waterplane 0.0.1 → 0.1.6

package/packages/host/dist/promptbase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptbase.js","sourceRoot":"","sources":["../src/promptbase.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kFAAkF;AAClF,iFAAiF;AACjF,iFAAiF;AACjF,uEAAuE;AACvE,qEAAqE;AACrE,MAAM,IAAI,GAAG,wHAAwH,CAAC;AAEtI,iFAAiF;AACjF,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAGD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,qCAAqC,CAAC;AAC/D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC;;yBAEyB;AACzB,MAAM,CAAC,MAAM,oBAAoB,GAAG,gCAAgC,CAAC"}

package/packages/host/dist/promptmerge.d.ts

@@ -0,0 +1,63 @@
+/** Box identity and merge of two passes over the same box; re-exported by `prompt.ts`. */
+import type { DetectedPrompt } from "@waterplane/shared";
+/**
+ * Two strict parses that are the same box on screen, seen at two moments.
+ *
+ * The strict pass runs about twice a second while a dialog is up, and what it
+ * reads is not stable: this CLI scrolls rather than repainting an alt screen,
+ * so panning the console, a repaint the phone's own answer card provoked, or a
+ * box taller than the terminal all change WHICH rows are legible from one pass
+ * to the next. Each of those re-published a different `DetectedPrompt` for a
+ * question nobody had touched — and because `promptFingerprint` is built from
+ * the question and the option rows, a re-publish is not cosmetic:
+ *
+ *   • the phone's card is keyed on the fingerprint, so collapsing it or hiding
+ *     it (the two ways to answer at the DESK instead) was undone on the next
+ *     repaint — the complaint this exists for;
+ *   • an answer already queued against the old fingerprint goes `stale`;
+ *   • `applyPrompt` fires a push per change.
+ *
+ * **Where the CLI will say which box this is, that is the answer.** `askId`
+ * (host `askbox.ts`) is the pending tool call's own id plus the question index
+ * inside it: minted by the CLI, written to the log before anybody answers, and
+ * untouched by any repaint. Two `AskUserQuestion` boxes in a row have different
+ * ones, so nothing here has to guess.
+ *
+ * The rest is the fallback, for a tool approval or a trust dialog — which carry
+ * no such call. Identity is then asked of the parts that cannot move: the kind,
+ * the shape (`multi`/`nav`), and the option rows at the indices the two passes
+ * SHARE. A label is compared by prefix in either direction, because the terminal
+ * cuts one and the log's enrichment does not. There the question IS compared
+ * whenever both passes read a real one, deliberately strictly: without an id
+ * there is nothing else standing between "this box again" and "the next box,
+ * whose buttons mean something else", and a wrong question over live buttons is
+ * the one mistake this must not make. Those boxes are three rows tall and do
+ * not truncate, so the strictness costs nothing they suffer from.
+ *
+ * Measured on a live shell: one box published its question three different ways
+ * inside four seconds — the detector joins up to four lines above option 1, and
+ * on a scrolling screen those lines are whatever is there.
+ */
+export declare function sameBox(a: DetectedPrompt, b: DetectedPrompt): boolean;
+/**
+ * Do two published boxes say the same thing? Field by field, because
+ * `JSON.stringify` also compares KEY ORDER — and the merge builds its object in
+ * its own order, so a byte comparison reported a change on the pass after every
+ * merge: one more broadcast, push and plugin event per box, for a card that had not
+ * moved. `ticks: "ignore"` asks "same apart from checkbox ticks" (a toggle: no push).
+ */
+export declare function samePrompt(a: DetectedPrompt | null, b: DetectedPrompt | null, ticks?: "ignore"): boolean;
+/**
+ * Fold a fresh parse of the SAME box into what is already published.
+ *
+ * The published box wins every field it has, and the new one may only ADD: an
+ * option index nobody had seen yet, a real question where the placeholder stood.
+ * That is what makes a box whose top has scrolled away keep the options it was
+ * published with — "the first options are scrolled away and therefore missing
+ * from the selection dialogue" — without the card ever changing shape under a
+ * thumb.
+ *
+ * Nothing here is invented: every option in the result was read off this
+ * screen, for this box, at some point while it was up.
+ */
+export declare function mergeBox(published: DetectedPrompt, parsed: DetectedPrompt): DetectedPrompt;

package/packages/host/dist/promptmerge.js

@@ -0,0 +1,221 @@
+import { MAX_BOX_OPTIONS, PLACEHOLDER_QUESTION } from "./promptbase.js";
+/**
+ * Two strict parses that are the same box on screen, seen at two moments.
+ *
+ * The strict pass runs about twice a second while a dialog is up, and what it
+ * reads is not stable: this CLI scrolls rather than repainting an alt screen,
+ * so panning the console, a repaint the phone's own answer card provoked, or a
+ * box taller than the terminal all change WHICH rows are legible from one pass
+ * to the next. Each of those re-published a different `DetectedPrompt` for a
+ * question nobody had touched — and because `promptFingerprint` is built from
+ * the question and the option rows, a re-publish is not cosmetic:
+ *
+ *   • the phone's card is keyed on the fingerprint, so collapsing it or hiding
+ *     it (the two ways to answer at the DESK instead) was undone on the next
+ *     repaint — the complaint this exists for;
+ *   • an answer already queued against the old fingerprint goes `stale`;
+ *   • `applyPrompt` fires a push per change.
+ *
+ * **Where the CLI will say which box this is, that is the answer.** `askId`
+ * (host `askbox.ts`) is the pending tool call's own id plus the question index
+ * inside it: minted by the CLI, written to the log before anybody answers, and
+ * untouched by any repaint. Two `AskUserQuestion` boxes in a row have different
+ * ones, so nothing here has to guess.
+ *
+ * The rest is the fallback, for a tool approval or a trust dialog — which carry
+ * no such call. Identity is then asked of the parts that cannot move: the kind,
+ * the shape (`multi`/`nav`), and the option rows at the indices the two passes
+ * SHARE. A label is compared by prefix in either direction, because the terminal
+ * cuts one and the log's enrichment does not. There the question IS compared
+ * whenever both passes read a real one, deliberately strictly: without an id
+ * there is nothing else standing between "this box again" and "the next box,
+ * whose buttons mean something else", and a wrong question over live buttons is
+ * the one mistake this must not make. Those boxes are three rows tall and do
+ * not truncate, so the strictness costs nothing they suffer from.
+ *
+ * Measured on a live shell: one box published its question three different ways
+ * inside four seconds — the detector joins up to four lines above option 1, and
+ * on a scrolling screen those lines are whatever is there.
+ */
+export function sameBox(a, b) {
+    if (!!a.multi !== !!b.multi)
+        return false;
+    if (!!a.nav !== !!b.nav)
+        return false;
+    // Two ids that disagree is the cheapest NO there is.
+    if (a.askId && b.askId && a.askId !== b.askId)
+        return false;
+    const named = !!a.askId && a.askId === b.askId;
+    // `kind` is DERIVED from the question and the labels, so a truncated pass
+    // that lost the question flips an ask containing "proceed"/"plan"/"approve"
+    // from `tool` to `select` — and `kind` is in the fingerprint, so testing it
+    // first made that class of box alternate between two identities on every
+    // pan, which is the complaint. Where the CLI has named the box, its own id
+    // outranks a reading of words that are not on screen.
+    if (!named && a.kind !== b.kind)
+        return false;
+    if (!named) {
+        const qa = realQuestion(a);
+        const qb = realQuestion(b);
+        if (qa && qb && qa !== qb)
+            return false;
+    }
+    // The rows still have to agree, NAMED OR NOT. The id says which question the
+    // log holds; it does not say the screen is still showing that question, and
+    // the matcher that produced it works on a handful of labels. Requiring the
+    // shared indices to line up costs nothing on a real repaint (they do) and is
+    // the difference between a card whose buttons answer this box and one whose
+    // buttons answer the last one.
+    const byIndex = new Map(a.options.map((o) => [o.index, o.label]));
+    let shared = 0;
+    let own = 0;
+    for (const o of b.options) {
+        const mine = byIndex.get(o.index);
+        if (mine === undefined)
+            continue;
+        if (!labelsAgree(mine, o.label))
+            return false;
+        shared++;
+        // …and at least one agreement has to be about THIS box. The TUI appends
+        // its own rows to every question it draws ("Other", "Chat about this",
+        // "Type something"), so a new box whose top has scrolled away can present
+        // nothing but those — two generic rows agreeing with the previous box's
+        // two generic rows, which is no evidence at all. Measured as the path that
+        // glued a dead box's question and labels onto a live one.
+        if (!GENERIC_ROW_RE.test(mine.trim()))
+            own++;
+    }
+    return shared > 0 && own > 0;
+}
+/**
+ * Rows the TUI draws on EVERY question of its own accord, after the tool's
+ * options. They are numbered like options and they say nothing about which box
+ * is on screen.
+ */
+const GENERIC_ROW_RE = /^(other|chat about this|type something\.?|none of these)$/i;
+/**
+ * Do two published boxes say the same thing? Field by field, because
+ * `JSON.stringify` also compares KEY ORDER — and the merge builds its object in
+ * its own order, so a byte comparison reported a change on the pass after every
+ * merge: one more broadcast, push and plugin event per box, for a card that had not
+ * moved. `ticks: "ignore"` asks "same apart from checkbox ticks" (a toggle: no push).
+ */
+export function samePrompt(a, b, ticks) {
+    if (!a || !b)
+        return a === b || (!a && !b);
+    if (a.kind !== b.kind || a.question !== b.question)
+        return false;
+    if (!!a.multi !== !!b.multi || !!a.nav !== !!b.nav || !!a.truncated !== !!b.truncated ||
+        !!a.questionTruncated !== !!b.questionTruncated)
+        return false;
+    if ((a.ask ?? "") !== (b.ask ?? ""))
+        return false;
+    if ((a.askId ?? "") !== (b.askId ?? ""))
+        return false;
+    if ((a.submitLabel ?? "") !== (b.submitLabel ?? ""))
+        return false;
+    if ((a.plan?.text ?? "") !== (b.plan?.text ?? "") || !!a.plan?.cut !== !!b.plan?.cut)
+        return false;
+    if (a.options.length !== b.options.length)
+        return false;
+    return a.options.every((o, i) => o.index === b.options[i].index && o.label === b.options[i].label &&
+        (o.desc ?? "") === (b.options[i].desc ?? "") && (ticks === "ignore" || o.checked === b.options[i].checked));
+}
+/**
+ * Fold a fresh parse of the SAME box into what is already published.
+ *
+ * The published box wins every field it has, and the new one may only ADD: an
+ * option index nobody had seen yet, a real question where the placeholder stood.
+ * That is what makes a box whose top has scrolled away keep the options it was
+ * published with — "the first options are scrolled away and therefore missing
+ * from the selection dialogue" — without the card ever changing shape under a
+ * thumb.
+ *
+ * Nothing here is invented: every option in the result was read off this
+ * screen, for this box, at some point while it was up.
+ */
+export function mergeBox(published, parsed) {
+    const byIndex = new Map(published.options.map((o) => [o.index, o]));
+    for (const o of parsed.options) {
+        // A published label is NEVER rewritten, not even by a longer reading of
+        // itself. It was tried the other way — "the screen cut this one, so the
+        // longer read is the truer one" — and it is the wrong trade twice over:
+        // the labels ARE the fingerprint, so growing one restarts the card and
+        // makes an answer queued against it stale, which is the whole thing this
+        // merge exists to stop; and a garbled read that happens to be longer (a
+        // panel border the side-panel cut missed) then wins permanently, since
+        // the correct shorter read can never take it back (`desc`/`ask` carry the
+        // full words). Ticks are the one row field where the FRESHEST read wins.
+        //
+        // A description is ADDED to a published row that has none: the CLI may
+        // flush its `AskUserQuestion` record to the log a pass AFTER the box is
+        // drawn, and dropping the late enrichment here left the card without its
+        // explanations for as long as the box stayed up (measured on 2.1.304 by
+        // the real-CLI smoke, two runs in three). `desc` is outside the
+        // fingerprint, so adding it re-keys nothing; one already shown is kept.
+        const had = byIndex.get(o.index);
+        if (!had) {
+            byIndex.set(o.index, o);
+            continue;
+        }
+        let row = had;
+        if (o.checked !== undefined)
+            row = { ...row, checked: o.checked };
+        if (!row.desc && o.desc)
+            row = { ...row, desc: o.desc };
+        if (row !== had)
+            byIndex.set(o.index, row);
+    }
+    // Lowest indices first and capped there: the head is the half that scrolled
+    // away, so if anything has to go it is the tail — which is on screen.
+    const options = [...byIndex.values()].sort((x, y) => x.index - y.index).slice(0, MAX_BOX_OPTIONS);
+    const questionSource = realQuestion(published) ? published : (realQuestion(parsed) ? parsed : published);
+    const question = questionSource.question;
+    const ask = published.ask ?? parsed.ask;
+    const submitLabel = published.submitLabel ?? parsed.submitLabel;
+    // The freshest reading wins here, not the oldest: this is the CLI's own
+    // answer to "which box", and a pass that could not reach the log says
+    // nothing rather than something older.
+    const askId = parsed.askId ?? published.askId;
+    // Freshest too: the plan is a FILE and can be edited while its box is up
+    // (the box's own ctrl+g), so the newer read is the plan being approved.
+    const plan = parsed.plan ?? published.plan;
+    const truncated = options.length > 0 && options[0].index > 1;
+    // `nav` boxes lose their options off the RIGHT EDGE, not off the top, so the
+    // index-1 test says nothing about them: keep what the two passes agreed on.
+    const navTruncated = !!published.truncated && !!parsed.truncated;
+    const cut = published.nav ? navTruncated : truncated;
+    // Field by field rather than a spread of `published`: `truncated` has to be
+    // able to go AWAY (the head arrived, so nothing is unreachable any more), and
+    // a spread would carry the old `true` straight past the line that computed it.
+    return {
+        kind: published.kind,
+        question,
+        options,
+        ...(published.multi ? { multi: true } : {}),
+        ...(published.nav ? { nav: true } : {}),
+        ...(ask ? { ask } : {}),
+        ...(questionSource.questionTruncated ? { questionTruncated: true } : {}),
+        ...(askId ? { askId } : {}),
+        ...(submitLabel ? { submitLabel } : {}),
+        ...(plan ? { plan } : {}),
+        ...(cut ? { truncated: true } : {}),
+    };
+}
+/** The question a pass actually read, or "" for the placeholder a truncated box
+ *  falls back to (`detectPrompt`). */
+function realQuestion(p) {
+    const q = p.question.replace(/\s+/g, " ").trim();
+    return q === PLACEHOLDER_QUESTION ? "" : q;
+}
+/** Same label, allowing for the end the terminal cut off. */
+function labelsAgree(a, b) {
+    const x = a.replace(/\s+/g, " ").trim();
+    const y = b.replace(/\s+/g, " ").trim();
+    if (x === y)
+        return true;
+    const short = x.length < y.length ? x : y;
+    const long = x.length < y.length ? y : x;
+    return short.length >= 6 && long.startsWith(short);
+}
+//# sourceMappingURL=promptmerge.js.map

package/packages/host/dist/promptmerge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptmerge.js","sourceRoot":"","sources":["../src/promptmerge.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,OAAO,CAAC,CAAiB,EAAE,CAAiB;IAC1D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,qDAAqD;IACrD,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC;IAC/C,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,sDAAsD;IACtD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;IAC1C,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,+BAA+B;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,EAAE,CAAC;QACT,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,0DAA0D;QAC1D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAAE,GAAG,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAG,4DAA4D,CAAC;AAEpF;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,CAAwB,EAAE,CAAwB,EAAE,KAAgB;IAC7F,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;QACnF,CAAC,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG;QAAE,OAAO,KAAK,CAAC;IACnG,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK;QAC/F,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAChH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,QAAQ,CAAC,SAAyB,EAAE,MAAsB;IACxE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,gEAAgE;QAChE,wEAAwE;QACxE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,IAAI,GAAG,GAAG,GAAG,CAAC;QACd,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI;YAAE,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAClG,MAAM,cAAc,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;IACzC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC;IACxC,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;IAChE,wEAAwE;IACxE,sEAAsE;IACtE,uCAAuC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC;IAC9C,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC7D,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,YAAY,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACjE,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,QAAQ;QACR,OAAO;QACP,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED;sCACsC;AACtC,SAAS,YAAY,CAAC,CAAiB;IACrC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,CAAC,KAAK,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,6DAA6D;AAC7D,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC"}

package/packages/host/dist/promptnav.d.ts

@@ -0,0 +1,29 @@
+export interface SubmitNav {
+    /**
+     * Selectable ROWS between the cursor and the Submit row: positive means press
+     * Down that many times, negative Up, 0 means the cursor is already there.
+     *
+     * Rows, not screen lines — every option draws a wrapped description under its
+     * label, and the arrow keys step over those.
+     */
+    steps: number;
+    /** The word the TUI drew on that row — `Submit` or `Next`. See
+     *  `SUBMIT_ROW_RE`: they are different acts and the phone says which. */
+    label: "Submit" | "Next";
+}
+/**
+ * Where the selection cursor is, relative to the box's Submit row.
+ *
+ * A checkbox box is answered by TOGGLING rows and then pressing Return **on the
+ * Submit row** — Return anywhere else toggles whatever the cursor is sitting on.
+ * The phone's Submit button used to send a bare Return, which therefore did the
+ * one thing it must never do: it re-toggled option 1 (where the cursor starts)
+ * and left the box open. The keystroke only means "submit" once the cursor has
+ * been walked there, which is what this measures.
+ *
+ * Returns null when the screen does not show BOTH a Submit row and a cursor —
+ * a box taller than the terminal can have scrolled either off, and guessing a
+ * direction there would toggle a row nobody chose. The caller falls back to the
+ * bare Return, i.e. to what it did before.
+ */
+export declare function navToSubmit(screen: string): SubmitNav | null;

package/packages/host/dist/promptnav.js

@@ -0,0 +1,97 @@
+/** The nav-to-Submit walk for checkbox boxes; re-exported by `prompt.ts`. */
+// ── Placing the cursor on a checkbox box's Submit row ──────────────────────
+import { OPTION_RE, stripAnsi } from "./promptbase.js";
+const clean = stripAnsi;
+/**
+ * The COMMIT row of a multi-select box. It carries no index — the numbered rows
+ * are the checkboxes plus the TUI's own trailing actions — so it is matched on
+ * the word alone, with the same optional one-character marker in front that an
+ * option row tolerates ("❯  Submit").
+ *
+ * **The word is not always "Submit".** Read off the installed binary (claude
+ * 2.1.267): the multi-select list is handed
+ * `submitButtonText: <on the last question> ? "Submit" : "Next"`, so an
+ * `AskUserQuestion` carrying SEVERAL questions draws "Next" on every question
+ * but the last. Matching "Submit" alone therefore found no commit row at all on
+ * exactly those boxes — `navToSubmit` returned null, `submitPromptBox` fell back
+ * to a bare Return, and a bare Return on a checkbox box re-toggles whatever row
+ * the cursor is sitting on and leaves the box open. That is the health board's
+ * "Placing the cursor on a multi-select Submit row" going red.
+ *
+ * The two words are kept APART in what is published (`SubmitNav.label`): Return
+ * on "Next" moves to the next question rather than answering, and a button that
+ * says Submit while the TUI says Next is a claim about what a tap will do.
+ *
+ * The marker slot is the CURSOR GLYPH only, unlike `OPTION_RE`'s deliberately
+ * permissive one. There the loose slot is a defence — an unrecognised marker
+ * used to cost the whole option row. Here it is the opposite: the row is two
+ * common words, so `- Next` or `# Next` in the agent's own prose inside the
+ * scan window would read as a commit row. "Newest box wins" hides that while
+ * the real row is on screen; restricting the slot means it cannot be the
+ * target when the real row has scrolled off either. An unrecognised cursor
+ * glyph costs the walk, which falls back to the bare Return it always did.
+ */
+const SUBMIT_ROW_RE = /^(?:(❯)\s+)?(Submit|Next)$/;
+/** Screen rows scanned upward. Same reasoning as WINDOW: a checkbox box with a
+ *  description under every option is tall. */
+const NAV_WINDOW = 80;
+/** How far a navigable row may sit from the Submit row and still count as part
+ *  of the same box — an older box scrolled above must not join the run. */
+const NAV_SPAN = 40;
+/**
+ * Where the selection cursor is, relative to the box's Submit row.
+ *
+ * A checkbox box is answered by TOGGLING rows and then pressing Return **on the
+ * Submit row** — Return anywhere else toggles whatever the cursor is sitting on.
+ * The phone's Submit button used to send a bare Return, which therefore did the
+ * one thing it must never do: it re-toggled option 1 (where the cursor starts)
+ * and left the box open. The keystroke only means "submit" once the cursor has
+ * been walked there, which is what this measures.
+ *
+ * Returns null when the screen does not show BOTH a Submit row and a cursor —
+ * a box taller than the terminal can have scrolled either off, and guessing a
+ * direction there would toggle a row nobody chose. The caller falls back to the
+ * bare Return, i.e. to what it did before.
+ */
+export function navToSubmit(screen) {
+    const lines = clean(screen)
+        .split("\n")
+        .map((l) => l.replace(/^[│┃|╮╯╰╭─\s]+/, "").replace(/[│┃|]+$/, "").trim());
+    const rows = [];
+    for (let i = Math.max(0, lines.length - NAV_WINDOW); i < lines.length; i++) {
+        const sub = SUBMIT_ROW_RE.exec(lines[i]);
+        if (sub) {
+            rows.push({ line: i, cursor: sub[1] === "❯", submit: true, label: sub[2] });
+            continue;
+        }
+        const m = OPTION_RE.exec(lines[i]);
+        // Only rows the arrows can land on. A description line that happens to start
+        // with a number is filtered by the same shape test the detector uses.
+        if (m)
+            rows.push({ line: i, cursor: m[1] === "❯", submit: false });
+    }
+    // Newest box wins, and only its own rows count.
+    let sIdx = -1;
+    for (let i = rows.length - 1; i >= 0; i--)
+        if (rows[i].submit) {
+            sIdx = i;
+            break;
+        }
+    if (sIdx < 0)
+        return null;
+    const near = rows.filter((r) => Math.abs(r.line - rows[sIdx].line) <= NAV_SPAN);
+    const s = near.indexOf(rows[sIdx]);
+    // The cursor nearest the Submit row: two boxes in one scrollback would
+    // otherwise hand us the older one's marker and a wildly wrong distance.
+    let c = -1;
+    for (let i = 0; i < near.length; i++) {
+        if (!near[i].cursor)
+            continue;
+        if (c < 0 || Math.abs(i - s) < Math.abs(c - s))
+            c = i;
+    }
+    if (c < 0)
+        return null;
+    return { steps: s - c, label: rows[sIdx].label ?? "Submit" };
+}
+//# sourceMappingURL=promptnav.js.map

package/packages/host/dist/promptnav.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptnav.js","sourceRoot":"","sources":["../src/promptnav.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,aAAa,GAAG,4BAA4B,CAAC;AACnD;8CAC8C;AAC9C,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB;2EAC2E;AAC3E,MAAM,QAAQ,GAAG,EAAE,CAAC;AAgBpB;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAoF,EAAE,CAAC;IACjG,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3E,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAsB,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxH,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,6EAA6E;QAC7E,sEAAsE;QACtE,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,gDAAgD;IAChD,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAAC,IAAI,GAAG,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;IACnF,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC;IAChF,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;AAC/D,CAAC"}

package/packages/host/dist/prompts.d.ts

@@ -0,0 +1,4 @@
+/** The override for `name`, or `fallback`. Never throws. */
+export declare function promptText(name: string, fallback: string): string;
+/** Names with a non-empty override file present right now (for a doctor row). */
+export declare function overriddenPrompts(): string[];

package/packages/host/dist/prompts.js

@@ -0,0 +1,78 @@
+/**
+ * **A fork's own words for the unattended model calls.**
+ *
+ * `promptText(name, fallback)` answers `<config dir>/prompts/<name>.md` when that
+ * file holds anything, else `fallback` — the pinned default, byte for byte the
+ * text that shipped. The config dir is `branddirs.ts`' `configDir()`, the same one
+ * `secrets.ts` and the `.env` load use.
+ *
+ * Read PER CALL, not cached: the callers are unattended passes and a tapped
+ * button, minutes apart, and one `readFileSync` of a few hundred bytes costs
+ * nothing against a model call. A cache would need an mtime check to notice an
+ * edit anyway — and then hot-reload (the point of a file a person edits while
+ * the daemon runs) would be exactly what the read already is.
+ *
+ * Never throws and never returns an empty string: a missing, unreadable, empty
+ * or whitespace-only file is the default (the unreadable and the empty ones are
+ * logged once per name — an absent file is the normal case and says nothing). A
+ * name outside `[a-z0-9-]+` is refused so a caller bug cannot read outside the
+ * `prompts/` dir. Only the INSTRUCTION wording is overridable: the JSON contracts
+ * the parsers read stay in code. Why / the names: docs/notes/host.md.
+ */
+import { readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { configDir } from "./branddirs.js";
+const NAME_RE = /^[a-z0-9-]+$/;
+const said = new Set();
+function sayOnce(key, msg) {
+    if (said.has(key))
+        return;
+    said.add(key);
+    console.warn(`[prompts] ${msg}`);
+}
+function promptsDir() {
+    return join(configDir(), "prompts");
+}
+/** The override for `name`, or `fallback`. Never throws. */
+export function promptText(name, fallback) {
+    try {
+        if (!NAME_RE.test(name)) {
+            sayOnce(`name:${name}`, `refusing prompt name ${JSON.stringify(name)} (must match ${NAME_RE})`);
+            return fallback;
+        }
+        const file = join(promptsDir(), `${name}.md`);
+        let raw;
+        try {
+            raw = readFileSync(file, "utf8");
+        }
+        catch (e) {
+            if (e?.code !== "ENOENT")
+                sayOnce(`read:${name}`, `cannot read ${file}: ${e?.message}; using the default`);
+            return fallback;
+        }
+        // Trailing newline off: an editor adds one and the default has none.
+        const text = raw.replace(/\r\n/g, "\n").replace(/\n+$/, "");
+        if (!text.trim()) {
+            sayOnce(`empty:${name}`, `${file} is empty; using the default`);
+            return fallback;
+        }
+        return text;
+    }
+    catch {
+        return fallback;
+    }
+}
+/** Names with a non-empty override file present right now (for a doctor row). */
+export function overriddenPrompts() {
+    try {
+        return readdirSync(promptsDir())
+            .filter((f) => f.endsWith(".md") && NAME_RE.test(f.slice(0, -3)))
+            .map((f) => f.slice(0, -3))
+            .filter((n) => promptText(n, "") !== "")
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=prompts.js.map

package/packages/host/dist/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,OAAO,GAAG,cAAc,CAAC;AAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;AAE/B,SAAS,OAAO,CAAC,GAAW,EAAE,GAAW;IACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,QAAgB;IACvD,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,wBAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,OAAO,GAAG,CAAC,CAAC;YAChG,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;QAC9C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,eAAe,IAAI,KAAM,CAAW,EAAE,OAAO,qBAAqB,CAAC,CAAC;YACjJ,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,qEAAqE;QACrE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,GAAG,IAAI,8BAA8B,CAAC,CAAC;YAChE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB;IAC/B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,UAAU,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;aAChE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC;aACvC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/packages/host/dist/ptycap.d.ts

@@ -0,0 +1,41 @@
+/** The cap on concurrent pseudo-terminals, or null if we cannot read it.
+ *  A boot constant, so it is cached for the life of the process. */
+export declare function ptyMax(): number | null;
+/** How many pseudo-terminals are open right now, system-wide, or null.
+ *  Linux answers from `/proc` for free; macOS has no counter, so it costs an
+ *  `lsof` walk — hence the TTL, and hence failure-path-only callers. */
+export declare function ptyOpen(): number | null;
+/** Does this error look like a pty that could not be allocated? */
+export declare function looksLikePtyExhaustion(err: unknown): boolean;
+/**
+ * What to SAY about a failed pty spawn.
+ *
+ * Returns the raw message unless the error looks like pty exhaustion AND the
+ * kernel confirms the table is genuinely full — the count is evidence, so an
+ * error that merely matches the pattern while capacity remains keeps its own
+ * words rather than being relabelled with a guess.
+ */
+export declare function spawnFailure(err: unknown): string;
+/** The wording, lifted out so it can be asserted: a machine with headroom can
+ *  never reach this branch through `spawnFailure`, which is the whole point of
+ *  the evidence rule above and would otherwise leave the sentence untested. */
+export declare function exhaustionSentence(open: number, max: number): string;
+/**
+ * The pseudo-terminals THIS process holds open, by side — or null.
+ *
+ * `ptyOpen()` is system-wide on purpose (it must be able to accuse someone
+ * else); this is the other half, and it is what makes a leak in OUR process
+ * visible: measured 2026-09-25, node-pty 1.1.0's macOS spawn leaked one
+ * `/dev/ptmx` and the child's slave fd into the PARENT on every spawn, so the
+ * daemon held 248 masters for 67 live sessions and the table ran dry. A healthy
+ * host holds one master per live PTY; `masters` far past that is a leak.
+ *
+ * Cheap enough to answer on request (one readdir + an fstat per fd, no
+ * subprocess), unlike the system-wide count. `slaves` counts slave-side fds —
+ * this process should hold NONE. Unknown platform or unreadable table ⇒ null,
+ * never a guess.
+ */
+export declare function ownPtys(): {
+    masters: number;
+    slaves: number;
+} | null;