@codexhost/cli 0.4.0 → 0.4.2

package/README.md

@@ -5,7 +5,7 @@ Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.
 ## Install
 
 ```bash
-npm install -g @codexhost/cli@0.4.0
+npm install -g @codexhost/cli@0.4.2
 ```
 
 npm automatically installs the matching macOS, Windows, or Linux platform package. Node.js 22 or 24 and the official ChatGPT/Codex Desktop are required.
@@ -15,8 +15,12 @@ npm automatically installs the matching macOS, Windows, or Linux platform packag
 ```bash
 codexhost --version
 codexhost
+codexhost remote install
+codexhost remote status
 ```
 
 The `codexhost` command starts Codex Desktop. On macOS and Linux it returns immediately while the packaged Launcher keeps supervising in the background. On Windows, the command remains attached until Codex Desktop exits so shells that clean up process trees of completed commands cannot discard the supervisor. Re-running `codexhost` attaches to the same controlled instance.
 
+On macOS, `remote install` installs a current-user Aqua Harness broker so Background SSH Hosts can use native Claude Code login without reading, copying, or unlocking Keychain credentials.
+
 If installation used `--omit=optional`, reinstall without that option so npm can select the native package for the current architecture.

package/bin/codexhost.js

@@ -6,7 +6,7 @@ import { homedir } from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 
-const version = "0.4.0";
+const version = "0.4.2";
 const userArguments = process.argv.slice(2);
 const startupTraceStartedAt = Date.now();
 function startupTrace(stage) {
@@ -190,6 +190,7 @@ if (updateEnvironment.CODEXHOST_REMOTE_SSH_MANAGED === "1") {
 
 let launchArguments;
 let remoteArguments = null;
+let brokerArguments = null;
 let delegationArguments = null;
 if (userArguments.length === 0) {
   launchArguments = ["launch"];
@@ -200,6 +201,9 @@ if (userArguments.length === 0) {
 } else if (userArguments[0] === "remote") {
   launchArguments = null;
   remoteArguments = userArguments.slice(1);
+} else if (userArguments[0] === "broker") {
+  launchArguments = null;
+  brokerArguments = userArguments.slice(1);
 } else if (
   userArguments[0] === "harness" ||
   userArguments[0] === "delegate" ||
@@ -216,6 +220,7 @@ if (userArguments.length === 0) {
       "  codexhost inspect",
       "  codexhost launch [launcher options]",
       "  codexhost remote install|start|stop|status|uninstall",
+      "  codexhost broker install|status|stop|uninstall",
       "  codexhost delegate --help",
       "  codexhost harness inspect ...",
       "  codexhost delegate start ...",
@@ -279,7 +284,50 @@ if (delegationArguments !== null) {
     }
     process.exit(code ?? 1);
   });
+} else if (brokerArguments !== null) {
+  const child = spawn(
+    launcher,
+    [
+      "broker",
+      ...brokerArguments,
+      "--node", process.execPath, "--host-runtime", hostRuntime,
+    ],
+    {
+      env: updateEnvironment,
+      stdio: "inherit",
+      windowsHide: true,
+    },
+  );
+  child.on("error", (error) => fail(error.message));
+  child.on("exit", (code, signal) => {
+    if (signal) {
+      process.kill(process.pid, signal);
+      return;
+    }
+    process.exit(code ?? 1);
+  });
 } else if (remoteArguments !== null) {
+  const runNativeBroker = (command) => {
+    const broker = spawn(
+      launcher,
+      ["broker", command, "--node", process.execPath, "--host-runtime", hostRuntime],
+      {
+        env: updateEnvironment,
+        // remote status is a stable JSON stdout surface. Keep the broker's
+        // human-readable status beside it on stderr instead of corrupting JSON.
+        stdio: command === "status" ? ["inherit", process.stderr, "inherit"] : "inherit",
+        windowsHide: true,
+      },
+    );
+    broker.on("error", (error) => fail(error.message));
+    broker.on("exit", (code, signal) => {
+      if (signal) {
+        process.kill(process.pid, signal);
+        return;
+      }
+      process.exit(code ?? 1);
+    });
+  };
   const child = spawn(
     process.execPath,
     [
@@ -305,6 +353,20 @@ if (delegationArguments !== null) {
       process.kill(process.pid, signal);
       return;
     }
+    if (code === 0 && process.platform === "darwin") {
+      if (remoteArguments[0] === "install") {
+        runNativeBroker("install");
+        return;
+      }
+      if (remoteArguments[0] === "status") {
+        runNativeBroker("status");
+        return;
+      }
+      if (remoteArguments[0] === "uninstall") {
+        runNativeBroker("uninstall");
+        return;
+      }
+    }
     process.exit(code ?? 1);
   });
 } else if (launchArguments?.[0] === "launch") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codexhost/cli",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.",
   "type": "module",
   "bin": {
@@ -14,12 +14,12 @@
     "node": ">=22"
   },
   "optionalDependencies": {
-    "@codexhost/cli-darwin-arm64": "0.4.0",
-    "@codexhost/cli-darwin-x64": "0.4.0",
-    "@codexhost/cli-win32-x64": "0.4.0",
-    "@codexhost/cli-win32-arm64": "0.4.0",
-    "@codexhost/cli-linux-x64": "0.4.0",
-    "@codexhost/cli-linux-arm64": "0.4.0"
+    "@codexhost/cli-darwin-arm64": "0.4.2",
+    "@codexhost/cli-darwin-x64": "0.4.2",
+    "@codexhost/cli-win32-x64": "0.4.2",
+    "@codexhost/cli-win32-arm64": "0.4.2",
+    "@codexhost/cli-linux-x64": "0.4.2",
+    "@codexhost/cli-linux-arm64": "0.4.2"
   },
   "keywords": [
     "codex",