Struct FrictionPause 

pub struct FrictionPause {
    pub command: Command,
    pub level: FrictionLevel,
    pub started_at: Instant,
    pub pause: Duration,
    pub confirm_word: Option<String>,
    pub confirm_input: String,
}

Live state of a friction-pause overlay.

The overlay’s lifecycle in M1:

1. Dispatcher returns FrictionDecision::Pause | TypedConfirm plus pending_command = Some(cmd).
2. AppState::apply_dispatch opens a FrictionPause with started_at = now.
3. The TUI render path draws a countdown + (L2) an input box.
4. Operator hits Esc → AppState::dismiss_overlay; the pending command is discarded.
5. L1: the event loop’s tick handler polls [is_complete]; when the pause elapses the overlay is closed and the command is re-dispatched with zero_commands::run_bypass_friction.
6. L2: the operator types into confirm_input; when the pause has also elapsed and the buffer matches confirm_word, the same completion path runs. Typing the word before the pause ends does nothing — the pause is mandatory (§3, Addendum A). The widget dims the input during the pause to make this visible.

Fields

command: Command

level: FrictionLevel

started_at: Instant

pause: Duration

confirm_word: Option<String>

The word the operator must type at L2+. None at L1 (the pause alone is the gate).

confirm_input: String

Operator’s in-progress typed confirmation. Empty at open. Only mutated at L2+; input handling ignores it at L1.

Implementations

impl FrictionPause

pub fn from_decision( command: Command, decision: &FrictionDecision, now: Instant, ) -> Option<Self>

pub fn remaining(&self, now: Instant) -> Duration

Remaining pause duration at now. Zero when the pause has elapsed. Saturating so callers don’t see negatives.

pub fn pause_elapsed(&self, now: Instant) -> bool

Whether the mandatory pause window has elapsed. True gates the typed-confirm input at L2+.

pub fn confirm_word_matches(&self) -> bool

Whether the operator’s typed input matches the confirm word. Case-sensitive (matches the constant in zero-commands), trimmed. Always false at L1.

pub fn outcome(&self, now: Instant) -> FrictionOutcome

Evaluate completion state. The return discriminates only between “ready to re-dispatch” and “still pending” — cancellation is a separate path (the overlay is simply dismissed). At L1 the pause alone completes the gate. At L2+ both the pause and the typed confirmation are required.

pub fn push_char(&mut self, c: char, now: Instant)

Append a character to the confirm buffer. No-op at L1 and while the pause is still running — the widget dims the field to make this legible. Max length is a tight bound so a run-away Repeat cannot blow memory.

pub fn pop_char(&mut self, now: Instant)

Delete the last character from the confirm buffer. Same gating as [push_char].

Trait Implementations

impl Clone for FrictionPause

fn clone(&self) -> FrictionPause

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FrictionPause

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.