@ctliz/agent-intercom-codex 0.12.0-connect.1 → 0.12.0-connect.3

package/README.md

@@ -5,7 +5,7 @@
   <img src="./assets/logo-generated.png" alt="Codex Intercom generated PNG logo" width="96" height="96">
 </p>
 
-**Agent Intercom** is a cross-harness, same-machine messaging system for coding agents. Its Pi, Codex, Claude Code, and OpenCode adapters share one local broker and protocol, so sessions can discover and message each other regardless of which harness they run in.
+**Agent Intercom** is a cross-harness, same-machine messaging system for coding agents. Its Pi, Codex, Claude Code, OpenCode, Grok Build, and AGY adapters share one local broker and protocol, so sessions can discover and message each other regardless of which harness they run in.
 
 | Harness | Repository |
 |---|---|
@@ -14,8 +14,12 @@
 | Codex | [`agent-intercom-codex`](https://github.com/ctliz/agent-intercom-codex) |
 | Claude Code | [`agent-intercom-claude`](https://github.com/ctliz/agent-intercom-claude) |
 | OpenCode | [`agent-intercom-opencode`](https://github.com/ctliz/agent-intercom-opencode) |
+| Grok Build | [`agent-intercom-grok`](https://github.com/ctliz/agent-intercom-grok) |
+| AGY | [`agent-intercom-agy`](https://github.com/ctliz/agent-intercom-agy) |
 | Fleet lifecycle | [`agent-intercom-orchestrator`](https://github.com/ctliz/agent-intercom-orchestrator) |
 
+Grok Build and AGY use lightweight npm-packaged MCP launchers backed by the Claude MCP runtime. They retain inbound messages for `intercom_pending` polling but do not provide wake-on-message.
+
 ## Maintenance & Upstream Provenance
 
 - **Maintained by `ctliz`**: This distribution is maintained independently by [ctliz](https://github.com/ctliz).
@@ -97,12 +101,11 @@ For normal use, install the package so the command-line entry points are on
 `PATH`:
 
 ```bash
-git clone --depth 1 --branch v0.11.0-connect.2 https://github.com/ctliz/agent-intercom-codex.git
-cd agent-intercom-codex && npm ci && npm link
+npm install -g @ctliz/agent-intercom-codex@connect
+# or by exact prerelease version
+npm install -g @ctliz/agent-intercom-codex@0.12.0-connect.3
 ```
 
-> The public npm package `@ctliz/agent-intercom-codex` is **not yet published**. GitHub at the exact connect tag is the only supported install path for this release.
-
 This provides:
 
 - `codex-intercom-mcp`
@@ -132,8 +135,8 @@ stable names or IDs.
 To let a Pi manager create Codex workers with owned systemd cgroups, leases, model/effort selection, logs, and verified cleanup, install the companion Pi packages:
 
 ```bash
-pi install git:github.com/ctliz/agent-intercom-pi@v0.11.0-connect.2
-pi install git:github.com/ctliz/agent-intercom-orchestrator@v0.11.0-connect.2
+pi install git:github.com/ctliz/agent-intercom-pi@v0.12.0-connect.4
+pi install git:github.com/ctliz/agent-intercom-orchestrator@v0.12.0-connect.2
 ```
 
 Restart Pi or run `/reload`, then call `agent_fleet({ action: "doctor" })`. The orchestrator invokes the installed `coi` command, or a separately configured minimal wrapper such as `coim`; it does not replace this Codex adapter.

package/broker/spawn.ts

@@ -178,6 +178,7 @@ export function getBrokerSpawnOptions(
   cwd: string;
   env: NodeJS.ProcessEnv;
   windowsHide: true;
+  shell: false;
 } {
   return {
     detached: true,
@@ -185,6 +186,7 @@ export function getBrokerSpawnOptions(
     cwd: extensionDir,
     env: { ...env, PI_CODING_AGENT_DIR: getAgentDirPath(env), NODE_NO_WARNINGS: "1" },
     windowsHide: true,
+    shell: false,
   };
 }
 

package/codex/app-server-client.ts

@@ -109,6 +109,7 @@ export class CodexAppServerClient extends EventEmitter {
         encoding: "utf8",
         env: this.options.env,
         stdio: ["ignore", "pipe", "pipe"],
+        shell: false,
       });
       if (started.status !== 0) {
         throw new Error(`Failed to start Codex app-server daemon: ${started.stderr || started.stdout || `exit ${started.status}`}`);
@@ -124,6 +125,7 @@ export class CodexAppServerClient extends EventEmitter {
     const proc = spawn(this.options.command, this.options.args, {
       stdio: ["pipe", "pipe", "pipe"],
       env: this.options.env,
+      shell: false,
     });
     this.proc = proc;
     this.rl = readline.createInterface({ input: proc.stdout, crlfDelay: Infinity });

package/codex/clipboard.ts

@@ -34,7 +34,7 @@ function runDetachedClipboardCommand(
     const timeout = setTimeout(() => finish({ ok: false, error: `${command} did not start within ${timeoutMs}ms` }), timeoutMs);
 
     try {
-      const proc = spawn(command, args, { env, stdio: ["pipe", "ignore", "ignore"] });
+      const proc = spawn(command, args, { env, stdio: ["pipe", "ignore", "ignore"], shell: false });
       proc.once("error", (error) => finish({ ok: false, error: error.message }));
       proc.once("spawn", () => {
         proc.stdin.on("error", () => {
@@ -75,7 +75,7 @@ function runClipboardCommand(
     let proc: ReturnType<typeof spawn> | undefined;
 
     try {
-      proc = spawn(command, args, { env, stdio: ["pipe", "ignore", "pipe"] });
+      proc = spawn(command, args, { env, stdio: ["pipe", "ignore", "pipe"], shell: false });
       proc.stderr?.setEncoding("utf8");
       proc.stderr?.on("data", (chunk: string) => {
         if (stderr.length < 4096) stderr += chunk;

package/codex/coi.ts

@@ -98,6 +98,7 @@ function gitString(cwd: string, args: string[]): string | null {
     cwd,
     encoding: "utf8",
     stdio: ["ignore", "pipe", "ignore"],
+    shell: false,
   });
   if (result.status !== 0) return null;
   const trimmed = result.stdout.trim();
@@ -499,7 +500,7 @@ export async function runInteractiveTui(
   // cannot reintroduce an ambient-PATH spawn after the initial preflight.
   assertHardenedBossProviderAuthority(protectedBossClient);
   const runInherited = async (): Promise<number> => {
-    const tui = spawn(command, args, { cwd, env: launchEnv, stdio: "inherit" });
+    const tui = spawn(command, args, { cwd, env: launchEnv, stdio: "inherit", shell: false });
     const [code, signal] = await once(tui, "exit") as [number | null, NodeJS.Signals | null];
     if (typeof code === "number") return code;
     return signal === "SIGINT" ? 130 : 1;
@@ -634,6 +635,7 @@ export async function runCoi(options: CoiOptions, env: NodeJS.ProcessEnv = proce
       cwd: options.cwd,
       env,
       stdio: "inherit",
+      shell: false,
     });
     const [code, signal] = await once(help, "exit") as [number | null, NodeJS.Signals | null];
     if (typeof code === "number") return code;
@@ -669,6 +671,7 @@ export async function runCoi(options: CoiOptions, env: NodeJS.ProcessEnv = proce
     cwd: options.cwd,
     env,
     stdio: ["ignore", "ignore", "pipe"],
+    shell: false,
   });
   appServer.stderr?.on("data", (chunk) => {
     if (env.CODEX_INTERCOM_DEBUG) process.stderr.write(String(chunk));

package/codex/mcp-protocol.ts

@@ -16,6 +16,12 @@ interface ToolDefinition {
   name: string;
   description: string;
   inputSchema: Record<string, unknown>;
+  annotations: {
+    readOnlyHint: boolean;
+    destructiveHint: boolean;
+    idempotentHint: boolean;
+    openWorldHint: boolean;
+  };
   handler: ToolHandler;
 }
 
@@ -74,18 +80,21 @@ export function buildToolDefinitions(runtime: CodexIntercomRuntime): ToolDefinit
       name: "intercom_whoami",
       description: "Return this Codex session's intercom identity for reliable targeting.",
       inputSchema: { type: "object", properties: {}, additionalProperties: false },
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
       handler: async () => runtime.whoami(),
     },
     {
       name: "intercom_team",
       description: "Show your current manager and the live coworkers owned by that manager. No arguments are required.",
       inputSchema: { type: "object", properties: {}, additionalProperties: false },
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
       handler: async () => runtime.team(),
     },
     {
       name: "intercom_status",
       description: "Show intercom connection status, active sessions, unread messages, and pending asks.",
       inputSchema: { type: "object", properties: {}, additionalProperties: false },
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
       handler: async () => runtime.status(),
     },
     {
@@ -99,6 +108,7 @@ export function buildToolDefinitions(runtime: CodexIntercomRuntime): ToolDefinit
         },
         additionalProperties: false,
       },
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
       handler: async (args) => runtime.list(
         args.scope === "directory" || args.scope === "repo" ? args.scope : "machine",
         asBoolean(args.include_self, false),
@@ -113,6 +123,7 @@ export function buildToolDefinitions(runtime: CodexIntercomRuntime): ToolDefinit
         required: ["summary"],
         additionalProperties: false,
       },
+      annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },
       handler: async (args) => runtime.setSummary(asString(args.summary, "summary")),
     },
     {
@@ -128,6 +139,7 @@ export function buildToolDefinitions(runtime: CodexIntercomRuntime): ToolDefinit
         required: ["to", "message"],
         additionalProperties: false,
       },
+      annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
       handler: async (args) => runtime.send(asString(args.to, "to"), asString(args.message, "message"), asAttachmentArray(args.attachments)),
     },
     {
@@ -144,6 +156,7 @@ export function buildToolDefinitions(runtime: CodexIntercomRuntime): ToolDefinit
         required: ["to", "message"],
         additionalProperties: false,
       },
+      annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
       handler: async (args, signal) => runtime.ask(
         asString(args.to, "to"),
         asString(args.message, "message"),
@@ -160,6 +173,7 @@ export function buildToolDefinitions(runtime: CodexIntercomRuntime): ToolDefinit
         properties: { mark_read: { type: "boolean", default: false } },
         additionalProperties: false,
       },
+      annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: true },
       handler: async (args) => runtime.pending(asBoolean(args.mark_read, false)),
     },
     {
@@ -175,6 +189,7 @@ export function buildToolDefinitions(runtime: CodexIntercomRuntime): ToolDefinit
         required: ["message"],
         additionalProperties: false,
       },
+      annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
       handler: async (args) => runtime.reply(asString(args.message, "message"), typeof args.to === "string" ? args.to : undefined, args.which === "oldest" || args.which === "latest" ? args.which : undefined),
     },
   ];
@@ -217,7 +232,7 @@ export async function handleMcpRequest(request: JsonRpcRequest, runtime: CodexIn
       return ok(request.id, {});
     case "tools/list":
       return ok(request.id, {
-        tools: tools.map(({ name, description, inputSchema }) => ({ name, description, inputSchema })),
+        tools: tools.map(({ name, description, inputSchema, annotations }) => ({ name, description, inputSchema, annotations })),
       });
     case "tools/call": {
       const name = request.params?.name;

package/codex/runtime.ts

@@ -182,6 +182,7 @@ export function detectGitRoot(cwd: string): string | null {
     cwd,
     encoding: "utf8",
     stdio: ["ignore", "pipe", "ignore"],
+    shell: false,
   });
   if (result.status !== 0) return null;
   return result.stdout.trim() || null;

package/dist/bridge-daemon.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-process.stderr.write("[agent-intercom-build] package=@ctliz/agent-intercom-codex version=0.12.0-connect.1 target=bridge-daemon sourceSha256=f5d619a0fa1debe9fa5b5850ec8d372a474488d0fb4bde6540cd7656f6bb2c51\n");
+process.stderr.write("[agent-intercom-build] package=@ctliz/agent-intercom-codex version=0.12.0-connect.3 target=bridge-daemon sourceSha256=d7208ae5db4e820dfc584a6a8a4a96f5ccf548f20872199024f6d4c955f85622\n");
 
 // codex/bridge-daemon.ts
 import { once } from "node:events";
@@ -95,7 +95,8 @@ var CodexAppServerClient = class extends EventEmitter {
       const started = spawnSync(this.options.startDaemonCommand, this.options.startDaemonArgs, {
         encoding: "utf8",
         env: this.options.env,
-        stdio: ["ignore", "pipe", "pipe"]
+        stdio: ["ignore", "pipe", "pipe"],
+        shell: false
       });
       if (started.status !== 0) {
         throw new Error(`Failed to start Codex app-server daemon: ${started.stderr || started.stdout || `exit ${started.status}`}`);
@@ -108,7 +109,8 @@ var CodexAppServerClient = class extends EventEmitter {
     }
     const proc = spawn(this.options.command, this.options.args, {
       stdio: ["pipe", "pipe", "pipe"],
-      env: this.options.env
+      env: this.options.env,
+      shell: false
     });
     this.proc = proc;
     this.rl = readline.createInterface({ input: proc.stdout, crlfDelay: Infinity });
@@ -2435,7 +2437,8 @@ function getBrokerSpawnOptions(extensionDir = EXTENSION_DIR, env = process.env)
     stdio: "ignore",
     cwd: extensionDir,
     env: { ...env, PI_CODING_AGENT_DIR: getAgentDirPath(env), NODE_NO_WARNINGS: "1" },
-    windowsHide: true
+    windowsHide: true,
+    shell: false
   };
 }
 function toError2(error) {

package/dist/broker.mjs

@@ -1,4 +1,4 @@
-process.stderr.write("[agent-intercom-build] package=@ctliz/agent-intercom-codex version=0.12.0-connect.1 target=broker sourceSha256=f5d619a0fa1debe9fa5b5850ec8d372a474488d0fb4bde6540cd7656f6bb2c51\n");
+process.stderr.write("[agent-intercom-build] package=@ctliz/agent-intercom-codex version=0.12.0-connect.3 target=broker sourceSha256=d7208ae5db4e820dfc584a6a8a4a96f5ccf548f20872199024f6d4c955f85622\n");
 
 // broker/broker.ts
 import net from "net";

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "package": "@ctliz/agent-intercom-codex",
-  "version": "0.12.0-connect.1",
-  "sourceSha256": "f5d619a0fa1debe9fa5b5850ec8d372a474488d0fb4bde6540cd7656f6bb2c51",
+  "version": "0.12.0-connect.3",
+  "sourceSha256": "d7208ae5db4e820dfc584a6a8a4a96f5ccf548f20872199024f6d4c955f85622",
   "targets": [
     "codex-server",
     "broker",

package/dist/codex-server.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-process.stderr.write("[agent-intercom-build] package=@ctliz/agent-intercom-codex version=0.12.0-connect.1 target=codex-server sourceSha256=f5d619a0fa1debe9fa5b5850ec8d372a474488d0fb4bde6540cd7656f6bb2c51\n");
+process.stderr.write("[agent-intercom-build] package=@ctliz/agent-intercom-codex version=0.12.0-connect.3 target=codex-server sourceSha256=d7208ae5db4e820dfc584a6a8a4a96f5ccf548f20872199024f6d4c955f85622\n");
 
 // codex/server.ts
 import readline from "node:readline";
@@ -1738,7 +1738,8 @@ function getBrokerSpawnOptions(extensionDir = EXTENSION_DIR, env = process.env)
     stdio: "ignore",
     cwd: extensionDir,
     env: { ...env, PI_CODING_AGENT_DIR: getAgentDirPath(env), NODE_NO_WARNINGS: "1" },
-    windowsHide: true
+    windowsHide: true,
+    shell: false
   };
 }
 function toError2(error2) {
@@ -2472,7 +2473,8 @@ function detectGitRoot(cwd) {
   const result = spawnSync("git", ["rev-parse", "--show-toplevel"], {
     cwd,
     encoding: "utf8",
-    stdio: ["ignore", "pipe", "ignore"]
+    stdio: ["ignore", "pipe", "ignore"],
+    shell: false
   });
   if (result.status !== 0) return null;
   return result.stdout.trim() || null;
@@ -2815,18 +2817,21 @@ function buildToolDefinitions(runtime2) {
       name: "intercom_whoami",
       description: "Return this Codex session's intercom identity for reliable targeting.",
       inputSchema: { type: "object", properties: {}, additionalProperties: false },
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
       handler: async () => runtime2.whoami()
     },
     {
       name: "intercom_team",
       description: "Show your current manager and the live coworkers owned by that manager. No arguments are required.",
       inputSchema: { type: "object", properties: {}, additionalProperties: false },
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
       handler: async () => runtime2.team()
     },
     {
       name: "intercom_status",
       description: "Show intercom connection status, active sessions, unread messages, and pending asks.",
       inputSchema: { type: "object", properties: {}, additionalProperties: false },
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
       handler: async () => runtime2.status()
     },
     {
@@ -2840,6 +2845,7 @@ function buildToolDefinitions(runtime2) {
         },
         additionalProperties: false
       },
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
       handler: async (args) => runtime2.list(
         args.scope === "directory" || args.scope === "repo" ? args.scope : "machine",
         asBoolean(args.include_self, false)
@@ -2854,6 +2860,7 @@ function buildToolDefinitions(runtime2) {
         required: ["summary"],
         additionalProperties: false
       },
+      annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },
       handler: async (args) => runtime2.setSummary(asString(args.summary, "summary"))
     },
     {
@@ -2869,6 +2876,7 @@ function buildToolDefinitions(runtime2) {
         required: ["to", "message"],
         additionalProperties: false
       },
+      annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
       handler: async (args) => runtime2.send(asString(args.to, "to"), asString(args.message, "message"), asAttachmentArray(args.attachments))
     },
     {
@@ -2885,6 +2893,7 @@ function buildToolDefinitions(runtime2) {
         required: ["to", "message"],
         additionalProperties: false
       },
+      annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
       handler: async (args, signal) => runtime2.ask(
         asString(args.to, "to"),
         asString(args.message, "message"),
@@ -2901,6 +2910,7 @@ function buildToolDefinitions(runtime2) {
         properties: { mark_read: { type: "boolean", default: false } },
         additionalProperties: false
       },
+      annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: true },
       handler: async (args) => runtime2.pending(asBoolean(args.mark_read, false))
     },
     {
@@ -2916,6 +2926,7 @@ function buildToolDefinitions(runtime2) {
         required: ["message"],
         additionalProperties: false
       },
+      annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
       handler: async (args) => runtime2.reply(asString(args.message, "message"), typeof args.to === "string" ? args.to : void 0, args.which === "oldest" || args.which === "latest" ? args.which : void 0)
     }
   ];
@@ -2952,7 +2963,7 @@ async function handleMcpRequest(request, runtime2) {
       return ok(request.id, {});
     case "tools/list":
       return ok(request.id, {
-        tools: tools.map(({ name, description, inputSchema }) => ({ name, description, inputSchema }))
+        tools: tools.map(({ name, description, inputSchema, annotations }) => ({ name, description, inputSchema, annotations }))
       });
     case "tools/call": {
       const name = request.params?.name;

package/dist/coi.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-process.stderr.write("[agent-intercom-build] package=@ctliz/agent-intercom-codex version=0.12.0-connect.1 target=coi sourceSha256=f5d619a0fa1debe9fa5b5850ec8d372a474488d0fb4bde6540cd7656f6bb2c51\n");
+process.stderr.write("[agent-intercom-build] package=@ctliz/agent-intercom-codex version=0.12.0-connect.3 target=coi sourceSha256=d7208ae5db4e820dfc584a6a8a4a96f5ccf548f20872199024f6d4c955f85622\n");
 
 // codex/coi.ts
 import { once as once2 } from "node:events";
@@ -104,7 +104,8 @@ var CodexAppServerClient = class extends EventEmitter {
       const started = spawnSync(this.options.startDaemonCommand, this.options.startDaemonArgs, {
         encoding: "utf8",
         env: this.options.env,
-        stdio: ["ignore", "pipe", "pipe"]
+        stdio: ["ignore", "pipe", "pipe"],
+        shell: false
       });
       if (started.status !== 0) {
         throw new Error(`Failed to start Codex app-server daemon: ${started.stderr || started.stdout || `exit ${started.status}`}`);
@@ -117,7 +118,8 @@ var CodexAppServerClient = class extends EventEmitter {
     }
     const proc = spawn(this.options.command, this.options.args, {
       stdio: ["pipe", "pipe", "pipe"],
-      env: this.options.env
+      env: this.options.env,
+      shell: false
     });
     this.proc = proc;
     this.rl = readline.createInterface({ input: proc.stdout, crlfDelay: Infinity });
@@ -2444,7 +2446,8 @@ function getBrokerSpawnOptions(extensionDir = EXTENSION_DIR, env = process.env)
     stdio: "ignore",
     cwd: extensionDir,
     env: { ...env, PI_CODING_AGENT_DIR: getAgentDirPath(env), NODE_NO_WARNINGS: "1" },
-    windowsHide: true
+    windowsHide: true,
+    shell: false
   };
 }
 function toError2(error) {
@@ -3931,7 +3934,7 @@ function runDetachedClipboardCommand(command, args, text, env, timeoutMs) {
     };
     const timeout = setTimeout(() => finish({ ok: false, error: `${command} did not start within ${timeoutMs}ms` }), timeoutMs);
     try {
-      const proc = spawn3(command, args, { env, stdio: ["pipe", "ignore", "ignore"] });
+      const proc = spawn3(command, args, { env, stdio: ["pipe", "ignore", "ignore"], shell: false });
       proc.once("error", (error) => finish({ ok: false, error: error.message }));
       proc.once("spawn", () => {
         proc.stdin.on("error", () => {
@@ -3962,7 +3965,7 @@ function runClipboardCommand(command, args, text, env, timeoutMs) {
     }, timeoutMs);
     let proc;
     try {
-      proc = spawn3(command, args, { env, stdio: ["pipe", "ignore", "pipe"] });
+      proc = spawn3(command, args, { env, stdio: ["pipe", "ignore", "pipe"], shell: false });
       proc.stderr?.setEncoding("utf8");
       proc.stderr?.on("data", (chunk) => {
         if (stderr.length < 4096) stderr += chunk;
@@ -4195,7 +4198,8 @@ function gitString(cwd, args) {
   const result = spawnSync2("git", args, {
     cwd,
     encoding: "utf8",
-    stdio: ["ignore", "pipe", "ignore"]
+    stdio: ["ignore", "pipe", "ignore"],
+    shell: false
   });
   if (result.status !== 0) return null;
   const trimmed = result.stdout.trim();
@@ -4526,7 +4530,7 @@ function terminalNotification(message) {
 async function runInteractiveTui(command, args, refreshArgs, cwd, onAltI, onAltM, installRefresh, protectedBossClient, launchEnv = process.env) {
   assertHardenedBossProviderAuthority(protectedBossClient);
   const runInherited = async () => {
-    const tui2 = spawn4(command, args, { cwd, env: launchEnv, stdio: "inherit" });
+    const tui2 = spawn4(command, args, { cwd, env: launchEnv, stdio: "inherit", shell: false });
     const [code, signal] = await once2(tui2, "exit");
     if (typeof code === "number") return code;
     return signal === "SIGINT" ? 130 : 1;
@@ -4646,7 +4650,8 @@ async function runCoi(options, env = process.env) {
     const help = spawn4(options.codexCommand, options.codexArgs, {
       cwd: options.cwd,
       env,
-      stdio: "inherit"
+      stdio: "inherit",
+      shell: false
     });
     const [code, signal] = await once2(help, "exit");
     if (typeof code === "number") return code;
@@ -4678,7 +4683,8 @@ async function runCoi(options, env = process.env) {
   const appServer = spawn4(options.codexCommand, buildCodexAppServerArgs(options.codexArgs, socketPath, env), {
     cwd: options.cwd,
     env,
-    stdio: ["ignore", "ignore", "pipe"]
+    stdio: ["ignore", "ignore", "pipe"],
+    shell: false
   });
   appServer.stderr?.on("data", (chunk) => {
     if (env.CODEX_INTERCOM_DEBUG) process.stderr.write(String(chunk));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ctliz/agent-intercom-codex",
-  "version": "0.12.0-connect.1",
+  "version": "0.12.0-connect.3",
   "description": "Codex MCP plugin for direct local messaging with Pi and Codex coding-agent sessions.",
   "license": "AGPL-3.0-or-later",
   "type": "module",