open-tui-orchestrator 0.9.6

package/scripts/open-tui-orchestrator-preflight.mjs

@@ -0,0 +1,85 @@
+#!/usr/bin/env node
+/**
+ * open-tui-orchestrator-preflight — read-only gate that decides whether a requested kind may be executed now.
+ *
+ *   node open-tui-orchestrator-preflight.mjs <write|build|install|test|restart|run|all>
+ *
+ * Reuses open-tui-orchestrator-force.mjs's armed()/liveWindows() (the same enforcement state the guard uses):
+ *   - maintenance lock held            -> prints the maintenance one-liner, exits 0
+ *     (本轮跳过 orchestrator，由发起对话直接执行；任何 kind 都放行)。
+ *   - orchestrator not armed and
+ *     kind is read-only             -> prints ok, exits 0.
+ *   - orchestrator not armed and
+ *     kind is real-execution        -> prints REFUSED + route hint, exits 1.
+ *   - current context IS a sanctioned
+ *     execution window              -> prints ok, exits 0.
+ *   - real-execution kind but NOT a
+ *     sanctioned window             -> prints REFUSED + route hint, exits 1.
+ *   - read-only kind                -> prints ok, exits 0.
+ *
+ * This only makes a before-you-run decision; it does NOT touch the orchestrator's
+ * block/dependency/result-recycling logic.
+ */
+import { armed, liveWindows } from "./open-tui-orchestrator-force.mjs";
+import { lockedForMaintenance, MAINTENANCE_MESSAGE } from "./core/maintenance-lock.mjs";
+
+const kind = String(process.argv[2] || "").toLowerCase();
+const realKinds = new Set(["exec", "write", "build", "install", "test", "restart", "start", "stop", "real", "all", "run"]);
+const readKinds = new Set(["read", "analyze", "plan", "view", "query", "search", "status", "list", "preview", "ls", "show", "check", "validate", "dry-run", "help"]);
+
+// 维护锁最优先：上锁期间任何调用只回固定话术并放行（exit 0），本轮直接执行。
+if (lockedForMaintenance()) {
+  console.log(MAINTENANCE_MESSAGE);
+  process.exit(0);
+}
+
+// 统一校验：空/未知 kind 一律报错退出 1（不因窗口状态放宽），决策输出统一走 stdout 供下游捕获。
+if (!kind) {
+  console.log("[preflight] error: missing kind argument (real: " + [...realKinds].join("/") + " | read-only: " + [...readKinds].join("/") + ").");
+  process.exit(1);
+}
+if (!realKinds.has(kind) && !readKinds.has(kind)) {
+  console.log("[preflight] invalid/unknown kind: '" + kind + "' (allowed real: " + [...realKinds].join("/") + " | read-only: " + [...readKinds].join("/") + ").");
+  process.exit(1);
+}
+
+if (!armed()) {
+  if (realKinds.has(kind)) {
+    console.log(
+      "REFUSED: preflight '" + kind + "' is a real-execution kind but the orchestrator is not armed (enforcement disabled). " +
+        "Route through  node orchestrate-sdk.mjs --run-windows \"<request>\"  (a real, visible agent TUI window)."
+    );
+    process.exit(1);
+  }
+  console.log("ok: read-only kind (" + kind + ").");
+  process.exit(0);
+}
+
+// liveWindows() 为跨进程快照（存在竞态），此处是 before-you-run 的近似判定；如需严格应在执行前紧邻复验。
+const envWindow = process.env.ORCH_WINDOW === "1";
+const alive = liveWindows().length;
+// 与 force --assert 保持一致：ORCH_WINDOW=1 但无活窗 → env 单独不可采信，一律 REFUSED（含只读 kind）。
+if (envWindow && alive === 0) {
+  console.log(
+    "REFUSED: ORCH_WINDOW=1 but no live registered orchestration window (env var alone is not accepted; may be forged). " +
+      "Route through  node orchestrate-sdk.mjs --run-windows \"<request>\"  (a real, visible agent TUI window)."
+  );
+  process.exit(1);
+}
+// Only a process that (a) sets ORCH_WINDOW=1 AND (b) has a live registered window is sanctioned.
+// A headless/script context running while a legitimate window happens to be open must NOT pass.
+if (envWindow && alive > 0) {
+  console.log("ok: sanctioned orchestration window; '" + kind + "' may proceed.");
+  process.exit(0);
+}
+
+if (realKinds.has(kind)) {
+  console.log(
+    "REFUSED: preflight '" + kind + "' is a real-execution kind but this is NOT a sanctioned orchestration window. " +
+      "Route through  node orchestrate-sdk.mjs --run-windows \"<request>\"  (a real, visible agent TUI window)."
+  );
+  process.exit(1);
+}
+
+console.log("ok: read-only kind (" + kind + ").");
+process.exit(0);

package/scripts/orchestrate-sdk.mjs

@@ -0,0 +1,59 @@
+#!/usr/bin/env node
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {verifyRelease} from './release-integrity.mjs';
+import {enforceWindowsOnly} from './platform-guard.mjs';
+
+// 机器可调用契约：**作为主入口时，任何失败只回一行** `[orchestrator] FATAL: <原因>`
+// （完整栈帧仅 ORCH_DEBUG=1 时才打）——调用方的管道里永远不该出现裸 Node 栈帧。
+// 作为模块被 import 时保持原语义：封印/自适配失败照旧抛出（fail-closed 不受影响），
+// 只是不再把栈帧甩到调用者脸上。
+const IS_MAIN = !!process.argv[1] && path.resolve(process.argv[1]).toLowerCase() === fileURLToPath(import.meta.url).toLowerCase();
+function fatal(error) {
+  console.error('[orchestrator] FATAL: ' + (error && error.message ? error.message : String(error)));
+  if (process.env.ORCH_DEBUG === '1' && error && error.stack) console.error(error.stack);
+}
+// 引导入口（--install-deps）必须先于一切依赖存在：本包自己的 SDK 依赖（node-pty / codex-sdk）正是
+// 它要装的东西，而引擎在 ORCH_AGENT=codex 时会顶层 import SDK——先要求「依赖已装/引擎可加载」
+// 会让缺依赖的用户永远够不着这个入口（2026-09-14 真机回归抓到的鸡生蛋问题）。
+const bootstrapInstallDeps = IS_MAIN && process.argv.slice(2).includes('--install-deps');
+// Windows-only 是首页承诺，就要在入口强制（共享实现见 scripts/platform-guard.mjs；cli.mjs / orch.mjs
+// 也在入口调用同一份）。这里覆盖直接跑 scripts/orchestrate-sdk.mjs 的调用方。
+if (IS_MAIN && enforceWindowsOnly(process.argv.slice(2))) process.exit(1);
+try {
+  if (!bootstrapInstallDeps) {
+    verifyRelease();
+    // 自动适配钩子（显式开关）：检测到未适配的 agent 且仓库未上锁时，先自动完成适配
+    // （探测→画像→活验→重封→提交）再继续本轮调用；适配失败则 fail-closed 报错退出。
+    // 注意：adapt 会写入 scripts/core/agent-profiles/<id>.json 并重封提交——这是显式要求
+    // 的自修改通道，只有 ORCH_AUTO_ADAPT=1 时才启用。
+    if (process.env.ORCH_AUTO_ADAPT === '1') {
+      const { autoAdaptIfNeeded } = await import('./core/adapt-lib.mjs');
+      await autoAdaptIfNeeded();
+    }
+    const requestedAgent = String(process.env.ORCH_AGENT || '').trim().toLowerCase();
+    if (requestedAgent === 'codex' || (!requestedAgent && (process.env.CODEX_SESSION_ID || process.env.CODEX_THREAD_ID))) await import('./sdk-dependency-check.mjs');
+  }
+} catch (error) {
+  if (IS_MAIN) { fatal(error); process.exit(1); }
+  throw error;
+}
+// 引导路径不进引擎：缺依赖时引擎根本加载不起来。装完依赖后，再走正常入口。
+const engine = bootstrapInstallDeps ? null : await import('./core/orchestrate-sdk.mjs');
+export const {
+  main, reportFatal, buildPsArrayLit, capPlanBlocks, buildWindowWaves, applyAuthPromptPolicy, readTail,
+  classifyBlockComplexity, classifyExecutionMode, appendModelEffortArgs, genericProjectSplit,
+  trySingleBlock, conflictByKeys, loadCachedDecompose, buildBlocksFromTasks, resolveHints,
+  extractTasks, classifyPrompt, buildBlockPrompt, levelWaves, decomposeHash, checkDiskSpace,
+  readPidFile, pidAliveCheck, closeWindowByPid, windowGenuinelyPopped, extractResult, extractUsage,
+  readReportFromResult, sessionDir, writeInteractiveLauncher, staleTransientFiles,
+  pidFileOfTransient, tryReserveWindow, commitReservation, cancelReservation, computeMaxWindows,
+  blockKeys, keysOverlap, scanTaskComplete, windowExecutionPolicy, __setOrchHooks, isOrchestratorSelfMod, resolveCodexHome,
+  withRegistryLock, REGISTRY_LOCK_FILE,
+} = engine ?? {};
+if (bootstrapInstallDeps) {
+  const { installDepsCli } = await import('./install-deps.mjs');
+  process.exitCode = installDepsCli();
+} else if (IS_MAIN) {
+  engine.main().catch((e) => { fatal(e); process.exitCode = 1; });
+}

package/scripts/package-lock.json

@@ -0,0 +1,242 @@
+{
+    "name": "open-tui-orchestrator",
+    "version": "0.2.0",
+    "lockfileVersion": 3,
+    "requires": true,
+    "packages": {
+        "": {
+            "name": "open-tui-orchestrator",
+            "version": "0.2.0",
+            "dependencies": {
+                "@lydell/node-pty": "1.2.0-beta.15",
+                "@openai/codex-sdk": "0.149.0"
+            }
+        },
+        "node_modules/@lydell/node-pty": {
+            "version": "1.2.0-beta.15",
+            "resolved": "https://registry.npmjs.org/@lydell/node-pty/-/node-pty-1.2.0-beta.15.tgz",
+            "integrity": "sha512-Br8wBxzbxFwdWgk9uQ+rdzE0xfoxOK4QuGH54swhRwc5IxP6H9Y1/bcyazRGvNUs6XkB5qNVkezuKSRxUwZe7A==",
+            "license": "MIT",
+            "optionalDependencies": {
+                "@lydell/node-pty-darwin-arm64": "1.2.0-beta.15",
+                "@lydell/node-pty-darwin-x64": "1.2.0-beta.15",
+                "@lydell/node-pty-linux-arm64": "1.2.0-beta.15",
+                "@lydell/node-pty-linux-x64": "1.2.0-beta.15",
+                "@lydell/node-pty-win32-arm64": "1.2.0-beta.15",
+                "@lydell/node-pty-win32-x64": "1.2.0-beta.15"
+            }
+        },
+        "node_modules/@lydell/node-pty-darwin-arm64": {
+            "version": "1.2.0-beta.15",
+            "resolved": "https://registry.npmjs.org/@lydell/node-pty-darwin-arm64/-/node-pty-darwin-arm64-1.2.0-beta.15.tgz",
+            "integrity": "sha512-6TSBbzdcLiNTHl1mTuzflqXrkmcC36USVGvERoDgvHk2ItEDaMaFZuAJ1CqPmwYj0DyhCS16TVS8OGK9xZnjyQ==",
+            "cpu": [
+                "arm64"
+            ],
+            "license": "MIT",
+            "optional": true,
+            "os": [
+                "darwin"
+            ]
+        },
+        "node_modules/@lydell/node-pty-darwin-x64": {
+            "version": "1.2.0-beta.15",
+            "resolved": "https://registry.npmjs.org/@lydell/node-pty-darwin-x64/-/node-pty-darwin-x64-1.2.0-beta.15.tgz",
+            "integrity": "sha512-yDT2oqPqYMBScyuk1U9Rg5VKcrbMOD9o9jWYYamDADA3NSbUISroPChrqYRQ74Y7BQtNH4gqYAiWOZRi5uQZ0Q==",
+            "cpu": [
+                "x64"
+            ],
+            "license": "MIT",
+            "optional": true,
+            "os": [
+                "darwin"
+            ]
+        },
+        "node_modules/@lydell/node-pty-linux-arm64": {
+            "version": "1.2.0-beta.15",
+            "resolved": "https://registry.npmjs.org/@lydell/node-pty-linux-arm64/-/node-pty-linux-arm64-1.2.0-beta.15.tgz",
+            "integrity": "sha512-wkbNF7dYAmtJv+o2+iztVlNwnUB4B0uX0wh/UD+mwMcmE2gNMnW9GChXO7fEE5XJokD0vB5idiHpGegaN+G/sg==",
+            "cpu": [
+                "arm64"
+            ],
+            "license": "MIT",
+            "optional": true,
+            "os": [
+                "linux"
+            ]
+        },
+        "node_modules/@lydell/node-pty-linux-x64": {
+            "version": "1.2.0-beta.15",
+            "resolved": "https://registry.npmjs.org/@lydell/node-pty-linux-x64/-/node-pty-linux-x64-1.2.0-beta.15.tgz",
+            "integrity": "sha512-+U/5AVvHT6W+8OCYcnJgN0Qgc0ycO3TfD6aaFJHK+WHij797f8gsi5dV1HEO9l6YQmWCD+VL5gaLDhx3mxHwCA==",
+            "cpu": [
+                "x64"
+            ],
+            "license": "MIT",
+            "optional": true,
+            "os": [
+                "linux"
+            ]
+        },
+        "node_modules/@lydell/node-pty-win32-arm64": {
+            "version": "1.2.0-beta.15",
+            "resolved": "https://registry.npmjs.org/@lydell/node-pty-win32-arm64/-/node-pty-win32-arm64-1.2.0-beta.15.tgz",
+            "integrity": "sha512-pyAk91w7wnnKrD4mrHXtIXRfmzSWV5bEzvRhurXcMCtCc2TJ424ciUskIgWMhAPP6y3KyUnqElj+U6kY3iOt0A==",
+            "cpu": [
+                "arm64"
+            ],
+            "license": "MIT",
+            "optional": true,
+            "os": [
+                "win32"
+            ]
+        },
+        "node_modules/@lydell/node-pty-win32-x64": {
+            "version": "1.2.0-beta.15",
+            "resolved": "https://registry.npmjs.org/@lydell/node-pty-win32-x64/-/node-pty-win32-x64-1.2.0-beta.15.tgz",
+            "integrity": "sha512-2f8twEmDVxZ7drchAXjtevpmSPhFok0avAnzXro4t5gmz0xsPNKkoZvymwtuIS3xo7PzQqZOPQ/YzwEMb7oIzQ==",
+            "cpu": [
+                "x64"
+            ],
+            "license": "MIT",
+            "optional": true,
+            "os": [
+                "win32"
+            ]
+        },
+        "node_modules/@openai/codex": {
+            "version": "0.149.0",
+            "resolved": "https://registry.npmmirror.com/@openai/codex/-/codex-0.149.0.tgz",
+            "integrity": "sha512-i4dryj2Y1j+00Mb5n+0n71EYnTK9/KDc2cdFo/dXD0d1oTog2bhUssKDEIOnKmnEf51P0Z/HJTWvTKw/UHyOvQ==",
+            "license": "Apache-2.0",
+            "bin": {
+                "codex": "bin/codex.js"
+            },
+            "engines": {
+                "node": ">=16"
+            },
+            "optionalDependencies": {
+                "@openai/codex-darwin-arm64": "npm:@openai/codex@0.149.0-darwin-arm64",
+                "@openai/codex-darwin-x64": "npm:@openai/codex@0.149.0-darwin-x64",
+                "@openai/codex-linux-arm64": "npm:@openai/codex@0.149.0-linux-arm64",
+                "@openai/codex-linux-x64": "npm:@openai/codex@0.149.0-linux-x64",
+                "@openai/codex-win32-arm64": "npm:@openai/codex@0.149.0-win32-arm64",
+                "@openai/codex-win32-x64": "npm:@openai/codex@0.149.0-win32-x64"
+            }
+        },
+        "node_modules/@openai/codex-darwin-arm64": {
+            "name": "@openai/codex",
+            "version": "0.149.0-darwin-arm64",
+            "resolved": "https://registry.npmmirror.com/@openai/codex/-/codex-0.149.0-darwin-arm64.tgz",
+            "integrity": "sha512-GsZJbzBWiD48RETrO8VHGAQNgfSrUVxItXZFeD87wswatPi0+lKuQo8Dx4nMYmOZhZrVtwr3al/feRrZxnDV8Q==",
+            "cpu": [
+                "arm64"
+            ],
+            "license": "Apache-2.0",
+            "optional": true,
+            "os": [
+                "darwin"
+            ],
+            "engines": {
+                "node": ">=16"
+            }
+        },
+        "node_modules/@openai/codex-darwin-x64": {
+            "name": "@openai/codex",
+            "version": "0.149.0-darwin-x64",
+            "resolved": "https://registry.npmmirror.com/@openai/codex/-/codex-0.149.0-darwin-x64.tgz",
+            "integrity": "sha512-H+mMgW3Nhc5QzGWEklCoFqACuOc0cVpgPkPQRw0LShoK7P5664T6BRnyl1yzT6orKPKv49cXry7DIWWZ19SanQ==",
+            "cpu": [
+                "x64"
+            ],
+            "license": "Apache-2.0",
+            "optional": true,
+            "os": [
+                "darwin"
+            ],
+            "engines": {
+                "node": ">=16"
+            }
+        },
+        "node_modules/@openai/codex-linux-arm64": {
+            "name": "@openai/codex",
+            "version": "0.149.0-linux-arm64",
+            "resolved": "https://registry.npmmirror.com/@openai/codex/-/codex-0.149.0-linux-arm64.tgz",
+            "integrity": "sha512-fAXPpvIob+11RNZJS9CVVTsKb+V4Hw3woGFPj42D7fU2wBJUKI2jfAc4fLJNtrpwRecLeW601mtkMHOSIbWuuA==",
+            "cpu": [
+                "arm64"
+            ],
+            "license": "Apache-2.0",
+            "optional": true,
+            "os": [
+                "linux"
+            ],
+            "engines": {
+                "node": ">=16"
+            }
+        },
+        "node_modules/@openai/codex-linux-x64": {
+            "name": "@openai/codex",
+            "version": "0.149.0-linux-x64",
+            "resolved": "https://registry.npmmirror.com/@openai/codex/-/codex-0.149.0-linux-x64.tgz",
+            "integrity": "sha512-uZXaN9JPxu0/jjnqqJeTd4kRYPnjVZK3MiVndfG1mHhEaoDKL7ScWHfPqvAEOjwsSDEmQSlMfUkmvYp/CHciYw==",
+            "cpu": [
+                "x64"
+            ],
+            "license": "Apache-2.0",
+            "optional": true,
+            "os": [
+                "linux"
+            ],
+            "engines": {
+                "node": ">=16"
+            }
+        },
+        "node_modules/@openai/codex-sdk": {
+            "version": "0.149.0",
+            "resolved": "https://registry.npmmirror.com/@openai/codex-sdk/-/codex-sdk-0.149.0.tgz",
+            "integrity": "sha512-wQCKyRR8JScUv+48wIOot8Oapt/0wsud1WptPTCamXYXZXjtpXVZ1UwACipbpnnesB1BLEeOiN1IFw2fgNN2Ww==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "@openai/codex": "0.149.0"
+            },
+            "engines": {
+                "node": ">=18"
+            }
+        },
+        "node_modules/@openai/codex-win32-arm64": {
+            "name": "@openai/codex",
+            "version": "0.149.0-win32-arm64",
+            "resolved": "https://registry.npmmirror.com/@openai/codex/-/codex-0.149.0-win32-arm64.tgz",
+            "integrity": "sha512-pUd8MzuwtqT5DhM1NUE1gETWIZ9fkDA1XB7tt9YNIi/peUgLuziQgZd7o0bNON4cNzgbil1YUN1qDTgQm0g3pg==",
+            "cpu": [
+                "arm64"
+            ],
+            "license": "Apache-2.0",
+            "optional": true,
+            "os": [
+                "win32"
+            ],
+            "engines": {
+                "node": ">=16"
+            }
+        },
+        "node_modules/@openai/codex-win32-x64": {
+            "name": "@openai/codex",
+            "version": "0.149.0-win32-x64",
+            "resolved": "https://registry.npmmirror.com/@openai/codex/-/codex-0.149.0-win32-x64.tgz",
+            "integrity": "sha512-qKbwSOOO/fdhQ5MlXE2fts6taPxRPZ/zqeC+eqHD72hLRymV9rFCUbUxOCquognUPRPvS/2/kRCV0UVhoDd3yQ==",
+            "cpu": [
+                "x64"
+            ],
+            "license": "Apache-2.0",
+            "optional": true,
+            "os": [
+                "win32"
+            ],
+            "engines": {
+                "node": ">=16"
+            }
+        }
+    }
+}

package/scripts/package.json

@@ -0,0 +1,9 @@
+{
+    "name": "open-tui-orchestrator",
+    "private": true,
+    "version": "0.2.0",
+    "dependencies": {
+        "@lydell/node-pty": "1.2.0-beta.15",
+        "@openai/codex-sdk": "0.149.0"
+    }
+}

package/scripts/platform-guard.mjs

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+/**
+ * platform-guard.mjs — enforces the front-page promise "Windows-only today".
+ *
+ * The promise is worth nothing if it is only a sentence in the README, and it is *worse* than
+ * nothing if a non-Windows user gets a half-working install: measured 2026-09-15, an entry with
+ * no guard reported a healthy `--doctor` (exit 0, `terminal: "wt"`) on a simulated Linux platform.
+ *
+ * So the refusal happens **at the entry** (cli.mjs / orch.mjs / the SDK wrapper), before host
+ * resolution, before any model call, before any state. Three entries stay available because they
+ * are platform-neutral and are exactly what somebody debugging a platform issue needs:
+ * `--version`, `--help`, `--install-deps`.
+ *
+ * Callers: `if (enforceWindowsOnly(args)) process.exit(1);`
+ */
+export const PLATFORM_NEUTRAL_ARGS = new Set(['--version', '--help', '-h', '--install-deps']);
+
+export function enforceWindowsOnly(argv = process.argv.slice(2), platform = process.platform) {
+  if (platform === 'win32') return false;
+  if (argv.some((arg) => PLATFORM_NEUTRAL_ARGS.has(arg))) return false;
+  console.error('[orchestrator] FATAL: Windows-only: this build drives Windows Terminal, the ConPTY carrier and the HKCU coordinator; detected platform "' + platform + '" — only --version, --help and --install-deps are available here');
+  return true;
+}

package/scripts/poll-windows.mjs

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import {verifyRelease} from './release-integrity.mjs';
+verifyRelease();
+const engine = await import('./core/poll-windows.mjs');
+export const {TERMINAL, SUCCESS, summaryComplete, summaryTerminal, failures, loadSummary, parsePollingOptions, main} = engine;
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+if(process.argv[1]&&path.resolve(process.argv[1]).toLowerCase()===fileURLToPath(import.meta.url).toLowerCase())engine.main().catch(e=>{console.error(e.stack||e.message);process.exitCode=1;});

package/scripts/release-integrity.mjs

@@ -0,0 +1,94 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import {fileURLToPath} from 'node:url';
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const EXCLUDED_DIRS = new Set(['.git', '.plugin-eval', 'coverage', 'node_modules', 'temp']);
+const EXCLUDED_FILES = new Set(['.agent-cache.json']);
+
+function sha256(file) {
+  return crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
+}
+
+function walkDirectory(dir, base, out) {
+  const stat = fs.lstatSync(dir);
+  if (stat.isSymbolicLink()) throw new Error('RELEASE_LINK_FORBIDDEN: ' + dir);
+  if (!stat.isDirectory()) throw new Error('RELEASE_DIRECTORY_MISSING: ' + dir);
+  for (const entry of fs.readdirSync(dir, {withFileTypes: true}).sort((a, b) => a.name.localeCompare(b.name))) {
+    if (entry.isDirectory() && EXCLUDED_DIRS.has(entry.name)) continue;
+    if (entry.isFile() && EXCLUDED_FILES.has(entry.name)) continue;
+    const file = path.join(dir, entry.name);
+    const rel = path.join(base, entry.name).replaceAll('\\', '/');
+    if (entry.isSymbolicLink()) throw new Error('RELEASE_LINK_FORBIDDEN: ' + file);
+    if (entry.isDirectory()) walkDirectory(file, rel, out);
+    else if (entry.isFile()) out[rel] = sha256(file);
+    else throw new Error('RELEASE_ENTRY_UNSUPPORTED: ' + file);
+  }
+}
+
+function walkFile(file, rel, out) {
+  const stat = fs.lstatSync(file);
+  if (stat.isSymbolicLink()) throw new Error('RELEASE_LINK_FORBIDDEN: ' + file);
+  if (!stat.isFile()) throw new Error('RELEASE_FILE_MISSING: ' + file);
+  out[rel.replaceAll('\\', '/')] = sha256(file);
+}
+
+export function coreInventory(packageRoot = root) {
+  const core = path.join(packageRoot, 'scripts', 'core');
+  const files = {};
+  walkDirectory(core, '', files);
+  if (!files['orchestrate-sdk.mjs'] || !files['contracts.mjs']) throw new Error('RELEASE_CORE_MISSING');
+  return files;
+}
+
+export function runtimeInventory(packageRoot = root) {
+  const files = {};
+  for (const rel of ['cli.mjs', 'package.json', 'repair.mjs']) {
+    const file = path.join(packageRoot, rel);
+    if (fs.existsSync(file)) walkFile(file, rel, files);
+  }
+  const scripts = path.join(packageRoot, 'scripts');
+  if (fs.existsSync(scripts)) walkDirectory(scripts, 'scripts', files);
+  return files;
+}
+
+function currentCoreVersion(packageRoot) {
+  const text = fs.readFileSync(path.join(packageRoot, 'scripts', 'core', 'contracts.mjs'), 'utf8');
+  return /CORE_VERSION\s*=\s*'([^']+)'/.exec(text)?.[1] || null;
+}
+
+export function verifyRelease(packageRoot = root) {
+  const manifestPath = path.join(packageRoot, 'release.json');
+  let manifest;
+  try {
+    manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+  } catch (error) {
+    throw new Error('RELEASE_MANIFEST_INVALID: ' + (error?.message || String(error)));
+  }
+  if (manifest.schema !== 2) throw new Error('RELEASE_SCHEMA_UNSUPPORTED');
+  const current = coreInventory(packageRoot);
+  if (JSON.stringify(current) !== JSON.stringify(manifest.files)) {
+    throw new Error('RELEASE_INTEGRITY_FAILED: core differs from the verified release; reinstall the release');
+  }
+  const version = currentCoreVersion(packageRoot);
+  if (!version || manifest.coreVersion !== version) {
+    throw new Error('RELEASE_INTEGRITY_FAILED: core version differs from the verified release');
+  }
+  const runtime = runtimeInventory(packageRoot);
+  if (JSON.stringify(runtime) !== JSON.stringify(manifest.runtimeFiles)) {
+    throw new Error('RELEASE_INTEGRITY_FAILED: runtime differs from the verified release; reinstall the release');
+  }
+  return {schema: manifest.schema, coreVersion: manifest.coreVersion, files: Object.keys(current).length, runtimeFiles: Object.keys(runtime).length};
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]).toLowerCase() === fileURLToPath(import.meta.url).toLowerCase()) {
+  if (process.argv.includes('--seal')) {
+    const files = coreInventory(root);
+    const coreVersion = currentCoreVersion(root);
+    if (!coreVersion) throw new Error('Missing core version');
+    const runtimeFiles = runtimeInventory(root);
+    fs.writeFileSync(path.join(root, 'release.json'), JSON.stringify({schema: 2, coreVersion, files, runtimeFiles}, null, 2) + '\n', 'utf8');
+  }
+  console.log(JSON.stringify(verifyRelease()));
+}

package/scripts/runtime-context.mjs

@@ -0,0 +1,2 @@
+// Shared implementation; do not copy logic into this adapter.
+export * from './core/runtime-context.mjs';

package/scripts/sdk-dependency-check.mjs

@@ -0,0 +1,32 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+
+const scripts=fileURLToPath(new URL('.',import.meta.url));
+const instruction='npm ci --prefix '+JSON.stringify(scripts);
+let entry;
+try{entry=fileURLToPath(import.meta.resolve('@openai/codex-sdk'));}
+catch(error){
+  if(['ERR_INVALID_PACKAGE_CONFIG','ERR_PACKAGE_PATH_NOT_EXPORTED'].includes(error.code))throw new Error('RELEASE_DEPENDENCY_DAMAGED: SDK package metadata is invalid; restore with '+instruction);
+  if(error.code!=='ERR_MODULE_NOT_FOUND')throw error;
+  throw new Error('RELEASE_DEPENDENCY_MISSING: install the locked SDK dependency with '+instruction);
+}
+try{
+  if(!fs.statSync(entry).isFile())throw new Error('not a file');
+  fs.accessSync(entry,fs.constants.R_OK);
+}catch{throw new Error('RELEASE_DEPENDENCY_DAMAGED: SDK entry is missing or unreadable; restore with '+instruction);}
+const expected=JSON.parse(fs.readFileSync(path.join(scripts,'package.json'),'utf8')).dependencies['@openai/codex-sdk'];
+let dir=path.dirname(entry),actual;
+while(true){
+  const manifest=path.join(dir,'package.json');
+  if(fs.existsSync(manifest)){
+    const pkg=JSON.parse(fs.readFileSync(manifest,'utf8'));
+    if(pkg.name==='@openai/codex-sdk'){actual=pkg.version;break;}
+  }
+  const parent=path.dirname(dir);if(parent===dir)break;dir=parent;
+}
+if(actual!==expected)throw new Error(`RELEASE_DEPENDENCY_VERSION: expected ${expected}, found ${actual||'unknown'}; restore with ${instruction}`);
+try{
+  const sdk=await import('@openai/codex-sdk');
+  if(typeof sdk.Codex!=='function'||typeof sdk.Codex.prototype?.startThread!=='function'||typeof sdk.Codex.prototype?.resumeThread!=='function')throw new Error('missing interfaces');
+}catch{throw new Error('RELEASE_DEPENDENCY_DAMAGED: SDK cannot load or lacks required interfaces; restore with '+instruction);}

package/scripts/todo-list.mjs

@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+/**
+ * todo-list.mjs — TODO LIST 完整性校验器
+ *
+ * 用途：任何 agent（主对话 / TUI 窗 / 子代理）在做 TODO LIST 后，用它校验清单
+ * 是否【有头有尾、覆盖首中尾、每步含动作/产物/验证、有依赖顺序】，防"只规划不落地"。
+ *
+ * 用法：
+ *   node todo-list.mjs --check <清单文件> [--json]
+ *   node todo-list.mjs --check <清单文件> --strict   # 更严格：必须有"目标"与"收尾验证/清理"且步数>=1
+ *
+ * 退出码：校验通过=0；存在缺失=1（供 agent 在未过校验前禁止进入执行）。
+ */
+import fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+function getArg(name, dflt) {
+  const i = process.argv.indexOf(name);
+  return (i >= 0 && process.argv[i + 1] != null) ? process.argv[i + 1] : dflt;
+}
+const hasFlag = (n) => process.argv.includes(n);
+const JSON_MODE = hasFlag('--json');
+const STRICT = hasFlag('--strict');
+const file = getArg('--check', null);
+
+function reportOk(ok, checks) {
+  const summary = { ok, checks };
+  if (JSON_MODE) { console.log(JSON.stringify(summary, null, 2)); }
+  else {
+    console.log(ok ? 'TODO LIST 校验通过（有头有尾、覆盖全链）。' : 'TODO LIST 校验未通过（见下）。');
+    for (const c of checks) console.log('  [' + (c.ok ? 'PASS' : 'FAIL') + '] ' + c.name + (c.note ? ' — ' + c.note : ''));
+  }
+  process.exit(ok ? 0 : 1);
+}
+
+function check(text, strict) {
+  const t = String(text || '');
+  const checks = [];
+  const L = (name, ok, note) => checks.push({ name, ok: !!ok, note: note || '' });
+
+  // 有头：目标/目的/背景 + 前置/环境盘点
+  const hasGoal = /目标|目的|goal|objective|任务目标|要完成|本次任务/i.test(t);
+  L('有头-目标明确', hasGoal, hasGoal ? '' : '清单缺少“目标/目的”说明（有头）');
+  const hasPre = /前置|现状|环境盘点|环境|背景|依赖条件|先确认|先区分|已确认|已知/i.test(t);
+  L('有头-前置/环境盘点', hasPre, hasPre ? '' : '缺少“前置条件/环境盘点/现状”');
+
+  // 中间：动作/产物/验证 + 依赖顺序
+  const stepLines = t.split(/\n/).map((l) => l.trim()).filter((l) => /^\s*\d+[)\.、:]/.test(l) || /^\s*[-*•] /.test(l));
+  L('中间-步骤数>0', stepLines.length > 0, '步骤数=' + stepLines.length);
+  const hasAction = /动作|执行|创建|写入|运行|改|建|task|步骤|①|②|③/ .test(t);
+  const hasProduct = /产物|输出|落地|文件|配置|结果|生成|produce|output/i.test(t);
+  const hasVerify = /验证|自验|读回|回归|核验|校验|check|verify|确认/i.test(t);
+  L('中间-含动作', hasAction, hasAction ? '' : '缺少“动作”要素');
+  L('中间-含产物', hasProduct, hasProduct ? '' : '缺少“产物”要素（落地物）');
+  L('中间-含验证', hasVerify, hasVerify ? '' : '缺少“验证点”（读回/回归）');
+  const hasDep = /依赖|先后|顺序|串行|并行|因果|前置步|必须先/i.test(t);
+  L('中间-依赖顺序', hasDep, hasDep ? '' : '缺少依赖/顺序说明');
+
+  // 有尾：收尾验证 + 清理残留 + 结束标记/复盘（防"只规划不落地"）
+  const hasTailVerify = /现场自验|读回|自验|逐一|逐项|最终汇报|结束标记|复盘|确认.*落盘|全部.*完成/i.test(t);
+  L('有尾-收尾验证/自验', hasTailVerify, hasTailVerify ? '' : '缺少“收尾现场自验/最终读回”');
+  const hasClean = /清理|清残留|删除.*临时|无残留|no.*temp|临时产物.*清理|瘦身/i.test(t);
+  L('有尾-清理残留', hasClean, hasClean ? '' : '缺少“清理临时/残留产物”或无残留确认');
+  const hasEndmark = /__ORCH_DONE__|结束标记|输出.*结束|完成.*汇报|最后.*输出|EXIT/i.test(t);
+  L('有尾-结束标记/最终汇报', hasEndmark, hasEndmark ? '' : '缺少“结束标记/最终汇报”收尾');
+
+  // strict：额外要求目标+收尾验证+清理+步数 >= 1 全有
+  const strictAll = checks.every((c) => c.ok);
+  const ok = checks.every((c) => c.ok);
+  L('整体-有头有尾覆盖全链', ok, ok ? '' : '存在缺失项，禁止进入执行');
+  return { ok, checks };
+}
+
+export { check, reportOk };
+
+const isMain = process.argv[1] && process.argv[1].replace(/\\/g, '/').toLowerCase() === fileURLToPath(import.meta.url).replace(/\\/g, '/').toLowerCase();
+if (isMain) {
+  if (!file) {
+    console.log('用法: node todo-list.mjs --check <清单文件> [--json] [--strict]');
+    process.exit(2);
+  }
+  if (!fs.existsSync(file)) {
+    console.error('清单文件不存在: ' + file);
+    process.exit(2);
+  }
+  const raw = fs.readFileSync(file, 'utf8');
+  const r = check(raw, STRICT);
+  reportOk(r.ok, r.checks);
+}