opensocrates 1.4.0 → 1.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +63 -0
- package/README.ja.md +129 -0
- package/README.ko.md +128 -71
- package/README.md +138 -79
- package/README.zh.md +113 -0
- package/SECURITY.md +49 -6
- package/VERSION +1 -1
- package/installer/managed-hosts.mjs +668 -0
- package/installer/opensocrates.mjs +105 -5
- package/installer/windows.ps1 +124 -5
- package/package.json +5 -4
package/README.md
CHANGED
|
@@ -4,108 +4,167 @@
|
|
|
4
4
|
|
|
5
5
|
# OpenSocrates
|
|
6
6
|
|
|
7
|
-
**
|
|
7
|
+
**Reasoning help for results you can understand, judge, and use.**
|
|
8
8
|
|
|
9
|
-
OpenSocrates brings 48 authored reasoning methods
|
|
10
|
-
|
|
9
|
+
OpenSocrates brings 48 authored reasoning methods into the task you are already
|
|
10
|
+
doing: synthesize evidence, understand stakeholder perspectives, compare choices,
|
|
11
|
+
and write useful messages. The original English/Korean procedures remain intact.
|
|
12
|
+
The v1.5 reader guides connect conclusions to context and next actions;
|
|
13
|
+
dedicated coding-specialist features are outside this version.
|
|
11
14
|
|
|
12
|
-
**English** | [한국어](README.ko.md)
|
|
15
|
+
**English** | [한국어](README.ko.md) | [简体中文](README.zh.md) | [日本語](README.ja.md)
|
|
13
16
|
|
|
14
17
|
[](https://github.com/ParkerHwang/OpenSocrates/actions/workflows/ci.yml)
|
|
15
18
|
[](https://www.npmjs.com/package/opensocrates)
|
|
16
19
|
[](LICENSE)
|
|
17
20
|
|
|
18
|
-
##
|
|
21
|
+
## v1.5.1 on Mac and Windows
|
|
19
22
|
|
|
20
|
-
Version
|
|
21
|
-
|
|
22
|
-
|
|
23
|
+
Version 1.5.1 adds Simplified Chinese (`zh`) and Japanese (`ja`) reasoning
|
|
24
|
+
instructions alongside English and Korean, across all four existing host
|
|
25
|
+
profiles. It preserves the v1.5.0 platform scope: Apple-silicon Mac and Windows
|
|
26
|
+
x64, with native Claude Code on Mac only. Download archives and SHA-256 files from the
|
|
27
|
+
[v1.5.1 release](https://github.com/ParkerHwang/OpenSocrates/releases/tag/v1.5.1),
|
|
28
|
+
or use the [npm installer](https://www.npmjs.com/package/opensocrates/v/1.5.1).
|
|
23
29
|
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
30
|
+
| Host | Delivery | Platform and activation |
|
|
31
|
+
| --- | --- | --- |
|
|
32
|
+
| Codex | Existing hooks, controller and native decision runtime | Apple-silicon Mac and Windows x64; review the seven hooks in an interactive session |
|
|
33
|
+
| Claude Code CLI / Desktop local Code | Stateless native entry and complete installed references | Apple-silicon Mac; requires the Claude CLI, host login and plugin/hook permissions |
|
|
34
|
+
| Claude web / Desktop Chat / Cowork | Standalone content-only account skill ZIP | Export on Mac or Windows; upload, enable and add the one-time account instructions below |
|
|
35
|
+
| Antigravity conversation application | Owned modular rule and skill | Apple-silicon Mac and Windows x64; choose workspace or global scope |
|
|
36
|
+
|
|
37
|
+
Windows native Claude Code in a terminal or Desktop Code is outside this
|
|
38
|
+
release's scope. Account content does not install a native Claude integration.
|
|
39
|
+
See the [Mac guide](docs/macos-v1.5.md) and [Windows guide](docs/windows-v1.5.md).
|
|
27
40
|
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
41
|
+
Trusted native hooks and Antigravity's standing rule provide entry during normal
|
|
42
|
+
requests. For Claude account skills, add the standing instruction below to use
|
|
43
|
+
OpenSocrates without repeating its name. Selection still depends on the host
|
|
44
|
+
model and can be missed. Installation, loading, complete reads, application,
|
|
45
|
+
and useful outcomes are separate evidence levels. No general quality, token-cost,
|
|
46
|
+
or latency improvement is claimed.
|
|
33
47
|
|
|
34
|
-
|
|
35
|
-
|
|
48
|
+
**After installation:** follow the [visual setup guide](docs/setup-guide.md) for hook review, account skill switches, and host readiness. It also includes a request you can paste into an agent.
|
|
49
|
+
|
|
50
|
+
## Install or update
|
|
51
|
+
|
|
52
|
+
Install Node.js 20+, make the chosen host available, and sign in to that host.
|
|
53
|
+
Native runtimes are bundled; installation does not require Python. Start with
|
|
54
|
+
Codex on either supported platform:
|
|
36
55
|
|
|
37
56
|
```sh
|
|
38
|
-
npx --yes opensocrates@1.
|
|
39
|
-
npx --yes opensocrates@1.
|
|
57
|
+
npx --yes opensocrates@1.5.1 install --host codex
|
|
58
|
+
npx --yes opensocrates@1.5.1 status --host codex
|
|
40
59
|
```
|
|
41
60
|
|
|
42
|
-
|
|
43
|
-
only. Other host names are rejected before installation or removal.
|
|
61
|
+
For an existing Codex installation, including v1.5.0, use:
|
|
44
62
|
|
|
45
|
-
|
|
63
|
+
```sh
|
|
64
|
+
npx --yes opensocrates@1.5.1 update --host codex
|
|
65
|
+
```
|
|
46
66
|
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
67
|
+
Review the seven Codex hooks in an interactive session and start a fresh
|
|
68
|
+
conversation. Non-interactive execution may skip untrusted hooks. `status`
|
|
69
|
+
reports installation and integrity; it does not prove automatic delivery.
|
|
70
|
+
|
|
71
|
+
On Apple-silicon Mac, install the native Claude companion with:
|
|
51
72
|
|
|
52
73
|
```sh
|
|
53
|
-
|
|
54
|
-
npx --yes opensocrates@1.
|
|
55
|
-
npx --yes opensocrates@1.4.0 update --host codex
|
|
74
|
+
npx --yes opensocrates@1.5.1 install --host claude
|
|
75
|
+
npx --yes opensocrates@1.5.1 status --host claude
|
|
56
76
|
```
|
|
57
77
|
|
|
58
|
-
|
|
59
|
-
pending cleanup reported by the old installer. User conversation history and
|
|
60
|
-
unrelated files must be preserved. See [installation and removal](docs/advanced-usage.md).
|
|
78
|
+
For Antigravity, choose an existing absolute workspace directory:
|
|
61
79
|
|
|
62
|
-
|
|
80
|
+
```sh
|
|
81
|
+
npx --yes opensocrates@1.5.1 install --host antigravity --workspace /absolute/path/to/workspace
|
|
82
|
+
```
|
|
63
83
|
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
- Read complete instructions, examples, applicability limits, and required public
|
|
69
|
-
results. All 48 methods retain their English and Korean procedure bodies.
|
|
70
|
-
- Keep conclusions connected to evidence, uncertainty, and reopening conditions
|
|
71
|
-
while preserving the user's requested format.
|
|
84
|
+
On Windows, replace the directory with an absolute local-drive path such as
|
|
85
|
+
`C:\Work\Reading Workshop` and quote it. Omit `--workspace` for the global scope.
|
|
86
|
+
For Claude account content, export to an absolute ZIP filename in an existing
|
|
87
|
+
folder, then upload and enable the ZIP in Claude's Customize > Skills interface:
|
|
72
88
|
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
makes no separate selector-model call and adds no prompt or transcript storage.
|
|
77
|
-
The integration fails open so ordinary work can continue when it is unavailable.
|
|
78
|
-
See [decision-point retrieval](docs/decision-points.md) for the exact contract.
|
|
89
|
+
```sh
|
|
90
|
+
npx --yes opensocrates@1.5.1 export --host claude-chat --output /absolute/path/to/opensocrates-1.5.1-account.zip
|
|
91
|
+
```
|
|
79
92
|
|
|
80
|
-
|
|
93
|
+
### Claude Chat and Cowork: one-time account instructions
|
|
94
|
+
|
|
95
|
+
For use without typing `/opensocrates` on each request, enable the account skill
|
|
96
|
+
and append this instruction in **Settings → General → Instructions for Claude**.
|
|
97
|
+
Preserve your existing instructions. In older Cowork interfaces, use
|
|
98
|
+
**Settings → Cowork → Global instructions**; if Web and Desktop use different
|
|
99
|
+
accounts, configure each account you use.
|
|
100
|
+
|
|
101
|
+
```text
|
|
102
|
+
For requests that require interpretation or judgment, such as synthesizing
|
|
103
|
+
sources, comparing options, making decisions or drafting messages, load the
|
|
104
|
+
enabled OpenSocrates skill and follow its instructions even when I do not
|
|
105
|
+
mention it. Read the complete procedure and check applicability before applying
|
|
106
|
+
a reasoning method. Do not add unnecessary procedures to mechanical work such
|
|
107
|
+
as formatting.
|
|
108
|
+
```
|
|
81
109
|
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
110
|
+
Save once, then start a fresh conversation and describe your task normally.
|
|
111
|
+
The instruction guides model-selected skill use; it adds no native hook or
|
|
112
|
+
guaranteed every-turn enforcement. See the [step-by-step setup guide](docs/setup-guide.md#claude-standing-instructions)
|
|
113
|
+
and [Claude's official instruction settings](https://support.claude.com/en/articles/10185728-understanding-claude-s-personalization-features).
|
|
114
|
+
|
|
115
|
+
The platform guides cover Windows paths, account replacement, updates, disabling,
|
|
116
|
+
removal, and verified local-archive alternatives. With no local asset flags,
|
|
117
|
+
the installer downloads the pinned v1.5.1 archive and checksum from GitHub Releases.
|
|
118
|
+
|
|
119
|
+
New profiles require explicit `--host claude`, `--host antigravity`, or
|
|
120
|
+
`--host claude-chat`. The default and `--host all` continue to select Codex;
|
|
121
|
+
they do not install every new host. New profiles have no purge, trust-reset,
|
|
122
|
+
or automatic-update route.
|
|
123
|
+
|
|
124
|
+
Old multi-host installations are not silently adopted or erased. Reconcile their
|
|
125
|
+
exact origin and ownership before installing a new profile. Back up an existing
|
|
126
|
+
OpenSocrates account skill and its enabled state before replacing it.
|
|
127
|
+
|
|
128
|
+
## Reasoning instruction languages
|
|
129
|
+
|
|
130
|
+
All 48 methods include complete English, Korean, Simplified Chinese and Japanese
|
|
131
|
+
procedures and examples: 192 procedure files and three teacher questions per
|
|
132
|
+
method per language, 576 questions in total. Content revision 4 adds the two
|
|
133
|
+
languages while preserving the original English/Korean method text.
|
|
134
|
+
|
|
135
|
+
Language selection prefers an explicit request over a stored locale preference,
|
|
136
|
+
then uses the current input's script. Kana selects Japanese; otherwise a dominant
|
|
137
|
+
Hangul script selects Korean and dominant Han characters select Chinese.
|
|
138
|
+
Han-only text is ambiguous, so explicitly choose Japanese when needed. Empty,
|
|
139
|
+
Latin-only and tied inputs fall back to English. See the
|
|
140
|
+
[language guide](docs/v1.5.1.md) for exact invocation and preference details.
|
|
141
|
+
The npm installer's command output is separate from reasoning instruction
|
|
142
|
+
language; this release does not translate every installer message or host UI.
|
|
143
|
+
Windows ARM64 support remains separate v1.6.0 work.
|
|
144
|
+
|
|
145
|
+
## When attribution appears
|
|
146
|
+
|
|
147
|
+
A final answer ends with the exact line `Powered by OpenSocrates` only when an
|
|
148
|
+
eligible authored method was read in full and actually applied to that answer.
|
|
149
|
+
The wording is the same in all four languages. Reader guidance alone and
|
|
150
|
+
mechanical work do not qualify. The line is attribution, not proof of native
|
|
151
|
+
application or a better result.
|
|
152
|
+
|
|
153
|
+
## Privacy and development
|
|
154
|
+
|
|
155
|
+
The default decision path makes no extra selector-model call and stores no raw
|
|
156
|
+
prompts, transcripts, screenshots, or hidden reasoning. The native Claude entry
|
|
157
|
+
does not read transcripts or initialize a database. The account skill has no
|
|
158
|
+
executable surface; normal host conversations and model requests follow the
|
|
159
|
+
host's own authentication, permissions, retention settings, and terms.
|
|
160
|
+
See [SECURITY.md](SECURITY.md).
|
|
161
|
+
|
|
162
|
+
- [Mac installation and evidence boundaries](docs/macos-v1.5.md)
|
|
163
|
+
- [Windows installation and evidence boundaries](docs/windows-v1.5.md)
|
|
164
|
+
- [Authored methods](content/methods/) · [Decision-point contract](docs/decision-points.md)
|
|
165
|
+
- [v1.5.1 languages, selection and scope](docs/v1.5.1.md)
|
|
166
|
+
- [v1.5.0 implementation baseline](docs/v1.5.0/IMPLEMENTATION_PLAN.md)
|
|
167
|
+
- [Changelog](CHANGELOG.md) · [Contributing](CONTRIBUTING.md) · [Code of Conduct](CODE_OF_CONDUCT.md)
|
|
168
|
+
|
|
169
|
+
OpenSocrates is [MIT licensed](LICENSE), independent of OpenAI, Anthropic, and
|
|
170
|
+
Google, and not endorsed by them.
|
package/README.zh.md
ADDED
|
@@ -0,0 +1,113 @@
|
|
|
1
|
+
<p align="center">
|
|
2
|
+
<img src="https://raw.githubusercontent.com/ParkerHwang/OpenSocrates/main/docs/assets/opensocrates-banner.jpg" alt="OpenSocrates" width="820">
|
|
3
|
+
</p>
|
|
4
|
+
|
|
5
|
+
# OpenSocrates
|
|
6
|
+
|
|
7
|
+
**帮助你得到能够理解、评估并使用的推理结果。**
|
|
8
|
+
|
|
9
|
+
OpenSocrates 为资料综合、观点理解、方案比较和消息撰写提供 48 种完整的推理
|
|
10
|
+
方法。v1.5.1 新增简体中文(`zh`)和日语(`ja`),并保留原有英文、韩文方法
|
|
11
|
+
正文。四种语言共有 192 份完整步骤文件;每种方法每种语言有 3 个面向代理的
|
|
12
|
+
教师问题,共 576 个。内容修订号为 4。此版本不新增编程专用方法。
|
|
13
|
+
|
|
14
|
+
[English](README.md) | [한국어](README.ko.md) | **简体中文** | [日本語](README.ja.md)
|
|
15
|
+
|
|
16
|
+
## 支持的平台与应用
|
|
17
|
+
|
|
18
|
+
| 应用 | 交付方式 | 平台与启用要求 |
|
|
19
|
+
| --- | --- | --- |
|
|
20
|
+
| Codex | 现有钩子、控制器和原生判断运行时 | Apple Silicon Mac、Windows x64;在交互会话中检查 7 个钩子的信任状态 |
|
|
21
|
+
| Claude Code CLI / Desktop 本地 Code | 无状态原生入口及完整本地参考文件 | Apple Silicon Mac;需要 Claude CLI、登录及插件和钩子权限 |
|
|
22
|
+
| Claude 网页版 / Desktop Chat / Cowork | 不含可执行代码的账户技能 ZIP | 在 Mac 或 Windows 导出后,另行上传、启用并保存账户指令 |
|
|
23
|
+
| Antigravity 对话应用 | 模块化规则与技能 | Apple Silicon Mac、Windows x64;选择工作区或全局范围 |
|
|
24
|
+
|
|
25
|
+
平台范围沿用 v1.5.0。Windows 原生 Claude Code 不在此版本范围内;Windows
|
|
26
|
+
ARM64 支持属于独立的 v1.6.0 工作。账户技能不会安装原生 Claude 集成。
|
|
27
|
+
|
|
28
|
+
## 安装或更新
|
|
29
|
+
|
|
30
|
+
准备 Node.js 20 或更高版本,安装并登录所需应用。安装包内含原生运行时,
|
|
31
|
+
无需另装 Python。从 [v1.5.1 发布页](https://github.com/ParkerHwang/OpenSocrates/releases/tag/v1.5.1)
|
|
32
|
+
获取归档和 SHA-256 校验文件,或使用版本固定的 npm 安装器。
|
|
33
|
+
|
|
34
|
+
```sh
|
|
35
|
+
npx --yes opensocrates@1.5.1 install --host codex
|
|
36
|
+
npx --yes opensocrates@1.5.1 status --host codex
|
|
37
|
+
# 更新现有 Codex 安装:
|
|
38
|
+
npx --yes opensocrates@1.5.1 update --host codex
|
|
39
|
+
```
|
|
40
|
+
|
|
41
|
+
在交互式 Codex 中输入 `/hooks`,检查 OpenSocrates 的 7 个钩子,按应用提供的
|
|
42
|
+
信任流程完成必要审批,然后开始新对话。`status` 说明安装及完整性状态,不能
|
|
43
|
+
证明钩子已被信任或指令已在真实任务中应用。
|
|
44
|
+
|
|
45
|
+
在 Apple Silicon Mac 安装 Claude Code 集成:
|
|
46
|
+
|
|
47
|
+
```sh
|
|
48
|
+
npx --yes opensocrates@1.5.1 install --host claude
|
|
49
|
+
npx --yes opensocrates@1.5.1 status --host claude
|
|
50
|
+
```
|
|
51
|
+
|
|
52
|
+
为 Antigravity 指定已存在的工作区绝对路径;省略 `--workspace` 则选择全局范围。
|
|
53
|
+
同一任务避免同时使用工作区和全局副本。
|
|
54
|
+
|
|
55
|
+
```sh
|
|
56
|
+
npx --yes opensocrates@1.5.1 install --host antigravity --workspace /absolute/path/to/workspace
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
Windows 使用本地驱动器绝对路径并加引号,例如 `"C:\Work\Reading Workshop"`。
|
|
60
|
+
Claude 账户技能需导出到已存在文件夹内的绝对 ZIP 路径:
|
|
61
|
+
|
|
62
|
+
```sh
|
|
63
|
+
npx --yes opensocrates@1.5.1 export --host claude-chat --output /absolute/path/to/opensocrates-1.5.1-account.zip
|
|
64
|
+
```
|
|
65
|
+
|
|
66
|
+
随后在 Claude 的 **Customize → Skills** 上传并启用。替换已有 OpenSocrates
|
|
67
|
+
技能前,下载备份并记录其启用状态。导出成功不等于上传、启用或自动选择成功。
|
|
68
|
+
在 **Settings → General → Instructions for Claude** 追加以下指令,保留原有
|
|
69
|
+
指令;旧版 Cowork 可使用 **Settings → Cowork → Global instructions**。
|
|
70
|
+
网页版和 Desktop 若使用不同账户,应分别设置。
|
|
71
|
+
|
|
72
|
+
```text
|
|
73
|
+
对于需要解释或判断的任务,例如综合资料、比较方案、作出决策或撰写消息,
|
|
74
|
+
即使我没有提到名称,也请加载已启用的 OpenSocrates 技能并遵循其指令。
|
|
75
|
+
应用推理方法前,先完整阅读其步骤并确认适用条件。对于格式转换等机械性
|
|
76
|
+
工作,不要增加不必要的推理步骤。
|
|
77
|
+
```
|
|
78
|
+
|
|
79
|
+
保存后开始新对话。账户技能由应用模型选择,可能遗漏;它不新增原生钩子,也
|
|
80
|
+
不保证每条消息都会调用。默认安装和 `--host all` 仍只选择 Codex,其他应用
|
|
81
|
+
必须显式指定。新集成不新增 purge、信任重置或自动更新操作。
|
|
82
|
+
[设置指南(英文)](docs/setup-guide.md)说明后续界面步骤;
|
|
83
|
+
[Mac 指南](docs/macos-v1.5.md)和 [Windows 指南](docs/windows-v1.5.md)保留
|
|
84
|
+
v1.5.0 的安装与恢复基线,当前命令请使用上述 1.5.1 版本。
|
|
85
|
+
|
|
86
|
+
## 指令语言
|
|
87
|
+
|
|
88
|
+
优先使用明确指定的语言,其次使用已保存的语言偏好,再根据当前输入的文字
|
|
89
|
+
判断。含平假名或片假名时选择日语;否则韩文占优时选择韩语,汉字占优时
|
|
90
|
+
选择中文。只有汉字的输入无法可靠区分中文与日语,默认使用中文,需要日语
|
|
91
|
+
时应明确指定。空输入、只有拉丁字符或字符数量持平时回退到英文。
|
|
92
|
+
|
|
93
|
+
推理指令语言与 npm 安装器的命令输出、应用界面语言分开。本次更新不承诺
|
|
94
|
+
翻译每条安装器消息。关于运行时 `locale` 偏好命令和显式 JSON 请求,请参阅
|
|
95
|
+
[语言与范围指南(英文)](docs/v1.5.1.md)。
|
|
96
|
+
|
|
97
|
+
## 使用标注与隐私
|
|
98
|
+
|
|
99
|
+
只有完整读取并实际应用了适用的正典方法,最终答案才以完全相同的英文行
|
|
100
|
+
`Powered by OpenSocrates` 结尾。仅使用阅读指导或完成机械性工作不满足条件。
|
|
101
|
+
该行是来源标注,不能证明原生应用成功或答案质量提升。
|
|
102
|
+
|
|
103
|
+
默认判断路径不额外调用选择模型,不保存原始提示、对话、截图或隐藏推理。
|
|
104
|
+
Claude 原生入口不读取对话,也不初始化数据库;账户技能不含可执行代码。
|
|
105
|
+
应用本身的认证、权限、留存设置及条款仍适用于正常对话。
|
|
106
|
+
[安全政策](SECURITY.md)说明相关边界。安装、加载、完整阅读、实际应用和结果
|
|
107
|
+
是否有用属于不同的证据;本项目不宣称普遍的质量、成本或速度提升。
|
|
108
|
+
|
|
109
|
+
- [方法正文](content/methods/) · [判断点约定](docs/decision-points.md)
|
|
110
|
+
- [版本变更](CHANGELOG.md) · [贡献指南](CONTRIBUTING.md) · [行为准则](CODE_OF_CONDUCT.md)
|
|
111
|
+
|
|
112
|
+
OpenSocrates 采用 [MIT 许可证](LICENSE),是独立项目,不隶属于 OpenAI、
|
|
113
|
+
Anthropic 或 Google,也未获其背书。
|
package/SECURITY.md
CHANGED
|
@@ -2,8 +2,14 @@
|
|
|
2
2
|
|
|
3
3
|
## Supported versions
|
|
4
4
|
|
|
5
|
-
Security fixes are provided for the latest `1.x` release.
|
|
6
|
-
|
|
5
|
+
Security fixes are provided for the latest `1.x` release. Version 1.5.0 preserves
|
|
6
|
+
the v1.4 Codex foundation and adds native Mac Claude
|
|
7
|
+
Code, content-only Claude account delivery, and modular Antigravity content.
|
|
8
|
+
The Windows continuation supports content-only Claude account verification/export
|
|
9
|
+
and Antigravity modular lifecycle on x64; native Windows Claude Code is excluded.
|
|
10
|
+
Live account selection and conversation-app loading require separate observations.
|
|
11
|
+
Pre-1.0 builds and retired
|
|
12
|
+
host integrations are unsupported; they are not silently adopted by a new profile.
|
|
7
13
|
|
|
8
14
|
## Report a vulnerability
|
|
9
15
|
|
|
@@ -18,7 +24,7 @@ severity, safe fixes, and maintainer availability.
|
|
|
18
24
|
|
|
19
25
|
## Security boundary
|
|
20
26
|
|
|
21
|
-
The default
|
|
27
|
+
The default native submission entry emits discovery guidance only. It starts no
|
|
22
28
|
selector-model request and creates no initial method artifact. The decision
|
|
23
29
|
command loads fixed canonical content and retains only volatile, context-scoped
|
|
24
30
|
delivery identities and agent availability assertions. It never treats an agent
|
|
@@ -27,6 +33,29 @@ does not authorize a CWD-controlled fallback. This command adds no disk state,
|
|
|
27
33
|
raw prompt logging, conversation retention, screenshot capture, authentication
|
|
28
34
|
call, or telemetry.
|
|
29
35
|
|
|
36
|
+
The Claude adapter has its own bounded JSON normalization and native response
|
|
37
|
+
shape. It drops private prompt/transcript fields, resolves complete controller
|
|
38
|
+
locations only inside the installed package, and never opens a transcript or
|
|
39
|
+
initializes a database. Stop and SessionEnd do not require a repair or assert a
|
|
40
|
+
native application receipt. Unavailable native entry fails open with empty output.
|
|
41
|
+
|
|
42
|
+
Claude account exports and Antigravity modular packages contain complete authored
|
|
43
|
+
content without hooks, runtimes, or credential access. An Antigravity standing
|
|
44
|
+
rule links the owned controller; it never authorizes unrelated account or file
|
|
45
|
+
actions. Workspace/global origins and existing user instructions remain separate.
|
|
46
|
+
|
|
47
|
+
Windows addon operations refuse junctions/reparse ancestors, foreign ownership,
|
|
48
|
+
untrusted writable DACLs, unknown files and changed inventories. New directories
|
|
49
|
+
are created with the current user's explicit owner and protected DACL. A held
|
|
50
|
+
directory lease blocks ancestor rename during mutations; an exclusive operation
|
|
51
|
+
lock is never removed as stale automatically. Rollback preserves changed
|
|
52
|
+
replacement content and its recovery backup. Local drive paths are required;
|
|
53
|
+
network shares are not qualified. Existing settings are not normalized by
|
|
54
|
+
rewriting permissions. ZIP paths reject aliases, streams, links, special entries,
|
|
55
|
+
case collisions and file/directory conflicts before extraction. Portable content
|
|
56
|
+
archives carry fixed regular-file modes and no executables. Account exports use
|
|
57
|
+
verified captured bytes and refuse conflicting output files.
|
|
58
|
+
|
|
30
59
|
The retained legacy Codex selector is a separate compatibility path. It uses the
|
|
31
60
|
pinned SDK and existing Codex authentication in an isolated worker, with bounded
|
|
32
61
|
read-only context access, disabled recursive hooks/plugins, a deadline, and
|
|
@@ -36,7 +65,10 @@ it cannot prove model understanding, method application, or improved answers.
|
|
|
36
65
|
Legacy SDK credential-copy and POSIX context access are unavailable on Windows.
|
|
37
66
|
|
|
38
67
|
OpenSocrates has no backend, telemetry, separate account, or API-key requirement.
|
|
39
|
-
Ordinary model requests
|
|
68
|
+
Ordinary model requests and host conversation storage remain subject to the
|
|
69
|
+
chosen host's authentication, privacy settings, permissions, and service terms.
|
|
70
|
+
The product's no-retention contract does not replace the host's retention policy.
|
|
71
|
+
Host-managed policy
|
|
40
72
|
and hook approvals remain part of the host trust boundary. Installation and
|
|
41
73
|
synthetic fixtures do not establish live hook delivery.
|
|
42
74
|
|
|
@@ -53,8 +85,14 @@ and reports its exact recovery path. Purge refuses unknown, changed, linked, or
|
|
|
53
85
|
in-use payloads. Codex trust is preserved unless the explicit `--reset-trust`
|
|
54
86
|
option requests removal of the seven exact OpenSocrates trust entries through a
|
|
55
87
|
validated transactional configuration update. Conversation history is preserved.
|
|
56
|
-
Retired-host installation state must be
|
|
57
|
-
that owned it;
|
|
88
|
+
Retired-host installation state must be reconciled with the installer version
|
|
89
|
+
that owned it; the new profiles do not reinterpret it as Codex or addon state.
|
|
90
|
+
The additive Mac driver verifies exact package inventories and owned markers,
|
|
91
|
+
preserves disabled state, and rejects unknown or modified collisions. Native
|
|
92
|
+
Claude registration uses supported host operations; Antigravity touches only its
|
|
93
|
+
owned rule/skill files. New profiles support exact owned removal, without purge,
|
|
94
|
+
trust reset, or automatic updates. Account export never activates an account
|
|
95
|
+
skill; preserve the old skill and its backup until replacement qualification.
|
|
58
96
|
|
|
59
97
|
The optional macOS LaunchAgent uses the verified installer and the selected npm
|
|
60
98
|
channel. It does not read or terminate active Codex sessions. Its owner-only
|
|
@@ -63,6 +101,11 @@ prompts, transcripts, credentials, workspace paths, or raw errors. Automatic
|
|
|
63
101
|
updates and automatic major upgrades are opt-in. Windows scheduled updates are
|
|
64
102
|
unavailable; use manual updates.
|
|
65
103
|
|
|
104
|
+
Those scheduler controls remain in the existing Codex lane. `--host all` does
|
|
105
|
+
not expand it to the additional profiles. Local archive installation
|
|
106
|
+
requires paired `--asset` and `--checksum`; checksum matching does not create a
|
|
107
|
+
published release or establish live host trust.
|
|
108
|
+
|
|
66
109
|
Windows x64 packages use real owner/DACL checks, binary I/O, file locks, and ZIP
|
|
67
110
|
path validation. Signing, notarization, SmartScreen reputation, Windows ARM64,
|
|
68
111
|
and separate clean-machine or GUI behavior are not inferred from package tests.
|
package/VERSION
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
1.
|
|
1
|
+
1.5.1
|