commandmate 0.49.0 → 0.49.1

package/dist/cli/commands/wait.js

@@ -22,21 +22,37 @@
  * Infrastructure errors use ExitCode (1, 2, 99)
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SELF_RESUME_HOLD_MS = exports.SELF_RESUME_CAPABILITY = exports.SELF_RESUME_PENDING_DETAIL = exports.TURN_OPENING_EVENT_TYPES = void 0;
-exports.formatRestartReleaseNotice = formatRestartReleaseNotice;
+exports.settleCurrentOutputPath = exports.HOOK_STOP_SETTLE_MAX_MS = exports.HOOK_STOP_SETTLE_INTERVAL_MS = exports.TURN_OPENING_EVENT_TYPES = exports.SELF_RESUME_PENDING_DETAIL = exports.SELF_RESUME_HOLD_MS = exports.SELF_RESUME_CAPABILITY = exports.formatRestartReleaseNotice = void 0;
 exports.pollWorktree = pollWorktree;
 exports.createWaitCommand = createWaitCommand;
 const commander_1 = require("commander");
 const types_1 = require("../types");
 const api_client_1 = require("../utils/api-client");
 const command_helpers_1 = require("../utils/command-helpers");
-const verify_runner_1 = require("../utils/verify-runner");
 const agent_target_options_1 = require("../config/agent-target-options");
 const prompt_1 = require("./prompt");
 const prompt_view_1 = require("../../lib/session/prompt-view");
 const instances_1 = require("./instances");
-/** [IA3-02] Polling interval 5 seconds (matches tmux-capture-cache TTL=2s) */
-const POLL_INTERVAL_MS = 5000;
+const wait_timing_1 = require("./wait-timing");
+const wait_notices_1 = require("./wait-notices");
+const wait_turn_boundary_1 = require("./wait-turn-boundary");
+const wait_hook_stop_settle_1 = require("./wait-hook-stop-settle");
+const wait_verify_1 = require("./wait-verify");
+const wait_instance_1 = require("./wait-instance");
+const wait_poll_bookkeeping_1 = require("./wait-poll-bookkeeping");
+// Issue #3964: the split-out modules' exports, re-exported so every import of
+// `./wait` keeps working.
+var wait_notices_2 = require("./wait-notices");
+Object.defineProperty(exports, "formatRestartReleaseNotice", { enumerable: true, get: function () { return wait_notices_2.formatRestartReleaseNotice; } });
+var wait_turn_boundary_2 = require("./wait-turn-boundary");
+Object.defineProperty(exports, "SELF_RESUME_CAPABILITY", { enumerable: true, get: function () { return wait_turn_boundary_2.SELF_RESUME_CAPABILITY; } });
+Object.defineProperty(exports, "SELF_RESUME_HOLD_MS", { enumerable: true, get: function () { return wait_turn_boundary_2.SELF_RESUME_HOLD_MS; } });
+Object.defineProperty(exports, "SELF_RESUME_PENDING_DETAIL", { enumerable: true, get: function () { return wait_turn_boundary_2.SELF_RESUME_PENDING_DETAIL; } });
+Object.defineProperty(exports, "TURN_OPENING_EVENT_TYPES", { enumerable: true, get: function () { return wait_turn_boundary_2.TURN_OPENING_EVENT_TYPES; } });
+var wait_hook_stop_settle_2 = require("./wait-hook-stop-settle");
+Object.defineProperty(exports, "HOOK_STOP_SETTLE_INTERVAL_MS", { enumerable: true, get: function () { return wait_hook_stop_settle_2.HOOK_STOP_SETTLE_INTERVAL_MS; } });
+Object.defineProperty(exports, "HOOK_STOP_SETTLE_MAX_MS", { enumerable: true, get: function () { return wait_hook_stop_settle_2.HOOK_STOP_SETTLE_MAX_MS; } });
+Object.defineProperty(exports, "settleCurrentOutputPath", { enumerable: true, get: function () { return wait_hook_stop_settle_2.settleCurrentOutputPath; } });
 /**
  * `type` reported for a blocked-on-a-human frame that carries no parsable prompt
  * (Issue #1628). Arrow-key menus — Codex's pager and `/model`, antigravity's
@@ -74,76 +90,6 @@ function waitAnswerVia(view) {
         return 'api';
     return 'terminal';
 }
-/**
- * Why `wait` decided the agent was done, printed on the completion line
- * (Issue #1839).
- *
- * `Completed: <id>` used to be the whole story, which made two very different
- * situations indistinguishable in a log: the agent's own `Stop` hook arrived, or
- * nothing but the screen said so. The measurement behind this Issue is exactly
- * that difference — a 529 storm returns Claude to its composer in ~3 s with the
- * scraper reporting `ready`/`input_prompt` and no `Stop` ever sent — so the
- * basis belongs next to the verdict rather than in a triage session afterwards.
- */
-const COMPLETION_BASIS = {
-    /** The agent reported the turn ended, and the report postdates this wait's turn. */
-    HOOK_STOP: 'hook_stop',
-    /** The tmux session went away after we had seen it alive. */
-    SESSION_GONE: 'session_gone',
-    /** The terminal frame says the agent is back at its composer. Nothing corroborated it. */
-    SCRAPER_READY: 'scraper_ready',
-};
-/**
- * Structured event types that mean "a turn is under way" (Issue #1839).
- *
- * Mirrors AGENT_EVENT_TYPES in src/lib/hooks/agent-event-types.ts; duplicated
- * rather than imported because the CLI bundle keeps its own copy of the API
- * shapes (see api-responses.ts).
- *
- * `notification` is deliberately absent, and that is the one measured deviation
- * from the design sketched in Issue #1839. The Issue proposed accepting
- * `stop` **or** `idle_prompt` as the end of a turn; the live capture of
- * 2026-08-20 (see docs/design/upstream-fault-turn-boundary-1839.md) shows
- * Claude 2.1.236 emitting `Notification(idle_prompt)` 62 s into a turn that
- * ran nothing at all, because the composer had been idle for a minute. Reading
- * it as a turn boundary would have re-created the false completion this gate
- * exists to stop, one minute later. Only `Stop` ends a turn.
- *
- * Exported for the cross-layer pin in
- * `tests/unit/session/status-contract-1926.test.ts`. The server opens a turn on
- * the same three events (`src/lib/session/provisional-turn.ts`
- * TURN_ACTIVITY_EVENTS), and since Issue #1930 `adoptTurnStart` reads that
- * turn's `openedAt` rather than this set — so a set that drifted would change
- * this gate silently. The set is still read here for the pre-#1930 fallback
- * path, and the CLI cannot import the server module (`tsconfig.cli.json` sets
- * `"paths": {}`), so the test is the only thing holding the two together.
- */
-exports.TURN_OPENING_EVENT_TYPES = new Set([
-    'user_prompt_submit',
-    'pre_tool_use',
-    'post_tool_use',
-]);
-/**
- * How far *before* this wait started a turn-opening event may sit and still be
- * read as the turn this wait is about (Issue #1839).
- *
- * `wait` does not know when `send` ran, and the honest proxy is its own start:
- * an orchestrator sends and then waits, so the turn's `UserPromptSubmit` lands
- * after `wait` is already polling (measured at +0.6 s from the send). One poll
- * interval of slack covers a `wait` that starts a moment late.
- *
- * The bound is what keeps this from being a new way to hang, and Issue #1930
- * narrowed what it has to defend against. It was written when structured events
- * were NOT fenced by generation on the way into `structuredEvents`, so a stale
- * `user_prompt_submit` from a previous agent process could still be the last
- * event on the wire and this window was the only thing stopping it from gating
- * a wait for ever. The server fences the turn now and publishes null when it
- * does, so the window's remaining job is narrower and sharper: a turn that has
- * already CLOSED must have closed inside this wait to count, or `wait` on a
- * session that finished an hour ago would inherit that turn's gate. An open
- * turn is adopted whatever its age — see {@link adoptTurnStart}.
- */
-const TURN_ADOPTION_GRACE_MS = POLL_INTERVAL_MS;
 /**
  * How long `isUnclassifiedActive` must hold before `wait` treats it as a stop
  * reason (Issue #1708).
@@ -163,625 +109,6 @@ const TURN_ADOPTION_GRACE_MS = POLL_INTERVAL_MS;
  *     for working around a detector bug, and the bug is the thing to fix.
  */
 const UNCLASSIFIED_DWELL_MS = 60_000;
-/**
- * The keystroke that closes opencode's sidebar, in opencode's own notation
- * (Issue #2095).
- *
- * A local copy of `OPENCODE_SIDEBAR_RECOVERY_CHORD` from
- * `src/lib/detection/opencode-pane-obstruction.ts` and not an import: the CLI
- * builds with `"paths": {}` (tsconfig.cli.json) and cannot reach `@/lib` at all,
- * which is why `api-responses.ts` mirrors payload shapes rather than importing
- * them. Taken from opencode's own keybind table, which its `ctrl+p` palette
- * prints as `Show sidebar   ctrl+x b`.
- */
-const OPENCODE_SIDEBAR_RECOVERY_CHORD = 'ctrl+x b';
-/**
- * The cause sentence to append when the frame carries a pane obstruction, or ''
- * (Issue #2095).
- *
- * Appended rather than substituted, and no exit code moves: the frame is
- * genuinely unclassified and `wait` was already right to stop on it. What it
- * could not say before is WHY, which left an operator with `capture --pane` and
- * a screenful of box drawing to work it out from.
- *
- * Empty for a server too old to publish the field, which is the same output
- * `wait` produced before this Issue.
- */
-function describePaneObstruction(data) {
-    const obstruction = data.paneObstruction;
-    if (!obstruction)
-        return '';
-    return (` Cause: paneObstruction=${obstruction.id} — a second column is sharing rows with the ` +
-        `transcript (it reads ${JSON.stringify(obstruction.matchedText)}), which covers the marker ` +
-        `that ends a turn. Press \`${OPENCODE_SIDEBAR_RECOVERY_CHORD}\` in the pane to close ` +
-        `opencode's sidebar.`);
-}
-/**
- * How recent `autoYes.lastSuppression` must be to be reported as the reason this
- * wait is blocked (Issue #1699).
- *
- * The record is refreshed on every poll for as long as the suppressed prompt is
- * on screen, so a fresh timestamp means "this is happening now" while an old one
- * is a historical suppression of some earlier prompt. The window is generous
- * against the server's own poll interval — being a few seconds late with a true
- * report beats staying silent, which is the failure this exists to fix.
- *
- * Issue #2463 reads the same window as "the policy withheld THIS prompt", which
- * is what ends the Auto-Yes hold at once. `current-output` publishes no start
- * time for a scraped prompt, so the push gate's `suppression.at >= waitingSince`
- * (`src/lib/push/prompt-push-gate.ts`) cannot be computed here; a record that is
- * still being re-stamped is the CLI's reading of it. Using one window for both
- * keeps the hold and the payload in agreement: an exit 10 carries
- * `autoYesSuppression` exactly when the hold judged the answer withheld. The
- * error runs towards reporting — a withheld answer to an earlier prompt, under a
- * minute old, still ends the hold, which is the pre-#2463 exit rather than a
- * new failure.
- *
- * Issue #3798: a server that names the waiting episodes does what the push gate
- * does — the record's `episodeId` against the payload's
- * `autoYes.waitingEpisodeId`, which decide when both are present: another id
- * (or no wait open) is a record of an earlier wait, however recent; the same
- * id is this wait's. Either one missing (an older server, a record written
- * before any wait was open), this window decides as before. Whichever
- * decides, a record the server marks `lastSuppressionAnswered` — Auto-Yes
- * answered the open wait after it was written — is history, not this wait's
- * reason, as the push gate reads it: the hold goes on.
- */
-const SUPPRESSION_FRESH_MS = 60_000;
-/**
- * The suppression currently blocking this session, or null.
- *
- * Issue #3863: with the Auto-Yes answer mode in effect (`autoYesAnswerMode`)
- * when the server publishes one — what `question-left-to-human` and
- * `recommended-option-unidentified` depend on.
- */
-function activeSuppression(data, now) {
-    // No `autoYes` at all (a session that is not running, Issue #3300) reads as
-    // "nothing was withheld", the same as a null record.
-    const suppression = data.autoYes?.lastSuppression;
-    if (!suppression)
-        return null;
-    const ageMs = now - suppression.at;
-    const waitId = data.autoYes?.waitingEpisodeId;
-    if (suppression.episodeId !== undefined && waitId !== undefined) {
-        if (suppression.episodeId !== waitId)
-            return null;
-    }
-    else if (ageMs > SUPPRESSION_FRESH_MS) {
-        // A negative age is clock skew between the CLI and the server, not staleness.
-        return null;
-    }
-    if (data.autoYes?.lastSuppressionAnswered === true)
-        return null;
-    const answerMode = data.autoYesAnswerMode;
-    return {
-        suppression,
-        ageSeconds: Math.max(0, Math.round(ageMs / 1000)),
-        ...(answerMode !== undefined ? { answerMode } : {}),
-    };
-}
-/** The wording for the four reasons a contract's `autoYes` block really authors. */
-const CONTRACT_POLICY_CAUSE = 'by contract policy';
-/**
- * What withheld the answer, in the words `wait` puts on stderr (Issue #1843).
- *
- * A Record over the whole reason union rather than one fixed phrase: adding a
- * reason to {@link AutoYesSuppressionReason} without deciding what `wait` should
- * say about it is a compile error here, which is the point. Until #1843 the
- * notice hard-coded "by contract policy" for every reason, so #1829's
- * `agent-launch-dialog` — a product-side decision the poller makes with no
- * contract in sight (`suppressIfNotOursToAnswer` in
- * `src/lib/polling/auto-yes-prompt-suppression.ts`: codex's lifecycle dialogs,
- * gemini's folder trust since #3776 and copilot's since #3790) — sent operators
- * of contract-less worktrees hunting for a `denyPatterns` entry that did not
- * exist.
- *
- * The three sites that record a suppression are covered: the poller's launch-dialog
- * branch (`agent-launch-dialog`), the poller's policy branch and
- * `lib/hooks/permission-decision-service.ts` (both the four `evaluatePolicyAgainstTexts`
- * verdicts, which is why those four keep the pre-#1843 wording exactly), and
- * the poller's stopped-answer branch (`partial-answer`, Issue #3706 / #3713),
- * and the poller's agy trust-screen branch (`startup-trust-unhandled`, Issue #3757),
- * and the poller's question confirm-page branch (`question-confirm-page`, Issue #3748),
- * and the poller's question branch (`question-left-to-human`, Issue #3822),
- * and the resolver's permission-row reading (`allow-once-unidentified`, Issue #3822),
- * and the resolver's choice of a question's recommended option
- * (`recommended-option-unidentified`, Issue #3863),
- * and the poller's agy receipt-gate branch (`no-hook-receipt`, Issue #3767),
- * and a contract lookup that failed on either of the policy paths
- * (`policy-lookup-failed`, Issue #3822).
- */
-const SUPPRESSION_CAUSE = {
-    'mode-off': CONTRACT_POLICY_CAUSE,
-    'deny-pattern': CONTRACT_POLICY_CAUSE,
-    'deny-pattern-unusable': CONTRACT_POLICY_CAUSE,
-    'type-not-allowed': CONTRACT_POLICY_CAUSE,
-    // Issue #3822. Not "by contract policy": the contract could not be read at
-    // all, so nothing it says was applied. Withheld rather than answered, since
-    // the contract may state `off`; it clears once the server reads it again.
-    'policy-lookup-failed': 'because the server could not read the execution contract (the database lookup failed), so Auto-Yes does not answer until it can; check the server log for policy-lookup-failed',
-    // Issue #3790: after the launch window the poller still leaves copilot's and
-    // gemini's trust dialogs alone when the cursor is not on the safe row, and
-    // nobody else answers them then.
-    'agent-launch-dialog': "while the agent's launch dialog was on screen; if it stays after the launch (copilot's cursor on 2. or 3., gemini's not on 1. Trust folder), answer it at the pane",
-    // Issue #1924. Deliberately not "by contract policy": no contract was
-    // consulted. The frame looked like a numbered list to the generic estimator
-    // and like prose to the tool's own detector, and an operator who reads this
-    // should go and look at the pane rather than at `denyPatterns`.
-    'unclassified-frame': 'because no tool-specific dialog detector recognised the frame',
-    // Issue #3713 (#3706's reason). Not "by contract policy" either: an earlier
-    // Auto-Yes answer was stopped with some of its keys already in the input, and
-    // typing it again would append to them, so the prompt waits for a human.
-    // Issue #3880: or a send of it (Auto-Yes's, or a person's that failed) ended
-    // without tmux confirming it, and no key may be known to be there. The #3713
-    // sentence is kept as it was and the other case follows it.
-    'partial-answer': "because an earlier answer left partial input; Auto-Yes is waiting for a human (or that answer's send could not be confirmed, so the input may hold it: check the pane, then answer; an answer that goes through releases the hold)",
-    // Issue #3757. agy's startup folder-trust screen: the launch's to confirm, not
-    // Auto-Yes's, and agy drew it after the launch window had ended.
-    'startup-trust-unhandled': "because agy's startup folder-trust confirmation is the launch's to answer, not Auto-Yes's; the next send confirms it once, or answer it at the pane",
-    // Issue #3748. The AskUserQuestion confirm page (`Submit` / `Cancel`): the
-    // tool's own reader recognised it, and `Submit` commits whatever stands as the
-    // answers, so it waits for a human. Was recorded as `unclassified-frame`,
-    // whose wording above says the opposite (nothing recognised the frame).
-    'question-confirm-page': "because the question's Submit/Cancel confirmation commits the answers as they stand, so Auto-Yes leaves it to a human",
-    // Issue #3822. A question the agent asks the operator (an AskUserQuestion
-    // picker, OpenCode V2's question form): Auto-Yes answers permissions only,
-    // and no contract setting delegates the question. Issue #3863: since the
-    // answer modes, that is the `careful` mode's rule (and OpenCode V2's form
-    // under either mode); `answerMode=` on the line says which mode was on.
-    'question-left-to-human': 'because the agent is asking a question, and Auto-Yes answers permissions only (the careful answer mode, or a question form no mode answers); answer it at the pane (prompt --json, respond), or turn Auto-Yes on with --answer-mode recommended to have it pick the recommended option',
-    // Issue #3822. A permission dialog none of whose rows allows this call only
-    // (each saves a rule, changes the mode or denies), or two of which read so.
-    // Auto-Yes never picks a row that outlives this call, so it waits for a human.
-    'allow-once-unidentified': 'because no single option of the permission dialog allows this call only (the others save a rule, change the permission mode, or deny); Auto-Yes does not pick those, so answer it at the pane (prompt --json, respond)',
-    // Issue #3863. The recommended answer mode answers a question with its one
-    // recommended option (else its default), and could not tell which that is.
-    'recommended-option-unidentified': "because the question's recommended option could not be told (two or more marked recommended, a title it could not tell from its description, a typed-text or multi-select answer); answer it at the pane (prompt --json, respond)",
-    // Issue #3767. agy's approval dialog has no matching hook question (none, too
-    // late, already on screen, or the hook stopped arriving). Not a contract verdict.
-    // Issue #3789: nor one left unused — the last was spent on keys Auto-Yes sent,
-    // and a dialog is still up past the grace — so "no unused question" covers both.
-    'no-hook-receipt': "because there is no unused agy hook permission question for this dialog (none arrived in time, or the last one was spent on keys that did not clear it); answer it yourself (auto-yes --disable, prompt --json, respond --expect-screen) or check hooks.json",
-};
-/**
- * {@link SUPPRESSION_CAUSE} for a reason that arrived over the wire.
- *
- * `reason` is a server-supplied string, so a server newer than this CLI can name
- * a reason the union does not have. Naming it verbatim is the only honest answer:
- * quietly folding an unknown reason into "by contract policy" is the same
- * misattribution #1843 exists to remove, just for a future reason instead of
- * `agent-launch-dialog`.
- */
-function suppressionCause(reason) {
-    return Object.prototype.hasOwnProperty.call(SUPPRESSION_CAUSE, reason)
-        ? SUPPRESSION_CAUSE[reason]
-        : `for a reason this CLI does not recognise (${reason})`;
-}
-/**
- * One stderr line naming what is holding this prompt (Issue #1699).
- *
- * `wait` used to print only "Waiting for human response...", which reads the
- * same whether a human was always going to answer or whether Auto-Yes silently
- * refused to. That ambiguity is what let a deny pattern matching a finished turn
- * stall two workers unnoticed; the pattern and the reason code belong on screen.
- *
- * Issue #1843: the cause is chosen per reason rather than asserted. `reason=` is
- * in the payload either way, so the prefix is the only part that can lie — and it
- * did, for every non-contract suppression.
- */
-function formatSuppressionNotice(suppression, ageSeconds, answerMode) {
-    const parts = [
-        `reason=${suppression.reason}`,
-        `mode=${suppression.mode ?? 'none'}`,
-        `promptType=${suppression.promptType}`,
-    ];
-    if (suppression.pattern !== undefined) {
-        parts.push(`pattern=${JSON.stringify(suppression.pattern)}`);
-    }
-    // Issue #3863: the Auto-Yes answer mode in effect, when the server says.
-    if (answerMode !== undefined) {
-        parts.push(`answerMode=${answerMode}`);
-    }
-    const cause = suppressionCause(suppression.reason);
-    return `  auto-yes suppressed this prompt ${cause}: ${parts.join(' ')} (${ageSeconds}s ago)`;
-}
-/**
- * One stderr line saying Auto-Yes is off on this instance because the server
- * restarted (Issue #3730), or null.
- *
- * Only words: the prompt was going to be reported either way — an instance
- * whose grant the restart released is an instance with Auto-Yes off, and exit
- * 10 for it is exactly the hand-back it always was. What this adds is the WHY,
- * so a delegating agent re-enables Auto-Yes instead of guessing. A server
- * older than the reason sends none, and nothing is printed.
- *
- * The command it suggests names the instance this wait is about: without
- * `--instance`, `auto-yes --enable` arms the worktree's default primary, which
- * for an alias (or a non-default tool) is another instance — the waited-on one
- * would stay off while a grant went somewhere nobody asked for. The instance is
- * the resolved `--instance` when one was given, else the CLI tool the server
- * answered for (a primary's instance ID is its tool ID).
- *
- * @param instanceId - The resolved `--instance` of this wait, if any
- */
-function formatRestartReleaseNotice(worktreeId, data, instanceId) {
-    if (data.autoYes?.enabled !== false || data.autoYes.stopReason !== 'server-restart')
-        return null;
-    const target = instanceId ?? data.cliToolId;
-    const command = `commandmate auto-yes ${worktreeId} --enable${target ? ` --instance ${target}` : ''}`;
-    return `  auto-yes was released by a server restart on ${worktreeId} (it is not turned back on ` +
-        `automatically); re-enable it with \`${command}\` if this session should keep answering.`;
-}
-/**
- * One stderr line saying Auto-Yes pressed Enter on THIS prompt (Issue #3397), or
- * null when the record is absent or about another screen.
- *
- * The prompt is one CommandMate could not read (the window offers direct input
- * for it). `sent` — Auto-Yes confirmed whatever was selected; `no-effect` — the
- * same screen outlived the Enter, no second one was sent, and it is a human's
- * again. An outcome this CLI does not know is named verbatim (#1843's rule).
- * `currentPrompt` is the server's judgement that the record is about the
- * `promptData` of the same response, so an Enter sent to an earlier screen is
- * never reported against this one.
- */
-function formatEnterFallbackNotice(data, now) {
-    const record = data.autoYes?.lastEnterFallback;
-    if (!record || record.currentPrompt !== true)
-        return null;
-    const detail = `refusal=${record.refusalReason} promptType=${record.promptType}`;
-    const ago = `(${Math.max(0, Math.round((now - record.at) / 1000))}s ago)`;
-    if (record.outcome === 'sent') {
-        return `  auto-yes sent Enter to this prompt (CommandMate could not read it): ${detail} ${ago}`;
-    }
-    if (record.outcome === 'no-effect') {
-        return `  auto-yes sent Enter to this prompt, but the same screen is still up (no-effect); ` +
-            `answer it in the terminal: ${detail} ${ago}`;
-    }
-    return `  auto-yes Enter record for this prompt: outcome=${record.outcome} ${detail} ${ago}`;
-}
-/**
- * Issue #3821: the server's own word that Auto-Yes left this prompt to a human
- * (`autoYesDecision.state === 'withheld'`) — `server-poller-inactive` when no
- * poller runs for the instance, or a stop the suppression record does not
- * carry. Read only when the server publishes the field; an older one leaves
- * `wait` holding as before.
- */
-function decisionWithheldReason(data) {
-    const decision = data.autoYesDecision;
-    if (decision?.state !== 'withheld')
-        return null;
-    return decision.reason ?? 'unknown';
-}
-/**
- * Whether this server publishes a real turn record (Issue #1930).
- *
- * `dialogPendingMaxMs` landed with the turn model and is set on every payload a
- * server of that vintage produces, so its presence is the version probe. A
- * *value* rather than a version string, for the reason #1924 gives for the
- * capability block: a payload that has to be interpreted by its sender's
- * version number is a payload nobody can read forward.
- *
- * The probe is needed because the two readings below disagree in exactly the
- * case that matters. On a #1930 server, `openedAt` being null while
- * `lastEventType` is `user_prompt_submit` means the turn was fenced off by a
- * generation or aged out — the server has *decided* it is not this instance's
- * turn. Falling back to the event on such a payload would put back the stale
- * adoption the turn record exists to remove.
- */
-function publishesTurnRecord(data) {
-    return data.structuredEvents?.dialogPendingMaxMs != null;
-}
-/**
- * Adopt the turn this wait is about, if this poll shows one (Issue #1839,
- * moved onto the turn record in #1930).
- *
- * ## What changed, and why the grace window is no longer the whole guard
- *
- * Before #1930 this read `lastEventType` / `lastEventAt` — the newest event of
- * any kind — and refused anything older than {@link TURN_ADOPTION_GRACE_MS},
- * because (in the words of that constant) structured events "are NOT fenced by
- * generation on the way into `structuredEvents`", so a stale
- * `user_prompt_submit` from a previous agent process could still be the last
- * event on the wire. The bound was the only thing keeping such a record from
- * gating a wait for ever.
- *
- * The server fences the turn now, and publishes null when it does. So an **open**
- * turn is adopted whatever its age — which closes a hole the old reading had:
- * a turn that opened ten minutes before this `wait` started, and is still
- * running, used to be adopted only because its *newest* event was fresh. An
- * agent that goes quiet mid-turn (thinking, a long tool call) has no fresh
- * event, so the #1839 gate came down at exactly the moment a 529 storm would
- * exploit it.
- *
- * A **closed** turn still has to have opened inside this wait's window, and the
- * reason is the one the grace constant gives: `wait` does not know when `send`
- * ran, so the last turn of a session that finished an hour ago must not gate a
- * wait that has only just started. `commandmate wait` on an already-idle
- * session therefore adopts nothing and completes on its first poll, exactly as
- * it did before — #1975 measured that at 234/242/259 ms and it is the
- * orchestrator's normal path.
- *
- * @param previous - the turn start adopted so far, or null
- * @returns the newest adopted turn start, or `previous` when nothing qualified
- */
-function adoptTurnStart(data, waitStartedAt, previous) {
-    const events = data.structuredEvents;
-    if (!events)
-        return previous;
-    if (!publishesTurnRecord(data)) {
-        // A server older than #1930. Same reading this function has had since
-        // #1839, kept so a newer CLI pointed at an older server does not silently
-        // lose the gate.
-        if (events.lastEventAt == null || events.lastEventType == null)
-            return previous;
-        if (!exports.TURN_OPENING_EVENT_TYPES.has(events.lastEventType))
-            return previous;
-        if (events.lastEventAt < waitStartedAt - TURN_ADOPTION_GRACE_MS)
-            return previous;
-        return previous === null || events.lastEventAt > previous ? events.lastEventAt : previous;
-    }
-    const openedAt = events.openedAt;
-    // Null covers every "there is no turn to adopt" case the server knows about:
-    // nothing reported, a previous generation, aged out, or a `stop` whose
-    // opening was never observed.
-    if (openedAt == null)
-        return previous;
-    if (events.closedAt != null && openedAt < waitStartedAt - TURN_ADOPTION_GRACE_MS) {
-        return previous;
-    }
-    return previous === null || openedAt > previous ? openedAt : previous;
-}
-/**
- * `structuredEvents.closedBy`, phrased for a diagnostic line (Issue #1930).
- *
- * The server's close-reason vocabulary and {@link COMPLETION_BASIS} answer two
- * different questions — "why did the turn end" and "what did `wait` decide on"
- * — and are deliberately printed side by side rather than folded together.
- * `hook_stop` is the only place they meet: it is `closedBy: 'stop'` seen from
- * the CLI's end. Everything else (`stale`, `scraper_evidence`, `session_end`,
- * `generation`, `resync_idle`) is a reason the turn stopped being trusted, which
- * is precisely what `wait` must NOT read as completion.
- */
-function describeTurnClose(data) {
-    const events = data.structuredEvents;
-    if (!events)
-        return 'turn=unknown';
-    const id = events.turnId ?? 'none';
-    const closedBy = events.closedBy ?? (events.openedAt != null ? 'open' : 'none');
-    return `turn=${id} closedBy=${closedBy}`;
-}
-/**
- * Whether the agent has reported the end of the turn this wait adopted
- * (Issue #1839).
- *
- * True when no turn was adopted at all, which is the whole of the unchanged
- * path: a session whose agent posts no hooks never adopts one, so every caller
- * on a machine without hook injection sees precisely the pre-#1839 behaviour.
- */
-function turnSettled(data, turnStartedAt) {
-    if (turnStartedAt === null)
-        return true;
-    const stoppedAt = data.lastStopEventAt;
-    return stoppedAt != null && stoppedAt >= turnStartedAt;
-}
-/**
- * The structured event that ends a turn (Issue #1975).
- *
- * The counterpart of {@link TURN_OPENING_EVENT_TYPES}, kept as a bare constant
- * because the vocabulary a source declares in `capabilities.supportedEvents` is
- * the wire's, not this build's: a tool that cannot say `stop` cannot release the
- * hold below, so asking for the word by name is the whole of the check.
- */
-const TURN_CLOSING_EVENT_TYPE = 'stop';
-/**
- * How long `wait` will hold a composer frame open for an agent that has been
- * handed a prompt it has not reported the end of (Issue #1975).
- *
- * The hold's *reason* is exact — see {@link outstandingPrompt} — so this is not
- * a settling window standing in for evidence. It is the bound the contract of
- * this Issue asks for: hooks are fail-open on every path, so a `Stop` that is
- * simply lost (the receiver was restarted, the machine-wide
- * `~/.copilot/settings.json` was rewritten by another server mid-session, the
- * 4-second curl in the hook timed out) must not turn `wait` into a command that
- * never returns. After this it completes on the frame alone, exactly as it did
- * before this Issue, and says so.
- *
- * 60s is the same dwell {@link UNCLASSIFIED_DWELL_MS} uses for the same job, and
- * it is ~55x the widest send-to-turn-open window measured for this Issue
- * (2026-08-22, copilot 1.0.80 against an isolated server: 0.04s / 0.75s / 0.88s
- * / 1.10s over four sends, the last of them a cold session start). `--timeout`
- * and `--stall-timeout` below 60s still win, as they do for the unclassified
- * dwell: this pre-empts long waits, it does not extend short ones.
- */
-const PENDING_PROMPT_HOLD_MS = 60_000;
-/**
- * Whether this tool's event source claims it can report both ends of a turn
- * (Issue #1975).
- *
- * The gate that keeps the hold below off every path it has no evidence for.
- * `structuredEvents.source.capabilities` is #1924's declaration, published to
- * the CLI already, and the compatibility source a tool with no implementation
- * gets (`src/lib/hooks/sources/legacy-relay.ts`) declares `supportedEvents: []`
- * — so a tool that posts no hooks answers `false` here and takes precisely the
- * pre-#1975 path. So does a server older than #1924, which sends no `source` at
- * all.
- *
- * Both words are required. Without a turn-opening word nothing would ever open
- * the turn this waits for; without `stop` nothing could ever close it, and the
- * hold would only ever end at its own bound.
- */
-function reportsTurnBoundaries(data) {
-    const declared = data.structuredEvents?.source?.capabilities?.supportedEvents;
-    if (!Array.isArray(declared))
-        return false;
-    return (declared.includes(TURN_CLOSING_EVENT_TYPE) &&
-        declared.some(event => exports.TURN_OPENING_EVENT_TYPES.has(event)));
-}
-/**
- * The `stop` detail meaning "the agent ended its turn with its own background
- * work still running, and resumes by itself when that work finishes"
- * (Issue #2614).
- *
- * A copy of `SELF_RESUME_PENDING_DETAIL` in `src/lib/hooks/agent-event-types.ts`
- * for the reason {@link TURN_OPENING_EVENT_TYPES} is a copy: the CLI builds with
- * `"paths": {}`. `tests/unit/cli/commands/wait-self-resume-2614.test.ts` pins the
- * two together.
- */
-exports.SELF_RESUME_PENDING_DETAIL = 'self_resume_pending';
-/**
- * The capability a source declares when its `stop` can carry
- * {@link SELF_RESUME_PENDING_DETAIL} (Issue #2614).
- *
- * Read by name rather than through the mirrored type in `api-responses.ts`,
- * which predates it: `structuredEvents.source.capabilities` is published as the
- * source's whole declaration, so a newer server sends the key and an older one
- * simply does not.
- */
-exports.SELF_RESUME_CAPABILITY = 'stopReportsSelfResume';
-/**
- * How long `wait` holds a `stop` whose agent said it would resume by itself
- * (Issue #2614).
- *
- * Measured 2026-09-17 against antigravity 1.2.4: a `schedule` of 60 s closed the
- * turn, the agent woke 58 s after its `Stop` and did it again three more times,
- * and the real end came five minutes after the first `Stop` — which is where
- * `wait` had already reported `Completed (basis=hook_stop)` and started a
- * verification against a half-finished worktree. The wake is not something to
- * time: it is a `post_tool_use` that opens a new turn, and #1839's gate takes
- * over from there. What needs a bound is only the case where it never comes.
- *
- * A timer's own length is not on the wire (the `schedule` arguments reach the
- * permission receiver and stop there), and a command sent to the background has
- * no length at all, so the bound is the one the server already uses for the
- * same question the other way round: how long an open turn is trusted with
- * nothing heard (`TURN_STALE_AFTER_MS` in `src/lib/session/provisional-turn.ts`,
- * pinned equal by `wait-self-resume-2614.test.ts`). Every wake starts a new
- * `stop` and a new hold, so an agent that keeps rescheduling never reaches it.
- *
- * A constant, like {@link PENDING_PROMPT_HOLD_MS}: `--timeout` and
- * `--stall-timeout` below it still win.
- */
-exports.SELF_RESUME_HOLD_MS = 30 * 60 * 1000;
-/**
- * Whether this tool's event source can say, on its `stop`, that the agent will
- * resume by itself (Issue #2614).
- *
- * The same kind of gate as {@link reportsTurnBoundaries}, and it requires that
- * one too: the hold below is released by a turn-opening event, and a source
- * that cannot send one could only ever end the hold at its bound. A server that
- * predates the declaration answers `false`, and so does every source but the one
- * that writes the detail.
- */
-function reportsSelfResume(data) {
-    const declared = data.structuredEvents?.source?.capabilities;
-    return declared?.[exports.SELF_RESUME_CAPABILITY] === true && reportsTurnBoundaries(data);
-}
-/**
- * The instant of the `stop` this agent said it would resume from, or null
- * (Issue #2614).
- *
- * Non-null only while that `stop` is still the newest thing the agent has said.
- * The wake is a `post_tool_use` (antigravity reports the timer's own tool call
- * finishing when it fires), which replaces the displayed event and opens a new
- * turn, so this answers null from the first poll after it — and a later `stop`
- * is a different instant, which is how a hold knows it is about a new one.
- *
- * On a server that publishes a turn record the `stop` must also be what closed
- * that turn: a turn ended by `generation` or `session_end` belongs to a process
- * that is gone, and nothing it scheduled is going to wake anything.
- */
-function pendingSelfResumeStop(data) {
-    if (!reportsSelfResume(data))
-        return null;
-    const events = data.structuredEvents;
-    if (!events || events.lastEventType !== TURN_CLOSING_EVENT_TYPE)
-        return null;
-    if (events.lastEventDetail !== exports.SELF_RESUME_PENDING_DETAIL)
-        return null;
-    // `closedBy` is the server's close-reason vocabulary; `'stop'` there is the
-    // agent's own `Stop`, the only close this hold is about.
-    if (publishesTurnRecord(data) && events.closedBy !== 'stop')
-        return null;
-    return events.lastEventAt ?? null;
-}
-/**
- * When this (worktree, instance) was last handed a prompt (Issue #1975).
- *
- * `limit=1&unit=pairs` is "every row at or after the newest user message"
- * (src/lib/db/chat-db.ts), which is the smallest query that is *guaranteed* to
- * contain that message: plain `limit=1` returns the newest row of either role,
- * and for a turn the agent has already answered that row is the assistant's.
- *
- * Scoped the same way the poll above is: `--instance` when the caller named one,
- * otherwise the `cliToolId` the server resolved for that same poll. Asking
- * unscoped would let a message sent to claude decide a wait on codex.
- *
- * Never throws. An unreadable ledger is not evidence that nothing was sent, so
- * it is reported as such rather than as "nothing was sent" — the call site
- * degrades to the pre-#1975 behaviour instead of holding on a guess.
- */
-async function readNewestPromptAt(client, worktreeId, options, data) {
-    const query = new URLSearchParams({ limit: '1', unit: 'pairs' });
-    if (options.instance)
-        query.set('instance', options.instance);
-    else if (data.cliToolId)
-        query.set('cliTool', data.cliToolId);
-    try {
-        const rows = await client.get(`/api/worktrees/${worktreeId}/messages?${query.toString()}`);
-        let newest = null;
-        for (const row of rows ?? []) {
-            if (row.role !== 'user')
-                continue;
-            // ISO string on the wire (a JSON-serialized Date), so this is the only
-            // place the two clocks meet — and both sides of the comparison below are
-            // stamped by the server, so no CLI/server skew enters the verdict.
-            const at = Date.parse(row.timestamp);
-            if (Number.isNaN(at))
-                continue;
-            if (newest === null || at > newest)
-                newest = at;
-        }
-        return { readable: true, submittedAt: newest };
-    }
-    catch (error) {
-        console.error(`Note: could not read the message ledger for ${worktreeId} ` +
-            `(${error instanceof Error ? error.message : String(error)}); ` +
-            'completion will be judged from the frame alone.');
-        return { readable: false };
-    }
-}
-/**
- * Whether the newest prompt this instance was handed is still unanswered
- * (Issue #1975).
- *
- * This is the distinction the whole Issue turns on, and it is a comparison of
- * two server-stamped facts rather than a timer:
- *
- *   - **idle before this wait began** — the agent's `Stop` postdates the newest
- *     prompt. Nothing is outstanding; `wait` completes on the first poll exactly
- *     as it always has. An orchestrator waiting on a session that finished long
- *     ago pays nothing.
- *   - **`send` a moment ago** — the newest prompt postdates the last `Stop`
- *     (or there has never been one). The agent has been given work and has not
- *     reported finishing it, so a composer frame is "it has not started yet",
- *     not "it is done".
- *
- * `wait` could not tell these apart before, because from `current-output` alone
- * they are the same payload: in both, the last thing the agent said was the
- * previous turn's `stop`, and `adoptTurnStart` adopts nothing. Measured against
- * copilot 1.0.80 on 2026-08-22, the window in which that is true after a send is
- * ~1s wide, and `wait`'s first poll is immediate — which is why the false
- * completions came back in 0.3s with `basis=scraper_ready`, 3 times in 5.
- *
- * The fast-turn case falls out of the same comparison rather than needing a rule
- * of its own: a turn that opens and closes between two polls leaves
- * `lastEventType: 'stop'` (so no turn is adopted) but a `stop` that postdates
- * the prompt — answered, and completed on the spot.
- */
-function outstandingPrompt(data, submittedAt) {
-    const stoppedAt = data.lastStopEventAt;
-    return stoppedAt == null || stoppedAt < submittedAt;
-}
 /**
  * How long `--on-prompt agent` holds a prompt the target's own Auto-Yes is
  * answering before reporting it anyway, in seconds (Issue #2463).
@@ -815,25 +142,6 @@ function parseGraceSeconds(raw) {
     const trimmed = raw.trim();
     return /^\d+$/.test(trimmed) ? Number(trimmed) : Number.NaN;
 }
-/**
- * Whether one more poll interval still lands inside `--timeout` and
- * `--stall-timeout` (Issue #2463).
- *
- * The Auto-Yes hold asks before it sleeps. Otherwise a caller whose deadline
- * lapses during the hold would hear 124 about a prompt it used to hear 10 about:
- * the hold is there to give Auto-Yes a chance to answer, not to turn an open
- * prompt into a timeout. The same two checks the top of {@link pollWorktree}'s
- * loop makes, one interval ahead.
- */
-function nextPollWithinDeadlines(options, startTime, lastActivityTime, now) {
-    const nextPollAt = now + POLL_INTERVAL_MS;
-    if (options.timeout && nextPollAt - startTime >= options.timeout * 1000)
-        return false;
-    if (options.stallTimeout && nextPollAt - lastActivityTime >= options.stallTimeout * 1000) {
-        return false;
-    }
-    return true;
-}
 /**
  * The exit-10 payload for a prompt the detection layer parsed. `suppressed` is
  * {@link activeSuppression}'s reading of the same poll.
@@ -922,7 +230,7 @@ function describeUnclassifiedFrame(worktreeId, data, dwellMs) {
         // one recovery is a keystroke in the pane. Riding the message keeps
         // the exit-code table (10, `type: unclassified`) unchanged for every
         // caller that already branches on it.
-        describePaneObstruction(data));
+        (0, wait_notices_1.describePaneObstruction)(data));
 }
 /** The exit-10 payload for a persistently unclassified frame (Issue #1708). */
 function buildUnclassifiedOutput(worktreeId, data, question) {
@@ -1004,9 +312,9 @@ function promptStage(poll, state, data) {
         // Issue #1699: report a policy suppression on both exits — the human one
         // keeps polling and would otherwise say nothing about why nobody
         // answered, and the agent one is read by pipelines that never see stderr.
-        const suppressed = activeSuppression(data, Date.now());
+        const suppressed = (0, wait_notices_1.activeSuppression)(data, Date.now());
         // Issue #3821: withheld by the server's decision, with no suppression to say so.
-        const decisionWithheld = suppressed ? null : decisionWithheldReason(data);
+        const decisionWithheld = suppressed ? null : (0, wait_notices_1.decisionWithheldReason)(data);
         const decisionNotice = decisionWithheld === null
             ? null
             : `  auto-yes is not answering this prompt (reason=${decisionWithheld}); it is a human's to answer.`;
@@ -1015,16 +323,16 @@ function promptStage(poll, state, data) {
             // Block and continue polling - user handles prompt manually
             console.error(`Prompt detected on ${worktreeId}. Waiting for human response...`);
             if (suppressed) {
-                console.error(formatSuppressionNotice(suppressed.suppression, suppressed.ageSeconds, suppressed.answerMode));
+                console.error((0, wait_notices_1.formatSuppressionNotice)(suppressed.suppression, suppressed.ageSeconds, suppressed.answerMode));
             }
             if (decisionNotice)
                 console.error(decisionNotice);
             // Issue #3397: and whether Auto-Yes already pressed Enter on it.
-            const enterNotice = formatEnterFallbackNotice(data, Date.now());
+            const enterNotice = (0, wait_notices_1.formatEnterFallbackNotice)(data, Date.now());
             if (enterNotice)
                 console.error(enterNotice);
             // Issue #3730: and whether a restart is why nothing is answering it.
-            const restartNotice = formatRestartReleaseNotice(worktreeId, data, poll.options.instance);
+            const restartNotice = (0, wait_notices_1.formatRestartReleaseNotice)(worktreeId, data, poll.options.instance);
             if (restartNotice)
                 console.error(restartNotice);
             return { kind: 'wait' };
@@ -1047,7 +355,7 @@ function promptStage(poll, state, data) {
             }
             const heldMs = now - state.autoYesAnsweringSince;
             if (heldMs < autoYesGraceMs &&
-                nextPollWithinDeadlines(options, startTime, state.lastActivityTime, now)) {
+                (0, wait_timing_1.nextPollWithinDeadlines)(options, startTime, state.lastActivityTime, now)) {
                 return { kind: 'wait' };
             }
             console.error(heldMs < autoYesGraceMs
@@ -1062,16 +370,16 @@ function promptStage(poll, state, data) {
         // Default (agent mode): output prompt info and exit 10
         const promptOutput = buildPromptOutput(worktreeId, data, data.promptData, suppressed);
         if (suppressed) {
-            console.error(formatSuppressionNotice(suppressed.suppression, suppressed.ageSeconds, suppressed.answerMode));
+            console.error((0, wait_notices_1.formatSuppressionNotice)(suppressed.suppression, suppressed.ageSeconds, suppressed.answerMode));
         }
         if (decisionNotice)
             console.error(decisionNotice);
         // Issue #3397: stderr only, like the notice above; the exit-10 payload is unchanged.
-        const enterNotice = formatEnterFallbackNotice(data, Date.now());
+        const enterNotice = (0, wait_notices_1.formatEnterFallbackNotice)(data, Date.now());
         if (enterNotice)
             console.error(enterNotice);
         // Issue #3730: stderr only as well.
-        const restartNotice = formatRestartReleaseNotice(worktreeId, data, poll.options.instance);
+        const restartNotice = (0, wait_notices_1.formatRestartReleaseNotice)(worktreeId, data, poll.options.instance);
         if (restartNotice)
             console.error(restartNotice);
         return exitWith({ exitCode: types_1.WaitExitCode.PROMPT_DETECTED, output: promptOutput });
@@ -1091,18 +399,18 @@ function selectionListStage(poll, data) {
                 'Waiting for human response...');
             // Issue #1699: the poller parses frames status-detector publishes as
             // selection lists, so a policy can be the reason this one is stuck too.
-            const suppressed = activeSuppression(data, Date.now());
+            const suppressed = (0, wait_notices_1.activeSuppression)(data, Date.now());
             if (suppressed) {
-                console.error(formatSuppressionNotice(suppressed.suppression, suppressed.ageSeconds, suppressed.answerMode));
+                console.error((0, wait_notices_1.formatSuppressionNotice)(suppressed.suppression, suppressed.ageSeconds, suppressed.answerMode));
             }
             // Issue #3730
-            const restartNotice = formatRestartReleaseNotice(worktreeId, data, poll.options.instance);
+            const restartNotice = (0, wait_notices_1.formatRestartReleaseNotice)(worktreeId, data, poll.options.instance);
             if (restartNotice)
                 console.error(restartNotice);
             return { kind: 'wait' };
         }
         // Issue #3730: stderr only; the exit-10 payload is unchanged.
-        const restartNotice = formatRestartReleaseNotice(worktreeId, data, poll.options.instance);
+        const restartNotice = (0, wait_notices_1.formatRestartReleaseNotice)(worktreeId, data, poll.options.instance);
         if (restartNotice)
             console.error(restartNotice);
         return exitWith({
@@ -1161,7 +469,7 @@ function unclassifiedStage(poll, state, data) {
         if (dwellMs >= UNCLASSIFIED_DWELL_MS) {
             const question = describeUnclassifiedFrame(worktreeId, data, dwellMs);
             // Issue #3730: why Auto-Yes is not there to answer it, if a restart is why.
-            const restartNotice = formatRestartReleaseNotice(worktreeId, data, poll.options.instance);
+            const restartNotice = (0, wait_notices_1.formatRestartReleaseNotice)(worktreeId, data, poll.options.instance);
             if (options.onPrompt === 'human') {
                 console.error(question);
                 if (restartNotice)
@@ -1203,14 +511,25 @@ function notRunningStage(poll, state, data, selfResumeSuffix) {
         return exitWith({ exitCode: types_1.VerifyExitCode.NOT_STARTED });
     }
     if (!data.isRunning) {
-        console.error(`Completed: ${worktreeId} (basis=${COMPLETION_BASIS.SESSION_GONE}${selfResumeSuffix()})`);
+        console.error(`Completed: ${worktreeId} (basis=${wait_turn_boundary_1.COMPLETION_BASIS.SESSION_GONE}${selfResumeSuffix()})`);
         return exitWith({ exitCode: types_1.WaitExitCode.SUCCESS });
     }
     return { kind: 'next' };
 }
+/**
+ * The upstream fault on the frame that `--fail-on-upstream-fault` reports, or
+ * null (Issue #1839). Prints nothing, so a caller can decide which frame the
+ * verdict is on before {@link upstreamFaultStage} reports it (Issue #3956).
+ */
+function reportableUpstreamFault(poll, data) {
+    if (!poll.options.failOnUpstreamFault)
+        return null;
+    return data.upstreamFault ?? null;
+}
 /**
  * Stage of a `ready` frame: an upstream fault on the frame, under
- * `--fail-on-upstream-fault` (Issue #1839). Exit 11.
+ * `--fail-on-upstream-fault` (Issue #1839). Exit 11, with its diagnosis on
+ * stderr.
  */
 function upstreamFaultStage(poll, data) {
     const { worktreeId, options } = poll;
@@ -1219,8 +538,8 @@ function upstreamFaultStage(poll, data) {
     // because it is the answer to the question that gate can only ask: the
     // turn did not end, and this is why. Without it the same session runs
     // to --timeout and reports 124, which says nothing about the cause.
-    const fault = data.upstreamFault ?? null;
-    if (options.failOnUpstreamFault && fault) {
+    const fault = reportableUpstreamFault(poll, data);
+    if (fault) {
         console.error(`Upstream fault on ${worktreeId}: id=${fault.id} — the agent is back at its ` +
             'composer with an upstream API failure on screen, so this turn did not run. ' +
             `Matched: ${JSON.stringify(fault.matchedText)}`);
@@ -1237,6 +556,32 @@ function upstreamFaultStage(poll, data) {
     }
     return { kind: 'next' };
 }
+/**
+ * The chat-ledger read of a poll, bounded by `--timeout` / `--stall-timeout`
+ * (Issue #3974).
+ *
+ * On an ordinary poll, a ledger that does not answer in time ends the wait
+ * ({@link DeadlineReached} back to {@link deadlineStage}, exit 124), not
+ * "unreadable". On the frame a settle returned (`judgingSettledFrame`) it does
+ * not: that frame was read inside the deadlines and is judged even after them
+ * (#3956), so the ledger is reported unreadable and the frame decides alone —
+ * as {@link faultFrameHasStop} treats a ledger cut by the same deadlines.
+ */
+async function readLedgerWithinDeadlines(poll, state, data, judgingSettledFrame) {
+    const { client, worktreeId, options, startTime } = poll;
+    try {
+        // Quiet when aborted: what the deadline leads to is said here (settled
+        // frame) or by deadlineStage (124), not "judged from the frame alone".
+        return await (0, wait_timing_1.readWithinDeadlines)(options, startTime, state.lastActivityTime, signal => (0, wait_turn_boundary_1.readNewestPromptAt)(client, worktreeId, options, data, signal, true));
+    }
+    catch (error) {
+        if (!judgingSettledFrame || !(error instanceof wait_timing_1.DeadlineReached))
+            throw error;
+        console.error(`Note: the message ledger for ${worktreeId} could not be read within --timeout/--stall-timeout; ` +
+            'judging the settled frame alone.');
+        return { readable: false };
+    }
+}
 /**
  * How long `wait` holds an orphan turn — see {@link releaseOrphanTurn} — before
  * completing on the `Stop` that answered the newest prompt (Issue #3429).
@@ -1247,7 +592,7 @@ function upstreamFaultStage(poll, data) {
  * is restarted by any change to the frame, so a pane that is still drawing is
  * never released. `--timeout` and `--stall-timeout` below it still win.
  */
-const ORPHAN_TURN_HOLD_MS = PENDING_PROMPT_HOLD_MS;
+const ORPHAN_TURN_HOLD_MS = wait_turn_boundary_1.PENDING_PROMPT_HOLD_MS;
 /**
  * Whether the unsettled turn this wait adopted is an orphan the agent will never
  * send a `Stop` for, held for {@link ORPHAN_TURN_HOLD_MS} (Issue #3429).
@@ -1268,13 +613,13 @@ const ORPHAN_TURN_HOLD_MS = PENDING_PROMPT_HOLD_MS;
  *    prompt has no `Stop` after it — that one keeps holding to `--timeout`;
  *  - the frame has not changed for {@link ORPHAN_TURN_HOLD_MS}.
  */
-async function releaseOrphanTurn(poll, state, data) {
-    const { client, worktreeId, options } = poll;
+async function releaseOrphanTurn(poll, state, data, judgingSettledFrame) {
+    const { worktreeId } = poll;
     const events = data.structuredEvents;
     const closedByScreen = events?.closedBy === 'scraper_evidence' || events?.closedBy === 'stale';
     if (!events ||
-        !publishesTurnRecord(data) ||
-        !reportsTurnBoundaries(data) ||
+        !(0, wait_turn_boundary_1.publishesTurnRecord)(data) ||
+        !(0, wait_turn_boundary_1.reportsTurnBoundaries)(data) ||
         events.closedAt == null ||
         events.openedAt == null ||
         !closedByScreen ||
@@ -1283,9 +628,10 @@ async function releaseOrphanTurn(poll, state, data) {
         state.orphanTurnHold = null;
         return false;
     }
-    const ledger = await readNewestPromptAt(client, worktreeId, options, data);
+    // Issue #3974: bounded by --timeout / --stall-timeout.
+    const ledger = await readLedgerWithinDeadlines(poll, state, data, judgingSettledFrame);
     state.promptLedgerReadable = ledger.readable;
-    if (!ledger.readable || ledger.submittedAt === null || outstandingPrompt(data, ledger.submittedAt)) {
+    if (!ledger.readable || ledger.submittedAt === null || (0, wait_turn_boundary_1.outstandingPrompt)(data, ledger.submittedAt)) {
         state.orphanTurnHold = null;
         return false;
     }
@@ -1298,7 +644,7 @@ async function releaseOrphanTurn(poll, state, data) {
         return false;
     console.error(`Note: ${worktreeId} answered its newest prompt with a stop ` +
         `(lastStopEventAt=${data.lastStopEventAt}), and the turn opened after it ` +
-        `(turnStartedAt=${state.turnStartedAt}, ${describeTurnClose(data)}) has had no prompt, ` +
+        `(turnStartedAt=${state.turnStartedAt}, ${(0, wait_turn_boundary_1.describeTurnClose)(data)}) has had no prompt, ` +
         `no stop and no new output for ${Math.round(quietMs / 1000)}s; completing on that stop.`);
     return true;
 }
@@ -1306,7 +652,7 @@ async function releaseOrphanTurn(poll, state, data) {
  * Stage of a `ready` frame: the agent has not reported the end of the turn this
  * wait adopted (Issue #1839). Held, except for an orphan turn (Issue #3429).
  */
-async function unsettledTurnStage(poll, state, data) {
+async function unsettledTurnStage(poll, state, data, judgingSettledFrame) {
     const { worktreeId } = poll;
     // Issue #1839: `ready` off the terminal frame is the agent's composer,
     // not the agent's verdict. Measured 2026-08-20 against a stub upstream
@@ -1315,12 +661,12 @@ async function unsettledTurnStage(poll, state, data) {
     // hooks ARE reporting — the only case in which `turnStartedAt` is
     // non-null — that missing `Stop` is the difference between "finished"
     // and "never ran", and it is the only signal that carries it.
-    if (!turnSettled(data, state.turnStartedAt)) {
-        if (await releaseOrphanTurn(poll, state, data))
+    if (!(0, wait_turn_boundary_1.turnSettled)(data, state.turnStartedAt)) {
+        if (await releaseOrphanTurn(poll, state, data, judgingSettledFrame))
             return { kind: 'next' };
         console.error(`Waiting: ${worktreeId} is back at its composer, but its agent has not reported ` +
             `the end of this turn (turnStartedAt=${state.turnStartedAt}, ` +
-            `lastStopEventAt=${data.lastStopEventAt ?? 'none'}, ${describeTurnClose(data)}). ` +
+            `lastStopEventAt=${data.lastStopEventAt ?? 'none'}, ${(0, wait_turn_boundary_1.describeTurnClose)(data)}). ` +
             'Not reporting completion; inspect with ' +
             `\`commandmate capture ${worktreeId} --json\`.`);
         return { kind: 'wait' };
@@ -1352,13 +698,13 @@ function selfResumeHoldStage(poll, state, data, selfResumeStopAt) {
             state.selfResumeHold = { stopAt: selfResumeStopAt, since: now };
         const heldMs = now - state.selfResumeHold.since;
         const elapsedMs = Math.max(heldMs, now - selfResumeStopAt);
-        if (elapsedMs < exports.SELF_RESUME_HOLD_MS) {
+        if (elapsedMs < wait_turn_boundary_1.SELF_RESUME_HOLD_MS) {
             state.selfResumeHeld = true;
             console.error(`Waiting: ${worktreeId} ended its turn with background work still running ` +
                 `(stoppedAt=${new Date(selfResumeStopAt).toISOString()}, ` +
-                `lastEventDetail=${exports.SELF_RESUME_PENDING_DETAIL}, ${describeTurnClose(data)}); ` +
+                `lastEventDetail=${wait_turn_boundary_1.SELF_RESUME_PENDING_DETAIL}, ${(0, wait_turn_boundary_1.describeTurnClose)(data)}); ` +
                 'it resumes by itself when that work finishes. Not reporting completion ' +
-                `(held ${Math.round(heldMs / 1000)}s, at most ${exports.SELF_RESUME_HOLD_MS / 1000}s ` +
+                `(held ${Math.round(heldMs / 1000)}s, at most ${wait_turn_boundary_1.SELF_RESUME_HOLD_MS / 1000}s ` +
                 'after the stop).');
             return { kind: 'wait' };
         }
@@ -1374,8 +720,8 @@ function selfResumeHoldStage(poll, state, data, selfResumeStopAt) {
  * `next` carries whether the newest prompt was answered, which
  * {@link completionStage} needs for its basis.
  */
-async function promptLedgerStage(poll, state, data) {
-    const { client, worktreeId, options, startTime } = poll;
+async function promptLedgerStage(poll, state, data, judgingSettledFrame) {
+    const { worktreeId, startTime } = poll;
     // Issue #1975: the same frame, one question further back. #1839's gate
     // above can only fire once a turn has been ADOPTED, and `send` leaves a
     // window ~1s wide in which nothing has been: the newest structured event
@@ -1393,18 +739,19 @@ async function promptLedgerStage(poll, state, data) {
     // {@link reportsTurnBoundaries} for why a tool that posts no hooks never
     // reaches it.
     let answeredNewestPrompt = false;
-    if (state.turnStartedAt === null && state.promptLedgerReadable && reportsTurnBoundaries(data)) {
-        const ledger = await readNewestPromptAt(client, worktreeId, options, data);
+    if (state.turnStartedAt === null && state.promptLedgerReadable && (0, wait_turn_boundary_1.reportsTurnBoundaries)(data)) {
+        // Issue #3974: bounded by --timeout / --stall-timeout.
+        const ledger = await readLedgerWithinDeadlines(poll, state, data, judgingSettledFrame);
         // One notice, then stop asking: a ledger that failed once will fail
         // every poll, and the point of degrading is to stop paying for it.
         state.promptLedgerReadable = ledger.readable;
         if (ledger.readable && ledger.submittedAt !== null) {
-            if (outstandingPrompt(data, ledger.submittedAt)) {
+            if ((0, wait_turn_boundary_1.outstandingPrompt)(data, ledger.submittedAt)) {
                 const heldMs = Date.now() - startTime;
-                if (heldMs < PENDING_PROMPT_HOLD_MS) {
+                if (heldMs < wait_turn_boundary_1.PENDING_PROMPT_HOLD_MS) {
                     console.error(`Waiting: ${worktreeId} is at its composer, but the newest prompt sent to it ` +
                         `has no reported end (sentAt=${new Date(ledger.submittedAt).toISOString()}, ` +
-                        `lastStopEventAt=${data.lastStopEventAt ?? 'none'}, ${describeTurnClose(data)}). ` +
+                        `lastStopEventAt=${data.lastStopEventAt ?? 'none'}, ${(0, wait_turn_boundary_1.describeTurnClose)(data)}). ` +
                         'Not reporting completion: the agent has not started this turn yet.');
                     return { kind: 'wait' };
                 }
@@ -1419,25 +766,34 @@ async function promptLedgerStage(poll, state, data) {
     }
     return { kind: 'next', answeredNewestPrompt };
 }
+/**
+ * The basis of a completion on a `ready` frame (Issue #1839).
+ *
+ * `hook_stop` on both branches that have one, and they are the same statement
+ * made from two records: the agent reported the end of the turn this wait is
+ * about. `scraper_ready` keeps its documented meaning — "the screen said so and
+ * nothing corroborated it" — which is now exactly the set of cases that reach it.
+ */
+function readyCompletionBasis(state, answeredNewestPrompt) {
+    return state.turnStartedAt !== null || answeredNewestPrompt
+        ? wait_turn_boundary_1.COMPLETION_BASIS.HOOK_STOP
+        : wait_turn_boundary_1.COMPLETION_BASIS.SCRAPER_READY;
+}
 /** Last stage of a `ready` frame: the completion line with its basis. Exit 0. */
 function completionStage(poll, state, answeredNewestPrompt, selfResumeSuffix) {
     const { worktreeId } = poll;
-    // `hook_stop` on both branches that have one, and they are the same
-    // statement made from two records: the agent reported the end of the
-    // turn this wait is about. `scraper_ready` keeps its documented meaning
-    // — "the screen said so and nothing corroborated it" — which is now
-    // exactly the set of cases that reach it.
-    const basis = state.turnStartedAt !== null || answeredNewestPrompt
-        ? COMPLETION_BASIS.HOOK_STOP
-        : COMPLETION_BASIS.SCRAPER_READY;
+    const basis = readyCompletionBasis(state, answeredNewestPrompt);
     console.error(`Completed: ${worktreeId} (basis=${basis}${selfResumeSuffix()})`);
     return exitWith({ exitCode: types_1.WaitExitCode.SUCCESS });
 }
 /**
  * Stage: the agent is back at its composer on a frame that was understood. Asks
  * the stages of a `ready` frame in order; the first that applies decides.
+ *
+ * `judgingSettledFrame` is true when `data` is the frame a settle returned
+ * (Issue #3956): it is judged as it stands and never settled again.
  */
-async function readyStage(poll, state, data, selfResumeStopAt, selfResumeSuffix) {
+async function readyStage(poll, state, data, selfResumeStopAt, selfResumeSuffix, judgingSettledFrame) {
     // Issue #1708 narrowed Path B: `ready` is only a completion when the frame
     // was actually understood. A structured `hook_stop` over an unreadable
     // pane is the degraded form of an overlay nobody could parse (see the note
@@ -1445,18 +801,41 @@ async function readyStage(poll, state, data, selfResumeStopAt, selfResumeSuffix)
     // merged. Path A is untouched — a session that went away really is
     // finished, and carries no flag anyway.
     if (data.sessionStatus === 'ready' && data.isUnclassifiedActive !== true) {
-        const faultOutcome = upstreamFaultStage(poll, data);
-        if (faultOutcome.kind !== 'next')
-            return faultOutcome;
-        const turnOutcome = await unsettledTurnStage(poll, state, data);
+        // Issue #3956: one bound for everything a `Stop` poll's settle waits on —
+        // the ledger read that confirms the `Stop` and the re-reads — measured
+        // from this poll, so the verdict comes at most HOOK_STOP_SETTLE_MAX_MS
+        // after it (`--timeout` is applied on top, where each wait is bounded).
+        const settleDeadline = Date.now() + wait_hook_stop_settle_1.HOOK_STOP_SETTLE_MAX_MS;
+        if (reportableUpstreamFault(poll, data) !== null) {
+            // Issue #3956: a fault on the frame of a `Stop` poll is on a pane that
+            // may still be drawing, as much as a clean one is; it is judged on the
+            // settled frame too. Without a `Stop` it is #1839's case, reported now.
+            // Nothing is printed before that is decided: the diagnosis is for the
+            // frame the verdict is on.
+            if (!judgingSettledFrame && (await (0, wait_hook_stop_settle_1.faultFrameHasStop)(poll, state, data, settleDeadline))) {
+                return { kind: 'settled', data: await (0, wait_hook_stop_settle_1.settleAfterHookStop)(poll, state, data, settleDeadline) };
+            }
+            return upstreamFaultStage(poll, data);
+        }
+        const turnOutcome = await unsettledTurnStage(poll, state, data, judgingSettledFrame);
         if (turnOutcome.kind !== 'next')
             return turnOutcome;
         const holdOutcome = selfResumeHoldStage(poll, state, data, selfResumeStopAt);
         if (holdOutcome.kind !== 'next')
             return holdOutcome;
-        const ledgerOutcome = await promptLedgerStage(poll, state, data);
+        const ledgerOutcome = await promptLedgerStage(poll, state, data, judgingSettledFrame);
         if (ledgerOutcome.kind !== 'next')
             return ledgerOutcome;
+        // Issue #3956: the `Stop` can land before the end of the reply is on the
+        // pane, so a `hook_stop` completion is judged again on the settled frame —
+        // as a poll of its own, so a prompt or a new turn drawn meanwhile is not
+        // read as this completion. Only under the flag: a plain `wait` reads no
+        // fault and waits no longer.
+        if (!judgingSettledFrame &&
+            poll.options.failOnUpstreamFault &&
+            readyCompletionBasis(state, ledgerOutcome.answeredNewestPrompt) === wait_turn_boundary_1.COMPLETION_BASIS.HOOK_STOP) {
+            return { kind: 'settled', data: await (0, wait_hook_stop_settle_1.settleAfterHookStop)(poll, state, data, settleDeadline) };
+        }
         return completionStage(poll, state, ledgerOutcome.answeredNewestPrompt, selfResumeSuffix);
     }
     return { kind: 'next' };
@@ -1504,23 +883,34 @@ async function pollWorktree(client, worktreeId, options) {
         const total = state.selfResumeHeldMs + (state.selfResumeHold ? Date.now() - state.selfResumeHold.since : 0);
         return `, heldForSelfResume=${Math.round(total / 1000)}s`;
     };
+    /**
+     * The frame a settle returned, judged as the next poll (Issue #3956). It was
+     * read inside the deadlines the settle kept to, so that poll does not ask
+     * {@link deadlineStage} again: a turn that completed in time is not a 124.
+     */
+    let settledFrame = null;
     while (true) {
-        const deadlineOutcome = deadlineStage(poll, state);
-        if (deadlineOutcome.kind === 'exit')
-            return deadlineOutcome.result;
+        const judgingSettledFrame = settledFrame !== null;
+        if (!judgingSettledFrame) {
+            const deadlineOutcome = deadlineStage(poll, state);
+            if (deadlineOutcome.kind === 'exit')
+                return deadlineOutcome.result;
+        }
         try {
             // Issue #868: scope polling to a specific agent instance when provided.
             // Issue #3755: `observe=1` so an exit 10 carries the observation of the
             // very capture it was decided on (see {@link withObservation}).
-            const data = await client.get((0, prompt_1.observedCurrentOutputPath)(worktreeId, options.instance));
-            // Track content changes for stall detection
-            if (data.content !== state.lastContent) {
-                state.lastContent = data.content;
-                state.lastActivityTime = Date.now();
-            }
-            if (data.isRunning) {
-                state.everRunning = true;
-            }
+            const data = settledFrame ??
+                // Issue #3974: bounded by --timeout / --stall-timeout, so a server that
+                // does not answer cannot hold the wait past them.
+                (await (0, wait_timing_1.readWithinDeadlines)(options, startTime, state.lastActivityTime, signal => {
+                    const path = (0, prompt_1.observedCurrentOutputPath)(worktreeId, options.instance);
+                    return signal
+                        ? client.get(path, { signal })
+                        : client.get(path);
+                }));
+            settledFrame = null;
+            (0, wait_poll_bookkeeping_1.trackPollActivity)(state, data);
             // Issue #3179: the agent is still launching. Work in progress, so keep
             // polling: no prompt or selection list is read off the launch's frame,
             // the unclassified dwell does not run, and a pane that does not exist yet
@@ -1529,220 +919,78 @@ async function pollWorktree(client, worktreeId, options) {
             // completion. The server bounds the launch, so this cannot hold forever.
             if (typeof data.startingSince === 'number') {
                 state.unclassifiedSince = null;
-                await sleep(POLL_INTERVAL_MS);
+                await (0, wait_timing_1.sleep)(wait_timing_1.POLL_INTERVAL_MS);
                 continue;
             }
-            // Issue #1839: done before any exit path so the turn is adopted even on a
-            // poll that ends in a prompt — the same turn is still open when the human
-            // answers and `--on-prompt human` resumes polling.
-            state.turnStartedAt = adoptTurnStart(data, startTime, state.turnStartedAt);
+            (0, wait_poll_bookkeeping_1.adoptAndPublishTurn)(state, data, startTime, options);
             // Issue #2614: a self-resume hold is about one `stop`, and ends the first
             // time that `stop` is no longer the newest word — the agent woke (a
             // turn-opening event) or stopped again. Checked on every poll, ahead of
             // every exit, because the wake usually lands on a `running` frame that
             // never reaches the hold itself.
-            const selfResumeStopAt = pendingSelfResumeStop(data);
-            if (state.selfResumeHold !== null && state.selfResumeHold.stopAt !== selfResumeStopAt) {
-                const heldMs = Date.now() - state.selfResumeHold.since;
-                state.selfResumeHeldMs += heldMs;
-                state.selfResumeHold = null;
-                console.error(`Note: ${worktreeId} has moved past the stop it said it would resume from ` +
-                    `(held ${Math.round(heldMs / 1000)}s); judging its current state.`);
-            }
+            const selfResumeStopAt = (0, wait_turn_boundary_1.pendingSelfResumeStop)(data);
+            (0, wait_poll_bookkeeping_1.releaseMovedSelfResumeHold)(worktreeId, state, selfResumeStopAt);
             const promptOutcome = promptStage(poll, state, data);
             if (promptOutcome.kind === 'exit')
                 return withObservation(promptOutcome.result, data);
             if (promptOutcome.kind === 'wait') {
-                await sleep(POLL_INTERVAL_MS);
+                await (0, wait_timing_1.sleep)(wait_timing_1.POLL_INTERVAL_MS);
                 continue;
             }
             // Issue #2463: the prompt the hold was waiting on has gone. Who answered it
             // is not on the wire — Auto-Yes, or a human at the pane — so the line says
             // only that it cleared; what the agent does next is for the checks below.
-            if (state.autoYesAnsweringSince !== null) {
-                console.error(`Prompt on ${worktreeId} cleared after ` +
-                    `${Math.round((Date.now() - state.autoYesAnsweringSince) / 1000)}s; judging completion as usual.`);
-                state.autoYesAnsweringSince = null;
-            }
+            (0, wait_poll_bookkeeping_1.noteAutoYesPromptCleared)(worktreeId, state);
             const selectionListOutcome = selectionListStage(poll, data);
             if (selectionListOutcome.kind === 'exit')
                 return withObservation(selectionListOutcome.result, data);
             if (selectionListOutcome.kind === 'wait') {
-                await sleep(POLL_INTERVAL_MS);
+                await (0, wait_timing_1.sleep)(wait_timing_1.POLL_INTERVAL_MS);
                 continue;
             }
             const unclassifiedOutcome = unclassifiedStage(poll, state, data);
             if (unclassifiedOutcome.kind === 'exit')
                 return withObservation(unclassifiedOutcome.result, data);
             if (unclassifiedOutcome.kind === 'wait') {
-                await sleep(POLL_INTERVAL_MS);
+                await (0, wait_timing_1.sleep)(wait_timing_1.POLL_INTERVAL_MS);
                 continue;
             }
             const notRunningOutcome = notRunningStage(poll, state, data, selfResumeSuffix);
             if (notRunningOutcome.kind === 'exit')
                 return notRunningOutcome.result;
-            const readyOutcome = await readyStage(poll, state, data, selfResumeStopAt, selfResumeSuffix);
+            const readyOutcome = await readyStage(poll, state, data, selfResumeStopAt, selfResumeSuffix, judgingSettledFrame);
             if (readyOutcome.kind === 'exit')
                 return readyOutcome.result;
+            if (readyOutcome.kind === 'settled') {
+                settledFrame = readyOutcome.data;
+                continue;
+            }
             if (readyOutcome.kind === 'wait') {
-                await sleep(POLL_INTERVAL_MS);
+                // Issue #3974: the settled frame skipped deadlineStage, and its ledger
+                // read may have been cut by the deadline; ask it now rather than one
+                // interval late. With time left, the next poll comes as before.
+                if (judgingSettledFrame) {
+                    const deadlineOutcome = deadlineStage(poll, state);
+                    if (deadlineOutcome.kind === 'exit')
+                        return deadlineOutcome.result;
+                }
+                await (0, wait_timing_1.sleep)(wait_timing_1.POLL_INTERVAL_MS);
                 continue;
             }
             // Progress indicator on stderr [DR1-05]
             console.error(`Waiting: ${worktreeId} (status=${data.sessionStatus}, running=${data.isRunning}, prompt=${data.isPromptWaiting})`);
         }
         catch (error) {
+            // Issue #3974: a read ended by --timeout / --stall-timeout. Not a failed
+            // poll: straight back to deadlineStage, which exits 124.
+            if (error instanceof wait_timing_1.DeadlineReached)
+                continue;
             if (error instanceof api_client_1.ApiError) {
                 throw error;
             }
             console.error(`Poll error for ${worktreeId}: ${error instanceof Error ? error.message : String(error)}`);
         }
-        await sleep(POLL_INTERVAL_MS);
-    }
-}
-function sleep(ms) {
-    return new Promise(resolve => setTimeout(resolve, ms));
-}
-/** True when the caller asked for a verdict rather than "the agent stopped". */
-function verifyRequested(options) {
-    return Boolean(options.verify || options.requireWork);
-}
-/**
- * Whether this poll outcome should still be handed to the verification gates.
- *
- * A completion is the obvious case. NOT_STARTED joins it (Issue #1628) so the
- * operator gets the gate results instead of a bare "no session": work committed
- * by an agent whose session has since gone away is still worth reporting. The
- * verdict is merged rather than substituted — mergeExitCode never lets a passing
- * run overwrite NOT_STARTED, so "wait never saw this agent" survives to the exit
- * code even when the gates are green.
- */
-function shouldVerify(exitCode, options) {
-    if (!verifyRequested(options))
-        return false;
-    return exitCode === types_1.WaitExitCode.SUCCESS || exitCode === types_1.VerifyExitCode.NOT_STARTED;
-}
-/**
- * Task statuses that mean "this wait is about that task".
- *
- * Mirrors ACTIVE_TASK_STATUSES in src/lib/db/tasks-db.ts. Deliberately narrower
- * than the set the server will attach a run to: this is a guess made from a
- * worktree id alone, and a task that had already finished before the wait began
- * is a different delegation, not this one.
- */
-const IN_FLIGHT_TASK_STATUSES = new Set([
-    'running',
-    'waiting_input',
-    'verifying',
-]);
-/**
- * Read the task this wait is about, before waiting for it (Issue #1620).
- *
- * Timing is the whole point. Agents are asked to run the gates themselves
- * before reporting completion, and doing so moves their task to a terminal
- * status — after which a verification run started with only a worktree id has
- * no contract to resolve, judges no scope, and still reports `passed`. Read
- * while the task is still in flight, the id survives that transition and the
- * run that follows is judged against the contract it was supposed to judge.
- *
- * Never throws: an unreadable ledger costs the attribution, and refusing to
- * verify over it would cost every gate.
- *
- * @returns the task id, or undefined to leave resolution to the server
- */
-async function resolveWaitedTaskId(client, worktreeId) {
-    try {
-        const data = await client.get(`/api/worktrees/${worktreeId}/tasks?limit=1`);
-        const task = data?.tasks?.[0];
-        if (!task || !IN_FLIGHT_TASK_STATUSES.has(task.status))
-            return undefined;
-        return task.id;
-    }
-    catch (error) {
-        console.error(`Note: could not read the task ledger for ${worktreeId} ` +
-            `(${error instanceof Error ? error.message : String(error)}); ` +
-            'verification will resolve its own task.');
-        return undefined;
-    }
-}
-/**
- * Run verification for one worktree after its completion was detected.
- *
- * Swallows ApiError into an exit code: with several worktrees in flight, one
- * unreachable run must not abort the verdicts of the others.
- */
-async function verifyAfterWait(client, worktreeId, options, taskId) {
-    // --verify runs every gate, and work-evidence is always part of "every gate",
-    // so combining it with --require-work is a superset rather than a conflict.
-    const gateIds = options.verify ? undefined : [verify_runner_1.WORK_EVIDENCE_GATE_ID];
-    try {
-        const outcome = await (0, verify_runner_1.runVerification)(client, {
-            worktreeId,
-            trigger: 'wait',
-            instanceId: options.instance,
-            taskId,
-            gateIds,
-            // stdout stays reserved for the prompt JSON contract.
-            resultStream: 'stderr',
-        });
-        return outcome.exitCode;
-    }
-    catch (error) {
-        if (error instanceof api_client_1.ApiError) {
-            console.error(`Error: ${error.message}`);
-            return error.exitCode;
-        }
-        console.error(`Error: verification of ${worktreeId} failed: ${error instanceof Error ? error.message : String(error)}`);
-        return types_1.ExitCode.UNEXPECTED_ERROR;
-    }
-}
-/**
- * Fold one worktree's exit code into the aggregate.
- *
- * Ranked codes (see WAIT_EXIT_CODE_PRIORITY) beat unranked infrastructure
- * codes, and among equals the first one observed stands.
- */
-function mergeExitCode(current, candidate) {
-    if (candidate === types_1.WaitExitCode.SUCCESS)
-        return current;
-    if (current === types_1.WaitExitCode.SUCCESS)
-        return candidate;
-    const rank = (code) => {
-        const index = types_1.WAIT_EXIT_CODE_PRIORITY.indexOf(code);
-        return index === -1 ? Number.MAX_SAFE_INTEGER : index;
-    };
-    return rank(candidate) < rank(current) ? candidate : current;
-}
-/**
- * `options` with `--instance` resolved from a selector to an instance ID
- * (Issue #2376).
- *
- * `wait` polls `/current-output?instance=`, which matches instance IDs and
- * nothing else, so an alias that reached it would filter to no session and the
- * wait would report on the worktree default instead — the exact silent
- * wrong-session failure Issue #1638 catalogued for `--agent`.
- *
- * @param client - API client
- * @param worktreeId - Worktree the selector is resolved against
- * @param options - The options as given
- */
-async function resolveWaitInstance(client, worktreeId, options) {
-    if (!options.instance)
-        return options;
-    try {
-        const target = await (0, instances_1.resolveInstanceTarget)(client, worktreeId, options.instance, undefined);
-        return { ...options, instance: target.instanceId ?? options.instance };
-    }
-    catch (error) {
-        // Degrade to the pre-#2376 behaviour rather than failing the wait. An
-        // instance ID needs no resolution to reach `/current-output?instance=` —
-        // resolution exists here so that an ALIAS can — so a resolver that cannot
-        // be reached costs alias support for this call and nothing else. Failing
-        // instead would turn a reachable session into a non-zero exit for an
-        // orchestrator that has been waiting on it correctly for two years.
-        console.error(`Warning: could not resolve --instance '${options.instance}' `
-            + `(${(0, types_1.getErrorMessage)(error)}); using it as an instance id.`);
-        return options;
+        await (0, wait_timing_1.sleep)(wait_timing_1.POLL_INTERVAL_MS);
     }
 }
 function createWaitCommand() {
@@ -1864,12 +1112,12 @@ The observation on exit 10 (Issue #3755):
             // "Codex 2"` is one alias against two rosters, and the id behind it can
             // legitimately differ — resolving once and reusing the answer would poll
             // the wrong session on the second worktree.
-            const perWorktreeOptions = await Promise.all(worktreeIds.map(id => resolveWaitInstance(client, id, options)));
+            const perWorktreeOptions = await Promise.all(worktreeIds.map(id => (0, wait_instance_1.resolveWaitInstance)(client, id, options)));
             // Issue #1620: resolved before any polling starts. Once the agent stops
             // there is no reliable way left to tell which contract this wait was
             // about — the agent's own verification may have closed it by then.
-            const boundTaskIds = verifyRequested(options)
-                ? await Promise.all(worktreeIds.map(id => resolveWaitedTaskId(client, id)))
+            const boundTaskIds = (0, wait_verify_1.verifyRequested)(options)
+                ? await Promise.all(worktreeIds.map(id => (0, wait_verify_1.resolveWaitedTaskId)(client, id)))
                 : worktreeIds.map(() => undefined);
             if (worktreeIds.length === 1) {
                 // Single worktree
@@ -1880,8 +1128,8 @@ The observation on exit 10 (Issue #3755):
                 }
                 // Issue #1544: only a detected completion is worth verifying — a
                 // prompt or a timeout means the agent never claimed to be done.
-                const exitCode = shouldVerify(result.exitCode, options)
-                    ? mergeExitCode(result.exitCode, await verifyAfterWait(client, worktreeIds[0], options, boundTaskIds[0]))
+                const exitCode = (0, wait_verify_1.shouldVerify)(result.exitCode, options)
+                    ? (0, wait_verify_1.mergeExitCode)(result.exitCode, await (0, wait_verify_1.verifyAfterWait)(client, worktreeIds[0], options, boundTaskIds[0]))
                     : result.exitCode;
                 process.exit(exitCode);
                 return;
@@ -1897,25 +1145,25 @@ The observation on exit 10 (Issue #3755):
                     if (result.value.output) {
                         outputs.push(result.value.output);
                     }
-                    if (shouldVerify(result.value.exitCode, options)) {
+                    if ((0, wait_verify_1.shouldVerify)(result.value.exitCode, options)) {
                         verifyTargets.push({ id: worktreeIds[index], taskId: boundTaskIds[index] });
                         // Issue #1628: fold NOT_STARTED in before verification so a green
                         // gate run cannot promote "no session was ever running" to success.
-                        finalExitCode = mergeExitCode(finalExitCode, result.value.exitCode);
+                        finalExitCode = (0, wait_verify_1.mergeExitCode)(finalExitCode, result.value.exitCode);
                         return;
                     }
-                    finalExitCode = mergeExitCode(finalExitCode, result.value.exitCode);
+                    finalExitCode = (0, wait_verify_1.mergeExitCode)(finalExitCode, result.value.exitCode);
                 }
                 else {
                     const err = result.reason;
-                    finalExitCode = mergeExitCode(finalExitCode, err instanceof api_client_1.ApiError ? err.exitCode : types_1.ExitCode.UNEXPECTED_ERROR);
+                    finalExitCode = (0, wait_verify_1.mergeExitCode)(finalExitCode, err instanceof api_client_1.ApiError ? err.exitCode : types_1.ExitCode.UNEXPECTED_ERROR);
                 }
             });
             // Issue #1544: serial on purpose. The server caps concurrent runs
             // process-wide, so firing them together only queues them behind each
             // other while every gate competes for the same machine.
             for (const target of verifyTargets) {
-                finalExitCode = mergeExitCode(finalExitCode, await verifyAfterWait(client, target.id, options, target.taskId));
+                finalExitCode = (0, wait_verify_1.mergeExitCode)(finalExitCode, await (0, wait_verify_1.verifyAfterWait)(client, target.id, options, target.taskId));
             }
             if (outputs.length > 0) {
                 console.log(JSON.stringify(outputs));