@hellolynk-ai/codex-plugin 0.2.101 → 0.2.102-macos.1

package/plugins/hellolynk-codex/runtime/core/hellolynk-native-human-confirmation-broker.mjs

@@ -1,3 +1,4 @@
+import { DARWIN_HELPER, darwinHelperEnvironment } from "./hellolynk-darwin-vault.mjs";
 import crypto from "node:crypto";
 import { spawn } from "node:child_process";
 import { StringDecoder } from "node:string_decoder";
@@ -583,7 +584,7 @@ export function createWindowsNativeHumanConfirmationLauncher() {
         await context.deliver?.({ kind: "failure", code: "human_confirmation_timed_out" });
         return;
       }
-      if (process.platform !== "win32") {
+      if (!["darwin","win32"].includes(process.platform)) {
         await context.deliver?.({ kind: "failure", code: "human_confirmation_platform_unsupported" });
         return;
       }
@@ -592,12 +593,12 @@ export function createWindowsNativeHumanConfirmationLauncher() {
         await context.deliver?.({ kind: "failure", code: "human_confirmation_request_too_large" });
         return;
       }
-      await runPowerShellChild(serialized, context);
+      await runNativeDialogChild(serialized, context);
     },
   });
 }
 
-async function runPowerShellChild(serialized, context) {
+async function runNativeDialogChild(serialized, context) {
   await new Promise((resolve) => {
     let delivered = false;
     let stdout = "";
@@ -605,13 +606,14 @@ async function runPowerShellChild(serialized, context) {
     let stdoutBytes = 0;
     let stderrBytes = 0;
     let forcedCode = null;
-    const child = spawn("powershell.exe", [
+    const darwin = process.platform === "darwin";
+    const child = spawn(darwin ? DARWIN_HELPER : "powershell.exe", darwin ? ["confirm"] : [
       "-NoLogo", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass",
       "-STA", "-File", POWERSHELL_SCRIPT,
     ], {
       windowsHide: true,
       stdio: ["pipe", "pipe", "pipe"],
-      env: sanitizeHelloLynkChildEnvironment(process.env),
+      env: darwin ? darwinHelperEnvironment() : sanitizeHelloLynkChildEnvironment(process.env),
     });
     const finish = async (result) => {
       if (delivered) return;

package/plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-installation-store.mjs

@@ -12,10 +12,9 @@ import {
 } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, parse, resolve } from "node:path";
 import { spawn } from "node:child_process";
-import { homedir } from "node:os";
 import { performance } from "node:perf_hooks";
 import { withLocalProcessLock } from "./hellolynk-local-process-lock.mjs";
-import { readClientProfile } from "./hellolynk-client-profile.mjs";
+import { defaultHelloLynkClientRoot, readClientProfile } from "./hellolynk-client-profile.mjs";
 import { assertIdentifier } from "./hellolynk-host-auth.mjs";
 import runtimeSafety from "./hellolynk-runtime-safety.cjs";
 
@@ -46,10 +45,7 @@ export function defaultNeutralHostStoreRoot(platform = process.platform, env = p
     }
     return root;
   }
-  const home = resolve(String(env.HOME || env.USERPROFILE || homedir()));
-  if (platform === "win32") return resolve(String(env.LOCALAPPDATA || join(home, "AppData", "Local")), "HelloLynk", "host");
-  if (platform === "darwin") return join(home, "Library", "Application Support", "HelloLynk", "host");
-  return resolve(String(env.XDG_DATA_HOME || join(home, ".local", "share")), "hellolynk", "host");
+  return join(defaultHelloLynkClientRoot(platform, env), "host");
 }
 
 export function createNeutralHostInstallationStore(options = {}) {
@@ -344,7 +340,7 @@ async function assertReadOnlyPath(path, directory, verifyPath) {
   if (metadata.isSymbolicLink() || (directory ? !metadata.isDirectory() : !metadata.isFile())) {
     throw codeError(directory ? "host_store_root_invalid" : "host_registry_path_invalid");
   }
-  if (process.platform === "win32") {
+  if (process.platform === "win32" || (process.platform === "darwin" && verifyPath)) {
     await verifyPath({ path, directory });
   }
 }

package/plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-launcher.mjs

@@ -48,7 +48,7 @@ const SAFE_BOOTSTRAP_FAILURE_CODES = new Set([
   "neutral_trae_work_uncaught_exception",
   "powershell7_missing",
 ]);
-const SAFE_RELATIVE = /^(?:[A-Za-z0-9][A-Za-z0-9._-]*\/)*[A-Za-z0-9][A-Za-z0-9._-]*\.(?:cjs|cs|css|html|js|json|md|mjs|ps1|vbs)$/;
+const SAFE_RELATIVE = /^(?:[A-Za-z0-9][A-Za-z0-9._-]*\/)*[A-Za-z0-9][A-Za-z0-9._-]*\.(?:bin|cjs|cs|css|html|js|json|md|mjs|ps1|swift|vbs)$/;
 const REQUIRED_RUNTIME_RECORDS = Object.freeze([
   "neutral-host-bootstrap.mjs",
   "neutral-host-release-loader.mjs",
@@ -63,8 +63,14 @@ const REQUIRED_RUNTIME_RECORDS = Object.freeze([
   "core/hellolynk-neutral-host-process.mjs",
   "core/hellolynk-neutral-host-workbench-read-model.mjs",
   "core/hellolynk-workbench-action-grants.mjs",
-  "platform/windows/hellolynk-host-protected-store.ps1",
-  "platform/windows/hellolynk-local-data-key.ps1",
+  ...(process.platform === "darwin" ? [
+    "core/hellolynk-darwin-vault.mjs",
+    "core/hellolynk-darwin-host.mjs",
+    "platform/darwin/hellolynk-keychain-helper.bin",
+  ] : [
+    "platform/windows/hellolynk-host-protected-store.ps1",
+    "platform/windows/hellolynk-local-data-key.ps1",
+  ]),
   "workbench/contract.mjs",
 ]);
 

package/plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-process.mjs

@@ -34,7 +34,7 @@ export const HELLOLYNK_NEUTRAL_HOST_PROCESS_CONTRACT = "hellolynk-neutral-host-p
 export const HELLOLYNK_NEUTRAL_HOST_DISCOVERY_CONTRACT = "hellolynk-neutral-host-discovery-v1";
 // Raised with every release batch, together with the six client versions. A Host reports it
 // in its health; the higher release stays and the lower one makes room.
-export const HELLOLYNK_HOST_RELEASE_ORDINAL = 14;
+export const HELLOLYNK_HOST_RELEASE_ORDINAL = 15;
 
 const INSTALLATION_LOCK_CONTRACT = "hellolynk-neutral-host-installation-lock-v2";
 const INSTALLATION_LOCK_MAX_BYTES = 4 * 1024;

package/plugins/hellolynk-codex/runtime/core/hellolynk-platform-credential-store.mjs

@@ -1,3 +1,4 @@
+import { checkDarwinPath, DARWIN_HELPER, invokeDarwinHelper, withDarwinVault } from "./hellolynk-darwin-vault.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { spawn as nodeSpawn } from "node:child_process";
 import { randomBytes } from "node:crypto";
@@ -260,6 +261,14 @@ export async function runWindowsClientTrustCommand(command, options = {}) {
 }
 
 export async function prepareWindowsClientRoot(clientRoot, options = {}) {
+  if ((options.platform || process.platform) === "darwin") {
+    checkDarwinPath(clientRoot, { directory: true, create: true, privateMode: true });
+    for (const sub of ["profiles", "credentials", "e2ee-private-keys", "status", "host", "host/runtime", "releases"]) {
+      checkDarwinPath(join(clientRoot, sub), { directory: true, create: true, privateMode: true });
+    }
+    await invokeDarwinHelper(options.helperPath || DARWIN_HELPER, ["verify-acl", clientRoot]);
+    return "prepared";
+  }
   return runWindowsClientTrustCommand("PrepareRoot", {
     ...options,
     clientRoot,
@@ -272,6 +281,14 @@ export async function secureWindowsClientReleaseTree(clientRoot, releaseId, opti
   if (!/^(?!\.{1,2}$)[A-Za-z0-9.][A-Za-z0-9_.-]{2,191}$/.test(acceptedReleaseId)) {
     throw new HelloLynkCredentialStoreError("client_release_path_invalid");
   }
+  if ((options.platform || process.platform) === "darwin") {
+    checkDarwinPath(clientRoot, { directory: true, privateMode: true });
+    checkDarwinPath(join(clientRoot, "releases"), { directory: true, privateMode: true });
+    const release = join(clientRoot, "releases", acceptedReleaseId);
+    checkDarwinPath(release, { directory: true });
+    await invokeDarwinHelper(options.helperPath || DARWIN_HELPER, [options.verifyOnly ? "verify-tree" : "secure-tree", release]);
+    return options.verifyOnly ? "verified" : "secured";
+  }
   return runWindowsClientTrustCommand(options.verifyOnly === true ? "VerifyReleaseTree" : "SecureReleaseTree", {
     ...options,
     clientRoot,
@@ -460,24 +477,61 @@ export function createPlatformCredentialStore(options = {}) {
   }
 
   if (platform === "darwin") {
-    const helper = options.helperPath || join(
-      homedir(), "Library", "Application Support", "HelloLynk", "bin", "hellolynk-keychain-helper",
-    );
-    const invoke = (command, profileId, stdin) => run(
-      helper,
-      [command.toLowerCase(), profileId],
-      { ...runnerOptions, stdin },
-    );
+    const clientRoot = options.clientRoot || (options.storeRoot ? windowsClientRootForStore(options.storeRoot)
+      : join(homedir(), "Library", "Application Support", "HelloLynk"));
+    if (clientRoot !== resolve(clientRoot) || clientRoot === "/") throw new HelloLynkCredentialStoreError("client_root_path_invalid");
+    const credentials = join(clientRoot, "credentials");
+    const privateKeys = join(clientRoot, "e2ee-private-keys");
+    const root = options.storeRoot || credentials;
+    const e2eeRoot = options.e2eeStoreRoot || privateKeys;
+    if (root !== clientRoot && root !== credentials) throw new HelloLynkCredentialStoreError("credential_store_root_invalid");
+    if (e2eeRoot !== privateKeys) throw new HelloLynkCredentialStoreError("e2ee_private_key_store_root_invalid");
+    function entry(location, section, profile, operation, value) {
+      const slot = section + ":" + assertCredentialProfileId(profile);
+      return withDarwinVault({ root: location, helperPath: options.helperPath, readOnly: operation === "load", allowMissing:true }, data => {
+        if (operation === "save") data[slot] = value;
+        if (operation === "remove") delete data[slot];
+        return data[slot] ?? null;
+      });
+    }
     return {
       platform,
-      async save(profile, credential) {
-        await invoke("Store", assertCredentialProfileId(profile), assertCredential(credential));
-      },
+      async save(profile, credential) { await entry(root, "device", profile, "save", assertCredential(credential)); },
       async load(profile) {
-        return assertCredential(await invoke("Load", assertCredentialProfileId(profile), ""));
+        const value = await entry(root, "device", profile, "load");
+        if (value === null) throw new HelloLynkCredentialStoreError("device_credential_missing");
+        return assertCredential(value);
       },
-      async remove(profile) {
-        await invoke("Remove", assertCredentialProfileId(profile), "");
+      async remove(profile) { await entry(root, "device", profile, "remove"); },
+      runtimeSessions: {
+        async save(profile, session) { await entry(root, "session", profile, "save", assertRuntimeSession(session)); },
+        async load(profile) {
+          const value = await entry(root, "session", profile, "load");
+          return value === null ? null : assertRuntimeSession(value);
+        },
+        async remove(profile) { await entry(root, "session", profile, "remove"); },
+        async withLock(profile, operation) {
+          const id = assertCredentialProfileId(profile);
+          if (typeof operation !== "function") throw new HelloLynkCredentialStoreError("runtime_session_lock_operation_invalid");
+          checkDarwinPath(root, { directory:true, create:true, privateMode:true });
+          return withRuntimeSessionFileLock(root, id, operation, options.runtimeSessionLockDependencies, options.timeoutMs);
+        },
+      },
+      directTextPrivateKeys: {
+        async save(profile, material) { await entry(e2eeRoot, "keys", profile, "save", encodeDirectTextPrivateKeyMaterial(material)); },
+        async load(profile) {
+          const value = await entry(e2eeRoot, "keys", profile, "load");
+          return value === null ? null : decodeDirectTextPrivateKeyMaterial(value);
+        },
+        async remove(profile) { await entry(e2eeRoot, "keys", profile, "remove"); },
+        async preload(profiles) {
+          const ids = [...new Set((Array.isArray(profiles) ? profiles : []).map(assertCredentialProfileId))];
+          if (!ids.length) return;
+          if (ids.length > MAX_E2EE_BATCH_PROFILES) throw new HelloLynkCredentialStoreError("e2ee_private_key_batch_invalid");
+          await withDarwinVault({root:e2eeRoot, helperPath:options.helperPath, readOnly:true, allowMissing:true}, data => {
+            for (const id of ids) if (data["keys:" + id] !== undefined) decodeDirectTextPrivateKeyMaterial(data["keys:" + id]);
+          });
+        },
       },
     };
   }

package/plugins/hellolynk-codex/runtime/core/hellolynk-release-retention.mjs

@@ -2,6 +2,7 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import crypto from 'node:crypto';
 import { execFile } from 'node:child_process';
+import { homedir } from 'node:os';
 import { promisify } from 'node:util';
 
 const execute = promisify(execFile);
@@ -27,7 +28,7 @@ const equal = (a, b) => process.platform === 'win32' ? a.toLowerCase() === b.toL
 // recent successful binding, even when its command line names only the cache.
 // A checkout/uninstalled fixture has no immutable release to retain.
 export async function recordCodexReleaseProcess(packageRoot) {
-  if (process.platform !== 'win32' || !path.isAbsolute(packageRoot || '')
+  if (!['win32', 'darwin'].includes(process.platform) || !path.isAbsolute(packageRoot || '')
     || path.basename(path.dirname(packageRoot)) !== 'releases' || !/^codex-[a-f0-9]{64}$/.test(path.basename(packageRoot))) return;
   try {
     const root = await rootPath(path.dirname(packageRoot));
@@ -70,6 +71,10 @@ async function regularTree(target) {
 // older Host may still import files after installation; deletion waits for the
 // next successful install instead of stopping any user process.
 export async function runningReleaseNames(releasesRoot) {
+  if (process.platform === 'darwin') {
+    const pattern = darwinReleasePattern(await rootPath(releasesRoot), releasesRoot);
+    return darwinReleaseNames(await darwinPs('command='), pattern);
+  }
   if (process.platform !== 'win32') throw failure('release_retention_process_check_unavailable');
   const root = await rootPath(releasesRoot);
   const literal = `${root}${path.sep}`.replaceAll("'", "''");
@@ -89,8 +94,12 @@ export async function runningReleaseNames(releasesRoot) {
 // with a positive pid are listed, and command lines never leave PowerShell.
 export async function entryProcessList(client, releasesRoot, pids = []) {
   if (!ENTRY[client] && client !== 'codex') return [];
-  if (process.platform !== 'win32') throw failure('release_retention_process_check_unavailable');
   if (!Array.isArray(pids) || pids.some(pid => !Number.isSafeInteger(pid) || pid <= 0)) throw failure('release_retention_process_check_invalid');
+  if (process.platform === 'darwin' && client === 'codex') {
+    await rootPath(releasesRoot);
+    return parseDarwinCodexEntryProcesses(await darwinPs('pid=,ppid=,lstart=,command='), pids);
+  }
+  if (process.platform !== 'win32') throw failure('release_retention_process_check_unavailable');
   const root = await rootPath(releasesRoot);
   // This installation's entry only, in its given and canonical spellings:
   // any case, either slash, quoted or not.
@@ -112,6 +121,45 @@ export async function entryProcessList(client, releasesRoot, pids = []) {
   return list;
 }
 
+async function darwinPs(fields) {
+  const { stdout } = await execute('/bin/ps', ['-ww', '-axo', fields], {
+    env: { LC_ALL: 'C', TZ: 'UTC0' }, timeout: 15000, maxBuffer: 4 * 1024 * 1024,
+  });
+  return stdout;
+}
+
+// Keep command lines inside the process probe. Only a PID, its start time and
+// whether it might still be serving the Codex cache reach the retention logic.
+export function parseDarwinCodexEntryProcesses(stdout, pids = []) {
+  const processes = new Map();
+  for (const line of stdout.trim().split('\n')) {
+    const fields = /^\s*(\d+)\s+(\d+)\s+(\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4})\s+(.+)$/u.exec(line);
+    if (!fields) throw failure('release_retention_process_check_invalid');
+    const [, pid, parent, started, command] = fields;
+    const startedAt = Date.parse(`${started} UTC`);
+    processes.set(Number(pid), { pid: Number(pid), parent: Number(parent), startedAt: Number.isFinite(startedAt) ? startedAt : null, command });
+  }
+  const wanted = new Set(pids);
+  const proxy = /(?:^|["\s/])(?:\.\/)?server\/mcp-proxy\.mjs(?=["\s]|$)/u;
+  const codexApp = /(?:^|["/])(?:Codex|ChatGPT)\.app\/Contents\//iu;
+  const codexCli = /^(?:"?[^"\s]*\/)?codex(?=["\s]|$)/iu;
+  const result = [];
+  for (const { pid, parent, startedAt, command } of processes.values()) {
+    let entry = false;
+    if (proxy.test(command) && /(?:^|\/)node(?=["\s]|$)/u.test(command)) {
+      entry = /\/cua_node\/bin\/node(?=["\s]|$)/u.test(command)
+        || /\/hellolynk-codex\/server\/mcp-proxy\.mjs(?=["\s]|$)/u.test(command);
+      const seen = new Set([pid]);
+      for (let ancestor = processes.get(parent); !entry && ancestor && !seen.has(ancestor.pid); ancestor = processes.get(ancestor.parent)) {
+        entry = codexApp.test(ancestor.command) || codexCli.test(ancestor.command);
+        seen.add(ancestor.pid);
+      }
+    }
+    if (entry || wanted.has(pid)) result.push({ pid, startedAt, entry });
+  }
+  return result;
+}
+
 // Releases named by live entry records, and whether a process started through
 // the stable entry has no matching record (one from before records existed).
 // Records of exited or reused pids are removed, so a release can go at the
@@ -149,6 +197,24 @@ async function entryReleases(releasesRoot, root, client, pattern, dependencies)
 // A stopped on-demand task is still a configuration reference. Keeping only
 // live processes can delete its executable before the next client startup.
 export async function configuredReleaseNames(releasesRoot) {
+  if (process.platform === 'darwin') {
+    const pattern = darwinReleasePattern(await rootPath(releasesRoot), releasesRoot);
+    const names = new Set();
+    for (const directory of [path.join(homedir(), 'Library', 'LaunchAgents'), '/Library/LaunchAgents', '/Library/LaunchDaemons']) {
+      let entries;
+      try { entries = await fs.readdir(directory); }
+      catch (error) { if (error.code === 'ENOENT') continue; throw error; }
+      for (const entry of entries.filter(name => /hellolynk/i.test(name) && name.endsWith('.plist'))) {
+        const { stdout } = await execute('/usr/bin/plutil', ['-convert', 'json', '-o', '-', path.join(directory, entry)],
+          { timeout: 15000, maxBuffer: 256 * 1024 });
+        const { Program, WorkingDirectory, ProgramArguments } = JSON.parse(stdout);
+        for (const value of [Program, WorkingDirectory, ...(ProgramArguments || [])]) {
+          if (typeof value === 'string') for (const name of darwinReleaseNames(value, pattern)) names.add(name);
+        }
+      }
+    }
+    return [...names].sort();
+  }
   if (process.platform !== 'win32') throw failure('release_retention_configuration_check_unavailable');
   const root = await rootPath(releasesRoot);
   const prefixes = [...new Set([root, path.resolve(releasesRoot)])].map(value => (value + path.sep).replace(/[.*+?^${}()|[\]\\]/g, '\\$&'));
@@ -164,6 +230,16 @@ export async function configuredReleaseNames(releasesRoot) {
   return names;
 }
 
+function darwinReleasePattern(root, logicalRoot) {
+  const prefixes = [...new Set([root, path.resolve(logicalRoot)])]
+    .map(value => (value + path.sep).replace(/[.*+?^${}()|[\]\\]/g, '\\$&'));
+  return new RegExp('(?:' + prefixes.join('|') + ')((?:' + clients.join('|') + ')-[a-f0-9]{64})(?=[/"\\s]|$)', 'g');
+}
+
+function darwinReleaseNames(text, pattern) {
+  return [...new Set([...text.matchAll(pattern)].map(match => match[1]))].sort();
+}
+
 // Call only after the caller's complete adoption transaction succeeds, while
 // holding its install/account lock. Never call from candidate staging or a
 // rollback. The receipt records adoption order, not directory timestamps.

package/plugins/hellolynk-codex/runtime/core/hellolynk-workbench-connection.mjs

@@ -60,7 +60,7 @@ export function validateWorkbenchConnectionInput(value) {
 export function createWorkbenchConnection(options) {
   if (!CLIENTS.has(options?.client) || !path.isAbsolute(options?.releaseRoot || "")) throw code("workbench_connect_configuration_invalid");
   const env = options.env || process.env;
-  const storeRoot = options.storeRoot || env.HELLOLYNK_NEUTRAL_STORE_ROOT || defaultNeutralHostStoreRoot("win32", env);
+  const storeRoot = options.storeRoot || env.HELLOLYNK_NEUTRAL_STORE_ROOT || defaultNeutralHostStoreRoot(process.platform, env);
   if (!path.isAbsolute(storeRoot)) throw code("workbench_connect_configuration_invalid");
   let busy = false;
   const accounts = createClientAccountActions(options);
@@ -87,7 +87,7 @@ export function createWorkbenchAccountActions(options) {
 }
 
 async function connectAccount(client, sourceRoot, storeRoot, input) {
-  if (process.platform !== "win32") throw code("workbench_connect_windows_only", 400);
+  if (!["win32", "darwin"].includes(process.platform)) throw code("workbench_connect_platform_unsupported", 400);
   if (!CLIENTS.has(client) || !path.isAbsolute(sourceRoot) || !path.isAbsolute(storeRoot)
     || path.basename(storeRoot).toLowerCase() !== "host") throw code("workbench_connect_configuration_invalid");
   const value = validateWorkbenchConnectionInput(input);
@@ -181,7 +181,9 @@ async function retainRelease(binding, currentRoot, client) {
       const destination = path.resolve(stage, relative);
       if (!destination.startsWith(`${stage}${path.sep}`)) throw code("workbench_connect_release_invalid");
       await fs.mkdir(path.dirname(destination), { recursive: true, mode: 0o700 });
-      await fs.writeFile(destination, await fs.readFile(path.join(sourceRoot, relative)), { flag: "wx", mode: 0o600 });
+      await fs.writeFile(destination, await fs.readFile(path.join(sourceRoot, relative)), {
+        flag: "wx", mode: relative.endsWith(".bin") ? 0o700 : 0o600,
+      });
     }
     await verifyPinnedNeutralHostRuntime({ ...binding, releaseRoot: stage });
     await secureWindowsClientReleaseTree(currentRoot, stageId);

package/plugins/hellolynk-codex/runtime/neutral-host-release-entry.mjs

@@ -10,7 +10,7 @@ import { startHelloLynkNeutralHostAssembly } from "./core/hellolynk-neutral-host
 
 export async function createNeutralHostReleaseRuntime() {
   return Object.freeze({
-    defaultStoreRoot: (env) => defaultNeutralHostStoreRoot("win32", env),
+    defaultStoreRoot: (env) => defaultNeutralHostStoreRoot(process.platform, env),
     createInstallationStore: (options) => createNeutralHostInstallationStore(options),
     createProtectedStore: (options) => createHostProtectedStore(options),
     run: async ({ root, binding }) => runProductionHost(root, binding),

package/plugins/hellolynk-codex/runtime/neutral-host-release-loader.mjs

@@ -6,7 +6,7 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 const ROOT = path.dirname(fileURLToPath(import.meta.url));
 const PIN_PATH = path.join(ROOT, "neutral-host-release-pin.json");
 const MANIFEST_PATH = path.join(ROOT, "neutral-host-release-manifest.json");
-const SAFE_RUNTIME_RELATIVE = /^(?:[A-Za-z0-9][A-Za-z0-9._-]*\/)*[A-Za-z0-9][A-Za-z0-9._-]*\.(?:cjs|mjs|ps1)$/;
+const SAFE_RUNTIME_RELATIVE = /^(?:[A-Za-z0-9][A-Za-z0-9._-]*\/)*[A-Za-z0-9][A-Za-z0-9._-]*\.(?:cjs|mjs|ps1|swift|bin)$/;
 const SAFE_RELEASE_RELATIVE = /^release\/(?:[A-Za-z0-9][A-Za-z0-9._-]*\/)*[A-Za-z0-9][A-Za-z0-9._-]*\.(?:mjs|ps1|md|html|js|css|json)$/;
 
 export async function inspectNeutralHostRelease() {

package/plugins/hellolynk-codex/runtime/neutral-host-release-manifest.json

@@ -4,7 +4,7 @@
   "files": [
     {
       "path": "release/package.json",
-      "sha256": "5875df8d4163c0a84b3dc30265b1a5e7b977a7c92250aae013d3b513b3640c40"
+      "sha256": "befbca064334e8ff7f9d192f095ac1bd786a3882385a450fc2c2d2a5c9b2b7dd"
     },
     {
       "path": "neutral-host-bootstrap.mjs",
@@ -12,15 +12,15 @@
     },
     {
       "path": "connect-activate.mjs",
-      "sha256": "50ec8b0a58ac5b099a653722b0946acb23d0a29a054bfb3856dc963db6f84bee"
+      "sha256": "93c68c23ed2d18e87766ecd8dae6c3d8e757eca6ad7569477c8ec994402a8b0e"
     },
     {
       "path": "neutral-host-release-loader.mjs",
-      "sha256": "15593e237fd5cbd765b65e60efe7a1c87e24a5390ad932c8a23d2c03b8da9770"
+      "sha256": "283a20c6a9b90481bc03c143ab51d5289abf7b7a86fbe51fba7ea2ae1e6d2c60"
     },
     {
       "path": "neutral-host-release-entry.mjs",
-      "sha256": "23e88d39362fe556eb96f86b2ac9740c0390f33f01edee5c89d708c80c4f8fa6"
+      "sha256": "698d7e80d38353d56c7f1c337fbc676e8649d08afc726ffcb31215dc11fc8455"
     },
     {
       "path": "core/hellolynk-agent-configurator.mjs",
@@ -28,7 +28,7 @@
     },
     {
       "path": "core/hellolynk-client-account.mjs",
-      "sha256": "ab7ec5dda92e510e7deb14f900fd2df4c6c3373fbeb4af4fb2b6c1a72aa41a99"
+      "sha256": "6e03a05127d4dc86be6391567b51a956d1a987acf4e23f5699ce0e00c3187b7e"
     },
     {
       "path": "core/hellolynk-client-core.mjs",
@@ -36,23 +36,23 @@
     },
     {
       "path": "core/hellolynk-client-profile.mjs",
-      "sha256": "4b45a78b4d6c4794a1f494bd95777579c32c56a68321a1d3b484048942ae4742"
+      "sha256": "8be37831c96610e3d0a64848ada86488970cc6079e49764b47d8a8b2ba852269"
     },
     {
       "path": "core/hellolynk-client-update-entry.mjs",
-      "sha256": "b2740406d79d0fa129c3bd1b5e6a07c3f52eed5e35a91ffea40b099ddc708936"
+      "sha256": "1e513a4a98437dc60b49f9f39fc3958808c3acfaeb6c5bb638efea2e61d4b1ee"
     },
     {
       "path": "core/hellolynk-client-update-runtime.mjs",
-      "sha256": "3ed31f0cea704c3ad26481126a78a7d39c21df69a5c52d1074a096a2b7b3e32f"
+      "sha256": "96aa12ba21619a0cd78ef61c63be6f43fdb61f892201ce923ee35e0912ae2e52"
     },
     {
       "path": "core/hellolynk-client-update.mjs",
-      "sha256": "8f0d6f54313c91bd2ffb4643859a91dd1e122bb5f1da9143fe2851a3370d7fbf"
+      "sha256": "93bf5f2ecc72731d70367306989fa18c82fa7bf9e4b5f785a1376f0d55239428"
     },
     {
       "path": "core/hellolynk-release-retention.mjs",
-      "sha256": "9b02a42a510fa5ef4a251b6e675f9ccc60f20b718d17c1617027cd048c5634dd"
+      "sha256": "7cfd7e20c37ac1479f2472cc5fba8e830dcd1b83b91a86c340749cf145f0d661"
     },
     {
       "path": "core/hellolynk-contact-request-e2ee.mjs",
@@ -62,6 +62,14 @@
       "path": "core/hellolynk-device-enrollment.mjs",
       "sha256": "f3e99ff2bdfa76e5a830a518792a1b9e5e705d7a8a01eca725dd7c5c8391d4ef"
     },
+    {
+      "path": "core/hellolynk-darwin-host.mjs",
+      "sha256": "0772d7a23280b18d5bc59383a6a14fd2ecfd9de1ec53b351be0250770e3e2e70"
+    },
+    {
+      "path": "core/hellolynk-darwin-vault.mjs",
+      "sha256": "b6094d856af016e674e4a0183a4e474397bbe92e66638743fa62fe085b554d30"
+    },
     {
       "path": "core/hellolynk-direct-text-e2ee-client.mjs",
       "sha256": "4007bf5e6c91df00adf10384cc1f0d0d28491b8ded518365dddbac717f3ac5be"
@@ -76,7 +84,7 @@
     },
     {
       "path": "core/hellolynk-host-protected-store.mjs",
-      "sha256": "89b6e6c4ce9c6ba2984f8c301de4251da6004bdd402cc44d578a4505c21b75b1"
+      "sha256": "10f81f4f6a5dd2fe9a742e847b2eb47dbf20f802f4414f46a05ccbc3505148e2"
     },
     {
       "path": "core/hellolynk-host-transport-client.mjs",
@@ -108,7 +116,7 @@
     },
     {
       "path": "core/hellolynk-human-confirmation-ledger.mjs",
-      "sha256": "63bcbbb0870ad83fc031636d74ce77fc070d5f4d1d4c10297f8b3ec9ad85bbf6"
+      "sha256": "43b6b6baea422eb226c850f15966c907d834bc2f5aadbab6ee0c9e05445f182f"
     },
     {
       "path": "core/hellolynk-human-relationship-controller.mjs",
@@ -140,7 +148,7 @@
     },
     {
       "path": "core/hellolynk-local-data-protection.mjs",
-      "sha256": "1bda879aa0bdf46700a63374e82cc7bc639385656b1463a75a49e8510971066c"
+      "sha256": "cea4f73ec5a31918c48bd8234e28d38ff1bb8028d2591f542b15ee12b2238e1f"
     },
     {
       "path": "core/hellolynk-local-identity-trust.mjs",
@@ -172,7 +180,7 @@
     },
     {
       "path": "core/hellolynk-native-human-confirmation-broker.mjs",
-      "sha256": "2fb2d3b40869362be3e40a1ec55947021319af5315cbf8fdc5ed59df717cceb3"
+      "sha256": "f190c28af2703b58a685a57213b2789df7eda35d7699d718f9420cd1dddd1b65"
     },
     {
       "path": "core/hellolynk-neutral-host-assembly.mjs",
@@ -180,15 +188,15 @@
     },
     {
       "path": "core/hellolynk-neutral-host-installation-store.mjs",
-      "sha256": "b5f6288732af6f9b9c0c750f6002eae657dde9513fc97674f6e59200f3cc9dc6"
+      "sha256": "42ae1e7deb876a8308b7bfed6a7b891d1834117b62504fc5befe3f91a0b4c740"
     },
     {
       "path": "core/hellolynk-neutral-host-launcher.mjs",
-      "sha256": "789b2531cdbde6e6d8f91f2a40746372e903e9e48e8aa6846b9abf2d28150780"
+      "sha256": "d94b853a7ed1ebc9c7e9bd7c37e2405e39849fb6d4ddf3d697e17ba169eda6d2"
     },
     {
       "path": "core/hellolynk-neutral-host-process.mjs",
-      "sha256": "af6cb6585baae477f87ee880bd044dffb4c7f71667bfa78bcbf0d4d20e7483af"
+      "sha256": "e744bacf65f7b86cbcf7d654189c0e07e09401083e2b6f9053b17c1c3bacd1b4"
     },
     {
       "path": "core/hellolynk-neutral-host-store-adapters.mjs",
@@ -200,7 +208,7 @@
     },
     {
       "path": "core/hellolynk-platform-credential-store.mjs",
-      "sha256": "f27f5f377cc4d6d2b5664212cf8fcc4c98d910064c1677ff9c1f776df1a59dba"
+      "sha256": "3969708bafefc3b267bb34a9dcc115804c874ad14f4a036426d727c02ff70d42"
     },
     {
       "path": "core/hellolynk-relay-client-cli.mjs",
@@ -216,7 +224,7 @@
     },
     {
       "path": "core/hellolynk-workbench-connection.mjs",
-      "sha256": "d3396350fd75af78e60772e021cf6dfb643d9eee41894c5461c959a56650cb60"
+      "sha256": "6ce8e75025d31ed81c39150df2766231fc871ef18c234de986dc910bab79d639"
     },
     {
       "path": "workbench/candidate-bootstrap.mjs",
@@ -302,9 +310,17 @@
       "path": "platform/windows/hellolynk-native-human-confirmation-broker.ps1",
       "sha256": "757a731a3e8761d5d473db19ecfc330783f2826663a0057c4d6896e679d7a388"
     },
+    {
+      "path": "bootstrap/core/hellolynk-darwin-host.mjs",
+      "sha256": "0772d7a23280b18d5bc59383a6a14fd2ecfd9de1ec53b351be0250770e3e2e70"
+    },
+    {
+      "path": "bootstrap/core/hellolynk-darwin-vault.mjs",
+      "sha256": "b6094d856af016e674e4a0183a4e474397bbe92e66638743fa62fe085b554d30"
+    },
     {
       "path": "bootstrap/core/hellolynk-client-account.mjs",
-      "sha256": "ab7ec5dda92e510e7deb14f900fd2df4c6c3373fbeb4af4fb2b6c1a72aa41a99"
+      "sha256": "6e03a05127d4dc86be6391567b51a956d1a987acf4e23f5699ce0e00c3187b7e"
     },
     {
       "path": "bootstrap/core/hellolynk-client-core.mjs",
@@ -312,7 +328,7 @@
     },
     {
       "path": "bootstrap/core/hellolynk-client-profile.mjs",
-      "sha256": "4b45a78b4d6c4794a1f494bd95777579c32c56a68321a1d3b484048942ae4742"
+      "sha256": "8be37831c96610e3d0a64848ada86488970cc6079e49764b47d8a8b2ba852269"
     },
     {
       "path": "bootstrap/core/hellolynk-host-auth.mjs",
@@ -320,7 +336,7 @@
     },
     {
       "path": "bootstrap/core/hellolynk-host-protected-store.mjs",
-      "sha256": "89b6e6c4ce9c6ba2984f8c301de4251da6004bdd402cc44d578a4505c21b75b1"
+      "sha256": "10f81f4f6a5dd2fe9a742e847b2eb47dbf20f802f4414f46a05ccbc3505148e2"
     },
     {
       "path": "bootstrap/core/hellolynk-local-process-lock.mjs",
@@ -328,11 +344,11 @@
     },
     {
       "path": "bootstrap/core/hellolynk-neutral-host-installation-store.mjs",
-      "sha256": "b5f6288732af6f9b9c0c750f6002eae657dde9513fc97674f6e59200f3cc9dc6"
+      "sha256": "42ae1e7deb876a8308b7bfed6a7b891d1834117b62504fc5befe3f91a0b4c740"
     },
     {
       "path": "bootstrap/core/hellolynk-platform-credential-store.mjs",
-      "sha256": "f27f5f377cc4d6d2b5664212cf8fcc4c98d910064c1677ff9c1f776df1a59dba"
+      "sha256": "3969708bafefc3b267bb34a9dcc115804c874ad14f4a036426d727c02ff70d42"
     },
     {
       "path": "bootstrap/core/hellolynk-runtime-safety.cjs",
@@ -342,9 +358,25 @@
       "path": "bootstrap/platform/windows/hellolynk-host-protected-store.ps1",
       "sha256": "24357e8ce54090b4ec68e457f02c9e834a80f3273ef3c03a8c0fa7258797fb49"
     },
+    {
+      "path": "platform/darwin/hellolynk-keychain-helper.swift",
+      "sha256": "5d933589a1d739217bc164f73ab9afadc9e27cc512e1c00c0be4b38975fb6d5b"
+    },
+    {
+      "path": "platform/darwin/hellolynk-keychain-helper.bin",
+      "sha256": "f1a782c08229ebc0e8d1704b6390e91c5695e084b4df0a1a6dc043f6b23700ab"
+    },
+    {
+      "path": "bootstrap/platform/darwin/hellolynk-keychain-helper.swift",
+      "sha256": "5d933589a1d739217bc164f73ab9afadc9e27cc512e1c00c0be4b38975fb6d5b"
+    },
+    {
+      "path": "bootstrap/platform/darwin/hellolynk-keychain-helper.bin",
+      "sha256": "f1a782c08229ebc0e8d1704b6390e91c5695e084b4df0a1a6dc043f6b23700ab"
+    },
     {
       "path": "release/server/codex-neutral-production.mjs",
-      "sha256": "ffb8e689df1b600bcca85159af8d59f0fad819827f48ba9a218a63dfd7a3daa2"
+      "sha256": "2e09f95b8c15ac307d3be0e5b29fecd00e5eae95fd816e885c51484990e703cb"
     },
     {
       "path": "release/server/neutral-host-adapter.mjs",
@@ -352,7 +384,7 @@
     },
     {
       "path": "release/server/workbench-runtime.mjs",
-      "sha256": "1136c7ea50cc73065fe04094c5b5c19cb676c40a0a189979015766a9c4e908d8"
+      "sha256": "99e069a72a0be3e73a993b2092d55470fcb481eb381841a156b2756415a0a0a9"
     }
   ]
 }

package/plugins/hellolynk-codex/runtime/neutral-host-release-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-neutral-host-release-pin-v1",
-  "manifestSha256": "5b035cb2d82e7543b801ca9d3b35a36e3f54a7b9aff9afcdf9f479926c537f56"
+  "manifestSha256": "2cc4af5084d836c44b30aa3f747ab0562980991edf78aba149aaded974d32b3c"
 }