@hellolynk-ai/codex-plugin 0.2.100 → 0.2.102-macos.1

package/plugins/hellolynk-codex/server/native-conversation-directory.mjs

@@ -1,33 +1,33 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-
-// The desktop's metadata index, read-only. Never read rollout bodies, previews,
-// first_user_message or model summaries. Native read_thread still decides
-// whether a selected conversation can actually receive a reminder.
-export async function readCodexConversationDirectory({ home = process.env.CODEX_HOME || path.join(os.homedir(), ".codex"),
-  callerThreadId, projects = [], openDatabase } = {}) {
-  const names = (await fs.readdir(home)).filter(name => /^state_\d+\.sqlite$/.test(name))
-    .sort((a, b) => Number(b.match(/\d+/)[0]) - Number(a.match(/\d+/)[0]));
-  if (!names.length) throw new Error("codex_native_directory_unavailable");
-  const Database = openDatabase || ((await import("node:sqlite")).DatabaseSync);
-  const db = new Database(path.join(home, names[0]), { readOnly: true });
-  try {
-    const columns = new Set(db.prepare("PRAGMA table_info(threads)").all().map(row => row.name));
-    if (!["id", "title", "cwd", "source", "archived", "creator_account_id"].every(key => columns.has(key)))
-      throw new Error("codex_native_directory_schema_unavailable");
-    const owner = db.prepare("SELECT creator_account_id FROM threads WHERE id = ?").get(callerThreadId);
-    if (!owner) throw new Error("codex_native_directory_owner_unavailable");
-    const optional = ["name", "project_id"].filter(key => columns.has(key));
-    const rows = db.prepare(`SELECT id, cwd, archived${optional.length ? ", " + optional.join(", ") : ""}
-      FROM threads WHERE creator_account_id IS ? AND source IN ('vscode','cli','exec','appServer')`).all(owner.creator_account_id);
-    const byProject = new Map(projects.map(project => [project.id || project.projectId, project.name || project.title]));
-    return { coverage: "complete", exactTargetSupported: true, conversations: rows.map(row => ({
-      // In the native index, title can be the complete first user message.
-      // Only the explicit conversation name is metadata safe to export.
-      targetConversationId: row.id, title: row.name || row.id,
-      project: byProject.get(row.project_id) || path.win32.basename(row.cwd || "") || path.posix.basename(row.cwd || ""),
-      state: row.archived ? "archived" : "notLoaded",
-    })) };
-  } finally { db.close(); }
-}
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+
+// The desktop's metadata index, read-only. Never read rollout bodies, previews,
+// first_user_message or model summaries. Native read_thread still decides
+// whether a selected conversation can actually receive a reminder.
+export async function readCodexConversationDirectory({ home = process.env.CODEX_HOME || path.join(os.homedir(), ".codex"),
+  callerThreadId, projects = [], openDatabase } = {}) {
+  const names = (await fs.readdir(home)).filter(name => /^state_\d+\.sqlite$/.test(name))
+    .sort((a, b) => Number(b.match(/\d+/)[0]) - Number(a.match(/\d+/)[0]));
+  if (!names.length) throw new Error("codex_native_directory_unavailable");
+  const Database = openDatabase || ((await import("node:sqlite")).DatabaseSync);
+  const db = new Database(path.join(home, names[0]), { readOnly: true });
+  try {
+    const columns = new Set(db.prepare("PRAGMA table_info(threads)").all().map(row => row.name));
+    if (!["id", "title", "cwd", "source", "archived", "creator_account_id"].every(key => columns.has(key)))
+      throw new Error("codex_native_directory_schema_unavailable");
+    const owner = db.prepare("SELECT creator_account_id FROM threads WHERE id = ?").get(callerThreadId);
+    if (!owner) throw new Error("codex_native_directory_owner_unavailable");
+    const optional = ["name", "project_id"].filter(key => columns.has(key));
+    const rows = db.prepare(`SELECT id, cwd, archived${optional.length ? ", " + optional.join(", ") : ""}
+      FROM threads WHERE creator_account_id IS ? AND source IN ('vscode','cli','exec','appServer')`).all(owner.creator_account_id);
+    const byProject = new Map(projects.map(project => [project.id || project.projectId, project.name || project.title]));
+    return { coverage: "complete", exactTargetSupported: true, conversations: rows.map(row => ({
+      // In the native index, title can be the complete first user message.
+      // Only the explicit conversation name is metadata safe to export.
+      targetConversationId: row.id, title: row.name || row.id,
+      project: byProject.get(row.project_id) || path.win32.basename(row.cwd || "") || path.posix.basename(row.cwd || ""),
+      state: row.archived ? "archived" : "notLoaded",
+    })) };
+  } finally { db.close(); }
+}

package/plugins/hellolynk-codex/server/workbench-runtime.mjs

@@ -1,18 +1,18 @@
-import fs from "node:fs/promises";
-import { createHash } from "node:crypto";
-import { fileURLToPath } from "node:url";
-
-// Codex uses resource metadata before the app can report its intrinsic size.
-// Keep a usable frame when its initial container limit is echoed by the app.
-export const CODEX_WORKBENCH_RESOURCE_META = Object.freeze({
-  ui: Object.freeze({ prefersBorder: true, domain: "hellolynk.local" }),
-  "openai/widgetPrefersBorder": true,
-  "openai/widgetHeightHint": 680,
-  "openai/widgetMinFrameHeight": 680,
-});
-
-const CODEX_RESOURCE_URI_SEED = "ui://hellolynk/workbench-codex-pending.html";
-const OUTPUT_SHA256_RE = /^[a-f0-9]{64}$/;
+import fs from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { fileURLToPath } from "node:url";
+
+// Codex uses resource metadata before the app can report its intrinsic size.
+// Keep a usable frame when its initial container limit is echoed by the app.
+export const CODEX_WORKBENCH_RESOURCE_META = Object.freeze({
+  ui: Object.freeze({ prefersBorder: true, domain: "hellolynk.local" }),
+  "openai/widgetPrefersBorder": true,
+  "openai/widgetHeightHint": 680,
+  "openai/widgetMinFrameHeight": 680,
+});
+
+const CODEX_RESOURCE_URI_SEED = "ui://hellolynk/workbench-codex-pending.html";
+const OUTPUT_SHA256_RE = /^[a-f0-9]{64}$/;
 const SHARED_ROOTS = Object.freeze([
   new URL("../runtime/workbench/", import.meta.url),
   new URL("../../../clients/workbench/", import.meta.url),
@@ -38,14 +38,14 @@ export async function bootstrapCodexWorkbenchRuntime(options = {}) {
     || typeof shared.validateWorkbenchCommandResult !== "function") {
     throw codeError("workbench_codex_shared_bootstrap_invalid");
   }
-  const explicitResourceUri = options.resourceUri == null ? null : options.resourceUri;
-  const bootstrapped = await shared.bootstrapWorkbenchCandidate("codex", {
-    resourceUri: explicitResourceUri || CODEX_RESOURCE_URI_SEED,
-  });
-  const resourceUri = explicitResourceUri || codexWorkbenchResourceUri(bootstrapped);
-  const candidate = resourceUri === bootstrapped.resourceUri
-    ? bootstrapped
-    : Object.freeze({ ...bootstrapped, resourceUri });
+  const explicitResourceUri = options.resourceUri == null ? null : options.resourceUri;
+  const bootstrapped = await shared.bootstrapWorkbenchCandidate("codex", {
+    resourceUri: explicitResourceUri || CODEX_RESOURCE_URI_SEED,
+  });
+  const resourceUri = explicitResourceUri || codexWorkbenchResourceUri(bootstrapped);
+  const candidate = resourceUri === bootstrapped.resourceUri
+    ? bootstrapped
+    : Object.freeze({ ...bootstrapped, resourceUri });
   if (options.adapter === undefined) return candidate;
   if (typeof options.adapter?.readWorkbenchSnapshot !== "function") {
     throw codeError("workbench_codex_rpc_adapter_invalid");
@@ -58,9 +58,9 @@ export async function bootstrapCodexWorkbenchRuntime(options = {}) {
   const readOnlyCandidate = {
     resourceUri: candidate.resourceUri,
     html: candidate.html,
-    readSnapshot: (input = {}) => options.adapter.readWorkbenchSnapshot(input),
-    ...(typeof options.adapter.readWorkbenchChanges === "function"
-      ? { readChanges: (input) => options.adapter.readWorkbenchChanges(input) } : {}),
+    readSnapshot: (input = {}) => options.adapter.readWorkbenchSnapshot(input),
+    ...(typeof options.adapter.readWorkbenchChanges === "function"
+      ? { readChanges: (input) => options.adapter.readWorkbenchChanges(input) } : {}),
     ...(typeof options.connectAccount === "function" ? { connectAccount: options.connectAccount } : {}),
     validateReadRequest: shared.validateWorkbenchReadRequest,
     validateSnapshot: shared.validateWorkbenchSnapshot,
@@ -82,24 +82,24 @@ export async function bootstrapCodexWorkbenchRuntime(options = {}) {
     validateCommand: shared.validateWorkbenchCommand,
     validateCommandResult: shared.validateWorkbenchCommandResult,
   });
-}
-
-function codexWorkbenchResourceUri(candidate) {
-  const outputSha256 = String(candidate?.manifest?.outputSha256 || "");
-  if (!OUTPUT_SHA256_RE.test(outputSha256)) throw codeError("workbench_codex_output_sha256_invalid");
-  // Metadata changes must also invalidate Codex's cached resource.
-  const resourceSha256 = createHash("sha256")
-    .update(JSON.stringify({ outputSha256, meta: CODEX_WORKBENCH_RESOURCE_META }))
-    .digest("hex");
-  return `ui://hellolynk/workbench-codex-${resourceSha256}.html`;
-}
+}
+
+function codexWorkbenchResourceUri(candidate) {
+  const outputSha256 = String(candidate?.manifest?.outputSha256 || "");
+  if (!OUTPUT_SHA256_RE.test(outputSha256)) throw codeError("workbench_codex_output_sha256_invalid");
+  // Metadata changes must also invalidate Codex's cached resource.
+  const resourceSha256 = createHash("sha256")
+    .update(JSON.stringify({ outputSha256, meta: CODEX_WORKBENCH_RESOURCE_META }))
+    .digest("hex");
+  return `ui://hellolynk/workbench-codex-${resourceSha256}.html`;
+}
 
 function supportsF3ActionGrantTransport(shared, candidate, adapter) {
-  return shared.HELLOLYNK_WORKBENCH_SNAPSHOT_CONTRACT === "hellolynk-workbench-snapshot-v12"
-    && shared.HELLOLYNK_WORKBENCH_SNAPSHOT_SCHEMA_VERSION === 12
-    && shared.HELLOLYNK_WORKBENCH_COMMAND_CONTRACT === "hellolynk-workbench-command-v6"
-    && shared.HELLOLYNK_WORKBENCH_RESULT_CONTRACT === "hellolynk-workbench-command-result-v6"
-    && shared.HELLOLYNK_WORKBENCH_SCHEMA_VERSION === 6
+  return shared.HELLOLYNK_WORKBENCH_SNAPSHOT_CONTRACT === "hellolynk-workbench-snapshot-v12"
+    && shared.HELLOLYNK_WORKBENCH_SNAPSHOT_SCHEMA_VERSION === 12
+    && shared.HELLOLYNK_WORKBENCH_COMMAND_CONTRACT === "hellolynk-workbench-command-v6"
+    && shared.HELLOLYNK_WORKBENCH_RESULT_CONTRACT === "hellolynk-workbench-command-result-v6"
+    && shared.HELLOLYNK_WORKBENCH_SCHEMA_VERSION === 6
     && candidate?.manifest?.sourceContract === shared.HELLOLYNK_WORKBENCH_SNAPSHOT_CONTRACT
     && typeof candidate.html === "string"
     && candidate.html.includes("hellolynk_workbench_action_grant")

package/tools/hellolynk-activate-neutral-host-clients.mjs

@@ -5,6 +5,7 @@ import crypto from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";
 
+import { verifyDarwinUnclaimedAuthorization } from "../plugins/hellolynk-codex/runtime/core/hellolynk-darwin-host.mjs";
 import { readClientProfile } from "../plugins/hellolynk-codex/runtime/core/hellolynk-client-profile.mjs";
 import { createNeutralHostInstallationStore } from "../plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-installation-store.mjs";
 import { clientAccountBaseRoot } from "../plugins/hellolynk-codex/runtime/core/hellolynk-client-account.mjs";
@@ -164,7 +165,7 @@ assert.equal(releaseVerification.verifiedFileCount >= 8, true);
 let transport = null;
 let bootstrapTransportRequired = false;
 let protectedStorePresent = true;
-try { await fs.lstat(path.join(root, "capabilities-v1.dpapi.clixml")); }
+try { await fs.lstat(path.join(root, process.platform === "darwin" ? "protected-v1.sqlite" : "capabilities-v1.dpapi.clixml")); }
 catch (error) {
   if (error?.code !== "ENOENT") throw error;
   protectedStorePresent = false;
@@ -173,6 +174,9 @@ if (!protectedStorePresent) {
   if (!(freshPreBind || recoveryPreBind)) await store.status();
   await verifyHostProtectedStorePath({ root, path: root, directory: true });
   bootstrapTransportRequired = true;
+} else if (process.platform === "darwin" && freshPreBind) {
+  await verifyDarwinUnclaimedAuthorization(root);
+  bootstrapTransportRequired = true;
 } else {
   assert.equal((await store.status()).protected, true);
   try { transport = preflightOnly ? await store.verifyTransport() : await store.resolveTransport(); }