@@ -13,6 +13,7 @@
 /engine/hooks/_headless_codex.py         @El-Kurdi-Chad
 /engine/hooks/_headless.py               @El-Kurdi-Chad
 /engine/hooks/_agents.py                 @El-Kurdi-Chad
+/engine/codex/                           @El-Kurdi-Chad
 /engine/hooks/_redact.py                 @El-Kurdi-Chad
 /engine/tests/terrain.py                 @El-Kurdi-Chad
 /engine/tests/terrain_app.py             @El-Kurdi-Chad
 
@@ -0,0 +1,84 @@
+# Claude alone, install.ps1 says and does what master's does. Both re-run over the install in place,
+# master's first, then this one's: on screen the same lines, in install.log the same commands, on disk
+# the same files, but for the kit's copies of the sources this change touches (each run puts its own
+# version back, backs the other up and says so, with the same names both ways) and their hashes in
+# installed.json. This one's run leaves everything as it found it. The user's own Codex (~\.codex, made
+# before the first install) is untouched, and nothing goes into ~\.agents.
+# Used by test.yml (job windows), without agents.json and with Claude chosen, from the repository's root:
+#   & .github/ci/same-as-master.ps1
+$ErrorActionPreference = "Stop"
+$H = $env:USERPROFILE
+$Mine = (Resolve-Path .).Path
+$T = Join-Path $env:RUNNER_TEMP "vs-master"
+if (-not (Test-Path -LiteralPath "$T\master\install.ps1")) {
+    New-Item -ItemType Directory $T -Force | Out-Null
+    git fetch -q --depth 1 origin master
+    if ($LASTEXITCODE) { throw "git fetch of master failed" }
+    git archive --format=zip -o "$T\master.zip" FETCH_HEAD
+    if ($LASTEXITCODE) { throw "git archive of master failed" }
+    Add-Type -AssemblyName System.IO.Compression.FileSystem
+    [IO.Compression.ZipFile]::ExtractToDirectory("$T\master.zip", "$T\master")
+}
+$Log = "$H\.brain-in-a-box\install.log"
+# What the kit installs, apart from gbrain's own state and the search index, which every run rebuilds.
+function Snap {
+    $m = [ordered]@{}
+    foreach ($r in "$H\.claude", "$H\.brain-in-a-box", "$H\.local\bin", "$H\.codex", "$H\.agents", "$H\Documents\Brain") {
+        if (-not (Test-Path -LiteralPath $r)) { continue }
+        Get-ChildItem -LiteralPath $r -Recurse -File -Force | Where-Object {
+            $_.FullName -notlike "$H\.brain-in-a-box\backups\*" -and $_.FullName -ne $Log -and $_.FullName -notlike "$H\Documents\Brain\.git\*"
+        } | Sort-Object FullName | ForEach-Object { $m[$_.FullName] = (Get-FileHash -LiteralPath $_.FullName).Hash }
+    }
+    foreach ($f in Get-ChildItem -LiteralPath "$H\.brain-search" -File -Filter *.py) { $m[$f.FullName] = (Get-FileHash -LiteralPath $f.FullName).Hash }
+    foreach ($t in Get-ScheduledTask -TaskName BrainNightly, BrainReflection -ErrorAction SilentlyContinue) {
+        $m["task $($t.TaskName)"] = "$($t.Actions.Execute) $($t.Actions.Arguments)"
+    }
+    return $m
+}
+function Run([string]$Repo) {
+    $from = (Get-Item -LiteralPath $Log).Length
+    $out = (powershell -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "$Repo\install.ps1" 2>&1 | Out-String)
+    if ($LASTEXITCODE) { Write-Host $out; throw "install.ps1 of $Repo failed ($LASTEXITCODE)" }
+    $all = [IO.File]::ReadAllBytes($Log)
+    # Not $log: PowerShell's names ignore case, and Snap, called from here, would read it as $Log.
+    $added = [Text.Encoding]::UTF8.GetString($all, [int]$from, $all.Length - [int]$from)
+    $norm = { param($s) ($s.Replace($Repo, "<kit>") -replace '\d{4}-\d\d-\d\d \d\d:\d\d:\d\d', '<date>') -replace 'backups\\\d{8}-\d{6}', 'backups\<date>' }
+    return @{ Out = (& $norm $out); Calls = @((& $norm $added) -split "`r?`n" | Where-Object { $_ -like '> *' }) -join "`n"; Snap = (Snap) }
+}
+function Differ($a, $b) { return @(@($a.Keys) + @($b.Keys) | Sort-Object -Unique | Where-Object { $a[$_] -ne $b[$_] }) }
+
+$backups = @(Get-ChildItem -LiteralPath "$H\.brain-in-a-box\backups" -Directory -ErrorAction SilentlyContinue | ForEach-Object { $_.FullName })
+$before = Snap
+$m = Run "$T\master"
+$b = Run $Mine
+# The sources this change touches, among those install.ps1 copies next to the hooks, and into ~\.brain-search.
+$touched = @(foreach ($f in @(Get-ChildItem "$Mine\engine\hooks" -Filter *.py -File) + @(Get-Item "$Mine\engine\nightly\windows-nightly.py") +
+                            @(Get-ChildItem "$Mine\engine\search" -Filter *.py -File)) {
+    $theirs = Join-Path "$T\master" ($f.FullName.Substring($Mine.Length + 1))
+    if (-not (Test-Path -LiteralPath $theirs) -or (Get-FileHash $theirs).Hash -ne (Get-FileHash $f.FullName).Hash) {
+        if ($f.Directory.Name -eq "search") { "$H\.brain-search\$($f.Name)" } else { "$H\.claude\hooks\brain\$($f.Name)" }
+    }
+})
+Write-Host "the kit's copies this change touches: $($touched -join ', ')"
+if ($m.Out -cne $b.Out) {
+    Compare-Object ($m.Out -split "`r?`n") ($b.Out -split "`r?`n") | Format-Table -AutoSize -Wrap | Out-String -Width 400 | Write-Host
+    throw "Claude alone: install.ps1 does not say what master's says (<= master, => this change)"
+}
+if ($m.Calls -cne $b.Calls) {
+    Compare-Object ($m.Calls -split "`n") ($b.Calls -split "`n") | Format-Table -AutoSize -Wrap | Out-String -Width 400 | Write-Host
+    throw "Claude alone: install.ps1 does not run what master's runs (install.log)"
+}
+$again = Differ $before $b.Snap
+if ($again.Count) { throw "Claude alone: this change's run did not leave the install as it found it: $($again -join ', ')" }
+$apart = Differ $m.Snap $b.Snap
+$want = @($touched | Where-Object { Test-Path -LiteralPath $_ }) + @(if ($touched.Count) { "$H\.brain-in-a-box\installed.json" })
+if ((($apart | Sort-Object) -join "`n") -cne (($want | Sort-Object) -join "`n")) {
+    throw "Claude alone: master's files and this change's differ in $($apart -join ', '), not just in $($want -join ', ')"
+}
+Write-Host "Claude alone: the same lines on screen, the same $(@($b.Calls -split "`n").Count) commands in install.log, the same $($b.Snap.Count) files but the $($touched.Count) touched"
+$now = @(Get-ChildItem "$H\.codex" -Recurse -File -Force | ForEach-Object { "$($_.FullName) $((Get-FileHash $_.FullName).Hash)" } | Sort-Object)
+if (($now -join "`n") -cne ((Get-Content "$env:RUNNER_TEMP\user-codex.txt") -join "`n")) { throw "Claude alone wrote into the user's own ~\.codex" }
+if (Test-Path -LiteralPath "$H\.agents") { throw "Claude alone wrote ~\.agents" }
+# These two runs' backups go: later steps count the ones they expect.
+Get-ChildItem -LiteralPath "$H\.brain-in-a-box\backups" -Directory -ErrorAction SilentlyContinue | Where-Object { $backups -notcontains $_.FullName } |
+    Remove-Item -Recurse -Force
@@ -86,6 +86,9 @@ def main(argv=None):
             code = 3
             break
         used.add(match)
+        # A person reads the question before typing. Answered at once, the reply can reach the
+        # terminal before `read -s` turns its echo off: an echoed Enter adds a blank line, now and then.
+        time.sleep(0.5)
         os.write(fd, (a.answers[match][1] + "\n").encode("utf-8"))
         print("\nterminal.py: answered %r to %r" % (a.answers[match][1], line.strip()), flush=True)
         line = ""