@with-logic/elwood 0.2.1 → 0.2.2

package/dist/core/models/clearance.d.ts

@@ -0,0 +1,38 @@
+/**
+ * How long a model dialog must stay gone before input may follow it (PRD §5.3, C-API-55).
+ * Shared by the input holds and by a picker operation's own close wait.
+ */
+/**
+ * Consecutive positive clearance READINGS that prove a dialog is gone rather than
+ * mid-repaint. A reading is one look at the latest completed frame. It need not be a new
+ * frame: idle CLIs do not repaint, so the hold counts readings spaced in time
+ * (`clearReadingGapMs`), not rendered-frame callbacks.
+ *
+ * Matches `quietFramesToSettle` in `core/turn-state.ts`, deliberately. That value IS
+ * measured: Codex's resume replay repaints in bursts with brief 1-frame quiet gaps, and 5
+ * clears them with margin (docs/cli-behavior.md, C-TURN-03). Picker repaints are the same
+ * class of problem — a dialog redrawing between stages is briefly unrecognizable — and we
+ * have NOT measured their gap length, so there is no evidence for a smaller number.
+ *
+ * The failure directions are not symmetric, which settles it. Too high only delays
+ * releasing the input hold. Too low releases queued input into a repainting picker, where
+ * Enter applies the highlighted model — the exact bug class this file exists to prevent.
+ * Absent a measurement, take the conservative measured precedent.
+ *
+ * This governs every input hold (`runtime/session/picker-hold.ts`), which is unbounded and
+ * only observes, so a longer streak costs nothing but a little latency, and an operation's
+ * close wait (`close-wait.ts`). Failure cleanup uses a shorter one on purpose: see
+ * `cleanupClearReadings` in `runtime/session/picker-cleanup.ts`.
+ */
+export declare const clearReadings = 5;
+/**
+ * The least time between two clearance readings that both count toward `clearReadings`.
+ * Below the 50 ms queued-write retry (`unsafeWriteRetryMs`), so each retry of a waiting
+ * writer counts, while readings bunched into one instant, or a burst of repaints, count
+ * once: a release takes four gaps (160 ms or more). What a reading must show differs by
+ * consumer: an input hold (`picker-hold.ts`) needs positive native-composer clearance, while
+ * a successful operation's close wait (`close-wait.ts`) needs only that the bottom-most
+ * region is not its dialog, since the composer is never clear during a turn.
+ */
+export declare const clearReadingGapMs = 40;
+//# sourceMappingURL=clearance.d.ts.map

package/dist/core/models/clearance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clearance.d.ts","sourceRoot":"","sources":["../../../src/core/models/clearance.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,aAAa,IAAI,CAAC;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC"}

package/dist/core/models/clearance.js

@@ -0,0 +1,38 @@
+/**
+ * How long a model dialog must stay gone before input may follow it (PRD §5.3, C-API-55).
+ * Shared by the input holds and by a picker operation's own close wait.
+ */
+/**
+ * Consecutive positive clearance READINGS that prove a dialog is gone rather than
+ * mid-repaint. A reading is one look at the latest completed frame. It need not be a new
+ * frame: idle CLIs do not repaint, so the hold counts readings spaced in time
+ * (`clearReadingGapMs`), not rendered-frame callbacks.
+ *
+ * Matches `quietFramesToSettle` in `core/turn-state.ts`, deliberately. That value IS
+ * measured: Codex's resume replay repaints in bursts with brief 1-frame quiet gaps, and 5
+ * clears them with margin (docs/cli-behavior.md, C-TURN-03). Picker repaints are the same
+ * class of problem — a dialog redrawing between stages is briefly unrecognizable — and we
+ * have NOT measured their gap length, so there is no evidence for a smaller number.
+ *
+ * The failure directions are not symmetric, which settles it. Too high only delays
+ * releasing the input hold. Too low releases queued input into a repainting picker, where
+ * Enter applies the highlighted model — the exact bug class this file exists to prevent.
+ * Absent a measurement, take the conservative measured precedent.
+ *
+ * This governs every input hold (`runtime/session/picker-hold.ts`), which is unbounded and
+ * only observes, so a longer streak costs nothing but a little latency, and an operation's
+ * close wait (`close-wait.ts`). Failure cleanup uses a shorter one on purpose: see
+ * `cleanupClearReadings` in `runtime/session/picker-cleanup.ts`.
+ */
+export const clearReadings = 5;
+/**
+ * The least time between two clearance readings that both count toward `clearReadings`.
+ * Below the 50 ms queued-write retry (`unsafeWriteRetryMs`), so each retry of a waiting
+ * writer counts, while readings bunched into one instant, or a burst of repaints, count
+ * once: a release takes four gaps (160 ms or more). What a reading must show differs by
+ * consumer: an input hold (`picker-hold.ts`) needs positive native-composer clearance, while
+ * a successful operation's close wait (`close-wait.ts`) needs only that the bottom-most
+ * region is not its dialog, since the composer is never clear during a turn.
+ */
+export const clearReadingGapMs = 40;
+//# sourceMappingURL=clearance.js.map

package/dist/core/models/clearance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clearance.js","sourceRoot":"","sources":["../../../src/core/models/clearance.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC"}

package/dist/core/models/close-wait.d.ts

@@ -0,0 +1,17 @@
+/**
+ * A model operation's close wait: the queue slot is released only once the operation's
+ * dialog has stayed gone, not on the first frame that lacks it (PRD §5.3, C-API-55).
+ */
+import type { ModelPickerIo, ModelPickerSpec } from "./picker.ts";
+/**
+ * Resolves once the dialog has not shown across `clearReadings` readings spaced
+ * `clearReadingGapMs` apart; any reading that shows it restarts the count. One frame without
+ * the picker is not proof it closed: a blank or half-painted repaint lacks it too, and the
+ * picker can paint again after it, where a queued Enter released by this operation would
+ * apply the highlighted model. Absence, not positive composer clearance, is what is counted:
+ * clearance excludes a running turn, and model operations run during turns (C-API-35). A
+ * reading that cannot first render everything received proves nothing, so it fails the wait
+ * (C-API-56).
+ */
+export declare function waitUntilClosed(io: Pick<ModelPickerIo, "terminal" | "signal">, spec: ModelPickerSpec, timeoutMs: number): Promise<void>;
+//# sourceMappingURL=close-wait.d.ts.map

package/dist/core/models/close-wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"close-wait.d.ts","sourceRoot":"","sources":["../../../src/core/models/close-wait.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAYlE;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,QAAQ,CAAC,EAC9C,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAqBf"}

package/dist/core/models/close-wait.js

@@ -0,0 +1,44 @@
+/**
+ * A model operation's close wait: the queue slot is released only once the operation's
+ * dialog has stayed gone, not on the first frame that lacks it (PRD §5.3, C-API-55).
+ */
+import { delay } from "../delay.js";
+import { elwoodError } from "../errors.js";
+import { writeUnsafe } from "../input/abort.js";
+import { clearReadingGapMs, clearReadings } from "./clearance.js";
+import { ownOperation } from "./rows.js";
+/**
+ * Whether the bottom-most region is still the operation's dialog: any stage of it, complete
+ * or partly painted. Deliberately weaker than `isOwnCompletePicker`, because it only waits;
+ * it never gates a write. Dialog text above a conversation or composer row (a transcript
+ * quoting the picker's title) is not the dialog and does not hold the slot (C-API-55).
+ */
+const closing = (spec, text) => spec.activeDialog(text, ownOperation) !== undefined || spec.isCandidate(text);
+/**
+ * Resolves once the dialog has not shown across `clearReadings` readings spaced
+ * `clearReadingGapMs` apart; any reading that shows it restarts the count. One frame without
+ * the picker is not proof it closed: a blank or half-painted repaint lacks it too, and the
+ * picker can paint again after it, where a queued Enter released by this operation would
+ * apply the highlighted model. Absence, not positive composer clearance, is what is counted:
+ * clearance excludes a running turn, and model operations run during turns (C-API-35). A
+ * reading that cannot first render everything received proves nothing, so it fails the wait
+ * (C-API-56).
+ */
+export async function waitUntilClosed(io, spec, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    for (let streak = 0;; await delay(clearReadingGapMs)) {
+        io.signal?.throwIfAborted();
+        // Each reading is of everything received, like each picker key: a repaint still queued
+        // for rendering would otherwise leave a stale blank frame to count (C-API-56).
+        if (await writeUnsafe(io.terminal, undefined, io.signal)) {
+            io.signal?.throwIfAborted();
+            throw elwoodError("model_automation_failed", `Could not confirm the ${spec.agent} model picker closed: its received output could not be rendered.`);
+        }
+        streak = closing(spec, io.terminal.snapshot().text) ? 0 : streak + 1;
+        if (streak >= clearReadings)
+            return;
+        if (Date.now() >= deadline)
+            throw elwoodError("model_automation_failed", `Timed out waiting for ${spec.agent} model picker to close.`);
+    }
+}
+//# sourceMappingURL=close-wait.js.map

package/dist/core/models/close-wait.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"close-wait.js","sourceRoot":"","sources":["../../../src/core/models/close-wait.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,OAAO,GAAG,CAAC,IAAqB,EAAE,IAAY,EAAE,EAAE,CACtD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAA8C,EAC9C,IAAqB,EACrB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtD,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAC5B,uFAAuF;QACvF,+EAA+E;QAC/E,IAAI,MAAM,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAC5B,MAAM,WAAW,CACf,yBAAyB,EACzB,yBAAyB,IAAI,CAAC,KAAK,kEAAkE,CACtG,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACrE,IAAI,MAAM,IAAI,aAAa;YAAE,OAAO;QACpC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YACxB,MAAM,WAAW,CACf,yBAAyB,EACzB,yBAAyB,IAAI,CAAC,KAAK,yBAAyB,CAC7D,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/core/models/dialog-region.d.ts

@@ -3,14 +3,29 @@
  * the authority of the transaction that opened it. Split from `rows.ts` (which parses the
  * rows themselves) to keep each file within the size cap. Implements C-API-24.
  */
+import { type ScrollGrammar } from "./row-block.ts";
 /**
- * The row of the last `header` when it opens the bottom-most native region, else -1.
+ * What one CLI's model dialog looks like beyond the shared block rules. Each adapter owns
+ * its own, so one CLI's layout change cannot widen what counts as the other's dialog.
+ */
+export type DialogGrammar = {
+    /** The dialog's title. */
+    readonly header: RegExp;
+    /** The phrase the closing hint row carries (`Esc to cancel`), matched in hint clauses only. */
+    readonly footer: RegExp;
+    /** A row of the CLI's own that may sit between the rows and the footer. */
+    readonly controlRow?: RegExp;
+    /** How the CLI windows a list longer than its viewport, if it does. */
+    readonly scroll?: ScrollGrammar;
+};
+/**
+ * The row of the last header when it opens the bottom-most native region, else -1.
  * Both CLIs replace the composer with the dialog, so a header with anything foreign at
  * or below it is transcript, composer, or another dialog's content. Elwood must neither
  * cancel such text (Escape would interrupt a running turn, clear staged input, or
  * dismiss a human's prompt) nor hold input on it (C-API-24).
  */
-export declare function bottomDialogRow(text: string, header: RegExp): number;
+export declare function bottomDialogRow(text: string, grammar: DialogGrammar): number;
 /** A bottom-most native picker shell may hold input before its rows/footer finish. */
-export declare function bottomDialogCandidate(text: string, header: RegExp): boolean;
+export declare function bottomDialogCandidate(text: string, grammar: DialogGrammar): boolean;
 //# sourceMappingURL=dialog-region.d.ts.map

package/dist/core/models/dialog-region.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dialog-region.d.ts","sourceRoot":"","sources":["../../../src/core/models/dialog-region.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA0GH;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAOpE;AAED,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAI3E"}
+{"version":3,"file":"dialog-region.d.ts","sourceRoot":"","sources":["../../../src/core/models/dialog-region.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAErF;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,0BAA0B;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC,CAAC;AA4FF;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,CAO5E;AAED,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAInF"}

package/dist/core/models/dialog-region.js

@@ -3,25 +3,17 @@
  * the authority of the transaction that opened it. Split from `rows.ts` (which parses the
  * rows themselves) to keep each file within the size cap. Implements C-API-24.
  */
-import { rowPattern } from "./rows.js";
+import { caretRow, numberedRow, RowBlock } from "./row-block.js";
 // An agent reply or the composer renders below any header the transcript merely quotes.
 const replyRow = /^\s*[●•⏺]/;
-const caretRow = /^\s*[❯›]/;
-const numberedRow = /^\s*[❯›]?\s*(\d+)[.)]\s/;
 // Both CLIs separate the transcript from the composer or a lower dialog with one of these.
 const blockEnd = /^\s*(?:[─━]{3}.*)?$/;
-// Every captured picker and reasoning screen closes with one of these hint rows. The row is
-// ONLY hints — `key to action` clauses joined by `·` — so the phrase cannot be matched
-// inside a sentence of the agent's own prose that happens to mention pressing Esc.
-const dialogFooter = /\b(?:esc to cancel|esc to go back)\b/i;
+// The closing hint row is ONLY hints — `key to action` clauses joined by `·` — so the footer
+// phrase cannot be matched inside a sentence of the agent's own prose that mentions Esc.
 const hintClause = /^[^.!?]{0,48}$/;
-// Claude paints a radio-style control row under its rows (`◉ xHigh effort ←/→ to adjust`).
-// It is part of the dialog, so it may sit between the rows and the footer — but it is a
-// marker row, not free prose, which is what keeps this from reopening the mid-list gap.
-const controlRow = /^\s*[◉○◎●]\s*\S/;
 /** A closing hint row: the footer phrase standing on its own row, not buried in prose. */
-function isFooterRow(line) {
-    if (!dialogFooter.test(line))
+function isFooterRow(line, grammar) {
+    if (!grammar.footer.test(line))
         return false;
     return line
         .split(/[·•]/)
@@ -43,14 +35,17 @@ function opensRegion(header) {
  * caret, or numbered row — those belong to the transcript, the composer, or another list.
  * Once the rows have STARTED the block is contiguous (real dialogs paint it in one run), so
  * only a blank or rule, the CLI's own control row (`◉ xHigh effort ←/→ to adjust`), or the
- * closing hint row may appear; free prose mid-list means these rows are not one block.
+ * closing hint row may appear; free prose mid-list means these rows are not one block. The
+ * control row is checked first: Claude's High-effort row (`● High effort …`) wears a bullet.
  */
-function mayAppearBesideRows(line, rowsStarted) {
+function mayAppearBesideRows(line, rowsStarted, grammar) {
+    if (rowsStarted && grammar.controlRow?.test(line) === true)
+        return true;
     if (replyRow.test(line) || caretRow.test(line) || numberedRow.test(line))
         return false;
     if (!rowsStarted)
         return true;
-    return blockEnd.test(line) || controlRow.test(line) || isFooterRow(line);
+    return blockEnd.test(line) || isFooterRow(line, grammar);
 }
 /**
  * Whether `lines` (the header row down to the end of the viewport) hold one COMPLETE
@@ -64,7 +59,10 @@ function mayAppearBesideRows(line, rowsStarted) {
  * contiguous block of picker rows numbered from 1 with at most one cursor. A staged
  * composer line, a permission or approval option, or a second numbered list is on a
  * caret row outside that block, restarts the numbering, follows a blank or rule, or
- * lacks the description column, so none of them can pass for the dialog.
+ * lacks the description column, so none of them can pass for the dialog. A windowed
+ * list (Claude's, longer than ten rows) is the one block that may start past 1: its first
+ * row wears the grammar's `above` marker, a `below` row ends it, and its overflow line
+ * (`… +K models`) may stand only directly under its last row.
  *
  * Nothing missing and nothing after: the block renders at least two numbered rows and
  * then the CLI's closing hint row, which TERMINATES it — only blank lines and rules may
@@ -74,12 +72,11 @@ function mayAppearBesideRows(line, rowsStarted) {
  *
  * `lines` always starts at the matched header row, so `header` is never absent.
  */
-function isNativeRegion(lines, complete = true) {
+function isNativeRegion(lines, grammar, complete) {
     const [header, ...body] = lines;
     if (!opensRegion(header))
         return false;
-    let next = 1;
-    let cursors = 0;
+    const block = new RowBlock({ complete, scroll: grammar.scroll });
     let footer = false;
     for (const line of body) {
         // Nothing but blank lines and rules may follow the closing hint row: a complete
@@ -92,42 +89,34 @@ function isNativeRegion(lines, complete = true) {
                 return false;
             continue;
         }
-        // A row must be a full picker row (`1. Label  Description`) numbered in sequence.
-        // Anything else — a renumbered second list, a row without the description column —
-        // is not this dialog's, so the region is not one native block.
-        const candidateRow = !complete && numberedRow.test(line);
-        if (!(rowPattern.test(line) || candidateRow) || Number(numberedRow.exec(line)?.[1]) !== next) {
-            if (!mayAppearBesideRows(line, next > 1))
-                return false;
-            footer = isFooterRow(line);
+        if (block.accept(line))
             continue;
-        }
-        next += 1;
-        if (caretRow.test(line))
-            cursors += 1;
+        if (!mayAppearBesideRows(line, block.rowCount > 0, grammar))
+            return false;
+        footer = isFooterRow(line, grammar);
     }
-    return cursors <= 1 && (!complete || (footer && next > minimumRows));
+    return block.cursorCount <= 1 && (!complete || (footer && block.rowCount >= minimumRows));
 }
 /**
- * The row of the last `header` when it opens the bottom-most native region, else -1.
+ * The row of the last header when it opens the bottom-most native region, else -1.
  * Both CLIs replace the composer with the dialog, so a header with anything foreign at
  * or below it is transcript, composer, or another dialog's content. Elwood must neither
  * cancel such text (Escape would interrupt a running turn, clear staged input, or
  * dismiss a human's prompt) nor hold input on it (C-API-24).
  */
-export function bottomDialogRow(text, header) {
+export function bottomDialogRow(text, grammar) {
     const lines = text.split("\n");
-    const start = lines.findLastIndex((line) => header.test(line));
+    const start = lines.findLastIndex((line) => grammar.header.test(line));
     // No header, no dialog. Scanning from row 0 instead would ask whether the whole viewport
     // happens to look native, which is a different and much weaker question.
     if (start < 0)
         return -1;
-    return isNativeRegion(lines.slice(start)) ? start : -1;
+    return isNativeRegion(lines.slice(start), grammar, true) ? start : -1;
 }
 /** A bottom-most native picker shell may hold input before its rows/footer finish. */
-export function bottomDialogCandidate(text, header) {
+export function bottomDialogCandidate(text, grammar) {
     const lines = text.split("\n");
-    const start = lines.findLastIndex((line) => header.test(line));
-    return start >= 0 && isNativeRegion(lines.slice(start), false);
+    const start = lines.findLastIndex((line) => grammar.header.test(line));
+    return start >= 0 && isNativeRegion(lines.slice(start), grammar, false);
 }
 //# sourceMappingURL=dialog-region.js.map

package/dist/core/models/dialog-region.js.map

@@ -1 +1 @@
-{"version":3,"file":"dialog-region.js","sourceRoot":"","sources":["../../../src/core/models/dialog-region.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,wFAAwF;AACxF,MAAM,QAAQ,GAAG,WAAW,CAAC;AAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,4FAA4F;AAC5F,uFAAuF;AACvF,mFAAmF;AACnF,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAC7D,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,2FAA2F;AAC3F,wFAAwF;AACxF,wFAAwF;AACxF,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAErC,0FAA0F;AAC1F,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,IAAI;SACR,KAAK,CAAC,MAAM,CAAC;SACb,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnF,CAAC;AACD,2FAA2F;AAC3F,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;;;;GAKG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,WAAoB;IAC7D,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,cAAc,CAAC,KAAwB,EAAE,QAAQ,GAAG,IAAI;IAC/D,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,KAA8B,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,gFAAgF;QAChF,oFAAoF;QACpF,iFAAiF;QACjF,iFAAiF;QACjF,gDAAgD;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,SAAS;QACX,CAAC;QACD,kFAAkF;QAClF,mFAAmF;QACnF,+DAA+D;QAC/D,MAAM,YAAY,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7F,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvD,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,yFAAyF;IACzF,yEAAyE;IACzE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IACzB,OAAO,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAc;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,OAAO,KAAK,IAAI,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACjE,CAAC"}
+{"version":3,"file":"dialog-region.js","sourceRoot":"","sources":["../../../src/core/models/dialog-region.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAsB,MAAM,gBAAgB,CAAC;AAiBrF,wFAAwF;AACxF,MAAM,QAAQ,GAAG,WAAW,CAAC;AAC7B,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,6FAA6F;AAC7F,yFAAyF;AACzF,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC,0FAA0F;AAC1F,SAAS,WAAW,CAAC,IAAY,EAAE,OAAsB;IACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,IAAI;SACR,KAAK,CAAC,MAAM,CAAC;SACb,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnF,CAAC;AACD,2FAA2F;AAC3F,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;;;;GAKG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,WAAoB,EAAE,OAAsB;IACrF,IAAI,WAAW,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,cAAc,CAAC,KAAwB,EAAE,OAAsB,EAAE,QAAiB;IACzF,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,KAA8B,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,gFAAgF;QAChF,oFAAoF;QACpF,iFAAiF;QACjF,iFAAiF;QACjF,gDAAgD;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1E,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAsB;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,yFAAyF;IACzF,yEAAyE;IACzE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IACzB,OAAO,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,OAAsB;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,OAAO,KAAK,IAAI,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAC1E,CAAC"}

package/dist/core/models/input.d.ts

@@ -1,3 +1,12 @@
+/** Revalidate the active picker immediately before automation writes (PRD §5.3, C-API-23/24/56). */
 import type { ModelPickerIo } from "./picker.ts";
-export declare function sendPickerInput(io: Pick<ModelPickerIo, "terminal" | "blocked">, input: string, expected: (text: string) => boolean, ownsBlockingDialog?: boolean): void | Promise<void>;
+/**
+ * Writes one picker key, decided on everything RECEIVED rather than the last rendered frame:
+ * a permission or hook prompt can already be in the PTY buffer while the snapshot still shows
+ * the picker, and a key chosen from that stale frame would change the prompt's selection.
+ * `writeUnsafe` first renders and observes all received output; when the screen cannot be
+ * vouched for, the key is withheld and the operation fails. Otherwise the dialog is
+ * revalidated on that observed frame and the key is written before further output arrives.
+ */
+export declare function sendPickerInput(io: Pick<ModelPickerIo, "terminal" | "blocked" | "signal">, input: string, expected: (text: string) => boolean, ownsBlockingDialog?: boolean): Promise<void>;
 //# sourceMappingURL=input.d.ts.map

package/dist/core/models/input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"input.d.ts","sourceRoot":"","sources":["../../../src/core/models/input.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,wBAAgB,eAAe,CAC7B,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,SAAS,CAAC,EAC/C,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,EACnC,kBAAkB,UAAQ,GACzB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAQtB"}
+{"version":3,"file":"input.d.ts","sourceRoot":"","sources":["../../../src/core/models/input.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAIpG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC,EAC1D,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,EACnC,kBAAkB,UAAQ,GACzB,OAAO,CAAC,IAAI,CAAC,CAef"}

package/dist/core/models/input.js

@@ -1,6 +1,19 @@
-/** Revalidate the active picker immediately before automation writes (PRD §5.3, C-API-23/24). */
+/** Revalidate the active picker immediately before automation writes (PRD §5.3, C-API-23/24/56). */
 import { elwoodError } from "../errors.js";
-export function sendPickerInput(io, input, expected, ownsBlockingDialog = false) {
+import { writeUnsafe } from "../input/abort.js";
+/**
+ * Writes one picker key, decided on everything RECEIVED rather than the last rendered frame:
+ * a permission or hook prompt can already be in the PTY buffer while the snapshot still shows
+ * the picker, and a key chosen from that stale frame would change the prompt's selection.
+ * `writeUnsafe` first renders and observes all received output; when the screen cannot be
+ * vouched for, the key is withheld and the operation fails. Otherwise the dialog is
+ * revalidated on that observed frame and the key is written before further output arrives.
+ */
+export async function sendPickerInput(io, input, expected, ownsBlockingDialog = false) {
+    if (await writeUnsafe(io.terminal, undefined, io.signal)) {
+        io.signal?.throwIfAborted();
+        throw elwoodError("model_automation_failed", "The model picker screen could not be verified before input could be sent.");
+    }
     if ((!ownsBlockingDialog && io.blocked?.()) || !expected(io.terminal.snapshot().text)) {
         throw elwoodError("model_automation_failed", "The model picker was replaced before input could be sent.");
     }

package/dist/core/models/input.js.map

@@ -1 +1 @@
-{"version":3,"file":"input.js","sourceRoot":"","sources":["../../../src/core/models/input.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3C,MAAM,UAAU,eAAe,CAC7B,EAA+C,EAC/C,KAAa,EACb,QAAmC,EACnC,kBAAkB,GAAG,KAAK;IAE1B,IAAI,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,WAAW,CACf,yBAAyB,EACzB,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../../../src/core/models/input.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAEpG,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAA0D,EAC1D,KAAa,EACb,QAAmC,EACnC,kBAAkB,GAAG,KAAK;IAE1B,IAAI,MAAM,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAC5B,MAAM,WAAW,CACf,yBAAyB,EACzB,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,WAAW,CACf,yBAAyB,EACzB,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC"}

package/dist/core/models/intervention.d.ts

@@ -1,3 +1,3 @@
-export declare function pickerIntervention(): Error;
-export declare function isPickerIntervention(reason: unknown): boolean;
+export declare function callerInputIntervention(): Error;
+export declare function isCallerInputIntervention(reason: unknown): boolean;
 //# sourceMappingURL=intervention.d.ts.map

package/dist/core/models/intervention.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"intervention.d.ts","sourceRoot":"","sources":["../../../src/core/models/intervention.ts"],"names":[],"mappings":"AAKA,wBAAgB,kBAAkB,IAAI,KAAK,CAO1C;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAE7D"}
+{"version":3,"file":"intervention.d.ts","sourceRoot":"","sources":["../../../src/core/models/intervention.ts"],"names":[],"mappings":"AAQA,wBAAgB,uBAAuB,IAAI,KAAK,CAO/C;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAElE"}

package/dist/core/models/intervention.js

@@ -1,12 +1,15 @@
-/** Private provenance for a picker generation revoked by human input (C-API-55, C-CODEX-14). */
+/**
+ * Private provenance for automation that raw caller input revoked: a picker operation
+ * (C-API-55, C-CODEX-14), staged turn input, composer cleanup, or a native question answer.
+ */
 import { elwoodError } from "../errors.js";
 const interventions = new WeakSet();
-export function pickerIntervention() {
+export function callerInputIntervention() {
     const error = elwoodError("model_automation_failed", "Raw input replaced the model picker operation.");
     interventions.add(error);
     return error;
 }
-export function isPickerIntervention(reason) {
+export function isCallerInputIntervention(reason) {
     return reason instanceof Error && interventions.has(reason);
 }
 //# sourceMappingURL=intervention.js.map

package/dist/core/models/intervention.js.map

@@ -1 +1 @@
-{"version":3,"file":"intervention.js","sourceRoot":"","sources":["../../../src/core/models/intervention.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,aAAa,GAAG,IAAI,OAAO,EAAS,CAAC;AAE3C,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,WAAW,CACvB,yBAAyB,EACzB,gDAAgD,CACjD,CAAC;IACF,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,OAAO,MAAM,YAAY,KAAK,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"intervention.js","sourceRoot":"","sources":["../../../src/core/models/intervention.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,aAAa,GAAG,IAAI,OAAO,EAAS,CAAC;AAE3C,MAAM,UAAU,uBAAuB;IACrC,MAAM,KAAK,GAAG,WAAW,CACvB,yBAAyB,EACzB,gDAAgD,CACjD,CAAC;IACF,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAe;IACvD,OAAO,MAAM,YAAY,KAAK,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9D,CAAC"}

package/dist/core/models/own-picker.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The one gate for every picker key and every frame the window walk reads.
+ * Implements PRD §5.3 and C-API-24.
+ */
+import type { ModelPickerSpec } from "./picker.ts";
+/**
+ * True only while THIS operation's own COMPLETE picker is the bottom-most region: never its
+ * `painting` shell and never a `follow-up` stage. It gates every shared navigation,
+ * selection, and cancelling key, each adapter's selecting key, and every frame the window
+ * walk reads; a follow-up is answered only by the adapter's `apply`, under that stage's own
+ * guard (Claude's cache warning, Codex's reasoning level).
+ *
+ * Elwood is inside the transaction that wrote `/model`, so these reads carry its authority
+ * (`ownOperation`). A header match alone is untrusted: a transcript or the agent's own output
+ * can print `Select model`, so navigating or Escaping on it could send keys into a running
+ * turn, the real composer, or another prompt (C-API-24). The header gates only the `/model`
+ * open wait (`openAndParse`); the cursor-settle wait reads a parsed row, and the close wait
+ * (`waitUntilClosed`) reads only the bottom-most region. None of them writes.
+ */
+export declare const isOwnCompletePicker: (spec: Pick<ModelPickerSpec, "activeDialog">) => (text: string) => boolean;
+//# sourceMappingURL=own-picker.d.ts.map

package/dist/core/models/own-picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"own-picker.d.ts","sourceRoot":"","sources":["../../../src/core/models/own-picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,GAC7B,MAAM,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,MAAM,MAAM,YACV,CAAC"}

package/dist/core/models/own-picker.js

@@ -0,0 +1,21 @@
+/**
+ * The one gate for every picker key and every frame the window walk reads.
+ * Implements PRD §5.3 and C-API-24.
+ */
+import { ownOperation } from "./rows.js";
+/**
+ * True only while THIS operation's own COMPLETE picker is the bottom-most region: never its
+ * `painting` shell and never a `follow-up` stage. It gates every shared navigation,
+ * selection, and cancelling key, each adapter's selecting key, and every frame the window
+ * walk reads; a follow-up is answered only by the adapter's `apply`, under that stage's own
+ * guard (Claude's cache warning, Codex's reasoning level).
+ *
+ * Elwood is inside the transaction that wrote `/model`, so these reads carry its authority
+ * (`ownOperation`). A header match alone is untrusted: a transcript or the agent's own output
+ * can print `Select model`, so navigating or Escaping on it could send keys into a running
+ * turn, the real composer, or another prompt (C-API-24). The header gates only the `/model`
+ * open wait (`openAndParse`); the cursor-settle wait reads a parsed row, and the close wait
+ * (`waitUntilClosed`) reads only the bottom-most region. None of them writes.
+ */
+export const isOwnCompletePicker = (spec) => (text) => spec.activeDialog(text, ownOperation) === "picker";
+//# sourceMappingURL=own-picker.js.map

package/dist/core/models/own-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"own-picker.js","sourceRoot":"","sources":["../../../src/core/models/own-picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,CAAC,IAA2C,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAChE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,QAAQ,CAAC"}

package/dist/core/models/picker.d.ts

@@ -2,24 +2,39 @@
  * Shared /model picker automation for adapter sessions.
  * Implements PRD §5.3, §5.7, C-API-23, and C-API-24.
  */
+import type { ElwoodAgentKind } from "../activity/index.ts";
+import type { ObservedTerminal } from "../input/abort.ts";
 import type { AgentModelOption, ModelDialogAuthority, ModelDialogStage, ParsedModelPicker } from "./rows.ts";
-import { type ScreenTerminal } from "./tui-screen.ts";
+export { isOwnCompletePicker } from "./own-picker.ts";
 export declare function pickerTimeout(options?: {
     readonly timeoutMs?: number;
 }): number;
 export type ModelPickerIo = {
-    readonly terminal: ScreenTerminal;
+    /** Every key is written behind its received-output barrier (C-API-56). */
+    readonly terminal: ObservedTerminal;
     readonly blocked?: () => boolean;
     readonly signal?: AbortSignal;
     readonly submit: (command: string, signal: AbortSignal) => Promise<void>;
 };
 export type ModelPickerSpec = {
-    readonly agent: string;
+    readonly agent: ElwoodAgentKind;
     /** A native model-dialog shell can hold input before its rows finish. */
     readonly isCandidate: (text: string) => boolean;
     /** Positive native composer evidence for releasing a foreign-dialog hold. */
     readonly isClear: (text: string) => boolean;
-    readonly isOpen: (text: string) => boolean;
+    /**
+     * Only that the picker's title is on screen: a transcript can print it, and a picker
+     * still painting shows it over stale rows. It gates the `/model` open wait and may hold
+     * input; it never ends a close wait (which reads only the bottom-most region) and never
+     * authorizes a write.
+     */
+    readonly hasPickerHeader: (text: string) => boolean;
+    /**
+     * Positive evidence that the bottom-most dialog is the caller's own, which replaced
+     * ours: Claude's `PreModelSwitch` hook confirmation. Elwood neither answers it nor keeps
+     * it as a survivor; it is left for the caller (PRD §5.3).
+     */
+    readonly isCallerDialog: (text: string) => boolean;
     /**
      * The live, bottom-most model dialog: the only one Elwood may cancel or hold input on.
      * `authority` is REQUIRED and carries proof Elwood opened this dialog (see
@@ -29,8 +44,23 @@ export type ModelPickerSpec = {
      */
     readonly activeDialog: (text: string, authority: ModelDialogAuthority) => ModelDialogStage | undefined;
     readonly parse: (text: string) => ParsedModelPicker;
+    /**
+     * Completes listed rows from state the picker does not render, inside the operation's
+     * queue slot and under its deadline/termination `signal`. Codex reads its configured
+     * default here (PRD §5.3).
+     */
+    readonly withDefaults?: (options: readonly AgentModelOption[], signal: AbortSignal) => Promise<readonly AgentModelOption[]>;
     readonly apply: (io: ModelPickerIo, timeoutMs: number) => Promise<void>;
 };
+/**
+ * Every row the picker lists, rows outside its window included. Cancels with Escape after the
+ * walk, so neither the model nor its effort changes, and returns once the picker is closed.
+ */
 export declare function listPickerModels(io: ModelPickerIo, spec: ModelPickerSpec, timeoutMs: number): Promise<readonly AgentModelOption[]>;
+/**
+ * Selects `id`, walking a scrolling window only until that row is rendered, then moving to it
+ * and applying it with the adapter's own `apply`. An unknown id cancels, and the rejection
+ * lists every row the walk saw.
+ */
 export declare function setPickerModel(io: ModelPickerIo, spec: ModelPickerSpec, id: string, timeoutMs: number): Promise<void>;
 //# sourceMappingURL=picker.d.ts.map

package/dist/core/models/picker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"picker.d.ts","sourceRoot":"","sources":["../../../src/core/models/picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAGL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAEzB,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE/E;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,CACrB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,oBAAoB,KAC5B,gBAAgB,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzE,CAAC;AAgCF,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAWtC;AAED,wBAAsB,cAAc,CAClC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CA4Bf"}
+{"version":3,"file":"picker.d.ts","sourceRoot":"","sources":["../../../src/core/models/picker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAK1D,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,WAAW,CAAC;AAInB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE/E;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACnD;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,CACrB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,oBAAoB,KAC5B,gBAAgB,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzE,CAAC;AAKF;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAMtC;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAuCf"}