@corca-org/ceal-host-win32-x64 1.0.16 → 1.0.17

package/libexec/ceal-host/codex-hook.mjs

@@ -2,10 +2,6 @@
 import { createRequire as __cealCreateRequire } from "node:module";
 const require = __cealCreateRequire(import.meta.url);
 
-// host/codex/src/codex-hook-runner.ts
-import { homedir as homedir3 } from "node:os";
-import { join as join6 } from "node:path";
-
 // host/codex/src/codex-adapter.ts
 import { homedir } from "node:os";
 import { isAbsolute as isAbsolute3, join as join3, relative, resolve as resolve2 } from "node:path";
@@ -220,7 +216,7 @@ var CEAL_GATEWAY_DERIVED_STORE_FAILURE_CLASSES = vocabulary(["storage_unavailabl
 var CEAL_POLICY_DECISIONS = vocabulary(["allowed", "denied", "not_evaluated"]);
 var CEAL_CONNECTOR_ROUTE_PHASES = vocabulary(["scope_observation", "target_selection", "route_resolution"]);
 var CEAL_CONNECTOR_ROUTE_CAUSES = vocabulary(["provider_throttled", "provider_unavailable", "binding_invalid", "scope_limit_exceeded"]);
-var CEAL_WRITE_SOURCE_KINDS = vocabulary(["authenticated_registered_client", "agent_lease_admission", "provider_authenticated_event"]);
+var CEAL_WRITE_SOURCE_KINDS = vocabulary(["authenticated_registered_client", "provider_authenticated_event"]);
 var CEAL_REFRESH_DELIVERIES = vocabulary(["initial", "recovery", "replay", "terminal_failure", "recovery_unavailable"]);
 var CEAL_CLIENT_OPERATIONS = vocabulary(["handshake", "discover", "call", "readback"]);
 var CEAL_WRITE_IDEMPOTENCY_POSTURES = vocabulary(["required", "optional", "not_required"]);
@@ -373,6 +369,7 @@ var CEAL_OPERATION_WITHHELD_CAUSES = vocabulary(["provider_permission", "access_
 // packages/ceal-client-protocol/src/operation-contract-types.ts
 var CEAL_JSON_SCHEMA_2020_12 = "https://json-schema.org/draft/2020-12/schema";
 var CEAL_OPERATION_ERROR_SCHEMA_VERSION = "ceal.operation_error.v1";
+var CEAL_ARTIFACT_STAGE_TERMINALS = vocabulary(["chunk_accepted", "artifact_ready", "idempotency_replayed"]);
 var CEAL_RETRY_AFTER_MAX_MS = 60 * 60 * 1e3;
 var CEAL_JSON_SCHEMA_TYPES = vocabulary(["object", "array", "string", "integer", "number", "boolean", "null"]);
 var OBSERVATION_POSTURES = vocabulary(["direct_readback", "approved_no_readback", "operator_mediated", "excluded"]);
@@ -746,9 +743,6 @@ var CEAL_OPERATION_AUTHORITY_POLICY_KEYS = Object.freeze(["access_group", "insta
 var MAX_OPERATION_INPUT_RESOLVER_BINDINGS = 96;
 var CEAL_OPERATION_DESCRIPTOR_REQUIRED_ENVELOPE_KEYS = Object.freeze(["schema_version", "id", "input_contract", "result_contract", "policy"]);
 var CEAL_OPERATION_DESCRIPTOR_OPTIONAL_ENVELOPE_KEYS = Object.freeze(["input_resolution", "summary"]);
-var CEAL_OPERATION_RESULT_KEYS = vocabulary(["ok", "operation_id", "operation_receipt", "schema_version", "value"]);
-var CEAL_OPERATION_COMPACT_RESULT_KEYS = vocabulary(["ok", "operation_evidence", "operation_id", "schema_version", "value"]);
-var CEAL_OPERATION_RESULT_OPTIONAL_KEYS = vocabulary(["model_disclosure", "result_complete", "resume"]);
 
 // packages/ceal-client-protocol/src/operation-catalog.ts
 var CEAL_OPERATION_CATALOG_SCHEMA_VERSION = "ceal.catalog.v3";
@@ -812,10 +806,6 @@ var CEAL_SCHEMA_LITERALS = [
   "ceal.host_observation.v1",
   "ceal.host_registration_request.v1",
   "ceal.host_registration_result.v1",
-  "ceal.leased-resource-stream.v1",
-  "ceal.leased_consumer_attachment_stream_frame.v1",
-  "ceal.leased_consumer_attachment_stream_request.v1",
-  "ceal.leased_consumer_attachment_stream_transport.v1",
   "ceal.operation_descriptor.v1",
   "ceal.operation_error.v1",
   "ceal.operation_failure.v1",
@@ -841,12 +831,6 @@ var CEAL_SCHEMA_LITERAL_SET = new Set(CEAL_SCHEMA_LITERALS);
 // packages/ceal-client-protocol/src/bounded-series.ts
 import { join } from "node:path";
 var CEAL_BOUNDED_SERIES_CATALOG = Object.freeze({
-  usage_record: (root) => join(root, "run-usage.jsonl"),
-  control_commit: (root) => join(root, "control-auto-commit.jsonl"),
-  engagement_signal: (root) => join(root, "runtime-state", "slack-feedback.jsonl"),
-  runtime_error: (root) => join(root, "runtime-state", "runtime-errors.jsonl"),
-  turn_bridge_request: (root) => join(root, ".ceal", "turn-bridge", "requests.jsonl"),
-  thread_run_events: (root) => join(root, "run-events.jsonl"),
   bounded_store_sidecar: (root) => `${root}.jsonl`,
   gateway_audit_archive: (root) => `${root}.jsonl`,
   gateway_access_group_connector_control_audit: (root) => `${root}.audit.jsonl`,
@@ -879,35 +863,6 @@ var CEAL_HOST_REGISTRATION_ATTEMPT_REF_PATTERN = new RegExp(`^host-registration-
 var CEAL_HOST_INSTALLATION_REF_PATTERN = new RegExp(`^host-installation:${CEAL_LOWERCASE_UUID_PATTERN}$`, "u");
 var CEAL_HOST_SOURCE_REF_PATTERN = new RegExp(`^host-source:${CEAL_LOWERCASE_UUID_PATTERN}$`, "u");
 
-// packages/ceal-client-protocol/src/agent-session-handoff.ts
-var CEAL_AGENT_ADMISSION_PHASES = vocabulary([
-  "incumbent_admitted",
-  "incumbent_draining",
-  "drained",
-  "candidate_admitted",
-  "candidate_draining",
-  "rollback_admitted"
-]);
-var CEAL_AGENT_SERVICE_SESSION_RECORD_KEYS = vocabulary([
-  "admission_fence",
-  "admission_state",
-  "admission_state_generation",
-  "bearer",
-  "consumer_ref",
-  "credential_generation",
-  "expires_at",
-  "gateway_instance",
-  "gateway_origin",
-  "gateway_serving_generation",
-  "issued_at",
-  "record_sha256",
-  "renew_after",
-  "renew_by",
-  "schema_version",
-  "session_revision"
-]);
-var CEAL_AGENT_SESSION_COMMIT_KEYS = vocabulary(["attempt_ref", "expected_session_revision", "session_revision"]);
-
 // packages/ceal-client-protocol/src/operation-result-completeness.ts
 var CEAL_READ_VALUE_CONTINUATION_KEYS = vocabulary(["continuation", "continuation_ref", "next_cursor"]);
 
@@ -918,7 +873,9 @@ var CEAL_OPERATION_INVOKE_COMMAND = "invoke";
 var CEAL_OPERATION_INPUT_FLAG = "--input";
 var CEAL_OPERATION_ID_PLACEHOLDER = "<operation-id>";
 var CEAL_OPERATION_INPUT_PLACEHOLDER = "<json-object>";
-var CEAL_MODEL_INVOCATION_ARGUMENTS = [CEAL_OPERATION_INVOKE_COMMAND, CEAL_OPERATION_ID_PLACEHOLDER, CEAL_OPERATION_INPUT_FLAG, shellSingleQuoted(CEAL_OPERATION_INPUT_PLACEHOLDER)].join(" ");
+var MODEL_INVOCATION_BASE_ARGUMENTS = [CEAL_OPERATION_INVOKE_COMMAND, CEAL_OPERATION_ID_PLACEHOLDER].join(" ");
+var CEAL_MODEL_INVOCATION_ARGUMENTS = [MODEL_INVOCATION_BASE_ARGUMENTS, CEAL_OPERATION_INPUT_FLAG, shellSingleQuoted(CEAL_OPERATION_INPUT_PLACEHOLDER)].join(" ");
+var CEAL_MODEL_INPUT_SOURCE_GUIDANCE = `For caller-owned fields, add ${CEAL_OPERATION_INPUT_FLAG} ${shellSingleQuoted(CEAL_OPERATION_INPUT_PLACEHOLDER)}. Use inline JSON for short input; for longer or generated input, put exactly one JSON object in a caller-owned regular non-symlink UTF-8 JSON file and pass --input @path; relative paths resolve from the command working directory.`;
 function shellSingleQuoted(value) {
   return `'${value.replaceAll("'", "'\\''")}'`;
 }
@@ -950,19 +907,73 @@ var CEAL_VERIFIED_ARTIFACT_DESCRIPTOR_JSON_SCHEMA = Object.freeze({
   }
 });
 
+// packages/ceal-client-protocol/src/provider-operation-vocabulary.ts
+var CEAL_FILE_TYPE_FAMILIES = vocabulary(["all", "image", "pdf"]);
+var CEAL_GITHUB_ISSUE_STATES = vocabulary(["open", "closed", "all"]);
+var CEAL_NOTION_UPDATABLE_BLOCK_TYPES = vocabulary([
+  "paragraph",
+  "heading_1",
+  "heading_2",
+  "heading_3",
+  "bulleted_list_item",
+  "numbered_list_item",
+  "to_do",
+  "code"
+]);
+var CEAL_NOTION_NEUTRAL_TYPES = vocabulary([
+  "text",
+  "number",
+  "boolean",
+  "date",
+  "select",
+  "multi_select",
+  "people",
+  "url",
+  "email",
+  "phone",
+  "unsupported"
+]);
+var CEAL_NOTION_IDENTITY_GAP_REASONS = vocabulary([
+  "identity_unavailable",
+  "identity_stale",
+  "identity_ambiguous",
+  "identity_revoked",
+  "identity_unlinked"
+]);
+var CEAL_NOTION_STRING_VALUE_TYPES = vocabulary(["text", "select", "url", "email", "phone"]);
+
+// packages/ceal-client-protocol/src/opaque-reference.ts
+var CEAL_OPAQUE_HANDLE_KINDS = vocabulary(["target", "message", "thread", "artifact", "document", "block", "object"]);
+var CEAL_OPAQUE_REF_KINDS = vocabulary([...CEAL_OPAQUE_HANDLE_KINDS, "result", "operation-receipt", "reply-receipt", "field", "notion-data-source"]);
+
 // packages/ceal-client-protocol/src/bare-document.ts
 var REQUIRED_FIELDS = CEAL_CLIENT_WIRE_CONTRACT.command_response.bare_document_fields;
 var OPTIONAL_FIELDS = CEAL_CLIENT_WIRE_CONTRACT.command_response.bare_document_optional_fields;
 
-// packages/ceal-client-protocol/src/leased-consumer-vocabulary.ts
-var CEAL_TERMINAL_DISPOSITIONS = vocabulary(["completed", "failed", "cancelled"]);
-var CEAL_LEASE_DISPOSITIONS = vocabulary([...CEAL_TERMINAL_DISPOSITIONS, "deferred"]);
-var CEAL_AUTOMATIC_FEEDBACK_INTENTS = vocabulary(["initial"]);
-var CEAL_LEASED_MESSAGE_DELIVERY_OPERATION_IDS = vocabulary(["message.send", "message.update", "message.delete"]);
+// packages/ceal-client-protocol/src/resource-row.ts
+var CEAL_RESOURCE_SEARCH_ORDERS = vocabulary(["relevance", "modified", "viewed", "created"]);
+var CEAL_RESOURCE_SEARCH_DIRECTIONS = vocabulary(["ascending", "descending"]);
+var CEAL_RESOURCE_SEARCH_FILTERS = vocabulary(["query", "modified_since", "since", "until", "authored_by_me", "include_replies", "kinds", "container_ref", "container_refs", "container_names", "addressed_to_me", "unread"]);
+var CEAL_RESOURCE_TIME_BASES = vocabulary(["created", "modified", "viewed"]);
 var CEAL_REPOSITORY_VISIBILITIES = vocabulary(["public", "private", "internal"]);
-var CEAL_RESULT_DELIVERY_OFFERS = vocabulary(["pending", "offered", "transport_lost"]);
-var CEAL_RESULT_DELIVERY_STATES = vocabulary(["unavailable", ...CEAL_RESULT_DELIVERY_OFFERS]);
-var CEAL_PROVIDER_OUTCOMES = vocabulary(["not_attempted", "outcome_unknown", "verified"]);
+var CEAL_ACTIVITY_V3_KINDS = vocabulary(["authored", "edited", "messaged", "responded"]);
+var CEAL_ACTIVITY_TIMESTAMP_BASES = vocabulary([
+  "message_created",
+  "commit_authored",
+  "resource_created",
+  "review_submitted",
+  "comment_created",
+  "event_start",
+  "all_day_start",
+  "file_created",
+  "file_modified",
+  "file_modified_by_me",
+  "file_viewed_by_me",
+  "page_created",
+  "page_last_edited",
+  "resource_modified"
+]);
+var CEAL_ACTIVITY_CONNECTOR_KINDS = vocabulary(["slack", "github", "google-calendar", "google-drive", "notion"]);
 var CEAL_ACTIVITY_GAP_CODES = vocabulary([
   "provider_page_budget",
   "call_deadline",
@@ -973,8 +984,6 @@ var CEAL_ACTIVITY_GAP_CODES = vocabulary([
   "unsupported_event_kind",
   "direct_messages_excluded"
 ]);
-var CEAL_ACTIVITY_CONNECTOR_KINDS = vocabulary(["slack", "github", "google-calendar", "google-drive", "notion"]);
-var CEAL_ACTIVITY_COVERAGE_STATUSES = vocabulary(["complete_for_target", "continuation_required", "blocked"]);
 var CEAL_ACTIVITY_EVENT_KINDS = vocabulary([
   "slack.message",
   "slack.reply",
@@ -1015,73 +1024,6 @@ var CEAL_ACTIVITY_EVENT_TIMESTAMP_BASIS_MAP = Object.freeze({
   "notion.page.created": "page_created",
   "notion.page.edited": "page_last_edited"
 });
-var CEAL_ACTIVITY_TIMESTAMP_BASES = vocabulary([
-  "message_created",
-  "commit_authored",
-  "resource_created",
-  "review_submitted",
-  "comment_created",
-  "event_start",
-  "all_day_start",
-  "file_created",
-  "file_modified",
-  "file_modified_by_me",
-  "file_viewed_by_me",
-  "page_created",
-  "page_last_edited",
-  "resource_modified"
-]);
-var CEAL_ACTIVITY_V3_KINDS = vocabulary(["authored", "edited", "messaged", "responded"]);
-var CEAL_RESOURCE_TIME_BASES = vocabulary(["created", "modified", "viewed"]);
-var CEAL_RESOURCE_SEARCH_ORDERS = vocabulary(["relevance", "modified", "viewed", "created"]);
-var CEAL_RESOURCE_SEARCH_DIRECTIONS = vocabulary(["ascending", "descending"]);
-var CEAL_RESOURCE_SEARCH_FILTERS = vocabulary(["query", "modified_since", "since", "until", "authored_by_me", "include_replies", "kinds", "container_ref", "container_refs", "container_names", "addressed_to_me", "unread"]);
-var CEAL_ARTIFACT_STAGE_TERMINALS = vocabulary(["chunk_accepted", "artifact_ready", "idempotency_replayed"]);
-var CEAL_READ_ITEM_KINDS = vocabulary(["conversation", "identity", "usergroup", "message", "file", "document"]);
-var CEAL_LEASED_MESSAGE_SEARCH_COMPLETENESS = vocabulary(["complete", "continuation_available", "truncated"]);
-var CEAL_OPAQUE_HANDLE_KINDS = vocabulary(["target", "message", "thread", "artifact", "document", "block", "object"]);
-var CEAL_OPAQUE_REF_KINDS = vocabulary([...CEAL_OPAQUE_HANDLE_KINDS, "result", "operation-receipt", "reply-receipt", "field", "notion-data-source"]);
-var CEAL_WRITE_OBJECT_KINDS = vocabulary(["document", "comment", "cell_range"]);
-var CEAL_CONVERSATION_KINDS = vocabulary(["channel", "dm", "group"]);
-var CEAL_FILE_TYPE_FAMILIES = vocabulary(["all", "image", "pdf"]);
-var CEAL_GITHUB_ISSUE_STATES = vocabulary(["open", "closed", "all"]);
-var CEAL_NOTION_UPDATABLE_BLOCK_TYPES = vocabulary([
-  "paragraph",
-  "heading_1",
-  "heading_2",
-  "heading_3",
-  "bulleted_list_item",
-  "numbered_list_item",
-  "to_do",
-  "code"
-]);
-var CEAL_NOTION_NEUTRAL_TYPES = vocabulary([
-  "text",
-  "number",
-  "boolean",
-  "date",
-  "select",
-  "multi_select",
-  "people",
-  "url",
-  "email",
-  "phone",
-  "unsupported"
-]);
-var CEAL_NOTION_IDENTITY_GAP_REASONS = vocabulary([
-  "identity_unavailable",
-  "identity_stale",
-  "identity_ambiguous",
-  "identity_revoked",
-  "identity_unlinked"
-]);
-var CEAL_NOTION_STRING_VALUE_TYPES = vocabulary(["text", "select", "url", "email", "phone"]);
-var CEAL_UNREAD_REASONS = vocabulary(["blocked", "unavailable", "too_large", "unsupported", "download_failed", "permission_denied"]);
-var CEAL_PLAN_ITEM_STATUSES = vocabulary(["pending", "active", "completed"]);
-var CEAL_FINAL_PRESENTATION_INTENTS = vocabulary(["final", "stop", "transient_notice"]);
-var CEAL_PRESENTATION_INTENTS = vocabulary(["progress", ...CEAL_FINAL_PRESENTATION_INTENTS]);
-
-// packages/ceal-client-protocol/src/resource-row.ts
 var CEAL_DATED_NOTE_BASES = vocabulary(["recording", "calendar_event", "created_time"]);
 var CEAL_DATED_NOTE_TRANSCRIPT_STATES = vocabulary(["present", "absent", "unestablished"]);
 var CEAL_READ_SEARCH_COST_CLASSES = vocabulary(["native_index", "scan"]);
@@ -1166,17 +1108,6 @@ var CEAL_REFRESH_FAILURE_CODES = vocabulary([
   "refresh_recovery_expired"
 ]);
 
-// packages/ceal-client-protocol/src/leased-artifact-contract.ts
-var CEAL_LEASED_CONSUMER_ARTIFACT_CHUNK_MAX_BYTES = 12 * 1024;
-
-// packages/ceal-client-protocol/src/leased-resource-stream.ts
-var CEAL_LEASED_CONSUMER_ATTACHMENT_STREAM_MAGIC = new Uint8Array([67, 69, 65, 76, 82, 83, 50, 0]);
-var CEAL_LEASED_CONSUMER_ATTACHMENT_STREAM_RECORD_PREFIX_BYTES = 8;
-var CEAL_LEASED_CONSUMER_ATTACHMENT_STREAM_MAX_HEADER_BYTES = 16 * 1024;
-var CEAL_LEASED_CONSUMER_ATTACHMENT_STREAM_CHUNK_BYTES = 64 * 1024;
-var CEAL_LEASED_CONSUMER_ATTACHMENT_STREAM_MAX_RECORD_BYTES = CEAL_LEASED_CONSUMER_ATTACHMENT_STREAM_RECORD_PREFIX_BYTES + CEAL_LEASED_CONSUMER_ATTACHMENT_STREAM_MAX_HEADER_BYTES + CEAL_LEASED_CONSUMER_ATTACHMENT_STREAM_CHUNK_BYTES;
-var CEAL_ATTACHMENT_UNREAD_REASONS = vocabulary(["blocked", "unavailable", "too_large", "unsupported", "download_failed", "digest_mismatch"]);
-
 // packages/ceal-client-protocol/src/request-validation-primitives.ts
 import { createHash } from "node:crypto";
 var DIGEST = /^[a-f0-9]{64}$/u;
@@ -1343,6 +1274,10 @@ var CEAL_REQUEST_RUN_BATCH_JSON_SCHEMA = {
 };
 
 // packages/ceal-client-protocol/src/host-observation.ts
+var CEAL_HOST_INPUT_KINDS = vocabulary(["human", "host_automatic"]);
+function isCealHostInputKind(value) {
+  return typeof value === "string" && CEAL_HOST_INPUT_KINDS.some((kind) => kind === value);
+}
 var CEAL_HOST_OBSERVATION_REF_PREFIX = "host-observation:";
 var HOST_OBSERVATION_PRODUCER = /^[a-z][a-z0-9]{0,31}$/u;
 var HOST_OBSERVATION_DIGEST = /^[a-f0-9]{8,64}$/u;
@@ -1405,12 +1340,6 @@ var OWNER_WRITE_STATES = Object.freeze(["attempt_started", "provider_acknowledge
 var OWNER_EFFECT_STATES = Object.freeze(["none", "applied", "failed", "unknown", "reconciled"]);
 var OWNER_RECEIPT_STATES = Object.freeze(["pending", "available", "failed", "unknown", "reconciled"]);
 
-// packages/ceal-client-protocol/src/thread-excerpt.ts
-var CEAL_THREAD_RECENT_WINDOW = 6;
-var CEAL_THREAD_LAST_APP_MESSAGES_WINDOW = 3;
-var CEAL_THREAD_OLDER_SUMMARY_WINDOW = 4;
-var CEAL_FED_THREAD_MESSAGE_LIMIT = CEAL_THREAD_RECENT_WINDOW + CEAL_THREAD_OLDER_SUMMARY_WINDOW + CEAL_THREAD_LAST_APP_MESSAGES_WINDOW;
-
 // packages/ceal-client-protocol/src/request-graph-readiness.ts
 var REQUEST_GRAPH_PRODUCER_TO_APPEND_SCHEMA = {
   type: "object",
@@ -1499,26 +1428,11 @@ var CEAL_HOST_INVOCATION_AUTHENTICATION_RESULT_MAX_BYTES = new TextEncoder().enc
 `).byteLength;
 
 // packages/ceal-client-protocol/src/client-result-materialization.ts
+var CEAL_UNREAD_REASONS = vocabulary(["blocked", "unavailable", "too_large", "unsupported", "download_failed", "permission_denied"]);
 var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
 var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id"]);
 var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "read_argv", "local_result_root", "continue_argv", "model_disclosure", "item_read_argv"]);
 
-// packages/ceal-client-protocol/src/session-start-affordance.ts
-var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
-var CEAL_LINK_RESOURCE_PRECEDENCE = `When the user asks to use Ceal or provides a link to information that may be available through installed organizational capabilities, run bare \`${CEAL_SESSION_ENTRY_INVOCATION}\`. The Host supplies the current user prompt without exposing it to the client command, and the Gateway returns the applicable entry in that one response. Treat a supplied link as a candidate Ceal resource rather than a public web-search target. Reach for a generic web fetch or web search only when the Gateway offered nothing.`;
-
-// packages/ceal-client-protocol/src/conversation-contracts.ts
-var CEAL_APPROVAL_POLICY_KINDS = vocabulary(["requester_only", "named_users", "role_based"]);
-var CEAL_APPROVAL_TARGET_KINDS = vocabulary([
-  "repo_change",
-  "investigation",
-  "skill_creation",
-  "command_creation",
-  "connector_creation",
-  "generic"
-]);
-var CEAL_PROGRESS_PHASES = vocabulary(["request_review", "information_gathering", "work_execution", "result_check"]);
-
 // packages/ceal-client-protocol/src/gateway-cache-origin-validation.ts
 var CEAL_MAX_CACHE_ORIGIN_AGE_MS = 30 * 24 * 60 * 60 * 1e3;
 
@@ -1996,10 +1910,6 @@ var CodexOutboxStore = class {
     await removeOwnerState(this.registrationPath(registration.host_source_ref, registration.host_session_ref), "registration");
     await removeOwnerState(this.cursorPath(registration.host_source_ref, registration.host_session_ref), "cursor");
   }
-  async relayWakeDirectories() {
-    await this.prepare();
-    return { entries: this.entriesDirectory, registrations: this.registrationsDirectory };
-  }
   async listTranscriptRegistrations() {
     await this.prepare();
     const registrations = [];
@@ -2189,7 +2099,7 @@ async function readPrivateFile(path) {
 }
 function validateEnvelope(value) {
   if (!isRecord3(value)) throw storageError("Codex outbox entry is malformed.");
-  if (!sameKeys(value, ["schema_version", "identity", "host_input_ref", "prompt_ref", "observations", "origin_input", "submission_ref", "created_at", "expires_at"], ["request_ref", "codex_turn_id"])) throw storageError(`Codex outbox entry key set is malformed (${refusalFact("keys", Object.keys(value), "exactly the outbox entry key set")}).`);
+  if (!sameKeys(value, ["schema_version", "identity", "host_input_ref", "input_kind", "prompt_ref", "observations", "origin_input", "submission_ref", "created_at", "expires_at"], ["request_ref", "codex_turn_id"])) throw storageError(`Codex outbox entry key set is malformed (${refusalFact("keys", Object.keys(value), "exactly the outbox entry key set")}).`);
   if (value.schema_version !== CODEX_OUTBOX_SCHEMA_VERSION) throw storageError(`Codex outbox entry is malformed (${refusalFact("schema_version", value.schema_version, `expected ${CODEX_OUTBOX_SCHEMA_VERSION}`)}).`);
   validateIdentity2(value.identity);
   validateEnvelopeReferences(value);
@@ -2198,6 +2108,7 @@ function validateEnvelope(value) {
 }
 function validateEnvelopeReferences(value) {
   if (!SAFE_REF3.test(String(value.host_input_ref))) throw storageError("Codex outbox input reference is malformed.");
+  if (!isCealHostInputKind(value.input_kind)) throw storageError("Codex outbox input provenance is malformed.");
   if (!SAFE_REF3.test(String(value.prompt_ref))) throw storageError("Codex outbox references are malformed.");
   if (!SAFE_REF3.test(String(value.submission_ref))) throw storageError("Codex outbox references are malformed.");
   if (value.request_ref !== void 0 && !SAFE_REF3.test(String(value.request_ref))) throw storageError("Codex outbox Request reference is malformed.");
@@ -2431,18 +2342,24 @@ function decodeTokenUsage(value) {
 function decodeResponseItem(payload, ordinal, timestamp6) {
   if (payload.type !== "message" || payload.role !== "user") return { kind: "ignored", ordinal, timestamp: timestamp6 };
   const metadata = userMessageMetadata(payload.internal_chat_message_metadata_passthrough);
-  const kinds = metadata.content_item_kinds;
-  if (kinds.length !== 1 || kinds[0] !== "user.text") return { kind: "ignored", ordinal, timestamp: timestamp6 };
+  const inputKind = inputKindFromContentItems(metadata.content_item_kinds);
+  if (inputKind === void 0) return { kind: "ignored", ordinal, timestamp: timestamp6 };
   const prompt = userTextContent(payload.content);
   return {
     kind: "user_text",
     ordinal,
     timestamp: timestamp6,
     prompt,
+    input_kind: inputKind,
     message_id: safeRef2(payload.id, "Codex user message identity is invalid."),
     turn_id: safeRef2(metadata.turn_id, "Codex user message task identity is invalid.")
   };
 }
+function inputKindFromContentItems(kinds) {
+  if (kinds.length !== 1) return void 0;
+  if (kinds[0] === "user.text") return "human";
+  return kinds[0] === "goal.internal_context" ? "host_automatic" : void 0;
+}
 function userMessageMetadata(value) {
   if (!isRecord4(value) || !Array.isArray(value.content_item_kinds)) reject2("Codex user message provenance is malformed.");
   return { ...value, content_item_kinds: value.content_item_kinds };
@@ -2727,13 +2644,13 @@ function validTurn(value) {
   return exactOptional(value, ["local_session_ref", "local_turn_ref"], ["model", "observations"]) && safeRef3(value.local_session_ref) && safeRef3(value.local_turn_ref) && optionalText(value.model, 256) && validObservations(value.observations);
 }
 function validInput(value) {
-  return exactOptional(value, ["local_session_ref", "local_turn_ref", "local_input_ref", "origin_input", "observations"], ["decision", "local_turn_aliases", "context_expires_at"]) && safeRef3(value.local_session_ref) && safeRef3(value.local_turn_ref) && safeRef3(value.local_input_ref) && validInputObservations(value.observations) && typeof value.origin_input === "boolean" && validInputOptionals(value);
+  return exactOptional(value, ["local_session_ref", "local_turn_ref", "local_input_ref", "input_kind", "origin_input", "observations"], ["local_turn_aliases", "context_expires_at"]) && safeRef3(value.local_session_ref) && safeRef3(value.local_turn_ref) && safeRef3(value.local_input_ref) && validInputObservations(value.observations) && isCealHostInputKind(value.input_kind) && typeof value.origin_input === "boolean" && validInputOptionals(value);
 }
 function validInputObservations(value) {
   return validObservations(value) && Array.isArray(value) && value.filter((item) => record(item) && item.observation_kind === "prompt").length === 1;
 }
 function validInputOptionals(value) {
-  return validDecision(value.decision) && optionalRefs(value.local_turn_aliases) && (value.context_expires_at === void 0 || timestamp3(value.context_expires_at));
+  return optionalRefs(value.local_turn_aliases) && (value.context_expires_at === void 0 || timestamp3(value.context_expires_at));
 }
 function validTerminal(value) {
   return exactOptional(value, ["local_session_ref", "local_turn_ref", "terminal_state"], ["abort_reason", "duration_ms", "time_to_first_token_ms", "usage", "observations"]) && safeRef3(value.local_session_ref) && safeRef3(value.local_turn_ref) && validTerminalDisposition(value.terminal_state, value.abort_reason) && optionalNonNegative(value.duration_ms) && optionalNonNegative(value.time_to_first_token_ms) && (value.usage === void 0 || jsonValue(value.usage)) && validObservations(value.observations);
@@ -2744,9 +2661,6 @@ function validTerminalDisposition(state, reason) {
 function validStatus(value) {
   return exactOptional(value, ["status", "reason_code"], ["detail"]) && ["ready", "degraded", "stopping"].includes(String(value.status)) && safeRef3(value.reason_code) && optionalText(value.detail, 4096);
 }
-function validDecision(value) {
-  return value === void 0 || record(value) && exactKeys3(value, ["decision", "approval_ref"]) && (value.decision === "approved" || value.decision === "denied") && safeRef3(value.approval_ref);
-}
 function optionalText(value, maxLength) {
   return value === void 0 || typeof value === "string" && value.length > 0 && value.length <= maxLength;
 }
@@ -2923,9 +2837,11 @@ function incrementDelivery(counts, outcome) {
 async function deliverPreparedEntry(entry, prepared, options, store, now, timeoutMs, signal) {
   try {
     const acknowledgement = await submitWithDeadline(options.gateway, gatewaySubmission(prepared), timeoutMs, signal);
-    const binding = bindingFor(prepared, acknowledgement, now);
-    await store.writeBinding(binding);
-    await store.bindInvocationContext(binding, now());
+    if (prepared.request_ref === void 0) {
+      const binding = bindingFor(prepared, acknowledgement, now);
+      await store.writeBinding(binding);
+      await store.bindInvocationContext(binding, now());
+    }
     await store.remove(entry);
     return "delivered";
   } catch (error) {
@@ -2943,6 +2859,7 @@ function gatewaySubmission(envelope) {
   return {
     identity: envelope.identity,
     host_input_ref: envelope.host_input_ref,
+    input_kind: envelope.input_kind,
     prompt_ref: envelope.prompt_ref,
     observations: envelope.observations,
     ...envelope.request_ref === void 0 ? {} : { request_ref: envelope.request_ref },
@@ -3565,6 +3482,7 @@ var CodexProducer = class {
       local_session_ref: envelope.identity.host_session_ref,
       local_turn_ref: localTurnRef(envelope),
       local_input_ref: envelope.host_input_ref,
+      input_kind: envelope.input_kind,
       origin_input: envelope.origin_input,
       observations: [prompt],
       local_turn_aliases: envelope.codex_turn_id === void 0 ? void 0 : [envelope.codex_turn_id],
@@ -4155,6 +4073,7 @@ var CodexTranscriptWatcher = class {
       schema_version: "ceal.codex_observation_outbox.v1",
       identity,
       host_input_ref: hostInputRef,
+      input_kind: record3.input_kind,
       prompt_ref: promptRef,
       observations,
       codex_turn_id: record3.turn_id,
@@ -4181,6 +4100,7 @@ var CodexTranscriptWatcher = class {
       schema_version: "ceal.codex_observation_outbox.v1",
       identity,
       host_input_ref: activeTask.origin_host_input_ref,
+      input_kind: "host_automatic",
       prompt_ref: activeTask.prompt_ref,
       observations,
       codex_turn_id: record3.turn_id,
@@ -4371,84 +4291,6 @@ var CODEX_PRODUCER_DESCRIPTOR = {
   drain: drainCodexProducerOnce
 };
 
-// host/codex/src/codex-relay.ts
-import { O_NOFOLLOW as O_NOFOLLOW4, O_RDONLY as O_RDONLY5 } from "node:constants";
-import { lstat as lstat4, mkdir as mkdir4, open as open6, readFile as readFile2, rename as rename4, unlink as unlink3 } from "node:fs/promises";
-import { homedir as homedir2 } from "node:os";
-import { dirname as dirname2, isAbsolute as isAbsolute4, join as join5 } from "node:path";
-var CODEX_RELAY_CONFIG_SCHEMA_VERSION = "ceal.codex_relay_config.v1";
-function resolveCodexRelayConfigPath(codexHome) {
-  const root = codexHome ?? (process.env.CODEX_HOME || join5(homedir2(), ".codex"));
-  if (typeof root !== "string" || root.length === 0) throw new CodexHostAdapterError("configuration", "Codex home is unavailable.");
-  return join5(root, ".ceal", "codex-relay.json");
-}
-async function readCodexRelayConfig(path = resolveCodexRelayConfigPath()) {
-  validateConfigPath(path);
-  const value = JSON.parse(await readPrivateFile2(path));
-  return normalizeRelayConfig(value);
-}
-function normalizeRelayConfig(value) {
-  if (!isRecord9(value)) throw new CodexHostAdapterError("configuration", "Codex relay configuration is malformed.");
-  if (!sameKeys2(value, ["schema_version", "gateway_origin", "credential_file", "host_source_ref", "outbox_dir"])) throw new CodexHostAdapterError("configuration", `Codex relay configuration key set is malformed (${refusalFact("keys", Object.keys(value), "exactly the relay configuration key set")}).`);
-  if (value.schema_version !== CODEX_RELAY_CONFIG_SCHEMA_VERSION) throw new CodexHostAdapterError("configuration", `Codex relay configuration schema is malformed (${refusalFact("schema_version", value.schema_version, `expected ${CODEX_RELAY_CONFIG_SCHEMA_VERSION}`)}).`);
-  if (!httpsOrigin(value.gateway_origin) || !absolutePath(value.credential_file) || !safeRef4(value.host_source_ref) || !absolutePath(value.outbox_dir)) {
-    throw new CodexHostAdapterError("configuration", `Codex relay configuration fields are malformed (${refusalFacts([
-      { name: "gateway_origin_valid", value: httpsOrigin(value.gateway_origin), expected: "true" },
-      { name: "credential_file_absolute", value: absolutePath(value.credential_file), expected: "true" },
-      { name: "host_source_ref", value: value.host_source_ref, expected: "a safe Host reference" },
-      { name: "outbox_dir_absolute", value: absolutePath(value.outbox_dir), expected: "true" }
-    ])}).`);
-  }
-  return {
-    schema_version: CODEX_RELAY_CONFIG_SCHEMA_VERSION,
-    gateway_origin: value.gateway_origin,
-    credential_file: value.credential_file,
-    host_source_ref: value.host_source_ref,
-    outbox_dir: value.outbox_dir
-  };
-}
-async function readPrivateFile2(path) {
-  let handle;
-  try {
-    handle = await open6(path, O_RDONLY5 | O_NOFOLLOW4);
-    const stats = await handle.stat();
-    const uid = typeof process.geteuid === "function" ? process.geteuid() : stats.uid;
-    if (!stats.isFile()) throw new CodexHostAdapterError("storage", `Codex relay state path is not a regular file (${refusalFact("mode", `0o${stats.mode.toString(8)}`, "a regular-file mode (0o100xxx)")}).`);
-    if ((stats.mode & 63) !== 0) throw new CodexHostAdapterError("storage", `Codex relay state file is readable beyond its owner (${refusalFact("permission_bits", `0o${(stats.mode & 511).toString(8)}`, "no group or other bits")}).`);
-    if (stats.uid !== uid) throw new CodexHostAdapterError("storage", `Codex relay state file is owned by another user (${refusalFact("uid", stats.uid, `expected ${uid}`)}).`);
-    return await handle.readFile("utf8");
-  } catch (error) {
-    if (error instanceof CodexHostAdapterError) throw error;
-    throw error;
-  } finally {
-    await handle?.close();
-  }
-}
-function validateConfigPath(path) {
-  if (!isAbsolute4(path)) throw new CodexHostAdapterError("configuration", "Codex relay config path must be absolute.");
-}
-function httpsOrigin(value) {
-  try {
-    const url = new URL(String(value));
-    return typeof value === "string" && url.protocol === "https:" && url.username === "" && url.password === "" && url.search === "" && url.hash === "";
-  } catch {
-    return false;
-  }
-}
-function absolutePath(value) {
-  return typeof value === "string" && isAbsolute4(value) && value.length <= 4096;
-}
-function safeRef4(value) {
-  return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(value);
-}
-function isRecord9(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function sameKeys2(value, required, optional = []) {
-  const keys = Object.keys(value);
-  return required.every((key) => Object.hasOwn(value, key)) && keys.every((key) => required.includes(key) || optional.includes(key));
-}
-
 // host/codex/src/codex-hook-runner.ts
 var MAX_STDIN_BYTES = 64 * 1024;
 async function runCodexHookFromStdin(event, stdin, options) {
@@ -4460,15 +4302,6 @@ function codexHookEventFromArgs(args) {
   const event = marker?.slice("--ceal-hook-event=".length);
   return isCodexHookEvent(event) ? event : null;
 }
-function defaultCodexHookRunnerOptions(gateway) {
-  const codexHome = process.env.CODEX_HOME || join6(homedir3(), ".codex");
-  return {
-    host_source_ref: process.env.CEAL_CODEX_HOST_SOURCE_REF ?? "codex-host:local",
-    outbox_dir: process.env.CEAL_CODEX_OUTBOX_DIR ?? join6(codexHome, ".ceal", "codex-observation-outbox"),
-    codex_sessions_root: join6(codexHome, "sessions"),
-    gateway
-  };
-}
 async function runCodexHookProcess(args, stdin, options) {
   const event = codexHookEventFromArgs(args);
   if (event === null) return 0;
@@ -4506,29 +4339,13 @@ async function runCodexHookCli() {
     }
   };
   const args = process.argv.slice(2);
-  const owner = hasHostConfigArgument(args) ? await installedCodexHookRunnerOptions(args, unavailableGateway) : await standaloneCodexHookRunnerOptions(unavailableGateway);
+  const owner = await installedCodexHookRunnerOptions(args, unavailableGateway);
   return runCodexHookProcess(args, process.stdin, owner);
 }
 async function installedCodexHookRunnerOptions(args, gateway) {
   const config = await readHostProducerConfig(CODEX_PRODUCER_DESCRIPTOR, parseHostProducerConfigFlag(args));
   return { gateway, host_source_ref: config.host_source_ref, outbox_dir: config.outbox_dir, codex_sessions_root: config.codex_sessions_root };
 }
-async function standaloneCodexHookRunnerOptions(gateway) {
-  const defaults = defaultCodexHookRunnerOptions(gateway);
-  try {
-    const config = await readCodexRelayConfig();
-    return { ...defaults, host_source_ref: config.host_source_ref, outbox_dir: config.outbox_dir };
-  } catch (error) {
-    if (!isNotFound2(error)) throw error;
-    return defaults;
-  }
-}
-function hasHostConfigArgument(args) {
-  return args.some((argument) => argument === HOST_PRODUCER_CONFIG_FLAG || argument.startsWith(`${HOST_PRODUCER_CONFIG_FLAG}=`));
-}
-function isNotFound2(error) {
-  return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
-}
 
 // host/codex/bin/ceal-codex-hook.ts
 void runCodexHookCli().then((exitCode) => {