@bitkyc08/opencodex 2.37.0 → 2.38.0

package/src/generated/compatibility-version.json

@@ -10,7 +10,7 @@
     },
     {
       "path": "package.json",
-      "sha256": "1ce42cb209e189e5662d50d91fe31b25d320c766025eb24d04d4a23d49908235"
+      "sha256": "2f4952bf558b8eb933baf016cdf0f17b492df49c6d28977dbc132511e0e87039"
     },
     {
       "path": "scripts/model-metadata.source.json",
@@ -190,7 +190,7 @@
     },
     {
       "path": "src/adapters/cursor/protobuf-request.ts",
-      "sha256": "eaf745003ad751f643c26be35d68c1682fe9689b91ca287856ff6bda638259ac"
+      "sha256": "ce38936510a5999b47b207e540a434929b1fe18e4d255d9e25c788ec73846ab0"
     },
     {
       "path": "src/adapters/cursor/request-builder.ts",
@@ -202,7 +202,7 @@
     },
     {
       "path": "src/adapters/cursor/tool-definitions.ts",
-      "sha256": "10aba9489b34126287c1160452cb0a9d281f563a05be31255ed3a789b4bf6930"
+      "sha256": "06c1230fa2417f2c2a2b595042ca6a272cef3a005ca8d44e3e734b4329cf4f42"
     },
     {
       "path": "src/adapters/cursor/tool-result-normalize.ts",
@@ -502,7 +502,7 @@
     },
     {
       "path": "src/cli/capabilities.ts",
-      "sha256": "04ff7d2272b8e2c2186eb227f3b87131dfa1d207eb328a1599bf6cea018446da"
+      "sha256": "56e4e4a20bec90c6acadb60e479221e55ca0816e74df1f12a76a49acdbecd201"
     },
     {
       "path": "src/cli/catalog-prewarm.ts",
@@ -520,13 +520,17 @@
       "path": "src/cli/claude.ts",
       "sha256": "c39d97f543ff6aa40ae70610e5446761232575c6ce334adec9f94a41658f992d"
     },
+    {
+      "path": "src/cli/codex-cli-update.ts",
+      "sha256": "124ceb293db0bb6b011490f61303d8c001f54e9b7ff8afa809ab953decb870b6"
+    },
     {
       "path": "src/cli/codex-log-guard-doctor.ts",
       "sha256": "e6a62a5c9cbf65e900ec3523598a225f5ccd1238abb8da9cae232d60da6fdabf"
     },
     {
       "path": "src/cli/codex-shim-autorestore.ts",
-      "sha256": "9c6787a2a41f696eca1fbd95905a3f7b90718cf044dd21cb5e47f789fea48b44"
+      "sha256": "cac51c864181d9e652a014041aa1cc3f82cad1a2b528b28461aa01213f109cba"
     },
     {
       "path": "src/cli/codex-shim-readiness.ts",
@@ -558,15 +562,15 @@
     },
     {
       "path": "src/cli/export-command.ts",
-      "sha256": "104aab38ecf2cba19955d17c7faff506bb18d26605ba5ef49724b908fc584c46"
+      "sha256": "02c6a0a3a89f6759adb6d920efbd731db244855420b789c9b32603cb8286cdf1"
     },
     {
       "path": "src/cli/help.ts",
-      "sha256": "40131a703b9c70bb7a6d341774748e36a795b659c3a456511a0b71f3fea7c006"
+      "sha256": "17377f29265e32da27df8955d27cb262bff37e492c55f23b2edc745049e99b5a"
     },
     {
       "path": "src/cli/index.ts",
-      "sha256": "b4ba24ff43ee62b91e8dfb1cb267d044ca2261e2b50a737e310d5ec69fee650b"
+      "sha256": "882ed1ad0bc92b1d3a031cc0904d3e3a2c77c7e683e5cf83b0cdd260a5c20870"
     },
     {
       "path": "src/cli/init.ts",
@@ -590,7 +594,7 @@
     },
     {
       "path": "src/cli/launcher-context.ts",
-      "sha256": "fa5657ae359beb71306ed9ff5247a57ff1ed71c2afdafe2d212bdd6cf65a133a"
+      "sha256": "eb9a6a4e04a57a3de2efee6f654138f62882b61932e5a454e300108d7a9655a6"
     },
     {
       "path": "src/cli/minimax.ts",
@@ -610,7 +614,7 @@
     },
     {
       "path": "src/cli/opencode.ts",
-      "sha256": "44d6ab829c9937151bdd688d112d99d3f039a6050372a8b1a59a860e7a1d519c"
+      "sha256": "ea17d1ef158abaad78691fdabec69cfa6607db4172847398677cd35cb2a57169"
     },
     {
       "path": "src/cli/provider-runtime.ts",
@@ -626,7 +630,7 @@
     },
     {
       "path": "src/cli/registry.ts",
-      "sha256": "030dedbcf830ec1c2ae8555f486b245b101bcabd01b2e9c4960d2868b05cb8ba"
+      "sha256": "c6bb08a9729f39e00e32d4cdb156b3011b015dedfa04f48d760495cccf6ff4d1"
     },
     {
       "path": "src/cli/root.ts",
@@ -658,7 +662,7 @@
     },
     {
       "path": "src/cli/system-command.ts",
-      "sha256": "dbea2c1db4cf6e0a42696feabeb3fb1cfd73d668a7a998d45811eb0469e863ff"
+      "sha256": "c288c99fd05610654710545b4433190d5cc4347edda49e6a727503376137b0e0"
     },
     {
       "path": "src/cli/system-restart-client.ts",
@@ -682,7 +686,7 @@
     },
     {
       "path": "src/clients/config-export.ts",
-      "sha256": "9689b83c97115820171f697838b7535836cfa82b4ec82e07f317f08642bba962"
+      "sha256": "2562f1ca4a9a046ecd110b6a4c61be3c5af26ebe9d73441785c97dd4f95e7a8f"
     },
     {
       "path": "src/codex/account-id.ts",
@@ -718,7 +722,7 @@
     },
     {
       "path": "src/codex/account-store.ts",
-      "sha256": "c4eb54c0cb03fcece7b73d9682a33e625a7fdc83d167ada60aaa9fd02cd2a6ec"
+      "sha256": "db95c62d3f9edb4013e7c3f13e56680c494063182a8747781ef315e4d531ba98"
     },
     {
       "path": "src/codex/account-usability.ts",
@@ -754,7 +758,7 @@
     },
     {
       "path": "src/codex/autostart-health.ts",
-      "sha256": "e15bd998f1598bf6fe8a1bffdbb836225503baae36e6dc58357b4bb4bde425b6"
+      "sha256": "89a5e5d1bfb7397f2951d023af7298e2faa2e8aeddcebbd0c346ba278aed904a"
     },
     {
       "path": "src/codex/catalog-admission.ts",
@@ -810,11 +814,15 @@
     },
     {
       "path": "src/codex/catalog/provider-fetch.ts",
-      "sha256": "b5d178cd783bdcc483c488154c8bff0593979b7f4944896724685d6380346882"
+      "sha256": "05bbedcadd91339176745ba89d6ecb1a9b0813844f8f7361ab427d14b53e84ae"
     },
     {
       "path": "src/codex/catalog/sync.ts",
-      "sha256": "8769d7cd6162e433190b567f1393335efe0bae5f22bd59eeda0d9e5165014a4f"
+      "sha256": "b998796087e8dacefbd748667ff07ef1da72c31828b4fd9f33c773c8addeb5f5"
+    },
+    {
+      "path": "src/codex/cli-install-provenance.ts",
+      "sha256": "de2f9e8ef6910ac6863b50ac3b863dcb94ce727904461f20642ea6bf408bbd33"
     },
     {
       "path": "src/codex/codex-write-lock.ts",
@@ -826,12 +834,16 @@
     },
     {
       "path": "src/codex/convergence.ts",
-      "sha256": "18493448683c0d861a66259ff3cf1c55f2dc2cb36f3e47b37f42227fdb58b3c2"
+      "sha256": "45acdd4b2c339e9b1e6d2d471be24a91bd727bfebb90b56dfa31445932ba937e"
     },
     {
       "path": "src/codex/coordinator-doctor.ts",
       "sha256": "8b96fccfcebec924abf6b1c03bb8ef17f6e89469fb6f556c1f0d517654eaf941"
     },
+    {
+      "path": "src/codex/credential-mutation-epoch.ts",
+      "sha256": "fa23b49b0c53eceee61f0bcc5d74685aa5052031cc40e2c0cdab6b72bd478b51"
+    },
     {
       "path": "src/codex/custom-model-catalog-migration.ts",
       "sha256": "eb6c1420bc61b27c67772255a20192cb94605c988f6b597608e69b6346464c77"
@@ -958,7 +970,7 @@
     },
     {
       "path": "src/codex/main-account.ts",
-      "sha256": "29bf35dc638847c0c29eff3c4901a077e8dd702ac2859f1320b1fd08a43c9db6"
+      "sha256": "147e04ad9456c41c34b0b4fa2f50de42a4342e3e38496d35dd8ee3b43de3a38b"
     },
     {
       "path": "src/codex/management-convergence.ts",
@@ -970,7 +982,7 @@
     },
     {
       "path": "src/codex/model-entitlements.ts",
-      "sha256": "14a268cc77fd3e3f55961f2b85139d00decc8560c8cafbf354b03daf06af5fc1"
+      "sha256": "a799b9cce143af58129ee79013aee4f7599d1d7a9dc7a59b80ed376f8b379310"
     },
     {
       "path": "src/codex/native-main-admission.ts",
@@ -998,7 +1010,7 @@
     },
     {
       "path": "src/codex/native-profile-manager.ts",
-      "sha256": "b87e7393c56c8c6c650cdabc80b91790d674c680056baffcdd8a67db853cd9f9"
+      "sha256": "5fe33a50c243b01400cbdba6d320e7bc87f123c96aa7096f36fe5a2d8a203e53"
     },
     {
       "path": "src/codex/native-profile-processes.ts",
@@ -1080,9 +1092,13 @@
       "path": "src/codex/refresh.ts",
       "sha256": "648be78879375346ac2bf134f29a7523a8a436026d862bfaef0482d3840d8daa"
     },
+    {
+      "path": "src/codex/reset-credit-operation-ledger.ts",
+      "sha256": "045f3a1c2d124ea93673ab4c19f29204fec556ce12771754645c0a1afb1bfc91"
+    },
     {
       "path": "src/codex/reset-credit-recovery.ts",
-      "sha256": "af44b9c6b3e13cd86774f440c777ebe4b1c80a6e8f76bf22b386116d73356d93"
+      "sha256": "0978c72f8f254cfcaf61637d139b25e1c23c879d86258816dedcb467116e87de"
     },
     {
       "path": "src/codex/routing.ts",
@@ -1094,7 +1110,7 @@
     },
     {
       "path": "src/codex/shim.ts",
-      "sha256": "0ffddafd8f9c10344a213e67363318598894a113ae8e5d383440d935a9c3132f"
+      "sha256": "e8fac3195d09e3d92caa8f3643a6155d0b6f2d833992d097f22b6859148631e5"
     },
     {
       "path": "src/codex/subagent-defaults.ts",
@@ -1118,7 +1134,7 @@
     },
     {
       "path": "src/codex/user-identity.ts",
-      "sha256": "2a1745ce349af45d11b184ba9068dd016db743ea4285fc44a55cd331eff1429f"
+      "sha256": "139c28e3f638dfbe1363aa0c86a629357a1a4dc7ed4d40ab035f38067175d6d8"
     },
     {
       "path": "src/codex/warmup.ts",
@@ -1170,7 +1186,7 @@
     },
     {
       "path": "src/config.ts",
-      "sha256": "f49d596ebd29a6ee966251d237965262e0ae0e9969634cbb9022cd0c6fabc9d1"
+      "sha256": "9bba128978659e2cf26b15422b7db57c15edb56e846d4b04b50f20c322033c0c"
     },
     {
       "path": "src/config/atomic-write.ts",
@@ -1178,7 +1194,7 @@
     },
     {
       "path": "src/config/paths.ts",
-      "sha256": "c040ed442b1aba446e284db98dde59db98aecd81738fb1804ca3ce842e17d4e4"
+      "sha256": "61f45ac80e0b176b870dd660867f6f5799e61b55ae2fdfce5691bbb9e66e6049"
     },
     {
       "path": "src/config/process-state.ts",
@@ -1314,7 +1330,7 @@
     },
     {
       "path": "src/integrations/registry.ts",
-      "sha256": "193787b2fa41017a556fd3ac4183753b072ad6444eaae7868bb3c973d6ed3975"
+      "sha256": "09446d4c94c342d66133a23da03f64fad5bc60c33b97c764ae8e29d81d307534"
     },
     {
       "path": "src/integrations/serialize.ts",
@@ -1322,7 +1338,7 @@
     },
     {
       "path": "src/integrations/state.ts",
-      "sha256": "2bc3d2dc60f22636b48c49ec43b88a5f6ab494d92c36a15b803eaa2c526243b6"
+      "sha256": "b6f44aeb35606aadfc73b7c688bc75db4f34504238081b75cb94637a73f43b89"
     },
     {
       "path": "src/integrations/store.ts",
@@ -1334,7 +1350,7 @@
     },
     {
       "path": "src/integrations/writer.ts",
-      "sha256": "73f1d7d44c9141f98a3cc0058acff871ec26b23cb28e75f0270d8fdc531451da"
+      "sha256": "e69674605c41714a634903e464769df4ceb3a1a220351f4b01048df909124265"
     },
     {
       "path": "src/lab/artifacts/sanitize.ts",
@@ -1836,6 +1852,10 @@
       "path": "src/lib/bounded-body.ts",
       "sha256": "3ae1a26d2bfa6dc6b06ec536b81e46278bbde99f4038c70e38c60bd9bc9a63be"
     },
+    {
+      "path": "src/lib/bounded-subprocess.ts",
+      "sha256": "d4c3c7a3d5658670390fc615b9c8cf681fea720154a339a05bbca26f11420bcc"
+    },
     {
       "path": "src/lib/bun-binary-validator.d.mts",
       "sha256": "dec6eb67be41660293d373603ba2c886a3d6411213d42dca3c36a17aaa3a59e5"
@@ -2016,6 +2036,10 @@
       "path": "src/lib/state-store-sweeper.ts",
       "sha256": "f90bf9131614a1df77b52c99791b5f9dcab49f458fadc162825cc73489a0eb0e"
     },
+    {
+      "path": "src/lib/strict-semver.ts",
+      "sha256": "d4d81713842d7baa62e9971fa81b81e3b97ec724ff521a6b8dce814ab0dff395"
+    },
     {
       "path": "src/lib/system-restart-contract.ts",
       "sha256": "5bd6d639da7571788922bfa90757bd0edf82f3bfaa5f347c927bb8d0978d10e4"
@@ -2062,11 +2086,15 @@
     },
     {
       "path": "src/lib/windows-elevation.ts",
-      "sha256": "168ec95934c25036ec9056f83f89427a82ee2bcd83d098bd4419fcb27051e4ec"
+      "sha256": "3dec32d9b73ca730d5b8e0cd118bb109c0d32c8e796f99d9ec887bb9962a4906"
     },
     {
       "path": "src/lib/windows-secret-acl.ts",
-      "sha256": "b785cb223a269c7f468f856cf6229b5517c58ffcc59325dfd1935718e36c9fab"
+      "sha256": "1ebb5a92b28a0ea6b4d019f823a4646393d5da05fe6331bc1ad5b95a7c1c147c"
+    },
+    {
+      "path": "src/lib/windows-service-mutation-lock.ts",
+      "sha256": "00ab6da61fcbcc680baf221aa82ba9f40711978a93dd0a47c2ef1220bef7e4da"
     },
     {
       "path": "src/lib/windows-service-wrappers.ts",
@@ -2078,7 +2106,7 @@
     },
     {
       "path": "src/lib/windows-user-principal.ts",
-      "sha256": "8e13bdd920b57b4f4f4bc223128ebcf9fd75f5584b0eb7d686f75d6677f839d6"
+      "sha256": "6e933ba48d8df8924b608c647a5787ed9f7f5b0f8bf6494c8521ce37bd61b975"
     },
     {
       "path": "src/lib/winsw.ts",
@@ -2458,11 +2486,11 @@
     },
     {
       "path": "src/responses/spill-store.ts",
-      "sha256": "152ce26a13b7db8a867b2e789497230bc163ed0168eb45d929ee0c267165a354"
+      "sha256": "c68cde506896938c7e39b35ddd6b0192837880d77d83647dd00c7d9bd436311f"
     },
     {
       "path": "src/responses/state.ts",
-      "sha256": "d35e62769ea0667eaf9d1c7d5f8fec6d703bf95a10b9a28db32795867567d3c3"
+      "sha256": "e96d4d3cdfa96981b0d8becb09b652eae369264f572d152aa80100a0e6d28cf8"
     },
     {
       "path": "src/responses/thought-signature-replay.ts",
@@ -2642,11 +2670,11 @@
     },
     {
       "path": "src/server/index.ts",
-      "sha256": "93ff5628a12cf7178b18d89cc4d3d64031e4dc16648bd6dea930c3c3893e1438"
+      "sha256": "56f5e88b792ea4ec97e0ee31c790263fd0868b194d5e73b19fca1f1144435992"
     },
     {
       "path": "src/server/lifecycle.ts",
-      "sha256": "8cfbfa3ca721f55cda0c99b2d9904647ad8401b8f7e40c317201fb101b46b2fe"
+      "sha256": "2d91d67e9dd1412dad89a88b3670587ccd31f42a6ad564cd13f88e1ef2509095"
     },
     {
       "path": "src/server/live.ts",
@@ -2662,7 +2690,7 @@
     },
     {
       "path": "src/server/management-api.ts",
-      "sha256": "2ab6cb89e628670256fca9bda75ea6e9aa852f035ea95157aab9c00c03d4e828"
+      "sha256": "414af95a8be79d00c6f0aeb1c0a75d70a25161ff5176e1cefbc79160b016aec0"
     },
     {
       "path": "src/server/management-auth.ts",
@@ -2722,7 +2750,7 @@
     },
     {
       "path": "src/server/management/model-rows.ts",
-      "sha256": "ef61d365e116a718e46f73925315c244e0dab66191f1f449e5b281476dc009c7"
+      "sha256": "fb3dc00b5838aaa3830cdeec1ea948ebe5caf7e132d020fbd82f52c299bbaf01"
     },
     {
       "path": "src/server/management/native-integration-routes.ts",
@@ -2738,7 +2766,7 @@
     },
     {
       "path": "src/server/management/provider-routes.ts",
-      "sha256": "601fbb8acb59b2c032035e82021dfdad01b925957795a8ba8b3c86cb45c2a97c"
+      "sha256": "da8ccf2e7d7f1fccea87e83553bc2ed075b8e33f811d965da483e57afd4f2377"
     },
     {
       "path": "src/server/management/request-history-routes.ts",
@@ -2778,7 +2806,7 @@
     },
     {
       "path": "src/server/management/system-restart.ts",
-      "sha256": "9910b3d4a1e1652afd87e5c1b0969ee7ce0777d9ce79a625a5328be43bad2cb2"
+      "sha256": "d550ce46371882aab29866246b121e5b2c65ce31765889b32c67e5295101ebfc"
     },
     {
       "path": "src/server/management/system-routes.ts",
@@ -2970,7 +2998,7 @@
     },
     {
       "path": "src/server/startup-action-control.ts",
-      "sha256": "2cb1d5ffe03b661b8e7d5dbe876b78fe277ca69dc2c0171568947ef769810d1e"
+      "sha256": "171d2d5200c31b226ac74c45920b89fb64800da3c98887872a1001aa88a11f63"
     },
     {
       "path": "src/server/startup-health-cache.ts",
@@ -2998,7 +3026,7 @@
     },
     {
       "path": "src/service.ts",
-      "sha256": "410b8436ef3fc50e12d1c3764d826bc5c3f162e6203e7888854956958511d8df"
+      "sha256": "c8db18110d1c0e8ce06e7f4d568352508553ae4d5b2d9604d4f0054e0774457a"
     },
     {
       "path": "src/sidecar/auth.ts",
@@ -3006,7 +3034,7 @@
     },
     {
       "path": "src/sidecar/candidates.ts",
-      "sha256": "8ee0ccd7b240716220e9759892f62a40b1b1d376a1829d12ce017c344ae94900"
+      "sha256": "9248b5d5b213d15de616cf4546dbe4af12b7925f7ef260253c6367acc303ad8e"
     },
     {
       "path": "src/stall-timeout.ts",
@@ -3112,13 +3140,21 @@
       "path": "src/update/badge.ts",
       "sha256": "18e94f01758fe874c6aeed02c65b7368d730db8ade3ca7bbcc7b10d627658aa7"
     },
+    {
+      "path": "src/update/codex-cli-update-launch-policy.d.mts",
+      "sha256": "78a67e9e83690ce53b696264c7e8fa5efb6f8245d0db2cdf1cdf7a74b0e05ccd"
+    },
+    {
+      "path": "src/update/codex-cli-update-launch-policy.mjs",
+      "sha256": "58fa63c59c80361771080b49815e5d3fb37e35cd6616c60408d472b4ff691354"
+    },
     {
       "path": "src/update/index.ts",
-      "sha256": "bdae88dab1a40982ba54962d9583bc6d5b89153f5003d7e5c7562365f8cdf355"
+      "sha256": "f7ffb1f406760a2490b7f9f6c4373357bb455d6348d5b105a4462ffde0b7d44d"
     },
     {
       "path": "src/update/job.ts",
-      "sha256": "83c181639dcb91db2dc48fa6a7a21bc21e6ac7e1fa95e0b0761eda094bef4429"
+      "sha256": "ea7ad47a06ad0e7be6f3924908e11872d35df0aecd5eaf17c4d3cf3ad31e3d9d"
     },
     {
       "path": "src/update/notify.ts",

package/src/integrations/registry.ts

@@ -11,7 +11,11 @@
 import { homedir } from "node:os";
 import { join } from "node:path";
 import {
+  ClientPathError,
   EXPORT_CLIENTS,
+  asideAccountDir,
+  asideConfigPath,
+  asideHomeDir,
   dshConfigPath,
   dshHomeDir,
   gajaeConfigPath,
@@ -52,6 +56,86 @@ export interface IntegrationClientSpec {
   sourcePreservingYaml?: { path: readonly string[] };
   /** Coordinate the complete mutation through a sibling config lock. */
   writerLock?: { suffix: ".lock" };
+  /**
+   * Derive the config path AND the detect directory from one resolution, for a
+   * client whose paths depend on mutable state rather than only env and home.
+   *
+   * Only Aside needs this. Its two paths both come from the account id in
+   * `accounts.json`, so calling `configPath` and `detectDir` in sequence can
+   * straddle an account switch and check one account's install while writing
+   * another's catalog. Reading the id once and deriving both paths from it
+   * removes the window instead of narrowing it.
+   */
+  resolvePaths?: (env?: NodeJS.ProcessEnv, home?: string) => { configPath: string; detectDir: string };
+  /**
+   * Where the client's config WOULD live, for a client whose real path cannot
+   * be resolved yet.
+   *
+   * Only a client with `resolvePaths` needs this, and only because that
+   * resolution can legitimately fail on a machine where the client has never
+   * run. Aside's account id comes from a manifest the app writes at first
+   * launch, so a never-signed-in install has no account directory and no id --
+   * which is "not installed", not "we cannot verify this file".
+   *
+   * The value is a location to SHOW, never a location to write: it names the
+   * account root without an account, so it cannot be mistaken for a real
+   * catalog. `resolveIntegrationPaths` still throws for callers that mutate.
+   */
+  unresolvedPathHint?: (env?: NodeJS.ProcessEnv, home?: string) => string;
+}
+
+/**
+ * The one place that turns a client id into the pair of paths an operation uses.
+ *
+ * A caller that resolves `configPath` and `detectDir` separately is correct for
+ * every client whose paths are a pure function of env and home, and wrong for
+ * one that reads mutable state. Routing both through here lets such a client fix
+ * that for itself without every call site learning why.
+ */
+export function resolveIntegrationPaths(
+  clientId: IntegrationClientId,
+  env: NodeJS.ProcessEnv = process.env,
+  home: string = homedir(),
+): { configPath: string; detectDir: string } {
+  const spec = INTEGRATION_CLIENTS[clientId];
+  if (spec.resolvePaths) return spec.resolvePaths(env, home);
+  return { configPath: spec.configPath(env, home), detectDir: spec.detectDir(env, home) };
+}
+
+/**
+ * The location to name when resolution refused, or `""` when there is none.
+ *
+ * A read-only surface reporting "unresolvable" with an empty path told the user
+ * nothing they could act on, and for Aside it also reported the wrong thing: an
+ * absent account manifest is the ordinary state of an installed-but-never-run
+ * Aside, and the honest answer there is that it is not signed in.
+ *
+ * `""` is a sentinel, not a path: it is what `readIntegrationState` reads to
+ * decide between not-installed and cannot-verify. A config path is never
+ * legitimately empty, and a hint is always an absolute `join` result, so the two
+ * cannot be confused.
+ */
+export function unresolvedPathHintFor(
+  clientId: IntegrationClientId,
+  env: NodeJS.ProcessEnv = process.env,
+  home: string = homedir(),
+): string {
+  const spec = INTEGRATION_CLIENTS[clientId];
+  if (!spec.unresolvedPathHint) return "";
+  try {
+    return spec.unresolvedPathHint(env, home);
+  } catch (error) {
+    /*
+     * Only a path refusal is absorbed. An unqualified catch here would also
+     * swallow a TypeError from a future implementor's typo, an
+     * ERR_INVALID_ARG_TYPE out of `join`, or an EACCES from a resolver that
+     * touches the filesystem -- turning a programming error into a silently
+     * degraded badge. `readIntegrationState` narrows the same way at its own
+     * catch, and this is the matching half.
+     */
+    if (!(error instanceof ClientPathError)) throw error;
+    return "";
+  }
 }
 
 /**
@@ -149,6 +233,34 @@ export const INTEGRATION_CLIENTS: Record<IntegrationClientId, IntegrationClientS
     // is set. Same choice as OMP, whose detect signal is `ompAgentDir`.
     detectDir: (env = process.env, home = homedir()) => primeAgentDir(env, home),
   },
+  aside: {
+    id: "aside",
+    configPath: (env = process.env, home = homedir()) => asideConfigPath(env, home),
+    /*
+     * The ACCOUNT directory, not `~/.aside`. Aside's CLI creates `~/.aside/cli`
+     * for its own update check before any account exists, so the outer directory
+     * is present on a machine that never signed in, and writing a catalog for an
+     * account that does not exist is worse than reporting absent.
+     */
+    detectDir: (env = process.env, home = homedir()) => asideAccountDir(env, home),
+    /*
+     * Both paths from ONE account read. The two resolvers above each consult
+     * the account manifest, so a switch landing between them would let an
+     * operation verify one account's install and then write another's catalog.
+     */
+    resolvePaths: (env = process.env, home = homedir()) => {
+      const detectDir = asideAccountDir(env, home);
+      return { configPath: join(detectDir, "models.json"), detectDir };
+    },
+    /*
+     * The account ROOT, with no account under it. Aside writes `accounts.json`
+     * at first launch, so its absence is the ordinary state of an Aside that has
+     * been installed and never signed into -- and a page that answered "cannot
+     * verify" with an empty path for that case named nothing the user could go
+     * look at.
+     */
+    unresolvedPathHint: (env = process.env, home = homedir()) => join(asideHomeDir(env, home), "u"),
+  },
 };
 
 export const INTEGRATION_CLIENT_IDS: readonly IntegrationClientId[] =

package/src/integrations/state.ts

@@ -19,7 +19,12 @@ import {
   semanticProtectedContributionFingerprint,
   validRefreshablePaths,
 } from "./ownership-policy";
-import { INTEGRATION_CLIENTS, type IntegrationClientId } from "./registry";
+import {
+  INTEGRATION_CLIENTS,
+  resolveIntegrationPaths,
+  unresolvedPathHintFor,
+  type IntegrationClientId,
+} from "./registry";
 import { createIntegrationStateStore, type IntegrationStateStore } from "./store";
 
 export type IntegrationState = "absent" | "current" | "stale" | "conflict" | "unsafe";
@@ -238,6 +243,42 @@ export function classifyIntegration(input: {
     return { state: "unsafe", reason: "blocked-container" };
   }
   if (!hasOurFragments(input.parsed, input.contribution)) return { state: "absent" };
+
+  /*
+   * Fragments the desired contribution carries beyond the paths this record names. Both
+   * states appear whenever a client gains a second owned block:
+   *
+   *   - occupied by a value we did not write -> refuse. A refresh merges the WHOLE
+   *     contribution, so without this check applying would replace a block the user wrote
+   *     themselves and report success.
+   *   - empty -> our own block is missing, because the record predates it. Report drift so
+   *     a refresh adds it. Without this the file reads `current` forever and the second
+   *     block never arrives, which is exactly what an older installation hits on upgrade.
+   *
+   * A byte-identical value is ours in substance: adopt it instead of dead-ending a
+   * hand-merged config on a conflict the user can only resolve by deleting our own block.
+   */
+  const recordedPaths = new Set((input.record?.fragmentPaths ?? []).map(path => path.join("\u0000")));
+  let addedPathMissing = false;
+  for (const fragment of input.contribution.fragments) {
+    if (recordedPaths.has(fragment.path.join("\u0000"))) continue;
+    const observed = readPath(input.parsed, fragment.path);
+    if (observed === undefined) {
+      addedPathMissing = true;
+      continue;
+    }
+    const one = (value: unknown): string => fingerprint(canonicalContribution({
+      clientId: (input.clientId ?? input.record?.clientId) as IntegrationClientId,
+      fragments: [{ path: fragment.path, value }],
+    }));
+    if (one(observed) !== one(fragment.value)) return { state: "conflict", reason: "unowned-key" };
+  }
+  /*
+   * No record: whatever occupies our paths is not ours to touch. A byte-identical value
+   * would be ours in substance, but `stale` without a record is not actionable — the writer
+   * reads `createdContainers` off the record to decide what it may prune, so adopting a
+   * hand-merged block needs an apply path that creates one first. Refuse, exactly as before.
+   */
   if (!input.record) return { state: "conflict", reason: "unowned-key" };
   /*
    * A record proves ownership of ONE file. Change HOME, XDG_CONFIG_HOME,
@@ -286,6 +327,12 @@ export function classifyIntegration(input: {
     }
     return { state: "stale" };
   }
+  /*
+   * Checked after everything else that could refuse: an owned fragment that no longer
+   * matches, or a sibling edit in a format that cannot be rewritten safely, still wins.
+   * What is left is a block we own on paper and are merely missing on disk.
+   */
+  if (addedPathMissing) return { state: "stale" };
   const desiredFingerprint = typeof input.record.semanticBlockFingerprint === "string"
     ? fingerprint(semanticContribution(input.contribution))
     : fingerprint(canonicalContribution(input.contribution));
@@ -382,15 +429,30 @@ export function readIntegrationState(input: IntegrationStateInput): IntegrationS
   let configPath: string;
   let installed: boolean;
   try {
-    configPath = spec.configPath(input.env, input.home);
-    installed = io.statKind(spec.detectDir(input.env, input.home)) === "dir";
+    // One resolution for both, so a client whose paths come from mutable state
+    // cannot report one account's install beside another account's config path.
+    const paths = resolveIntegrationPaths(input.clientId, input.env, input.home);
+    configPath = paths.configPath;
+    installed = io.statKind(paths.detectDir) === "dir";
   } catch (error) {
     if (!(error instanceof ClientPathError)) throw error;
+    /*
+     * Two different situations reach here and they are not the same answer.
+     *
+     * A relative `OPENCLAW_CONFIG_PATH` is a misconfiguration: there is nothing
+     * to name, and "cannot verify" is correct. Aside's absent account manifest
+     * is the ORDINARY state of an Aside that has been installed and never
+     * signed into, and answering that with a red danger badge and an empty path
+     * told the user their config was suspect when in fact there is no account
+     * yet. A client that can name where its config would go gets `installed:
+     * false` and that location, which reads as "not installed" in the UI.
+     */
+    const hint = unresolvedPathHintFor(input.clientId, input.env, input.home);
     return {
       clientId: input.clientId,
-      state: "unsafe",
+      state: hint ? "absent" : "unsafe",
       installed: false,
-      configPath: "",
+      configPath: hint,
       reason: "unresolvable-path",
       ...retention,
     };