@nowcrew/daemon 0.6.88-beta.20 → 0.6.88-beta.21

package/README.md

@@ -362,9 +362,11 @@ changing the task cwd. Claude receives
 so a machine policy that disables project settings also disables this source even when the projection is
 healthy.
 
-Existing user-level discovery is unchanged. Claude may still load `~/.claude/skills`; Codex may still
-load `$CODEX_HOME/skills`. The DeepSeek Codex variant uses its Agent-private `.codex-deepseek` home.
-Project bindings do not hide or rewrite any of those sources.
+Ordinary Codex always uses the shared user Home: the inherited `CODEX_HOME`, or `~/.codex` when
+unset. There is no Computer-level Home mode or private-Home migration command. Existing user-level
+discovery is unchanged: Claude may still load `~/.claude/skills`, and Codex may load `$CODEX_HOME/skills`
+and `~/.agents/skills`. The DeepSeek Codex variant keeps its Agent-private `.codex-deepseek` Home for
+provider credentials. Project bindings do not hide or rewrite any of those sources.
 
 Binding changes reconcile immediately when the Computer is online. On reconnect the server sends the
 complete binding set for every Agent assigned to that Computer, including empty sets that clear stale

package/dist/computer-profile.js

@@ -25,7 +25,6 @@ const ProfileFields = z.object({
     runtimePath: z.string().min(1).max(32768).refine((value) => !value.includes("\0") && !value.includes("\n") && !value.includes("\r"), "runtimePath must be a single line").optional(),
     releaseTag: z.enum(["latest", "beta"]).optional(),
     registryUrl: z.string().url().optional(),
-    codexHomeMode: z.enum(["shared", "private"]).optional(),
 }).strict();
 function validateProfileRegistry(value, context) {
     const fields = value;
@@ -60,7 +59,13 @@ const StoredProtectedProfileSchema = ProfileFields.omit({ machineToken: true }).
         ciphertext: z.string().min(1).max(16384),
     }).strict(),
 }).strict().superRefine(validateProfileRegistry);
-const StoredProfileSchema = z.union([StoredPlainProfileSchema, StoredProtectedProfileSchema]);
+// 旧版本可能已保存 shared 字段；读取时丢弃退休设置，其余字段仍严格校验。
+const StoredProfileSchema = z.preprocess((raw) => {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+        return raw;
+    const { codexHomeMode: _retiredMode, ...fields } = raw;
+    return fields;
+}, z.union([StoredPlainProfileSchema, StoredProtectedProfileSchema]));
 export const PROFILE_AGENTS_ROOT_CONFLICT_MESSAGE = "Profile '{{profile}}' conflicts with profile '{{conflict}}': both resolve to agents root '{{agentsRoot}}'. Save it with a unique root, for example: {{command}}";
 export class ProfileAgentsRootConflictError extends Error {
     profile;
@@ -257,7 +262,6 @@ export async function saveProfile(input, home = daemonHome(), options = {}) {
                 ...(profile.runtimePath ? { runtimePath: profile.runtimePath } : {}),
                 ...(profile.releaseTag === undefined ? {} : { releaseTag: profile.releaseTag }),
                 ...(profile.registryUrl === undefined ? {} : { registryUrl: profile.registryUrl }),
-                ...(profile.codexHomeMode === undefined ? {} : { codexHomeMode: profile.codexHomeMode }),
                 machineTokenProtected: { scheme: "dpapi-current-user", ciphertext },
             });
             await atomicPrivateWrite(profilePath(profile.name, home), `${JSON.stringify(stored, null, 2)}\n`, configured.harden);
@@ -404,5 +408,6 @@ export function applyProfileToEnv(profile, env) {
         env.CREW_NPM_REGISTRY = profile.registryUrl;
     else
         delete env.CREW_NPM_REGISTRY;
-    env.CREW_CODEX_HOME_MODE = profile.codexHomeMode ?? "shared";
+    // 不再向运行时传播退休的模式开关；CODEX_HOME 沿用用户环境。
+    delete env.CREW_CODEX_HOME_MODE;
 }

package/dist/config.js

@@ -111,14 +111,6 @@ function localMemoryV2Handles(env, serverUrl) {
     return new Set(handles);
 }
 export const DEFAULT_SERVER_URL = "http://127.0.0.1:3001";
-function codexHomeModeEnv(env) {
-    const value = env.CREW_CODEX_HOME_MODE;
-    if (value === undefined || value === "shared")
-        return "shared";
-    if (value === "private")
-        return "private";
-    throw new ConfigError("CREW_CODEX_HOME_MODE must be shared or private");
-}
 function codexCollaborationToolsEnv(env) {
     const value = (env.CREW_CODEX_COLLABORATION_TOOLS ?? "").trim().toLowerCase();
     if (value === "" || value === "0" || value === "false" || value === "off")
@@ -168,7 +160,6 @@ export function loadConfig(env = process.env) {
             : defaultQaReportRoot,
         cliPath: env.CREW_CLI_PATH ?? defaultCliPath(),
         runtimeBin: env.CREW_RUNTIME ?? "claude",
-        codexHomeMode: codexHomeModeEnv(env),
         codexCollaborationTools: codexCollaborationToolsEnv(env),
         dangerous: env.CREW_RUNTIME_SAFE !== "1", // 默认开启 (headless agent 在自有 workspace 内运行)
         resume: env.CREW_RESUME !== "off" && env.CREW_RESUME !== "0", // 默认开启;一键回退现状用 CREW_RESUME=off

package/dist/execution-runner.js

@@ -878,7 +878,6 @@ export async function runExecution(config, input, dependencies) {
                 ...(config.qaReportRoot === undefined ? {} : { qaReportRoot: config.qaReportRoot }),
                 cliPath: config.cliPath,
                 providerConfig,
-                codexHomeMode: config.codexHomeMode,
                 ...(providerConfig.description ? { description: providerConfig.description } : {}),
                 ...(spec.reporting.allowBoundImDecision ? {
                     systemEnv: {

package/dist/local-executor.js

@@ -7,8 +7,6 @@ import { prepareWorkspace, rotateAgentSession, safeKey, } from "./workspace.js";
 import { CLAUDE_ADDITIONAL_DIRECTORY_INSTRUCTIONS_ENV, isClaudeAdditionalDirectoryInstructionsSupported, probeClaudeVersion, spawnClaude, } from "./runtimes/claude.js";
 import { spawnCodex } from "./runtimes/codex.js";
 import { DEEPSEEK_CODEX_MODEL, DEEPSEEK_CODEX_REASONING_LEVELS, materializeDeepSeekCodexHome, } from "./runtimes/codex-deepseek-config.js";
-import { materializeDefaultCodexHome } from "./runtimes/codex-home.js";
-import { materializePrivateCodexHome } from "./codex-home-launch.js";
 import { spawnKimi, KIMI_EFFORT_LEVELS } from "./runtimes/kimi.js";
 import { applyDeepSeekHarnessMachineEnv, applyProviderEnv, providerFingerprint, } from "./provider-env.js";
 import { augmentedPath } from "./runtime-path.js";
@@ -262,8 +260,6 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         if (key.startsWith("CREW_AGENT_MEMORY_") || ["CREW_CLOUD_PROVIDER", "CREW_OSS_UPLOAD_SCRIPT", "CREW_OSS_REPORT_UPLOAD"].includes(key))
             delete inheritedEnv[key];
     }
-    const sourceCodexHome = inheritedEnv.CODEX_HOME
-        ?? (inheritedEnv.HOME === undefined ? undefined : join(inheritedEnv.HOME, ".codex"));
     let materializedDeepSeekHome;
     try {
         if (isDeepSeekCodex && !providerConfig.providerApiKey) {
@@ -344,7 +340,6 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         const launchSessionId = resumeSessionId ?? (rotated
             ? await rotateAgentSession(workspace.sessionDir)
             : workspace.agentSessionId);
-        await materializePrivateCodexHome({ runtime: runtime.name, homeDir: workspace.homeDir, ...(input.launch.codexHomeMode === undefined ? {} : { mode: input.launch.codexHomeMode }), ...(sourceCodexHome === undefined ? {} : { sourceHome: sourceCodexHome }), ...(launchSessionId === undefined ? {} : { sessionId: launchSessionId }), ...(dependencies.cancellation === undefined ? {} : { cancellation: dependencies.cancellation }), ...(dependencies.materializeDefaultCodexHome === undefined ? {} : { materialize: dependencies.materializeDefaultCodexHome }) });
         let promptContext = {
             workspace: executionWorkspace,
             resuming,
@@ -512,9 +507,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
                 ? { KIMI_MODEL_THINKING_EFFORT: runtime.reasoning }
                 : {}),
         };
-        const providerEnv = applyProviderEnv(baseEnv, runtime.name, input.launch.codexHomeMode === undefined
-            ? providerConfig
-            : { ...providerConfig, codexHomeMode: input.launch.codexHomeMode }, workspace.homeDir, materializedDeepSeekHome);
+        const providerEnv = applyProviderEnv(baseEnv, runtime.name, providerConfig, workspace.homeDir, materializedDeepSeekHome);
         const childEnv = runtime.name === "deepseek-harness"
             ? applyDeepSeekHarnessMachineEnv(providerEnv, inheritedEnv)
             : providerEnv;

package/dist/local-memory/read-cli.js

@@ -8,6 +8,10 @@ import { z } from "zod";
 import { readPendingMemoryBody, searchPendingMemoryPage } from "./pending-query.js";
 const OUTPUT_BYTES = 12 * 1024;
 const FILE_BYTES = 32 * 1024 * 1024;
+const READ_LIMIT_MAX = 4_000;
+const READ_LIMIT_SAFE = 2_000;
+const SEARCH_LIMIT_MAX = 40;
+const SEARCH_LIMIT_SAFE = 10;
 const FileSchema = z.string().min(1).refine((file) => {
     if (isAbsolute(file) || /[\\\u0000-\u001f\u007f]/u.test(file))
         return false;
@@ -26,26 +30,26 @@ const CommandSchema = z.discriminatedUnion("command", [
     z.object({
         command: z.literal("search"), ...Common,
         query: z.string().trim().min(1).max(256),
-        limit: z.coerce.number().int().min(1).max(40).default(10),
+        limit: z.coerce.number().int().min(1).max(Number.MAX_SAFE_INTEGER).default(10),
         afterLine: z.coerce.number().int().min(0).max(Number.MAX_SAFE_INTEGER).default(0),
     }).strict(),
     z.object({
         command: z.literal("read"), ...Common,
         offset: z.coerce.number().int().min(0).max(Number.MAX_SAFE_INTEGER).default(0),
-        limit: z.coerce.number().int().min(1).max(4000).default(2000),
+        limit: z.coerce.number().int().min(1).max(Number.MAX_SAFE_INTEGER).default(2000),
     }).strict(),
     z.object({
         command: z.literal("search-pending"),
         query: z.string().trim().min(1).max(256),
         cursor: z.string().min(1).max(4096).optional(),
-        limit: z.coerce.number().int().min(1).max(40).default(10),
+        limit: z.coerce.number().int().min(1).max(Number.MAX_SAFE_INTEGER).default(10),
     }).strict(),
     z.object({
         command: z.literal("read-pending"),
         id: z.string().min(1).max(250).regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/u),
         ifHash: Common.ifHash,
         offset: z.coerce.number().int().min(0).max(Number.MAX_SAFE_INTEGER).default(0),
-        limit: z.coerce.number().int().min(1).max(4000).default(2000),
+        limit: z.coerce.number().int().min(1).max(Number.MAX_SAFE_INTEGER).default(2000),
     }).strict(),
 ]);
 const USAGE = `只读记忆工具，默认输出 JSON，不修改任何记忆文件。
@@ -53,10 +57,10 @@ crew-memory search --query <关键词> [--file MEMORY.md|notes/文件.md] [--lim
 crew-memory read [--file MEMORY.md|notes/文件.md] [--offset 0] [--limit 2000]
 crew-memory search-pending --query <关键词> [--cursor <游标>] [--limit 10]
 crew-memory read-pending --id <候选ID> [--offset 0] [--limit 2000] [--if-hash <sha256>]
-read/read-pending 的 --limit 必须为 1—4000 的整数，默认 2000；search/search-pending 为 1—40 的整数，默认 10。
+read/read-pending 的有效页长为 1—4000，默认 2000；search/search-pending 的有效页长为 1—40，默认 10。超出上限时工具自动使用安全页长并返回 warning（recovered=true），不把它当作读取失败。
 search 关键词按空白分隔，同一行须全部命中；返回完整文件中的行号和字符偏移。
 读取的 offset/limit 按 Unicode 字符计数；用 nextOffset 继续，eof=true 表示结束。
-读取的 --limit 超出范围时，保留原文件或候选 ID 及 offset，将 --limit 改为 2000 后重试；成功后按 nextOffset 分页，不要增大 limit 来一次读完整文件。
+读取的 --limit 超出范围时，工具会自动降到 2000 并在结果中标记 warning；保留原文件或候选 ID 及 offset，按 nextOffset 分页，不要一次读完整文件。
 后续页可传 --if-hash <前一页的 sha256>，文件变化时停止，避免混读不同版本。
 search/read 读取 MEMORY.md 和 notes 原文，不过滤失效段落，也不扫描 pending。
 search-pending 只查因容量延期的 create 候选；有 nextCursor 就继续，即使本页 matches 为空。
@@ -131,7 +135,15 @@ function originalLowercaseIndex(text, index) {
     }
     return text.length;
 }
-function searchSource(text, sha256, command) {
+function normalizeLimit(requestedLimit, max, safe) {
+    if (requestedLimit <= max)
+        return { limit: requestedLimit };
+    return {
+        limit: safe,
+        warning: { code: "memory_limit_clamped", requestedLimit, appliedLimit: safe, recovered: true },
+    };
+}
+function searchSource(text, sha256, command, warning) {
     const terms = command.query.toLowerCase().split(/\s+/u);
     const matches = [];
     let line = 0;
@@ -172,10 +184,22 @@ function searchSource(text, sha256, command) {
     return {
         file: command.file, sha256, matches, matchCount, hasMore,
         nextAfterLine: hasMore ? matches.at(-1)?.line ?? null : null,
+        ...(warning === undefined ? {} : { warning, requestedLimit: warning.requestedLimit, limit: warning.appliedLimit }),
     };
 }
-function readPage(text, source, command) {
-    const metadata = { ...source, offset: command.offset, nextOffset: Number.MAX_SAFE_INTEGER, eof: false, content: "" };
+function readPage(text, source, command, warning) {
+    const metadata = {
+        ...source,
+        ...(warning === undefined ? {} : {
+            warning,
+            requestedLimit: warning.requestedLimit,
+            limit: warning.appliedLimit,
+        }),
+        offset: command.offset,
+        nextOffset: Number.MAX_SAFE_INTEGER,
+        eof: false,
+        content: "",
+    };
     let remaining = OUTPUT_BYTES - Buffer.byteLength(JSON.stringify(metadata), "utf8");
     let position = 0;
     let offset = 0;
@@ -244,26 +268,36 @@ export async function runMemoryReadCommand(argv, io) {
         if (!io.env.CREW_HOME)
             throw new Error("memory_home_missing");
         if (command.command === "search-pending") {
+            const normalized = normalizeLimit(command.limit, SEARCH_LIMIT_MAX, SEARCH_LIMIT_SAFE);
             const result = await searchPendingMemoryPage({ agentDir: io.env.CREW_HOME, query: command.query,
-                ...(command.cursor === undefined ? {} : { cursor: command.cursor }), limit: command.limit });
-            writeResult(result, io);
+                ...(command.cursor === undefined ? {} : { cursor: command.cursor }), limit: normalized.limit });
+            writeResult({ ...result, ...(normalized.warning === undefined ? {} : {
+                    warning: normalized.warning, requestedLimit: normalized.warning.requestedLimit, limit: normalized.warning.appliedLimit,
+                }) }, io);
             if (result.warnings.length > 0 || (!result.hasMore && !result.complete)) {
                 throw new Error("memory_pending_search_incomplete");
             }
             return 0;
         }
         if (command.command === "read-pending") {
+            const normalized = normalizeLimit(command.limit, READ_LIMIT_MAX, READ_LIMIT_SAFE);
             const { content, ...metadata } = await readPendingMemoryBody({ agentDir: io.env.CREW_HOME,
                 pendingId: command.id, ...(command.ifHash === undefined ? {} : { ifHash: command.ifHash }) });
-            writeResult(readPage(content, metadata, command), io);
+            writeResult(readPage(content, metadata, { ...command, limit: normalized.limit }, normalized.warning), io);
             return 0;
         }
         const source = await readSource(io.env.CREW_HOME, command.file);
         if (command.ifHash !== undefined && command.ifHash !== source.sha256)
             throw new Error("memory_file_changed");
         const result = command.command === "search"
-            ? searchSource(source.text, source.sha256, command)
-            : readPage(source.text, { file: command.file, sha256: source.sha256 }, command);
+            ? (() => {
+                const normalized = normalizeLimit(command.limit, SEARCH_LIMIT_MAX, SEARCH_LIMIT_SAFE);
+                return searchSource(source.text, source.sha256, { ...command, limit: normalized.limit }, normalized.warning);
+            })()
+            : (() => {
+                const normalized = normalizeLimit(command.limit, READ_LIMIT_MAX, READ_LIMIT_SAFE);
+                return readPage(source.text, { file: command.file, sha256: source.sha256 }, { ...command, limit: normalized.limit }, normalized.warning);
+            })();
         writeResult(result, io);
         return 0;
     }

package/dist/machine-info.js

@@ -241,7 +241,6 @@ export async function collectMachineHello(agentsRoot, executionLimits, runtimePl
         runtimes,
         executionRuntimes,
         capabilities,
-        ...(dependencies.codexHomeMode === undefined ? {} : { codexHomeMode: dependencies.codexHomeMode }),
         ...(dependencies.profileName === undefined ? {} : {
             layoutVersion: 1,
             profileName: dependencies.profileName,

package/dist/provider-env.js

@@ -67,8 +67,6 @@ export function applyProviderEnv(base, runtime, cfg, homeDir, deepSeekHomeOverri
         return env;
     }
     if (runtime === "codex") {
-        if (cfg.codexHomeMode === "private")
-            return { ...base, CODEX_HOME: join(homeDir, ".codex") };
         return base;
     }
     if (runtime !== "claude" || cfg.provider !== "custom")

package/dist/runner.js

@@ -91,7 +91,6 @@ export async function runAgent(config, input, onActivity = defaultPrint, onConso
             ...(config.qaReportRoot === undefined ? {} : { qaReportRoot: config.qaReportRoot }),
             cliPath: config.cliPath,
             providerConfig,
-            codexHomeMode: config.codexHomeMode,
             ...(providerConfig.description ? { description: providerConfig.description } : {}),
             systemEnv: {
                 ...(providerConfig.fastMode ? { CREW_FAST_MODE: "1" } : {}),

package/dist/serve.js

@@ -52,7 +52,6 @@ import { parseMemoryPruneTraceId } from "./memory-prune-diagnostics.js";
 import { probeRuntimeHealth } from "./runtime-health.js";
 import { handleRuntimeHealthProbeFrame } from "./runtime-health-handler.js";
 import { buildControlPlaneUrl } from "./control-plane-url.js";
-import { createCodexHomeModeController } from "./codex-home-mode-controller.js";
 import { resolveDaemonLocalStateRootFromEnv } from "./daemon-local-home.js";
 import { bindStorageServerIdentity, createStorageIdentityAdmission, } from "./storage-serve-adapter.js";
 export { buildControlPlaneUrl } from "./control-plane-url.js";
@@ -128,11 +127,6 @@ export function serve(config, opts = {}) {
         },
     });
     const storageIdentityAdmission = createStorageIdentityAdmission(opts.storageRuntime);
-    const codexHomeModeController = createCodexHomeModeController({ ...(opts.profileName === undefined ? {} : { profileName: opts.profileName }), scheduleRestart: opts.update?.scheduleRestart ?? scheduleServiceRestart, getServiceSpec: async () => { const eligibility = await updateEligibility(); return eligibility.eligible ? eligibility.serviceSpec : null; }, isBusy: () => executionRuns.size > 0 || legacyRuns.size > 0, sendStatus: (frame) => { try {
-            if (ws?.readyState === WebSocket.OPEN)
-                ws.send(JSON.stringify(frame));
-        }
-        catch { /* reconnect */ } } });
     const projectionCoordinator = createAgentProjectionCoordinator();
     const { projectRegistry, projectWorkspaceRegistry, projectDependencyProvisioner } = createProjectRegistryWiring(config.agentsRoot, opts.execution?.dependencies);
     const agentAbilityRuntime = createAgentAbilityRuntime(config.agentsRoot, {
@@ -311,9 +305,8 @@ export function serve(config, opts = {}) {
                 ...(opts.profileName === undefined ? {} : { profileName: opts.profileName }),
                 // First hello must not wait for third-party handshakes; optional transports arrive in the refresh.
                 detectExecutable: async (installed) => conservativeExecutionRuntimes(installed),
-                additionalCapabilities: async () => [...(await managedDaemonCapabilities(updateEligibility)), ...(opts.profileName === undefined ? [] : ["codex_home_mode_v1"])],
+                additionalCapabilities: async () => managedDaemonCapabilities(updateEligibility),
                 capabilities: capabilities.machineHello,
-                codexHomeMode: config.codexHomeMode,
             });
             runtimeFacts = helloPromise
                 .then(async (hello) => {
@@ -409,10 +402,6 @@ export function serve(config, opts = {}) {
                 });
                 return;
             }
-            if (rawType === "daemon:codex-home-mode") {
-                void codexHomeModeController.handle(decoded).catch((error) => dslog("daemon.codex_home_mode_failed", "Codex Home 模式切换失败", { level: "ERROR", error_message: error.message }));
-                return;
-            }
             if (rawType.startsWith("execution:")) {
                 const parsedExecution = ServerToDaemonExecutionFrameSchema.safeParse(decoded);
                 if (!parsedExecution.success) {
@@ -1339,7 +1328,6 @@ export function serve(config, opts = {}) {
             const pending = [
                 webSocketClosed,
                 updateController.drain(),
-                codexHomeModeController.drain(),
                 executionFrameQueue,
                 ...executionRuns.values(),
                 ...[...legacyRuns.values()].map((run) => run.done),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nowcrew/daemon",
-  "version": "0.6.88-beta.20",
+  "version": "0.6.88-beta.21",
   "type": "module",
   "description": "crew daemon — 运行在用户机器:拉起/管理 agent 进程,注入 crew CLI,归一化 runtime 事件",
   "license": "Apache-2.0",
@@ -40,7 +40,6 @@
   "scripts": {
     "daemon": "pnpm --filter @nowcrew/cli build && tsx src/main.ts",
     "build": "tsc -p tsconfig.json",
-    "codex-home:migrate": "tsx src/runtimes/codex-home-migration-cli.ts",
     "test": "vitest run",
     "typecheck": "tsc --noEmit"
   }

package/dist/codex-home-launch.js

@@ -1,7 +0,0 @@
-import { awaitWithCancellation } from "./runtime-cancellation.js";
-import { materializeDefaultCodexHome } from "./runtimes/codex-home.js";
-export async function materializePrivateCodexHome(input) {
-    if (input.runtime !== "codex" || input.mode !== "private")
-        return;
-    await awaitWithCancellation((input.materialize ?? materializeDefaultCodexHome)(input.homeDir, input.sourceHome, input.sessionId), input.cancellation);
-}

package/dist/codex-home-mode-controller.js

@@ -1,68 +0,0 @@
-import { z } from "zod";
-import { daemonHome, loadProfile, saveProfile } from "./computer-profile.js";
-const MessageSchema = z.object({
-    type: z.literal("daemon:codex-home-mode"),
-    operationId: z.string().uuid(),
-    mode: z.enum(["shared", "private"]),
-}).strict();
-export function createCodexHomeModeController(input) {
-    let running = null;
-    const handled = new Set();
-    const fail = (operationId, errorCode) => {
-        input.sendStatus({ type: "daemon:codex-home-mode-status", operationId, status: "failed", errorCode });
-    };
-    const execute = async (message) => {
-        if (input.profileName === undefined) {
-            fail(message.operationId, "profile_unavailable");
-            return;
-        }
-        if (input.isBusy()) {
-            fail(message.operationId, "busy");
-            return;
-        }
-        input.sendStatus({ type: "daemon:codex-home-mode-status", operationId: message.operationId, status: "saving" });
-        try {
-            const home = input.profileHome ?? daemonHome();
-            const profile = await loadProfile(input.profileName, home);
-            await saveProfile({ ...profile, codexHomeMode: message.mode }, home);
-        }
-        catch {
-            fail(message.operationId, "save_failed");
-            return;
-        }
-        input.sendStatus({ type: "daemon:codex-home-mode-status", operationId: message.operationId, status: "restarting" });
-        try {
-            const serviceSpec = await input.getServiceSpec();
-            if (serviceSpec === null) {
-                fail(message.operationId, "restart_failed");
-                return;
-            }
-            const handoff = input.scheduleRestart(serviceSpec);
-            void handoff.failed.then(() => fail(message.operationId, "restart_failed"), () => fail(message.operationId, "restart_failed"));
-        }
-        catch {
-            fail(message.operationId, "restart_failed");
-        }
-    };
-    return {
-        handle: async (raw) => {
-            const parsed = MessageSchema.safeParse(raw);
-            if (!parsed.success)
-                return false;
-            if (handled.has(parsed.data.operationId))
-                return true;
-            if (running !== null) {
-                fail(parsed.data.operationId, "busy");
-                handled.add(parsed.data.operationId);
-                return true;
-            }
-            running = execute(parsed.data).finally(() => {
-                handled.add(parsed.data.operationId);
-                running = null;
-            });
-            await running;
-            return true;
-        },
-        drain: async () => { await running; },
-    };
-}

package/dist/runtimes/codex-home-migration-cli.js

@@ -1,26 +0,0 @@
-#!/usr/bin/env node
-import { parseArgs } from "node:util";
-import { migrateCodexHome } from "./codex-home-migration.js";
-const { values } = parseArgs({
-    args: process.argv.slice(2),
-    strict: true,
-    options: {
-        "agent-home": { type: "string" },
-        "source-home": { type: "string" },
-        "backup-root": { type: "string" },
-        yes: { type: "boolean", default: false },
-    },
-});
-function required(value, name) {
-    if (!value?.trim())
-        throw new Error(`Missing --${name}`);
-    return value;
-}
-if (!values.yes)
-    throw new Error("Refusing Codex home migration without --yes");
-const result = await migrateCodexHome({
-    agentHome: required(values["agent-home"], "agent-home"),
-    sourceHome: required(values["source-home"], "source-home"),
-    backupRoot: required(values["backup-root"], "backup-root"),
-});
-process.stdout.write(`${result.status}${result.backupDir ? ` backup=${result.backupDir}` : ""}\n`);

package/dist/runtimes/codex-home-migration.js

@@ -1,112 +0,0 @@
-import { execFile } from "node:child_process";
-import { promisify } from "node:util";
-import { lstat, mkdir, readlink, rename, rm, symlink, unlink, } from "node:fs/promises";
-import { join, resolve } from "node:path";
-import { randomUUID } from "node:crypto";
-import { atomicPrivateWrite } from "../atomic-private-write.js";
-import { defaultCodexHome, materializeDefaultCodexHome } from "./codex-home.js";
-const execFileAsync = promisify(execFile);
-const SQLITE_FILES = ["state_5.sqlite", "state_5.sqlite-wal", "state_5.sqlite-shm"];
-const MARKER_NAME = ".codex-home-migration.json";
-async function exists(path) {
-    try {
-        await lstat(path);
-        return true;
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return false;
-        throw error;
-    }
-}
-async function assertNoOpenSqliteFiles(codexHome) {
-    for (const name of SQLITE_FILES) {
-        const path = join(codexHome, name);
-        if (!(await exists(path)))
-            continue;
-        try {
-            const result = await execFileAsync("lsof", ["-t", "--", path], { encoding: "utf8" });
-            if (result.stdout.trim()) {
-                throw new Error(`Codex SQLite file is still open: ${path}`);
-            }
-        }
-        catch (error) {
-            const code = error.code;
-            if (code === 1)
-                continue;
-            if (code === "ENOENT")
-                throw new Error("lsof is required to verify Codex home quiescence");
-            throw error;
-        }
-    }
-}
-async function symlinkTarget(path) {
-    try {
-        const info = await lstat(path);
-        if (!info.isSymbolicLink())
-            return null;
-        return await readlink(path);
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return null;
-        throw error;
-    }
-}
-export async function migrateCodexHome(input, dependencies = {}) {
-    const agentHome = resolve(input.agentHome);
-    const sourceHome = resolve(input.sourceHome);
-    const backupRoot = resolve(input.backupRoot);
-    const codexHome = defaultCodexHome(agentHome);
-    const sessions = join(codexHome, "sessions");
-    const index = join(codexHome, "session_index.jsonl");
-    const expectedSessions = resolve(sourceHome, "sessions");
-    const expectedIndex = resolve(sourceHome, "session_index.jsonl");
-    const marker = join(codexHome, MARKER_NAME);
-    const sessionLink = await symlinkTarget(sessions);
-    const indexLink = await symlinkTarget(index);
-    if (sessionLink === null && indexLink === null && await exists(marker)) {
-        return { status: "already-migrated" };
-    }
-    if (sessionLink === null || indexLink === null) {
-        throw new Error("Refusing migration: Codex home is not in the complete legacy symlink layout");
-    }
-    if (resolve(codexHome, sessionLink) !== expectedSessions || resolve(codexHome, indexLink) !== expectedIndex) {
-        throw new Error("Refusing migration: legacy symlinks do not point to the configured source home");
-    }
-    await (dependencies.ensureQuiesced ?? assertNoOpenSqliteFiles)(codexHome);
-    const stamp = (dependencies.now ?? (() => new Date()))().toISOString().replaceAll(/[^0-9]/g, "").slice(0, 14);
-    const backupDir = join(backupRoot, `${stamp}-${dependencies.id?.() ?? randomUUID()}`);
-    await mkdir(backupDir, { recursive: true, mode: 0o700 });
-    await symlink(sessionLink, join(backupDir, "sessions"), "dir");
-    await symlink(indexLink, join(backupDir, "session_index.jsonl"), "file");
-    const moved = [];
-    try {
-        for (const name of SQLITE_FILES) {
-            const current = join(codexHome, name);
-            if (await exists(current)) {
-                await rename(current, join(backupDir, name));
-                moved.push(name);
-            }
-        }
-        await materializeDefaultCodexHome(agentHome, sourceHome);
-        await atomicPrivateWrite(marker, JSON.stringify({
-            version: 1,
-            migrated_at: new Date().toISOString(),
-            source_home: sourceHome,
-            backup_dir: backupDir,
-        }) + "\n");
-        return { status: "migrated", backupDir };
-    }
-    catch (error) {
-        for (const name of moved.reverse()) {
-            await rename(join(backupDir, name), join(codexHome, name)).catch(() => undefined);
-        }
-        await rm(sessions, { recursive: true, force: true });
-        await unlink(index).catch(() => undefined);
-        await symlink(sessionLink, sessions, "dir").catch(() => undefined);
-        await symlink(indexLink, index, "file").catch(() => undefined);
-        throw error;
-    }
-}
-export const codexHomeMigrationMarkerName = MARKER_NAME;

package/dist/runtimes/codex-home.js

@@ -1,236 +0,0 @@
-import { chmod, copyFile, lstat, mkdir, open, readdir, readlink, rename, rm, symlink, unlink, link, writeFile, } from "node:fs/promises";
-import { constants } from "node:fs";
-import { dirname, join, relative, resolve, sep } from "node:path";
-const PRIVATE_CODEX_HOME = ".codex";
-export function defaultCodexHome(homeDir) {
-    return resolve(homeDir, PRIVATE_CODEX_HOME);
-}
-async function linkIfMissing(source, target) {
-    try {
-        await lstat(target);
-        return;
-    }
-    catch (error) {
-        if (error.code !== "ENOENT")
-            throw error;
-    }
-    try {
-        await lstat(source);
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return;
-        throw error;
-    }
-    try {
-        await symlink(source, target, "file");
-    }
-    catch (error) {
-        if (error.code !== "EEXIST")
-            throw error;
-    }
-}
-function isBelow(root, candidate) {
-    const child = relative(root, candidate);
-    return child !== "" && child !== ".." && !child.startsWith(`..${sep}`) && !child.startsWith(sep);
-}
-async function isExactSymlink(target, expectedSource) {
-    const linkTarget = await readlink(target);
-    return resolve(dirname(target), linkTarget) === resolve(expectedSource);
-}
-async function ensurePrivateSessions(target, legacySource) {
-    try {
-        const current = await lstat(target);
-        if (current.isSymbolicLink()) {
-            if (legacySource === undefined || !(await isExactSymlink(target, legacySource))) {
-                throw new Error(`Refusing to replace unexpected Codex sessions symlink: ${target}`);
-            }
-            const replacement = `${target}.private-${process.pid}-${Math.random().toString(36).slice(2)}`;
-            const legacyBackup = `${target}.legacy-${process.pid}-${Math.random().toString(36).slice(2)}`;
-            try {
-                await mkdir(replacement, { mode: 0o700 });
-                await rename(target, legacyBackup);
-                try {
-                    await rename(replacement, target);
-                }
-                catch (error) {
-                    await rename(legacyBackup, target).catch(() => undefined);
-                    throw error;
-                }
-            }
-            finally {
-                await rm(replacement, { recursive: true, force: true }).catch(() => undefined);
-                await rm(legacyBackup, { recursive: true, force: true }).catch(() => undefined);
-            }
-        }
-        else if (!current.isDirectory()) {
-            throw new Error(`Codex sessions target is not a directory: ${target}`);
-        }
-    }
-    catch (error) {
-        if (error.code !== "ENOENT")
-            throw error;
-        await mkdir(target, { mode: 0o700 });
-    }
-    await chmod(target, 0o700);
-}
-async function atomicCopyFile(source, target, mode) {
-    const parent = dirname(target);
-    await mkdir(parent, { recursive: true, mode: 0o700 });
-    const temporary = `${target}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
-    try {
-        await copyFile(source, temporary, constants.COPYFILE_EXCL);
-        await chmod(temporary, mode);
-        try {
-            await link(temporary, target);
-            return true;
-        }
-        catch (error) {
-            if (error.code !== "EEXIST")
-                throw error;
-            return false;
-        }
-    }
-    finally {
-        await unlink(temporary).catch(() => undefined);
-    }
-}
-async function ensurePrivateIndex(target, source) {
-    let current;
-    try {
-        current = await lstat(target);
-    }
-    catch (error) {
-        if (error.code !== "ENOENT")
-            throw error;
-    }
-    if (current?.isSymbolicLink()) {
-        if (source === undefined || !(await isExactSymlink(target, source))) {
-            throw new Error(`Refusing to replace unexpected Codex session index symlink: ${target}`);
-        }
-        const replacement = `${target}.private-${process.pid}-${Math.random().toString(36).slice(2)}`;
-        const legacyBackup = `${target}.legacy-${process.pid}-${Math.random().toString(36).slice(2)}`;
-        try {
-            try {
-                await lstat(source);
-                await copyFile(source, replacement, constants.COPYFILE_EXCL);
-            }
-            catch (error) {
-                if (error.code !== "ENOENT")
-                    throw error;
-                await writeFile(replacement, "", { encoding: "utf8", flag: "wx" });
-            }
-            await chmod(replacement, 0o600);
-            await rename(target, legacyBackup);
-            try {
-                await rename(replacement, target);
-            }
-            catch (error) {
-                await rename(legacyBackup, target).catch(() => undefined);
-                throw error;
-            }
-        }
-        finally {
-            await rm(replacement, { force: true }).catch(() => undefined);
-            await rm(legacyBackup, { force: true }).catch(() => undefined);
-        }
-        current = undefined;
-    }
-    if (current !== undefined && !current.isFile()) {
-        throw new Error(`Codex session index target is not a regular file: ${target}`);
-    }
-    if (current !== undefined) {
-        await chmod(target, 0o600);
-        return;
-    }
-    if (source !== undefined) {
-        try {
-            await lstat(source);
-            if (await atomicCopyFile(source, target, 0o600))
-                return;
-            return;
-        }
-        catch (error) {
-            if (error.code !== "ENOENT")
-                throw error;
-        }
-    }
-    const handle = await open(target, "wx", 0o600).catch((error) => {
-        if (error.code === "EEXIST")
-            return null;
-        throw error;
-    });
-    await handle?.close();
-}
-async function findRollout(root, sessionId) {
-    const entries = await readdir(root, { withFileTypes: true }).catch((error) => {
-        if (error.code === "ENOENT")
-            return [];
-        throw error;
-    });
-    const matches = [];
-    for (const entry of entries) {
-        const path = join(root, entry.name);
-        if (entry.isDirectory()) {
-            const nested = await findRollout(path, sessionId);
-            if (nested !== null)
-                matches.push(nested);
-        }
-        else if (entry.isFile() && entry.name.includes(sessionId)) {
-            matches.push(path);
-        }
-    }
-    if (matches.length > 1)
-        throw new Error(`Multiple Codex rollout files match session ${sessionId}`);
-    return matches[0] ?? null;
-}
-async function hydrateResumeRollout(sourceSessions, privateSessions, sessionId) {
-    if (sessionId.includes("/") || sessionId.includes("\\") || sessionId.includes("..")) {
-        throw new Error("Invalid Codex resume session id");
-    }
-    const sourcePath = await findRollout(sourceSessions, sessionId);
-    if (sourcePath === null)
-        return;
-    const relativePath = relative(sourceSessions, sourcePath);
-    const destination = resolve(privateSessions, relativePath);
-    if (!isBelow(resolve(privateSessions), destination)) {
-        throw new Error("Codex resume rollout escaped the private sessions directory");
-    }
-    let existing;
-    try {
-        existing = await lstat(destination);
-    }
-    catch (error) {
-        if (error.code !== "ENOENT")
-            throw error;
-    }
-    if (existing !== undefined) {
-        if (!existing.isFile() || existing.isSymbolicLink()) {
-            throw new Error(`Refusing to replace existing Codex rollout: ${destination}`);
-        }
-        return;
-    }
-    const mode = (await lstat(sourcePath)).mode & 0o777;
-    await atomicCopyFile(sourcePath, destination, mode);
-}
-/** Isolate Codex high-volume state per Agent while preserving auth and exact resume. */
-export async function materializeDefaultCodexHome(agentHome, sourceHome, resumeSessionId) {
-    const codexHome = defaultCodexHome(agentHome);
-    await mkdir(codexHome, { recursive: true, mode: 0o700 });
-    await chmod(codexHome, 0o700);
-    const source = sourceHome === undefined ? null : resolve(sourceHome);
-    if (source !== null && source !== codexHome) {
-        await Promise.all([
-            linkIfMissing(join(source, "auth.json"), join(codexHome, "auth.json")),
-            linkIfMissing(join(source, "config.toml"), join(codexHome, "config.toml")),
-        ]);
-    }
-    const sourceSessions = source === null || source === codexHome ? undefined : join(source, "sessions");
-    await ensurePrivateSessions(join(codexHome, "sessions"), sourceSessions);
-    const sourceIndex = source === null || source === codexHome ? undefined : join(source, "session_index.jsonl");
-    await ensurePrivateIndex(join(codexHome, "session_index.jsonl"), sourceIndex);
-    if (sourceSessions !== undefined && resumeSessionId) {
-        await hydrateResumeRollout(sourceSessions, join(codexHome, "sessions"), resumeSessionId);
-    }
-    return codexHome;
-}