@codexhost/cli-darwin-x64 0.10.0 → 0.10.1

package/app/host-runtime.mjs

@@ -4283,7 +4283,7 @@ async function runDelegationCli(input) {
 
 // packages/host-runtime/src/run-host-runtime.ts
 import { randomBytes as randomBytes2 } from "node:crypto";
-import path23 from "node:path";
+import path24 from "node:path";
 import { homedir as homedir2 } from "node:os";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
@@ -5978,10 +5978,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path28) {
-  if (!path28)
+function getElementAtPath(obj, path29) {
+  if (!path29)
     return obj;
-  return path28.reduce((acc, key) => acc?.[key], obj);
+  return path29.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -6390,11 +6390,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path28, issues) {
+function prefixIssues(path29, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path28);
+    iss.path.unshift(path29);
     return iss;
   });
 }
@@ -6541,16 +6541,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path28 = []) => {
+  const processError = (error52, path29 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path28, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path29, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else {
-        const fullpath = [...path28, ...issue2.path];
+        const fullpath = [...path29, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -6577,17 +6577,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path28 = []) => {
+  const processError = (error52, path29 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path28, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path29, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else {
-        const fullpath = [...path28, ...issue2.path];
+        const fullpath = [...path29, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -6619,8 +6619,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path28 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path28) {
+  const path29 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path29) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -19312,13 +19312,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path28 = ref.slice(1).split("/").filter(Boolean);
-  if (path28.length === 0) {
+  const path29 = ref.slice(1).split("/").filter(Boolean);
+  if (path29.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path28[0] === defsKey) {
-    const key = path28[1];
+  if (path29[0] === defsKey) {
+    const key = path29[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -22814,16 +22814,16 @@ var Diff = class {
       }
     }
   }
-  addToPath(path28, added, removed, oldPosInc, options2) {
-    const last = path28.lastComponent;
+  addToPath(path29, added, removed, oldPosInc, options2) {
+    const last = path29.lastComponent;
     if (last && !options2.oneChangePerToken && last.added === added && last.removed === removed) {
       return {
-        oldPos: path28.oldPos + oldPosInc,
+        oldPos: path29.oldPos + oldPosInc,
         lastComponent: { count: last.count + 1, added, removed, previousComponent: last.previousComponent }
       };
     } else {
       return {
-        oldPos: path28.oldPos + oldPosInc,
+        oldPos: path29.oldPos + oldPosInc,
         lastComponent: { count: 1, added, removed, previousComponent: last }
       };
     }
@@ -23251,6 +23251,9 @@ function splitLines(text) {
   return result;
 }
 
+// packages/protocol-core/dist/codex-ui-projector.js
+import path9 from "node:path";
+
 // packages/protocol-core/dist/file-change-summary.js
 import path8 from "node:path";
 function filePathKey(file2, cwd) {
@@ -23424,6 +23427,14 @@ function nestedString(value2, keys, preserveText = false) {
   }
   return void 0;
 }
+function toolWorkingDirectory(args, defaultCwd) {
+  const workdir = nestedString(args, ["workdir"]);
+  if (workdir === void 0)
+    return defaultCwd;
+  const windows = /^(?:[a-z]:[/\\]|\\\\)/iu;
+  const paths = windows.test(defaultCwd) || windows.test(workdir) ? path9.win32 : path9.posix;
+  return paths.resolve(defaultCwd, workdir);
+}
 function toolOutputText(item) {
   if (!item.output)
     return null;
@@ -23433,7 +23444,7 @@ function toolOutputText(item) {
 function toolCommandLine(toolName, args) {
   const lower = toolName.toLowerCase().replaceAll(/[_-]/g, "");
   const command = nestedString(args, ["command", "cmd", "script", "commandLine", "command_line"]);
-  if (command && ["bash", "exec", "terminal", "run", "shell", "powershell", "command"].includes(lower)) {
+  if (command && ["bash", "exec", "terminal", "run", "shell", "powershell", "pwsh", "command"].includes(lower)) {
     return command;
   }
   const filePath = nestedString(args, [
@@ -23524,8 +23535,8 @@ function projectFileChangeKind(kind) {
   return { type: kind };
 }
 function projectFileChanges(changes) {
-  return changes.map(({ path: path28, kind, unifiedDiff }) => ({
-    path: path28,
+  return changes.map(({ path: path29, kind, unifiedDiff }) => ({
+    path: path29,
     kind: projectFileChangeKind(kind),
     diff: unifiedDiff
   }));
@@ -23690,13 +23701,15 @@ function projectItem(item, outcome, defaultCwd, includeCommandOutput = true, sen
         phase: item.phase ?? null,
         memoryCitation: null
       };
-    case "reasoning":
+    case "reasoning": {
+      const text = reasoningDisplayText(item.text);
       return {
         id: reasoningPreviewItemId(item.itemId),
         type: "reasoning",
-        summary: item.text.length > 0 ? [item.text] : [],
+        summary: text ? [text] : [],
         content: []
       };
+    }
     case "contextCompaction":
       return { id: item.itemId, type: "contextCompaction" };
     case "commandExecution":
@@ -23720,13 +23733,13 @@ function projectItem(item, outcome, defaultCwd, includeCommandOutput = true, sen
           id: item.itemId,
           type: "commandExecution",
           command,
-          cwd: defaultCwd,
+          cwd: toolWorkingDirectory(item.arguments, defaultCwd),
           processId: null,
           source: "agent",
           status: itemStatus(outcome),
           commandActions: [],
           aggregatedOutput: includeCommandOutput ? toolOutputText(item) : null,
-          exitCode: outcome ? outcome.status === "succeeded" ? 0 : 1 : null,
+          exitCode: null,
           durationMs: item.durationMs ?? null
         };
       }
@@ -23774,6 +23787,9 @@ function projectItem(item, outcome, defaultCwd, includeCommandOutput = true, sen
 function reasoningPreviewItemId(itemId) {
   return `${itemId}-summary`;
 }
+function reasoningDisplayText(text) {
+  return text.replace(/[\r\n]+$/u, "");
+}
 function projectReasoningTranscriptItem(item, outcome, defaultCwd, durationMs = null) {
   return {
     id: item.itemId,
@@ -23784,7 +23800,7 @@ function projectReasoningTranscriptItem(item, outcome, defaultCwd, durationMs =
     source: "agent",
     status: itemStatus(outcome),
     commandActions: [],
-    aggregatedOutput: item.text.length > 0 ? item.text : null,
+    aggregatedOutput: reasoningDisplayText(item.text) || null,
     exitCode: outcome ? 0 : null,
     durationMs
   };
@@ -23841,6 +23857,8 @@ function projectHistoricalTurn(input) {
           if (isFileMutatingTool(item.toolName))
             return [];
         }
+        if (item.type === "reasoning" && !reasoningDisplayText(item.text))
+          return [];
         return item.type === "reasoning" ? [
           projectItem(item, outcome, cwd, true, input.threadId ?? ""),
           projectReasoningTranscriptItem(item, outcome, cwd)
@@ -24030,7 +24048,7 @@ var CodexTurnProjector = class {
       startedAtMs
     };
     this.#items.set(event.item.itemId, projected);
-    if ((event.item.type === "agentMessage" || event.item.type === "reasoning") && event.item.text.length === 0) {
+    if ((event.item.type === "agentMessage" || event.item.type === "reasoning") && (event.item.type === "reasoning" ? reasoningDisplayText(event.item.text).length === 0 : event.item.text.length === 0)) {
       return { messages: [] };
     }
     if (event.item.type === "toolExecution") {
@@ -24050,7 +24068,8 @@ var CodexTurnProjector = class {
     const startedItem = event.item.type === "reasoning" ? { ...event.item, text: "" } : event.item;
     const messages = [this.#startWireItem(projected, startedItem, startedAtMs)];
     if (event.item.type === "reasoning") {
-      messages.push(this.#startReasoningTranscript(event.item, startedAtMs), this.#reasoningOutputDelta(event.item.itemId, event.item.text, startedAtMs), ...this.#reasoningDelta(projected, event.item.text, startedAtMs));
+      const text = reasoningDisplayText(event.item.text);
+      messages.push(this.#startReasoningTranscript(event.item, startedAtMs), this.#reasoningOutputDelta(event.item.itemId, text, startedAtMs), ...this.#reasoningDelta(projected, text, startedAtMs));
     }
     return { messages };
   }
@@ -24078,10 +24097,14 @@ var CodexTurnProjector = class {
           }
         });
       } else if (next.type === "reasoning") {
+        const previousText = previous.type === "reasoning" ? reasoningDisplayText(previous.text) : "";
+        const delta = reasoningDisplayText(next.text).slice(previousText.length);
+        if (!delta)
+          return { messages };
         if (!projected.wireStarted) {
           messages.push(this.#startWireItem(projected, { ...next, text: "" }, emittedAtMs), this.#startReasoningTranscript({ ...next, text: "" }, emittedAtMs));
         }
-        messages.push(this.#reasoningOutputDelta(event.itemId, event.update.text, emittedAtMs), ...this.#reasoningDelta(projected, event.update.text, emittedAtMs));
+        messages.push(this.#reasoningOutputDelta(event.itemId, delta, emittedAtMs), ...this.#reasoningDelta(projected, delta, emittedAtMs));
       }
     } else if (event.update.type === "output.append") {
       projected.streamedCommandOutput = true;
@@ -24463,13 +24486,13 @@ function decodeThreadForkRequest(request) {
   if (runtimeWorkspaceRoots !== void 0 && runtimeWorkspaceRoots !== null && (!Array.isArray(runtimeWorkspaceRoots) || runtimeWorkspaceRoots.some((root) => typeof root !== "string" || root.length === 0))) {
     throw new Error("thread/fork params.runtimeWorkspaceRoots must be text paths or null");
   }
-  const path28 = optionalText(params, "path", { allowEmpty: true });
+  const path29 = optionalText(params, "path", { allowEmpty: true });
   const ephemeral = optionalBoolean(params, "ephemeral");
   return {
     threadId: threadId2,
     ...lastTurnText ? { lastTurnId: hostTurnIdSchema.parse(lastTurnText) } : {},
     ...beforeTurnText ? { beforeTurnId: hostTurnIdSchema.parse(beforeTurnText) } : {},
-    ...path28 ? { path: path28 } : {},
+    ...path29 ? { path: path29 } : {},
     ...optionalField(params, "model"),
     ...optionalField(params, "modelProvider"),
     ...optionalField(params, "cwd"),
@@ -25647,7 +25670,7 @@ var HarnessAccountInspectionCache = class {
 // packages/host-runtime/src/app-server-host.ts
 import { createHash as createHash8, randomUUID as randomUUID10 } from "node:crypto";
 import os5 from "node:os";
-import path15 from "node:path";
+import path16 from "node:path";
 
 // packages/host-runtime/src/external-thread-fork.ts
 import nodePath from "node:path";
@@ -25655,7 +25678,7 @@ import nodePath from "node:path";
 // packages/host-runtime/src/external-thread-repository.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import os3 from "node:os";
-import path9 from "node:path";
+import path10 from "node:path";
 
 // packages/host-runtime/src/external-subagent-threads.ts
 import { createHash as createHash5, randomUUID as randomUUID4 } from "node:crypto";
@@ -25795,8 +25818,8 @@ function sameMapping(left, right) {
 }
 function defaultMappingStoreDirectory(environment) {
   const dataDirectory = environment.CODEXHOST_DATA_DIR;
-  return path9.join(
-    dataDirectory ? path9.resolve(dataDirectory) : path9.join(os3.homedir(), ".codexhost"),
+  return path10.join(
+    dataDirectory ? path10.resolve(dataDirectory) : path10.join(os3.homedir(), ".codexhost"),
     "mapping-store"
   );
 }
@@ -27906,7 +27929,7 @@ async function resolveExternalCommand(commands, text, options2 = {}) {
 }
 
 // packages/host-runtime/src/live-command-catalog-cache.ts
-import path10 from "node:path";
+import path11 from "node:path";
 var MAX_ENTRIES = 64;
 function isLiveCommandCatalog(catalog, staticCatalog) {
   const staticIds = new Set(staticCatalog.commands.map(({ id: id2 }) => id2));
@@ -27915,7 +27938,7 @@ function isLiveCommandCatalog(catalog, staticCatalog) {
 var LiveCommandCatalogCache = class {
   #entries = /* @__PURE__ */ new Map();
   #key(harnessId, cwd) {
-    return `${harnessId}\0${path10.resolve(cwd)}`;
+    return `${harnessId}\0${path11.resolve(cwd)}`;
   }
   remember(harnessId, cwd, catalog) {
     const key = this.#key(harnessId, cwd);
@@ -27932,12 +27955,12 @@ var LiveCommandCatalogCache = class {
   }
 };
 function sameWorkspace(left, right) {
-  return path10.resolve(left) === path10.resolve(right);
+  return path11.resolve(left) === path11.resolve(right);
 }
 
 // packages/host-runtime/src/harness-delegation-coordinator.ts
 import { createHash as createHash7, randomUUID as randomUUID6 } from "node:crypto";
-import path11 from "node:path";
+import path12 from "node:path";
 
 // packages/host-runtime/src/delegation-snapshot.ts
 import { createHash as createHash6 } from "node:crypto";
@@ -28092,7 +28115,7 @@ function taskDigest(input) {
   return createHash7("sha256").update(
     JSON.stringify({
       task: input.task,
-      cwd: path11.resolve(input.cwd),
+      cwd: path12.resolve(input.cwd),
       modelId: input.model?.id ?? null,
       thinkingOptionId: input.thinkingOptionId ?? null
     })
@@ -28163,7 +28186,7 @@ var HarnessDelegationCoordinator = class {
     return {
       harnessId: input.harnessId,
       inspection: await adapter.inspect({
-        ...input.cwd ? { cwd: path11.resolve(input.cwd) } : {},
+        ...input.cwd ? { cwd: path12.resolve(input.cwd) } : {},
         ...input.refresh !== void 0 ? { refresh: input.refresh } : {}
       })
     };
@@ -28177,7 +28200,7 @@ var HarnessDelegationCoordinator = class {
       const result = await this.#startOfficial({ ...input, parentThreadId, cwd: selectedCwd });
       return { ...result, parentThreadId, cwd: result.cwd ?? selectedCwd };
     }
-    const startInput = { ...input, parentThreadId, cwd: path11.resolve(selectedCwd) };
+    const startInput = { ...input, parentThreadId, cwd: path12.resolve(selectedCwd) };
     if (!this.#adapters.has(input.harnessId)) {
       throw new DelegationControlError(
         "HARNESS_NOT_FOUND",
@@ -28606,7 +28629,7 @@ var HarnessDelegationCoordinator = class {
 
 // packages/host-runtime/src/harness-plugin-loader.ts
 import { readdir as readdir3, realpath as realpath2 } from "node:fs/promises";
-import path13 from "node:path";
+import path14 from "node:path";
 import { pathToFileURL } from "node:url";
 
 // packages/host-runtime/src/harness-plugin-registry.ts
@@ -28644,16 +28667,16 @@ var HarnessPluginRegistry = class {
 
 // packages/host-runtime/src/plugin-files.ts
 import { open as open5, realpath, stat as stat3 } from "node:fs/promises";
-import path12 from "node:path";
+import path13 from "node:path";
 function inside(root, candidate) {
-  const relative = path12.relative(root, candidate);
-  return relative !== "" && !path12.isAbsolute(relative) && relative !== ".." && !relative.startsWith(`..${path12.sep}`);
+  const relative = path13.relative(root, candidate);
+  return relative !== "" && !path13.isAbsolute(relative) && relative !== ".." && !relative.startsWith(`..${path13.sep}`);
 }
 async function pluginResourcePath(root, relative) {
-  if (path12.isAbsolute(relative) || !inside(root, path12.resolve(root, relative))) {
+  if (path13.isAbsolute(relative) || !inside(root, path13.resolve(root, relative))) {
     throw new Error("Plugin resource escapes its root");
   }
-  const resolved = await realpath(path12.resolve(root, relative));
+  const resolved = await realpath(path13.resolve(root, relative));
   if (!inside(root, resolved) || !(await stat3(resolved)).isFile()) {
     throw new Error("Plugin resource must be a regular file inside its root");
   }
@@ -28815,7 +28838,7 @@ async function loadHarnessPlugins(options2) {
   const enabledIds = /* @__PURE__ */ new Set();
   const roots = /* @__PURE__ */ new Set();
   for (const configuredRoot of options2.roots) {
-    if (!path13.isAbsolute(configuredRoot)) {
+    if (!path14.isAbsolute(configuredRoot)) {
       diagnose({ code: "invalidRoot" });
       continue;
     }
@@ -28845,7 +28868,7 @@ async function loadHarnessPlugins(options2) {
       for (const directory of directories) {
         try {
           const file2 = await pluginResourcePath(root, `${directory.name}/manifest.json`);
-          const pluginRoot = await realpath2(path13.join(root, directory.name));
+          const pluginRoot = await realpath2(path14.join(root, directory.name));
           await pluginResourcePath(pluginRoot, "manifest.json");
           const manifest = harnessPluginManifestSchema.parse(
             JSON.parse(
@@ -28943,25 +28966,25 @@ async function loadHarnessPlugins(options2) {
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { mkdir as mkdir5, readFile as readFile7, rename as rename4, rm as rm5, stat as stat4, writeFile as writeFile3 } from "node:fs/promises";
 import os4 from "node:os";
-import path14 from "node:path";
+import path15 from "node:path";
 var HarnessLaunchSettingsStore = class {
   #directory;
   #initial = /* @__PURE__ */ new Map();
   constructor(environment) {
-    this.#directory = path14.join(
-      environment.CODEXHOST_DATA_DIR ? path14.resolve(environment.CODEXHOST_DATA_DIR) : path14.join(os4.homedir(), ".codexhost"),
+    this.#directory = path15.join(
+      environment.CODEXHOST_DATA_DIR ? path15.resolve(environment.CODEXHOST_DATA_DIR) : path15.join(os4.homedir(), ".codexhost"),
       "harness-launch-settings"
     );
   }
   #file(id2) {
-    return path14.join(this.#directory, `${harnessPluginIdSchema.parse(id2)}.json`);
+    return path15.join(this.#directory, `${harnessPluginIdSchema.parse(id2)}.json`);
   }
   async #read(id2) {
     try {
       const value2 = harnessLaunchPathSchema.parse(
         JSON.parse(await readFile7(this.#file(id2), "utf8"))
       );
-      if (!path14.isAbsolute(value2)) throw new Error("Expected an absolute entrypoint path");
+      if (!path15.isAbsolute(value2)) throw new Error("Expected an absolute entrypoint path");
       return value2;
     } catch (error51) {
       if (error51 && typeof error51 === "object" && "code" in error51 && error51.code === "ENOENT")
@@ -28990,7 +29013,7 @@ var HarnessLaunchSettingsStore = class {
       await rm5(file2, { force: true });
     } else {
       value2 = harnessLaunchPathSchema.parse(value2);
-      if (!path14.isAbsolute(value2))
+      if (!path15.isAbsolute(value2))
         throw new Error("Use an absolute entrypoint path without arguments");
       const metadata = await stat4(value2).catch(() => void 0);
       if (!metadata?.isDirectory() && !metadata?.isFile())
@@ -30125,25 +30148,25 @@ function resolveExternalSessionTreeIds(records) {
   const resolve = (start) => {
     const cached2 = resolved.get(start.hostThreadId);
     if (cached2) return cached2;
-    const path28 = [];
+    const path29 = [];
     const visited = /* @__PURE__ */ new Set();
     let current = start;
     while (true) {
       const known = resolved.get(current.hostThreadId);
       if (known) {
-        for (const record3 of path28) resolved.set(record3.hostThreadId, known);
+        for (const record3 of path29) resolved.set(record3.hostThreadId, known);
         return known;
       }
       if (visited.has(current.hostThreadId)) {
         throw new Error("External Thread Fork tree contains a cycle");
       }
       visited.add(current.hostThreadId);
-      path28.push(current);
+      path29.push(current);
       const sourceId = current.subagent?.parentHostThreadId ?? current.forkSource?.hostThreadId;
       const source = sourceId ? byId.get(sourceId) : void 0;
       if (!source) {
         const root = current.hostThreadId;
-        for (const record3 of path28) resolved.set(record3.hostThreadId, root);
+        for (const record3 of path29) resolved.set(record3.hostThreadId, root);
         return root;
       }
       current = source;
@@ -30600,7 +30623,7 @@ var AppServerHost = class {
     this.#launchSettings = new HarnessLaunchSettingsStore(
       this.#options.pluginContext?.environment ?? environment
     );
-    const permanentHome = path15.resolve(environment.CODEX_HOME ?? path15.join(os5.homedir(), ".codex"));
+    const permanentHome = path16.resolve(environment.CODEX_HOME ?? path16.join(os5.homedir(), ".codex"));
     this.#ownsOfficialRuntimeScope = options2.officialRuntimeScope === void 0;
     this.#officialRuntimeScope = options2.officialRuntimeScope ?? new OfficialRuntimeScope({
       diagnosticOutput: this.#options.diagnosticOutput,
@@ -33995,7 +34018,7 @@ var AppServerHost = class {
 // packages/host-runtime/src/native-account-host.ts
 import { mkdir as mkdir8, realpath as realpath3 } from "node:fs/promises";
 import { homedir } from "node:os";
-import path19 from "node:path";
+import path20 from "node:path";
 
 // packages/host-runtime/src/codex-runtime/owned-official-backends.ts
 import { createHash as createHash9, randomBytes } from "node:crypto";
@@ -34005,7 +34028,7 @@ import { Writable as Writable2 } from "node:stream";
 import { createServer } from "node:http";
 import net from "node:net";
 import { chmod as chmod3, lstat as lstat6, mkdir as mkdir7, rm as rm7 } from "node:fs/promises";
-import path17 from "node:path";
+import path18 from "node:path";
 import { PassThrough } from "node:stream";
 
 // node_modules/ws/wrapper.mjs
@@ -34023,7 +34046,7 @@ var wrapper_default = import_websocket.default;
 import { randomUUID as randomUUID11 } from "node:crypto";
 import { chmod as chmod2, lstat as lstat5, mkdir as mkdir6, open as open6, readFile as readFile8, readdir as readdir4, rename as rename5, rm as rm6 } from "node:fs/promises";
 import { uptime } from "node:os";
-import path16 from "node:path";
+import path17 from "node:path";
 import { setTimeout as delay4 } from "node:timers/promises";
 var LOCK_RETRY_COUNT = 200;
 var LOCK_RETRY_DELAY_MS = 25;
@@ -34097,7 +34120,7 @@ async function readLockEntrySnapshot(filePath) {
     source,
     identity: { dev: metadata.dev, ino: metadata.ino },
     mtimeMs: metadata.mtimeMs,
-    record: record3 && path16.basename(filePath) === lockEntryName(record3.ownerToken) ? record3 : null
+    record: record3 && path17.basename(filePath) === lockEntryName(record3.ownerToken) ? record3 : null
   };
 }
 function lockEntryIsAbandoned(snapshot) {
@@ -34118,7 +34141,7 @@ async function readLockEntryCatalog(lockDirectory) {
   let unsettled = false;
   for (const name of names) {
     if (!name.startsWith(LOCK_ENTRY_PREFIX) || !name.endsWith(LOCK_ENTRY_SUFFIX)) continue;
-    const snapshot = await readLockEntrySnapshot(path16.join(lockDirectory, name));
+    const snapshot = await readLockEntrySnapshot(path17.join(lockDirectory, name));
     if (snapshot === null) continue;
     if (lockEntryIsAbandoned(snapshot)) {
       if (!await removeAbandonedLockEntry(snapshot)) unsettled = true;
@@ -34146,7 +34169,7 @@ async function preparePrivateLockDirectory(lockDirectory) {
   await chmod2(lockDirectory, 448);
 }
 async function writeLockRecordAtomic(lockDirectory, entryPath, record3) {
-  const temporary = path16.join(lockDirectory, `.tmp-${record3.ownerToken}-${randomUUID11()}`);
+  const temporary = path17.join(lockDirectory, `.tmp-${record3.ownerToken}-${randomUUID11()}`);
   const handle = await open6(temporary, "wx", 384);
   try {
     await handle.writeFile(`${JSON.stringify(record3)}
@@ -34222,7 +34245,7 @@ async function withRemoteAppServerSocketInitializationLock(socketPath, action) {
   const lockDirectory = `${socketPath}.initializers`;
   await preparePrivateLockDirectory(lockDirectory);
   const ownerToken = randomUUID11();
-  const entryPath = path16.join(lockDirectory, lockEntryName(ownerToken));
+  const entryPath = path17.join(lockDirectory, lockEntryName(ownerToken));
   const baseRecord = {
     version: 2,
     ownerToken,
@@ -34396,14 +34419,14 @@ function remoteAppServerSocketPath(environment, listenUrl = "unix://") {
     throw new Error("Remote app-server listener must use a Unix URL");
   }
   const explicit = listenUrl.slice("unix://".length);
-  if (explicit.length > 0) return path17.posix.resolve(decodeURIComponent(explicit));
-  const codexHome = environment.CODEX_HOME ?? (environment.HOME ? path17.posix.join(environment.HOME, ".codex") : void 0);
+  if (explicit.length > 0) return path18.posix.resolve(decodeURIComponent(explicit));
+  const codexHome = environment.CODEX_HOME ?? (environment.HOME ? path18.posix.join(environment.HOME, ".codex") : void 0);
   if (!codexHome)
     throw new Error("CODEX_HOME or HOME is required for the remote app-server socket");
-  return path17.posix.join(codexHome, "app-server-control", "app-server-control.sock");
+  return path18.posix.join(codexHome, "app-server-control", "app-server-control.sock");
 }
 function officialListenerArgumentsForRemoteListener(arguments_2, socketPath) {
-  if (!path17.posix.isAbsolute(socketPath)) {
+  if (!path18.posix.isAbsolute(socketPath)) {
     throw new Error("Shared official app-server socket path must be absolute");
   }
   if (remoteUnixListenerUrl(arguments_2) === null) {
@@ -34514,7 +34537,7 @@ async function removeStaleSocket(socketPath) {
   await rm7(socketPath, { force: true });
 }
 async function prepareRemoteAppServerSocketDirectory(socketPath) {
-  const socketDirectory = path17.dirname(socketPath);
+  const socketDirectory = path18.dirname(socketPath);
   const existing = await lstat6(socketDirectory).catch((error51) => {
     if (error51.code === "ENOENT") return null;
     throw error51;
@@ -34720,38 +34743,56 @@ function createRemoteAppServerWebSocketListener(input) {
 // packages/host-runtime/src/remote-official-app-server.ts
 import { spawn as spawn3 } from "node:child_process";
 import { randomUUID as randomUUID12 } from "node:crypto";
-import { lstat as lstat7, rm as rm8 } from "node:fs/promises";
-import path18 from "node:path";
+import { lstat as lstat7, rm as rm8, stat as stat5 } from "node:fs/promises";
+import path19 from "node:path";
 var DEFAULT_CLOSE_TIMEOUT_MS = 2e3;
 var DEFAULT_LISTEN_TIMEOUT_MS = 1e4;
 function remoteOfficialAppServerSocketPath(desktopControlSocketPath, token = randomUUID12()) {
-  if (!path18.posix.isAbsolute(desktopControlSocketPath)) {
+  if (!path19.posix.isAbsolute(desktopControlSocketPath)) {
     throw new Error("Desktop control socket path must be absolute");
   }
   if (!/^[A-Za-z0-9-]+$/u.test(token) || !/[A-Za-z0-9]/u.test(token)) {
     throw new Error("Shared official app-server socket token is invalid");
   }
   const compactToken = token.replaceAll("-", "").slice(0, 15);
-  return path18.posix.join(path18.posix.dirname(desktopControlSocketPath), `.c-${compactToken}.sock`);
+  return path19.posix.join(path19.posix.dirname(desktopControlSocketPath), `.c-${compactToken}.sock`);
 }
 function errorMessage4(error51) {
   return error51 instanceof Error ? error51.message : String(error51);
 }
-async function socketIdentity(socketPath) {
+async function inspectSocket(socketPath) {
   const metadata = await lstat7(socketPath).catch((error51) => {
     if (error51.code === "ENOENT") return null;
     throw error51;
   });
   if (metadata === null) return null;
-  if (!metadata.isSocket()) {
+  const identity = { dev: metadata.dev, ino: metadata.ino };
+  if (metadata.isSymbolicLink()) {
+    const uid = process.getuid?.();
+    if (uid === void 0 || metadata.uid !== uid) {
+      throw new Error(
+        `Shared official app-server link must belong to the current user: ${socketPath}`
+      );
+    }
+    const target = await stat5(socketPath).catch((error51) => {
+      if (error51.code === "ENOENT") return null;
+      throw error51;
+    });
+    if (target === null) return { identity, ready: false };
+    if (target.uid !== uid || !target.isSocket() || (target.mode & 63) !== 0) {
+      throw new Error(
+        `Shared official app-server link must target a current-user private socket: ${socketPath}`
+      );
+    }
+  } else if (!metadata.isSocket()) {
     throw new Error(`Shared official app-server path is not a socket: ${socketPath}`);
   }
-  return { dev: metadata.dev, ino: metadata.ino };
+  return { identity, ready: true };
 }
 function sameUnixFileIdentity3(left, right) {
   return left.dev === right.dev && left.ino === right.ino;
 }
-async function waitForOfficialSocket(socketPath, closed) {
+async function waitForOfficialSocket(socketPath, closed, onIdentity) {
   const deadline = Date.now() + 1e4;
   const state = { exit: null };
   void closed.then((value2) => {
@@ -34764,14 +34805,20 @@ async function waitForOfficialSocket(socketPath, closed) {
         exit.error ? `Shared official app-server failed: ${exit.error.message}` : `Shared official app-server exited before its socket was ready (code=${String(exit.code)}, signal=${String(exit.signal)})`
       );
     }
-    if (await socketIdentity(socketPath) !== null) return;
+    const socket = await inspectSocket(socketPath);
+    if (socket !== null) {
+      onIdentity(socket.identity);
+      if (socket.ready) return;
+    }
     await new Promise((resolve) => setTimeout(resolve, 25));
   }
   throw new Error(`Shared official app-server socket was not ready after 10000ms: ${socketPath}`);
 }
 function createRemoteOfficialAppServerListener(input) {
   const spawnOfficial = input.spawnOfficial ?? spawn3;
-  const waitUntilReady = input.waitUntilReady ?? waitForOfficialSocket;
+  const waitUntilReady = input.waitUntilReady ?? ((socketPath, closed2) => waitForOfficialSocket(socketPath, closed2, (identity) => {
+    ownedSocketIdentity ??= identity;
+  }));
   const closeTimeoutMs = input.closeTimeoutMs ?? DEFAULT_CLOSE_TIMEOUT_MS;
   const closed = Promise.withResolvers();
   let child = null;
@@ -34802,7 +34849,7 @@ function createRemoteOfficialAppServerListener(input) {
   };
   const removeOwnedSocket = async () => {
     if (ownedSocketIdentity === null) return;
-    const current = await socketIdentity(input.socketPath).catch(() => null);
+    const current = await lstat7(input.socketPath).catch(() => null);
     if (current && sameUnixFileIdentity3(current, ownedSocketIdentity)) {
       await rm8(input.socketPath, { force: true });
     }
@@ -34828,7 +34875,7 @@ function createRemoteOfficialAppServerListener(input) {
         spawned.stderr?.pipe(input.diagnosticOutput, { end: false });
         try {
           await waitUntilReady(input.socketPath, closed.promise);
-          ownedSocketIdentity = await socketIdentity(input.socketPath).catch(() => null);
+          ownedSocketIdentity ??= (await inspectSocket(input.socketPath).catch(() => null))?.identity ?? null;
         } catch (error51) {
           let stopFailed = false;
           try {
@@ -34836,7 +34883,7 @@ function createRemoteOfficialAppServerListener(input) {
           } catch {
             stopFailed = true;
           }
-          ownedSocketIdentity ??= await socketIdentity(input.socketPath).catch(() => null);
+          ownedSocketIdentity ??= (await inspectSocket(input.socketPath).catch(() => null))?.identity ?? null;
           if (!stopFailed) await removeOwnedSocket();
           throw new Error(`Shared official app-server startup failed: ${errorMessage4(error51)}`);
         }
@@ -35218,19 +35265,19 @@ function createOwnedUnixBackend(input) {
 
 // packages/host-runtime/src/native-account-host.ts
 async function canonicalCodexHome(home) {
-  const absolute = path19.resolve(home);
+  const absolute = path20.resolve(home);
   try {
     return await realpath3(absolute);
   } catch (error51) {
     if (!(error51 instanceof Error && "code" in error51 && error51.code === "ENOENT")) throw error51;
-    const parent = path19.dirname(absolute);
+    const parent = path20.dirname(absolute);
     if (parent === absolute) throw error51;
-    return path19.join(await canonicalCodexHome(parent), path19.basename(absolute));
+    return path20.join(await canonicalCodexHome(parent), path20.basename(absolute));
   }
 }
 async function prepareLocalCodex(input) {
   const home = await canonicalCodexHome(
-    input.environment.CODEX_HOME ?? path19.join(homedir(), ".codex")
+    input.environment.CODEX_HOME ?? path20.join(homedir(), ".codex")
   );
   await mkdir8(home, { recursive: true });
   const scope = new OfficialRuntimeScope({
@@ -35397,17 +35444,17 @@ var DelegationControlRegistry = class {
 
 // packages/host-runtime/src/installed-harness-plugins.ts
 import os6 from "node:os";
-import path21 from "node:path";
+import path22 from "node:path";
 import { fileURLToPath } from "node:url";
 
 // packages/host-runtime/src/launcher-url-opener.ts
 import { spawn as spawn4 } from "node:child_process";
-import path20 from "node:path";
+import path21 from "node:path";
 var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["127.0.0.1", "localhost", "[::1]"]);
 var OPEN_TIMEOUT_MS = 1e4;
 function createLauncherUrlOpener(environment, spawnLauncher = (command, arguments_2, options2) => spawn4(command, arguments_2, options2)) {
   const launcher = environment.CODEXHOST_LAUNCHER_EXECUTABLE;
-  if (!launcher || !path20.isAbsolute(launcher)) return void 0;
+  if (!launcher || !path21.isAbsolute(launcher)) return void 0;
   const launcherEnvironment = Object.fromEntries(
     Object.entries(environment).filter(([name]) => {
       const normalized = name.toUpperCase();
@@ -35465,9 +35512,9 @@ function installedHarnessPluginOptions(environment, managedRemoteHost = false, h
   const opener = managedRemoteHost ? void 0 : createLauncherUrlOpener(environment);
   return {
     pluginRoots: [
-      path21.join(path21.dirname(fileURLToPath(hostRuntimeUrl)), "plugins"),
-      environment[HARNESS_PLUGIN_DIRECTORY_ENV] ?? path21.join(
-        environment.CODEXHOST_DATA_DIR ? path21.resolve(environment.CODEXHOST_DATA_DIR) : path21.join(os6.homedir(), ".codexhost"),
+      path22.join(path22.dirname(fileURLToPath(hostRuntimeUrl)), "plugins"),
+      environment[HARNESS_PLUGIN_DIRECTORY_ENV] ?? path22.join(
+        environment.CODEXHOST_DATA_DIR ? path22.resolve(environment.CODEXHOST_DATA_DIR) : path22.join(os6.homedir(), ".codexhost"),
         "plugins"
       )
     ],
@@ -35594,7 +35641,7 @@ async function startDelegationControlServer(input) {
 // packages/host-runtime/src/remote-control-app-server.ts
 import { randomUUID as randomUUID13 } from "node:crypto";
 import { mkdir as mkdir9, open as open7, rename as rename6, rm as rm9 } from "node:fs/promises";
-import path22 from "node:path";
+import path23 from "node:path";
 var REMOTE_CONTROL_BRIDGE_PIPE_ENV = "CODEXHOST_REMOTE_CONTROL_BRIDGE_PIPE";
 var REMOTE_CONTROL_BRIDGE_NODE_ENV = "CODEXHOST_REMOTE_CONTROL_BRIDGE_NODE_PATH";
 var REMOTE_CONTROL_BRIDGE_RUNTIME_ENV = "CODEXHOST_REMOTE_CONTROL_BRIDGE_RUNTIME_PATH";
@@ -35605,8 +35652,8 @@ var BRIDGE_READY_METHOD = "codexhost/remote-control-bridge/ready";
 function absoluteEnvironmentPath2(environment, name, fallback, platform = process.platform) {
   const value2 = environment[name] ?? fallback;
   if (!value2) return null;
-  if (path22.isAbsolute(value2)) return path22.normalize(value2);
-  return platform === "win32" && path22.win32.isAbsolute(value2) ? path22.win32.normalize(value2) : null;
+  if (path23.isAbsolute(value2)) return path23.normalize(value2);
+  return platform === "win32" && path23.win32.isAbsolute(value2) ? path23.win32.normalize(value2) : null;
 }
 function nodeCompatibleWindowsPath(value2) {
   if (value2.startsWith("\\\\?\\UNC\\")) return `\\\\${value2.slice(8)}`;
@@ -35620,13 +35667,13 @@ function remoteControlBridgePipePath(processId = process.pid, instanceId = rando
 }
 function remoteControlBridgeDescriptorPath(environment) {
   const root = environment.LOCALAPPDATA;
-  if (!root || !path22.isAbsolute(root)) return null;
-  return path22.join(path22.normalize(root), "codexhost", REMOTE_CONTROL_BRIDGE_DESCRIPTOR_FILE);
+  if (!root || !path23.isAbsolute(root)) return null;
+  return path23.join(path23.normalize(root), "codexhost", REMOTE_CONTROL_BRIDGE_DESCRIPTOR_FILE);
 }
 async function publishRemoteControlAppServerDescriptor(plan) {
-  const directory = path22.dirname(plan.descriptorPath);
+  const directory = path23.dirname(plan.descriptorPath);
   await mkdir9(directory, { recursive: true, mode: 448 });
-  const temporaryPath = path22.join(
+  const temporaryPath = path23.join(
     directory,
     `.${REMOTE_CONTROL_BRIDGE_DESCRIPTOR_FILE}.${plan.descriptor.ownerPid}.${randomUUID13()}.tmp`
   );
@@ -35927,9 +35974,9 @@ function hasLauncherManagedUpdateRuntime(environment, hostRuntimePath) {
   if (!environment[UPDATE_RUNTIME_ENV.launcherPid]) return false;
   const npmPackageRoot = environment[UPDATE_RUNTIME_ENV.npmPackageRoot];
   if (!npmPackageRoot || !hostRuntimePath) return true;
-  if (!path23.isAbsolute(npmPackageRoot) || !path23.isAbsolute(hostRuntimePath)) return false;
-  const runtimePackageRoot = path23.dirname(path23.dirname(path23.normalize(hostRuntimePath)));
-  return path23.relative(path23.normalize(npmPackageRoot), runtimePackageRoot) === "";
+  if (!path24.isAbsolute(npmPackageRoot) || !path24.isAbsolute(hostRuntimePath)) return false;
+  const runtimePackageRoot = path24.dirname(path24.dirname(path24.normalize(hostRuntimePath)));
+  return path24.relative(path24.normalize(npmPackageRoot), runtimePackageRoot) === "";
 }
 function requiredRuntimeConfiguration(environment) {
   const stockCodexPath = environment[STOCK_CODEX_PATH_ENV];
@@ -36075,8 +36122,8 @@ async function runHostRuntime(input) {
       const socketPath = remoteAppServerSocketPath(delegationEnvironment, listenUrl);
       const officialPlan = createRemoteOfficialAppServerPlan(input.arguments, socketPath);
       const officialRuntimeScope = new OfficialRuntimeScope({
-        permanentHome: path23.resolve(
-          delegationEnvironment.CODEX_HOME ?? path23.join(homedir2(), ".codex")
+        permanentHome: path24.resolve(
+          delegationEnvironment.CODEX_HOME ?? path24.join(homedir2(), ".codex")
         ),
         diagnosticOutput: process.stderr,
         createBackend: () => createOwnedUnixBackend({
@@ -36169,10 +36216,10 @@ import {
   rename as rename7,
   rm as rm10,
   rmdir,
-  stat as stat5,
+  stat as stat6,
   writeFile as writeFile4
 } from "node:fs/promises";
-import path24 from "node:path";
+import path25 from "node:path";
 var MANIFEST_FORMAT = 1;
 var WRAPPER_MARKER = "# codexhost remote SSH wrapper v1";
 var PROFILE_START = "# >>> codexhost remote SSH >>>";
@@ -36183,25 +36230,25 @@ function resolvePaths(options2) {
   if (!configuredHome) {
     throw new Error("A non-root HOME is required for remote Host installation");
   }
-  const home = path24.resolve(configuredHome);
-  if (!home || home === path24.parse(home).root) {
+  const home = path25.resolve(configuredHome);
+  if (!home || home === path25.parse(home).root) {
     throw new Error("A non-root HOME is required for remote Host installation");
   }
-  const installRoot = path24.resolve(options2.installRoot ?? path24.join(home, ".codexhost", "remote"));
-  const profilePath = path24.resolve(
-    options2.profilePath ?? path24.join(
+  const installRoot = path25.resolve(options2.installRoot ?? path25.join(home, ".codexhost", "remote"));
+  const profilePath = path25.resolve(
+    options2.profilePath ?? path25.join(
       home,
-      path24.basename(environment.SHELL ?? "") === "zsh" ? ".zshenv" : path24.basename(environment.SHELL ?? "") === "bash" ? ".bashrc" : ".profile"
+      path25.basename(environment.SHELL ?? "") === "zsh" ? ".zshenv" : path25.basename(environment.SHELL ?? "") === "bash" ? ".bashrc" : ".profile"
     )
   );
-  const binDirectory = path24.join(installRoot, "bin");
+  const binDirectory = path25.join(installRoot, "bin");
   return {
     home,
     installRoot,
     binDirectory,
-    wrapperPath: path24.join(binDirectory, "codex"),
-    manifestPath: path24.join(installRoot, "manifest.json"),
-    dataDirectory: path24.join(installRoot, "data"),
+    wrapperPath: path25.join(binDirectory, "codex"),
+    manifestPath: path25.join(installRoot, "manifest.json"),
+    dataDirectory: path25.join(installRoot, "data"),
     profilePath
   };
 }
@@ -36220,9 +36267,9 @@ async function fileSha256(filePath) {
   return createHash10("sha256").update(await readFile9(filePath)).digest("hex");
 }
 async function executable(filePath, label) {
-  const absolute = path24.resolve(filePath);
+  const absolute = path25.resolve(filePath);
   try {
-    if (!(await stat5(absolute)).isFile()) throw new Error("not a regular file");
+    if (!(await stat6(absolute)).isFile()) throw new Error("not a regular file");
     await access(absolute, fsConstants.X_OK);
   } catch {
     throw new Error(`${label} is not an executable file: ${absolute}`);
@@ -36230,9 +36277,9 @@ async function executable(filePath, label) {
   return absolute;
 }
 async function existingFile(filePath, label) {
-  const absolute = path24.resolve(filePath);
+  const absolute = path25.resolve(filePath);
   try {
-    const metadata = await stat5(absolute);
+    const metadata = await stat6(absolute);
     if (!metadata.isFile()) throw new Error("not a regular file");
   } catch {
     throw new Error(`${label} is not a regular file: ${absolute}`);
@@ -36240,9 +36287,9 @@ async function existingFile(filePath, label) {
   return absolute;
 }
 async function discoverExecutable(name, environment) {
-  for (const directory of (environment.PATH ?? "").split(path24.delimiter)) {
+  for (const directory of (environment.PATH ?? "").split(path25.delimiter)) {
     if (!directory) continue;
-    const candidate = path24.resolve(directory, name);
+    const candidate = path25.resolve(directory, name);
     try {
       await access(candidate, fsConstants.X_OK);
       return candidate;
@@ -36253,10 +36300,10 @@ async function discoverExecutable(name, environment) {
   return null;
 }
 async function writeAtomic(filePath, contents, mode) {
-  await mkdir10(path24.dirname(filePath), { recursive: true, mode: 448 });
-  const temporary = path24.join(
-    path24.dirname(filePath),
-    `.${path24.basename(filePath)}.${process.pid}.${randomUUID14()}.tmp`
+  await mkdir10(path25.dirname(filePath), { recursive: true, mode: 448 });
+  const temporary = path25.join(
+    path25.dirname(filePath),
+    `.${path25.basename(filePath)}.${process.pid}.${randomUUID14()}.tmp`
   );
   try {
     if (typeof contents === "string") {
@@ -36277,10 +36324,10 @@ async function writeAtomic(filePath, contents, mode) {
   }
 }
 async function writeAtomicExecutable(filePath, sourcePath) {
-  await mkdir10(path24.dirname(filePath), { recursive: true, mode: 448 });
-  const temporary = path24.join(
-    path24.dirname(filePath),
-    `.${path24.basename(filePath)}.${process.pid}.${randomUUID14()}.tmp`
+  await mkdir10(path25.dirname(filePath), { recursive: true, mode: 448 });
+  const temporary = path25.join(
+    path25.dirname(filePath),
+    `.${path25.basename(filePath)}.${process.pid}.${randomUUID14()}.tmp`
   );
   try {
     await copyFile3(sourcePath, temporary);
@@ -36321,8 +36368,8 @@ function removeManagedProfileBlock(contents) {
 function installManagedProfileBlock(contents, manifest) {
   const base = removeManagedProfileBlock(contents);
   const environment = [
-    `export CODEX_INSTALL_DIR=${shellQuote(path24.dirname(manifest.wrapperPath))}`,
-    `export PATH=${shellQuote(path24.dirname(manifest.wrapperPath))}:${shellQuote(path24.dirname(manifest.nodePath))}:${shellQuote(path24.dirname(manifest.stockCodexPath))}:"\${PATH:-/usr/local/bin:/usr/bin:/bin}"`,
+    `export CODEX_INSTALL_DIR=${shellQuote(path25.dirname(manifest.wrapperPath))}`,
+    `export PATH=${shellQuote(path25.dirname(manifest.wrapperPath))}:${shellQuote(path25.dirname(manifest.nodePath))}:${shellQuote(path25.dirname(manifest.stockCodexPath))}:"\${PATH:-/usr/local/bin:/usr/bin:/bin}"`,
     `export CODEXHOST_STOCK_CODEX_PATH=${shellQuote(manifest.stockCodexPath)}`,
     `export CODEXHOST_HOST_NODE_PATH=${shellQuote(manifest.nodePath)}`,
     `export CODEXHOST_HOST_RUNTIME_PATH=${shellQuote(manifest.hostRuntimePath)}`,
@@ -36338,7 +36385,7 @@ function installManagedProfileBlock(contents, manifest) {
     PROFILE_END,
     ""
   ].join("\n");
-  if (path24.basename(manifest.profilePath) === ".bashrc") return `${block}${base}`;
+  if (path25.basename(manifest.profilePath) === ".bashrc") return `${block}${base}`;
   const separator = base.length > 0 && !base.endsWith("\n") ? "\n" : "";
   return `${base}${separator}${block}`;
 }
@@ -36404,9 +36451,9 @@ async function readManifest(filePath) {
   ];
   const optionalPaths = ["claudeCommand", "profileBackupPath"];
   if (manifest.format !== MANIFEST_FORMAT || Object.keys(manifest).some((key) => !allowed.has(key)) || requiredPaths.some(
-    (key) => typeof manifest[key] !== "string" || !path24.isAbsolute(manifest[key])
+    (key) => typeof manifest[key] !== "string" || !path25.isAbsolute(manifest[key])
   ) || optionalPaths.some(
-    (key) => manifest[key] !== void 0 && (typeof manifest[key] !== "string" || !path24.isAbsolute(manifest[key]))
+    (key) => manifest[key] !== void 0 && (typeof manifest[key] !== "string" || !path25.isAbsolute(manifest[key]))
   ) || manifest.entrypointSha256 !== void 0 && (typeof manifest.entrypointSha256 !== "string" || !/^[a-f0-9]{64}$/u.test(manifest.entrypointSha256))) {
     throw new Error("Remote Host manifest has an unsupported format");
   }
@@ -36415,7 +36462,7 @@ async function readManifest(filePath) {
 async function backupProfile(profilePath, contents, action) {
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replaceAll(/[-:.TZ]/gu, "");
   const backupPath = `${profilePath}.codexhost-${action}-${timestamp}.bak`;
-  const metadata = await stat5(profilePath).catch(() => null);
+  const metadata = await stat6(profilePath).catch(() => null);
   await writeAtomic(backupPath, contents, metadata?.mode ?? 384);
   return backupPath;
 }
@@ -36429,7 +36476,7 @@ async function installRemoteHost(options2) {
   const previousManifest = await readManifest(paths.manifestPath);
   const previousManifestFile = previousManifest ? {
     contents: await readFile9(paths.manifestPath),
-    mode: (await stat5(paths.manifestPath)).mode & 511
+    mode: (await stat6(paths.manifestPath)).mode & 511
   } : null;
   const existingEntrypoint = await lstat8(paths.wrapperPath).catch(
     (error51) => {
@@ -36485,7 +36532,7 @@ async function installRemoteHost(options2) {
   const existingProfile = existingProfileSource ?? "";
   const nextProfile = installManagedProfileBlock(existingProfile, manifest);
   const profileChanged = nextProfile !== existingProfile;
-  const profileMetadata = await stat5(profilePath).catch(() => null);
+  const profileMetadata = await stat6(profilePath).catch(() => null);
   try {
     if (profileChanged) {
       const profileBackupPath = await backupProfile(profilePath, existingProfile, "install");
@@ -36576,7 +36623,7 @@ async function inspectRemoteHostInstallation(options2) {
   if (!profileMatches && profileIssue === null)
     profileIssue = "shell profile does not configure the managed native entrypoint";
   if (profileIssue !== null) issues.push(profileIssue);
-  const dataDirectory = await stat5(manifest.dataDirectory).catch(() => null);
+  const dataDirectory = await stat6(manifest.dataDirectory).catch(() => null);
   if (!dataDirectory?.isDirectory()) issues.push("remote Host data directory is unavailable");
   for (const [label, filePath, requiresExecutable] of [
     ["stock Codex", manifest.stockCodexPath, true],
@@ -36586,7 +36633,7 @@ async function inspectRemoteHostInstallation(options2) {
   ]) {
     try {
       if (requiresExecutable) await executable(filePath, label);
-      else if (!(await stat5(filePath)).isFile()) throw new Error("not a regular file");
+      else if (!(await stat6(filePath)).isFile()) throw new Error("not a regular file");
     } catch {
       issues.push(`${label} is unavailable`);
     }
@@ -36615,7 +36662,7 @@ async function uninstallRemoteHost(options2) {
   const nextProfile = removeManagedProfileBlock(profile);
   if (nextProfile !== profile) {
     await backupProfile(manifest.profilePath, profile, "uninstall");
-    const metadata = await stat5(manifest.profilePath).catch(() => null);
+    const metadata = await stat6(manifest.profilePath).catch(() => null);
     await writeAtomic(manifest.profilePath, nextProfile, metadata?.mode ?? 384);
   }
   await rm10(manifest.wrapperPath, { force: true });
@@ -36630,9 +36677,9 @@ async function uninstallRemoteHost(options2) {
 
 // packages/host-runtime/src/remote-host-lifecycle.ts
 import { spawn as spawn5 } from "node:child_process";
-import { stat as stat6 } from "node:fs/promises";
+import { stat as stat7 } from "node:fs/promises";
 import net3 from "node:net";
-import path25 from "node:path";
+import path26 from "node:path";
 import { Duplex } from "node:stream";
 var CODEXHOST_STATUS_METHOD = "codexhost/update/status";
 var DIRECT_PROBE_TIMEOUT_MS = 5e3;
@@ -36651,12 +36698,12 @@ function classifyRemoteHostProbeResponse(response, socketPath) {
 }
 var lifecycleDependencyOverrides = {};
 function socketPathFor(environment) {
-  const codexHome = environment.CODEX_HOME ?? (environment.HOME ? path25.join(environment.HOME, ".codex") : void 0);
+  const codexHome = environment.CODEX_HOME ?? (environment.HOME ? path26.join(environment.HOME, ".codex") : void 0);
   if (!codexHome) throw new Error("CODEX_HOME or HOME is required for remote Host lifecycle");
-  return path25.join(codexHome, "app-server-control", "app-server-control.sock");
+  return path26.join(codexHome, "app-server-control", "app-server-control.sock");
 }
 async function defaultSocketExists(socketPath) {
-  const metadata = await stat6(socketPath).catch((error51) => {
+  const metadata = await stat7(socketPath).catch((error51) => {
     if (error51.code === "ENOENT") return null;
     throw error51;
   });
@@ -36780,14 +36827,14 @@ function installedManifest(status) {
 function managedEnvironment(manifest, environment) {
   return {
     ...environment,
-    CODEX_INSTALL_DIR: path25.dirname(manifest.wrapperPath),
+    CODEX_INSTALL_DIR: path26.dirname(manifest.wrapperPath),
     CODEXHOST_STOCK_CODEX_PATH: manifest.stockCodexPath,
     CODEXHOST_HOST_NODE_PATH: manifest.nodePath,
     CODEXHOST_HOST_RUNTIME_PATH: manifest.hostRuntimePath,
     CODEXHOST_DATA_DIR: manifest.dataDirectory,
     CODEXHOST_DEFAULT_AGENT: "codex",
     CODEXHOST_REMOTE_SSH_MANAGED: "1",
-    PATH: `${path25.dirname(manifest.wrapperPath)}${path25.delimiter}${path25.dirname(manifest.stockCodexPath)}${path25.delimiter}${environment.PATH ?? "/usr/bin:/bin"}`
+    PATH: `${path26.dirname(manifest.wrapperPath)}${path26.delimiter}${path26.dirname(manifest.stockCodexPath)}${path26.delimiter}${environment.PATH ?? "/usr/bin:/bin"}`
   };
 }
 async function defaultRunTerminator(manifest, socketPath, role, environment) {
@@ -37123,25 +37170,25 @@ function consumeBrokerFrames(socket, onFrame, onError) {
 
 // packages/harness-broker/dist/paths.js
 import os7 from "node:os";
-import path26 from "node:path";
+import path27 from "node:path";
 var HARNESS_BROKER_DESCRIPTOR_ENV = "CODEXHOST_CLAUDE_BROKER_DESCRIPTOR";
 var HARNESS_BROKER_DESCRIPTOR_FILE = "claude-code-broker-v1.json";
 var HARNESS_BROKER_SOCKET_FILE = "claude-code-broker-v1.sock";
 function defaultHarnessBrokerDirectory(environment = process.env) {
   const home = environment.HOME || os7.homedir();
-  return path26.join(home, ".codexhost", "harness-broker");
+  return path27.join(home, ".codexhost", "harness-broker");
 }
 function defaultHarnessBrokerDescriptorPath(environment = process.env, harnessId = "claude-code") {
   harnessPluginIdSchema.parse(harnessId);
   if (harnessId !== "claude-code")
-    return path26.join(defaultHarnessBrokerDirectory(environment), `${harnessId}-broker-v1.json`);
-  return environment[HARNESS_BROKER_DESCRIPTOR_ENV] ?? path26.join(defaultHarnessBrokerDirectory(environment), HARNESS_BROKER_DESCRIPTOR_FILE);
+    return path27.join(defaultHarnessBrokerDirectory(environment), `${harnessId}-broker-v1.json`);
+  return environment[HARNESS_BROKER_DESCRIPTOR_ENV] ?? path27.join(defaultHarnessBrokerDirectory(environment), HARNESS_BROKER_DESCRIPTOR_FILE);
 }
 function defaultHarnessBrokerSocketPath(environment = process.env, harnessId = "claude-code") {
   harnessPluginIdSchema.parse(harnessId);
   if (harnessId !== "claude-code")
-    return path26.join(defaultHarnessBrokerDirectory(environment), `${harnessId}-broker-v1.sock`);
-  return path26.join(defaultHarnessBrokerDirectory(environment), HARNESS_BROKER_SOCKET_FILE);
+    return path27.join(defaultHarnessBrokerDirectory(environment), `${harnessId}-broker-v1.sock`);
+  return path27.join(defaultHarnessBrokerDirectory(environment), HARNESS_BROKER_SOCKET_FILE);
 }
 
 // packages/harness-broker/dist/validation.js
@@ -37357,7 +37404,7 @@ var harnessOutputSchema = external_exports.custom((value2) => {
 import { randomBytes as randomBytes3, randomUUID as randomUUID15 } from "node:crypto";
 import { chmod as chmod5, lstat as lstat9, mkdir as mkdir11, open as open8, readFile as readFile10, rename as rename8, rm as rm11 } from "node:fs/promises";
 import net4, {} from "node:net";
-import path27 from "node:path";
+import path28 from "node:path";
 function harnessError(message, retryable = true) {
   return { code: "unavailable", message, retryable, stage: "harnessBroker" };
 }
@@ -37480,13 +37527,13 @@ async function prepareUnixSocketPath(socketPath) {
 }
 async function startHarnessBrokerServer(input) {
   harnessPluginIdSchema.parse(input.adapter.harnessId);
-  if (process.platform !== "win32" && path27.dirname(input.descriptorPath) !== path27.dirname(input.socketPath)) {
+  if (process.platform !== "win32" && path28.dirname(input.descriptorPath) !== path28.dirname(input.socketPath)) {
     throw new Error("Harness broker descriptor and socket must share one private directory");
   }
   if (process.platform === "darwin" && Buffer.byteLength(input.socketPath) > 103) {
     throw new Error("Harness broker Unix socket path is too long for macOS");
   }
-  await privateDirectory(path27.dirname(input.descriptorPath));
+  await privateDirectory(path28.dirname(input.descriptorPath));
   await assertNoLiveDescriptor(input.descriptorPath);
   if (process.platform !== "win32")
     await prepareUnixSocketPath(input.socketPath);