"}

package/dist/core/trust/responder.js

@@ -1,123 +1,193 @@
-/**
- * Detects and answers the allowlisted family of adapter startup trust prompts.
- * Implements PRD §5.1 and §9.1 (C-CLAUDE-10, C-CODEX-11, C-CLAUDE-14, C-CODEX-15).
- *
- * Policy (PRD §5.1): an agent must NEVER be left waiting on a trust gate.
- * Under the caller's full-trust posture, when an allowlisted trust prompt is
- * visible in the current frame, Elwood selects its affirmative option and sends
- * it — always say yes. Elwood only auto-answers ALLOWLISTED prompts (an
- * off-allowlist confirmation is left to the human), and never re-answers the same
- * prompt; those are the only limits.
- */
-import { delay } from "../delay.js";
-import { nonOptionText, optionInput, optionKeystrokes, selectableOptions, } from "../terminal-options.js";
-import { trustHeaderMatches, trustPromptAllowlist, trustPromptHeaderVisible, } from "./prompts.js";
-const cursorRetryMs = 250;
-const cursorNavigationTimeoutMs = 5_000;
+import { optionInput } from "../terminal-options.js";
+import { newEpisode } from "./types.js";
+import { choiceIdentity, readTrustView, trustView } from "./view.js";
+import { TrustAttempt } from "./write.js";
+export { trustPromptVisible } from "./view.js";
+const episodeTimeoutMs = 5_000;
 export class TrustPromptResponder {
-    // Whether the caller launched under full trust (`autotrust`). `answerPolicy:
-    // "always"` prompts (hook trust) are answered even when this is false.
+    episode;
+    humanPrompt;
+    timer;
+    attempts = new Set();
+    disposed = false;
+    agent;
     autotrust;
-    specs;
-    settled = new Set();
-    // A prompt whose "option not rendered yet" state was reported once, kept
-    // SEPARATE from `settled` so a later frame with the real option can still be
-    // answered — the pending state is transient, not terminal.
-    reportedPending = new Set();
-    constructor(agent, autotrust = false) {
+    onStateChange;
+    /** The ADAPTER's clearance grammar; the coordinator never encodes a CLI's layout. */
+    clearance;
+    constructor(agent, clearance, autotrust = false, onStateChange) {
+        this.agent = agent;
+        this.clearance = clearance;
         this.autotrust = autotrust;
-        this.specs = trustPromptAllowlist.filter((spec) => spec.agent === agent);
+        this.onStateChange = onStateChange;
     }
-    /** `frame` MUST be the CURRENT rendered screen, not an accumulated buffer. */
+    get inputBlocking() {
+        return this.humanPrompt !== undefined || this.episode !== undefined;
+    }
+    get blockedPrompt() {
+        const id = this.episode?.blocked ? this.episode.candidate.spec.id : undefined;
+        return (this.humanPrompt ?? id);
+    }
+    /** Read the latest settled frame; undefined during pending/synchronized/failed rendering
+     * holds input until the deadline. Omit the reader only for static/legacy numbered writes. */
     handle(frame, write, readFrame) {
-        const header = nonOptionText(frame);
-        for (const spec of this.specs) {
-            const id = spec.id;
-            // `answerPolicy: "always"` prompts (Elwood's own hook bridge) answer
-            // regardless of autotrust; every other trust prompt requires the caller's
-            // full-trust posture.
-            if (!(this.autotrust || spec.answerPolicy === "always"))
-                continue;
-            // Recognized when the prompt's HEADER wording appears on a NON-OPTION line
-            // (via the shared `trustHeaderMatches`), so a phrase living only inside an
-            // option label can't spoof a prompt. That is the ONLY guard — recognition
-            // means "say yes".
-            if (this.settled.has(id) || !trustHeaderMatches(header, spec))
-                continue;
-            const options = selectableOptions(frame);
-            const option = options.find((candidate) => spec.accept.test(candidate.label));
-            if (option === undefined) {
-                // Affirmative not rendered yet (partial frame). Report once, but DON'T
-                // settle — a later frame with the option can still be answered.
-                if (this.reportedPending.has(id))
-                    continue;
-                this.reportedPending.add(id);
-                return { kind: "option_pending", prompt: id };
-            }
-            // Settle OPTIMISTICALLY so a second frame in the same tick does not re-answer,
-            // but keep the settle contingent on the write: if the write is rejected we
-            // un-settle here so a later frame re-attempts it, and the returned `settled`
-            // promise rejects so the caller emits a warning instead of a false "answered".
-            this.settled.add(id);
-            const input = optionInput(option);
-            const operation = option.style === "cursor"
-                ? readFrame === undefined
-                    ? Promise.reject(new Error("Cursor trust navigation requires live screen reads."))
-                    : navigateCursorOption(spec, input, write, readFrame)
-                : writeOptionKeys(optionKeystrokes(option), write);
-            const settled = operation.catch((error) => {
-                this.settled.delete(id);
-                throw error;
-            });
-            return { kind: "answered", automation: { prompt: id, input }, settled };
+        if (this.disposed)
+            return undefined;
+        const priorIdentity = this.episode?.lastIdentity;
+        const view = trustView(frame, this.agent, this.clearance);
+        this.observe(view);
+        const episode = this.episode;
+        if (view.kind !== "candidate" || episode === undefined || view.key !== episode.candidate.key)
+            return undefined;
+        const identity = choiceIdentity(view);
+        episode.lastIdentity = identity;
+        if (episode.expired &&
+            identity !== undefined &&
+            (identity !== episode.expiredIdentity || priorIdentity === undefined)) {
+            episode.attemptedIdentity = undefined;
+            this.arm(episode);
         }
-        return undefined;
+        if (readFrame === undefined && episode.attempt)
+            return undefined;
+        if (episode.attempt && episode.attempt.identity !== identity) {
+            episode.attempt.cancel();
+            episode.attempt = undefined;
+            episode.attemptedIdentity = undefined;
+        }
+        if (identity === undefined) {
+            if (!view.valid || episode.reportedPending)
+                return undefined;
+            episode.reportedPending = true;
+            return { kind: "option_pending", prompt: view.spec.id };
+        }
+        if (episode.expired ||
+            episode.attempt ||
+            episode.legacyAnswered ||
+            episode.attemptedIdentity === identity)
+            return undefined;
+        const read = readFrame === undefined
+            ? undefined
+            : () => readTrustView(readFrame, this.agent, this.clearance);
+        const attempt = new TrustAttempt(view, identity);
+        episode.attempt = attempt;
+        episode.attemptedIdentity = identity;
+        this.attempts.add(attempt);
+        const settled = attempt.start(write, read, episode.deadlineAtMs).then((completion) => {
+            this.attempts.delete(attempt);
+            if (this.disposed || attempt.invalidated)
+                return "cancelled";
+            if (this.episode !== episode || episode.attempt !== attempt)
+                return completion;
+            episode.attempt = undefined;
+            if (attempt.lostChoice)
+                episode.attemptedIdentity = undefined;
+            if (read === undefined && completion === "answered") {
+                episode.legacyAnswered = true;
+                clearTimeout(this.timer);
+            }
+            if (read === undefined)
+                return completion;
+            const latest = read();
+            if (latest === undefined) {
+                episode.attemptedIdentity = undefined;
+                return "cancelled";
+            }
+            if (attempt.cleared)
+                this.release(true);
+            this.observe(latest);
+            this.notify();
+            if (attempt.cleared && latest.kind === "candidate" && latest.spec.id === view.spec.id)
+                return "cancelled";
+            return completion;
+        }, (error) => {
+            this.attempts.delete(attempt);
+            if (this.episode !== episode || episode.attempt !== attempt)
+                return "cancelled";
+            episode.attempt = undefined;
+            episode.attemptedIdentity = undefined;
+            throw error;
+        });
+        return {
+            kind: "attempted",
+            automation: {
+                prompt: view.spec.id,
+                input: optionInput(view.option),
+            },
+            settled,
+        };
     }
-}
-/** Writes one option's keys in order (numbered prompts and parser-only tests). */
-async function writeOptionKeys(keys, write) {
-    for (const key of keys)
-        await write(key);
-}
-/** Navigates a cursor prompt one observed frame at a time, retrying swallowed startup input. */
-async function navigateCursorOption(spec, originalInput, write, readFrame) {
-    const deadline = Date.now() + cursorNavigationTimeoutMs;
-    while (Date.now() < deadline) {
-        const before = readFrame();
-        if (!trustPromptHeaderVisible(before, spec)) {
-            throw new Error("Cursor trust prompt disappeared before confirmation.");
+    /** Session closing owns all cancellation, including writes whose promises settle late. */
+    dispose() {
+        this.disposed = true;
+        clearTimeout(this.timer);
+        for (const attempt of this.attempts)
+            attempt.cancel();
+        this.episode = undefined;
+        this.humanPrompt = undefined;
+    }
+    observe(view) {
+        if (view.kind === "clear") {
+            this.release(true);
+            return;
         }
-        const target = selectableOptions(before).find((option) => spec.accept.test(option.label));
-        if (target?.style !== "cursor") {
-            await delay(cursorRetryMs);
-            continue;
+        if (view.kind === "unknown") {
+            // Unknown/partial replacements retain human ownership until verified clearance.
+            if (this.episode) {
+                this.episode.attempt?.cancel();
+                this.episode.attempt = undefined;
+                this.episode.attemptedIdentity = undefined;
+                this.episode.lastIdentity = undefined;
+            }
+            return;
+        }
+        if (!(this.autotrust || view.spec.answerPolicy === "always")) {
+            // Retire the old episode, then synchronously transfer human ownership to this gate.
+            this.release(view.valid);
+            this.humanPrompt = view.spec.id;
+            return;
         }
-        const key = target.offset === 0 ? "\r" : target.offset < 0 ? "\u001b[A" : "\u001b[B";
-        await write(key);
-        const progress = await waitForCursorProgress(spec, target.offset, readFrame);
-        if (progress === "cleared")
+        if (this.episode?.candidate.key === view.key) {
+            this.episode.lastIdentity = choiceIdentity(view);
             return;
+        }
+        const blocked = this.blockedPrompt !== undefined;
+        this.release(view.valid);
+        // A cleared-and-reappeared class cannot inherit an old pending success.
+        for (const attempt of this.attempts) {
+            if (attempt.candidate.spec.id === view.spec.id)
+                attempt.cancel();
+        }
+        const episode = newEpisode(view, blocked);
+        this.episode = episode;
+        this.arm(episode);
     }
-    throw new Error(`Cursor trust navigation timed out (${originalInput}).`);
-}
-async function waitForCursorProgress(spec, priorOffset, readFrame) {
-    const deadline = Date.now() + cursorRetryMs;
-    while (Date.now() < deadline) {
-        await delay(20);
-        const frame = readFrame();
-        if (!trustPromptHeaderVisible(frame, spec)) {
-            if (priorOffset === 0)
-                return "cleared";
-            throw new Error("Cursor trust prompt disappeared before confirmation.");
+    arm(episode) {
+        clearTimeout(this.timer);
+        episode.expired = false;
+        episode.deadlineAtMs = Date.now() + episodeTimeoutMs;
+        this.timer = setTimeout(() => {
+            episode.expired = true;
+            episode.expiredIdentity = episode.lastIdentity;
+            episode.blocked = true;
+            episode.attempt?.cancel();
+            episode.attempt = undefined;
+            this.notify();
+        }, episodeTimeoutMs);
+        this.timer.unref();
+    }
+    release(cleared) {
+        clearTimeout(this.timer);
+        this.episode?.attempt?.cancel(cleared);
+        this.episode = undefined;
+        this.humanPrompt = undefined;
+    }
+    notify() {
+        try {
+            this.onStateChange?.();
+        }
+        catch {
+            /* An observer cannot retain owned timers or writes. */
         }
-        const target = selectableOptions(frame).find((option) => spec.accept.test(option.label));
-        if (target?.style === "cursor" && target.offset !== priorOffset)
-            return "retry";
     }
-    return "retry";
-}
-/** Whether any allowlisted trust prompt for `agent` is showing its header in `text`. */
-export function trustPromptVisible(text, agent) {
-    return trustPromptAllowlist.some((spec) => spec.agent === agent && trustPromptHeaderVisible(text, spec));
 }
 //# sourceMappingURL=responder.js.map

package/dist/core/trust/responder.js.map

@@ -1 +1 @@
-{"version":3,"file":"responder.js","sourceRoot":"","sources":["../../../src/core/trust/responder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAKtB,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAgCxC,MAAM,OAAO,oBAAoB;IAC/B,6EAA6E;IAC7E,uEAAuE;IACtD,SAAS,CAAU;IACnB,KAAK,CAA8B;IACnC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1D,yEAAyE;IACzE,6EAA6E;IAC7E,2DAA2D;IAC1C,eAAe,GAAG,IAAI,GAAG,EAAuB,CAAC;IAElE,YAAY,KAAQ,EAAE,SAAS,GAAG,KAAK;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,MAAM,CACJ,KAAa,EACb,KAA0C,EAC1C,SAAwB;QAExB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAyB,CAAC;YAC1C,qEAAqE;YACrE,0EAA0E;YAC1E,sBAAsB;YACtB,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC;gBAAE,SAAS;YAClE,2EAA2E;YAC3E,2EAA2E;YAC3E,0EAA0E;YAC1E,mBAAmB;YACnB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YACxE,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,uEAAuE;gBACvE,gEAAgE;gBAChE,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC3C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAChD,CAAC;YACD,+EAA+E;YAC/E,2EAA2E;YAC3E,6EAA6E;YAC7E,+EAA+E;YAC/E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,SAAS,GACb,MAAM,CAAC,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,SAAS,KAAK,SAAS;oBACvB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;oBAClF,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;gBACvD,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,kFAAkF;AAClF,KAAK,UAAU,eAAe,CAC5B,IAAuB,EACvB,KAA0C;IAE1C,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,oBAAoB,CACjC,IAAsB,EACtB,aAAqB,EACrB,KAA0C,EAC1C,SAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,yBAAyB,CAAC;IACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1F,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACrF,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7E,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;IACrC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,aAAa,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAsB,EACtB,WAAmB,EACnB,SAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,WAAW,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,OAAO,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAsB;IACrE,OAAO,oBAAoB,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CACvE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"responder.js","sourceRoot":"","sources":["../../../src/core/trust/responder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAIrD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAkB,SAAS,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,OAAO,oBAAoB;IACvB,OAAO,CAAsB;IAC7B,WAAW,CAA4B;IACvC,KAAK,CAA4C;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC5C,QAAQ,GAAG,KAAK,CAAC;IACR,KAAK,CAAI;IACT,SAAS,CAAU;IACnB,aAAa,CAA2B;IACzD,qFAAqF;IACpE,SAAS,CAAiB;IAC3C,YAAY,KAAQ,EAAE,SAAyB,EAAE,SAAS,GAAG,KAAK,EAAE,aAA0B;QAC5F,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IACD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;IACtE,CAAC;IACD,IAAI,aAAa;QACf,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAoC,CAAC;IACrE,CAAC;IACD;iGAC6F;IAC7F,MAAM,CACJ,KAAa,EACb,KAA0C,EAC1C,SAAoC;QAEpC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;QACjD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS,CAAC,GAAG;YAC1F,OAAO,SAAS,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC;QAChC,IACE,OAAO,CAAC,OAAO;YACf,QAAQ,KAAK,SAAS;YACtB,CAAC,QAAQ,KAAK,OAAO,CAAC,eAAe,IAAI,aAAa,KAAK,SAAS,CAAC,EACrE,CAAC;YACD,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACjE,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7D,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACxC,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,eAAe;gBAAE,OAAO,SAAS,CAAC;YAC7D,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAyB,EAAE,CAAC;QACjF,CAAC;QACD,IACE,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,cAAc;YACtB,OAAO,CAAC,iBAAiB,KAAK,QAAQ;YAEtC,OAAO,SAAS,CAAC;QACnB,MAAM,IAAI,GACR,SAAS,KAAK,SAAS;YACrB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,OAAO,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CACnE,CAAC,UAAU,EAAE,EAAE;YACb,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO,WAAoB,CAAC;YACtE,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,UAAU,CAAC;YAC/E,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU;gBAAE,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;YAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBACpD,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC9B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,UAAU,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;YACtB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;gBACtC,OAAO,WAAoB,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;gBACnF,OAAO,WAAoB,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,WAAoB,CAAC;YACzF,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC,CACF,CAAC;QACF,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE;gBACV,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAyB;gBAC3C,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,MAAO,CAAC;aACjC;YACD,OAAO;SACR,CAAC;IACJ,CAAC;IACD,0FAA0F;IAC1F,OAAO;QACL,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;IAC/B,CAAC;IACO,OAAO,CAAC,IAAe;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,gFAAgF;YAChF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;gBAC3C,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;YACxC,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC7D,oFAAoF;YACpF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,wEAAwE;QACxE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IACO,GAAG,CAAC,OAAgB;QAC1B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QACxB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;YAC/C,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACO,OAAO,CAAC,OAAgB;QAC9B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;IAC/B,CAAC;IACO,MAAM;QACZ,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC;CACF"}

package/dist/core/trust/types.d.ts

@@ -0,0 +1,36 @@
+/** Attempt descriptors distinguish trust input from confirmed clearance (PRD §5.4). */
+import type { ElwoodAgentKind } from "../activity/index.ts";
+import type { StartupWriteCompletion } from "../startup/write.ts";
+import type { TrustPromptIdFor } from "./prompts.ts";
+import { type TrustCandidate } from "./view.ts";
+import type { TrustAttempt } from "./write.ts";
+export type TrustPromptAutomation<A extends ElwoodAgentKind = ElwoodAgentKind> = {
+    readonly prompt: TrustPromptIdFor<A>;
+    readonly input: string;
+};
+/** Raw PTY result; the coordinator separately owns cancellation and clearance. */
+export type TrustWriteResult = void | Promise<void>;
+export type TrustPromptResult<A extends ElwoodAgentKind = ElwoodAgentKind> = {
+    readonly kind: "attempted";
+    readonly automation: TrustPromptAutomation<A>;
+    readonly settled: Promise<StartupWriteCompletion>;
+} | {
+    readonly kind: "option_pending";
+    readonly prompt: TrustPromptIdFor<A>;
+} | undefined;
+/** Mutable coordinator state stays owned by a single observed trust generation. */
+export type Episode = {
+    candidate: TrustCandidate;
+    deadlineAtMs: number;
+    blocked: boolean;
+    expired: boolean;
+    expiredIdentity: string | undefined;
+    lastIdentity: string | undefined;
+    attemptedIdentity: string | undefined;
+    reportedPending: boolean;
+    legacyAnswered: boolean;
+    attempt: TrustAttempt | undefined;
+};
+/** A fresh episode for a newly observed candidate; only `blocked` carries over. */
+export declare function newEpisode(candidate: TrustCandidate, blocked: boolean): Episode;
+//# sourceMappingURL=types.d.ts.map

package/dist/core/trust/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/trust/types.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IAAI;IAC/E,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AACF,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACpD,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IACrE;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACnD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,GACzE,SAAS,CAAC;AAEd,mFAAmF;AACnF,MAAM,MAAM,OAAO,GAAG;IACpB,SAAS,EAAE,cAAc,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAa/E"}

package/dist/core/trust/types.js

@@ -0,0 +1,17 @@
+import { choiceIdentity } from "./view.js";
+/** A fresh episode for a newly observed candidate; only `blocked` carries over. */
+export function newEpisode(candidate, blocked) {
+    return {
+        candidate,
+        deadlineAtMs: 0,
+        blocked,
+        expired: false,
+        expiredIdentity: undefined,
+        lastIdentity: choiceIdentity(candidate),
+        attemptedIdentity: undefined,
+        reportedPending: false,
+        legacyAnswered: false,
+        attempt: undefined,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/core/trust/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/trust/types.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAuB,MAAM,WAAW,CAAC;AAgChE,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,SAAyB,EAAE,OAAgB;IACpE,OAAO;QACL,SAAS;QACT,YAAY,EAAE,CAAC;QACf,OAAO;QACP,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,SAAS;QAC1B,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC;QACvC,iBAAiB,EAAE,SAAS;QAC5B,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC"}

package/dist/core/trust/view.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Classifies native candidates separately from safe trust writes (PRD §5.4, C-TRUST-01).
+ * The CLI-specific "this frame is the idle native composer" grammar is NOT here: each
+ * adapter owns its own and injects it as `clearance`, so a layout change lands once.
+ */
+import type { ElwoodAgentKind } from "../activity/index.ts";
+import type { SelectableOption } from "../terminal-options.ts";
+import type { TrustClearance } from "./clearance.ts";
+import { type TrustDialog } from "./dialog.ts";
+import { type TrustPromptSpec } from "./prompts.ts";
+export type TrustCandidate = {
+    readonly kind: "candidate";
+    readonly spec: TrustPromptSpec;
+    readonly key: string;
+    readonly dialog: TrustDialog;
+    readonly valid: boolean;
+    readonly option: SelectableOption | undefined;
+};
+export type TrustView = TrustCandidate | {
+    readonly kind: "clear";
+} | {
+    readonly kind: "unknown";
+};
+/** A present reader with unavailable output must never become the permissive no-reader mode. */
+export declare function readTrustView(readFrame: () => string | undefined, agent: ElwoodAgentKind, clearance: TrustClearance): TrustView | undefined;
+/** Strict visibility remains distinct from the weaker candidate input guard. */
+export declare function trustPromptVisible(text: string, agent: ElwoodAgentKind): boolean;
+export declare function trustView(frame: string, agent: ElwoodAgentKind, clearance: TrustClearance): TrustView;
+/** Option identity excludes cursor position and later-painted native decline/footer rows. */
+export declare function choiceIdentity(view: TrustCandidate): string | undefined;
+//# sourceMappingURL=view.d.ts.map

package/dist/core/trust/view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.d.ts","sourceRoot":"","sources":["../../../src/core/trust/view.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAA0C,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAA4B,KAAK,eAAe,EAAwB,MAAM,cAAc,CAAC;AAEpG,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAAC;CAC/C,CAAC;AACF,MAAM,MAAM,SAAS,GAAG,cAAc,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEnG,gGAAgG;AAChG,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,MAAM,GAAG,SAAS,EACnC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,cAAc,GACxB,SAAS,GAAG,SAAS,CAGvB;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAKhF;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,cAAc,GACxB,SAAS,CAuBX;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CASvE"}

package/dist/core/trust/view.js

@@ -0,0 +1,52 @@
+import { parseTrustCandidates, parseTrustDialog } from "./dialog.js";
+import { activeTrustDialogVisible, trustPromptAllowlist } from "./prompts.js";
+/** A present reader with unavailable output must never become the permissive no-reader mode. */
+export function readTrustView(readFrame, agent, clearance) {
+    const frame = readFrame();
+    return frame === undefined ? undefined : trustView(frame, agent, clearance);
+}
+/** Strict visibility remains distinct from the weaker candidate input guard. */
+export function trustPromptVisible(text, agent) {
+    const dialog = parseTrustDialog(text);
+    return trustPromptAllowlist.some((spec) => spec.agent === agent && activeTrustDialogVisible(dialog, spec));
+}
+export function trustView(frame, agent, clearance) {
+    const regions = parseTrustCandidates(frame);
+    for (const region of regions) {
+        for (const spec of trustPromptAllowlist) {
+            if (spec.agent !== agent)
+                continue;
+            const header = spec.headerPattern.exec(region.dialog.header);
+            if (header === null)
+                continue;
+            const valid = region.validTail && activeTrustDialogVisible(region.dialog, spec);
+            return {
+                kind: "candidate",
+                spec,
+                // Trimmed: the separator after a header varies as its body paints, the gate does not.
+                key: `${spec.id}:${header[0].trim()}`,
+                dialog: region.dialog,
+                valid,
+                option: valid
+                    ? region.dialog.options.find((option) => spec.accept.test(option.label))
+                    : undefined,
+            };
+        }
+    }
+    if (regions.length > 0)
+        return { kind: "unknown" };
+    return { kind: clearance(frame) ? "clear" : "unknown" };
+}
+/** Option identity excludes cursor position and later-painted native decline/footer rows. */
+export function choiceIdentity(view) {
+    const option = view.option;
+    if (option === undefined)
+        return undefined;
+    return JSON.stringify([
+        view.dialog.header,
+        option.style,
+        option.label,
+        option.style === "numbered" ? option.number : "",
+    ]);
+}
+//# sourceMappingURL=view.js.map

package/dist/core/trust/view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.js","sourceRoot":"","sources":["../../../src/core/trust/view.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAoB,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAwB,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAYpG,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAC3B,SAAmC,EACnC,KAAsB,EACtB,SAAyB;IAEzB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAC9E,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAsB;IACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,oBAAoB,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,KAAa,EACb,KAAsB,EACtB,SAAyB;IAEzB,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,SAAS;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAS;YAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,IAAI,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,IAAI;gBACJ,sFAAsF;gBACtF,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;gBACrC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK;gBACL,MAAM,EAAE,KAAK;oBACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,CAAC,CAAC,SAAS;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,IAAoB;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,MAAM;QAClB,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,CAAC;AACL,CAAC"}

package/dist/core/trust/write.d.ts

@@ -0,0 +1,31 @@
+/** One abortable, generation-owned trust attempt for both layouts (PRD §5.4/C-TRUST-01). */
+import type { StartupWriteCompletion } from "../startup/write.ts";
+import type { TrustWriteResult } from "./types.ts";
+import { type TrustCandidate, type TrustView } from "./view.ts";
+export declare class TrustAttempt {
+    readonly candidate: TrustCandidate;
+    readonly identity: string;
+    private readonly controller;
+    private confirmationWriteFulfilled;
+    private clearance;
+    invalidated: boolean;
+    /** The polled choice vanished mid-attempt; its return deserves a fresh attempt. */
+    lostChoice: boolean;
+    constructor(candidate: TrustCandidate, identity: string);
+    get cleared(): boolean;
+    start(write: (input: string) => TrustWriteResult, read: (() => TrustView | undefined) | undefined, deadlineAtMs: number): Promise<StartupWriteCompletion>;
+    /**
+     * With a live reader, only an observed clear/successor after a fulfilled confirmation
+     * permits success. Without one (`atomic`), a fulfilled numbered write is the only evidence.
+     */
+    cancel(cleared?: boolean): void;
+    private completion;
+    private atomic;
+    private run;
+    private send;
+    private readChoice;
+    /** Race disposal against an in-flight write while retaining a rejection handler for it. */
+    private own;
+    private pause;
+}
+//# sourceMappingURL=write.d.ts.map

package/dist/core/trust/write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../src/core/trust/write.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAkB,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAKhF,qBAAa,YAAY;IACvB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,0BAA0B,CAAS;IAC3C,OAAO,CAAC,SAAS,CAAS;IAC1B,WAAW,UAAS;IACpB,mFAAmF;IACnF,UAAU,UAAS;gBAEP,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM;IAKvD,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,KAAK,CACH,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,EAC1C,IAAI,EAAE,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS,EAC/C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,sBAAsB,CAAC;IAQlC;;;OAGG;IACH,MAAM,CAAC,OAAO,UAAQ,GAAG,IAAI;IAM7B,OAAO,CAAC,UAAU;YAMJ,MAAM;YASN,GAAG;YAgCH,IAAI;IAYlB,OAAO,CAAC,UAAU;IAclB,2FAA2F;IAC3F,OAAO,CAAC,GAAG;IAmBX,OAAO,CAAC,KAAK;CAgBd"}