@askexenow/exe-os 0.9.410 → 0.9.412

package/dist/hooks/subagent-stop.js

@@ -1,22 +1,22 @@
 import {
   detectSubagentSidechain
-} from "../chunk-YSDSQRE2.js";
+} from "../chunk-BIPTWAEO.js";
 import {
   buildSubagentCheckpointEvent,
   recordSubagentCheckpointEventBestEffort
-} from "../chunk-FCX2XHIC.js";
+} from "../chunk-DWRULKB3.js";
 import "../chunk-SH45SJQW.js";
 import {
   getActiveAgent,
   resolveAgentAttribution
-} from "../chunk-IHBYJG7N.js";
+} from "../chunk-GL5ZG72X.js";
 import "../chunk-7YX73K2R.js";
 import "../chunk-5WA4DG2A.js";
 import {
   sessionScopeFilter
-} from "../chunk-WSYIQKZ6.js";
+} from "../chunk-GM4UEZDE.js";
+import "../chunk-PYXXL7N7.js";
 import "../chunk-ZKGWHT56.js";
-import "../chunk-5F3E57TQ.js";
 import "../chunk-WT4RI36X.js";
 import "../chunk-E23LNUWJ.js";
 import "../chunk-TDF2XKLK.js";
@@ -24,16 +24,16 @@ import "../chunk-EIKATSE4.js";
 import "../chunk-MJCSEIFI.js";
 import "../chunk-QDMZ5DX2.js";
 import "../chunk-HME6ITKV.js";
-import "../chunk-6T5RC3L4.js";
+import "../chunk-QSW5DHMZ.js";
 import "../chunk-VI4ATC6I.js";
 import "../chunk-A27Q27CT.js";
 import "../chunk-6L4VIYLZ.js";
-import "../chunk-WLV27PAO.js";
+import "../chunk-JGBYZTWH.js";
 import "../chunk-T5SM4RXY.js";
-import "../chunk-ASA2UJDH.js";
+import "../chunk-CFFSHBQF.js";
 import "../chunk-IVXELUEQ.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-2AXJRXA6.js";
+import "../chunk-2BOLFLAU.js";
 import "../chunk-WJWRQQMS.js";
 import "../chunk-PCV52RYM.js";
 import "../chunk-BTSWFMEH.js";
@@ -42,18 +42,18 @@ import "../chunk-IMYGYIAI.js";
 import "../chunk-NLEW62VC.js";
 import "../chunk-3DAEZILW.js";
 import "../chunk-DRTJCG6B.js";
-import "../chunk-J6RTX7XT.js";
+import "../chunk-TVWYMOZ4.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-YRUZK2QA.js";
 import "../chunk-MP2AFCGL.js";
 import {
   canCoordinate
-} from "../chunk-LBEBSXZA.js";
+} from "../chunk-L5JFVK5T.js";
 import "../chunk-BBMTVAE3.js";
 import "../chunk-TKDITWDN.js";
-import "../chunk-E2346GKI.js";
-import "../chunk-IXRYS5X3.js";
+import "../chunk-SINIRUYZ.js";
+import "../chunk-6777GNWI.js";
 import "../chunk-7FE43JRU.js";
 import "../chunk-5YEUPUV4.js";
 import "../chunk-YYB5PMTK.js";
@@ -62,9 +62,9 @@ import "../chunk-QH5ZQ5SJ.js";
 import "../chunk-ZQEJ4IX2.js";
 import "../chunk-C7GHNJPW.js";
 import "../chunk-UWGQNJIE.js";
-import "../chunk-KNEEOZWN.js";
+import "../chunk-EOWJXCYC.js";
 import "../chunk-3R7UDPVR.js";
-import "../chunk-XJDSTA2C.js";
+import "../chunk-6D2O5SAH.js";
 import "../chunk-A7JYF4RG.js";
 import "../chunk-ARX6TAGN.js";
 import "../chunk-MMS2HBRT.js";
@@ -100,7 +100,7 @@ process.on("unhandledRejection", (err) => {
   process.exit(1);
 });
 try {
-  const { verifyOrBlock } = await import("../hook-integrity-TSJYZFZ6.js");
+  const { verifyOrBlock } = await import("../hook-integrity-6MNEPT6W.js");
   if (!await verifyOrBlock(new URL(import.meta.url).pathname)) process.exit(2);
 } catch (err) {
   const code = err?.code;
@@ -146,7 +146,7 @@ async function recordSubagentStopCheckpoint(payload, agentId) {
   });
   await Promise.race([
     (async () => {
-      const { fastDbInit } = await import("../fast-db-init-UN225WS7.js");
+      const { fastDbInit } = await import("../fast-db-init-TFRTK6EH.js");
       const client = await fastDbInit({ daemonOnly: true });
       await recordSubagentCheckpointEventBestEffort({
         client,
@@ -184,7 +184,7 @@ process.stdin.on("end", async () => {
     if (!failClosedOnTimeout) {
       process.exit(0);
     }
-    const { fastDbInit } = await import("../fast-db-init-UN225WS7.js");
+    const { fastDbInit } = await import("../fast-db-init-TFRTK6EH.js");
     const client = await fastDbInit({ caller: "hook" });
     const saScope = sessionScopeFilter();
     const pendingResult = await client.execute({

package/dist/hooks/summary-worker.js

@@ -1,14 +1,14 @@
 import {
   writeContinuityCheckpoint
-} from "../chunk-LAWI42NC.js";
+} from "../chunk-J4B4M5PH.js";
 import {
   initStore,
   vectorToBlob
-} from "../chunk-X2EBM5BQ.js";
-import "../chunk-UQKGV6SX.js";
+} from "../chunk-LSHUX7P4.js";
+import "../chunk-MOBZTIJQ.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-LK6OG47X.js";
+import "../chunk-FYSKQPTE.js";
 import "../chunk-5MOYSU5A.js";
 import "../chunk-BYP3DOUU.js";
 import "../chunk-76CJBM36.js";
@@ -16,9 +16,9 @@ import {
   getCurrentSessionScope,
   sessionScopeFilter,
   writeNotification
-} from "../chunk-WSYIQKZ6.js";
+} from "../chunk-GM4UEZDE.js";
+import "../chunk-PYXXL7N7.js";
 import "../chunk-ZKGWHT56.js";
-import "../chunk-5F3E57TQ.js";
 import "../chunk-WT4RI36X.js";
 import "../chunk-E23LNUWJ.js";
 import "../chunk-TDF2XKLK.js";
@@ -26,16 +26,16 @@ import "../chunk-EIKATSE4.js";
 import "../chunk-MJCSEIFI.js";
 import "../chunk-QDMZ5DX2.js";
 import "../chunk-HME6ITKV.js";
-import "../chunk-6T5RC3L4.js";
+import "../chunk-QSW5DHMZ.js";
 import "../chunk-VI4ATC6I.js";
 import "../chunk-A27Q27CT.js";
 import "../chunk-6L4VIYLZ.js";
-import "../chunk-WLV27PAO.js";
+import "../chunk-JGBYZTWH.js";
 import "../chunk-T5SM4RXY.js";
-import "../chunk-ASA2UJDH.js";
+import "../chunk-CFFSHBQF.js";
 import "../chunk-IVXELUEQ.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-2AXJRXA6.js";
+import "../chunk-2BOLFLAU.js";
 import "../chunk-WJWRQQMS.js";
 import "../chunk-PCV52RYM.js";
 import "../chunk-BTSWFMEH.js";
@@ -44,7 +44,7 @@ import "../chunk-IMYGYIAI.js";
 import "../chunk-NLEW62VC.js";
 import "../chunk-3DAEZILW.js";
 import "../chunk-DRTJCG6B.js";
-import "../chunk-J6RTX7XT.js";
+import "../chunk-TVWYMOZ4.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-YRUZK2QA.js";
@@ -52,11 +52,11 @@ import "../chunk-MP2AFCGL.js";
 import {
   canCoordinate,
   getClient
-} from "../chunk-LBEBSXZA.js";
+} from "../chunk-L5JFVK5T.js";
 import "../chunk-BBMTVAE3.js";
 import "../chunk-TKDITWDN.js";
-import "../chunk-E2346GKI.js";
-import "../chunk-IXRYS5X3.js";
+import "../chunk-SINIRUYZ.js";
+import "../chunk-6777GNWI.js";
 import "../chunk-7FE43JRU.js";
 import "../chunk-5YEUPUV4.js";
 import "../chunk-YYB5PMTK.js";
@@ -65,10 +65,10 @@ import "../chunk-QH5ZQ5SJ.js";
 import "../chunk-ZQEJ4IX2.js";
 import "../chunk-C7GHNJPW.js";
 import "../chunk-UWGQNJIE.js";
-import "../chunk-IQCC6WFI.js";
-import "../chunk-KNEEOZWN.js";
+import "../chunk-4J77TCTX.js";
+import "../chunk-EOWJXCYC.js";
 import "../chunk-3R7UDPVR.js";
-import "../chunk-XJDSTA2C.js";
+import "../chunk-6D2O5SAH.js";
 import "../chunk-A7JYF4RG.js";
 import "../chunk-ARX6TAGN.js";
 import "../chunk-MMS2HBRT.js";
@@ -90,13 +90,13 @@ process.on("unhandledRejection", (err) => {
   process.exit(1);
 });
 try {
-  const { verifyHookIntegrity, isRunnable } = await import("../hook-integrity-TSJYZFZ6.js");
+  const { verifyHookIntegrity, isRunnable } = await import("../hook-integrity-6MNEPT6W.js");
   const check = verifyHookIntegrity(new URL(import.meta.url).pathname);
   if (!isRunnable(check)) {
     process.stderr.write(`[SECURITY] Hook tamper detected: summary-worker.js \u2014 ${check.reason} \u2014 refusing to run
 `);
     try {
-      const { pushNotifyAsync } = await import("../push-notifications-W3UNHDC5.js");
+      const { pushNotifyAsync } = await import("../push-notifications-QW4BWRC7.js");
       pushNotifyAsync({
         event: "security_alert",
         title: "Hook tamper detected",
@@ -180,7 +180,7 @@ async function main() {
   let summaryText = "";
   let limitReached = false;
   try {
-    const { assertMemoryLimit } = await import("../plan-limits-PG6HG2DT.js");
+    const { assertMemoryLimit } = await import("../plan-limits-3BGHIHX6.js");
     await assertMemoryLimit();
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);

package/dist/index.js

@@ -1,36 +1,36 @@
 import {
   runtime_exports
-} from "./chunk-PONGX3YG.js";
-import "./chunk-T7W75LII.js";
-import "./chunk-2LJ2GZEE.js";
+} from "./chunk-6J2J3VJS.js";
+import "./chunk-BE3UETW6.js";
+import "./chunk-PDQGR5LZ.js";
 import "./chunk-YZFZDJWZ.js";
 import "./chunk-CMCYL2JC.js";
 import "./chunk-NGVOA6ZQ.js";
-import "./chunk-O377P7GM.js";
 import "./chunk-Y5LJYDX4.js";
+import "./chunk-O377P7GM.js";
 import "./chunk-JRLNE3T2.js";
 import "./chunk-2O2UKMUE.js";
 import "./chunk-HF25XPZE.js";
-import "./chunk-SUGAHHVR.js";
+import "./chunk-W7VKGB42.js";
 import {
   gateway_exports
-} from "./chunk-UBTKHJCB.js";
+} from "./chunk-PTF5TB6O.js";
+import "./chunk-ORCCI2VV.js";
 import "./chunk-2SRG3B3D.js";
-import "./chunk-K464YYT5.js";
-import "./chunk-K6XWIJN7.js";
+import "./chunk-RHJOTGEU.js";
+import "./chunk-3N24FV22.js";
 import "./chunk-RJT7H2KR.js";
 import "./chunk-Q3V7K4ME.js";
 import "./chunk-N5RRQOAC.js";
-import "./chunk-ORCCI2VV.js";
-import "./chunk-DLHE4PCM.js";
-import "./chunk-CKRZBQ2K.js";
-import "./chunk-IUAW7FVX.js";
+import "./chunk-XEAZJXMZ.js";
+import "./chunk-FPF2PJFK.js";
+import "./chunk-GHYHNHDL.js";
 import "./chunk-FWFFZGSC.js";
 import "./chunk-ECGTESAP.js";
 import "./chunk-QLZ46RCK.js";
-import "./chunk-WSYIQKZ6.js";
+import "./chunk-GM4UEZDE.js";
+import "./chunk-PYXXL7N7.js";
 import "./chunk-ZKGWHT56.js";
-import "./chunk-5F3E57TQ.js";
 import "./chunk-WT4RI36X.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-TDF2XKLK.js";
@@ -38,16 +38,16 @@ import "./chunk-EIKATSE4.js";
 import "./chunk-MJCSEIFI.js";
 import "./chunk-QDMZ5DX2.js";
 import "./chunk-HME6ITKV.js";
-import "./chunk-6T5RC3L4.js";
+import "./chunk-QSW5DHMZ.js";
 import "./chunk-VI4ATC6I.js";
 import "./chunk-A27Q27CT.js";
 import "./chunk-6L4VIYLZ.js";
-import "./chunk-WLV27PAO.js";
+import "./chunk-JGBYZTWH.js";
 import "./chunk-T5SM4RXY.js";
-import "./chunk-ASA2UJDH.js";
+import "./chunk-CFFSHBQF.js";
 import "./chunk-IVXELUEQ.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-2AXJRXA6.js";
+import "./chunk-2BOLFLAU.js";
 import "./chunk-WJWRQQMS.js";
 import "./chunk-PCV52RYM.js";
 import "./chunk-BTSWFMEH.js";
@@ -56,19 +56,19 @@ import "./chunk-IMYGYIAI.js";
 import "./chunk-NLEW62VC.js";
 import "./chunk-3DAEZILW.js";
 import "./chunk-DRTJCG6B.js";
-import "./chunk-J6RTX7XT.js";
+import "./chunk-TVWYMOZ4.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-H5V5N3Q4.js";
-import "./chunk-XDWIJBTY.js";
+import "./chunk-CFO47VW4.js";
 import "./chunk-ML4S5SHZ.js";
 import "./chunk-YRUZK2QA.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-LBEBSXZA.js";
+import "./chunk-L5JFVK5T.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-E2346GKI.js";
-import "./chunk-IXRYS5X3.js";
+import "./chunk-SINIRUYZ.js";
+import "./chunk-6777GNWI.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
 import "./chunk-YYB5PMTK.js";
@@ -77,10 +77,10 @@ import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
 import "./chunk-C7GHNJPW.js";
 import "./chunk-UWGQNJIE.js";
-import "./chunk-IQCC6WFI.js";
-import "./chunk-KNEEOZWN.js";
+import "./chunk-4J77TCTX.js";
+import "./chunk-EOWJXCYC.js";
 import "./chunk-3R7UDPVR.js";
-import "./chunk-XJDSTA2C.js";
+import "./chunk-6D2O5SAH.js";
 import "./chunk-A7JYF4RG.js";
 import "./chunk-ARX6TAGN.js";
 import "./chunk-MMS2HBRT.js";

package/dist/{installer-4IVP2PTX.js → installer-34XZ7JMW.js}

@@ -1,6 +1,6 @@
 import {
   resolvePackageRoot
-} from "./chunk-22XJWSWN.js";
+} from "./chunk-SXUABANK.js";
 import "./chunk-XBOLFVMD.js";
 import {
   EXE_HOOK_FILES,
@@ -10,18 +10,18 @@ import "./chunk-ZPPPHVSU.js";
 import {
   buildMcpHttpHeaders,
   mcpHttpUrl
-} from "./chunk-YJ7MCZSY.js";
+} from "./chunk-27NG2NTG.js";
 import "./chunk-67IVG6CB.js";
-import "./chunk-IHBYJG7N.js";
+import "./chunk-GL5ZG72X.js";
 import "./chunk-7YX73K2R.js";
 import "./chunk-5WA4DG2A.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
-import "./chunk-LBEBSXZA.js";
+import "./chunk-L5JFVK5T.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-E2346GKI.js";
-import "./chunk-IXRYS5X3.js";
+import "./chunk-SINIRUYZ.js";
+import "./chunk-6777GNWI.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
 import "./chunk-YYB5PMTK.js";

package/dist/{installer-UFRZHMX5.js → installer-356RMQ2K.js}

@@ -13,22 +13,22 @@ import {
   setupGhostty,
   setupTmux,
   setupWezterm
-} from "./chunk-22XJWSWN.js";
+} from "./chunk-SXUABANK.js";
 import "./chunk-XBOLFVMD.js";
 import "./chunk-KM6XSFHP.js";
 import "./chunk-ZPPPHVSU.js";
-import "./chunk-YJ7MCZSY.js";
+import "./chunk-27NG2NTG.js";
 import "./chunk-67IVG6CB.js";
-import "./chunk-IHBYJG7N.js";
+import "./chunk-GL5ZG72X.js";
 import "./chunk-7YX73K2R.js";
 import "./chunk-5WA4DG2A.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
-import "./chunk-LBEBSXZA.js";
+import "./chunk-L5JFVK5T.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-E2346GKI.js";
-import "./chunk-IXRYS5X3.js";
+import "./chunk-SINIRUYZ.js";
+import "./chunk-6777GNWI.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
 import "./chunk-YYB5PMTK.js";

package/dist/{installer-CJWNUASI.js → installer-7TN36Z7T.js}

@@ -1,6 +1,6 @@
 import {
   resolvePackageRoot
-} from "./chunk-22XJWSWN.js";
+} from "./chunk-SXUABANK.js";
 import {
   loadPreferences
 } from "./chunk-XBOLFVMD.js";
@@ -15,18 +15,18 @@ import {
 import {
   buildMcpHttpHeaders,
   mcpHttpUrl
-} from "./chunk-YJ7MCZSY.js";
+} from "./chunk-27NG2NTG.js";
 import "./chunk-67IVG6CB.js";
-import "./chunk-IHBYJG7N.js";
+import "./chunk-GL5ZG72X.js";
 import "./chunk-7YX73K2R.js";
 import "./chunk-5WA4DG2A.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
-import "./chunk-LBEBSXZA.js";
+import "./chunk-L5JFVK5T.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-E2346GKI.js";
-import "./chunk-IXRYS5X3.js";
+import "./chunk-SINIRUYZ.js";
+import "./chunk-6777GNWI.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
 import "./chunk-YYB5PMTK.js";
@@ -42,10 +42,11 @@ import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";
 
 // src/adapters/codex/installer.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, rename, rm, chmod } from "fs/promises";
 import { existsSync, readFileSync, realpathSync } from "fs";
 import path from "path";
 import os from "os";
+import { parse as parseToml } from "smol-toml";
 async function mergeCodexHooks(packageRoot, homeDir = os.homedir()) {
   const codexDir = path.join(homeDir, ".codex");
   const hooksPath = path.join(codexDir, "hooks.json");
@@ -267,15 +268,14 @@ var CODEX_EXE_MCP_TOOL_TIMEOUT_SEC = 120;
 function tomlString(value) {
   return JSON.stringify(value);
 }
-function codexHttpHeadersToml(homeDir) {
-  const headers = buildMcpHttpHeaders(homeDir);
+function codexHttpHeadersToml(headers) {
   return `{ ${Object.entries(headers).map(([key, value]) => `${tomlString(key)} = ${tomlString(value)}`).join(", ")} }`;
 }
-function desiredCodexMcpSection(homeDir) {
+function desiredCodexMcpSection(headers) {
   return [
     "[mcp_servers.exe-os]",
     `url = ${tomlString(mcpHttpUrl())}`,
-    `http_headers = ${codexHttpHeadersToml(homeDir)}`,
+    `http_headers = ${codexHttpHeadersToml(headers)}`,
     // `exe-start-codex` is non-interactive and pins approval_policy="never".
     // Explicit approval prevents Codex from auto-rejecting MCP tool calls as
     // "user cancelled MCP tool call" before they reach the daemon.
@@ -285,16 +285,57 @@ function desiredCodexMcpSection(homeDir) {
     ""
   ].join("\n");
 }
-function reconcileCodexMcpSection(sectionContent, homeDir) {
+var MANAGED_SERVER_KEY_LINE = /^["']?(?:command|args|env|type|url|http_headers|default_tools_approval_mode|startup_timeout_sec|tool_timeout_sec)["']?\s*[=.]/;
+var EXE_OS_HTTP_HEADERS_SUBTABLE_HEADER = /^[ \t]*\[[ \t]*["']?mcp_servers["']?[ \t]*\.[ \t]*["']?exe-os["']?[ \t]*\.[ \t]*["']?http_headers["']?[ \t]*\][ \t]*(?:#.*)?$/;
+var TOML_TABLE_HEADER = /^[ \t]*\[/;
+var TOML_BLANK_OR_COMMENT = /^[ \t]*(?:#.*)?$/;
+function stripExeOsHttpHeadersSubtables(content) {
+  const out = [];
+  let removed = 0;
+  let skipping = false;
+  let trailing = [];
+  const flushTrailing = () => {
+    let pending = trailing;
+    if (out.length > 0 && out[out.length - 1].trim() === "") {
+      while (pending.length > 0 && pending[0].trim() === "") pending = pending.slice(1);
+    }
+    out.push(...pending);
+    trailing = [];
+  };
+  for (const line of content.split("\n")) {
+    if (EXE_OS_HTTP_HEADERS_SUBTABLE_HEADER.test(line)) {
+      skipping = true;
+      trailing = [];
+      removed++;
+      continue;
+    }
+    if (skipping) {
+      if (TOML_TABLE_HEADER.test(line)) {
+        skipping = false;
+        flushTrailing();
+        out.push(line);
+      } else if (TOML_BLANK_OR_COMMENT.test(line)) {
+        trailing.push(line);
+      } else {
+        trailing = [];
+      }
+      continue;
+    }
+    out.push(line);
+  }
+  if (skipping) flushTrailing();
+  return { content: removed > 0 ? out.join("\n") : content, removed };
+}
+function reconcileCodexMcpSection(sectionContent, headers) {
   const desiredLines = {
     url: `url = ${tomlString(mcpHttpUrl())}`,
-    headers: `http_headers = ${codexHttpHeadersToml(homeDir)}`,
+    headers: `http_headers = ${codexHttpHeadersToml(headers)}`,
     approval: `default_tools_approval_mode = "approve"`,
     startup: `startup_timeout_sec = ${CODEX_EXE_MCP_STARTUP_TIMEOUT_SEC}`,
     tool: `tool_timeout_sec = ${CODEX_EXE_MCP_TOOL_TIMEOUT_SEC}`
   };
   let next = sectionContent;
-  next = next.split("\n").filter((line) => !/^(command|args|env|type|url|http_headers|default_tools_approval_mode|startup_timeout_sec|tool_timeout_sec)\s*=/.test(line.trim())).join("\n").replace(/\n{3,}/g, "\n\n");
+  next = next.split("\n").filter((line) => !MANAGED_SERVER_KEY_LINE.test(line.trim())).join("\n").replace(/\n{3,}/g, "\n\n");
   for (const line of [
     desiredLines.url,
     desiredLines.headers,
@@ -310,15 +351,49 @@ ${line}
   const changed = next.trimEnd() !== sectionContent.trimEnd();
   return { content: changed ? next : sectionContent, changed };
 }
+function validateCodexConfig(content, headers) {
+  let parsed;
+  try {
+    parsed = parseToml(content);
+  } catch (err) {
+    return `result is not valid TOML (${err instanceof Error ? err.message.split("\n")[0] : String(err)})`;
+  }
+  const servers = parsed.mcp_servers;
+  const server = servers?.["exe-os"];
+  if (!server) return "result has no [mcp_servers.exe-os] table";
+  if (server.url !== mcpHttpUrl()) return "result has the wrong exe-os url";
+  const written = server.http_headers;
+  const sameHeaders = written !== void 0 && Object.keys(written).length === Object.keys(headers).length && Object.entries(headers).every(([key, value]) => written[key] === value);
+  if (!sameHeaders) return "result has the wrong exe-os http_headers";
+  return null;
+}
+var CODEX_CONFIG_MODE = 384;
+async function writeCodexConfigSafely(configPath, previous, next) {
+  if (previous !== null) {
+    const backupPath = `${configPath}.exe-os.bak`;
+    await writeFile(backupPath, previous, { mode: CODEX_CONFIG_MODE });
+    await chmod(backupPath, CODEX_CONFIG_MODE);
+  }
+  const tmpPath = `${configPath}.exe-os.tmp-${process.pid}`;
+  try {
+    await writeFile(tmpPath, next, { mode: CODEX_CONFIG_MODE });
+    await chmod(tmpPath, CODEX_CONFIG_MODE);
+    await rename(tmpPath, configPath);
+  } catch (err) {
+    await rm(tmpPath, { force: true });
+    throw err;
+  }
+}
 async function registerCodexMcpServer(packageRoot, homeDir = os.homedir()) {
   const codexDir = path.join(homeDir, ".codex");
   const configPath = path.join(codexDir, "config.toml");
   void packageRoot;
   await mkdir(codexDir, { recursive: true });
-  let content = "";
-  if (existsSync(configPath)) {
-    content = await readFile(configPath, "utf-8");
-  }
+  const previous = existsSync(configPath) ? await readFile(configPath, "utf-8") : null;
+  const headers = buildMcpHttpHeaders(homeDir);
+  const stripped = stripExeOsHttpHeadersSubtables(previous ?? "");
+  let content = stripped.content;
+  let outcome;
   const sectionHeader = "[mcp_servers.exe-os]";
   const headerIndex = content.indexOf(sectionHeader);
   if (headerIndex !== -1) {
@@ -326,20 +401,29 @@ async function registerCodexMcpServer(packageRoot, homeDir = os.homedir()) {
     const nextSectionMatch = afterHeader.match(/\n\[/);
     const sectionEnd = nextSectionMatch ? headerIndex + sectionHeader.length + nextSectionMatch.index : content.length;
     const sectionContent = content.slice(headerIndex, sectionEnd);
-    const reconciled = reconcileCodexMcpSection(sectionContent, homeDir);
+    const reconciled = reconcileCodexMcpSection(sectionContent, headers);
     const tail = content.slice(sectionEnd);
-    if (!reconciled.changed) {
+    if (!reconciled.changed && stripped.removed === 0) {
       return "already-registered";
     }
     content = content.slice(0, headerIndex) + reconciled.content + tail;
-    await writeFile(configPath, content);
-    return "updated";
+    outcome = "updated";
+  } else {
+    const newSection = desiredCodexMcpSection(headers);
+    const separator = content.length > 0 && !content.endsWith("\n") ? "\n\n" : content.length > 0 ? "\n" : "";
+    content = content + separator + newSection;
+    outcome = "registered";
   }
-  const newSection = desiredCodexMcpSection(homeDir);
-  const separator = content.length > 0 && !content.endsWith("\n") ? "\n\n" : content.length > 0 ? "\n" : "";
-  content = content + separator + newSection;
-  await writeFile(configPath, content);
-  return "registered";
+  const problem = validateCodexConfig(content, headers);
+  if (problem) {
+    process.stderr.write(
+      `[exe-os] ERROR: refusing to write ${configPath}: ${problem}. The existing file was left untouched \u2014 fix it by hand (or restore a backup) and re-run the installer.
+`
+    );
+    return "refused";
+  }
+  await writeCodexConfigSafely(configPath, previous, content);
+  return outcome;
 }
 async function ensureCodexHooksFeature(homeDir = os.homedir()) {
   const configPath = path.join(homeDir, ".codex", "config.toml");
@@ -504,7 +588,7 @@ async function runCodexInstaller(homeDir) {
   );
   const mcpResult = await registerCodexMcpServer(packageRoot, homeDir);
   process.stderr.write(
-    `[exe-os] Codex MCP server: ${mcpResult}
+    mcpResult === "refused" ? "[exe-os] Codex MCP server: REFUSED \u2014 config.toml left unchanged (see error above)\n" : `[exe-os] Codex MCP server: ${mcpResult}
 `
   );
   const statusResult = await installCodexStatusLine(homeDir);