@petercjl/codex-own 0.6.2 → 0.6.4

package/README.md

@@ -40,8 +40,24 @@ Windows 桌面在启动 Agent 会话时自动检测并验证系统安装的 Git
 
 带有 npm 更新组件的桌面版本会在启动 15 秒后、以及运行期间每 6 小时检查稳定版。也可以打开菜单“更新 → 检查 codex-own 更新…”。发现新版后点击“下载更新”，下载期间可以继续使用 App。下载完成后结束正在运行的任务，点击“重启并安装”；更新进程会等待 App 退出，备份程序及独立数据，再安装并重新打开。
 
+从 0.6.3 起，Mac 菜单栏和 Windows 标题栏的独立“更新”入口会显示提醒：`更新 ↓` 表示有新版可下载，`更新 ✓` 表示已下载、等待重启安装。提醒在关闭更新窗口后保留；菜单重建或 Windows 窗口重新加载后继续显示。自动检查仅在应用运行时进行，下载和重启安装由用户确认。
+
 日常应用内更新使用随 App 交付的更新组件，无需手动更新全局 npm 管理工具。API Key、配置、对话和语言偏好会保留。断网时当前 App 保持可用；下载失败可以重试，已校验分片会复用；已准备好的更新会在下次打开时恢复。旧版本首次升级到带更新组件的版本，以及故障恢复，可以使用下文的终端更新命令。
 
+## 更新后的自动清理
+
+从桌面 0.6.4 起，主界面加载并持续正常运行 30 秒后，codex-own 会确认当前受管理版本，再自动清理已成功安装的完整归档和已退出的更新助手。升级前的程序及配置/对话快照成套保留最近一次完整回滚，更早且有成功事务记录的备份会回收。当前应用、密钥、配置、对话、独立 Node/npm/Python 运行时及手动备份保持完整。
+
+已校验分片缓存默认上限为 2 GiB，优先回收长期未使用的分片；待安装或失败更新需要的分片受保护，期间可能暂时超过上限。无法识别的目录、未完成事务、被占用文件和不完整的回滚资料会保留。清理异常不影响当前应用及正常更新；“更新”窗口会显示本次启动回收的空间。清理计划、结果和启动确认记录各保留最近 20 条。
+
+可直接发给 Agent：
+
+> 请检查 codex-own 的更新文件占用，并预览自动清理范围和保留的回滚备份。
+
+> 请通过 @petercjl/codex-own 清理已用完的更新文件和更旧的受管理备份，保留最近一次完整回滚。
+
+开发者入口：`codex-own cleanup plan` 只读预览；`codex-own cleanup run --yes` 按相同策略执行。`--cache-limit-mib <0..16384>` 可指定本次清理的缓存上限。清理需要当前桌面已记录成功启动；仅升级 npm 管理工具不会产生这份启动证明。清理使用安装操作锁，原版 Codex 和系统/npm 全局缓存不在范围内。
+
 ## 增量下载
 
 从 0.4.0 起，更新前会扫描已安装的 codex-own 程序，复用与新版相同的内容块，只从 npm 下载缺少的块。支持跳过版本；首次安装仍下载完整资源。进度会显示“复用多少块、需要下载多少 MiB、全量多少 MiB”，结果中的 `transfer` 保留这些统计。少量代码改动通常只影响部分块；上游引擎、大型二进制或签名资源变化时，下载量会相应增加。

package/bin/codex-own.mjs

@@ -6,16 +6,23 @@ import {pkg,packageRoot,read,fail,paths,doctor,latest,state,install,launch,rollb
 import {manifestFor} from '../lib/manager.mjs';
 import {installRuntime,runtimeDoctor,rollbackRuntime,runRuntime,toolEnv} from '../lib/tool-runtime.mjs';
 import {components} from '../lib/binding.mjs';
+import {planCleanup,runCleanup} from '../lib/cleanup.mjs';
 const args=process.argv.slice(2),[command,sub]=args;
 const flag=n=>args.includes('--'+n),value=n=>{const i=args.indexOf('--'+n);return i<0?undefined:args[i+1];};
 const yes=()=>{if(!flag('yes'))fail('CONFIRMATION_REQUIRED','Mutating commands require --yes');};
 function toolSelectionGate(){const p=paths();if(!state(p))return;const file=path.join(p.target,process.platform==='darwin'?'Contents/Resources':'resources','own-updater','desktop-version.json'),meta=fs.existsSync(file)?read(file):null;if(meta?.updaterContract!==2||meta.runtimeContract!==1)fail('INCOMPATIBLE_BINDING','Upgrade the desktop to component contract 2 before independently changing its tools');}
 async function skill(){const source=path.join(packageRoot,'skills','codex-own');if(sub==='source')return {ok:true,source,version:pkg.version};const agent=value('agent')||'codex';if(!['codex','sealseek'].includes(agent))fail('UNSUPPORTED_AGENT',agent);const base=value('target-root')||(agent==='codex'?path.join(os.homedir(),'.codex','skills'):null);if(!base)fail('TARGET_REQUIRED','Provide the configured Agent skill root with --target-root');const dest=path.join(base,'codex-own'),marker=path.join(dest,'.codex-own-managed.json');rejectLinks(base);rejectLinks(dest);const exists=fs.existsSync(dest);const owned=exists&&fs.existsSync(marker)&&read(marker).package===pkg.name;const srcHash=hash(fs.readFileSync(path.join(source,'SKILL.md')));if(sub==='status')return {ok:true,source,destination:dest,installed:exists,managed:owned,current:owned&&hash(fs.readFileSync(path.join(dest,'SKILL.md')))===srcHash};if(!['install','update'].includes(sub))fail('INVALID_COMMAND','skill source/status/install/update');yes();if(exists&&!owned)fail('UNMANAGED_TARGET','Existing skill is not managed');let backup=null;if(exists){backup=dest+'.backup-'+Date.now();fs.cpSync(dest,backup,{recursive:true,force:false,errorOnExist:true});}fs.mkdirSync(dest,{recursive:true});const ui=path.join(dest,'agents','openai.yaml'),customUI=fs.existsSync(ui)?fs.readFileSync(ui):null;fs.cpSync(source,dest,{recursive:true});if(customUI)fs.writeFileSync(ui,customUI);fs.writeFileSync(marker,JSON.stringify({package:pkg.name,version:pkg.version,hash:srcHash}));if(hash(fs.readFileSync(path.join(dest,'SKILL.md')))!==srcHash)fail('VERIFY_FAILED','Skill copy mismatch');return {ok:true,source,destination:dest,backup,version:pkg.version};}
 async function main(){
- if(!command||command==='help'||command==='--help')return {commands:['version','capabilities','doctor','install --yes [--adopt]','configure --api-key-file <file> --yes','update check','update install --yes','runtime install|update|doctor|env|run|rollback','launch','rollback --restore-data --yes','skill source|status|install|update'],note:'Application data and private tools remain outside npm manager packages. Quit the app before desktop updates. Manager, desktop and tool runtime versions are reported separately.'};
+ if(!command||command==='help'||command==='--help')return {commands:['version','capabilities','doctor','install --yes [--adopt]','configure --api-key-file <file> --yes','update check','update install --yes','cleanup plan [--cache-limit-mib <0..16384>]','cleanup run --yes [--cache-limit-mib <0..16384>]','runtime install|update|doctor|env|run|rollback','launch','rollback --restore-data --yes','skill source|status|install|update'],note:'Application data and private tools remain outside npm manager packages. Quit the app before desktop updates. Manager, desktop and tool runtime versions are reported separately.'};
  if(command==='version'||command==='--version')return {manager:pkg.version,desktop:state()?.version||null,desktopIdentity:state()?.desktop?.identity||null,runtime:toolEnv.active()?.version||null};
  if(command==='capabilities')return read(path.join(packageRoot,'capabilities.json'));
  if(command==='doctor')return {...doctor(),runtime:runtimeDoctor()};
+ if(command==='cleanup'){
+  const limit=value('cache-limit-mib'),options={};if(flag('cache-limit-mib')&&limit===undefined)fail('INVALID_ARGUMENT','Provide --cache-limit-mib <0..16384>');if(limit!==undefined){if(!/^\d+$/.test(limit)||Number(limit)>16384)fail('INVALID_ARGUMENT','Cache limit must be an integer from 0 to 16384 MiB');options.cacheLimitBytes=Number(limit)*1048576;}
+  if(sub==='plan')return planCleanup(options);
+  if(sub==='run'){yes();return runCleanup(options);}
+  fail('INVALID_COMMAND','cleanup plan or cleanup run --yes');
+ }
  if(command==='runtime'){
   if(sub==='doctor')return runtimeDoctor();
   if(sub==='env'){const env=toolEnv.environment();if(!env)fail('RUNTIME_NOT_INSTALLED','Install private tools first');return {ok:true,contract:1,root:toolEnv.runtimeRoot(),environment:Object.fromEntries(Object.entries(env).filter(([k])=>['PATH','ZDOTDIR','BASH_ENV','CODEX_OWN_NODE','CODEX_OWN_PYTHON','CODEX_OWN_RUNTIME_VERSION','AGENT_WORKBENCH_NPM_CLI'].includes(k)||/^(NPM_CONFIG_|PYTHON|PIP_)/.test(k)))};}

package/capabilities.json

@@ -6,6 +6,8 @@
     "configure",
     "update check",
     "update install",
+    "cleanup plan",
+    "cleanup run",
     "launch",
     "rollback",
     "doctor",
@@ -27,6 +29,19 @@
   "dataPolicy": "independent external directories; preserve credentials and conversations",
   "updatePolicy": "desktop checks npm latest at startup and every six hours; explicit download and restart/install; pinned verified build; backup before switch; CLI remains available for recovery",
   "authentication": "npm install does not grant model access; existing independent credentials remain local",
+  "cleanupPolicy": {
+    "contract": 1,
+    "trigger": "owned main interface loaded and alive for 30 seconds; installed version and component identity must match",
+    "defaultCacheLimitMiB": 2048,
+    "rollbackCopies": 1,
+    "reclaims": ["applied desktop archives", "completed inactive helpers", "superseded complete app/data backup pairs", "least recently used unpinned blocks"],
+    "preserves": ["live app and user data", "private tool versions", "latest complete rollback", "pending/failed/unknown updates", "active processes", "manual recovery backups"],
+    "temporaryCacheExcess": "pending or unknown receipts pin required blocks; locked files remain available for inspection",
+    "diagnosticRecordsPerCategory": 20,
+    "preview": "cleanup plan",
+    "execute": "cleanup run --yes [--cache-limit-mib <0..16384>]",
+    "results": ["reclaimedBytes", "rollbackRetained", "warnings", "cacheLimitExceeded", "report"]
+  },
   "windowsAgentShell": {
     "contract": 1,
     "preferred": "verified system Git Bash; explicit exec_command shell selection",

package/lib/cleanup.mjs

@@ -0,0 +1,177 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import {execFileSync} from 'node:child_process';
+import {paths,state,locked,rejectLinks,exclusive,appIdentity,validateManifest,fail} from './manager.mjs';
+
+export const CLEANUP_POLICY=Object.freeze({contract:1,cacheLimitBytes:2*1024**3,rollbackCopies:1,reportLimit:20,healthyStartupSeconds:30});
+const PACKAGE='@petercjl/codex-own',UUID='[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}';
+const json=file=>{rejectLinks(file);try{return JSON.parse(fs.readFileSync(file,'utf8'));}catch{return null;}};
+const norm=file=>process.platform==='win32'?path.resolve(file).toLowerCase():path.resolve(file);
+const same=(a,b)=>typeof a==='string'&&typeof b==='string'&&norm(a)===norm(b);
+const contains=(base,file)=>same(base,file)||norm(file).startsWith(norm(base)+path.sep);
+const version=v=>/^\d+\.\d+\.\d+$/.test(v||'');
+function notNewer(a,b){if(!version(a)||!version(b))return false;const aa=a.split('.').map(Number),bb=b.split('.').map(Number);for(let i=0;i<3;i++){if(aa[i]!==bb[i])return aa[i]<bb[i];}return true;}
+function exists(file){return fs.existsSync(file);}
+function regular(file){rejectLinks(file);return exists(file)&&fs.lstatSync(file).isFile();}
+function names(dir){rejectLinks(dir);return exists(dir)?fs.readdirSync(dir):[];}
+function bytes(file){const s=fs.lstatSync(file);if(s.isSymbolicLink())return s.size;if(s.isDirectory())return fs.readdirSync(file).reduce((n,name)=>n+bytes(path.join(file,name)),0);return s.size;}
+function fingerprint(file){const s=fs.lstatSync(file);return {size:s.size,mtimeMs:s.mtimeMs,ino:s.ino};}
+function unchanged(file,expected){try{const s=fingerprint(file);return s.size===expected.size&&s.mtimeMs===expected.mtimeMs&&s.ino===expected.ino;}catch{return false;}}
+function currentInstall(p,identify){
+  rejectLinks(p.manager);rejectLinks(p.target);
+  regular(path.join(p.manager,'state.json'));
+  const s=state(p),meta=path.join(p.target,p.platform.startsWith('darwin-')?'Contents/Resources':'resources','own-updater','desktop-version.json');
+  if(s?.identity!=='local.codex-own'||!same(s.target,p.target)||!version(s.version)||!s.desktop||!/^[a-f0-9]{64}$/.test(s.desktop.identity)||s.desktop.identity!==s.releaseManifest?.platforms?.[p.platform]?.sha256||identify(p.target)!=='local.codex-own'||json(meta)?.version!==s.version)
+    fail('UNMANAGED_TARGET','Cleanup requires the matching managed desktop and component identity');
+  return s;
+}
+function pendingTransactions(p){return names(p.manager).filter(n=>new RegExp('^transaction-'+UUID+'\\.json$').test(n)&&json(path.join(p.manager,n.replace('.json','.complete.json')))?.ok!==true);}
+function healthFor(p,s){
+  const root=path.join(p.manager,'health');
+  return names(root).filter(n=>new RegExp('^startup-'+UUID+'\\.json$').test(n)).map(n=>({file:path.join(root,n),value:json(path.join(root,n))})).filter(({value:h})=>h?.schema===1&&h.package===PACKAGE&&h.version===s.version&&h.desktopIdentity===s.desktop.identity&&same(h.target,p.target)).sort((a,b)=>String(b.value.readyAt).localeCompare(String(a.value.readyAt)))[0]||null;
+}
+
+// Only return matched owned roots, never persist unrelated process arguments.
+export function activeCleanupRoots(roots){
+  if(!roots.length)return [];
+  if(process.platform==='win32'){
+    const quoted=roots.map(r=>"'"+r.replaceAll("'","''")+"'").join(',');
+    const ps=`$ErrorActionPreference='Stop';$ProgressPreference='SilentlyContinue';[Console]::OutputEncoding=[Text.UTF8Encoding]::new($false);$roots=@(${quoted});@(Get-CimInstance Win32_Process | ForEach-Object { $f=$_.ExecutablePath;$c=$_.CommandLine; foreach($r in $roots){$prefix=$r+'\\';if(($f -and ($f.Equals($r,[StringComparison]::OrdinalIgnoreCase) -or $f.StartsWith($prefix,[StringComparison]::OrdinalIgnoreCase))) -or ($c -and ($c.IndexOf($prefix,[StringComparison]::OrdinalIgnoreCase) -ge 0))){$r}} }) | ConvertTo-Json -Compress`;
+    const text=execFileSync('powershell.exe',['-NoProfile','-NonInteractive','-EncodedCommand',Buffer.from(ps,'utf16le').toString('base64')],{encoding:'utf8',windowsHide:true,timeout:30000});
+    const result=text.trim()?JSON.parse(text):[];return [...new Set(Array.isArray(result)?result:[result])];
+  }
+  const lines=execFileSync('ps',['-axo','command='],{encoding:'utf8',timeout:10000}).split('\n');
+  return roots.filter(r=>lines.some(line=>line.includes(r+path.sep)));
+}
+function manifestParts(m,platform){
+  validateManifest(m,platform);
+  return [m.platforms[platform],...Object.values(m.runtimes?.platforms?.[platform]||{})].flatMap(a=>a.parts||[]).map(a=>a.sha256);
+}
+function helperResult(dir,p){
+  const runtime=path.join(dir,'runtime'),meta=json(path.join(runtime,'desktop-version.json')),ready=json(path.join(runtime,'handoff-ready.json'));
+  if(meta?.source!=='https://registry.npmjs.org/@petercjl%2fcodex-own/latest'||meta.updaterContract!==2||!ready?.ready)return null;
+  if(ready.schema===2){
+    if(!Number.isSafeInteger(ready.pid)||ready.pid<1||ready.current!==meta.version||!new RegExp('^update-result-'+UUID+'\\.json$').test(path.basename(ready.resultFile||''))||!same(path.dirname(ready.resultFile),p.manager))return null;
+    try{process.kill(ready.pid,0);return null;}catch(e){if(e.code!=='ESRCH')return null;}
+    if(typeof ready.receipt!=='string'||path.basename(ready.receipt)!=='receipt.json'||!/^update-[a-zA-Z0-9]+$/.test(path.basename(path.dirname(ready.receipt)))||!same(path.dirname(path.dirname(ready.receipt)),path.join(p.manager,'prepared')))return null;
+    const result=json(ready.resultFile),receipt=json(ready.receipt),applied=json(ready.receipt+'.applied.json');
+    return result?.version===receipt?.version&&applied?.ok===true&&applied.version===receipt?.version?result:null;
+  }
+  // Legacy helpers have no PID/result receipt. A completed log plus an owned
+  // executable-process scan is required before reclaiming their copied runtime.
+  const log=path.join(dir,'install.log');if(!regular(log))return null;
+  const fd=fs.openSync(log,'r'),size=fs.fstatSync(fd).size,b=Buffer.alloc(Math.min(size,131072));
+  try{fs.readSync(fd,b,0,b.length,Math.max(0,size-b.length));}finally{fs.closeSync(fd);}
+  for(const line of b.toString('utf8').split('\n').reverse()){try{const r=JSON.parse(line).result;if(r)return r;}catch{}}
+  return null;
+}
+
+export function planCleanup({p=paths(),cacheLimitBytes=CLEANUP_POLICY.cacheLimitBytes,identify=appIdentity,processRoots=activeCleanupRoots,lockHeld=false}={}){
+  if(!Number.isSafeInteger(cacheLimitBytes)||cacheLimitBytes<0||cacheLimitBytes>16*1024**3)fail('INVALID_ARGUMENT','Cache limit must be between 0 and 16 GiB');
+  const result={ok:true,contract:1,version:null,cacheLimitBytes,actions:[],preserved:[],plannedBytes:0};
+  const defer=reason=>({...result,actions:[],plannedBytes:0,deferred:true,reason});
+  if(!lockHeld&&exists(path.join(p.manager,'operation.lock')))return defer('BUSY');
+  let s;try{s=currentInstall(p,identify);}catch(e){if(e.code==='UNSAFE_PATH')throw e;return defer('UNMANAGED_TARGET');}result.version=s.version;
+  if(pendingTransactions(p).length)return defer('INCOMPLETE_TRANSACTION');
+  const health=healthFor(p,s);if(!health)return defer('HEALTH_NOT_CONFIRMED');
+  if(s.previous){
+    const id=typeof s.previous.app==='string'?path.basename(s.previous.app).match(new RegExp('^\\.codex-own-backup-('+UUID+')$'))?.[1]:null;
+    if(!id||!same(s.previous.app,path.join(path.dirname(p.target),'.codex-own-backup-'+id))||!same(s.previous.data,path.join(p.manager,'backups',id,'data')))return defer('UNKNOWN_ROLLBACK');
+    rejectLinks(s.previous.app);rejectLinks(s.previous.data);
+    const j=json(path.join(p.manager,'transaction-'+id+'.json')),done=json(path.join(p.manager,'transaction-'+id+'.complete.json'));
+    if(done?.ok!==true||j?.version!==s.version||!same(j?.target,p.target)||!same(j?.old,s.previous.app)||!same(j?.backup,path.dirname(s.previous.data)))return defer('ROLLBACK_INCOMPLETE');
+    if(!exists(s.previous.app)||!exists(s.previous.data)||identify(s.previous.app)!=='local.codex-own')return defer('ROLLBACK_INCOMPLETE');
+  }
+  result.rollbackRetained=!!s.previous;
+  const protectedPaths=[p.target,p.core,p.desktop,s.previous?.app,s.previous?.data].filter(Boolean);
+  const protects=f=>protectedPaths.some(q=>contains(f,q)||contains(q,f));
+  const action=(kind,files,reason)=>{for(const f of files){rejectLinks(f);if(protects(f))fail('UNSAFE_PATH','Cleanup candidate intersects protected application data');}result.actions.push({kind,files,reason,bytes:files.reduce((n,f)=>n+bytes(f),0),fingerprints:files.map(fingerprint)});};
+  const pinned=new Set();let pinAll=false;
+  const prepared=path.join(p.manager,'prepared');
+  for(const name of names(prepared)){
+    if(!/^update-[a-zA-Z0-9]+$/.test(name))continue;
+    const dir=path.join(prepared,name),receipt=path.join(dir,'receipt.json');rejectLinks(dir);
+    const r=regular(receipt)?json(receipt):null,applied=regular(receipt+'.applied.json')?json(receipt+'.applied.json'):null;
+    let valid=false;
+    try{valid=!!r&&[1,2].includes(r.schema)&&r.platform===p.platform&&r.version===r.manifest?.version&&version(r.version);if(valid)manifestParts(r.manifest,p.platform);}catch{valid=false;}
+    const completed=valid&&applied?.ok===true&&applied.version===r.version&&notNewer(r.version,s.version);
+    if(!completed){
+      if(valid)for(const hash of manifestParts(r.manifest,p.platform))pinned.add(hash);else pinAll=true;
+      result.preserved.push({path:dir,reason:valid?'PENDING_OR_FAILED_UPDATE':'UNKNOWN_UPDATE_RECEIPT'});continue;
+    }
+    const archive=path.join(dir,'desktop.tar.gz');if(regular(archive))action('applied-archive',[archive],'APPLIED_UPDATE_AND_HEALTHY_DESKTOP');
+  }
+  const backups=[];
+  for(const name of names(p.manager)){
+    const match=name.match(new RegExp('^transaction-('+UUID+')\\.json$'));if(!match)continue;
+    const j=json(path.join(p.manager,name)),done=json(path.join(p.manager,name.replace('.json','.complete.json'))),id=match[1];
+    const old=path.join(path.dirname(p.target),'.codex-own-backup-'+id),backup=path.join(p.manager,'backups',id);
+    if(done?.ok!==true||!notNewer(j?.version,s.version)||!same(j?.target,p.target)||!same(j?.old,old)||!same(j?.backup,backup))continue;
+    const files=[old,backup].filter(exists);if(!files.length)continue;
+    if(files.some(protects)){result.preserved.push({path:backup,reason:'LATEST_COMPLETE_ROLLBACK'});continue;}
+    for(const f of files)rejectLinks(f);
+    let owned=true;try{if(exists(old))owned=identify(old)==='local.codex-own';}catch{owned=false;}
+    if(!owned){result.preserved.push({path:old,reason:'UNKNOWN_APP_IDENTITY'});continue;}
+    backups.push({old,files});
+  }
+  const handoffs=[];const helperBase=path.join(p.manager,'handoffs');
+  for(const name of names(helperBase)){
+    if(!/^apply-[a-zA-Z0-9]+$/.test(name))continue;
+    const dir=path.join(helperBase,name);rejectLinks(dir);const r=helperResult(dir,p);
+    if(r?.ok===true&&same(r.target,p.target)&&notNewer(r.version,s.version))handoffs.push(dir);
+    else result.preserved.push({path:dir,reason:'ACTIVE_FAILED_OR_UNKNOWN_HELPER'});
+  }
+  let active;try{active=processRoots([...backups.map(b=>b.old),...handoffs]);}catch{return defer('PROCESS_INSPECTION_UNAVAILABLE');}
+  for(const b of backups){if(active.some(a=>same(a,b.old))){result.preserved.push({path:b.old,reason:'ACTIVE_OLD_APP'});continue;}action('old-rollback',b.files,'SUPERSEDED_COMPLETE_TRANSACTION');}
+  for(const dir of handoffs){if(active.some(a=>same(a,dir))){result.preserved.push({path:dir,reason:'ACTIVE_UPDATE_HELPER'});continue;}action('completed-helper',[dir],'COMPLETED_HELPER_AND_HEALTHY_DESKTOP');}
+  const cache=path.join(p.manager,'npm-assets'),blocks=[];
+  for(const name of names(cache)){if(!/^[a-f0-9]{64}\.bin$/.test(name))continue;const f=path.join(cache,name);if(!regular(f))continue;const st=fs.statSync(f);blocks.push({file:f,hash:name.slice(0,64),bytes:st.size,used:st.mtimeMs});}
+  let total=blocks.reduce((n,b)=>n+b.bytes,0);result.cacheBytesBefore=total;
+  for(const b of blocks.sort((a,b)=>a.used-b.used||a.hash.localeCompare(b.hash))){
+    if(total<=cacheLimitBytes)break;if(pinAll||pinned.has(b.hash))continue;
+    action('cache-block',[b.file],'LEAST_RECENTLY_USED_UNPINNED_BLOCK');total-=b.bytes;
+  }
+  result.cacheBytesAfter=total;result.cacheLimitExceeded=total>cacheLimitBytes;result.cacheProtection=pinAll?'UNKNOWN_RECEIPT':pinned.size?'PENDING_UPDATE':null;
+  for(const [folder,prefix,keep] of [['cleanup-reports','report-',CLEANUP_POLICY.reportLimit-1],['cleanup-intents','intent-',CLEANUP_POLICY.reportLimit-1],['health','startup-',CLEANUP_POLICY.reportLimit]]){
+    const dir=path.join(p.manager,folder),records=names(dir).filter(n=>new RegExp('^'+prefix+UUID+'\\.json$').test(n)).map(n=>path.join(dir,n)).filter(regular).filter(f=>{const r=json(f);return r?.schema===1&&r.package===PACKAGE;}).sort((a,b)=>fs.statSync(b).mtimeMs-fs.statSync(a).mtimeMs);
+    for(const file of records.slice(keep))if(!same(file,health.file))action('old-report',[file],'BOUNDED_DIAGNOSTIC_HISTORY');
+  }
+  result.plannedBytes=result.actions.reduce((n,a)=>n+a.bytes,0);return result;
+}
+
+async function performCleanup(options){
+  const p=options.p||paths(),plan=planCleanup({...options,p,lockHeld:true});
+  if(plan.deferred)return {...plan,reclaimedBytes:0};
+  const intents=path.join(p.manager,'cleanup-intents');rejectLinks(intents);fs.mkdirSync(intents,{recursive:true,mode:0o700});
+  exclusive(path.join(intents,'intent-'+crypto.randomUUID()+'.json'),{schema:1,package:PACKAGE,version:plan.version,target:p.target,plannedAt:new Date().toISOString(),actions:plan.actions});
+  const removed=[],warnings=[];let reclaimedBytes=0;
+  for(const a of plan.actions){
+    for(let i=0;i<a.files.length;i++){
+      const file=a.files[i];let before;
+      try{
+        rejectLinks(file);if(!unchanged(file,a.fingerprints[i])){warnings.push({path:file,code:'CANDIDATE_CHANGED'});break;}
+        before=bytes(file);await fs.promises.rm(file,{recursive:true,maxRetries:2,retryDelay:100});reclaimedBytes+=before;removed.push({kind:a.kind,path:file,bytes:before});
+      }catch(e){let remaining;try{remaining=bytes(file);}catch{}if(Number.isSafeInteger(before)&&Number.isSafeInteger(remaining))reclaimedBytes+=Math.max(0,before-remaining);warnings.push({path:file,code:e.code||'CLEANUP_FAILED'});break;}
+    }
+  }
+  const cache=path.join(p.manager,'npm-assets'),cacheBytesAfter=names(cache).filter(n=>/^[a-f0-9]{64}\.bin$/.test(n)).map(n=>path.join(cache,n)).filter(regular).reduce((n,f)=>n+fs.statSync(f).size,0);
+  const result={schema:1,package:PACKAGE,ok:true,version:plan.version,completedAt:new Date().toISOString(),reclaimedBytes,removed,warnings,cacheLimitBytes:plan.cacheLimitBytes,cacheBytesAfter,cacheLimitExceeded:cacheBytesAfter>plan.cacheLimitBytes,cacheProtection:plan.cacheProtection,rollbackCopies:CLEANUP_POLICY.rollbackCopies,rollbackRetained:plan.rollbackRetained};
+  const dir=path.join(p.manager,'cleanup-reports');rejectLinks(dir);fs.mkdirSync(dir,{recursive:true,mode:0o700});
+  const report=path.join(dir,'report-'+crypto.randomUUID()+'.json');exclusive(report,result);
+  return {...result,report};
+}
+export async function runCleanup(options={}){const p=options.p||paths();return locked(p,()=>performCleanup({...options,p}));}
+
+// Called only by the desktop worker after the controller's main-window health
+// gate. A matching installed component is mandatory; spawning an app is not proof.
+export async function cleanupAfterHealthyStartup(current,options={}){
+  const p=options.p||paths(),identify=options.identify||appIdentity;
+  return locked(p,()=>{
+    const s=currentInstall(p,identify);if(s.version!==current)fail('INSTALLATION_CHANGED','The running desktop differs from its managed installation');
+    if(pendingTransactions(p).length)return {ok:true,deferred:true,reason:'INCOMPLETE_TRANSACTION',reclaimedBytes:0};
+    const dir=path.join(p.manager,'health');rejectLinks(dir);fs.mkdirSync(dir,{recursive:true,mode:0o700});
+    exclusive(path.join(dir,'startup-'+crypto.randomUUID()+'.json'),{schema:1,package:PACKAGE,version:current,target:p.target,desktopIdentity:s.desktop.identity,readyAt:new Date().toISOString(),evidence:'main-window-loaded-and-alive-30s'});
+    return performCleanup({...options,p});
+  });
+}

package/lib/npm-assets.mjs

@@ -50,6 +50,7 @@ export async function assembleNpmAsset(asset, dest, cache, tar, {download = veri
     const file = path.join(cache, `${part.sha256}.bin`);
     safeCache(file);
     if (cached.has(part.sha256)) {
+      const used=new Date();fs.utimesSync(file,used,used);
       report(`[${i+1}/${asset.parts.length}] 复用已校验分片`); return file;
     }
     if (fs.existsSync(file)) fs.unlinkSync(file);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@petercjl/codex-own",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "description": "Independent codex-own desktop installation and update manager",
   "type": "module",
   "bin": {
@@ -45,7 +45,7 @@
   "ownDesktopManifest": {
     "schema": 2,
     "repository": "petercjl/codex-own",
-    "version": "0.6.2",
+    "version": "0.6.4",
     "platforms": {
       "darwin-arm64": {
         "entry": "codex-own.app",
@@ -57,8 +57,8 @@
           "version": "codex-cli 0.156.1-cometix"
         },
         "transport": "canonical-tar-cdc-v1",
-        "size": 2069279232,
-        "sha256": "417962c59809acbe93dcfe2fc39026b921bdf9d2026ce49063b2ea9e6b6e51f6",
+        "size": 2069301248,
+        "sha256": "019f7b42dd27ffc1b7b4f417dce15e3805c4be1ae5ff270c6c26f42ce8c41751",
         "parts": [
           {
             "sha256": "0b42f2d545aca8e8255bd5fee043156b6851be1bf123d3c74b9ebb578f3f7d32",
@@ -404,11 +404,11 @@
             "archiveSha256": "c99a078d64811b89c5a6dee82392825acb8fdb4881abf88f8bbc9fda1da67f9e"
           },
           {
-            "sha256": "e051de6e0a535f6b248d52633660b6bc8e81bfa0d83bcbae94181a639a041187",
-            "size": 59770880,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.he051de6e0a535f6b248d52633660b6bc8e81bfa0d83bcbae94181a639a041187.tgz",
-            "archiveSize": 26450218,
-            "archiveSha256": "d5a5f3b25dc1b9952bb6ccd8c77c2d8a65691e2937923484153d5dcc47e40c9b"
+            "sha256": "91c2df3863faacb22a15e40699f613f6bc6734f21c05f7abce6074849baebcf6",
+            "size": 59792384,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h91c2df3863faacb22a15e40699f613f6bc6734f21c05f7abce6074849baebcf6.tgz",
+            "archiveSize": 26456586,
+            "archiveSha256": "a9b63d37be08450f47795a6657cfc657811547d819a3e1878b0df35c5d3e20fd"
           },
           {
             "sha256": "7cfeb48649874d23596c06c132aea050773133adc936e5d905966a48916f629b",
@@ -425,11 +425,11 @@
             "archiveSha256": "caa6952e6c00fed43f98c1e5b5eb653ed311f09b35be3aa2afc6d696ff38677b"
           },
           {
-            "sha256": "524c822c34e0af8550dd1e46f86b34efc96cee345482066ecc595dfced63b62c",
+            "sha256": "eb6cc1ceff2c14c3ace5fd00aaa1413f0c6ed757ae4d5bcba62de883bf7d3a3d",
             "size": 17287710,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h524c822c34e0af8550dd1e46f86b34efc96cee345482066ecc595dfced63b62c.tgz",
-            "archiveSize": 15691274,
-            "archiveSha256": "096498bdc212f87469b7f3f3b0b9b7f70670498824e436bc233ad2923b2d52f6"
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.heb6cc1ceff2c14c3ace5fd00aaa1413f0c6ed757ae4d5bcba62de883bf7d3a3d.tgz",
+            "archiveSize": 15691273,
+            "archiveSha256": "f4e900216a7193dc1b61387b6314c5f4d47c4caf2017e860948b5f057b22b0f8"
           },
           {
             "sha256": "486eecb966966e046dfade862bdce1b6f29a5d17c1a663832a23b38fece27089",
@@ -460,11 +460,11 @@
             "archiveSha256": "fa3816195cbaaf7fd2f0cb1b61134b6d41363893bf71f91df2421d2976438cd1"
           },
           {
-            "sha256": "160185a87ca1d96336bb0a83a817aa245f359689fbd2d37c0ecc437d6bdd24a6",
-            "size": 1778688,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h160185a87ca1d96336bb0a83a817aa245f359689fbd2d37c0ecc437d6bdd24a6.tgz",
-            "archiveSize": 358361,
-            "archiveSha256": "f3e89230b4667b38aebb36cd926b32599aab59c6602e4650eebef36e9cca6559"
+            "sha256": "5220d2f88d663a3ce9962263647adf342af25ec559c53da94d7b41151ffd7bf6",
+            "size": 1779200,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h5220d2f88d663a3ce9962263647adf342af25ec559c53da94d7b41151ffd7bf6.tgz",
+            "archiveSize": 358530,
+            "archiveSha256": "17b78897fa6d4fe5eabd9ed1962b98a3128aa4afb4f7ad2c229aad9bfc7836dc"
           }
         ]
       },
@@ -472,14 +472,14 @@
         "entry": "app",
         "probe": {
           "path": "app/resources/codex.exe",
-          "offset": 1578081280,
+          "offset": 1578081792,
           "size": 184842240,
           "sha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
           "version": "codex-cli 0.156.1-cometix"
         },
         "transport": "canonical-tar-cdc-v1",
-        "size": 2288456192,
-        "sha256": "09d8b6120bb202a7cac8a11f4c247f4fd31e63981aedad930b8f9af18dc796ba",
+        "size": 2288478720,
+        "sha256": "caae1ed47193a3ddbf1c2b5fe341819f90579208f64e9672b46cac099a51af8b",
         "parts": [
           {
             "sha256": "308461c5561025640d0ed339cca7c440649e8cb13505d6b6e974f2ac93f5069e",
@@ -538,11 +538,11 @@
             "archiveSha256": "05820fcec6f925b9df6e985d85b6714abf85e73e28c508cec788d61f2f739c97"
           },
           {
-            "sha256": "c62af9d6948578f5e4e9f2d4a06f9db6742b049d8e8920f366129ed03580c771",
-            "size": 22379008,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hc62af9d6948578f5e4e9f2d4a06f9db6742b049d8e8920f366129ed03580c771.tgz",
-            "archiveSize": 11368315,
-            "archiveSha256": "ad65056327db048b23e840a65a36a4d457853c45b3164796ac739b241d5325ca"
+            "sha256": "500fc7ae50d6c369028217786b216dd7ad83247f929613818356e8856eef3abf",
+            "size": 22379520,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h500fc7ae50d6c369028217786b216dd7ad83247f929613818356e8856eef3abf.tgz",
+            "archiveSize": 11368418,
+            "archiveSha256": "6b21a76d09ba2d2b4e1c3012a70a63353a983ad0a4c67242c37bdfd50de69a68"
           },
           {
             "sha256": "43ed59166d1d9cdd41ae56a0bcb9aaece2ddc00708f0854f21828494b29315aa",
@@ -881,11 +881,11 @@
             "archiveSha256": "46ce103d3c585317f55a3ddf2d51777c35efd172bdd20542ab530d5f2bc0e821"
           },
           {
-            "sha256": "4a163b1b4f138df069bdd9f4f47c4a081019dd915d5f98ae02a93393cdffe963",
-            "size": 5982720,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h4a163b1b4f138df069bdd9f4f47c4a081019dd915d5f98ae02a93393cdffe963.tgz",
-            "archiveSize": 2013418,
-            "archiveSha256": "7edb4e041bd3dd1e5732cc6942e8aa89442e846b6700655c268a779cec7a8709"
+            "sha256": "4c164589fe7dc8d2aeb57146fb9ceb2845ff2e6789121913d095d35c26ab1d49",
+            "size": 6004736,
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h4c164589fe7dc8d2aeb57146fb9ceb2845ff2e6789121913d095d35c26ab1d49.tgz",
+            "archiveSize": 2019781,
+            "archiveSha256": "789259da99258ee68b6f21c8023a1be5c469bfca3062239954e990ed9f64b9cd"
           },
           {
             "sha256": "15378e38de6292c183145444811610b2bfde8b72bd694127d1a009e020d09859",
@@ -902,11 +902,11 @@
             "archiveSha256": "541098580cb90b6f0ec96267bd3bb987122dfd1e086f02cf1eeb3a7fee531c5a"
           },
           {
-            "sha256": "05d33955a055104393598f3aa52493505b7332a60d9dd86491be0c5f0e0cd3b7",
+            "sha256": "e2c6b19fa4cca42d51bf6b1f6cd6ad2e437ad119b28c7690a4e6a029b48de802",
             "size": 34276749,
-            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h05d33955a055104393598f3aa52493505b7332a60d9dd86491be0c5f0e0cd3b7.tgz",
-            "archiveSize": 27888292,
-            "archiveSha256": "69ad95ecd2d00251dc1247f882f76f408db8ce57096d5ff1eb2853ee6ca95c00"
+            "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.he2c6b19fa4cca42d51bf6b1f6cd6ad2e437ad119b28c7690a4e6a029b48de802.tgz",
+            "archiveSize": 27888291,
+            "archiveSha256": "4d499d3e13307e96d2fa9d3f2e5329846dd5a91b8ae8b7532b835fded958555f"
           },
           {
             "sha256": "1ed2bf8a8edfa5772517404274b44baf011ec3bbfc89936bc3851d54daee4686",
@@ -948,42 +948,252 @@
     },
     "provenance": {
       "darwin-arm64": {
-        "upstreamCommit": null,
-        "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+        "nativeBase": {
+          "version": "0.6.3",
+          "identity": "3bec71959e4ee0ebd92722dbf72a28ea1c60e26f61089c44e38ec97eaf68d2c3",
+          "source": {
+            "darwin-arm64": {
+              "nativeBase": {
+                "version": "0.6.2",
+                "identity": "417962c59809acbe93dcfe2fc39026b921bdf9d2026ce49063b2ea9e6b6e51f6",
+                "source": {
+                  "darwin-arm64": {
+                    "upstreamCommit": null,
+                    "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                    "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+                    "toolchain": {
+                      "node": "v24.15.0",
+                      "platform": "darwin-arm64",
+                      "image": "20260907.0337.1"
+                    },
+                    "originalProgramTree": {
+                      "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
+                      "fileCount": 4012
+                    },
+                    "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
+                    "cliSource": "upstream-resolved-vendor",
+                    "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
+                    "cliVersion": "codex-cli 0.156.1-cometix",
+                    "optionalMissingBindings": []
+                  },
+                  "win32-x64": {
+                    "upstreamCommit": null,
+                    "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                    "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+                    "toolchain": {
+                      "node": "v24.15.0",
+                      "platform": "win32-x64",
+                      "image": "20261007.264.1"
+                    },
+                    "originalProgramTree": {
+                      "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
+                      "fileCount": 3604
+                    },
+                    "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
+                    "cliSource": "upstream-resolved-vendor",
+                    "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
+                    "cliVersion": "codex-cli 0.156.1-cometix",
+                    "optionalMissingBindings": []
+                  }
+                }
+              },
+              "upgradeNpmUpdater": true,
+              "overlaySource": "702edd41b58974e96628084b20d10d1cf1660a7d",
+              "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+              "toolchain": {
+                "node": "v24.15.0",
+                "platform": "darwin-arm64",
+                "image": "20260907.0337.1"
+              }
+            },
+            "win32-x64": {
+              "nativeBase": {
+                "version": "0.6.2",
+                "identity": "09d8b6120bb202a7cac8a11f4c247f4fd31e63981aedad930b8f9af18dc796ba",
+                "source": {
+                  "darwin-arm64": {
+                    "upstreamCommit": null,
+                    "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                    "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+                    "toolchain": {
+                      "node": "v24.15.0",
+                      "platform": "darwin-arm64",
+                      "image": "20260907.0337.1"
+                    },
+                    "originalProgramTree": {
+                      "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
+                      "fileCount": 4012
+                    },
+                    "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
+                    "cliSource": "upstream-resolved-vendor",
+                    "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
+                    "cliVersion": "codex-cli 0.156.1-cometix",
+                    "optionalMissingBindings": []
+                  },
+                  "win32-x64": {
+                    "upstreamCommit": null,
+                    "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                    "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+                    "toolchain": {
+                      "node": "v24.15.0",
+                      "platform": "win32-x64",
+                      "image": "20261007.264.1"
+                    },
+                    "originalProgramTree": {
+                      "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
+                      "fileCount": 3604
+                    },
+                    "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
+                    "cliSource": "upstream-resolved-vendor",
+                    "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
+                    "cliVersion": "codex-cli 0.156.1-cometix",
+                    "optionalMissingBindings": []
+                  }
+                }
+              },
+              "upgradeNpmUpdater": true,
+              "overlaySource": "702edd41b58974e96628084b20d10d1cf1660a7d",
+              "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+              "toolchain": {
+                "node": "v24.15.0",
+                "platform": "win32-x64",
+                "image": "20261007.264.1"
+              }
+            }
+          }
+        },
+        "upgradeNpmUpdater": true,
+        "overlaySource": "504a1b3495744eaccb00faaeac06768aa0039970",
         "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
         "toolchain": {
           "node": "v24.15.0",
           "platform": "darwin-arm64",
           "image": "20260907.0337.1"
-        },
-        "originalProgramTree": {
-          "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
-          "fileCount": 4012
-        },
-        "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
-        "cliSource": "upstream-resolved-vendor",
-        "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
-        "cliVersion": "codex-cli 0.156.1-cometix",
-        "optionalMissingBindings": []
+        }
       },
       "win32-x64": {
-        "upstreamCommit": null,
-        "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+        "nativeBase": {
+          "version": "0.6.3",
+          "identity": "89e29c17e98085a6b8123796fe9c12da2953098fdcd0b419ac1cb9094c53da4c",
+          "source": {
+            "darwin-arm64": {
+              "nativeBase": {
+                "version": "0.6.2",
+                "identity": "417962c59809acbe93dcfe2fc39026b921bdf9d2026ce49063b2ea9e6b6e51f6",
+                "source": {
+                  "darwin-arm64": {
+                    "upstreamCommit": null,
+                    "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                    "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+                    "toolchain": {
+                      "node": "v24.15.0",
+                      "platform": "darwin-arm64",
+                      "image": "20260907.0337.1"
+                    },
+                    "originalProgramTree": {
+                      "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
+                      "fileCount": 4012
+                    },
+                    "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
+                    "cliSource": "upstream-resolved-vendor",
+                    "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
+                    "cliVersion": "codex-cli 0.156.1-cometix",
+                    "optionalMissingBindings": []
+                  },
+                  "win32-x64": {
+                    "upstreamCommit": null,
+                    "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                    "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+                    "toolchain": {
+                      "node": "v24.15.0",
+                      "platform": "win32-x64",
+                      "image": "20261007.264.1"
+                    },
+                    "originalProgramTree": {
+                      "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
+                      "fileCount": 3604
+                    },
+                    "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
+                    "cliSource": "upstream-resolved-vendor",
+                    "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
+                    "cliVersion": "codex-cli 0.156.1-cometix",
+                    "optionalMissingBindings": []
+                  }
+                }
+              },
+              "upgradeNpmUpdater": true,
+              "overlaySource": "702edd41b58974e96628084b20d10d1cf1660a7d",
+              "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+              "toolchain": {
+                "node": "v24.15.0",
+                "platform": "darwin-arm64",
+                "image": "20260907.0337.1"
+              }
+            },
+            "win32-x64": {
+              "nativeBase": {
+                "version": "0.6.2",
+                "identity": "09d8b6120bb202a7cac8a11f4c247f4fd31e63981aedad930b8f9af18dc796ba",
+                "source": {
+                  "darwin-arm64": {
+                    "upstreamCommit": null,
+                    "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                    "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+                    "toolchain": {
+                      "node": "v24.15.0",
+                      "platform": "darwin-arm64",
+                      "image": "20260907.0337.1"
+                    },
+                    "originalProgramTree": {
+                      "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
+                      "fileCount": 4012
+                    },
+                    "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
+                    "cliSource": "upstream-resolved-vendor",
+                    "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
+                    "cliVersion": "codex-cli 0.156.1-cometix",
+                    "optionalMissingBindings": []
+                  },
+                  "win32-x64": {
+                    "upstreamCommit": null,
+                    "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                    "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+                    "toolchain": {
+                      "node": "v24.15.0",
+                      "platform": "win32-x64",
+                      "image": "20261007.264.1"
+                    },
+                    "originalProgramTree": {
+                      "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
+                      "fileCount": 3604
+                    },
+                    "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
+                    "cliSource": "upstream-resolved-vendor",
+                    "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
+                    "cliVersion": "codex-cli 0.156.1-cometix",
+                    "optionalMissingBindings": []
+                  }
+                }
+              },
+              "upgradeNpmUpdater": true,
+              "overlaySource": "702edd41b58974e96628084b20d10d1cf1660a7d",
+              "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+              "toolchain": {
+                "node": "v24.15.0",
+                "platform": "win32-x64",
+                "image": "20261007.264.1"
+              }
+            }
+          }
+        },
+        "upgradeNpmUpdater": true,
+        "overlaySource": "504a1b3495744eaccb00faaeac06768aa0039970",
         "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
         "toolchain": {
           "node": "v24.15.0",
           "platform": "win32-x64",
           "image": "20261007.264.1"
-        },
-        "originalProgramTree": {
-          "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
-          "fileCount": 3604
-        },
-        "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
-        "cliSource": "upstream-resolved-vendor",
-        "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
-        "cliVersion": "codex-cli 0.156.1-cometix",
-        "optionalMissingBindings": []
+        }
       }
     },
     "runtimes": {
@@ -1079,26 +1289,26 @@
     },
     "binding": {
       "schema": 1,
-      "managerVersion": "0.6.2",
+      "managerVersion": "0.6.4",
       "managerSource": {
         "repository": "petercjl/codex-own",
-        "ref": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
-        "run": "38936208880",
+        "ref": "504a1b3495744eaccb00faaeac06768aa0039970",
+        "run": "39002688773",
         "workflow": ".github/workflows/own-release.yml"
       },
       "managerContract": 2,
-      "releasePolicyFingerprint": "4b65c347e1215a88fb03a0573c04c60fbb6bdfddd3444c4f6f03e89e304a2a02",
+      "releasePolicyFingerprint": "95fec8be9585f27c40dcd70750ba850e3bfeb014be6cfe61f4eec4aa3824d643",
       "desktop": {
-        "artifactVersion": "0.6.2",
-        "publishedIn": "0.6.2",
-        "identity": "d3959ab15bf363ae9f852b5a1957f5d105943b8b6f783e4ef2e866fe63396975",
-        "inputFingerprint": "d08cd692f1dad41f17b932d7e0ac6d2a7993c1a2284fda46d3b8ef92c7ee80b7",
-        "declaredFingerprint": "18f16cad7bd7e8c4fd525c32f084907dc253a74430e7f10c9a3ab913dce5b21f",
+        "artifactVersion": "0.6.4",
+        "publishedIn": "0.6.4",
+        "identity": "b0125afb9b223af0b943481f7fd47e62ecd16191f06d412d4cd04a4a04cc1f82",
+        "inputFingerprint": "50c2aeabb0ba11b4c2acf49232ddaadcf5c3815d336ec80f7124ea639ff406ae",
+        "declaredFingerprint": "219354ba5cd42791ca3a012517c8c840049efe4665afc19d5d5556e0947e5a58",
         "upstreamFingerprint": "534b9cc3c7f2682d02176e3077af87f763058b193d47988b311b9e1b3277cd61",
         "source": {
           "repository": "petercjl/codex-own",
-          "ref": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
-          "run": "38936208880",
+          "ref": "504a1b3495744eaccb00faaeac06768aa0039970",
+          "run": "39002688773",
           "workflow": ".github/workflows/own-release.yml"
         },
         "updaterContract": 2,

package/release.json

@@ -1,7 +1,7 @@
 {
   "schema": 2,
   "repository": "petercjl/codex-own",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "platforms": {
     "darwin-arm64": {
       "entry": "codex-own.app",
@@ -13,8 +13,8 @@
         "version": "codex-cli 0.156.1-cometix"
       },
       "transport": "canonical-tar-cdc-v1",
-      "size": 2069279232,
-      "sha256": "417962c59809acbe93dcfe2fc39026b921bdf9d2026ce49063b2ea9e6b6e51f6",
+      "size": 2069301248,
+      "sha256": "019f7b42dd27ffc1b7b4f417dce15e3805c4be1ae5ff270c6c26f42ce8c41751",
       "parts": [
         {
           "sha256": "0b42f2d545aca8e8255bd5fee043156b6851be1bf123d3c74b9ebb578f3f7d32",
@@ -360,11 +360,11 @@
           "archiveSha256": "c99a078d64811b89c5a6dee82392825acb8fdb4881abf88f8bbc9fda1da67f9e"
         },
         {
-          "sha256": "e051de6e0a535f6b248d52633660b6bc8e81bfa0d83bcbae94181a639a041187",
-          "size": 59770880,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.he051de6e0a535f6b248d52633660b6bc8e81bfa0d83bcbae94181a639a041187.tgz",
-          "archiveSize": 26450218,
-          "archiveSha256": "d5a5f3b25dc1b9952bb6ccd8c77c2d8a65691e2937923484153d5dcc47e40c9b"
+          "sha256": "91c2df3863faacb22a15e40699f613f6bc6734f21c05f7abce6074849baebcf6",
+          "size": 59792384,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h91c2df3863faacb22a15e40699f613f6bc6734f21c05f7abce6074849baebcf6.tgz",
+          "archiveSize": 26456586,
+          "archiveSha256": "a9b63d37be08450f47795a6657cfc657811547d819a3e1878b0df35c5d3e20fd"
         },
         {
           "sha256": "7cfeb48649874d23596c06c132aea050773133adc936e5d905966a48916f629b",
@@ -381,11 +381,11 @@
           "archiveSha256": "caa6952e6c00fed43f98c1e5b5eb653ed311f09b35be3aa2afc6d696ff38677b"
         },
         {
-          "sha256": "524c822c34e0af8550dd1e46f86b34efc96cee345482066ecc595dfced63b62c",
+          "sha256": "eb6cc1ceff2c14c3ace5fd00aaa1413f0c6ed757ae4d5bcba62de883bf7d3a3d",
           "size": 17287710,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h524c822c34e0af8550dd1e46f86b34efc96cee345482066ecc595dfced63b62c.tgz",
-          "archiveSize": 15691274,
-          "archiveSha256": "096498bdc212f87469b7f3f3b0b9b7f70670498824e436bc233ad2923b2d52f6"
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.heb6cc1ceff2c14c3ace5fd00aaa1413f0c6ed757ae4d5bcba62de883bf7d3a3d.tgz",
+          "archiveSize": 15691273,
+          "archiveSha256": "f4e900216a7193dc1b61387b6314c5f4d47c4caf2017e860948b5f057b22b0f8"
         },
         {
           "sha256": "486eecb966966e046dfade862bdce1b6f29a5d17c1a663832a23b38fece27089",
@@ -416,11 +416,11 @@
           "archiveSha256": "fa3816195cbaaf7fd2f0cb1b61134b6d41363893bf71f91df2421d2976438cd1"
         },
         {
-          "sha256": "160185a87ca1d96336bb0a83a817aa245f359689fbd2d37c0ecc437d6bdd24a6",
-          "size": 1778688,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h160185a87ca1d96336bb0a83a817aa245f359689fbd2d37c0ecc437d6bdd24a6.tgz",
-          "archiveSize": 358361,
-          "archiveSha256": "f3e89230b4667b38aebb36cd926b32599aab59c6602e4650eebef36e9cca6559"
+          "sha256": "5220d2f88d663a3ce9962263647adf342af25ec559c53da94d7b41151ffd7bf6",
+          "size": 1779200,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h5220d2f88d663a3ce9962263647adf342af25ec559c53da94d7b41151ffd7bf6.tgz",
+          "archiveSize": 358530,
+          "archiveSha256": "17b78897fa6d4fe5eabd9ed1962b98a3128aa4afb4f7ad2c229aad9bfc7836dc"
         }
       ]
     },
@@ -428,14 +428,14 @@
       "entry": "app",
       "probe": {
         "path": "app/resources/codex.exe",
-        "offset": 1578081280,
+        "offset": 1578081792,
         "size": 184842240,
         "sha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
         "version": "codex-cli 0.156.1-cometix"
       },
       "transport": "canonical-tar-cdc-v1",
-      "size": 2288456192,
-      "sha256": "09d8b6120bb202a7cac8a11f4c247f4fd31e63981aedad930b8f9af18dc796ba",
+      "size": 2288478720,
+      "sha256": "caae1ed47193a3ddbf1c2b5fe341819f90579208f64e9672b46cac099a51af8b",
       "parts": [
         {
           "sha256": "308461c5561025640d0ed339cca7c440649e8cb13505d6b6e974f2ac93f5069e",
@@ -494,11 +494,11 @@
           "archiveSha256": "05820fcec6f925b9df6e985d85b6714abf85e73e28c508cec788d61f2f739c97"
         },
         {
-          "sha256": "c62af9d6948578f5e4e9f2d4a06f9db6742b049d8e8920f366129ed03580c771",
-          "size": 22379008,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.hc62af9d6948578f5e4e9f2d4a06f9db6742b049d8e8920f366129ed03580c771.tgz",
-          "archiveSize": 11368315,
-          "archiveSha256": "ad65056327db048b23e840a65a36a4d457853c45b3164796ac739b241d5325ca"
+          "sha256": "500fc7ae50d6c369028217786b216dd7ad83247f929613818356e8856eef3abf",
+          "size": 22379520,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h500fc7ae50d6c369028217786b216dd7ad83247f929613818356e8856eef3abf.tgz",
+          "archiveSize": 11368418,
+          "archiveSha256": "6b21a76d09ba2d2b4e1c3012a70a63353a983ad0a4c67242c37bdfd50de69a68"
         },
         {
           "sha256": "43ed59166d1d9cdd41ae56a0bcb9aaece2ddc00708f0854f21828494b29315aa",
@@ -837,11 +837,11 @@
           "archiveSha256": "46ce103d3c585317f55a3ddf2d51777c35efd172bdd20542ab530d5f2bc0e821"
         },
         {
-          "sha256": "4a163b1b4f138df069bdd9f4f47c4a081019dd915d5f98ae02a93393cdffe963",
-          "size": 5982720,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h4a163b1b4f138df069bdd9f4f47c4a081019dd915d5f98ae02a93393cdffe963.tgz",
-          "archiveSize": 2013418,
-          "archiveSha256": "7edb4e041bd3dd1e5732cc6942e8aa89442e846b6700655c268a779cec7a8709"
+          "sha256": "4c164589fe7dc8d2aeb57146fb9ceb2845ff2e6789121913d095d35c26ab1d49",
+          "size": 6004736,
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h4c164589fe7dc8d2aeb57146fb9ceb2845ff2e6789121913d095d35c26ab1d49.tgz",
+          "archiveSize": 2019781,
+          "archiveSha256": "789259da99258ee68b6f21c8023a1be5c469bfca3062239954e990ed9f64b9cd"
         },
         {
           "sha256": "15378e38de6292c183145444811610b2bfde8b72bd694127d1a009e020d09859",
@@ -858,11 +858,11 @@
           "archiveSha256": "541098580cb90b6f0ec96267bd3bb987122dfd1e086f02cf1eeb3a7fee531c5a"
         },
         {
-          "sha256": "05d33955a055104393598f3aa52493505b7332a60d9dd86491be0c5f0e0cd3b7",
+          "sha256": "e2c6b19fa4cca42d51bf6b1f6cd6ad2e437ad119b28c7690a4e6a029b48de802",
           "size": 34276749,
-          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.h05d33955a055104393598f3aa52493505b7332a60d9dd86491be0c5f0e0cd3b7.tgz",
-          "archiveSize": 27888292,
-          "archiveSha256": "69ad95ecd2d00251dc1247f882f76f408db8ce57096d5ff1eb2853ee6ca95c00"
+          "url": "https://registry.npmjs.org/@petercjl/codex-own/-/codex-own-0.0.0-payload.he2c6b19fa4cca42d51bf6b1f6cd6ad2e437ad119b28c7690a4e6a029b48de802.tgz",
+          "archiveSize": 27888291,
+          "archiveSha256": "4d499d3e13307e96d2fa9d3f2e5329846dd5a91b8ae8b7532b835fded958555f"
         },
         {
           "sha256": "1ed2bf8a8edfa5772517404274b44baf011ec3bbfc89936bc3851d54daee4686",
@@ -904,42 +904,252 @@
   },
   "provenance": {
     "darwin-arm64": {
-      "upstreamCommit": null,
-      "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+      "nativeBase": {
+        "version": "0.6.3",
+        "identity": "3bec71959e4ee0ebd92722dbf72a28ea1c60e26f61089c44e38ec97eaf68d2c3",
+        "source": {
+          "darwin-arm64": {
+            "nativeBase": {
+              "version": "0.6.2",
+              "identity": "417962c59809acbe93dcfe2fc39026b921bdf9d2026ce49063b2ea9e6b6e51f6",
+              "source": {
+                "darwin-arm64": {
+                  "upstreamCommit": null,
+                  "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                  "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+                  "toolchain": {
+                    "node": "v24.15.0",
+                    "platform": "darwin-arm64",
+                    "image": "20260907.0337.1"
+                  },
+                  "originalProgramTree": {
+                    "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
+                    "fileCount": 4012
+                  },
+                  "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
+                  "cliSource": "upstream-resolved-vendor",
+                  "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
+                  "cliVersion": "codex-cli 0.156.1-cometix",
+                  "optionalMissingBindings": []
+                },
+                "win32-x64": {
+                  "upstreamCommit": null,
+                  "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                  "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+                  "toolchain": {
+                    "node": "v24.15.0",
+                    "platform": "win32-x64",
+                    "image": "20261007.264.1"
+                  },
+                  "originalProgramTree": {
+                    "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
+                    "fileCount": 3604
+                  },
+                  "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
+                  "cliSource": "upstream-resolved-vendor",
+                  "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
+                  "cliVersion": "codex-cli 0.156.1-cometix",
+                  "optionalMissingBindings": []
+                }
+              }
+            },
+            "upgradeNpmUpdater": true,
+            "overlaySource": "702edd41b58974e96628084b20d10d1cf1660a7d",
+            "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+            "toolchain": {
+              "node": "v24.15.0",
+              "platform": "darwin-arm64",
+              "image": "20260907.0337.1"
+            }
+          },
+          "win32-x64": {
+            "nativeBase": {
+              "version": "0.6.2",
+              "identity": "09d8b6120bb202a7cac8a11f4c247f4fd31e63981aedad930b8f9af18dc796ba",
+              "source": {
+                "darwin-arm64": {
+                  "upstreamCommit": null,
+                  "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                  "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+                  "toolchain": {
+                    "node": "v24.15.0",
+                    "platform": "darwin-arm64",
+                    "image": "20260907.0337.1"
+                  },
+                  "originalProgramTree": {
+                    "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
+                    "fileCount": 4012
+                  },
+                  "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
+                  "cliSource": "upstream-resolved-vendor",
+                  "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
+                  "cliVersion": "codex-cli 0.156.1-cometix",
+                  "optionalMissingBindings": []
+                },
+                "win32-x64": {
+                  "upstreamCommit": null,
+                  "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                  "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+                  "toolchain": {
+                    "node": "v24.15.0",
+                    "platform": "win32-x64",
+                    "image": "20261007.264.1"
+                  },
+                  "originalProgramTree": {
+                    "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
+                    "fileCount": 3604
+                  },
+                  "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
+                  "cliSource": "upstream-resolved-vendor",
+                  "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
+                  "cliVersion": "codex-cli 0.156.1-cometix",
+                  "optionalMissingBindings": []
+                }
+              }
+            },
+            "upgradeNpmUpdater": true,
+            "overlaySource": "702edd41b58974e96628084b20d10d1cf1660a7d",
+            "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+            "toolchain": {
+              "node": "v24.15.0",
+              "platform": "win32-x64",
+              "image": "20261007.264.1"
+            }
+          }
+        }
+      },
+      "upgradeNpmUpdater": true,
+      "overlaySource": "504a1b3495744eaccb00faaeac06768aa0039970",
       "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
       "toolchain": {
         "node": "v24.15.0",
         "platform": "darwin-arm64",
         "image": "20260907.0337.1"
-      },
-      "originalProgramTree": {
-        "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
-        "fileCount": 4012
-      },
-      "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
-      "cliSource": "upstream-resolved-vendor",
-      "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
-      "cliVersion": "codex-cli 0.156.1-cometix",
-      "optionalMissingBindings": []
+      }
     },
     "win32-x64": {
-      "upstreamCommit": null,
-      "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+      "nativeBase": {
+        "version": "0.6.3",
+        "identity": "89e29c17e98085a6b8123796fe9c12da2953098fdcd0b419ac1cb9094c53da4c",
+        "source": {
+          "darwin-arm64": {
+            "nativeBase": {
+              "version": "0.6.2",
+              "identity": "417962c59809acbe93dcfe2fc39026b921bdf9d2026ce49063b2ea9e6b6e51f6",
+              "source": {
+                "darwin-arm64": {
+                  "upstreamCommit": null,
+                  "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                  "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+                  "toolchain": {
+                    "node": "v24.15.0",
+                    "platform": "darwin-arm64",
+                    "image": "20260907.0337.1"
+                  },
+                  "originalProgramTree": {
+                    "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
+                    "fileCount": 4012
+                  },
+                  "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
+                  "cliSource": "upstream-resolved-vendor",
+                  "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
+                  "cliVersion": "codex-cli 0.156.1-cometix",
+                  "optionalMissingBindings": []
+                },
+                "win32-x64": {
+                  "upstreamCommit": null,
+                  "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                  "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+                  "toolchain": {
+                    "node": "v24.15.0",
+                    "platform": "win32-x64",
+                    "image": "20261007.264.1"
+                  },
+                  "originalProgramTree": {
+                    "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
+                    "fileCount": 3604
+                  },
+                  "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
+                  "cliSource": "upstream-resolved-vendor",
+                  "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
+                  "cliVersion": "codex-cli 0.156.1-cometix",
+                  "optionalMissingBindings": []
+                }
+              }
+            },
+            "upgradeNpmUpdater": true,
+            "overlaySource": "702edd41b58974e96628084b20d10d1cf1660a7d",
+            "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+            "toolchain": {
+              "node": "v24.15.0",
+              "platform": "darwin-arm64",
+              "image": "20260907.0337.1"
+            }
+          },
+          "win32-x64": {
+            "nativeBase": {
+              "version": "0.6.2",
+              "identity": "09d8b6120bb202a7cac8a11f4c247f4fd31e63981aedad930b8f9af18dc796ba",
+              "source": {
+                "darwin-arm64": {
+                  "upstreamCommit": null,
+                  "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                  "updaterNodeSha256": "3200fbd9f7fd4410426dd541e10d1ab829d3472f270d743c7fabd1696c03fe32",
+                  "toolchain": {
+                    "node": "v24.15.0",
+                    "platform": "darwin-arm64",
+                    "image": "20260907.0337.1"
+                  },
+                  "originalProgramTree": {
+                    "sha256": "39ea65581aaa0159e90153ccd10308de2380e3e584beb9f406615a1dbeab6722",
+                    "fileCount": 4012
+                  },
+                  "originalAsarSha256": "bf9c41fa9770fbfacfba93042ff71c24cb65c82935819377275faac08103383f",
+                  "cliSource": "upstream-resolved-vendor",
+                  "cliSha256": "bdf26c4f03ab64e57162a2f715d0f5b236f4534e60ca92abb989069280066987",
+                  "cliVersion": "codex-cli 0.156.1-cometix",
+                  "optionalMissingBindings": []
+                },
+                "win32-x64": {
+                  "upstreamCommit": null,
+                  "ownSourceRef": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
+                  "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+                  "toolchain": {
+                    "node": "v24.15.0",
+                    "platform": "win32-x64",
+                    "image": "20261007.264.1"
+                  },
+                  "originalProgramTree": {
+                    "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
+                    "fileCount": 3604
+                  },
+                  "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
+                  "cliSource": "upstream-resolved-vendor",
+                  "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
+                  "cliVersion": "codex-cli 0.156.1-cometix",
+                  "optionalMissingBindings": []
+                }
+              }
+            },
+            "upgradeNpmUpdater": true,
+            "overlaySource": "702edd41b58974e96628084b20d10d1cf1660a7d",
+            "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
+            "toolchain": {
+              "node": "v24.15.0",
+              "platform": "win32-x64",
+              "image": "20261007.264.1"
+            }
+          }
+        }
+      },
+      "upgradeNpmUpdater": true,
+      "overlaySource": "504a1b3495744eaccb00faaeac06768aa0039970",
       "updaterNodeSha256": "3331e1ffe19874215472217c5e94f5a0c6d8e18c4ac7111d3937aa0ad5e9b4a5",
       "toolchain": {
         "node": "v24.15.0",
         "platform": "win32-x64",
         "image": "20261007.264.1"
-      },
-      "originalProgramTree": {
-        "sha256": "c43614b1181aa017272e9cc9e379d523afe28a4901b0d29b8e039c399f5ffbb4",
-        "fileCount": 3604
-      },
-      "originalAsarSha256": "163a18c84db57ad5c50222b313dc4d11d45febc03ec065b516ba9f0380f2eb3f",
-      "cliSource": "upstream-resolved-vendor",
-      "cliSha256": "8d12293fc75d495ebc1df360b25a05352dbe6ce0521c3456b5c33a3bb92ab014",
-      "cliVersion": "codex-cli 0.156.1-cometix",
-      "optionalMissingBindings": []
+      }
     }
   },
   "runtimes": {
@@ -1035,26 +1245,26 @@
   },
   "binding": {
     "schema": 1,
-    "managerVersion": "0.6.2",
+    "managerVersion": "0.6.4",
     "managerSource": {
       "repository": "petercjl/codex-own",
-      "ref": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
-      "run": "38936208880",
+      "ref": "504a1b3495744eaccb00faaeac06768aa0039970",
+      "run": "39002688773",
       "workflow": ".github/workflows/own-release.yml"
     },
     "managerContract": 2,
-    "releasePolicyFingerprint": "4b65c347e1215a88fb03a0573c04c60fbb6bdfddd3444c4f6f03e89e304a2a02",
+    "releasePolicyFingerprint": "95fec8be9585f27c40dcd70750ba850e3bfeb014be6cfe61f4eec4aa3824d643",
     "desktop": {
-      "artifactVersion": "0.6.2",
-      "publishedIn": "0.6.2",
-      "identity": "d3959ab15bf363ae9f852b5a1957f5d105943b8b6f783e4ef2e866fe63396975",
-      "inputFingerprint": "d08cd692f1dad41f17b932d7e0ac6d2a7993c1a2284fda46d3b8ef92c7ee80b7",
-      "declaredFingerprint": "18f16cad7bd7e8c4fd525c32f084907dc253a74430e7f10c9a3ab913dce5b21f",
+      "artifactVersion": "0.6.4",
+      "publishedIn": "0.6.4",
+      "identity": "b0125afb9b223af0b943481f7fd47e62ecd16191f06d412d4cd04a4a04cc1f82",
+      "inputFingerprint": "50c2aeabb0ba11b4c2acf49232ddaadcf5c3815d336ec80f7124ea639ff406ae",
+      "declaredFingerprint": "219354ba5cd42791ca3a012517c8c840049efe4665afc19d5d5556e0947e5a58",
       "upstreamFingerprint": "534b9cc3c7f2682d02176e3077af87f763058b193d47988b311b9e1b3277cd61",
       "source": {
         "repository": "petercjl/codex-own",
-        "ref": "d432fe03d07a343d75962e1f8b92bffcd68360fb",
-        "run": "38936208880",
+        "ref": "504a1b3495744eaccb00faaeac06768aa0039970",
+        "run": "39002688773",
         "workflow": ".github/workflows/own-release.yml"
       },
       "updaterContract": 2,

package/skills/codex-own/SKILL.md

@@ -20,6 +20,12 @@ For installation-only acceptance, verify doctor, version, target and shortcut wi
 
 Desktop builds with the bundled npm updater check stable latest 15 seconds after startup and every six hours. The user-facing menu is 更新 → 检查 codex-own 更新…. Download runs while the app remains usable; 重启并安装 asks the user to end active tasks, then an independent helper waits for exit, backs up and replaces the app. The helper uses bundled Node and npm payloads, so daily in-app updates do not require updating global npm tooling. Inspect the installed app's own updater version separately from the global CLI version. Retain CLI step 3 for older builds and recovery. Prepared, verified downloads survive restarts; offline checks preserve the current installation. Install logs and unique result records live under the independent manager directory; never delete locks to bypass a failed update.
 
+## Update cleanup (contract 1)
+
+Desktop 0.6.4+ confirms a matching managed installation only after its main interface loads and remains alive for 30 seconds. It then automatically reclaims applied archives and completed inactive helpers, retires superseded successful app/data backup pairs while preserving the latest complete rollback, and evicts least recently used unpinned content blocks above the default 2 GiB cache limit. Pending or failed updates retain their files and needed blocks; unknown receipts protect the cache conservatively and can temporarily exceed the limit. Live configuration, credentials, conversations and private tool versions remain outside cleanup.
+
+For a cleanup request, inspect `codex-own cleanup plan` first. With authorization covering removal of obsolete managed update files and older backups, use `codex-own cleanup run --yes`; the app may remain open. `--cache-limit-mib <0..16384>` optionally changes that invocation's limit. Return to main-line verification with reclaimed bytes, retained rollback, warnings and report path. A deferred result such as HEALTH_NOT_CONFIRMED, INCOMPLETE_TRANSACTION or ROLLBACK_INCOMPLETE is not a cleanup success: inspect the corresponding startup or transaction state and preserve recovery material. BUSY retains the operation lock. Do not substitute broad filesystem deletion or fabricate startup evidence. The update window displays the latest startup's cleanup result; diagnostic records are bounded to 20 per category.
+
 ## Private tool runtime (contract 1)
 
 Desktop installations from 0.5.0 include a separately versioned Node/npm/Python toolchain. The manager's release manifest pins verified npm payloads for macOS ARM64 and Windows x64. Install/update ensures these tools before switching the app. Runtime bytes retain upstream licenses and contain no user configuration. The initial npm manager bootstrap still requires existing Node.js 22+; ordinary app updates use the bundled updater.

package/skills/codex-own/capabilities.json

@@ -28,7 +28,7 @@
       "side_effects": {
         "external_mutation": true,
         "may_cost_money": false,
-        "authorization": "Only requested install, update, configuration or recovery; read-only checks otherwise."
+        "authorization": "Only requested install, update, configuration, recovery or managed update cleanup; read-only checks otherwise. Cleanup may retire older backups while preserving the latest complete rollback."
       },
       "errors": [
         "CAPABILITY_UNAVAILABLE",
@@ -36,4 +36,4 @@
       ]
     }
   ]
-}
+}