UseTokenSaver CLI/SEA package

$expected = '6ef63be61642b65b0ea5991b87cc78e50b4fd6536883481e1a83e7b8326a9b40'
$actual = (Get-FileHash -Algorithm SHA256 -LiteralPath '.\dist\usetokensaver-hook.exe').Hash.ToLowerInvariant()
if ($actual -ne $expected) { throw "SHA-256 mismatch: $actual" }
Write-Output 'SHA-256 verified'

%PLUGIN_ROOT%\dist\usetokensaver-hook.exe

$env:USETOKENSAVER_CHATGPT_MANAGED_CLI = '1'

# UseTokenSaver CLI/SEA package

This package is the frozen, Windows self-contained CLI/Hook artifact for the
verified offline/CLI scope. It does not claim verified Desktop host
integration.

## Download

Download the archive named
`usetokensaver-cli-sea-0.1.0+codex.20260723071812.zip` from the public product
page, then extract it into a private plugin directory.

The archive contains:

- `dist/usetokensaver-hook.exe` — self-contained Node 24 Windows executable;
- `SHA256SUMS.txt` — the certified SHA-256 digest;
- `INSTALL.md` — this installation summary;
- `demo-input.json` — synthetic input only;
- `LICENSE.txt` — repository license notice.

## Verify before installing

From PowerShell, run this from the extracted package directory:

```powershell
$expected = '6ef63be61642b65b0ea5991b87cc78e50b4fd6536883481e1a83e7b8326a9b40'
$actual = (Get-FileHash -Algorithm SHA256 -LiteralPath '.\dist\usetokensaver-hook.exe').Hash.ToLowerInvariant()
if ($actual -ne $expected) { throw "SHA-256 mismatch: $actual" }
Write-Output 'SHA-256 verified'
```

Do not install a package whose digest does not match `SHA256SUMS.txt`.

## Configure the verified CLI Hook

Keep the extracted directory private and set `PLUGIN_ROOT` to its parent. The
Hook command is exactly:

```text
%PLUGIN_ROOT%\dist\usetokensaver-hook.exe
```

Use it only with a supported ChatGPT-managed Codex CLI process. For one
confirmed CLI window, set this variable in the same PowerShell process before
launching Codex:

```powershell
$env:USETOKENSAVER_CHATGPT_MANAGED_CLI = '1'
```

This is user confirmation, not authentication evidence. API-key mode and
unconfirmed or differently identified CLI surfaces silently allow.

## Behavior and limits

- Only GPT-5.6 Sol, Terra, and Luna are in scope.
- Analysis is local-first and retains no raw prompts by default.
- Unknown, unsupported, malformed, timed-out, or filesystem-failure paths fail
  open: empty stdout and exit code 0.
- The Hook never silently rewrites a prompt or changes native Codex settings.
- Desktop `UserPromptSubmit` host invocation and output acceptance are
  **unverified**. This package must not be described as verified Desktop
  pre-send enforcement.

The included `demo-input.json` is synthetic documentation, not a live prompt
and not a guarantee that a standalone invocation has the required host/session
metadata.