create-principles-disciple 1.133.0 → 1.133.1

package/dist/installers/codex-host-installer.js

@@ -23,13 +23,20 @@
  * merge into it, never overwrite. The marker file is our own bookkeeping
  * for precise uninstall.
  */
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { existsSync, readFileSync, writeFileSync } from 'fs';
 import { execSync } from 'child_process';
 import * as path from 'path';
 import * as os from 'os';
 import { createRequire } from 'module';
 import { pathToFileURL } from 'url';
 import { isNpmDependencyResolutionEnabled } from '../installer.js';
+// NOTE (PRI-625 review round 3 / PRI-669 gate): this installer ships as the
+// self-contained npx package — @principles/core is NOT in its dependencies,
+// and type-only imports are erased at compile time, so the import above is
+// safe. The legacy-registration PARSER must therefore NOT be value-imported
+// here. Its single authority lives in @principles/core/host
+// (parseLegacyCodexHooksRegistration); the local classification below is the
+// npx-parity edge, and a CI parity test pins the two shapes together.
 const requireFromModule = createRequire(import.meta.url);
 // ─── Codex hook event names (SPEC v4.1 §5.7) ────────────────────────────────
 const CODEX_EVENTS = ['PreToolUse', 'PostToolUse', 'UserPromptSubmit', 'SessionStart'];
@@ -129,73 +136,11 @@ export function resolvePdHookPath(deps = {}) {
     return undefined;
 }
 /**
- * Build the hook command string for hooks.json.
- *
- * The wrapper script sets PD_HOST_CODEX_ENABLED=1 and PD_WORKSPACE_DIR before
- * invoking pd-hook.js. This is cross-platform (no shell-specific env var syntax).
+ * Hook entry / matcher-group shapes (rc-2 typing for detectLegacyCodexHookRegistration).
+ * The builder that CREATED these groups was retired with the legacy installer
+ * (SPEC rev 2 §17); the shapes remain because uninstall and the legacy
+ * detector must still recognize what old installers wrote.
  */
-function buildHookCommand(entryScriptPath, _workspaceDir) {
-    // Unix command: node <entry>
-    // workspaceDir is injected by the wrapper script (pd-hook-entry.cjs), not here.
-    void _workspaceDir;
-    return `node "${entryScriptPath}"`;
-}
-function buildHookCommandWindows(entryScriptPath, _workspaceDir) {
-    // Windows command — same node invocation; the entry script handles env internally
-    void _workspaceDir;
-    return `node "${entryScriptPath}"`;
-}
-function buildMatcherGroup(eventName, entryScriptPath, workspaceDir) {
-    const command = buildHookCommand(entryScriptPath, workspaceDir);
-    const commandWindows = buildHookCommandWindows(entryScriptPath, workspaceDir);
-    switch (eventName) {
-        case 'PreToolUse':
-            return {
-                matcher: 'Bash|apply_patch',
-                hooks: [{
-                        type: 'command',
-                        command,
-                        commandWindows,
-                        timeout: 5,
-                        statusMessage: 'PD: checking tool call',
-                    }],
-            };
-        case 'PostToolUse':
-            return {
-                matcher: '.*',
-                hooks: [{
-                        type: 'command',
-                        command,
-                        commandWindows,
-                        timeout: 5,
-                        async: true,
-                        statusMessage: 'PD: capturing pain signal',
-                    }],
-            };
-        case 'UserPromptSubmit':
-            return {
-                hooks: [{
-                        type: 'command',
-                        command,
-                        commandWindows,
-                        timeout: 5,
-                        additionalContextLimit: 10000,
-                        statusMessage: 'PD: injecting principles',
-                    }],
-            };
-        case 'SessionStart':
-            return {
-                hooks: [{
-                        type: 'command',
-                        command,
-                        commandWindows,
-                        timeout: 600,
-                        additionalContextLimit: 10000,
-                        statusMessage: 'PD: hydrating state',
-                    }],
-            };
-    }
-}
 // ─── Wrapper script content ─────────────────────────────────────────────────
 /**
  * Generate the wrapper script that sets env vars and imports pd-hook.js.
@@ -221,144 +166,83 @@ export function buildWrapperScriptContent(pdHookPath, workspaceDir) {
         '',
     ].join('\n');
 }
+// ─── Legacy registration detection (Slice D, SPEC rev 2 §17) ────────────────
+// The single PARSING authority lives in @principles/core/host
+// (parseLegacyCodexHooksRegistration — pure, no I/O). This installer is the
+// npx-parity FS edge: same classification semantics, mirrored here because
+// @principles/core is not a runtime dependency of this self-contained
+// package. CI pins the two shapes together (codex-host-installer.test.ts →
+// parseLegacyCodexHooksRegistration parity).
+export function detectLegacyCodexHookRegistration(hooksJsonPathOverride) {
+    const hooksJsonPath = hooksJsonPathOverride ?? getCodexHooksJsonPath();
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(hooksJsonPath, 'utf-8'));
+    }
+    catch {
+        return { detected: false, legacyAsyncPostToolUse: false };
+    }
+    // npx-parity mirror of @principles/core/host parseLegacyCodexHooksRegistration
+    // (kept here because @principles/core is not a runtime dep of this package;
+    // parity with the core parser is enforced by codex-host-installer.test.ts).
+    if (!isRecord(parsed))
+        return { detected: false, legacyAsyncPostToolUse: false };
+    let detected = false;
+    let legacyAsyncPostToolUse = false;
+    for (const eventName of CODEX_EVENTS) {
+        const groups = parsed[eventName];
+        if (!isUnknownArray(groups))
+            continue;
+        for (const group of groups) {
+            if (!(isRecord(group) && Object.hasOwn(group, '__pd_marker') && group.__pd_marker === 'pd-owned'))
+                continue;
+            detected = true;
+            const entries = group.hooks;
+            if (!isUnknownArray(entries))
+                continue;
+            for (const entry of entries) {
+                if (isRecord(entry) && eventName === 'PostToolUse' && Object.hasOwn(entry, 'async') && entry.async === true) {
+                    legacyAsyncPostToolUse = true;
+                }
+            }
+        }
+    }
+    return { detected, legacyAsyncPostToolUse };
+}
 // ─── CodexHostInstaller ─────────────────────────────────────────────────────
 export class CodexHostInstaller {
     hostId = 'codex';
-    async install(ctx) {
-        const pdCodexDir = getPdCodexDir();
+    /**
+     * RETIRED for new registrations (Codex Governance Closure Slice D; SPEC rev
+     * 2 §17 — the Marketplace plugin is the only supported new install path;
+     * this legacy global-hook installer is migration/uninstall-only).
+     *
+     * This method NEVER writes hook registrations anymore. It returns a
+     * structured refusal that points at the supported path, and when a legacy
+     * PD global registration is detected it offers the explicit migration
+     * route (precise uninstall → Marketplace plugin → $pd-setup consent).
+     */
+    async install(_ctx) {
         const hooksJsonPath = getCodexHooksJsonPath();
-        const markerPath = getPdHookMarkerPath();
-        // 1. Resolve codex-adapter pd-hook.js
-        const pdHookPath = resolvePdHookPath();
-        if (!pdHookPath) {
-            return {
-                success: false,
-                hostId: this.hostId,
-                configPath: hooksJsonPath,
-                configAction: 'skipped',
-                reason: '@principles/codex-adapter is not installed. The codex-adapter package provides the pd-hook.js entry Codex spawns.',
-                nextAction: 'Install it first: npm install -g @principles/codex-adapter, then re-run: npx create-principles-disciple install --host codex',
-            };
-        }
-        // 2. Write wrapper script to ~/.pd/codex/pd-hook-entry.cjs
-        //    (marker file is written AFTER mergeHooksJson succeeds — see step 3.
-        //    Writing the marker before the merge would make detect() report a
-        //    failed install as installed, violating rc-3-fail-loud-missing.)
-        try {
-            if (!existsSync(pdCodexDir)) {
-                mkdirSync(pdCodexDir, { recursive: true });
-            }
-            const wrapperPath = path.join(pdCodexDir, 'pd-hook-entry.cjs');
-            const wrapperContent = buildWrapperScriptContent(pdHookPath, ctx.workspaceDir);
-            writeFileSync(wrapperPath, wrapperContent, { encoding: 'utf-8' });
-            // 3. Merge PD hook entries into ~/.codex/hooks.json (append, never overwrite).
-            //    If hooks.json is malformed, mergeHooksJson returns 'preserved' without
-            //    writing any PD entries. This MUST surface as a failure (rc-3 / rc-9)
-            //    — otherwise the user would see "install succeeded" while Codex never
-            //    triggers PD hooks. The marker is NOT written in this branch, so
-            //    detect() correctly reports "not installed".
-            const configAction = this.mergeHooksJson(hooksJsonPath, wrapperPath, ctx.workspaceDir);
-            if (configAction === 'preserved') {
-                return {
-                    success: false,
-                    hostId: this.hostId,
-                    configPath: hooksJsonPath,
-                    configAction,
-                    reason: `${hooksJsonPath} is malformed (not a JSON object). PD did not write any hook entries to avoid overwriting the user's config.`,
-                    nextAction: `Manually fix ${hooksJsonPath} (must be a JSON object), then re-run: npx create-principles-disciple install --host codex`,
-                };
-            }
-            // 4. Merge succeeded — now safe to record the marker. detect() will
-            //    only report installed when hooks.json actually contains PD entries.
-            writeFileSync(markerPath, JSON.stringify({
-                installedAt: new Date().toISOString(),
-                workspaceDir: ctx.workspaceDir,
-                pdHookPath,
-                wrapperPath,
-                events: CODEX_EVENTS,
-            }, null, 2), { encoding: 'utf-8' });
-            return {
-                success: true,
-                hostId: this.hostId,
-                configPath: hooksJsonPath,
-                configAction,
-                nextAction: 'Open Codex and run /hooks to trust PD hooks before they execute. Verify with: codex doctor (hooks feature should be ON).',
-            };
-        }
-        catch (err) {
-            const reason = err instanceof Error ? err.message : String(err);
+        const legacy = detectLegacyCodexHookRegistration();
+        if (legacy.detected) {
             return {
                 success: false,
                 hostId: this.hostId,
                 configPath: hooksJsonPath,
                 configAction: 'skipped',
-                reason: `Failed to write Codex hook config: ${reason}`,
-                nextAction: `Check write permissions on ${pdCodexDir} and ${hooksJsonPath}, then re-run installer.`,
+                reason: 'A legacy PD global Codex hook registration was detected (async PostToolUse in ~/.codex/hooks.json). The legacy global installer is retired (SPEC rev 2 §17) and cannot update it.',
+                nextAction: 'Migrate to the Marketplace plugin: 1) npx create-principles-disciple uninstall --host codex  (removes ONLY PD-owned entries; evidence is preserved); 2) codex plugin add principles-disciple@principles; 3) run the plugin setup ($pd-setup) — it presents the ingestion disclosure and records consent.',
             };
         }
-    }
-    /**
-     * Merge PD hook entries into ~/.codex/hooks.json.
-     * - If file doesn't exist: create it with PD entries (configAction = 'created').
-     * - If file exists: merge PD entries into existing event arrays (configAction = 'updated').
-     * - Idempotent: re-running install replaces PD entries (matched by marker), not duplicates.
-     */
-    // eslint-disable-next-line @typescript-eslint/class-methods-use-this
-    mergeHooksJson(hooksJsonPath, wrapperPath, workspaceDir) {
-        const codexDir = getCodexDir();
-        if (!existsSync(codexDir)) {
-            mkdirSync(codexDir, { recursive: true });
-        }
-        let existing = {};
-        let action = 'created';
-        // CodeQL TOCTOU fix: try/catch read instead of existsSync+readFileSync.
-        // ENOENT → 'created' (file doesn't exist yet); other parse errors → 'preserved'.
-        try {
-            const raw = readFileSync(hooksJsonPath, 'utf-8');
-            const parsed = JSON.parse(raw);
-            if (isRecord(parsed)) {
-                existing = { ...parsed };
-                action = 'updated';
-            }
-            else {
-                // Malformed — back off, don't overwrite
-                action = 'preserved';
-            }
-        }
-        catch (err) {
-            const code = getErrorCode(err);
-            if (code === 'ENOENT') {
-                // File doesn't exist — 'created' (default action stays)
-            }
-            else {
-                // Malformed JSON — back off
-                action = 'preserved';
-            }
-        }
-        if (action === 'preserved') {
-            return action;
-        }
-        // For each Codex event, replace any existing PD-owned matcher groups
-        // with our fresh set (idempotent — re-install doesn't duplicate).
-        const PD_MARKER = 'pd-owned';
-        for (const eventName of CODEX_EVENTS) {
-            const group = buildMatcherGroup(eventName, wrapperPath, workspaceDir);
-            // Tag the group so uninstall can find PD-owned entries precisely.
-            group.__pd_marker = PD_MARKER;
-            const existingGroups = existing[eventName];
-            if (isUnknownArray(existingGroups)) {
-                // Filter out previously-PD-owned groups, then append the new one.
-                // rc-2: no `as` bypass — use Object.hasOwn to check marker presence.
-                const filtered = existingGroups.filter((g) => !(isRecord(g) && Object.hasOwn(g, '__pd_marker') && g.__pd_marker === PD_MARKER));
-                filtered.push(group);
-                existing[eventName] = filtered;
-            }
-            else {
-                existing[eventName] = [group];
-            }
-        }
-        writeFileSync(hooksJsonPath, JSON.stringify(existing, null, 2), { encoding: 'utf-8' });
-        return action;
+        return {
+            success: false,
+            hostId: this.hostId,
+            configPath: hooksJsonPath,
+            configAction: 'skipped',
+            reason: 'New Codex global hook registrations are retired (SPEC rev 2 §17). The Marketplace plugin is the only supported new install path for Codex.',
+            nextAction: 'Install the plugin: codex plugin add principles-disciple@principles — then run its setup ($pd-setup), which verifies Node/runtime/workspace/trust and records the conversation-ingestion consent.',
+        };
     }
     async uninstall(_ctx) {
         const hooksJsonPath = getCodexHooksJsonPath();

package/dist/installers/codex-host-installer.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex-host-installer.js","sourceRoot":"","sources":["../../src/installers/codex-host-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AAUnE,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc,CAAU,CAAC;AAGhG,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,GAAyB,CAAC;QAC3C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,gBAAgB;IACvB,2EAA2E;IAC3E,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,CAAC,gCAAgC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrG,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC;QACH,uEAAuE;QACvE,sDAAsD;QACtD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,iBAAiB,CAAC,IAAI,GAAmB,EAAE;IACzD,MAAM,YAAY,GAA8C,IAAI,CAAC,YAAY;WAC5E,CAAC,CAAC,SAAS,EAAE,EAAE;YAChB,IAAI,CAAC;gBAAC,OAAO,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,gBAAgB,CAAC;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,2BAA2B,CAAC;IAE1E,MAAM,KAAK,GAAG,YAAY,CAAC,mCAAmC,CAAC,CAAC;IAChE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,eAAuB,EAAE,aAAqB;IACtE,6BAA6B;IAC7B,gFAAgF;IAChF,KAAK,aAAa,CAAC;IACnB,OAAO,SAAS,eAAe,GAAG,CAAC;AACrC,CAAC;AAED,SAAS,uBAAuB,CAAC,eAAuB,EAAE,aAAqB;IAC7E,kFAAkF;IAClF,KAAK,aAAa,CAAC;IACnB,OAAO,SAAS,eAAe,GAAG,CAAC;AACrC,CAAC;AAyBD,SAAS,iBAAiB,CACxB,SAAyB,EACzB,eAAuB,EACvB,YAAoB;IAEpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,uBAAuB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAE9E,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,YAAY;YACf,OAAO;gBACL,OAAO,EAAE,kBAAkB;gBAC3B,KAAK,EAAE,CAAC;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO;wBACP,cAAc;wBACd,OAAO,EAAE,CAAC;wBACV,aAAa,EAAE,wBAAwB;qBACxC,CAAC;aACH,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,CAAC;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO;wBACP,cAAc;wBACd,OAAO,EAAE,CAAC;wBACV,KAAK,EAAE,IAAI;wBACX,aAAa,EAAE,2BAA2B;qBAC3C,CAAC;aACH,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO;gBACL,KAAK,EAAE,CAAC;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO;wBACP,cAAc;wBACd,OAAO,EAAE,CAAC;wBACV,sBAAsB,EAAE,KAAK;wBAC7B,aAAa,EAAE,0BAA0B;qBAC1C,CAAC;aACH,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,KAAK,EAAE,CAAC;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO;wBACP,cAAc;wBACd,OAAO,EAAE,GAAG;wBACZ,sBAAsB,EAAE,KAAK;wBAC7B,aAAa,EAAE,qBAAqB;qBACrC,CAAC;aACH,CAAC;IACN,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,YAAoB;IAChF,OAAO;QACL,qBAAqB;QACrB,iFAAiF;QACjF,oEAAoE;QACpE,+DAA+D;QAC/D,EAAE;QACF,0CAA0C;QAC1C,kCAAkC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG;QACjE,EAAE;QACF,kDAAkD;QAClD,sEAAsE;QACtE,uEAAuE;QACvE,sDAAsD;QACtD,UAAU,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI;QAC5D,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,OAAO,kBAAkB;IACpB,MAAM,GAAG,OAAO,CAAC;IAE1B,KAAK,CAAC,OAAO,CAAC,GAAuB;QACnC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QAEzC,sCAAsC;QACtC,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,aAAa;gBACzB,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,mHAAmH;gBAC3H,UAAU,EAAE,8HAA8H;aAC3I,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,yEAAyE;QACzE,sEAAsE;QACtE,qEAAqE;QACrE,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,yBAAyB,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/E,aAAa,CAAC,WAAW,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAElE,+EAA+E;YAC/E,4EAA4E;YAC5E,0EAA0E;YAC1E,0EAA0E;YAC1E,qEAAqE;YACrE,iDAAiD;YACjD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAEvF,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,aAAa;oBACzB,YAAY;oBACZ,MAAM,EAAE,GAAG,aAAa,8GAA8G;oBACtI,UAAU,EAAE,gBAAgB,aAAa,4FAA4F;iBACtI,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,yEAAyE;YACzE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;gBACvC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,UAAU;gBACV,WAAW;gBACX,MAAM,EAAE,YAAY;aACrB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAEpC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,aAAa;gBACzB,YAAY;gBACZ,UAAU,EAAE,0HAA0H;aACvI,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,aAAa;gBACzB,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,sCAAsC,MAAM,EAAE;gBACtD,UAAU,EAAE,8BAA8B,UAAU,QAAQ,aAAa,0BAA0B;aACpG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,qEAAqE;IAC7D,cAAc,CACpB,aAAqB,EACrB,WAAmB,EACnB,YAAoB;QAEpB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,QAAQ,GAA4B,EAAE,CAAC;QAC3C,IAAI,MAAM,GAAwC,SAAS,CAAC;QAE5D,wEAAwE;QACxE,iFAAiF;QACjF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;gBACzB,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,wCAAwC;gBACxC,MAAM,GAAG,WAAW,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,wDAAwD;YAC1D,CAAC;iBAAM,CAAC;gBACN,4BAA4B;gBAC5B,MAAM,GAAG,WAAW,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,SAAS,GAAG,UAAU,CAAC;QAC7B,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;YACtE,kEAAkE;YAClE,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;YAE9B,MAAM,cAAc,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;gBACnC,kEAAkE;gBAClE,qEAAqE;gBACrE,MAAM,QAAQ,GAAc,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtD,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CACjF,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,QAAQ,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAA0B;QACxC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,8CAA8C;QAC9C,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;gBAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,SAAS,GAAG,UAAU,CAAC;gBAE7B,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;oBACjC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;wBAC7B,iEAAiE;wBACjE,MAAM,QAAQ,GAAc,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9C,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CACjF,CAAC;wBACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BAC1B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;wBAC3B,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;wBAC/B,CAAC;wBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;4BAAE,QAAQ,GAAG,IAAI,CAAC;oBAClD,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,EAAE,CAAC;oBACb,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBACrF,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,sEAAsE;YACxE,CAAC;iBAAM,CAAC;gBACN,6DAA6D;gBAC7D,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAC/D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY;YACZ,cAAc;YACd,MAAM,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,oCAAoC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjE,CAAC,CAAC,SAAS;YACb,UAAU,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,qBAAqB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAClD,CAAC,CAAC,iGAAiG;SACtG,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM;QACJ,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAEpE,MAAM,KAAK,GAAG;YACZ;gBACE,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC;gBAC9B,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,MAAe;aACtB;YACD;gBACE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC;gBAC/B,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,MAAe;aACtB;YACD;gBACE,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC;gBACjC,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,MAAe;aACtB;SACF,CAAC;QAEF,gFAAgF;QAChF,IAAI,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrB,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;wBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;wBACjC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAC/E,CAAC;4BACF,IAAI,KAAK,EAAE,CAAC;gCACV,SAAS,GAAG,IAAI,CAAC;gCACjB,MAAM;4BACR,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;YACjF,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"codex-host-installer.js","sourceRoot":"","sources":["../../src/installers/codex-host-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AAWnE,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,4DAA4D;AAC5D,6EAA6E;AAC7E,sEAAsE;AAEtE,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc,CAAU,CAAC;AAEhG,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,GAAyB,CAAC;QAC3C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,gBAAgB;IACvB,2EAA2E;IAC3E,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,CAAC,gCAAgC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrG,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC;QACH,uEAAuE;QACvE,sDAAsD;QACtD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,iBAAiB,CAAC,IAAI,GAAmB,EAAE;IACzD,MAAM,YAAY,GAA8C,IAAI,CAAC,YAAY;WAC5E,CAAC,CAAC,SAAS,EAAE,EAAE;YAChB,IAAI,CAAC;gBAAC,OAAO,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,gBAAgB,CAAC;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,2BAA2B,CAAC;IAE1E,MAAM,KAAK,GAAG,YAAY,CAAC,mCAAmC,CAAC,CAAC;IAChE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AAEH,+EAA+E;AAC/E;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,YAAoB;IAChF,OAAO;QACL,qBAAqB;QACrB,iFAAiF;QACjF,oEAAoE;QACpE,+DAA+D;QAC/D,EAAE;QACF,0CAA0C;QAC1C,kCAAkC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG;QACjE,EAAE;QACF,kDAAkD;QAClD,sEAAsE;QACtE,uEAAuE;QACvE,sDAAsD;QACtD,UAAU,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI;QAC5D,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,8DAA8D;AAC9D,4EAA4E;AAC5E,2EAA2E;AAC3E,sEAAsE;AACtE,2EAA2E;AAC3E,6CAA6C;AAE7C,MAAM,UAAU,iCAAiC,CAAC,qBAA8B;IAC9E,MAAM,aAAa,GAAG,qBAAqB,IAAI,qBAAqB,EAAE,CAAC;IACvE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IACD,+EAA+E;IAC/E,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC;IACjF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAAE,SAAS;QACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC;gBAAE,SAAS;YAC5G,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAAE,SAAS;YACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,KAAK,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC5G,sBAAsB,GAAG,IAAI,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;AAC9C,CAAC;AAED,+EAA+E;AAC/E,MAAM,OAAO,kBAAkB;IACpB,MAAM,GAAG,OAAO,CAAC;IAE1B;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO,CAAC,IAAwB;QACpC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,iCAAiC,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,aAAa;gBACzB,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,mLAAmL;gBAC3L,UAAU,EAAE,0SAA0S;aACvT,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,aAAa;YACzB,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,4IAA4I;YACpJ,UAAU,EAAE,mMAAmM;SAChN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAA0B;QACxC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,8CAA8C;QAC9C,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;gBAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,SAAS,GAAG,UAAU,CAAC;gBAE7B,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;oBACjC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;wBAC7B,iEAAiE;wBACjE,MAAM,QAAQ,GAAc,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9C,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CACjF,CAAC;wBACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BAC1B,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;wBAC3B,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;wBAC/B,CAAC;wBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;4BAAE,QAAQ,GAAG,IAAI,CAAC;oBAClD,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,EAAE,CAAC;oBACb,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBACrF,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,sEAAsE;YACxE,CAAC;iBAAM,CAAC;gBACN,6DAA6D;gBAC7D,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAC/D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY;YACZ,cAAc;YACd,MAAM,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,oCAAoC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjE,CAAC,CAAC,SAAS;YACb,UAAU,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,qBAAqB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAClD,CAAC,CAAC,iGAAiG;SACtG,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM;QACJ,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAEpE,MAAM,KAAK,GAAG;YACZ;gBACE,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC;gBAC9B,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,MAAe;aACtB;YACD;gBACE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC;gBAC/B,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,MAAe;aACtB;YACD;gBACE,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC;gBACjC,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,MAAe;aACtB;SACF,CAAC;QAEF,gFAAgF;QAChF,IAAI,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrB,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;wBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;wBACjC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAC/E,CAAC;4BACF,IAAI,KAAK,EAAE,CAAC;gCACV,SAAS,GAAG,IAAI,CAAC;gCACjB,MAAM;4BACR,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;YACjF,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF"}

package/host-runtime/dist/codex-disclosure.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Codex conversation-ingestion consent disclosure — G2A frozen text (Slice D).
+ *
+ * The Chinese text below is copied VERBATIM from the Owner-approved decision
+ * package:
+ *   docs/superpowers/specs/2026-08-28-codex-governance-closure-g0-g2a-decision.md
+ *   § "Frozen consent disclosure text (setup will show this verbatim)"
+ *
+ * That document is the language SSoT. The frozen text "must not be weakened
+ * during implementation without a new Owner decision" — the guard test
+ * (codex-disclosure-g2a-guard.test.ts) re-extracts the frozen section from
+ * the document and asserts byte equality with this constant, so any drift
+ * here fails CI.
+ *
+ * The English rendering states the same facts; per the G2A binding note it is
+ * produced at setup implementation time from the frozen Chinese text. Setup
+ * surfaces always present the Chinese SSoT first.
+ */
+export declare const CODEX_INGESTION_DISCLOSURE_VERSION = "g2a-2026-08-28";
+export type CodexIngestionDisclosureLanguage = 'zh' | 'en';
+export declare const CODEX_INGESTION_DISCLOSURE_ZH = "### Principles Disciple \u2014 \u5BF9\u8BDD\u89C2\u5BDF\u4E0E\u6CBB\u7406\u95ED\u73AF\uFF08Codex\uFF09\n\n**\u5F00\u542F\u540E PD \u4F1A\u8BFB\u53D6\u4EC0\u4E48\uFF1F**\n\u8BFB\u53D6\u672C\u5DE5\u4F5C\u533A\u5185 Codex \u660E\u786E\u63D0\u4F9B\u7ED9 PD \u7684\u4F1A\u8BDD\u8BB0\u5F55\uFF08transcript\uFF09\u3002\u8FDB\u5165\u6CBB\u7406\u89C2\u5BDF\u7684\u53EA\u6709\u53EF\u89C1\u5185\u5BB9\uFF1A\u4F60\u53D1\u51FA\u7684\u6D88\u606F\u3001\u52A9\u624B\u7684\u53EF\u89C1\u56DE\u590D\u3001\u4EE5\u53CA\u5DE5\u5177\u8C03\u7528\u7684\u540D\u79F0/\u8F93\u5165/\u7ED3\u679C\uFF08\u7528\u4E8E\u8BC6\u522B\u53CD\u590D\u51FA\u73B0\u7684\u95EE\u9898\uFF09\u3002\u8BB0\u5F55\u4E2D\u540C\u65F6\u5B58\u5728\u7684\u9690\u85CF\u601D\u8003\u8FC7\u7A0B\uFF08Codex \u4EE5\u52A0\u5BC6\u5F62\u5F0F\u4FDD\u5B58\uFF09\u3001\u7CFB\u7EDF/\u5F00\u53D1\u8005\u63D0\u793A\u8BCD\u3001\u5BBF\u4E3B\u6CE8\u5165\u7684\u73AF\u5883\u4E0A\u4E0B\u6587\uFF0C\u4F1A\u5728\u89E3\u6790\u65F6\u88AB\u8BC6\u522B\u5E76\u4E22\u5F03\u2014\u2014\u4E0D\u4F1A\u88AB\u4FDD\u5B58\u3001\u4E0D\u4F1A\u8FDB\u5165\u65E5\u5FD7\u3001\u4E0D\u4F1A\u53D1\u9001\u7ED9\u8BCA\u65AD\u6A21\u578B\u3002\n\n**\u4E3A\u4EC0\u4E48\u8BFB\u53D6\uFF1F**\n\u4E3A\u4E86\u8BA9 PD \u5728 Codex \u4E0A\u5B8C\u6210\u5B83\u627F\u8BFA\u7684\u95ED\u73AF\uFF1A\u628A\u4F60\u53CD\u590D\u7EA0\u6B63\u7684\u5730\u65B9\u53D8\u6210\u4E00\u6761\u53EF\u5BA1\u67E5\u7684\u539F\u5219\u5019\u9009\u2014\u2014\u4F60\u9700\u8981\u5148\u770B\u5230\u8BC1\u636E\uFF0C\u518D\u51B3\u5B9A\u662F\u5426\u91C7\u7EB3\u3002\u4E0D\u89E3\u6790\u5BF9\u8BDD\uFF0CPD \u5C31\u53EA\u80FD\u7BA1\u5DE5\u5177\uFF0C\u5B66\u4E0D\u5230\u7EA0\u6B63\u3002\n\n**\u4FDD\u5B58\u591A\u5C11\u3001\u591A\u4E45\uFF1F**\n\u6BCF\u4E2A\u4F1A\u8BDD\u53EA\u4FDD\u7559\u6700\u8FD1 32 \u6761\u53EF\u89C1\u6D88\u606F\u3001\u6700\u591A 7 \u5929\uFF08\u5148\u5230\u671F\u5148\u5220\u9664\uFF09\u3002\u5F53\u67D0\u4E2A\u95EE\u9898\u88AB\u6B63\u5F0F\u7ACB\u4E3A pain \u65F6\uFF0C\u624D\u4F1A\u628A\u5B83\u7684\u524D 12 \u6761\u6D88\u606F + \u89E6\u53D1\u70B9 + \u52A9\u624B\u7684\u4E0B\u4E00\u6761\u5B8C\u6574\u56DE\u590D\u5347\u7EA7\u4E3A\u957F\u671F\u6CBB\u7406\u8BC1\u636E\uFF0C\u6309\u73B0\u6709\u6CBB\u7406\u6570\u636E\u7684\u751F\u547D\u5468\u671F\u7BA1\u7406\u3002\u4FDD\u5B58\u7684\u5DE5\u5177\u8BC1\u636E\u5728\u843D\u76D8\u524D\u4F1A\u7ECF\u8FC7\u65E2\u6709\u7684\u654F\u611F\u5B57\u6BB5\u4E0E\u5E38\u89C1\u5BC6\u94A5\u683C\u5F0F\u8131\u654F\uFF1B\u4F46\u8BF7\u6CE8\u610F\uFF1A\u5982\u679C\u4E00\u6BB5\u5BC6\u94A5\u770B\u8D77\u6765\u5C31\u50CF\u666E\u901A\u6587\u5B57\uFF0C\u4EFB\u4F55\u8FC7\u6EE4\u5668\u90FD\u65E0\u6CD5\u8BC6\u522B\u5B83\u2014\u2014\u8BF7\u4E0D\u8981\u8BA9 PD \u89C2\u5BDF\u5305\u542B\u6B64\u7C7B\u5185\u5BB9\u7684\u4F1A\u8BDD\u3002\n\n**\u6570\u636E\u4F1A\u79BB\u5F00\u672C\u673A\u5417\uFF1F**\n\u89C2\u5BDF\u6570\u636E\u672C\u8EAB\u53EA\u5B58\u5728\u672C\u673A\u5DE5\u4F5C\u533A\u3002\u88AB\u5347\u7EA7\u4E3A\u6CBB\u7406\u8BC1\u636E\u7684\u5BF9\u8BDD\u7247\u6BB5\uFF0C\u4F1A\u50CF\u73B0\u6709\u8BCA\u65AD\u6D41\u7A0B\u4E00\u6837\u53D1\u9001\u7ED9\u4F60\u914D\u7F6E\u7684 LLM API \u505A\u8BCA\u65AD\u2014\u2014\u8FD9\u662F\u552F\u4E00\u7684\u5916\u53D1\u8DEF\u5F84\uFF0C\u4E0E OpenClaw \u4E0A\u7684\u73B0\u6709\u884C\u4E3A\u4E00\u81F4\u3002\u4EA7\u54C1\u9065\u6D4B\u4E0D\u5305\u542B\u4EFB\u4F55\u6D88\u606F\u5185\u5BB9\u6216\u4F1A\u8BDD\u6807\u8BC6\u3002\n\n**\u5982\u4F55\u5173\u95ED\uFF1F\u968F\u65F6\u3002**\n\u5173\u95ED\u540E PD \u7ACB\u5373\u505C\u6B62\u8BFB\u53D6 transcript\uFF08\u4E0D\u662F\"\u8BFB\u4E86\u518D\u4E22\u5F03\"\uFF0C\u800C\u662F\u6839\u672C\u4E0D\u6253\u5F00\uFF09\u3002\u5DF2\u6709\u7684\u539F\u5219\u6CE8\u5165\u3001\u5DE5\u5177\u62E6\u622A\u3001\u65E2\u6709\u5DE5\u5177\u8BC1\u636E\u5B8C\u5168\u4E0D\u53D7\u5F71\u54CD\u3002\u5DF2\u4FDD\u5B58\u7684\u5185\u5BB9\u6309\u4E0A\u8FF0\u671F\u9650\u81EA\u7136\u8FC7\u671F\uFF1B\u5347\u7EA7\u8FC7\u7684\u8BC1\u636E\u53EA\u80FD\u7531\u4F60\u901A\u8FC7\u65E2\u6709\u6CBB\u7406\u6E05\u7406\u547D\u4EE4\u663E\u5F0F\u5220\u9664\u3002\u5378\u8F7D\u4E0D\u4F1A\u9759\u9ED8\u5220\u9664\u4EFB\u4F55\u8BC1\u636E\u3002\n\n**\u9ED8\u8BA4\u72B6\u6001\uFF1F**\n\u9ED8\u8BA4\u5173\u95ED\u3002\u53EA\u6709\u4F60\u5728\u770B\u5230\u672C\u8BF4\u660E\u540E\u660E\u786E\u9009\u62E9\u5F00\u542F\u624D\u4F1A\u751F\u6548\uFF1B\u5347\u7EA7 PD \u6C38\u8FDC\u4E0D\u4F1A\u66FF\u4F60\u5F00\u542F\u3002";
+export declare const CODEX_INGESTION_DISCLOSURE_EN = "### Principles Disciple \u2014 Conversation Observation & Governance Closure (Codex)\n\n**What does PD read once enabled?**\nPD reads the Codex session transcripts that Codex explicitly provides to PD inside this workspace. Only visible content enters governance observation: the messages you send, the assistant's visible replies, and the names/inputs/results of tool calls (used to recognize recurring problems). The hidden reasoning process that Codex stores in encrypted form, system/developer prompts, and host-injected environment context present in the same records are recognized and discarded during parsing \u2014 never saved, never written to logs, never sent to the diagnosis model.\n\n**Why read at all?**\nSo that PD can deliver on its promised closed loop on Codex: turning the places you repeatedly correct into a reviewable principle candidate \u2014 you see the evidence first, then decide whether to adopt it. Without parsing conversations, PD can only govern tools and cannot learn your corrections.\n\n**How much is kept, and for how long?**\nPer session, only the most recent 32 visible messages are kept, for at most 7 days (expired first, deleted first). Only when a problem is formally established as a pain are its preceding 12 messages + the trigger point + the assistant's next complete reply promoted into long-term governance evidence, managed under the existing governance data lifecycle. Saved tool evidence passes through the existing sensitive-field and common-secret-format redaction before being written; but note: if a secret looks like ordinary text, no filter can recognize it \u2014 please do not let PD observe sessions containing such content.\n\n**Does data leave this machine?**\nObservation data itself lives only in the local workspace. Conversation fragments promoted into governance evidence are sent to your configured LLM API for diagnosis, exactly like the existing diagnosis flow \u2014 this is the only egress path, consistent with current behavior on OpenClaw. Product telemetry contains no message content and no session identifiers.\n\n**How do I turn it off? Anytime.**\nOnce off, PD immediately stops reading transcripts (not \"read then discard\" \u2014 the transcript is never opened at all). Existing principle injection, tool interception, and existing tool evidence are completely unaffected. Saved content expires naturally per the limits above; promoted evidence can only be deleted explicitly by you through the existing governance cleanup commands. Uninstall never silently deletes any evidence.\n\n**Default state?**\nOff by default. It takes effect only after you explicitly choose to enable it after seeing this disclosure; upgrading PD never enables it for you.";
+export declare function getCodexIngestionDisclosureText(language: CodexIngestionDisclosureLanguage): string;

package/host-runtime/dist/codex-disclosure.js

@@ -0,0 +1,60 @@
+/**
+ * Codex conversation-ingestion consent disclosure — G2A frozen text (Slice D).
+ *
+ * The Chinese text below is copied VERBATIM from the Owner-approved decision
+ * package:
+ *   docs/superpowers/specs/2026-08-28-codex-governance-closure-g0-g2a-decision.md
+ *   § "Frozen consent disclosure text (setup will show this verbatim)"
+ *
+ * That document is the language SSoT. The frozen text "must not be weakened
+ * during implementation without a new Owner decision" — the guard test
+ * (codex-disclosure-g2a-guard.test.ts) re-extracts the frozen section from
+ * the document and asserts byte equality with this constant, so any drift
+ * here fails CI.
+ *
+ * The English rendering states the same facts; per the G2A binding note it is
+ * produced at setup implementation time from the frozen Chinese text. Setup
+ * surfaces always present the Chinese SSoT first.
+ */
+export const CODEX_INGESTION_DISCLOSURE_VERSION = 'g2a-2026-08-28';
+export const CODEX_INGESTION_DISCLOSURE_ZH = `### Principles Disciple — 对话观察与治理闭环（Codex）
+
+**开启后 PD 会读取什么？**
+读取本工作区内 Codex 明确提供给 PD 的会话记录（transcript）。进入治理观察的只有可见内容：你发出的消息、助手的可见回复、以及工具调用的名称/输入/结果（用于识别反复出现的问题）。记录中同时存在的隐藏思考过程（Codex 以加密形式保存）、系统/开发者提示词、宿主注入的环境上下文，会在解析时被识别并丢弃——不会被保存、不会进入日志、不会发送给诊断模型。
+
+**为什么读取？**
+为了让 PD 在 Codex 上完成它承诺的闭环：把你反复纠正的地方变成一条可审查的原则候选——你需要先看到证据，再决定是否采纳。不解析对话，PD 就只能管工具，学不到纠正。
+
+**保存多少、多久？**
+每个会话只保留最近 32 条可见消息、最多 7 天（先到期先删除）。当某个问题被正式立为 pain 时，才会把它的前 12 条消息 + 触发点 + 助手的下一条完整回复升级为长期治理证据，按现有治理数据的生命周期管理。保存的工具证据在落盘前会经过既有的敏感字段与常见密钥格式脱敏；但请注意：如果一段密钥看起来就像普通文字，任何过滤器都无法识别它——请不要让 PD 观察包含此类内容的会话。
+
+**数据会离开本机吗？**
+观察数据本身只存在本机工作区。被升级为治理证据的对话片段，会像现有诊断流程一样发送给你配置的 LLM API 做诊断——这是唯一的外发路径，与 OpenClaw 上的现有行为一致。产品遥测不包含任何消息内容或会话标识。
+
+**如何关闭？随时。**
+关闭后 PD 立即停止读取 transcript（不是"读了再丢弃"，而是根本不打开）。已有的原则注入、工具拦截、既有工具证据完全不受影响。已保存的内容按上述期限自然过期；升级过的证据只能由你通过既有治理清理命令显式删除。卸载不会静默删除任何证据。
+
+**默认状态？**
+默认关闭。只有你在看到本说明后明确选择开启才会生效；升级 PD 永远不会替你开启。`;
+export const CODEX_INGESTION_DISCLOSURE_EN = `### Principles Disciple — Conversation Observation & Governance Closure (Codex)
+
+**What does PD read once enabled?**
+PD reads the Codex session transcripts that Codex explicitly provides to PD inside this workspace. Only visible content enters governance observation: the messages you send, the assistant's visible replies, and the names/inputs/results of tool calls (used to recognize recurring problems). The hidden reasoning process that Codex stores in encrypted form, system/developer prompts, and host-injected environment context present in the same records are recognized and discarded during parsing — never saved, never written to logs, never sent to the diagnosis model.
+
+**Why read at all?**
+So that PD can deliver on its promised closed loop on Codex: turning the places you repeatedly correct into a reviewable principle candidate — you see the evidence first, then decide whether to adopt it. Without parsing conversations, PD can only govern tools and cannot learn your corrections.
+
+**How much is kept, and for how long?**
+Per session, only the most recent 32 visible messages are kept, for at most 7 days (expired first, deleted first). Only when a problem is formally established as a pain are its preceding 12 messages + the trigger point + the assistant's next complete reply promoted into long-term governance evidence, managed under the existing governance data lifecycle. Saved tool evidence passes through the existing sensitive-field and common-secret-format redaction before being written; but note: if a secret looks like ordinary text, no filter can recognize it — please do not let PD observe sessions containing such content.
+
+**Does data leave this machine?**
+Observation data itself lives only in the local workspace. Conversation fragments promoted into governance evidence are sent to your configured LLM API for diagnosis, exactly like the existing diagnosis flow — this is the only egress path, consistent with current behavior on OpenClaw. Product telemetry contains no message content and no session identifiers.
+
+**How do I turn it off? Anytime.**
+Once off, PD immediately stops reading transcripts (not "read then discard" — the transcript is never opened at all). Existing principle injection, tool interception, and existing tool evidence are completely unaffected. Saved content expires naturally per the limits above; promoted evidence can only be deleted explicitly by you through the existing governance cleanup commands. Uninstall never silently deletes any evidence.
+
+**Default state?**
+Off by default. It takes effect only after you explicitly choose to enable it after seeing this disclosure; upgrading PD never enables it for you.`;
+export function getCodexIngestionDisclosureText(language) {
+    return language === 'en' ? CODEX_INGESTION_DISCLOSURE_EN : CODEX_INGESTION_DISCLOSURE_ZH;
+}

package/host-runtime/dist/codex-ingestion-consent.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Codex conversation-ingestion consent store — Codex Governance Closure
+ * Slice D (SPEC rev 2 §17; G2A frozen disclosure).
+ *
+ * Persists the Owner's recorded consent decision for enabling
+ * `codex_conversation_ingestion` in ONE workspace to
+ * `<workspace>/.pd/codex-ingestion-consent.json`.
+ *
+ * Authority model (P4): the FEATURE FLAG stays the runtime authority for
+ * whether ingestion runs (the hook gate reads only the flag — consent never
+ * sits on the hot path). This store is the GOVERNANCE RECORD that the flag
+ * may only be enabled THROUGH the disclosed consent flow (G2A); health uses
+ * it to report consent state and to flag `flag_on_without_grant` as a
+ * governance warning. Declining must never flip the flag off by side effect
+ * — the setup flow owns that ordering, not this store.
+ *
+ * Scope: per-workspace (the flag and the transcripts it gates are
+ * workspace-scoped). This file is consent control state — it never contains
+ * any captured conversation text (SPEC §15 "consent state without displaying
+ * captured text").
+ *
+ * Patterns mirror the product-telemetry consent store: missing file is the
+ * normal never-asked case; a malformed file fails loud (rc-3/rc-9) because
+ * silently treating it as "never asked" could re-prompt against a recorded
+ * Owner decision; writes are atomic (temp + rename); unknown/malformed
+ * fields are rejected via guards, never `as` (rc-1/rc-2/rc-5).
+ */
+export declare const CODEX_INGESTION_CONSENT_FILENAME = "codex-ingestion-consent.json";
+export declare const CODEX_INGESTION_CONSENT_SCHEMA_VERSION = "2";
+/**
+ * Consent transition states (review round 2, governance consistency):
+ *
+ *   absent ──(disclosure shown, explicit decision)──▶ pending
+ *   pending ──(flag enabled successfully)───────────▶ granted
+ *   pending ──(declined / flag regularized off)─────▶ revoked
+ *   pending ──(flag enable failed)──────────────────▶ failed (with reason)
+ *   granted ──(explicit decline)────────────────────▶ revoked
+ *
+ * `granted` is only ever recorded AFTER the runtime flag activation has
+ * succeeded — consent can never become granted before activation, and a
+ * failed activation leaves an EXPLAINED `failed` state (reason + nextAction),
+ * never a silent granted/disabled mismatch. The flag remains the runtime
+ * authority; this record is the governance state machine that makes every
+ * observed flag/consent combination interpretable.
+ */
+export type CodexIngestionConsentDecision = 'pending' | 'granted' | 'revoked' | 'failed';
+export type CodexIngestionConsentDecidedVia = 'pd_codex_setup' | 'codex_plugin_setup';
+export interface CodexIngestionConsentRecord {
+    decision: CodexIngestionConsentDecision;
+    disclosureVersion: string;
+    decidedAt: string;
+    decidedVia: CodexIngestionConsentDecidedVia;
+    /** Populated when decision='failed': why the flag activation did not land. */
+    failureReason?: string;
+    schemaVersion: string;
+}
+export type CodexIngestionConsentRead = {
+    ok: true;
+    existed: boolean;
+    record: CodexIngestionConsentRecord | null;
+} | {
+    ok: false;
+    reason: string;
+    nextAction: string;
+};
+export type CodexIngestionConsentWrite = {
+    ok: true;
+    record: CodexIngestionConsentRecord;
+} | {
+    ok: false;
+    reason: string;
+    nextAction: string;
+};
+/** Health-surface consent state (SPEC §15). No captured text, ever. */
+export type CodexIngestionConsentState = 'granted' | 'revoked' | 'pending' | 'failed' | 'not_present' | 'flag_on_without_grant';
+export declare function getCodexIngestionConsentPath(workspaceDir: string): string;
+/**
+ * Read the consent record. ENOENT is the normal never-asked case
+ * (existed=false, record=null). Anything unreadable/malformed fails loud —
+ * degrading to "never asked" could re-prompt or re-enable against the
+ * Owner's recorded decision.
+ */
+export declare function readCodexIngestionConsent(workspaceDir: string): CodexIngestionConsentRead;
+/**
+ * Record an explicit consent decision made AFTER the disclosure was
+ * presented (the setup flow presents the frozen text before calling this).
+ * The flag itself is intentionally untouched — enabling it is the setup
+ * flow's explicit, ordered step.
+ */
+export declare function recordCodexIngestionConsent(workspaceDir: string, input: {
+    decision: CodexIngestionConsentDecision;
+    decidedVia: CodexIngestionConsentDecidedVia;
+    decidedAt?: string;
+    failureReason?: string;
+}): CodexIngestionConsentWrite;
+/**
+ * Combine the consent record with the ingestion flag into the health-surface
+ * state (SPEC §15). Every flag×record combination maps to exactly one
+ * interpretable state — none of them reads as silently healthy:
+ *
+ *   record granted  + flag any      → 'granted'    (activation succeeded)
+ *   record revoked  + flag any      → 'revoked'    (Owner said no; flag-off
+ *                                              path also regularizes the flag)
+ *   record failed   + flag any      → 'failed'     (activation did not land;
+ *                                              failureReason explains why)
+ *   record pending  + flag off      → 'pending'    (decision recorded, activation not yet applied)
+ *   record pending  + flag on       → 'pending'    (activation applied, terminal write pending)
+ *   no record       + flag on       → 'flag_on_without_grant'  (governance warning)
+ *   no record       + flag off      → 'not_present'
+ */
+export declare function deriveCodexIngestionConsentState(record: CodexIngestionConsentRecord | null, ingestionFlagEnabled: boolean): CodexIngestionConsentState;