@blue-soda/dsh-remote 0.5.7 → 0.5.9

package/dist/index.js

@@ -4,17 +4,10 @@ var __export = (target2, all) => {
     __defProp(target2, name2, { get: all[name2], enumerable: true });
 };
 
-// ../webrtc/dist/websocket-backpressure.js
-async function waitForRelayCapacity(socket) {
-  const started = Date.now();
-  while ((socket.bufferedAmount ?? 0) > 512 * 1024) {
-    if (socket.readyState !== 1 || Date.now() - started > 1e4)
-      throw new Error("Relay consumer is too slow or disconnected");
-    await new Promise((resolve4) => setTimeout(resolve4, 10));
-  }
-  if (socket.readyState !== 1)
-    throw new Error("Relay transport closed");
-}
+// src/client-runtime.ts
+import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { join as join6 } from "node:path";
 
 // ../../node_modules/zod/v3/external.js
 var external_exports = {};
@@ -177,8 +170,8 @@ var util;
     return void 0;
   };
   util2.isInteger = typeof Number.isInteger === "function" ? (val) => Number.isInteger(val) : (val) => typeof val === "number" && Number.isFinite(val) && Math.floor(val) === val;
-  function joinValues(array3, separator = " | ") {
-    return array3.map((val) => typeof val === "string" ? `'${val}'` : val).join(separator);
+  function joinValues(array2, separator = " | ") {
+    return array2.map((val) => typeof val === "string" ? `'${val}'` : val).join(separator);
   }
   util2.joinValues = joinValues;
   util2.jsonStringifyReplacer = (_, value) => {
@@ -4594,6 +4587,32 @@ function cryptoRandomId() {
   return `msg_${Date.now().toString(36)}_${Math.random().toString(36).slice(2)}`;
 }
 
+// src/history-policy.ts
+var HISTORY_PAGE_SIZES = [50, 30, 20, 12, 6, 3, 1];
+var RESPONSE_ENVELOPE_BYTES = 8 * 1024;
+var HISTORY_BUDGET_BYTES = MAX_SECURE_MESSAGE_BYTES - RESPONSE_ENVELOPE_BYTES;
+function historyPageSizes(start = HISTORY_PAGE_SIZES[0]) {
+  const sizes = [start];
+  for (const size of HISTORY_PAGE_SIZES) if (size < start) sizes.push(size);
+  return sizes;
+}
+function codexHistoryStatsFileEnabled(env = process.env) {
+  const value = env.DSH_CODEX_HISTORY_STATS?.trim().toLowerCase();
+  return value === "1" || value === "true" || value === "on" || value === "yes";
+}
+
+// ../webrtc/dist/websocket-backpressure.js
+async function waitForRelayCapacity(socket) {
+  const started = Date.now();
+  while ((socket.bufferedAmount ?? 0) > 512 * 1024) {
+    if (socket.readyState !== 1 || Date.now() - started > 1e4)
+      throw new Error("Relay consumer is too slow or disconnected");
+    await new Promise((resolve5) => setTimeout(resolve5, 10));
+  }
+  if (socket.readyState !== 1)
+    throw new Error("Relay transport closed");
+}
+
 // ../webrtc/dist/transport.js
 var BaseTransport = class {
   handlers = /* @__PURE__ */ new Set();
@@ -5066,8 +5085,8 @@ var RtcDataChannelTransport = class {
     if (this.connectPromise !== void 0)
       return this.connectPromise;
     this.armAbort(signal);
-    this.connectPromise = new Promise((resolve4, reject) => {
-      this.openResolve = resolve4;
+    this.connectPromise = new Promise((resolve5, reject) => {
+      this.openResolve = resolve5;
       this.openReject = reject;
       this.negotiateTimer = setTimeout(() => {
         void this.failOpenAfterStats(new RtcConnectError("RTC_CONNECT_TIMEOUT", `WebRTC negotiation timed out after ${this.negotiateTimeoutMs}ms.`));
@@ -5282,9 +5301,9 @@ var RtcDataChannelTransport = class {
       if (this.closed || this.opened)
         return;
       this.opened = true;
-      const resolve4 = this.openResolve;
+      const resolve5 = this.openResolve;
       this.clearNegotiation();
-      void this.resolveSelectedTransport().then(() => resolve4?.());
+      void this.resolveSelectedTransport().then(() => resolve5?.());
     };
     channel.onmessage = (event) => {
       if (this.closed || !this.opened)
@@ -5678,7 +5697,7 @@ function asError(error) {
   return error instanceof Error ? error : new RtcConnectError("RTC_FAILED", "WebRTC negotiation failed.");
 }
 function sleep(ms) {
-  return new Promise((resolve4) => setTimeout(resolve4, ms));
+  return new Promise((resolve5) => setTimeout(resolve5, ms));
 }
 
 // ../webrtc/dist/adaptive-transport.js
@@ -5719,8 +5738,8 @@ var AdaptiveTransport = class extends BaseTransport {
     this.socket = new WebSocket(this.url);
     this.controlFrameLimits = {};
     this.socket.binaryType = "arraybuffer";
-    await new Promise((resolve4, reject) => {
-      this.readyResolve = resolve4;
+    await new Promise((resolve5, reject) => {
+      this.readyResolve = resolve5;
       this.readyReject = reject;
       this.handshakeTimer = setTimeout(() => this.failConnection(new Error("Adaptive control handshake timed out")), this.options.handshakeTimeoutMs ?? 15e3);
       const socket = this.socket;
@@ -6242,7 +6261,7 @@ function hexToBytes(hex) {
   const al = hl / 2;
   if (hl % 2)
     throw new Error("hex string expected, got unpadded hex of length " + hl);
-  const array3 = new Uint8Array(al);
+  const array2 = new Uint8Array(al);
   for (let ai = 0, hi = 0; ai < al; ai++, hi += 2) {
     const n1 = asciiToBase16(hex.charCodeAt(hi));
     const n2 = asciiToBase16(hex.charCodeAt(hi + 1));
@@ -6250,9 +6269,9 @@ function hexToBytes(hex) {
       const char = hex[hi] + hex[hi + 1];
       throw new Error('hex string expected, got non-hex character "' + char + '" at index ' + hi);
     }
-    array3[ai] = n1 * 16 + n2;
+    array2[ai] = n1 * 16 + n2;
   }
-  return array3;
+  return array2;
 }
 function utf8ToBytes(str) {
   if (typeof str !== "string")
@@ -8959,7 +8978,7 @@ function hexToBytes2(hex) {
   const al = hl / 2;
   if (hl % 2)
     throw new RangeError("hex string expected, got unpadded hex of length " + hl);
-  const array3 = new Uint8Array(al);
+  const array2 = new Uint8Array(al);
   for (let ai = 0, hi = 0; ai < al; ai++, hi += 2) {
     const n1 = asciiToBase162(hex.charCodeAt(hi));
     const n2 = asciiToBase162(hex.charCodeAt(hi + 1));
@@ -8967,9 +8986,9 @@ function hexToBytes2(hex) {
       const char = hex[hi] + hex[hi + 1];
       throw new RangeError('hex string expected, got non-hex character "' + char + '" at index ' + hi);
     }
-    array3[ai] = n1 * 16 + n2;
+    array2[ai] = n1 * 16 + n2;
   }
-  return array3;
+  return array2;
 }
 function concatBytes2(...arrays) {
   let sum = 0;
@@ -13213,8 +13232,8 @@ function errorCode(error) {
   return typeof code === "string" ? code : void 0;
 }
 function sleep2(ms) {
-  return new Promise((resolve4) => {
-    setTimeout(resolve4, ms);
+  return new Promise((resolve5) => {
+    setTimeout(resolve5, ms);
   });
 }
 
@@ -13279,7 +13298,7 @@ var ServerCredentialStore = class {
         if (!(error instanceof Error) || !("code" in error) || error.code !== "EEXIST") throw error;
         if (await reclaimAbandonedRefreshLock(lock)) continue;
         if (Date.now() >= deadline) throw new ServerCredentialsBusyError();
-        await new Promise((resolve4) => setTimeout(resolve4, 50));
+        await new Promise((resolve5) => setTimeout(resolve5, 50));
       }
     }
     try {
@@ -13418,7 +13437,8 @@ var entryConfigSchema = s.object({
   ]),
   codex: s.object({
     enabled: s.boolean(),
-    binary: s.string()
+    binary: s.string(),
+    showUnprojectedSessions: s.boolean()
   }),
   acp: s.object({ enabled: s.boolean(), backends: s.array(s.object({ id: s.string(), enabled: s.boolean(), command: s.string(), args: s.array(s.string()), cwd: s.string() })) })
 });
@@ -13451,7 +13471,8 @@ var configSchema = external_exports.object({
   reconnect: reconnectSchema.optional(),
   codex: external_exports.object({
     enabled: external_exports.boolean().optional(),
-    binary: external_exports.string().trim().min(1).max(4096).optional()
+    binary: external_exports.string().trim().min(1).max(4096).optional(),
+    showUnprojectedSessions: external_exports.boolean().optional()
   }).strict().optional(),
   acp: external_exports.object({ enabled: external_exports.boolean().optional(), backends: external_exports.array(external_exports.object({ id: external_exports.string().trim().regex(/^[a-z0-9][a-z0-9._-]{0,31}$/i), enabled: external_exports.boolean().optional(), command: external_exports.string().trim().min(1).max(4096).optional(), args: external_exports.array(external_exports.string().max(4096)).max(32).optional(), cwd: external_exports.string().max(4096).optional() }).strict()).max(12).optional(), backend: external_exports.string().trim().regex(/^[a-z0-9][a-z0-9._-]{0,31}$/i).optional(), command: external_exports.string().trim().min(1).max(4096).optional(), args: external_exports.array(external_exports.string().max(4096)).max(32).optional(), cwd: external_exports.string().max(4096).optional() }).strict().optional()
 }).strict();
@@ -13493,7 +13514,8 @@ function resolveConfig(input2 = {}, env = process.env) {
       // an account and, while unavailable, retries every minute. The bundled profile patch says the same thing, so
       // an install that never touches the switch has it off.
       enabled: parsed.codex?.enabled ?? false,
-      binary: parsed.codex?.binary ?? "codex"
+      binary: parsed.codex?.binary ?? "codex",
+      showUnprojectedSessions: parsed.codex?.showUnprojectedSessions ?? true
     },
     acp: { enabled: parsed.acp?.enabled ?? true, backends: [.../* @__PURE__ */ new Set(["codex", "cursor", "kimi", ...parsed.acp?.backends?.map((item) => item.id) ?? []])].map((id4) => {
       const d = parsed.acp?.backends?.find((x) => x.id === id4);
@@ -13521,7 +13543,7 @@ function normalizeServerUrl(value) {
 }
 
 // src/version.ts
-var PLUGIN_VERSION = "0.5.7";
+var PLUGIN_VERSION = "0.5.9";
 
 // src/server-api.ts
 var ENABLED_QR_PROVIDERS = ["github"];
@@ -14144,7 +14166,7 @@ var HostServerConnection = class {
     this.controlFrameLimits = {};
     let acknowledged = false;
     let messageQueue = Promise.resolve();
-    await new Promise((resolve4, reject) => {
+    await new Promise((resolve5, reject) => {
       let settled = false;
       const helloTimer = setTimeout(() => socket.close(4001, "hello timeout"), 1e4);
       const finish = (error) => {
@@ -14153,7 +14175,7 @@ var HostServerConnection = class {
         clearTimeout(helloTimer);
         this.online = false;
         if (this.socket === socket) this.socket = void 0;
-        void this.dropTunnels().finally(() => error === void 0 ? resolve4() : reject(error));
+        void this.dropTunnels().finally(() => error === void 0 ? resolve5() : reject(error));
       };
       socket.onopen = () => {
         this.sendControl("hello", {
@@ -14713,14 +14735,14 @@ var HostServerConnection = class {
   waitBeforeRetry(baseDelay, exact = false) {
     const spread = exact ? 0 : baseDelay * this.config.reconnect.jitter;
     const delay = Math.max(0, Math.round(baseDelay - spread + Math.random() * spread * 2));
-    return new Promise((resolve4) => {
+    return new Promise((resolve5) => {
       const timer = setTimeout(() => {
         this.retryWake = void 0;
-        resolve4();
+        resolve5();
       }, delay);
       this.retryWake = () => {
         clearTimeout(timer);
-        resolve4();
+        resolve5();
       };
     });
   }
@@ -14731,8 +14753,8 @@ async function drainWithin(promise, ms) {
   try {
     await Promise.race([
       promise.catch(() => void 0),
-      new Promise((resolve4) => {
-        timer = setTimeout(resolve4, ms);
+      new Promise((resolve5) => {
+        timer = setTimeout(resolve5, ms);
         timer.unref?.();
       })
     ]);
@@ -15086,7 +15108,7 @@ var LoopbackHost = class {
         const response = handle.response;
         let chunk = response.read(Math.min(response.readableLength || LOOPBACK_CHUNK_BYTES, LOOPBACK_CHUNK_BYTES));
         if (chunk === null && !response.readableEnded && !response.destroyed) {
-          await new Promise((resolve4, reject) => {
+          await new Promise((resolve5, reject) => {
             const timer = setTimeout(() => finish(new Error("timeout")), 2e4);
             const ready = () => finish();
             const fail4 = () => finish(new Error("closed"));
@@ -15096,7 +15118,7 @@ var LoopbackHost = class {
               response.off("end", ready);
               response.off("close", ready);
               response.off("error", fail4);
-              error === void 0 ? resolve4() : reject(error);
+              error === void 0 ? resolve5() : reject(error);
             };
             response.once("readable", ready);
             response.once("end", ready);
@@ -15127,22 +15149,22 @@ var LoopbackHost = class {
           this.close(value.id);
           throw new RpcError("RATE_LIMITED", "Preview WebSocket buffer exceeded its limit.");
         }
-        await new Promise((resolve4, reject) => handle.socket.send(data2, { binary: value.binary }, (error) => error ? reject(new RpcError("LOOPBACK_CLOSED", "Preview socket closed.")) : resolve4()));
+        await new Promise((resolve5, reject) => handle.socket.send(data2, { binary: value.binary }, (error) => error ? reject(new RpcError("LOOPBACK_CLOSED", "Preview socket closed.")) : resolve5()));
         return { sent: true };
       }
       if (value.op === "ws.read") {
         if (handle.reading) throw new RpcError("REQUEST_CONFLICT", "Only one preview read may be pending.");
         handle.reading = true;
         try {
-          if (handle.messages.length === 0 && !handle.closed) await new Promise((resolve4) => {
+          if (handle.messages.length === 0 && !handle.closed) await new Promise((resolve5) => {
             const timer = setTimeout(() => {
               handle.wake = void 0;
-              resolve4();
+              resolve5();
             }, 2e4);
             handle.wake = () => {
               clearTimeout(timer);
               handle.wake = void 0;
-              resolve4();
+              resolve5();
             };
           });
           let bytes = 0;
@@ -15189,7 +15211,7 @@ var LoopbackHost = class {
   openHttp(value) {
     const body = value.body === void 0 ? void 0 : Buffer.from(value.body, "base64");
     if ((body?.length ?? 0) > LOOPBACK_MAX_BODY_BYTES) throw new Error("body limit");
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       const headers = Object.fromEntries(cleanHeaders(value.headers));
       let handle;
       const request = httpRequest({
@@ -15208,7 +15230,7 @@ var LoopbackHost = class {
         handle.response = response;
         response.on("error", () => void 0);
         clearTimeout(timer);
-        resolve4({ status: response.statusCode ?? 502, headers: cleanHeaders(headerPairs(response.headers)) });
+        resolve5({ status: response.statusCode ?? 502, headers: cleanHeaders(headerPairs(response.headers)) });
       });
       const timer = setTimeout(() => {
         request.destroy();
@@ -15224,7 +15246,7 @@ var LoopbackHost = class {
     });
   }
   openWs(value) {
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       const socket = new WebSocket2(`ws://127.0.0.1:${value.port}${value.path}`, value.protocols, {
         headers: Object.fromEntries(cleanHeaders(value.headers)),
         followRedirects: false,
@@ -15234,7 +15256,7 @@ var LoopbackHost = class {
       });
       const handle = { kind: "ws", port: value.port, socket, messages: [], bytes: 0, reading: false, closed: false, touched: Date.now() };
       this.handles.set(value.id, handle);
-      socket.once("open", () => resolve4({ protocol: socket.protocol }));
+      socket.once("open", () => resolve5({ protocol: socket.protocol }));
       socket.on("message", (data2, binary) => {
         if (handle.closed) return;
         const message = { data: Buffer.from(data2).toString("base64"), binary };
@@ -15293,7 +15315,7 @@ var LoopbackPreview = class {
       for (const client of running.ws.clients) client.terminate();
       running.ws.close();
       running.server.closeAllConnections();
-      await new Promise((resolve4) => running.server.close(() => resolve4()));
+      await new Promise((resolve5) => running.server.close(() => resolve5()));
     }
     this.servers.clear();
   }
@@ -15348,11 +15370,11 @@ var LoopbackPreview = class {
         void this.release(id4);
       });
     });
-    await new Promise((resolve4, reject) => {
+    await new Promise((resolve5, reject) => {
       server.once("error", reject);
       server.listen(0, "127.0.0.1", () => {
         server.off("error", reject);
-        resolve4();
+        resolve5();
       });
     });
     const address = server.address();
@@ -15418,10 +15440,10 @@ var LoopbackPreview = class {
       while (!signal.aborted) {
         const chunk = await this.client.rpc("loopback.call", { op: "http.read", id: id4 }, signal);
         if (chunk.data !== "" && !res.write(Buffer.from(chunk.data, "base64"))) {
-          await new Promise((resolve4, reject) => {
+          await new Promise((resolve5, reject) => {
             const ready = () => {
               cleanup();
-              resolve4();
+              resolve5();
             };
             const closed = () => {
               cleanup();
@@ -15481,7 +15503,7 @@ var LoopbackPreview = class {
           const result = await this.client.rpc("loopback.call", { op: "ws.read", id: id4 }, signal);
           for (const message of result.messages) {
             if (socket.bufferedAmount > 1024 * 1024) throw new Error("slow preview");
-            await new Promise((resolve4, reject) => socket.send(Buffer.from(message.data, "base64"), { binary: message.binary }, (error) => error ? reject(error) : resolve4()));
+            await new Promise((resolve5, reject) => socket.send(Buffer.from(message.data, "base64"), { binary: message.binary }, (error) => error ? reject(error) : resolve5()));
           }
           if (result.closed) break;
         }
@@ -16169,13 +16191,13 @@ var RemoteClientCore = class {
       throw rpcAbortedError(method, signal.reason);
     const timeoutMs = callTimeoutMs(this.timeoutMs, options);
     const request = createRpcRequest(method, params);
-    const result = new Promise((resolve4, reject) => {
+    const result = new Promise((resolve5, reject) => {
       const timer = setTimeout(() => {
         this.rejectPending(request.id, new RemoteClientError("RPC_TIMEOUT", `RPC ${method} timed out after ${timeoutMs}ms`));
       }, timeoutMs);
       const pending = {
         method,
-        resolve: resolve4,
+        resolve: resolve5,
         reject,
         timer
       };
@@ -16484,7 +16506,7 @@ var ClientSecureTransport = class {
   }
 };
 async function waitForResponder(inner, noise) {
-  await new Promise((resolve4, reject) => {
+  await new Promise((resolve5, reject) => {
     let settled = false;
     const timer = setTimeout(() => finish(new Error("Noise IK handshake timed out.")), 1e4);
     const unsubscribe = inner.onHandshake((step, data2) => {
@@ -16503,7 +16525,7 @@ async function waitForResponder(inner, noise) {
       settled = true;
       clearTimeout(timer);
       unsubscribe();
-      if (error === void 0) resolve4();
+      if (error === void 0) resolve5();
       else reject(error);
     };
     void inner.sendHandshake(1, noise.writeHandshake()).catch((error) => {
@@ -17099,7 +17121,7 @@ var AsyncFrameQueue = class {
         continue;
       }
       if (this.closed) return;
-      const next = await new Promise((resolve4) => this.waiters.push(resolve4));
+      const next = await new Promise((resolve5) => this.waiters.push(resolve5));
       if (next.done) return;
       yield next.value;
     }
@@ -17504,7 +17526,7 @@ var AsyncValueQueue = class {
         if (this.error !== void 0) throw this.error;
         return;
       }
-      const next = await new Promise((resolve4) => this.waiters.push(resolve4));
+      const next = await new Promise((resolve5) => this.waiters.push(resolve5));
       if (next.done) {
         if (this.error !== void 0) throw this.error;
         return;
@@ -17595,6 +17617,11 @@ function patchWelcomeDescribe2(value) {
   return { ...value, namespaces };
 }
 
+// src/codex/virtual-harness.ts
+import { mkdirSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join as join4 } from "node:path";
+
 // src/codex/permissions.ts
 function codexPermissionPresetFromResponse(value) {
   const root = record(value);
@@ -17625,135 +17652,6 @@ function resolveCodexThreadKey(key) {
   return codexThreadIdFromKey(key) ?? key;
 }
 
-// src/codex/method-policy.ts
-var id2 = external_exports.string().min(1).max(256);
-var cursor = external_exports.string().min(1).max(4096).nullable().optional();
-var textInput = external_exports.object({
-  type: external_exports.literal("text"),
-  text: external_exports.string().min(1).max(256 * 1024)
-}).strict();
-var imageMediaType = external_exports.enum(["image/png", "image/jpeg", "image/webp", "image/gif"]);
-var canonicalBase64 = external_exports.string().min(4).max(288 * 1024 * 1024).refine((value) => value.length % 4 === 0 && /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u.test(value), {
-  message: "Image data must use canonical base64."
-});
-var imageInput = external_exports.object({
-  type: external_exports.literal("image"),
-  mediaType: imageMediaType,
-  data: canonicalBase64
-}).strict();
-var input = external_exports.array(external_exports.union([textInput, imageInput])).min(1).max(16);
-var permissionPreset = external_exports.enum(["workspace-write", "danger-full-access"]);
-var projectRoot = external_exports.object({
-  path: external_exports.string().min(1).max(4096)
-}).strict();
-var CODEX_HISTORY_MAX_MESSAGES = 200;
-var schemas = {
-  "account/read": external_exports.object({ refreshToken: external_exports.literal(false).optional() }).strict(),
-  "model/list": external_exports.object({
-    cursor,
-    limit: external_exports.number().int().min(1).max(100).optional(),
-    includeHidden: external_exports.boolean().optional()
-  }).strict(),
-  "project/list": external_exports.object({
-    cursor,
-    limit: external_exports.number().int().min(1).max(100).optional()
-  }).strict(),
-  "project/create": external_exports.object({
-    name: external_exports.string().trim().min(1).max(256),
-    roots: external_exports.array(projectRoot).length(1),
-    idempotencyKey: external_exports.string().min(16).max(256)
-  }).strict(),
-  "thread/list": external_exports.object({
-    cursor,
-    limit: external_exports.number().int().min(1).max(100).optional(),
-    sortKey: external_exports.enum(["created_at", "updated_at", "recency_at"]).optional(),
-    sortDirection: external_exports.enum(["asc", "desc"]).optional(),
-    modelProviders: external_exports.array(external_exports.string().min(1).max(128)).max(32).nullable().optional(),
-    sourceKinds: external_exports.array(external_exports.enum(["cli", "vscode", "exec", "appServer", "unknown"])).max(8).optional(),
-    archived: external_exports.boolean().optional(),
-    isPinned: external_exports.boolean().optional(),
-    cwd: external_exports.union([external_exports.string().min(1).max(4096), external_exports.array(external_exports.string().min(1).max(4096)).min(1).max(32)]).optional(),
-    useStateDbOnly: external_exports.boolean().optional(),
-    searchTerm: external_exports.string().max(1024).optional(),
-    // Upstream `ThreadListParams` declares these two as well. Refusing them turned a
-    // legitimate client query into "The CodeX call parameters are invalid.".
-    originators: external_exports.array(external_exports.string().min(1).max(256)).max(32).nullable().optional(),
-    sectionId: external_exports.string().max(256).nullable().optional()
-  }).strict(),
-  "thread/read": external_exports.object({ threadId: id2, includeTurns: external_exports.boolean().optional() }).strict(),
-  "dsh/sessionHistory": external_exports.object({
-    threadId: id2,
-    beforeSeq: external_exports.number().int().nonnegative().optional(),
-    throughSeq: external_exports.number().int().min(-1).optional(),
-    maxMessages: external_exports.number().int().min(1).max(CODEX_HISTORY_MAX_MESSAGES).optional()
-  }).strict(),
-  "dsh/directoryList": external_exports.object({
-    path: external_exports.string().min(1).max(4096)
-  }).strict(),
-  "thread/start": external_exports.object({
-    cwd: external_exports.string().min(1).max(4096),
-    model: external_exports.string().min(1).max(128).optional(),
-    personality: external_exports.string().min(1).max(64).optional(),
-    permissionPreset: permissionPreset.optional()
-  }).strict(),
-  "thread/resume": external_exports.object({
-    threadId: id2,
-    model: external_exports.string().min(1).max(128).optional(),
-    permissionPreset: permissionPreset.optional()
-  }).strict(),
-  "thread/fork": external_exports.object({
-    threadId: id2,
-    lastTurnId: id2.optional(),
-    permissionPreset: permissionPreset.optional()
-  }).strict(),
-  // Upstream declares a plain string and uses the empty value to clear a name, so the
-  // trim-based minimum rejected a legitimate rename.
-  "thread/name/set": external_exports.object({ threadId: id2, name: external_exports.string().max(256) }).strict(),
-  "thread/archive": external_exports.object({ threadId: id2 }).strict(),
-  "thread/unarchive": external_exports.object({ threadId: id2 }).strict(),
-  "thread/unsubscribe": external_exports.object({ threadId: id2 }).strict(),
-  "turn/start": external_exports.object({
-    threadId: id2,
-    input,
-    model: external_exports.string().min(1).max(128).optional(),
-    effort: external_exports.enum(["none", "minimal", "low", "medium", "high", "xhigh", "max", "ultra"]).optional(),
-    summary: external_exports.enum(["auto", "concise", "detailed", "none"]).optional(),
-    personality: external_exports.string().min(1).max(64).optional(),
-    permissionPreset: permissionPreset.optional()
-  }).strict(),
-  "turn/steer": external_exports.object({
-    threadId: id2,
-    input,
-    expectedTurnId: id2,
-    // Declared by upstream `TurnSteerParams`; see the thread/list note above.
-    clientUserMessageId: external_exports.string().max(256).nullable().optional()
-  }).strict(),
-  "turn/interrupt": external_exports.object({ threadId: id2, turnId: id2 }).strict()
-};
-var CODEX_APP_ALLOWLIST = Object.freeze(Object.keys(schemas));
-function parseCodexCall(method, params) {
-  if (!Object.prototype.hasOwnProperty.call(schemas, method)) {
-    throw new RpcError("METHOD_NOT_ALLOWED", "The requested Codex method is not available over Remote.");
-  }
-  const schema = schemas[method];
-  const parsed = schema.safeParse(params);
-  if (!parsed.success) {
-    const detail = parsed.error.issues.slice(0, 4).map((issue) => {
-      const path = issue.path.length === 0 ? "(root)" : issue.path.join(".");
-      const keys = "keys" in issue && Array.isArray(issue.keys) ? ` [${issue.keys.join(", ")}]` : "";
-      return `${path}${keys}: ${issue.code}`;
-    }).join(", ");
-    throw new RpcError("INVALID_MESSAGE", `The CodeX call parameters are invalid. (${method} \u2192 ${detail})`);
-  }
-  return { method, params: parsed.data };
-}
-function isThreadMutation(method) {
-  return method === "turn/start" || method === "turn/steer" || method === "turn/interrupt";
-}
-function threadIdFromParams(params) {
-  return typeof params.threadId === "string" ? params.threadId : void 0;
-}
-
 // src/codex/codex-image-codec.ts
 var CODEX_IMAGE_MEDIA_TYPES2 = /* @__PURE__ */ new Set(["image/png", "image/jpeg", "image/webp", "image/gif"]);
 var CODEX_IMAGE_ATTACHMENT_PREFIX = "codex-image:";
@@ -17988,9 +17886,10 @@ var CODEX_MODEL = "codex";
 var CODEX_PAGE_LIMIT = 100;
 var MAX_CODEX_PAGES = 32;
 var MAX_LIVE_TOOL_OUTPUT = 128 * 1024;
-var DEFAULT_HISTORY_MESSAGES = 50;
 var SESSION_SEARCH_RESULT_LIMIT = 20;
 var SESSION_SEARCH_SNIPPET_CODE_POINTS = 240;
+var HISTORY_PAGE_CACHE_TTL_MS = 6e4;
+var HISTORY_PAGE_CACHE_LIMIT = 24;
 var CODEX_DEFAULT_PERMISSION = "workspace-write";
 var MAX_CODEX_PROMPT_PARTS = 16;
 var MAX_CODEX_PROMPT_TEXT = 256 * 1024;
@@ -18037,6 +17936,7 @@ var CodexVirtualHarness = class _CodexVirtualHarness {
     this.sessionGeneration = sessionGeneration;
     this.hostCarrier = hostCarrier;
     this.api = this.createApiProxy();
+    this.installHistoryCacheInspector();
     this.stopCapabilityWatch = this.client.watchCapability?.((available) => {
       if (!available) this.onSessionLost?.("domain-notice");
     });
@@ -18056,6 +17956,10 @@ var CodexVirtualHarness = class _CodexVirtualHarness {
   selectedModels = /* @__PURE__ */ new Map();
   selectedPermissions = /* @__PURE__ */ new Map();
   imageAttachments = /* @__PURE__ */ new Map();
+  historyPageCache = /* @__PURE__ */ new Map();
+  historyPageHits = 0;
+  historyPageMisses = 0;
+  historyCacheInspector;
   modelDirectory;
   modelDirectoryPromise;
   lastProjectionSeq = 0;
@@ -18171,6 +18075,10 @@ var CodexVirtualHarness = class _CodexVirtualHarness {
           return business(await this.archiveSession(requestArg(args), signal));
         case "session/list":
           return business(success({ items: await this.sessionSummaries(signal) }));
+        case "thread/list": {
+          const catalog = await this.refreshCatalog(signal);
+          return business(success({ data: catalog.threads, nextCursor: null }));
+        }
         case "session/search":
           return business(await this.searchSessions(requestArg(args), signal));
         case "session/create":
@@ -18284,6 +18192,17 @@ var CodexVirtualHarness = class _CodexVirtualHarness {
     this.selectedModels.clear();
     this.selectedPermissions.clear();
     this.imageAttachments.clear();
+    this.historyPageCache.clear();
+    const globalScope = globalThis;
+    if (this.historyCacheInspector !== void 0 && globalScope.__dshCodexHistoryCacheStats === this.historyCacheInspector) {
+      delete globalScope.__dshCodexHistoryCacheStats;
+    }
+    const scope = globalThis;
+    if (scope.window !== void 0 && this.historyCacheInspector !== void 0 && scope.window.__dshCodexHistoryCacheStats === this.historyCacheInspector) {
+      delete scope.window.__dshCodexHistoryCacheStats;
+    }
+    scope.document?.documentElement?.removeAttribute?.("data-dsh-codex-history-cache-stats");
+    this.historyCacheInspector = void 0;
   }
   async refreshCatalog(signal) {
     const catalog = await loadCatalog(this.client, signal, this.pendingThreads);
@@ -18557,6 +18476,7 @@ var CodexVirtualHarness = class _CodexVirtualHarness {
     });
   }
   acceptCodexFrame(follow, frame) {
+    this.invalidateHistoryPages(follow.threadId);
     const params = record3(frame.params);
     if (frame.method === "thread/name/updated") {
       const name2 = string2(params.threadName);
@@ -19209,29 +19129,27 @@ var CodexVirtualHarness = class _CodexVirtualHarness {
     return thread;
   }
   async readHistoryPage(threadId, page, signal) {
-    const maxMessages = page.maxMessages === void 0 ? void 0 : Math.min(CODEX_HISTORY_MAX_MESSAGES, Math.max(1, page.maxMessages));
-    let value;
-    try {
-      value = record3(await this.client.request("dsh/sessionHistory", {
-        threadId,
-        ...page.beforeSeq === void 0 ? {} : { beforeSeq: page.beforeSeq },
-        ...page.throughSeq === void 0 ? {} : { throughSeq: page.throughSeq },
-        ...maxMessages === void 0 ? {} : { maxMessages }
-      }, signal));
-    } catch (error) {
-      if (!isLegacySessionHistoryUnsupported(error)) throw error;
-      const result = record3(await this.client.request("thread/read", { threadId, includeTurns: true }, signal));
-      const thread = record3(result.thread);
-      if (string2(thread.id) !== threadId) throw new Error("CodeX returned an invalid Thread history.");
-      value = paginateCodexNativeHistory(
-        projectCodexNativeHistory(thread, `codex:${threadId}`, this.sessionGeneration),
-        {
-          beforeSeq: page.beforeSeq,
-          throughSeq: page.throughSeq,
-          maxMessages
-        }
-      );
-    }
+    const maxMessages = Math.min(
+      HISTORY_PAGE_SIZES[0],
+      Math.max(1, page.maxMessages ?? HISTORY_PAGE_SIZES[0])
+    );
+    const cacheKey = `${this.host.deviceId}|${threadId}|${page.beforeSeq ?? ""}|${page.throughSeq ?? ""}|${maxMessages}`;
+    const cached = this.historyPageCache.get(cacheKey);
+    if (cached !== void 0 && Date.now() - cached.at < HISTORY_PAGE_CACHE_TTL_MS) {
+      const ageMs = Date.now() - cached.at;
+      this.historyPageHits += 1;
+      this.cacheHistoryImages(cached.page);
+      this.publishHistoryCacheStats();
+      this.logHistoryCache("hit", threadId, { ...page, maxMessages }, cached.page.records.length, ageMs);
+      return cached.page;
+    }
+    this.historyPageMisses += 1;
+    let value = record3(await this.client.request("dsh/sessionHistory", {
+      threadId,
+      ...page.beforeSeq === void 0 ? {} : { beforeSeq: page.beforeSeq },
+      ...page.throughSeq === void 0 ? {} : { throughSeq: page.throughSeq },
+      maxMessages
+    }, signal));
     value = adaptCodexHistoryPage(value, this.sessionGeneration);
     if (!isCodexNativeHistoryPage(value, `codex:${threadId}`)) {
       throw new Error("CodeX Remote returned an invalid paginated History.");
@@ -19241,8 +19159,115 @@ var CodexVirtualHarness = class _CodexVirtualHarness {
       this.setPermissionSelection(`codex:${threadId}`, preset === "workspace-write" || preset === "danger-full-access" ? preset : void 0);
     }
     this.cacheHistoryImages(value);
+    this.historyPageCache.set(cacheKey, { page: value, at: Date.now() });
+    if (this.historyPageCache.size > HISTORY_PAGE_CACHE_LIMIT) {
+      const oldest = this.historyPageCache.keys().next().value;
+      if (oldest !== void 0) this.historyPageCache.delete(oldest);
+    }
+    this.publishHistoryCacheStats();
+    this.logHistoryCache("miss", threadId, { ...page, maxMessages }, value.records.length);
     return value;
   }
+  /** A live change or a new turn makes the cached page stale. */
+  invalidateHistoryPages(threadId) {
+    const marker = `|${threadId}|`;
+    let removed = false;
+    for (const key of [...this.historyPageCache.keys()]) {
+      if (key.includes(marker)) {
+        this.historyPageCache.delete(key);
+        removed = true;
+      }
+    }
+    if (removed) this.publishHistoryCacheStats();
+  }
+  /**
+   * Expose cache metadata to the current page's DevTools as
+   * `__dshCodexHistoryCacheStats()`. The function is metadata only: it never
+   * returns message text or event data, so the Session content stays private.
+   * It is installed on both the realm global and `window`, and mirrored into a
+   * DOM data attribute so a console in another realm can read it too.
+   */
+  installHistoryCacheInspector() {
+    const globalScope = globalThis;
+    const scope = globalThis;
+    const inspector = () => this.historyCacheStats();
+    globalScope.__dshCodexHistoryCacheStats = inspector;
+    if (scope.window !== void 0) scope.window.__dshCodexHistoryCacheStats = inspector;
+    this.historyCacheInspector = inspector;
+    this.publishHistoryCacheStats();
+  }
+  publishHistoryCacheStats() {
+    const stats = this.historyCacheStats();
+    this.writeHistoryCacheStatsFile(stats);
+    const scope = globalThis;
+    const root = scope.document?.documentElement;
+    if (root?.setAttribute === void 0) return;
+    try {
+      root.setAttribute("data-dsh-codex-history-cache-stats", JSON.stringify(stats));
+    } catch {
+    }
+  }
+  /**
+   * The Codex virtual harness runs in the DSH client's Node process, not in the
+   * browser page, so DevTools cannot see its globals. Mirror the same metadata to
+   * the client home for inspection without any message content.
+   */
+  writeHistoryCacheStatsFile(stats) {
+    if (!codexHistoryStatsFileEnabled() || process.env.VITEST !== void 0) return;
+    try {
+      const home = process.env.DSH_HOME ?? join4(homedir(), ".dsh");
+      mkdirSync(home, { recursive: true });
+      writeFileSync(
+        join4(home, "codex-history-cache-stats.json"),
+        JSON.stringify({
+          ...stats,
+          pid: process.pid,
+          source: "codex-harness",
+          writtenAt: (/* @__PURE__ */ new Date()).toISOString()
+        }, null, 2)
+      );
+    } catch {
+    }
+  }
+  logHistoryCache(event, threadId, page, records, ageMs) {
+    if (!codexHistoryStatsFileEnabled()) return;
+    const scope = globalThis;
+    scope.console?.info?.("[dsh-remote] codex history page cache " + event, {
+      threadId,
+      beforeSeq: page.beforeSeq ?? null,
+      ...page.maxMessages === void 0 ? {} : { maxMessages: page.maxMessages },
+      ...records === void 0 ? {} : { records },
+      ...ageMs === void 0 ? {} : { ageMs },
+      hits: this.historyPageHits,
+      misses: this.historyPageMisses
+    });
+  }
+  historyCacheStats() {
+    const now = Date.now();
+    return {
+      ttlMs: HISTORY_PAGE_CACHE_TTL_MS,
+      hits: this.historyPageHits,
+      misses: this.historyPageMisses,
+      active: true,
+      entries: [...this.historyPageCache.entries()].map(([key, { page, at }]) => {
+        const records = page.records;
+        const firstSeq = records[0]?.event.seq;
+        const lastSeq = records.at(-1)?.event.seq;
+        return {
+          key,
+          ageMs: now - at,
+          expired: now - at >= HISTORY_PAGE_CACHE_TTL_MS,
+          sessionId: page.header.id,
+          records: records.length,
+          cursor: page.cursor,
+          nextTurn: page.nextTurn,
+          hasMore: page.hasMore,
+          ...firstSeq === void 0 ? {} : { firstSeq },
+          ...lastSeq === void 0 ? {} : { lastSeq }
+        };
+      })
+    };
+  }
   cacheHistoryImages(history) {
     const sessionId = history.header.id;
     const entries = "entries" in history ? history.entries : history.records;
@@ -19504,12 +19529,26 @@ async function loadCatalog(client, signal, pendingThreads) {
   const workspaceByProjectId = new Map(projects.map((project, index) => [project.id, projectWorkspaces[index]]));
   const visibleSessionIds = /* @__PURE__ */ new Set();
   const visibleThreads = [];
+  const unmatched = [];
   for (const { thread, session } of projected) {
     const projectWorkspaceForSession = findProjectWorkspace(thread, session, projects, workspaceByProjectId);
     if (projectWorkspaceForSession !== void 0) {
+      rebaseSessionCwdOnProjectRoot(session, projectWorkspaceForSession.path);
+      rebaseThreadCwdOnProjectRoot(thread, projectWorkspaceForSession.path);
       addSessionToWorkspace(projectWorkspaceForSession, session);
       visibleSessionIds.add(session.id);
       visibleThreads.push(thread);
+    } else {
+      unmatched.push({ thread, session });
+    }
+  }
+  if (unmatched.length > 0) {
+    const workspace = defaultCodexWorkspace(unmatched.map((value) => value.session));
+    projectWorkspaces.push(workspace);
+    for (const { thread, session } of unmatched) {
+      addSessionToWorkspace(workspace, session);
+      visibleSessionIds.add(session.id);
+      visibleThreads.push(thread);
     }
   }
   const sessions = projected.map((value) => value.session).filter((session) => visibleSessionIds.has(session.id));
@@ -19600,13 +19639,17 @@ async function loadModelDirectory(client, signal) {
     models
   };
 }
-function projectCodexNativeHistory(thread, sessionId, sessionGeneration = "legacy") {
+function projectCodexNativeHistory(thread, sessionId, sessionGeneration = "legacy", start = {}) {
   const entries = [];
-  let seq = 0;
-  let turnNumber = 0;
+  let seq = start.seq ?? 0;
+  let turnNumber = start.turn ?? 0;
+  let turnSeqBase = 0;
+  let turnEventIndex = 0;
+  let lastSeq = start.stable === true ? -1 : (start.seq ?? 0) - 1;
   const active = activeTurnId(thread.turns);
   const append = (type, data2, time = Date.now(), view, sourceEventSeqs) => {
-    const eventSeq = seq++;
+    const eventSeq = start.stable === true ? turnSeqBase + turnEventIndex++ : seq++;
+    lastSeq = eventSeq;
     entries.push({
       type: "event",
       event: {
@@ -19623,13 +19666,16 @@ function projectCodexNativeHistory(thread, sessionId, sessionGeneration = "legac
   };
   for (const rawTurn of array(thread.turns)) {
     const turn = record3(rawTurn);
+    const turnId = string2(turn.id);
     const turnItems = array(turn.items).map(record3);
     const toolImages = turnItems.flatMap(toolOutputImageBlocks);
     let imageOwner = -1;
     for (let index = 0; index < turnItems.length; index += 1) {
       if (turnItems[index].type === "agentMessage") imageOwner = index;
     }
-    turnNumber += 1;
+    turnNumber = (turnId === void 0 ? void 0 : start.turnNumbers?.get(turnId)) ?? turnNumber + 1;
+    turnSeqBase = turnNumber * 4096;
+    turnEventIndex = 0;
     const turnActive = isActiveCodexTurn(turn);
     const time = normalizeTime(turn.createdAt) || normalizeTime(turn.startedAt) || normalizeTime(thread.createdAt) || Date.now();
     append("turn/start", { turn: turnNumber }, time);
@@ -19673,7 +19719,7 @@ function projectCodexNativeHistory(thread, sessionId, sessionGeneration = "legac
       ...sessionGeneration === "v3" ? { isSeeded: false } : {}
     },
     entries,
-    lastSeq: seq - 1,
+    lastSeq,
     nextTurn: turnNumber,
     ...active === void 0 ? {} : { activeTurnId: active }
   };
@@ -19682,7 +19728,7 @@ function paginateCodexNativeHistory(history, request) {
   const throughSeq = Math.min(request.throughSeq ?? history.lastSeq, history.lastSeq);
   const endSeq = Math.min(throughSeq, request.beforeSeq === void 0 ? throughSeq : request.beforeSeq - 1);
   const window = endSeq < 0 ? [] : history.entries.filter((entry) => entry.event.seq <= endSeq);
-  const maxMessages = request.maxMessages ?? DEFAULT_HISTORY_MESSAGES;
+  const maxMessages = request.maxMessages ?? HISTORY_PAGE_SIZES[0];
   let messages = 0;
   let cut = 0;
   for (let index = window.length - 1; index >= 0; index -= 1) {
@@ -19957,6 +20003,20 @@ function nativeWorkspace(view) {
 function nativeVisibleWorkspaces(catalog, selectedWorkspaceId) {
   return catalog.workspaces.filter((workspace) => workspace.sessionIds.length > 0 || workspace.workspaceId === selectedWorkspaceId);
 }
+var DEFAULT_CODEX_WORKSPACE_ID = "codex-workspace:default";
+var DEFAULT_CODEX_WORKSPACE_TITLE = "\u9ED8\u8BA4\u5DE5\u4F5C\u533A";
+function defaultCodexWorkspace(sessions) {
+  const first = sessions[0];
+  return {
+    workspaceId: DEFAULT_CODEX_WORKSPACE_ID,
+    path: sessions.find((session) => session.cwd !== void 0)?.cwd ?? "/",
+    title: DEFAULT_CODEX_WORKSPACE_TITLE,
+    sessionIds: [],
+    sessionCount: 0,
+    createdAt: isoTime(first.createdAt),
+    updatedAt: isoTime(first.updatedAt || first.createdAt)
+  };
+}
 function projectWorkspace(project) {
   const root = project.roots[0];
   return {
@@ -19998,6 +20058,28 @@ function findProjectWorkspace(thread, session, projects, workspaceByProjectId) {
   })[0];
   return match === void 0 ? void 0 : workspaceByProjectId.get(match.project.id);
 }
+function rebasedCwdOnProjectRoot(cwd, projectRoot2) {
+  if (process.platform !== "win32") return void 0;
+  const root = projectRoot2.replace(/[\\/]+$/u, "");
+  if (root.length === 0) return void 0;
+  const normalizedRoot = root.toLowerCase();
+  const normalizedCwd = cwd.toLowerCase();
+  if (normalizedCwd === normalizedRoot) return root;
+  if (normalizedCwd.startsWith(`${normalizedRoot}\\`) || normalizedCwd.startsWith(`${normalizedRoot}/`)) {
+    return `${root}${cwd.slice(root.length)}`;
+  }
+  return void 0;
+}
+function rebaseSessionCwdOnProjectRoot(session, projectRoot2) {
+  if (session.cwd === void 0) return;
+  const next = rebasedCwdOnProjectRoot(session.cwd, projectRoot2);
+  if (next !== void 0) session.cwd = next;
+}
+function rebaseThreadCwdOnProjectRoot(thread, projectRoot2) {
+  if (typeof thread.cwd !== "string") return;
+  const next = rebasedCwdOnProjectRoot(thread.cwd, projectRoot2);
+  if (next !== void 0) thread.cwd = next;
+}
 function addSessionToWorkspace(workspace, session) {
   if (!workspace.sessionIds.includes(session.id)) {
     workspace.sessionIds.push(session.id);
@@ -20014,7 +20096,8 @@ function containsPath(root, candidate) {
   return normalizedCandidate === normalizedRoot || normalizedCandidate.startsWith(`${normalizedRoot}/`) || normalizedCandidate.startsWith(`${normalizedRoot}\\`);
 }
 function normalizePathForCompare(path) {
-  return path.replace(/[\\/]+$/u, "") || path;
+  const trimmed = path.replace(/[\\/]+$/u, "") || path;
+  return process.platform === "win32" ? trimmed.toLowerCase() : trimmed;
 }
 function modelSelection() {
   return { provider: CODEX_PROVIDER, model: CODEX_MODEL };
@@ -20264,10 +20347,6 @@ function failFrom(error) {
   const source = error instanceof Error ? error : new Error(String(error));
   return fail(errorCode3(source) ?? "internal", source.message, errorDetails(source));
 }
-function isLegacySessionHistoryUnsupported(error) {
-  if (!(error instanceof Error)) return false;
-  return errorCode3(error) === "METHOD_NOT_ALLOWED" || errorCode3(error) === "METHOD_NOT_FOUND" || error.message.includes("The requested Codex method is not available over Remote.");
-}
 function errorCode3(error) {
   return "code" in error && typeof error.code === "string" ? error.code : void 0;
 }
@@ -20388,7 +20467,7 @@ var AsyncValueQueue2 = class {
         continue;
       }
       if (this.closed) return;
-      const next = await new Promise((resolve4) => this.waiters.push(resolve4));
+      const next = await new Promise((resolve5) => this.waiters.push(resolve5));
       if (next.done) return;
       yield next.value;
     }
@@ -20410,7 +20489,13 @@ function normalizeByteResult2(endpoint, result) {
 
 // src/typert-gateway-switch.ts
 var REMOTE_COMMAND_METHODS = ["execute", "list"];
-var LOCAL_ONLY_NAMESPACES = /* @__PURE__ */ new Set(["dynamicCordisRunner"]);
+var LOCAL_ONLY_NAMESPACES = /* @__PURE__ */ new Set([
+  "account",
+  "dynamicCordisRunner",
+  "remoteAccess",
+  "schedule",
+  "web"
+]);
 var LOCAL_FALLBACK_NAMESPACES = /* @__PURE__ */ new Set(["$events", "settings", "credentials", "dynamicCordisRunner"]);
 var PEER_GONE_CODES = /* @__PURE__ */ new Set([
   "TRANSPORT_CLOSED",
@@ -20767,7 +20852,7 @@ import { networkInterfaces } from "node:os";
 // src/native-rtc-helper.ts
 import { spawn, spawnSync } from "node:child_process";
 import { existsSync, readdirSync, realpathSync, statSync } from "node:fs";
-import { delimiter, dirname as dirname3, join as join4 } from "node:path";
+import { delimiter, dirname as dirname3, join as join5 } from "node:path";
 import { fileURLToPath } from "node:url";
 var cachedExternalFactory;
 var cachedExternalFactoryResolved = false;
@@ -20818,21 +20903,21 @@ function nodeBinaryCandidates() {
   add3(process.env.DSH_REMOTE_NODE);
   add3(process.env.NODE);
   if (process.versions.electron === void 0) add3(process.execPath);
-  for (const part of (process.env.PATH ?? "").split(delimiter)) add3(join4(part, process.platform === "win32" ? "node.exe" : "node"));
+  for (const part of (process.env.PATH ?? "").split(delimiter)) add3(join5(part, process.platform === "win32" ? "node.exe" : "node"));
   add3("/opt/homebrew/bin/node");
   add3("/usr/local/bin/node");
   add3("/usr/bin/node");
-  add3(join4(process.env.HOME ?? "", ".volta", "bin", process.platform === "win32" ? "node.exe" : "node"));
-  add3(join4(process.env.HOME ?? "", ".asdf", "shims", process.platform === "win32" ? "node.exe" : "node"));
-  add3(join4(process.env.HOME ?? "", ".local", "bin", process.platform === "win32" ? "node.exe" : "node"));
+  add3(join5(process.env.HOME ?? "", ".volta", "bin", process.platform === "win32" ? "node.exe" : "node"));
+  add3(join5(process.env.HOME ?? "", ".asdf", "shims", process.platform === "win32" ? "node.exe" : "node"));
+  add3(join5(process.env.HOME ?? "", ".local", "bin", process.platform === "win32" ? "node.exe" : "node"));
   for (const nvmNode of nvmNodeCandidates()) add3(nvmNode);
   return candidates;
 }
 function nvmNodeCandidates() {
-  const root = join4(process.env.HOME ?? "", ".nvm", "versions", "node");
+  const root = join5(process.env.HOME ?? "", ".nvm", "versions", "node");
   if (root === "" || !existsSync(root)) return [];
   try {
-    return readdirSync(root).map((version) => join4(root, version, "bin", process.platform === "win32" ? "node.exe" : "node")).sort((left, right) => right.localeCompare(left, "en", { numeric: true }));
+    return readdirSync(root).map((version) => join5(root, version, "bin", process.platform === "win32" ? "node.exe" : "node")).sort((left, right) => right.localeCompare(left, "en", { numeric: true }));
   } catch {
     return [];
   }
@@ -20955,8 +21040,8 @@ var ExternalNativePeerConnection = class {
   request(method, payload) {
     if (this.closed) return Promise.reject(new Error("native rtc helper is closed"));
     const id4 = this.nextRequestId++;
-    const promise = new Promise((resolve4, reject) => {
-      this.pending.set(id4, { resolve: resolve4, reject });
+    const promise = new Promise((resolve5, reject) => {
+      this.pending.set(id4, { resolve: resolve5, reject });
     });
     this.write({ id: id4, method, payload });
     return promise;
@@ -21750,10 +21835,10 @@ function parseRouteTarget(value) {
 async function detectRouteHostIpv4(target2, timeoutMs) {
   const socket = createSocket("udp4");
   try {
-    return await new Promise((resolve4, reject) => {
+    return await new Promise((resolve5, reject) => {
       const timer = setTimeout(() => {
         cleanup();
-        resolve4(void 0);
+        resolve5(void 0);
       }, timeoutMs);
       const cleanup = () => {
         clearTimeout(timer);
@@ -21767,7 +21852,7 @@ async function detectRouteHostIpv4(target2, timeoutMs) {
       socket.connect(target2.port, target2.host, () => {
         cleanup();
         const address = socket.address();
-        resolve4(typeof address === "string" ? void 0 : address.address);
+        resolve5(typeof address === "string" ? void 0 : address.address);
       });
     });
   } finally {
@@ -21862,6 +21947,7 @@ var ClientModeRuntime = class {
     this.proxySwitch = apiProxy === void 0 ? void 0 : new ApiProxySwitch(apiProxy);
     this.gatewaySwitch = new TypertGatewaySwitch(typertGateway, { peer: this.peer });
     this.gatewaySwitch.setRemoteAvailability(() => this.connected !== void 0);
+    this.installCodexHistoryCacheInspector();
   }
   preview;
   identity;
@@ -23316,6 +23402,43 @@ var ClientModeRuntime = class {
     const virtual = this.codexVirtual;
     this.codexVirtual = void 0;
     await virtual?.close();
+    this.installCodexHistoryCacheInspector();
+  }
+  /**
+   * Keep `__dshCodexHistoryCacheStats()` defined for the whole client lifetime.
+   * The Codex virtual harness has its own inspector while a workspace is open;
+   * this runtime-level one fills the gap before the first open and after close.
+   */
+  installCodexHistoryCacheInspector() {
+    const globalScope = globalThis;
+    const scope = globalThis;
+    const inspect = () => this.codexVirtual?.historyCacheStats() ?? {
+      ttlMs: 6e4,
+      hits: 0,
+      misses: 0,
+      active: false,
+      entries: []
+    };
+    globalScope.__dshCodexHistoryCacheStats = inspect;
+    if (scope.window !== void 0) scope.window.__dshCodexHistoryCacheStats = inspect;
+    this.writeCodexHistoryCacheStats(inspect());
+  }
+  writeCodexHistoryCacheStats(stats) {
+    if (!codexHistoryStatsFileEnabled() || process.env.VITEST !== void 0) return;
+    try {
+      const home = process.env.DSH_HOME ?? join6(homedir2(), ".dsh");
+      mkdirSync2(home, { recursive: true });
+      writeFileSync2(
+        join6(home, "codex-history-cache-stats.json"),
+        JSON.stringify({
+          ...stats,
+          pid: process.pid,
+          source: "client-runtime",
+          writtenAt: (/* @__PURE__ */ new Date()).toISOString()
+        }, null, 2)
+      );
+    } catch {
+    }
   }
   assertRemoteCompatible(remote) {
     this.selectHarnessRemoteTransport(remote);
@@ -23912,8 +24035,8 @@ function failureCode(error) {
   return own ?? safeErrorCode(error);
 }
 function sleep3(ms) {
-  return new Promise((resolve4) => {
-    setTimeout(resolve4, ms);
+  return new Promise((resolve5) => {
+    setTimeout(resolve5, ms);
   });
 }
 function remoteHostFeatures(clientVersion) {
@@ -23964,7 +24087,7 @@ async function probeRemoteHostFeatures(client, clientVersion) {
 }
 async function waitForCodexFrames(stream, signal) {
   if (signal?.aborted) throw new ClientModeError("RPC_ABORTED", "The Codex event poll was cancelled.");
-  await new Promise((resolve4, reject) => {
+  await new Promise((resolve5, reject) => {
     const previousWake = stream.wake;
     const timer = setTimeout(done, 25e3);
     const onAbort = () => {
@@ -23978,7 +24101,7 @@ async function waitForCodexFrames(stream, signal) {
     }
     function done() {
       cleanup();
-      resolve4();
+      resolve5();
     }
     stream.wake = () => {
       previousWake();
@@ -24023,14 +24146,14 @@ function iceServersForAttempt(attempt, iceServers) {
 // src/client-target-store.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { chmod as chmod2, mkdir as mkdir2, readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join5 } from "node:path";
+import { join as join7 } from "node:path";
 var FILE_NAME = "client-target.json";
 var ClientTargetStore = class {
   constructor(directory) {
     this.directory = directory;
   }
   get file() {
-    return join5(this.directory, FILE_NAME);
+    return join7(this.directory, FILE_NAME);
   }
   /** Read the record. A missing, unreadable or malformed file reads as "no record". */
   async load() {
@@ -24106,8 +24229,8 @@ import { execFileSync } from "node:child_process";
 import { existsSync as existsSync2 } from "node:fs";
 import { createHash } from "node:crypto";
 import { chmod as chmod3, cp, mkdir as mkdir3, readFile as readFile4, rm as rm3, stat as stat3, writeFile as writeFile3 } from "node:fs/promises";
-import { homedir } from "node:os";
-import { dirname as dirname4, join as join6 } from "node:path";
+import { homedir as homedir3 } from "node:os";
+import { dirname as dirname4, join as join8 } from "node:path";
 var identitySchema = external_exports.object({
   schemaVersion: external_exports.literal(1),
   deviceId: external_exports.string().uuid(),
@@ -24136,14 +24259,14 @@ var IdentityStore = class {
   peers = /* @__PURE__ */ new Map();
   constructor(options = {}) {
     const env = options.env ?? process.env;
-    const dshHome = env.DSH_HOME || join6(options.homeDirectory ?? homedir(), ".dsh");
-    this.directory = options.directory ?? join6(dshHome, "remote");
+    const dshHome = env.DSH_HOME || join8(options.homeDirectory ?? homedir3(), ".dsh");
+    this.directory = options.directory ?? join8(dshHome, "remote");
   }
   async loadOrCreate(deviceName) {
     await mkdir3(this.directory, { recursive: true, mode: 448 });
     await chmod3(this.directory, 448);
-    const devicePath = join6(this.directory, "device.json");
-    const keyPath = join6(this.directory, "device.key");
+    const devicePath = join8(this.directory, "device.json");
+    const keyPath = join8(this.directory, "device.key");
     const [hasDevice, hasKey] = await Promise.all([exists2(devicePath), exists2(keyPath)]);
     if (hasDevice !== hasKey) {
       throw new IdentityInvalidError("device identity is incomplete; repair it explicitly before reconnecting");
@@ -24212,7 +24335,7 @@ var IdentityStore = class {
     return removed;
   }
   async loadPeers() {
-    const path = join6(this.directory, "trusted-peers.json");
+    const path = join8(this.directory, "trusted-peers.json");
     if (!await exists2(path)) {
       await atomicJsonWrite(path, { schemaVersion: 1, peers: [] }, 384);
     }
@@ -24228,7 +24351,7 @@ var IdentityStore = class {
     this.peers = peers;
   }
   async savePeers() {
-    await atomicJsonWrite(join6(this.directory, "trusted-peers.json"), {
+    await atomicJsonWrite(join8(this.directory, "trusted-peers.json"), {
       schemaVersion: 1,
       peers: [...this.peers.values()]
     }, 384);
@@ -24237,7 +24360,7 @@ var IdentityStore = class {
 function serverStorageDirectory(root, serverUrl, role) {
   const origin = new URL(serverUrl).origin;
   const scope = createHash("sha256").update(origin).digest("hex").slice(0, 24);
-  return join6(root, "servers", scope, role);
+  return join8(root, "servers", scope, role);
 }
 async function ensureDeviceDirectory(root, serverUrl) {
   const directory = serverStorageDirectory(root, serverUrl, "device");
@@ -24438,10 +24561,11 @@ var ControlStatusStream = class {
 
 // src/codex/domain.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
+import { Buffer as Buffer4 } from "node:buffer";
 import { accessSync, constants, existsSync as existsSync3, readFileSync, readdirSync as readdirSync2, statSync as statSync2 } from "node:fs";
 import { readdir as readdir2, realpath, stat as stat4 } from "node:fs/promises";
-import { homedir as homedir2 } from "node:os";
-import { basename as basename2, isAbsolute as isAbsolute2, join as join7, posix, relative, resolve } from "node:path";
+import { homedir as homedir4 } from "node:os";
+import { basename as basename2, isAbsolute as isAbsolute2, join as join9, posix, relative, resolve } from "node:path";
 
 // src/codex/app-server.ts
 import { spawn as spawn2 } from "node:child_process";
@@ -24514,15 +24638,15 @@ var CodexAppServerClient = class {
     const child = this.process;
     this.process = void 0;
     if (child === void 0 || child.exitCode !== null || child.killed) return;
-    await new Promise((resolve4) => {
+    await new Promise((resolve5) => {
       const timer = setTimeout(() => {
         child.kill("SIGKILL");
-        resolve4();
+        resolve5();
       }, 2e3);
       timer.unref?.();
       child.once("exit", () => {
         clearTimeout(timer);
-        resolve4();
+        resolve5();
       });
       child.kill("SIGTERM");
     });
@@ -24578,13 +24702,13 @@ var CodexAppServerClient = class {
   }
   request(method, params, timeoutMs) {
     const id4 = this.nextId++;
-    const result = new Promise((resolve4, reject) => {
+    const result = new Promise((resolve5, reject) => {
       const timer = setTimeout(() => {
         this.pending.delete(id4);
         reject(new CodexAppServerError("CODEX_REQUEST_TIMEOUT", "Codex App Server request timed out."));
       }, timeoutMs);
       timer.unref?.();
-      this.pending.set(id4, { resolve: resolve4, reject, timer });
+      this.pending.set(id4, { resolve: resolve5, reject, timer });
     });
     try {
       this.write({ id: id4, method, params });
@@ -24698,20 +24822,149 @@ function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-// src/codex/peer-bridge.ts
-import { Buffer as Buffer3 } from "node:buffer";
-var streamOpenSchema = external_exports.object({
-  streamId: external_exports.string().min(1).max(128),
-  threadId: external_exports.string().min(1).max(256)
-}).strict();
-var streamCloseSchema = external_exports.object({ streamId: external_exports.string().min(1).max(128) }).strict();
-var transferOpenSchema = external_exports.object({
-  transferId: external_exports.string().uuid(),
-  totalBytes: external_exports.number().int().positive().max(MAX_CODEX_APP_TRANSFER_BYTES),
-  totalChunks: external_exports.number().int().positive()
+// src/codex/method-policy.ts
+var id2 = external_exports.string().min(1).max(256);
+var cursor = external_exports.string().min(1).max(4096).nullable().optional();
+var textInput = external_exports.object({
+  type: external_exports.literal("text"),
+  text: external_exports.string().min(1).max(256 * 1024)
 }).strict();
-var transferChunkSchema = external_exports.object({
-  transferId: external_exports.string().uuid(),
+var imageMediaType = external_exports.enum(["image/png", "image/jpeg", "image/webp", "image/gif"]);
+var canonicalBase64 = external_exports.string().min(4).max(288 * 1024 * 1024).refine((value) => value.length % 4 === 0 && /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u.test(value), {
+  message: "Image data must use canonical base64."
+});
+var imageInput = external_exports.object({
+  type: external_exports.literal("image"),
+  mediaType: imageMediaType,
+  data: canonicalBase64
+}).strict();
+var input = external_exports.array(external_exports.union([textInput, imageInput])).min(1).max(16);
+var permissionPreset = external_exports.enum(["workspace-write", "danger-full-access"]);
+var projectRoot = external_exports.object({
+  path: external_exports.string().min(1).max(4096)
+}).strict();
+var CODEX_HISTORY_MAX_MESSAGES = 200;
+var schemas = {
+  "account/read": external_exports.object({ refreshToken: external_exports.literal(false).optional() }).strict(),
+  "model/list": external_exports.object({
+    cursor,
+    limit: external_exports.number().int().min(1).max(100).optional(),
+    includeHidden: external_exports.boolean().optional()
+  }).strict(),
+  "project/list": external_exports.object({
+    cursor,
+    limit: external_exports.number().int().min(1).max(100).optional()
+  }).strict(),
+  "project/create": external_exports.object({
+    name: external_exports.string().trim().min(1).max(256),
+    roots: external_exports.array(projectRoot).length(1),
+    idempotencyKey: external_exports.string().min(16).max(256)
+  }).strict(),
+  "thread/list": external_exports.object({
+    cursor,
+    limit: external_exports.number().int().min(1).max(100).optional(),
+    sortKey: external_exports.enum(["created_at", "updated_at", "recency_at"]).optional(),
+    sortDirection: external_exports.enum(["asc", "desc"]).optional(),
+    modelProviders: external_exports.array(external_exports.string().min(1).max(128)).max(32).nullable().optional(),
+    sourceKinds: external_exports.array(external_exports.enum(["cli", "vscode", "exec", "appServer", "unknown"])).max(8).optional(),
+    archived: external_exports.boolean().optional(),
+    isPinned: external_exports.boolean().optional(),
+    cwd: external_exports.union([external_exports.string().min(1).max(4096), external_exports.array(external_exports.string().min(1).max(4096)).min(1).max(32)]).optional(),
+    useStateDbOnly: external_exports.boolean().optional(),
+    searchTerm: external_exports.string().max(1024).optional(),
+    // Upstream `ThreadListParams` declares these two as well. Refusing them turned a
+    // legitimate client query into "The CodeX call parameters are invalid.".
+    originators: external_exports.array(external_exports.string().min(1).max(256)).max(32).nullable().optional(),
+    sectionId: external_exports.string().max(256).nullable().optional()
+  }).strict(),
+  "thread/read": external_exports.object({ threadId: id2, includeTurns: external_exports.boolean().optional() }).strict(),
+  "dsh/sessionHistory": external_exports.object({
+    threadId: id2,
+    beforeSeq: external_exports.number().int().nonnegative().optional(),
+    throughSeq: external_exports.number().int().min(-1).optional(),
+    maxMessages: external_exports.number().int().min(1).max(CODEX_HISTORY_MAX_MESSAGES).optional()
+  }).strict(),
+  "dsh/directoryList": external_exports.object({
+    path: external_exports.string().min(1).max(4096)
+  }).strict(),
+  "thread/start": external_exports.object({
+    cwd: external_exports.string().min(1).max(4096),
+    model: external_exports.string().min(1).max(128).optional(),
+    personality: external_exports.string().min(1).max(64).optional(),
+    permissionPreset: permissionPreset.optional()
+  }).strict(),
+  "thread/resume": external_exports.object({
+    threadId: id2,
+    model: external_exports.string().min(1).max(128).optional(),
+    permissionPreset: permissionPreset.optional()
+  }).strict(),
+  "thread/fork": external_exports.object({
+    threadId: id2,
+    lastTurnId: id2.optional(),
+    permissionPreset: permissionPreset.optional()
+  }).strict(),
+  // Upstream declares a plain string and uses the empty value to clear a name, so the
+  // trim-based minimum rejected a legitimate rename.
+  "thread/name/set": external_exports.object({ threadId: id2, name: external_exports.string().max(256) }).strict(),
+  "thread/archive": external_exports.object({ threadId: id2 }).strict(),
+  "thread/unarchive": external_exports.object({ threadId: id2 }).strict(),
+  "thread/unsubscribe": external_exports.object({ threadId: id2 }).strict(),
+  "turn/start": external_exports.object({
+    threadId: id2,
+    input,
+    model: external_exports.string().min(1).max(128).optional(),
+    effort: external_exports.enum(["none", "minimal", "low", "medium", "high", "xhigh", "max", "ultra"]).optional(),
+    summary: external_exports.enum(["auto", "concise", "detailed", "none"]).optional(),
+    personality: external_exports.string().min(1).max(64).optional(),
+    permissionPreset: permissionPreset.optional()
+  }).strict(),
+  "turn/steer": external_exports.object({
+    threadId: id2,
+    input,
+    expectedTurnId: id2,
+    // Declared by upstream `TurnSteerParams`; see the thread/list note above.
+    clientUserMessageId: external_exports.string().max(256).nullable().optional()
+  }).strict(),
+  "turn/interrupt": external_exports.object({ threadId: id2, turnId: id2 }).strict()
+};
+var CODEX_APP_ALLOWLIST = Object.freeze(Object.keys(schemas));
+function parseCodexCall(method, params) {
+  if (!Object.prototype.hasOwnProperty.call(schemas, method)) {
+    throw new RpcError("METHOD_NOT_ALLOWED", "The requested Codex method is not available over Remote.");
+  }
+  const schema = schemas[method];
+  const parsed = schema.safeParse(params);
+  if (!parsed.success) {
+    const detail = parsed.error.issues.slice(0, 4).map((issue) => {
+      const path = issue.path.length === 0 ? "(root)" : issue.path.join(".");
+      const keys = "keys" in issue && Array.isArray(issue.keys) ? ` [${issue.keys.join(", ")}]` : "";
+      return `${path}${keys}: ${issue.code}`;
+    }).join(", ");
+    throw new RpcError("INVALID_MESSAGE", `The CodeX call parameters are invalid. (${method} \u2192 ${detail})`);
+  }
+  return { method, params: parsed.data };
+}
+function isThreadMutation(method) {
+  return method === "turn/start" || method === "turn/steer" || method === "turn/interrupt";
+}
+function threadIdFromParams(params) {
+  return typeof params.threadId === "string" ? params.threadId : void 0;
+}
+
+// src/codex/peer-bridge.ts
+import { Buffer as Buffer3 } from "node:buffer";
+var streamOpenSchema = external_exports.object({
+  streamId: external_exports.string().min(1).max(128),
+  threadId: external_exports.string().min(1).max(256)
+}).strict();
+var streamCloseSchema = external_exports.object({ streamId: external_exports.string().min(1).max(128) }).strict();
+var transferOpenSchema = external_exports.object({
+  transferId: external_exports.string().uuid(),
+  totalBytes: external_exports.number().int().positive().max(MAX_CODEX_APP_TRANSFER_BYTES),
+  totalChunks: external_exports.number().int().positive()
+}).strict();
+var transferChunkSchema = external_exports.object({
+  transferId: external_exports.string().uuid(),
   index: external_exports.number().int().nonnegative(),
   data: external_exports.string().min(1).max(Math.ceil(CODEX_APP_TRANSFER_CHUNK_BYTES / 3) * 4)
 }).strict();
@@ -24988,6 +25241,219 @@ function concatChunks(chunks, totalBytes) {
   return output;
 }
 
+// src/codex/history-window.ts
+var PAGE_LIMIT = 25;
+var MAX_PAGES = 64;
+var CACHE_TTL_MS = 5 * 6e4;
+var CACHE_LIMIT = 16;
+var CodexHistoryWindows = class {
+  constructor(call, logger) {
+    this.call = call;
+    this.logger = logger;
+  }
+  windows = /* @__PURE__ */ new Map();
+  async window(threadId, metadata, beforeSeq, maxMessages) {
+    const updatedAt = typeof metadata.updatedAt === "number" ? metadata.updatedAt : void 0;
+    const cached = this.windows.get(threadId);
+    const fresh = cached !== void 0 && (updatedAt === void 0 || cached.updatedAt === void 0 || cached.updatedAt === updatedAt) && Date.now() - cached.at < CACHE_TTL_MS;
+    if (fresh && cached !== void 0) {
+      cached.at = Date.now();
+      await this.ensureOlder(threadId, cached, beforeSeq, maxMessages);
+      this.logger?.debug("codex history cache hit", {
+        threadId,
+        turns: cached.loaded.size,
+        records: cached.history.entries.length
+      });
+      return cached;
+    }
+    if (cached !== void 0) {
+      const appended = await this.appendNewTurns(threadId, cached, updatedAt);
+      if (appended !== void 0) {
+        await this.ensureOlder(threadId, appended, beforeSeq, maxMessages);
+        this.remember(threadId, appended);
+        this.logger?.debug("codex history cache appended", {
+          threadId,
+          turns: appended.loaded.size,
+          records: appended.history.entries.length
+        });
+        return appended;
+      }
+    }
+    const built = await this.rebuild(threadId, metadata, cached?.acceptedPageSize);
+    await this.ensureOlder(threadId, built, beforeSeq, maxMessages);
+    this.remember(threadId, built);
+    return built;
+  }
+  async rebuild(threadId, metadata, acceptedPageSize) {
+    const startedAt = performance.now();
+    const index = await this.readTurnIndex(threadId);
+    const window = {
+      metadata,
+      turnNumbers: index.numbers,
+      turnStartSeq: index.turnStartSeq,
+      totalTurns: index.total,
+      totalEvents: index.totalEvents,
+      loaded: /* @__PURE__ */ new Map(),
+      history: projectCodexNativeHistory({ ...metadata, turns: [] }, `codex:${threadId}`, "legacy", {
+        turnNumbers: index.numbers
+      }),
+      ...typeof metadata.updatedAt === "number" ? { updatedAt: metadata.updatedAt } : {},
+      ...acceptedPageSize === void 0 ? {} : { acceptedPageSize },
+      at: Date.now()
+    };
+    this.logger?.debug("codex history index", {
+      threadId,
+      turns: index.total,
+      pages: index.pages,
+      durationMs: Math.round(performance.now() - startedAt)
+    });
+    await this.loadTail(threadId, window);
+    return window;
+  }
+  async readTurnIndex(threadId) {
+    const numbers = /* @__PURE__ */ new Map();
+    const turnStartSeq = /* @__PURE__ */ new Map();
+    let total = 0;
+    let totalEvents = 0;
+    let pages = 0;
+    let cursor2;
+    for (let page = 0; page < MAX_PAGES; page += 1) {
+      const result = await this.turnPage(threadId, cursor2, "asc", "summary");
+      pages += 1;
+      for (const rawTurn of result.turns) {
+        const turnId = typeof rawTurn.id === "string" ? rawTurn.id : void 0;
+        if (turnId === void 0 || numbers.has(turnId)) continue;
+        total += 1;
+        numbers.set(turnId, total);
+        turnStartSeq.set(turnId, totalEvents);
+        totalEvents += projectCodexNativeHistory({ turns: [rawTurn] }, `codex:${threadId}`).entries.length;
+      }
+      cursor2 = result.nextCursor;
+      if (cursor2 === void 0) break;
+    }
+    return { numbers, turnStartSeq, total, totalEvents, pages };
+  }
+  async loadTail(threadId, window) {
+    let cursor2;
+    let fetched = 0;
+    for (let page = 0; page < MAX_PAGES; page += 1) {
+      const result = await this.turnPage(threadId, cursor2, "desc", "full");
+      fetched += result.turns.length;
+      this.addTurns(window, result.turns);
+      cursor2 = result.nextCursor;
+      this.project(threadId, window);
+      if (surfaceRecords(window.history) >= HISTORY_PAGE_SIZES[0] || cursor2 === void 0) break;
+    }
+    window.olderCursor = cursor2;
+    this.logger?.debug("codex history tail", {
+      threadId,
+      turnsFetched: fetched,
+      loadedTurns: window.loaded.size,
+      records: window.history.entries.length,
+      older: window.olderCursor !== void 0
+    });
+  }
+  async ensureOlder(threadId, window, beforeSeq, maxMessages) {
+    if (beforeSeq === void 0) return;
+    const needed = Math.min(maxMessages ?? HISTORY_PAGE_SIZES[0], HISTORY_PAGE_SIZES[0]);
+    const available = () => window.history.entries.filter((entry) => entry.event.seq < beforeSeq && isSurfaceEvent(entry.event.type) && entry.event.surfaceOp === "append").length;
+    let fetched = 0;
+    for (let page = 0; page < MAX_PAGES; page += 1) {
+      if (available() >= needed) break;
+      if (window.olderCursor === void 0) break;
+      const result = await this.turnPage(threadId, window.olderCursor, "desc", "full");
+      fetched += result.turns.length;
+      this.addTurns(window, result.turns);
+      window.olderCursor = result.nextCursor;
+      this.project(threadId, window);
+    }
+    if (fetched > 0) {
+      this.logger?.debug("codex history older", {
+        threadId,
+        beforeSeq,
+        needed,
+        turnsFetched: fetched,
+        loadedTurns: window.loaded.size
+      });
+    }
+  }
+  async appendNewTurns(threadId, cached, updatedAt) {
+    if (cached.newestTurnId === void 0) return void 0;
+    const newer = [];
+    let cursor2;
+    for (let page = 0; page < MAX_PAGES; page += 1) {
+      const result = await this.turnPage(threadId, cursor2, "desc", "full");
+      for (const rawTurn of result.turns) {
+        if (typeof rawTurn.id === "string" && rawTurn.id === cached.newestTurnId) {
+          if (newer.length === 0) {
+            cached.updatedAt = updatedAt;
+            cached.at = Date.now();
+            return cached;
+          }
+          this.addTurns(cached, [...newer].reverse());
+          this.project(threadId, cached);
+          cached.updatedAt = updatedAt;
+          cached.at = Date.now();
+          return cached;
+        }
+        newer.push(rawTurn);
+      }
+      cursor2 = result.nextCursor;
+      if (cursor2 === void 0) return void 0;
+    }
+    return void 0;
+  }
+  addTurns(window, turns) {
+    for (const turn of turns) {
+      const turnId = typeof turn.id === "string" ? turn.id : void 0;
+      if (turnId === void 0) continue;
+      if (!window.turnNumbers.has(turnId)) {
+        window.totalTurns += 1;
+        window.turnNumbers.set(turnId, window.totalTurns);
+        window.turnStartSeq.set(turnId, window.totalEvents);
+        window.totalEvents += projectCodexNativeHistory({ turns: [turn] }, window.history.header.id).entries.length;
+      }
+      window.loaded.set(turnId, turn);
+    }
+  }
+  project(threadId, window) {
+    const turns = [...window.loaded.entries()].sort((left, right) => (window.turnNumbers.get(left[0]) ?? 0) - (window.turnNumbers.get(right[0]) ?? 0)).map(([, turn]) => turn);
+    const first = [...window.loaded.keys()].sort((left, right) => (window.turnNumbers.get(left) ?? 0) - (window.turnNumbers.get(right) ?? 0))[0];
+    const startSeq = first === void 0 ? 0 : window.turnStartSeq.get(first) ?? 0;
+    const history = projectCodexNativeHistory({ ...window.metadata, turns }, `codex:${threadId}`, "legacy", {
+      seq: startSeq,
+      turnNumbers: window.turnNumbers
+    });
+    history.nextTurn = window.totalTurns + 1;
+    window.history = history;
+    const newest = [...window.turnNumbers.entries()].sort((left, right) => right[1] - left[1])[0]?.[0];
+    if (newest !== void 0) window.newestTurnId = newest;
+  }
+  async turnPage(threadId, cursor2, direction, itemsView) {
+    const result = await this.call("thread/turns/list", {
+      threadId,
+      limit: PAGE_LIMIT,
+      sortDirection: direction,
+      itemsView,
+      ...cursor2 === void 0 ? {} : { cursor: cursor2 }
+    });
+    const page = typeof result === "object" && result !== null ? result : {};
+    const turns = Array.isArray(page.data) ? page.data.filter((turn) => typeof turn === "object" && turn !== null && !Array.isArray(turn)) : [];
+    const nextCursor = typeof page.nextCursor === "string" && page.nextCursor.length > 0 ? page.nextCursor : void 0;
+    return { turns, nextCursor };
+  }
+  remember(threadId, window) {
+    if (this.windows.size >= CACHE_LIMIT && !this.windows.has(threadId)) {
+      const oldest = this.windows.keys().next().value;
+      if (oldest !== void 0) this.windows.delete(oldest);
+    }
+    this.windows.set(threadId, window);
+  }
+};
+function surfaceRecords(history) {
+  return history.entries.filter((entry) => isSurfaceEvent(entry.event.type) && entry.event.surfaceOp === "append").length;
+}
+
 // src/codex/domain.ts
 var APPROVAL_TTL_MS = 5 * 6e4;
 var DEFAULT_RESTART_DELAYS_MS = [1e3, 2e3, 4e3, 8e3, 15e3];
@@ -24996,8 +25462,6 @@ var ACCOUNT_PROBE_TIMEOUT_MS = 6e4;
 var CODEX_START_BUDGET_MS = 9e4;
 var CODEX_PAGE_LIMIT2 = 100;
 var MAX_CODEX_PAGES2 = 32;
-var CODEX_HISTORY_PAGE_LIMIT = 25;
-var MAX_CODEX_HISTORY_PAGES = 64;
 var CODEX_DIRECTORY_ENTRY_LIMIT = 500;
 var CodexRemoteDomain = class {
   constructor(config, logger, createAppServer = (binary, targetLogger) => new CodexAppServerClient(binary, targetLogger), restartDelaysMs = DEFAULT_RESTART_DELAYS_MS) {
@@ -25005,6 +25469,7 @@ var CodexRemoteDomain = class {
     this.createAppServer = createAppServer;
     this.restartDelaysMs = restartDelaysMs;
     this.config = config;
+    this.historyWindows = new CodexHistoryWindows((method, params) => this.callUpstream(method, params), logger);
   }
   appServer;
   unsubscribeInbound;
@@ -25014,6 +25479,8 @@ var CodexRemoteDomain = class {
   turnOwners = /* @__PURE__ */ new Map();
   approvals = /* @__PURE__ */ new Map();
   permissionPresets = /* @__PURE__ */ new Map();
+  /** Per-Thread turn index plus the tail-first full-item window. */
+  historyWindows;
   approvalExpiryTimer;
   restartTimer;
   restartAttempt = 0;
@@ -25115,14 +25582,16 @@ var CodexRemoteDomain = class {
     }
     if (call.method === "thread/list") {
       const result = sanitizeThreadList(await this.callUpstream(call.method, call.params));
+      const authority = await this.readWorkspaceAuthority(result.data);
       const authorized = filterThreadListByWorkspaceAuthority(
         result,
-        await this.readWorkspaceAuthority(result.data)
+        authority,
+        this.config.showUnprojectedSessions !== false
       );
-      return {
+      return rebaseThreadListCwds({
         ...authorized,
         data: uniqueCodexThreadRows(authorized.data)
-      };
+      }, authority.roots);
     }
     if (call.method === "thread/start") {
       const cwd = await this.requireCodexWorkspacePath(call.params.cwd);
@@ -25141,21 +25610,15 @@ var CodexRemoteDomain = class {
     }
     const threadId = threadIdFromParams(call.params);
     if (call.method === "dsh/sessionHistory") {
-      const thread = await this.readThreadForHistory(connectionId, threadId);
-      const page = paginateCodexNativeHistory(
-        projectCodexNativeHistory(thread, `codex:${threadId}`),
-        {
-          beforeSeq: optionalInteger2(call.params.beforeSeq),
-          throughSeq: optionalInteger2(call.params.throughSeq),
-          maxMessages: optionalInteger2(call.params.maxMessages)
-        }
-      );
-      const activeTurnId2 = typeof page.activeTurnId === "string" ? page.activeTurnId : this.turnOwners.get(threadId)?.turnId;
-      return {
-        ...page,
-        ...activeTurnId2 === void 0 ? {} : { activeTurnId: activeTurnId2 },
-        permissionPreset: this.permissionPresets.get(threadId) ?? null
-      };
+      const { thread: metadata } = await this.readKnownThread(threadId);
+      const beforeSeq = optionalInteger2(call.params.beforeSeq);
+      const maxMessages = optionalInteger2(call.params.maxMessages);
+      const window = await this.historyWindows.window(threadId, metadata, beforeSeq, maxMessages);
+      return this.historyPage(window, threadId, {
+        beforeSeq,
+        throughSeq: optionalInteger2(call.params.throughSeq),
+        maxMessages
+      });
     }
     if (call.method === "dsh/directoryList") {
       return this.listCodexDirectory(call.params.path);
@@ -25658,103 +26121,60 @@ var CodexRemoteDomain = class {
       return { thread: listed, ...typeof listed.cwd === "string" && listed.cwd.length > 0 ? { cwd: listed.cwd } : {} };
     }
     const thread = extractThread(result);
-    if (thread === void 0 || thread.id !== threadId || !isThreadAllowedByWorkspaceAuthority(thread, authority)) {
+    if (thread === void 0 || thread.id !== threadId || !this.threadAllowed(thread, authority)) {
       throw new RpcError("CODEX_THREAD_NOT_ALLOWED", "The Codex thread is not available through this Remote Host.");
     }
     return { thread, ...typeof thread.cwd === "string" && thread.cwd.length > 0 ? { cwd: thread.cwd } : {} };
   }
-  async readThreadForHistory(connectionId, threadId) {
-    const { thread: metadata } = await this.readKnownThread(threadId);
-    try {
-      return { ...metadata, turns: await this.readThreadTurns(connectionId, threadId, "full") };
-    } catch (fullError) {
-      if (!isHistoryReadRecoverable(fullError)) throw fullError;
-      this.logHistoryFallback(connectionId, "turns-full", fullError);
-    }
-    try {
-      return { ...metadata, turns: await this.readThreadTurns(connectionId, threadId, "summary") };
-    } catch (summaryError) {
-      if (!isHistoryReadRecoverable(summaryError)) throw summaryError;
-      this.logHistoryFallback(connectionId, "turns-summary", summaryError);
-    }
-    try {
-      const legacyResult = await this.callUpstream("thread/read", { threadId, includeTurns: true });
-      const legacyThread = extractThread(legacyResult);
-      if (legacyThread === void 0 || legacyThread.id !== threadId) {
-        throw new RpcError("CODEX_INVALID_RESPONSE", "Codex App Server returned an invalid Thread history.");
-      }
-      return legacyThread;
-    } catch (legacyError) {
-      if (!isHistoryReadRecoverable(legacyError)) throw legacyError;
-      this.logHistoryFallback(connectionId, "thread-read-full", legacyError);
-      return { ...metadata, turns: [] };
-    }
-  }
-  async readThreadTurns(connectionId, threadId, itemsView) {
-    const turns = [];
-    let cursor2;
-    for (let page = 0; page < MAX_CODEX_HISTORY_PAGES; page += 1) {
-      const result = await this.callUpstream("thread/turns/list", {
+  historyPage(window, threadId, request) {
+    const requested = request.maxMessages ?? HISTORY_PAGE_SIZES[0];
+    const start = Math.max(1, Math.min(requested, HISTORY_PAGE_SIZES[0], window.acceptedPageSize ?? requested));
+    const activeTurnId2 = this.turnOwners.get(threadId)?.turnId;
+    for (const size of historyPageSizes(start)) {
+      const page = paginateCodexNativeHistory(window.history, {
+        beforeSeq: request.beforeSeq,
+        throughSeq: request.throughSeq,
+        maxMessages: size
+      });
+      const resolvedActiveTurnId = page.activeTurnId ?? activeTurnId2;
+      const response = {
+        ...page,
+        cursor: window.history.lastSeq,
+        nextTurn: window.totalTurns + 1,
+        hasMore: page.hasMore || window.olderCursor !== void 0,
+        ...resolvedActiveTurnId === void 0 ? {} : { activeTurnId: resolvedActiveTurnId },
+        permissionPreset: this.permissionPresets.get(threadId) ?? null
+      };
+      const bytes = Buffer4.byteLength(JSON.stringify(response), "utf8");
+      this.logger.debug("codex history page", {
         threadId,
-        limit: CODEX_HISTORY_PAGE_LIMIT,
-        sortDirection: "asc",
-        itemsView,
-        ...cursor2 === void 0 ? {} : { cursor: cursor2 }
+        requested,
+        size,
+        bytes,
+        budget: HISTORY_BUDGET_BYTES,
+        loadedTurns: window.loaded.size,
+        totalTurns: window.totalTurns
       });
-      const pageResult = isRecord12(result) ? result : {};
-      for (const rawTurn of array2(pageResult.data)) {
-        if (!isRecord12(rawTurn)) continue;
-        const turnId = typeof rawTurn.id === "string" ? rawTurn.id : void 0;
-        const items = rawTurn.itemsView === "full" || turnId === void 0 ? array2(rawTurn.items) : await this.readThreadItems(connectionId, threadId, turnId, array2(rawTurn.items));
-        turns.push({ ...rawTurn, items });
+      if (bytes <= HISTORY_BUDGET_BYTES) {
+        window.acceptedPageSize = size;
+        return response;
       }
-      cursor2 = typeof pageResult.nextCursor === "string" && pageResult.nextCursor.length > 0 ? pageResult.nextCursor : void 0;
-      if (cursor2 === void 0) break;
     }
-    return turns;
-  }
-  async readThreadItems(connectionId, threadId, turnId, fallbackItems) {
-    const items = [];
-    let cursor2;
-    try {
-      for (let page = 0; page < MAX_CODEX_HISTORY_PAGES; page += 1) {
-        const result = await this.callUpstream("thread/items/list", {
-          threadId,
-          turnId,
-          limit: CODEX_HISTORY_PAGE_LIMIT,
-          sortDirection: "asc",
-          ...cursor2 === void 0 ? {} : { cursor: cursor2 }
-        });
-        const pageResult = isRecord12(result) ? result : {};
-        for (const entry of array2(pageResult.data)) {
-          if (isRecord12(entry) && entry.item !== void 0) items.push(entry.item);
-        }
-        cursor2 = typeof pageResult.nextCursor === "string" && pageResult.nextCursor.length > 0 ? pageResult.nextCursor : void 0;
-        if (cursor2 === void 0) break;
-      }
-    } catch (error) {
-      if (!isHistoryReadRecoverable(error)) throw error;
-      this.logHistoryFallback(connectionId, "items", error);
-      return fallbackItems;
-    }
-    return items;
-  }
-  logHistoryFallback(connectionId, stage, error) {
-    this.logger.warn("Codex history read fallback", {
-      connectionId: maskId(connectionId),
-      stage,
-      code: errorCode4(error)
-    });
+    throw new RpcError("RESPONSE_TOO_LARGE", "The Codex history page is too large for the secure Remote channel.");
   }
   async assertResultThreadAllowed(result) {
     const thread = extractThread(result);
     if (thread === void 0 || typeof thread.id !== "string") {
       throw new RpcError("CODEX_INVALID_RESPONSE", "Codex App Server returned an invalid thread.");
     }
-    if (!isThreadAllowedByWorkspaceAuthority(thread, await this.readWorkspaceAuthority())) {
+    if (!this.threadAllowed(thread, await this.readWorkspaceAuthority())) {
       throw new RpcError("CODEX_THREAD_NOT_ALLOWED", "The Codex thread is not available through this Remote Host.");
     }
   }
+  /** The authority check, widened when unprojected Sessions are exposed. */
+  threadAllowed(thread, authority) {
+    return this.config.showUnprojectedSessions !== false || isThreadAllowedByWorkspaceAuthority(thread, authority);
+  }
   claimTurn(threadId, connectionId, method, turnId) {
     const owner = this.turnOwners.get(threadId);
     const peerDeviceId = this.peerDeviceIds.get(connectionId) ?? connectionId;
@@ -25895,7 +26315,7 @@ var CodexRemoteDomain = class {
       }));
       const thread = result.data.find((item) => item.id === threadId);
       if (thread !== void 0) {
-        return isThreadAllowedByWorkspaceAuthority(thread, authority) ? thread : void 0;
+        return this.threadAllowed(thread, authority) ? thread : void 0;
       }
       cursor2 = typeof result.nextCursor === "string" && result.nextCursor.length > 0 ? result.nextCursor : void 0;
       if (cursor2 === void 0) break;
@@ -25906,6 +26326,14 @@ var CodexRemoteDomain = class {
     if (!isAbsolute2(path)) {
       throw new RpcError("CODEX_PATH_NOT_ALLOWED", "The CodeX working directory is not available as a Workspace.");
     }
+    if (this.config.showUnprojectedSessions !== false) {
+      try {
+        const candidate2 = await realpath(path);
+        if ((await stat4(candidate2)).isDirectory()) return candidate2;
+      } catch {
+      }
+      throw new RpcError("CODEX_PATH_NOT_ALLOWED", "The CodeX working directory is not available as a Workspace.");
+    }
     const paths = await this.listCodexWorkspacePaths();
     const lexicalCandidate = resolve(path);
     let candidate;
@@ -26006,7 +26434,7 @@ var CodexRemoteDomain = class {
     return paths;
   }
 };
-function codexBinaryCandidates(configured, hostPlatform = process.platform, userHome = homedir2(), localAppData = process.env.LOCALAPPDATA) {
+function codexBinaryCandidates(configured, hostPlatform = process.platform, userHome = homedir4(), localAppData = process.env.LOCALAPPDATA) {
   if (configured !== "codex") return [configured];
   if (hostPlatform === "win32") {
     return [.../* @__PURE__ */ new Set([
@@ -26042,12 +26470,12 @@ function codexBinaryCandidates(configured, hostPlatform = process.platform, user
   ])];
 }
 function bundledWindowsCodex(userHome) {
-  return bundledWindowsCodexAt(join7(userHome, "AppData", "Local"));
+  return bundledWindowsCodexAt(join9(userHome, "AppData", "Local"));
 }
 function bundledWindowsCodexAt(localAppData) {
-  const bin = join7(localAppData, "OpenAI", "Codex", "bin");
+  const bin = join9(localAppData, "OpenAI", "Codex", "bin");
   try {
-    const newest = readdirSync2(bin, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => join7(bin, entry.name, "codex.exe")).filter((candidate2) => existsSync3(candidate2)).map((candidate2) => ({ candidate: candidate2, modified: statSync2(candidate2).mtimeMs })).sort((left, right) => right.modified - left.modified);
+    const newest = readdirSync2(bin, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => join9(bin, entry.name, "codex.exe")).filter((candidate2) => existsSync3(candidate2)).map((candidate2) => ({ candidate: candidate2, modified: statSync2(candidate2).mtimeMs })).sort((left, right) => right.modified - left.modified);
     const candidate = newest[0]?.candidate;
     return candidate === void 0 ? [] : [candidate];
   } catch {
@@ -26120,13 +26548,30 @@ function sanitizeThreadList(result) {
     ...typeof result.backwardsCursor === "string" && result.backwardsCursor.length > 0 ? { backwardsCursor: result.backwardsCursor } : {}
   };
 }
-function filterThreadListByWorkspaceAuthority(result, authority) {
+function filterThreadListByWorkspaceAuthority(result, authority, includeUnprojected = false) {
   if (!isRecord12(result) || !Array.isArray(result.data)) {
     throw new RpcError("CODEX_INVALID_RESPONSE", "Codex App Server returned an invalid thread list.");
   }
   return {
     ...result,
-    data: result.data.map((record7) => isRecord12(record7) ? record7 : void 0).filter((thread) => thread !== void 0 && isThreadAllowedByWorkspaceAuthority(thread, authority))
+    data: result.data.map((record7) => isRecord12(record7) ? record7 : void 0).filter((thread) => thread !== void 0 && (includeUnprojected || isThreadAllowedByWorkspaceAuthority(thread, authority)))
+  };
+}
+function rebaseThreadListCwds(result, roots) {
+  if (process.platform !== "win32" || roots.length === 0) return result;
+  const ordered = [...roots].sort((left, right) => right.length - left.length);
+  return {
+    ...result,
+    data: result.data.map((thread) => {
+      const cwd = typeof thread.cwd === "string" ? thread.cwd : void 0;
+      if (cwd === void 0) return thread;
+      const root = ordered.find((candidate) => containsCodexPath(candidate, cwd));
+      if (root === void 0) return thread;
+      const normalizedRoot = normalizeCodexPathForCompare(root);
+      const normalizedCwd = normalizeCodexPathForCompare(cwd);
+      const rebased = normalizedCwd === normalizedRoot ? root : normalizedCwd.startsWith(`${normalizedRoot}/`) || normalizedCwd.startsWith(`${normalizedRoot}\\`) ? `${root}${cwd.slice(root.length)}` : cwd;
+      return rebased === cwd ? thread : { ...thread, cwd: rebased };
+    })
   };
 }
 function sanitizeProject(value) {
@@ -26283,12 +26728,6 @@ function canTryNextBinary(error) {
 function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function array2(value) {
-  return Array.isArray(value) ? value : [];
-}
-function maskId(value) {
-  return value.length <= 12 ? value : `${value.slice(0, 8)}\u2026${value.slice(-4)}`;
-}
 function isActiveWriterMessage(message) {
   return message.toLowerCase().includes("active writer");
 }
@@ -27402,12 +27841,12 @@ function isOversizedListing(value) {
 
 // src/remote-directory-browser.ts
 import { readdir as readdir3, stat as stat5 } from "node:fs/promises";
-import { homedir as homedir3, platform as platform2 } from "node:os";
+import { homedir as homedir5, platform as platform2 } from "node:os";
 import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute3, parse, resolve as resolve2 } from "node:path";
 var MAX_ENTRIES = 500;
 async function listRemoteDirectory(path, signal) {
   signal?.throwIfAborted();
-  const home = resolve2(homedir3());
+  const home = resolve2(homedir5());
   const target2 = path === void 0 || path.trim() === "" ? home : resolve2(path);
   if (!isAbsolute3(target2)) throw new Error("The remote directory path must be absolute.");
   const rows = await readdir3(target2, { withFileTypes: true });
@@ -28233,7 +28672,7 @@ function frameSessionId(frame) {
   return typeof payload.sessionId === "string" && payload.sessionId.length > 0 ? payload.sessionId : void 0;
 }
 function withTimeout(promise, ms, message) {
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const timer = setTimeout(() => {
       reject(new RpcError("TIMEOUT", message, void 0, true));
     }, ms);
@@ -28241,7 +28680,7 @@ function withTimeout(promise, ms, message) {
     promise.then(
       (value) => {
         clearTimeout(timer);
-        resolve4(value);
+        resolve5(value);
       },
       (error) => {
         clearTimeout(timer);
@@ -28271,7 +28710,8 @@ function concatChunks2(chunks, totalBytes) {
 }
 
 // src/harness-remote-bridge.ts
-import { Buffer as Buffer4 } from "node:buffer";
+import { Buffer as Buffer5 } from "node:buffer";
+import { isAbsolute as isAbsolute4, join as join10, relative as relative2, resolve as resolve3, sep } from "node:path";
 var endpointSchema = external_exports.string().min(1).max(128).regex(/^(?:\$events(?:\/result)?|[A-Za-z0-9_$.-]+\/[A-Za-z0-9_$.-]+)$/);
 var callSchema3 = external_exports.object({ endpoint: endpointSchema, payload: external_exports.unknown() }).strict();
 var streamOpenSchema3 = external_exports.object({
@@ -28320,9 +28760,8 @@ var MAX_ACTIVE_STREAMS2 = MAX_ALPHA_STREAMS_PER_CONNECTION;
 var MAX_ACTIVE_TRANSFERS2 = MAX_ACTIVE_TRANSFERS_PER_DIRECTION;
 var INLINE_TRANSFER_RESPONSE_BYTES3 = 2 * 1024 * 1024;
 var STREAM_FRAME_ENVELOPE_BYTES = 4 * 1024;
-var RESPONSE_ENVELOPE_BYTES = 8 * 1024;
-var HISTORY_PAGE_SIZES = [120, 80, 50, 30, 20, 12, 6, 3, 1];
-var MAX_HISTORY_PAGE_MESSAGES = 500;
+var RESPONSE_ENVELOPE_BYTES2 = 8 * 1024;
+var WORKSPACE_FILE_ENDPOINTS = /* @__PURE__ */ new Set(["workspaceFiles/stat", "workspaceFiles/read", "workspaceFiles/readBytes", "workspaceFiles/list"]);
 var REMOTE_HISTORY_CALL_ENDPOINTS = /* @__PURE__ */ new Set(["session/page", "session/history"]);
 var REMOTE_HISTORY_STREAM_ENDPOINTS = /* @__PURE__ */ new Set(["session/follow"]);
 var MAX_CACHED_HISTORY_PAGES = 64;
@@ -28345,6 +28784,9 @@ var HARNESS_REMOTE_ALLOWLIST = [
   "goals/edit",
   "goals/pause",
   "goals/resume",
+  "job/follow",
+  "job/kill",
+  "job/list",
   "llm/discoverModels",
   "llm/listConfigurableProviders",
   "llm/listProviders",
@@ -28403,19 +28845,22 @@ var HARNESS_REMOTE_ALLOWLIST = [
 ];
 var allowedEndpoints = new Set(HARNESS_REMOTE_ALLOWLIST);
 var HarnessRemoteBridge = class {
-  constructor(gateway, publish, logger, harnessVersion, terminal = new TerminalPolicy(() => false, "", /* @__PURE__ */ new Map()), codexWorkspace) {
+  constructor(gateway, publish, logger, harnessVersion, terminal = new TerminalPolicy(() => false, "", /* @__PURE__ */ new Map()), codexWorkspace, sessionHeaderCwd) {
     this.gateway = gateway;
     this.publish = publish;
     this.logger = logger;
     this.harnessVersion = harnessVersion;
     this.terminal = terminal;
     this.codexWorkspace = codexWorkspace;
+    this.sessionHeaderCwd = sessionHeaderCwd;
   }
   streams = /* @__PURE__ */ new Map();
   incomingTransfers = /* @__PURE__ */ new Map();
   outgoingTransfers = /* @__PURE__ */ new Map();
   /** Last page size that fit one secure message, per session, so probing is paid once. */
   historyPageSizes = /* @__PURE__ */ new Map();
+  /** Last working directory read per Session, so a file open does not re-project on every chunk. */
+  sessionWorkingDirectories = /* @__PURE__ */ new Map();
   /**
    * Answer one remote Gateway call.
    *
@@ -28456,8 +28901,12 @@ var HarnessRemoteBridge = class {
     const signal = AbortSignal.timeout(6e4);
     try {
       const nativePayload = normalizeWorkspaceRequestPayload(params.endpoint, params.payload, this.harnessVersion);
-      const nativeResult = REMOTE_HISTORY_CALL_ENDPOINTS.has(params.endpoint) ? await this.dispatchHistoryPage(params.endpoint, nativePayload, signal) : params.endpoint === "commands/execute" ? await dispatchCommandForHost(this.gateway, params.payload, signal, this.harnessVersion) : await this.gateway.dispatch(params.endpoint, nativePayload, signal);
+      const nativeResult = REMOTE_HISTORY_CALL_ENDPOINTS.has(params.endpoint) ? await this.dispatchHistoryPage(params.endpoint, nativePayload, signal) : params.endpoint === "commands/execute" ? await dispatchCommandForHost(this.gateway, params.payload, signal, this.harnessVersion) : await this.dispatchWorkspaceFile(params.endpoint, nativePayload, signal);
       const result = params.endpoint === "directoryPicker/list" && needsDirectoryFallback(nativeResult) ? await this.directoryList(params.payload, signal) : nativeResult;
+      if (params.endpoint === "workspace/create" && isInvalidWorkspacePath(result)) {
+        const recovered = await this.recoverWorkspaceCreate(params.payload, signal);
+        if (recovered !== void 0) return recovered;
+      }
       this.logger?.debug("harness remote call ok", {
         endpoint: params.endpoint,
         durationMs: Math.round(performance.now() - startedAt)
@@ -28465,6 +28914,10 @@ var HarnessRemoteBridge = class {
       return reservation === void 0 ? result : this.terminal.result(params.endpoint, params.payload, result, reservation);
     } catch (error) {
       if (reservation !== void 0) this.terminal.result(params.endpoint, params.payload, { ok: false, error: { code: "FAILED", message: "", details: {} } }, reservation);
+      if (params.endpoint === "workspace/create" && isInvalidWorkspacePath(error)) {
+        const recovered = await this.recoverWorkspaceCreate(params.payload, signal);
+        if (recovered !== void 0) return recovered;
+      }
       if (params.endpoint === "directoryPicker/list") {
         const result = await this.directoryList(params.payload, signal);
         this.logger?.debug("harness remote call ok", {
@@ -28490,6 +28943,43 @@ var HarnessRemoteBridge = class {
     const params = directoryListSchema2.parse(args);
     return { ok: true, value: await listRemoteDirectory(params.path, signal) };
   }
+  /**
+   * Resolve an existing Workspace when `workspace/create` cannot realpath a
+   * deleted directory.
+   *
+   * DSH keeps a registered Workspace open after its directory disappears, but
+   * `workspace/create` canonicalizes the path first and fails with ENOENT. The
+   * Client can still open the Workspace it sees in the Host's list; resolve that
+   * list by lexical path and return the existing row instead of failing.
+   * @param payload - workspace/create request payload.
+   * @param signal - call lifetime.
+   * @returns an existing-workspace result, or undefined when none matches.
+   */
+  async recoverWorkspaceCreate(payload, signal) {
+    const path = requestArgs(payload).path;
+    if (typeof path !== "string" || path === "") return void 0;
+    let source;
+    try {
+      source = await this.gateway.open("workspace/follow", { args: {} }, signal);
+    } catch {
+      return void 0;
+    }
+    const iterator = source[Symbol.asyncIterator]();
+    let first;
+    try {
+      first = await iterator.next();
+    } catch {
+      return void 0;
+    } finally {
+      await iterator.return?.().catch(() => void 0);
+    }
+    const frame = isRecord14(first.value) ? first.value : {};
+    const baseline = isRecord14(frame.value) ? frame.value : frame;
+    const items = Array.isArray(baseline.items) ? baseline.items : [];
+    const target2 = workspacePathIdentity(path);
+    const workspace = items.find((item) => isRecord14(item) && typeof item.path === "string" && workspacePathIdentity(item.path) === target2);
+    return workspace === void 0 ? void 0 : { ok: true, value: { workspace, created: false } };
+  }
   openTransfer(input2) {
     this.pruneTransfers();
     const params = transferOpenSchema3.parse(input2);
@@ -28583,7 +29073,7 @@ var HarnessRemoteBridge = class {
     return {
       transferId: params.transferId,
       index: params.index,
-      data: Buffer4.from(transfer.bytes.subarray(start, end)).toString("base64")
+      data: Buffer5.from(transfer.bytes.subarray(start, end)).toString("base64")
     };
   }
   closeTransfer(input2) {
@@ -28703,7 +29193,7 @@ var HarnessRemoteBridge = class {
         hasMore: value?.hasMore,
         bytes
       });
-      if (bytes <= MAX_SECURE_MESSAGE_BYTES - RESPONSE_ENVELOPE_BYTES) {
+      if (bytes <= MAX_SECURE_MESSAGE_BYTES - RESPONSE_ENVELOPE_BYTES2) {
         this.rememberHistoryPageSize(key, size);
         return wire;
       }
@@ -28722,7 +29212,7 @@ var HarnessRemoteBridge = class {
     const key = historyPageKey(payload);
     const requested = requestedMaxMessages(payload) ?? HISTORY_PAGE_SIZES[0];
     const remembered = this.historyPageSizes.get(key);
-    const start = Math.max(1, Math.min(requested, MAX_HISTORY_PAGE_MESSAGES, remembered ?? requested));
+    const start = Math.max(1, Math.min(requested, HISTORY_PAGE_SIZES[0], remembered ?? requested));
     this.logger?.debug("history window", { key: key.slice(0, 120), requested, remembered, start });
     return { key, sizes: historyPageSizes(start) };
   }
@@ -28733,6 +29223,68 @@ var HarnessRemoteBridge = class {
     }
     this.historyPageSizes.set(key, size);
   }
+  /**
+   * Dispatch a workspace-file call, re-rooting a path written against the Session's current
+   * directory onto the header root the Host resolves against.
+   *
+   * DSH names the workspace root from the Session header, so a Session that changed its working
+   * directory mid-run resolves relative links (and deliverables built from the root) against the
+   * stale header. The live `workingDirectory` projection is the correction; when the re-rooted
+   * path misses, the original path is tried so a file created before the change still opens.
+   */
+  async dispatchWorkspaceFile(endpoint, payload, signal) {
+    if (!WORKSPACE_FILE_ENDPOINTS.has(endpoint) || this.sessionHeaderCwd === void 0) {
+      return this.gateway.dispatch(endpoint, payload, signal);
+    }
+    const location = workspaceFileLocation(payload);
+    if (location === void 0) return this.gateway.dispatch(endpoint, payload, signal);
+    const headerCwd = this.sessionHeaderCwd(location.sessionId);
+    if (headerCwd === void 0) return this.gateway.dispatch(endpoint, payload, signal);
+    const liveCwd = await this.sessionWorkingDirectory(location.sessionId, signal);
+    if (liveCwd === void 0) return this.gateway.dispatch(endpoint, payload, signal);
+    const nextPath = rerootWorkspacePath(headerCwd, liveCwd, location.path);
+    if (nextPath === void 0 || nextPath === location.path) return this.gateway.dispatch(endpoint, payload, signal);
+    const rewritten = replaceWorkspaceFilePath(payload, nextPath);
+    if (rewritten === payload) return this.gateway.dispatch(endpoint, payload, signal);
+    const rerooted = await this.gateway.dispatch(endpoint, rewritten, signal);
+    if (!workspaceFileMiss(endpoint, rerooted)) {
+      this.logger?.debug("workspace file path re-rooted", {
+        endpoint,
+        headerCwd,
+        liveCwd,
+        path: location.path,
+        nextPath
+      });
+      return rerooted;
+    }
+    this.logger?.debug("workspace file path re-root missed; using the original path", {
+      endpoint,
+      path: location.path,
+      nextPath
+    });
+    return this.gateway.dispatch(endpoint, payload, signal);
+  }
+  /** Read the Session's live working directory from its projections, cached briefly. */
+  async sessionWorkingDirectory(sessionId, signal) {
+    const cached = this.sessionWorkingDirectories.get(sessionId);
+    if (cached !== void 0 && Date.now() - cached.at < 5e3) return cached.cwd;
+    let cwd;
+    try {
+      const result = await this.gateway.dispatch("session/projections", { args: { request: { sessionId } } }, signal);
+      const value = result.ok ? result.value : void 0;
+      const values = isRecord14(value) && isRecord14(value.values) ? value.values : void 0;
+      const raw = values?.workingDirectory;
+      if (typeof raw === "string" && raw.length > 0) cwd = raw;
+    } catch {
+      cwd = void 0;
+    }
+    if (this.sessionWorkingDirectories.size >= MAX_CACHED_HISTORY_PAGES && !this.sessionWorkingDirectories.has(sessionId)) {
+      const oldest = this.sessionWorkingDirectories.keys().next().value;
+      if (oldest !== void 0) this.sessionWorkingDirectories.delete(oldest);
+    }
+    this.sessionWorkingDirectories.set(sessionId, { cwd, at: Date.now() });
+    return cwd;
+  }
   closeStream(input2) {
     const params = streamCloseSchema3.parse(input2);
     const active = this.streams.get(params.streamId);
@@ -28821,11 +29373,6 @@ function windowedRequest(request, maxMessages) {
   }
   return next;
 }
-function historyPageSizes(start) {
-  const sizes = [start];
-  for (const size of HISTORY_PAGE_SIZES) if (size < start) sizes.push(size);
-  return sizes;
-}
 function historyRequestOf(payload) {
   let node = payload;
   for (let depth = 0; depth < 4; depth += 1) {
@@ -28850,6 +29397,64 @@ function requestedMaxMessages(payload) {
   const value = historyRequestOf(payload)?.maxMessages;
   return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.floor(value) : void 0;
 }
+function workspaceFileLocation(payload) {
+  if (!isRecord14(payload)) return void 0;
+  if (Array.isArray(payload.args)) {
+    if (payload.args.length >= 2 && typeof payload.args[0] === "string" && typeof payload.args[1] === "string") {
+      return { sessionId: payload.args[0], path: payload.args[1] };
+    }
+    const first = payload.args[0];
+    if (isRecord14(first)) return workspaceFileLocation(first);
+    return void 0;
+  }
+  const candidate = isRecord14(payload.args) ? payload.args : isRecord14(payload.request) ? payload.request : payload;
+  const sessionId = [candidate.workspaceFileScopeId, candidate.workspaceFileScope, candidate.sessionId].find((value) => typeof value === "string" && value.length > 0);
+  const path = candidate.path;
+  if (typeof sessionId !== "string" || typeof path !== "string" || path.length === 0) return void 0;
+  return { sessionId, path };
+}
+function replaceWorkspaceFilePath(payload, nextPath) {
+  if (!isRecord14(payload)) return payload;
+  if (Array.isArray(payload.args)) {
+    if (payload.args.length >= 2 && typeof payload.args[0] === "string" && typeof payload.args[1] === "string") {
+      const args = [...payload.args];
+      args[1] = nextPath;
+      return { ...payload, args };
+    }
+    const first = payload.args[0];
+    if (!isRecord14(first)) return payload;
+    return { ...payload, args: [{ ...first, path: nextPath }, ...payload.args.slice(1)] };
+  }
+  if (isRecord14(payload.args)) return { ...payload, args: { ...payload.args, path: nextPath } };
+  if (isRecord14(payload.request)) return { ...payload, request: { ...payload.request, path: nextPath } };
+  return { ...payload, path: nextPath };
+}
+function workspaceFileMiss(endpoint, result) {
+  if (!result.ok) return true;
+  if (endpoint !== "workspaceFiles/stat") return false;
+  const value = result.value;
+  return isRecord14(value) && value.exists === false;
+}
+function rerootWorkspacePath(headerCwd, liveCwd, target2) {
+  if (samePath(headerCwd, liveCwd)) return void 0;
+  if (isAbsolute4(target2)) {
+    const suffix = relative2(headerCwd, target2);
+    if (suffix === "" || suffix === "." || isAbsolute4(suffix) || suffix.startsWith(`..${sep}`) || suffix === "..") return void 0;
+    return join10(liveCwd, suffix);
+  }
+  const prefix = relative2(headerCwd, liveCwd);
+  if (prefix !== "" && prefix !== "." && !isAbsolute4(prefix) && !prefix.startsWith(`..${sep}`) && prefix !== "..") {
+    return join10(prefix, target2);
+  }
+  return join10(liveCwd, target2);
+}
+function samePath(left, right) {
+  const normalize = (value) => {
+    const trimmed = value.replace(/[\\/]+$/u, "");
+    return process.platform === "win32" ? trimmed.toLowerCase() : trimmed;
+  };
+  return normalize(left) === normalize(right);
+}
 function historyPageKey(payload) {
   const request = historyRequestOf(payload);
   if (request === void 0) return "default";
@@ -28862,10 +29467,10 @@ function historyPageKey(payload) {
   }
 }
 function responseBytes(result) {
-  return Buffer4.byteLength(JSON.stringify(result), "utf8");
+  return Buffer5.byteLength(JSON.stringify(result), "utf8");
 }
 function streamFrameBytes(frame) {
-  return Buffer4.byteLength(JSON.stringify(frame), "utf8");
+  return Buffer5.byteLength(JSON.stringify(frame), "utf8");
 }
 function remainingIterable(iterator) {
   return { [Symbol.asyncIterator]: () => iterator };
@@ -28925,7 +29530,7 @@ async function dispatchCommandForHost(gateway, payload, signal, harnessVersion)
   );
 }
 function decodeCanonicalBase643(value) {
-  const bytes = Buffer4.from(value, "base64");
+  const bytes = Buffer5.from(value, "base64");
   if (bytes.toString("base64") !== value) throw new RpcError("INVALID_MESSAGE", "The Harness Remote transfer chunk is invalid.");
   return bytes;
 }
@@ -28955,6 +29560,17 @@ function record6(value) {
 function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function workspacePathIdentity(path) {
+  const normalized = resolve3(path).replace(/[\\/]+$/, "");
+  return process.platform === "win32" ? normalized.toLowerCase() : normalized;
+}
+function isInvalidWorkspacePath(input2) {
+  const error = isRecord14(input2) && input2.ok === false && isRecord14(input2.error) ? input2.error : input2;
+  if (!isRecord14(error)) return false;
+  const code = typeof error.code === "string" ? error.code : "";
+  const message = typeof error.message === "string" ? error.message : "";
+  return code === "workspace/invalid-path" || message.includes("cannot create a Workspace at") && message.includes("ENOENT");
+}
 
 // src/acp.ts
 import { spawn as spawn3 } from "node:child_process";
@@ -29044,7 +29660,7 @@ var StdioAcpAdapter = class {
     const c = this.ensure();
     const id4 = this.nextId++;
     c.stdin.write(JSON.stringify({ jsonrpc: "2.0", id: id4, method, params }) + "\n");
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       let buf = "";
       const onData = async (d) => {
         buf += d;
@@ -29055,7 +29671,7 @@ var StdioAcpAdapter = class {
             const m = JSON.parse(l);
             if (m.id === id4) {
               c.stdout.off("data", onData);
-              m.error ? reject(new Error(m.error.message ?? "ACP error")) : resolve4(m.result);
+              m.error ? reject(new Error(m.error.message ?? "ACP error")) : resolve5(m.result);
             } else if (m.method && onNotification) await onNotification(m.params);
           } catch {
           }
@@ -29073,7 +29689,7 @@ import { execFileSync as execFileSync2 } from "node:child_process";
 // src/codex-workspace-bridge.ts
 import { spawn as spawn4 } from "node:child_process";
 import { realpath as realpath2, lstat, readdir as readdir4, readFile as readFile5, stat as stat6, watch } from "node:fs/promises";
-import { isAbsolute as isAbsolute4, join as join8, relative as relative2, resolve as resolve3 } from "node:path";
+import { isAbsolute as isAbsolute5, join as join11, relative as relative3, resolve as resolve4 } from "node:path";
 var MAX_READ_BYTES = 4 * 1024 * 1024;
 var MAX_INPUT_BYTES = 64 * 1024;
 var MAX_COLS = 240;
@@ -29104,7 +29720,7 @@ var AsyncQueue = class {
     const value = this.values.shift();
     if (value !== void 0) return Promise.resolve({ done: false, value });
     if (this.ended) return Promise.resolve({ done: true, value: void 0 });
-    return new Promise((resolve4) => this.waiters.push(resolve4));
+    return new Promise((resolve5) => this.waiters.push(resolve5));
   }
   [Symbol.asyncIterator]() {
     return this;
@@ -29160,7 +29776,7 @@ var CodexWorkspaceBridge = class {
         const entries = await readdir4(target2, { withFileTypes: true });
         const result = [];
         for (const entry of entries.slice(0, 500)) {
-          const item = join8(target2, entry.name);
+          const item = join11(target2, entry.name);
           const info2 = await lstat(item);
           if (info2.isSymbolicLink()) continue;
           result.push({ name: entry.name, type: info2.isDirectory() ? "directory" : info2.isFile() ? "file" : "other", ...info2.isFile() ? { size: info2.size } : {} });
@@ -29382,15 +29998,15 @@ var CodexWorkspaceBridge = class {
     }
   }
   async safePath(root, path, directory) {
-    const candidate = isAbsolute4(path) ? resolve3(path) : resolve3(root, path);
-    const rel = relative2(root, candidate);
-    if (rel.startsWith("..") || isAbsolute4(rel)) throw new RpcError("CODEX_WORKSPACE_PATH_DENIED", "The requested workspace path is outside the CodeX workspace.");
+    const candidate = isAbsolute5(path) ? resolve4(path) : resolve4(root, path);
+    const rel = relative3(root, candidate);
+    if (rel.startsWith("..") || isAbsolute5(rel)) throw new RpcError("CODEX_WORKSPACE_PATH_DENIED", "The requested workspace path is outside the CodeX workspace.");
     try {
       const info = await lstat(candidate);
       if (info.isSymbolicLink()) throw new Error();
       const canonical = await realpath2(candidate);
-      const canonicalRel = relative2(root, canonical);
-      if (canonicalRel.startsWith("..") || isAbsolute4(canonicalRel)) throw new Error();
+      const canonicalRel = relative3(root, canonical);
+      if (canonicalRel.startsWith("..") || isAbsolute5(canonicalRel)) throw new Error();
       if (directory && !info.isDirectory()) throw new Error();
       return canonical;
     } catch {
@@ -29433,14 +30049,14 @@ function pipeTerminalSpawner() {
     child.stdout.on("data", (data2) => queue.push(Buffer.from(data2).toString("utf8")));
     child.stderr.on("data", (data2) => queue.push(Buffer.from(data2).toString("utf8")));
     child.on("error", () => queue.end());
-    const completed = new Promise((resolve4) => {
+    const completed = new Promise((resolve5) => {
       child.on("error", () => {
         queue.end();
-        resolve4({ exitCode: null });
+        resolve5({ exitCode: null });
       });
       child.on("exit", (code) => {
         queue.end();
-        resolve4({ exitCode: code });
+        resolve5({ exitCode: code });
       });
     });
     return {
@@ -29531,7 +30147,7 @@ function readLimit(args) {
 
 // src/service.ts
 var HostPluginRuntime = class {
-  constructor(config, identities, apiProxy, logger, localGateway, fileViewerHost, terminalSpawner) {
+  constructor(config, identities, apiProxy, logger, localGateway, fileViewerHost, terminalSpawner, sessionSource) {
     this.config = config;
     this.identities = identities;
     this.apiProxy = apiProxy;
@@ -29539,6 +30155,7 @@ var HostPluginRuntime = class {
     this.localGateway = localGateway;
     this.fileViewerHost = fileViewerHost;
     this.terminalSpawner = terminalSpawner;
+    this.sessionSource = sessionSource;
     this.terminalEnabled = config.terminal.enabled;
     this.loopbackPorts = [...config.loopback.ports];
     this.paused = config.hostControl?.paused === true;
@@ -29563,7 +30180,8 @@ var HostPluginRuntime = class {
           () => this.terminalEnabled,
           this.codexWorkspaceState,
           this.terminalSpawner
-        )
+        ),
+        this.sessionSource === void 0 ? void 0 : (sessionId) => this.sessionSource?.()?.get?.(sessionId)?.header?.cwd
       ) : void 0;
       const fileViewer = new RemoteFileViewerBridge(
         () => this.fileViewerHost?.(),
@@ -29985,7 +30603,7 @@ function isPlainRecord(value) {
 // src/cli.ts
 import { stat as stat7 } from "node:fs/promises";
 import { hostname as hostname3 } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join12 } from "node:path";
 var QR_POLL_INTERVAL_MS = 2e3;
 var TERMINAL_QR_MARGIN = 4;
 async function runCli(args = process.argv.slice(2), dependencies = {}) {
@@ -30073,7 +30691,7 @@ async function status(args, runtime) {
     `Server: ${serverUrl}`,
     "Host control: enabled (dsh-TUI default)"
   ];
-  if (!await exists3(join9(directory, "device.json"))) {
+  if (!await exists3(join12(directory, "device.json"))) {
     lines.push("Device: not initialized", "Authorization: logged out", "Credential: unavailable");
     write(runtime.stdout, `${lines.join("\n")}
 
@@ -30117,7 +30735,7 @@ async function logout(args, runtime) {
   const serverUrl = selectedServer();
   const root = new IdentityStore({ env: runtime.env }).directory;
   const directory = serverStorageDirectory(root, serverUrl, "host");
-  if (!await exists3(join9(directory, "device.json"))) {
+  if (!await exists3(join12(directory, "device.json"))) {
     await new ServerCredentialStore(directory).clear();
     write(runtime.stdout, "This Host is already logged out.\n");
     return 0;
@@ -30148,7 +30766,7 @@ function resolveDependencies(input2) {
     stdout: input2.stdout ?? process.stdout,
     stderr: input2.stderr ?? process.stderr,
     now: input2.now ?? Date.now,
-    wait: input2.wait ?? ((milliseconds) => new Promise((resolve4) => setTimeout(resolve4, milliseconds))),
+    wait: input2.wait ?? ((milliseconds) => new Promise((resolve5) => setTimeout(resolve5, milliseconds))),
     renderQr: input2.renderQr ?? renderTerminalQr,
     createIdentityStore: input2.createIdentityStore ?? ((options) => new IdentityStore(options)),
     createHostApi: input2.createHostApi ?? ((serverUrl, store) => new HostServerApi(serverUrl, store))
@@ -30597,7 +31215,7 @@ function errorCode6(error) {
   return "CONNECTION_FAILED";
 }
 function wait(milliseconds) {
-  return new Promise((resolve4) => setTimeout(resolve4, milliseconds));
+  return new Promise((resolve5) => setTimeout(resolve5, milliseconds));
 }
 
 // src/remote-file-content-provider.ts
@@ -30782,6 +31400,7 @@ async function activate(ctx, readConfig, entryId, tuiBinding) {
   const nativeTypertGateway = ctx.get("typertGateway");
   const localTypertGateway = new TypertGatewaySwitch(nativeTypertGateway, { peer: peerFor }).local();
   const subprocess = ctx.get("subprocess", false);
+  const sessionSource = () => ctx.get("sessions", false);
   const deepseekAccount = ctx.get("deepseekAccount", false);
   const deepseekSession = deepseekAccount === void 0 ? void 0 : {
     read: async () => {
@@ -30813,7 +31432,8 @@ async function activate(ctx, readConfig, entryId, tuiBinding) {
     logger,
     localTypertGateway,
     () => ctx.get("fileViewerHost"),
-    subprocess === void 0 ? void 0 : subprocessTerminalSpawner(subprocess)
+    subprocess === void 0 ? void 0 : subprocessTerminalSpawner(subprocess),
+    sessionSource
   );
   let clientRuntime;
   const hostControl = runtime;