@petercjl/codex-own 0.4.1 → 0.5.1

package/README.md

@@ -2,6 +2,26 @@
 
 独立桌面应用的 npm 安装与更新工具。支持 Mac ARM64 和 Windows x64。管理工具和桌面资源均从 npm 下载。
 
+## 独立 Node、npm 和 Python
+
+从 0.5.0 起，安装或更新桌面程序会同时安装其固定版本的独立工具。第一版为 Node 24.22.0、npm 11.19.1、Python 3.12.15，保留发行包自带许可证。资源通过 npm 内容包分发，接收端无需连接 GitHub 或 Node/Python 下载站。工具版本独立于桌面版本；后续桌面更新复用相同工具和已校验分片。
+
+Mac 工具位于 `~/Library/Application Support/codex-own-independent/runtimes`，Windows 位于 `%LOCALAPPDATA%\codex-own-independent\runtimes`。版本目录、npm 全局包与缓存、pip 缓存和 Python 字节码均归 codex-own 所有。应用启动后只为自己的进程及工作子进程设置 PATH；用户/系统 PATH、shell 配置和原版 Codex 缓存保持不变。项目的 `node_modules` 和 Python `.venv` 继续保存在项目中。Python 包安装使用项目虚拟环境，pip 默认要求虚拟环境，保证工具版本目录稳定。
+
+Mac 任务使用运行时目录内的私有 zsh 启动文件和 Bash `BASH_ENV`，保证登录 shell 仍优先选择独立工具。这些配置只在 codex-own 进程中生效，用户原有 shell 文件保持不变。
+
+可直接发给 Agent：
+
+> 请检查 codex-own 的独立 Node、npm 和 Python 运行时，并验证实际执行路径。
+
+> 请通过 @petercjl/codex-own 更新 codex-own 及其独立运行时，保留配置和对话。
+
+开发者和终端测试入口：`codex-own runtime doctor` 查看工具版本和实际路径；`codex-own runtime run -- node --version`、`codex-own runtime run -- npm --version`、`codex-own runtime run -- python --version` 可在应用外使用同一套工具。`runtime env` 只返回工具环境合同，不输出 API Key 或继承的账户信息。独立更新使用 `runtime update --yes`，回到上个工具版本使用 `runtime rollback --yes`；已运行的应用在重启后采用新版本。安装失败保持原有活动版本，保留可恢复的版本记录。
+
+首次通过 npm 安装管理工具仍需要机器已有 Node.js 22+ 和 npm；这只是引导安装的前提。安装完成后，桌面任务和应用内更新使用 codex-own 自己的工具。此工具集包含 Node、npm、Python、pip、venv；原版完整办公依赖集合、Git、编译器和额外项目库按实际任务另行安装。
+
+从 0.4.x 的应用内更新按钮升级时，新应用首次打开会显示“正在准备 codex-own 工作环境”，自动从 npm 补齐工具并验证后再进入桌面。下载失败或取消后可重新打开重试，已验证分片会保留。
+
 ## 应用内更新
 
 带有 npm 更新组件的桌面版本会在启动 15 秒后、以及运行期间每 6 小时检查稳定版。也可以打开菜单“更新 → 检查 codex-own 更新…”。发现新版后点击“下载更新”，下载期间可以继续使用 App。下载完成后结束正在运行的任务，点击“重启并安装”；更新进程会等待 App 退出，备份程序及独立数据，再安装并重新打开。

package/bin/codex-own.mjs

@@ -3,15 +3,25 @@ import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
 import {pkg,packageRoot,read,fail,paths,doctor,latest,state,install,launch,rollback,hash,rejectLinks,configure} from '../lib/manager.mjs';
+import {manifestFor} from '../lib/manager.mjs';
+import {installRuntime,runtimeDoctor,rollbackRuntime,runRuntime,toolEnv} from '../lib/tool-runtime.mjs';
 const args=process.argv.slice(2),[command,sub]=args;
 const flag=n=>args.includes('--'+n),value=n=>{const i=args.indexOf('--'+n);return i<0?undefined:args[i+1];};
 const yes=()=>{if(!flag('yes'))fail('CONFIRMATION_REQUIRED','Mutating commands require --yes');};
 async function skill(){const source=path.join(packageRoot,'skills','codex-own');if(sub==='source')return {ok:true,source,version:pkg.version};const agent=value('agent')||'codex';if(!['codex','sealseek'].includes(agent))fail('UNSUPPORTED_AGENT',agent);const base=value('target-root')||(agent==='codex'?path.join(os.homedir(),'.codex','skills'):null);if(!base)fail('TARGET_REQUIRED','Provide the configured Agent skill root with --target-root');const dest=path.join(base,'codex-own'),marker=path.join(dest,'.codex-own-managed.json');rejectLinks(base);rejectLinks(dest);const exists=fs.existsSync(dest);const owned=exists&&fs.existsSync(marker)&&read(marker).package===pkg.name;const srcHash=hash(fs.readFileSync(path.join(source,'SKILL.md')));if(sub==='status')return {ok:true,source,destination:dest,installed:exists,managed:owned,current:owned&&hash(fs.readFileSync(path.join(dest,'SKILL.md')))===srcHash};if(!['install','update'].includes(sub))fail('INVALID_COMMAND','skill source/status/install/update');yes();if(exists&&!owned)fail('UNMANAGED_TARGET','Existing skill is not managed');let backup=null;if(exists){backup=dest+'.backup-'+Date.now();fs.cpSync(dest,backup,{recursive:true,force:false,errorOnExist:true});}fs.mkdirSync(dest,{recursive:true});const ui=path.join(dest,'agents','openai.yaml'),customUI=fs.existsSync(ui)?fs.readFileSync(ui):null;fs.cpSync(source,dest,{recursive:true});if(customUI)fs.writeFileSync(ui,customUI);fs.writeFileSync(marker,JSON.stringify({package:pkg.name,version:pkg.version,hash:srcHash}));if(hash(fs.readFileSync(path.join(dest,'SKILL.md')))!==srcHash)fail('VERIFY_FAILED','Skill copy mismatch');return {ok:true,source,destination:dest,backup,version:pkg.version};}
 async function main(){
- if(!command||command==='help'||command==='--help')return {commands:['version','capabilities','doctor','install --yes [--adopt]','configure --api-key-file <file> --yes','update check','update install --yes','launch','rollback --restore-data --yes','skill source|status|install|update'],note:'Application data remains outside npm. Quit the app before updates. Manager and desktop versions are reported separately.'};
+ if(!command||command==='help'||command==='--help')return {commands:['version','capabilities','doctor','install --yes [--adopt]','configure --api-key-file <file> --yes','update check','update install --yes','runtime install|update|doctor|env|run|rollback','launch','rollback --restore-data --yes','skill source|status|install|update'],note:'Application data and private tools remain outside npm manager packages. Quit the app before desktop updates. Manager, desktop and tool runtime versions are reported separately.'};
  if(command==='version'||command==='--version')return {manager:pkg.version,desktop:state()?.version||null};
  if(command==='capabilities')return read(path.join(packageRoot,'capabilities.json'));
- if(command==='doctor')return doctor();
+ if(command==='doctor')return {...doctor(),runtime:runtimeDoctor()};
+ if(command==='runtime'){
+  if(sub==='doctor')return runtimeDoctor();
+  if(sub==='env'){const env=toolEnv.environment();if(!env)fail('RUNTIME_NOT_INSTALLED','Install private tools first');return {ok:true,contract:1,root:toolEnv.runtimeRoot(),environment:Object.fromEntries(Object.entries(env).filter(([k])=>['PATH','ZDOTDIR','BASH_ENV','CODEX_OWN_NODE','CODEX_OWN_PYTHON','CODEX_OWN_RUNTIME_VERSION','AGENT_WORKBENCH_NPM_CLI'].includes(k)||/^(NPM_CONFIG_|PYTHON|PIP_)/.test(k)))};}
+  if(sub==='run'){const i=args.indexOf('--');process.exitCode=runRuntime(i<0?args.slice(2):args.slice(i+1));return;}
+  if(sub==='install'||sub==='update'){yes();const m=await manifestFor(value('version')||await latest());return installRuntime(m.runtimes);}
+  if(sub==='rollback'){yes();return rollbackRuntime();}
+  return {commands:['runtime install --yes','runtime update --yes','runtime doctor','runtime env','runtime run -- <node|npm|npx|python|python3|pip> [args]','runtime rollback --yes']};
+ }
  if(command==='launch')return launch();
  if(command==='skill')return skill();
  if(command==='configure'){yes();return configure(value('api-key-file'));}
@@ -20,4 +30,4 @@ async function main(){
  if(command==='rollback'){yes();return rollback({restoreData:flag('restore-data')});}
  fail('INVALID_COMMAND','See codex-own help');
 }
-try{const result=await main();console.log(JSON.stringify(result,null,2));if(result.ok===false)process.exitCode=1;}catch(e){console.error(JSON.stringify({ok:false,code:e.code||'OPERATION_FAILED',message:e.message}));process.exitCode=1;}
+try{const result=await main();if(result!==undefined){console.log(JSON.stringify(result,null,2));if(result.ok===false)process.exitCode=1;}}catch(e){console.error(JSON.stringify({ok:false,code:e.code||'OPERATION_FAILED',message:e.message}));process.exitCode=1;}

package/capabilities.json

@@ -12,7 +12,13 @@
     "skill source",
     "skill status",
     "skill install",
-    "skill update"
+    "skill update",
+    "runtime install",
+    "runtime update",
+    "runtime doctor",
+    "runtime env",
+    "runtime run",
+    "runtime rollback"
   ],
   "platforms": {
     "darwin-arm64": "implemented",
@@ -55,5 +61,24 @@
     "runtime": "bundled standalone Node; no global npm upgrade required",
     "menu": "更新 → 检查 codex-own 更新…",
     "offline": "current installation remains usable; manual retry; verified prepared update survives restart"
+  },
+  "toolRuntime": {
+    "contract": 1,
+    "platforms": [
+      "darwin-arm64",
+      "win32-x64"
+    ],
+    "versions": {
+      "node": "24.22.0",
+      "npm": "11.19.1",
+      "python": "3.12.15"
+    },
+    "source": "release manifest pinned npm content payloads",
+    "state": "independent root/runtimes/active.json",
+    "pathPolicy": "app and child processes only; user and system PATH preserved",
+    "pythonPackages": "project venv; pip requires virtualenv",
+    "npmGlobalPackages": "private runtimes/npm-global prefix",
+    "rollback": "verify predecessor and switch receipt; no conversation data restore",
+    "firstBootstrap": "existing Node >=22 and npm required"
   }
 }

package/lib/app-update.mjs

@@ -3,6 +3,7 @@ import path from 'node:path';
 import {latest,manifestFor,validateManifest,paths,state,locked,rejectLinks,exclusive,digestFile,tarExecutable,install,fail,running,launch} from './manager.mjs';
 import {assembleNpmAsset} from './npm-assets.mjs';
 import {reuseInstalledBlocks} from './content-blocks.mjs';
+import {ensureRuntime} from './tool-runtime.mjs';
 
 // Desktop release versions use the stable npm channel, independently of upstream's app version.
 export function isNewer(candidate,current) {
@@ -31,6 +32,7 @@ export async function prepareUpdate(current,{p=paths(),resolve=latest,manifest=m
       // The app may stay open: only read program resources, never user data.
       if(p.target){rejectLinks(p.target);await reuseInstalledBlocks(asset,p.target,cache,{report,signal});}
       const transfer=await assemble(asset,archive,cache,tarExecutable(),{report,signal});
+      if(m.runtimes)await ensureRuntime(m.runtimes,{p,report,signal});
       // Verify even when a download adapter is supplied.
       if(fs.statSync(archive).size!==asset.size||await digestFile(archive)!==asset.sha256)fail('CHECKSUM_MISMATCH','Prepared update checksum mismatch');
       const receipt=path.join(dir,'receipt.json');

package/lib/manager.mjs

@@ -7,6 +7,7 @@ import {execFileSync, spawn} from 'node:child_process';
 import {networkFetch, verifiedDownload, progress} from './network.mjs';
 import {validateParts, assembleNpmAsset} from './npm-assets.mjs';
 import {reuseInstalledBlocks} from './content-blocks.mjs';
+import {ensureRuntime,validateRuntime} from './tool-runtime.mjs';
 
 export const packageRoot = path.resolve(import.meta.dirname, '..');
 export const pkg = JSON.parse(fs.readFileSync(path.join(packageRoot,'package.json'),'utf8'));
@@ -24,6 +25,7 @@ export function rejectLinks(p) {
 }
 export function validateManifest(m, platform) {
   if(![1,2].includes(m.schema)||m.repository!=='petercjl/codex-own'||!/^\d+\.\d+\.\d+(?:-[\w.-]+)?$/.test(m.version))fail('INVALID_MANIFEST','Invalid release identity');
+  if(m.runtimes)validateRuntime(m.runtimes,platform);
   const a=m.platforms?.[platform];if(!a)fail('PLATFORM_UNAVAILABLE',`No verified build for ${platform} in ${m.version}`);
   if(!/^[a-f0-9]{64}$/.test(a.sha256)||!Number.isSafeInteger(a.size)||a.size<=0)fail('INVALID_MANIFEST','Invalid archive checksum/size');
   if(m.schema===2){validateParts(a);if(a.entry!==(platform==='darwin-arm64'?'codex-own.app':'app'))fail('INVALID_MANIFEST','Unexpected archive entry');return a;}
@@ -46,8 +48,11 @@ export function tarExecutable(platform=process.platform,env=process.env,exists=f
   return executable;
 }
 export function unpack(archive,dest) {
-  const names=execFileSync(tarExecutable(),['-tf',archive],{encoding:'utf8',maxBuffer:30*1024*1024}).split('\n').filter(Boolean);checkEntries(names);
-  fs.mkdirSync(dest);execFileSync(tarExecutable(),['-xf',archive,'-C',dest],{stdio:'pipe'});
+  // Older Windows tar builds convert absolute argv paths through the ANSI code
+  // page. CreateProcessW's cwd supports Unicode; sibling relative args avoid it.
+  const cwd=path.dirname(path.resolve(archive)),source=path.basename(archive),target=path.relative(cwd,path.resolve(dest));
+  const names=execFileSync(tarExecutable(),['-tf',source],{cwd,encoding:'utf8',maxBuffer:30*1024*1024}).split('\n').filter(Boolean);checkEntries(names);
+  fs.mkdirSync(dest);execFileSync(tarExecutable(),['-xf',source,'-C',target],{cwd,stdio:'pipe'});
   // Bundled framework links may be relative but must stay within the extracted tree.
   function walk(p){for(const x of fs.readdirSync(p,{withFileTypes:true})){const f=path.join(p,x.name);if(x.isSymbolicLink()){const resolved=path.resolve(path.dirname(f),fs.readlinkSync(f));if(!resolved.startsWith(dest+path.sep))fail('UNSAFE_ARCHIVE','Escaping symlink');}else if(x.isDirectory())walk(f);}}
   walk(dest);
@@ -93,7 +98,7 @@ export function switchApp({p,source,version,adopt=false,identity=appIdentity,isR
 }
 export async function locked(p,fn){rejectLinks(p.root);fs.mkdirSync(p.manager,{recursive:true,mode:0o700});const lock=path.join(p.manager,'operation.lock');let fd;try{fd=fs.openSync(lock,'wx',0o600);}catch{fail('BUSY','Another operation or interrupted lock exists; inspect doctor before recovery');}try{fs.writeSync(fd,JSON.stringify({pid:process.pid,time:new Date().toISOString()}));return await fn();}finally{fs.closeSync(fd);fs.unlinkSync(lock);}}
 export async function latest() {const r=await networkFetch('https://registry.npmjs.org/@petercjl%2fcodex-own/latest',{signal:AbortSignal.timeout(30000)});if(!r.ok)fail('REGISTRY_UNAVAILABLE',`Registry HTTP ${r.status}`);const p=await r.json();if(p.name!==pkg.name)fail('INVALID_MANIFEST','Registry package mismatch');return p.version;}
-export async function manifestFor(v){if(v===pkg.version)return read(path.join(packageRoot,'release.json'));if(!/^\d+\.\d+\.\d+(?:-[\w.-]+)?$/.test(v))fail('INVALID_VERSION','Invalid version');const r=await networkFetch(`https://registry.npmjs.org/@petercjl%2fcodex-own/${v}`,{signal:AbortSignal.timeout(30000)});if(!r.ok)fail('MANIFEST_UNAVAILABLE',`npm HTTP ${r.status}`);const p=await r.json(),m=p.ownDesktopManifest;if(p.name!==pkg.name||p.version!==v||m?.version!==v||m?.schema!==2)fail('MANIFEST_UNAVAILABLE','This version has no npm desktop manifest; update the npm manager to latest.');return m;}
+export async function manifestFor(v){if(v===pkg.version){const local=read(path.join(packageRoot,'release.json'));if(local.version===v)return local;}if(!/^\d+\.\d+\.\d+(?:-[\w.-]+)?$/.test(v))fail('INVALID_VERSION','Invalid version');const r=await networkFetch(`https://registry.npmjs.org/@petercjl%2fcodex-own/${v}`,{signal:AbortSignal.timeout(30000)});if(!r.ok)fail('MANIFEST_UNAVAILABLE',`npm HTTP ${r.status}`);const p=await r.json(),m=p.ownDesktopManifest;if(p.name!==pkg.name||p.version!==v||m?.version!==v||m?.schema!==2)fail('MANIFEST_UNAVAILABLE','This version has no npm desktop manifest; update the npm manager to latest.');return m;}
 export async function configure(keyFile){if(!keyFile)fail('KEY_FILE_REQUIRED','Provide --api-key-file');const key=fs.readFileSync(keyFile,'utf8').trim();if(!/^sk-[A-Za-z0-9_-]{10,}$/.test(key))fail('INVALID_KEY_FILE','Expected a single API key');const p=paths();return locked(p,async()=>{if(running(p).length)fail('APP_RUNNING','Quit codex-own first');rejectLinks(p.core);fs.mkdirSync(p.core,{recursive:true,mode:0o700});fs.chmodSync(p.core,0o700);
  if(process.platform==='win32'){const sid=execFileSync('powershell.exe',['-NoProfile','-Command','[System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value'],{encoding:'utf8'}).trim();execFileSync('icacls.exe',[p.core,'/inheritance:r','/grant:r',`*${sid}:(OI)(CI)F`],{stdio:'pipe'});}
  const auth=path.join(p.core,'auth.json');rejectLinks(auth);let backup=null;if(fs.existsSync(auth)){backup=auth+'.backup-'+crypto.randomUUID();fs.copyFileSync(auth,backup,fs.constants.COPYFILE_EXCL);fs.chmodSync(backup,0o600);}const tmp=auth+'.new-'+crypto.randomUUID();exclusive(tmp,{auth_mode:'apikey',OPENAI_API_KEY:key});fs.renameSync(tmp,auth);
@@ -104,7 +109,7 @@ export async function install({version,adopt=false,archive,manifest,expectedCurr
   progress('准备安装：检查版本、平台与独立目录');
   return locked(p,async()=>{const m=manifest||await manifestFor(version||pkg.version);const a=validateManifest(m,p.platform);
     if(expectedCurrent!==undefined&&state(p)?.version!==expectedCurrent)fail('INSTALLATION_CHANGED','Installation changed after the update was prepared; check again');
-    if(state(p)?.version===m.version&&!archive)return {ok:true,unchanged:true,version:m.version};
+    if(state(p)?.version===m.version&&!archive){if(m.runtimes)await ensureRuntime(m.runtimes,{p,report:progress});return {ok:true,unchanged:true,version:m.version};}
     if(running(p).length)fail('APP_RUNNING','Quit codex-own before install/update');
     const stage=fs.mkdtempSync(path.join(p.manager,'stage-'));let f=archive,transfer;
     if(f){if(fs.statSync(f).size!==a.size||await digestFile(f)!==a.sha256)fail('CHECKSUM_MISMATCH','Local archive checksum mismatch');}
@@ -116,6 +121,7 @@ export async function install({version,adopt=false,archive,manifest,expectedCurr
     progress('校验通过，正在解压桌面程序');
     const content=path.join(stage,'unpacked');unpack(f,content);const source=path.join(content,a.entry);
     if(process.platform==='darwin')execFileSync('codesign',['--verify','--deep','--strict',source],{stdio:'pipe'});
+    if(m.runtimes)await ensureRuntime(m.runtimes,{p,report:progress});
     progress('正在安装到独立目录');
     const result=switchApp({p,source,version:m.version,adopt});
     if(process.platform==='darwin')execFileSync('/System/Library/Frameworks/CoreServices.framework/Frameworks/LaunchServices.framework/Support/lsregister',['-f',p.target],{stdio:'pipe'});

package/lib/npm-assets.mjs

@@ -58,7 +58,7 @@ export async function assembleNpmAsset(asset, dest, cache, tar, {download = veri
       const archive = path.join(scratch, 'package.tgz');
       await download(part.url, archive, {size:part.archiveSize, sha256:part.archiveSha256}, {signal:controller.signal, report:message=>report(`[${i+1}/${asset.parts.length}] ${message}`)});
       // Extract only the fixed payload entry, never arbitrary paths from a package tarball.
-      execFileSync(tar, ['-xf', archive, '-C', scratch, 'package/payload.bin'], {stdio:'pipe'});
+      execFileSync(tar, ['-xf', path.basename(archive), '-C', '.', 'package/payload.bin'], {cwd:scratch,stdio:'pipe'});
       const payload = path.join(scratch, 'package', 'payload.bin');
       safeCache(payload);
       if (fs.statSync(payload).size !== part.size || await fileHash(payload) !== part.sha256)

package/lib/tool-env.cjs

@@ -0,0 +1,45 @@
+'use strict';
+// Public environment contract v1. Only the caller's environment is changed.
+const fs=require('node:fs'),path=require('node:path'),os=require('node:os');
+function runtimeRoot(platform=process.platform,home=os.homedir(),env=process.env){
+ return path.join(platform==='darwin'?path.join(home,'Library','Application Support'):(env.LOCALAPPDATA||path.join(home,'AppData','Local')),'codex-own-independent','runtimes');
+}
+function inside(base,file){return path.resolve(file).startsWith(path.resolve(base)+path.sep);}
+function pathEntries(r,platform=process.platform){const win=platform==='win32';return [r.shims,r.bin,win?path.join(r.directory,'python'):path.join(r.directory,'python','bin'),...(win?[path.join(r.directory,'python','Scripts')]:[]),path.join(r.root,'npm-global',...(win?[]:['bin']))];}
+function active(base=runtimeRoot(),platform=process.platform,version){
+ const file=path.join(base,'active.json');if(!version&&!fs.existsSync(file))return null;
+ const r=version?{schema:1,version,platform:`${platform}-${process.arch}`} : JSON.parse(fs.readFileSync(file,'utf8'));
+ if(r.schema!==1||!/^node[0-9.]+-python[0-9.]+-r\d+$/.test(r.version)||r.platform!==`${platform}-${process.arch}`)throw Error('Invalid codex-own runtime receipt');
+ const dir=path.join(base,'versions',r.version),bin=platform==='win32'?path.join(dir,'node'):path.join(dir,'node','bin');
+ const python=platform==='win32'?path.join(dir,'python','python.exe'):path.join(dir,'python','bin','python3');
+ const node=path.join(bin,platform==='win32'?'node.exe':'node');
+ const npm=path.join(dir,'node',platform==='win32'?'node_modules':'lib/node_modules','npm','bin','npm-cli.js');
+ if(!inside(base,dir)||!inside(fs.realpathSync(base),fs.realpathSync(dir)))throw Error('Runtime path escapes private directory');
+ for(const f of [node,python,npm]){if(!inside(dir,f)||!inside(fs.realpathSync(dir),fs.realpathSync(f)))throw Error('Runtime executable escapes immutable version directory');}
+ return {...r,root:base,directory:dir,node,python,npm,bin,shims:path.join(dir,'shims')};
+}
+function environment(base=runtimeRoot(),inherited=process.env,platform=process.platform,version){
+ const r=active(base,platform,version);if(!r)return null;
+ const win=platform==='win32',separator=win?';':':',env={...inherited};
+ const key=Object.keys(env).find(k=>k.toUpperCase()==='PATH')||'PATH';
+ const tail=(env[key]||'').split(separator).filter(p=>p&&!p.includes('codex-runtimes')&&!p.startsWith(path.join(base,'versions')));
+ for(const k of Object.keys(env))if(/^(PATH|NODE_PATH|NODE_OPTIONS|PYTHONHOME|PYTHONPATH|PYTHONUSERBASE|NPM_CONFIG_.+|PIP_CONFIG_FILE)$/i.test(k))delete env[k];
+ const bins=pathEntries(r,platform);
+ Object.assign(env,{PATH:[...bins,...tail].join(separator),CODEX_OWN_RUNTIME_ROOT:base,CODEX_OWN_RUNTIME_VERSION:r.version,CODEX_OWN_NODE:r.node,CODEX_OWN_PYTHON:r.python,AGENT_WORKBENCH_NPM_CLI:r.npm,
+  NPM_CONFIG_PREFIX:path.join(base,'npm-global'),NPM_CONFIG_CACHE:path.join(base,'npm-cache'),NPM_CONFIG_USERCONFIG:path.join(base,'npmrc'),NPM_CONFIG_GLOBALCONFIG:path.join(base,'global-npmrc'),
+  PYTHONUTF8:'1',PYTHONIOENCODING:'utf-8',PYTHONPYCACHEPREFIX:path.join(base,'python-bytecode',r.version),PYTHONNOUSERSITE:'1',PYTHONUSERBASE:path.join(base,'python-user'),PIP_CACHE_DIR:path.join(base,'pip-cache'),PIP_CONFIG_FILE:win?'NUL':'/dev/null',PIP_REQUIRE_VIRTUALENV:'true'});
+ if(!win)Object.assign(env,{ZDOTDIR:path.join(r.directory,'shell'),BASH_ENV:path.join(r.directory,'shell','bash-env.sh')});
+ return env;
+}
+function shellFiles(base,version){
+ const r=active(base,process.platform,version),env=environment(base,{PATH:''},process.platform,version),quote=s=>"'"+s.replaceAll("'","'\"'\"'")+"'";
+ const settings=Object.entries(env).filter(([k])=>k!=='PATH').map(([k,v])=>`export ${k}=${quote(v)}`).join('\n');
+ const body='# codex-own private task shell; system and user profiles are unchanged.\n'+settings+'\nexport CODEX_HOME='+quote(path.join(base,'..','core'))+'\nexport PATH='+quote(pathEntries(r).join(':'))+':"$PATH"\nunset NODE_OPTIONS NODE_PATH PYTHONHOME PYTHONPATH OPENAI_API_KEY OPENAI_BASE_URL CHATGPT_TOKEN\nunalias node npm npx python python3 pip pip3 2>/dev/null || true\nfor own_tool in node npm npx python python3 pip pip3; do unset -f "$own_tool" 2>/dev/null || true; done\nunset own_tool\n';
+ const include='. '+quote(path.join(r.directory,'shell','bash-env.sh'))+'\n';
+ return {'bash-env.sh':body,'.zshenv':include,'.zprofile':include,'.zshrc':include,'.zlogin':include};
+}
+function apply(base=runtimeRoot(),env=process.env,platform=process.platform){
+ const next=environment(base,env,platform);if(!next)return false;
+ for(const k of Object.keys(env))if(!(k in next))delete env[k];Object.assign(env,next);return true;
+}
+module.exports={runtimeRoot,active,environment,apply,shellFiles};

package/lib/tool-runtime.mjs

@@ -0,0 +1,82 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import {execFileSync,spawnSync} from 'node:child_process';
+import {createRequire} from 'node:module';
+import {assembleNpmAsset,validateParts} from './npm-assets.mjs';
+import {paths,locked,rejectLinks,exclusive,unpack,fail,tarExecutable,digestFile} from './manager.mjs';
+const require=createRequire(import.meta.url);
+export const toolEnv=require('./tool-env.cjs');
+export function validateRuntime(m,platform){
+ if(m?.schema!==1||!/^node\d+\.\d+\.\d+-python\d+\.\d+\.\d+-r\d+$/.test(m.version))fail('INVALID_RUNTIME_MANIFEST','Invalid runtime identity');
+ const a=m.platforms?.[platform];if(!a)fail('RUNTIME_UNAVAILABLE',platform);
+ for(const name of ['node','python']){const s=a[name];if(!s||!/^[a-f0-9]{64}$/.test(s.sha256)||!Number.isSafeInteger(s.size)||s.size<1||s.size>128*1048576||!['zip','tar.gz'].includes(s.format)||!(/^[a-zA-Z0-9.+_-]+$/).test(s.entry))fail('INVALID_RUNTIME_MANIFEST','Invalid runtime asset');validateParts(s);}
+ return a;
+}
+function writeActive(base,r){
+ const f=path.join(base,'active.json');rejectLinks(f);
+ if(fs.existsSync(f))fs.copyFileSync(f,f+'.backup-'+crypto.randomUUID(),fs.constants.COPYFILE_EXCL);
+ const tmp=f+'.new-'+crypto.randomUUID();exclusive(tmp,r);fs.renameSync(tmp,f);
+}
+export function runtimeDoctor(base=toolEnv.runtimeRoot(),{version}={}){
+ try{const r=toolEnv.active(base,process.platform,version);if(!r)return {ok:false,code:'RUNTIME_NOT_INSTALLED',root:base};
+  const env=toolEnv.environment(base,process.env,process.platform,version),run=(file,args)=>execFileSync(file,args,{encoding:'utf8',env,windowsHide:true,timeout:30000}).trim();
+  return {ok:true,contract:1,version:r.version,root:base,node:{path:r.node,version:run(r.node,['--version'])},npm:{path:r.npm,version:run(r.node,[r.npm,'--version'])},python:{path:r.python,version:run(r.python,['--version']),pip:run(r.python,['-m','pip','--version'])}};
+ }catch(e){return {ok:false,code:'RUNTIME_INVALID',root:base,message:e.message};}
+}
+// Lock is shared with app installation. Updates keep immutable versions, so an
+// already running app continues using its old tools until it restarts.
+export async function ensureRuntime(m,{p=paths(),assemble=assembleNpmAsset,report=()=>{},localAssets,signal}={}){
+ const assets=validateRuntime(m,p.platform),base=path.join(p.root,'runtimes');rejectLinks(base);fs.mkdirSync(base,{recursive:true,mode:0o700});
+ const previous=toolEnv.active(base),target=path.join(base,'versions',m.version);rejectLinks(target);
+ if(previous?.version===m.version){const d=runtimeDoctor(base);if(!d.ok)fail(d.code,d.message||'Invalid private runtime');return {...d,unchanged:true};}
+ if(fs.existsSync(target))fail('RUNTIME_VERSION_EXISTS','Existing runtime version preserved; inspect runtime doctor and receipt before recovery');
+ fs.mkdirSync(path.dirname(target),{recursive:true,mode:0o700});
+ const stage=fs.mkdtempSync(path.join(base,'stage-')),candidate=path.join(stage,'candidate');fs.mkdirSync(candidate);let created=false,committed=false;
+ try{
+  for(const name of ['node','python']){
+   const a=assets[name],archive=path.join(stage,name+'.'+a.format);report(`安装独立 ${name} 运行时`);
+   if(localAssets?.[name]){if(fs.statSync(localAssets[name]).size!==a.size||await digestFile(localAssets[name])!==a.sha256)fail('CHECKSUM_MISMATCH','Local runtime checksum mismatch');fs.copyFileSync(localAssets[name],archive,fs.constants.COPYFILE_EXCL);}
+   else await assemble(a,archive,path.join(base,'npm-assets'),tarExecutable(),{report,signal});
+   const extracted=path.join(stage,name+'-unpacked');unpack(archive,extracted);
+   if(fs.readdirSync(extracted).some(n=>n!==a.entry))fail('UNSAFE_ARCHIVE','Unexpected runtime archive root');
+   fs.renameSync(path.join(extracted,a.entry),path.join(candidate,name));
+  }
+  const shims=path.join(candidate,'shims');fs.mkdirSync(shims);
+  if(process.platform==='win32'){
+   for(const name of ['python','python3','pip','pip3'])fs.writeFileSync(path.join(shims,name+'.cmd'),`@echo off\r\n"%~dp0..\\python\\python.exe" ${name.startsWith('pip')?'-m pip ':''}%*\r\n`,{flag:'wx'});
+   for(const name of ['npm','npx'])fs.writeFileSync(path.join(shims,name+'.cmd'),`@echo off\r\n"%~dp0..\\node\\node.exe" "%~dp0..\\node\\node_modules\\npm\\bin\\${name}-cli.js" %*\r\n`,{flag:'wx'});
+  }else{
+   fs.symlinkSync('../python/bin/python3',path.join(shims,'python'));fs.symlinkSync('../python/bin/python3',path.join(shims,'python3'));
+   for(const name of ['pip','pip3'])fs.writeFileSync(path.join(shims,name),'#!/bin/sh\nexec "$(dirname "$0")/../python/bin/python3" -m pip "$@"\n',{flag:'wx',mode:0o755});
+  }
+  for(const name of ['npmrc','global-npmrc']){const f=path.join(base,name);rejectLinks(f);if(!fs.existsSync(f))fs.writeFileSync(f,'# codex-own isolated npm configuration\n',{flag:'wx',mode:0o600});}
+  for(const name of ['npm-global','npm-cache','pip-cache','python-user']){rejectLinks(path.join(base,name));fs.mkdirSync(path.join(base,name),{recursive:true,mode:0o700});}
+  // Windows scanners may hold executables after execution. Never rename an
+  // executed tool directory: copy to a fresh immutable final path, probe there,
+  // and only then atomically switch the small active receipt.
+  fs.mkdirSync(target);created=true;fs.cpSync(candidate,target,{recursive:true,force:false,errorOnExist:true,verbatimSymlinks:true});
+  if(process.platform==='darwin'){const shell=path.join(target,'shell');fs.mkdirSync(shell);for(const [name,body]of Object.entries(toolEnv.shellFiles(base,m.version)))fs.writeFileSync(path.join(shell,name),body,{flag:'wx',mode:0o600});}
+  const tested=runtimeDoctor(base,{version:m.version});if(!tested.ok)fail('RUNTIME_PROBE_FAILED',tested.message||'Tool verification failed');
+  const expected=m.version.match(/^node([0-9.]+)-python([0-9.]+)-/);
+  if(tested.node.version!=='v'+expected[1]||tested.python.version!=='Python '+expected[2])fail('RUNTIME_VERSION_MISMATCH','Runtime executable versions do not match manifest');
+  if(signal?.aborted)fail('CANCELLED','Runtime installation cancelled');
+  exclusive(path.join(target,'codex-own-runtime.json'),{schema:1,version:m.version,platform:p.platform,assets:{node:assets.node.sha256,python:assets.python.sha256},verified:tested});
+  writeActive(base,{schema:1,version:m.version,platform:p.platform,previous:previous?.version||null,installedAt:new Date().toISOString()});
+  committed=true;
+  return runtimeDoctor(base);
+ }finally{for(const f of [stage,...(created&&!committed?[target]:[])])try{fs.rmSync(f,{recursive:true,force:true,maxRetries:10,retryDelay:200});}catch{report(`临时目录被系统占用，已保留：${f}`);}}
+}
+export async function installRuntime(m,options={}){const p=options.p||paths();return locked(p,()=>ensureRuntime(m,{...options,p}));}
+export async function rollbackRuntime({p=paths()}={}){return locked(p,async()=>{
+ const base=path.join(p.root,'runtimes'),r=toolEnv.active(base);if(!r?.previous)fail('NO_RUNTIME_ROLLBACK','No previous runtime');
+ const f=path.join(base,'versions',r.previous,'codex-own-runtime.json');rejectLinks(f);const old=JSON.parse(fs.readFileSync(f));
+ if(old.version!==r.previous||old.platform!==p.platform)fail('INVALID_RUNTIME_RECEIPT','Previous runtime does not match');
+ const checked=runtimeDoctor(base,{version:r.previous});if(!checked.ok)fail('RUNTIME_INVALID','Previous runtime verification failed; active tools preserved');
+ writeActive(base,{schema:1,version:r.previous,platform:p.platform,previous:r.version,installedAt:new Date().toISOString()});return runtimeDoctor(base);
+ });}
+export function runRuntime(args){if(!args.length)fail('COMMAND_REQUIRED','runtime run -- <node|npm|npx|python|python3|pip> [args]');const base=toolEnv.runtimeRoot(),r=toolEnv.active(base);if(!r)fail('RUNTIME_NOT_INSTALLED','Install codex-own runtime first');
+ const [name,...rest]=args;const command=name==='node'?{file:r.node,args:rest}:['npm','npx'].includes(name)?{file:r.node,args:[name==='npm'?r.npm:path.join(path.dirname(r.npm),'npx-cli.js'),...rest]}:['python','python3','pip'].includes(name)?{file:r.python,args:[...(name==='pip'?['-m','pip']:[]),...rest]}:null;
+ if(!command)fail('INVALID_COMMAND','Supported tools: node, npm, npx, python, python3, pip');
+ const out=spawnSync(command.file,command.args,{env:toolEnv.environment(base),stdio:'inherit',windowsHide:true});if(out.error)throw out.error;return out.status??1;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@petercjl/codex-own",
-  "version": "0.4.1",
+  "version": "0.5.1",
   "description": "Independent codex-own desktop installation and update manager",
   "type": "module",
   "bin": {
@@ -44,13 +44,13 @@
   "ownDesktopManifest": {
     "schema": 2,
     "repository": "petercjl/codex-own",
-    "version": "0.4.1",
+    "version": "0.5.1",
     "platforms": {
       "darwin-arm64": {
         "entry": "codex-own.app",
         "transport": "canonical-tar-cdc-v1",
-        "size": 2045490688,
-        "sha256": "6c299eccf14ed95f106bd13d42033760254610fbe16ced9018dcc17e77d2911b",
+        "size": 2045519872,
+        "sha256": "6ceef71b166b31dfe8295258c336bb2dddd01cbf7cbd6355de5c16178cd2749d",
         "parts": [
           {
             "sha256": "f7950fe492a347a0e74528f4f73472052fc43d5155f32f92481fc96c3cc6ce95",
@@ -88,11 +88,11 @@
             "archiveSha256": "1697a11a56260838efd2bb2f0d95767540c7154ad85c274f86b23a1baddf8d7c"
           },
           {
-            "sha256": "e081208d5cdc77baaae34525949efb2c375e9899462cf7a3ee8297d43831d8ba",
+            "sha256": "61f22cc033b97a745f8afd40e750591cf00df08a9454c54ca924e89061eef41f",
             "size": 46558388,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.he081208d5cdc77baaae34525949efb2c375e9899462cf7a3ee8297d43831d8ba.tgz",
-            "archiveSize": 13975146,
-            "archiveSha256": "11827b2a0ee79e518481167fd0863f079cc7789f562137c3a7d6fa4aa7aab4e4"
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h61f22cc033b97a745f8afd40e750591cf00df08a9454c54ca924e89061eef41f.tgz",
+            "archiveSize": 13975144,
+            "archiveSha256": "acf70e99c7cea6c10007035aa7d8509457b7cc73d9378f5f5dc7ae42152726d0"
           },
           {
             "sha256": "e09427abf6b00a3719b916121a734361209e637eefe8dff4ee5736dde2ac8751",
@@ -116,18 +116,18 @@
             "archiveSha256": "25db0027db503c12230d346ec500d01ba53880069164eeb0020da829dcff6c8f"
           },
           {
-            "sha256": "15d483fbc670a0d6225766dafaba4788d08d9acb6394525d58d9a114674f3f72",
+            "sha256": "d30e0f5e5bdd6a27a5f8d12a3272a94aaa47dccae8b58036dc3b162dac4b7e61",
             "size": 26327040,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h15d483fbc670a0d6225766dafaba4788d08d9acb6394525d58d9a114674f3f72.tgz",
-            "archiveSize": 8466879,
-            "archiveSha256": "a749c1777b6a11ea75cddcb0bc40b8cb9afd8d16e861dd0f9ccee021aa6f08a4"
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hd30e0f5e5bdd6a27a5f8d12a3272a94aaa47dccae8b58036dc3b162dac4b7e61.tgz",
+            "archiveSize": 8466868,
+            "archiveSha256": "5e19777e583abc273553db5c8c9808b098085cc2ec319ae5cd8def73bd923f24"
           },
           {
-            "sha256": "09aa46003472eb0128ee1a4bfdc915e00a300cd18d772998e0bf36ea9adefa62",
-            "size": 20032650,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h09aa46003472eb0128ee1a4bfdc915e00a300cd18d772998e0bf36ea9adefa62.tgz",
-            "archiveSize": 5138658,
-            "archiveSha256": "6f41a2d0a912ede983633efb23f47cb943d1a1fe27bd67b39300d402a87c6260"
+            "sha256": "9b44de3ecc70850eccbb992540cfd1b9b14ab2bfa042bbee072bcbebbe7a1338",
+            "size": 20033661,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h9b44de3ecc70850eccbb992540cfd1b9b14ab2bfa042bbee072bcbebbe7a1338.tgz",
+            "archiveSize": 5138668,
+            "archiveSha256": "9149d9c8394d1cb9770861460b52815481409a9cd39c935cbf3497171b858128"
           },
           {
             "sha256": "432172d98e9f5fb2d7a7e41036c0d36f3c405203e2e612c0706ec2440bd50044",
@@ -207,11 +207,11 @@
             "archiveSha256": "4193df135e7180f6fc32a0fd9fa1cef6b1ee90e3bfd437cf9d7a7c2c82a23310"
           },
           {
-            "sha256": "90a418d1a8baa1f2bf8fee848e05ff10162144689a46a6860680db0a6801a764",
-            "size": 5769306,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h90a418d1a8baa1f2bf8fee848e05ff10162144689a46a6860680db0a6801a764.tgz",
-            "archiveSize": 4533432,
-            "archiveSha256": "1ee70e0376d1db00ea958c3194136940d54075e27cf56742c4778beb365892fa"
+            "sha256": "ff1233b968d63b1329b76402e82b689f0d0a46f1f6127107a1a05b181163118e",
+            "size": 5769319,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hff1233b968d63b1329b76402e82b689f0d0a46f1f6127107a1a05b181163118e.tgz",
+            "archiveSize": 4533434,
+            "archiveSha256": "6be6ad10c5bc084261686bb6f498abbd0fa637180d933b9a5a8c3af5a66a2b8d"
           },
           {
             "sha256": "2c7b16b63b93ce10c381c512543fadd21e65ec8b5b499e68cf7e6b9905e4ef09",
@@ -382,11 +382,11 @@
             "archiveSha256": "7cdf4ba6de25f51905fac22b7079c52464a4c06b4a9bb39af20121f29e1261a2"
           },
           {
-            "sha256": "2b2a46d3f39371c916e81154f668291a6dd9c37ab2ce000b1c636ae6ffa57945",
-            "size": 59450880,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h2b2a46d3f39371c916e81154f668291a6dd9c37ab2ce000b1c636ae6ffa57945.tgz",
-            "archiveSize": 26333973,
-            "archiveSha256": "c882c2e80d039808850674b3d1643d0212a75ee8d769cb30de75e3e8869669d6"
+            "sha256": "bf0ecb90c4a398ce1bf67b04c2cd43a1b21e8c995f0ebf6b2790187b9c9a7edd",
+            "size": 59472896,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hbf0ecb90c4a398ce1bf67b04c2cd43a1b21e8c995f0ebf6b2790187b9c9a7edd.tgz",
+            "archiveSize": 26339649,
+            "archiveSha256": "281d76c73c4e3326535729045ad0198905d92ef38c7e2b2b984c7b7350af6b6e"
           },
           {
             "sha256": "7160a34ddbb6db8a2296686a530bb99f78cb8803027cbb32fb76aa9ed2222355",
@@ -403,11 +403,11 @@
             "archiveSha256": "783256484f3f6dfc99561fe6680100f457b5acf0e845a8824a9b8a94c6518b1e"
           },
           {
-            "sha256": "273c28c983e5709b06ef410a0695846b6ca407cf93abf90aacd81eeb79d96734",
-            "size": 35845005,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h273c28c983e5709b06ef410a0695846b6ca407cf93abf90aacd81eeb79d96734.tgz",
-            "archiveSize": 29375784,
-            "archiveSha256": "2eacfba0fcdb4044088fadba88d57aada93ca250d536e699960f57e6e9a78677"
+            "sha256": "3ab3b4e037c73a5c8372185f95e53cfa3d896b0e0ad83f22e0ba03930a6c6a12",
+            "size": 35849613,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h3ab3b4e037c73a5c8372185f95e53cfa3d896b0e0ad83f22e0ba03930a6c6a12.tgz",
+            "archiveSize": 29376983,
+            "archiveSha256": "238a4fa5b80e3a066b6e4ad279e7345e6e5f2b6b8fa9f9b479b01285a3405bad"
           },
           {
             "sha256": "20604d70f3b62c4f011cc6fcf2215c5b21005cf31ff27e7e8c0a31af21c46c37",
@@ -431,19 +431,19 @@
             "archiveSha256": "988c7e1746e5237643195824ef5f1193e03998135de90a5ae0c33e105b450f5f"
           },
           {
-            "sha256": "7b5bbcf781bd880525c52f1ec8166189292ecf694903d54904b74ce1b2a90b45",
-            "size": 1764864,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h7b5bbcf781bd880525c52f1ec8166189292ecf694903d54904b74ce1b2a90b45.tgz",
-            "archiveSize": 355467,
-            "archiveSha256": "a10577274aa7ce96df453bd8e5acc865b74b70a1948c8adb080062a7051e6b22"
+            "sha256": "2cb194bbeda7df041b482386d4c61d512994b84dc4baa76df73985942cff7366",
+            "size": 1766400,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h2cb194bbeda7df041b482386d4c61d512994b84dc4baa76df73985942cff7366.tgz",
+            "archiveSize": 355805,
+            "archiveSha256": "9b5d0900872c202813608df4e3558a82b14eafa28bde964fdf488cea8d7539b7"
           }
         ]
       },
       "win32-x64": {
         "entry": "app",
         "transport": "canonical-tar-cdc-v1",
-        "size": 2424525312,
-        "sha256": "a0e46980fce8922c7ac407651f5d7660f71619669e70a72ede26ddbefe1bcd6b",
+        "size": 2424552960,
+        "sha256": "eaef194c566bdf33238cc85fcca3ac88924efac107d85acbed92cb7c28625f65",
         "parts": [
           {
             "sha256": "75e7eeb9ec280f24305ca34c3a22539c26616b4fb74cb89ac5436ed62390d31d",
@@ -516,11 +516,11 @@
             "archiveSha256": "00624b63deb580eaa1f50528d963c34871c5d650bc704fed498dbedb44a832a4"
           },
           {
-            "sha256": "5a8008e622b5ac2a574a8ee1f0ea18a1d4ba02375cf4bbe56f58b1f43a408c9f",
+            "sha256": "94c67bc06de1d41fc2ef15a8f13084070637c48afa45b88f65d5338e3a4733ed",
             "size": 23890432,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h5a8008e622b5ac2a574a8ee1f0ea18a1d4ba02375cf4bbe56f58b1f43a408c9f.tgz",
-            "archiveSize": 11339427,
-            "archiveSha256": "951fd051ba248b2eb7ec8fe4e57fa09797ea4c8d622806ca7844ad3ab4603676"
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h94c67bc06de1d41fc2ef15a8f13084070637c48afa45b88f65d5338e3a4733ed.tgz",
+            "archiveSize": 11339437,
+            "archiveSha256": "5306b9fa30dde73a6a6c376da4d62b42c4586798d18d3a51103b981c0098b77d"
           },
           {
             "sha256": "723a5e60c1066bd5ba6e387fae972124a6f8f1726d7ba1bdb273aa620b62726f",
@@ -551,11 +551,11 @@
             "archiveSha256": "893d020e3aa46399d3f91f0212b66a47c42e7a03bc1072b76dbe22224d00b9f7"
           },
           {
-            "sha256": "66d07a8b7caf21d15e0741ea08c6378ff241cf9be0809ac437e1da6e3f5bcc84",
-            "size": 24783138,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h66d07a8b7caf21d15e0741ea08c6378ff241cf9be0809ac437e1da6e3f5bcc84.tgz",
-            "archiveSize": 6289325,
-            "archiveSha256": "c0be6a6a77d803e7d51c5d18fa78c2becfcc5035ee5761323984d129d3895e8b"
+            "sha256": "007c6c48ecb83a528c06de0e5686f9e406fb78c714c6e513cbc19184df6bf825",
+            "size": 24784186,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h007c6c48ecb83a528c06de0e5686f9e406fb78c714c6e513cbc19184df6bf825.tgz",
+            "archiveSize": 6289351,
+            "archiveSha256": "10d50695aad87cff4305ab9e0455b726e2467a662d3f50b3f362c7d372f95c1f"
           },
           {
             "sha256": "8209fa7ff4208fabdc6143ddce15132d60abdfe5123505704b70c2bcb9be6394",
@@ -635,11 +635,11 @@
             "archiveSha256": "08144618dc5dafba20b37e708ff2b11950486eb02666b31bbf7c28398855edf6"
           },
           {
-            "sha256": "f637d96b0a0dfca34c1e5278317e99b4710731a4a7950fdedd47609cf8440f14",
-            "size": 5769032,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hf637d96b0a0dfca34c1e5278317e99b4710731a4a7950fdedd47609cf8440f14.tgz",
-            "archiveSize": 4533426,
-            "archiveSha256": "d3dca4b7e4c20e83cd86264ff7d7c1f07edae25561c34f60747db4b0d5e87f91"
+            "sha256": "d47efa1bc6aed426cb5cca7d0c5395843d9ebe99597d9382135f8afbfe5e554a",
+            "size": 5769008,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hd47efa1bc6aed426cb5cca7d0c5395843d9ebe99597d9382135f8afbfe5e554a.tgz",
+            "archiveSize": 4533424,
+            "archiveSha256": "62b5013f5b29776fe699f6e0cf6465cadbae965ec03a702b8481bc719a983f90"
           },
           {
             "sha256": "641ba77a852ed34cc497714672d9d26250796f736f4df1a6b5ca196c6d7c9bfa",
@@ -859,11 +859,11 @@
             "archiveSha256": "eb3f18bd55a152598f8d6b8325f21c3e2e6f82f937c5e8f29d2b7d5c758f075a"
           },
           {
-            "sha256": "2b7dbeeee52216216a3a12fed0086451c5f7941bbb982ab46724855035742535",
-            "size": 5920256,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h2b7dbeeee52216216a3a12fed0086451c5f7941bbb982ab46724855035742535.tgz",
-            "archiveSize": 1995643,
-            "archiveSha256": "32b46cbd4ab442c603cfb38a777b15ff2b7708dd6263ced3109fa4180f719014"
+            "sha256": "b2593d5d8c1e3fdb53ef446121af11f261cdc4cf8605868a9ae348e34df4bcef",
+            "size": 5942272,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hb2593d5d8c1e3fdb53ef446121af11f261cdc4cf8605868a9ae348e34df4bcef.tgz",
+            "archiveSize": 2001323,
+            "archiveSha256": "b11a13e8cb1bba05f78908f9026247a83c623c422672a4153ab91decbcd6d0b6"
           },
           {
             "sha256": "6d72766b19ebd5e4aae33b6d57b22f07b10cb83bc080f7596bfdd834675dfbc6",
@@ -887,11 +887,11 @@
             "archiveSha256": "39f25e55411d144f5cea0f7b1842f48eabc3de2983ce26bd8d2e19175abbd312"
           },
           {
-            "sha256": "04c55d07fe77a520fa1e38854ef22e7de16b82b5ebe0b4a1bc3d0c9c8401642a",
-            "size": 34144141,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h04c55d07fe77a520fa1e38854ef22e7de16b82b5ebe0b4a1bc3d0c9c8401642a.tgz",
-            "archiveSize": 27842573,
-            "archiveSha256": "6ef33668abfbc4c92e21bbe313b58d17b63db5d7c2e861f5bfff639948437afe"
+            "sha256": "40de87acec8f30d6a282b5d7d90f7c9afa8314fe936e456340eb21372d700510",
+            "size": 34148749,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h40de87acec8f30d6a282b5d7d90f7c9afa8314fe936e456340eb21372d700510.tgz",
+            "archiveSize": 27842671,
+            "archiveSha256": "c89125ab38d07a4857e544bbdaf051cae32eab0126c1185b47d5c8aabdae5e37"
           },
           {
             "sha256": "e80bff562bb79507e555d21bac0d844f17994b47b5bad12409a0046df9de72cd",
@@ -934,17 +934,106 @@
     "provenance": {
       "darwin-arm64": {
         "kind": "verified-own-overlay-upgrade",
-        "sourceVersion": "0.3.1",
+        "sourceVersion": "0.5.0",
         "upgradeNpmUpdater": true,
-        "incrementalTransport": "canonical-tar-cdc-v1",
-        "windowsIcon": "windows-blue-w"
+        "firstToolBootstrap": "automatic-relaunch"
       },
       "win32-x64": {
         "kind": "verified-own-overlay-upgrade",
-        "sourceVersion": "0.3.1",
+        "sourceVersion": "0.5.0",
         "upgradeNpmUpdater": true,
-        "incrementalTransport": "canonical-tar-cdc-v1",
-        "windowsIcon": "windows-blue-w"
+        "firstToolBootstrap": "automatic-relaunch"
+      }
+    },
+    "runtimes": {
+      "schema": 1,
+      "version": "node24.22.0-python3.12.15-r1",
+      "platforms": {
+        "darwin-arm64": {
+          "node": {
+            "entry": "node-v24.22.0-darwin-arm64",
+            "format": "tar.gz",
+            "size": 53049576,
+            "sha256": "6a9724d9b50a5f22b4816cded441b5a8d9ddae546191a5e5b7efa5a5e2ee26d5",
+            "parts": [
+              {
+                "sha256": "949aea7a152b116e84670a7b771614bcea487f587a581e0d1a120928e9ab0221",
+                "size": 33554432,
+                "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h949aea7a152b116e84670a7b771614bcea487f587a581e0d1a120928e9ab0221.tgz",
+                "archiveSize": 33512749,
+                "archiveSha256": "5f3bbf063aa3d82e32ba0499e46123822d7148542101aee2d019929190c196c2"
+              },
+              {
+                "sha256": "4cac86c2c3bad12d3402c7cd52ce002dcf222ebb3db964d1cbc5042b433aab59",
+                "size": 19495144,
+                "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h4cac86c2c3bad12d3402c7cd52ce002dcf222ebb3db964d1cbc5042b433aab59.tgz",
+                "archiveSize": 19133414,
+                "archiveSha256": "643fb96788aef65d2a7adb81e1df6e55d963364b34837e152167282843818172"
+              }
+            ]
+          },
+          "python": {
+            "entry": "python",
+            "format": "tar.gz",
+            "size": 25180390,
+            "sha256": "ba32036ad8f4c434d97a1ee7feef8b7edc0fac16777639b97e39c74a108e4440",
+            "parts": [
+              {
+                "sha256": "ba32036ad8f4c434d97a1ee7feef8b7edc0fac16777639b97e39c74a108e4440",
+                "size": 25180390,
+                "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hba32036ad8f4c434d97a1ee7feef8b7edc0fac16777639b97e39c74a108e4440.tgz",
+                "archiveSize": 25107923,
+                "archiveSha256": "503f5667f2d6fa6950438764f0ac29e413e3080bfcfe83b295b6c74c2c15163e"
+              }
+            ]
+          }
+        },
+        "win32-x64": {
+          "node": {
+            "entry": "node-v24.22.0-win-x64",
+            "format": "zip",
+            "size": 37733703,
+            "sha256": "f9683a19877e12a9b167305c8db71040d812876359de21f0d2e97c3f321f80c3",
+            "parts": [
+              {
+                "sha256": "94c14ce1eeda03b3b96bd4ea01346bf43b21e70efbc5b25adaba94fda2b85906",
+                "size": 33554432,
+                "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h94c14ce1eeda03b3b96bd4ea01346bf43b21e70efbc5b25adaba94fda2b85906.tgz",
+                "archiveSize": 33182230,
+                "archiveSha256": "72c783c0db418be6745f13f1c824b00314eec2d534c9b1913cc58b6c0524a9ce"
+              },
+              {
+                "sha256": "84cf2122a4133990d5f24187fecab4e1c8137bc71b37e6289cbf3aa68118839d",
+                "size": 4179271,
+                "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h84cf2122a4133990d5f24187fecab4e1c8137bc71b37e6289cbf3aa68118839d.tgz",
+                "archiveSize": 3550650,
+                "archiveSha256": "93768d0020e6ab5be47b5c841bcba0e4d3feebbcc5b07e2378309239d1a3e186"
+              }
+            ]
+          },
+          "python": {
+            "entry": "python",
+            "format": "tar.gz",
+            "size": 46390009,
+            "sha256": "bbc902d4d187ac4914915bf538196a064b49109a33a104965b5164ced5b80a1e",
+            "parts": [
+              {
+                "sha256": "69b8bc6e8da423ec63f0b80af3c43a1c10efad679fa3a6c875bf33f0373ab201",
+                "size": 33554432,
+                "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h69b8bc6e8da423ec63f0b80af3c43a1c10efad679fa3a6c875bf33f0373ab201.tgz",
+                "archiveSize": 33403996,
+                "archiveSha256": "2b124ed954113cd681b37e442539c6cc8daee7e2a96724c76e94b86418da7e4d"
+              },
+              {
+                "sha256": "94972a77f8080d4b9e5094d5ac42a1e3d7cfce1c7b2dcd804b43e02f4133d885",
+                "size": 12835577,
+                "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h94972a77f8080d4b9e5094d5ac42a1e3d7cfce1c7b2dcd804b43e02f4133d885.tgz",
+                "archiveSize": 12811675,
+                "archiveSha256": "38cffc9d4a50f51d0dc333aca4e7065f12721a200bfc20f5e01ac24e44ae9e2d"
+              }
+            ]
+          }
+        }
       }
     }
   }

package/release.json

@@ -1,13 +1,13 @@
 {
   "schema": 2,
   "repository": "petercjl/codex-own",
-  "version": "0.4.1",
+  "version": "0.5.1",
   "platforms": {
     "darwin-arm64": {
       "entry": "codex-own.app",
       "transport": "canonical-tar-cdc-v1",
-      "size": 2045490688,
-      "sha256": "6c299eccf14ed95f106bd13d42033760254610fbe16ced9018dcc17e77d2911b",
+      "size": 2045519872,
+      "sha256": "6ceef71b166b31dfe8295258c336bb2dddd01cbf7cbd6355de5c16178cd2749d",
       "parts": [
         {
           "sha256": "f7950fe492a347a0e74528f4f73472052fc43d5155f32f92481fc96c3cc6ce95",
@@ -45,11 +45,11 @@
           "archiveSha256": "1697a11a56260838efd2bb2f0d95767540c7154ad85c274f86b23a1baddf8d7c"
         },
         {
-          "sha256": "e081208d5cdc77baaae34525949efb2c375e9899462cf7a3ee8297d43831d8ba",
+          "sha256": "61f22cc033b97a745f8afd40e750591cf00df08a9454c54ca924e89061eef41f",
           "size": 46558388,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.he081208d5cdc77baaae34525949efb2c375e9899462cf7a3ee8297d43831d8ba.tgz",
-          "archiveSize": 13975146,
-          "archiveSha256": "11827b2a0ee79e518481167fd0863f079cc7789f562137c3a7d6fa4aa7aab4e4"
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h61f22cc033b97a745f8afd40e750591cf00df08a9454c54ca924e89061eef41f.tgz",
+          "archiveSize": 13975144,
+          "archiveSha256": "acf70e99c7cea6c10007035aa7d8509457b7cc73d9378f5f5dc7ae42152726d0"
         },
         {
           "sha256": "e09427abf6b00a3719b916121a734361209e637eefe8dff4ee5736dde2ac8751",
@@ -73,18 +73,18 @@
           "archiveSha256": "25db0027db503c12230d346ec500d01ba53880069164eeb0020da829dcff6c8f"
         },
         {
-          "sha256": "15d483fbc670a0d6225766dafaba4788d08d9acb6394525d58d9a114674f3f72",
+          "sha256": "d30e0f5e5bdd6a27a5f8d12a3272a94aaa47dccae8b58036dc3b162dac4b7e61",
           "size": 26327040,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h15d483fbc670a0d6225766dafaba4788d08d9acb6394525d58d9a114674f3f72.tgz",
-          "archiveSize": 8466879,
-          "archiveSha256": "a749c1777b6a11ea75cddcb0bc40b8cb9afd8d16e861dd0f9ccee021aa6f08a4"
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hd30e0f5e5bdd6a27a5f8d12a3272a94aaa47dccae8b58036dc3b162dac4b7e61.tgz",
+          "archiveSize": 8466868,
+          "archiveSha256": "5e19777e583abc273553db5c8c9808b098085cc2ec319ae5cd8def73bd923f24"
         },
         {
-          "sha256": "09aa46003472eb0128ee1a4bfdc915e00a300cd18d772998e0bf36ea9adefa62",
-          "size": 20032650,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h09aa46003472eb0128ee1a4bfdc915e00a300cd18d772998e0bf36ea9adefa62.tgz",
-          "archiveSize": 5138658,
-          "archiveSha256": "6f41a2d0a912ede983633efb23f47cb943d1a1fe27bd67b39300d402a87c6260"
+          "sha256": "9b44de3ecc70850eccbb992540cfd1b9b14ab2bfa042bbee072bcbebbe7a1338",
+          "size": 20033661,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h9b44de3ecc70850eccbb992540cfd1b9b14ab2bfa042bbee072bcbebbe7a1338.tgz",
+          "archiveSize": 5138668,
+          "archiveSha256": "9149d9c8394d1cb9770861460b52815481409a9cd39c935cbf3497171b858128"
         },
         {
           "sha256": "432172d98e9f5fb2d7a7e41036c0d36f3c405203e2e612c0706ec2440bd50044",
@@ -164,11 +164,11 @@
           "archiveSha256": "4193df135e7180f6fc32a0fd9fa1cef6b1ee90e3bfd437cf9d7a7c2c82a23310"
         },
         {
-          "sha256": "90a418d1a8baa1f2bf8fee848e05ff10162144689a46a6860680db0a6801a764",
-          "size": 5769306,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h90a418d1a8baa1f2bf8fee848e05ff10162144689a46a6860680db0a6801a764.tgz",
-          "archiveSize": 4533432,
-          "archiveSha256": "1ee70e0376d1db00ea958c3194136940d54075e27cf56742c4778beb365892fa"
+          "sha256": "ff1233b968d63b1329b76402e82b689f0d0a46f1f6127107a1a05b181163118e",
+          "size": 5769319,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hff1233b968d63b1329b76402e82b689f0d0a46f1f6127107a1a05b181163118e.tgz",
+          "archiveSize": 4533434,
+          "archiveSha256": "6be6ad10c5bc084261686bb6f498abbd0fa637180d933b9a5a8c3af5a66a2b8d"
         },
         {
           "sha256": "2c7b16b63b93ce10c381c512543fadd21e65ec8b5b499e68cf7e6b9905e4ef09",
@@ -339,11 +339,11 @@
           "archiveSha256": "7cdf4ba6de25f51905fac22b7079c52464a4c06b4a9bb39af20121f29e1261a2"
         },
         {
-          "sha256": "2b2a46d3f39371c916e81154f668291a6dd9c37ab2ce000b1c636ae6ffa57945",
-          "size": 59450880,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h2b2a46d3f39371c916e81154f668291a6dd9c37ab2ce000b1c636ae6ffa57945.tgz",
-          "archiveSize": 26333973,
-          "archiveSha256": "c882c2e80d039808850674b3d1643d0212a75ee8d769cb30de75e3e8869669d6"
+          "sha256": "bf0ecb90c4a398ce1bf67b04c2cd43a1b21e8c995f0ebf6b2790187b9c9a7edd",
+          "size": 59472896,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hbf0ecb90c4a398ce1bf67b04c2cd43a1b21e8c995f0ebf6b2790187b9c9a7edd.tgz",
+          "archiveSize": 26339649,
+          "archiveSha256": "281d76c73c4e3326535729045ad0198905d92ef38c7e2b2b984c7b7350af6b6e"
         },
         {
           "sha256": "7160a34ddbb6db8a2296686a530bb99f78cb8803027cbb32fb76aa9ed2222355",
@@ -360,11 +360,11 @@
           "archiveSha256": "783256484f3f6dfc99561fe6680100f457b5acf0e845a8824a9b8a94c6518b1e"
         },
         {
-          "sha256": "273c28c983e5709b06ef410a0695846b6ca407cf93abf90aacd81eeb79d96734",
-          "size": 35845005,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h273c28c983e5709b06ef410a0695846b6ca407cf93abf90aacd81eeb79d96734.tgz",
-          "archiveSize": 29375784,
-          "archiveSha256": "2eacfba0fcdb4044088fadba88d57aada93ca250d536e699960f57e6e9a78677"
+          "sha256": "3ab3b4e037c73a5c8372185f95e53cfa3d896b0e0ad83f22e0ba03930a6c6a12",
+          "size": 35849613,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h3ab3b4e037c73a5c8372185f95e53cfa3d896b0e0ad83f22e0ba03930a6c6a12.tgz",
+          "archiveSize": 29376983,
+          "archiveSha256": "238a4fa5b80e3a066b6e4ad279e7345e6e5f2b6b8fa9f9b479b01285a3405bad"
         },
         {
           "sha256": "20604d70f3b62c4f011cc6fcf2215c5b21005cf31ff27e7e8c0a31af21c46c37",
@@ -388,19 +388,19 @@
           "archiveSha256": "988c7e1746e5237643195824ef5f1193e03998135de90a5ae0c33e105b450f5f"
         },
         {
-          "sha256": "7b5bbcf781bd880525c52f1ec8166189292ecf694903d54904b74ce1b2a90b45",
-          "size": 1764864,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h7b5bbcf781bd880525c52f1ec8166189292ecf694903d54904b74ce1b2a90b45.tgz",
-          "archiveSize": 355467,
-          "archiveSha256": "a10577274aa7ce96df453bd8e5acc865b74b70a1948c8adb080062a7051e6b22"
+          "sha256": "2cb194bbeda7df041b482386d4c61d512994b84dc4baa76df73985942cff7366",
+          "size": 1766400,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h2cb194bbeda7df041b482386d4c61d512994b84dc4baa76df73985942cff7366.tgz",
+          "archiveSize": 355805,
+          "archiveSha256": "9b5d0900872c202813608df4e3558a82b14eafa28bde964fdf488cea8d7539b7"
         }
       ]
     },
     "win32-x64": {
       "entry": "app",
       "transport": "canonical-tar-cdc-v1",
-      "size": 2424525312,
-      "sha256": "a0e46980fce8922c7ac407651f5d7660f71619669e70a72ede26ddbefe1bcd6b",
+      "size": 2424552960,
+      "sha256": "eaef194c566bdf33238cc85fcca3ac88924efac107d85acbed92cb7c28625f65",
       "parts": [
         {
           "sha256": "75e7eeb9ec280f24305ca34c3a22539c26616b4fb74cb89ac5436ed62390d31d",
@@ -473,11 +473,11 @@
           "archiveSha256": "00624b63deb580eaa1f50528d963c34871c5d650bc704fed498dbedb44a832a4"
         },
         {
-          "sha256": "5a8008e622b5ac2a574a8ee1f0ea18a1d4ba02375cf4bbe56f58b1f43a408c9f",
+          "sha256": "94c67bc06de1d41fc2ef15a8f13084070637c48afa45b88f65d5338e3a4733ed",
           "size": 23890432,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h5a8008e622b5ac2a574a8ee1f0ea18a1d4ba02375cf4bbe56f58b1f43a408c9f.tgz",
-          "archiveSize": 11339427,
-          "archiveSha256": "951fd051ba248b2eb7ec8fe4e57fa09797ea4c8d622806ca7844ad3ab4603676"
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h94c67bc06de1d41fc2ef15a8f13084070637c48afa45b88f65d5338e3a4733ed.tgz",
+          "archiveSize": 11339437,
+          "archiveSha256": "5306b9fa30dde73a6a6c376da4d62b42c4586798d18d3a51103b981c0098b77d"
         },
         {
           "sha256": "723a5e60c1066bd5ba6e387fae972124a6f8f1726d7ba1bdb273aa620b62726f",
@@ -508,11 +508,11 @@
           "archiveSha256": "893d020e3aa46399d3f91f0212b66a47c42e7a03bc1072b76dbe22224d00b9f7"
         },
         {
-          "sha256": "66d07a8b7caf21d15e0741ea08c6378ff241cf9be0809ac437e1da6e3f5bcc84",
-          "size": 24783138,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h66d07a8b7caf21d15e0741ea08c6378ff241cf9be0809ac437e1da6e3f5bcc84.tgz",
-          "archiveSize": 6289325,
-          "archiveSha256": "c0be6a6a77d803e7d51c5d18fa78c2becfcc5035ee5761323984d129d3895e8b"
+          "sha256": "007c6c48ecb83a528c06de0e5686f9e406fb78c714c6e513cbc19184df6bf825",
+          "size": 24784186,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h007c6c48ecb83a528c06de0e5686f9e406fb78c714c6e513cbc19184df6bf825.tgz",
+          "archiveSize": 6289351,
+          "archiveSha256": "10d50695aad87cff4305ab9e0455b726e2467a662d3f50b3f362c7d372f95c1f"
         },
         {
           "sha256": "8209fa7ff4208fabdc6143ddce15132d60abdfe5123505704b70c2bcb9be6394",
@@ -592,11 +592,11 @@
           "archiveSha256": "08144618dc5dafba20b37e708ff2b11950486eb02666b31bbf7c28398855edf6"
         },
         {
-          "sha256": "f637d96b0a0dfca34c1e5278317e99b4710731a4a7950fdedd47609cf8440f14",
-          "size": 5769032,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hf637d96b0a0dfca34c1e5278317e99b4710731a4a7950fdedd47609cf8440f14.tgz",
-          "archiveSize": 4533426,
-          "archiveSha256": "d3dca4b7e4c20e83cd86264ff7d7c1f07edae25561c34f60747db4b0d5e87f91"
+          "sha256": "d47efa1bc6aed426cb5cca7d0c5395843d9ebe99597d9382135f8afbfe5e554a",
+          "size": 5769008,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hd47efa1bc6aed426cb5cca7d0c5395843d9ebe99597d9382135f8afbfe5e554a.tgz",
+          "archiveSize": 4533424,
+          "archiveSha256": "62b5013f5b29776fe699f6e0cf6465cadbae965ec03a702b8481bc719a983f90"
         },
         {
           "sha256": "641ba77a852ed34cc497714672d9d26250796f736f4df1a6b5ca196c6d7c9bfa",
@@ -816,11 +816,11 @@
           "archiveSha256": "eb3f18bd55a152598f8d6b8325f21c3e2e6f82f937c5e8f29d2b7d5c758f075a"
         },
         {
-          "sha256": "2b7dbeeee52216216a3a12fed0086451c5f7941bbb982ab46724855035742535",
-          "size": 5920256,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h2b7dbeeee52216216a3a12fed0086451c5f7941bbb982ab46724855035742535.tgz",
-          "archiveSize": 1995643,
-          "archiveSha256": "32b46cbd4ab442c603cfb38a777b15ff2b7708dd6263ced3109fa4180f719014"
+          "sha256": "b2593d5d8c1e3fdb53ef446121af11f261cdc4cf8605868a9ae348e34df4bcef",
+          "size": 5942272,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hb2593d5d8c1e3fdb53ef446121af11f261cdc4cf8605868a9ae348e34df4bcef.tgz",
+          "archiveSize": 2001323,
+          "archiveSha256": "b11a13e8cb1bba05f78908f9026247a83c623c422672a4153ab91decbcd6d0b6"
         },
         {
           "sha256": "6d72766b19ebd5e4aae33b6d57b22f07b10cb83bc080f7596bfdd834675dfbc6",
@@ -844,11 +844,11 @@
           "archiveSha256": "39f25e55411d144f5cea0f7b1842f48eabc3de2983ce26bd8d2e19175abbd312"
         },
         {
-          "sha256": "04c55d07fe77a520fa1e38854ef22e7de16b82b5ebe0b4a1bc3d0c9c8401642a",
-          "size": 34144141,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h04c55d07fe77a520fa1e38854ef22e7de16b82b5ebe0b4a1bc3d0c9c8401642a.tgz",
-          "archiveSize": 27842573,
-          "archiveSha256": "6ef33668abfbc4c92e21bbe313b58d17b63db5d7c2e861f5bfff639948437afe"
+          "sha256": "40de87acec8f30d6a282b5d7d90f7c9afa8314fe936e456340eb21372d700510",
+          "size": 34148749,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h40de87acec8f30d6a282b5d7d90f7c9afa8314fe936e456340eb21372d700510.tgz",
+          "archiveSize": 27842671,
+          "archiveSha256": "c89125ab38d07a4857e544bbdaf051cae32eab0126c1185b47d5c8aabdae5e37"
         },
         {
           "sha256": "e80bff562bb79507e555d21bac0d844f17994b47b5bad12409a0046df9de72cd",
@@ -891,17 +891,106 @@
   "provenance": {
     "darwin-arm64": {
       "kind": "verified-own-overlay-upgrade",
-      "sourceVersion": "0.3.1",
+      "sourceVersion": "0.5.0",
       "upgradeNpmUpdater": true,
-      "incrementalTransport": "canonical-tar-cdc-v1",
-      "windowsIcon": "windows-blue-w"
+      "firstToolBootstrap": "automatic-relaunch"
     },
     "win32-x64": {
       "kind": "verified-own-overlay-upgrade",
-      "sourceVersion": "0.3.1",
+      "sourceVersion": "0.5.0",
       "upgradeNpmUpdater": true,
-      "incrementalTransport": "canonical-tar-cdc-v1",
-      "windowsIcon": "windows-blue-w"
+      "firstToolBootstrap": "automatic-relaunch"
+    }
+  },
+  "runtimes": {
+    "schema": 1,
+    "version": "node24.22.0-python3.12.15-r1",
+    "platforms": {
+      "darwin-arm64": {
+        "node": {
+          "entry": "node-v24.22.0-darwin-arm64",
+          "format": "tar.gz",
+          "size": 53049576,
+          "sha256": "6a9724d9b50a5f22b4816cded441b5a8d9ddae546191a5e5b7efa5a5e2ee26d5",
+          "parts": [
+            {
+              "sha256": "949aea7a152b116e84670a7b771614bcea487f587a581e0d1a120928e9ab0221",
+              "size": 33554432,
+              "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h949aea7a152b116e84670a7b771614bcea487f587a581e0d1a120928e9ab0221.tgz",
+              "archiveSize": 33512749,
+              "archiveSha256": "5f3bbf063aa3d82e32ba0499e46123822d7148542101aee2d019929190c196c2"
+            },
+            {
+              "sha256": "4cac86c2c3bad12d3402c7cd52ce002dcf222ebb3db964d1cbc5042b433aab59",
+              "size": 19495144,
+              "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h4cac86c2c3bad12d3402c7cd52ce002dcf222ebb3db964d1cbc5042b433aab59.tgz",
+              "archiveSize": 19133414,
+              "archiveSha256": "643fb96788aef65d2a7adb81e1df6e55d963364b34837e152167282843818172"
+            }
+          ]
+        },
+        "python": {
+          "entry": "python",
+          "format": "tar.gz",
+          "size": 25180390,
+          "sha256": "ba32036ad8f4c434d97a1ee7feef8b7edc0fac16777639b97e39c74a108e4440",
+          "parts": [
+            {
+              "sha256": "ba32036ad8f4c434d97a1ee7feef8b7edc0fac16777639b97e39c74a108e4440",
+              "size": 25180390,
+              "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hba32036ad8f4c434d97a1ee7feef8b7edc0fac16777639b97e39c74a108e4440.tgz",
+              "archiveSize": 25107923,
+              "archiveSha256": "503f5667f2d6fa6950438764f0ac29e413e3080bfcfe83b295b6c74c2c15163e"
+            }
+          ]
+        }
+      },
+      "win32-x64": {
+        "node": {
+          "entry": "node-v24.22.0-win-x64",
+          "format": "zip",
+          "size": 37733703,
+          "sha256": "f9683a19877e12a9b167305c8db71040d812876359de21f0d2e97c3f321f80c3",
+          "parts": [
+            {
+              "sha256": "94c14ce1eeda03b3b96bd4ea01346bf43b21e70efbc5b25adaba94fda2b85906",
+              "size": 33554432,
+              "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h94c14ce1eeda03b3b96bd4ea01346bf43b21e70efbc5b25adaba94fda2b85906.tgz",
+              "archiveSize": 33182230,
+              "archiveSha256": "72c783c0db418be6745f13f1c824b00314eec2d534c9b1913cc58b6c0524a9ce"
+            },
+            {
+              "sha256": "84cf2122a4133990d5f24187fecab4e1c8137bc71b37e6289cbf3aa68118839d",
+              "size": 4179271,
+              "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h84cf2122a4133990d5f24187fecab4e1c8137bc71b37e6289cbf3aa68118839d.tgz",
+              "archiveSize": 3550650,
+              "archiveSha256": "93768d0020e6ab5be47b5c841bcba0e4d3feebbcc5b07e2378309239d1a3e186"
+            }
+          ]
+        },
+        "python": {
+          "entry": "python",
+          "format": "tar.gz",
+          "size": 46390009,
+          "sha256": "bbc902d4d187ac4914915bf538196a064b49109a33a104965b5164ced5b80a1e",
+          "parts": [
+            {
+              "sha256": "69b8bc6e8da423ec63f0b80af3c43a1c10efad679fa3a6c875bf33f0373ab201",
+              "size": 33554432,
+              "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h69b8bc6e8da423ec63f0b80af3c43a1c10efad679fa3a6c875bf33f0373ab201.tgz",
+              "archiveSize": 33403996,
+              "archiveSha256": "2b124ed954113cd681b37e442539c6cc8daee7e2a96724c76e94b86418da7e4d"
+            },
+            {
+              "sha256": "94972a77f8080d4b9e5094d5ac42a1e3d7cfce1c7b2dcd804b43e02f4133d885",
+              "size": 12835577,
+              "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h94972a77f8080d4b9e5094d5ac42a1e3d7cfce1c7b2dcd804b43e02f4133d885.tgz",
+              "archiveSize": 12811675,
+              "archiveSha256": "38cffc9d4a50f51d0dc333aca4e7065f12721a200bfc20f5e01ac24e44ae9e2d"
+            }
+          ]
+        }
+      }
     }
   }
 }

package/skills/codex-own/SKILL.md

@@ -20,6 +20,20 @@ For installation-only acceptance, verify doctor, version, target and shortcut wi
 
 Desktop builds with the bundled npm updater check stable latest 15 seconds after startup and every six hours. The user-facing menu is 更新 → 检查 codex-own 更新…. Download runs while the app remains usable; 重启并安装 asks the user to end active tasks, then an independent helper waits for exit, backs up and replaces the app. The helper uses bundled Node and npm payloads, so daily in-app updates do not require updating global npm tooling. Inspect the installed app's own updater version separately from the global CLI version. Retain CLI step 3 for older builds and recovery. Prepared, verified downloads survive restarts; offline checks preserve the current installation. Install logs and unique result records live under the independent manager directory; never delete locks to bypass a failed update.
 
+## Private tool runtime (contract 1)
+
+Desktop installations from 0.5.0 include a separately versioned Node/npm/Python toolchain. The manager's release manifest pins verified npm payloads for macOS ARM64 and Windows x64. Install/update ensures these tools before switching the app. Runtime bytes retain upstream licenses and contain no user configuration. The initial npm manager bootstrap still requires existing Node.js 22+; ordinary app updates use the bundled updater.
+
+When migrating through a 0.4.x in-app updater, the new desktop's async startup gate downloads and verifies its pinned tools from npm before loading the desktop backend. A progress window supports cancellation and retry; no system Node/npm/Python is required for this migration. Inspect unique `logs/runtime-bootstrap-*.log` files if preparation fails. An installed valid runtime allows offline startup without a registry check.
+
+Use `codex-own runtime doctor` to discover the actual version and executable paths. Use `runtime env` for a sanitized JSON environment contract; it returns only tool settings, never inherited credentials. `runtime run -- node|npm|npx|python|python3|pip [args]` executes the selected private tool and propagates its exit status. Do not infer availability from system PATH, Windows App Execution Aliases or Start-menu Python groups. The app reapplies its private environment after importing the login shell.
+
+On macOS, the runtime owns its task-only `ZDOTDIR` and `BASH_ENV` startup files. Login shells retain private tool precedence without editing the user's profiles. Verify paths through the backend's actual command execution, including login zsh/Bash, rather than checking only the parent process PATH. Project activation inside a task can explicitly select its own venv or toolchain.
+
+For authorized installation or update, use `runtime install --yes` or `runtime update --yes`. Immutable versions are stored below the independent data root's `runtimes/versions`, with `active.json` recording the active version and predecessor. Updates keep the old version; already running processes keep their prior paths until restart. `runtime rollback --yes` verifies and reactivates the predecessor without restoring conversation data. BUSY and interrupted staging require inspecting the lock/process and receipts, not deleting state blindly. RUNTIME_VERSION_EXISTS preserves an unexpected existing target for diagnosis. Failed verification leaves the old active receipt unchanged.
+
+Tools own their npm prefix/cache and pip cache; no user/system PATH, shell profile or original Codex runtime is modified. Project npm dependencies belong in project `node_modules`; Python dependencies belong in the project's `.venv`, created with the private Python. pip requires a virtual environment, so use its Python executable with `-m pip` after creating the venv. A project explicitly selecting another interpreter remains an explicit caller choice. Additional Git, compilers and office/media libraries are separate dependencies, not guaranteed by this toolchain. Never copy the original Codex cached runtime or account files to fill a missing dependency.
+
 ## Recovery and boundaries
 
 - APP_RUNNING: request or perform authorized graceful exit, then return to step 3.