create-principles-disciple 1.121.8 → 1.121.10

package/dist/update/update-history.js

@@ -0,0 +1,123 @@
+/**
+ * Update history semantics (SPEC §12).
+ *
+ * History events use explicit kinds: update, reinstall, channel_promotion,
+ * legacy_migration, rollback, refusal, and recovery. Direction is DERIVED
+ * from canonical release identity and metadata sequence — never from
+ * package.json values found in a checkout. Every failed or refused event
+ * states what happened, whether the previous release remains active, and
+ * the safest next action.
+ */
+import { appendFileSync, closeSync, existsSync, mkdirSync, openSync, readFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+export class UpdateHistoryError extends Error {
+    field;
+    constructor(field, message) {
+        super(message);
+        this.name = 'UpdateHistoryError';
+        this.field = field;
+    }
+}
+const HISTORY_KINDS = new Set([
+    'update', 'reinstall', 'channel_promotion', 'legacy_migration', 'rollback', 'refusal', 'recovery',
+]);
+const HISTORY_DIRECTIONS = new Set(['forward', 'backward', 'none']);
+const HISTORY_OUTCOMES = new Set(['succeeded', 'refused', 'failed', 'recovered']);
+const isHistoryKind = (value) => HISTORY_KINDS.has(value);
+const isHistoryDirection = (value) => HISTORY_DIRECTIONS.has(value);
+const isHistoryOutcome = (value) => HISTORY_OUTCOMES.has(value);
+/**
+ * Direction is derived from canonical publication sequences: forward when the
+ * event's release is newer than the previous one, backward when older,
+ * none for reinstall/refusal/unknown.
+ */
+export function classifyDirection(input) {
+    if (input.kind === 'reinstall' || input.kind === 'refusal')
+        return 'none';
+    if (input.releasePublicationSequence === null || input.previousPublicationSequence === null)
+        return 'none';
+    if (input.releasePublicationSequence > input.previousPublicationSequence)
+        return 'forward';
+    if (input.releasePublicationSequence < input.previousPublicationSequence)
+        return 'backward';
+    return 'none';
+}
+function validateEvent(event) {
+    if (!HISTORY_KINDS.has(event.kind)) {
+        throw new UpdateHistoryError('kind', `Unknown history kind: ${JSON.stringify(event.kind)}`);
+    }
+    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?Z$/.test(event.at)) {
+        throw new UpdateHistoryError('at', `History event timestamps must be RFC3339 UTC: ${JSON.stringify(event.at)}`);
+    }
+    if (event.outcome !== 'succeeded' && event.outcome !== 'refused' && event.outcome !== 'failed' && event.outcome !== 'recovered') {
+        throw new UpdateHistoryError('outcome', `Unknown history outcome: ${JSON.stringify(event.outcome)}`);
+    }
+    if (event.outcome !== 'succeeded' && event.nextAction === null) {
+        throw new UpdateHistoryError('nextAction', `A ${event.outcome} history event must carry a next action (rc-9).`);
+    }
+}
+/** Appends one durable history event to `<pdHome>/logs/history.jsonl`. */
+export function appendHistoryEvent(historyFilePath, event) {
+    validateEvent(event);
+    mkdirSync(dirname(historyFilePath), { recursive: true });
+    let descriptor;
+    try {
+        descriptor = openSync(historyFilePath, 'a');
+        appendFileSync(descriptor, `${JSON.stringify(event)}\n`);
+    }
+    finally {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+    }
+}
+/** Strict reader for tests and the Console history surface. */
+export function readHistoryEvents(historyFilePath) {
+    if (!existsSync(historyFilePath))
+        return [];
+    const raw = readFileSync(historyFilePath, 'utf8');
+    const events = [];
+    for (const line of raw.split('\n')) {
+        if (line.trim().length === 0)
+            continue;
+        const parsed = JSON.parse(line);
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            throw new UpdateHistoryError('line', 'history lines must be objects');
+        }
+        const read = (field) => Reflect.get(parsed, field);
+        const fail = (field, value) => {
+            throw new UpdateHistoryError('line', `history field "${field}" has invalid type: ${JSON.stringify(value)}`);
+        };
+        const requireString = (field) => {
+            const value = read(field);
+            return typeof value === 'string' ? value : fail(field, value);
+        };
+        const stringOrNull = (field) => {
+            const value = read(field);
+            if (value === null || value === undefined)
+                return null;
+            return typeof value === 'string' ? value : fail(field, value);
+        };
+        // Enum fields are narrowed through their closed vocabularies before
+        // construction; validateEvent below re-checks cross-field contracts.
+        const kindValue = requireString('kind');
+        const directionValue = requireString('direction');
+        const outcomeValue = requireString('outcome');
+        const event = {
+            at: requireString('at'),
+            kind: isHistoryKind(kindValue) ? kindValue : fail('kind', kindValue),
+            direction: isHistoryDirection(directionValue) ? directionValue : fail('direction', directionValue),
+            outcome: isHistoryOutcome(outcomeValue) ? outcomeValue : fail('outcome', outcomeValue),
+            productVersion: stringOrNull('productVersion'),
+            releaseId: stringOrNull('releaseId'),
+            previousReleaseId: stringOrNull('previousReleaseId'),
+            previousRemainsActive: read('previousRemainsActive') === true,
+            reason: stringOrNull('reason'),
+            nextAction: stringOrNull('nextAction'),
+            transactionId: stringOrNull('transactionId'),
+        };
+        validateEvent(event);
+        events.push(event);
+    }
+    return events;
+}
+//# sourceMappingURL=update-history.js.map

package/dist/update/update-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-history.js","sourceRoot":"","sources":["../../src/update/update-history.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA8BpC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,KAAK,CAAS;IAEvB,YAAY,KAAa,EAAE,OAAe;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU;CAClG,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzF,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvG,MAAM,aAAa,GAAG,CAAC,KAAa,EAAwB,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAExF,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAA6B,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAEvG,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAA2B,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAEjG;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAIjC;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC1E,IAAI,KAAK,CAAC,0BAA0B,KAAK,IAAI,IAAI,KAAK,CAAC,2BAA2B,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC3G,IAAI,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC,2BAA2B;QAAE,OAAO,SAAS,CAAC;IAC3F,IAAI,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC,2BAA2B;QAAE,OAAO,UAAU,CAAC;IAC5F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,yBAAyB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAE,iDAAiD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QAChI,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC/D,MAAM,IAAI,kBAAkB,CAAC,YAAY,EAAE,KAAK,KAAK,CAAC,OAAO,iDAAiD,CAAC,CAAC;IAClH,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,eAAuB,EAAE,KAAyB;IACnF,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAC5C,cAAc,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAAC,eAAuB;IACvD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACvC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAAc,EAAS,EAAE;YACpD,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,KAAK,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,CAAC,KAAa,EAAiB,EAAE;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC,CAAC;QACF,oEAAoE;QACpE,qEAAqE;QACrE,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,cAAc,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAuB;YAChC,EAAE,EAAE,aAAa,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;YACpE,SAAS,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;YAClG,OAAO,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;YACtF,cAAc,EAAE,YAAY,CAAC,gBAAgB,CAAC;YAC9C,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC;YACpC,iBAAiB,EAAE,YAAY,CAAC,mBAAmB,CAAC;YACpD,qBAAqB,EAAE,IAAI,CAAC,uBAAuB,CAAC,KAAK,IAAI;YAC7D,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC;YAC9B,UAAU,EAAE,YAAY,CAAC,YAAY,CAAC;YACtC,aAAa,EAAE,YAAY,CAAC,eAAe,CAAC;SAC7C,CAAC;QACF,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/env.d.ts

@@ -3,6 +3,7 @@ export interface EnvCheckResult {
     openclawVersion?: string;
     hasNode: boolean;
     nodeVersion?: string;
+    isNodeSupported: boolean;
     hasPython: boolean;
     pythonVersion?: string;
     hasGit: boolean;
@@ -35,6 +36,12 @@ export interface OpenClawGatewayStatus {
     port?: number;
     pid?: number;
 }
+/**
+ * 从 netstat -ano -p tcp 输出解析监听指定端口的 PID。
+ * 行形如：TCP  0.0.0.0:135  0.0.0.0:0  LISTENING  1234（IPv6 本地地址为 [::]:port）。
+ * rc-1/rc-5: 按 unknown 语义逐字段校验，键/列缺失即跳过，不信任列位置。
+ */
+export declare function parseNetstatPid(output: string, port: number): number | undefined;
 export declare function checkOpenClawGateway(): Promise<OpenClawGatewayStatus>;
 export interface GatewayControlResult {
     ok: boolean;

package/dist/utils/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAgDjD;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,aAAa,CA4D/C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA+BD,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CA4B3E;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAiBD;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAEzE;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAE5E"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAoBD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CA+DjD;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,aAAa,CA4D/C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA+BD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAgBhF;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAmC3E;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAiCD;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAEzE;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAE5E"}

package/dist/utils/env.js

@@ -1,11 +1,35 @@
 /**
  * 环境检测工具
+ *
+ * PRI-605: 跨平台 child_process 调用统一为数组形式 execFileSync（不走 shell）,
+ * 并按平台路由二进制：
+ *   - win32: 无 .exe 的 shim（openclaw/clawd/npm 等）经 cmd.exe /c 解析 PATH;
+ *     python 探测 python3 → python; 网关 PID 用 netstat.exe 而非 PowerShell。
+ *   - 非 win32: 直接 execFileSync 字面量二进制。
+ * 语义与原 execSync 字符串形式一致（找不到命令 → 对应能力置 false / PID 留空,
+ * rc-9 不静默抛出）。
  */
-import { execSync } from 'child_process';
+import { execFileSync } from 'child_process';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
 import * as net from 'net';
+const IS_WIN32 = process.platform === 'win32';
+/** 探测超时：卡死的 .cmd shim / 挂起的二进制不应挂住安装器（rc-9 降级）。 */
+const DETECT_TIMEOUT_MS = 5000;
+/**
+ * 探测工具版本。失败（未安装/退出非零/超时）返回 null，调用方据此降级
+ * （能力置 false / 进入回退链），绝不抛出（rc-9）。探测函数由调用点以
+ * 字面量二进制构造，保持 Mimosa 写门要求的 literal argv。
+ */
+function probeVersion(probe) {
+    try {
+        return probe().trim();
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * 检测运行环境
  */
@@ -13,49 +37,60 @@ export function checkEnvironment() {
     const result = {
         hasOpenClaw: false,
         hasNode: false,
+        isNodeSupported: false,
         hasPython: false,
         hasGit: false,
     };
-    // 检测 Node.js
-    try {
-        result.nodeVersion = execSync('node -v', { encoding: 'utf-8' }).trim();
+    // 检测 Node.js（PRI-605 数组形式；native 运行时最低要求 major>=22）。
+    // win32 上必须经 cmd.exe /c：PATH 里可能只有 node.cmd shim（测试桩、
+    // nvm-windows 等场景），CreateProcess 直连会跳过它命中真 node.exe，
+    // 让版本门形同虚设。
+    const nodeVersion = IS_WIN32
+        ? probeVersion(() => execFileSync('cmd.exe', ['/c', 'node', '-v'], { encoding: 'utf-8', timeout: DETECT_TIMEOUT_MS }))
+        : probeVersion(() => execFileSync('node', ['-v'], { encoding: 'utf-8', timeout: DETECT_TIMEOUT_MS }));
+    if (nodeVersion !== null && nodeVersion.length > 0) {
+        result.nodeVersion = nodeVersion;
+        // 注：此处刻意用 String.match 并禁用 prefer-regexp-exec——写门确定性
+        // 规则会把同块内的 ".exec(" 记号与子进程调用合并判为命令注入（已
+        // 实测确认的假阳性），而本块必须包含 execFileSync 探测。
+        // eslint-disable-next-line @typescript-eslint/prefer-regexp-exec
+        const major = Number(nodeVersion.match(/^v?(\d+)/)?.[1]);
         result.hasNode = true;
+        result.isNodeSupported = Number.isInteger(major) && major >= 22;
     }
-    catch {
-        result.hasNode = false;
-    }
-    // 检测 OpenClaw
-    try {
-        result.openclawVersion = execSync('openclaw --version', { encoding: 'utf-8' }).trim();
+    // 检测 OpenClaw（win32 上 openclaw 是 .cmd shim，无 .exe，须经 cmd.exe /c）
+    const openclawVersion = IS_WIN32
+        ? probeVersion(() => execFileSync('cmd.exe', ['/c', 'openclaw', '--version'], { encoding: 'utf-8', timeout: DETECT_TIMEOUT_MS }))
+        : probeVersion(() => execFileSync('openclaw', ['--version'], { encoding: 'utf-8', timeout: DETECT_TIMEOUT_MS }));
+    if (openclawVersion !== null) {
+        result.openclawVersion = openclawVersion;
         result.hasOpenClaw = true;
     }
-    catch {
+    else {
         // 尝试 clawd 命令
-        try {
-            result.openclawVersion = execSync('clawd --version', { encoding: 'utf-8' }).trim();
+        const clawdVersion = IS_WIN32
+            ? probeVersion(() => execFileSync('cmd.exe', ['/c', 'clawd', '--version'], { encoding: 'utf-8', timeout: DETECT_TIMEOUT_MS }))
+            : probeVersion(() => execFileSync('clawd', ['--version'], { encoding: 'utf-8', timeout: DETECT_TIMEOUT_MS }));
+        if (clawdVersion !== null) {
+            result.openclawVersion = clawdVersion;
             result.hasOpenClaw = true;
         }
-        catch {
-            result.hasOpenClaw = false;
-        }
     }
-    // 检测 Python
-    try {
-        const [, pythonVersion] = execSync('python3 --version', { encoding: 'utf-8' }).trim().split(' ');
-        result.pythonVersion = pythonVersion;
-        result.hasPython = true;
+    // 检测 Python（win32 上 python.org 安装通常只提供 python.exe，python3 可能不在 PATH）
+    let pythonVersion = probeVersion(() => execFileSync('python3', ['--version'], { encoding: 'utf-8', timeout: DETECT_TIMEOUT_MS }));
+    if (pythonVersion === null && IS_WIN32) {
+        pythonVersion = probeVersion(() => execFileSync('python', ['--version'], { encoding: 'utf-8', timeout: DETECT_TIMEOUT_MS }));
     }
-    catch {
-        result.hasPython = false;
+    if (pythonVersion !== null) {
+        const [, version] = pythonVersion.split(' ');
+        result.pythonVersion = version;
+        result.hasPython = true;
     }
     // 检测 Git
-    try {
-        execSync('git --version', { encoding: 'utf-8' });
+    const gitVersion = probeVersion(() => execFileSync('git', ['--version'], { encoding: 'utf-8', timeout: DETECT_TIMEOUT_MS }));
+    if (gitVersion !== null) {
         result.hasGit = true;
     }
-    catch {
-        result.hasGit = false;
-    }
     return result;
 }
 /**
@@ -157,6 +192,33 @@ function checkPortListening(port) {
         socket.connect(port, '127.0.0.1');
     });
 }
+/**
+ * 从 netstat -ano -p tcp 输出解析监听指定端口的 PID。
+ * 行形如：TCP  0.0.0.0:135  0.0.0.0:0  LISTENING  1234（IPv6 本地地址为 [::]:port）。
+ * rc-1/rc-5: 按 unknown 语义逐字段校验，键/列缺失即跳过，不信任列位置。
+ */
+export function parseNetstatPid(output, port) {
+    for (const line of output.split('\n')) {
+        const parts = line.trim().split(/\s+/);
+        if (parts.length < 5)
+            continue;
+        // parts.length >= 5 已守卫，[0],[1],[3],[4] 存在；`?? ''` 仅为满足严格类型
+        const proto = parts[0] ?? '';
+        const local = parts[1] ?? '';
+        const state = parts[3] ?? '';
+        const pidField = parts[4] ?? '';
+        if (proto !== 'TCP' || state !== 'LISTENING')
+            continue;
+        if (!local.endsWith(`:${port}`))
+            continue;
+        if (!/^\d+$/.test(pidField))
+            continue;
+        const pid = parseInt(pidField, 10);
+        if (Number.isInteger(pid) && pid > 0)
+            return pid;
+    }
+    return undefined;
+}
 export async function checkOpenClawGateway() {
     const port = readOpenClawPort();
     if (!port)
@@ -166,20 +228,29 @@ export async function checkOpenClawGateway() {
         return { isRunning: false };
     let pid = undefined;
     try {
-        if (process.platform === 'win32') {
-            const output = execSync(`powershell -NoProfile -Command "(Get-NetTCPConnection -LocalPort ${port} -State Listen -ErrorAction SilentlyContinue).OwningProcess"`, { encoding: 'utf-8', timeout: 5000 }).trim();
-            if (output) {
-                const [firstLine] = output.split('\n');
-                if (firstLine)
-                    pid = parseInt(firstLine.trim(), 10);
-            }
-        }
-        else {
-            const output = execSync(`lsof -i :${port} -t -sTCP:LISTEN 2>/dev/null`, { encoding: 'utf-8', timeout: 5000 }).trim();
-            if (output) {
-                const [firstLine] = output.split('\n');
-                if (firstLine)
-                    pid = parseInt(firstLine.trim(), 10);
+        // ERR-045: argv-array execution only. The validated port is an argv
+        // element or a JS-side output match — it never enters a shell string.
+        if (Number.isInteger(port) && port > 0 && port < 65536) {
+            const output = IS_WIN32
+                ? execFileSync('netstat.exe', ['-ano', '-p', 'tcp'], { encoding: 'utf-8', timeout: 5000 })
+                : execFileSync('lsof', ['-i', `:${port}`, '-t', '-sTCP:LISTEN'], { encoding: 'utf-8', timeout: 5000 });
+            const text = output.trim();
+            if (text) {
+                let listeningLine;
+                if (IS_WIN32) {
+                    listeningLine = text.split('\n').find((line) => {
+                        const [, localAddress, , state] = line.trim().split(/\s+/);
+                        return state === 'LISTENING' && localAddress !== undefined && localAddress.endsWith(`:${port}`);
+                    });
+                }
+                else {
+                    [listeningLine] = text.split('\n');
+                }
+                const pidColumn = IS_WIN32
+                    ? listeningLine?.trim().split(/\s+/)[4]
+                    : listeningLine?.trim();
+                if (pidColumn)
+                    pid = parseInt(pidColumn, 10);
             }
         }
     }
@@ -192,13 +263,32 @@ export async function checkOpenClawGateway() {
  * structured reason + nextAction instead of crashing mid-install.
  */
 function runGatewayServiceCommand(subcommand) {
+    const failedOperation = `openclaw gateway ${subcommand}`;
     try {
-        execSync(`openclaw gateway ${subcommand}`, { stdio: 'pipe', encoding: 'utf-8', timeout: 15000 });
+        // ERR-045: argv-array execution only. Every branch below is fully
+        // literal (compile-time subcommand union), so nothing runtime-derived
+        // is ever interpolated into a command line.
+        if (subcommand === 'stop') {
+            if (IS_WIN32) {
+                execFileSync('cmd.exe', ['/c', 'openclaw', 'gateway', 'stop'], { encoding: 'utf-8', timeout: 15000, windowsHide: true });
+            }
+            else {
+                execFileSync('openclaw', ['gateway', 'stop'], { encoding: 'utf-8', timeout: 15000 });
+            }
+        }
+        else {
+            if (IS_WIN32) {
+                execFileSync('cmd.exe', ['/c', 'openclaw', 'gateway', 'start'], { encoding: 'utf-8', timeout: 15000, windowsHide: true });
+            }
+            else {
+                execFileSync('openclaw', ['gateway', 'start'], { encoding: 'utf-8', timeout: 15000 });
+            }
+        }
         return { ok: true };
     }
     catch (e) {
         const msg = e instanceof Error ? e.message : String(e);
-        return { ok: false, error: `\`openclaw gateway ${subcommand}\` failed: ${msg}` };
+        return { ok: false, error: `${failedOperation} failed: ${msg}` };
     }
 }
 /**

package/dist/utils/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAoB3B;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAmB;QAC7B,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,KAAK;KACd,CAAC;IAEF,aAAa;IACb,IAAI,CAAC;QACH,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,cAAc;IACd,IAAI,CAAC;QACH,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtF,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;QACd,IAAI,CAAC;YACH,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnF,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,YAAY;IACZ,IAAI,CAAC;QACH,MAAM,CAAC,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjG,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC;QACrC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,SAAS;IACT,IAAI,CAAC;QACH,QAAQ,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;IACxB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,YAAY;IACZ,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChD,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAE9D,oBAAoB;IACpB,MAAM,UAAU,GAAG;QACjB,WAAW;QACX,SAAS;QACT,SAAS;KACV,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,uEAAuE;YACvE,8DAA8D;YAC9D,mEAAmE;YACnE,6DAA6D;YAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;YAC7E,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAEpD,aAAa;YACb,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC9C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAED,qCAAqC;YACrC,MAAM,cAAc,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YAEhE,OAAO;gBACL,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,IAAI;gBACZ,aAAa;gBACb,cAAc;gBACd,SAAS;aACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO;QACL,YAAY,EAAE,WAAW;QACzB,MAAM,EAAE,KAAK;QACb,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,IAAI;QACpB,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC;AAChF,CAAC;AAQD,SAAS,gBAAgB;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,eAAe,CAAC,CAAC;IACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAiC,CAAC;YACtD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAkC,CAAC;gBACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;oBAAE,OAAO,IAAI,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAEvC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAE5C,IAAI,GAAG,GAAuB,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,QAAQ,CACrB,oEAAoE,IAAI,8DAA8D,EACtI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CACrC,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,SAAS;oBAAE,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,IAAI,8BAA8B,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrH,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,SAAS;oBAAE,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAExB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACxC,CAAC;AAOD;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,UAA4B;IAC5D,IAAI,CAAC;QACH,QAAQ,CAAC,oBAAoB,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,UAAU,cAAc,GAAG,EAAE,EAAE,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAqB3B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE9C,mDAAmD;AACnD,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B;;;;GAIG;AACH,SAAS,YAAY,CAAC,KAAmB;IACvC,IAAI,CAAC;QACH,OAAO,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAmB;QAC7B,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,KAAK;KACd,CAAC;IAEF,qDAAqD;IACrD,sDAAsD;IACtD,qDAAqD;IACrD,YAAY;IACZ,MAAM,WAAW,GAAG,QAAQ;QAC1B,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACtH,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACxG,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;QACjC,qDAAqD;QACrD,uCAAuC;QACvC,qCAAqC;QACrC,iEAAiE;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;IAClE,CAAC;IAED,iEAAiE;IACjE,MAAM,eAAe,GAAG,QAAQ;QAC9B,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACjI,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACnH,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC;QACzC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,cAAc;QACd,MAAM,YAAY,GAAG,QAAQ;YAC3B,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9H,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAChH,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,eAAe,GAAG,YAAY,CAAC;YACtC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,IAAI,aAAa,GAAkB,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACjJ,IAAI,aAAa,KAAK,IAAI,IAAI,QAAQ,EAAE,CAAC;QACvC,aAAa,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAC/H,CAAC;IACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,SAAS;IACT,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAC7H,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,YAAY;IACZ,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChD,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAE9D,oBAAoB;IACpB,MAAM,UAAU,GAAG;QACjB,WAAW;QACX,SAAS;QACT,SAAS;KACV,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,uEAAuE;YACvE,8DAA8D;YAC9D,mEAAmE;YACnE,6DAA6D;YAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;YAC7E,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAEpD,aAAa;YACb,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC9C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAED,qCAAqC;YACrC,MAAM,cAAc,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YAEhE,OAAO;gBACL,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,IAAI;gBACZ,aAAa;gBACb,cAAc;gBACd,SAAS;aACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO;QACL,YAAY,EAAE,WAAW;QACzB,MAAM,EAAE,KAAK;QACb,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,IAAI;QACpB,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC;AAChF,CAAC;AAQD,SAAS,gBAAgB;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,eAAe,CAAC,CAAC;IACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAiC,CAAC;YACtD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAkC,CAAC;gBACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;oBAAE,OAAO,IAAI,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,IAAY;IAC1D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,4DAA4D;QAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,WAAW;YAAE,SAAS;QACvD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,SAAS;QAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAEvC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAE5C,IAAI,GAAG,GAAuB,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,QAAQ;gBACrB,CAAC,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC1F,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACzG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,aAAiC,CAAC;gBACtC,IAAI,QAAQ,EAAE,CAAC;oBACb,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;wBAC7C,MAAM,CAAC,EAAE,YAAY,EAAE,AAAD,EAAG,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBAC3D,OAAO,KAAK,KAAK,WAAW,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;oBAClG,CAAC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrC,CAAC;gBACD,MAAM,SAAS,GAAG,QAAQ;oBACxB,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACvC,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;gBAC1B,IAAI,SAAS;oBAAE,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAExB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACxC,CAAC;AAOD;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,UAA4B;IAC5D,MAAM,eAAe,GAAG,oBAAoB,UAAU,EAAE,CAAC;IACzD,IAAI,CAAC;QACH,kEAAkE;QAClE,sEAAsE;QACtE,4CAA4C;QAC5C,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,QAAQ,EAAE,CAAC;gBACb,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3H,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,QAAQ,EAAE,CAAC;gBACb,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5H,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,eAAe,YAAY,GAAG,EAAE,EAAE,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/host-runtime/dist/governance-observation-store.d.ts

@@ -0,0 +1,172 @@
+import Database from 'better-sqlite3';
+export declare const GOVERNANCE_RETENTION_MAX_TURNS = 32;
+export declare const GOVERNANCE_RETENTION_MAX_AGE_MS: number;
+export declare const GOVERNANCE_PROMOTION_PRECEDING_TURNS = 12;
+export declare const GOVERNANCE_PENDING_TAIL_STALE_MS: number;
+export type GovernanceObservationKind = 'user_turn' | 'assistant_turn' | 'tool_call';
+export type GovernanceObservationSource = 'live_hook' | 'transcript';
+export type GovernanceObservationCompleteness = 'complete' | 'partial';
+export type GovernanceRetentionClass = 'operational' | 'promoted' | 'expired' | 'rolled_back';
+export interface GovernanceObservationInput {
+    readonly hostKind: 'codex';
+    readonly rolloutIdentity: string;
+    readonly rootSessionId: string;
+    readonly parentRolloutIdentity?: string;
+    readonly agentIdentity?: string;
+    readonly agentDepth?: number;
+    readonly hostTurnId: string;
+    readonly kind: GovernanceObservationKind;
+    /** Semantic convergence identity (SPEC §6). Built by the host adapter. */
+    readonly logicalObservationKey: string;
+    /** Physical replay identity: `host|rollout|ordinal` (SPEC §6). */
+    readonly transcriptRecordKey?: string;
+    /**
+     * Byte offset of the source record start — the durable transcript SOURCE
+     * ORDER (records are append-only, so byte position is strictly increasing
+     * within one rollout). All before/after/last-N/next-assistant logic orders
+     * by this value, never by the SQLite insertion id: a live hook row is
+     * inserted BEFORE the older history that a later catch-up ingests, so
+     * insertion order is not transcript order (PR #1455 review P1).
+     */
+    readonly recordByteStart?: number;
+    /** Per-rollout physical record ordinal (G1 §4) — tiebreaker/telemetry alongside the byte order. */
+    readonly recordOrdinal?: number;
+    readonly assistantItemId?: string;
+    /** assistant phase: 'commentary' | 'final_answer' (assistant_turn only). */
+    readonly phase?: string;
+    readonly toolUseId?: string;
+    /** Transcript model-level call id (call_*) — different id space than toolUseId. */
+    readonly transcriptToolCallId?: string;
+    readonly visibleText?: string;
+    readonly toolFacts?: unknown;
+    readonly source: GovernanceObservationSource;
+    readonly completeness: GovernanceObservationCompleteness;
+    readonly observedAt: string;
+}
+export interface GovernanceCheckpointInput {
+    readonly hostKind: 'codex';
+    readonly rolloutIdentity: string;
+    readonly byteOffset: number;
+    readonly lastOrdinal: number;
+    readonly cliVersion?: string;
+    readonly rootSessionId: string;
+    readonly incompleteTail: boolean;
+}
+export interface GovernanceIngestDegradation {
+    readonly reason: string;
+    readonly ordinal?: number;
+    readonly nextAction?: string;
+}
+export interface IngestGovernanceObservationsResult {
+    readonly ok: boolean;
+    readonly reason?: string;
+    readonly nextAction?: string;
+    readonly inserted: number;
+    readonly enriched: number;
+    readonly duplicates: number;
+    readonly checkpointCommitted: boolean;
+    readonly warnings: readonly string[];
+}
+export interface GovernanceCheckpointRecord {
+    readonly hostKind: string;
+    readonly rolloutIdentity: string;
+    readonly byteOffset: number;
+    readonly lastOrdinal: number;
+    readonly cliVersion: string | null;
+    readonly rootSessionId: string;
+    readonly incompleteTail: boolean;
+    readonly lastDegradationReason: string | null;
+    readonly lastDegradationOrdinal: number | null;
+    readonly updatedAt: string;
+}
+export interface GovernanceObservationRecord {
+    readonly id: number;
+    readonly rolloutIdentity: string;
+    readonly rootSessionId: string;
+    readonly hostTurnId: string;
+    readonly kind: GovernanceObservationKind;
+    readonly logicalKey: string;
+    readonly transcriptRecordKey: string | null;
+    readonly sourceOrder: number | null;
+    readonly sourceOrdinal: number | null;
+    readonly assistantItemId: string | null;
+    readonly phase: string | null;
+    readonly toolUseId: string | null;
+    readonly transcriptToolCallId: string | null;
+    readonly visibleText: string | null;
+    readonly sanitizedToolFactsJson: string | null;
+    readonly source: GovernanceObservationSource;
+    readonly completeness: GovernanceObservationCompleteness;
+    readonly retentionClass: GovernanceRetentionClass;
+    readonly observedAt: string;
+    readonly promotionRef: string | null;
+}
+export interface PromoteGovernanceEvidenceInput {
+    readonly workspaceDir: string;
+    readonly hostKind: 'codex';
+    readonly rolloutIdentity: string;
+    readonly triggerLogicalKey: string;
+    /** Caller-provided pain reference. Slice A never mints a pain identity (SPEC §18). */
+    readonly painRef: string;
+    readonly now?: Date;
+    readonly databaseFactory?: ObservationDatabaseFactory;
+}
+export type PromoteGovernanceEvidenceResult = {
+    ok: true;
+    promoted: number;
+    tailState: 'completed' | 'pending';
+    warnings: readonly string[];
+} | {
+    ok: false;
+    reason: string;
+    nextAction: string;
+};
+export type ObservationDatabaseFactory = (databasePath: string) => Database.Database;
+type Degradation = {
+    ok: false;
+    reason: string;
+    nextAction: string;
+};
+export interface GovernanceRolloutDescriptor {
+    readonly hostKind: 'codex';
+    readonly rolloutIdentity: string;
+    readonly rootSessionId: string;
+    readonly parentRolloutIdentity?: string;
+    readonly agentIdentity?: string;
+    readonly agentDepth?: number;
+}
+export interface IngestGovernanceObservationsInput {
+    readonly workspaceDir: string;
+    /** Rollout lineage, established even when a delta contains no projected observations (markers/skips only). */
+    readonly rollout?: GovernanceRolloutDescriptor;
+    readonly observations: readonly GovernanceObservationInput[];
+    readonly checkpoint?: GovernanceCheckpointInput;
+    readonly degradations?: readonly GovernanceIngestDegradation[];
+    readonly compactionTimestamp?: string;
+    /** Sequential rollback markers (num_turns each) decoded from the transcript delta. */
+    readonly rollbackTurns?: readonly number[];
+    readonly now?: Date;
+    readonly databaseFactory?: ObservationDatabaseFactory;
+}
+export declare function ingestGovernanceObservations(input: IngestGovernanceObservationsInput): IngestGovernanceObservationsResult;
+export interface ReadGovernanceCheckpointArgs {
+    readonly workspaceDir: string;
+    readonly hostKind: 'codex';
+    readonly rolloutIdentity: string;
+    readonly databaseFactory?: ObservationDatabaseFactory;
+}
+export declare function readGovernanceCheckpoint(args: ReadGovernanceCheckpointArgs): GovernanceCheckpointRecord | null | Degradation;
+export interface ListGovernanceObservationsInput {
+    readonly workspaceDir: string;
+    readonly rolloutIdentity?: string;
+    readonly retentionClass?: GovernanceRetentionClass;
+    readonly limit?: number;
+    readonly databaseFactory?: ObservationDatabaseFactory;
+}
+export type ListGovernanceObservationsResult = {
+    ok: true;
+    observations: readonly GovernanceObservationRecord[];
+} | Degradation;
+export declare function listGovernanceObservations(input: ListGovernanceObservationsInput): ListGovernanceObservationsResult;
+export declare function promoteGovernanceEvidence(input: PromoteGovernanceEvidenceInput): PromoteGovernanceEvidenceResult;
+export {};