@awak-app/simy-cli 0.5.34 → 0.5.35

package/README.md

@@ -76,6 +76,13 @@ marketplace still points to SIMY’s generated local source. Plugin versions inc
 receive a fresh cache. Use a new Codex task to pick up updated skills; running
 tasks are not restarted. Missing or disabled plugins are not enabled automatically.
 Failed refreshes retry on the next check without blocking daemon startup.
+The desktop Sessions page discovers existing provider conversations and lets users
+choose monitoring or supported session supervision with a goal, acceptance
+criteria, an autonomy policy, and finite budgets. Codex enrollment uses an exact
+app-server session and checks writer ownership before each continuation. Claude
+can continue through a verified live SIMY hook in its original process; sessions
+without that hook support monitoring only, and cold takeover remains unavailable. See [session supervision](docs/session-supervision.md).
+
 The plugin also provides an opt-in, hook-based Delivery Loop in the user's existing
 Codex or Claude Code conversation. Install the plugin, review and enable SIMY hooks
 with `/hooks`, then request `/simy:delivery-loop` for the task. Installing or updating
@@ -104,6 +111,40 @@ with an absolute SIMY Web origin for another deployment. Non-loopback hosts
 must use HTTPS. `SIMY_WEB_ORIGIN` and the legacy `SIMY_API_ORIGIN` remain
 available for automation, but the command-line flag takes precedence.
 
+Work Pattern discovery checks the connected account's server-side personal
+setting before reading local Codex or Claude Code history. An explicit opt-out
+prevents both local inspection and upload. The daemon reads bounded user and
+assistant conversation chunks from active and archived Codex sessions and
+Claude Code projects, excluding delegated agents, tool output, reasoning, and
+injected runtime context. Dated messages outside the configured lookback are
+excluded even when their conversation continues today. Legacy transcripts with
+no message timestamps use the file timestamp as a fallback. The local cursor stores only opaque hashes and
+timestamps scoped to the connection, account, and device. Uploads require the
+`user_conversation.v2` Web, Crew, and Backend contract and exact per-chunk
+receipts before the cursor advances. Deploy those companion changes before
+enabling this CLI version; earlier receivers cannot acknowledge v2 history.
+
+History sync runs only in daemon mode, at startup and then at most every 15
+minutes, and only while a Codex or Claude Code executable passes the version
+check. The endpoint is the session's `api_base_url` (for app-dev,
+`https://app-dev.simy.one/api/local-cli/`). The history roots are
+`$CODEX_HOME/sessions`, `$CODEX_HOME/archived_sessions`, and
+`$CLAUDE_CONFIG_DIR/projects`, which default to `~/.codex` and `~/.claude`. When
+the daemon skips a sync, it logs the reason once to stderr. Reasons include no
+daemon mode, no valid session, and no compatible provider with each provider's
+status. To test with synthetic history only, point every root at temp
+directories and run the daemon in the foreground so its log stays visible.
+Stop it with Ctrl-C after the `uploaded` line:
+
+```sh
+export SIMY_HOME="$(mktemp -d)" CODEX_HOME="$(mktemp -d)" CLAUDE_CONFIG_DIR="$(mktemp -d)"
+# write synthetic *.jsonl files under $CODEX_HOME/sessions and $CLAUDE_CONFIG_DIR/projects/<project>/
+SIMY_DAEMON_CHILD=1 simy --daemon --host https://app-dev.simy.one --no-auto-update --no-workflow-prompt
+```
+
+`SIMY_DAEMON_CHILD=1` keeps the daemon attached to the terminal. The sync
+cursor is written under `$SIMY_HOME/work-pattern-history-sync/`.
+
 The CLI starts a loopback HTTP agent on a random available port, keeps a
 48-hour, origin-scoped local session, and opens a native coding chat. The first
 chat message creates the remote audit ledger and starts the local Agentic Loop

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.5.34",
+  "version": "0.5.35",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
@@ -36,12 +36,13 @@
     "test:e2e:completion-contract": "node ./scripts/completion-contract-e2e.js",
     "test:e2e:console:real-provider": "node ./scripts/real-provider-console-e2e.js",
     "test:e2e:console:fullstack": "node ./scripts/fullstack-cli-smoke.js",
-    "check": "npm run check:auto-update && node --check ./src/desktop-executor.js && node --check ./src/local-task.js && node --check ./scripts/desktop-executor-e2e.js && node --check ./scripts/pre-guardrail-e2e.js && node --check ./scripts/fixtures/fake-desktop-provider.js && npm run check:syntax && npm run check:real-provider-syntax && npm test && npm run check:package",
+    "check": "npm run check:auto-update && node --check ./src/desktop-executor.js && node --check ./src/local-task.js && node --check ./scripts/desktop-executor-e2e.js && node --check ./scripts/pre-guardrail-e2e.js && node --check ./scripts/fixtures/fake-desktop-provider.js && npm run check:syntax && npm run check:session-supervision-syntax && npm run check:real-provider-syntax && npm test && npm run check:package",
+    "check:session-supervision-syntax": "node --check ./src/session-supervision/index.js && node --check ./src/session-supervision/codex-app-server.js && node --check ./src/session-supervision/claude-sessions.js && node --check ./src/session-supervision/original-session-target.js",
     "check:auto-update": "node --check ./src/auto-update.js && node --check ./scripts/auto-update-e2e.js && npm run check:sqm",
     "check:workflow-observation-sender": "node --check ./src/workflow-observation-sender.js",
     "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/claude-parity-runtime-e2e.js && node --check ./scripts/claude-plugin-runtime-e2e.js",
-    "check:syntax": "node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js",
+    "check:syntax": "node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js && node --check ./src/delivery-hooks/supervisor.js",
     "check:package": "node ./scripts/check-package-contents.js",
     "build:macos-installer:dev": "bash packaging/build-macos-arm64.sh --unsigned-dev",
     "build:macos-installer": "bash packaging/build-macos-arm64.sh --production",

package/src/agent.js

@@ -95,7 +95,10 @@ import {
   classifyExecutionRequirement,
   EXECUTION_GUARDRAIL_POLICY_VERSION,
 } from "./execution-guardrail.js";
-import { normalizeWorkflowObservationBinding } from "./workflow-observation-sender.js";
+import {
+  normalizeWorkflowObservationBinding,
+  normalizeWorkflowStartIntent,
+} from "./workflow-observation-sender.js";
 import {
   createLocalTask,
   createLocalTaskId,
@@ -132,6 +135,7 @@ import {
   createSqmLocalReviewApi,
   createSqmLocalReviewWorker,
 } from "./sqm/review-worker.js";
+import { createCodexWorkPatternSync, workPatternHistoryHomes } from "./codex-work-pattern-sync.js";
 import {
   publishConnectionDiscovery,
   removeConnectionDiscovery,
@@ -232,6 +236,78 @@ export async function startAgent({
   };
   let durableLocalTaskWorker = null;
   let sqmLocalReviewWorker = null;
+  let codexWorkPatternSync = null;
+  let codexWorkPatternSyncInFlight = null;
+
+  let codexWorkPatternSkipReason = null;
+  const pollCodexWorkPatterns = () => {
+    if (shuttingDown) return;
+    const skipReason = codexWorkPatternSkipReasonFor({
+      daemon,
+      sessionValid: isSessionValid(session, Date.now(), apiOrigin),
+      capabilities: availableCapabilities,
+    });
+    // Report each distinct skip reason once so a skipped sync is never silent
+    // without repeating the same line on every heartbeat.
+    if (skipReason !== codexWorkPatternSkipReason) {
+      codexWorkPatternSkipReason = skipReason;
+      if (skipReason) reportCodexWorkPatternSyncStatus(`skipped: ${skipReason}`, quiet);
+    }
+    if (skipReason) return;
+    if (!codexWorkPatternSync) {
+      if (dependencies.codexWorkPatternSync) {
+        codexWorkPatternSync = dependencies.codexWorkPatternSync;
+      } else {
+        const homes = workPatternHistoryHomes({
+          codexHome: dependencies.codexHome,
+          claudeHome: dependencies.claudeHome,
+        });
+        reportCodexWorkPatternSyncStatus(
+          `reading history roots CODEX_HOME=${homes.codexHome} `
+            + `(sessions/, archived_sessions/) and CLAUDE_CONFIG_DIR=${homes.claudeHome} (projects/); `
+            + `state under ${sessionRoot}.`,
+          quiet,
+        );
+        codexWorkPatternSync = createCodexWorkPatternSync({ sessionRoot, ...homes });
+      }
+    }
+    let syncPromise;
+    try {
+      syncPromise = codexWorkPatternSync.poll({
+        apiOrigin,
+        apiBaseUrl: session.api_base_url,
+        token: session.token,
+        deviceId: session.device_id,
+        accountId: session.account_id,
+      });
+    } catch (error) {
+      reportCodexWorkPatternSyncError(error, quiet);
+      return;
+    }
+    const observed = Promise.resolve(syncPromise)
+      .then((result) => {
+        // `poll` returns undefined while throttled by the 15-minute interval.
+        if (!shuttingDown && result?.status) {
+          reportCodexWorkPatternSyncStatus(
+            `${result.status}; uploaded ${Number(result.uploaded || 0)} observation chunk(s).`,
+            quiet,
+          );
+        }
+        if (!shuttingDown && Number(result?.skipped_oversized || 0) > 0) {
+          reportCodexWorkPatternSyncError(
+            new Error(`${result.skipped_oversized} observation(s) exceeded the gateway limit.`),
+            quiet,
+          );
+        }
+      })
+      .catch((error) => {
+        if (!shuttingDown) reportCodexWorkPatternSyncError(error, quiet);
+      });
+    codexWorkPatternSyncInFlight = observed;
+    void observed.finally(() => {
+      if (codexWorkPatternSyncInFlight === observed) codexWorkPatternSyncInFlight = null;
+    });
+  };
   let loginUrl = null;
   const connectionStatus = createConnectionStatusTracker({ now: dependencies.statusNow });
   const codexStatus = createCodexStatusInspector({
@@ -463,6 +539,7 @@ export async function startAgent({
             await heartbeatDevice({ apiOrigin, apiBaseUrl: session.api_base_url, token: session.token,
               port, capabilities: refreshAvailableCapabilities(), repoInventory: repositoryInventory });
           }
+          pollCodexWorkPatterns();
         };
         if (deferStartupSynchronization) {
           void publishVerifiedProviders().catch((error) => reportHeartbeatError(error, quiet));
@@ -1074,11 +1151,19 @@ export async function startAgent({
           throw error;
         }
         let workflowObservationBinding;
+        let workflowStartIntent;
         try {
           workflowObservationBinding = normalizeWorkflowObservationBinding(
             body.workflow_observation_binding,
             { provider: body.backend },
           );
+          workflowStartIntent = normalizeWorkflowStartIntent(
+            body.workflow_start_intent,
+            { provider: body.backend },
+          );
+          if (workflowObservationBinding && workflowStartIntent) {
+            throw new Error("WorkFlow binding and start intent are mutually exclusive.");
+          }
         } catch (error) {
           json(res, 400, {
             error: error instanceof Error ? error.message : "WorkFlow observation binding is invalid.",
@@ -1102,6 +1187,7 @@ export async function startAgent({
             attachmentManifest: preparedAttachments,
             scenarioPack,
             workflowObservationBinding,
+            workflowStartIntent,
           });
           hashLocalTaskIdempotencyKey(idempotencyKey);
         } catch (error) {
@@ -1227,6 +1313,7 @@ export async function startAgent({
             idempotencyKeyHash: hashLocalTaskIdempotencyKey(idempotencyKey),
             requestFingerprint,
             workflowObservationBinding,
+            workflowStartIntent,
           });
           await persistLocalTask(task);
           localTaskRegistry.create(task);
@@ -1463,11 +1550,19 @@ export async function startAgent({
         }
         const indexedRepository = await ensureRepositoryIndexed(body.repository);
         let workflowObservationBinding;
+        let workflowStartIntent;
         try {
           workflowObservationBinding = normalizeWorkflowObservationBinding(
             body.workflow_observation_binding,
             { provider: body.backend },
           );
+          workflowStartIntent = normalizeWorkflowStartIntent(
+            body.workflow_start_intent,
+            { provider: body.backend },
+          );
+          if (workflowObservationBinding && workflowStartIntent) {
+            throw new Error("WorkFlow binding and start intent are mutually exclusive.");
+          }
         } catch (error) {
           json(res, 400, {
             error: error instanceof Error ? error.message : "WorkFlow observation binding is invalid.",
@@ -1517,6 +1612,7 @@ export async function startAgent({
             must_not: Array.isArray(body.must_not) ? body.must_not : [],
             proposal_id: typeof body.proposal_id === "string" ? body.proposal_id : null,
             workflow_observation_binding: workflowObservationBinding,
+            workflow_start_intent: workflowStartIntent,
             charter_context:
               body.charter_context &&
               typeof body.charter_context === "object" &&
@@ -1848,6 +1944,8 @@ export async function startAgent({
       if (codingRunMonitorTimer) clearInterval(codingRunMonitorTimer);
       if (codingRunMonitorInFlight) await codingRunMonitorInFlight;
       updateManager?.stop?.();
+      await codexWorkPatternSync?.close?.();
+      await codexWorkPatternSyncInFlight;
       await sqmLocalReviewWorker?.close?.();
       await durableLocalTaskWorker?.close?.();
       try {
@@ -2142,6 +2240,35 @@ function reportSqmLocalReviewError(error, quiet) {
   );
 }
 
+export function codexWorkPatternSkipReasonFor({ daemon, sessionValid, capabilities }) {
+  if (!daemon) return "history sync runs only in daemon mode (simy --daemon).";
+  if (!sessionValid) return "no valid SIMY session for this Web origin; sign in first.";
+  if (capabilities?.features?.codex_work_pattern_source === true) return null;
+  const versions = capabilities?.backend_versions || {};
+  const describe = (provider) => {
+    const inspection = versions[provider];
+    if (!inspection) return `${provider}=unknown`;
+    return `${provider}=${inspection.status || "unknown"}`
+      + (inspection.installed_version ? ` ${inspection.installed_version}` : "")
+      + (inspection.minimum_version ? ` (requires ${inspection.minimum_version}+)` : "");
+  };
+  return "no compatible Codex or Claude Code executable was detected "
+    + `(${describe("codex")}, ${describe("claude")}); history roots were not read. `
+    + "Install or update a provider, or set SIMY_CODEX_BIN / SIMY_CLAUDE_BIN.";
+}
+
+function reportCodexWorkPatternSyncStatus(message, quiet) {
+  if (quiet) return;
+  console.error(`SIMY work-pattern history sync: ${message}`);
+}
+
+function reportCodexWorkPatternSyncError(error, quiet) {
+  if (quiet) return;
+  console.error(
+    `SIMY work-pattern history sync: ${error instanceof Error ? error.message : String(error)}`,
+  );
+}
+
 function reportStartupConnectionError(error, quiet) {
   if (quiet) return;
   console.error(
@@ -2257,7 +2384,12 @@ function capabilitiesFromInspections(codex, claude) {
       durable_local_task_step_model: true,
       bounded_local_task_subtasks: true,
       sqm_agent_skill_management: true,
+      // Web adds `terminal_contract` to a WorkFlow binding only for CLIs that
+      // advertise this; older CLIs reject a fifth binding key.
+      workflow_terminal_contract: true,
+      workflow_deliverable_upload: true,
       sqm_local_review: codex.compatible || claude.compatible,
+      codex_work_pattern_source: codex.compatible || claude.compatible,
     },
     session_ttl_hours: 48,
   };
@@ -2616,7 +2748,11 @@ function daemonCapabilities(inspectedCapabilities, daemon) {
     inspectedCapabilities?.features || {},
     "sqm_local_review",
   );
-  return durableControlPlane || hasSqmLocalReview
+  const hasCodexWorkPatternSource = Object.hasOwn(
+    inspectedCapabilities?.features || {},
+    "codex_work_pattern_source",
+  );
+  return durableControlPlane || hasSqmLocalReview || hasCodexWorkPatternSource
       ? {
           ...inspectedCapabilities,
           features: {
@@ -2645,6 +2781,12 @@ function daemonCapabilities(inspectedCapabilities, daemon) {
                     daemon && inspectedCapabilities?.features?.sqm_local_review === true,
                 }
               : {}),
+            ...(hasCodexWorkPatternSource
+              ? {
+                  codex_work_pattern_source:
+                    daemon && inspectedCapabilities?.features?.codex_work_pattern_source === true,
+                }
+              : {}),
           },
         }
       : inspectedCapabilities;

package/src/backend-executable.js

@@ -3,6 +3,7 @@ import os from "node:os";
 import path from "node:path";
 
 const MACOS_CODEX_BINARY = "/Applications/ChatGPT.app/Contents/Resources/codex";
+const MACOS_CODEX_BUNDLED_BINARY = "/Applications/ChatGPT.app/Contents/Resources/codex-cli/bin/codex";
 
 export const BACKEND_VERSION_POLICIES = Object.freeze({
   codex: Object.freeze({
@@ -86,7 +87,7 @@ export function backendCandidates(backend, {
   return [
     environment.SIMY_CODEX_BIN,
     "codex",
-    ...(platform === "darwin" ? [MACOS_CODEX_BINARY] : []),
+    ...(platform === "darwin" ? [MACOS_CODEX_BUNDLED_BINARY, MACOS_CODEX_BINARY] : []),
   ];
 }
 

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.5.34";
+export const CLI_VERSION = "0.5.35";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function withCliContract(