@karlorz/codexhost-cli-darwin-x64 0.13.3-0 → 0.13.3-1

package/README.md

@@ -7,7 +7,7 @@ Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.
 ## Install
 
 ```bash
-npm install -g @karlorz/codexhost-cli@0.13.3-0
+npm install -g @karlorz/codexhost-cli@0.13.3-1
 ```
 
 Do not install this package directly. npm selects it through the optional dependencies of `@karlorz/codexhost-cli`.

package/app/codexhost-distribution.json

@@ -1 +1 @@
-{"schemaVersion":1,"version":"0.13.3-0","distribution":"npm","target":"macos-x64"}
+{"schemaVersion":1,"version":"0.13.3-1","distribution":"npm","target":"macos-x64"}

package/app/console-web.js

@@ -18856,6 +18856,7 @@ th[aria-sort] .console-usage-sort__mark {
     "Codex Desktop installation discovered": "findDesktop",
     "acquiring Launcher ownership": "ownership",
     "Launcher ownership acquired": "ownership",
+    "recovering leftover Desktop Controller": "ownership",
     "attached to existing controlled Desktop": "ownership",
     "launching Codex Desktop": "launchDesktop",
     "Codex Desktop launched": "launchDesktop",

package/app/host-runtime.mjs

@@ -3227,7 +3227,7 @@ var require_stream = __commonJS({
       };
       duplex._final = function(callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open13() {
+          ws.once("open", function open12() {
             duplex._final(callback);
           });
           return;
@@ -3248,7 +3248,7 @@ var require_stream = __commonJS({
       };
       duplex._write = function(chunk, encoding, callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open13() {
+          ws.once("open", function open12() {
             duplex._write(chunk, encoding, callback);
           });
           return;
@@ -21781,7 +21781,7 @@ function isLocalPageUrl(value2) {
     return false;
   }
 }
-async function serveLocalPage(socket, url2, open13) {
+async function serveLocalPage(socket, url2, open12) {
   let page;
   let buffer = "";
   let operation = Promise.resolve();
@@ -21815,7 +21815,7 @@ async function serveLocalPage(socket, url2, open13) {
     }
   };
   try {
-    page = await open13(url2);
+    page = await open12(url2);
     if (socket.destroyed)
       return;
     socket.on("data", receive);
@@ -26022,7 +26022,7 @@ async function atomicWrite(filePath, content) {
 }
 async function installDelegationSkills(input = {}) {
   const home = input.homeDirectory ?? os6.homedir();
-  const destinations = [
+  const destinations2 = [
     path17.join(home, ".agents", SKILL_RELATIVE_PATH),
     path17.join(home, ".claude", SKILL_RELATIVE_PATH)
   ];
@@ -26032,7 +26032,7 @@ async function installDelegationSkills(input = {}) {
     ...input.previousManagedDigests ?? []
   ]);
   const results = [];
-  for (const destination of destinations) {
+  for (const destination of destinations2) {
     const current = await readOptional(destination);
     if (current === CODEXHOST_DELEGATION_SKILL) {
       results.push({
@@ -42448,9 +42448,9 @@ var AppServerHost = class {
    */
   #withOpenBackgroundCommands(thread, turns) {
     return turns.map((turn) => {
-      const open13 = thread.projectedTurns.get(turn.id)?.projector.openDetachedWireItems();
-      if (!open13 || open13.size === 0) return turn;
-      const remaining = new Map(open13);
+      const open12 = thread.projectedTurns.get(turn.id)?.projector.openDetachedWireItems();
+      if (!open12 || open12.size === 0) return turn;
+      const remaining = new Map(open12);
       const items = turn.items.map((item) => {
         const id2 = item.id;
         const live = remaining.get(id2);
@@ -45430,62 +45430,24 @@ async function startDelegationControlServer(input) {
 }
 
 // packages/host-runtime/src/codexhost-desktop-rule.ts
-import { createHash as createHash11, randomUUID as randomUUID18 } from "node:crypto";
-import { mkdir as mkdir15, open as open10, readFile as readFile18, rename as rename12, rm as rm14, stat as stat8 } from "node:fs/promises";
+import { createHash as createHash11 } from "node:crypto";
+import { readFile as readFile18, rm as rm14 } from "node:fs/promises";
 import os10 from "node:os";
 import path33 from "node:path";
-var RULE_VERSION = 3;
 var RULE_FILE = "codexhost-desktop.md";
-var PREVIOUS_MANAGED_DIGESTS2 = [
+var MANAGED_DIGESTS = [
   "5add2d2c7ea03ecbb3552b94e47da7a755909e63f30714878a5609a4e272526f",
-  "9d8d2762b5f90e6f10a6571651b3461dec882bd45b40f0f0debc432f4833301b"
+  "9d8d2762b5f90e6f10a6571651b3461dec882bd45b40f0f0debc432f4833301b",
+  "4658e68f312686e2134cd282abd9ce434d2583b0a1d23c7c3eb8bd7ec9b76cf3"
 ];
-var CODEXHOST_DESKTOP_RULE = `<!-- codexhost-desktop-rule: ${RULE_VERSION} -->
-# Codex Desktop / CodexHost
-
-CodexHost installs this file into Grok home rules. Orca and Grok TUI sessions may also load it.
-
-At the first user turn, if you have a shell, run this once and print only \`set\` or \`unset\`:
-
-\`\`\`sh
-if test -n "\${CODEXHOST_THREAD_ID-}"; then echo set; else echo unset; fi
-\`\`\`
-
-- \`set\`: this is a CodexHost external Thread, including Codex Desktop. Apply the session rules even when cwd is a real repository such as \`codex-host\` or the wiki.
-- Working directory is a Playground folder named \`realtime-voice-chat\` or \`realtime-voice-chat-*\`: apply the session rules and ask the user to start a new Thread in the real repo.
-- \`unset\` and not a Playground voice cwd: leave the session rules inactive.
-
-Never print \`CODEXHOST_THREAD_ID\`, \`CODEXHOST_RUNTIME_TOKEN\`, \`CODEXHOST_RUNTIME_ENDPOINT\`, or other runtime descriptors. Do not invent other host signals.
-
-## Session rules
-
-1. **Model.** The Desktop composer Model is this Harness's Model. Pick that Harness's real Model before starting voice. For Grok, that is grok-4.6 or grok-4.7. \`flash-max\` is a Gemini Flash Model.
-
-2. **Working directory.** Start the chat in the real repository (\`codex-host\` or the wiki). A Playground \`realtime-voice-chat*\` folder is a scratch cwd. Ask the user to start a new Thread in the real repo.
-
-3. **Voice vs tools.** Desktop voice is gpt-live speech plus delegated Harness tasks on this same Thread. Do wiki, MCP, and file-heavy work as text in this Thread.
-
-4. **Harness-owned tools.** This session's MCP servers and skills belong to this Harness. SkillWiki on Grok is Grok's config, not Claude, Pi, or Codex.
-
-5. **Desktop chrome.** The window is Codex Desktop. Markdown View preview is a Codex file tab (View preview vs View source). \`file://\` browser tabs stay raw.
-
-6. **Voice routes.** Official Codex live voice (New API/CPA) is a separate route from Host-owned external \`thread/realtime/*\`. This external Thread uses the Host-owned route.
-
-Keep Grok Build tools, MCP, and rules inside the native session. An \`AGENT_TOOLS_AND_RULES.md\` dump in the cwd is unnecessary.
-`;
-var CURRENT_DIGEST2 = createHash11("sha256").update(CODEXHOST_DESKTOP_RULE).digest("hex");
 function digest2(value2) {
   return createHash11("sha256").update(value2).digest("hex");
 }
-function managedVersion2(value2) {
-  const match = /codexhost-desktop-rule:\s*(\d+)/u.exec(value2);
-  return match ? Number(match[1]) : null;
-}
-function grokDestination(home) {
-  return path33.join(home, ".grok", "rules", RULE_FILE);
-}
-function claudeDestination(home) {
-  return path33.join(home, ".claude", "rules", RULE_FILE);
+function destinations(home) {
+  return [
+    path33.join(home, ".grok", "rules", RULE_FILE),
+    path33.join(home, ".claude", "rules", RULE_FILE)
+  ];
 }
 async function readOptional2(filePath) {
   try {
@@ -45495,81 +45457,23 @@ async function readOptional2(filePath) {
     throw error51;
   }
 }
-async function atomicWrite2(filePath, content) {
-  await mkdir15(path33.dirname(filePath), { recursive: true, mode: 448 });
-  const temporaryPath = path33.join(path33.dirname(filePath), `.${RULE_FILE}.${randomUUID18()}.tmp`);
-  const handle = await open10(temporaryPath, "wx", 384);
-  try {
-    await handle.writeFile(content, "utf8");
-    await handle.sync();
-  } finally {
-    await handle.close();
-  }
-  try {
-    await rename12(temporaryPath, filePath);
-  } finally {
-    await rm14(temporaryPath, { force: true });
-  }
-}
-async function installCodexhostDesktopRules(input = {}) {
+async function retireCodexhostDesktopRules(input = {}) {
   const home = input.homeDirectory ?? os10.homedir();
-  const knownDigests = /* @__PURE__ */ new Set([
-    CURRENT_DIGEST2,
-    ...PREVIOUS_MANAGED_DIGESTS2,
-    ...input.previousManagedDigests ?? []
-  ]);
+  const knownDigests = /* @__PURE__ */ new Set([...MANAGED_DIGESTS, ...input.previousManagedDigests ?? []]);
   const results = [];
-  const destination = grokDestination(home);
-  const current = await readOptional2(destination);
-  if (current === CODEXHOST_DESKTOP_RULE) {
-    results.push({
-      path: destination,
-      status: "current",
-      version: RULE_VERSION,
-      digest: CURRENT_DIGEST2
-    });
-  } else if (current !== null) {
+  for (const destination of destinations(home)) {
+    const current = await readOptional2(destination);
+    if (current === null) {
+      results.push({ path: destination, status: "absent", digest: null });
+      continue;
+    }
     const currentDigest = digest2(current);
-    const version2 = managedVersion2(current);
     if (!knownDigests.has(currentDigest)) {
-      results.push({ path: destination, status: "conflict", version: version2, digest: currentDigest });
-    } else {
-      await atomicWrite2(destination, CODEXHOST_DESKTOP_RULE);
-      results.push({
-        path: destination,
-        status: "updated",
-        version: RULE_VERSION,
-        digest: CURRENT_DIGEST2
-      });
-    }
-  } else {
-    await atomicWrite2(destination, CODEXHOST_DESKTOP_RULE);
-    results.push({
-      path: destination,
-      status: "installed",
-      version: RULE_VERSION,
-      digest: CURRENT_DIGEST2
-    });
-  }
-  const claude = claudeDestination(home);
-  const claudeCurrent = await readOptional2(claude);
-  if (claudeCurrent !== null) {
-    const claudeDigest = digest2(claudeCurrent);
-    const version2 = managedVersion2(claudeCurrent);
-    if (knownDigests.has(claudeDigest) || claudeCurrent === CODEXHOST_DESKTOP_RULE) {
-      await rm14(claude, { force: true });
-      results.push({ path: claude, status: "removed", version: version2, digest: claudeDigest });
-    } else {
-      results.push({ path: claude, status: "conflict", version: version2, digest: claudeDigest });
-    }
-  }
-  for (const result of results) {
-    if (result.status === "conflict" || result.status === "removed") continue;
-    const source = await readFile18(result.path, "utf8");
-    const metadata = await stat8(result.path);
-    if (!metadata.isFile() || source !== CODEXHOST_DESKTOP_RULE) {
-      throw new Error(`Codex Desktop rule verification failed: ${result.path}`);
+      results.push({ path: destination, status: "conflict", digest: currentDigest });
+      continue;
     }
+    await rm14(destination, { force: true });
+    results.push({ path: destination, status: "removed", digest: currentDigest });
   }
   return results;
 }
@@ -45621,11 +45525,11 @@ async function readRemoteDelegationThread(environment, input) {
 }
 
 // packages/host-runtime/src/shared-thread-owner.ts
-import { randomUUID as randomUUID20 } from "node:crypto";
+import { randomUUID as randomUUID19 } from "node:crypto";
 import { PassThrough as PassThrough3 } from "node:stream";
 
 // packages/host-runtime/src/shared-thread-peer.ts
-import { randomUUID as randomUUID19 } from "node:crypto";
+import { randomUUID as randomUUID18 } from "node:crypto";
 function object7(value2) {
   return value2 !== null && typeof value2 === "object" && !Array.isArray(value2);
 }
@@ -45639,7 +45543,7 @@ var StreamThreadPeer = class {
   input;
   output;
   stop;
-  #prefix = `shared:${randomUUID19()}:`;
+  #prefix = `shared:${randomUUID18()}:`;
   #pending = /* @__PURE__ */ new Map();
   #listeners = /* @__PURE__ */ new Set();
   #ended = Promise.withResolvers();
@@ -45717,7 +45621,7 @@ var SharedThreadOwner = class {
   input = new PassThrough3();
   output = new PassThrough3();
   #peer = new StreamThreadPeer(this.output, this.input, () => this.input.end());
-  #prefix = `shared-interaction:${randomUUID20()}:`;
+  #prefix = `shared-interaction:${randomUUID19()}:`;
   #interactions = /* @__PURE__ */ new Map();
   #listeners = /* @__PURE__ */ new Set();
   #receipts = /* @__PURE__ */ new Map();
@@ -46027,8 +45931,8 @@ var SharedThreadBridge = class {
 };
 
 // packages/host-runtime/src/remote-control-app-server.ts
-import { randomUUID as randomUUID21 } from "node:crypto";
-import { mkdir as mkdir16, open as open11, rename as rename13, rm as rm15 } from "node:fs/promises";
+import { randomUUID as randomUUID20 } from "node:crypto";
+import { mkdir as mkdir15, open as open10, rename as rename12, rm as rm15 } from "node:fs/promises";
 import path35 from "node:path";
 var REMOTE_CONTROL_BRIDGE_PIPE_ENV = "CODEXHOST_REMOTE_CONTROL_BRIDGE_PIPE";
 var REMOTE_CONTROL_BRIDGE_NODE_ENV = "CODEXHOST_REMOTE_CONTROL_BRIDGE_NODE_PATH";
@@ -46048,7 +45952,7 @@ function nodeCompatibleWindowsPath(value2) {
   if (value2.startsWith("\\\\?\\")) return value2.slice(4);
   return value2;
 }
-function remoteControlBridgePipePath(processId = process.pid, instanceId = randomUUID21()) {
+function remoteControlBridgePipePath(processId = process.pid, instanceId = randomUUID20()) {
   const safeInstance = instanceId.replaceAll(/[^a-zA-Z0-9-]/gu, "");
   if (!safeInstance) throw new Error("Remote Control bridge instance ID is invalid");
   return `\\\\.\\pipe\\codexhost-remote-control-${processId}-${safeInstance}`;
@@ -46060,12 +45964,12 @@ function remoteControlBridgeDescriptorPath(environment) {
 }
 async function publishRemoteControlAppServerDescriptor(plan) {
   const directory = path35.dirname(plan.descriptorPath);
-  await mkdir16(directory, { recursive: true, mode: 448 });
+  await mkdir15(directory, { recursive: true, mode: 448 });
   const temporaryPath = path35.join(
     directory,
-    `.${REMOTE_CONTROL_BRIDGE_DESCRIPTOR_FILE}.${plan.descriptor.ownerPid}.${randomUUID21()}.tmp`
+    `.${REMOTE_CONTROL_BRIDGE_DESCRIPTOR_FILE}.${plan.descriptor.ownerPid}.${randomUUID20()}.tmp`
   );
-  const handle = await open11(temporaryPath, "wx", 384);
+  const handle = await open10(temporaryPath, "wx", 384);
   try {
     await handle.writeFile(`${JSON.stringify(plan.descriptor)}
 `, "utf8");
@@ -46074,7 +45978,7 @@ async function publishRemoteControlAppServerDescriptor(plan) {
     await handle.close();
   }
   try {
-    await rename13(temporaryPath, plan.descriptorPath);
+    await rename12(temporaryPath, plan.descriptorPath);
   } finally {
     await rm15(temporaryPath, { force: true });
   }
@@ -46188,7 +46092,7 @@ function watchRemoteListenerSupervisor(options2) {
 
 // packages/host-runtime/src/console-control-server.ts
 import { randomBytes as randomBytes3, timingSafeEqual } from "node:crypto";
-import { mkdir as mkdir17, rename as rename14, rm as rm16, writeFile as writeFile9 } from "node:fs/promises";
+import { mkdir as mkdir16, rename as rename13, rm as rm16, writeFile as writeFile9 } from "node:fs/promises";
 import { createServer as createServer4 } from "node:http";
 import os11 from "node:os";
 import path36 from "node:path";
@@ -46226,12 +46130,12 @@ function reply(response, status2, value2) {
   response.end(body);
 }
 async function writePrivateJson2(filePath, value2) {
-  await mkdir17(path36.dirname(filePath), { recursive: true, mode: 448 });
+  await mkdir16(path36.dirname(filePath), { recursive: true, mode: 448 });
   const temporary = `${filePath}.${randomBytes3(6).toString("hex")}.tmp`;
   try {
     await writeFile9(temporary, `${JSON.stringify(value2)}
 `, { mode: 384, flag: "wx" });
-    await rename14(temporary, filePath);
+    await rename13(temporary, filePath);
   } finally {
     await rm16(temporary, { force: true });
   }
@@ -46585,8 +46489,8 @@ function createHostUpdateCoordinator(options2) {
 }
 
 // packages/host-runtime/src/usage-statistics.ts
-import { randomUUID as randomUUID22 } from "node:crypto";
-import { mkdir as mkdir18, readFile as readFile19, readdir as readdir6, rename as rename15, rm as rm17, writeFile as writeFile10 } from "node:fs/promises";
+import { randomUUID as randomUUID21 } from "node:crypto";
+import { mkdir as mkdir17, readFile as readFile19, readdir as readdir6, rename as rename14, rm as rm17, writeFile as writeFile10 } from "node:fs/promises";
 import path38 from "node:path";
 import { setImmediate as yieldToEventLoop } from "node:timers/promises";
 
@@ -47028,16 +46932,16 @@ var UsageStatistics = class {
   async #persist(harness2, cache) {
     if (!cache.dirty || this.#now() - cache.persistedAtMs < PERSIST_INTERVAL_MS) return;
     const file2 = this.#file(harness2);
-    const temporary = `${file2}.${randomUUID22()}.tmp`;
+    const temporary = `${file2}.${randomUUID21()}.tmp`;
     try {
-      await mkdir18(this.#directory, { recursive: true });
+      await mkdir17(this.#directory, { recursive: true });
       const sources = [...cache.sources].map(([id2, source]) => [
         id2,
         source.fingerprint,
         source.entries.map(compact)
       ]);
       await writeFile10(temporary, JSON.stringify({ version: CACHE_VERSION, sources }));
-      await rename15(temporary, file2);
+      await rename14(temporary, file2);
       cache.dirty = false;
       cache.persistedAtMs = this.#now();
     } catch (error51) {
@@ -47334,7 +47238,7 @@ async function prepareDelegationRuntime(input) {
     [DELEGATION_RUNTIME_TOKEN_ENV]: token
   };
   await installManagedHomeFiles(installDelegationSkills, "delegation Skill");
-  await installManagedHomeFiles(installCodexhostDesktopRules, "Desktop rule");
+  await installManagedHomeFiles(retireCodexhostDesktopRules, "Desktop rule retirement");
   try {
     return await input.createHost(environment, (value2) => registry2.register(value2), registry2);
   } finally {
@@ -47649,19 +47553,19 @@ async function runHostRuntime(input) {
 }
 
 // packages/host-runtime/src/remote-host-install.ts
-import { createHash as createHash12, randomUUID as randomUUID23 } from "node:crypto";
+import { createHash as createHash12, randomUUID as randomUUID22 } from "node:crypto";
 import { constants as fsConstants } from "node:fs";
 import {
   access as access3,
   chmod as chmod5,
   copyFile as copyFile4,
   lstat as lstat9,
-  mkdir as mkdir19,
+  mkdir as mkdir18,
   readFile as readFile20,
-  rename as rename16,
+  rename as rename15,
   rm as rm18,
   rmdir,
-  stat as stat9,
+  stat as stat8,
   writeFile as writeFile11
 } from "node:fs/promises";
 import path40 from "node:path";
@@ -47714,7 +47618,7 @@ async function fileSha256(filePath) {
 async function executable(filePath, label) {
   const absolute = path40.resolve(filePath);
   try {
-    if (!(await stat9(absolute)).isFile()) throw new Error("not a regular file");
+    if (!(await stat8(absolute)).isFile()) throw new Error("not a regular file");
     await access3(absolute, fsConstants.X_OK);
   } catch {
     throw new Error(`${label} is not an executable file: ${absolute}`);
@@ -47724,7 +47628,7 @@ async function executable(filePath, label) {
 async function existingFile(filePath, label) {
   const absolute = path40.resolve(filePath);
   try {
-    const metadata = await stat9(absolute);
+    const metadata = await stat8(absolute);
     if (!metadata.isFile()) throw new Error("not a regular file");
   } catch {
     throw new Error(`${label} is not a regular file: ${absolute}`);
@@ -47745,10 +47649,10 @@ async function discoverExecutable(name, environment) {
   return null;
 }
 async function writeAtomic(filePath, contents, mode) {
-  await mkdir19(path40.dirname(filePath), { recursive: true, mode: 448 });
+  await mkdir18(path40.dirname(filePath), { recursive: true, mode: 448 });
   const temporary = path40.join(
     path40.dirname(filePath),
-    `.${path40.basename(filePath)}.${process.pid}.${randomUUID23()}.tmp`
+    `.${path40.basename(filePath)}.${process.pid}.${randomUUID22()}.tmp`
   );
   try {
     if (typeof contents === "string") {
@@ -47758,31 +47662,31 @@ async function writeAtomic(filePath, contents, mode) {
     }
     await chmod5(temporary, mode);
     try {
-      await rename16(temporary, filePath);
+      await rename15(temporary, filePath);
     } catch (error51) {
       if (process.platform !== "win32") throw error51;
       await rm18(filePath, { force: true });
-      await rename16(temporary, filePath);
+      await rename15(temporary, filePath);
     }
   } finally {
     await rm18(temporary, { force: true });
   }
 }
 async function writeAtomicExecutable(filePath, sourcePath) {
-  await mkdir19(path40.dirname(filePath), { recursive: true, mode: 448 });
+  await mkdir18(path40.dirname(filePath), { recursive: true, mode: 448 });
   const temporary = path40.join(
     path40.dirname(filePath),
-    `.${path40.basename(filePath)}.${process.pid}.${randomUUID23()}.tmp`
+    `.${path40.basename(filePath)}.${process.pid}.${randomUUID22()}.tmp`
   );
   try {
     await copyFile4(sourcePath, temporary);
     await chmod5(temporary, 448);
     try {
-      await rename16(temporary, filePath);
+      await rename15(temporary, filePath);
     } catch (error51) {
       if (process.platform !== "win32") throw error51;
       await rm18(filePath, { force: true });
-      await rename16(temporary, filePath);
+      await rename15(temporary, filePath);
     }
   } finally {
     await rm18(temporary, { force: true });
@@ -47906,7 +47810,7 @@ async function readManifest(filePath) {
 async function backupProfile(profilePath, contents, action) {
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replaceAll(/[-:.TZ]/gu, "");
   const backupPath = `${profilePath}.codexhost-${action}-${timestamp}.bak`;
-  const metadata = await stat9(profilePath).catch(() => null);
+  const metadata = await stat8(profilePath).catch(() => null);
   await writeAtomic(backupPath, contents, metadata?.mode ?? 384);
   return backupPath;
 }
@@ -47920,7 +47824,7 @@ async function installRemoteHost(options2) {
   const previousManifest = await readManifest(paths.manifestPath);
   const previousManifestFile = previousManifest ? {
     contents: await readFile20(paths.manifestPath),
-    mode: (await stat9(paths.manifestPath)).mode & 511
+    mode: (await stat8(paths.manifestPath)).mode & 511
   } : null;
   const existingEntrypoint = await lstat9(paths.wrapperPath).catch(
     (error51) => {
@@ -47976,14 +47880,14 @@ async function installRemoteHost(options2) {
   const existingProfile = existingProfileSource ?? "";
   const nextProfile = installManagedProfileBlock(existingProfile, manifest);
   const profileChanged = nextProfile !== existingProfile;
-  const profileMetadata = await stat9(profilePath).catch(() => null);
+  const profileMetadata = await stat8(profilePath).catch(() => null);
   try {
     if (profileChanged) {
       const profileBackupPath = await backupProfile(profilePath, existingProfile, "install");
       manifest = { ...manifest, profileBackupPath };
       await writeAtomic(profilePath, nextProfile, profileMetadata?.mode ?? 384);
     }
-    await mkdir19(paths.dataDirectory, { recursive: true, mode: 448 });
+    await mkdir18(paths.dataDirectory, { recursive: true, mode: 448 });
     await chmod5(paths.dataDirectory, 448);
     await writeAtomicExecutable(paths.wrapperPath, manifest.shimPath);
     manifest = { ...manifest, entrypointSha256: await fileSha256(paths.wrapperPath) };
@@ -48067,7 +47971,7 @@ async function inspectRemoteHostInstallation(options2) {
   if (!profileMatches && profileIssue === null)
     profileIssue = "shell profile does not configure the managed native entrypoint";
   if (profileIssue !== null) issues.push(profileIssue);
-  const dataDirectory = await stat9(manifest.dataDirectory).catch(() => null);
+  const dataDirectory = await stat8(manifest.dataDirectory).catch(() => null);
   if (!dataDirectory?.isDirectory()) issues.push("remote Host data directory is unavailable");
   for (const [label, filePath, requiresExecutable] of [
     ["stock Codex", manifest.stockCodexPath, true],
@@ -48077,7 +47981,7 @@ async function inspectRemoteHostInstallation(options2) {
   ]) {
     try {
       if (requiresExecutable) await executable(filePath, label);
-      else if (!(await stat9(filePath)).isFile()) throw new Error("not a regular file");
+      else if (!(await stat8(filePath)).isFile()) throw new Error("not a regular file");
     } catch {
       issues.push(`${label} is unavailable`);
     }
@@ -48106,7 +48010,7 @@ async function uninstallRemoteHost(options2) {
   const nextProfile = removeManagedProfileBlock(profile);
   if (nextProfile !== profile) {
     await backupProfile(manifest.profilePath, profile, "uninstall");
-    const metadata = await stat9(manifest.profilePath).catch(() => null);
+    const metadata = await stat8(manifest.profilePath).catch(() => null);
     await writeAtomic(manifest.profilePath, nextProfile, metadata?.mode ?? 384);
   }
   await rm18(manifest.wrapperPath, { force: true });
@@ -48121,7 +48025,7 @@ async function uninstallRemoteHost(options2) {
 
 // packages/host-runtime/src/remote-host-lifecycle.ts
 import { spawn as spawn8 } from "node:child_process";
-import { stat as stat10 } from "node:fs/promises";
+import { stat as stat9 } from "node:fs/promises";
 import net3 from "node:net";
 import path41 from "node:path";
 import { Duplex } from "node:stream";
@@ -48147,7 +48051,7 @@ function socketPathFor(environment) {
   return path41.join(codexHome, "app-server-control", "app-server-control.sock");
 }
 async function defaultSocketExists(socketPath) {
-  const metadata = await stat10(socketPath).catch((error51) => {
+  const metadata = await stat9(socketPath).catch((error51) => {
     if (error51.code === "ENOENT") return null;
     throw error51;
   });
@@ -48854,8 +48758,8 @@ var harnessOutputSchema = external_exports.custom((value2) => {
 });
 
 // packages/harness-broker/dist/server.js
-import { randomBytes as randomBytes5, randomUUID as randomUUID24 } from "node:crypto";
-import { chmod as chmod6, lstat as lstat10, mkdir as mkdir20, open as open12, readFile as readFile21, rename as rename17, rm as rm19 } from "node:fs/promises";
+import { randomBytes as randomBytes5, randomUUID as randomUUID23 } from "node:crypto";
+import { chmod as chmod6, lstat as lstat10, mkdir as mkdir19, open as open11, readFile as readFile21, rename as rename16, rm as rm19 } from "node:fs/promises";
 import net4, {} from "node:net";
 import path43 from "node:path";
 function harnessError(message2, retryable = true) {
@@ -48868,7 +48772,7 @@ function nativeWriterKey(nativeSessionId) {
   return nativeSessionId;
 }
 async function privateDirectory(directory) {
-  await mkdir20(directory, { recursive: true, mode: 448 });
+  await mkdir19(directory, { recursive: true, mode: 448 });
   if (process.platform === "win32")
     return;
   const metadata = await lstat10(directory);
@@ -48913,8 +48817,8 @@ async function assertNoLiveDescriptor(descriptorPath) {
   }
 }
 async function publishDescriptor(descriptorPath, descriptor) {
-  const temporary = `${descriptorPath}.${process.pid}.${randomUUID24()}.tmp`;
-  const handle = await open12(temporary, "wx", 384);
+  const temporary = `${descriptorPath}.${process.pid}.${randomUUID23()}.tmp`;
+  const handle = await open11(temporary, "wx", 384);
   try {
     await handle.writeFile(`${JSON.stringify(descriptor)}
 `, "utf8");
@@ -48922,7 +48826,7 @@ async function publishDescriptor(descriptorPath, descriptor) {
   } finally {
     await handle.close();
   }
-  await rename17(temporary, descriptorPath);
+  await rename16(temporary, descriptorPath);
   if (process.platform !== "win32")
     await chmod6(descriptorPath, 384);
 }
@@ -48990,7 +48894,7 @@ async function startHarnessBrokerServer(input) {
   await assertNoLiveDescriptor(input.descriptorPath);
   if (process.platform !== "win32")
     await prepareUnixSocketPath(input.socketPath);
-  const generation = input.generation ?? randomUUID24();
+  const generation = input.generation ?? randomUUID23();
   const token = input.token ?? randomBytes5(32).toString("hex");
   const descriptor = {
     schemaVersion: 1,
@@ -49031,7 +48935,7 @@ async function startHarnessBrokerServer(input) {
   };
   const server = net4.createServer((socket) => {
     const state = {
-      id: randomUUID24(),
+      id: randomUUID23(),
       socket,
       authenticated: false,
       inputSequence: 0,
@@ -49269,7 +49173,7 @@ async function startHarnessBrokerServer(input) {
             }
           };
         }
-        const openReservation = randomUUID24();
+        const openReservation = randomUUID23();
         if (sourceKey)
           nativeWriters.set(sourceKey, openReservation);
         const provisionalReservation = openInput.kind === "create" ? openReservation : void 0;
@@ -49570,7 +49474,7 @@ async function startHarnessBrokerServer(input) {
           }
           state.authenticated = true;
           state.inputSequence = 1;
-          await send({ kind: "response", id: randomUUID24(), ok: true, value: { ready: true } });
+          await send({ kind: "response", id: randomUUID23(), ok: true, value: { ready: true } });
           return;
         }
         const parsed2 = harnessBrokerRequestSchema.safeParse(raw);
@@ -49826,7 +49730,7 @@ function installRuntimeLog(input) {
   let descriptor;
   let size = 0;
   let atLineStart = true;
-  const open13 = () => {
+  const open12 = () => {
     descriptor = openSync(filePath, "a", 384);
     chmodSync(filePath, 384);
     size = fstatSync(descriptor).size;
@@ -49842,7 +49746,7 @@ function installRuntimeLog(input) {
   try {
     mkdirSync(logDirectory, { recursive: true, mode: 448 });
     chmodSync(logDirectory, 448);
-    open13();
+    open12();
     try {
       chmodSync(`${filePath}.1`, 384);
     } catch (error51) {
@@ -49862,12 +49766,12 @@ function installRuntimeLog(input) {
         while (start < bytes.length && (bytes.readUInt8(start) & 192) === 128) start += 1;
         bytes = bytes.subarray(start);
       }
-      if (descriptor === void 0) open13();
+      if (descriptor === void 0) open12();
       if (size > 0 && size + bytes.length > maxBytes) {
         close();
         rmSync(`${filePath}.1`, { force: true });
         renameSync(filePath, `${filePath}.1`);
-        open13();
+        open12();
         prune();
       }
       if (descriptor === void 0) return;

package/app/plugins/grok/plugin.mjs

@@ -23281,6 +23281,36 @@ function grokPermissionModeSessionMeta(permissionMode) {
   };
 }
 
+// dist/grok-codexhost-session-rules.js
+var GROK_CODEXHOST_SESSION_RULES = `# Codex Desktop / CodexHost
+
+CodexHost started this Grok ACP session as an external Thread inside Codex Desktop.
+
+Never print \`CODEXHOST_THREAD_ID\`, \`CODEXHOST_RUNTIME_TOKEN\`, \`CODEXHOST_RUNTIME_ENDPOINT\`, or other runtime descriptors.
+
+## Session rules
+
+1. **Model.** The Desktop composer Model is this Harness's Model. Pick that Harness's real Model before starting voice. For Grok, that is grok-4.6 or grok-4.7. \`flash-max\` is a Gemini Flash Model.
+
+2. **Working directory.** Start the chat in the real repository (\`codex-host\` or the wiki). A Playground \`realtime-voice-chat*\` folder is a scratch cwd. Ask the user to start a new Thread in the real repo.
+
+3. **Voice vs tools.** Desktop voice is gpt-live speech plus delegated Harness tasks on this same Thread. Do wiki, MCP, and file-heavy work as text in this Thread.
+
+4. **Harness-owned tools.** This session's MCP servers and skills belong to this Harness. SkillWiki on Grok is Grok's config, not Claude, Pi, or Codex.
+
+5. **Desktop chrome.** The window is Codex Desktop. Markdown View preview is a Codex file tab (View preview vs View source). \`file://\` browser tabs stay raw.
+
+6. **Voice routes.** Official Codex live voice (New API/CPA) is a separate route from Host-owned external \`thread/realtime/*\`. This external Thread uses the Host-owned route.
+
+Keep Grok Build tools, MCP, and rules inside the native session. An \`AGENT_TOOLS_AND_RULES.md\` dump in the cwd is unnecessary.
+`;
+function grokCodexhostSessionMeta(permissionMode) {
+  return {
+    ...permissionMode ? grokPermissionModeSessionMeta(permissionMode) : {},
+    rules: GROK_CODEXHOST_SESSION_RULES
+  };
+}
+
 // dist/acp-transport.js
 var GrokTransportError = class extends Error {
   kind;
@@ -23640,7 +23670,7 @@ var GrokAcpTransport = class {
         const created = await withTimeout(connection.newSession({
           cwd: this.#options.cwd,
           mcpServers: [],
-          _meta: grokPermissionModeSessionMeta(permissionMode)
+          _meta: grokCodexhostSessionMeta(permissionMode)
         }), this.#options.commandTimeoutMs, "Grok Session creation");
         session = created;
         sessionId = created.sessionId;
@@ -23657,7 +23687,8 @@ var GrokAcpTransport = class {
           session = await withTimeout(connection.loadSession({
             cwd: this.#options.cwd,
             mcpServers: [],
-            sessionId: forked.newSessionId
+            sessionId: forked.newSessionId,
+            _meta: grokCodexhostSessionMeta()
           }), this.#options.commandTimeoutMs, "Grok Session load");
         } catch (error53) {
           throw new GrokTransportError("unavailable", `Grok Fork succeeded as ${forked.newSessionId} but session/load failed`, { cause: error53 });
@@ -23669,7 +23700,7 @@ var GrokAcpTransport = class {
           cwd: this.#options.cwd,
           mcpServers: [],
           sessionId: input.sessionId,
-          ...permissionMode ? { _meta: grokPermissionModeSessionMeta(permissionMode) } : {}
+          _meta: grokCodexhostSessionMeta(permissionMode)
         }), this.#options.commandTimeoutMs, "Grok Session load");
         sessionId = input.sessionId;
         if (input.kind === "rewind") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@karlorz/codexhost-cli-darwin-x64",
-  "version": "0.13.3-0",
+  "version": "0.13.3-1",
   "description": "Run Pi and Claude Code as first-class external harnesses inside Codex Desktop.",
   "type": "module",
   "files": [