@with-logic/elwood 0.2.0 → 0.2.2

package/dist/runtime/session/prepare-state.js

@@ -0,0 +1,14 @@
+import { causeDetails, ElwoodError, elwoodError } from "../../core/errors.js";
+import { prepareStateDir } from "../../state/store.js";
+/** State errors retain their identity; native I/O errors gain the adapter startup contract. */
+export function prepareLaunchState(agent, stateDir, setup) {
+    try {
+        prepareStateDir(stateDir, setup);
+    }
+    catch (error) {
+        if (error instanceof ElwoodError)
+            throw error;
+        throw elwoodError(`${agent}_start_failed`, `Could not prepare ${agent} session state.`, causeDetails(error));
+    }
+}
+//# sourceMappingURL=prepare-state.js.map

package/dist/runtime/session/prepare-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare-state.js","sourceRoot":"","sources":["../../../src/runtime/session/prepare-state.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAsB,MAAM,sBAAsB,CAAC;AAE3E,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,QAAgB,EAChB,KAAoB;IAEpB,IAAI,CAAC;QACH,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,WAAW,CACf,GAAG,KAAK,eAAe,EACvB,qBAAqB,KAAK,iBAAiB,EAC3C,YAAY,CAAC,KAAK,CAAC,CACpB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/runtime/session/questions.d.ts

@@ -9,11 +9,11 @@ import type { PersistedLoopDefinition } from "../../state/loop-store.ts";
 import type { SessionRuntime } from "../../state/runtime-paths.ts";
 import type { SessionRecord } from "../../state/store.ts";
 import { SessionLifecycle } from "./lifecycle.ts";
-import type { PickerInputOwnership } from "./picker-input.ts";
+import type { SessionInputOwnership } from "./session-input.ts";
 import type { SessionStatusEmitter } from "./status-wiring.ts";
 export declare abstract class QuestionSessionBase extends SessionLifecycle {
     private readonly questions;
-    protected constructor(agent: ElwoodAgentKind, record: SessionRecord, stateDir: string, runtime: SessionRuntime, pty: PtyProcess, input: PickerInputOwnership, events: SessionStatusEmitter, replay: TerminalReplayBuffer, loops: readonly PersistedLoopDefinition[]);
+    protected constructor(agent: ElwoodAgentKind, record: SessionRecord, stateDir: string, runtime: SessionRuntime, pty: PtyProcess, input: SessionInputOwnership, events: SessionStatusEmitter, replay: TerminalReplayBuffer, loops: readonly PersistedLoopDefinition[]);
     protected configureQuestions(factory: (registry: QuestionRegistry) => QuestionAdapter): void;
     protected revokeQuestionAnswer(): void;
     protected isInputBlocked(): boolean;

package/dist/runtime/session/questions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"questions.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/questions.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EACV,oBAAoB,EACpB,2BAA2B,EAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,8BAAsB,mBAAoB,SAAQ,gBAAgB;IAChE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,SAAS,aACP,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,SAAS,uBAAuB,EAAE;IAY3C,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,eAAe,GAAG,IAAI;IAG5F,SAAS,CAAC,oBAAoB,IAAI,IAAI;cAGnB,cAAc,IAAI,OAAO;IAG5C,aAAa;IAGb,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,oBAAoB,EAAE,EACxC,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,IAAI,CAAC;CAGjB"}
+{"version":3,"file":"questions.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/questions.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EACV,oBAAoB,EACpB,2BAA2B,EAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,8BAAsB,mBAAoB,SAAQ,gBAAgB;IAChE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,SAAS,aACP,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,SAAS,uBAAuB,EAAE;IAY3C,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,eAAe,GAAG,IAAI;IAG5F,SAAS,CAAC,oBAAoB,IAAI,IAAI;cAGnB,cAAc,IAAI,OAAO;IAG5C,aAAa;IAGb,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,oBAAoB,EAAE,EACxC,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,IAAI,CAAC;CAGjB"}

package/dist/runtime/session/questions.js.map

@@ -1 +1 @@
-{"version":3,"file":"questions.js","sourceRoot":"","sources":["../../../src/runtime/session/questions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAWtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIlD,MAAM,OAAgB,mBAAoB,SAAQ,gBAAgB;IAC/C,SAAS,CAAmB;IAC7C,YACE,KAAsB,EACtB,MAAqB,EACrB,QAAgB,EAChB,OAAuB,EACvB,GAAe,EACf,KAA2B,EAC3B,MAA4B,EAC5B,MAA4B,EAC5B,KAAyC;QAEzC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CACnC,KAAK,EACL,MAAM,CAAC,eAAe,EACtB,MAAM,EACN,KAAK,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CACpB,CAAC;IACJ,CAAC;IACS,kBAAkB,CAAC,OAAwD;QACnF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACS,oBAAoB;QAC5B,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;IAC1B,CAAC;IACkB,cAAc;QAC/B,OAAO,KAAK,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAChE,CAAC;IACD,aAAa;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IACD,eAAe,CACb,SAAiB,EACjB,OAAwC,EACxC,OAAqC;QAErC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,CAAC;CACF"}
+{"version":3,"file":"questions.js","sourceRoot":"","sources":["../../../src/runtime/session/questions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAWtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIlD,MAAM,OAAgB,mBAAoB,SAAQ,gBAAgB;IAC/C,SAAS,CAAmB;IAC7C,YACE,KAAsB,EACtB,MAAqB,EACrB,QAAgB,EAChB,OAAuB,EACvB,GAAe,EACf,KAA4B,EAC5B,MAA4B,EAC5B,MAA4B,EAC5B,KAAyC;QAEzC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CACnC,KAAK,EACL,MAAM,CAAC,eAAe,EACtB,MAAM,EACN,KAAK,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CACpB,CAAC;IACJ,CAAC;IACS,kBAAkB,CAAC,OAAwD;QACnF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACS,oBAAoB;QAC5B,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;IAC1B,CAAC;IACkB,cAAc;QAC/B,OAAO,KAAK,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAChE,CAAC;IACD,aAAa;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IACD,eAAe,CACb,SAAiB,EACjB,OAAwC,EACxC,OAAqC;QAErC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,CAAC;CACF"}

package/dist/runtime/session/readiness.d.ts

@@ -12,10 +12,19 @@ import { type InitialReady } from "../readiness/initial-ready.ts";
 export type ReadinessGate = {
     readonly ready: InitialReady;
     readonly isHeld: () => boolean;
-    readonly observeFrameHold: (facts: ComposerReadyFacts, trustInputBlocking?: boolean) => void;
-    /** Per rendered frame: update the blocking gate, reconcile a deferred mark, and
-     * (on resume) mark readiness on the first quiet, non-blocking composer. */
-    readonly observeReadinessFrame: (facts: ComposerReadyFacts, trustInputBlocking?: boolean) => void;
+    readonly observeFrameHold: (facts: ComposerReadyFacts, trustInputBlocking: boolean, frame: string) => void;
+    /** Per rendered frame: update the blocking gate, reconcile a deferred or waiting mark,
+     * and (on resume) mark readiness on the first quiet, non-blocking composer. */
+    readonly observeReadinessFrame: (facts: ComposerReadyFacts, trustInputBlocking: boolean, frame: string) => void;
 };
-export declare function createReadinessGate(onReady: () => void, resumed: boolean): ReadinessGate;
+/**
+ * An adapter's `composer.configured`, when supplied, proves a rendered composer belongs
+ * to a configured session rather than to the boot screen (Codex's model footer). The
+ * initial deadline then marks only onto such a frame (C-API-28). The latest frame is
+ * checked only when readiness asks, never on every render.
+ */
+export declare function createReadinessGate(onReady: () => void, resumed: boolean, composer?: {
+    readonly configured: (frame: string) => boolean;
+    readonly onBackstopRelease: () => void;
+}): ReadinessGate;
 //# sourceMappingURL=readiness.d.ts.map

package/dist/runtime/session/readiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EACL,KAAK,YAAY,EAGlB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC7F;+EAC2E;IAC3E,QAAQ,CAAC,qBAAqB,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;CACnG,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,aAAa,CAqBxF"}
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAEL,KAAK,YAAY,EAGlB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,CACzB,KAAK,EAAE,kBAAkB,EACzB,kBAAkB,EAAE,OAAO,EAC3B,KAAK,EAAE,MAAM,KACV,IAAI,CAAC;IACV;mFAC+E;IAC/E,QAAQ,CAAC,qBAAqB,EAAE,CAC9B,KAAK,EAAE,kBAAkB,EACzB,kBAAkB,EAAE,OAAO,EAC3B,KAAK,EAAE,MAAM,KACV,IAAI,CAAC;CACX,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,IAAI,EACnB,OAAO,EAAE,OAAO,EAChB,QAAQ,CAAC,EAAE;IACT,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,IAAI,CAAC;CACxC,GACA,aAAa,CAoCf"}

package/dist/runtime/session/readiness.js

@@ -8,25 +8,41 @@
  * Implements PRD §5.3 (C-API-28).
  */
 import { initialReady, markReadyOnResumeComposer, } from "../readiness/initial-ready.js";
-export function createReadinessGate(onReady, resumed) {
+/**
+ * An adapter's `composer.configured`, when supplied, proves a rendered composer belongs
+ * to a configured session rather than to the boot screen (Codex's model footer). The
+ * initial deadline then marks only onto such a frame (C-API-28). The latest frame is
+ * checked only when readiness asks, never on every render.
+ */
+export function createReadinessGate(onReady, resumed, composer) {
     let readinessHeld = false;
-    const observeFrameHold = (facts, trustInputBlocking = false) => {
+    let latest;
+    const observeFrameHold = (facts, trustInputBlocking, frame) => {
         // A dialog's deferred mark waits for idle; ordinary cold-start work still
         // retains the existing hook/deadline path instead of waiting on itself.
         readinessHeld =
             facts.blocking_prompt_visible ||
                 trustInputBlocking ||
                 (readinessHeld && (facts.working_visible === true || !facts.composer_visible));
+        latest = { facts, frame };
+    };
+    // Work may animate forever (a failing MCP server's retry spinner), so only the
+    // configured composer itself, not idleness, is required before the deadline marks.
+    const evidence = composer && {
+        shown: () => latest?.facts.composer_visible === true &&
+            !latest.facts.blocking_prompt_visible &&
+            composer.configured(latest.frame),
+        onBackstopRelease: composer.onBackstopRelease,
     };
-    const ready = initialReady(onReady, undefined, () => readinessHeld);
+    const ready = initialReady(onReady, undefined, () => readinessHeld, evidence);
     return {
         ready,
         isHeld: () => readinessHeld,
         observeFrameHold,
-        observeReadinessFrame: (facts, trustInputBlocking = false) => {
-            observeFrameHold(facts, trustInputBlocking);
+        observeReadinessFrame: (facts, trustInputBlocking, frame) => {
+            observeFrameHold(facts, trustInputBlocking, frame);
             markReadyOnResumeComposer(ready, resumed, facts, readinessHeld);
-            ready.retryWhenReleased(readinessHeld); // reconcile only after an idle clearance frame
+            ready.retryWhenReleased(readinessHeld);
         },
     };
 }

package/dist/runtime/session/readiness.js.map

@@ -1 +1 @@
-{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../../src/runtime/session/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAEL,YAAY,EACZ,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AAWvC,MAAM,UAAU,mBAAmB,CAAC,OAAmB,EAAE,OAAgB;IACvE,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,gBAAgB,GAAG,CAAC,KAAyB,EAAE,kBAAkB,GAAG,KAAK,EAAE,EAAE;QACjF,0EAA0E;QAC1E,wEAAwE;QACxE,aAAa;YACX,KAAK,CAAC,uBAAuB;gBAC7B,kBAAkB;gBAClB,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;IACpE,OAAO;QACL,KAAK;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa;QAC3B,gBAAgB;QAChB,qBAAqB,EAAE,CAAC,KAAK,EAAE,kBAAkB,GAAG,KAAK,EAAE,EAAE;YAC3D,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YAC5C,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAChE,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,+CAA+C;QACzF,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../../src/runtime/session/readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAGL,YAAY,EACZ,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AAmBvC;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAmB,EACnB,OAAgB,EAChB,QAGC;IAED,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,MAAgE,CAAC;IACrE,MAAM,gBAAgB,GAAG,CACvB,KAAyB,EACzB,kBAA2B,EAC3B,KAAa,EACb,EAAE;QACF,0EAA0E;QAC1E,wEAAwE;QACxE,aAAa;YACX,KAAK,CAAC,uBAAuB;gBAC7B,kBAAkB;gBAClB,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACjF,MAAM,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC;IACF,+EAA+E;IAC/E,mFAAmF;IACnF,MAAM,QAAQ,GAA2C,QAAQ,IAAI;QACnE,KAAK,EAAE,GAAG,EAAE,CACV,MAAM,EAAE,KAAK,CAAC,gBAAgB,KAAK,IAAI;YACvC,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB;YACrC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;KAC9C,CAAC;IACF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC9E,OAAO;QACL,KAAK;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa;QAC3B,gBAAgB;QAChB,qBAAqB,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE;YAC1D,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;YACnD,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAChE,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/session/reap.d.ts

@@ -4,12 +4,13 @@
  *   - `bestEffort()` for the native unsolicited-exit callback: a reap failure must
  *     never throw out of that callback, so it is contained and RETURNED as a
  *     live `reap_failed` warning (emitted once when observed), never silently dropped.
- *   - `orThrow()` for an explicit `stop()`/`kill()` on an already-terminal session:
- *     it must NOT swallow — it throws a typed `termination_failed` so the caller
- *     rejects with an ElwoodError (C-ERR-01) and teardown can retry the
- *     still-unlatched reap.
- * `reaper` exposes the underlying one-shot for `teardown`'s retry step and the
- * `terminatePty` termination path, which own their own failure handling.
+ *   - `orThrow()` for an explicit `stop()`/`kill()` on an already-terminal session
+ *     and for `teardown`'s retry step: it must NOT swallow — it throws a typed
+ *     `termination_failed` (with its errno and the leader's process-group id) so
+ *     the caller rejects with an ElwoodError (C-ERR-01), and the reap stays
+ *     unlatched for a later retry.
+ * `reaper` exposes the underlying one-shot for the `terminatePty` termination path,
+ * which owns its own failure handling.
  */
 import type { ElwoodAgentKind } from "../../core/activity/index.ts";
 import type { ElwoodWarningEvent } from "../../core/types.ts";
@@ -22,7 +23,10 @@ export declare class SessionReapPolicy {
     constructor(agent: ElwoodAgentKind, elwoodSessionId: string, leaderPid: number);
     /** Contain a native-exit reap failure as a live warning to emit; never throw. */
     bestEffort(): ElwoodWarningEvent | undefined;
-    /** Reap on explicit shutdown; wrap any failure as a typed `termination_failed`. */
+    /**
+     * Reap on explicit shutdown, including an unresolved detached sweep; wrap any failure
+     * as a typed `termination_failed`.
+     */
     orThrow(): void;
 }
 //# sourceMappingURL=reap.d.ts.map

package/dist/runtime/session/reap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reap.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/reap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAGpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAO9E,iFAAiF;IACjF,UAAU,IAAI,kBAAkB,GAAG,SAAS;IAS5C,mFAAmF;IACnF,OAAO,IAAI,IAAI;CAUhB"}
+{"version":3,"file":"reap.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/reap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAGpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAO9E,iFAAiF;IACjF,UAAU,IAAI,kBAAkB,GAAG,SAAS;IAS5C;;;OAGG;IACH,OAAO,IAAI,IAAI;CAehB"}

package/dist/runtime/session/reap.js

@@ -4,16 +4,18 @@
  *   - `bestEffort()` for the native unsolicited-exit callback: a reap failure must
  *     never throw out of that callback, so it is contained and RETURNED as a
  *     live `reap_failed` warning (emitted once when observed), never silently dropped.
- *   - `orThrow()` for an explicit `stop()`/`kill()` on an already-terminal session:
- *     it must NOT swallow — it throws a typed `termination_failed` so the caller
- *     rejects with an ElwoodError (C-ERR-01) and teardown can retry the
- *     still-unlatched reap.
- * `reaper` exposes the underlying one-shot for `teardown`'s retry step and the
- * `terminatePty` termination path, which own their own failure handling.
+ *   - `orThrow()` for an explicit `stop()`/`kill()` on an already-terminal session
+ *     and for `teardown`'s retry step: it must NOT swallow — it throws a typed
+ *     `termination_failed` (with its errno and the leader's process-group id) so
+ *     the caller rejects with an ElwoodError (C-ERR-01), and the reap stays
+ *     unlatched for a later retry.
+ * `reaper` exposes the underlying one-shot for the `terminatePty` termination path,
+ * which owns its own failure handling.
  */
 import { reapFailureWarning } from "../../core/activity/index.js";
-import { causeDetails, elwoodError } from "../../core/errors.js";
+import { causeDetails, elwoodError, toError } from "../../core/errors.js";
 import { SessionReaper } from "../shutdown/reap-tree.js";
+import { unconfirmedGroupsDetail } from "../shutdown/terminate.js";
 export class SessionReapPolicy {
     reaper;
     agent;
@@ -35,14 +37,18 @@ export class SessionReapPolicy {
             return reapFailureWarning(this.agent, this.elwoodSessionId, this.leaderPid, error);
         }
     }
-    /** Reap on explicit shutdown; wrap any failure as a typed `termination_failed`. */
+    /**
+     * Reap on explicit shutdown, including an unresolved detached sweep; wrap any failure
+     * as a typed `termination_failed`.
+     */
     orThrow() {
         try {
-            this.reaper.reap();
+            this.reaper.reapAndThrowOnDetachedSweepFailure();
         }
         catch (error) {
-            throw elwoodError("termination_failed", "Could not reap the PTY process group.", {
+            throw elwoodError("termination_failed", "Could not confirm the PTY process tree was reaped.", {
                 ...causeDetails(error),
+                ...unconfirmedGroupsDetail(toError(error)),
                 processGroupId: this.leaderPid,
             });
         }

package/dist/runtime/session/reap.js.map

@@ -1 +1 @@
-{"version":3,"file":"reap.js","sourceRoot":"","sources":["../../../src/runtime/session/reap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEjE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,OAAO,iBAAiB;IACnB,MAAM,CAAgB;IACd,KAAK,CAAkB;IACvB,eAAe,CAAS;IACxB,SAAS,CAAS;IAEnC,YAAY,KAAsB,EAAE,eAAuB,EAAE,SAAiB;QAC5E,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED,iFAAiF;IACjF,UAAU;QACR,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,OAAO;QACL,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,oBAAoB,EAAE,uCAAuC,EAAE;gBAC/E,GAAG,YAAY,CAAC,KAAK,CAAC;gBACtB,cAAc,EAAE,IAAI,CAAC,SAAS;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"reap.js","sourceRoot":"","sources":["../../../src/runtime/session/reap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,MAAM,OAAO,iBAAiB;IACnB,MAAM,CAAgB;IACd,KAAK,CAAkB;IACvB,eAAe,CAAS;IACxB,SAAS,CAAS;IAEnC,YAAY,KAAsB,EAAE,eAAuB,EAAE,SAAiB;QAC5E,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED,iFAAiF;IACjF,UAAU;QACR,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,kCAAkC,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CACf,oBAAoB,EACpB,oDAAoD,EACpD;gBACE,GAAG,YAAY,CAAC,KAAK,CAAC;gBACtB,GAAG,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1C,cAAc,EAAE,IAAI,CAAC,SAAS;aAC/B,CACF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/runtime/session/runtime-cleanup.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Session runtime cleanup, shared by the Claude and Codex adapters (PRD §9.4,
+ * C-LIFE-12): stop the hook bridge, finish the transcript watcher, then drain and
+ * dispose the terminal, in that order. It runs on every shutdown and on an unsolicited
+ * exit, including a shutdown whose PTY could not be terminated, so the watcher stops
+ * polling even while the PTY lives on.
+ */
+import type { PtyProcess } from "../../pty/types.ts";
+import type { ElwoodTerminal } from "../../terminal/headless.ts";
+/** What a session's runtime cleanup stops beyond its terminal. */
+export type SessionRuntimeParts = {
+    readonly stopBridge: () => Promise<void>;
+    /** One bounded final flush of what the transcript already holds, then no more polling. */
+    readonly finishTranscriptWatcher: () => Promise<void> | void;
+};
+/** Every step runs even if an earlier one rejects, so nothing is left running (§9.4). */
+export declare function stopSessionRuntime(parts: SessionRuntimeParts, terminal: ElwoodTerminal, pty: Pick<PtyProcess, "onData">): Promise<void>;
+//# sourceMappingURL=runtime-cleanup.d.ts.map

package/dist/runtime/session/runtime-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-cleanup.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/runtime-cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAIjE,kEAAkE;AAClE,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,0FAA0F;IAC1F,QAAQ,CAAC,uBAAuB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC9D,CAAC;AAEF,yFAAyF;AACzF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,mBAAmB,EAC1B,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/runtime/session/runtime-cleanup.js

@@ -0,0 +1,18 @@
+/**
+ * Session runtime cleanup, shared by the Claude and Codex adapters (PRD §9.4,
+ * C-LIFE-12): stop the hook bridge, finish the transcript watcher, then drain and
+ * dispose the terminal, in that order. It runs on every shutdown and on an unsolicited
+ * exit, including a shutdown whose PTY could not be terminated, so the watcher stops
+ * polling even while the PTY lives on.
+ */
+import { runCleanupSteps } from "../shutdown/teardown.js";
+import { drainAndDisposeTerminal } from "../shutdown/terminal.js";
+/** Every step runs even if an earlier one rejects, so nothing is left running (§9.4). */
+export function stopSessionRuntime(parts, terminal, pty) {
+    return runCleanupSteps([
+        () => parts.stopBridge(),
+        () => parts.finishTranscriptWatcher(),
+        () => drainAndDisposeTerminal(terminal, pty),
+    ]);
+}
+//# sourceMappingURL=runtime-cleanup.js.map

package/dist/runtime/session/runtime-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-cleanup.js","sourceRoot":"","sources":["../../../src/runtime/session/runtime-cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AASlE,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAChC,KAA0B,EAC1B,QAAwB,EACxB,GAA+B;IAE/B,OAAO,eAAe,CAAC;QACrB,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE;QACxB,GAAG,EAAE,CAAC,KAAK,CAAC,uBAAuB,EAAE;QACrC,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,EAAE,GAAG,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/session/session-input.d.ts

@@ -0,0 +1,32 @@
+/**
+ * One session's input ownership: caller keys reach the terminal through `caller`, and
+ * Elwood's operations write through `automated`. Startup responders write through their
+ * own guarded writers, whose sends run inside `withAutomatedInput`, the same scope.
+ * Raw caller input aborts `signal()`, which revokes the automation holding the terminal at
+ * that moment: picker operations (C-API-55), composer cleanup, and native question answers.
+ * Listeners registered with `onCallerInput` hear of it too, which hands the session's
+ * startup prompts to the caller (C-TRUST-01, C-CODEX-12).
+ */
+import type { EmptyComposerObserver } from "../../core/input/clear-ack.ts";
+import { ComposerCleanup } from "../../core/input/composer-cleanup.ts";
+import type { ElwoodTerminal } from "../../terminal/headless.ts";
+type AutomatedWork = () => Promise<void>;
+/**
+ * Run `listener` whenever caller input revokes automation in this terminal's session,
+ * until the returned function unsubscribes it.
+ */
+export declare function onCallerInput(terminal: {
+    readonly xterm: object;
+}, listener: () => void): () => void;
+/** Preserve the same ownership scope for startup writers that retain their own input policy. */
+export declare function withAutomatedInput(terminal: ElwoodTerminal, work: AutomatedWork): Promise<void>;
+export declare class SessionInputOwnership {
+    readonly caller: ElwoodTerminal;
+    readonly automated: ElwoodTerminal;
+    private current;
+    constructor(inner: ElwoodTerminal);
+    composerCleanup(blocked: () => boolean, closing: AbortSignal, observeEmpty: EmptyComposerObserver): ComposerCleanup["run"];
+    signal(): AbortSignal;
+}
+export {};
+//# sourceMappingURL=session-input.d.ts.map

package/dist/runtime/session/session-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-input.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/session-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,KAAK,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;AASzC;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EACpC,QAAQ,EAAE,MAAM,IAAI,GACnB,MAAM,IAAI,CAMZ;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/F;AAED,qBAAa,qBAAqB;IAChC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,OAAO,CAAC,OAAO,CAAyB;gBAE5B,KAAK,EAAE,cAAc;IA4CjC,eAAe,CACb,OAAO,EAAE,MAAM,OAAO,EACtB,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,qBAAqB,GAClC,eAAe,CAAC,KAAK,CAAC;IAWzB,MAAM,IAAI,WAAW;CAGtB"}

package/dist/runtime/session/{picker-input.js → session-input.js}

@@ -1,27 +1,55 @@
 import { ComposerCleanup } from "../../core/input/composer-cleanup.js";
-import { pickerIntervention } from "../../core/models/intervention.js";
+import { callerInputIntervention } from "../../core/models/intervention.js";
 const automationScopes = new WeakMap();
+/** Keyed by the session's xterm, which every terminal view of that session shares. */
+const callerInputListeners = new WeakMap();
+/**
+ * Run `listener` whenever caller input revokes automation in this terminal's session,
+ * until the returned function unsubscribes it.
+ */
+export function onCallerInput(terminal, listener) {
+    const listeners = callerInputListeners.get(terminal.xterm);
+    listeners?.add(listener);
+    return () => {
+        listeners?.delete(listener);
+    };
+}
 /** Preserve the same ownership scope for startup writers that retain their own input policy. */
 export function withAutomatedInput(terminal, work) {
     return automationScopes.get(terminal.xterm)?.(work) ?? work();
 }
-export class PickerInputOwnership {
+export class SessionInputOwnership {
     caller;
     automated;
     current = new AbortController();
     constructor(inner) {
         let automating = false;
+        const listeners = new Set();
+        callerInputListeners.set(inner.xterm, listeners);
+        // Runs before the caller's keys are written: picker operations and the startup
+        // answers registered through onCallerInput stop, so none of their writes follow them.
         const revoke = () => {
-            this.current.abort(pickerIntervention());
+            this.current.abort(callerInputIntervention());
             this.current = new AbortController();
+            for (const listener of listeners)
+                listener();
         };
         // onData also carries parser-generated protocol replies; only input invocations
         // represent caller keys. Native startup queries must not revoke draft ownership.
         const input = inner.xterm.input.bind(inner.xterm);
         inner.xterm.input = (data, wasUserInput) => {
-            if (!automating)
-                revoke();
-            input(data, wasUserInput);
+            // Each write consumes the automation marker while xterm runs it, so input that an
+            // `onData` listener sends from inside an automated write is the caller's and revokes.
+            const automated = automating;
+            automating = false;
+            try {
+                if (!automated)
+                    revoke();
+                input(data, wasUserInput);
+            }
+            finally {
+                automating = automated;
+            }
         };
         const automate = (work) => {
             const prior = automating;
@@ -71,4 +99,4 @@ function view(inner, sendInput) {
         dispose: () => inner.dispose(),
     };
 }
-//# sourceMappingURL=picker-input.js.map
+//# sourceMappingURL=session-input.js.map

package/dist/runtime/session/session-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-input.js","sourceRoot":"","sources":["../../../src/runtime/session/session-input.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAI5E,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAGjC,CAAC;AAEJ,sFAAsF;AACtF,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAA2B,CAAC;AAEpE;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAoC,EACpC,QAAoB;IAEpB,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3D,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,OAAO,GAAG,EAAE;QACV,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAAC,QAAwB,EAAE,IAAmB;IAC9E,OAAO,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,OAAO,qBAAqB;IACvB,MAAM,CAAiB;IACvB,SAAS,CAAiB;IAC3B,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAExC,YAAY,KAAqB;QAC/B,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;QACxC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACjD,+EAA+E;QAC/E,sFAAsF;QACtF,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,KAAK,MAAM,QAAQ,IAAI,SAAS;gBAAE,QAAQ,EAAE,CAAC;QAC/C,CAAC,CAAC;QACF,gFAAgF;QAChF,iFAAiF;QACjF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE;YACzC,kFAAkF;YAClF,sFAAsF;YACtF,MAAM,SAAS,GAAG,UAAU,CAAC;YAC7B,UAAU,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS;oBAAE,MAAM,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC5B,CAAC;oBAAS,CAAC;gBACT,UAAU,GAAG,SAAS,CAAC;YACzB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,IAAmB,EAAE,EAAE;YACvC,MAAM,KAAK,GAAG,UAAU,CAAC;YACzB,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;oBAAS,CAAC;gBACT,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YAClC,MAAM,EAAE,CAAC;YACT,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CACb,OAAsB,EACtB,OAAoB,EACpB,YAAmC;QAEnC,MAAM,OAAO,GAAG,IAAI,eAAe,CACjC,IAAI,CAAC,SAAS,EACd,OAAO,EACP,OAAO,EACP,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EACnB,YAAY,CACb,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,IAAI,CAAC,KAAqB,EAAE,SAAsC;IACzE,OAAO;QACL,IAAI,KAAK;YACP,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,IAAI;YACN,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,KAAK;YACP,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,YAAY;YACd,OAAO,KAAK,CAAC,YAAY,CAAC;QAC5B,CAAC;QACD,WAAW,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;QACpD,SAAS;QACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QACpC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE;QAC9B,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE;KAC/B,CAAC;AACJ,CAAC"}

package/dist/runtime/session/shutdown-binding.d.ts

@@ -1,7 +1,8 @@
-/** Binds one session's lifecycle callbacks to coordinated shutdown (PRD §9.4). */
+/** Binds one session's lifecycle callbacks to coordinated shutdown (PRD §9.1, §9.4). */
 import type { ElwoodSessionStatus } from "../../core/types.ts";
 import type { PtyProcess } from "../../pty/types.ts";
 import type { SessionRuntime } from "../../state/runtime-paths.ts";
+import type { SessionStartupCleanup } from "../startup/cleanup.ts";
 import type { StatusEvidenceKind } from "../status-evidence.ts";
 import type { SessionLoops } from "./loops.ts";
 import type { SessionReapPolicy } from "./reap.ts";
@@ -18,6 +19,7 @@ type ShutdownBindingInput = {
     readonly submitEvidence: (kind: StatusEvidenceKind) => void;
 };
 export declare class SessionShutdownBinding {
+    private readonly input;
     private pending;
     private readonly prepareClear;
     private readonly managed;
@@ -33,6 +35,15 @@ export declare class SessionShutdownBinding {
     /** Release from submitExit finally, even when terminal-status delivery throws. */
     completeExitFinalization(): void;
     private afterExitFinalization;
+    /**
+     * The session's share of a failed startup's cleanup (PRD §9.1, C-LIFE-10). `before`
+     * closes the session and pauses its loops. `pty.terminate` ends the PTY with the
+     * session's own one-shot reaper, the one its exit path reaps with, so the group is
+     * reaped once. Once the session has seen the PTY exit, the leader's pid may be reused,
+     * so the PTY is never signaled again: only that shared reaper runs, which does nothing
+     * if the exit's reap succeeded and retries it if it failed.
+     */
+    startupCleanupResources(closeSession: () => void, cancelReadiness: () => void): SessionStartupCleanup;
     exitEvidence(): ShutdownEvidence | "terminal_exited";
 }
 export {};

package/dist/runtime/session/shutdown-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shutdown-binding.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/shutdown-binding.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEvE,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,MAAM,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;CAC7D,CAAC;AAEF,qBAAa,sBAAsB;IACjC,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiD;IAClF,OAAO,CAAC,uBAAuB,CAA2B;gBAE9C,KAAK,EAAE,oBAAoB;IAmCvC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAKzB,8FAA8F;IAC9F,qBAAqB,IAAI,IAAI;IAM7B,kFAAkF;IAClF,wBAAwB,IAAI,IAAI;IAIhC,OAAO,CAAC,qBAAqB;IAY7B,YAAY,IAAI,gBAAgB,GAAG,iBAAiB;CAGrD"}
+{"version":3,"file":"shutdown-binding.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/shutdown-binding.ts"],"names":[],"mappings":"AAAA,wFAAwF;AAExF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAInE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEvE,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,MAAM,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;CAC7D,CAAC;AAEF,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuB;IAC7C,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiD;IAClF,OAAO,CAAC,uBAAuB,CAA2B;gBAE9C,KAAK,EAAE,oBAAoB;IAoCvC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAKzB,8FAA8F;IAC9F,qBAAqB,IAAI,IAAI;IAM7B,kFAAkF;IAClF,wBAAwB,IAAI,IAAI;IAIhC,OAAO,CAAC,qBAAqB;IAY7B;;;;;;;OAOG;IACH,uBAAuB,CACrB,YAAY,EAAE,MAAM,IAAI,EACxB,eAAe,EAAE,MAAM,IAAI,GAC1B,qBAAqB;IAqBxB,YAAY,IAAI,gBAAgB,GAAG,iBAAiB;CAGrD"}

package/dist/runtime/session/shutdown-binding.js

@@ -1,8 +1,10 @@
-/** Binds one session's lifecycle callbacks to coordinated shutdown (PRD §9.4). */
+/** Binds one session's lifecycle callbacks to coordinated shutdown (PRD §9.1, §9.4). */
 import { removeSessionFiles } from "../../state/store.js";
 import { ShutdownCoordinator } from "../shutdown/coordinator.js";
+import { terminatePty } from "../shutdown/terminate.js";
 import { managedShutdown } from "./shutdown.js";
 export class SessionShutdownBinding {
+    input;
     pending;
     prepareClear;
     managed;
@@ -10,6 +12,7 @@ export class SessionShutdownBinding {
     waitingShutdowns = new Map();
     resolveExitFinalization;
     constructor(input) {
+        this.input = input;
         this.prepareClear = () => input.loops.prepareClear();
         this.managed = managedShutdown(new ShutdownCoordinator(), () => ({
             pty: input.pty,
@@ -79,6 +82,35 @@ export class SessionShutdownBinding {
         this.waitingShutdowns.set(work, pending);
         return pending;
     }
+    /**
+     * The session's share of a failed startup's cleanup (PRD §9.1, C-LIFE-10). `before`
+     * closes the session and pauses its loops. `pty.terminate` ends the PTY with the
+     * session's own one-shot reaper, the one its exit path reaps with, so the group is
+     * reaped once. Once the session has seen the PTY exit, the leader's pid may be reused,
+     * so the PTY is never signaled again: only that shared reaper runs, which does nothing
+     * if the exit's reap succeeded and retries it if it failed.
+     */
+    startupCleanupResources(closeSession, cancelReadiness) {
+        const { pty, reapPolicy, loops } = this.input;
+        return {
+            before: () => {
+                closeSession();
+                cancelReadiness();
+                loops.pause();
+            },
+            pty: {
+                pid: pty.pid,
+                terminate: async (timeouts) => {
+                    if (this.exitFinalization === undefined) {
+                        await terminatePty(pty, "SIGTERM", reapPolicy.reaper, timeouts);
+                    }
+                    else {
+                        reapPolicy.reaper.reap();
+                    }
+                },
+            },
+        };
+    }
     exitEvidence() {
         return this.pending ?? "terminal_exited";
     }

package/dist/runtime/session/shutdown-binding.js.map

@@ -1 +1 @@
-{"version":3,"file":"shutdown-binding.js","sourceRoot":"","sources":["../../../src/runtime/session/shutdown-binding.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAKlF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAIjE,OAAO,EAAE,eAAe,EAAyB,MAAM,eAAe,CAAC;AAcvE,MAAM,OAAO,sBAAsB;IACzB,OAAO,CAA+B;IAC7B,YAAY,CAAa;IACzB,OAAO,CAAqC;IACrD,gBAAgB,CAA4B;IACnC,gBAAgB,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC1E,uBAAuB,CAA2B;IAE1D,YAAY,KAA2B;QACrC,IAAI,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,IAAI,mBAAmB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/D,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,WAAW,EAAE,KAAK,IAAI,EAAE;gBACtB,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;gBACpD,+EAA+E;gBAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE;oBAAE,OAAO;gBACpD,kBAAkB,CAAC;oBACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;oBACxC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;iBACrC,CAAC,CAAC;gBACH,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YACzC,CAAC;YACD,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC1B,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC;YAC5B,CAAC;YACD,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YACrC,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAClC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;gBACpD,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE;oBAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxE,CAAC;YACD,cAAc,EAAE,KAAK,IAAI,EAAE;gBACzB,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC7B,uEAAuE;gBACvE,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC9B,CAAC;YACD,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,IAAI;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED,8FAA8F;IAC9F,qBAAqB;QACnB,IAAI,CAAC,gBAAgB,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9C,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kFAAkF;IAClF,wBAAwB;QACtB,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;IACnC,CAAC;IAEO,qBAAqB,CAAC,IAAyB;QACrD,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,mFAAmF;QACnF,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB;aAClC,IAAI,CAAC,IAAI,CAAC;aACV,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"shutdown-binding.js","sourceRoot":"","sources":["../../../src/runtime/session/shutdown-binding.ts"],"names":[],"mappings":"AAAA,wFAAwF;AAKxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAKxD,OAAO,EAAE,eAAe,EAAyB,MAAM,eAAe,CAAC;AAcvE,MAAM,OAAO,sBAAsB;IAChB,KAAK,CAAuB;IACrC,OAAO,CAA+B;IAC7B,YAAY,CAAa;IACzB,OAAO,CAAqC;IACrD,gBAAgB,CAA4B;IACnC,gBAAgB,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC1E,uBAAuB,CAA2B;IAE1D,YAAY,KAA2B;QACrC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,IAAI,mBAAmB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/D,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,WAAW,EAAE,KAAK,IAAI,EAAE;gBACtB,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;gBACpD,+EAA+E;gBAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE;oBAAE,OAAO;gBACpD,kBAAkB,CAAC;oBACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;oBACxC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;iBACrC,CAAC,CAAC;gBACH,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YACzC,CAAC;YACD,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC1B,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC;YAC5B,CAAC;YACD,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YACrC,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAClC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;gBACpD,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE;oBAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxE,CAAC;YACD,cAAc,EAAE,KAAK,IAAI,EAAE;gBACzB,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC7B,uEAAuE;gBACvE,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC9B,CAAC;YACD,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,IAAI;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED,8FAA8F;IAC9F,qBAAqB;QACnB,IAAI,CAAC,gBAAgB,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9C,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kFAAkF;IAClF,wBAAwB;QACtB,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;IACnC,CAAC;IAEO,qBAAqB,CAAC,IAAyB;QACrD,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,mFAAmF;QACnF,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB;aAClC,IAAI,CAAC,IAAI,CAAC;aACV,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;OAOG;IACH,uBAAuB,CACrB,YAAwB,EACxB,eAA2B;QAE3B,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,GAAG,EAAE;gBACX,YAAY,EAAE,CAAC;gBACf,eAAe,EAAE,CAAC;gBAClB,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;YACD,GAAG,EAAE;gBACH,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;oBAC5B,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;wBACxC,MAAM,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBAClE,CAAC;yBAAM,CAAC;wBACN,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC3B,CAAC;gBACH,CAAC;aACF;SACF,CAAC;IACJ,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC;IAC3C,CAAC;CACF"}

package/dist/runtime/session/shutdown-cleanup.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Runtime cleanup for an explicit `stop()`/`kill()` attempt (PRD §9.4 and §10,
+ * C-LIFE-10): cleanup runs after every attempt to terminate the PTY or, once it was
+ * signaled, to reap it, failed or not. So a PTY that could not be signaled, did not
+ * exit, or could not be reaped never leaves the session's runtime (its hook bridge and
+ * terminal renderer, and Codex's transcript watcher) running until a later `teardown()`.
+ */
+/**
+ * Runs `attempt` (a PTY termination, or the survivor reap of an already-signaled one),
+ * then `cleanupRuntime` whether or not `attempt` rejected, and rejects with a typed
+ * `termination_failed` (C-ERR-01). The attempt's failure stays the rejection, carrying a
+ * cleanup failure's message alongside it in `details.cleanupError`. A cleanup
+ * failure alone is wrapped too: `runCleanupSteps` rejects with a bare `Error` on the
+ * assumption that its caller wraps it, and `stop()`/`kill()` are that caller.
+ */
+export declare function shutdownAttemptThenCleanUp(attempt: () => Promise<void> | void, cleanupRuntime: () => Promise<void>): Promise<void>;
+//# sourceMappingURL=shutdown-cleanup.d.ts.map

package/dist/runtime/session/shutdown-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown-cleanup.d.ts","sourceRoot":"","sources":["../../../src/runtime/session/shutdown-cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EACnC,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/runtime/session/shutdown-cleanup.js

@@ -0,0 +1,49 @@
+/**
+ * Runtime cleanup for an explicit `stop()`/`kill()` attempt (PRD §9.4 and §10,
+ * C-LIFE-10): cleanup runs after every attempt to terminate the PTY or, once it was
+ * signaled, to reap it, failed or not. So a PTY that could not be signaled, did not
+ * exit, or could not be reaped never leaves the session's runtime (its hook bridge and
+ * terminal renderer, and Codex's transcript watcher) running until a later `teardown()`.
+ */
+import { causeDetails, ElwoodError, elwoodError, toError } from "../../core/errors.js";
+/**
+ * Runs `attempt` (a PTY termination, or the survivor reap of an already-signaled one),
+ * then `cleanupRuntime` whether or not `attempt` rejected, and rejects with a typed
+ * `termination_failed` (C-ERR-01). The attempt's failure stays the rejection, carrying a
+ * cleanup failure's message alongside it in `details.cleanupError`. A cleanup
+ * failure alone is wrapped too: `runCleanupSteps` rejects with a bare `Error` on the
+ * assumption that its caller wraps it, and `stop()`/`kill()` are that caller.
+ */
+export async function shutdownAttemptThenCleanUp(attempt, cleanupRuntime) {
+    let terminationError;
+    try {
+        await attempt();
+    }
+    catch (error) {
+        terminationError = asTerminationFailure(error);
+    }
+    try {
+        await cleanupRuntime();
+    }
+    catch (error) {
+        const cleanupError = toError(error).message;
+        if (terminationError === undefined) {
+            throw elwoodError("termination_failed", "Could not clean up the Elwood runtime.", {
+                cause: cleanupError,
+            });
+        }
+        throw elwoodError(terminationError.code, terminationError.message, {
+            ...terminationError.details,
+            cleanupError,
+        });
+    }
+    if (terminationError !== undefined)
+        throw terminationError;
+}
+/** The typed failure `stop()`/`kill()` reject with, even for an untyped throw. */
+function asTerminationFailure(error) {
+    if (error instanceof ElwoodError)
+        return error;
+    return elwoodError("termination_failed", toError(error).message, causeDetails(error));
+}
+//# sourceMappingURL=shutdown-cleanup.js.map

package/dist/runtime/session/shutdown-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown-cleanup.js","sourceRoot":"","sources":["../../../src/runtime/session/shutdown-cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEvF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAmC,EACnC,cAAmC;IAEnC,IAAI,gBAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAgB,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;QAC5C,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,WAAW,CAAC,oBAAoB,EAAE,wCAAwC,EAAE;gBAChF,KAAK,EAAE,YAAY;aACpB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,CAAC,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,CAAC,OAAO,EAAE;YACjE,GAAG,gBAAgB,CAAC,OAAO;YAC3B,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,gBAAgB,KAAK,SAAS;QAAE,MAAM,gBAAgB,CAAC;AAC7D,CAAC;AAED,kFAAkF;AAClF,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,WAAW,CAAC,oBAAoB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC"}