@codexhost/cli-linux-arm64 0.3.5

package/app/desktop-controller.mjs

@@ -0,0 +1,1888 @@
+// packages/desktop-control/src/production-controller.ts
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+
+// packages/desktop-control/src/controller-attachment-server.ts
+import { createServer } from "node:net";
+var MAX_REQUEST_BYTES = 96;
+function validPort(value) {
+  return Number.isInteger(value) && value >= 1 && value <= 65535;
+}
+function validNonce(value) {
+  return /^[0-9a-f]{32}$/.test(value);
+}
+function closeServer(server) {
+  return new Promise((resolve, reject) => {
+    server.close((error) => {
+      if (error) reject(error);
+      else resolve();
+    });
+  });
+}
+function respond(socket, value) {
+  socket.end(`${value}
+`);
+}
+async function startControllerAttachmentServer(options) {
+  if (!validPort(options.port)) throw new Error("attachment port must be a valid TCP port");
+  if (!validNonce(options.nonce)) {
+    throw new Error("attachment nonce must be 32 lowercase hexadecimal characters");
+  }
+  const sockets = /* @__PURE__ */ new Set();
+  const server = createServer((socket) => {
+    sockets.add(socket);
+    socket.once("close", () => sockets.delete(socket));
+    socket.setEncoding("utf8");
+    socket.setTimeout(5e3, () => socket.destroy());
+    let request = "";
+    let handled = false;
+    socket.on("data", (chunk) => {
+      if (handled) return;
+      request += chunk;
+      if (request.length > MAX_REQUEST_BYTES) {
+        handled = true;
+        respond(socket, "rejected");
+        return;
+      }
+      const newline = request.indexOf("\n");
+      if (newline < 0) return;
+      handled = true;
+      const line = request.slice(0, newline).replace(/\r$/, "");
+      if (line === `ATTACH ${options.nonce}`) {
+        void options.attach().then(
+          () => respond(socket, "ready"),
+          () => respond(socket, "failed")
+        );
+        return;
+      }
+      respond(socket, "rejected");
+    });
+  });
+  await new Promise((resolve, reject) => {
+    const onError = (error) => reject(error);
+    server.once("error", onError);
+    server.listen(options.port, "127.0.0.1", () => {
+      server.off("error", onError);
+      resolve();
+    });
+  });
+  let closed = false;
+  return {
+    async close() {
+      if (closed) return;
+      closed = true;
+      for (const socket of sockets) socket.destroy();
+      await closeServer(server);
+    }
+  };
+}
+
+// packages/desktop-control/src/cdp-client.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function nonEmptyString(value, field) {
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(`CDP target '${field}' must be non-empty text`);
+  }
+  return value;
+}
+function loopbackUrl(value, protocols) {
+  const url = new URL(value);
+  if (!protocols.includes(url.protocol)) {
+    throw new Error(`CDP endpoint must use ${protocols.join(" or ")}`);
+  }
+  if (!["127.0.0.1", "localhost", "[::1]"].includes(url.hostname)) {
+    throw new Error("CDP endpoint must use a loopback host");
+  }
+  return url;
+}
+function parseTarget(value) {
+  if (!isRecord(value)) throw new Error("CDP target must be an object");
+  const target = {
+    id: nonEmptyString(value.id, "id"),
+    type: nonEmptyString(value.type, "type"),
+    title: typeof value.title === "string" ? value.title : "",
+    url: nonEmptyString(value.url, "url"),
+    webSocketDebuggerUrl: nonEmptyString(value.webSocketDebuggerUrl, "webSocketDebuggerUrl")
+  };
+  loopbackUrl(target.webSocketDebuggerUrl, ["ws:", "wss:"]);
+  return target;
+}
+function defaultFetch(url) {
+  return fetch(url);
+}
+function defaultSocketFactory(url) {
+  return new WebSocket(url);
+}
+function messageText(value) {
+  if (typeof value === "string") return value;
+  if (value instanceof ArrayBuffer) return new TextDecoder().decode(value);
+  if (ArrayBuffer.isView(value)) {
+    return new TextDecoder().decode(
+      new Uint8Array(value.buffer, value.byteOffset, value.byteLength)
+    );
+  }
+  throw new Error("CDP WebSocket returned a non-text message");
+}
+function parseResponse(value) {
+  if (!isRecord(value) || typeof value.id !== "number") return null;
+  const response = { id: value.id };
+  if ("result" in value) response.result = value.result;
+  if (isRecord(value.error)) {
+    response.error = {
+      ...typeof value.error.code === "number" ? { code: value.error.code } : {},
+      ...typeof value.error.message === "string" ? { message: value.error.message } : {}
+    };
+  }
+  return response;
+}
+async function listCdpTargets(endpoint, fetchImpl = defaultFetch) {
+  const baseUrl = loopbackUrl(endpoint, ["http:", "https:"]);
+  const targetsUrl = new URL("/json/list", baseUrl).toString();
+  const response = await fetchImpl(targetsUrl);
+  if (!response.ok) throw new Error(`CDP target discovery failed with HTTP ${response.status}`);
+  const value = await response.json();
+  if (!Array.isArray(value)) throw new Error("CDP target discovery did not return an array");
+  return value.map(parseTarget);
+}
+var CdpClient = class _CdpClient {
+  #commandTimeoutMs;
+  #socket;
+  #closed = false;
+  #nextId = 1;
+  #pending = /* @__PURE__ */ new Map();
+  #listeners = /* @__PURE__ */ new Map();
+  constructor(socket, commandTimeoutMs) {
+    this.#socket = socket;
+    this.#commandTimeoutMs = commandTimeoutMs;
+    socket.addEventListener("message", (event) => this.#onMessage(event));
+    socket.addEventListener("error", () => this.#fail(new Error("CDP WebSocket failed")));
+    socket.addEventListener("close", () => this.#fail(new Error("CDP WebSocket closed")));
+  }
+  static async connect(url, options = {}) {
+    loopbackUrl(url, ["ws:", "wss:"]);
+    const socketFactory = options.socketFactory ?? defaultSocketFactory;
+    const socket = socketFactory(url);
+    const connectTimeoutMs = options.connectTimeoutMs ?? 1e4;
+    await new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        cleanup();
+        socket.close();
+        reject(new Error("CDP WebSocket connection timed out"));
+      }, connectTimeoutMs);
+      const onOpen = () => {
+        cleanup();
+        resolve();
+      };
+      const onError = () => {
+        cleanup();
+        reject(new Error("CDP WebSocket connection failed"));
+      };
+      const cleanup = () => {
+        clearTimeout(timeout);
+        socket.removeEventListener("open", onOpen);
+        socket.removeEventListener("error", onError);
+      };
+      socket.addEventListener("open", onOpen);
+      socket.addEventListener("error", onError);
+    });
+    return new _CdpClient(socket, options.commandTimeoutMs ?? 1e4);
+  }
+  command(method, params = {}) {
+    return this.#send(method, params);
+  }
+  sessionCommand(sessionId, method, params = {}) {
+    if (sessionId.length === 0) return Promise.reject(new Error("CDP session ID is required"));
+    return this.#send(method, params, sessionId);
+  }
+  on(method, listener) {
+    const listeners = this.#listeners.get(method) ?? /* @__PURE__ */ new Set();
+    listeners.add(listener);
+    this.#listeners.set(method, listeners);
+    return () => {
+      listeners.delete(listener);
+      if (listeners.size === 0) this.#listeners.delete(method);
+    };
+  }
+  #send(method, params, sessionId) {
+    if (this.#closed) return Promise.reject(new Error("CDP client is closed"));
+    const id = this.#nextId++;
+    return new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        this.#pending.delete(id);
+        reject(new Error(`CDP command '${method}' timed out`));
+      }, this.#commandTimeoutMs);
+      this.#pending.set(id, { resolve, reject, timeout });
+      try {
+        this.#socket.send(
+          JSON.stringify({ id, method, params, ...sessionId ? { sessionId } : {} })
+        );
+      } catch (error) {
+        clearTimeout(timeout);
+        this.#pending.delete(id);
+        reject(error instanceof Error ? error : new Error(String(error)));
+      }
+    });
+  }
+  async evaluate(expression) {
+    const response = await this.command("Runtime.evaluate", {
+      expression,
+      awaitPromise: true,
+      returnByValue: true
+    });
+    if (!isRecord(response)) throw new Error("Runtime.evaluate returned an invalid result");
+    if (isRecord(response.exceptionDetails)) {
+      const text = typeof response.exceptionDetails.text === "string" ? response.exceptionDetails.text : "Renderer evaluation failed";
+      throw new Error(text);
+    }
+    if (!isRecord(response.result) || !("value" in response.result)) {
+      throw new Error("Runtime.evaluate did not return a value");
+    }
+    return response.result.value;
+  }
+  close() {
+    if (this.#closed) return;
+    this.#closed = true;
+    this.#fail(new Error("CDP client closed"));
+    this.#listeners.clear();
+    this.#socket.close();
+  }
+  #onMessage(event) {
+    try {
+      const value = JSON.parse(messageText(event.data));
+      const response = parseResponse(value);
+      if (!response) {
+        if (!isRecord(value) || typeof value.method !== "string") return;
+        const sessionId = typeof value.sessionId === "string" ? value.sessionId : void 0;
+        for (const listener of this.#listeners.get(value.method) ?? []) {
+          listener(value.params, sessionId);
+        }
+        return;
+      }
+      const pending = this.#pending.get(response.id);
+      if (!pending) return;
+      clearTimeout(pending.timeout);
+      this.#pending.delete(response.id);
+      if (response.error) {
+        const code = response.error.code === void 0 ? "unknown" : String(response.error.code);
+        pending.reject(
+          new Error(response.error.message ?? `CDP command failed with error ${code}`)
+        );
+      } else {
+        pending.resolve(response.result);
+      }
+    } catch (error) {
+      this.#fail(error instanceof Error ? error : new Error(String(error)));
+    }
+  }
+  #fail(error) {
+    for (const pending of this.#pending.values()) {
+      clearTimeout(pending.timeout);
+      pending.reject(error);
+    }
+    this.#pending.clear();
+  }
+};
+
+// packages/desktop-control/src/main-process-title-policy.ts
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function resultRecord(value, command) {
+  if (!isRecord2(value)) throw new Error(`${command} returned an invalid result`);
+  if (isRecord2(value.exceptionDetails)) {
+    const exception = value.exceptionDetails.exception;
+    const description = isRecord2(exception) ? exception.description : null;
+    const text = value.exceptionDetails.text;
+    throw new Error(
+      typeof description === "string" ? description : typeof text === "string" ? text : `${command} failed`
+    );
+  }
+  return value;
+}
+function remoteObjectId(value, label) {
+  if (!isRecord2(value) || typeof value.objectId !== "string") {
+    throw new Error(`${label} is unavailable`);
+  }
+  return value.objectId;
+}
+function properties(value, command) {
+  const result = resultRecord(value, command).result;
+  if (!Array.isArray(result)) throw new Error(`${command} returned invalid properties`);
+  return result.filter(isRecord2);
+}
+var ELECTRON_MODULE_EXPRESSION = `(() => {
+  const mainModule = process.mainModule;
+  if (mainModule != null && typeof mainModule.require === 'function') {
+    return mainModule.require('electron');
+  }
+  const { createRequire } = process.getBuiltinModule('module');
+  return createRequire(process.execPath)('electron');
+})()`;
+var CONNECT_APP_HOST_CHANNEL = "codex_desktop:connect-app-host";
+var POLICY_STATE_SYMBOL = "codexhost.main-process-title-policy.v1";
+var SERVICE_OWNER_SYMBOL = "codexhost.main-process-title-policy.owner.v1";
+var RENDERER_READY_EXPRESSION = "(() => { Object.defineProperty(window, '__codexhostMainProcessTitlePolicyV1', { configurable: true, value: { state: 'ready' } }); return 'ready'; })()";
+var INSTALL_POLICY_FUNCTION = `async function (rendererWebContentsId) {
+  const mainModule = process.mainModule;
+  const electron = mainModule != null && typeof mainModule.require === 'function'
+    ? mainModule.require('electron')
+    : process.getBuiltinModule('module').createRequire(process.execPath)('electron');
+  const selected = electron.webContents.fromId(rendererWebContentsId);
+  if (selected == null || selected.isDestroyed() || selected.getType() !== 'window') {
+    throw new Error('Owned Renderer unavailable for title policy');
+  }
+
+  const context = this(selected);
+  if (context == null || typeof context.createAppHost !== 'function') {
+    throw new Error('WindowContext unavailable for title policy');
+  }
+  const stateSymbol = Symbol.for(${JSON.stringify(POLICY_STATE_SYMBOL)});
+  const ownerSymbol = Symbol.for(${JSON.stringify(SERVICE_OWNER_SYMBOL)});
+  globalThis[stateSymbol]?.dispose?.();
+
+  const originalCreateAppHost = context.createAppHost;
+  const sampleHost = originalCreateAppHost.call(context, selected);
+  const sampleService = sampleHost?.services?.threadMetadataGeneration;
+  const servicePrototype = sampleService == null ? null : Object.getPrototypeOf(sampleService);
+  const originalGenerateTitle = servicePrototype?.generateTitle;
+  if (
+    servicePrototype == null ||
+    typeof originalGenerateTitle !== 'function' ||
+    !Function.prototype.toString.call(originalGenerateTitle).includes('Failed to generate thread title')
+  ) {
+    throw new Error('ThreadMetadataGenerationService signature mismatch');
+  }
+  const counters = {
+    codexTitleCalls: 0,
+    piTitleSkips: 0,
+    externalTitleSkips: 0,
+    ambiguousTitleSkips: 0,
+  };
+  const ownedWebContentsIds = new Set();
+  const ownService = (service, contents) => {
+    const existingOwner = service[ownerSymbol];
+    if (existingOwner != null && existingOwner !== contents) {
+      throw new Error('Thread metadata service ownership mismatch');
+    }
+    if (existingOwner == null) {
+      Object.defineProperty(service, ownerSymbol, { value: contents });
+    }
+    ownedWebContentsIds.add(contents.id);
+  };
+  ownService(sampleService, selected);
+  const wrappedCreateAppHost = function (contents) {
+    const host = originalCreateAppHost.call(this, contents);
+    const service = host?.services?.threadMetadataGeneration;
+    if (service != null) ownService(service, contents);
+    return host;
+  };
+  const wrappedGenerateTitle = async function (params) {
+    const owner = this[ownerSymbol];
+    if (owner == null || owner.isDestroyed()) {
+      counters.ambiguousTitleSkips += 1;
+      return null;
+    }
+    let selection = null;
+    try {
+      selection = await owner.executeJavaScript(
+        "window.__codexhostRendererBindingProbeV1?.lockedSelection() ?? null",
+        true,
+      );
+    } catch {}
+    if (selection?.phase !== 'locked') {
+      counters.ambiguousTitleSkips += 1;
+      return null;
+    }
+    if (selection.agent === 'pi') {
+      counters.piTitleSkips += 1;
+      return null;
+    }
+    if (selection.agent !== 'codex') {
+      counters.externalTitleSkips += 1;
+      return null;
+    }
+    counters.codexTitleCalls += 1;
+    return originalGenerateTitle.call(this, params);
+  };
+
+  context.createAppHost = wrappedCreateAppHost;
+  servicePrototype.generateTitle = wrappedGenerateTitle;
+  const state = {
+    counters,
+    ownedWebContentsIds,
+    dispose() {
+      if (context.createAppHost === wrappedCreateAppHost) {
+        context.createAppHost = originalCreateAppHost;
+      }
+      if (servicePrototype.generateTitle === wrappedGenerateTitle) {
+        servicePrototype.generateTitle = originalGenerateTitle;
+      }
+      if (globalThis[stateSymbol] === state) delete globalThis[stateSymbol];
+    },
+  };
+  globalThis[stateSymbol] = state;
+  return {
+    state: 'ready',
+    reason: 'ready',
+    requiresRendererReload: true,
+  };
+}`;
+async function installMainProcessTitlePolicy(inspector, rendererWebContentsId) {
+  if (!Number.isInteger(rendererWebContentsId) || rendererWebContentsId <= 0) {
+    throw new Error("Renderer webContents ID must be a positive integer");
+  }
+  const listenerResponse = resultRecord(
+    await inspector.command("Runtime.evaluate", {
+      expression: `(${ELECTRON_MODULE_EXPRESSION}).ipcMain.listeners(${JSON.stringify(
+        CONNECT_APP_HOST_CHANNEL
+      )})[0]`
+    }),
+    "Runtime.evaluate"
+  );
+  const listener = listenerResponse.result;
+  const listenerId = remoteObjectId(listener, "connect-app-host listener");
+  const listenerProperties = resultRecord(
+    await inspector.command("Runtime.getProperties", { objectId: listenerId }),
+    "Runtime.getProperties"
+  );
+  const internalProperties = listenerProperties.internalProperties;
+  if (!Array.isArray(internalProperties)) {
+    throw new Error("connect-app-host listener scopes are unavailable");
+  }
+  const scopes = internalProperties.find(
+    (property) => isRecord2(property) && property.name === "[[Scopes]]"
+  );
+  const scopesId = remoteObjectId(
+    isRecord2(scopes) ? scopes.value : null,
+    "connect-app-host listener scopes"
+  );
+  const scopeProperties = properties(
+    await inspector.command("Runtime.getProperties", {
+      objectId: scopesId,
+      ownProperties: true
+    }),
+    "Runtime.getProperties"
+  );
+  const localScope = scopeProperties.find((property) => property.name === "0");
+  const localScopeId = remoteObjectId(localScope?.value, "connect-app-host local scope");
+  const localProperties = properties(
+    await inspector.command("Runtime.getProperties", {
+      objectId: localScopeId,
+      ownProperties: true
+    }),
+    "Runtime.getProperties"
+  );
+  const getContext = localProperties.find(
+    (property) => property.name === "f" && typeof property.value?.objectId === "string"
+  );
+  const getContextId = remoteObjectId(getContext?.value, "getContextForWebContents");
+  const installPromise = resultRecord(
+    await inspector.command("Runtime.callFunctionOn", {
+      objectId: getContextId,
+      functionDeclaration: INSTALL_POLICY_FUNCTION,
+      arguments: [{ value: rendererWebContentsId }]
+    }),
+    "Runtime.callFunctionOn"
+  );
+  const promiseObjectId = remoteObjectId(
+    installPromise.result,
+    "Main-process title policy installation promise"
+  );
+  const installResponse = resultRecord(
+    await inspector.command("Runtime.awaitPromise", {
+      promiseObjectId,
+      returnByValue: true
+    }),
+    "Runtime.awaitPromise"
+  );
+  const remoteResult = installResponse.result;
+  const value = isRecord2(remoteResult) ? remoteResult.value : null;
+  if (!isRecord2(value) || value.state !== "ready" || value.reason !== "ready" || value.requiresRendererReload !== true || Object.keys(value).length !== 3) {
+    throw new Error("Main-process title policy returned an invalid status");
+  }
+  return value;
+}
+async function markRendererTitlePolicyReady(inspector, rendererWebContentsId) {
+  if (!Number.isInteger(rendererWebContentsId) || rendererWebContentsId <= 0) {
+    throw new Error("Renderer webContents ID must be a positive integer");
+  }
+  const value = await inspector.evaluate(`(async () => {
+    const state = globalThis[Symbol.for(${JSON.stringify(POLICY_STATE_SYMBOL)})];
+    if (state == null) throw new Error('Main-process title policy is unavailable');
+    const mainModule = process.mainModule;
+    const electron = mainModule != null && typeof mainModule.require === 'function'
+      ? mainModule.require('electron')
+      : process.getBuiltinModule('module').createRequire(process.execPath)('electron');
+    const selected = electron.webContents.fromId(${rendererWebContentsId});
+    if (selected == null || selected.isDestroyed() || selected.getType() !== 'window') {
+      throw new Error('Owned Renderer unavailable for title policy readiness');
+    }
+    if (!state.ownedWebContentsIds.has(selected.id)) {
+      throw new Error('Renderer metadata service ownership is unavailable');
+    }
+    const marker = selected.executeJavaScript(
+      ${JSON.stringify(RENDERER_READY_EXPRESSION)},
+      true,
+    );
+    const markerTimeout = new Promise((_, reject) => {
+      setTimeout(() => reject(new Error('Renderer readiness marker timed out')), 2_000);
+    });
+    await Promise.race([marker, markerTimeout]);
+    return { state: 'ready', reason: 'owned-metadata-service' };
+  })()`);
+  if (!isRecord2(value) || value.state !== "ready" || value.reason !== "owned-metadata-service") {
+    throw new Error("Renderer title policy returned an invalid readiness status");
+  }
+  return value;
+}
+async function readMainProcessTitlePolicyCounters(inspector) {
+  const value = await inspector.evaluate(`(() => {
+    const state = globalThis[Symbol.for(${JSON.stringify(POLICY_STATE_SYMBOL)})];
+    return state == null ? null : { ...state.counters };
+  })()`);
+  if (value === null) return null;
+  if (!isRecord2(value) || !Number.isInteger(value.codexTitleCalls) || !Number.isInteger(value.piTitleSkips) || !Number.isInteger(value.externalTitleSkips) || !Number.isInteger(value.ambiguousTitleSkips)) {
+    throw new Error("Main-process title policy returned invalid counters");
+  }
+  return value;
+}
+
+// packages/desktop-control/src/renderer-draft-prewarm-runtime.ts
+function installDraftPrewarmPolicyBridge(manager, bridge, hostId, target, prewarmedThreadManager) {
+  const existing = target.__codexhostDraftPrewarmPolicyV1;
+  if (existing?.owns?.length === 4 && existing.owns(manager, bridge, hostId, prewarmedThreadManager) === true) {
+    return { state: "ready", reason: "owned-request-bridge" };
+  }
+  existing?.dispose?.();
+  const originalSend = bridge.sendRequest;
+  const originalPrewarm = bridge.prewarmThreadStart;
+  const originalOnNotification = manager.onNotification;
+  const originalDispatchAppServerResponse = manager.dispatchAppServerResponse;
+  let selectedModel = null;
+  const isRecord5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+  const isRemoteControlHost = hostId.startsWith("remote-control:");
+  const knownExternalThreadIds = /* @__PURE__ */ new Set();
+  const knownOfficialThreadIds = /* @__PURE__ */ new Set();
+  const threadOwnershipResolutions = /* @__PURE__ */ new Map();
+  const createBridgeProcessHandle = () => `codexhost-${typeof crypto?.randomUUID === "function" ? crypto.randomUUID() : `${Date.now()}-${Math.random().toString(16).slice(2)}`}`;
+  let bridgeProcessHandle = createBridgeProcessHandle();
+  const bridgeReadyMethod = "codexhost/remote-control-bridge/ready";
+  const bridgeRequests = /* @__PURE__ */ new Map();
+  const bridgeServerRequestIdPrefix = "codexhost/remote-control-bridge/server-request/";
+  const bridgeServerRequests = /* @__PURE__ */ new Map();
+  let nextBridgeServerRequestOrdinal = 1;
+  let outputDecoders = {
+    stdout: new TextDecoder(),
+    stderr: new TextDecoder()
+  };
+  const outputBuffers = { stdout: "", stderr: "" };
+  let bridgeState = "idle";
+  let bridgeReadyPromise = null;
+  let bridgeReadyResolve = null;
+  let bridgeReadyReject = null;
+  let bridgeReadyTimeout = null;
+  let bridgeInitialization = null;
+  let writeTail = Promise.resolve();
+  const transportError = (message, cause) => {
+    const error = new Error(`codexhost Remote Control bridge: ${message}`);
+    if (cause !== void 0) Object.assign(error, { cause });
+    return error;
+  };
+  const utf8Base64 = (value) => {
+    const bytes = new TextEncoder().encode(value);
+    let binary = "";
+    for (let index = 0; index < bytes.length; index += 32768) {
+      binary += String.fromCharCode(...bytes.subarray(index, index + 32768));
+    }
+    return btoa(binary);
+  };
+  const utf16LeBase64 = (value) => {
+    let binary = "";
+    for (let index = 0; index < value.length; index += 1) {
+      const codeUnit = value.charCodeAt(index);
+      binary += String.fromCharCode(codeUnit & 255, codeUnit >>> 8);
+    }
+    return btoa(binary);
+  };
+  const failBridge = (cause, terminateProcess = true) => {
+    if (bridgeState === "failed" || bridgeState === "disposed") return;
+    const failedProcessHandle = bridgeProcessHandle;
+    const terminate = terminateProcess && (bridgeState === "starting" || bridgeState === "ready");
+    bridgeState = "failed";
+    if (bridgeReadyTimeout !== null) globalThis.clearTimeout(bridgeReadyTimeout);
+    bridgeReadyTimeout = null;
+    const stderr = outputBuffers.stderr.trim().slice(-1e3);
+    const error = transportError(
+      `${cause instanceof Error ? cause.message : String(cause)}${stderr ? `; ${stderr}` : ""}`,
+      cause
+    );
+    bridgeReadyReject?.(error);
+    bridgeReadyReject = null;
+    bridgeReadyResolve = null;
+    for (const requestId of bridgeRequests.keys()) bridge.onError(requestId, error);
+    bridgeRequests.clear();
+    if (isRemoteControlHost && terminate) {
+      void Promise.resolve(
+        originalSend.call(bridge, "process/kill", { processHandle: failedProcessHandle })
+      ).catch(() => void 0);
+    }
+  };
+  const resetFailedBridge = () => {
+    if (bridgeState !== "failed") return;
+    bridgeProcessHandle = createBridgeProcessHandle();
+    outputDecoders = { stdout: new TextDecoder(), stderr: new TextDecoder() };
+    outputBuffers.stdout = "";
+    outputBuffers.stderr = "";
+    bridgeReadyPromise = null;
+    bridgeReadyResolve = null;
+    bridgeReadyReject = null;
+    bridgeInitialization = null;
+    writeTail = Promise.resolve();
+    bridgeServerRequests.clear();
+    nextBridgeServerRequestOrdinal = 1;
+    bridgeState = "idle";
+  };
+  const rememberExternalThread = (value) => {
+    if (!isRecord5(value) || typeof value.id !== "string") return;
+    if (value.modelProvider === "codexhost" || value.cliVersion === "codexhost") {
+      knownExternalThreadIds.add(value.id);
+      knownOfficialThreadIds.delete(value.id);
+    }
+  };
+  const observeBridgeResult = (request, result) => {
+    if (!request || !isRecord5(result)) return;
+    if (request.method === "thread/list" && Array.isArray(result.data)) {
+      for (const thread of result.data) rememberExternalThread(thread);
+      return;
+    }
+    if (request.method === "thread/start" || request.method === "thread/read" || request.method === "thread/resume") {
+      rememberExternalThread(result.thread);
+      return;
+    }
+    if (request.method === "codexhost/thread/inspect" && isRecord5(request.parameters) && typeof request.parameters.threadId === "string") {
+      if (result.owner === "external") {
+        knownExternalThreadIds.add(request.parameters.threadId);
+        knownOfficialThreadIds.delete(request.parameters.threadId);
+      } else if (result.owner === "codex") {
+        knownOfficialThreadIds.add(request.parameters.threadId);
+        knownExternalThreadIds.delete(request.parameters.threadId);
+      }
+      return;
+    }
+    if (request.method === "thread/delete" && isRecord5(request.parameters) && typeof request.parameters.threadId === "string") {
+      knownExternalThreadIds.delete(request.parameters.threadId);
+      knownOfficialThreadIds.delete(request.parameters.threadId);
+    }
+  };
+  const handleBridgeFrame = (value) => {
+    if (!isRecord5(value)) {
+      failBridge("received a non-object app-server frame");
+      return;
+    }
+    if (value.method === bridgeReadyMethod && value.id === void 0) {
+      if (isRecord5(value.params) && value.params.protocolVersion === 1) {
+        bridgeState = "ready";
+        if (bridgeReadyTimeout !== null) globalThis.clearTimeout(bridgeReadyTimeout);
+        bridgeReadyTimeout = null;
+        bridgeReadyResolve?.();
+        bridgeReadyResolve = null;
+        bridgeReadyReject = null;
+      } else {
+        failBridge("reported an unsupported protocol version");
+      }
+      return;
+    }
+    if (typeof value.method === "string" && value.id === void 0) {
+      if (value.method === "thread/started" && isRecord5(value.params)) {
+        rememberExternalThread(value.params.thread);
+      }
+      originalOnNotification.call(manager, value.method, value.params);
+      return;
+    }
+    if (typeof value.method === "string" && value.id !== void 0) {
+      const outerRequestId = `${bridgeServerRequestIdPrefix}${bridgeProcessHandle}/${nextBridgeServerRequestOrdinal}`;
+      nextBridgeServerRequestOrdinal += 1;
+      bridgeServerRequests.set(outerRequestId, value.id);
+      manager.onRequest({ ...value, id: outerRequestId });
+      return;
+    }
+    if (value.id === void 0) {
+      failBridge("received an app-server response without an id");
+      return;
+    }
+    const request = bridgeRequests.get(value.id);
+    bridgeRequests.delete(value.id);
+    if ("error" in value) {
+      bridge.onError(value.id, value.error, value.metrics);
+      return;
+    }
+    observeBridgeResult(request, value.result);
+    bridge.onResult(value.id, value.result, value.metrics);
+  };
+  const consumeBridgeOutput = (stream, base64) => {
+    const binary = atob(base64);
+    const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    outputBuffers[stream] += outputDecoders[stream].decode(bytes, { stream: true });
+    if (stream === "stderr") {
+      outputBuffers.stderr = outputBuffers.stderr.slice(-4e3);
+      return;
+    }
+    while (true) {
+      const newline = outputBuffers.stdout.indexOf("\n");
+      if (newline < 0) break;
+      const line = outputBuffers.stdout.slice(0, newline).trim();
+      outputBuffers.stdout = outputBuffers.stdout.slice(newline + 1);
+      if (!line) continue;
+      try {
+        handleBridgeFrame(JSON.parse(line));
+      } catch (error) {
+        failBridge(
+          `emitted invalid JSON: ${error instanceof Error ? error.message : String(error)}`
+        );
+        return;
+      }
+    }
+  };
+  const handleOuterNotification = (method, parameters) => {
+    if (method === "process/exited" && isRecord5(parameters) && parameters.processHandle === bridgeProcessHandle) {
+      const exitCode = typeof parameters.exitCode === "number" ? parameters.exitCode : "unknown";
+      const stderr = typeof parameters.stderr === "string" ? parameters.stderr.trim() : "";
+      failBridge(
+        `process exited unexpectedly with code ${exitCode}${stderr ? `: ${stderr}` : ""}`,
+        false
+      );
+      return true;
+    }
+    if (method !== "process/outputDelta" || !isRecord5(parameters) || parameters.processHandle !== bridgeProcessHandle || parameters.stream !== "stdout" && parameters.stream !== "stderr" || typeof parameters.deltaBase64 !== "string") {
+      return false;
+    }
+    if (parameters.capReached === true) {
+      failBridge(`${parameters.stream} was truncated`);
+      return true;
+    }
+    consumeBridgeOutput(parameters.stream, parameters.deltaBase64);
+    return true;
+  };
+  const startBridge = () => {
+    if (!isRemoteControlHost) return Promise.resolve();
+    if (bridgeReadyPromise) return bridgeReadyPromise;
+    bridgeState = "starting";
+    bridgeReadyPromise = new Promise((resolve, reject) => {
+      bridgeReadyResolve = resolve;
+      bridgeReadyReject = reject;
+    });
+    bridgeReadyTimeout = globalThis.setTimeout(
+      () => failBridge("startup timed out after 15000ms"),
+      15e3
+    );
+    const powershellScript = "$ErrorActionPreference = 'Stop'; $descriptorPath = Join-Path $env:LOCALAPPDATA 'codexhost\\remote-control-bridge-v1.json'; $descriptor = Get-Content -LiteralPath $descriptorPath -Raw | ConvertFrom-Json; if ($descriptor.schemaVersion -ne 1) { throw 'Unsupported codexhost Remote Control descriptor' }; $nodePath = [string]$descriptor.nodePath; $runtimePath = [string]$descriptor.runtimePath; if (-not [System.IO.Path]::IsPathRooted($nodePath) -or -not [System.IO.Path]::IsPathRooted($runtimePath)) { throw 'Invalid codexhost Remote Control runtime path' }; $owner = Get-Process -Id ([int]$descriptor.ownerPid) -ErrorAction SilentlyContinue; if ($null -eq $owner) { throw 'CodexHost Remote Control runtime is not running' }; $env:CODEXHOST_REMOTE_CONTROL_BRIDGE_PIPE = [string]$descriptor.pipePath; & $nodePath $runtimePath '--codexhost-remote-control-bridge'; exit $LASTEXITCODE";
+    const command = [
+      "powershell.exe",
+      "-NoLogo",
+      "-NoProfile",
+      "-NonInteractive",
+      "-EncodedCommand",
+      utf16LeBase64(powershellScript)
+    ];
+    const startedProcessHandle = bridgeProcessHandle;
+    try {
+      const started = originalSend.call(bridge, "process/spawn", {
+        command,
+        processHandle: startedProcessHandle,
+        cwd: "C:\\",
+        streamStdin: true,
+        streamStdoutStderr: true,
+        outputBytesCap: null,
+        timeoutMs: null
+      });
+      void Promise.resolve(started).catch((error) => {
+        if (bridgeProcessHandle === startedProcessHandle) failBridge(error, false);
+      });
+    } catch (error) {
+      failBridge(error);
+    }
+    return bridgeReadyPromise;
+  };
+  const writeBridgeFrame = (value) => {
+    const operation = async () => {
+      await startBridge();
+      if (bridgeState !== "ready") throw transportError("is not ready");
+      await originalSend.call(bridge, "process/writeStdin", {
+        processHandle: bridgeProcessHandle,
+        deltaBase64: utf8Base64(`${JSON.stringify(value)}
+`)
+      });
+    };
+    const next = writeTail.then(operation, operation);
+    writeTail = next.catch(() => void 0);
+    return next;
+  };
+  const enqueueBridgeRequest = (method, parameters, options) => bridge.enqueueRequest(method, parameters, options, (request) => {
+    bridgeRequests.set(request.id, { method, parameters });
+    void writeBridgeFrame(request).catch((error) => failBridge(error));
+  });
+  const initializeBridgeProtocol = () => {
+    const initialization = enqueueBridgeRequest("initialize", {
+      clientInfo: {
+        name: "codexhost_remote_control_bridge",
+        title: "codexhost Remote Control bridge",
+        version: "1"
+      },
+      capabilities: {
+        experimentalApi: true,
+        mcpServerOpenaiFormElicitation: true
+      }
+    });
+    return new Promise((resolve, reject) => {
+      const timeout = globalThis.setTimeout(() => {
+        const message = "initialization timed out after 15000ms";
+        failBridge(message);
+        reject(transportError(message));
+      }, 15e3);
+      void Promise.resolve(initialization).then(
+        (value) => {
+          globalThis.clearTimeout(timeout);
+          resolve(value);
+        },
+        (error) => {
+          globalThis.clearTimeout(timeout);
+          reject(error);
+        }
+      );
+    });
+  };
+  const initializeBridge = () => {
+    resetFailedBridge();
+    if (bridgeInitialization) return bridgeInitialization;
+    bridgeInitialization = startBridge().then(() => initializeBridgeProtocol()).then(() => writeBridgeFrame({ method: "initialized", params: {} }));
+    return bridgeInitialization;
+  };
+  const threadIdFromParameters = (parameters) => {
+    if (!isRecord5(parameters)) return null;
+    const value = parameters.threadId ?? parameters.conversationId;
+    return typeof value === "string" ? value : null;
+  };
+  const isThreadScopedMethod = (method) => method.startsWith("thread/") || method.startsWith("turn/") || method.startsWith("review/");
+  const resolveThreadOwnership = (threadId) => {
+    if (knownExternalThreadIds.has(threadId)) return Promise.resolve("external");
+    if (knownOfficialThreadIds.has(threadId)) return Promise.resolve("codex");
+    const pending = threadOwnershipResolutions.get(threadId);
+    if (pending) return pending;
+    const resolution = initializeBridge().then(
+      () => enqueueBridgeRequest("codexhost/thread/ownership/list", {
+        threadIds: [threadId]
+      })
+    ).then((value) => {
+      const ownerships = isRecord5(value) && Array.isArray(value.threads) ? value.threads : null;
+      const ownership = ownerships?.[0];
+      if (!ownerships || !isRecord5(ownership) || ownerships.length !== 1 || ownership.threadId !== threadId || ownership.owner !== "external" && ownership.owner !== "codex") {
+        throw transportError("Thread ownership lookup returned an invalid result");
+      }
+      if (ownership.owner === "external") {
+        knownExternalThreadIds.add(threadId);
+        knownOfficialThreadIds.delete(threadId);
+        return "external";
+      }
+      knownOfficialThreadIds.add(threadId);
+      knownExternalThreadIds.delete(threadId);
+      return "codex";
+    });
+    threadOwnershipResolutions.set(threadId, resolution);
+    const clearResolution = () => {
+      if (threadOwnershipResolutions.get(threadId) === resolution) {
+        threadOwnershipResolutions.delete(threadId);
+      }
+    };
+    void resolution.then(clearResolution, clearResolution);
+    return resolution;
+  };
+  const shouldResolveThreadOwnership = (method, parameters) => {
+    if (!isRemoteControlHost || method.startsWith("codexhost/") || !isThreadScopedMethod(method)) {
+      return null;
+    }
+    const threadId = threadIdFromParameters(parameters);
+    if (!threadId || knownExternalThreadIds.has(threadId) || knownOfficialThreadIds.has(threadId)) {
+      return null;
+    }
+    return threadId;
+  };
+  const shouldUseBridge = (method, parameters) => {
+    if (!isRemoteControlHost) return false;
+    if (method.startsWith("codexhost/")) return true;
+    if (method === "thread/list") return true;
+    if (method === "thread/start") {
+      return isRecord5(parameters) && typeof parameters.model === "string" && parameters.model.startsWith("codexhost/");
+    }
+    const threadId = threadIdFromParameters(parameters);
+    if (threadId && knownExternalThreadIds.has(threadId)) return true;
+    if (threadId && knownOfficialThreadIds.has(threadId)) return false;
+    return selectedModel !== null && (method.startsWith("thread/") || method.startsWith("turn/") || method.startsWith("review/"));
+  };
+  const routeThreadStart = (parameters) => {
+    if (selectedModel === null || !isRecord5(parameters) || parameters.ephemeral === true) {
+      return parameters;
+    }
+    return { ...parameters, model: selectedModel };
+  };
+  const routedSend = (method, parameters, options) => {
+    const routedParameters = method === "thread/start" ? routeThreadStart(parameters) : parameters;
+    const sendBridged = () => initializeBridge().then(
+      () => enqueueBridgeRequest(method, routedParameters, options)
+    );
+    const sendDirect = () => options === void 0 ? originalSend.call(bridge, method, routedParameters) : originalSend.call(bridge, method, routedParameters, options);
+    const unresolvedThreadId = shouldResolveThreadOwnership(method, routedParameters);
+    if (unresolvedThreadId) {
+      return resolveThreadOwnership(unresolvedThreadId).then(
+        (owner) => owner === "external" ? sendBridged() : sendDirect()
+      );
+    }
+    return shouldUseBridge(method, routedParameters) ? sendBridged() : sendDirect();
+  };
+  const routedPrewarm = (parameters, options) => {
+    const routedParameters = routeThreadStart(parameters);
+    if (shouldUseBridge("thread/start", routedParameters)) {
+      return routedSend("thread/start", routedParameters, options);
+    }
+    return options === void 0 ? originalPrewarm.call(bridge, routedParameters) : originalPrewarm.call(bridge, routedParameters, options);
+  };
+  bridge.sendRequest = routedSend;
+  bridge.prewarmThreadStart = routedPrewarm;
+  const routedWindowMessage = (event) => {
+    const message = event.data;
+    if (!isRecord5(message) || message.type !== "mcp-notification" || message.hostId !== hostId || typeof message.method !== "string") {
+      return;
+    }
+    handleOuterNotification(message.method, message.params);
+  };
+  const observesWindowNotifications = isRemoteControlHost && typeof target.addEventListener === "function" && typeof target.removeEventListener === "function";
+  if (observesWindowNotifications) target.addEventListener?.("message", routedWindowMessage);
+  const routedOnNotification = (method, parameters) => {
+    if (!handleOuterNotification(method, parameters)) {
+      originalOnNotification.call(manager, method, parameters);
+    }
+  };
+  const routedDispatchAppServerResponse = (method, response) => {
+    if (isRemoteControlHost && typeof response.id === "string") {
+      const innerRequestId = bridgeServerRequests.get(response.id);
+      if (innerRequestId !== void 0 || bridgeServerRequests.has(response.id)) {
+        bridgeServerRequests.delete(response.id);
+        void writeBridgeFrame({ ...response, id: innerRequestId }).catch(
+          (error) => failBridge(error)
+        );
+        return void 0;
+      }
+      if (response.id.startsWith(bridgeServerRequestIdPrefix)) return void 0;
+    }
+    return originalDispatchAppServerResponse.call(manager, method, response);
+  };
+  if (!observesWindowNotifications) manager.onNotification = routedOnNotification;
+  manager.dispatchAppServerResponse = routedDispatchAppServerResponse;
+  const policy = Object.freeze({
+    state: "ready",
+    hostId,
+    owns(candidateManager, candidate, candidateHostId, candidatePrewarmedThreadManager) {
+      return candidateManager === manager && candidate === bridge && candidateHostId === hostId && candidatePrewarmedThreadManager === prewarmedThreadManager;
+    },
+    select(model) {
+      if (model !== null && (typeof model !== "string" || !model.startsWith("codexhost/"))) {
+        throw new Error("Draft route Model must be a codexhost transport carrier");
+      }
+      if (selectedModel === model) return false;
+      selectedModel = model;
+      return true;
+    },
+    clear() {
+      prewarmedThreadManager.discardAllPrewarmedThreads();
+      return Promise.resolve();
+    },
+    dispose() {
+      if (bridge.sendRequest === routedSend) bridge.sendRequest = originalSend;
+      if (bridge.prewarmThreadStart === routedPrewarm) {
+        bridge.prewarmThreadStart = originalPrewarm;
+      }
+      if (observesWindowNotifications) {
+        target.removeEventListener?.("message", routedWindowMessage);
+      } else if (manager.onNotification === routedOnNotification) {
+        manager.onNotification = originalOnNotification;
+      }
+      if (manager.dispatchAppServerResponse === routedDispatchAppServerResponse) {
+        manager.dispatchAppServerResponse = originalDispatchAppServerResponse;
+      }
+      if (bridgeReadyTimeout !== null) globalThis.clearTimeout(bridgeReadyTimeout);
+      bridgeReadyTimeout = null;
+      if (isRemoteControlHost && (bridgeState === "starting" || bridgeState === "ready")) {
+        void Promise.resolve(
+          originalSend.call(bridge, "process/kill", { processHandle: bridgeProcessHandle })
+        ).catch(() => void 0);
+      }
+      bridgeState = "disposed";
+      const disposedError = transportError("was disposed");
+      bridgeReadyReject?.(disposedError);
+      for (const requestId of bridgeRequests.keys()) bridge.onError(requestId, disposedError);
+      bridgeRequests.clear();
+      bridgeServerRequests.clear();
+      knownExternalThreadIds.clear();
+      knownOfficialThreadIds.clear();
+      threadOwnershipResolutions.clear();
+      selectedModel = null;
+    }
+  });
+  Object.defineProperty(target, "__codexhostDraftPrewarmPolicyV1", {
+    configurable: true,
+    value: policy
+  });
+  if (typeof target.dispatchEvent === "function" && typeof CustomEvent === "function") {
+    target.dispatchEvent(new CustomEvent("codexhost:draft-prewarm-policy-changed"));
+  }
+  return { state: "ready", reason: "owned-request-bridge" };
+}
+async function installDraftPrewarmPolicyInRenderer(contents, findRequestManagerExpression, installRendererPolicyFunction) {
+  if (contents === null || contents.isDestroyed() || contents.getType() !== "window") {
+    throw new Error("Owned Renderer is unavailable for draft prewarm policy");
+  }
+  let attachedHere = false;
+  try {
+    if (!contents.debugger.isAttached()) {
+      contents.debugger.attach("1.3");
+      attachedHere = true;
+    }
+    await contents.debugger.sendCommand("Runtime.enable");
+    const managerResult = await contents.debugger.sendCommand("Runtime.evaluate", {
+      expression: findRequestManagerExpression
+    });
+    const managerResultId = managerResult.result?.objectId;
+    if (typeof managerResultId !== "string") {
+      throw new Error("Renderer request manager inspection failed");
+    }
+    const managerProperties = await contents.debugger.sendCommand("Runtime.getProperties", {
+      objectId: managerResultId,
+      ownProperties: true
+    });
+    const candidateCount = managerProperties.result?.find(
+      (property) => property.name === "candidateCount"
+    )?.value?.value;
+    const hostId = managerProperties.result?.find((property) => property.name === "hostId")?.value?.value;
+    const manager = managerProperties.result?.find(
+      (property) => property.name === "manager"
+    )?.value;
+    const requestClient = managerProperties.result?.find(
+      (property) => property.name === "requestClient"
+    )?.value;
+    const prewarmedThreadManager = managerProperties.result?.find(
+      (property) => property.name === "prewarmedThreadManager"
+    )?.value;
+    if (candidateCount !== 1 || typeof hostId !== "string" || hostId.length === 0 || typeof manager?.objectId !== "string" || typeof requestClient?.objectId !== "string") {
+      throw new Error("Renderer request manager is ambiguous");
+    }
+    if (typeof prewarmedThreadManager?.objectId !== "string") {
+      throw new Error("Renderer prewarmed Thread manager is unavailable");
+    }
+    const installed = await contents.debugger.sendCommand("Runtime.callFunctionOn", {
+      objectId: manager.objectId,
+      functionDeclaration: installRendererPolicyFunction,
+      arguments: [
+        { objectId: requestClient.objectId },
+        { value: hostId },
+        { objectId: prewarmedThreadManager.objectId }
+      ],
+      awaitPromise: true,
+      returnByValue: true
+    });
+    return installed.result?.value;
+  } finally {
+    if (attachedHere && contents.debugger.isAttached()) contents.debugger.detach();
+  }
+}
+
+// packages/desktop-control/src/renderer-draft-prewarm-policy.ts
+function selectRendererRequestManager(candidates, activeHostIds) {
+  const unique = /* @__PURE__ */ new Map();
+  for (const candidate of candidates) unique.set(candidate.manager, candidate);
+  const hosts = new Set(
+    activeHostIds.filter((value) => typeof value === "string" && value.length > 0)
+  );
+  if (hosts.size > 1) return null;
+  const activeHostId = hosts.values().next().value;
+  const eligible = [...unique.values()].filter(
+    (candidate) => activeHostId === void 0 || candidate.hostId === activeHostId
+  );
+  return eligible.length === 1 ? eligible[0] ?? null : null;
+}
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var FIND_REQUEST_MANAGER_EXPRESSION = `(() => {
+  const editors = [...document.querySelectorAll(
+    '[data-codex-composer], [contenteditable="true"][role="textbox"]',
+  )];
+  if (editors.length !== 1) {
+    return { candidateCount: 0, hostId: null, sendRequest: null };
+  }
+  let element = editors[0];
+  let fiber = null;
+  while (element != null && fiber == null) {
+    const key = Object.getOwnPropertyNames(element).find((name) =>
+      name.startsWith('__reactFiber$'),
+    );
+    if (key != null) fiber = element[key];
+    element = element.parentElement;
+  }
+  const managers = new Set();
+  const activeHostIds = new Set();
+  for (let depth = 0; fiber != null && depth < 200; depth += 1, fiber = fiber.return) {
+    const props = fiber.memoizedProps;
+    if (props != null && typeof props === 'object') {
+      for (const name of ['executionTargetHostId', 'permissionsHostId']) {
+        const value = props[name];
+        if (typeof value === 'string' && value.length > 0) activeHostIds.add(value);
+      }
+    }
+    let hook = fiber.memoizedState;
+    for (let index = 0; hook != null && index < 120; index += 1, hook = hook.next) {
+      const value = hook.memoizedState;
+      if (
+        value != null &&
+        typeof value === 'object' &&
+        value.requestClient != null &&
+        typeof value.requestClient.prewarmThreadStart === 'function' &&
+        typeof value.requestClient.sendRequest === 'function' &&
+        typeof value.requestClient.enqueueRequest === 'function' &&
+        typeof value.prewarmedThreadManager?.discardAllPrewarmedThreads === 'function' &&
+        typeof value.sendRequest === 'function'
+      ) {
+        managers.add(value);
+      }
+    }
+  }
+  const candidates = [...managers].map((manager) => {
+    const requestClient =
+      typeof manager.requestClient?.sendRequest === 'function' &&
+      typeof manager.requestClient?.prewarmThreadStart === 'function' &&
+      typeof manager.requestClient?.enqueueRequest === 'function'
+        ? manager.requestClient
+        : manager;
+    return {
+      manager,
+      requestClient,
+      hostId: manager?.getHostId?.() ?? requestClient?.hostId ?? null,
+      prewarmedThreadManager: manager?.prewarmedThreadManager ?? null,
+    };
+  });
+  const selected = (${selectRendererRequestManager.toString()})(candidates, [...activeHostIds]);
+  return {
+    candidateCount: selected == null ? candidates.length : 1,
+    hostId: selected?.hostId ?? null,
+    manager: selected?.manager ?? null,
+    requestClient: selected?.requestClient ?? null,
+    prewarmedThreadManager: selected?.prewarmedThreadManager ?? null,
+  };
+})()`;
+var INSTALL_RENDERER_POLICY_FUNCTION = `function(requestClient, hostId, prewarmedThreadManager) {
+  return (${installDraftPrewarmPolicyBridge.toString()})(
+    this,
+    requestClient,
+    hostId,
+    window,
+    prewarmedThreadManager,
+  );
+}`;
+var REQUEST_MANAGER_WAIT_TIMEOUT_MS = 6e4;
+var REQUEST_MANAGER_POLL_INTERVAL_MS = 25;
+function mainProcessInstaller(rendererWebContentsId) {
+  return `async function () {
+    const mainModule = process.mainModule;
+    const electron = mainModule != null && typeof mainModule.require === 'function'
+      ? mainModule.require('electron')
+      : process.getBuiltinModule('module').createRequire(process.execPath)('electron');
+    const contents = electron.webContents.fromId(${rendererWebContentsId});
+    return (${installDraftPrewarmPolicyInRenderer.toString()})(
+      contents,
+      ${JSON.stringify(FIND_REQUEST_MANAGER_EXPRESSION)},
+      ${JSON.stringify(INSTALL_RENDERER_POLICY_FUNCTION)}
+    );
+  }`;
+}
+async function installRendererDraftPrewarmPolicy(inspector, rendererWebContentsId) {
+  if (!Number.isInteger(rendererWebContentsId) || rendererWebContentsId <= 0) {
+    throw new Error("Renderer webContents ID must be a positive integer");
+  }
+  const installer = mainProcessInstaller(rendererWebContentsId);
+  const deadline = Date.now() + REQUEST_MANAGER_WAIT_TIMEOUT_MS;
+  while (true) {
+    try {
+      const value = await inspector.evaluate(`(${installer})()`);
+      if (!isRecord3(value) || value.state !== "ready" || value.reason !== "owned-request-bridge") {
+        throw new Error("Renderer draft prewarm policy returned an invalid status");
+      }
+      return value;
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      const remaining = deadline - Date.now();
+      if (!message.includes("Renderer request manager is ambiguous") || remaining <= 0) throw error;
+      await new Promise((resolve) => {
+        setTimeout(resolve, Math.min(REQUEST_MANAGER_POLL_INTERVAL_MS, remaining));
+      });
+    }
+  }
+}
+
+// packages/desktop-control/src/renderer-control-session.ts
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function sleep(milliseconds) {
+  return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+function sameAgents(actual, expected) {
+  return actual.length === expected.length && actual.every((agent, index) => agent === expected[index]);
+}
+var RendererAdapterReadinessError = class extends Error {
+  constructor(state, reason) {
+    super(`Production Renderer Adapter is ${state}: ${reason}`);
+    this.state = state;
+    this.reason = reason;
+    this.name = "RendererAdapterReadinessError";
+  }
+  state;
+  reason;
+};
+function validateBindingStatus(value, expectedAgents) {
+  if (!isRecord4(value) || value.version !== 2 || !Array.isArray(value.enabledAgents) || value.enabledAgents.some((agent) => typeof agent !== "string") || !sameAgents(value.enabledAgents, expectedAgents) || !isRecord4(value.adapter)) {
+    throw new Error("Production Renderer binding returned an invalid status");
+  }
+  if (value.adapter.state !== "ready" || typeof value.adapter.reason !== "string") {
+    const state = typeof value.adapter.state === "string" ? value.adapter.state : "invalid";
+    const reason = typeof value.adapter.reason === "string" ? value.adapter.reason : "unknown";
+    throw new RendererAdapterReadinessError(state, reason);
+  }
+  return value;
+}
+function selectRendererWebContents(contents, preferredRendererId) {
+  const candidates = contents.filter(
+    (item) => item.type === "window" && item.surface === "primary" && item.runtime.available && item.runtime.elementCount !== null
+  ).toSorted(
+    (left, right) => (right.runtime.elementCount ?? 0) - (left.runtime.elementCount ?? 0)
+  );
+  const preferred = candidates.find(
+    (candidate) => candidate.id === preferredRendererId && (candidate.runtime.elementCount ?? 0) > 0
+  );
+  if (preferred) return preferred;
+  return candidates.find((candidate) => (candidate.runtime.elementCount ?? 0) > 0) ?? null;
+}
+async function waitForRendererTitlePolicyReady(markReadiness, options = {}) {
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const pollIntervalMs = options.pollIntervalMs ?? 250;
+  const now = options.now ?? Date.now;
+  const wait = options.sleep ?? sleep;
+  const deadline = now() + timeoutMs;
+  let lastError;
+  while (now() < deadline) {
+    try {
+      return await markReadiness();
+    } catch (error) {
+      lastError = error;
+    }
+    await wait(pollIntervalMs);
+  }
+  const detail = lastError instanceof Error ? `: ${lastError.message}` : "";
+  throw new Error(`Renderer title policy ownership did not become ready${detail}`);
+}
+async function waitForInspectorTarget(endpoint, options = {}) {
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const pollIntervalMs = options.pollIntervalMs ?? 250;
+  const deadline = Date.now() + timeoutMs;
+  let lastError;
+  while (Date.now() < deadline) {
+    try {
+      const targets = await listCdpTargets(endpoint, options.fetchImpl);
+      const inspector = targets.find((target) => target.type === "node");
+      if (inspector) return inspector;
+      lastError = new Error("Inspector has no Node target");
+    } catch (error) {
+      lastError = error;
+    }
+    await sleep(pollIntervalMs);
+  }
+  const detail = lastError instanceof Error ? `: ${lastError.message}` : "";
+  throw new Error(`Electron main-process Inspector did not become ready${detail}`);
+}
+var electronModuleExpression = `(() => {
+  const mainModule = process.mainModule;
+  if (mainModule != null && typeof mainModule.require === 'function') {
+    return mainModule.require('electron');
+  }
+  const { createRequire } = process.getBuiltinModule('module');
+  return createRequire(process.execPath)('electron');
+})()`;
+var webContentsRuntimeExpression = "(() => ({ elementCount: document.querySelectorAll('*').length }))()";
+async function inspectElectronWebContents(inspector) {
+  const value = await inspector.evaluate(`(async () => {
+    const { webContents } = ${electronModuleExpression};
+    const result = await Promise.all(webContents.getAllWebContents().map(async (contents) => {
+      let runtime = { available: false, elementCount: null };
+      try {
+        const evaluation = contents.executeJavaScript(${JSON.stringify(webContentsRuntimeExpression)}, true);
+        const timeout = new Promise((_, reject) => {
+          setTimeout(() => reject(new Error('Renderer inspection timed out')), 2_000);
+        });
+        runtime = { available: true, ...(await Promise.race([evaluation, timeout])) };
+      } catch {}
+      return {
+        id: contents.id,
+        type: contents.getType(),
+        surface: contents.getURL().includes('avatar-overlay') ? 'overlay' : 'primary',
+        runtime,
+      };
+    }));
+    return result;
+  })()`);
+  if (!Array.isArray(value)) throw new Error("Electron webContents inspection returned an array");
+  return value.map((item) => {
+    if (!isRecord4(item) || !Number.isInteger(item.id) || typeof item.type !== "string" || !["primary", "overlay"].includes(String(item.surface)) || !isRecord4(item.runtime)) {
+      throw new Error("Electron webContents inspection returned an invalid item");
+    }
+    return {
+      id: item.id,
+      type: item.type,
+      surface: item.surface,
+      runtime: {
+        available: item.runtime.available === true,
+        elementCount: Number.isInteger(item.runtime.elementCount) ? item.runtime.elementCount : null
+      }
+    };
+  });
+}
+async function activateElectronDesktop(inspector) {
+  const value = await inspector.evaluate(`(() => {
+    const { BrowserWindow } = ${electronModuleExpression};
+    const windows = BrowserWindow.getAllWindows().filter((window) => !window.isDestroyed());
+    for (const window of windows) {
+      if (window.isMinimized()) window.restore();
+      window.show();
+      window.focus();
+    }
+    return windows.length;
+  })()`);
+  if (!Number.isInteger(value) || value < 1) {
+    throw new Error("Electron Desktop activation found no live window");
+  }
+  return value;
+}
+async function executeInWebContents(inspector, rendererWebContentsId, source) {
+  return inspector.evaluate(`(async () => {
+    const { webContents } = ${electronModuleExpression};
+    const contents = webContents.fromId(${rendererWebContentsId});
+    if (contents == null || contents.isDestroyed()) throw new Error('Renderer webContents is unavailable');
+    const result = await contents.executeJavaScript(${JSON.stringify(source)}, true);
+    return result === undefined ? null : result;
+  })()`);
+}
+async function reloadRenderer(inspector, rendererWebContentsId) {
+  await executeInWebContents(inspector, rendererWebContentsId, "location.reload(); null");
+}
+var defaultOperations = {
+  inspect: inspectElectronWebContents,
+  installTitlePolicy: installMainProcessTitlePolicy,
+  markTitlePolicyReady: markRendererTitlePolicyReady,
+  installDraftPrewarmPolicy: installRendererDraftPrewarmPolicy,
+  reload: reloadRenderer,
+  execute: executeInWebContents,
+  readBinding: (inspector, rendererWebContentsId) => executeInWebContents(
+    inspector,
+    rendererWebContentsId,
+    "window.__codexhostRendererBindingProbeV1?.status() ?? null"
+  ),
+  readTitlePolicyCounters: readMainProcessTitlePolicyCounters
+};
+async function waitForRenderer(inspector, operations, timeoutMs, pollIntervalMs, preferredRendererId) {
+  const deadline = Date.now() + timeoutMs;
+  let candidateCount = 0;
+  while (Date.now() < deadline) {
+    const inventory = await operations.inspect(inspector);
+    candidateCount = inventory.length;
+    const renderer = selectRendererWebContents(inventory, preferredRendererId);
+    if (renderer) return renderer;
+    await sleep(pollIntervalMs);
+  }
+  throw new Error(`Inspector did not find a live Electron Renderer (${candidateCount} seen)`);
+}
+async function waitForBinding(inspector, operations, rendererWebContentsId, enabledAgents, timeoutMs, pollIntervalMs) {
+  const deadline = Date.now() + timeoutMs;
+  let lastError;
+  while (Date.now() < deadline) {
+    try {
+      const value = await operations.readBinding(inspector, rendererWebContentsId);
+      if (value !== null) return validateBindingStatus(value, enabledAgents);
+    } catch (error) {
+      lastError = error;
+      if (error instanceof RendererAdapterReadinessError && error.state !== "installing") {
+        throw error;
+      }
+    }
+    await sleep(pollIntervalMs);
+  }
+  const detail = lastError instanceof Error ? `: ${lastError.message}` : "";
+  throw new Error(`Production Renderer binding did not become ready${detail}`);
+}
+var InstalledRendererControlSession = class {
+  constructor(inspector, rendererSource, enabledAgents, timeoutMs, pollIntervalMs, operations, snapshot) {
+    this.inspector = inspector;
+    this.rendererSource = rendererSource;
+    this.enabledAgents = enabledAgents;
+    this.timeoutMs = timeoutMs;
+    this.pollIntervalMs = pollIntervalMs;
+    this.operations = operations;
+    this.#snapshot = snapshot;
+  }
+  inspector;
+  rendererSource;
+  enabledAgents;
+  timeoutMs;
+  pollIntervalMs;
+  operations;
+  #closed = false;
+  #snapshot;
+  get snapshot() {
+    return this.#snapshot;
+  }
+  async ensureInstalled() {
+    if (this.#closed) throw new Error("Renderer Control Session is closed");
+    const selected = await waitForRenderer(
+      this.inspector,
+      this.operations,
+      this.timeoutMs,
+      this.pollIntervalMs,
+      this.#snapshot.renderer.id
+    );
+    const existing = await this.operations.readBinding(this.inspector, selected.id).catch(() => null);
+    if (existing !== null) {
+      const draftPrewarmPolicy2 = await this.operations.installDraftPrewarmPolicy(
+        this.inspector,
+        selected.id
+      );
+      let binding2;
+      try {
+        binding2 = validateBindingStatus(existing, this.enabledAgents);
+      } catch (error) {
+        if (!(error instanceof RendererAdapterReadinessError)) throw error;
+        await this.operations.execute(this.inspector, selected.id, this.rendererSource);
+        binding2 = await waitForBinding(
+          this.inspector,
+          this.operations,
+          selected.id,
+          this.enabledAgents,
+          this.timeoutMs,
+          this.pollIntervalMs
+        );
+      }
+      this.#snapshot = {
+        ...this.#snapshot,
+        renderer: selected,
+        draftPrewarmPolicy: draftPrewarmPolicy2,
+        binding: binding2
+      };
+      return this.#snapshot;
+    }
+    const titlePolicyReadiness = await waitForRendererTitlePolicyReady(
+      () => this.operations.markTitlePolicyReady(this.inspector, selected.id),
+      { timeoutMs: this.timeoutMs, pollIntervalMs: this.pollIntervalMs }
+    );
+    await activateElectronDesktop(this.inspector);
+    await this.operations.execute(this.inspector, selected.id, this.rendererSource);
+    const draftPrewarmPolicy = await this.operations.installDraftPrewarmPolicy(
+      this.inspector,
+      selected.id
+    );
+    const binding = await waitForBinding(
+      this.inspector,
+      this.operations,
+      selected.id,
+      this.enabledAgents,
+      this.timeoutMs,
+      this.pollIntervalMs
+    );
+    this.#snapshot = {
+      ...this.#snapshot,
+      renderer: selected,
+      titlePolicyReadiness,
+      draftPrewarmPolicy,
+      binding
+    };
+    return this.#snapshot;
+  }
+  activateDesktop() {
+    if (this.#closed) return Promise.reject(new Error("Renderer Control Session is closed"));
+    return activateElectronDesktop(this.inspector);
+  }
+  executeRenderer(expression) {
+    if (this.#closed) return Promise.reject(new Error("Renderer Control Session is closed"));
+    return this.operations.execute(
+      this.inspector,
+      this.#snapshot.renderer.id,
+      expression
+    );
+  }
+  readTitlePolicyCounters() {
+    if (this.#closed) return Promise.reject(new Error("Renderer Control Session is closed"));
+    return this.operations.readTitlePolicyCounters(this.inspector);
+  }
+  close() {
+    if (this.#closed) return;
+    this.#closed = true;
+    this.inspector.close();
+  }
+};
+var startupTraceStartedAt = Date.now();
+function startupTrace(stage) {
+  if (process.env.CODEXHOST_STARTUP_TRACE !== "1") return;
+  console.error(
+    `[codexhost startup +${Date.now() - startupTraceStartedAt}ms] renderer-session: ${stage}`
+  );
+}
+async function createRendererControlSession(options) {
+  const enabledAgents = options.enabledAgents ?? ["codex", "pi"];
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const pollIntervalMs = options.pollIntervalMs ?? 250;
+  const operations = options.operations ?? defaultOperations;
+  startupTrace("waiting for initial Renderer");
+  const initial = await waitForRenderer(options.inspector, operations, timeoutMs, pollIntervalMs);
+  startupTrace("installing title policy");
+  const titlePolicy = await operations.installTitlePolicy(options.inspector, initial.id);
+  startupTrace("reloading Renderer");
+  await operations.reload(options.inspector, initial.id);
+  startupTrace("waiting for reloaded Renderer");
+  const selected = await waitForRenderer(
+    options.inspector,
+    operations,
+    timeoutMs,
+    pollIntervalMs,
+    initial.id
+  );
+  startupTrace("waiting for title policy readiness");
+  const titlePolicyReadiness = await waitForRendererTitlePolicyReady(
+    () => operations.markTitlePolicyReady(options.inspector, selected.id),
+    {
+      timeoutMs,
+      pollIntervalMs
+    }
+  );
+  startupTrace("injecting Renderer bundle");
+  await operations.execute(options.inspector, selected.id, options.rendererSource);
+  startupTrace("installing draft routing policy");
+  const draftPrewarmPolicy = await operations.installDraftPrewarmPolicy(
+    options.inspector,
+    selected.id
+  );
+  startupTrace("waiting for Renderer binding");
+  const binding = await waitForBinding(
+    options.inspector,
+    operations,
+    selected.id,
+    enabledAgents,
+    timeoutMs,
+    pollIntervalMs
+  );
+  return new InstalledRendererControlSession(
+    options.inspector,
+    options.rendererSource,
+    enabledAgents,
+    timeoutMs,
+    pollIntervalMs,
+    operations,
+    {
+      renderer: selected,
+      titlePolicy,
+      titlePolicyReadiness,
+      draftPrewarmPolicy,
+      binding
+    }
+  );
+}
+async function installRendererControlSession(options) {
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const pollIntervalMs = options.pollIntervalMs ?? 250;
+  startupTrace("waiting for Electron Inspector target");
+  const target = await waitForInspectorTarget(options.inspectorEndpoint, {
+    timeoutMs,
+    pollIntervalMs
+  });
+  startupTrace("connecting to Electron Inspector");
+  const inspector = await CdpClient.connect(target.webSocketDebuggerUrl);
+  try {
+    startupTrace("enabling Inspector Runtime domain");
+    await inspector.command("Runtime.enable");
+    return await createRendererControlSession({
+      ...options,
+      inspector,
+      timeoutMs,
+      pollIntervalMs
+    });
+  } catch (error) {
+    inspector.close();
+    throw error;
+  }
+}
+
+// packages/desktop-control/src/production-controller.ts
+var PRODUCTION_INSTALL_TIMEOUT_MS = 9e4;
+var DESKTOP_CONTROLLER_READINESS_MAX_BYTES = 512;
+var TRANSIENT_INSTALL_ATTEMPTS = 3;
+var TRANSIENT_INSTALL_RETRY_MS = 250;
+var RECOVERY_RETRY_INITIAL_MS = 3e4;
+var RECOVERY_RETRY_MAX_MS = 3e5;
+var startupTraceStartedAt2 = Date.now();
+function startupTrace2(stage, detail) {
+  if (process.env.CODEXHOST_STARTUP_TRACE !== "1") return;
+  const suffix = detail === void 0 ? "" : `: ${detail instanceof Error ? detail.message : String(detail)}`;
+  console.error(
+    `[codexhost startup +${Date.now() - startupTraceStartedAt2}ms] controller: ${stage}${suffix}`
+  );
+}
+function serializeDesktopControllerReadiness(readiness) {
+  if (readiness.schemaVersion !== 2 || readiness.state !== "compatible" || !Array.isArray(readiness.issues) || readiness.issues.length !== 0 || Object.keys(readiness).length !== 3) {
+    throw new Error("Desktop Controller readiness is invalid");
+  }
+  const line = JSON.stringify(readiness);
+  if (Buffer.byteLength(line, "utf8") > DESKTOP_CONTROLLER_READINESS_MAX_BYTES) {
+    throw new Error("Desktop Controller readiness exceeds its size limit");
+  }
+  return line;
+}
+var defaultDependencies = {
+  readRenderer: (filePath) => readFile(filePath, "utf8"),
+  install: installRendererControlSession,
+  startAttachmentServer: startControllerAttachmentServer,
+  ready: (readiness) => {
+    process.stdout.write(`${serializeDesktopControllerReadiness(readiness)}
+`);
+  },
+  sleep: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),
+  monitorIntervalMs: 500
+};
+function inspectorEndpoint(value) {
+  const url = new URL(value);
+  if (url.protocol !== "http:" || !["127.0.0.1", "localhost", "[::1]"].includes(url.hostname) || !url.port || url.username || url.password || url.pathname !== "/" && url.pathname !== "" || url.search || url.hash) {
+    throw new Error("--inspector-endpoint must be a loopback HTTP origin with an explicit port");
+  }
+  return url.origin;
+}
+function parseDesktopControllerArguments(arguments_) {
+  let endpoint;
+  let rendererPath;
+  let defaultAgent;
+  let attachmentPort;
+  let attachmentNonce;
+  for (let index = 0; index < arguments_.length; index += 1) {
+    const argument = arguments_[index];
+    const value = arguments_[index + 1];
+    if (argument === "--inspector-endpoint") {
+      if (endpoint !== void 0) throw new Error("--inspector-endpoint may only be provided once");
+      if (!value) throw new Error("--inspector-endpoint requires a value");
+      endpoint = inspectorEndpoint(value);
+      index += 1;
+      continue;
+    }
+    if (argument === "--renderer") {
+      if (rendererPath !== void 0) throw new Error("--renderer may only be provided once");
+      if (!value) throw new Error("--renderer requires a value");
+      if (!path.isAbsolute(value)) throw new Error("--renderer must be an absolute path");
+      rendererPath = path.normalize(value);
+      index += 1;
+      continue;
+    }
+    if (argument === "--default-agent") {
+      if (defaultAgent !== void 0) throw new Error("--default-agent may only be provided once");
+      if (value !== "codex" && value !== "pi") {
+        throw new Error("--default-agent must be 'codex' or 'pi'");
+      }
+      defaultAgent = value;
+      index += 1;
+      continue;
+    }
+    if (argument === "--attachment-port") {
+      if (attachmentPort !== void 0) {
+        throw new Error("--attachment-port may only be provided once");
+      }
+      const port = Number(value);
+      if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error("--attachment-port must be a valid TCP port");
+      }
+      attachmentPort = port;
+      index += 1;
+      continue;
+    }
+    if (argument === "--attachment-nonce") {
+      if (attachmentNonce !== void 0) {
+        throw new Error("--attachment-nonce may only be provided once");
+      }
+      if (value === void 0 || !/^[0-9a-f]{32}$/.test(value)) {
+        throw new Error("--attachment-nonce must be 32 lowercase hexadecimal characters");
+      }
+      attachmentNonce = value;
+      index += 1;
+      continue;
+    }
+    throw new Error(`unknown Desktop Controller option: ${argument}`);
+  }
+  if (endpoint === void 0) throw new Error("--inspector-endpoint is required");
+  if (rendererPath === void 0) throw new Error("--renderer is required");
+  if (defaultAgent === void 0) throw new Error("--default-agent is required");
+  if (attachmentPort === void 0) throw new Error("--attachment-port is required");
+  if (attachmentNonce === void 0) throw new Error("--attachment-nonce is required");
+  return {
+    inspectorEndpoint: endpoint,
+    rendererPath,
+    defaultAgent,
+    attachmentPort,
+    attachmentNonce
+  };
+}
+function isTransientElectronInstallError(error) {
+  let current = error;
+  for (let depth = 0; depth < 4; depth += 1) {
+    const message = current instanceof Error ? current.message : String(current);
+    if (message.includes("Execution context was destroyed") || message.includes("Promise was collected")) {
+      return true;
+    }
+    current = current instanceof Error ? current.cause : void 0;
+    if (current === void 0) break;
+  }
+  return false;
+}
+async function installProductionSession(options, dependencies) {
+  for (let attempt = 1; attempt <= TRANSIENT_INSTALL_ATTEMPTS; attempt += 1) {
+    try {
+      return await dependencies.install(options);
+    } catch (error) {
+      if (attempt === TRANSIENT_INSTALL_ATTEMPTS || !isTransientElectronInstallError(error)) {
+        throw error;
+      }
+      await dependencies.sleep(TRANSIENT_INSTALL_RETRY_MS);
+    }
+  }
+  throw new Error("Desktop Controller exhausted Renderer installation attempts");
+}
+async function runDesktopController(options, signal, dependencies = defaultDependencies) {
+  const configuration = `Object.defineProperty(window, "__codexhostProductionConfigV1", { configurable: true, value: { defaultAgent: ${JSON.stringify(options.defaultAgent)} } });`;
+  const now = dependencies.now ?? Date.now;
+  let session;
+  let nextRecoveryAt = 0;
+  let recoveryDelayMs = RECOVERY_RETRY_INITIAL_MS;
+  const recordRecoveryFailure = () => {
+    nextRecoveryAt = now() + recoveryDelayMs;
+    recoveryDelayMs = Math.min(recoveryDelayMs * 2, RECOVERY_RETRY_MAX_MS);
+  };
+  const recordRecoverySuccess = () => {
+    nextRecoveryAt = 0;
+    recoveryDelayMs = RECOVERY_RETRY_INITIAL_MS;
+  };
+  const createSession = async () => {
+    startupTrace2("reading Renderer bundle");
+    const rendererSource = await dependencies.readRenderer(options.rendererPath);
+    if (rendererSource.trim().length === 0) throw new Error("production Renderer Bundle is empty");
+    startupTrace2("installing Renderer Session");
+    const installed = await installProductionSession(
+      {
+        inspectorEndpoint: options.inspectorEndpoint,
+        rendererSource: `${configuration}
+${rendererSource}`,
+        enabledAgents: ["codex", "pi", "claude-code", "deepseek-harness", "grok", "omp"],
+        timeoutMs: PRODUCTION_INSTALL_TIMEOUT_MS
+      },
+      dependencies
+    );
+    startupTrace2("Renderer Session installed");
+    return installed;
+  };
+  startupTrace2("initialization started");
+  try {
+    session = await createSession();
+    recordRecoverySuccess();
+  } catch (error) {
+    startupTrace2("initial Renderer Session unavailable", error);
+    session = void 0;
+    recordRecoveryFailure();
+  }
+  let operation = Promise.resolve(void 0);
+  const useSession = (callback) => {
+    const next = operation.then(callback, callback);
+    operation = next.then(
+      () => void 0,
+      () => void 0
+    );
+    return next;
+  };
+  const resetSession = () => {
+    session?.close();
+    session = void 0;
+  };
+  const ensureSession = async () => {
+    if (!session) session = await createSession();
+    else await session.ensureInstalled();
+    return session;
+  };
+  const recoverSession = async () => {
+    try {
+      const current = await ensureSession();
+      recordRecoverySuccess();
+      return current;
+    } catch (error) {
+      resetSession();
+      recordRecoveryFailure();
+      throw error;
+    }
+  };
+  let attachmentServer;
+  try {
+    startupTrace2("starting attachment server");
+    attachmentServer = await dependencies.startAttachmentServer({
+      port: options.attachmentPort,
+      nonce: options.attachmentNonce,
+      attach: () => useSession(async () => {
+        const current = await recoverSession();
+        await current.activateDesktop();
+      })
+    });
+    startupTrace2("attachment server ready");
+    startupTrace2("publishing readiness");
+    dependencies.ready({
+      schemaVersion: 2,
+      state: "compatible",
+      issues: []
+    });
+    while (!signal.aborted) {
+      await dependencies.sleep(dependencies.monitorIntervalMs);
+      if (signal.aborted) continue;
+      await useSession(async () => {
+        if (!session && now() < nextRecoveryAt) return;
+        try {
+          await recoverSession();
+        } catch {
+        }
+      });
+    }
+  } finally {
+    await attachmentServer?.close();
+    await operation;
+    resetSession();
+  }
+}
+
+// packages/desktop-control/src/release-main.ts
+var abort = new AbortController();
+var stop = () => abort.abort();
+process.once("SIGINT", stop);
+process.once("SIGTERM", stop);
+try {
+  await runDesktopController(parseDesktopControllerArguments(process.argv.slice(2)), abort.signal);
+} catch (error) {
+  console.error(
+    `codexhost Desktop Controller: ${error instanceof Error ? error.message : String(error)}`
+  );
+  process.exitCode = 1;
+} finally {
+  process.removeListener("SIGINT", stop);
+  process.removeListener("SIGTERM", stop);
+}