@with-logic/elwood 0.1.3 → 0.2.0

package/dist/runtime/session/not-running.js

@@ -0,0 +1,28 @@
+import { elwoodError, toError } from "../../core/errors.js";
+import { terminalStatuses } from "../../core/status-categories.js";
+export function notRunningError(agent) {
+    const title = agent === "claude" ? "Claude" : "Codex";
+    return elwoodError("session_not_running", `${title} session is not running.`);
+}
+/**
+ * Once shutdown begins the PTY is, or is about to be, signalled, so held submissions
+ * reject now with `session_not_running` rather than waiting on a shutdown that may
+ * fail and need a retry (§9 keeps the shutdown itself retryable).
+ */
+export function closingController(rejectHeldInput) {
+    const closing = new AbortController();
+    closing.signal.addEventListener("abort", rejectHeldInput, { once: true });
+    return closing;
+}
+/** Normalize operation failures and reject operations after a terminal status. */
+export function runSessionOperation(agent, status, work, allowTerminal) {
+    if (!allowTerminal && terminalStatuses.has(status))
+        return Promise.reject(notRunningError(agent));
+    try {
+        return Promise.resolve(work());
+    }
+    catch (error) {
+        return Promise.reject(toError(error));
+    }
+}
+//# sourceMappingURL=not-running.js.map

package/dist/runtime/session/not-running.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"not-running.js","sourceRoot":"","sources":["../../../src/runtime/session/not-running.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,KAAK,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IACtD,OAAO,WAAW,CAAC,qBAAqB,EAAE,GAAG,KAAK,0BAA0B,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,eAA2B;IAC3D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,MAA2B,EAC3B,IAA0B,EAC1B,aAAsB;IAEtB,IAAI,CAAC,aAAa,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/runtime/session/paste-recovery.d.ts

@@ -0,0 +1,15 @@
+/** Native submission activity revokes background recovery (PRD §5.3/C-API-31). */
+import type { PasteGuard, RecoveryComposer } from "../../core/input/index.ts";
+import type { ElwoodTerminal } from "../../terminal/headless.ts";
+import type { SessionStatusEmitter } from "./status-wiring.ts";
+export declare class PasteRecoveryRevocation {
+    private generation;
+    constructor(events: SessionStatusEmitter, closing: AbortSignal);
+    /** Share native-frame and ownership captures with every queued paste. */
+    createGuard(terminal: ElwoodTerminal, composer: () => RecoveryComposer, blocked: () => boolean, beforeEnter: () => void): PasteGuard;
+    /** Capture before paste so a hook during the physical Enter cannot be missed. */
+    captureRevocationGuard(): {
+        revoked: () => boolean;
+    };
+}
+//# sourceMappingURL=paste-recovery.d.ts.map

package/dist/runtime/session/paste-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paste-recovery.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/paste-recovery.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,qBAAa,uBAAuB;IAClC,OAAO,CAAC,UAAU,CAAK;gBAEX,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,WAAW;IAQ9D,yEAAyE;IACzE,WAAW,CACT,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,MAAM,gBAAgB,EAChC,OAAO,EAAE,MAAM,OAAO,EACtB,WAAW,EAAE,MAAM,IAAI,GACtB,UAAU;IAYb,iFAAiF;IACjF,sBAAsB;;;CAIvB"}

package/dist/runtime/session/paste-recovery.js

@@ -0,0 +1,30 @@
+import { captureRenderProgress, subscribeRender } from "../../terminal/cursor.js";
+export class PasteRecoveryRevocation {
+    generation = 0;
+    constructor(events, closing) {
+        const unsubscribe = events.on("activity", (event) => {
+            // Conservative revocation, not proof of prompt/turn correlation.
+            if (event.kind === "user_message")
+                this.generation += 1;
+        });
+        closing.addEventListener("abort", unsubscribe, { once: true });
+    }
+    /** Share native-frame and ownership captures with every queued paste. */
+    createGuard(terminal, composer, blocked, beforeEnter) {
+        return {
+            beforeEnter,
+            subscribeRender: (listener) => subscribeRender(terminal, listener),
+            captureRecovery: () => this.captureRevocationGuard(),
+            captureRenderProgress: () => captureRenderProgress(terminal),
+            prepareStaged: (payload) => composer().prepareStaged(payload),
+            emptyFrame: () => composer().emptyFrame(),
+            blocked,
+        };
+    }
+    /** Capture before paste so a hook during the physical Enter cannot be missed. */
+    captureRevocationGuard() {
+        const generation = this.generation;
+        return { revoked: () => generation !== this.generation };
+    }
+}
+//# sourceMappingURL=paste-recovery.js.map

package/dist/runtime/session/paste-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paste-recovery.js","sourceRoot":"","sources":["../../../src/runtime/session/paste-recovery.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAIlF,MAAM,OAAO,uBAAuB;IAC1B,UAAU,GAAG,CAAC,CAAC;IAEvB,YAAY,MAA4B,EAAE,OAAoB;QAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YAClD,iEAAiE;YACjE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,yEAAyE;IACzE,WAAW,CACT,QAAwB,EACxB,QAAgC,EAChC,OAAsB,EACtB,WAAuB;QAEvB,OAAO;YACL,WAAW;YACX,eAAe,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAClE,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE;YACpD,qBAAqB,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,QAAQ,CAAC;YAC5D,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC;YAC7D,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE;YACzC,OAAO;SACR,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,sBAAsB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3D,CAAC;CACF"}

package/dist/runtime/session/picker-cleanup.d.ts

@@ -0,0 +1,56 @@
+import { type InputTerminal } from "../../core/input/abort.ts";
+import type { ModelPickerSpec } from "../../core/models/picker.ts";
+import type { ModelDialogAuthority, ModelDialogStage } from "../../core/models/rows.ts";
+import type { ScreenTerminal } from "../../core/models/tui-screen.ts";
+/** What the operation wrote and saw, so cleanup knows what it may repeat and what can still paint. */
+export type Progress = {
+    /** The stage the operation itself last sent Escape to, which cleanup must not repeat. */
+    escapeSentTo: ModelDialogStage | undefined;
+    commandSubmitted: boolean;
+    dialogSeen: boolean;
+    /** A non-Escape key can accept a stage whose follow-up dialog paints late. */
+    keyWritten: boolean;
+};
+/**
+ * Consecutive clear frames that prove a dialog is gone rather than mid-repaint.
+ *
+ * Matches `quietFramesToSettle` in `core/turn-state.ts`, deliberately. That value IS
+ * measured: Codex's resume replay repaints in bursts with brief 1-frame quiet gaps, and 5
+ * clears them with margin (docs/cli-behavior.md, C-TURN-03). Picker repaints are the same
+ * class of problem — a dialog redrawing between stages is briefly unrecognizable — and we
+ * have NOT measured their gap length, so there is no evidence for a smaller number.
+ *
+ * The failure directions are not symmetric, which settles it. Too high only delays
+ * releasing the input hold. Too low releases queued input into a repainting picker, where
+ * Enter applies the highlighted model — the exact bug class this file exists to prevent.
+ * Absent a measurement, take the conservative measured precedent.
+ *
+ * This governs the SURVIVOR hold in `picker.ts`, which is unbounded and only observes, so
+ * a longer streak costs nothing but a little latency. The cleanup loop below uses a
+ * shorter one on purpose: see `cleanupClearFrames`.
+ */
+export declare const clearFrames = 5;
+export declare const escapeKey = "\u001B";
+/**
+ * Cleanup only ever runs for a dialog the transaction itself opened, so every recognition
+ * call here carries its authority. Named rather than inlined so a future call site added
+ * OUTSIDE a transaction has to reach for it deliberately.
+ */
+export declare const ours: ModelDialogAuthority;
+/**
+ * Returns whether the queue is RELEASED: true when the dialog is gone (or never appeared),
+ * false when one survived cleanup and must keep holding queued input.
+ *
+ * One bounded second covers a late dialog appearing, every Escape, and the clearing.
+ * A submitted command whose picker never rendered can still open it, and an accepted
+ * stage can still paint its follow-up, so cleanup then waits out the bound for one.
+ * Cancelling a follow-up stage returns the CLI to the picker (real Claude 2.1.274 and
+ * Codex 0.154.0), so each stage gets one Escape and none is repeated while that stage
+ * stays up: a second Escape on a slow repaint would land on the composer. A `painting`
+ * shell is never written to. Termination aborts every read and write. A dialog still
+ * visible at the bound keeps queued input held.
+ */
+export declare function cleanUpDialog(source: ScreenTerminal & InputTerminal, spec: ModelPickerSpec, progress: Progress, closed: AbortSignal): Promise<boolean>;
+/** Reads and writes throw once `signal` aborts, so nothing reaches a terminated PTY. */
+export declare function abortable(terminal: ScreenTerminal, signal: AbortSignal): ScreenTerminal;
+//# sourceMappingURL=picker-cleanup.d.ts.map

package/dist/runtime/session/picker-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker-cleanup.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/picker-cleanup.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,aAAa,EAAe,MAAM,2BAA2B,CAAC;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEtE,sGAAsG;AACtG,MAAM,MAAM,QAAQ,GAAG;IACrB,yFAAyF;IACzF,YAAY,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC3C,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,8EAA8E;IAC9E,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAGF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,WAAW,IAAI,CAAC;AAa7B,eAAO,MAAM,SAAS,WAAW,CAAC;AAClC;;;;GAIG;AACH,eAAO,MAAM,IAAI,EAAE,oBAAuC,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,cAAc,GAAG,aAAa,EACtC,IAAI,EAAE,eAAe,EACrB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,OAAO,CAAC,CAiDlB;AACD,wFAAwF;AACxF,wBAAgB,SAAS,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,GAAG,cAAc,CAWvF"}

package/dist/runtime/session/picker-cleanup.js

@@ -0,0 +1,126 @@
+/**
+ * Failure cleanup for a model-picker transaction: cancel the dialog the operation left
+ * open, or report that one survived so queued input stays held (PRD §5.3, C-API-55).
+ */
+import { delay } from "../../core/delay.js";
+import { writeUnsafe } from "../../core/input/abort.js";
+import { sendPickerInput } from "../../core/models/input.js";
+const cleanupMs = 1_000;
+/**
+ * Consecutive clear frames that prove a dialog is gone rather than mid-repaint.
+ *
+ * Matches `quietFramesToSettle` in `core/turn-state.ts`, deliberately. That value IS
+ * measured: Codex's resume replay repaints in bursts with brief 1-frame quiet gaps, and 5
+ * clears them with margin (docs/cli-behavior.md, C-TURN-03). Picker repaints are the same
+ * class of problem — a dialog redrawing between stages is briefly unrecognizable — and we
+ * have NOT measured their gap length, so there is no evidence for a smaller number.
+ *
+ * The failure directions are not symmetric, which settles it. Too high only delays
+ * releasing the input hold. Too low releases queued input into a repainting picker, where
+ * Enter applies the highlighted model — the exact bug class this file exists to prevent.
+ * Absent a measurement, take the conservative measured precedent.
+ *
+ * This governs the SURVIVOR hold in `picker.ts`, which is unbounded and only observes, so
+ * a longer streak costs nothing but a little latency. The cleanup loop below uses a
+ * shorter one on purpose: see `cleanupClearFrames`.
+ */
+export const clearFrames = 5;
+/**
+ * Cleanup's own streak, deliberately shorter than `clearFrames`.
+ *
+ * Cleanup is BOUNDED at one second and must also send its Escapes inside that budget, so
+ * demanding five clear frames (500 ms at a 100 ms poll) would spend half the budget
+ * proving a clearance it has already driven. It is also the safer of the two positions:
+ * a cleanup that returns early only hands off to the survivor hold, which then applies
+ * the full `clearFrames` streak before releasing any input. Nothing is released early.
+ */
+const cleanupClearFrames = 2;
+const pollMs = 100;
+export const escapeKey = "\u001b";
+/**
+ * Cleanup only ever runs for a dialog the transaction itself opened, so every recognition
+ * call here carries its authority. Named rather than inlined so a future call site added
+ * OUTSIDE a transaction has to reach for it deliberately.
+ */
+export const ours = { opened: true };
+/**
+ * Returns whether the queue is RELEASED: true when the dialog is gone (or never appeared),
+ * false when one survived cleanup and must keep holding queued input.
+ *
+ * One bounded second covers a late dialog appearing, every Escape, and the clearing.
+ * A submitted command whose picker never rendered can still open it, and an accepted
+ * stage can still paint its follow-up, so cleanup then waits out the bound for one.
+ * Cancelling a follow-up stage returns the CLI to the picker (real Claude 2.1.274 and
+ * Codex 0.154.0), so each stage gets one Escape and none is repeated while that stage
+ * stays up: a second Escape on a slow repaint would land on the composer. A `painting`
+ * shell is never written to. Termination aborts every read and write. A dialog still
+ * visible at the bound keeps queued input held.
+ */
+export async function cleanUpDialog(source, spec, progress, closed) {
+    const terminal = abortable(source, closed);
+    const isActive = (text) => spec.activeDialog(text, ours) !== undefined;
+    let escaped = progress.escapeSentTo;
+    let clearStreak = 0;
+    /** Whether a dialog of ours was ever on screen here; only then can a clear frame lie. */
+    let sawDialog = progress.escapeSentTo !== undefined;
+    let lateDialogPossible = progress.keyWritten || (progress.commandSubmitted && !progress.dialogSeen);
+    try {
+        for (const bound = Date.now() + cleanupMs; Date.now() < bound; await delay(pollMs)) {
+            const stage = spec.activeDialog(terminal.snapshot().text, ours);
+            if (stage === undefined) {
+                // ONE clear frame is not proof a dialog we were CANCELLING is gone: a picker
+                // repainting between stages is momentarily unrecognizable, and releasing the queue
+                // there would let queued input land in the frame that follows. So a streak is
+                // required only once we have actually seen a dialog here; a cleanup that never
+                // found one has nothing to repaint and returns at once. (Same lesson as resume
+                // settling in docs/cli-behavior.md.)
+                clearStreak += 1;
+                const settled = !sawDialog || clearStreak >= cleanupClearFrames;
+                // The dialog is gone and nothing can still paint: the queue is released.
+                if (!lateDialogPossible && settled)
+                    return true;
+                // Whatever paints after a clear frame is a new dialog, owed its own Escape.
+                escaped = undefined;
+                continue;
+            }
+            clearStreak = 0;
+            sawDialog = true;
+            lateDialogPossible = false;
+            // A `painting` shell may turn out to be a hook confirmation: wait, never write.
+            if (stage === "painting" || stage === escaped)
+                continue;
+            escaped = stage;
+            // Decide the WRITE on everything received, not the last rendered frame: a permission
+            // or hook dialog can already be in the PTY buffer while the observed screen still
+            // shows the picker, and an Escape chosen from that stale frame would dismiss it.
+            // `writeUnsafe` fails closed, so an unvouchable screen skips this Escape and the
+            // next poll re-decides rather than writing blind (C-API-56).
+            if (await writeUnsafe(source, undefined, closed))
+                continue;
+            await sendPickerInput({ terminal }, escapeKey, isActive, true);
+        }
+    }
+    catch {
+        // A terminated session has no input left to hold; a failed write leaves the dialog.
+        if (closed.aborted)
+            return true;
+    }
+    // The bound elapsed with a dialog still on screen (or one that could still paint and
+    // never did). A dialog we could not cancel SURVIVES, and queued input stays held on it;
+    // `lateDialogPossible` means none ever appeared, so there is nothing to hold.
+    return lateDialogPossible;
+}
+/** Reads and writes throw once `signal` aborts, so nothing reaches a terminated PTY. */
+export function abortable(terminal, signal) {
+    return {
+        snapshot: () => {
+            signal.throwIfAborted();
+            return terminal.snapshot();
+        },
+        sendInput: (input) => {
+            signal.throwIfAborted();
+            return terminal.sendInput(input);
+        },
+    };
+}
+//# sourceMappingURL=picker-cleanup.js.map

package/dist/runtime/session/picker-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker-cleanup.js","sourceRoot":"","sources":["../../../src/runtime/session/picker-cleanup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAsB,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAe7D,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAE7B;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,MAAM,GAAG,GAAG,CAAC;AACnB,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC;AAClC;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAyB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAsC,EACtC,IAAqB,EACrB,QAAkB,EAClB,MAAmB;IAEnB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,SAAS,CAAC;IAC/E,IAAI,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC;IACpC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,yFAAyF;IACzF,IAAI,SAAS,GAAG,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC;IACpD,IAAI,kBAAkB,GACpB,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACnF,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,6EAA6E;gBAC7E,mFAAmF;gBACnF,8EAA8E;gBAC9E,+EAA+E;gBAC/E,+EAA+E;gBAC/E,qCAAqC;gBACrC,WAAW,IAAI,CAAC,CAAC;gBACjB,MAAM,OAAO,GAAG,CAAC,SAAS,IAAI,WAAW,IAAI,kBAAkB,CAAC;gBAChE,yEAAyE;gBACzE,IAAI,CAAC,kBAAkB,IAAI,OAAO;oBAAE,OAAO,IAAI,CAAC;gBAChD,4EAA4E;gBAC5E,OAAO,GAAG,SAAS,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,WAAW,GAAG,CAAC,CAAC;YAChB,SAAS,GAAG,IAAI,CAAC;YACjB,kBAAkB,GAAG,KAAK,CAAC;YAC3B,gFAAgF;YAChF,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,OAAO;gBAAE,SAAS;YACxD,OAAO,GAAG,KAAK,CAAC;YAChB,qFAAqF;YACrF,kFAAkF;YAClF,iFAAiF;YACjF,iFAAiF;YACjF,6DAA6D;YAC7D,IAAI,MAAM,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC;gBAAE,SAAS;YAC3D,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oFAAoF;QACpF,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;IAClC,CAAC;IACD,qFAAqF;IACrF,wFAAwF;IACxF,8EAA8E;IAC9E,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AACD,wFAAwF;AACxF,MAAM,UAAU,SAAS,CAAC,QAAwB,EAAE,MAAmB;IACrE,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE;YACb,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC7B,CAAC;QACD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACnB,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/session/picker-input.d.ts

@@ -0,0 +1,17 @@
+/** Raw terminal intervention revokes a picker operation's private authority (C-API-55). */
+import type { EmptyComposerObserver } from "../../core/input/clear-ack.ts";
+import { ComposerCleanup } from "../../core/input/composer-cleanup.ts";
+import type { ElwoodTerminal } from "../../terminal/headless.ts";
+type AutomatedWork = () => Promise<void>;
+/** Preserve the same ownership scope for startup writers that retain their own input policy. */
+export declare function withAutomatedInput(terminal: ElwoodTerminal, work: AutomatedWork): Promise<void>;
+export declare class PickerInputOwnership {
+    readonly caller: ElwoodTerminal;
+    readonly automated: ElwoodTerminal;
+    private current;
+    constructor(inner: ElwoodTerminal);
+    composerCleanup(blocked: () => boolean, closing: AbortSignal, observeEmpty: EmptyComposerObserver): ComposerCleanup["run"];
+    signal(): AbortSignal;
+}
+export {};
+//# sourceMappingURL=picker-input.d.ts.map

package/dist/runtime/session/picker-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker-input.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/picker-input.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,KAAK,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;AAMzC,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/F;AAED,qBAAa,oBAAoB;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,OAAO,CAAC,OAAO,CAAyB;gBAE5B,KAAK,EAAE,cAAc;IA+BjC,eAAe,CACb,OAAO,EAAE,MAAM,OAAO,EACtB,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,qBAAqB,GAClC,eAAe,CAAC,KAAK,CAAC;IAWzB,MAAM,IAAI,WAAW;CAGtB"}

package/dist/runtime/session/picker-input.js

@@ -0,0 +1,74 @@
+import { ComposerCleanup } from "../../core/input/composer-cleanup.js";
+import { pickerIntervention } from "../../core/models/intervention.js";
+const automationScopes = new WeakMap();
+/** Preserve the same ownership scope for startup writers that retain their own input policy. */
+export function withAutomatedInput(terminal, work) {
+    return automationScopes.get(terminal.xterm)?.(work) ?? work();
+}
+export class PickerInputOwnership {
+    caller;
+    automated;
+    current = new AbortController();
+    constructor(inner) {
+        let automating = false;
+        const revoke = () => {
+            this.current.abort(pickerIntervention());
+            this.current = new AbortController();
+        };
+        // onData also carries parser-generated protocol replies; only input invocations
+        // represent caller keys. Native startup queries must not revoke draft ownership.
+        const input = inner.xterm.input.bind(inner.xterm);
+        inner.xterm.input = (data, wasUserInput) => {
+            if (!automating)
+                revoke();
+            input(data, wasUserInput);
+        };
+        const automate = (work) => {
+            const prior = automating;
+            automating = true;
+            try {
+                return work();
+            }
+            finally {
+                automating = prior;
+            }
+        };
+        automationScopes.set(inner.xterm, automate);
+        const send = (input) => automate(() => inner.sendInput(input));
+        this.automated = view(inner, send);
+        this.caller = view(inner, (input) => {
+            revoke();
+            return send(input);
+        });
+    }
+    composerCleanup(blocked, closing, observeEmpty) {
+        const cleanup = new ComposerCleanup(this.automated, blocked, closing, () => this.signal(), observeEmpty);
+        return (work, signal) => cleanup.run(work, signal);
+    }
+    signal() {
+        return this.current.signal;
+    }
+}
+function view(inner, sendInput) {
+    return {
+        get xterm() {
+            return inner.xterm;
+        },
+        get size() {
+            return inner.size;
+        },
+        get title() {
+            return inner.title;
+        },
+        get renderFailed() {
+            return inner.renderFailed;
+        },
+        writeOutput: (...args) => inner.writeOutput(...args),
+        sendInput,
+        resize: (size) => inner.resize(size),
+        snapshot: () => inner.snapshot(),
+        settled: () => inner.settled(),
+        dispose: () => inner.dispose(),
+    };
+}
+//# sourceMappingURL=picker-input.js.map

package/dist/runtime/session/picker-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker-input.js","sourceRoot":"","sources":["../../../src/runtime/session/picker-input.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAIvE,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAGjC,CAAC;AAEJ,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAAC,QAAwB,EAAE,IAAmB;IAC9E,OAAO,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,OAAO,oBAAoB;IACtB,MAAM,CAAiB;IACvB,SAAS,CAAiB;IAC3B,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAExC,YAAY,KAAqB;QAC/B,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,CAAC,CAAC;QACF,gFAAgF;QAChF,iFAAiF;QACjF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE;YACzC,IAAI,CAAC,UAAU;gBAAE,MAAM,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,IAAmB,EAAE,EAAE;YACvC,MAAM,KAAK,GAAG,UAAU,CAAC;YACzB,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;oBAAS,CAAC;gBACT,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YAClC,MAAM,EAAE,CAAC;YACT,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CACb,OAAsB,EACtB,OAAoB,EACpB,YAAmC;QAEnC,MAAM,OAAO,GAAG,IAAI,eAAe,CACjC,IAAI,CAAC,SAAS,EACd,OAAO,EACP,OAAO,EACP,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EACnB,YAAY,CACb,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,IAAI,CAAC,KAAqB,EAAE,SAAsC;IACzE,OAAO;QACL,IAAI,KAAK;YACP,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,IAAI;YACN,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,KAAK;YACP,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,YAAY;YACd,OAAO,KAAK,CAAC,YAAY,CAAC;QAC5B,CAAC;QACD,WAAW,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;QACpD,SAAS;QACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QACpC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE;QAC9B,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE;KAC/B,CAAC;AACJ,CAAC"}

package/dist/runtime/session/picker.d.ts

@@ -0,0 +1,56 @@
+/** Exclusive model-picker queue ownership and failure cleanup (PRD §5.3, C-API-55). */
+import type { ControlQueue } from "../../core/control-queue/index.ts";
+import type { InputTerminal } from "../../core/input/abort.ts";
+import type { ModelPickerIo, ModelPickerSpec } from "../../core/models/picker.ts";
+import type { ScreenTerminal } from "../../core/models/tui-screen.ts";
+type PickerDeps = {
+    readonly controlQueue: ControlQueue;
+    readonly observeRendered?: (listener: () => void) => void;
+    readonly inputSignal?: () => AbortSignal;
+    readonly submitDirect: (command: string, signal: AbortSignal) => Promise<void>;
+    /** Also carries the optional observation barrier (`settled`/`renderFailed`) when real. */
+    readonly terminal: ScreenTerminal & InputTerminal;
+    readonly blocked: () => boolean;
+    /** The adapter's picker spec, for recognizing a dialog nobody here opened. */
+    readonly picker: () => ModelPickerSpec;
+};
+export declare class PickerTransactions {
+    private readonly deps;
+    private readonly foreign;
+    private active;
+    private survivor;
+    /** Consecutive frames without the survivor; it is forgotten only after a stable run. */
+    private clearStreak;
+    constructor(deps: PickerDeps);
+    /**
+     * Whether a model dialog is on screen that queued input must not be written into.
+     *
+     * TWO cases, and the difference matters. A SURVIVOR is a dialog our own cleanup could not
+     * cancel: it is ours, and it is remembered until it clears. A dialog nobody here opened —
+     * a human who typed `/model` themselves — is NOT ours and never becomes a survivor, but
+     * Enter on it still applies its highlighted row, and Escape still discards the human's
+     * state. So writes are held on any visible model dialog, whoever opened it; ownership
+     * decides what Elwood may DRIVE, not what it may safely type over (C-API-55).
+     */
+    blocksInput(): boolean;
+    /**
+     * Whether a model dialog nobody here opened is on screen — a human who typed `/model`
+     * themselves. It is NOT ours, so it never becomes a `survivor` and must not suppress
+     * readiness (that would deadlock our own picker, whose dialog is visible by design).
+     * But Enter on it still applies its highlighted row and Escape still discards the
+     * human's state, so a WRITE that is not part of a picker transaction — `/login`
+     * recovery, a queued paste — must be withheld while it is up (C-API-55).
+     */
+    foreignDialogVisible(): boolean;
+    /**
+     * Runs `work` inside one exclusive queue slot, so no other command or message is
+     * dispatched until the whole open/navigate/apply-or-cancel flow settles. The queue
+     * wait and the flow share `timeoutMs`; the deadline or session close aborts `io`.
+     * A failed flow's dialog is cancelled before the slot is released.
+     */
+    run<T>(kind: "list_models" | "set_model", spec: ModelPickerSpec, timeoutMs: number, work: (io: ModelPickerIo, signal: AbortSignal) => Promise<T>): Promise<T>;
+    private io;
+    private cleanUp;
+}
+export {};
+//# sourceMappingURL=picker.d.ts.map

package/dist/runtime/session/picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/picker.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAWtE,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IAC1D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,WAAW,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,0FAA0F;IAC1F,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,aAAa,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,eAAe,CAAC;CACxC,CAAC;AAEF,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IACnD,OAAO,CAAC,MAAM,CAA0D;IACxE,OAAO,CAAC,QAAQ,CAA8B;IAC9C,wFAAwF;IACxF,OAAO,CAAC,WAAW,CAAK;gBACZ,IAAI,EAAE,UAAU;IAK5B;;;;;;;;;OASG;IACH,WAAW,IAAI,OAAO;IAetB;;;;;;;OAOG;IACH,oBAAoB,IAAI,OAAO;IAM/B;;;;;OAKG;IACG,GAAG,CAAC,CAAC,EACT,IAAI,EAAE,aAAa,GAAG,WAAW,EACjC,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3D,OAAO,CAAC,CAAC,CAAC;IAwDb,OAAO,CAAC,EAAE;YA6BI,OAAO;CAQtB"}

package/dist/runtime/session/picker.js

@@ -0,0 +1,143 @@
+import { elwoodError } from "../../core/errors.js";
+import { ForeignPickerHold } from "./foreign-picker.js";
+import { abortable, cleanUpDialog, clearFrames, escapeKey, ours, } from "./picker-cleanup.js";
+export class PickerTransactions {
+    deps;
+    foreign = new ForeignPickerHold();
+    active;
+    survivor;
+    /** Consecutive frames without the survivor; it is forgotten only after a stable run. */
+    clearStreak = 0;
+    constructor(deps) {
+        this.deps = deps;
+        deps.observeRendered?.(() => this.foreignDialogVisible());
+    }
+    /**
+     * Whether a model dialog is on screen that queued input must not be written into.
+     *
+     * TWO cases, and the difference matters. A SURVIVOR is a dialog our own cleanup could not
+     * cancel: it is ours, and it is remembered until it clears. A dialog nobody here opened —
+     * a human who typed `/model` themselves — is NOT ours and never becomes a survivor, but
+     * Enter on it still applies its highlighted row, and Escape still discards the human's
+     * state. So writes are held on any visible model dialog, whoever opened it; ownership
+     * decides what Elwood may DRIVE, not what it may safely type over (C-API-55).
+     */
+    blocksInput() {
+        if (this.survivor === undefined)
+            return false;
+        if (this.survivor.activeDialog(this.deps.terminal.snapshot().text, ours) !== undefined) {
+            this.clearStreak = 0;
+            return true;
+        }
+        // ONE unrecognized frame is not proof the survivor is gone: a picker repainting between
+        // stages is briefly unrecognizable, and forgetting it there would release queued input
+        // into the frame that follows. Cleanup requires the same streak for the same reason.
+        this.clearStreak += 1;
+        if (this.clearStreak < clearFrames)
+            return true;
+        this.survivor = undefined;
+        return false;
+    }
+    /**
+     * Whether a model dialog nobody here opened is on screen — a human who typed `/model`
+     * themselves. It is NOT ours, so it never becomes a `survivor` and must not suppress
+     * readiness (that would deadlock our own picker, whose dialog is visible by design).
+     * But Enter on it still applies its highlighted row and Escape still discards the
+     * human's state, so a WRITE that is not part of a picker transaction — `/login`
+     * recovery, a queued paste — must be withheld while it is up (C-API-55).
+     */
+    foreignDialogVisible() {
+        if (this.survivor !== undefined)
+            return false;
+        if (this.active?.progress.commandSubmitted && !this.active.signal.aborted)
+            return false;
+        return this.foreign.observe(this.deps.terminal.snapshot().text, this.deps.picker());
+    }
+    /**
+     * Runs `work` inside one exclusive queue slot, so no other command or message is
+     * dispatched until the whole open/navigate/apply-or-cancel flow settles. The queue
+     * wait and the flow share `timeoutMs`; the deadline or session close aborts `io`.
+     * A failed flow's dialog is cancelled before the slot is released.
+     */
+    async run(kind, spec, timeoutMs, work) {
+        const deadline = new AbortController();
+        const timer = setTimeout(() => deadline.abort(elwoodError("model_automation_failed", "Timed out waiting for model picker operation.")), timeoutMs);
+        let result;
+        try {
+            await this.deps.controlQueue.runExclusive(kind, async (closed) => {
+                // Elwood cannot tell its own dialog from picker text that precedes its command: a
+                // human's dialog, or a transcript quote the unanchored `isOpen` would drive.
+                const human = this.deps.inputSignal?.();
+                const before = this.deps.terminal.snapshot().text;
+                // We have NOT written `/model` yet, so nothing here is ours. We still ask the
+                // grammar under a hypothetical authority: anything it would call a dialog is
+                // someone else's, which is precisely why the operation must refuse to start.
+                if (spec.isOpen(before) || spec.activeDialog(before, ours) !== undefined)
+                    throw elwoodError("model_automation_failed", "Model picker text was already visible before the operation began.");
+                const progress = {
+                    escapeSentTo: undefined,
+                    commandSubmitted: false,
+                    dialogSeen: false,
+                    keyWritten: false,
+                };
+                const ownership = AbortSignal.any(human === undefined ? [closed] : [closed, human]);
+                const signal = AbortSignal.any([ownership, deadline.signal]);
+                this.active = { signal: ownership, progress };
+                const revoked = () => this.foreign.observe(this.deps.terminal.snapshot().text, spec);
+                human?.addEventListener("abort", revoked, { once: true });
+                try {
+                    result = await work(this.io(signal, spec, progress), signal);
+                }
+                catch (error) {
+                    if (!ownership.aborted && progress.commandSubmitted)
+                        await this.cleanUp(spec, progress, ownership);
+                    throw error;
+                }
+                finally {
+                    human?.removeEventListener("abort", revoked);
+                    this.active = undefined;
+                }
+            }, { signal: deadline.signal, error: () => deadline.signal.reason });
+            return result;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    io(signal, spec, progress) {
+        const live = abortable(this.deps.terminal, signal);
+        const terminal = {
+            snapshot: () => {
+                const snapshot = live.snapshot();
+                progress.dialogSeen ||= spec.activeDialog(snapshot.text, ours) !== undefined;
+                return snapshot;
+            },
+            sendInput: (input) => {
+                const stage = spec.activeDialog(live.snapshot().text, ours);
+                const sent = live.sendInput(input);
+                if (input === escapeKey)
+                    progress.escapeSentTo = stage;
+                else
+                    progress.keyWritten = true;
+                return sent;
+            },
+        };
+        return {
+            terminal,
+            signal,
+            blocked: this.deps.blocked,
+            // The slot already owns the queue, so the command is written directly.
+            submit: async (command, pending) => {
+                signal.throwIfAborted();
+                await this.deps.submitDirect(command, AbortSignal.any([signal, pending]));
+                progress.commandSubmitted = true;
+            },
+        };
+    }
+    async cleanUp(spec, progress, closed) {
+        const released = await cleanUpDialog(this.deps.terminal, spec, progress, closed);
+        if (!released)
+            this.survivor = spec;
+    }
+}
+//# sourceMappingURL=picker.js.map

package/dist/runtime/session/picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker.js","sourceRoot":"","sources":["../../../src/runtime/session/picker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAInD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,SAAS,EACT,aAAa,EACb,WAAW,EACX,SAAS,EACT,IAAI,GAEL,MAAM,qBAAqB,CAAC;AAc7B,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAa;IACjB,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC3C,MAAM,CAA0D;IAChE,QAAQ,CAA8B;IAC9C,wFAAwF;IAChF,WAAW,GAAG,CAAC,CAAC;IACxB,YAAY,IAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;OASG;IACH,WAAW;QACT,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACvF,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,wFAAwF;QACxF,uFAAuF;QACvF,qFAAqF;QACrF,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,WAAW,GAAG,WAAW;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB;QAClB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACxF,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CACP,IAAiC,EACjC,IAAqB,EACrB,SAAiB,EACjB,IAA4D;QAE5D,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,QAAQ,CAAC,KAAK,CACZ,WAAW,CAAC,yBAAyB,EAAE,+CAA+C,CAAC,CACxF,EACH,SAAS,CACV,CAAC;QACF,IAAI,MAAU,CAAC;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CACvC,IAAI,EACJ,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,kFAAkF;gBAClF,6EAA6E;gBAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;gBAClD,8EAA8E;gBAC9E,6EAA6E;gBAC7E,6EAA6E;gBAC7E,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,SAAS;oBACtE,MAAM,WAAW,CACf,yBAAyB,EACzB,mEAAmE,CACpE,CAAC;gBACJ,MAAM,QAAQ,GAAa;oBACzB,YAAY,EAAE,SAAS;oBACvB,gBAAgB,EAAE,KAAK;oBACvB,UAAU,EAAE,KAAK;oBACjB,UAAU,EAAE,KAAK;iBAClB,CAAC;gBACF,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;gBACpF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC7D,IAAI,CAAC,MAAM,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;gBAC9C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrF,KAAK,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC/D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,QAAQ,CAAC,gBAAgB;wBACjD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAChD,MAAM,KAAK,CAAC;gBACd,CAAC;wBAAS,CAAC;oBACT,KAAK,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC7C,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC1B,CAAC;YACH,CAAC,EACD,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CACjE,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,EAAE,CAAC,MAAmB,EAAE,IAAqB,EAAE,QAAkB;QACvE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAmB;YAC/B,QAAQ,EAAE,GAAG,EAAE;gBACb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,SAAS,CAAC;gBAC7E,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,KAAK,KAAK,SAAS;oBAAE,QAAQ,CAAC,YAAY,GAAG,KAAK,CAAC;;oBAClD,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC;QACF,OAAO;YACL,QAAQ;YACR,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,uEAAuE;YACvE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBACjC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC1E,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAAC;YACnC,CAAC;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAqB,EACrB,QAAkB,EAClB,MAAmB;QAEnB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjF,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACtC,CAAC;CACF"}

package/dist/runtime/session/questions.d.ts

@@ -0,0 +1,23 @@
+/** Shared native question controls layered over lifecycle (PRD §5.10). */
+import type { ElwoodAgentKind } from "../../core/activity/index.ts";
+import type { QuestionAdapter } from "../../core/questions/adapter.ts";
+import type { QuestionRegistry } from "../../core/questions/registry.ts";
+import type { ElwoodQuestionAnswer, ElwoodQuestionAnswerOptions } from "../../core/questions/types.ts";
+import type { TerminalReplayBuffer } from "../../core/terminal-replay.ts";
+import type { PtyProcess } from "../../pty/types.ts";
+import type { PersistedLoopDefinition } from "../../state/loop-store.ts";
+import type { SessionRuntime } from "../../state/runtime-paths.ts";
+import type { SessionRecord } from "../../state/store.ts";
+import { SessionLifecycle } from "./lifecycle.ts";
+import type { PickerInputOwnership } from "./picker-input.ts";
+import type { SessionStatusEmitter } from "./status-wiring.ts";
+export declare abstract class QuestionSessionBase extends SessionLifecycle {
+    private readonly questions;
+    protected constructor(agent: ElwoodAgentKind, record: SessionRecord, stateDir: string, runtime: SessionRuntime, pty: PtyProcess, input: PickerInputOwnership, events: SessionStatusEmitter, replay: TerminalReplayBuffer, loops: readonly PersistedLoopDefinition[]);
+    protected configureQuestions(factory: (registry: QuestionRegistry) => QuestionAdapter): void;
+    protected revokeQuestionAnswer(): void;
+    protected isInputBlocked(): boolean;
+    listQuestions(): Promise<readonly import("../../index.ts").ElwoodQuestionRequest[]>;
+    answerQuestions(requestId: string, answers: readonly ElwoodQuestionAnswer[], options?: ElwoodQuestionAnswerOptions): Promise<void>;
+}
+//# sourceMappingURL=questions.d.ts.map

package/dist/runtime/session/questions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"questions.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/questions.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EACV,oBAAoB,EACpB,2BAA2B,EAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,8BAAsB,mBAAoB,SAAQ,gBAAgB;IAChE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,SAAS,aACP,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,SAAS,uBAAuB,EAAE;IAY3C,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,eAAe,GAAG,IAAI;IAG5F,SAAS,CAAC,oBAAoB,IAAI,IAAI;cAGnB,cAAc,IAAI,OAAO;IAG5C,aAAa;IAGb,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,oBAAoB,EAAE,EACxC,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,IAAI,CAAC;CAGjB"}