@hellolynk-ai/codex-plugin 0.2.102 → 0.2.103-macos.1

package/README.md

@@ -35,35 +35,35 @@
 
 Codex、OpenClaw、TRAE Work、WorkBuddy。装哪个客户端，就选哪个包。同一个账号下，它们共用你的灵信号。
 
-源码见 [Codex 客户端源码](https://github.com/haoyun18881-beep/HelloLynk/tree/main/clients/codex)，完整介绍见 [HelloLynk on GitHub](https://github.com/haoyun18881-beep/HelloLynk)。
+源码见 [Codex 客户端源码](https://github.com/haoyun18881-beep/HelloLynk/tree/main/clients/codex-macos)，完整介绍见 [HelloLynk on GitHub](https://github.com/haoyun18881-beep/HelloLynk)。
 
 ## 前提
 
-Windows 10/11、Node.js 22.16 或更高版本、PowerShell 7，以及打开过一次的 Codex。
+Apple 芯片、macOS 13 或更高版本、Node.js 22.16 或更高版本，以及安装在「应用程序」中的 ChatGPT（已打开过 Codex）。
 
 ## 安装
 
 1. 打开 [HelloLynk 官网（Official site）](https://hellolynk.com)。新用户注册账号；已有账号登录后，查看自己的公开灵信号。
 2. 两种装法任选一种。
 
-   用安装包，在官网或 [GitHub Release](https://github.com/haoyun18881-beep/HelloLynk/releases) 下载 Codex 安装包，完整解压，在包含 `package` 文件夹的目录打开 PowerShell，运行：
+   推荐用 npm，在终端运行：
 
-   ```powershell
-   node .\package\bin\hellolynk-client-setup.mjs init
+   ```sh
+   npm install -g @hellolynk-ai/codex-plugin@macos
+   hellolynk-codex init
    ```
 
-   用 npm，在 PowerShell 运行：
+   用安装包，在官网或 [GitHub Release](https://github.com/haoyun18881-beep/HelloLynk/releases) 下载 Codex for Mac 安装包，完整解压，在包含 `package` 文件夹的目录打开 终端，运行：
 
-   ```powershell
-   npm install -g @hellolynk-ai/codex-plugin
-   hellolynk-codex init
+   ```sh
+   node ./package/bin/hellolynk-client-setup.mjs init
    ```
 
 3. 完全退出并重新打开 Codex。
 
 可以把本说明交给你的本地 AI，请它帮你安装；用安装包时，把解压目录也告诉它。
 
-下文命令按安装包写法给出。用 npm 装的，把 `node .\package\bin\hellolynk-client-setup.mjs` 换成 `hellolynk-codex`，在任意目录运行。
+下文命令按安装包写法给出。用 npm 装的，把 `node ./package/bin/hellolynk-client-setup.mjs` 换成 `hellolynk-codex`，在任意目录运行。
 
 ## 首次连接
 
@@ -73,8 +73,8 @@ Windows 10/11、Node.js 22.16 或更高版本、PowerShell 7，以及打开过
 
 也可以让 AI 用命令连接，把示例换成自己的公开灵信号：
 
-```powershell
-node .\package\bin\hellolynk-client-setup.mjs connect --hellolynk-id hellolynk:intl:your-name
+```sh
+node ./package/bin/hellolynk-client-setup.mjs connect --hellolynk-id hellolynk:intl:your-name
 ```
 
 首次连接这台电脑时，命令会给出官网确认链接。AI 把链接给用户；用户确认后，AI 继续执行同一条连接命令。
@@ -83,20 +83,20 @@ node .\package\bin\hellolynk-client-setup.mjs connect --hellolynk-id hellolynk:i
 
 插件会自动更新，不用操作。要手动更新，下载新版安装包，在包含 `package` 文件夹的目录运行：
 
-```powershell
-node .\package\bin\hellolynk-client-setup.mjs setup
+```sh
+node ./package/bin/hellolynk-client-setup.mjs setup
 ```
 
-用 npm 装的，先运行 `npm install -g @hellolynk-ai/codex-plugin` 装上新版，再运行 `hellolynk-codex setup`。
+用 npm 装的，先运行 `npm install -g @hellolynk-ai/codex-plugin@macos` 装上新版，再运行 `hellolynk-codex setup`。
 
 ## 卸载
 
-在包含 `package` 文件夹的目录运行 `node .\package\bin\hellolynk-client-setup.mjs uninstall`。账号、联系人和聊天记录留在这台电脑上，重新安装后不用重新连接。
+在包含 `package` 文件夹的目录运行 `node ./package/bin/hellolynk-client-setup.mjs uninstall`。账号、联系人和聊天记录留在这台电脑上，重新安装后不用重新连接。
 
 用 npm 装的，运行 `hellolynk-codex uninstall`，再运行 `npm uninstall -g @hellolynk-ai/codex-plugin`。
 
 ## 求助
 
-运行 `node .\package\bin\hellolynk-client-setup.mjs doctor` 检查安装，把结果和错误码发到 [haoyun18881@gmail.com](mailto:haoyun18881@gmail.com)。
+运行 `node ./package/bin/hellolynk-client-setup.mjs doctor` 检查安装，把结果和错误码发到 [haoyun18881@gmail.com](mailto:haoyun18881@gmail.com)。
 
 许可：PolyForm Shield License 1.0.0，只覆盖本包内的客户端源码，完整条款见 LICENSE。

package/bin/hellolynk-client-setup.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import crypto from "node:crypto";
-import { lstatSync, realpathSync, writeSync } from "node:fs";
+import { constants, lstatSync, realpathSync, writeSync } from "node:fs";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
@@ -16,11 +16,14 @@ const PACK_PIN = "hellolynk-client-pack-pin.json";
 
 // A person at a terminal reads sentences in the system language; the updater, tests and other
 // programs read one JSON line.
-const jsonOutput = process.argv.includes("--json") || process.stdout.isTTY !== true;
+const explicitJson = process.argv.includes("--json");
+const jsonOutput = explicitJson || process.stdout.isTTY !== true;
 const CHINESE = /^zh\b/i.test(Intl.DateTimeFormat().resolvedOptions().locale);
 const CLIENT_NAMES = Object.freeze({ codex: "Codex", openclaw: "OpenClaw", "trae-work": "TRAE Work",
   workbuddy: "WorkBuddy", cursor: "Cursor", dsh: "DSH" });
 const { packageJson, metadata } = await readPackage();
+const macPackage = metadata.client === "codex" && packageJson.os?.[0] === "darwin"
+  && packageJson.cpu?.[0] === "arm64";
 const commandArguments = process.argv.slice(2).filter((value) => value !== "--json");
 const command = String(commandArguments.shift() || "help").toLowerCase();
 const waitForPending = command === "--wait-for-pending";
@@ -63,6 +66,12 @@ try {
   } else {
   const accountModule = await importStableCore(PACKAGE_ROOT, "hellolynk-client-account.mjs", "hellolynk_npm_account_runtime_invalid");
   const originalLocations = resolveLocations(accountModule.clientAccountBaseRoot);
+  if (macPackage && command !== "uninstall") {
+    const config = await readJson(path.join(sourceReleaseRoot, ".mcp.json"), "hellolynk_npm_release_invalid", true);
+    const commandPath = config.mcpServers?.["hellolynk-codex"]?.command;
+    if (typeof commandPath !== "string" || !path.isAbsolute(commandPath)) fail("hellolynk_npm_release_invalid");
+    await fs.access(commandPath, constants.X_OK).catch(() => fail("hellolynk_npm_codex_mac_node_required"));
+  }
   const baseRoot = accountModule.clientAccountBaseRoot(originalLocations.hostRoot);
   const packageLocations = { ...originalLocations, hostRoot: baseRoot, finalCurrentRoot: path.dirname(baseRoot) };
   const accounts = accountModule.createClientAccountActions({ client: metadata.client, storeRoot: baseRoot });
@@ -250,6 +259,10 @@ try {
       await verifyExactBinding({ ...installed, locations, activation });
       await verifyClientConfiguration({ ...installed, locations });
     }
+    // A running unsigned updater asks the stable package for implicit JSON. A
+    // staged package may still prove its own first install after lost stdout.
+    const legacyUpdateProof = installed && !existingDoctor && !explicitJson && jsonOutput
+      && process.env.HELLOLYNK_NEUTRAL_STORE_ROOT && samePath(PACKAGE_ROOT, installed.packageRoot);
     print({
       ok: true,
       client: metadata.client,
@@ -260,7 +273,7 @@ try {
       activated: activation.ready,
       activationState: activation.state,
       stableReleaseVerified: installed != null,
-      exactBindingVerified: installed != null,
+      ...(legacyUpdateProof ? {} : { exactBindingVerified: installed != null }),
       clientConfigurationVerified: installed != null,
       installsNode: false,
       installsGit: false,
@@ -429,7 +442,8 @@ async function uninstallClient(locations) {
     if (receiverConfigured) await receiver.configureTraeNativeTaskWorker({ storeRoot: locations.hostRoot, enabled: false });
   }
   // A binding names the release it starts, so it cannot outlive the releases removed below.
-  if (await exists(path.join(locations.hostRoot, "capabilities-v1.dpapi.clixml"))) {
+  const protectedFile = macPackage ? "protected-v1.sqlite" : "capabilities-v1.dpapi.clixml";
+  if (await exists(path.join(locations.hostRoot, protectedFile))) {
     const store = await importStableCore(PACKAGE_ROOT, "hellolynk-host-protected-store.mjs", "hellolynk_npm_binding_invalid");
     await store.createHostProtectedStore({ root: locations.hostRoot, followClientAccount: false }).disconnectLocalClient(metadata.client);
   }
@@ -839,10 +853,13 @@ async function verifyRelease(releaseRoot, packageRoot, expectedMetadata = metada
 }
 
 function resolveLocations(getDefaultHostRoot) {
-  if (process.platform !== "win32") fail("hellolynk_npm_windows_only");
-  const home = path.resolve(process.env.USERPROFILE || os.homedir());
-  const localAppData = path.resolve(process.env.LOCALAPPDATA || path.join(home, "AppData", "Local"));
-  const appData = path.resolve(process.env.APPDATA || path.join(home, "AppData", "Roaming"));
+  if (macPackage) {
+    if (process.platform !== "darwin" || process.arch !== "arm64") fail("hellolynk_npm_platform_unsupported");
+  } else if (process.platform !== "win32") fail("hellolynk_npm_windows_only");
+  const home = path.resolve((macPackage ? process.env.HOME : process.env.USERPROFILE) || os.homedir());
+  const localAppData = macPackage ? path.join(home, "Library", "Application Support")
+    : path.resolve(process.env.LOCALAPPDATA || path.join(home, "AppData", "Local"));
+  const appData = macPackage ? localAppData : path.resolve(process.env.APPDATA || path.join(home, "AppData", "Roaming"));
   const configuredCodexHome = String(process.env.CODEX_HOME || "");
   if (configuredCodexHome && !path.isAbsolute(configuredCodexHome)) fail("hellolynk_npm_codex_home_invalid");
   const codexHome = path.resolve(configuredCodexHome || path.join(home, ".codex"));
@@ -2252,6 +2269,13 @@ function runCodexJson(args, code, codexHome) {
 }
 
 function minimalEnv({ codexHome = null } = {}) {
+  if (macPackage) return Object.freeze({
+    PATH: process.env.PATH || "/usr/bin:/bin",
+    HOME: process.env.HOME || os.homedir(),
+    TMPDIR: process.env.TMPDIR || os.tmpdir(),
+    LANG: process.env.LANG || "en_US.UTF-8",
+    ...(codexHome ? { CODEX_HOME: codexHome } : {}),
+  });
   return Object.freeze({
     PATH: process.env.Path || process.env.PATH || "",
     PATHEXT: process.env.PATHEXT || "",
@@ -2267,13 +2291,18 @@ function minimalEnv({ codexHome = null } = {}) {
 
 function resolveCodexRunner(codexHome) {
   if (resolvedCodexRunner) return resolvedCodexRunner;
-  const searchPath = String(process.env.Path || process.env.PATH || "");
+  const searchPath = String((macPackage ? process.env.PATH : process.env.Path || process.env.PATH) || "");
   let sawLoaderCandidate = false;
   let sawNativeCandidate = false;
   for (const rawEntry of searchPath.split(path.delimiter)) {
     try {
       const logical = rawEntry.trim().replace(/^"(.*)"$/, "$1");
       if (!logical || !path.isAbsolute(logical)) continue;
+      if (macPackage) {
+        const runner = probeMacCodex(path.join(logical, "codex"), codexHome);
+        if (runner) return (resolvedCodexRunner = runner);
+        continue;
+      }
       // nvm/fnm and user profile mappings can put a junction on PATH. Resolve
       // that directory once, then retain the ordinary-file checks below it.
       const entry = realpathSync(path.resolve(logical));
@@ -2327,6 +2356,15 @@ function resolveCodexRunner(codexHome) {
 }
 
 function resolveCodexDesktopRunner(codexHome) {
+  if (macPackage) {
+    for (const directory of ["/Applications", path.join(os.homedir(), "Applications")]) {
+      for (const app of ["ChatGPT.app", "Codex.app"]) {
+        const runner = probeMacCodex(path.join(directory, app, "Contents", "Resources", "codex"), codexHome);
+        if (runner) return runner;
+      }
+    }
+    return null;
+  }
   if (process.platform !== "win32") return null;
   const systemRoot = process.env.SystemRoot || process.env.SYSTEMROOT;
   if (!systemRoot || !path.isAbsolute(systemRoot)) return null;
@@ -2354,6 +2392,22 @@ function resolveCodexDesktopRunner(codexHome) {
   return null;
 }
 
+function probeMacCodex(logicalPath, codexHome) {
+  // npm and Homebrew commonly expose a symlink. Execute the canonical file directly.
+  try {
+    const command = realpathSync(logicalPath);
+    const metadata = lstatSync(command);
+    if (!metadata.isFile() || !(metadata.mode & 0o111)) return null;
+    const result = spawnSync(command, ["--version"], {
+      encoding: "utf8", shell: false, timeout: 5000, env: minimalEnv({ codexHome }),
+    });
+    if (result.status === 0 && /^codex-cli\s+\d+\.\d+\.\d+/u.test(String(result.stdout || "").trim())) {
+      return Object.freeze({ command, argsPrefix: Object.freeze([]), kind: "native" });
+    }
+  } catch { /* Missing or unusable CLI. */ }
+  return null;
+}
+
 function resolveRegularDescendantSync(anchor, anchorRealPath, segments) {
   let observed = anchor;
   for (let index = 0; index < segments.length; index += 1) {
@@ -2533,6 +2587,7 @@ function samePath(left, right) {
     const resolved = normalizeWindowsNamespacePath(value);
     let canonical = resolved;
     try { canonical = realpathSync(resolved); } catch { /* comparison can still reject a missing path */ }
+    if (macPackage) return canonical;
     return normalizeWindowsNamespacePath(canonical).replace(/[\\/]+$/u, "").toLowerCase();
   };
   return normalize(left) === normalize(right);
@@ -2652,7 +2707,9 @@ function helpText() {
     : [[say("安装", "Install"), "init"], [say("连接账号", "Connect an account"), connect],
       [say("更新或修复", "Update or repair"), "setup"], [say("检查", "Check"), "doctor"],
       [say("卸载", "Uninstall"), "uninstall"]];
-  return `${[`HelloLynk for ${CLIENT_NAMES[metadata.client]}${say("（Windows，Node.js 22.16.0+）", " (Windows, Node.js 22.16.0+)")}`,
+  const platform = macPackage ? " (macOS arm64, Node.js 22.16.0+)"
+    : say("（Windows，Node.js 22.16.0+）", " (Windows, Node.js 22.16.0+)");
+  return `${[`HelloLynk for ${CLIENT_NAMES[metadata.client]}${platform}`,
     ...rows.map(([label, args]) => `${label}${say("：", ": ")}${run} ${args}`),
     say("加 --json 输出一行 JSON。", "Add --json for one line of JSON.")].join("\n")}\n`;
 }
@@ -2726,6 +2783,9 @@ function failureText(failure) {
 function failureReason(code, name) {
   if (code === "hellolynk_node_22_16_required") return say("需要 Node.js 22.16 或更高版本。", "Node.js 22.16 or later is required.");
   if (code === "hellolynk_npm_windows_only") return say("只支持 Windows。", "Windows only.");
+  if (code === "hellolynk_npm_platform_unsupported") return say("此安装包适用于 Apple 芯片的 Mac。", "This package requires an Apple silicon Mac.");
+  if (code === "hellolynk_npm_codex_mac_node_required") return say("请将 ChatGPT 安装到「应用程序」，打开 Codex 后再试。",
+    "Install ChatGPT in Applications, open Codex, and try again.");
   if (code === "hellolynk_npm_connect_id_invalid") {
     return say("灵信号不对。请从官网复制从 hellolynk: 开始的完整灵信号。",
       "This HelloLynk ID is not valid. Copy the complete ID, starting with hellolynk:, from the website.");

package/hellolynk-client-pack-manifest.json

@@ -2,7 +2,7 @@
   "contract": "hellolynk-client-npm-pack-manifest-v1",
   "client": "codex",
   "packageName": "@hellolynk-ai/codex-plugin",
-  "version": "0.2.102",
+  "version": "0.2.103-macos.1",
   "workbench": {
     "path": "plugins/hellolynk-codex/runtime/workbench/hellolynk-workbench-build.json",
     "contract": "hellolynk-shared-workbench-build-v1",
@@ -17,8 +17,8 @@
     },
     {
       "path": "bin/hellolynk-client-setup.mjs",
-      "bytes": 142207,
-      "sha256": "95386fcd9092f31abb3b0441033b3b385b3c355506613da24b4557d5f9cac6ef"
+      "bytes": 145615,
+      "sha256": "044321ea6c5757a985b92a826ffc1fb3ffa4fb8355b732abecc64210d4ac3399"
     },
     {
       "path": "bin/hellolynk-mcp-config-shape.mjs",
@@ -32,8 +32,8 @@
     },
     {
       "path": "package.json",
-      "bytes": 1713,
-      "sha256": "a1dffd73cef661cd0f019f5a532f949693fccfa72222d346bd867470977cdc99"
+      "bytes": 1776,
+      "sha256": "4115862c2d4169f3876fe2c35a3a96c8c1fb50b6a3a73af80456e26702ad3105"
     },
     {
       "path": "plugins/hellolynk-codex/.app.json",
@@ -43,12 +43,12 @@
     {
       "path": "plugins/hellolynk-codex/.codex-plugin/plugin.json",
       "bytes": 1669,
-      "sha256": "38d2a5204b66ec57368494e69ed71de655f798f9d37ab2af966b59c3ab07d0f2"
+      "sha256": "1de6bb823a304b733c0c75418389b1e32819191adea03c575f5c602f2e00631c"
     },
     {
       "path": "plugins/hellolynk-codex/.mcp.json",
-      "bytes": 373,
-      "sha256": "c349aeb9545e8ed97f2eb5b7f4809880dae2c545b01ec049057d8ebd3a2221cc"
+      "bytes": 438,
+      "sha256": "510ae3b6f417c1cd8e4712704d9e76643d30e7b3d1a8d3363dda19eb30fe4580"
     },
     {
       "path": "plugins/hellolynk-codex/assets/hellolynk-mark.png",
@@ -58,12 +58,12 @@
     {
       "path": "plugins/hellolynk-codex/package.json",
       "bytes": 1030,
-      "sha256": "befbca064334e8ff7f9d192f095ac1bd786a3882385a450fc2c2d2a5c9b2b7dd"
+      "sha256": "f786baab2e9f35836813c6b77e1cbc0fb8c0a3c0a2055b2e6ea777f2428cd232"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-client-account.mjs",
-      "bytes": 8414,
-      "sha256": "ab7ec5dda92e510e7deb14f900fd2df4c6c3373fbeb4af4fb2b6c1a72aa41a99"
+      "bytes": 8423,
+      "sha256": "6e03a05127d4dc86be6391567b51a956d1a987acf4e23f5699ce0e00c3187b7e"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-client-core.mjs",
@@ -75,6 +75,16 @@
       "bytes": 9359,
       "sha256": "8be37831c96610e3d0a64848ada86488970cc6079e49764b47d8a8b2ba852269"
     },
+    {
+      "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-darwin-host.mjs",
+      "bytes": 15242,
+      "sha256": "ded97c3bc3dd65ca75305f5199a1340dffb987a5f283454d60586df8b6b55c09"
+    },
+    {
+      "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-darwin-vault.mjs",
+      "bytes": 7506,
+      "sha256": "b6094d856af016e674e4a0183a4e474397bbe92e66638743fa62fe085b554d30"
+    },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-host-auth.mjs",
       "bytes": 12081,
@@ -82,8 +92,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-host-protected-store.mjs",
-      "bytes": 126836,
-      "sha256": "89b6e6c4ce9c6ba2984f8c301de4251da6004bdd402cc44d578a4505c21b75b1"
+      "bytes": 127785,
+      "sha256": "10f81f4f6a5dd2fe9a742e847b2eb47dbf20f802f4414f46a05ccbc3505148e2"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-local-process-lock.mjs",
@@ -92,19 +102,29 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-neutral-host-installation-store.mjs",
-      "bytes": 33183,
-      "sha256": "dfb6bba4c627082cd6fca8cb38dc786f905e38f3e83ccf91dbfe57e55639e8a2"
+      "bytes": 33232,
+      "sha256": "42ae1e7deb876a8308b7bfed6a7b891d1834117b62504fc5befe3f91a0b4c740"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-platform-credential-store.mjs",
-      "bytes": 34521,
-      "sha256": "f27f5f377cc4d6d2b5664212cf8fcc4c98d910064c1677ff9c1f776df1a59dba"
+      "bytes": 38559,
+      "sha256": "3969708bafefc3b267bb34a9dcc115804c874ad14f4a036426d727c02ff70d42"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-runtime-safety.cjs",
       "bytes": 24643,
       "sha256": "43d576d9f774409f4a735793c1503a6f397e787b10c59a4ac9cc9257299f5efe"
     },
+    {
+      "path": "plugins/hellolynk-codex/runtime/bootstrap/platform/darwin/hellolynk-keychain-helper.bin",
+      "bytes": 110784,
+      "sha256": "f1a782c08229ebc0e8d1704b6390e91c5695e084b4df0a1a6dc043f6b23700ab"
+    },
+    {
+      "path": "plugins/hellolynk-codex/runtime/bootstrap/platform/darwin/hellolynk-keychain-helper.swift",
+      "bytes": 7771,
+      "sha256": "5d933589a1d739217bc164f73ab9afadc9e27cc512e1c00c0be4b38975fb6d5b"
+    },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/platform/windows/hellolynk-host-protected-store.ps1",
       "bytes": 152700,
@@ -112,8 +132,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/connect-activate.mjs",
-      "bytes": 33499,
-      "sha256": "50ec8b0a58ac5b099a653722b0946acb23d0a29a054bfb3856dc963db6f84bee"
+      "bytes": 33789,
+      "sha256": "93c68c23ed2d18e87766ecd8dae6c3d8e757eca6ad7569477c8ec994402a8b0e"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-agent-configurator.mjs",
@@ -122,8 +142,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-client-account.mjs",
-      "bytes": 8414,
-      "sha256": "ab7ec5dda92e510e7deb14f900fd2df4c6c3373fbeb4af4fb2b6c1a72aa41a99"
+      "bytes": 8423,
+      "sha256": "6e03a05127d4dc86be6391567b51a956d1a987acf4e23f5699ce0e00c3187b7e"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-client-core.mjs",
@@ -137,24 +157,34 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-client-update-entry.mjs",
-      "bytes": 1581,
-      "sha256": "b2740406d79d0fa129c3bd1b5e6a07c3f52eed5e35a91ffea40b099ddc708936"
+      "bytes": 1939,
+      "sha256": "d9548eacda8632976e42aafc65f0cef2ec9c5233d2d53b31b02aec0a1702b5eb"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-client-update-runtime.mjs",
-      "bytes": 39709,
-      "sha256": "3ed31f0cea704c3ad26481126a78a7d39c21df69a5c52d1074a096a2b7b3e32f"
+      "bytes": 41618,
+      "sha256": "aa233e2cdbdfadb7da6aa489591bc12c4121101b94696f93f6e6cb5d3e7c7870"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-client-update.mjs",
-      "bytes": 27932,
-      "sha256": "8f0d6f54313c91bd2ffb4643859a91dd1e122bb5f1da9143fe2851a3370d7fbf"
+      "bytes": 30894,
+      "sha256": "e57f7cc5e98519a014cef7cef68a97bb7e2beb33eb381c38d1751a3967904aaa"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-contact-request-e2ee.mjs",
       "bytes": 34163,
       "sha256": "657664c6250d2738061e1ec2680eda6b36063c357d9e2d9c743e4218ece50895"
     },
+    {
+      "path": "plugins/hellolynk-codex/runtime/core/hellolynk-darwin-host.mjs",
+      "bytes": 15242,
+      "sha256": "ded97c3bc3dd65ca75305f5199a1340dffb987a5f283454d60586df8b6b55c09"
+    },
+    {
+      "path": "plugins/hellolynk-codex/runtime/core/hellolynk-darwin-vault.mjs",
+      "bytes": 7506,
+      "sha256": "b6094d856af016e674e4a0183a4e474397bbe92e66638743fa62fe085b554d30"
+    },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-device-enrollment.mjs",
       "bytes": 26664,
@@ -177,8 +207,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-host-protected-store.mjs",
-      "bytes": 126836,
-      "sha256": "89b6e6c4ce9c6ba2984f8c301de4251da6004bdd402cc44d578a4505c21b75b1"
+      "bytes": 127785,
+      "sha256": "10f81f4f6a5dd2fe9a742e847b2eb47dbf20f802f4414f46a05ccbc3505148e2"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-host-transport-client.mjs",
@@ -192,8 +222,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-human-confirmation-ledger.mjs",
-      "bytes": 11071,
-      "sha256": "63bcbbb0870ad83fc031636d74ce77fc070d5f4d1d4c10297f8b3ec9ad85bbf6"
+      "bytes": 14416,
+      "sha256": "43b6b6baea422eb226c850f15966c907d834bc2f5aadbab6ee0c9e05445f182f"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-human-relationship-controller.mjs",
@@ -232,8 +262,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-local-data-protection.mjs",
-      "bytes": 25720,
-      "sha256": "1bda879aa0bdf46700a63374e82cc7bc639385656b1463a75a49e8510971066c"
+      "bytes": 26663,
+      "sha256": "cea4f73ec5a31918c48bd8234e28d38ff1bb8028d2591f542b15ee12b2238e1f"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-local-identity-trust.mjs",
@@ -277,8 +307,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-native-human-confirmation-broker.mjs",
-      "bytes": 39491,
-      "sha256": "2fb2d3b40869362be3e40a1ec55947021319af5315cbf8fdc5ed59df717cceb3"
+      "bytes": 39735,
+      "sha256": "f190c28af2703b58a685a57213b2789df7eda35d7699d718f9420cd1dddd1b65"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-native-inbox-runtime.mjs",
@@ -307,18 +337,18 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-installation-store.mjs",
-      "bytes": 33183,
-      "sha256": "dfb6bba4c627082cd6fca8cb38dc786f905e38f3e83ccf91dbfe57e55639e8a2"
+      "bytes": 33232,
+      "sha256": "42ae1e7deb876a8308b7bfed6a7b891d1834117b62504fc5befe3f91a0b4c740"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-launcher.mjs",
-      "bytes": 29457,
-      "sha256": "789b2531cdbde6e6d8f91f2a40746372e903e9e48e8aa6846b9abf2d28150780"
+      "bytes": 29655,
+      "sha256": "d94b853a7ed1ebc9c7e9bd7c37e2405e39849fb6d4ddf3d697e17ba169eda6d2"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-process.mjs",
       "bytes": 225161,
-      "sha256": "e744bacf65f7b86cbcf7d654189c0e07e09401083e2b6f9053b17c1c3bacd1b4"
+      "sha256": "7b237a1400c604da5decbb29ab3ce556fd1b744d0cfd7d28b5560b217da120b1"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-store-adapters.mjs",
@@ -332,8 +362,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-platform-credential-store.mjs",
-      "bytes": 34521,
-      "sha256": "f27f5f377cc4d6d2b5664212cf8fcc4c98d910064c1677ff9c1f776df1a59dba"
+      "bytes": 38559,
+      "sha256": "3969708bafefc3b267bb34a9dcc115804c874ad14f4a036426d727c02ff70d42"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-relay-client-cli.mjs",
@@ -342,8 +372,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-release-retention.mjs",
-      "bytes": 20624,
-      "sha256": "9b02a42a510fa5ef4a251b6e675f9ccc60f20b718d17c1617027cd048c5634dd"
+      "bytes": 25616,
+      "sha256": "0ee150af5a9bcc1f636e3ff980ee90ce7d073ab5ed4a991920cd3472bc65529c"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-runtime-safety.cjs",
@@ -357,8 +387,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-workbench-connection.mjs",
-      "bytes": 14252,
-      "sha256": "d3396350fd75af78e60772e021cf6dfb643d9eee41894c5461c959a56650cb60"
+      "bytes": 14339,
+      "sha256": "6ce8e75025d31ed81c39150df2766231fc871ef18c234de986dc910bab79d639"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/neutral-host-bootstrap.mjs",
@@ -367,23 +397,33 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/neutral-host-release-entry.mjs",
-      "bytes": 3432,
-      "sha256": "23e88d39362fe556eb96f86b2ac9740c0390f33f01edee5c89d708c80c4f8fa6"
+      "bytes": 3441,
+      "sha256": "698d7e80d38353d56c7f1c337fbc676e8649d08afc726ffcb31215dc11fc8455"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/neutral-host-release-loader.mjs",
-      "bytes": 7567,
-      "sha256": "15593e237fd5cbd765b65e60efe7a1c87e24a5390ad932c8a23d2c03b8da9770"
+      "bytes": 7577,
+      "sha256": "283a20c6a9b90481bc03c143ab51d5289abf7b7a86fbe51fba7ea2ae1e6d2c60"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/neutral-host-release-manifest.json",
-      "bytes": 13440,
-      "sha256": "3f8ad933949136ed1ebf5172c9e49ead0b0e2829650bc960eef1bdddd27c6a8f"
+      "bytes": 14698,
+      "sha256": "f054f0e73accc788fb24c437eea03a6e4cd5872f39dc4d65cbc7ff0e17e6bcae"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/neutral-host-release-pin.json",
       "bytes": 146,
-      "sha256": "6c9832284a05105014d72fe52f15e7d36c3c3fbbcb20aaf24f84a10196a7fad8"
+      "sha256": "530ed943cd227874b5096c7bb3657ec0f7a624c2b049680003f6237574d9d73a"
+    },
+    {
+      "path": "plugins/hellolynk-codex/runtime/platform/darwin/hellolynk-keychain-helper.bin",
+      "bytes": 110784,
+      "sha256": "f1a782c08229ebc0e8d1704b6390e91c5695e084b4df0a1a6dc043f6b23700ab"
+    },
+    {
+      "path": "plugins/hellolynk-codex/runtime/platform/darwin/hellolynk-keychain-helper.swift",
+      "bytes": 7771,
+      "sha256": "5d933589a1d739217bc164f73ab9afadc9e27cc512e1c00c0be4b38975fb6d5b"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/platform/windows/configure-agent.ps1",
@@ -392,8 +432,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/platform/windows/credential-store.ps1",
-      "bytes": 38434,
-      "sha256": "d00dae4af08205fffa52c4956d1c87d5c3423e8f20982ccfc1b76e3424fe442e"
+      "bytes": 40188,
+      "sha256": "8f288c91a1f6ecaf2651baab9bdfc55014c11ea9e165f203ca7a69f4d47d7917"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/platform/windows/hellolynk-host-protected-store.ps1",
@@ -552,8 +592,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/server/codex-neutral-production.mjs",
-      "bytes": 26960,
-      "sha256": "7b3249f1b35c331cf2b00ac2873a54d12fc6f61cf341bb82cec98e49ce221b92"
+      "bytes": 27551,
+      "sha256": "2c2f209339385cc14f27fe985f4deb75f4bd48e689035311847cc3b08e36ac52"
     },
     {
       "path": "plugins/hellolynk-codex/server/mcp-proxy.mjs",
@@ -607,13 +647,13 @@
     },
     {
       "path": "README.md",
-      "bytes": 4536,
-      "sha256": "6876323b3a86b6cce25b84f6c49232553ca4f8b9abd0c12f595a9b3b971f4e76"
+      "bytes": 4578,
+      "sha256": "95cd3887026e6a275dce26e50667c1422fad356b59409ce15d6f84ef2207ed92"
     },
     {
       "path": "tools/hellolynk-activate-neutral-host-clients.mjs",
-      "bytes": 33697,
-      "sha256": "7f344d823851e267000aa7640472ad19943e1f162caa0820f8c8e9473c4ce2b5"
+      "bytes": 34020,
+      "sha256": "6d838bd1a53a0567ff451adb8b46c3002b3ef092f1af4062b2b8c2b16eaa19cf"
     }
   ]
 }

package/hellolynk-client-pack-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-client-npm-pack-pin-v1",
-  "manifestSha256": "f750254b705c93ec80f1e297d7a03f2c8e3b0a3cdf73bb0073a0527ca64fdf46"
+  "manifestSha256": "23e0c7dae786144392b74ba3ee2c6b4b5221d65410ddb563c207ab2022902f87"
 }