Wait for rendered terminal approval state in CI

Author: ShadowfetchStudio

docs/NATIVE_VERIFICATION.md

@@ -304,6 +304,12 @@ these transitions. Assertions inspect fresh complete frames because incremental
 ANSI updates can split words. This covers resize recovery; broader picker
 navigation, visual review and sustained terminal stress remain open.
 
+The approval phase now waits for the terminal's rendered **DENY** dialog and
+then its rendered **ALLOW** state before sending Enter. This replaced a fixed
+delay that could race the terminal's asynchronous approval refresh on a clean
+CI runner. The repaired PTY probe passes all eight fixture-model requests and
+the workspace Clippy check remains clean.
+
 ## Reviewed copy of uncommitted work
 
 Twelve real-Git worktree tests pass. Copy scenarios verify distinct staged and

scripts/test-native-tui.mjs

@@ -280,9 +280,21 @@ try {
   await delay(200);
   assert.equal((await cli(["approvals"])).approvals[0].id, approval.id);
   tui.child.stdin.write("\x7f");
+  const openingApproval = tui.output.stdout.length;
   tui.child.stdin.write("\x1bOS");
-  await delay(150);
-  tui.child.stdin.write("\t\r");
+  await until("terminal approval dialog", () =>
+    tui.output.stdout
+      .slice(openingApproval)
+      .includes("DENY · Tab switches"),
+  );
+  const switchingApproval = tui.output.stdout.length;
+  tui.child.stdin.write("\t");
+  await until("terminal approval allow state", () =>
+    tui.output.stdout
+      .slice(switchingApproval)
+      .includes("ALLOW · Tab switches"),
+  );
+  tui.child.stdin.write("\r");
   await until(
     "approved exact command",
     async () =>