@with-logic/elwood 0.1.3 → 0.2.1

package/dist/core/input/index.js

@@ -2,165 +2,130 @@
  * Shared PTY input submission helpers for adapter sessions.
  * Implements PRD §5.3 prompt and command submission semantics (C-API-31).
  */
-import { clearStagedComposer, throwIfInputAborted, waitForInput, } from "./abort.js";
+import { elwoodError } from "../errors.js";
+import { holdWhileUnsafe, submissionError, throwIfInputAborted, waitForInput, } from "./abort.js";
+import { requestComposerCleanup, stageComposer, submittedComposer } from "./composer-cleanup.js";
+import { bracketedPasteEnd, bracketedPasteStart } from "./constants.js";
+import { preparePasteNudges } from "./paste-nudge.js";
+import { sanitizePasteText } from "./sanitize.js";
+export { sanitizePasteText } from "./sanitize.js";
 export const commandEnterDelayMs = 150;
 export const pasteSettleDelayMs = 150;
 export const pasteNudgeDelayMs = 1_000;
-export const pasteNudgeAttempts = 2;
-/** How often the submitting Enter re-checks a blocking dialog before firing. */
-export const blockedPollMs = 50;
+export { pasteNudgeAttempts } from "./constants.js";
 /** Explicitly best-effort input for startup/recovery automation. */
 export function ignoreInputFailure(input) {
     void Promise.resolve(input).catch(() => undefined);
 }
-// C0 (\u0000-\u001f) and C1 (\u007f-\u009f) control chars EXCEPT tab,
-// newline, and carriage return, which are legitimate multi-line whitespace.
-// Stripping ESC (\u001b) alone already defuses the ESC[200~ / ESC[201~
-// bracketed-paste sentinels, leaving only inert `[20x~` text.
-// biome-ignore lint/suspicious/noControlCharactersInRegex: neutralizing control input is the point.
-const pasteUnsafe = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g;
-/**
- * Neutralizes caller/model text before it is framed as a bracketed paste (§5.3).
- * Message text is data, so an embedded `ESC[201~` end sentinel (or a bare control
- * byte) MUST NOT terminate paste mode early and turn following bytes into live
- * keystrokes — e.g. an Enter that confirms a permission dialog. Tab, newline, and
- * carriage return survive as legitimate multi-line text; everything else is
- * stripped. `sendKeys` is the raw escape hatch and never goes through here.
- */
-export function sanitizePasteText(text) {
-    return text.replace(pasteUnsafe, "");
-}
 /**
  * Writes a bracketed paste and submits it.
  *
  * The TUIs ingest bracketed pastes asynchronously; an Enter concatenated into
  * the same PTY write races that ingestion and can be dropped, leaving the prompt
  * staged but never submitted (long personas hit this reliably). The Enter
- * therefore follows as a separate keystroke after a settle delay, and bounded
- * re-Enters fire while the screen still shows staged content — a lone Enter from
- * the staged state submits, and a surplus Enter on an empty composer is a no-op,
- * so the recovery is safe on both adapters.
+ * follows after a settle delay; bounded re-Enters require staged content.
+ * Native submission activity permanently revokes recovery.
  *
- * While a blocking human-decision dialog is on screen, the WHOLE submission is
+ * While a human or automation-owned dialog is on screen, the WHOLE submission is
  * held: neither the paste nor any Enter reaches the terminal until the dialog
  * clears, so caller/model text can never be interpreted as the dialog's
  * shortcuts or confirm its highlighted option (C-API-37 dialog safety). Paste
  * text is sanitized first so an embedded end sentinel or control byte cannot
  * escape paste mode into live keystrokes (§5.3).
  *
- * The returned promise resolves once the first submitting Enter has been
- * dispatched (after the settle delay), so the control queue does not drain the
- * next operation into the composer before this prompt has actually been
- * submitted. Bounded recovery re-Enters continue in the background afterwards
- * and are idempotent.
+ * Ordinary sends resolve and release composer ownership after the first physical
+ * Enter; recovery continues in the background. Awaited ergonomic input keeps the queue and
+ * composer owned until fresh rendered input is positively empty. Its physical
+ * submission callback still runs after the first Enter, before native acceptance.
+ * Native activity stops retry Enters without accepting an awaited draft; raw input
+ * revokes recovery and cleanup authority over the caller's replacement draft.
  */
-async function writePastedPrompt(terminal, prompt, guard, signal, settleDelayMs = pasteSettleDelayMs, nudgeDelayMs = pasteNudgeDelayMs) {
-    // Hold the WHOLE submission — paste included — while a blocking dialog is on
-    // screen. A dialog can appear before an overtaking guidance's paste dispatches;
-    // pasting caller/model text into it risks the TUI interpreting shortcuts, so no
-    // bytes may reach a dialog until it clears (C-API-37 dialog safety). Only await
-    // when actually blocked, so the common path still writes the paste synchronously.
-    if (guard?.blocked?.())
-        await waitWhileBlocked(guard, signal);
+async function writePastedPrompt(terminal, prompt, awaitInputConsumption, guard, signal, settleDelayMs = pasteSettleDelayMs, nudgeDelayMs = pasteNudgeDelayMs, onSubmitted, beforeEnter) {
+    // Hold paste and Enter until observed dialog clearance (C-API-37).
+    if (terminal.settled || guard?.blocked?.())
+        await holdWhileUnsafe(terminal, guard, signal);
     throwIfInputAborted(signal);
-    // Sanitize: caller/model text is data, so an embedded end sentinel or control
-    // byte must not escape paste mode into live keystrokes (§5.3).
-    await terminal.sendInput(`\u001b[200~${sanitizePasteText(prompt)}\u001b[201~`);
-    const schedule = (work, ms) => {
-        const timer = setTimeout(work, ms);
-        timer.unref?.();
-    };
-    let nudges = 0;
-    const nudge = async () => {
-        // Stop once a LATER submission has begun: a stale nudge must never fire an
-        // Enter into a newer prompt's paste (the staged chip is not prompt-specific).
-        if (signal?.aborted || !guard || nudges >= pasteNudgeAttempts)
-            return;
-        // A dialog that appears after the first Enter must not be confirmed by a
-        // recovery Enter either; skip this attempt and re-check on the next tick.
-        if (guard.blocked?.()) {
-            schedule(nudge, nudgeDelayMs);
-            return;
-        }
-        nudges += 1;
-        if (!guard.staged(guard.snapshot(), prompt))
-            return;
-        try {
-            await terminal.sendInput("\r");
-        }
-        catch {
-            // Recovery nudges are best-effort after the first Enter already landed.
-        }
-        schedule(nudge, nudgeDelayMs);
-    };
+    // Keep caller text inside bracketed paste, including embedded end sentinels (§5.3).
+    const payload = sanitizePasteText(prompt);
+    const recovery = guard?.captureRecovery?.();
+    const priorEmptyFrame = guard?.emptyFrame?.();
+    const rawInputSignal = stageComposer(terminal);
+    const nudgeSignal = rawInputSignal && signal
+        ? AbortSignal.any([rawInputSignal, signal])
+        : (rawInputSignal ?? signal);
+    const nudges = preparePasteNudges(terminal, guard, payload, nudgeSignal, nudgeDelayMs, priorEmptyFrame, recovery?.revoked);
+    await terminal.sendInput(`${bracketedPasteStart}${payload}${bracketedPasteEnd}`);
     try {
         await waitForInput(settleDelayMs, signal);
         // Hold the submitting Enter while a blocking dialog is on screen: firing it
         // would confirm the dialog's highlighted option instead of submitting the
         // staged paste (C-API-37 dialog safety). The paste stays staged behind the
         // dialog and submits once it clears.
-        await waitWhileBlocked(guard, signal);
+        await holdWhileUnsafe(terminal, guard, signal);
         throwIfInputAborted(signal);
+        nudges?.beforeEnter();
+        guard?.beforeEnter?.();
+        beforeEnter?.(payload);
         await terminal.sendInput("\r");
+        // Physical submission is observable in both modes; only ordinary sends release here.
+        if (!awaitInputConsumption)
+            submittedComposer(terminal);
+        onSubmitted?.();
+        if (awaitInputConsumption) {
+            if (!(await nudges?.awaitEmptyInput()))
+                throw elwoodError("wait_timeout", "Turn input remained staged after submission attempts.");
+            throwIfInputAborted(nudgeSignal);
+        }
+        // The awaited queue operation and composer share the verified input-consumption boundary.
+        if (awaitInputConsumption)
+            submittedComposer(terminal);
+        else
+            nudges?.start();
     }
     catch (error) {
-        if (signal?.aborted && !guard?.blocked?.())
-            await clearStagedComposer(terminal);
-        throw error;
+        if (awaitInputConsumption || signal?.aborted)
+            await requestComposerCleanup(terminal, guard?.blocked);
+        throw awaitInputConsumption ? submissionError(error) : error;
     }
-    schedule(nudge, nudgeDelayMs);
-}
-function waitWhileBlocked(guard, signal) {
-    if (!guard?.blocked?.())
-        return Promise.resolve();
-    return new Promise((resolve) => {
-        const poll = () => {
-            if (signal?.aborted) {
-                resolve();
-                return;
-            }
-            if (!guard.blocked?.()) {
-                resolve();
-                return;
-            }
-            const timer = setTimeout(poll, blockedPollMs);
-            timer.unref?.();
-        };
-        const timer = setTimeout(poll, blockedPollMs);
-        timer.unref?.();
-    });
 }
-export async function writeQueuedInput(terminal, input, mode, guard, signal, enterDelayMs = commandEnterDelayMs) {
+export async function writeQueuedInput(terminal, input, mode, guard, signal, enterDelayMs = commandEnterDelayMs, onSubmitted, beforeEnter) {
     // Dispatch through a Record keyed by ControlSubmitMode: a new mode must add an
     // entry here or the object fails to type-check, so it can never silently reuse
     // pasted-input behavior. The map has no unreachable default arm, so 100%
-    // coverage holds (both entries are exercised).
+    // coverage holds (all entries are exercised).
     const submitters = {
         // Resolve only after the input's submitting Enter has dispatched, so the next
         // queued operation cannot write into the composer first (FIFO).
-        pasted_input: () => writePastedPrompt(terminal, input, guard, signal),
+        pasted_input: () => writePastedPrompt(terminal, input, false, guard, signal, undefined, undefined, onSubmitted, beforeEnter),
+        awaited_input: () => writePastedPrompt(terminal, input, true, guard, signal, undefined, undefined, onSubmitted, beforeEnter),
         // Slash-command popups (Codex) swallow an Enter that arrives in the same PTY
         // chunk as the command text, so Enter follows as a separate keystroke. The
         // returned promise resolves only after that Enter is dispatched, so a queued
         // command's Enter always lands before the next operation writes.
         command: async () => {
-            if (guard?.blocked?.())
-                await waitWhileBlocked(guard, signal);
+            if (terminal.settled || guard?.blocked?.())
+                await holdWhileUnsafe(terminal, guard, signal);
             throwIfInputAborted(signal);
+            stageComposer(terminal);
             await terminal.sendInput(input);
             try {
                 await waitForInput(enterDelayMs, signal);
-                await waitWhileBlocked(guard, signal);
+                await holdWhileUnsafe(terminal, guard, signal);
                 throwIfInputAborted(signal);
                 await terminal.sendInput("\r");
+                submittedComposer(terminal);
             }
             catch (error) {
-                if (signal?.aborted && !guard?.blocked?.())
-                    await clearStagedComposer(terminal);
+                if (signal?.aborted)
+                    await requestComposerCleanup(terminal, guard?.blocked);
                 throw error;
             }
         },
     };
     await submitters[mode]();
 }
+/** Bind the session terminal while preserving physical-submission evidence (C-ATTN-02). */
+export function queuedInputSubmitter(terminal, guard) {
+    return (input, mode, signal, onSubmitted, beforeEnter) => writeQueuedInput(terminal, input, mode, guard, signal, commandEnterDelayMs, onSubmitted, beforeEnter);
+}
 //# sourceMappingURL=index.js.map

package/dist/core/input/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/input/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EACL,mBAAmB,EAEnB,mBAAmB,EACnB,YAAY,GACb,MAAM,YAAY,CAAC;AAepB,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEhC,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,sEAAsE;AACtE,4EAA4E;AAC5E,uEAAuE;AACvE,8DAA8D;AAC9D,oGAAoG;AACpG,MAAM,WAAW,GAAG,wDAAwD,CAAC;AAE7E;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,KAAK,UAAU,iBAAiB,CAC9B,QAAuB,EACvB,MAAc,EACd,KAAkB,EAClB,MAAoB,EACpB,aAAa,GAAG,kBAAkB,EAClC,YAAY,GAAG,iBAAiB;IAEhC,6EAA6E;IAC7E,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE;QAAE,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9D,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,8EAA8E;IAC9E,+DAA+D;IAC/D,MAAM,QAAQ,CAAC,SAAS,CAAC,cAAc,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,CAAC,IAAgB,EAAE,EAAU,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,2EAA2E;QAC3E,8EAA8E;QAC9E,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,kBAAkB;YAAE,OAAO;QACtE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;YACtB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC;YAAE,OAAO;QACpD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,qCAAqC;QACrC,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAAE,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAChF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAkB,EAAE,MAAoB;IAChE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;gBACvB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAC9C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC9C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAuB,EACvB,KAAa,EACb,IAAuB,EACvB,KAAkB,EAClB,MAAoB,EACpB,YAAY,GAAG,mBAAmB;IAElC,+EAA+E;IAC/E,+EAA+E;IAC/E,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,UAAU,GAA6D;QAC3E,8EAA8E;QAC9E,gEAAgE;QAChE,YAAY,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;QACrE,6EAA6E;QAC7E,2EAA2E;QAC3E,6EAA6E;QAC7E,iEAAiE;QACjE,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE;gBAAE,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9D,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBACzC,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACtC,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;oBAAE,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;gBAChF,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;IACF,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/input/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,eAAe,EAEf,eAAe,EACf,mBAAmB,EACnB,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,KAAK,UAAU,iBAAiB,CAC9B,QAAuB,EACvB,MAAc,EACd,qBAA8B,EAC9B,KAAkB,EAClB,MAAoB,EACpB,aAAa,GAAG,kBAAkB,EAClC,YAAY,GAAG,iBAAiB,EAChC,WAAwB,EACxB,WAAuC;IAEvC,mEAAmE;IACnE,IAAI,QAAQ,CAAC,OAAO,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE;QAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3F,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,oFAAoF;IACpF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC;IAC5C,MAAM,eAAe,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IAC9C,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,WAAW,GACf,cAAc,IAAI,MAAM;QACtB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,kBAAkB,CAC/B,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,YAAY,EACZ,eAAe,EACf,QAAQ,EAAE,OAAO,CAClB,CAAC;IACF,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,mBAAmB,GAAG,OAAO,GAAG,iBAAiB,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,qCAAqC;QACrC,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/C,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,EAAE,WAAW,EAAE,CAAC;QACtB,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;QACvB,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;QACvB,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,qFAAqF;QACrF,IAAI,CAAC,qBAAqB;YAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACxD,WAAW,EAAE,EAAE,CAAC;QAChB,IAAI,qBAAqB,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,MAAM,EAAE,eAAe,EAAE,CAAC;gBACpC,MAAM,WAAW,CAAC,cAAc,EAAE,uDAAuD,CAAC,CAAC;YAC7F,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,0FAA0F;QAC1F,IAAI,qBAAqB;YAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;;YAClD,MAAM,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,qBAAqB,IAAI,MAAM,EAAE,OAAO;YAC1C,MAAM,sBAAsB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,qBAAqB,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAuB,EACvB,KAAa,EACb,IAAuB,EACvB,KAAkB,EAClB,MAAoB,EACpB,YAAY,GAAG,mBAAmB,EAClC,WAAwB,EACxB,WAAuC;IAEvC,+EAA+E;IAC/E,+EAA+E;IAC/E,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,UAAU,GAA6D;QAC3E,8EAA8E;QAC9E,gEAAgE;QAChE,YAAY,EAAE,GAAG,EAAE,CACjB,iBAAiB,CACf,QAAQ,EACR,KAAK,EACL,KAAK,EACL,KAAK,EACL,MAAM,EACN,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,CACZ;QACH,aAAa,EAAE,GAAG,EAAE,CAClB,iBAAiB,CACf,QAAQ,EACR,KAAK,EACL,IAAI,EACJ,KAAK,EACL,MAAM,EACN,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,CACZ;QACH,6EAA6E;QAC7E,2EAA2E;QAC3E,6EAA6E;QAC7E,iEAAiE;QACjE,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,QAAQ,CAAC,OAAO,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE;gBAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC3F,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC5B,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxB,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBACzC,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC/C,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC/B,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,sBAAsB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC5E,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;IACF,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB,CAAC,QAAuB,EAAE,KAAiB;IAC7E,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,CACvD,gBAAgB,CACd,QAAQ,EACR,KAAK,EACL,IAAI,EACJ,KAAK,EACL,MAAM,EACN,mBAAmB,EACnB,WAAW,EACX,WAAW,CACZ,CAAC;AACN,CAAC"}

package/dist/core/input/paste-guard.d.ts

@@ -0,0 +1,34 @@
+/** Native staged-input, empty-frame and retry-authority contracts (PRD §5.3, C-API-56). */
+import type { EmptyComposerObserver } from "./clear-ack.ts";
+/** Native adapters prepare one staged-input predicate for each recovery sequence. */
+export type RecoveryComposer = {
+    readonly prepareStaged: (payload: string) => () => boolean;
+    readonly emptyFrame: EmptyComposerObserver;
+};
+/** Adapter view of "the paste is still staged in the composer". */
+export type PasteGuard = {
+    /** Private completed-render notification; listeners are removed when awaited input settles. */
+    readonly subscribeRender?: (listener: () => void) => () => void;
+    /** Capture caller ownership before the initial Enter, never recovery retries. */
+    readonly beforeEnter?: () => void;
+    /** Captured immediately before Enter; true only after later received output is rendered. */
+    readonly captureRenderProgress?: () => () => boolean;
+    /** Capture before paste/Enter: watches later native submission activity. */
+    readonly captureRecovery?: () => {
+        readonly revoked: () => boolean;
+    };
+    /** Reuse a token per completed empty frame; only a later frame gets a new identity. */
+    readonly emptyFrame?: EmptyComposerObserver;
+    /**
+     * True when a human or automation-owned dialog is on screen. A dialog can
+     * appear during the paste-settle window; sending the submitting Enter then
+     * would confirm the dialog's highlighted option (e.g. approve a tool). The
+     * Enter is therefore held while this is true and retried once it clears.
+     */
+    readonly blocked?: () => boolean;
+} & (Pick<RecoveryComposer, "prepareStaged"> | {
+    readonly snapshot: () => string;
+    /** Legacy write-only guards receive the sanitized payload on each observation. */
+    readonly staged: (screen: string, payload: string) => boolean;
+});
+//# sourceMappingURL=paste-guard.d.ts.map

package/dist/core/input/paste-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paste-guard.d.ts","sourceRoot":"","sources":["../../../src/core/input/paste-guard.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAE5D,qFAAqF;AACrF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,OAAO,CAAC;IAC3D,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC5C,CAAC;AAEF,mEAAmE;AACnE,MAAM,MAAM,UAAU,GAAG;IACvB,+FAA+F;IAC/F,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAChE,iFAAiF;IACjF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IAClC,4FAA4F;IAC5F,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,MAAM,OAAO,CAAC;IACrD,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAA;KAAE,CAAC;IACrE,uFAAuF;IACvF,QAAQ,CAAC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;CAClC,GAAG,CACA,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,GACvC;IACE,QAAQ,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC;IAChC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;CAC/D,CACJ,CAAC"}

package/dist/core/input/paste-guard.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=paste-guard.js.map

package/dist/core/input/paste-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paste-guard.js","sourceRoot":"","sources":["../../../src/core/input/paste-guard.ts"],"names":[],"mappings":""}

package/dist/core/input/paste-nudge.d.ts

@@ -0,0 +1,10 @@
+/** Shared native observation/retry engine with background or awaited ownership (PRD §5.3). */
+import { type InputTerminal } from "./abort.ts";
+import type { EmptyComposerObserver } from "./clear-ack.ts";
+import type { PasteGuard } from "./index.ts";
+export declare function preparePasteNudges(terminal: InputTerminal, guard: PasteGuard | undefined, payload: string, signal: AbortSignal | undefined, delayMs: number, priorEmptyFrame: ReturnType<EmptyComposerObserver>, revoked?: () => boolean): {
+    beforeEnter: () => void;
+    start: () => void;
+    awaitEmptyInput: () => Promise<boolean>;
+} | undefined;
+//# sourceMappingURL=paste-nudge.d.ts.map

package/dist/core/input/paste-nudge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paste-nudge.d.ts","sourceRoot":"","sources":["../../../src/core/input/paste-nudge.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,KAAK,aAAa,EAAoC,MAAM,YAAY,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAY7C,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,UAAU,GAAG,SAAS,EAC7B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,UAAU,CAAC,qBAAqB,CAAC,EAClD,OAAO,CAAC,EAAE,MAAM,OAAO;;;2BAqDW,OAAO,CAAC,OAAO,CAAC;cAgBnD"}

package/dist/core/input/paste-nudge.js

@@ -0,0 +1,91 @@
+/** Shared native observation/retry engine with background or awaited ownership (PRD §5.3). */
+import { throwIfInputAborted, writeUnsafe } from "./abort.js";
+import { pasteNudgeAttempts, pasteObservationLimit } from "./constants.js";
+import { RenderWakeup } from "./render-wakeup.js";
+export function preparePasteNudges(terminal, guard, payload, signal, delayMs, priorEmptyFrame, revoked) {
+    if (!guard)
+        return undefined;
+    const staged = "prepareStaged" in guard
+        ? guard.prepareStaged(payload)
+        : () => guard.staged(guard.snapshot(), payload);
+    let retryAt = 0;
+    let hasFreshFrame;
+    const beforeEnter = () => {
+        hasFreshFrame = guard.captureRenderProgress?.();
+        retryAt = Date.now() + delayMs;
+    };
+    const hasRenderedAfterEnter = (requireProof) => hasFreshFrame?.() ?? !requireProof;
+    let attempts = 0;
+    let observations = 0;
+    const retry = async (awaitInputConsumption) => {
+        if (awaitInputConsumption && Date.now() < retryAt)
+            return "paced";
+        if (attempts === pasteNudgeAttempts)
+            return "exhausted";
+        attempts += 1;
+        beforeEnter();
+        await tryRecoveryEnter(terminal);
+        return "pending";
+    };
+    const observe = async (awaitInputConsumption) => {
+        const unsafe = await writeUnsafe(terminal, guard, signal, awaitInputConsumption);
+        if (signal?.aborted)
+            return "cancelled";
+        // Hook evidence stops retries, but cannot itself release an awaited image draft.
+        const recoveryRevoked = revoked?.();
+        if (!awaitInputConsumption && recoveryRevoked)
+            return "revoked";
+        if (unsafe)
+            return "pending";
+        const fresh = hasRenderedAfterEnter(awaitInputConsumption);
+        const empty = guard.emptyFrame?.();
+        // A geometry-only token change cannot replace post-Enter rendered output.
+        if (fresh && empty && empty !== priorEmptyFrame)
+            return "accepted";
+        if (recoveryRevoked)
+            return "revoked";
+        if (!(fresh && staged()))
+            return guard.emptyFrame ? "pending" : "legacy_done";
+        return retry(awaitInputConsumption);
+    };
+    const schedule = () => {
+        const timer = setTimeout(nudge, delayMs);
+        timer.unref?.();
+    };
+    const nudge = async () => {
+        const result = await observe(false);
+        observations += 1;
+        if (result === "pending" &&
+            attempts < pasteNudgeAttempts &&
+            observations < pasteObservationLimit)
+            schedule();
+    };
+    const awaitEmptyInput = async () => {
+        const wakeup = new RenderWakeup(guard.subscribeRender);
+        try {
+            for (;;) {
+                wakeup.consume();
+                const result = await observe(true);
+                throwIfInputAborted(signal);
+                if (result === "accepted")
+                    return true;
+                if (result === "exhausted")
+                    return false;
+                await wakeup.wait(signal, result === "paced" ? retryAt - Date.now() : undefined);
+            }
+        }
+        finally {
+            wakeup.dispose();
+        }
+    };
+    return { beforeEnter, start: schedule, awaitEmptyInput };
+}
+async function tryRecoveryEnter(terminal) {
+    try {
+        await terminal.sendInput("\r");
+    }
+    catch {
+        // Recovery is best-effort after the initial Enter has dispatched.
+    }
+}
+//# sourceMappingURL=paste-nudge.js.map

package/dist/core/input/paste-nudge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paste-nudge.js","sourceRoot":"","sources":["../../../src/core/input/paste-nudge.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAsB,mBAAmB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAElF,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAE3E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAWlD,MAAM,UAAU,kBAAkB,CAChC,QAAuB,EACvB,KAA6B,EAC7B,OAAe,EACf,MAA+B,EAC/B,OAAe,EACf,eAAkD,EAClD,OAAuB;IAEvB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,MAAM,GACV,eAAe,IAAI,KAAK;QACtB,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,aAA0C,CAAC;IAC/C,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,aAAa,GAAG,KAAK,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAChD,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACjC,CAAC,CAAC;IACF,MAAM,qBAAqB,GAAG,CAAC,YAAqB,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC;IAC5F,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,KAAK,GAAG,KAAK,EAAE,qBAA8B,EAAwB,EAAE;QAC3E,IAAI,qBAAqB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAAE,OAAO,OAAO,CAAC;QAClE,IAAI,QAAQ,KAAK,kBAAkB;YAAE,OAAO,WAAW,CAAC;QACxD,QAAQ,IAAI,CAAC,CAAC;QACd,WAAW,EAAE,CAAC;QACd,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,EAAE,qBAA8B,EAAwB,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;QACjF,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,WAAW,CAAC;QACxC,iFAAiF;QACjF,MAAM,eAAe,GAAG,OAAO,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,qBAAqB,IAAI,eAAe;YAAE,OAAO,SAAS,CAAC;QAChE,IAAI,MAAM;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,KAAK,GAAG,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;QACnC,0EAA0E;QAC1E,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,KAAK,eAAe;YAAE,OAAO,UAAU,CAAC;QACnE,IAAI,eAAe;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;QAC9E,OAAO,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,YAAY,IAAI,CAAC,CAAC;QAClB,IACE,MAAM,KAAK,SAAS;YACpB,QAAQ,GAAG,kBAAkB;YAC7B,YAAY,GAAG,qBAAqB;YAEpC,QAAQ,EAAE,CAAC;IACf,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,KAAK,IAAsB,EAAE;QACnD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnC,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAC5B,IAAI,MAAM,KAAK,UAAU;oBAAE,OAAO,IAAI,CAAC;gBACvC,IAAI,MAAM,KAAK,WAAW;oBAAE,OAAO,KAAK,CAAC;gBACzC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAuB;IACrD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC"}

package/dist/core/input/render-observation.d.ts

@@ -0,0 +1,3 @@
+/** Terminal settlement never rejects; render failure is reported separately by the terminal. */
+export declare function observeRender(settled: Promise<void>, signal: AbortSignal | undefined, budgetMs?: number): Promise<boolean>;
+//# sourceMappingURL=render-observation.d.ts.map

package/dist/core/input/render-observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-observation.d.ts","sourceRoot":"","sources":["../../../src/core/input/render-observation.ts"],"names":[],"mappings":"AAIA,gGAAgG;AAChG,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EACtB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CA+BlB"}

package/dist/core/input/render-observation.js

@@ -0,0 +1,38 @@
+const observations = new WeakMap();
+/** Terminal settlement never rejects; render failure is reported separately by the terminal. */
+export function observeRender(settled, signal, budgetMs) {
+    if (signal?.aborted)
+        return Promise.resolve(false);
+    let observation = observations.get(settled);
+    if (!observation) {
+        observation = { done: false, listeners: new Set() };
+        observations.set(settled, observation);
+        const shared = observation;
+        void settled.then(() => {
+            shared.done = true;
+            for (const listener of shared.listeners)
+                listener();
+        });
+    }
+    if (observation.done)
+        return Promise.resolve(true);
+    const listeners = observation.listeners;
+    return new Promise((resolve) => {
+        let budget;
+        const finish = (observed) => {
+            clearTimeout(budget);
+            listeners.delete(ready);
+            signal?.removeEventListener("abort", giveUp);
+            resolve(observed);
+        };
+        const ready = () => finish(true);
+        const giveUp = () => finish(false);
+        if (budgetMs !== undefined) {
+            budget = setTimeout(giveUp, budgetMs);
+            budget.unref?.();
+        }
+        listeners.add(ready);
+        signal?.addEventListener("abort", giveUp, { once: true });
+    });
+}
+//# sourceMappingURL=render-observation.js.map

package/dist/core/input/render-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-observation.js","sourceRoot":"","sources":["../../../src/core/input/render-observation.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAAG,IAAI,OAAO,EAA8B,CAAC;AAE/D,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAC3B,OAAsB,EACtB,MAA+B,EAC/B,QAAiB;IAEjB,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACpD,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,WAAW,CAAC;QAC3B,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS;gBAAE,QAAQ,EAAE,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAiD,CAAC;QACtD,MAAM,MAAM,GAAG,CAAC,QAAiB,EAAE,EAAE;YACnC,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACtC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACnB,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/input/render-wakeup.d.ts

@@ -0,0 +1,10 @@
+export declare class RenderWakeup {
+    private dirty;
+    private wake;
+    private readonly unsubscribe;
+    constructor(subscribe: ((listener: () => void) => () => void) | undefined);
+    consume(): void;
+    wait(signal: AbortSignal | undefined, retryInMs?: number): Promise<void>;
+    dispose(): void;
+}
+//# sourceMappingURL=render-wakeup.d.ts.map

package/dist/core/input/render-wakeup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-wakeup.d.ts","sourceRoot":"","sources":["../../../src/core/input/render-wakeup.ts"],"names":[],"mappings":"AAGA,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;gBAE3C,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,SAAS;IAOzE,OAAO,IAAI,IAAI;IAIf,IAAI,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBxE,OAAO,IAAI,IAAI;CAGhB"}

package/dist/core/input/render-wakeup.js

@@ -0,0 +1,45 @@
+/** One coalesced completed-frame wakeup and optional paced retry (PRD §5.3, C-API-31). */
+import { inputAbortError } from "./abort.js";
+export class RenderWakeup {
+    dirty = false;
+    wake;
+    unsubscribe;
+    constructor(subscribe) {
+        this.unsubscribe = subscribe?.(() => {
+            this.dirty = true;
+            this.wake?.();
+        });
+    }
+    consume() {
+        this.dirty = false;
+    }
+    wait(signal, retryInMs) {
+        if (this.dirty)
+            return Promise.resolve();
+        return new Promise((resolve, reject) => {
+            let timer;
+            const cleanup = () => {
+                clearTimeout(timer);
+                this.wake = undefined;
+                signal?.removeEventListener("abort", abort);
+            };
+            const abort = () => {
+                cleanup();
+                reject(inputAbortError(signal));
+            };
+            this.wake = () => {
+                cleanup();
+                resolve();
+            };
+            signal?.addEventListener("abort", abort, { once: true });
+            if (retryInMs !== undefined) {
+                timer = setTimeout(this.wake, retryInMs);
+                timer.unref?.();
+            }
+        });
+    }
+    dispose() {
+        this.unsubscribe?.();
+    }
+}
+//# sourceMappingURL=render-wakeup.js.map

package/dist/core/input/render-wakeup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-wakeup.js","sourceRoot":"","sources":["../../../src/core/input/render-wakeup.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,OAAO,YAAY;IACf,KAAK,GAAG,KAAK,CAAC;IACd,IAAI,CAA2B;IACtB,WAAW,CAA2B;IAEvD,YAAY,SAA6D;QACvE,IAAI,CAAC,WAAW,GAAG,SAAS,EAAE,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,MAA+B,EAAE,SAAkB;QACtD,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,KAAgD,CAAC;YACrD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;gBACtB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,GAAG,EAAE;gBACjB,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,eAAe,CAAC,MAAqB,CAAC,CAAC,CAAC;YACjD,CAAC,CAAC;YACF,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACzC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/core/input/sanitize.d.ts

@@ -0,0 +1,11 @@
+/** Keep pasted data from becoming terminal control input (PRD §5.3, C-API-31). */
+/**
+ * Neutralizes caller/model text before it is framed as a bracketed paste (§5.3).
+ * Message text is data, so an embedded `ESC[201~` end sentinel (or a bare control
+ * byte) MUST NOT terminate paste mode early and turn following bytes into live
+ * keystrokes — e.g. an Enter that confirms a permission dialog. Tab, newline, and
+ * carriage return survive as legitimate multi-line text; everything else is
+ * stripped. `sendKeys` is the raw escape hatch and never goes through here.
+ */
+export declare function sanitizePasteText(text: string): string;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/core/input/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/core/input/sanitize.ts"],"names":[],"mappings":"AAAA,kFAAkF;AASlF;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/core/input/sanitize.js

@@ -0,0 +1,19 @@
+/** Keep pasted data from becoming terminal control input (PRD §5.3, C-API-31). */
+// C0 (\u0000-\u001f) and C1 (\u007f-\u009f) control chars EXCEPT tab,
+// newline, and carriage return, which are legitimate multi-line whitespace.
+// Stripping ESC (\u001b) alone already defuses the ESC[200~ / ESC[201~
+// bracketed-paste sentinels, leaving only inert `[20x~` text.
+// biome-ignore lint/suspicious/noControlCharactersInRegex: neutralizing control input is the point.
+const pasteUnsafe = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g;
+/**
+ * Neutralizes caller/model text before it is framed as a bracketed paste (§5.3).
+ * Message text is data, so an embedded `ESC[201~` end sentinel (or a bare control
+ * byte) MUST NOT terminate paste mode early and turn following bytes into live
+ * keystrokes — e.g. an Enter that confirms a permission dialog. Tab, newline, and
+ * carriage return survive as legitimate multi-line text; everything else is
+ * stripped. `sendKeys` is the raw escape hatch and never goes through here.
+ */
+export function sanitizePasteText(text) {
+    return text.replace(pasteUnsafe, "");
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/core/input/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../../src/core/input/sanitize.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,sEAAsE;AACtE,4EAA4E;AAC5E,uEAAuE;AACvE,8DAA8D;AAC9D,oGAAoG;AACpG,MAAM,WAAW,GAAG,wDAAwD,CAAC;AAE7E;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC"}

package/dist/core/input/staged-composer.d.ts

@@ -0,0 +1,12 @@
+import type { ElwoodTerminal } from "../../terminal/headless.ts";
+import { type ScreenFactTable } from "../screen-facts.ts";
+export declare function readStagedComposer(terminal: ElwoodTerminal, matchesEmptyInput: (rows: readonly string[], viewportCursorRow: number) => boolean, table: ScreenFactTable, emptyRow: string): string | undefined;
+/** Reuse one completed idle-frame classification for normal and whitespace drafts. */
+export declare function readStagedComposerFrame(current: ReturnType<typeof readIdleComposerFrame>, matchesEmptyInput: (rows: readonly string[], viewportCursorRow: number) => boolean, emptyRow: string): string | undefined;
+/** A whitespace draft is visible only through its advanced caret on the live prompt row. */
+export declare function readStagedWhitespace(current: ReturnType<typeof readIdleComposerFrame>, matchesEmptyInput: (rows: readonly string[], viewportCursorRow: number) => boolean, emptyRow: string): boolean;
+export declare function readIdleComposerFrame(terminal: ElwoodTerminal, table: ScreenFactTable): {
+    frame: import("../../index.ts").TerminalSnapshot;
+    viewportCursorRow: number;
+} | undefined;
+//# sourceMappingURL=staged-composer.d.ts.map

package/dist/core/input/staged-composer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staged-composer.d.ts","sourceRoot":"","sources":["../../../src/core/input/staged-composer.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE3E,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EACxB,iBAAiB,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,iBAAiB,EAAE,MAAM,KAAK,OAAO,EAClF,KAAK,EAAE,eAAe,EACtB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,SAAS,CAMpB;AAED,sFAAsF;AACtF,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,EACjD,iBAAiB,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,iBAAiB,EAAE,MAAM,KAAK,OAAO,EAClF,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,SAAS,CAkBpB;AAED,4FAA4F;AAC5F,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,EACjD,iBAAiB,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,iBAAiB,EAAE,MAAM,KAAK,OAAO,EAClF,QAAQ,EAAE,MAAM,GACf,OAAO,CAQT;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe;;;cAWrF"}