@codexhost/cli-darwin-x64 0.1.0-test.1

package/app/desktop-controller.mjs

@@ -0,0 +1,1297 @@
+// packages/desktop-control/src/production-controller.ts
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+
+// packages/desktop-control/src/controller-attachment-server.ts
+import { createServer } from "node:net";
+var MAX_REQUEST_BYTES = 96;
+function validPort(value) {
+  return Number.isInteger(value) && value >= 1 && value <= 65535;
+}
+function validNonce(value) {
+  return /^[0-9a-f]{32}$/.test(value);
+}
+function closeServer(server) {
+  return new Promise((resolve, reject) => {
+    server.close((error) => {
+      if (error) reject(error);
+      else resolve();
+    });
+  });
+}
+function respond(socket, value) {
+  socket.end(`${value}
+`);
+}
+async function startControllerAttachmentServer(options) {
+  if (!validPort(options.port)) throw new Error("attachment port must be a valid TCP port");
+  if (!validNonce(options.nonce)) {
+    throw new Error("attachment nonce must be 32 lowercase hexadecimal characters");
+  }
+  const sockets = /* @__PURE__ */ new Set();
+  const server = createServer((socket) => {
+    sockets.add(socket);
+    socket.once("close", () => sockets.delete(socket));
+    socket.setEncoding("utf8");
+    socket.setTimeout(5e3, () => socket.destroy());
+    let request = "";
+    let handled = false;
+    socket.on("data", (chunk) => {
+      if (handled) return;
+      request += chunk;
+      if (request.length > MAX_REQUEST_BYTES) {
+        handled = true;
+        respond(socket, "rejected");
+        return;
+      }
+      const newline = request.indexOf("\n");
+      if (newline < 0) return;
+      handled = true;
+      const line = request.slice(0, newline).replace(/\r$/, "");
+      if (line !== `ATTACH ${options.nonce}`) {
+        respond(socket, "rejected");
+        return;
+      }
+      void options.attach().then(
+        () => respond(socket, "ready"),
+        () => respond(socket, "failed")
+      );
+    });
+  });
+  await new Promise((resolve, reject) => {
+    const onError = (error) => reject(error);
+    server.once("error", onError);
+    server.listen(options.port, "127.0.0.1", () => {
+      server.off("error", onError);
+      resolve();
+    });
+  });
+  let closed = false;
+  return {
+    async close() {
+      if (closed) return;
+      closed = true;
+      for (const socket of sockets) socket.destroy();
+      await closeServer(server);
+    }
+  };
+}
+
+// packages/desktop-control/src/cdp-client.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function nonEmptyString(value, field) {
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(`CDP target '${field}' must be non-empty text`);
+  }
+  return value;
+}
+function loopbackUrl(value, protocols) {
+  const url = new URL(value);
+  if (!protocols.includes(url.protocol)) {
+    throw new Error(`CDP endpoint must use ${protocols.join(" or ")}`);
+  }
+  if (!["127.0.0.1", "localhost", "[::1]"].includes(url.hostname)) {
+    throw new Error("CDP endpoint must use a loopback host");
+  }
+  return url;
+}
+function parseTarget(value) {
+  if (!isRecord(value)) throw new Error("CDP target must be an object");
+  const target = {
+    id: nonEmptyString(value.id, "id"),
+    type: nonEmptyString(value.type, "type"),
+    title: typeof value.title === "string" ? value.title : "",
+    url: nonEmptyString(value.url, "url"),
+    webSocketDebuggerUrl: nonEmptyString(value.webSocketDebuggerUrl, "webSocketDebuggerUrl")
+  };
+  loopbackUrl(target.webSocketDebuggerUrl, ["ws:", "wss:"]);
+  return target;
+}
+function defaultFetch(url) {
+  return fetch(url);
+}
+function defaultSocketFactory(url) {
+  return new WebSocket(url);
+}
+function messageText(value) {
+  if (typeof value === "string") return value;
+  if (value instanceof ArrayBuffer) return new TextDecoder().decode(value);
+  if (ArrayBuffer.isView(value)) {
+    return new TextDecoder().decode(
+      new Uint8Array(value.buffer, value.byteOffset, value.byteLength)
+    );
+  }
+  throw new Error("CDP WebSocket returned a non-text message");
+}
+function parseResponse(value) {
+  if (!isRecord(value) || typeof value.id !== "number") return null;
+  const response = { id: value.id };
+  if ("result" in value) response.result = value.result;
+  if (isRecord(value.error)) {
+    response.error = {
+      ...typeof value.error.code === "number" ? { code: value.error.code } : {},
+      ...typeof value.error.message === "string" ? { message: value.error.message } : {}
+    };
+  }
+  return response;
+}
+async function listCdpTargets(endpoint, fetchImpl = defaultFetch) {
+  const baseUrl = loopbackUrl(endpoint, ["http:", "https:"]);
+  const targetsUrl = new URL("/json/list", baseUrl).toString();
+  const response = await fetchImpl(targetsUrl);
+  if (!response.ok) throw new Error(`CDP target discovery failed with HTTP ${response.status}`);
+  const value = await response.json();
+  if (!Array.isArray(value)) throw new Error("CDP target discovery did not return an array");
+  return value.map(parseTarget);
+}
+var CdpClient = class _CdpClient {
+  #commandTimeoutMs;
+  #socket;
+  #closed = false;
+  #nextId = 1;
+  #pending = /* @__PURE__ */ new Map();
+  #listeners = /* @__PURE__ */ new Map();
+  constructor(socket, commandTimeoutMs) {
+    this.#socket = socket;
+    this.#commandTimeoutMs = commandTimeoutMs;
+    socket.addEventListener("message", (event) => this.#onMessage(event));
+    socket.addEventListener("error", () => this.#fail(new Error("CDP WebSocket failed")));
+    socket.addEventListener("close", () => this.#fail(new Error("CDP WebSocket closed")));
+  }
+  static async connect(url, options = {}) {
+    loopbackUrl(url, ["ws:", "wss:"]);
+    const socketFactory = options.socketFactory ?? defaultSocketFactory;
+    const socket = socketFactory(url);
+    const connectTimeoutMs = options.connectTimeoutMs ?? 1e4;
+    await new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        cleanup();
+        socket.close();
+        reject(new Error("CDP WebSocket connection timed out"));
+      }, connectTimeoutMs);
+      const onOpen = () => {
+        cleanup();
+        resolve();
+      };
+      const onError = () => {
+        cleanup();
+        reject(new Error("CDP WebSocket connection failed"));
+      };
+      const cleanup = () => {
+        clearTimeout(timeout);
+        socket.removeEventListener("open", onOpen);
+        socket.removeEventListener("error", onError);
+      };
+      socket.addEventListener("open", onOpen);
+      socket.addEventListener("error", onError);
+    });
+    return new _CdpClient(socket, options.commandTimeoutMs ?? 1e4);
+  }
+  command(method, params = {}) {
+    return this.#send(method, params);
+  }
+  sessionCommand(sessionId, method, params = {}) {
+    if (sessionId.length === 0) return Promise.reject(new Error("CDP session ID is required"));
+    return this.#send(method, params, sessionId);
+  }
+  on(method, listener) {
+    const listeners = this.#listeners.get(method) ?? /* @__PURE__ */ new Set();
+    listeners.add(listener);
+    this.#listeners.set(method, listeners);
+    return () => {
+      listeners.delete(listener);
+      if (listeners.size === 0) this.#listeners.delete(method);
+    };
+  }
+  #send(method, params, sessionId) {
+    if (this.#closed) return Promise.reject(new Error("CDP client is closed"));
+    const id = this.#nextId++;
+    return new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        this.#pending.delete(id);
+        reject(new Error(`CDP command '${method}' timed out`));
+      }, this.#commandTimeoutMs);
+      this.#pending.set(id, { resolve, reject, timeout });
+      try {
+        this.#socket.send(
+          JSON.stringify({ id, method, params, ...sessionId ? { sessionId } : {} })
+        );
+      } catch (error) {
+        clearTimeout(timeout);
+        this.#pending.delete(id);
+        reject(error instanceof Error ? error : new Error(String(error)));
+      }
+    });
+  }
+  async evaluate(expression) {
+    const response = await this.command("Runtime.evaluate", {
+      expression,
+      awaitPromise: true,
+      returnByValue: true
+    });
+    if (!isRecord(response)) throw new Error("Runtime.evaluate returned an invalid result");
+    if (isRecord(response.exceptionDetails)) {
+      const text = typeof response.exceptionDetails.text === "string" ? response.exceptionDetails.text : "Renderer evaluation failed";
+      throw new Error(text);
+    }
+    if (!isRecord(response.result) || !("value" in response.result)) {
+      throw new Error("Runtime.evaluate did not return a value");
+    }
+    return response.result.value;
+  }
+  close() {
+    if (this.#closed) return;
+    this.#closed = true;
+    this.#fail(new Error("CDP client closed"));
+    this.#listeners.clear();
+    this.#socket.close();
+  }
+  #onMessage(event) {
+    try {
+      const value = JSON.parse(messageText(event.data));
+      const response = parseResponse(value);
+      if (!response) {
+        if (!isRecord(value) || typeof value.method !== "string") return;
+        const sessionId = typeof value.sessionId === "string" ? value.sessionId : void 0;
+        for (const listener of this.#listeners.get(value.method) ?? []) {
+          listener(value.params, sessionId);
+        }
+        return;
+      }
+      const pending = this.#pending.get(response.id);
+      if (!pending) return;
+      clearTimeout(pending.timeout);
+      this.#pending.delete(response.id);
+      if (response.error) {
+        const code = response.error.code === void 0 ? "unknown" : String(response.error.code);
+        pending.reject(
+          new Error(response.error.message ?? `CDP command failed with error ${code}`)
+        );
+      } else {
+        pending.resolve(response.result);
+      }
+    } catch (error) {
+      this.#fail(error instanceof Error ? error : new Error(String(error)));
+    }
+  }
+  #fail(error) {
+    for (const pending of this.#pending.values()) {
+      clearTimeout(pending.timeout);
+      pending.reject(error);
+    }
+    this.#pending.clear();
+  }
+};
+
+// packages/desktop-control/src/main-process-title-policy.ts
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function resultRecord(value, command) {
+  if (!isRecord2(value)) throw new Error(`${command} returned an invalid result`);
+  if (isRecord2(value.exceptionDetails)) {
+    const exception = value.exceptionDetails.exception;
+    const description = isRecord2(exception) ? exception.description : null;
+    const text = value.exceptionDetails.text;
+    throw new Error(
+      typeof description === "string" ? description : typeof text === "string" ? text : `${command} failed`
+    );
+  }
+  return value;
+}
+function remoteObjectId(value, label) {
+  if (!isRecord2(value) || typeof value.objectId !== "string") {
+    throw new Error(`${label} is unavailable`);
+  }
+  return value.objectId;
+}
+function properties(value, command) {
+  const result = resultRecord(value, command).result;
+  if (!Array.isArray(result)) throw new Error(`${command} returned invalid properties`);
+  return result.filter(isRecord2);
+}
+var ELECTRON_MODULE_EXPRESSION = `(() => {
+  const mainModule = process.mainModule;
+  if (mainModule != null && typeof mainModule.require === 'function') {
+    return mainModule.require('electron');
+  }
+  const { createRequire } = process.getBuiltinModule('module');
+  return createRequire(process.execPath)('electron');
+})()`;
+var CONNECT_APP_HOST_CHANNEL = "codex_desktop:connect-app-host";
+var POLICY_STATE_SYMBOL = "codexhost.main-process-title-policy.v1";
+var SERVICE_OWNER_SYMBOL = "codexhost.main-process-title-policy.owner.v1";
+var RENDERER_READY_EXPRESSION = "(() => { Object.defineProperty(window, '__codexhostMainProcessTitlePolicyV1', { configurable: true, value: { state: 'ready' } }); return 'ready'; })()";
+var INSTALL_POLICY_FUNCTION = `async function () {
+  const mainModule = process.mainModule;
+  const electron = mainModule != null && typeof mainModule.require === 'function'
+    ? mainModule.require('electron')
+    : process.getBuiltinModule('module').createRequire(process.execPath)('electron');
+  let selected = null;
+  let largestElementCount = 0;
+  for (const contents of electron.webContents.getAllWebContents()) {
+    if (contents.isDestroyed() || contents.getType() !== 'window') continue;
+    let elementCount = 0;
+    try {
+      elementCount = await contents.executeJavaScript(
+        "document.querySelectorAll('*').length",
+        true,
+      );
+    } catch {}
+    if (Number.isInteger(elementCount) && elementCount > largestElementCount) {
+      selected = contents;
+      largestElementCount = elementCount;
+    }
+  }
+  if (selected == null || largestElementCount < 50) {
+    throw new Error('Populated Renderer unavailable for title policy');
+  }
+
+  const context = this(selected);
+  if (context == null || typeof context.createAppHost !== 'function') {
+    throw new Error('WindowContext unavailable for title policy');
+  }
+  const stateSymbol = Symbol.for(${JSON.stringify(POLICY_STATE_SYMBOL)});
+  const ownerSymbol = Symbol.for(${JSON.stringify(SERVICE_OWNER_SYMBOL)});
+  globalThis[stateSymbol]?.dispose?.();
+
+  const originalCreateAppHost = context.createAppHost;
+  const sampleHost = originalCreateAppHost.call(context, selected);
+  const sampleService = sampleHost?.services?.threadMetadataGeneration;
+  const servicePrototype = sampleService == null ? null : Object.getPrototypeOf(sampleService);
+  const originalGenerateTitle = servicePrototype?.generateTitle;
+  if (
+    servicePrototype == null ||
+    !['Dhe', 'Nye'].includes(sampleService?.constructor?.name) ||
+    typeof originalGenerateTitle !== 'function' ||
+    !Function.prototype.toString.call(originalGenerateTitle).includes('Failed to generate thread title')
+  ) {
+    throw new Error('ThreadMetadataGenerationService signature mismatch');
+  }
+
+  const counters = {
+    codexTitleCalls: 0,
+    piTitleSkips: 0,
+    externalTitleSkips: 0,
+    ambiguousTitleSkips: 0,
+  };
+  const ownedWebContentsIds = new Set();
+  const ownService = (service, contents) => {
+    const existingOwner = service[ownerSymbol];
+    if (existingOwner != null && existingOwner !== contents) {
+      throw new Error('Thread metadata service ownership mismatch');
+    }
+    if (existingOwner == null) {
+      Object.defineProperty(service, ownerSymbol, { value: contents });
+    }
+    ownedWebContentsIds.add(contents.id);
+  };
+  ownService(sampleService, selected);
+  const wrappedCreateAppHost = function (contents) {
+    const host = originalCreateAppHost.call(this, contents);
+    const service = host?.services?.threadMetadataGeneration;
+    if (service != null) ownService(service, contents);
+    return host;
+  };
+  const wrappedGenerateTitle = async function (params) {
+    const owner = this[ownerSymbol];
+    if (owner == null || owner.isDestroyed()) {
+      counters.ambiguousTitleSkips += 1;
+      return null;
+    }
+    let selection = null;
+    try {
+      selection = await owner.executeJavaScript(
+        "window.__codexhostRendererBindingProbeV1?.lockedSelection() ?? null",
+        true,
+      );
+    } catch {}
+    if (selection?.phase !== 'locked') {
+      counters.ambiguousTitleSkips += 1;
+      return null;
+    }
+    if (selection.agent === 'pi') {
+      counters.piTitleSkips += 1;
+      return null;
+    }
+    if (selection.agent !== 'codex') {
+      counters.externalTitleSkips += 1;
+      return null;
+    }
+    counters.codexTitleCalls += 1;
+    return originalGenerateTitle.call(this, params);
+  };
+
+  context.createAppHost = wrappedCreateAppHost;
+  servicePrototype.generateTitle = wrappedGenerateTitle;
+  const state = {
+    counters,
+    ownedWebContentsIds,
+    dispose() {
+      if (context.createAppHost === wrappedCreateAppHost) {
+        context.createAppHost = originalCreateAppHost;
+      }
+      if (servicePrototype.generateTitle === wrappedGenerateTitle) {
+        servicePrototype.generateTitle = originalGenerateTitle;
+      }
+      if (globalThis[stateSymbol] === state) delete globalThis[stateSymbol];
+    },
+  };
+  globalThis[stateSymbol] = state;
+  return {
+    state: 'ready',
+    reason: 'ready',
+    contextClass: context.constructor.name,
+    serviceClass: sampleService.constructor.name,
+    requiresRendererReload: true,
+  };
+}`;
+async function installMainProcessTitlePolicy(inspector) {
+  const listenerResponse = resultRecord(
+    await inspector.command("Runtime.evaluate", {
+      expression: `(${ELECTRON_MODULE_EXPRESSION}).ipcMain.listeners(${JSON.stringify(
+        CONNECT_APP_HOST_CHANNEL
+      )})[0]`
+    }),
+    "Runtime.evaluate"
+  );
+  const listener = listenerResponse.result;
+  const listenerId = remoteObjectId(listener, "connect-app-host listener");
+  const listenerProperties = resultRecord(
+    await inspector.command("Runtime.getProperties", { objectId: listenerId }),
+    "Runtime.getProperties"
+  );
+  const internalProperties = listenerProperties.internalProperties;
+  if (!Array.isArray(internalProperties)) {
+    throw new Error("connect-app-host listener scopes are unavailable");
+  }
+  const scopes = internalProperties.find(
+    (property) => isRecord2(property) && property.name === "[[Scopes]]"
+  );
+  const scopesId = remoteObjectId(
+    isRecord2(scopes) ? scopes.value : null,
+    "connect-app-host listener scopes"
+  );
+  const scopeProperties = properties(
+    await inspector.command("Runtime.getProperties", {
+      objectId: scopesId,
+      ownProperties: true
+    }),
+    "Runtime.getProperties"
+  );
+  const localScope = scopeProperties.find((property) => property.name === "0");
+  const localScopeId = remoteObjectId(localScope?.value, "connect-app-host local scope");
+  const localProperties = properties(
+    await inspector.command("Runtime.getProperties", {
+      objectId: localScopeId,
+      ownProperties: true
+    }),
+    "Runtime.getProperties"
+  );
+  const getContext = localProperties.find(
+    (property) => property.name === "f" && typeof property.value?.objectId === "string"
+  );
+  const getContextId = remoteObjectId(getContext?.value, "getContextForWebContents");
+  const installPromise = resultRecord(
+    await inspector.command("Runtime.callFunctionOn", {
+      objectId: getContextId,
+      functionDeclaration: INSTALL_POLICY_FUNCTION
+    }),
+    "Runtime.callFunctionOn"
+  );
+  const promiseObjectId = remoteObjectId(
+    installPromise.result,
+    "Main-process title policy installation promise"
+  );
+  const installResponse = resultRecord(
+    await inspector.command("Runtime.awaitPromise", {
+      promiseObjectId,
+      returnByValue: true
+    }),
+    "Runtime.awaitPromise"
+  );
+  const remoteResult = installResponse.result;
+  const value = isRecord2(remoteResult) ? remoteResult.value : null;
+  if (!isRecord2(value) || value.state !== "ready" || value.reason !== "ready" || typeof value.contextClass !== "string" || typeof value.serviceClass !== "string" || value.requiresRendererReload !== true) {
+    throw new Error("Main-process title policy returned an invalid status");
+  }
+  return value;
+}
+async function markRendererTitlePolicyReady(inspector) {
+  const value = await inspector.evaluate(`(async () => {
+    const state = globalThis[Symbol.for(${JSON.stringify(POLICY_STATE_SYMBOL)})];
+    if (state == null) throw new Error('Main-process title policy is unavailable');
+    const mainModule = process.mainModule;
+    const electron = mainModule != null && typeof mainModule.require === 'function'
+      ? mainModule.require('electron')
+      : process.getBuiltinModule('module').createRequire(process.execPath)('electron');
+    let selected = null;
+    let largestElementCount = 0;
+    for (const contents of electron.webContents.getAllWebContents()) {
+      if (contents.isDestroyed() || contents.getType() !== 'window') continue;
+      let elementCount = 0;
+      try {
+        const evaluation = contents.executeJavaScript(
+          "document.querySelectorAll('*').length",
+          true,
+        );
+        const timeout = new Promise((_, reject) => {
+          setTimeout(() => reject(new Error('Renderer readiness inspection timed out')), 2_000);
+        });
+        elementCount = await Promise.race([evaluation, timeout]);
+      } catch {}
+      if (Number.isInteger(elementCount) && elementCount > largestElementCount) {
+        selected = contents;
+        largestElementCount = elementCount;
+      }
+    }
+    if (selected == null || largestElementCount < 50) {
+      throw new Error('Populated Renderer unavailable for title policy readiness');
+    }
+    if (!state.ownedWebContentsIds.has(selected.id)) {
+      throw new Error('Renderer metadata service ownership is unavailable');
+    }
+    const marker = selected.executeJavaScript(
+      ${JSON.stringify(RENDERER_READY_EXPRESSION)},
+      true,
+    );
+    const markerTimeout = new Promise((_, reject) => {
+      setTimeout(() => reject(new Error('Renderer readiness marker timed out')), 2_000);
+    });
+    await Promise.race([marker, markerTimeout]);
+    return { state: 'ready', reason: 'owned-metadata-service' };
+  })()`);
+  if (!isRecord2(value) || value.state !== "ready" || value.reason !== "owned-metadata-service") {
+    throw new Error("Renderer title policy returned an invalid readiness status");
+  }
+  return value;
+}
+async function readMainProcessTitlePolicyCounters(inspector) {
+  const value = await inspector.evaluate(`(() => {
+    const state = globalThis[Symbol.for(${JSON.stringify(POLICY_STATE_SYMBOL)})];
+    return state == null ? null : { ...state.counters };
+  })()`);
+  if (value === null) return null;
+  if (!isRecord2(value) || !Number.isInteger(value.codexTitleCalls) || !Number.isInteger(value.piTitleSkips) || !Number.isInteger(value.externalTitleSkips) || !Number.isInteger(value.ambiguousTitleSkips)) {
+    throw new Error("Main-process title policy returned invalid counters");
+  }
+  return value;
+}
+
+// packages/desktop-control/src/renderer-draft-prewarm-runtime.ts
+function installDraftPrewarmPolicyBridge(send, hostId, target) {
+  let clearInFlight = null;
+  const policy = Object.freeze({
+    state: "ready",
+    clear() {
+      if (clearInFlight === null) {
+        clearInFlight = Promise.resolve(send("clear-prewarmed-threads-for-host", { hostId })).then(() => void 0).finally(() => {
+          clearInFlight = null;
+        });
+      }
+      return clearInFlight;
+    }
+  });
+  Object.defineProperty(target, "__codexhostDraftPrewarmPolicyV1", {
+    configurable: true,
+    value: policy
+  });
+  return { state: "ready", reason: "owned-request-bridge" };
+}
+async function installDraftPrewarmPolicyInRenderer(contents, findRequestManagerExpression, installRendererPolicyFunction) {
+  if (contents === null || contents.isDestroyed() || contents.getType() !== "window") {
+    throw new Error("Owned Renderer is unavailable for draft prewarm policy");
+  }
+  let attachedHere = false;
+  try {
+    if (!contents.debugger.isAttached()) {
+      contents.debugger.attach("1.3");
+      attachedHere = true;
+    }
+    await contents.debugger.sendCommand("Runtime.enable");
+    const managerResult = await contents.debugger.sendCommand("Runtime.evaluate", {
+      expression: findRequestManagerExpression
+    });
+    const managerResultId = managerResult.result?.objectId;
+    if (typeof managerResultId !== "string") {
+      throw new Error("Renderer request manager inspection failed");
+    }
+    const managerProperties = await contents.debugger.sendCommand("Runtime.getProperties", {
+      objectId: managerResultId,
+      ownProperties: true
+    });
+    const candidateCount = managerProperties.result?.find(
+      (property) => property.name === "candidateCount"
+    )?.value?.value;
+    const hostId = managerProperties.result?.find((property) => property.name === "hostId")?.value?.value;
+    const sendRequest = managerProperties.result?.find(
+      (property) => property.name === "sendRequest"
+    )?.value;
+    if (candidateCount !== 1 || hostId !== "local" || typeof sendRequest?.objectId !== "string") {
+      throw new Error("Renderer request manager is ambiguous");
+    }
+    const functionProperties = await contents.debugger.sendCommand("Runtime.getProperties", {
+      objectId: sendRequest.objectId
+    });
+    const scopesId = functionProperties.internalProperties?.find(
+      (property) => property.name === "[[Scopes]]"
+    )?.value?.objectId;
+    if (typeof scopesId !== "string") {
+      throw new Error("Renderer request bridge scopes are unavailable");
+    }
+    const scopes = await contents.debugger.sendCommand("Runtime.getProperties", {
+      objectId: scopesId,
+      ownProperties: true
+    });
+    const bridgeCandidates = [];
+    for (const scope of scopes.result ?? []) {
+      const scopeId = scope.value?.objectId;
+      if (typeof scopeId !== "string") continue;
+      const scopeProperties = await contents.debugger.sendCommand("Runtime.getProperties", {
+        objectId: scopeId,
+        ownProperties: true
+      });
+      const bridge2 = scopeProperties.result?.find(
+        (property) => (property.name === "Rf" || property.name === "rp") && property.value?.type === "function"
+      )?.value;
+      if (typeof bridge2?.objectId === "string") {
+        bridgeCandidates.push({ objectId: bridge2.objectId });
+      }
+    }
+    const bridge = bridgeCandidates[0];
+    if (bridgeCandidates.length !== 1 || !bridge) {
+      throw new Error("Renderer request bridge is ambiguous");
+    }
+    const signature = await contents.debugger.sendCommand("Runtime.callFunctionOn", {
+      objectId: bridge.objectId,
+      functionDeclaration: "function(){return {arity:this.length,source:Function.prototype.toString.call(this)}}",
+      returnByValue: true
+    });
+    const signatureValue = signature.result?.value;
+    if (signatureValue?.arity !== 2 || typeof signatureValue.source !== "string" || !signatureValue.source.includes(".sendRequest")) {
+      throw new Error("Renderer request bridge signature mismatch");
+    }
+    const installed = await contents.debugger.sendCommand("Runtime.callFunctionOn", {
+      objectId: bridge.objectId,
+      functionDeclaration: installRendererPolicyFunction,
+      arguments: [{ value: hostId }],
+      awaitPromise: true,
+      returnByValue: true
+    });
+    return installed.result?.value;
+  } finally {
+    if (attachedHere && contents.debugger.isAttached()) contents.debugger.detach();
+  }
+}
+
+// packages/desktop-control/src/renderer-draft-prewarm-policy.ts
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var FIND_REQUEST_MANAGER_EXPRESSION = `(() => {
+  const visibleEditors = [...document.querySelectorAll(
+    '[data-codex-composer], [contenteditable="true"][role="textbox"]',
+  )].filter((editor) => {
+    const bounds = editor.getBoundingClientRect();
+    return bounds.width > 0 && bounds.height > 0;
+  });
+  if (visibleEditors.length !== 1) {
+    return { candidateCount: 0, hostId: null, sendRequest: null };
+  }
+  let element = visibleEditors[0];
+  let fiber = null;
+  while (element != null && fiber == null) {
+    const key = Object.getOwnPropertyNames(element).find((name) =>
+      name.startsWith('__reactFiber$'),
+    );
+    if (key != null) fiber = element[key];
+    element = element.parentElement;
+  }
+  const managers = new Set();
+  for (let depth = 0; fiber != null && depth < 200; depth += 1, fiber = fiber.return) {
+    let hook = fiber.memoizedState;
+    for (let index = 0; hook != null && index < 120; index += 1, hook = hook.next) {
+      const value = hook.memoizedState;
+      if (
+        value != null &&
+        typeof value === 'object' &&
+        value.requestClient != null &&
+        typeof value.requestClient.prewarmThreadStart === 'function' &&
+        typeof value.sendRequest === 'function' &&
+        Function.prototype.toString.call(value.sendRequest).includes(
+          'send-cli-request-for-host',
+        )
+      ) {
+        managers.add(value);
+      }
+    }
+  }
+  const manager = managers.size === 1 ? managers.values().next().value : null;
+  return {
+    candidateCount: managers.size,
+    hostId: manager?.getHostId?.() ?? null,
+    sendRequest: manager?.sendRequest ?? null,
+  };
+})()`;
+var INSTALL_RENDERER_POLICY_FUNCTION = `function(hostId) {
+  return (${installDraftPrewarmPolicyBridge.toString()})(this, hostId, window);
+}`;
+function mainProcessInstaller(rendererWebContentsId) {
+  return `async function () {
+    const mainModule = process.mainModule;
+    const electron = mainModule != null && typeof mainModule.require === 'function'
+      ? mainModule.require('electron')
+      : process.getBuiltinModule('module').createRequire(process.execPath)('electron');
+    const contents = electron.webContents.fromId(${rendererWebContentsId});
+    return (${installDraftPrewarmPolicyInRenderer.toString()})(
+      contents,
+      ${JSON.stringify(FIND_REQUEST_MANAGER_EXPRESSION)},
+      ${JSON.stringify(INSTALL_RENDERER_POLICY_FUNCTION)}
+    );
+  }`;
+}
+async function installRendererDraftPrewarmPolicy(inspector, rendererWebContentsId) {
+  if (!Number.isInteger(rendererWebContentsId) || rendererWebContentsId <= 0) {
+    throw new Error("Renderer webContents ID must be a positive integer");
+  }
+  const installer = mainProcessInstaller(rendererWebContentsId);
+  const value = await inspector.evaluate(`(${installer})()`);
+  if (!isRecord3(value) || value.state !== "ready" || value.reason !== "owned-request-bridge") {
+    throw new Error("Renderer draft prewarm policy returned an invalid status");
+  }
+  return value;
+}
+
+// packages/desktop-control/src/renderer-control-session.ts
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function safeTargetUrl(value) {
+  if (typeof value !== "string" || value.length === 0) return "unknown";
+  try {
+    const url = new URL(value);
+    return url.protocol === "app:" ? `${url.protocol}//${url.host}${url.pathname}` : url.protocol;
+  } catch {
+    return "unknown";
+  }
+}
+function sleep(milliseconds) {
+  return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+function sameAgents(actual, expected) {
+  return actual.length === expected.length && actual.every((agent, index) => agent === expected[index]);
+}
+var RendererAdapterReadinessError = class extends Error {
+  constructor(state, reason) {
+    super(`Production Renderer Adapter is ${state}: ${reason}`);
+    this.state = state;
+    this.reason = reason;
+    this.name = "RendererAdapterReadinessError";
+  }
+  state;
+  reason;
+};
+function validateBindingStatus(value, expectedAgents) {
+  if (!isRecord4(value) || value.version !== 2 || !Array.isArray(value.enabledAgents) || value.enabledAgents.some((agent) => typeof agent !== "string") || !sameAgents(value.enabledAgents, expectedAgents) || !isRecord4(value.adapter)) {
+    throw new Error("Production Renderer binding returned an invalid status");
+  }
+  if (value.adapter.state !== "ready" || typeof value.adapter.reason !== "string") {
+    const state = typeof value.adapter.state === "string" ? value.adapter.state : "invalid";
+    const reason = typeof value.adapter.reason === "string" ? value.adapter.reason : "unknown";
+    throw new RendererAdapterReadinessError(state, reason);
+  }
+  return value;
+}
+function selectRendererWebContents(contents) {
+  const candidates = contents.filter(
+    (item) => item.type === "window" && item.surface === "primary" && item.runtime.available && item.runtime.elementCount !== null
+  ).toSorted(
+    (left, right) => (right.runtime.elementCount ?? 0) - (left.runtime.elementCount ?? 0)
+  );
+  const selected = candidates[0];
+  return selected && (selected.runtime.elementCount ?? 0) >= 50 ? selected : null;
+}
+async function waitForRendererTitlePolicyReady(markReadiness, options = {}) {
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const pollIntervalMs = options.pollIntervalMs ?? 250;
+  const now = options.now ?? Date.now;
+  const wait = options.sleep ?? sleep;
+  const deadline = now() + timeoutMs;
+  let lastError;
+  while (now() < deadline) {
+    try {
+      return await markReadiness();
+    } catch (error) {
+      lastError = error;
+    }
+    await wait(pollIntervalMs);
+  }
+  const detail = lastError instanceof Error ? `: ${lastError.message}` : "";
+  throw new Error(`Renderer title policy ownership did not become ready${detail}`);
+}
+async function waitForInspectorTarget(endpoint, options = {}) {
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const pollIntervalMs = options.pollIntervalMs ?? 250;
+  const deadline = Date.now() + timeoutMs;
+  let lastError;
+  while (Date.now() < deadline) {
+    try {
+      const targets = await listCdpTargets(endpoint, options.fetchImpl);
+      const inspector = targets.find((target) => target.type === "node");
+      if (inspector) return inspector;
+      lastError = new Error("Inspector has no Node target");
+    } catch (error) {
+      lastError = error;
+    }
+    await sleep(pollIntervalMs);
+  }
+  const detail = lastError instanceof Error ? `: ${lastError.message}` : "";
+  throw new Error(`Electron main-process Inspector did not become ready${detail}`);
+}
+var electronModuleExpression = `(() => {
+  const mainModule = process.mainModule;
+  if (mainModule != null && typeof mainModule.require === 'function') {
+    return mainModule.require('electron');
+  }
+  const { createRequire } = process.getBuiltinModule('module');
+  return createRequire(process.execPath)('electron');
+})()`;
+var webContentsRuntimeExpression = `(() => ({
+  elementCount: document.querySelectorAll('*').length,
+  editorCandidates: document.querySelectorAll('textarea, [contenteditable="true"], [role="textbox"]').length,
+  sendButtonCandidates: [...document.querySelectorAll('button')].filter((button) => button.type === 'submit').length
+}))()`;
+async function inspectElectronWebContents(inspector) {
+  const value = await inspector.evaluate(`(async () => {
+    const { webContents } = ${electronModuleExpression};
+    const result = [];
+    for (const contents of webContents.getAllWebContents()) {
+      let runtime = { available: false, elementCount: null, editorCandidates: null, sendButtonCandidates: null };
+      try {
+        const evaluation = contents.executeJavaScript(${JSON.stringify(webContentsRuntimeExpression)}, true);
+        const timeout = new Promise((_, reject) => {
+          setTimeout(() => reject(new Error('Renderer inspection timed out')), 2_000);
+        });
+        runtime = { available: true, ...(await Promise.race([evaluation, timeout])) };
+      } catch {}
+      result.push({
+        id: contents.id,
+        type: contents.getType(),
+        surface: contents.getURL().includes('avatar-overlay') ? 'overlay' : 'primary',
+        url: contents.getURL(),
+        runtime,
+      });
+    }
+    return result;
+  })()`);
+  if (!Array.isArray(value)) throw new Error("Electron webContents inspection returned an array");
+  return value.map((item) => {
+    if (!isRecord4(item) || !Number.isInteger(item.id) || typeof item.type !== "string" || !["primary", "overlay"].includes(String(item.surface)) || !isRecord4(item.runtime)) {
+      throw new Error("Electron webContents inspection returned an invalid item");
+    }
+    return {
+      id: item.id,
+      type: item.type,
+      surface: item.surface,
+      url: safeTargetUrl(item.url),
+      runtime: {
+        available: item.runtime.available === true,
+        elementCount: Number.isInteger(item.runtime.elementCount) ? item.runtime.elementCount : null,
+        editorCandidates: Number.isInteger(item.runtime.editorCandidates) ? item.runtime.editorCandidates : null,
+        sendButtonCandidates: Number.isInteger(item.runtime.sendButtonCandidates) ? item.runtime.sendButtonCandidates : null
+      }
+    };
+  });
+}
+async function activateElectronDesktop(inspector) {
+  const value = await inspector.evaluate(`(() => {
+    const { BrowserWindow } = ${electronModuleExpression};
+    const windows = BrowserWindow.getAllWindows().filter((window) => !window.isDestroyed());
+    for (const window of windows) {
+      if (window.isMinimized()) window.restore();
+      window.show();
+      window.focus();
+    }
+    return windows.length;
+  })()`);
+  if (!Number.isInteger(value) || value < 1) {
+    throw new Error("Electron Desktop activation found no live window");
+  }
+  return value;
+}
+async function executeInWebContents(inspector, rendererWebContentsId, source) {
+  return inspector.evaluate(`(async () => {
+    const { webContents } = ${electronModuleExpression};
+    const contents = webContents.fromId(${rendererWebContentsId});
+    if (contents == null || contents.isDestroyed()) throw new Error('Renderer webContents is unavailable');
+    const result = await contents.executeJavaScript(${JSON.stringify(source)}, true);
+    return result === undefined ? null : result;
+  })()`);
+}
+async function reloadRenderer(inspector, rendererWebContentsId) {
+  await executeInWebContents(inspector, rendererWebContentsId, "location.reload(); null");
+}
+var defaultOperations = {
+  inspect: inspectElectronWebContents,
+  installTitlePolicy: installMainProcessTitlePolicy,
+  markTitlePolicyReady: markRendererTitlePolicyReady,
+  installDraftPrewarmPolicy: installRendererDraftPrewarmPolicy,
+  reload: reloadRenderer,
+  execute: executeInWebContents,
+  readBinding: (inspector, rendererWebContentsId) => executeInWebContents(
+    inspector,
+    rendererWebContentsId,
+    "window.__codexhostRendererBindingProbeV1?.status() ?? null"
+  ),
+  readTitlePolicyCounters: readMainProcessTitlePolicyCounters
+};
+async function waitForRenderer(inspector, operations, timeoutMs, pollIntervalMs) {
+  const deadline = Date.now() + timeoutMs;
+  let inventory = [];
+  while (Date.now() < deadline) {
+    inventory = await operations.inspect(inspector);
+    const renderer = selectRendererWebContents(inventory);
+    if (renderer) return { inventory, renderer };
+    await sleep(pollIntervalMs);
+  }
+  throw new Error(
+    `Inspector did not find a populated Electron Renderer (${inventory.length} seen)`
+  );
+}
+async function waitForBinding(inspector, operations, rendererWebContentsId, enabledAgents, timeoutMs, pollIntervalMs) {
+  const deadline = Date.now() + timeoutMs;
+  let lastError;
+  while (Date.now() < deadline) {
+    try {
+      const value = await operations.readBinding(inspector, rendererWebContentsId);
+      if (value !== null) return validateBindingStatus(value, enabledAgents);
+    } catch (error) {
+      lastError = error;
+      if (error instanceof RendererAdapterReadinessError && error.state !== "installing") {
+        throw error;
+      }
+    }
+    await sleep(pollIntervalMs);
+  }
+  const detail = lastError instanceof Error ? `: ${lastError.message}` : "";
+  throw new Error(`Production Renderer binding did not become ready${detail}`);
+}
+var InstalledRendererControlSession = class {
+  constructor(inspector, rendererSource, enabledAgents, timeoutMs, pollIntervalMs, operations, snapshot) {
+    this.inspector = inspector;
+    this.rendererSource = rendererSource;
+    this.enabledAgents = enabledAgents;
+    this.timeoutMs = timeoutMs;
+    this.pollIntervalMs = pollIntervalMs;
+    this.operations = operations;
+    this.#snapshot = snapshot;
+  }
+  inspector;
+  rendererSource;
+  enabledAgents;
+  timeoutMs;
+  pollIntervalMs;
+  operations;
+  #closed = false;
+  #snapshot;
+  get snapshot() {
+    return this.#snapshot;
+  }
+  async ensureInstalled() {
+    if (this.#closed) throw new Error("Renderer Control Session is closed");
+    const selected = await waitForRenderer(
+      this.inspector,
+      this.operations,
+      this.timeoutMs,
+      this.pollIntervalMs
+    );
+    const existing = await this.operations.readBinding(this.inspector, selected.renderer.id).catch(() => null);
+    if (existing !== null) {
+      const binding2 = validateBindingStatus(existing, this.enabledAgents);
+      this.#snapshot = { ...this.#snapshot, ...selected, binding: binding2 };
+      return this.#snapshot;
+    }
+    const titlePolicyReadiness = await waitForRendererTitlePolicyReady(
+      () => this.operations.markTitlePolicyReady(this.inspector),
+      { timeoutMs: this.timeoutMs, pollIntervalMs: this.pollIntervalMs }
+    );
+    const draftPrewarmPolicy = await this.operations.installDraftPrewarmPolicy(
+      this.inspector,
+      selected.renderer.id
+    );
+    await this.operations.execute(this.inspector, selected.renderer.id, this.rendererSource);
+    const binding = await waitForBinding(
+      this.inspector,
+      this.operations,
+      selected.renderer.id,
+      this.enabledAgents,
+      this.timeoutMs,
+      this.pollIntervalMs
+    );
+    this.#snapshot = {
+      ...this.#snapshot,
+      ...selected,
+      titlePolicyReadiness,
+      draftPrewarmPolicy,
+      binding
+    };
+    return this.#snapshot;
+  }
+  activateDesktop() {
+    if (this.#closed) return Promise.reject(new Error("Renderer Control Session is closed"));
+    return activateElectronDesktop(this.inspector);
+  }
+  executeRenderer(expression) {
+    if (this.#closed) return Promise.reject(new Error("Renderer Control Session is closed"));
+    return this.operations.execute(
+      this.inspector,
+      this.#snapshot.renderer.id,
+      expression
+    );
+  }
+  readTitlePolicyCounters() {
+    if (this.#closed) return Promise.reject(new Error("Renderer Control Session is closed"));
+    return this.operations.readTitlePolicyCounters(this.inspector);
+  }
+  close() {
+    if (this.#closed) return;
+    this.#closed = true;
+    this.inspector.close();
+  }
+};
+async function createRendererControlSession(options) {
+  const enabledAgents = options.enabledAgents ?? ["codex", "pi"];
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const pollIntervalMs = options.pollIntervalMs ?? 250;
+  const operations = options.operations ?? defaultOperations;
+  const initial = await waitForRenderer(options.inspector, operations, timeoutMs, pollIntervalMs);
+  const titlePolicy = await operations.installTitlePolicy(options.inspector);
+  await operations.reload(options.inspector, initial.renderer.id);
+  const selected = await waitForRenderer(options.inspector, operations, timeoutMs, pollIntervalMs);
+  const titlePolicyReadiness = await waitForRendererTitlePolicyReady(
+    () => operations.markTitlePolicyReady(options.inspector),
+    { timeoutMs, pollIntervalMs }
+  );
+  const draftPrewarmPolicy = await operations.installDraftPrewarmPolicy(
+    options.inspector,
+    selected.renderer.id
+  );
+  await operations.execute(options.inspector, selected.renderer.id, options.rendererSource);
+  const binding = await waitForBinding(
+    options.inspector,
+    operations,
+    selected.renderer.id,
+    enabledAgents,
+    timeoutMs,
+    pollIntervalMs
+  );
+  return new InstalledRendererControlSession(
+    options.inspector,
+    options.rendererSource,
+    enabledAgents,
+    timeoutMs,
+    pollIntervalMs,
+    operations,
+    {
+      ...selected,
+      titlePolicy,
+      titlePolicyReadiness,
+      draftPrewarmPolicy,
+      binding
+    }
+  );
+}
+async function installRendererControlSession(options) {
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const pollIntervalMs = options.pollIntervalMs ?? 250;
+  const target = await waitForInspectorTarget(options.inspectorEndpoint, {
+    timeoutMs,
+    pollIntervalMs
+  });
+  const inspector = await CdpClient.connect(target.webSocketDebuggerUrl);
+  try {
+    await inspector.command("Runtime.enable");
+    return await createRendererControlSession({
+      ...options,
+      inspector,
+      timeoutMs,
+      pollIntervalMs
+    });
+  } catch (error) {
+    inspector.close();
+    throw error;
+  }
+}
+
+// packages/desktop-control/src/production-controller.ts
+var PRODUCTION_INSTALL_TIMEOUT_MS = 9e4;
+var TRANSIENT_INSTALL_ATTEMPTS = 3;
+var TRANSIENT_INSTALL_RETRY_MS = 250;
+var defaultDependencies = {
+  readRenderer: (filePath) => readFile(filePath, "utf8"),
+  install: installRendererControlSession,
+  startAttachmentServer: startControllerAttachmentServer,
+  ready: () => {
+    process.stdout.write("ready\n");
+  },
+  sleep: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),
+  monitorIntervalMs: 500
+};
+function inspectorEndpoint(value) {
+  const url = new URL(value);
+  if (url.protocol !== "http:" || !["127.0.0.1", "localhost", "[::1]"].includes(url.hostname) || !url.port || url.username || url.password || url.pathname !== "/" && url.pathname !== "" || url.search || url.hash) {
+    throw new Error("--inspector-endpoint must be a loopback HTTP origin with an explicit port");
+  }
+  return url.origin;
+}
+function parseDesktopControllerArguments(arguments_) {
+  let endpoint;
+  let rendererPath;
+  let defaultAgent;
+  let attachmentPort;
+  let attachmentNonce;
+  for (let index = 0; index < arguments_.length; index += 1) {
+    const argument = arguments_[index];
+    const value = arguments_[index + 1];
+    if (argument === "--inspector-endpoint") {
+      if (endpoint !== void 0) throw new Error("--inspector-endpoint may only be provided once");
+      if (!value) throw new Error("--inspector-endpoint requires a value");
+      endpoint = inspectorEndpoint(value);
+      index += 1;
+      continue;
+    }
+    if (argument === "--renderer") {
+      if (rendererPath !== void 0) throw new Error("--renderer may only be provided once");
+      if (!value) throw new Error("--renderer requires a value");
+      if (!path.isAbsolute(value)) throw new Error("--renderer must be an absolute path");
+      rendererPath = path.normalize(value);
+      index += 1;
+      continue;
+    }
+    if (argument === "--default-agent") {
+      if (defaultAgent !== void 0) throw new Error("--default-agent may only be provided once");
+      if (value !== "codex" && value !== "pi") {
+        throw new Error("--default-agent must be 'codex' or 'pi'");
+      }
+      defaultAgent = value;
+      index += 1;
+      continue;
+    }
+    if (argument === "--attachment-port") {
+      if (attachmentPort !== void 0) {
+        throw new Error("--attachment-port may only be provided once");
+      }
+      const port = Number(value);
+      if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error("--attachment-port must be a valid TCP port");
+      }
+      attachmentPort = port;
+      index += 1;
+      continue;
+    }
+    if (argument === "--attachment-nonce") {
+      if (attachmentNonce !== void 0) {
+        throw new Error("--attachment-nonce may only be provided once");
+      }
+      if (value === void 0 || !/^[0-9a-f]{32}$/.test(value)) {
+        throw new Error("--attachment-nonce must be 32 lowercase hexadecimal characters");
+      }
+      attachmentNonce = value;
+      index += 1;
+      continue;
+    }
+    throw new Error(`unknown Desktop Controller option: ${argument}`);
+  }
+  if (endpoint === void 0) throw new Error("--inspector-endpoint is required");
+  if (rendererPath === void 0) throw new Error("--renderer is required");
+  if (defaultAgent === void 0) throw new Error("--default-agent is required");
+  if (attachmentPort === void 0) throw new Error("--attachment-port is required");
+  if (attachmentNonce === void 0) throw new Error("--attachment-nonce is required");
+  return {
+    inspectorEndpoint: endpoint,
+    rendererPath,
+    defaultAgent,
+    attachmentPort,
+    attachmentNonce
+  };
+}
+function isTransientElectronInstallError(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return message.includes("Uncaught (in promise)") || message.includes("Execution context was destroyed") || message.includes("Promise was collected");
+}
+async function installProductionSession(options, dependencies) {
+  for (let attempt = 1; attempt <= TRANSIENT_INSTALL_ATTEMPTS; attempt += 1) {
+    try {
+      return await dependencies.install(options);
+    } catch (error) {
+      if (attempt === TRANSIENT_INSTALL_ATTEMPTS || !isTransientElectronInstallError(error)) {
+        throw error;
+      }
+      await dependencies.sleep(TRANSIENT_INSTALL_RETRY_MS);
+    }
+  }
+  throw new Error("Desktop Controller exhausted Renderer installation attempts");
+}
+async function runDesktopController(options, signal, dependencies = defaultDependencies) {
+  const rendererSource = await dependencies.readRenderer(options.rendererPath);
+  if (rendererSource.trim().length === 0) throw new Error("production Renderer Bundle is empty");
+  const configuration = `Object.defineProperty(window, "__codexhostProductionConfigV1", { configurable: true, value: { defaultAgent: ${JSON.stringify(options.defaultAgent)} } });`;
+  const session = await installProductionSession(
+    {
+      inspectorEndpoint: options.inspectorEndpoint,
+      rendererSource: `${configuration}
+${rendererSource}`,
+      enabledAgents: ["codex", "pi", "claude-code"],
+      timeoutMs: PRODUCTION_INSTALL_TIMEOUT_MS
+    },
+    dependencies
+  );
+  let operation = Promise.resolve(void 0);
+  const useSession = (callback) => {
+    const next = operation.then(callback, callback);
+    operation = next.then(
+      () => void 0,
+      () => void 0
+    );
+    return next;
+  };
+  let attachmentServer;
+  try {
+    attachmentServer = await dependencies.startAttachmentServer({
+      port: options.attachmentPort,
+      nonce: options.attachmentNonce,
+      attach: () => useSession(async () => {
+        await session.ensureInstalled();
+        await session.activateDesktop();
+      })
+    });
+    dependencies.ready();
+    while (!signal.aborted) {
+      await dependencies.sleep(dependencies.monitorIntervalMs);
+      if (!signal.aborted) await useSession(() => session.ensureInstalled());
+    }
+  } finally {
+    await attachmentServer?.close();
+    await operation;
+    session.close();
+  }
+}
+
+// packages/desktop-control/src/release-main.ts
+var abort = new AbortController();
+var stop = () => abort.abort();
+process.once("SIGINT", stop);
+process.once("SIGTERM", stop);
+try {
+  await runDesktopController(parseDesktopControllerArguments(process.argv.slice(2)), abort.signal);
+} catch (error) {
+  console.error(
+    `codexhost Desktop Controller: ${error instanceof Error ? error.message : String(error)}`
+  );
+  process.exitCode = 1;
+} finally {
+  process.removeListener("SIGINT", stop);
+  process.removeListener("SIGTERM", stop);
+}