[Juliusolsson05]

PR-2 of the conditions framework

Migrate Codex's headless conditions onto the new generic conditions-core, proven byte-for-byte against the current working implementation. Cross-repo: the packages/codex-headless submodule PR + this gitlink bump.

⚠️ Merge order (gitlink hazard): the codex-headless submodule PR Juliusolsson05/codex-headless#17 MUST merge before this gitlink (c2f5dc4) is valid on integration/conditions-framework. Until then the submodule commit only exists on the submodule PR branch.

1. Generic headless evaluator — src/shared/conditions-core/evaluator.ts

makeEvaluator<P,I>(provider, modules, now) returns { evaluate, keyOf, changed, resolveAction }:

• evaluate(inputs) loops the modules; for each, state = detect(inputs); skip on null; else insert conditions[kind] = { kind, state, actions: actions(state) } in module-array order.
• keyOf(snap) = JSON.stringify(snap.conditions) — IDENTICAL to the legacy codexConditionSnapshotKey (ts excluded, keys NOT sorted; insertion order is observable and load-bearing).
• changed(key) is the dedupe latch (seeded '{}', matching the old lastConditionKey).
• resolveAction routes a custom action to the first module with a resolve — dormant today, wired for the later answering driver.

Pure; clock injected via now() so the golden can pin ts.

2. Vendor-sync — scripts/sync-conditions-core.mjs

Submodules can't import the app's src/shared, so the headless slice only (contract.ts + evaluator.ts, NOT the React view.ts/ConditionOutlet.tsx/dispatch.ts) is copied into each headless package's src/conditions/core/, each header-stamped // GENERATED by scripts/sync-conditions-core.mjs — edit src/shared/conditions-core, do not edit here. codex-headless is synced in this PR; claude-code-headless's destination is wired (sync: false) so PR-3 reuses the script unchanged.

3. Codex migration (in the submodule PR)

• trustDialogModule + approvalModule via defineModule, preserving the EXACT two-source approval merge (screen approval + rollout approvalMetadata) and the exact pty actions (\r, p, \x1b; trust accept/2\r).
• CODEX_MODULES = [trustDialogModule, approvalModule] — order preserved (trust first).
• codex.switch-model-prompt left as-is (typed, no detector) — unchanged.
• evaluateCodexConditions + codexConditionSnapshotKey kept exported (re-implemented via the evaluator).
• CodexHeadless.publishConditionSnapshot repointed to a long-lived makeEvaluator('codex', CODEX_MODULES, () => Date.now()). Emitted snapshot shape + both events byte-identical; legacy per-event trust-dialog emission untouched.

4. Byte-for-byte golden matrix

Throwaway script (not committed) ran OLD (inline copy of prior builders) vs NEW over the matrix; assert JSON.stringify(snapshot.conditions) identical (normalize only ts; keys NOT sorted):

Case	Result
trust hidden, no approval	PASS
trust visible, no approval	PASS
approval screen-only	PASS
approval metadata-only	PASS
approval screen+metadata	PASS
approval metadata-cleared (screen present, meta null)	PASS
trust visible + approval screen+metadata (both live, order)	PASS
approvalMetadata undefined (omitted)	PASS
screen with null command + metadata	PASS

ALL PASS.

Typecheck (vs integration baseline)

• agent-code web (tsc -b tsconfig.web.json, cleared .tsc-out): 7 errors — unchanged from baseline (all pre-existing, unrelated).
• agent-code node (tsc -b tsconfig.node.json, cleared .tsc-out): 4 errors — unchanged from baseline.
• codex-headless (tsc --noEmit + full build): 1 error — unchanged from baseline (SemanticChannel.ts:283, pre-existing).
• Zero NEW errors anywhere.

Submodule gitlink: packages/codex-headless → c2f5dc4f61799380c9256b8fd7d2663f86b6aea3.

🤖 Generated with Claude Code

---

⚠️ Merge order & method (required — gitlink safety):

1. Merge codex-headless#17 FIRST, with a merge commit (--merge), never squash/rebase — squash/rebase mints a new SHA and orphans gitlink commit 9480f580, breaking git submodule update on fresh clones.
2. Do not "Update branch"/rebase Add dispatch mode layout #17 before merging.
3. Then merge this PR into integration/conditions-framework with --merge.