@with-logic/elwood 0.2.1 → 0.2.2

package/dist/core/trust/responder.js

@@ -1,25 +1,24 @@
-import { optionInput } from "../terminal-options.js";
-import { newEpisode } from "./types.js";
+import { GateDeadline, gateBudgetMs } from "./deadline.js";
+import { attempted, leaveFrame, newEpisode } from "./types.js";
 import { choiceIdentity, readTrustView, trustView } from "./view.js";
 import { TrustAttempt } from "./write.js";
 export { trustPromptVisible } from "./view.js";
-const episodeTimeoutMs = 5_000;
 export class TrustPromptResponder {
     episode;
     humanPrompt;
-    timer;
+    deadline = new GateDeadline();
     attempts = new Set();
     disposed = false;
     agent;
     autotrust;
-    onStateChange;
+    hooks;
     /** The ADAPTER's clearance grammar; the coordinator never encodes a CLI's layout. */
     clearance;
-    constructor(agent, clearance, autotrust = false, onStateChange) {
+    constructor(agent, clearance, autotrust = false, hooks = {}) {
         this.agent = agent;
         this.clearance = clearance;
         this.autotrust = autotrust;
-        this.onStateChange = onStateChange;
+        this.hooks = hooks;
     }
     get inputBlocking() {
         return this.humanPrompt !== undefined || this.episode !== undefined;
@@ -36,6 +35,10 @@ export class TrustPromptResponder {
         const priorIdentity = this.episode?.lastIdentity;
         const view = trustView(frame, this.agent, this.clearance);
         this.observe(view);
+        // A rendered frame is evidence for the gate's next attempt as well as its current one.
+        if (this.episode !== undefined)
+            this.episode.phase.renderedSinceWrite = true;
+        this.episode?.attempt?.wake();
         const episode = this.episode;
         if (view.kind !== "candidate" || episode === undefined || view.key !== episode.candidate.key)
             return undefined;
@@ -60,19 +63,20 @@ export class TrustPromptResponder {
             episode.reportedPending = true;
             return { kind: "option_pending", prompt: view.spec.id };
         }
-        if (episode.expired ||
-            episode.attempt ||
+        // Running now, answered without a reader, or this choice was already attempted.
+        const attemptAlreadyHandled = episode.attempt !== undefined ||
             episode.legacyAnswered ||
-            episode.attemptedIdentity === identity)
+            episode.attemptedIdentity === identity;
+        if (episode.expired || episode.callerOwned || attemptAlreadyHandled)
             return undefined;
         const read = readFrame === undefined
             ? undefined
             : () => readTrustView(readFrame, this.agent, this.clearance);
-        const attempt = new TrustAttempt(view, identity);
+        const attempt = new TrustAttempt(view, identity, episode.phase, this.hooks.numberedRetry);
         episode.attempt = attempt;
         episode.attemptedIdentity = identity;
         this.attempts.add(attempt);
-        const settled = attempt.start(write, read, episode.deadlineAtMs).then((completion) => {
+        const settled = attempt.start(write, read, this.deadline).then((completion) => {
             this.attempts.delete(attempt);
             if (this.disposed || attempt.invalidated)
                 return "cancelled";
@@ -83,7 +87,7 @@ export class TrustPromptResponder {
                 episode.attemptedIdentity = undefined;
             if (read === undefined && completion === "answered") {
                 episode.legacyAnswered = true;
-                clearTimeout(this.timer);
+                this.deadline.cancel();
             }
             if (read === undefined)
                 return completion;
@@ -107,19 +111,22 @@ export class TrustPromptResponder {
             episode.attemptedIdentity = undefined;
             throw error;
         });
-        return {
-            kind: "attempted",
-            automation: {
-                prompt: view.spec.id,
-                input: optionInput(view.option),
-            },
-            settled,
-        };
+        return attempted(view.spec.id, view.option, settled);
+    }
+    /**
+     * Raw caller input owns the gate on screen: its attempt is cancelled before the caller's
+     * keys are written, and automation writes nothing more to that gate (C-TRUST-01).
+     */
+    callerInput() {
+        if (this.episode === undefined)
+            return;
+        this.episode.callerOwned = true;
+        this.episode.attempt?.cancel();
     }
     /** Session closing owns all cancellation, including writes whose promises settle late. */
     dispose() {
         this.disposed = true;
-        clearTimeout(this.timer);
+        this.deadline.cancel();
         for (const attempt of this.attempts)
             attempt.cancel();
         this.episode = undefined;
@@ -133,10 +140,9 @@ export class TrustPromptResponder {
         if (view.kind === "unknown") {
             // Unknown/partial replacements retain human ownership until verified clearance.
             if (this.episode) {
-                this.episode.attempt?.cancel();
-                this.episode.attempt = undefined;
-                this.episode.attemptedIdentity = undefined;
-                this.episode.lastIdentity = undefined;
+                leaveFrame(this.episode, view.gate === true);
+                // No human can act on a gate that left the frame; its budget waits for its return.
+                this.deadline.pause();
             }
             return;
         }
@@ -148,6 +154,7 @@ export class TrustPromptResponder {
         }
         if (this.episode?.candidate.key === view.key) {
             this.episode.lastIdentity = choiceIdentity(view);
+            this.deadline.resume();
             return;
         }
         const blocked = this.blockedPrompt !== undefined;
@@ -162,28 +169,25 @@ export class TrustPromptResponder {
         this.arm(episode);
     }
     arm(episode) {
-        clearTimeout(this.timer);
         episode.expired = false;
-        episode.deadlineAtMs = Date.now() + episodeTimeoutMs;
-        this.timer = setTimeout(() => {
+        this.deadline.start(gateBudgetMs, () => {
             episode.expired = true;
             episode.expiredIdentity = episode.lastIdentity;
             episode.blocked = true;
             episode.attempt?.cancel();
             episode.attempt = undefined;
             this.notify();
-        }, episodeTimeoutMs);
-        this.timer.unref();
+        });
     }
     release(cleared) {
-        clearTimeout(this.timer);
+        this.deadline.cancel();
         this.episode?.attempt?.cancel(cleared);
         this.episode = undefined;
         this.humanPrompt = undefined;
     }
     notify() {
         try {
-            this.onStateChange?.();
+            this.hooks.onStateChange?.();
         }
         catch {
             /* An observer cannot retain owned timers or writes. */

package/dist/core/trust/responder.js.map

@@ -1 +1 @@
-{"version":3,"file":"responder.js","sourceRoot":"","sources":["../../../src/core/trust/responder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAIrD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAkB,SAAS,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,OAAO,oBAAoB;IACvB,OAAO,CAAsB;IAC7B,WAAW,CAA4B;IACvC,KAAK,CAA4C;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC5C,QAAQ,GAAG,KAAK,CAAC;IACR,KAAK,CAAI;IACT,SAAS,CAAU;IACnB,aAAa,CAA2B;IACzD,qFAAqF;IACpE,SAAS,CAAiB;IAC3C,YAAY,KAAQ,EAAE,SAAyB,EAAE,SAAS,GAAG,KAAK,EAAE,aAA0B;QAC5F,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IACD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;IACtE,CAAC;IACD,IAAI,aAAa;QACf,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAoC,CAAC;IACrE,CAAC;IACD;iGAC6F;IAC7F,MAAM,CACJ,KAAa,EACb,KAA0C,EAC1C,SAAoC;QAEpC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;QACjD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS,CAAC,GAAG;YAC1F,OAAO,SAAS,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC;QAChC,IACE,OAAO,CAAC,OAAO;YACf,QAAQ,KAAK,SAAS;YACtB,CAAC,QAAQ,KAAK,OAAO,CAAC,eAAe,IAAI,aAAa,KAAK,SAAS,CAAC,EACrE,CAAC;YACD,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACjE,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7D,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACxC,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,eAAe;gBAAE,OAAO,SAAS,CAAC;YAC7D,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAyB,EAAE,CAAC;QACjF,CAAC;QACD,IACE,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,cAAc;YACtB,OAAO,CAAC,iBAAiB,KAAK,QAAQ;YAEtC,OAAO,SAAS,CAAC;QACnB,MAAM,IAAI,GACR,SAAS,KAAK,SAAS;YACrB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,OAAO,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CACnE,CAAC,UAAU,EAAE,EAAE;YACb,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO,WAAoB,CAAC;YACtE,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,UAAU,CAAC;YAC/E,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU;gBAAE,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;YAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBACpD,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC9B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,UAAU,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;YACtB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;gBACtC,OAAO,WAAoB,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;gBACnF,OAAO,WAAoB,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,WAAoB,CAAC;YACzF,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC,CACF,CAAC;QACF,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE;gBACV,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAyB;gBAC3C,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,MAAO,CAAC;aACjC;YACD,OAAO;SACR,CAAC;IACJ,CAAC;IACD,0FAA0F;IAC1F,OAAO;QACL,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;IAC/B,CAAC;IACO,OAAO,CAAC,IAAe;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,gFAAgF;YAChF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;gBAC3C,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;YACxC,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC7D,oFAAoF;YACpF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,wEAAwE;QACxE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IACO,GAAG,CAAC,OAAgB;QAC1B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QACxB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;YAC/C,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACO,OAAO,CAAC,OAAgB;QAC9B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;IAC/B,CAAC;IACO,MAAM;QACZ,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"responder.js","sourceRoot":"","sources":["../../../src/core/trust/responder.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAkB,SAAS,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,OAAO,oBAAoB;IACvB,OAAO,CAAsB;IAC7B,WAAW,CAA4B;IAC9B,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IAC9B,QAAQ,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC5C,QAAQ,GAAG,KAAK,CAAC;IACR,KAAK,CAAI;IACT,SAAS,CAAU;IACnB,KAAK,CAAa;IACnC,qFAAqF;IACpE,SAAS,CAAiB;IAC3C,YAAY,KAAQ,EAAE,SAAyB,EAAE,SAAS,GAAG,KAAK,EAAE,QAAoB,EAAE;QACxF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;IACtE,CAAC;IACD,IAAI,aAAa;QACf,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAoC,CAAC;IACrE,CAAC;IACD;iGAC6F;IAC7F,MAAM,CACJ,KAAa,EACb,KAA0C,EAC1C,SAAoC;QAEpC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;QACjD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnB,uFAAuF;QACvF,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC7E,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS,CAAC,GAAG;YAC1F,OAAO,SAAS,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC;QAChC,IACE,OAAO,CAAC,OAAO;YACf,QAAQ,KAAK,SAAS;YACtB,CAAC,QAAQ,KAAK,OAAO,CAAC,eAAe,IAAI,aAAa,KAAK,SAAS,CAAC,EACrE,CAAC;YACD,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACjE,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7D,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACxC,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,eAAe;gBAAE,OAAO,SAAS,CAAC;YAC7D,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAyB,EAAE,CAAC;QACjF,CAAC;QACD,gFAAgF;QAChF,MAAM,qBAAqB,GACzB,OAAO,CAAC,OAAO,KAAK,SAAS;YAC7B,OAAO,CAAC,cAAc;YACtB,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC;QACzC,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,IAAI,qBAAqB;YAAE,OAAO,SAAS,CAAC;QACtF,MAAM,IAAI,GACR,SAAS,KAAK,SAAS;YACrB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC1F,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,OAAO,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC5D,CAAC,UAAU,EAAE,EAAE;YACb,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO,WAAoB,CAAC;YACtE,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,UAAU,CAAC;YAC/E,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU;gBAAE,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;YAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBACpD,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzB,CAAC;YACD,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,UAAU,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;YACtB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;gBACtC,OAAO,WAAoB,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;gBACnF,OAAO,WAAoB,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,WAAoB,CAAC;YACzF,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC,CACF,CAAC;QACF,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAyB,EAAE,IAAI,CAAC,MAAO,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC;IACD;;;OAGG;IACH,WAAW;QACT,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO;QACvC,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;IACD,0FAA0F;IAC1F,OAAO;QACL,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;IAC/B,CAAC;IACO,OAAO,CAAC,IAAe;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,gFAAgF;YAChF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAC7C,mFAAmF;gBACnF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC7D,oFAAoF;YACpF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,wEAAwE;QACxE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IACO,GAAG,CAAC,OAAgB;QAC1B,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE;YACrC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;YAC/C,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IACO,OAAO,CAAC,OAAgB;QAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;IAC/B,CAAC;IACO,MAAM;QACZ,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC;CACF"}

package/dist/core/trust/step.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The keys one trust answer writes, and what a retry of it may write (PRD §5.4,
+ * C-TRUST-01). Kept apart from the attempt's lifecycle in `write.ts`.
+ */
+import { type SelectableOption } from "../terminal-options.ts";
+export declare const retryMs = 250;
+export declare const observationMs = 20;
+export type TrustStep = {
+    /** The raw PTY keystrokes, not the printable answer summary activity reports. */
+    readonly keys: string;
+    /** The write confirms the answer (it carries Enter). */
+    readonly confirm: boolean;
+    readonly pollMs: number;
+};
+/**
+ * A cursor answer never sends a relative arrow or a bare Enter (docs/cli-behavior.md).
+ * Claude 2.1.310 remounts its dialog with the cursor back on "No, exit" once its input
+ * guard settles, and a retried arrow can land after the first already moved; a bare
+ * Enter decided from the earlier frame then confirms the decline. The absolute selection
+ * lands on the same row however often it repeats, and Enter travels only in the same
+ * write as it, once the rendered cursor sits on the affirmative.
+ */
+export declare function trustStep(option: SelectableOption): TrustStep;
+/**
+ * Shared by every attempt at one gate, so a later attempt (after a rejected write, a lost
+ * choice, or expiry) retries as after the gate's last write, never by typing a number
+ * blind. Only another complete dialog replacing the gate makes its return a fresh one.
+ */
+export type TrustPhase = {
+    /**
+     * A confirming write was started, whatever its outcome: a rejected or abandoned write
+     * may still have reached the CLI, so the gate's later numbered steps are retries.
+     */
+    confirmationWriteAttempted: boolean;
+    /** A confirming write fulfilled. That is not clearance, which only a frame verifies. */
+    confirmationWriteFulfilled: boolean;
+    /** A frame rendered after the last write: only such a frame can show it was ignored. */
+    renderedSinceWrite: boolean;
+};
+/** The phase of a gate the CLI drew afresh: nothing written to it yet. */
+export declare function freshPhase(): TrustPhase;
+type SelectableNumberedOption = Extract<SelectableOption, {
+    style: "numbered";
+}>;
+/**
+ * What a numbered answer's retry writes after its first write typed the number
+ * (`trustStep`); `undefined` waits for the next rendered frame. A frame still showing
+ * the gate does not prove the CLI ignored the answer: under load Codex 0.164 takes `1\r`
+ * but paints its composer after the retry interval, and the same keys typed again submit
+ * "1" as a user turn. Each adapter chooses its retry beside its clearance grammar
+ * (C-TRUST-01).
+ */
+export type NumberedRetry = (option: SelectableNumberedOption, renderedSinceWrite: boolean) => TrustStep | undefined;
+/**
+ * The default: the number again, but only once a frame rendered from output received
+ * after the last write still shows the gate. Claude needs this: its list remounts with
+ * the caret on the decline, so a bare Enter could exit.
+ */
+export declare const retypeAfterRender: NumberedRetry;
+/**
+ * For a CLI whose gate confirms its highlighted option on Enter and whose empty composer
+ * ignores a bare Enter: Enter alone while the rendered caret is on the affirmative, which
+ * confirms the gate or does nothing; otherwise `retypeAfterRender`.
+ */
+export declare const enterWhileSelected: NumberedRetry;
+export {};
+//# sourceMappingURL=step.d.ts.map

package/dist/core/trust/step.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"step.d.ts","sourceRoot":"","sources":["../../../src/core/trust/step.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAEhF,eAAO,MAAM,OAAO,MAAM,CAAC;AAC3B,eAAO,MAAM,aAAa,KAAK,CAAC;AAEhC,MAAM,MAAM,SAAS,GAAG;IACtB,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAM7D;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;;OAGG;IACH,0BAA0B,EAAE,OAAO,CAAC;IACpC,wFAAwF;IACxF,0BAA0B,EAAE,OAAO,CAAC;IACpC,wFAAwF;IACxF,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,0EAA0E;AAC1E,wBAAgB,UAAU,IAAI,UAAU,CAMvC;AAED,KAAK,wBAAwB,GAAG,OAAO,CAAC,gBAAgB,EAAE;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAEjF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,MAAM,EAAE,wBAAwB,EAChC,kBAAkB,EAAE,OAAO,KACxB,SAAS,GAAG,SAAS,CAAC;AAE3B;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,aACoB,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,aAGkB,CAAC"}

package/dist/core/trust/step.js

@@ -0,0 +1,45 @@
+/**
+ * The keys one trust answer writes, and what a retry of it may write (PRD §5.4,
+ * C-TRUST-01). Kept apart from the attempt's lifecycle in `write.ts`.
+ */
+import { cursorSelection } from "../terminal-options.js";
+export const retryMs = 250;
+export const observationMs = 20;
+/**
+ * A cursor answer never sends a relative arrow or a bare Enter (docs/cli-behavior.md).
+ * Claude 2.1.310 remounts its dialog with the cursor back on "No, exit" once its input
+ * guard settles, and a retried arrow can land after the first already moved; a bare
+ * Enter decided from the earlier frame then confirms the decline. The absolute selection
+ * lands on the same row however often it repeats, and Enter travels only in the same
+ * write as it, once the rendered cursor sits on the affirmative.
+ */
+export function trustStep(option) {
+    if (option.style === "numbered")
+        return { keys: `${option.number}\r`, confirm: true, pollMs: retryMs };
+    const select = cursorSelection(option);
+    const confirm = option.offset === 0;
+    return { keys: confirm ? `${select}\r` : select, confirm, pollMs: observationMs };
+}
+/** The phase of a gate the CLI drew afresh: nothing written to it yet. */
+export function freshPhase() {
+    return {
+        confirmationWriteAttempted: false,
+        confirmationWriteFulfilled: false,
+        renderedSinceWrite: false,
+    };
+}
+/**
+ * The default: the number again, but only once a frame rendered from output received
+ * after the last write still shows the gate. Claude needs this: its list remounts with
+ * the caret on the decline, so a bare Enter could exit.
+ */
+export const retypeAfterRender = (option, renderedSinceWrite) => renderedSinceWrite ? trustStep(option) : undefined;
+/**
+ * For a CLI whose gate confirms its highlighted option on Enter and whose empty composer
+ * ignores a bare Enter: Enter alone while the rendered caret is on the affirmative, which
+ * confirms the gate or does nothing; otherwise `retypeAfterRender`.
+ */
+export const enterWhileSelected = (option, renderedSinceWrite) => option.selected === true
+    ? { keys: "\r", confirm: true, pollMs: retryMs }
+    : retypeAfterRender(option, renderedSinceWrite);
+//# sourceMappingURL=step.js.map

package/dist/core/trust/step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"step.js","sourceRoot":"","sources":["../../../src/core/trust/step.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAyB,MAAM,wBAAwB,CAAC;AAEhF,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC;AAC3B,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAUhC;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,MAAwB;IAChD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAC7B,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACxE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACpF,CAAC;AAmBD,0EAA0E;AAC1E,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,0BAA0B,EAAE,KAAK;QACjC,0BAA0B,EAAE,KAAK;QACjC,kBAAkB,EAAE,KAAK;KAC1B,CAAC;AACJ,CAAC;AAiBD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAkB,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAC7E,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAkB,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAC9E,MAAM,CAAC,QAAQ,KAAK,IAAI;IACtB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;IAChD,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC"}

package/dist/core/trust/types.d.ts

@@ -1,13 +1,22 @@
 /** Attempt descriptors distinguish trust input from confirmed clearance (PRD §5.4). */
 import type { ElwoodAgentKind } from "../activity/index.ts";
 import type { StartupWriteCompletion } from "../startup/write.ts";
+import { type SelectableOption } from "../terminal-options.ts";
 import type { TrustPromptIdFor } from "./prompts.ts";
+import { type NumberedRetry, type TrustPhase } from "./step.ts";
 import { type TrustCandidate } from "./view.ts";
 import type { TrustAttempt } from "./write.ts";
 export type TrustPromptAutomation<A extends ElwoodAgentKind = ElwoodAgentKind> = {
     readonly prompt: TrustPromptIdFor<A>;
     readonly input: string;
 };
+/** What an adapter supplies beside its clearance grammar (C-TRUST-01). */
+export type TrustHooks = {
+    /** Told when blocking state changes without a frame (expiry, settlement). */
+    readonly onStateChange?: (() => void) | undefined;
+    /** What a numbered retry writes; the default retypes only after a rendered frame. */
+    readonly numberedRetry?: NumberedRetry;
+};
 /** Raw PTY result; the coordinator separately owns cancellation and clearance. */
 export type TrustWriteResult = void | Promise<void>;
 export type TrustPromptResult<A extends ElwoodAgentKind = ElwoodAgentKind> = {
@@ -21,7 +30,6 @@ export type TrustPromptResult<A extends ElwoodAgentKind = ElwoodAgentKind> = {
 /** Mutable coordinator state stays owned by a single observed trust generation. */
 export type Episode = {
     candidate: TrustCandidate;
-    deadlineAtMs: number;
     blocked: boolean;
     expired: boolean;
     expiredIdentity: string | undefined;
@@ -29,8 +37,20 @@ export type Episode = {
     attemptedIdentity: string | undefined;
     reportedPending: boolean;
     legacyAnswered: boolean;
+    /** Raw caller input reached this gate; automation writes nothing more to it. */
+    callerOwned: boolean;
+    /** Every attempt at this gate shares it, so its writes and frames outlive each attempt. */
+    readonly phase: TrustPhase;
     attempt: TrustAttempt | undefined;
 };
 /** A fresh episode for a newly observed candidate; only `blocked` carries over. */
 export declare function newEpisode(candidate: TrustCandidate, blocked: boolean): Episode;
+/** The result announcing an attempt at `prompt`'s affirmative `option`. */
+export declare function attempted<A extends ElwoodAgentKind>(prompt: TrustPromptIdFor<A>, option: SelectableOption, settled: Promise<StartupWriteCompletion>): TrustPromptResult<A>;
+/**
+ * The gate left the frame. An unconfirmed attempt lost its choice; a confirmed answer
+ * keeps waiting for verified clearance or the gate's return, unless an off-allowlist
+ * gate a human must answer replaced it (C-TRUST-01).
+ */
+export declare function leaveFrame(episode: Episode, offAllowlistGate: boolean): void;
 //# sourceMappingURL=types.d.ts.map

package/dist/core/trust/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/trust/types.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IAAI;IAC/E,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AACF,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACpD,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IACrE;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACnD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,GACzE,SAAS,CAAC;AAEd,mFAAmF;AACnF,MAAM,MAAM,OAAO,GAAG;IACpB,SAAS,EAAE,cAAc,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAa/E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/trust/types.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAc,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IAAI;IAC/E,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AACF,0EAA0E;AAC1E,MAAM,MAAM,UAAU,GAAG;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IAClD,qFAAqF;IACrF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;CACxC,CAAC;AACF,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACpD,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IACrE;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACnD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,GACzE,SAAS,CAAC;AAEd,mFAAmF;AACnF,MAAM,MAAM,OAAO,GAAG;IACpB,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,gFAAgF;IAChF,WAAW,EAAE,OAAO,CAAC;IACrB,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAc/E;AAED,2EAA2E;AAC3E,wBAAgB,SAAS,CAAC,CAAC,SAAS,eAAe,EACjD,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,GACvC,iBAAiB,CAAC,CAAC,CAAC,CAEtB;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAS5E"}

package/dist/core/trust/types.js

@@ -1,9 +1,10 @@
+import { optionInput } from "../terminal-options.js";
+import { freshPhase } from "./step.js";
 import { choiceIdentity } from "./view.js";
 /** A fresh episode for a newly observed candidate; only `blocked` carries over. */
 export function newEpisode(candidate, blocked) {
     return {
         candidate,
-        deadlineAtMs: 0,
         blocked,
         expired: false,
         expiredIdentity: undefined,
@@ -11,7 +12,30 @@ export function newEpisode(candidate, blocked) {
         attemptedIdentity: undefined,
         reportedPending: false,
         legacyAnswered: false,
+        callerOwned: false,
+        phase: freshPhase(),
         attempt: undefined,
     };
 }
+/** The result announcing an attempt at `prompt`'s affirmative `option`. */
+export function attempted(prompt, option, settled) {
+    return { kind: "attempted", automation: { prompt, input: optionInput(option) }, settled };
+}
+/**
+ * The gate left the frame. An unconfirmed attempt lost its choice; a confirmed answer
+ * keeps waiting for verified clearance or the gate's return, unless an off-allowlist
+ * gate a human must answer replaced it (C-TRUST-01).
+ */
+export function leaveFrame(episode, offAllowlistGate) {
+    episode.lastIdentity = undefined;
+    const confirmed = episode.phase.confirmationWriteFulfilled;
+    if (episode.attempt !== undefined && confirmed && !offAllowlistGate)
+        return;
+    episode.attempt?.cancel();
+    episode.attempt = undefined;
+    episode.attemptedIdentity = undefined;
+    // Another complete dialog replaced the gate, so the CLI drew its return afresh.
+    if (offAllowlistGate)
+        Object.assign(episode.phase, freshPhase());
+}
 //# sourceMappingURL=types.js.map

package/dist/core/trust/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/trust/types.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAuB,MAAM,WAAW,CAAC;AAgChE,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,SAAyB,EAAE,OAAgB;IACpE,OAAO;QACL,SAAS;QACT,YAAY,EAAE,CAAC;QACf,OAAO;QACP,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,SAAS;QAC1B,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC;QACvC,iBAAiB,EAAE,SAAS;QAC5B,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/trust/types.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAyB,MAAM,wBAAwB,CAAC;AAE5E,OAAO,EAAE,UAAU,EAAuC,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAuB,MAAM,WAAW,CAAC;AA0ChE,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,SAAyB,EAAE,OAAgB;IACpE,OAAO;QACL,SAAS;QACT,OAAO;QACP,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,SAAS;QAC1B,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC;QACvC,iBAAiB,EAAE,SAAS;QAC5B,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;QACrB,WAAW,EAAE,KAAK;QAClB,KAAK,EAAE,UAAU,EAAE;QACnB,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,SAAS,CACvB,MAA2B,EAC3B,MAAwB,EACxB,OAAwC;IAExC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;AAC5F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAgB,EAAE,gBAAyB;IACpE,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC;IAC3D,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,SAAS,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAC5E,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAC5B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IACtC,gFAAgF;IAChF,IAAI,gBAAgB;QAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/core/trust/view.d.ts

@@ -16,10 +16,12 @@ export type TrustCandidate = {
     readonly valid: boolean;
     readonly option: SelectableOption | undefined;
 };
+/** `gate` marks a complete off-allowlist dialog, which a human must answer. */
 export type TrustView = TrustCandidate | {
     readonly kind: "clear";
 } | {
     readonly kind: "unknown";
+    readonly gate?: true;
 };
 /** A present reader with unavailable output must never become the permissive no-reader mode. */
 export declare function readTrustView(readFrame: () => string | undefined, agent: ElwoodAgentKind, clearance: TrustClearance): TrustView | undefined;

package/dist/core/trust/view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"view.d.ts","sourceRoot":"","sources":["../../../src/core/trust/view.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAA0C,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAA4B,KAAK,eAAe,EAAwB,MAAM,cAAc,CAAC;AAEpG,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAAC;CAC/C,CAAC;AACF,MAAM,MAAM,SAAS,GAAG,cAAc,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEnG,gGAAgG;AAChG,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,MAAM,GAAG,SAAS,EACnC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,cAAc,GACxB,SAAS,GAAG,SAAS,CAGvB;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAKhF;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,cAAc,GACxB,SAAS,CAuBX;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CASvE"}
+{"version":3,"file":"view.d.ts","sourceRoot":"","sources":["../../../src/core/trust/view.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAA0C,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAA4B,KAAK,eAAe,EAAwB,MAAM,cAAc,CAAC;AAEpG,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAAC;CAC/C,CAAC;AACF,+EAA+E;AAC/E,MAAM,MAAM,SAAS,GACjB,cAAc,GACd;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAEvD,gGAAgG;AAChG,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,MAAM,GAAG,SAAS,EACnC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,cAAc,GACxB,SAAS,GAAG,SAAS,CAGvB;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAKhF;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,cAAc,GACxB,SAAS,CAwBX;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CASvE"}

package/dist/core/trust/view.js

@@ -1,3 +1,4 @@
+import { unknownGateVisible } from "./blocking.js";
 import { parseTrustCandidates, parseTrustDialog } from "./dialog.js";
 import { activeTrustDialogVisible, trustPromptAllowlist } from "./prompts.js";
 /** A present reader with unavailable output must never become the permissive no-reader mode. */
@@ -33,6 +34,8 @@ export function trustView(frame, agent, clearance) {
             };
         }
     }
+    if (unknownGateVisible(regions, agent))
+        return { kind: "unknown", gate: true };
     if (regions.length > 0)
         return { kind: "unknown" };
     return { kind: clearance(frame) ? "clear" : "unknown" };

package/dist/core/trust/view.js.map

@@ -1 +1 @@
-{"version":3,"file":"view.js","sourceRoot":"","sources":["../../../src/core/trust/view.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAoB,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAwB,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAYpG,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAC3B,SAAmC,EACnC,KAAsB,EACtB,SAAyB;IAEzB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAC9E,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAsB;IACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,oBAAoB,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,KAAa,EACb,KAAsB,EACtB,SAAyB;IAEzB,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,SAAS;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAS;YAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,IAAI,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,IAAI;gBACJ,sFAAsF;gBACtF,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;gBACrC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK;gBACL,MAAM,EAAE,KAAK;oBACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,CAAC,CAAC,SAAS;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,IAAoB;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,MAAM;QAClB,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"view.js","sourceRoot":"","sources":["../../../src/core/trust/view.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAoB,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAwB,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAgBpG,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAC3B,SAAmC,EACnC,KAAsB,EACtB,SAAyB;IAEzB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAC9E,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAsB;IACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,oBAAoB,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,KAAa,EACb,KAAsB,EACtB,SAAyB;IAEzB,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,SAAS;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAS;YAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,IAAI,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,IAAI;gBACJ,sFAAsF;gBACtF,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;gBACrC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK;gBACL,MAAM,EAAE,KAAK;oBACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,CAAC,CAAC,SAAS;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,IAAoB;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,MAAM;QAClB,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,CAAC;AACL,CAAC"}

package/dist/core/trust/write.d.ts

@@ -1,19 +1,29 @@
 /** One abortable, generation-owned trust attempt for both layouts (PRD §5.4/C-TRUST-01). */
 import type { StartupWriteCompletion } from "../startup/write.ts";
+import type { GateDeadline } from "./deadline.ts";
+import { type NumberedRetry, type TrustPhase } from "./step.ts";
 import type { TrustWriteResult } from "./types.ts";
 import { type TrustCandidate, type TrustView } from "./view.ts";
 export declare class TrustAttempt {
     readonly candidate: TrustCandidate;
     readonly identity: string;
     private readonly controller;
-    private confirmationWriteFulfilled;
     private clearance;
+    private retryAt;
+    private previousKeys;
+    private wakeWaiter;
     invalidated: boolean;
     /** The polled choice vanished mid-attempt; its return deserves a fresh attempt. */
     lostChoice: boolean;
-    constructor(candidate: TrustCandidate, identity: string);
+    private readonly numberedRetry;
+    /** The gate's write phase, shared with its earlier and later attempts. */
+    readonly phase: TrustPhase;
+    constructor(candidate: TrustCandidate, identity: string, phase: TrustPhase, numberedRetry?: NumberedRetry);
     get cleared(): boolean;
-    start(write: (input: string) => TrustWriteResult, read: (() => TrustView | undefined) | undefined, deadlineAtMs: number): Promise<StartupWriteCompletion>;
+    /** A frame rendered: a waiting answer or retry re-reads it (`awaiting`, `numberedRetry`). */
+    wake(): void;
+    /** The deadline is read live, so a gate that returns writes within its resumed budget. */
+    start(write: (input: string) => TrustWriteResult, read: (() => TrustView | undefined) | undefined, deadline: Pick<GateDeadline, "deadlineAtMs">): Promise<StartupWriteCompletion>;
     /**
      * With a live reader, only an observed clear/successor after a fulfilled confirmation
      * permits success. Without one (`atomic`), a fulfilled numbered write is the only evidence.
@@ -22,10 +32,25 @@ export declare class TrustAttempt {
     private completion;
     private atomic;
     private run;
-    private send;
-    private readChoice;
-    /** Race disposal against an in-flight write while retaining a rejection handler for it. */
+    /**
+     * `view`'s choice settled, or the wait for the next read: false once aborted. Not async,
+     * so a rejected write reaches `run` in as few turns as a direct `send` would.
+     */
+    private answer;
+    private stepFor;
+    /**
+     * A confirmed answer whose gate left the frame (the CLI erased it and is painting its
+     * next screen), or whose frame is unavailable, writes nothing and is not lost: it waits,
+     * unbounded here and without polling, for verified clearance or the gate's return. The
+     * coordinator owns that wait's end: clearance, expiry, a changed gate, an off-allowlist
+     * gate (which a human must answer), or closing (C-TRUST-01).
+     */
+    private awaiting;
+    private nextFrame;
     private own;
     private pause;
+    /** Write `step` unless it repeats the last input within the retry interval, then pause. */
+    private send;
+    private readChoice;
 }
 //# sourceMappingURL=write.d.ts.map

package/dist/core/trust/write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../src/core/trust/write.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAkB,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAKhF,qBAAa,YAAY;IACvB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,0BAA0B,CAAS;IAC3C,OAAO,CAAC,SAAS,CAAS;IAC1B,WAAW,UAAS;IACpB,mFAAmF;IACnF,UAAU,UAAS;gBAEP,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM;IAKvD,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,KAAK,CACH,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,EAC1C,IAAI,EAAE,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS,EAC/C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,sBAAsB,CAAC;IAQlC;;;OAGG;IACH,MAAM,CAAC,OAAO,UAAQ,GAAG,IAAI;IAM7B,OAAO,CAAC,UAAU;YAMJ,MAAM;YASN,GAAG;YAgCH,IAAI;IAYlB,OAAO,CAAC,UAAU;IAclB,2FAA2F;IAC3F,OAAO,CAAC,GAAG;IAmBX,OAAO,CAAC,KAAK;CAgBd"}
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../src/core/trust/write.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAGlE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,KAAK,aAAa,EAIlB,KAAK,UAAU,EAGhB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAkB,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAEhF,qBAAa,YAAY;IACvB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,UAAU,CAA2B;IAC7C,WAAW,UAAS;IACpB,mFAAmF;IACnF,UAAU,UAAS;IACnB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;gBAGzB,SAAS,EAAE,cAAc,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,aAAa,GAAE,aAAiC;IAQlD,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,6FAA6F;IAC7F,IAAI,IAAI,IAAI;IAOZ,0FAA0F;IAC1F,KAAK,CACH,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,EAC1C,IAAI,EAAE,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS,EAC/C,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,GAC3C,OAAO,CAAC,sBAAsB,CAAC;IAQlC;;;OAGG;IACH,MAAM,CAAC,OAAO,UAAQ,GAAG,IAAI;IAM7B,OAAO,CAAC,UAAU;YAKJ,MAAM;YASN,GAAG;IA2BjB;;;OAGG;IACH,OAAO,CAAC,MAAM;IAUd,OAAO,CAAC,OAAO;IAKf;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,KAAK;IAIb,2FAA2F;YAC7E,IAAI;IAoBlB,OAAO,CAAC,UAAU;CAanB"}