@hellolynk-ai/codex-plugin 0.2.100 → 0.2.102

package/bin/hellolynk-client-setup.mjs

@@ -61,8 +61,8 @@ try {
       "--expected-manifest-sha256", sourceRelease.outerManifestSha256,
     ]);
   } else {
-  const originalLocations = resolveLocations();
   const accountModule = await importStableCore(PACKAGE_ROOT, "hellolynk-client-account.mjs", "hellolynk_npm_account_runtime_invalid");
+  const originalLocations = resolveLocations(accountModule.clientAccountBaseRoot);
   const baseRoot = accountModule.clientAccountBaseRoot(originalLocations.hostRoot);
   const packageLocations = { ...originalLocations, hostRoot: baseRoot, finalCurrentRoot: path.dirname(baseRoot) };
   const accounts = accountModule.createClientAccountActions({ client: metadata.client, storeRoot: baseRoot });
@@ -84,6 +84,13 @@ try {
   if (mutating) {
     await prepareFinalClientRoot(locations);
     installed = await installStablePackage({ packageClosure, sourceRelease, locations: packageLocations });
+    if (metadata.client === "codex") {
+      // The invoking updater can still be B255 code. Stop its old cleanup
+      // before switching the binding/cache to a release with process records.
+      const cleanup = await importStableCore(installed.packageRoot, "hellolynk-release-retention.mjs", "hellolynk_release_retention_unavailable");
+      await cleanup.protectRetentionReceipt({ releasesRoot: path.dirname(installed.packageRoot),
+        client: "codex", currentRelease: installed.packageRoot });
+    }
   }
   const activation = await inspectActivation(locations.hostRoot, metadata.profileId);
   // Both public install commands use the actual account state. Native recovery
@@ -831,7 +838,7 @@ async function verifyRelease(releaseRoot, packageRoot, expectedMetadata = metada
   return Object.freeze({ manifestSha256, outerManifestSha256 });
 }
 
-function resolveLocations() {
+function resolveLocations(getDefaultHostRoot) {
   if (process.platform !== "win32") fail("hellolynk_npm_windows_only");
   const home = path.resolve(process.env.USERPROFILE || os.homedir());
   const localAppData = path.resolve(process.env.LOCALAPPDATA || path.join(home, "AppData", "Local"));
@@ -841,7 +848,7 @@ function resolveLocations() {
   const codexHome = path.resolve(configuredCodexHome || path.join(home, ".codex"));
   const configuredHostRoot = String(process.env.HELLOLYNK_NEUTRAL_STORE_ROOT || "").trim();
   if (configuredHostRoot && !path.isAbsolute(configuredHostRoot)) fail("hellolynk_npm_store_root_invalid");
-  const hostRoot = path.resolve(configuredHostRoot || path.join(localAppData, "HelloLynk", "host"));
+  const hostRoot = path.resolve(configuredHostRoot || getDefaultHostRoot());
   if (configuredHostRoot && path.basename(hostRoot).toLowerCase() !== "host") {
     fail("hellolynk_npm_store_root_invalid");
   }
@@ -997,6 +1004,12 @@ async function startHostWhenAbsent(runtime, binding) {
 }
 
 async function secureStableReleaseTree(locations, releaseId, options = {}) {
+  const releasePath = path.resolve(locations.finalCurrentRoot, "releases", releaseId);
+  // An existing AppData root can be shared while a new release is redirected
+  // into one desktop app's private cache. Other clients cannot use that release.
+  if (process.platform === "win32" && realpathSync.native(releasePath).toLowerCase() !== releasePath.toLowerCase()) {
+    fail("client_root_alias_rejected");
+  }
   const module = await importCore(
     "hellolynk-platform-credential-store.mjs",
     "hellolynk_npm_client_root_security_unavailable",

package/hellolynk-client-pack-manifest.json

@@ -2,7 +2,7 @@
   "contract": "hellolynk-client-npm-pack-manifest-v1",
   "client": "codex",
   "packageName": "@hellolynk-ai/codex-plugin",
-  "version": "0.2.100",
+  "version": "0.2.102",
   "workbench": {
     "path": "plugins/hellolynk-codex/runtime/workbench/hellolynk-workbench-build.json",
     "contract": "hellolynk-shared-workbench-build-v1",
@@ -17,8 +17,8 @@
     },
     {
       "path": "bin/hellolynk-client-setup.mjs",
-      "bytes": 141259,
-      "sha256": "ab6ce9491d9b88856fdc0207b0df3230ed27642d9d206f52341a4f9791622a4e"
+      "bytes": 142207,
+      "sha256": "95386fcd9092f31abb3b0441033b3b385b3c355506613da24b4557d5f9cac6ef"
     },
     {
       "path": "bin/hellolynk-mcp-config-shape.mjs",
@@ -33,7 +33,7 @@
     {
       "path": "package.json",
       "bytes": 1713,
-      "sha256": "70f9207e339885e7ee3f170f5d06f78a64066c1d5ceaba5692b75bc404149e35"
+      "sha256": "a1dffd73cef661cd0f019f5a532f949693fccfa72222d346bd867470977cdc99"
     },
     {
       "path": "plugins/hellolynk-codex/.app.json",
@@ -43,7 +43,7 @@
     {
       "path": "plugins/hellolynk-codex/.codex-plugin/plugin.json",
       "bytes": 1669,
-      "sha256": "f61ede8bedf0120a53b381a7cdc9cdbcc49242360d8d1e4271bec69f85b9b91f"
+      "sha256": "38d2a5204b66ec57368494e69ed71de655f798f9d37ab2af966b59c3ab07d0f2"
     },
     {
       "path": "plugins/hellolynk-codex/.mcp.json",
@@ -58,7 +58,7 @@
     {
       "path": "plugins/hellolynk-codex/package.json",
       "bytes": 1030,
-      "sha256": "bd762c92db97e96c4b9a1e1bef99a13d96cdd0e06bd58f4cf875fbcd00186cf9"
+      "sha256": "befbca064334e8ff7f9d192f095ac1bd786a3882385a450fc2c2d2a5c9b2b7dd"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-client-account.mjs",
@@ -72,8 +72,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-client-profile.mjs",
-      "bytes": 8282,
-      "sha256": "4b45a78b4d6c4794a1f494bd95777579c32c56a68321a1d3b484048942ae4742"
+      "bytes": 9359,
+      "sha256": "8be37831c96610e3d0a64848ada86488970cc6079e49764b47d8a8b2ba852269"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-host-auth.mjs",
@@ -92,8 +92,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-neutral-host-installation-store.mjs",
-      "bytes": 33525,
-      "sha256": "b5f6288732af6f9b9c0c750f6002eae657dde9513fc97674f6e59200f3cc9dc6"
+      "bytes": 33183,
+      "sha256": "dfb6bba4c627082cd6fca8cb38dc786f905e38f3e83ccf91dbfe57e55639e8a2"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-platform-credential-store.mjs",
@@ -132,8 +132,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-client-profile.mjs",
-      "bytes": 8282,
-      "sha256": "4b45a78b4d6c4794a1f494bd95777579c32c56a68321a1d3b484048942ae4742"
+      "bytes": 9359,
+      "sha256": "8be37831c96610e3d0a64848ada86488970cc6079e49764b47d8a8b2ba852269"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-client-update-entry.mjs",
@@ -267,8 +267,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-native-addressing-tools.cjs",
-      "bytes": 19350,
-      "sha256": "252251de855c3fe9c5ebdd54a97ba976a8009f4ac57ec44f492bed8c7fb903de"
+      "bytes": 19443,
+      "sha256": "f4bd81b3d03277e28955a62409383a0c4072c6212567f71425df4e18ece75d63"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-native-conversations.mjs",
@@ -307,8 +307,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-installation-store.mjs",
-      "bytes": 33525,
-      "sha256": "b5f6288732af6f9b9c0c750f6002eae657dde9513fc97674f6e59200f3cc9dc6"
+      "bytes": 33183,
+      "sha256": "dfb6bba4c627082cd6fca8cb38dc786f905e38f3e83ccf91dbfe57e55639e8a2"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-launcher.mjs",
@@ -318,7 +318,7 @@
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-process.mjs",
       "bytes": 225161,
-      "sha256": "48f9bd6451adafdf3b43591a3b1469e36174c30fe04214cd2a84fb0aeebea023"
+      "sha256": "e744bacf65f7b86cbcf7d654189c0e07e09401083e2b6f9053b17c1c3bacd1b4"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-store-adapters.mjs",
@@ -342,8 +342,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-release-retention.mjs",
-      "bytes": 18822,
-      "sha256": "4ba5607e92f98a9a33b9ffd9ad166e559bc3197fcb1a6d54cef96b2b91ddc38e"
+      "bytes": 20624,
+      "sha256": "9b02a42a510fa5ef4a251b6e675f9ccc60f20b718d17c1617027cd048c5634dd"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-runtime-safety.cjs",
@@ -378,12 +378,12 @@
     {
       "path": "plugins/hellolynk-codex/runtime/neutral-host-release-manifest.json",
       "bytes": 13440,
-      "sha256": "98a0a761956020462c08bc6c02000b06fd37e0c2a5f44266ca5d4657c3ea28ce"
+      "sha256": "3f8ad933949136ed1ebf5172c9e49ead0b0e2829650bc960eef1bdddd27c6a8f"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/neutral-host-release-pin.json",
       "bytes": 146,
-      "sha256": "4bee28c2ad8c0bfc5f1021127fa793e43797ff08fda49945622827502a5f26a9"
+      "sha256": "6c9832284a05105014d72fe52f15e7d36c3c3fbbcb20aaf24f84a10196a7fad8"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/platform/windows/configure-agent.ps1",
@@ -552,8 +552,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/server/codex-neutral-production.mjs",
-      "bytes": 26794,
-      "sha256": "34b865d80d7eb3c8e6986635b158c8583ddddb40bb528c4a75f0a498bdb3e1fb"
+      "bytes": 26960,
+      "sha256": "7b3249f1b35c331cf2b00ac2873a54d12fc6f61cf341bb82cec98e49ce221b92"
     },
     {
       "path": "plugins/hellolynk-codex/server/mcp-proxy.mjs",

package/hellolynk-client-pack-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-client-npm-pack-pin-v1",
-  "manifestSha256": "75821d529dc23bf90c905bbfbfd9ada66bdff198413c003305e744499d68ad3d"
+  "manifestSha256": "f750254b705c93ec80f1e297d7a03f2c8e3b0a3cdf73bb0073a0527ca64fdf46"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/codex-plugin",
-  "version": "0.2.100",
+  "version": "0.2.102",
   "description": "HelloLynk Messaging for Codex: open conversations and let your AI message other people's AI assistants.",
   "homepage": "https://hellolynk.com",
   "repository": {

package/plugins/hellolynk-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "hellolynk-codex",
-  "version": "0.2.100",
+  "version": "0.2.102",
   "description": "HelloLynk 通讯、本地未读提醒与安全文字收发的 Codex 插件。",
   "author": {
     "name": "HelloLynk local project"

package/plugins/hellolynk-codex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/codex-plugin",
-  "version": "0.2.100",
+  "version": "0.2.102",
   "private": true,
   "type": "module",
   "description": "Project-local HelloLynk Messaging, unread notification, and secure messaging plugin for Codex.",

package/plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-client-profile.mjs

@@ -1,4 +1,5 @@
 import { lstat, mkdir, open, readFile, rename, rm, stat } from "node:fs/promises";
+import { readdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { randomUUID } from "node:crypto";
@@ -19,12 +20,34 @@ const SAFE_SCOPE = /^[a-z][a-z0-9_.:-]{0,127}$/;
 const MAX_PROFILE_BYTES = 64 * 1024;
 
 export function defaultHelloLynkClientRoot(platform = process.platform, env = process.env) {
-  const home = resolve(String(env.HOME || env.USERPROFILE || homedir()));
-  if (platform === "win32") return resolve(String(env.LOCALAPPDATA || join(home, "AppData", "Local")), "HelloLynk");
+  const home = resolve(String((platform === "win32" ? env.USERPROFILE || env.HOME : env.HOME || env.USERPROFILE) || homedir()));
+  if (platform === "win32") {
+    const current = join(home, ".hellolynk", "hellolynk-v2");
+    // Once selected, another client's older installer must not move us back.
+    if (hasWindowsClientInstallation(current)) return current;
+    const existing = resolve(String(env.LOCALAPPDATA || join(home, "AppData", "Local")), "HelloLynk");
+    // AppData created from a packaged desktop app can be private to that app.
+    // Keep an existing installation; an empty failed setup is not an account.
+    if (hasWindowsClientInstallation(existing)) return existing;
+    return current;
+  }
   if (platform === "darwin") return join(home, "Library", "Application Support", "HelloLynk");
   return resolve(String(env.XDG_DATA_HOME || join(home, ".local", "share")), "hellolynk");
 }
 
+function hasWindowsClientInstallation(root) {
+  for (const directory of ["profiles", "releases", "host", "credentials", "e2ee-private-keys"]) {
+    try {
+      const entries = readdirSync(join(root, directory), { withFileTypes: true });
+      if (entries.some((entry) => directory !== "host" || entry.name !== "runtime")) return true;
+    } catch (error) {
+      // An unreadable existing location must not silently become a fresh account.
+      if (error.code !== "ENOENT") return true;
+    }
+  }
+  return false;
+}
+
 function safeId(value, code) {
   const normalized = String(value || "").trim();
   if (!SAFE_ID.test(normalized)) throw new Error(code);

package/plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-neutral-host-installation-store.mjs

@@ -12,10 +12,9 @@ import {
 } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, parse, resolve } from "node:path";
 import { spawn } from "node:child_process";
-import { homedir } from "node:os";
 import { performance } from "node:perf_hooks";
 import { withLocalProcessLock } from "./hellolynk-local-process-lock.mjs";
-import { readClientProfile } from "./hellolynk-client-profile.mjs";
+import { defaultHelloLynkClientRoot, readClientProfile } from "./hellolynk-client-profile.mjs";
 import { assertIdentifier } from "./hellolynk-host-auth.mjs";
 import runtimeSafety from "./hellolynk-runtime-safety.cjs";
 
@@ -46,10 +45,7 @@ export function defaultNeutralHostStoreRoot(platform = process.platform, env = p
     }
     return root;
   }
-  const home = resolve(String(env.HOME || env.USERPROFILE || homedir()));
-  if (platform === "win32") return resolve(String(env.LOCALAPPDATA || join(home, "AppData", "Local")), "HelloLynk", "host");
-  if (platform === "darwin") return join(home, "Library", "Application Support", "HelloLynk", "host");
-  return resolve(String(env.XDG_DATA_HOME || join(home, ".local", "share")), "hellolynk", "host");
+  return join(defaultHelloLynkClientRoot(platform, env), "host");
 }
 
 export function createNeutralHostInstallationStore(options = {}) {

package/plugins/hellolynk-codex/runtime/core/hellolynk-client-profile.mjs

@@ -1,4 +1,5 @@
 import { lstat, mkdir, open, readFile, rename, rm, stat } from "node:fs/promises";
+import { readdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { randomUUID } from "node:crypto";
@@ -19,12 +20,34 @@ const SAFE_SCOPE = /^[a-z][a-z0-9_.:-]{0,127}$/;
 const MAX_PROFILE_BYTES = 64 * 1024;
 
 export function defaultHelloLynkClientRoot(platform = process.platform, env = process.env) {
-  const home = resolve(String(env.HOME || env.USERPROFILE || homedir()));
-  if (platform === "win32") return resolve(String(env.LOCALAPPDATA || join(home, "AppData", "Local")), "HelloLynk");
+  const home = resolve(String((platform === "win32" ? env.USERPROFILE || env.HOME : env.HOME || env.USERPROFILE) || homedir()));
+  if (platform === "win32") {
+    const current = join(home, ".hellolynk", "hellolynk-v2");
+    // Once selected, another client's older installer must not move us back.
+    if (hasWindowsClientInstallation(current)) return current;
+    const existing = resolve(String(env.LOCALAPPDATA || join(home, "AppData", "Local")), "HelloLynk");
+    // AppData created from a packaged desktop app can be private to that app.
+    // Keep an existing installation; an empty failed setup is not an account.
+    if (hasWindowsClientInstallation(existing)) return existing;
+    return current;
+  }
   if (platform === "darwin") return join(home, "Library", "Application Support", "HelloLynk");
   return resolve(String(env.XDG_DATA_HOME || join(home, ".local", "share")), "hellolynk");
 }
 
+function hasWindowsClientInstallation(root) {
+  for (const directory of ["profiles", "releases", "host", "credentials", "e2ee-private-keys"]) {
+    try {
+      const entries = readdirSync(join(root, directory), { withFileTypes: true });
+      if (entries.some((entry) => directory !== "host" || entry.name !== "runtime")) return true;
+    } catch (error) {
+      // An unreadable existing location must not silently become a fresh account.
+      if (error.code !== "ENOENT") return true;
+    }
+  }
+  return false;
+}
+
 function safeId(value, code) {
   const normalized = String(value || "").trim();
   if (!SAFE_ID.test(normalized)) throw new Error(code);

package/plugins/hellolynk-codex/runtime/core/hellolynk-native-addressing-tools.cjs

@@ -18,7 +18,7 @@ const conversationGuidance = "HelloLynk 是本人授权的 AI 通讯。接着已
 // What every client shows for the shared tools; nativeTool applies it.
 const toolText = Object.freeze({
   hellolynk_reply_authorized_message: { title: "回复来信", description: "接着当前对话的一封来信发送；不接手其他对话。" },
-  hellolynk_send_authorized_message: { title: "发起通信", description: "向本人授权的联系人发起新通信。contact 填对方名字；本人点名了对话时，targetConversationTitle 填完整标题。接着已有来往用 hellolynk_reply_authorized_message。" },
+  hellolynk_send_authorized_message: { title: "发起通信", description: "向本人授权的联系人发起新通信。contact 填对方名字；本人点名了对话时，targetConversationTitle 填完整标题。未指定对话的新通信默认送到对方的 HelloLynk 独立会话；要继续已有来往，用 hellolynk_reply_authorized_message 回复原信。" },
   hellolynk_list_authorized_contacts: { title: "查找联系人", description: queryDescription },
   hellolynk_claim_message: { title: "读取来信", description: "按自动提醒里的 batchId 一次读取整批来信（合计不超过 2 万字）；手动读单条传 localMessageId 和 conversationKey。" },
   hellolynk_list_pending_messages: { title: "待处理来信", description: "列出当前对话等待 AI 处理的来信，不含正文。" },

package/plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-installation-store.mjs

@@ -12,10 +12,9 @@ import {
 } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, parse, resolve } from "node:path";
 import { spawn } from "node:child_process";
-import { homedir } from "node:os";
 import { performance } from "node:perf_hooks";
 import { withLocalProcessLock } from "./hellolynk-local-process-lock.mjs";
-import { readClientProfile } from "./hellolynk-client-profile.mjs";
+import { defaultHelloLynkClientRoot, readClientProfile } from "./hellolynk-client-profile.mjs";
 import { assertIdentifier } from "./hellolynk-host-auth.mjs";
 import runtimeSafety from "./hellolynk-runtime-safety.cjs";
 
@@ -46,10 +45,7 @@ export function defaultNeutralHostStoreRoot(platform = process.platform, env = p
     }
     return root;
   }
-  const home = resolve(String(env.HOME || env.USERPROFILE || homedir()));
-  if (platform === "win32") return resolve(String(env.LOCALAPPDATA || join(home, "AppData", "Local")), "HelloLynk", "host");
-  if (platform === "darwin") return join(home, "Library", "Application Support", "HelloLynk", "host");
-  return resolve(String(env.XDG_DATA_HOME || join(home, ".local", "share")), "hellolynk", "host");
+  return join(defaultHelloLynkClientRoot(platform, env), "host");
 }
 
 export function createNeutralHostInstallationStore(options = {}) {

package/plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-process.mjs

@@ -34,7 +34,7 @@ export const HELLOLYNK_NEUTRAL_HOST_PROCESS_CONTRACT = "hellolynk-neutral-host-p
 export const HELLOLYNK_NEUTRAL_HOST_DISCOVERY_CONTRACT = "hellolynk-neutral-host-discovery-v1";
 // Raised with every release batch, together with the six client versions. A Host reports it
 // in its health; the higher release stays and the lower one makes room.
-export const HELLOLYNK_HOST_RELEASE_ORDINAL = 13;
+export const HELLOLYNK_HOST_RELEASE_ORDINAL = 15;
 
 const INSTALLATION_LOCK_CONTRACT = "hellolynk-neutral-host-installation-lock-v2";
 const INSTALLATION_LOCK_MAX_BYTES = 4 * 1024;

package/plugins/hellolynk-codex/runtime/core/hellolynk-release-retention.mjs

@@ -15,12 +15,29 @@ const contract = 'hellolynk-release-retention-v1';
 // receipt: an older worker that cleans up after an update deletes nothing.
 const ENTRY = { 'claude-code': ['claude-code', 'hellolynk-claude-code.mjs'] };
 const contractWithEntry = 'hellolynk-release-retention-v2';
+// B255 workers understand v2 but do not read Codex process records.
+const codexContract = 'hellolynk-release-retention-v3';
 const PROCESS_CONTRACT = 'hellolynk-release-process-v1';
 const START_TOLERANCE_MS = 15000;
 export const releaseProcessDirectory = (releasesRoot, client) => path.join(releasesRoot, `.${client}-processes`);
 const failure = code => Object.assign(new Error(code), { code });
 const equal = (a, b) => process.platform === 'win32' ? a.toLowerCase() === b.toLowerCase() : a === b;
 
+// A cache MCP keeps an installed prepare function in memory. Record its most
+// recent successful binding, even when its command line names only the cache.
+// A checkout/uninstalled fixture has no immutable release to retain.
+export async function recordCodexReleaseProcess(packageRoot) {
+  if (process.platform !== 'win32' || !path.isAbsolute(packageRoot || '')
+    || path.basename(path.dirname(packageRoot)) !== 'releases' || !/^codex-[a-f0-9]{64}$/.test(path.basename(packageRoot))) return;
+  try {
+    const root = await rootPath(path.dirname(packageRoot));
+    const folder = releaseProcessDirectory(root, 'codex');
+    await fs.mkdir(folder, { recursive: true });
+    await writeReceipt(path.join(folder, `${process.pid}.json`), { contract: PROCESS_CONTRACT, pid: process.pid,
+      startedAt: Math.round(performance.timeOrigin), release: path.basename(packageRoot) });
+  } catch { /* A missing record defers cleanup; it must not stop communication. */ }
+}
+
 async function directory(target) {
   const stat = await fs.lstat(target);
   if (!stat.isDirectory() || stat.isSymbolicLink()) throw failure('release_retention_path_invalid');
@@ -67,20 +84,25 @@ export async function runningReleaseNames(releasesRoot) {
   return names;
 }
 
-// The given pids and every process whose command line runs this installation's
-// stable entry: pid, start time and whether it runs the entry. Only processes
+// The given pids, this installation's stable entry, and Codex cache children:
+// pid, start time and whether it runs the entry. Only processes
 // with a positive pid are listed, and command lines never leave PowerShell.
 export async function entryProcessList(client, releasesRoot, pids = []) {
-  if (!ENTRY[client]) return [];
+  if (!ENTRY[client] && client !== 'codex') return [];
   if (process.platform !== 'win32') throw failure('release_retention_process_check_unavailable');
   if (!Array.isArray(pids) || pids.some(pid => !Number.isSafeInteger(pid) || pid <= 0)) throw failure('release_retention_process_check_invalid');
   const root = await rootPath(releasesRoot);
   // This installation's entry only, in its given and canonical spellings:
   // any case, either slash, quoted or not.
   const literal = value => value.split(/[\\/]+/).map(part => part.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('[\\\\/]+');
-  const entries = [...new Set([root, path.resolve(releasesRoot)])].map(value => literal(path.join(path.dirname(value), ...ENTRY[client])));
-  const pattern = `(?<=^|["\\s])(?:${entries.join('|')})(?=["\\s]|$)`.replaceAll("'", "''");
-  const script = `$ErrorActionPreference='Stop'; $wanted=@(${pids.join(',')}); $epoch=[datetime]::new(1970,1,1,0,0,0,[DateTimeKind]::Utc); $list=@(Get-CimInstance Win32_Process | Where-Object { $_.ProcessId -gt 0 } | ForEach-Object { $entry=[bool]($_.CommandLine -and [regex]::IsMatch($_.CommandLine,'${pattern}','IgnoreCase')); if ($entry -or ($wanted -contains [int64]$_.ProcessId)) { [pscustomobject]@{ pid=[int64]$_.ProcessId; startedAt=$(if ($_.CreationDate) { [int64](($_.CreationDate.ToUniversalTime() - $epoch).TotalMilliseconds) } else { $null }); entry=$entry } } }); ConvertTo-Json -Compress -InputObject $list`;
+  const entries = ENTRY[client] ? [...new Set([root, path.resolve(releasesRoot)])].map(value => literal(path.join(path.dirname(value), ...ENTRY[client]))) : [];
+  const pattern = (client === 'codex' ? '(?:^|["\\s\\\\/])(?:\\.[\\\\/])?server[\\\\/]mcp-proxy\\.mjs(?=["\\s]|$)'
+    : `(?<=^|["\\s])(?:${entries.join('|')})(?=["\\s]|$)`).replaceAll("'", "''");
+  // Relative cache entries do not reveal their installation. An older Codex
+  // child without a record conservatively delays this client's cleanup until
+  // it reconnects through a recording release or exits. Other Node apps do not.
+  const parentCheck = client === 'codex' ? "$_.Name -ieq 'node.exe' -and ($codexParents -contains $_.ParentProcessId) -and " : '';
+  const script = `$ErrorActionPreference='Stop'; $wanted=@(${pids.join(',')}); $epoch=[datetime]::new(1970,1,1,0,0,0,[DateTimeKind]::Utc); $all=@(Get-CimInstance Win32_Process); $codexParents=@($all | Where-Object { $_.Name -ieq 'Codex.exe' } | ForEach-Object { $_.ProcessId }); $list=@($all | Where-Object { $_.ProcessId -gt 0 } | ForEach-Object { $entry=[bool](${parentCheck}$_.CommandLine -and [regex]::IsMatch($_.CommandLine,'${pattern}','IgnoreCase')); if ($entry -or ($wanted -contains [int64]$_.ProcessId)) { [pscustomobject]@{ pid=[int64]$_.ProcessId; startedAt=$(if ($_.CreationDate) { [int64](($_.CreationDate.ToUniversalTime() - $epoch).TotalMilliseconds) } else { $null }); entry=$entry } } }); ConvertTo-Json -Compress -InputObject $list`;
   const shell = path.join(process.env.SystemRoot || process.env.SYSTEMROOT || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe');
   const { stdout } = await execute(shell, ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command', script],
     { windowsHide: true, timeout: 15000, maxBuffer: 1024 * 1024 });
@@ -95,7 +117,7 @@ export async function entryProcessList(client, releasesRoot, pids = []) {
 // Records of exited or reused pids are removed, so a release can go at the
 // next install once its last process is gone.
 async function entryReleases(releasesRoot, root, client, pattern, dependencies) {
-  if (!ENTRY[client]) return { names: [], unregistered: false };
+  if (!ENTRY[client] && client !== 'codex') return { names: [], unregistered: false };
   const folder = releaseProcessDirectory(root, client);
   let items = [];
   try {
@@ -179,21 +201,20 @@ export async function pruneInstalledReleases({ releasesRoot, client, currentRele
   return result;
 }
 
-// A stable-entry client calls this before it switches an install on its stable
-// entry. An update worker of an earlier release cleans up after that install with
-// its own code, which cannot see what a stable-entry process runs and stops
-// before deleting only at a receipt other than v1. Resolves once the receipt is
-// v2, keeping the adoption it records, with whether it wrote. Throws when that
+// Call before switching the binding/entry. An earlier updater cleans up after
+// setup with its own code. Claude needs v2 to stop pre-B255 workers; Codex needs
+// v3 to stop B255 workers that know only Claude records. Preserve the recorded
+// adoption order and resolve with whether the receipt changed. Throw when that
 // cannot be confirmed, even for a cause that passes before the worker reads the
 // receipt (a file another process holds open): the caller then switches nothing.
 // currentRelease, the release the install starts now, is recorded only when
 // there is no receipt yet.
 export async function protectRetentionReceipt({ releasesRoot, client, currentRelease }) {
-  if (!ENTRY[client]) throw failure('release_retention_client_invalid');
+  if (!ENTRY[client] && client !== 'codex') throw failure('release_retention_client_invalid');
   const root = await rootPath(releasesRoot), pattern = new RegExp(`^${client}-[a-f0-9]{64}$`);
   const receiptPath = path.join(root, `.${client}-retention.json`);
   const old = await readReceipt(receiptPath, client, pattern);
-  if (old?.contract === contractWithEntry) return false;
+  if (old?.contract === receiptContract(client)) return false;
   let current = old?.current;
   if (!current) {
     if (typeof currentRelease !== 'string' || !path.isAbsolute(currentRelease) || !pattern.test(path.basename(currentRelease))
@@ -201,11 +222,11 @@ export async function protectRetentionReceipt({ releasesRoot, client, currentRel
     current = path.basename(currentRelease);
     await directory(path.join(root, current));
   }
-  await writeReceipt(receiptPath, { contract: contractWithEntry, client, current, previous: old ? old.previous : null });
+  await writeReceipt(receiptPath, { contract: receiptContract(client), client, current, previous: old ? old.previous : null });
   return true;
 }
 
-const receiptContract = client => ENTRY[client] ? contractWithEntry : contract;
+const receiptContract = client => client === 'codex' ? codexContract : ENTRY[client] ? contractWithEntry : contract;
 
 async function readReceipt(receiptPath, client, pattern) {
   let old = null;
@@ -213,7 +234,7 @@ async function readReceipt(receiptPath, client, pattern) {
     const stat = await fs.lstat(receiptPath);
     if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1 || stat.size > 4096) throw failure('release_retention_receipt_invalid');
     old = JSON.parse(await fs.readFile(receiptPath, 'utf8'));
-    if (![contract, contractWithEntry].includes(old?.contract) || old.client !== client || !pattern.test(old.current)
+    if (![contract, contractWithEntry, ...(client === 'codex' ? [codexContract] : [])].includes(old?.contract) || old.client !== client || !pattern.test(old.current)
       || old.previous !== null && !pattern.test(old.previous) || old.current === old.previous) throw failure('release_retention_receipt_invalid');
   } catch (error) {
     if (error.code === 'ENOENT') return null;
@@ -245,7 +266,7 @@ export async function removeInstalledReleases({ releasesRoot, client }, dependen
     if (!result.deferred.length) {
       await fs.rm(path.join(root, `.${client}-retention.json`), { force: true });
       // entryReleases checked above that this is a folder in the releases root.
-      if (ENTRY[client]) await fs.rm(releaseProcessDirectory(root, client), { recursive: true, force: true });
+      if (ENTRY[client] || client === 'codex') await fs.rm(releaseProcessDirectory(root, client), { recursive: true, force: true });
     }
     result.complete = result.deferred.length === 0;
   } catch (error) { result.error = safeCode(error); }

package/plugins/hellolynk-codex/runtime/neutral-host-release-manifest.json

@@ -4,7 +4,7 @@
   "files": [
     {
       "path": "release/package.json",
-      "sha256": "bd762c92db97e96c4b9a1e1bef99a13d96cdd0e06bd58f4cf875fbcd00186cf9"
+      "sha256": "befbca064334e8ff7f9d192f095ac1bd786a3882385a450fc2c2d2a5c9b2b7dd"
     },
     {
       "path": "neutral-host-bootstrap.mjs",
@@ -36,7 +36,7 @@
     },
     {
       "path": "core/hellolynk-client-profile.mjs",
-      "sha256": "4b45a78b4d6c4794a1f494bd95777579c32c56a68321a1d3b484048942ae4742"
+      "sha256": "8be37831c96610e3d0a64848ada86488970cc6079e49764b47d8a8b2ba852269"
     },
     {
       "path": "core/hellolynk-client-update-entry.mjs",
@@ -52,7 +52,7 @@
     },
     {
       "path": "core/hellolynk-release-retention.mjs",
-      "sha256": "4ba5607e92f98a9a33b9ffd9ad166e559bc3197fcb1a6d54cef96b2b91ddc38e"
+      "sha256": "9b02a42a510fa5ef4a251b6e675f9ccc60f20b718d17c1617027cd048c5634dd"
     },
     {
       "path": "core/hellolynk-contact-request-e2ee.mjs",
@@ -168,7 +168,7 @@
     },
     {
       "path": "core/hellolynk-native-addressing-tools.cjs",
-      "sha256": "252251de855c3fe9c5ebdd54a97ba976a8009f4ac57ec44f492bed8c7fb903de"
+      "sha256": "f4bd81b3d03277e28955a62409383a0c4072c6212567f71425df4e18ece75d63"
     },
     {
       "path": "core/hellolynk-native-human-confirmation-broker.mjs",
@@ -180,7 +180,7 @@
     },
     {
       "path": "core/hellolynk-neutral-host-installation-store.mjs",
-      "sha256": "b5f6288732af6f9b9c0c750f6002eae657dde9513fc97674f6e59200f3cc9dc6"
+      "sha256": "dfb6bba4c627082cd6fca8cb38dc786f905e38f3e83ccf91dbfe57e55639e8a2"
     },
     {
       "path": "core/hellolynk-neutral-host-launcher.mjs",
@@ -188,7 +188,7 @@
     },
     {
       "path": "core/hellolynk-neutral-host-process.mjs",
-      "sha256": "48f9bd6451adafdf3b43591a3b1469e36174c30fe04214cd2a84fb0aeebea023"
+      "sha256": "e744bacf65f7b86cbcf7d654189c0e07e09401083e2b6f9053b17c1c3bacd1b4"
     },
     {
       "path": "core/hellolynk-neutral-host-store-adapters.mjs",
@@ -312,7 +312,7 @@
     },
     {
       "path": "bootstrap/core/hellolynk-client-profile.mjs",
-      "sha256": "4b45a78b4d6c4794a1f494bd95777579c32c56a68321a1d3b484048942ae4742"
+      "sha256": "8be37831c96610e3d0a64848ada86488970cc6079e49764b47d8a8b2ba852269"
     },
     {
       "path": "bootstrap/core/hellolynk-host-auth.mjs",
@@ -328,7 +328,7 @@
     },
     {
       "path": "bootstrap/core/hellolynk-neutral-host-installation-store.mjs",
-      "sha256": "b5f6288732af6f9b9c0c750f6002eae657dde9513fc97674f6e59200f3cc9dc6"
+      "sha256": "dfb6bba4c627082cd6fca8cb38dc786f905e38f3e83ccf91dbfe57e55639e8a2"
     },
     {
       "path": "bootstrap/core/hellolynk-platform-credential-store.mjs",
@@ -344,7 +344,7 @@
     },
     {
       "path": "release/server/codex-neutral-production.mjs",
-      "sha256": "34b865d80d7eb3c8e6986635b158c8583ddddb40bb528c4a75f0a498bdb3e1fb"
+      "sha256": "7b3249f1b35c331cf2b00ac2873a54d12fc6f61cf341bb82cec98e49ce221b92"
     },
     {
       "path": "release/server/neutral-host-adapter.mjs",

package/plugins/hellolynk-codex/runtime/neutral-host-release-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-neutral-host-release-pin-v1",
-  "manifestSha256": "98a0a761956020462c08bc6c02000b06fd37e0c2a5f44266ca5d4657c3ea28ce"
+  "manifestSha256": "3f8ad933949136ed1ebf5172c9e49ead0b0e2829650bc960eef1bdddd27c6a8f"
 }

package/plugins/hellolynk-codex/server/codex-neutral-production.mjs

@@ -7,6 +7,7 @@ import { discoverNeutralHost } from "./neutral-host-adapter.mjs";
 import { launchPinnedNeutralHostBootstrap, verifyPinnedNeutralHostRuntime } from "../runtime/core/hellolynk-neutral-host-launcher.mjs";
 import { resolveClientAccountRoot } from "../runtime/core/hellolynk-client-account.mjs";
 import { startInstalledClientUpdate } from "../runtime/core/hellolynk-client-update-entry.mjs";
+import { recordCodexReleaseProcess } from "../runtime/core/hellolynk-release-retention.mjs";
 
 const MODULE_DIR = path.dirname(fileURLToPath(import.meta.url));
 const PLUGIN_ROOT = path.dirname(MODULE_DIR);
@@ -23,9 +24,9 @@ const TRUSTED_BOOTSTRAP_FILES = Object.freeze(new Map([
   ["runtime/neutral-host-bootstrap.mjs", "53513deed7f0155a6603a1489d1609fae37776442358181ff7650d0cd9351f0a"],
   ["runtime/bootstrap/core/hellolynk-runtime-safety.cjs", "43d576d9f774409f4a735793c1503a6f397e787b10c59a4ac9cc9257299f5efe"],
   ["runtime/bootstrap/core/hellolynk-host-protected-store.mjs", "89b6e6c4ce9c6ba2984f8c301de4251da6004bdd402cc44d578a4505c21b75b1"],
-  ["runtime/bootstrap/core/hellolynk-neutral-host-installation-store.mjs", "b5f6288732af6f9b9c0c750f6002eae657dde9513fc97674f6e59200f3cc9dc6"],
+  ["runtime/bootstrap/core/hellolynk-neutral-host-installation-store.mjs", "dfb6bba4c627082cd6fca8cb38dc786f905e38f3e83ccf91dbfe57e55639e8a2"],
   ["runtime/bootstrap/core/hellolynk-host-auth.mjs", "db1ec56f4e60e6450fba50188eecf89748f39f5d7a75c2456c30a6053233555d"],
-  ["runtime/bootstrap/core/hellolynk-client-profile.mjs", "4b45a78b4d6c4794a1f494bd95777579c32c56a68321a1d3b484048942ae4742"],
+  ["runtime/bootstrap/core/hellolynk-client-profile.mjs", "8be37831c96610e3d0a64848ada86488970cc6079e49764b47d8a8b2ba852269"],
   ["runtime/bootstrap/core/hellolynk-platform-credential-store.mjs", "f27f5f377cc4d6d2b5664212cf8fcc4c98d910064c1677ff9c1f776df1a59dba"],
   ["runtime/bootstrap/core/hellolynk-client-core.mjs", "94bbad1d0ccee969bbffed176449e427188f1b892512a64167ab31f63d258e2b"],
   ["runtime/bootstrap/platform/windows/hellolynk-host-protected-store.ps1", "24357e8ce54090b4ec68e457f02c9e834a80f3273ef3c03a8c0fa7258797fb49"],
@@ -216,6 +217,7 @@ async function prepareSelectedRelease(options, verifiedInitial = null) {
     assertReleaseBinding(binding, inspection);
     const release = await loader.activateNeutralHostRelease(inspection);
     if (!release || typeof release.run !== "function") throw codeError("neutral_codex_runner_integrity_invalid");
+    await recordCodexReleaseProcess(path.resolve(releaseRoot, "../.."));
     return Object.freeze({ release, inspection, binding, initialBindingFingerprint,
       releaseRoot, storeRoot, installationStore, protectedStore,
       runnerBinding: (root) => currentRunnerBinding(storeRoot, root, binding, initialBindingFingerprint) });