@with-logic/elwood 0.2.1 → 0.2.2

package/dist/core/models/window.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Reads the rows a model picker hides outside its scrolling window.
+ * Implements PRD §5.3 (`listModels` returns every listed row; `setModel` selects any),
+ * C-API-23, and C-API-24.
+ */
+import type { ModelPickerIo, ModelPickerSpec } from "./picker.ts";
+import type { AgentModelOption, ParsedModelPicker } from "./rows.ts";
+export type PickerWalk = {
+    /** One deadline for the whole walk, however many rows the picker claims. */
+    readonly timeoutMs: number;
+    /** Stop once a rendered option matches: `setModel` needs its target on screen, no more. */
+    readonly found?: (option: AgentModelOption) => boolean;
+};
+export type RevealedPicker = {
+    /** The frame the walk ended on: the cursor and the window it is rendering now. */
+    readonly frame: ParsedModelPicker;
+    /** Every row seen on the way, in picker order. */
+    readonly options: readonly AgentModelOption[];
+};
+/**
+ * Walks the cursor until every row the list holds has been rendered, or `found` matches one.
+ * Claude 2.1.310 renders at most ten rows of a longer list. Rows keep their absolute numbers,
+ * so a window starting past row 1 hides the rows above it, and the overflow line under its
+ * last row counts those below. The window follows the cursor, so the walk moves it one row
+ * at a time toward rows not yet seen, below first and then above, and waits for each move
+ * to land before the next key, reading it on the render that paints it. It never sends a
+ * key past either end of the list, where the CLI wraps: it moves down only while the list's
+ * last row is unseen, so the cursor is above it, and up only while the first is. The
+ * windows seen are contiguous (each contains the row next to the previous cursor), so the
+ * list is complete once it holds as many rows as the list's length. Arrow keys only move
+ * the highlight; what follows the walk is the caller's: a listing cancels with Escape,
+ * which keeps model and effort, and a selection moves to its target and applies it. A list
+ * that fits its window costs no key, which is every Codex list, since Codex's grammar
+ * rejects a scrolled one.
+ *
+ * The rendered count and row numbers are validated, not trusted, whenever the walk still
+ * needs rows (a listing, or `setModel` before its target is rendered). The list's length is
+ * read from the first frame that states one; a frame that marks rows hidden below without
+ * a positive count, has a row number or length that is not an exact integer, or states a
+ * different length is never acted on, so the walk times out if no other frame renders.
+ * A frame that marks nothing hidden is a list ending at its highest row. With the cursor on
+ * row 10, `❯` replaces the `↓` marker, so only the count line says more rows follow; that
+ * relies on Claude painting the count before the footer the complete picker needs
+ * (`docs/cli-behavior.md`). Only rows actually rendered are stored.
+ */
+export declare function revealPickerRows(io: ModelPickerIo, spec: Pick<ModelPickerSpec, "agent" | "parse" | "activeDialog">, opening: ParsedModelPicker, walk: PickerWalk): Promise<RevealedPicker>;
+/** The highlighted option, or undefined while no cursor is painted. */
+export declare function cursorOption(parsed: ParsedModelPicker): AgentModelOption | undefined;
+//# sourceMappingURL=window.d.ts.map

package/dist/core/models/window.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"window.d.ts","sourceRoot":"","sources":["../../../src/core/models/window.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAa,MAAM,WAAW,CAAC;AAGhF,MAAM,MAAM,UAAU,GAAG;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC;CACxD,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,kDAAkD;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC/C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,OAAO,GAAG,cAAc,CAAC,EAC/D,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CA4CzB;AAeD,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,SAAS,CAEpF"}

package/dist/core/models/window.js

@@ -0,0 +1,105 @@
+/**
+ * Reads the rows a model picker hides outside its scrolling window.
+ * Implements PRD §5.3 (`listModels` returns every listed row; `setModel` selects any),
+ * C-API-23, and C-API-24.
+ */
+import { elwoodError } from "../errors.js";
+import { arrowDown, arrowUp } from "../input/constants.js";
+import { sendPickerInput } from "./input.js";
+import { isOwnCompletePicker } from "./own-picker.js";
+import { waitForScreen } from "./tui-screen.js";
+/**
+ * Walks the cursor until every row the list holds has been rendered, or `found` matches one.
+ * Claude 2.1.310 renders at most ten rows of a longer list. Rows keep their absolute numbers,
+ * so a window starting past row 1 hides the rows above it, and the overflow line under its
+ * last row counts those below. The window follows the cursor, so the walk moves it one row
+ * at a time toward rows not yet seen, below first and then above, and waits for each move
+ * to land before the next key, reading it on the render that paints it. It never sends a
+ * key past either end of the list, where the CLI wraps: it moves down only while the list's
+ * last row is unseen, so the cursor is above it, and up only while the first is. The
+ * windows seen are contiguous (each contains the row next to the previous cursor), so the
+ * list is complete once it holds as many rows as the list's length. Arrow keys only move
+ * the highlight; what follows the walk is the caller's: a listing cancels with Escape,
+ * which keeps model and effort, and a selection moves to its target and applies it. A list
+ * that fits its window costs no key, which is every Codex list, since Codex's grammar
+ * rejects a scrolled one.
+ *
+ * The rendered count and row numbers are validated, not trusted, whenever the walk still
+ * needs rows (a listing, or `setModel` before its target is rendered). The list's length is
+ * read from the first frame that states one; a frame that marks rows hidden below without
+ * a positive count, has a row number or length that is not an exact integer, or states a
+ * different length is never acted on, so the walk times out if no other frame renders.
+ * A frame that marks nothing hidden is a list ending at its highest row. With the cursor on
+ * row 10, `❯` replaces the `↓` marker, so only the count line says more rows follow; that
+ * relies on Claude painting the count before the footer the complete picker needs
+ * (`docs/cli-behavior.md`). Only rows actually rendered are stored.
+ */
+export async function revealPickerRows(io, spec, opening, walk) {
+    const deadline = performance.now() + walk.timeoutMs;
+    const ownCompletePicker = isOwnCompletePicker(spec);
+    const seen = new Map();
+    /**
+     * The first frame of the own complete picker that `usable` accepts. Claude repaints a
+     * scrolled window across more than one render, so a frame read on one of them can show
+     * the new rows above a stale count, or before the count is painted: such a frame is
+     * waited out, and fails the walk only if no usable one renders by its deadline.
+     */
+    const next = async (usable, label) => spec.parse(await waitForScreen(io.terminal, (screen) => ownCompletePicker(screen) && usable(spec.parse(screen)), deadline - performance.now(), `${spec.agent} picker ${label}`, io.signal));
+    let frame = opening;
+    let length = listLength(opening);
+    for (;;) {
+        for (const row of frame.rows)
+            if (!seen.has(row.absoluteRowNumber))
+                seen.set(row.absoluteRowNumber, row);
+        if (walk.found !== undefined && frame.options.some(walk.found))
+            return revealed(frame, seen);
+        if (length === undefined) {
+            frame = await next((counted) => listLength(counted) !== undefined, "row count");
+            length = listLength(frame);
+            continue;
+        }
+        if (seen.size === length)
+            return revealed(frame, seen);
+        const cursor = frame.rows[frame.cursorOptionIndex];
+        if (cursor === undefined)
+            throw walkFailed("Could not locate the picker cursor.", seen);
+        const down = !seen.has(length);
+        const nextAbsoluteRowNumber = cursor.absoluteRowNumber + (down ? 1 : -1);
+        await sendPickerInput(io, down ? arrowDown : arrowUp, ownCompletePicker);
+        const listed = length;
+        frame = await next((moved) => cursorAbsoluteRowNumber(moved) === nextAbsoluteRowNumber && listLength(moved) === listed, `cursor on row ${nextAbsoluteRowNumber} of ${listed}`);
+    }
+}
+/**
+ * The list's length by `frame`'s own account, its highest rendered row plus those hidden, or
+ * undefined when the parser marks the count unknown (rows hidden below without a positive
+ * count) or the sum is not an exactly representable integer. The grammar already refuses
+ * row numbers that round. A frame that marks nothing hidden ends at its highest row.
+ */
+function listLength(frame) {
+    if (frame.hiddenRowCountBelow === undefined)
+        return undefined;
+    const length = Math.max(0, ...frame.rows.map((row) => row.absoluteRowNumber)) + frame.hiddenRowCountBelow;
+    return Number.isSafeInteger(length) ? length : undefined;
+}
+/** The highlighted option, or undefined while no cursor is painted. */
+export function cursorOption(parsed) {
+    return parsed.options[parsed.cursorOptionIndex];
+}
+function cursorAbsoluteRowNumber(parsed) {
+    return parsed.rows[parsed.cursorOptionIndex]?.absoluteRowNumber;
+}
+function inPickerOrder(seen) {
+    return [...seen.values()]
+        .sort((left, right) => left.absoluteRowNumber - right.absoluteRowNumber)
+        .map((row) => row.option);
+}
+function revealed(frame, seen) {
+    return { frame, options: inPickerOrder(seen) };
+}
+function walkFailed(reason, seen) {
+    return elwoodError("model_automation_failed", reason, {
+        available: inPickerOrder(seen).map((option) => option.id),
+    });
+}
+//# sourceMappingURL=window.js.map

package/dist/core/models/window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"window.js","sourceRoot":"","sources":["../../../src/core/models/window.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAgBhD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAiB,EACjB,IAA+D,EAC/D,OAA0B,EAC1B,IAAgB;IAEhB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IACpD,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C;;;;;OAKG;IACH,MAAM,IAAI,GAAG,KAAK,EAAE,MAA6C,EAAE,KAAa,EAAE,EAAE,CAClF,IAAI,CAAC,KAAK,CACR,MAAM,aAAa,CACjB,EAAE,CAAC,QAAQ,EACX,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EACnE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,EAC5B,GAAG,IAAI,CAAC,KAAK,WAAW,KAAK,EAAE,EAC/B,EAAE,CAAC,MAAM,CACV,CACF,CAAC;IACJ,IAAI,KAAK,GAAG,OAAO,CAAC;IACpB,IAAI,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC;QACR,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI;YAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,WAAW,CAAC,CAAC;YAChF,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,UAAU,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,qBAAqB,GAAG,MAAM,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,KAAK,GAAG,MAAM,IAAI,CAChB,CAAC,KAAK,EAAE,EAAE,CACR,uBAAuB,CAAC,KAAK,CAAC,KAAK,qBAAqB,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,MAAM,EAC1F,iBAAiB,qBAAqB,OAAO,MAAM,EAAE,CACtD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAwB;IAC1C,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,MAAM,GACV,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC7F,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,MAAyB;IACpD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAyB;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CAAC,IAAoC;IACzD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;SACtB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;SACvE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB,EAAE,IAAoC;IAC9E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,IAAoC;IACtE,OAAO,WAAW,CAAC,yBAAyB,EAAE,MAAM,EAAE;QACpD,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC"}

package/dist/core/path-trust.d.ts

@@ -0,0 +1,11 @@
+/** Shared owner/mode rules for replaceable path namespaces (PRD §8.1/§12A.5, C-STATE-11/C-CLI-15). */
+import type { Stats } from "node:fs";
+export type PathUser = {
+    readonly uid: number;
+    readonly gid: number;
+};
+/** CLI-compatible mode-bit policy; ACLs and extra members of a private group are not inspected. */
+export declare function lookupFault(info: Pick<Stats, "uid" | "gid" | "mode">, user: PathUser, directory: string): string | undefined;
+/** Sticky directories protect only entries belonging to the user or root. */
+export declare function ownerFault(info: Pick<Stats, "uid">, user: PathUser, path: string, kind: "directory" | "link"): string | undefined;
+//# sourceMappingURL=path-trust.d.ts.map

package/dist/core/path-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-trust.d.ts","sourceRoot":"","sources":["../../src/core/path-trust.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,MAAM,QAAQ,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAKtE,mGAAmG;AACnG,wBAAgB,WAAW,CACzB,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC,EACzC,IAAI,EAAE,QAAQ,EACd,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAQpB;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CACxB,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EACxB,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,WAAW,GAAG,MAAM,GACzB,MAAM,GAAG,SAAS,CAGpB"}

package/dist/core/path-trust.js

@@ -0,0 +1,21 @@
+const STICKY = 0o1000;
+const GROUP_WRITE = 0o020;
+const OTHER_WRITE = 0o002;
+/** CLI-compatible mode-bit policy; ACLs and extra members of a private group are not inspected. */
+export function lookupFault(info, user, directory) {
+    const owner = ownerFault(info, user, directory, "directory");
+    if (owner !== undefined)
+        return owner;
+    const privateGroup = user.uid !== 0 && info.gid === user.gid && user.gid === user.uid;
+    const writable = (info.mode & OTHER_WRITE) !== 0 || ((info.mode & GROUP_WRITE) !== 0 && !privateGroup);
+    if (!writable || (info.mode & STICKY) !== 0)
+        return undefined;
+    return `directory '${directory}' is writable by other users; remove that with 'chmod go-w', or choose a workspace elsewhere`;
+}
+/** Sticky directories protect only entries belonging to the user or root. */
+export function ownerFault(info, user, path, kind) {
+    if (info.uid === 0 || info.uid === user.uid)
+        return undefined;
+    return `${kind} '${path}' is owned by another user; choose a workspace reached only through your own or root's directories`;
+}
+//# sourceMappingURL=path-trust.js.map

package/dist/core/path-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-trust.js","sourceRoot":"","sources":["../../src/core/path-trust.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,GAAG,MAAM,CAAC;AACtB,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,WAAW,GAAG,KAAK,CAAC;AAE1B,mGAAmG;AACnG,MAAM,UAAU,WAAW,CACzB,IAAyC,EACzC,IAAc,EACd,SAAiB;IAEjB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC;IACtF,MAAM,QAAQ,GACZ,CAAC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxF,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,OAAO,cAAc,SAAS,8FAA8F,CAAC;AAC/H,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CACxB,IAAwB,EACxB,IAAc,EACd,IAAY,EACZ,IAA0B;IAE1B,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9D,OAAO,GAAG,IAAI,KAAK,IAAI,oGAAoG,CAAC;AAC9H,CAAC"}

package/dist/core/screen-facts.d.ts

@@ -5,7 +5,9 @@
  * Implements PRD §5.3 rendered-state detection (C-TURN-01 through C-TURN-05).
  */
 import type { ElwoodAgentKind } from "./activity/index.ts";
-export type ScreenFactKind = "composer_visible" | "working_visible" | "interrupt_complete_visible" | "blocking_prompt_visible";
+export type ScreenFactKind = "composer_visible" | "working_visible" | "interrupt_complete_visible" | "blocking_prompt_visible"
+/** The CLI's own resume-loading placeholder: the resumed conversation is not loaded yet. */
+ | "resume_loading_visible";
 /** Which rendered source a rule's patterns match against. */
 export type ScreenFactRegion = "screen" | "title";
 /**

package/dist/core/screen-facts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"screen-facts.d.ts","sourceRoot":"","sources":["../../src/core/screen-facts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,MAAM,cAAc,GACtB,kBAAkB,GAClB,iBAAiB,GACjB,4BAA4B,GAC5B,yBAAyB,CAAC;AAE9B,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,cAAc,GAAG;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IACnC,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;CAC1B,GAAG,uBAAuB,CAAC;AAE5B,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,2FAA2F;IAC3F,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,kEAAkE;IAClE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AASF;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,aAAa,EACpB,cAAc,CAAC,EAAE,MAAM,GACtB,iBAAiB,CAiBnB"}
+{"version":3,"file":"screen-facts.d.ts","sourceRoot":"","sources":["../../src/core/screen-facts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,MAAM,cAAc,GACtB,kBAAkB,GAClB,iBAAiB,GACjB,4BAA4B,GAC5B,yBAAyB;AAC3B,4FAA4F;GAC1F,wBAAwB,CAAC;AAE7B,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,cAAc,GAAG;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IACnC,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;CAC1B,GAAG,uBAAuB,CAAC;AAE5B,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,2FAA2F;IAC3F,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,kEAAkE;IAClE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AASF;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,aAAa,EACpB,cAAc,CAAC,EAAE,MAAM,GACtB,iBAAiB,CAkBnB"}

package/dist/core/screen-facts.js

@@ -22,6 +22,7 @@ export function readScreenFacts(table, frame, suppressedRule) {
         working_visible: false,
         interrupt_complete_visible: false,
         blocking_prompt_visible: false,
+        resume_loading_visible: false,
     };
     const matched = [];
     for (const rule of table.rules) {

package/dist/core/screen-facts.js.map

@@ -1 +1 @@
-{"version":3,"file":"screen-facts.js","sourceRoot":"","sources":["../../src/core/screen-facts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgEH,qFAAqF;AACrF,SAAS,WAAW,CAAC,IAAoB,EAAE,MAAc;IACvD,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS;QAC3B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAsB,EACtB,KAAoB,EACpB,cAAuB;IAEvB,MAAM,KAAK,GAAoC;QAC7C,gBAAgB,EAAE,KAAK;QACvB,eAAe,EAAE,KAAK;QACtB,0BAA0B,EAAE,KAAK;QACjC,uBAAuB,EAAE,KAAK;KAC/B,CAAC;IACF,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,EAAE,KAAK,cAAc;YAAE,SAAS;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,SAAS;QAChF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"screen-facts.js","sourceRoot":"","sources":["../../src/core/screen-facts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkEH,qFAAqF;AACrF,SAAS,WAAW,CAAC,IAAoB,EAAE,MAAc;IACvD,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS;QAC3B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAsB,EACtB,KAAoB,EACpB,cAAuB;IAEvB,MAAM,KAAK,GAAoC;QAC7C,gBAAgB,EAAE,KAAK;QACvB,eAAe,EAAE,KAAK;QACtB,0BAA0B,EAAE,KAAK;QACjC,uBAAuB,EAAE,KAAK;QAC9B,sBAAsB,EAAE,KAAK;KAC9B,CAAC;IACF,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,EAAE,KAAK,cAAc;YAAE,SAAS;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,SAAS;QAChF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC"}

package/dist/core/simple/boundary-signal.d.ts

@@ -1,9 +1,12 @@
 /**
  * What an adapter's turn boundary carries, and the accessors the runner reads it with.
- * Implements PRD §5.8 / §12A: the completeness signal, plus OPTIONAL evidence that the
- * agent itself rejected the turn. Separate from the reader contract so the failure shape
- * has one home (#19).
+ * Implements PRD §5.8 / §10 / §12A and C-API-59 / C-API-60: the completeness signal, plus
+ * OPTIONAL evidence that the agent itself rejected the turn, surfaced as `turn_failed`.
+ * Separate from the reader contract so the failure shape has one home.
  */
+import { type ElwoodError } from "../errors.ts";
+import type { TurnGate } from "./turn-gate.ts";
+import type { TurnBoundaryHook } from "./turn-types.ts";
 /**
  * What a boundary carries. A bare string is the completeness signal on its own — the shorthand
  * every adapter uses today — while the object form additionally reports that the agent FAILED
@@ -17,10 +20,23 @@ export type BoundarySignal = string | {
 };
 /** An adapter's evidence that the agent itself rejected the turn (PRD §12A.5). */
 export type TurnFailure = {
-    /** Human-readable reason, bounded by the adapter. */
+    /**
+     * The agent's own diagnostic, bounded by the adapter: Claude's `error_details`, or Codex's
+     * `error.message` (often the service's raw JSON error body). Diagnostic, not display prose.
+     */
     readonly message: string;
-    /** Adapter-specific classification, DIAGNOSTIC ONLY — never used to decide failure. */
-    readonly info?: string | undefined;
+    /**
+     * The agent's own error kind, DIAGNOSTIC ONLY — never decides failure: Claude's `error` name
+     * (`model_not_found`) or Codex's `codex_error_info` kind (`other`, `http_connection_failed`).
+     */
+    readonly agentError?: string | undefined;
+    /**
+     * Whether the rejection names the submission the turn accepted (the hook that accepted it).
+     * A late rejection of an earlier turn can arrive during a later one, so the adapter, which
+     * alone knows its submission identity, says whether it is this turn's. Absent: the adapter
+     * cannot tell, and the rejection is taken as the turn's own once the turn has accepted.
+     */
+    readonly belongsTo?: (acceptedBy: TurnBoundaryHook) => boolean;
 };
 /** The expected-text half of a boundary signal, whichever form the adapter returned. */
 export declare function boundaryText(signal: BoundarySignal): string;
@@ -28,4 +44,23 @@ export declare function boundaryText(signal: BoundarySignal): string;
 export declare function boundaryFailure(signal: BoundarySignal): TurnFailure | undefined;
 /** The gate's expected text for a signal that may be absent: `undefined` stays `undefined`. */
 export declare function boundaryExpectation(signal: BoundarySignal | undefined): string | undefined;
+/** The failure a signal reports, if any; `undefined` for an absent or string-form signal. */
+export declare function signalFailure(signal: BoundarySignal | undefined): TurnFailure | undefined;
+/** The consumer-facing `turn_failed` error for an adapter's rejection evidence (C-API-59/60). */
+export declare function turnRejection(failure: TurnFailure): ElwoodError;
+type BoundaryGate = Pick<TurnGate, "fail" | "expectText">;
+/**
+ * An untagged hook's boundary: its text is the completeness oracle, or its rejection fails the
+ * turn. An earlier turn's late rejection is not this turn's: only a rejection after this turn's
+ * own submission, which the adapter matches to it, fails the turn (C-API-59).
+ */
+export declare function settleHookBoundary(gate: BoundaryGate, signal: BoundarySignal | undefined, acceptedBy: TurnBoundaryHook | undefined): void;
+/**
+ * A native boundary already names this turn (its identity matched the turn id), so its
+ * rejection fails the turn outright; otherwise its text is the completeness oracle (C-API-60).
+ */
+export declare function settleNativeBoundary(gate: BoundaryGate, signal: BoundarySignal): void;
+/** A nonblank agent diagnostic, bounded so a rejection message stays small (§6.1). */
+export declare function boundedDiagnostic(value: unknown): string | undefined;
+export {};
 //# sourceMappingURL=boundary-signal.d.ts.map

package/dist/core/simple/boundary-signal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boundary-signal.d.ts","sourceRoot":"","sources":["../../../src/core/simple/boundary-signal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAE/F,kFAAkF;AAClF,MAAM,MAAM,WAAW,GAAG;IACxB,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uFAAuF;IACvF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AACF,wFAAwF;AACxF,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAE3D;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,WAAW,GAAG,SAAS,CAE/E;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE1F"}
+{"version":3,"file":"boundary-signal.d.ts","sourceRoot":"","sources":["../../../src/core/simple/boundary-signal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,WAAW,EAAe,MAAM,cAAc,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAE/F,kFAAkF;AAClF,MAAM,MAAM,WAAW,GAAG;IACxB;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,UAAU,EAAE,gBAAgB,KAAK,OAAO,CAAC;CAChE,CAAC;AACF,wFAAwF;AACxF,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAE3D;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,WAAW,GAAG,SAAS,CAE/E;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE1F;AAED,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAEzF;AAED,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,CAG/D;AAED,KAAK,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAAC,CAAC;AAE1D;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,cAAc,GAAG,SAAS,EAClC,UAAU,EAAE,gBAAgB,GAAG,SAAS,GACvC,IAAI,CAKN;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,GAAG,IAAI,CAIrF;AAID,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGpE"}

package/dist/core/simple/boundary-signal.js

@@ -1,9 +1,10 @@
 /**
  * What an adapter's turn boundary carries, and the accessors the runner reads it with.
- * Implements PRD §5.8 / §12A: the completeness signal, plus OPTIONAL evidence that the
- * agent itself rejected the turn. Separate from the reader contract so the failure shape
- * has one home (#19).
+ * Implements PRD §5.8 / §10 / §12A and C-API-59 / C-API-60: the completeness signal, plus
+ * OPTIONAL evidence that the agent itself rejected the turn, surfaced as `turn_failed`.
+ * Separate from the reader contract so the failure shape has one home.
  */
+import { elwoodError } from "../errors.js";
 /** The expected-text half of a boundary signal, whichever form the adapter returned. */
 export function boundaryText(signal) {
     return typeof signal === "string" ? signal : signal.text;
@@ -16,4 +17,43 @@ export function boundaryFailure(signal) {
 export function boundaryExpectation(signal) {
     return signal === undefined ? undefined : boundaryText(signal);
 }
+/** The failure a signal reports, if any; `undefined` for an absent or string-form signal. */
+export function signalFailure(signal) {
+    return signal === undefined ? undefined : boundaryFailure(signal);
+}
+/** The consumer-facing `turn_failed` error for an adapter's rejection evidence (C-API-59/60). */
+export function turnRejection(failure) {
+    const details = failure.agentError === undefined ? {} : { agentError: failure.agentError };
+    return elwoodError("turn_failed", failure.message, details);
+}
+/**
+ * An untagged hook's boundary: its text is the completeness oracle, or its rejection fails the
+ * turn. An earlier turn's late rejection is not this turn's: only a rejection after this turn's
+ * own submission, which the adapter matches to it, fails the turn (C-API-59).
+ */
+export function settleHookBoundary(gate, signal, acceptedBy) {
+    const failure = signalFailure(signal);
+    if (!failure)
+        gate.expectText(boundaryExpectation(signal));
+    else if (acceptedBy && (failure.belongsTo?.(acceptedBy) ?? true))
+        gate.fail(turnRejection(failure));
+}
+/**
+ * A native boundary already names this turn (its identity matched the turn id), so its
+ * rejection fails the turn outright; otherwise its text is the completeness oracle (C-API-60).
+ */
+export function settleNativeBoundary(gate, signal) {
+    const failure = boundaryFailure(signal);
+    if (failure)
+        gate.fail(turnRejection(failure));
+    else
+        gate.expectText(boundaryText(signal));
+}
+const maxDiagnosticLength = 2_000;
+/** A nonblank agent diagnostic, bounded so a rejection message stays small (§6.1). */
+export function boundedDiagnostic(value) {
+    if (typeof value !== "string" || value.trim().length === 0)
+        return undefined;
+    return value.length <= maxDiagnosticLength ? value : `${value.slice(0, maxDiagnosticLength)}…`;
+}
 //# sourceMappingURL=boundary-signal.js.map

package/dist/core/simple/boundary-signal.js.map

@@ -1 +1 @@
-{"version":3,"file":"boundary-signal.js","sourceRoot":"","sources":["../../../src/core/simple/boundary-signal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkBH,wFAAwF;AACxF,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACjE,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,MAAkC;IACpE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC"}
+{"version":3,"file":"boundary-signal.js","sourceRoot":"","sources":["../../../src/core/simple/boundary-signal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAoB,WAAW,EAAE,MAAM,cAAc,CAAC;AAiC7D,wFAAwF;AACxF,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACjE,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,MAAkC;IACpE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAAC,MAAkC;IAC9D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,OAAoB;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3F,OAAO,WAAW,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAkB,EAClB,MAAkC,EAClC,UAAwC;IAExC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;SACtD,IAAI,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAkB,EAAE,MAAsB;IAC7E,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;;QAC1C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7E,OAAO,KAAK,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC;AACjG,CAAC"}

package/dist/core/simple/close.d.ts

@@ -1,6 +1,7 @@
 /** Stop/kill fallback for ergonomic close (PRD §5.8, C-API-51). */
 import type { ElwoodAgentSession } from "../agent-session.ts";
 /** Stop first, then kill if needed (C-API-51). If both fail, termination_failed
- * preserves the stop diagnostic as cause and the kill diagnostic as killCause. */
+ * preserves the stop diagnostic as cause and the kill diagnostic as killCause, and each
+ * one's runtime-cleanup failure (§9.4) as cleanupError and killCleanupError. */
 export declare function closeSession(live: ElwoodAgentSession): Promise<void>;
 //# sourceMappingURL=close.d.ts.map

package/dist/core/simple/close.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"close.d.ts","sourceRoot":"","sources":["../../../src/core/simple/close.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;kFACkF;AAClF,wBAAsB,YAAY,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1E"}
+{"version":3,"file":"close.d.ts","sourceRoot":"","sources":["../../../src/core/simple/close.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;gFAEgF;AAChF,wBAAsB,YAAY,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAe1E"}

package/dist/core/simple/close.js

@@ -1,6 +1,7 @@
-import { elwoodError, toError } from "../errors.js";
+import { ElwoodError, elwoodError, toError } from "../errors.js";
 /** Stop first, then kill if needed (C-API-51). If both fail, termination_failed
- * preserves the stop diagnostic as cause and the kill diagnostic as killCause. */
+ * preserves the stop diagnostic as cause and the kill diagnostic as killCause, and each
+ * one's runtime-cleanup failure (§9.4) as cleanupError and killCleanupError. */
 export async function closeSession(live) {
     try {
         await live.stop();
@@ -13,8 +14,15 @@ export async function closeSession(live) {
             throw elwoodError("termination_failed", "close() failed to stop or kill the session", {
                 cause: toError(stopError).message,
                 killCause: toError(killError).message,
+                ...cleanupDetail("cleanupError", stopError),
+                ...cleanupDetail("killCleanupError", killError),
             });
         }
     }
 }
+/** `{ [key]: message }` when `error` carries a runtime-cleanup failure message. */
+function cleanupDetail(key, error) {
+    const message = error instanceof ElwoodError ? error.details["cleanupError"] : undefined;
+    return typeof message === "string" ? { [key]: message } : {};
+}
 //# sourceMappingURL=close.js.map

package/dist/core/simple/close.js.map

@@ -1 +1 @@
-{"version":3,"file":"close.js","sourceRoot":"","sources":["../../../src/core/simple/close.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACpD;kFACkF;AAClF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAwB;IACzD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,SAAS,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,MAAM,WAAW,CAAC,oBAAoB,EAAE,4CAA4C,EAAE;gBACpF,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO;gBACjC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"close.js","sourceRoot":"","sources":["../../../src/core/simple/close.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACjE;;gFAEgF;AAChF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAwB;IACzD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,SAAS,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,MAAM,WAAW,CAAC,oBAAoB,EAAE,4CAA4C,EAAE;gBACpF,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO;gBACjC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO;gBACrC,GAAG,aAAa,CAAC,cAAc,EAAE,SAAS,CAAC;gBAC3C,GAAG,aAAa,CAAC,kBAAkB,EAAE,SAAS,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,GAAW,EAAE,KAAc;IAChD,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC"}

package/dist/core/simple/turn-boundary.d.ts

@@ -11,6 +11,8 @@
  * a short transcript-drain settle. A hung agent holds the slot until `close()`/`kill()` forces a
  * terminal status — honest backpressure, never a silent early release.
  */
+/** Short transcript-drain settle (ms) after a post-failure `ready` — trailing events flush. */
+export declare const DRAIN_MS = 750;
 export declare class TurnBoundary {
     /** Resolves when the next turn may safely start. The serializer holds its slot on this. */
     readonly promise: Promise<void>;

package/dist/core/simple/turn-boundary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turn-boundary.d.ts","sourceRoot":"","sources":["../../../src/core/simple/turn-boundary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,qBAAa,YAAY;IACvB,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,UAAU,CAA4C;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgD;IAE9E;;;iGAG6F;gBAE3F,OAAO,EAAE,MAAM,IAAI,EACnB,OAAO,SAAW,EAClB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS;IAUjD,gGAAgG;IAChG,KAAK,IAAI,IAAI;IAUb,uEAAuE;IACvE,WAAW,IAAI,IAAI;IAKnB,yGAAyG;IACzG,kBAAkB,IAAI,IAAI;IAI1B;;;;;OAKG;IACH,QAAQ,IAAI,IAAI;IAOhB,8FAA8F;IAC9F,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,kFAAkF;IAClF,IAAI,SAAS,IAAI,OAAO,CAEvB;CACF"}
+{"version":3,"file":"turn-boundary.d.ts","sourceRoot":"","sources":["../../../src/core/simple/turn-boundary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,+FAA+F;AAC/F,eAAO,MAAM,QAAQ,MAAM,CAAC;AAE5B,qBAAa,YAAY;IACvB,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,UAAU,CAA4C;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgD;IAE9E;;;iGAG6F;gBAE3F,OAAO,EAAE,MAAM,IAAI,EACnB,OAAO,SAAW,EAClB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS;IAUjD,gGAAgG;IAChG,KAAK,IAAI,IAAI;IAUb,uEAAuE;IACvE,WAAW,IAAI,IAAI;IAKnB,yGAAyG;IACzG,kBAAkB,IAAI,IAAI;IAI1B;;;;;OAKG;IACH,QAAQ,IAAI,IAAI;IAOhB,8FAA8F;IAC9F,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,kFAAkF;IAClF,IAAI,SAAS,IAAI,OAAO,CAEvB;CACF"}

package/dist/core/simple/turn-boundary.js

@@ -12,7 +12,7 @@
  * terminal status — honest backpressure, never a silent early release.
  */
 /** Short transcript-drain settle (ms) after a post-failure `ready` — trailing events flush. */
-const DRAIN_MS = 750;
+export const DRAIN_MS = 750;
 export class TurnBoundary {
     /** Resolves when the next turn may safely start. The serializer holds its slot on this. */
     promise;

package/dist/core/simple/turn-boundary.js.map

@@ -1 +1 @@
-{"version":3,"file":"turn-boundary.js","sourceRoot":"","sources":["../../../src/core/simple/turn-boundary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,+FAA+F;AAC/F,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,MAAM,OAAO,YAAY;IACvB,2FAA2F;IAClF,OAAO,CAAgB;IACxB,OAAO,CAAc;IACrB,OAAO,GAAG,KAAK,CAAC;IAChB,cAAc,GAAG,KAAK,CAAC;IACvB,UAAU,CAA4C;IAC7C,OAAO,CAAa;IACpB,OAAO,CAAS;IAChB,aAAa,CAAgD;IAE9E;;;iGAG6F;IAC7F,YACE,OAAmB,EACnB,OAAO,GAAG,QAAQ,EAClB,aAA+C;QAE/C,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gGAAgG;IAChG,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACvC,IAAI,OAAO;YAAE,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;YACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,uEAAuE;IACvE,WAAW;QACT,IAAI,IAAI,CAAC,UAAU;YAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,yGAAyG;IACzG,kBAAkB;QAChB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACjD,IAAI,IAAI,CAAC,UAAU;YAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED,8FAA8F;IAC9F,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;IACvC,CAAC;IAED,kFAAkF;IAClF,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}
+{"version":3,"file":"turn-boundary.js","sourceRoot":"","sources":["../../../src/core/simple/turn-boundary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAE5B,MAAM,OAAO,YAAY;IACvB,2FAA2F;IAClF,OAAO,CAAgB;IACxB,OAAO,CAAc;IACrB,OAAO,GAAG,KAAK,CAAC;IAChB,cAAc,GAAG,KAAK,CAAC;IACvB,UAAU,CAA4C;IAC7C,OAAO,CAAa;IACpB,OAAO,CAAS;IAChB,aAAa,CAAgD;IAE9E;;;iGAG6F;IAC7F,YACE,OAAmB,EACnB,OAAO,GAAG,QAAQ,EAClB,aAA+C;QAE/C,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gGAAgG;IAChG,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACvC,IAAI,OAAO;YAAE,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;YACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,uEAAuE;IACvE,WAAW;QACT,IAAI,IAAI,CAAC,UAAU;YAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,yGAAyG;IACzG,kBAAkB;QAChB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACjD,IAAI,IAAI,CAAC,UAAU;YAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED,8FAA8F;IAC9F,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;IACvC,CAAC;IAED,kFAAkF;IAClF,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/core/simple/turn-types.d.ts

@@ -35,8 +35,9 @@ export type TurnBoundaryContract = {
  * are DISTINCT: `undefined` means "not a turn boundary" (the runner ignores the event — an
  * installed oracle stays installed), while a `BoundarySignal` means "a turn boundary whose
  * expected final assistant text is this" — an EMPTY string is a boundary that carries no text
- * (`null`/absent `last_assistant_message`, e.g. `StopFailure`) and clears the oracle →
- * quiet-window settle.
+ * (`null`/absent `last_assistant_message`) and clears the oracle → quiet-window settle. The
+ * object form also reports that the agent REJECTED the turn (Claude `StopFailure`), which fails
+ * it with `turn_failed`.
  * This is the ONE seam where adapter hook shape meets the adapter-neutral runner: `runTurn`
  * consumes only this normalized signal, never raw `hook_event_name`/`last_assistant_message`, so
  * the core is not coupled to adapter hook fields. Each `SessionBase` subclass supplies its own
@@ -52,8 +53,13 @@ export type AcceptanceSignalReader = (hookEvent: TurnBoundaryHook, prompt: strin
  * completeness signal (`""` when null/absent → no oracle); any other hook is not a boundary.
  */
 export declare const defaultBoundarySignal: BoundarySignalReader;
-/** Shared Claude/Codex acceptance: the matching submit hook or any Stop boundary. */
+/**
+ * Shared Claude/Codex acceptance: the matching submit hook or any Stop boundary. The agent
+ * echoes the text Elwood pasted, which is the prompt with control characters removed (§5.3).
+ */
 export declare const defaultAcceptanceSignal: AcceptanceSignalReader;
+/** A submit hook's identity without its prompt, which can be large and is not read again. */
+export declare function submitIdentity({ prompt: _prompt, ...identity }: TurnBoundaryHook): TurnBoundaryHook;
 /**
  * Compile-time conformance probe: `true` only if `T` declares every `TurnBoundaryContract` key
  * (`keyof extends keyof T` — a renamed/dropped key → `never`) with an assignable value

package/dist/core/simple/turn-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turn-types.d.ts","sourceRoot":"","sources":["../../../src/core/simple/turn-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CAC5D,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAErE,MAAM,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,gBAAgB,KAAK,cAAc,GAAG,SAAS,CAAC;AAE/F,qFAAqF;AACrF,MAAM,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;AAE9F;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,oBACiD,CAAC;AAEtF,qFAAqF;AACrF,eAAO,MAAM,uBAAuB,EAAE,sBAEqC,CAAC;AAE5E;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI,MAAM,oBAAoB,SAAS,MAAM,CAAC,GAC1E,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,oBAAoB,GAAG,MAAM,CAAC,CAAC,SAAS,oBAAoB,GAClF,IAAI,GACJ,KAAK,GACP,KAAK,CAAC;AAEV;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,aAAa,CAAC,GAAG;IAC7E,EAAE,CAAC,CAAC,SAAS,MAAM,oBAAoB,EACrC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,KAAK,IAAI,GAChD,MAAM,IAAI,CAAC;IACd,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC3E,CAAC;AAEF,sFAAsF;AACtF,MAAM,MAAM,WAAW,GAAG;IACxB,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,kFAAkF;IAClF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,yFAAyF;IACzF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,wFAAwF;IACxF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,oFAAoF;IACpF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;IACnD,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACxD,CAAC;AAEF,oGAAoG;AACpG,MAAM,MAAM,WAAW,GAAG;IACxB,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IAC3C;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC,CAAC"}
+{"version":3,"file":"turn-types.d.ts","sourceRoot":"","sources":["../../../src/core/simple/turn-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CAC5D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAErE,MAAM,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,gBAAgB,KAAK,cAAc,GAAG,SAAS,CAAC;AAE/F,qFAAqF;AACrF,MAAM,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;AAE9F;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,oBACiD,CAAC;AAEtF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,sBAEwD,CAAC;AAE/F,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,EAC7B,MAAM,EAAE,OAAO,EACf,GAAG,QAAQ,EACZ,EAAE,gBAAgB,GAAG,gBAAgB,CAErC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI,MAAM,oBAAoB,SAAS,MAAM,CAAC,GAC1E,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,oBAAoB,GAAG,MAAM,CAAC,CAAC,SAAS,oBAAoB,GAClF,IAAI,GACJ,KAAK,GACP,KAAK,CAAC;AAEV;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,aAAa,CAAC,GAAG;IAC7E,EAAE,CAAC,CAAC,SAAS,MAAM,oBAAoB,EACrC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,KAAK,IAAI,GAChD,MAAM,IAAI,CAAC;IACd,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC3E,CAAC;AAEF,sFAAsF;AACtF,MAAM,MAAM,WAAW,GAAG;IACxB,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,kFAAkF;IAClF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,yFAAyF;IACzF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,wFAAwF;IACxF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,oFAAoF;IACpF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;IACnD,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACxD,CAAC;AAEF,oGAAoG;AACpG,MAAM,MAAM,WAAW,GAAG;IACxB,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IAC3C;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC,CAAC"}

package/dist/core/simple/turn-types.js

@@ -1,10 +1,18 @@
+import { sanitizePasteText } from "../input/sanitize.js";
 export { boundaryFailure, boundaryText } from "./boundary-signal.js";
 /**
  * The default reader: a `Stop` hook is the turn boundary and its `last_assistant_message` the
  * completeness signal (`""` when null/absent → no oracle); any other hook is not a boundary.
  */
 export const defaultBoundarySignal = (event) => event.hook_event_name === "Stop" ? (event.last_assistant_message ?? "") : undefined;
-/** Shared Claude/Codex acceptance: the matching submit hook or any Stop boundary. */
+/**
+ * Shared Claude/Codex acceptance: the matching submit hook or any Stop boundary. The agent
+ * echoes the text Elwood pasted, which is the prompt with control characters removed (§5.3).
+ */
 export const defaultAcceptanceSignal = (event, prompt) => event.hook_event_name === "Stop" ||
-    (event.hook_event_name === "UserPromptSubmit" && event.prompt === prompt);
+    (event.hook_event_name === "UserPromptSubmit" && event.prompt === sanitizePasteText(prompt));
+/** A submit hook's identity without its prompt, which can be large and is not read again. */
+export function submitIdentity({ prompt: _prompt, ...identity }) {
+    return identity;
+}
 //# sourceMappingURL=turn-types.js.map

package/dist/core/simple/turn-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"turn-types.js","sourceRoot":"","sources":["../../../src/core/simple/turn-types.ts"],"names":[],"mappings":"AAiDA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAyB,CAAC,KAAK,EAAE,EAAE,CACnE,KAAK,CAAC,eAAe,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAEtF,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAC/E,KAAK,CAAC,eAAe,KAAK,MAAM;IAChC,CAAC,KAAK,CAAC,eAAe,KAAK,kBAAkB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC"}
+{"version":3,"file":"turn-types.js","sourceRoot":"","sources":["../../../src/core/simple/turn-types.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAyCzD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOrE;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAyB,CAAC,KAAK,EAAE,EAAE,CACnE,KAAK,CAAC,eAAe,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAEtF;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAC/E,KAAK,CAAC,eAAe,KAAK,MAAM;IAChC,CAAC,KAAK,CAAC,eAAe,KAAK,kBAAkB,IAAI,KAAK,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;AAE/F,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,EAC7B,MAAM,EAAE,OAAO,EACf,GAAG,QAAQ,EACM;IACjB,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/simple/turn.d.ts

@@ -4,6 +4,8 @@
  * or terminal status. Codex acceptance and Stop identity come from private adapter evidence;
  * public running/ready alone cannot bind or finish its turn. Untagged adapters retain the
  * serialized passive oracle. The Stop oracle checks completeness; it never supplies output.
+ * Adapter rejection evidence of the turn's own submission fails it as `turn_failed`: Claude's
+ * `StopFailure` (C-API-59) or Codex's failed `task_complete` (C-API-60).
  * Whole-turn deadlines start after physical submission; catch-up deadlines start after idle.
  */
 import { type RunningTurn, type StreamTurnOptions, type TurnSession } from "./turn-types.ts";

package/dist/core/simple/turn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turn.d.ts","sourceRoot":"","sources":["../../../src/core/simple/turn.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EACjB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,GACZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,yFAAyF;AACzF,wBAAgB,OAAO,CACrB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,iBAAsB,GAC9B,WAAW,CA4Ib"}
+{"version":3,"file":"turn.d.ts","sourceRoot":"","sources":["../../../src/core/simple/turn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EAGtB,KAAK,WAAW,EACjB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,GACZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,yFAAyF;AACzF,wBAAgB,OAAO,CACrB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,iBAAsB,GAC9B,WAAW,CAgJb"}