@openrig/cli 0.4.8 → 0.5.1

package/daemon/dist/adapters/claude-resume.js

@@ -2,6 +2,7 @@ import { setTimeout as sleep } from "node:timers/promises";
 import { shellQuote } from "./shell-quote.js";
 import { claudePostureFlag } from "./yolo-mode.js";
 import { assessNativeResumeProbe } from "../domain/native-resume-probe.js";
+import { observeClaudePermission } from "../domain/permission-drift.js";
 const CLAUDE_TYPES = new Set(["claude_name", "claude_id"]);
 const SHELL_COMMANDS = new Set(["bash", "fish", "nu", "sh", "tmux", "zsh"]);
 export class ClaudeResumeAdapter {
@@ -21,13 +22,21 @@ export class ClaudeResumeAdapter {
     async resume(tmuxSessionName, resumeType, resumeToken, _cwd, 
     // OPR.0.4.8.3 Seam B: the seat's PERSISTED resolved posture (restore re-derivation);
     // absent = the env decision (0.4.8.2), unchanged.
-    resolvedPosture) {
+    resolvedPosture, 
+    // 0.5.2-07: the seat's SPEC-pinned model. TRAILING param so existing positional callers that pass
+    // resolvedPosture as the 5th arg stay correct; threaded so the legacy (non-pod-aware) restore boots
+    // the resumed seat on its spec model, not the runtime default; absent → command byte-identical.
+    model) {
         if (!this.canResume(resumeType, resumeToken)) {
             return { ok: false, code: "no_resume", message: "Claude resume not available" };
         }
         // OPR.0.4.8.2: the RESTORE path uses the SAME launch-posture decision as fresh launch (the
         // unconditional acceptEdits floor when OFF; the full bypass when YOLO is ON) — every seat.
-        const cmd = `claude ${claudePostureFlag(process.env, resolvedPosture)} --resume ${shellQuote(resumeToken)}`;
+        // 0.5.2-07: --model matches the fresh-launch adapter (claude-code-adapter), emitted after posture.
+        const modelArg = model ? ` --model ${shellQuote(model)}` : "";
+        const permissionMode = claudePostureFlag(process.env, resolvedPosture);
+        const appliedLaunch = observeClaudePermission(permissionMode);
+        const cmd = `claude ${permissionMode}${modelArg} --resume ${shellQuote(resumeToken)}`;
         const textResult = await this.tmux.sendText(tmuxSessionName, cmd);
         if (!textResult.ok) {
             // sendText failed — nothing in the buffer, no cleanup needed
@@ -40,7 +49,8 @@ export class ClaudeResumeAdapter {
             await this.tmux.sendKeys(tmuxSessionName, ["C-c"]);
             return { ok: false, code: "resume_failed", message: keyResult.message };
         }
-        return this.verifyResume(tmuxSessionName);
+        const result = await this.verifyResume(tmuxSessionName);
+        return result.ok ? { ...result, appliedLaunch } : result;
     }
     async verifyResume(tmuxSessionName) {
         const pollMs = this.options.pollMs ?? 200;

package/daemon/dist/adapters/claude-resume.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-resume.js","sourceRoot":"","sources":["../../src/adapters/claude-resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAU3E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAQ5E,MAAM,OAAO,mBAAmB;IAEpB;IACA;IAFV,YACU,IAAiB,EACjB,UAA+B,EAAE;QADjC,SAAI,GAAJ,IAAI,CAAa;QACjB,YAAO,GAAP,OAAO,CAA0B;IACxC,CAAC;IAEJ,SAAS,CAAC,UAAyB,EAAE,WAA0B;QAC7D,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CACV,eAAuB,EACvB,UAAyB,EACzB,WAA0B,EAC1B,IAAY;IACZ,qFAAqF;IACrF,kDAAkD;IAClD,eAAyC;QAEzC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;QAClF,CAAC;QAED,2FAA2F;QAC3F,2FAA2F;QAC3F,MAAM,GAAG,GAAG,UAAU,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,aAAa,UAAU,CAAC,WAAY,CAAC,EAAE,CAAC;QAE7G,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,6DAA6D;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,mEAAmE;YACnE,4DAA4D;YAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1E,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,eAAuB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE9E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACpF,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,OAAO,EAAE,aAAa;gBACtB,WAAW;gBACX,WAAW;aACZ,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBAC3C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,uEAAuE;iBACjF,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,0EAA0E;YAC1E,kEAAkE;YAClE,4DAA4D;YAC5D,yDAAyD;YACzD,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBAC1C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,KAAK,CAAC,MAAM;oBACrB,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACxD,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YAED,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,MAAM,UAAU,GAAG,uBAAuB,CAAC;YACzC,OAAO,EAAE,aAAa;YACtB,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,YAAY,IAAI,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,yEAAyE;aACnF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,qEAAqE;SAC/E,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"claude-resume.js","sourceRoot":"","sources":["../../src/adapters/claude-resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAiC,MAAM,+BAA+B,CAAC;AAUvG,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAQ5E,MAAM,OAAO,mBAAmB;IAEpB;IACA;IAFV,YACU,IAAiB,EACjB,UAA+B,EAAE;QADjC,SAAI,GAAJ,IAAI,CAAa;QACjB,YAAO,GAAP,OAAO,CAA0B;IACxC,CAAC;IAEJ,SAAS,CAAC,UAAyB,EAAE,WAA0B;QAC7D,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CACV,eAAuB,EACvB,UAAyB,EACzB,WAA0B,EAC1B,IAAY;IACZ,qFAAqF;IACrF,kDAAkD;IAClD,eAAyC;IACzC,kGAAkG;IAClG,oGAAoG;IACpG,gGAAgG;IAChG,KAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;QAClF,CAAC;QAED,2FAA2F;QAC3F,2FAA2F;QAC3F,mGAAmG;QACnG,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,UAAU,cAAc,GAAG,QAAQ,aAAa,UAAU,CAAC,WAAY,CAAC,EAAE,CAAC;QAEvF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,6DAA6D;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,mEAAmE;YACnE,4DAA4D;YAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,eAAuB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE9E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACpF,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,OAAO,EAAE,aAAa;gBACtB,WAAW;gBACX,WAAW;aACZ,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBAC3C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,uEAAuE;iBACjF,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,0EAA0E;YAC1E,kEAAkE;YAClE,4DAA4D;YAC5D,yDAAyD;YACzD,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBAC1C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,KAAK,CAAC,MAAM;oBACrB,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACxD,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YAED,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,MAAM,UAAU,GAAG,uBAAuB,CAAC;YACzC,OAAO,EAAE,aAAa;YACtB,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,YAAY,IAAI,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,yEAAyE;aACnF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,qEAAqE;SAC/E,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/adapters/codex-resume.d.ts

@@ -12,7 +12,7 @@ export declare class CodexResumeAdapter {
     private options;
     constructor(tmux: TmuxAdapter, options?: CodexResumeOptions);
     canResume(resumeType: string | null, resumeToken: string | null): boolean;
-    resume(tmuxSessionName: string, resumeType: string | null, resumeToken: string | null, _cwd: string, codexConfigProfile?: string | null, resolvedPosture?: "floor" | "full_bypass"): Promise<ResumeResult>;
+    resume(tmuxSessionName: string, resumeType: string | null, resumeToken: string | null, _cwd: string, codexConfigProfile?: string | null, resolvedPosture?: "floor" | "full_bypass", model?: string | null): Promise<ResumeResult>;
     private verifyResume;
 }
 //# sourceMappingURL=codex-resume.d.ts.map

package/daemon/dist/adapters/codex-resume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-resume.d.ts","sourceRoot":"","sources":["../../src/adapters/codex-resume.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMvD,OAAO,EAAE,KAAK,YAAY,EAAE,CAAC;AAE7B,UAAU,kBAAkB;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACzC;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,OAAO;gBADP,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,kBAAuB;IAG1C,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IASnE,MAAM,CACV,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,IAAI,EAAE,MAAM,EACZ,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,EAElC,eAAe,CAAC,EAAE,OAAO,GAAG,aAAa,GACxC,OAAO,CAAC,YAAY,CAAC;YAmDV,YAAY;CAuE3B"}
+{"version":3,"file":"codex-resume.d.ts","sourceRoot":"","sources":["../../src/adapters/codex-resume.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAUvD,OAAO,EAAE,KAAK,YAAY,EAAE,CAAC;AAE7B,UAAU,kBAAkB;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACzC;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,OAAO;gBADP,IAAI,EAAE,WAAW,EACjB,OAAO,GAAE,kBAAuB;IAG1C,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IASnE,MAAM,CACV,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,IAAI,EAAE,MAAM,EACZ,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,EAElC,eAAe,CAAC,EAAE,OAAO,GAAG,aAAa,EAIzC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,YAAY,CAAC;YA2DV,YAAY;CAuE3B"}

package/daemon/dist/adapters/codex-resume.js

@@ -1,5 +1,9 @@
 import { setTimeout as sleep } from "node:timers/promises";
 import { assessNativeResumeProbe, buildCodexResumeCore } from "../domain/native-resume-probe.js";
+import { runSyncSite } from "../domain/sync-site-wrap.js";
+import { shellQuote } from "./shell-quote.js";
+import { codexPostureArg } from "./yolo-mode.js";
+import { observeCodexSandbox } from "../domain/permission-drift.js";
 const CODEX_TYPES = new Set(["codex_id", "codex_last"]);
 const SHELL_COMMANDS = new Set(["bash", "fish", "nu", "sh", "tmux", "zsh"]);
 export class CodexResumeAdapter {
@@ -22,7 +26,11 @@ export class CodexResumeAdapter {
     }
     async resume(tmuxSessionName, resumeType, resumeToken, _cwd, codexConfigProfile, 
     // OPR.0.4.8.3 Seam B: persisted resolved posture threaded from restore.
-    resolvedPosture) {
+    resolvedPosture, 
+    // 0.5.2-07: the seat's SPEC-pinned model. TRAILING param so existing positional callers that pass
+    // resolvedPosture as the 6th arg stay correct; threaded so the legacy (non-pod-aware) restore boots
+    // the resumed seat on its spec model, not the runtime default; absent → command byte-identical.
+    model) {
         if (!this.canResume(resumeType, resumeToken)) {
             return { ok: false, code: "no_resume", message: "Codex resume not available" };
         }
@@ -30,7 +38,7 @@ export class CodexResumeAdapter {
             const { verifyCodexProfileLoads } = await import("../domain/codex-profile-preflight.js");
             const execFn = this.options.exec ?? (async (cmd) => {
                 const { execSync } = await import("node:child_process");
-                return execSync(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 10_000 });
+                return runSyncSite("codex.resume.profile_preflight", () => execSync(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 10_000 }));
             });
             const probeResult = await verifyCodexProfileLoads(codexConfigProfile, execFn);
             if (!probeResult.ok) {
@@ -41,7 +49,10 @@ export class CodexResumeAdapter {
                 };
             }
         }
-        const cmd = buildCodexResumeCore(resumeToken ?? "", codexConfigProfile, resumeType === "codex_last", undefined, resolvedPosture);
+        const profileArg = codexConfigProfile ? ` -p ${shellQuote(codexConfigProfile)}` : "";
+        const postureArg = codexPostureArg(profileArg, process.env, resolvedPosture);
+        const appliedLaunch = observeCodexSandbox(postureArg);
+        const cmd = buildCodexResumeCore(resumeToken ?? "", codexConfigProfile, resumeType === "codex_last", undefined, resolvedPosture, model, postureArg);
         const textResult = await this.tmux.sendText(tmuxSessionName, cmd);
         if (!textResult.ok) {
             // sendText failed — nothing in the buffer, no cleanup needed
@@ -54,7 +65,8 @@ export class CodexResumeAdapter {
             await this.tmux.sendKeys(tmuxSessionName, ["C-c"]);
             return { ok: false, code: "resume_failed", message: keyResult.message };
         }
-        return this.verifyResume(tmuxSessionName);
+        const result = await this.verifyResume(tmuxSessionName);
+        return result.ok ? { ...result, appliedLaunch } : result;
     }
     // Mirrors ClaudeResumeAdapter.verifyResume: poll the pane, run the native
     // probe, return resumed / retry_fresh / attention_required / resume_failed

package/daemon/dist/adapters/codex-resume.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex-resume.js","sourceRoot":"","sources":["../../src/adapters/codex-resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAEjG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AACxD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAW5E,MAAM,OAAO,kBAAkB;IAEnB;IACA;IAFV,YACU,IAAiB,EACjB,UAA8B,EAAE;QADhC,SAAI,GAAJ,IAAI,CAAa;QACjB,YAAO,GAAP,OAAO,CAAyB;IACvC,CAAC;IAEJ,SAAS,CAAC,UAAyB,EAAE,WAA0B;QAC7D,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9D,mCAAmC;QACnC,IAAI,UAAU,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QAC7C,yBAAyB;QACzB,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CACV,eAAuB,EACvB,UAAyB,EACzB,WAA0B,EAC1B,IAAY,EACZ,kBAAkC;IAClC,wEAAwE;IACxE,eAAyC;QAEzC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;QACjF,CAAC;QAED,IAAI,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;gBACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACxD,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAChG,CAAC,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YAC9E,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,6BAA6B,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;iBACrI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,oBAAoB,CAC9B,WAAW,IAAI,EAAE,EACjB,kBAAkB,EAClB,UAAU,KAAK,YAAY,EAC3B,SAAS,EACT,eAAe,CAChB,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,6DAA6D;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,mEAAmE;YACnE,4DAA4D;YAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1E,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,sEAAsE;IACtE,uEAAuE;IACvE,uEAAuE;IAC/D,KAAK,CAAC,YAAY,CAAC,eAAuB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE9E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACpF,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,OAAO,EAAE,OAAO;gBAChB,WAAW;gBACX,WAAW;aACZ,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACtC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,qEAAqE;iBAC/E,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,qEAAqE;YACrE,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBAC1C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,KAAK,CAAC,MAAM;oBACrB,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACxD,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YAED,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,MAAM,UAAU,GAAG,uBAAuB,CAAC;YACzC,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,YAAY,IAAI,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,uEAAuE;aACjF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,mEAAmE;SAC7E,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"codex-resume.js","sourceRoot":"","sources":["../../src/adapters/codex-resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEpE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AACxD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAW5E,MAAM,OAAO,kBAAkB;IAEnB;IACA;IAFV,YACU,IAAiB,EACjB,UAA8B,EAAE;QADhC,SAAI,GAAJ,IAAI,CAAa;QACjB,YAAO,GAAP,OAAO,CAAyB;IACvC,CAAC;IAEJ,SAAS,CAAC,UAAyB,EAAE,WAA0B;QAC7D,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9D,mCAAmC;QACnC,IAAI,UAAU,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QAC7C,yBAAyB;QACzB,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CACV,eAAuB,EACvB,UAAyB,EACzB,WAA0B,EAC1B,IAAY,EACZ,kBAAkC;IAClC,wEAAwE;IACxE,eAAyC;IACzC,kGAAkG;IAClG,oGAAoG;IACpG,gGAAgG;IAChG,KAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;QACjF,CAAC;QAED,IAAI,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;gBACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACxD,OAAO,WAAW,CAAC,gCAAgC,EAAE,GAAG,EAAE,CACxD,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CACvF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YAC9E,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,6BAA6B,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;iBACrI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,oBAAoB,CAC9B,WAAW,IAAI,EAAE,EACjB,kBAAkB,EAClB,UAAU,KAAK,YAAY,EAC3B,SAAS,EACT,eAAe,EACf,KAAK,EACL,UAAU,CACX,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,6DAA6D;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,mEAAmE;YACnE,4DAA4D;YAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,sEAAsE;IACtE,uEAAuE;IACvE,uEAAuE;IAC/D,KAAK,CAAC,YAAY,CAAC,eAAuB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE9E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACpF,MAAM,KAAK,GAAG,uBAAuB,CAAC;gBACpC,OAAO,EAAE,OAAO;gBAChB,WAAW;gBACX,WAAW;aACZ,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACtC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,qEAAqE;iBAC/E,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,uEAAuE;YACvE,uEAAuE;YACvE,qEAAqE;YACrE,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBAC1C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,KAAK,CAAC,MAAM;oBACrB,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACxD,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YAED,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,MAAM,UAAU,GAAG,uBAAuB,CAAC;YACzC,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,YAAY,IAAI,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,uEAAuE;aACjF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,mEAAmE;SAC7E,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/adapters/codex-runtime-adapter.d.ts

@@ -9,6 +9,10 @@ export interface CodexAdapterFsOps {
     exists(path: string): boolean;
     mkdirp(path: string): void;
     listFiles?(dirPath: string): string[];
+    /** Source file permission bits (for mode-preserving projection). Optional: mode preservation is a no-op if absent. */
+    statMode?(path: string): number;
+    /** Apply permission bits to a file (for mode-preserving projection). Optional: no-op if absent. */
+    chmod?(path: string, mode: number): void;
     homedir?: string;
 }
 /**
@@ -23,6 +27,7 @@ export declare class CodexRuntimeAdapter implements RuntimeAdapter {
     private readThreadIdByPid;
     private sleep;
     private resolveHomeDirByPid;
+    private codexHome?;
     private verifyProfilePreflight;
     private activityRelayPath?;
     constructor(deps: {
@@ -37,6 +42,7 @@ export declare class CodexRuntimeAdapter implements RuntimeAdapter {
         resolveHomeDirByPid?: ResolveHomeDirByPid;
         sleep?: (ms: number) => Promise<void>;
         activityRelayPath?: string;
+        codexHome?: string;
         verifyProfilePreflight?: (profile: string) => Promise<CodexProfileProbeResult>;
     });
     /**
@@ -111,6 +117,14 @@ export declare class CodexRuntimeAdapter implements RuntimeAdapter {
         cwd?: string | null;
     }): void;
     private projectEntry;
+    /**
+     * Reapply the source file's permission bits to the projected dest. Plain
+     * readFile+writeFile (writeFileSync) creates the dest with the process default
+     * mode, dropping executable bits on nested plugin helpers (e.g. the
+     * claude-compaction-restore/scripts/*.mjs 0755 hooks). No-op when the fs adapter
+     * does not expose mode primitives (keeps existing mock-fs callers unaffected).
+     */
+    private preserveMode;
     private pluginAppliesToCodex;
     private resolveTargetDir;
     private applyRuntimeResource;
@@ -123,6 +137,7 @@ export declare class CodexRuntimeAdapter implements RuntimeAdapter {
     private mergeGuidance;
     private detectDeliveryHint;
     private provisionWorkspaceTrust;
+    private resolveCodexConfigPath;
     private readJsonObject;
     private readJsonObjectField;
     private workspaceTrustKeys;

package/daemon/dist/adapters/codex-runtime-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-runtime-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/codex-runtime-adapter.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,KAAK,EACV,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAChD,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,EAC3E,mBAAmB,EACpB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,iCAAiC,CAAC;AACvF,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAMtC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACxD,QAAQ,CAAC,OAAO,WAAW;IAC3B,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,aAAa,CAA8D;IACnF,OAAO,CAAC,iBAAiB,CAAsC;IAC/D,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,mBAAmB,CAAsB;IAOjD,OAAO,CAAC,sBAAsB,CAAwD;IAKtF,OAAO,CAAC,iBAAiB,CAAC,CAAS;gBAEvB,IAAI,EAAE;QAChB,IAAI,EAAE,WAAW,CAAC;QAClB,KAAK,EAAE,iBAAiB,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC5E,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;QACxD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;QAC1C,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;KAChF;IAWD;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAehF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,wBAAwB,IAAI,IAAI;IA+BhC;;;;;;;;;OASG;IACH,OAAO,CAAC,2BAA2B;IAiBnC;;;;;;OAMG;IACH,wBAAwB,IAAI,IAAI;IAY1B,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAWjE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0B9E,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAgDlG,aAAa,CACjB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,8BAA8B,EAAE,UAAU,CAAA;KAAE,GAC3G,OAAO,CAAC,mBAAmB,CAAC;IAmG/B,OAAO,CAAC,wBAAwB;IAW1B,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC;YAqBlD,iCAAiC;YAiCjC,4BAA4B;IAuC1C,sBAAsB,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAI9D,OAAO,CAAC,YAAY;IA2CpB,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,oBAAoB;IAe5B;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,uBAAuB;IAsB/B,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,kBAAkB;YAUZ,oBAAoB;YAsBpB,kBAAkB;IAsGhC,OAAO,CAAC,uBAAuB;IAK/B,OAAO,CAAC,oBAAoB;CAO7B;AAsGD,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,gGAAgG;IAChG,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,EACpD,KAAK,EAAE,mBAAmB,GACzB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAoB/B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CA8BvF;AA0BD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAO3D;AA4DD,QAAA,MAAM,4BAA4B,4EAA6E,CAAC"}
+{"version":3,"file":"codex-runtime-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/codex-runtime-adapter.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,KAAK,EACV,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAChD,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,EAC3E,mBAAmB,EACpB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,iCAAiC,CAAC;AAEvF,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAOtC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtC,sHAAsH;IACtH,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,mGAAmG;IACnG,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACxD,QAAQ,CAAC,OAAO,WAAW;IAC3B,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,aAAa,CAA8D;IACnF,OAAO,CAAC,iBAAiB,CAAsC;IAC/D,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,SAAS,CAAC,CAAS;IAO3B,OAAO,CAAC,sBAAsB,CAAwD;IAKtF,OAAO,CAAC,iBAAiB,CAAC,CAAS;gBAEvB,IAAI,EAAE;QAChB,IAAI,EAAE,WAAW,CAAC;QAClB,KAAK,EAAE,iBAAiB,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC5E,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;QACxD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;QAC1C,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;KAChF;IAYD;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAahF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,wBAAwB,IAAI,IAAI;IA6BhC;;;;;;;;;OASG;IACH,OAAO,CAAC,2BAA2B;IAiBnC;;;;;;OAMG;IACH,wBAAwB,IAAI,IAAI;IAU1B,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAWjE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0B9E,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAgDlG,aAAa,CACjB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,8BAA8B,EAAE,UAAU,CAAA;KAAE,GAC3G,OAAO,CAAC,mBAAmB,CAAC;IAwG/B,OAAO,CAAC,wBAAwB;IAW1B,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC;YAqBlD,iCAAiC;YAiCjC,4BAA4B;IAuC1C,sBAAsB,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAI9D,OAAO,CAAC,YAAY;IAqDpB;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,oBAAoB;IAc5B;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,uBAAuB;IAmB/B,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,kBAAkB;YAUZ,oBAAoB;YAsBpB,kBAAkB;IAsGhC,OAAO,CAAC,uBAAuB;IAK/B,OAAO,CAAC,oBAAoB;CAO7B;AAsGD,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,gGAAgG;IAChG,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,EACpD,KAAK,EAAE,mBAAmB,GACzB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAoB/B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CA8BvF;AA0BD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAO3D;AA4DD,QAAA,MAAM,4BAA4B,4EAA6E,CAAC"}

package/daemon/dist/adapters/codex-runtime-adapter.js

@@ -5,11 +5,13 @@ import os from "node:os";
 import { execFileSync } from "node:child_process";
 import { codexPostureArg } from "./yolo-mode.js";
 import { resolveConcreteHint } from "../domain/runtime-adapter.js";
+import { observeCodexSandbox } from "../domain/permission-drift.js";
 import { defaultResolveHomeDirByPid, readCodexThreadIdFromCandidateHomes, } from "../domain/codex-thread-id.js";
 import { assessNativeResumeProbe, buildCodexResumeCore } from "../domain/native-resume-probe.js";
 import { mergeManagedBlock } from "../domain/managed-blocks.js";
 import { parseSessionName } from "../domain/session-name.js";
 import { shellQuote } from "./shell-quote.js";
+import { runSyncSite } from "../domain/sync-site-wrap.js";
 /**
  * Codex runtime adapter. Projects resources to .agents/ targets (preserving
  * existing Codex filesystem contract) and delivers startup files.
@@ -22,6 +24,7 @@ export class CodexRuntimeAdapter {
     readThreadIdByPid;
     sleep;
     resolveHomeDirByPid;
+    codexHome;
     // Housekeeping B1 fixback (guard-blocking, arch HK-AR-1 = whole-probe DI):
     // the Codex profile-LOAD probe is an injectable dep in the adapter's
     // established optional-deps shape. Default = the REAL probe
@@ -37,6 +40,7 @@ export class CodexRuntimeAdapter {
     constructor(deps) {
         this.tmux = deps.tmux;
         this.fs = deps.fsOps;
+        this.codexHome = deps.codexHome;
         this.activityRelayPath = deps.activityRelayPath;
         this.listProcesses = deps.listProcesses ?? defaultListProcesses;
         this.readThreadIdByPid = deps.readThreadIdByPid ?? ((pid) => this.readThreadIdFromLogs(pid));
@@ -63,10 +67,7 @@ export class CodexRuntimeAdapter {
             return;
         if (isCodex013xOrLater(opts.codexVersion))
             return;
-        const homedir = this.fs.homedir;
-        if (!homedir)
-            return;
-        const configPath = nodePath.join(homedir, ".codex", "config.toml");
+        const configPath = this.resolveCodexConfigPath();
         const existing = this.fs.exists(configPath) ? this.fs.readFile(configPath) : "";
         const updated = upsertCodexHooksFeature(existing);
         if (updated !== existing) {
@@ -103,10 +104,7 @@ export class CodexRuntimeAdapter {
             }
             return;
         }
-        const homedir = this.fs.homedir;
-        if (!homedir)
-            return;
-        const configPath = nodePath.join(homedir, ".codex", "config.toml");
+        const configPath = this.resolveCodexConfigPath();
         const existing = this.fs.exists(configPath) ? this.fs.readFile(configPath) : "";
         const withHooks = upsertCodexActivityHooks(existing, relay);
         if (withHooks !== existing) {
@@ -161,10 +159,7 @@ export class CodexRuntimeAdapter {
      * (the Codex 0.139 default) intact. Idempotent; no-op when the config or the block is absent.
      */
     removeCodexActivityHooks() {
-        const homedir = this.fs.homedir;
-        if (!homedir)
-            return;
-        const configPath = nodePath.join(homedir, ".codex", "config.toml");
+        const configPath = this.resolveCodexConfigPath();
         if (!this.fs.exists(configPath))
             return;
         const existing = this.fs.readFile(configPath);
@@ -268,6 +263,8 @@ export class CodexRuntimeAdapter {
         const modelArg = model ? ` -m ${shellQuote(model)}` : "";
         const profile = binding.codexConfigProfile?.trim();
         const profileArg = profile ? ` -p ${shellQuote(profile)}` : "";
+        const postureArg = codexPostureArg(profileArg, process.env, binding.launchPosture);
+        const appliedLaunch = observeCodexSandbox(postureArg);
         // OPR.0.3.4.7 — profile-LOAD probe before launch/resume. A legacy
         // [profiles.<name>] table or invalid TOML must fail BEFORE the opaque
         // `codex -p <profile> resume` failure. An absent .config.toml passes
@@ -300,7 +297,8 @@ export class CodexRuntimeAdapter {
             // OPR.0.4.8.2: the FORK path uses the SAME posture decision (codexPostureArg) — YOLO forces
             // -s danger-full-access on every seat; otherwise the named profile, or OpenRig's explicit
             // -s workspace-write floor flag.
-            const cmd = `codex${codexPostureArg(profileArg, process.env, binding.launchPosture)} fork${queueStateDirArg} ${shellQuote(parentId)}`;
+            // 0.5.2-07 A2-3: the FORK path threads the SPEC model too (fork-instantiate reverted it before).
+            const cmd = `codex${postureArg}${modelArg} fork${queueStateDirArg} ${shellQuote(parentId)}`;
             const textResult = await this.tmux.sendText(binding.tmuxSession, cmd);
             if (!textResult.ok) {
                 return { ok: false, error: `Failed to send launch command: ${textResult.message}` };
@@ -317,14 +315,16 @@ export class CodexRuntimeAdapter {
                     error: "codex fork: could not capture new post-fork thread id",
                 };
             }
-            return { ok: true, resumeToken: threadId, resumeType: "codex_id" };
+            return { ok: true, resumeToken: threadId, resumeType: "codex_id", appliedLaunch };
         }
         // OPR.0.4.8.2: one posture decision (codexPostureArg) for the fresh launch too — YOLO forces
         // -s danger-full-access (overrides even a named profile); otherwise the named profile, or
         // OpenRig's explicit -s workspace-write floor flag.
         const cmd = opts.resumeToken
-            ? buildCodexResumeCore(opts.resumeToken, profile, false, queueStateDirArg.trim() || undefined, binding.launchPosture)
-            : `codex${codexPostureArg(profileArg, process.env, binding.launchPosture)} -C ${shellQuote(binding.cwd)}${gitDirArg}${queueStateDirArg}${modelArg}`;
+            // 0.5.2-07 A2-3: the pod-aware RESUME path threads the SPEC model too (reverted before — the
+            // grounding map assumed codex parity with the claude adapter, but only fresh emitted -m).
+            ? buildCodexResumeCore(opts.resumeToken, profile, false, queueStateDirArg.trim() || undefined, binding.launchPosture, model, postureArg)
+            : `codex${postureArg} -C ${shellQuote(binding.cwd)}${gitDirArg}${queueStateDirArg}${modelArg}`;
         const textResult = await this.tmux.sendText(binding.tmuxSession, cmd);
         if (!textResult.ok) {
             return { ok: false, error: `Failed to send launch command: ${textResult.message}` };
@@ -338,13 +338,13 @@ export class CodexRuntimeAdapter {
             const verification = await this.verifyResumeLaunch(binding.tmuxSession, { resumeToken: opts.resumeToken });
             if (!verification.ok)
                 return verification;
-            return { ok: true, resumeToken: opts.resumeToken, resumeType: "codex_id" };
+            return { ok: true, resumeToken: opts.resumeToken, resumeType: "codex_id", appliedLaunch };
         }
         const threadId = await this.captureFreshThreadId(binding);
         if (threadId) {
-            return { ok: true, resumeToken: threadId, resumeType: "codex_id" };
+            return { ok: true, resumeToken: threadId, resumeType: "codex_id", appliedLaunch };
         }
-        return { ok: true };
+        return { ok: true, appliedLaunch };
     }
     buildQueueStateAddDirArg(sessionName) {
         const identity = parseCanonicalSessionName(sessionName);
@@ -473,21 +473,43 @@ export class CodexRuntimeAdapter {
                 const src = nodePath.join(entry.absolutePath, file);
                 const dest = nodePath.join(targetDir, file);
                 const content = this.fs.readFile(src);
-                if (this.fs.exists(dest) && hashContent(content) === hashContent(this.fs.readFile(dest)))
+                // Reconcile mode even when the content write is skipped: a byte-identical dest
+                // projected earlier may still carry the wrong (default) mode.
+                if (this.fs.exists(dest) && hashContent(content) === hashContent(this.fs.readFile(dest))) {
+                    this.preserveMode(src, dest);
                     continue;
+                }
                 this.fs.mkdirp(nodePath.dirname(dest));
                 this.fs.writeFile(dest, content);
+                this.preserveMode(src, dest);
             }
         }
         else {
             const content = this.fs.readFile(entry.absolutePath);
             const destFile = nodePath.join(targetDir, nodePath.basename(entry.absolutePath));
-            if (this.fs.exists(destFile) && hashContent(content) === hashContent(this.fs.readFile(destFile)))
+            if (this.fs.exists(destFile) && hashContent(content) === hashContent(this.fs.readFile(destFile))) {
+                this.preserveMode(entry.absolutePath, destFile);
                 return true;
+            }
             this.fs.writeFile(destFile, content);
+            this.preserveMode(entry.absolutePath, destFile);
         }
         return true;
     }
+    /**
+     * Reapply the source file's permission bits to the projected dest. Plain
+     * readFile+writeFile (writeFileSync) creates the dest with the process default
+     * mode, dropping executable bits on nested plugin helpers (e.g. the
+     * claude-compaction-restore/scripts/*.mjs 0755 hooks). No-op when the fs adapter
+     * does not expose mode primitives (keeps existing mock-fs callers unaffected).
+     */
+    preserveMode(src, dest) {
+        if (!this.fs.statMode || !this.fs.chmod)
+            return;
+        const srcMode = this.fs.statMode(src) & 0o777;
+        if ((this.fs.statMode(dest) & 0o777) !== srcMode)
+            this.fs.chmod(dest, srcMode);
+    }
     pluginAppliesToCodex(entry) {
         const explicit = entry.pluginType ?? "auto";
         if (explicit === "codex")
@@ -511,8 +533,7 @@ export class CodexRuntimeAdapter {
         if (entry.resourceType !== "codex_config_fragment") {
             return false;
         }
-        const home = this.fs.homedir ?? os.homedir();
-        const configPath = nodePath.join(home, ".codex", "config.toml");
+        const configPath = this.resolveCodexConfigPath();
         this.fs.mkdirp(nodePath.dirname(configPath));
         const existing = this.fs.exists(configPath) ? this.fs.readFile(configPath) : "";
         const fragment = this.fs.readFile(entry.absolutePath);
@@ -546,10 +567,7 @@ export class CodexRuntimeAdapter {
     provisionWorkspaceTrust(cwd) {
         if (!cwd)
             return;
-        const home = this.fs.homedir ?? os.homedir();
-        if (!home)
-            return;
-        const configPath = nodePath.join(home, ".codex", "config.toml");
+        const configPath = this.resolveCodexConfigPath();
         this.fs.mkdirp(nodePath.dirname(configPath));
         let content = "";
         try {
@@ -564,6 +582,11 @@ export class CodexRuntimeAdapter {
         }
         this.fs.writeFile(configPath, content);
     }
+    resolveCodexConfigPath() {
+        const root = this.codexHome
+            ?? nodePath.join(this.fs.homedir ?? os.homedir(), ".codex");
+        return nodePath.join(root, "config.toml");
+    }
     readJsonObject(path) {
         try {
             if (!this.fs.exists(path))
@@ -1034,12 +1057,12 @@ function escapeRegExp(value) {
 async function defaultProfilePreflight(profile) {
     const { verifyCodexProfileLoads } = await import("../domain/codex-profile-preflight.js");
     const { execSync } = await import("node:child_process");
-    const execFn = async (cmd) => execSync(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 10_000 });
+    const execFn = async (cmd) => runSyncSite("codex.runtime.profile_preflight", () => execSync(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 10_000 }));
     return verifyCodexProfileLoads(profile, execFn);
 }
 function defaultListProcesses() {
     try {
-        const output = execFileSync("ps", ["-Ao", "pid,ppid,command"], { encoding: "utf-8" });
+        const output = runSyncSite("codex.runtime.list_processes", () => execFileSync("ps", ["-Ao", "pid,ppid,command"], { encoding: "utf-8" }));
         return output
             .split("\n")
             .slice(1)