@josephyulei/summon-foundation 0.1.6 → 0.1.7

package/README.md

@@ -1,6 +1,8 @@
 # summon foundation
 
-0.1.6 单页试用入口与 Foundation 0.2.12 起的运行引擎共同支持同一页面内的目录选择、程序和 Skill 独立确认；旧发行版本不具备本次单页修订。真实安装、新任务发现和主动告知仍需独立验收。
+本轮修订包含真实下载状态、专用入口环境和项目范围；以 registry 中本版本实际存在为执行前提。基础环境不能安全启动页面时，由 Codex 对话先披露并取得独立批准，再准备专用环境；页面启动后全程同页。具体方法见仓库 `docs/install-with-codex.md`，不能先运行 npx 来准备缺失的 Node。不修改共享 PATH；获取器专用环境及其回执按缓存保留，程序另用随包运行时。发行发现仅需 curl，获取还需 tar；已验证载荷的确认、恢复和卸载不依赖下载工具。
+
+0.1.7 单页试用入口与 Foundation 0.2.12 起的运行引擎共同支持同一页面内的目录选择、程序和 Skill 独立确认；旧发行版本不具备本次单页修订。真实安装、新任务发现和主动告知仍需独立验收。
 
 首次 URL 持续显示本次流程；确认仅转交本次受控子进程的当前计划，不新开manager页。--acquire仍只读获取；--resume仅在用户明确要求后恢复未完成Skill，不重放程序安装。
 
@@ -12,7 +14,7 @@ Foundation 的薄获取入口，不包含完整运行包，没有 npm 安装生
 确认 registry 中存在本版本及对应不可变 Release 后，在具备安装权限的新 Codex 对话粘贴：
 
 ```text
-npx --yes --package @josephyulei/summon-foundation@0.1.6 summon foundation
+npx --yes --package @josephyulei/summon-foundation@0.1.7 summon foundation
 ```
 
 旧版退出推荐入口；支持边界见[现行支持策略](https://github.com/y15801172513-lang/foundation/blob/main/docs/install-platform-024.md#现行支持策略)。旧不可变版本不修改，不自动迁移或清除旧安装。

package/bin/prepare-environment.sh

@@ -0,0 +1,51 @@
+#!/bin/sh
+# C6: bootstrap the npm entry, not Foundation itself. No Node/npm is needed
+# to inspect this plan. Keep pins aligned with official-node-runtime.mjs.
+set -eu
+umask 077
+fail(){ printf '错误：%s\n' "$1" >&2; exit 1; }
+version=24.14.1
+archive_hash=25495ff85bd89e2d8a24d88566d7e2f827c6b0d3d872b2cebf75371f93fcb1fe
+node_hash=35d4bc736bbe4161f0c074aa140ddb74586e46969bc2ad63d32c838bec4463ff
+license_hash=4573185d56580da2b890ba34a85a409257640f1c5632eade4300137266194d18
+url=https://nodejs.org/dist/v24.14.1/node-v24.14.1-darwin-arm64.tar.gz
+prefix=node-v24.14.1-darwin-arm64
+mode=${1:-}; destination=${2:-}; approval=${3:-}
+[ "$#" -ge 2 ] && [ "$#" -le 3 ] || fail '用法：sh prepare-environment.sh --inspect /绝对独立目录；本人批准后以 --prepare 同一路径 精确计划摘要执行'
+case "$mode" in --inspect|--prepare) ;; *) fail '仅支持查看计划或按批准准备环境' ;; esac
+case "$destination" in /*) ;; *) fail '环境位置必须是绝对路径' ;; esac
+case "$destination" in *'
+'*|*'/../'*|*'/./'*|*/|'/') fail '环境位置必须是规范化独立目录' ;; esac
+[ "$(/usr/bin/uname -s)" = Darwin ] && [ "$(/usr/bin/uname -m)" = arm64 ] || fail '此设备暂不支持；不会通过准备环境绕过平台限制'
+for tool in /usr/bin/curl /usr/bin/tar /usr/bin/shasum /usr/bin/stat /bin/mkdir /bin/chmod; do [ -x "$tool" ] || fail "缺少可信系统工具：$tool"; done
+parent=${destination%/*}; [ -n "$parent" ] || fail '不能写系统根目录'
+[ -d "$parent" ] && [ -w "$parent" ] && [ -x "$parent" ] || fail '父目录不存在或无权限；不会代建系统目录'
+[ "$(CDPATH= cd -- "$parent" && pwd -P)" = "$parent" ] || fail '父目录含链接或非规范路径'
+cursor=$parent
+while [ "$cursor" != / ]; do [ ! -L "$cursor" ] || fail '拒绝符号链接祖先'; cursor=${cursor%/*}; [ -n "$cursor" ] || cursor=/; done
+[ ! -e "$destination" ] && [ ! -L "$destination" ] || fail '目标已经存在；保留已有或失败材料，请核验后选择新的独立目录'
+parent_identity=$(/usr/bin/stat -f '%d:%i:%u:%Lp' "$parent")
+plan=$(printf 'foundation-entry-environment-v1\n%s\n%s\n%s\n%s\n%s\nno-shared-settings\n' "$version" "$destination" "$parent_identity" "$url" "$archive_hash" | /usr/bin/shasum -a 256)
+plan=${plan%% *}
+printf '基础环境计划：Node.js %s（含 npm），仅用于启动获取器\n来源：%s\n位置：%s\n影响：不修改现有 Node、Shell、PATH 或系统设置；不安装 Foundation、不注册 Skill\n保留：失败材料和环境回执；不自动清理\n计划摘要：%s\n' "$version" "$url" "$destination" "$plan"
+[ "$mode" = --prepare ] || exit 0
+[ -n "$approval" ] && [ "$approval" = "$plan" ] || fail '缺少匹配的本人批准计划摘要；没有准备环境'
+# The invoking Codex task must obtain human approval for the displayed plan.
+# This argument binds that request; it is not evidence of a UI confirmation.
+[ "$(CDPATH= cd -- "$parent" && pwd -P)" = "$parent" ] && [ "$(/usr/bin/stat -f '%d:%i:%u:%Lp' "$parent")" = "$parent_identity" ] || fail '父目录在批准后变化；没有准备环境'
+/bin/mkdir -m 700 -- "$destination" || fail '创建独占环境目录失败'
+printf 'state=preparing\nplan=%s\nsource=%s\narchive_sha256=%s\nshared_settings_changed=false\n' "$plan" "$url" "$archive_hash" > "$destination/environment-result.txt"
+trap 'printf "state=failed-or-interrupted\n" >> "$destination/environment-result.txt"' EXIT
+/usr/bin/curl -q --fail --silent --show-error --location --max-redirs 3 --proto '=https' --proto-redir '=https' --connect-timeout 15 --max-time 600 --max-filesize 134217728 -o "$destination/node.tar.gz" "$url" || fail '官方环境下载失败；保留材料，不执行'
+observed=$(/usr/bin/shasum -a 256 "$destination/node.tar.gz"); [ "${observed%% *}" = "$archive_hash" ] || fail '官方环境归档摘要不匹配'
+/usr/bin/tar -xzpf "$destination/node.tar.gz" --no-same-owner --no-acls --no-fflags --no-mac-metadata --no-xattrs -C "$destination" || fail '已验证归档解包失败'
+node="$destination/$prefix/bin/node"
+[ -f "$node" ] && [ ! -L "$node" ] && [ -x "$node" ] || fail '缺少绑定运行时'
+observed=$(/usr/bin/shasum -a 256 "$node"); [ "${observed%% *}" = "$node_hash" ] || fail '运行时字节不符'
+observed=$(/usr/bin/shasum -a 256 "$destination/$prefix/LICENSE"); [ "${observed%% *}" = "$license_hash" ] || fail '许可字节不符'
+unset NODE_OPTIONS NODE_PATH NODE_V8_COVERAGE NODE_REDIRECT_WARNINGS NODE_COMPILE_CACHE NODE_COMPILE_CACHE_PORTABLE NODE_PRESERVE_SYMLINKS
+[ "$("$node" --version)" = "v$version" ] || fail '环境准备后版本复检失败'
+[ -f "$destination/$prefix/lib/node_modules/npm/bin/npm-cli.js" ] || fail '官方环境缺少 npm 入口'
+printf 'state=prepared-and-rechecked\nnode_version=%s\nnode_sha256=%s\nnode=%s\nnpm_cli=%s\n' "$version" "$node_hash" "$node" "$destination/$prefix/lib/node_modules/npm/bin/npm-cli.js" >> "$destination/environment-result.txt"
+trap - EXIT
+printf '基础环境已准备并复检。由当前任务以此 Node 和 npm 入口启动已固定版本的 Foundation 单页；不要更改全局 PATH。\n回执：%s/environment-result.txt\n' "$destination"

package/bin/summon.mjs

@@ -13,6 +13,7 @@ import {resumeSkillHandoff} from '../lib/resume-handoff.mjs';
 import {parseSummonArgs} from '../lib/cli-options.mjs';
 import {createOperation,saveOperation,readOperation,runtimeObservation} from '../lib/operation-result.mjs';
 import {createJourneyControl} from '../lib/journey-control.mjs';
+import {inspectEntryEnvironment} from '../lib/environment-check.mjs';
 
 const help=`summon foundation [--version x.y.z] [--destination /absolute/folder]
 summon foundation --inspect [--version x.y.z]
@@ -50,21 +51,25 @@ function stageDirectory(){
   return fs.mkdtempSync(path.join(cache,'acquisition.'));
 }
 let operation=null,stage=null,progressPage=null;
-const journeyControl=createJourneyControl(()=>operation,()=>progressPage?.publish());
+const journeyControl=createJourneyControl(()=>operation,patch=>patch?updateOperation(patch):progressPage?.publish());
 function updateOperation(patch){if(!operation)return;Object.assign(operation,patch,{updatedAt:new Date().toISOString()});const file=saveOperation(operation,stage);if(file)operation.resultFile=file;progressPage?.publish();console.log(JSON.stringify({status:'FOUNDATION_INSTALL_OPERATION',...operation,resultFile:file,recordSaved:!!file}));}
 try{
   const args=parseSummonArgs(process.argv.slice(2));
   if(args.help){console.log(help);process.exit(0);}
   if(args.status){console.log(JSON.stringify(readOperation(args.status),null,2));process.exit(0);}
-  const [major,minor]=process.versions.node.split('.').map(Number);
-  if(major<22||(major===22&&minor<9))fail('获取入口需要 Node.js 22.9 或以上；尚未安装，不自动安装依赖');
-  if(process.platform!=='darwin'||process.arch!=='arm64')fail('当前仅支持 macOS arm64；尚未安装');
+  const initialEnvironment=inspectEntryEnvironment({purpose:args.uninstall?'uninstall':args.resume?'resume':args.inspect?'discover':'acquire'});
+  if(!initialEnvironment.supported||!initialEnvironment.compatible){
+    operation=createOperation();updateOperation({phase:'checking-environment',environment:initialEnvironment});
+    fail(!initialEnvironment.supported?'当前仅支持 macOS arm64；尚未安装':'获取入口需要 Node.js 22.9 或以上；当前入口不能安全承诺同页准备，请按安装说明在对话中先确认独立基础环境，不自动安装依赖');
+  }
   const maintenance=args.update||args.uninstall;
   if(args.prepare||args.acquire||maintenance||args.resume)sourceGuard();
-  if(args.prepare||args.acquire||maintenance){operation=createOperation();stage=stageDirectory();updateOperation({});if(!saveOperation(operation,stage))fail('无法在已披露的获取目录保存操作记录；尚未联网或安装');}
+  if(args.prepare||args.acquire||maintenance){operation=createOperation();Object.assign(operation,{phase:'checking-environment',environment:initialEnvironment});stage=stageDirectory();updateOperation({});if(!saveOperation(operation,stage))fail('无法在已披露的获取目录保存操作记录；尚未联网或安装');}
   if(args.prepare)console.log('正在准备 Foundation 安装：将查询并固定本次正式版本，说明缓存位置后下载核验。未选目录会在安装页选择；之后仍需本人确认精确计划。请保持当前 Codex 任务等待并打开返回的内置浏览器网址；不会自动改用系统浏览器。');
   if(args.resume){
     operation=readOperation(args.resume);stage=path.dirname(plainPath(args.resume));
+    updateOperation({environment:initialEnvironment});
+    if(initialEnvironment.state!=='ready')fail('恢复所需环境无法核实；保留已有安装和操作记录');
     progressPage=await startProgressPage(()=>operation,{control:journeyControl});
     console.log(JSON.stringify({status:'FOUNDATION_SINGLE_PAGE',url:progressPage.url,operationId:operation.operationId}));
     const env={...process.env};for(const key of ['NODE_OPTIONS','NODE_PATH','NODE_V8_COVERAGE','NODE_REDIRECT_WARNINGS','NODE_COMPILE_CACHE','NODE_COMPILE_CACHE_PORTABLE','NODE_PRESERVE_SYMLINKS'])delete env[key];
@@ -77,12 +82,14 @@ try{
     if(!current?.identity?.installId)fail('当前安装身份无法核实；尚未获取或执行维护');
     const capability=spawnSync(installed.launcher,['--help'],{encoding:'utf8',env,timeout:15000});
     if(capability.status!==0||!capability.stdout.includes('--journey-channel'))fail('当前安装不受新版单页流程支持。请另行确认卸载旧版并重新安装新版；本次不删除、不迁移、不回退旧页面');
-    updateOperation({kind:args.update?'update':'uninstall',installationRoot:args.root,currentVersion:current.version,installId:current.identity.installId});
+    const environment=inspectEntryEnvironment({purpose:args.update?'acquire':'uninstall'});
+    updateOperation({kind:args.update?'update':'uninstall',installationRoot:args.root,currentVersion:current.version,installId:current.identity.installId,environment,usageScope:current.usageScope||{kind:'user',project:null}});
     progressPage=await startProgressPage(()=>operation,{control:journeyControl});updateOperation({progressUrl:progressPage.url});
     console.log(JSON.stringify({status:'FOUNDATION_SINGLE_PAGE',url:progressPage.url,operationId:operation.operationId}));
+    if(environment.state!=='ready')fail('环境复检未通过：'+environment.state+'；缺少 '+environment.missing.join('、')+'；保留当前安装，不修改系统工具');
     let candidate;
     if(args.update){
-      const {context,receipt}=await acquireInWorker({version:args.version,stage,operationId:operation.operationId,onContext:context=>updateOperation({version:context.version,sourceCommit:context.sourceCommit}),onProgress:download=>updateOperation({download}),onPhase:phase=>updateOperation({phase})});
+      const {context,receipt}=await acquireInWorker({version:args.version,stage,operationId:operation.operationId,onContext:context=>updateOperation({version:context.version,sourceCommit:context.sourceCommit}),onProgress:download=>updateOperation({download}),onPhase:phase=>updateOperation({phase,...(phase==='fetching-and-verifying-runtime'?{download:null}:{})})});
       const directory=plainPath(path.dirname(receipt.launcher)),manifest=JSON.parse(fs.readFileSync(plainPath(path.join(directory,'manifest.json'))));
       if(manifest.productVersion!==context.version)fail('获取版本与候选不一致');
       candidate={path:directory,manifestHash:manifest.candidateHash,version:manifest.productVersion,bytes:manifest.totalBytes,runtimeHash:manifest.files.find(f=>f.path===manifest.runtime.path)?.sha256};
@@ -92,6 +99,7 @@ try{
     process.exitCode=operation.state==='completed'?0:1;
     await progressPage.close();progressPage=null;
   }else if(!args.prepare&&!args.acquire){
+    if(initialEnvironment.state!=='ready'){operation=createOperation();updateOperation({phase:'checking-environment',environment:initialEnvironment});fail('发行查询所需环境无法核实；尚未联网');}
     const context=inspectRelease(args.version);
     const guide=`https://github.com/${context.repository.full_name}/blob/${context.documentationCommit}/docs/install-with-codex.md`;
     console.log(JSON.stringify({schemaVersion:'1.0.0',status:'RELEASE_DISCOVERED_NOT_ACQUIRED',product:'Foundation',version:context.version,sourceCommit:context.sourceCommit,documentationCommit:context.documentationCommit,repository:context.repository.full_name,guide,installationPerformed:false,skillRegistered:false,
@@ -103,13 +111,15 @@ try{
     progressPage=await startProgressPage(()=>operation,args.acquire?{}:{control:journeyControl});
     updateOperation({progressUrl:progressPage.url});
     console.log(JSON.stringify({status:'FOUNDATION_ACQUISITION_PROGRESS_PAGE',url:progressPage.url,operationId:operation.operationId,next:'在 Codex 内置浏览器打开本次页面，所有所需确认在原页展开；保持任务等待，不自动打开系统浏览器。'}));
+    const environment=inspectEntryEnvironment({purpose:'acquire'});updateOperation({phase:'checking-environment',environment});
+    if(environment.state!=='ready')fail('获取环境检查未通过：'+environment.state+'；缺少 '+environment.missing.join('、')+'；不会以安装 Node 替代缺失的系统工具');
     if(!args.acquire){
       const metadata=inspectRelease(args.version);args.version=metadata.version;
-      updateOperation({phase:'choosing-intent',version:metadata.version,sourceCommit:metadata.sourceCommit,acquisitionRoot:stage,destinationIntent:args.destination||'',journeyContext:{id:operation.operationId,skillChoice:'undecided'}});
+      updateOperation({phase:'choosing-intent',environment,version:metadata.version,sourceCommit:metadata.sourceCommit,acquisitionRoot:stage,destinationIntent:args.destination||'',journeyContext:{id:operation.operationId,skillChoice:'undecided'}});
       const choice=await journeyControl.waitChoice();
-      updateOperation({phase:'discovering',intentSelected:true,destinationIntent:choice.destination,journeyContext:{id:operation.operationId,skillChoice:choice.skillChoice}});
+      updateOperation({phase:'discovering',intentSelected:true,destinationIntent:choice.destination,scopeIntent:{kind:choice.scopeKind,projectRoot:choice.projectRoot},destinationCheck:choice.destinationCheck,journeyContext:{id:operation.operationId,skillChoice:choice.skillChoice}});
     }
-    const {context,receipt}=await acquireInWorker({version:args.version,stage,operationId:operation.operationId,onContext:context=>updateOperation({version:context.version,sourceCommit:context.sourceCommit}),onProgress:download=>updateOperation({download}),onPhase:phase=>updateOperation({phase})});console.log(JSON.stringify({status:'GITHUB_ACQUISITION_VERIFIED',...receipt,destinationIntent:args.destination}));
+    const {context,receipt}=await acquireInWorker({version:args.version,stage,operationId:operation.operationId,onContext:context=>updateOperation({version:context.version,sourceCommit:context.sourceCommit}),onProgress:download=>updateOperation({download}),onPhase:phase=>updateOperation({phase,...(phase==='fetching-and-verifying-runtime'?{download:null}:{})})});console.log(JSON.stringify({status:'GITHUB_ACQUISITION_VERIFIED',...receipt,destinationIntent:args.destination}));
     updateOperation({phase:'acquired',version:context.version,sourceCommit:context.sourceCommit});
     if(args.acquire){updateOperation({state:'update-input-ready',terminal:true});console.log(JSON.stringify({status:'UPDATE_INPUT_READY_NOT_APPLIED',candidate:path.dirname(receipt.launcher),receipt:path.join(stage,'acquisition.json'),next:'使用当前健康安装的稳定入口生成独立更新计划；本人确认后才更新。获取回执不是删除授权。'}));await progressPage.close();progressPage=null;process.exit(0);}
     const env={...process.env};for(const key of ['NODE_OPTIONS','NODE_PATH','NODE_V8_COVERAGE','NODE_REDIRECT_WARNINGS','NODE_COMPILE_CACHE','NODE_COMPILE_CACHE_PORTABLE','NODE_PRESERVE_SYMLINKS'])delete env[key];

package/lib/acquire.mjs

@@ -91,9 +91,10 @@ async function trustRoot(stage) {
   await updater.refresh();const info=await updater.getTargetInfo('trusted_root.json');if(!info)fail('GitHub 信任目标缺失');
   return json(fs.readFileSync(await updater.downloadTarget(info)));
 }
-async function verifiedAsset(context,asset,stage,trust,onProgress) {
+async function verifiedAsset(context,asset,stage,trust,onProgress=()=>{},onDownloaded=()=>{}) {
   if(!asset||!Number.isSafeInteger(asset.size)||asset.size<=0||asset.size>250_000_000||!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(asset.name)||!/^sha256:[a-f0-9]{64}$/.test(asset.digest)||asset.browser_download_url!==`https://github.com/${policy.repository}/releases/download/${context.release.tag_name}/${asset.name}`)fail('资产元数据无效');
-  const bytes=asset.size>10_000_000?await downloadLarge(asset.browser_download_url,asset.size,onProgress):download(asset.browser_download_url,asset.size+1);
+  const bytes=asset.size>10_000_000?await downloadLarge(asset.browser_download_url,asset.size,p=>onProgress({...p,asset:asset.name})):download(asset.browser_download_url,asset.size+1);
+  onDownloaded();
   if(bytes.length!==asset.size||`sha256:${hash(bytes)}`!==asset.digest)fail('下载长度或摘要不匹配');
   const proofs=api(`attestations/${asset.digest}?predicate_type=release&per_page=100`).attestations;
   if(!Array.isArray(proofs)||proofs.length>=100)fail('证明列表不完整或分页待核实');
@@ -152,7 +153,7 @@ export async function acquireRelease(context,stage,{onPhase=()=>{},onProgress=()
     if(release.repositoryId!==policy.repositoryId||release.sourceCommit!==context.sourceCommit||!/^[a-f0-9]{64}$/.test(release.candidateHash)||release.url!==`https://github.com/${policy.repository}/releases/download/${context.release.tag_name}/${assetName}`||!/^\d+\.\d+\.\d+$/.test(release.runtime?.version)||release.runtime.url!==`https://nodejs.org/dist/v${release.runtime.version}/node-v${release.runtime.version}-darwin-arm64.tar.gz`)fail('清单不能更换仓库、提交或官方运行时来源');
     const assets=context.release.assets.filter(x=>x.name===assetName&&x.size===release.bytes&&x.digest===`sha256:${release.sha256}`);if(assets.length!==1)fail('归档身份不匹配');
     onPhase('fetching-and-verifying-runtime');
-    const archive=await verifiedAsset(context,assets[0],stage,trust,onProgress);
+    const archive=await verifiedAsset(context,assets[0],stage,trust,onProgress,()=>onPhase('verifying-runtime'));
     onPhase('extracting-and-validating');
     const listing=spawnSync('/usr/bin/tar',['-tzf',archive.file],{encoding:'utf8',maxBuffer:10_000_000});
     const types=spawnSync('/usr/bin/tar',['-tvzf',archive.file],{encoding:'utf8',maxBuffer:10_000_000});

package/lib/acquisition-task.mjs

@@ -7,7 +7,7 @@ export function acquireInWorker({version,stage,operationId,onContext=()=>{},onPh
     const interrupt=()=>{failure=Object.assign(Error('获取任务被中断；保留本次材料'),{code:'ACQUISITION_INTERRUPTED'});void worker.terminate();};
     process.once('SIGINT',interrupt);process.once('SIGTERM',interrupt);
     worker.on('message',event=>{
-      if(event.type==='context'){context=event.context;onContext(context);}
+      if(event.type==='context'){context=event.context;onContext(context);worker.postMessage({type:'context-recorded'});}
       else if(event.type==='phase')onPhase(event.phase);
       else if(event.type==='progress')onProgress(event.download);
       else if(event.type==='complete')receipt=event.receipt;

package/lib/acquisition-worker.mjs

@@ -5,7 +5,14 @@ import {inspectRelease, acquireRelease} from './acquire.mjs';
 
 try {
   const context = inspectRelease(workerData.version);
+  // The parent persists context atomically in the stage. Finish that write
+  // before checking that the stage contains only this operation's record.
+  const recorded = new Promise(resolve=>parentPort.once('message',message=>{
+    if(message.type!=='context-recorded')throw Error('获取上下文确认无效');
+    resolve();
+  }));
   parentPort.postMessage({type:'context',context});
+  await recorded;
   const receipt = await acquireRelease(context, workerData.stage, {
     operationId:workerData.operationId,
     onPhase:phase=>parentPort.postMessage({type:'phase',phase}),

package/lib/environment-check.mjs

@@ -0,0 +1,56 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {spawnSync} from 'node:child_process';
+import crypto from 'node:crypto';
+import {plainPath} from './acquire.mjs';
+
+export function classifyEntryEnvironment({platform,arch,nodeVersion,tools}){
+  const [major,minor]=String(nodeVersion||'').split('.').map(Number);
+  const supported=platform==='darwin'&&arch==='arm64';
+  const compatible=Number.isInteger(major)&&Number.isInteger(minor)&&(major>22||major===22&&minor>=9);
+  const missing=tools.filter(x=>!x.available).map(x=>x.path);
+  return{platform,arch,nodeVersion,supported,compatible,tools,state:!supported?'unsupported':!compatible?'environment-required':missing.length?'blocked':'ready',missing,sharedSettingsChanged:false};
+}
+export function inspectEntryEnvironment({purpose='acquire'}={}){
+  // Hash/proof verification uses Node crypto. System shasum belongs only to the
+  // no-Node preparation script, not an npm action or installed confirmation.
+  const requirements={discover:['/usr/bin/curl'],acquire:['/usr/bin/curl','/usr/bin/tar'],confirm:[],uninstall:[],resume:[]};
+  if(!Object.hasOwn(requirements,purpose))throw Error('未知环境检查动作');
+  const tools=requirements[purpose].map(file=>{let available=false;try{fs.accessSync(file,fs.constants.X_OK);available=fs.statSync(file).isFile();}catch{}return{path:file,available};});
+  const result={...classifyEntryEnvironment({platform:process.platform,arch:process.arch,nodeVersion:process.versions.node,tools}),purpose,entryRuntime:process.execPath,checkedAt:new Date().toISOString(),programRuntime:'随程序携带，不替换现有 Node'};
+  const receipt=path.resolve(path.dirname(process.execPath),'../..','environment-result.txt');
+  try{if(fs.existsSync(receipt)){
+    plainPath(receipt);const stat=fs.lstatSync(receipt);if(!stat.isFile()||stat.size>65536)throw Error('基础环境回执异常，保留并核实');
+    const fields=Object.fromEntries(fs.readFileSync(receipt,'utf8').trim().split('\n').map(line=>{const i=line.indexOf('=');return[line.slice(0,i),line.slice(i+1)];}));
+    const hash=crypto.createHash('sha256').update(fs.readFileSync(process.execPath)).digest('hex');
+    if(fields.state!=='prepared-and-rechecked'||fields.node!==process.execPath||fields.node_sha256!==hash||fields.node_version!==process.versions.node)throw Error('基础环境回执与当前运行文件不一致，不继续');
+    result.preparation={receipt,plan:fields.plan,state:fields.state,humanApproval:'由启动任务核验，本记录不是人类批准证明',retention:'获取器专用环境保留为缓存，不自动清理；不属于程序安装根'};
+  }}catch{result.state='blocked';result.preparation={receipt,state:'verification-required',reason:'基础环境回执与当前运行文件无法核实；保留材料，不继续'};}
+  return result;
+}
+export function inspectEntryDestination(input){
+  let destination=String(input||'').trim();
+  if((destination.startsWith('"')&&destination.endsWith('"'))||(destination.startsWith("'")&&destination.endsWith("'")))destination=destination.slice(1,-1);
+  plainPath(destination);
+  if(fs.existsSync(destination)&&(!fs.lstatSync(destination).isDirectory()||fs.readdirSync(destination).length))throw Error('安装目录已有内容或不是目录；请选择独立空目录，不覆盖已有文件');
+  const parent=path.dirname(destination);plainPath(parent);if(!fs.existsSync(parent)||!fs.lstatSync(parent).isDirectory())throw Error('安装目录的父目录必须存在');
+  fs.accessSync(parent,fs.constants.W_OK|fs.constants.X_OK);
+  const disk=fs.statfsSync(parent),availableBytes=Number(disk.bavail)*Number(disk.bsize);
+  if(!Number.isFinite(availableBytes)||availableBytes<=0)throw Error('无法确认可用空间；尚未下载或安装');
+  return{destination,parent,availableBytes,checkedAt:new Date().toISOString(),authority:'intent-only; runtime rechecks exact bytes and plan'};
+}
+
+// Intent preflight only. The installed engine repeats identity checks and seals
+// the actual scope in the independently confirmed lifecycle plan.
+export function inspectScopeIntent(kind, input, destination){
+  if(kind==='user')return {kind,projectRoot:null};
+  if(kind!=='project'||typeof input!=='string')throw Error('请选择有效的使用范围');
+  let projectRoot=input.trim();
+  if((projectRoot.startsWith('"')&&projectRoot.endsWith('"'))||(projectRoot.startsWith("'")&&projectRoot.endsWith("'")))projectRoot=projectRoot.slice(1,-1);
+  plainPath(projectRoot);
+  if(!fs.lstatSync(projectRoot).isDirectory())throw Error('项目根不是已有目录');
+  const git=spawnSync('/usr/bin/git',['-C',projectRoot,'rev-parse','--show-toplevel'],{encoding:'utf8',env:{PATH:'/usr/bin:/bin',GIT_OPTIONAL_LOCKS:'0'},timeout:10000});
+  if(git.status!==0||git.stdout.trim()!==projectRoot)throw Error('仅当前项目模式需要明确的 Git 仓库根；不会自动创建仓库');
+  if(destination===projectRoot||destination.startsWith(projectRoot+path.sep)||projectRoot.startsWith(destination+path.sep))throw Error('程序目录不能与业务项目互相包含；请选择独立目录');
+  return {kind,projectRoot};
+}

package/lib/journey-control.mjs

@@ -1,4 +1,9 @@
 import crypto from 'node:crypto';
+import {inspectEntryDestination,inspectScopeIntent,inspectEntryEnvironment} from './environment-check.mjs';
+
+// Legacy engines already mean user scope. Do not send new keys to their strict
+// selection parser; project scope must remain explicit and may never downgrade.
+const scopeFields=value=>value.scopeKind==='project'?{scopeKind:'project',projectRoot:value.projectRoot}:{};
 
 // Only the exact child created by this invocation may supply an active view.
 // Browser input cannot name a URL, route, transport token or future plan.
@@ -31,7 +36,7 @@ export function createJourneyControl(readRecord, changed) {
       if(!selection&&result.body.session.sessionId!==event.sessionId)throw Error('确认会话不匹配');
       active={owner,type:selection?'selection':'manager',view:result.body};changed();
       if(selection&&choice){
-        const selected=await request(owner,'__foundation/install/selection',{nonce:result.body.nonce,action:'select',destination:choice.destination,skillChoice:choice.skillChoice});
+        const selected=await request(owner,'__foundation/install/selection',{nonce:result.body.nonce,action:'select',destination:choice.destination,skillChoice:choice.skillChoice,...scopeFields(choice)});
         if(selected.status!==200){active.error=selected.body.message;choice=null;changed();}
       }
     },
@@ -50,17 +55,27 @@ export function createJourneyControl(readRecord, changed) {
       }
       if(body.action==='choose'&&resolveChoice){
         if(typeof body.destination!=='string'||!body.destination.trim()||!['selected','skipped'].includes(body.skillChoice))throw Error('请选择完整目录和 Skill 意向');
-        choice={destination:body.destination,skillChoice:body.skillChoice};const resolve=resolveChoice;clearTimeout(choiceTimer);resolveChoice=null;rejectChoice=null;resolve(choice);changed();return {status:200,body:{state:'intent-selected'}};
+        const destinationCheck=inspectEntryDestination(body.destination);
+        const scopeKind=body.scopeKind||'user';if(!['user','project'].includes(scopeKind)||scopeKind==='project'&&(!body.projectRoot||typeof body.projectRoot!=='string'))throw Error('请选择使用范围和完整项目根路径');
+        const scope=inspectScopeIntent(scopeKind,body.projectRoot,destinationCheck.destination);
+        choice={destination:destinationCheck.destination,skillChoice:body.skillChoice,scopeKind,projectRoot:scope.projectRoot,destinationCheck};const resolve=resolveChoice;clearTimeout(choiceTimer);resolveChoice=null;rejectChoice=null;resolve(choice);changed();return {status:200,body:{state:'intent-selected'}};
       }
       if(!active)throw Error('当前没有可确认的计划；请等待或查询结果');
       const a=active;
       if(a.type==='selection'){
         if(!['select','cancel'].includes(body.action))throw Error('目录操作无效');
-        const result=await request(a.owner,'__foundation/install/selection',{nonce:a.view.nonce,action:body.action,destination:body.destination,skillChoice:body.skillChoice});
+        const result=await request(a.owner,'__foundation/install/selection',body.action==='cancel'?{nonce:a.view.nonce,action:'cancel'}:{nonce:a.view.nonce,action:body.action,destination:body.destination,skillChoice:body.skillChoice,...scopeFields(body)});
         if(result.status!==200)a.error=result.body.message;changed();return result;
       }
       const s=a.view.session;
       if(body.sessionId!==s.sessionId||body.planHash!==s.planHash||body.managerNonce!==a.view.managerNonce||!['cancel-no-change',a.view.action].includes(body.action))throw Error('当前计划已变化或请求无效');
+      if(body.action!=='cancel-no-change'){
+        const environment=inspectEntryEnvironment({purpose:'confirm'});
+        // Keep the failed snapshot with this operation even if no mutation is
+        // forwarded; acquisition-only tools must not gate a verified plan.
+        Object.assign(readRecord(),{environment});changed({environment});
+        if(environment.state!=='ready')throw Error('执行前环境复检未通过；没有提交确认，请核实当前工具环境');
+      }
       const result=await request(a.owner,'__foundation/manager/confirm',{operationId:body.operationId,sessionId:s.sessionId,planHash:s.planHash,managerNonce:body.managerNonce,action:body.action});
       if(active===a&&result.body.state)a.view.session={...s,...result.body};changed();return result;
     }

package/lib/progress-page.mjs

@@ -3,15 +3,30 @@ import crypto from 'node:crypto';
 import {journeyView} from './journey-view.mjs';
 import {singlePageDocument} from './single-page-view.mjs';
 
-export function downloadText(download) {
+export function downloadText(download, compact = false) {
   if(!download||!Number.isFinite(download.downloadedBytes)||download.downloadedBytes<0)return '';
   const amount=n=>(n/1048576).toFixed(2)+' MiB';
   const known=Number.isFinite(download.totalBytes)&&download.totalBytes>0;
-  return '已接收 '+amount(download.downloadedBytes)+(known?' / '+amount(download.totalBytes)+(download.downloadedBytes<=download.totalBytes?' · '+Math.floor(download.downloadedBytes/download.totalBytes*100)+'%':'（长度待核实）'):'（总量未知）');
+  const valid=known&&download.downloadedBytes<=download.totalBytes;
+  const percent=valid&&download.downloadedBytes>0?Math.floor(download.downloadedBytes/download.totalBytes*100):null;
+  if(compact)return (percent===null?'已下载 ':'下载 '+percent+'% · ')+amount(download.downloadedBytes)+(known?' / '+amount(download.totalBytes)+(valid?'':'（长度待核实）'):'');
+  return '已接收 '+amount(download.downloadedBytes)+(known?' / '+amount(download.totalBytes)+(valid?(percent===null?'':' · '+percent+'%'):'（长度待核实）'):'（总量未知）');
+}
+
+export function downloadStatus(record) {
+  if(record.kind==='uninstall')return '';
+  if(record.terminal)return record.state==='failed'?'下载检查失败':'本次获取已结束';
+  if(record.phase==='fetching-and-verifying-runtime'){
+    const d=record.download,prefix=Number.isSafeInteger(d?.attempt)&&d.attempt>1?'重试 '+d.attempt+' · ':'';
+    if(d?.downloadedBytes===0)return prefix+'等待下载';
+    if(Number.isFinite(d?.totalBytes)&&d.totalBytes>0&&d.downloadedBytes===d.totalBytes)return '正在检查文件';
+    return prefix+(downloadText(d,true)||'等待下载');
+  }
+  return ({discovering:'正在查询版本','verifying-trust':'正在检查来源','fetching-and-verifying-catalog':'正在检查清单','verifying-runtime':'正在检查文件','extracting-and-validating':'正在展开检查','acquired':'检查完成'})[record.phase]||'';
 }
 
 export function acquisitionProgress(record) {
-  const phases={discovering:'查询正式发行','verifying-trust':'核验发行来源','fetching-and-verifying-catalog':'获取并核验发行清单','fetching-and-verifying-runtime':'下载并核验运行文件','extracting-and-validating':'展开并检查文件','acquired':'获取验证完成','starting-confirmation-service':'准备目录选择与确认页','selecting-directory':'等待你选择目录','awaiting-confirmation':'等待你确认安装',executing:'正在安装','runtime-ended':'读取安装结果',finished:'安装结果已返回'};
+  const phases={discovering:'查询正式发行','verifying-trust':'核验发行来源','fetching-and-verifying-catalog':'获取并核验发行清单','fetching-and-verifying-runtime':'正在下载运行文件','verifying-runtime':'正在检查文件摘要与发行证明','extracting-and-validating':'展开并检查文件','acquired':'获取验证完成','starting-confirmation-service':'准备目录选择与确认页','selecting-directory':'等待你选择目录','awaiting-confirmation':'等待你确认安装',executing:'正在安装','runtime-ended':'读取安装结果',finished:'安装结果已返回'};
   const terminal=record.terminal;
   const acquired=['acquired','starting-confirmation-service','selecting-directory','directory-selection-ended','awaiting-confirmation','executing','runtime-ended','finished'].includes(record.phase);
   const observations={acquire:{state:acquired?'completed':terminal?'failed':'running',evidence:record.resultFile}};
@@ -35,7 +50,7 @@ export function acquisitionProgress(record) {
   const verb=kind==='uninstall'?'卸载':kind==='update'?'更新':'安装';
   Object.assign(phases,{'awaiting-confirmation':'等待你确认'+verb,executing:'正在'+verb,'runtime-ended':'读取'+verb+'结果',finished:verb+'结果已返回'});
   if(record.terminal&&record.state==='partial'&&record.programState==='completed'&&kind==='update')journey.title='程序已更新，Skill 尚未更新';
-  return {journey,operationId:record.operationId,title:journey.title,phase:({'skill-confirmation':'等待你确认 Codex 操作','skill-executing':'正在处理 Codex 对话能力'})[record.phase]||phases[record.phase]||'正在核实本次操作',state:record.state,version:record.currentVersion&&kind==='update'?record.currentVersion+' → '+record.version:record.version||record.currentVersion||null,download:record.download||null,program:record.programState==='completed'?'程序'+verb+'已完成；'+(kind==='uninstall'?'结果由独立回执保留':record.runtimeHealth==='passed'?'稳定入口健康已核验':'健康待核实'):record.installationWrites==='none'?'尚未执行程序操作':'程序结果以同次记录为准',skill:kind==='uninstall'?(observations.remove?.state==='completed'?'已解除已归属 Codex 注册；修改和未知文件按计划保留':'本次没有已核实的注册移除结果'):record.skillRegistered===true?'Skill 文件与归属已核验；新对话识别另验':record.journeyContext?.skillChoice==='skipped'?'本次不接入 Codex':record.journeyContext?.skillChoice==='selected'?'已选择接入 Codex；仅在分别确认后执行':'Codex 接入可选，尚未选择',project:'未自动接入项目',installationRoot:record.installationRoot||null,skillDestination:record.skillDestination||null,next:record.next||(record.terminal&&record.state==='completed'&&record.journeyContext?.skillChoice==='skipped'?'本次已跳过 Codex 接入；程序操作已完成，项目另行确认。':journey.summary),nextUrl:record.terminal?(kind!=='uninstall'&&record.workbench?.state==='ready'?record.workbench.url:null):record.confirmationUrl||null,nextLabel:record.terminal?'打开已安装工作台':record.phase?.startsWith('skill-')?'查看 Codex 精确确认':kind==='install'?'继续到目录选择 / 本人确认页':'查看'+verb+'确认',resultFile:record.resultFile||null,terminal,diagnostic:record.diagnostic||null};
+  return {journey,operationId:record.operationId,title:journey.title,phase:({'skill-confirmation':'等待你确认 Codex 操作','skill-executing':'正在处理 Codex 对话能力'})[record.phase]||phases[record.phase]||'正在核实本次操作',state:record.state,version:record.currentVersion&&kind==='update'?record.currentVersion+' → '+record.version:record.version||record.currentVersion||null,download:record.download||null,downloadStatus:downloadStatus(record),program:record.programState==='completed'?'程序'+verb+'已完成；'+(kind==='uninstall'?'结果由独立回执保留':record.runtimeHealth==='passed'?'稳定入口健康已核验':'健康待核实'):record.installationWrites==='none'?'尚未执行程序操作':'程序结果以同次记录为准',skill:kind==='uninstall'?(observations.remove?.state==='completed'?'已解除已归属 Codex 注册；修改和未知文件按计划保留':'本次没有已核实的注册移除结果'):record.skillRegistered===true?'Skill 文件与归属已核验；新对话识别另验':record.journeyContext?.skillChoice==='skipped'?'本次不接入 Codex':record.journeyContext?.skillChoice==='selected'?'已选择接入 Codex；仅在分别确认后执行':'Codex 接入可选，尚未选择',project:'未自动接入项目',installationRoot:record.installationRoot||null,skillDestination:record.skillDestination||null,next:record.next||(record.terminal&&record.state==='completed'&&record.journeyContext?.skillChoice==='skipped'?'本次已跳过 Codex 接入；程序操作已完成，项目另行确认。':journey.summary),nextUrl:record.terminal?(kind!=='uninstall'&&record.workbench?.state==='ready'?record.workbench.url:null):record.confirmationUrl||null,nextLabel:record.terminal?'打开已安装工作台':record.phase?.startsWith('skill-')?'查看 Codex 精确确认':kind==='install'?'继续到目录选择 / 本人确认页':'查看'+verb+'确认',resultFile:record.resultFile||null,terminal,diagnostic:record.diagnostic||null};
 }
 
 // A bounded, read-only loopback view over the existing in-memory operation.

package/lib/single-page-style.mjs

@@ -1,4 +1,5 @@
 // Product-area CSS transplanted from the approved 040 reference.
 // Source SHA-256: e9949cc0d67e979b0297ca654eda1f163f2178b3338d4c4cf3ea9363e3cd8644
 // Demo-only selectors remain inert; there are no demo controls in production.
-export const singlePageStyle = "#foundation-flow-demo{--fp-bg:light-dark(#fff,#191b20);--fp-soft:light-dark(#f7f8fa,#23262c);--fp-text:light-dark(#20252d,#eff1f5);--fp-muted:light-dark(#606a78,#adb5c3);--fp-line:light-dark(#e5e8ee,#383d46);--fp-accent:light-dark(#315ee8,#98b3ff);--fp-active:light-dark(#f3f6ff,#232f48);--fp-good:light-dark(#23784c,#8ddcb1);--fp-error:light-dark(#b33434,#ffadad);font-family:Inter,-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif;color:var(--fp-text);font-size:14px;line-height:1.6;color-scheme:light dark}\n#foundation-flow-demo *{box-sizing:border-box}#foundation-flow-demo [hidden]{display:none!important}#foundation-flow-demo button,#foundation-flow-demo input,#foundation-flow-demo select{font:inherit;color:inherit}#foundation-flow-demo button,#foundation-flow-demo select{cursor:pointer}#foundation-flow-demo button{border:1px solid var(--fp-line);background:var(--fp-bg);border-radius:7px;padding:9px 15px;min-height:42px}#foundation-flow-demo button:disabled{opacity:.55;cursor:default}#foundation-flow-demo .demo-tools{display:flex;gap:12px;align-items:center;flex-wrap:wrap;margin-bottom:14px;color:var(--fp-muted);font-size:12px}#foundation-flow-demo .demo-tools label{margin-left:auto;display:flex;align-items:center;gap:8px}#foundation-flow-demo select{padding:7px;border:1px solid var(--fp-line);border-radius:6px;background:var(--fp-bg)}#foundation-flow-demo .product{background:var(--fp-bg);border:1px solid var(--fp-line);border-radius:14px;overflow:hidden}#foundation-flow-demo .brand{display:flex;align-items:center;gap:9px;padding:18px 26px;border-bottom:1px solid var(--fp-line);font-weight:500}#foundation-flow-demo .brand-mark{display:grid;place-items:center;width:26px;height:26px;border-radius:6px;background:var(--fp-text);color:var(--fp-bg)}#foundation-flow-demo .private-label{margin-left:auto;font-size:12px;color:var(--fp-muted);font-weight:400}#foundation-flow-demo .overview{padding:24px 26px 20px}#foundation-flow-demo h1{font-size:25px;font-weight:500;line-height:1.3;margin:5px 0 8px}#foundation-flow-demo p{margin:6px 0}#foundation-flow-demo .eyebrow{color:var(--fp-accent);font-size:12px;font-weight:500}#foundation-flow-demo #flow-description{color:var(--fp-muted)}#foundation-flow-demo .metadata{display:flex;flex-direction:column;gap:4px;margin:15px 0;color:var(--fp-muted);font-size:12px;overflow-wrap:anywhere}#foundation-flow-demo .progress-label{display:flex;justify-content:space-between;gap:10px;flex-wrap:wrap;font-size:12px;margin-bottom:8px}#foundation-flow-demo #flow-status{color:var(--fp-accent)}#foundation-flow-demo .track{height:5px;background:var(--fp-soft);border-radius:4px;overflow:hidden}#foundation-flow-demo #flow-bar{height:100%;background:var(--fp-accent);width:0;transition:width .2s}#foundation-flow-demo .steps{list-style:none;padding:0 26px;margin:0}#foundation-flow-demo .step{border-top:1px solid var(--fp-line);padding:15px 0}#foundation-flow-demo .step.current{background:var(--fp-active);border:1px solid var(--fp-line);border-radius:10px;padding:16px;margin:4px -16px 8px}#foundation-flow-demo .step-top{display:flex;align-items:center;gap:12px}#foundation-flow-demo .step-number{flex:none;border:1px solid var(--fp-line);border-radius:50%;width:25px;height:25px;display:grid;place-items:center;font-size:12px;color:var(--fp-muted)}#foundation-flow-demo .done .step-number{color:var(--fp-good);border-color:transparent;background:var(--fp-soft)}#foundation-flow-demo .current .step-number{background:var(--fp-accent);color:var(--fp-bg);border-color:transparent}#foundation-flow-demo .step-title{font-weight:500;flex:1}#foundation-flow-demo .step-state{font-size:12px;color:var(--fp-muted)}#foundation-flow-demo .done .step-state{color:var(--fp-good)}#foundation-flow-demo .step-body{margin:12px 0 0 37px;color:var(--fp-muted)}#foundation-flow-demo .field{display:block;margin:13px 0 5px;color:var(--fp-text)}#foundation-flow-demo input[type=text]{width:100%;min-width:0;font-size:16px;background:var(--fp-bg);border:1px solid var(--fp-line);border-radius:7px;padding:10px}#foundation-flow-demo .check{display:flex;align-items:flex-start;gap:9px;margin:14px 0;color:var(--fp-text)}#foundation-flow-demo .check input{margin-top:6px;accent-color:var(--fp-accent)}#foundation-flow-demo .hint{font-size:12px;color:var(--fp-muted);overflow-wrap:anywhere}#foundation-flow-demo .actions{display:flex;flex-wrap:wrap;gap:8px;margin-top:17px}#foundation-flow-demo .primary{background:var(--fp-accent);border-color:var(--fp-accent);color:var(--fp-bg);font-weight:500}#foundation-flow-demo .danger{background:var(--fp-error);border-color:var(--fp-error);color:var(--fp-bg)}#foundation-flow-demo .error{color:var(--fp-error);font-size:13px;margin-top:6px}#foundation-flow-demo .facts{border-left:2px solid var(--fp-line);padding-left:12px;margin:12px 0;overflow-wrap:anywhere}#foundation-flow-demo .result{margin:14px 26px 24px;padding:18px;background:var(--fp-soft);border-radius:10px}#foundation-flow-demo .result h2{font-size:18px;font-weight:500;margin:0 0 8px}#foundation-flow-demo footer{padding:17px 26px;border-top:1px solid var(--fp-line);color:var(--fp-muted);font-size:12px}#foundation-flow-demo summary{cursor:pointer}#foundation-flow-demo .completed-detail{margin-left:37px;font-size:12px;color:var(--fp-muted)}\n@media(max-width:480px){#foundation-flow-demo .overview,#foundation-flow-demo .brand,#foundation-flow-demo footer{padding-left:17px;padding-right:17px}#foundation-flow-demo .steps{padding:0 17px}#foundation-flow-demo .step.current{margin-left:-8px;margin-right:-8px;padding:12px 8px}#foundation-flow-demo .step-body{margin-left:0}#foundation-flow-demo .step-top{gap:8px}#foundation-flow-demo .step-state{max-width:82px;text-align:right}#foundation-flow-demo .demo-tools label{margin-left:0}#foundation-flow-demo .result{margin:14px 17px}#foundation-flow-demo h1{font-size:23px}}\n@media(prefers-reduced-motion:reduce){#foundation-flow-demo #flow-bar{transition:none}}";
+// C5: download metadata wraps within the existing right-hand status slot.
+export const singlePageStyle = "#foundation-flow-demo{--fp-bg:light-dark(#fff,#191b20);--fp-soft:light-dark(#f7f8fa,#23262c);--fp-text:light-dark(#20252d,#eff1f5);--fp-muted:light-dark(#606a78,#adb5c3);--fp-line:light-dark(#e5e8ee,#383d46);--fp-accent:light-dark(#315ee8,#98b3ff);--fp-active:light-dark(#f3f6ff,#232f48);--fp-good:light-dark(#23784c,#8ddcb1);--fp-error:light-dark(#b33434,#ffadad);font-family:Inter,-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif;color:var(--fp-text);font-size:14px;line-height:1.6;color-scheme:light dark}\n#foundation-flow-demo *{box-sizing:border-box}#foundation-flow-demo [hidden]{display:none!important}#foundation-flow-demo button,#foundation-flow-demo input,#foundation-flow-demo select{font:inherit;color:inherit}#foundation-flow-demo button,#foundation-flow-demo select{cursor:pointer}#foundation-flow-demo button{border:1px solid var(--fp-line);background:var(--fp-bg);border-radius:7px;padding:9px 15px;min-height:42px}#foundation-flow-demo button:disabled{opacity:.55;cursor:default}#foundation-flow-demo .demo-tools{display:flex;gap:12px;align-items:center;flex-wrap:wrap;margin-bottom:14px;color:var(--fp-muted);font-size:12px}#foundation-flow-demo .demo-tools label{margin-left:auto;display:flex;align-items:center;gap:8px}#foundation-flow-demo select{padding:7px;border:1px solid var(--fp-line);border-radius:6px;background:var(--fp-bg)}#foundation-flow-demo .product{background:var(--fp-bg);border:1px solid var(--fp-line);border-radius:14px;overflow:hidden}#foundation-flow-demo .brand{display:flex;align-items:center;gap:9px;padding:18px 26px;border-bottom:1px solid var(--fp-line);font-weight:500}#foundation-flow-demo .brand-mark{display:grid;place-items:center;width:26px;height:26px;border-radius:6px;background:var(--fp-text);color:var(--fp-bg)}#foundation-flow-demo .private-label{margin-left:auto;font-size:12px;color:var(--fp-muted);font-weight:400}#foundation-flow-demo .overview{padding:24px 26px 20px}#foundation-flow-demo h1{font-size:25px;font-weight:500;line-height:1.3;margin:5px 0 8px}#foundation-flow-demo p{margin:6px 0}#foundation-flow-demo .eyebrow{color:var(--fp-accent);font-size:12px;font-weight:500}#foundation-flow-demo #flow-description{color:var(--fp-muted)}#foundation-flow-demo .metadata{display:flex;flex-direction:column;gap:4px;margin:15px 0;color:var(--fp-muted);font-size:12px;overflow-wrap:anywhere}#foundation-flow-demo .progress-label{display:flex;justify-content:space-between;gap:10px;flex-wrap:wrap;font-size:12px;margin-bottom:8px}#foundation-flow-demo #flow-status{color:var(--fp-accent)}#foundation-flow-demo .track{height:5px;background:var(--fp-soft);border-radius:4px;overflow:hidden}#foundation-flow-demo #flow-bar{height:100%;background:var(--fp-accent);width:0;transition:width .2s}#foundation-flow-demo .steps{list-style:none;padding:0 26px;margin:0}#foundation-flow-demo .step{border-top:1px solid var(--fp-line);padding:15px 0}#foundation-flow-demo .step.current{background:var(--fp-active);border:1px solid var(--fp-line);border-radius:10px;padding:16px;margin:4px -16px 8px}#foundation-flow-demo .step-top{display:flex;align-items:center;gap:12px}#foundation-flow-demo .step-number{flex:none;border:1px solid var(--fp-line);border-radius:50%;width:25px;height:25px;display:grid;place-items:center;font-size:12px;color:var(--fp-muted)}#foundation-flow-demo .done .step-number{color:var(--fp-good);border-color:transparent;background:var(--fp-soft)}#foundation-flow-demo .current .step-number{background:var(--fp-accent);color:var(--fp-bg);border-color:transparent}#foundation-flow-demo .step-title{font-weight:500;flex:1;min-width:0;overflow-wrap:anywhere}#foundation-flow-demo .step-state{font-size:12px;color:var(--fp-muted);max-width:48%;text-align:right;overflow-wrap:anywhere}#foundation-flow-demo .done .step-state{color:var(--fp-good)}#foundation-flow-demo .step-body{margin:12px 0 0 37px;color:var(--fp-muted)}#foundation-flow-demo .field{display:block;margin:13px 0 5px;color:var(--fp-text)}#foundation-flow-demo input[type=text]{width:100%;min-width:0;font-size:16px;background:var(--fp-bg);border:1px solid var(--fp-line);border-radius:7px;padding:10px}#foundation-flow-demo .check{display:flex;align-items:flex-start;gap:9px;margin:14px 0;color:var(--fp-text)}#foundation-flow-demo .check input{margin-top:6px;accent-color:var(--fp-accent)}#foundation-flow-demo .hint{font-size:12px;color:var(--fp-muted);overflow-wrap:anywhere}#foundation-flow-demo .actions{display:flex;flex-wrap:wrap;gap:8px;margin-top:17px}#foundation-flow-demo .primary{background:var(--fp-accent);border-color:var(--fp-accent);color:var(--fp-bg);font-weight:500}#foundation-flow-demo .danger{background:var(--fp-error);border-color:var(--fp-error);color:var(--fp-bg)}#foundation-flow-demo .error{color:var(--fp-error);font-size:13px;margin-top:6px}#foundation-flow-demo .facts{border-left:2px solid var(--fp-line);padding-left:12px;margin:12px 0;overflow-wrap:anywhere}#foundation-flow-demo .result{margin:14px 26px 24px;padding:18px;background:var(--fp-soft);border-radius:10px}#foundation-flow-demo .result h2{font-size:18px;font-weight:500;margin:0 0 8px}#foundation-flow-demo footer{padding:17px 26px;border-top:1px solid var(--fp-line);color:var(--fp-muted);font-size:12px}#foundation-flow-demo summary{cursor:pointer}#foundation-flow-demo .completed-detail{margin-left:37px;font-size:12px;color:var(--fp-muted)}\n@media(max-width:480px){#foundation-flow-demo .overview,#foundation-flow-demo .brand,#foundation-flow-demo footer{padding-left:17px;padding-right:17px}#foundation-flow-demo .steps{padding:0 17px}#foundation-flow-demo .step.current{margin-left:-8px;margin-right:-8px;padding:12px 8px}#foundation-flow-demo .step-body{margin-left:0}#foundation-flow-demo .step-top{gap:8px}#foundation-flow-demo .step-state{max-width:82px;text-align:right}#foundation-flow-demo .demo-tools label{margin-left:0}#foundation-flow-demo .result{margin:14px 17px}#foundation-flow-demo h1{font-size:23px}}\n@media(prefers-reduced-motion:reduce){#foundation-flow-demo #flow-bar{transition:none}}";

package/lib/single-page-view.mjs

@@ -17,6 +17,7 @@ function singlePageClient(csrf) {
   const order=kind==='uninstall'?['remove','program']:['select','acquire','program','material','register','optional-skill','health'];
   const steps=p.progress.journey.steps.map(s=>({...s})).sort((a,b)=>order.indexOf(a.key)-order.indexOf(b.key));
   if(choice)for(const s of steps)s.state=s.key==='select'?'pending':'planned';
+  if(r.environment)steps.unshift({key:'environment',title:'检查使用环境',state:r.environment.state==='ready'?'completed':'failed',evidence:(r.environment.preparation?'对话准备的基础环境已复检；':'复用现有入口环境；')+r.environment.platform+' '+r.environment.arch+'；入口 Node '+r.environment.nodeVersion+'；程序使用随包运行时，不修改共享设置'+(r.environment.preparation?'。独立环境回执：'+r.environment.preparation.receipt+'；缓存不自动清理':'')});
   if(r.intentSelected){const s=steps.find(s=>s.key==='select');if(s)s.state='completed';}
   let active=choice?'select':v?.type==='selection'?'select':v?.session?.capabilityId?(v.session.operation==='install'?'material':v.session.operation==='uninstall'?'remove':'register'):v?.session?'program':steps.find(s=>!['completed','skipped','retained'].includes(s.state))?.key;
   // The final result check must not look finished while a chosen Skill step
@@ -40,17 +41,27 @@ function singlePageClient(csrf) {
     let body='';
     if(current&&(choice||v?.type==='selection'))body='<form id="current-form"><label class="field" for="install-path">安装到哪里？</label><input id="install-path" name="destination" type="text" value="'+esc(r.destinationIntent||v?.suggestion||'')+'" spellcheck="false" required><p class="hint">请输入完整路径，可以包含成对引号。不会覆盖已有内容，最终目录仍由程序检查。</p><label class="check"><input id="include-skill" name="includeSkill" type="checkbox" '+(r.journeyContext?.skillChoice==='skipped'?'':'checked')+'><span>同时安装 Foundation Skill<br><span class="hint">让 Codex 能识别 Foundation 指令，并按 Foundation 规范工作。</span></span></label><p class="hint">获取缓存：'+esc(r.acquisitionRoot||'以当前任务已披露位置为准')+'。选择不是安装批准。</p><div id="step-error" class="error" role="alert">'+esc(v?.error||'')+'</div><div class="actions"><button class="primary" name="action" value="'+(choice?'choose':'select')+'">使用这个位置</button><button name="action" value="'+(choice?'cancel-intent':'cancel')+'" formnovalidate>取消本步</button></div></form>';
     else if(current&&v?.session){const f=v.feedback;body='<p>'+esc(f.detail)+'</p><div class="facts">'+f.namedTargets.map(t=>'<p>'+esc(t.label)+'：'+esc(t.path||'待核实')+'</p>').join('')+'<p>保留：'+esc(f.preserves.join('；'))+'</p><p>'+esc(f.notDone)+'</p>'+cleanupText(v.session)+((v.session.deletes||[]).length?'<details open><summary>删除范围</summary>'+v.session.deletes.map(x=>'<p>'+esc(x==='foundation-installation:full'?'本安装中经所有权核验的程序、运行时和状态文件；未知或用户修改的文件保留。':typeof x==='string'?x:JSON.stringify(x))+'</p>').join('')+'</details>':'')+'</div><p class="hint">每次确认只针对当前计划，不批准后续步骤。Skill 文件就位不等于新对话已识别。</p><form id="current-form"><div id="step-error" class="error" role="alert"></div><div class="actions">'+(v.session.state==='pending'?'<button class="'+(kind==='uninstall'?'danger':'primary')+'" name="action" value="'+esc(v.action)+'">确认'+esc(titles[s.key])+'</button><button name="action" value="cancel-no-change">取消本步</button>':'<p>本步已开始或结束，不能重复确认。</p>')+'</div></form>';}
-    else if(current)body='<p role="status">'+esc(p.progress.phase)+'</p><p class="hint">下一步会在本页展开，不需要查找其他网址。</p>';
-    return '<li class="step '+(current?'current':done||skip?'done':'later')+'"><div class="step-top"><span class="step-number">'+(skip?'−':done?'✓':i+1)+'</span><span class="step-title">'+esc(titles[s.key]||s.title)+'</span><span class="step-state">'+esc(skip?'已跳过':done?'已完成':stateLabels[s.state]||(current?(choice?'等待选择':p.progress.phase):r.terminal?'本次未执行':'等待前序步骤'))+'</span></div>'+(current?'<div class="step-body">'+body+'</div>':done||skip?'<details class="completed-detail"><summary>查看结果</summary><p>'+esc(skip?'本次未执行此步骤。':s.evidence?JSON.stringify(s.evidence):'结果来自本次操作记录')+'</p></details>':'')+'</li>';
+    else if(current)body='<p role="status" '+(s.key==='acquire'?'data-acquisition-phase':'')+'>'+esc(p.progress.phase)+'</p><p class="hint">下一步会在本页展开，不需要查找其他网址。</p>'+(s.key==='acquire'?'<p class="error" data-download-connection role="status"></p>':'');
+    else if(s.key==='acquire'&&s.state==='failed')body='<p class="error">'+esc(p.progress.next)+'</p>';
+    if(current&&(choice||v?.type==='selection'))body=body.replace('<form id="current-form">','<form id="current-form"><label class="field" for="scope-kind">在哪里使用？</label><select id="scope-kind" name="scopeKind"><option value="user" '+(r.scopeIntent?.kind!=='project'?'selected':'')+'>当前用户使用（推荐）</option><option value="project" '+(r.scopeIntent?.kind==='project'?'selected':'')+'>仅当前项目使用</option></select><p class="hint">当前用户：多个项目共用，Skill 为用户级，不是所有系统账户。项目模式：绑定具体仓库，Skill 仅放入该项目；已有用户级 Skill 不会消失，同名冲突会停止注册。</p><label class="field" for="project-root">项目根路径（仅项目模式需要）</label><input id="project-root" type="text" name="projectRoot" value="'+esc(r.scopeIntent?.projectRoot||'')+'" spellcheck="false"><p class="hint">程序仍使用与业务项目不重叠的独立目录，通过真实项目身份限定使用，不修改业务依赖或 AGENTS。</p>');
+    return '<li data-step="'+esc(s.key)+'" class="step '+(current?'current':done||skip?'done':'later')+'"><div class="step-top"><span class="step-number">'+(skip?'−':done?'✓':i+1)+'</span><span class="step-title">'+esc(titles[s.key]||s.title)+'</span><span class="step-state">'+esc(skip?'已跳过':done?'已完成':stateLabels[s.state]||(current?(choice?'等待选择':p.progress.phase):r.terminal?'本次未执行':'等待前序步骤'))+'</span></div>'+(body?'<div class="step-body">'+body+'</div>':done||skip?'<details class="completed-detail"><summary>查看结果</summary><p>'+esc(skip?'本次未执行此步骤。':s.evidence?JSON.stringify(s.evidence):'结果来自本次操作记录')+'</p></details>':'')+'</li>';
    }).join('');
   }
   if(busy&&executing){const live=q('.current .step-state');if(live)live.textContent='正在执行';}
+  // Byte/phase updates must not rebuild the form or depend on its revision key.
+  const downloadRow=q('[data-step="acquire"]');
+  if(downloadRow&&(active==='acquire'||r.terminal&&steps.find(s=>s.key==='acquire')?.state==='failed')){
+   downloadRow.querySelector('.step-state').textContent=p.progress.downloadStatus||p.progress.phase;
+   const phase=downloadRow.querySelector('[data-acquisition-phase]');if(phase)phase.textContent=p.progress.downloadStatus==='正在检查文件'?'正在检查文件':p.progress.phase;
+   const connection=downloadRow.querySelector('[data-download-connection]');if(connection)connection.textContent='';
+  }
   q('#flow-result').hidden=!r.terminal;
   if(r.terminal)q('#flow-result').innerHTML='<h2>'+esc(r.state==='completed'?verb+'完成':'部分完成 / 待核实')+'</h2><p>'+esc(p.progress.program)+'</p><p>Skill：'+esc(p.progress.skill)+'</p><p>项目：'+esc(p.progress.project)+'</p><p class="hint">下一步：'+esc(p.progress.next)+'</p>';
   const safe=JSON.parse(JSON.stringify(p));if(safe.view){delete safe.view.managerNonce;delete safe.view.nonce;}q('#raw').textContent=JSON.stringify(safe,null,2);
  }
  document.addEventListener('submit',async e=>{if(e.target.id!=='current-form')return;e.preventDefault();if(busy||!last)return;busy=true;const form=e.target;form.querySelectorAll('button').forEach(b=>b.disabled=true);q('#flow-status').textContent='正在提交请求';const action=e.submitter.value,v=last.view;const body={csrf,operationId:last.record.operationId,action,...(['choose','select'].includes(action)?{destination:form.elements.destination.value,skillChoice:form.elements.includeSkill.checked?'selected':'skipped'}:{managerNonce:v?.managerNonce,sessionId:v?.session?.sessionId,planHash:v?.session?.planHash})};
+  if(['choose','select'].includes(action)){body.scopeKind=form.elements.scopeKind.value;body.projectRoot=body.scopeKind==='project'?form.elements.projectRoot.value:null;}
   try{const response=await fetch(location.pathname+'/action',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(body)});const result=await response.json();if(!response.ok){q('#step-error').textContent=result.message||result.code||'本步未完成，请核实';busy=false;form.querySelectorAll('button').forEach(b=>b.disabled=false);return;}busy=false;revision=null;await refresh();}catch{q('#connection').textContent='请求结果待核实，不自动重试。已收到的结果保留；刷新查询同次流程。';}});
- async function refresh(){try{const response=await fetch(location.pathname+'/state');if(!response.ok)throw Error();show(await response.json());q('#connection').textContent='';}catch{q('#connection').textContent=last?.record?.terminal?'结果服务已结束，上方保留最后核实结果。可在对话中按本次操作记录再次查询。':'连接已中断，保留最后核实结果；不自动重试操作。';}}
+ async function refresh(){try{const response=await fetch(location.pathname+'/state');if(!response.ok)throw Error();show(await response.json());q('#connection').textContent='';}catch{q('#connection').textContent=last?.record?.terminal?'结果服务已结束，上方保留最后核实结果。可在对话中按本次操作记录再次查询。':'连接已中断，保留最后核实结果；不自动重试操作。';const note=q('.current [data-download-connection]');if(note){note.textContent='连接中断，进度待核实；保留上次收到的数值。';q('.current .step-state').textContent=(last.progress.downloadStatus||last.progress.phase)+' · 待核实';}}}
  async function poll(){if(stopped)return;await refresh();if(!stopped)setTimeout(poll,750);}poll();window.addEventListener('pagehide',()=>{stopped=true},{once:true});
 }

package/lib/skill-handoff.mjs

@@ -13,7 +13,8 @@ export async function followSelectedSkill({operation,env,onChange,journeyControl
   const identity=initial.installation?.current;
   if(!identity?.identity?.installId||initial.bridge?.currentVersion!==identity.version)throw Error('当前安装身份无法核实，停止 Skill 接续');
   if(operation.installId&&operation.installId!==identity.identity.installId)throw Error('恢复记录属于另一安装，停止接续');
-  onChange({installId:identity.identity.installId,installedCandidateHash:identity.candidateHash});
+  onChange({installId:identity.identity.installId,installedCandidateHash:identity.candidateHash,usageScope:identity.usageScope||{kind:'user',project:null}});
+  const discoveryNext=identity.usageScope?.kind==='project'?'请在绑定项目 '+identity.usageScope.project.path+' 内新开 Codex 对话验证识别；不会供其他项目使用。':'新开 Codex 对话验证识别。';
   const manifestFile=plainPath(path.join(root,identity.appPath,'artifacts/skills/ai-product-foundation-kit/capability.json'));
   if(!manifestFile.startsWith(root+path.sep))throw Error('Skill 材料必须属于当前安装');
   if(initial.codexSkill?.state==='files-installed-host-discovery-unverified'){
@@ -49,5 +50,5 @@ const event=await observePlan(client,requested,observation=>onChange({phase:obse
   }
   const verified=checkIdentity().codexSkill;
   if(verified?.state!=='files-installed-host-discovery-unverified')throw Error('Skill 注册文件与归属未通过核验；程序成功保留');
-  return {state:'completed',phase:'finished',terminal:true,skillRegistered:true,skillDestination:verified.destination,skillSteps:steps,hostDiscoveryVerified:false,next:'程序与所选 Skill 文件已就位；新开 Codex 对话验证识别，项目接入另行确认。'};
+  return {state:'completed',phase:'finished',terminal:true,skillRegistered:true,skillDestination:verified.destination,skillSteps:steps,hostDiscoveryVerified:false,next:'程序与所选 Skill 文件已就位；'+discoveryNext+' 项目接入另行确认。'};
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@josephyulei/summon-foundation",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@josephyulei/summon-foundation",
-      "version": "0.1.6",
+      "version": "0.1.7",
       "license": "MIT",
       "dependencies": {
         "@sigstore/bundle": "4.0.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@josephyulei/summon-foundation",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Prepare a verified Foundation release for an explicitly confirmed Codex installation",
   "type": "module",
   "bin": {"summon": "bin/summon.mjs"},