@zq-silk/yui 0.14.0 → 0.14.1

package/README.md

@@ -781,7 +781,10 @@ TaskRole itself stores identity and desired launch configuration, not runtime
 status; Role status shown by CLI/Web is derived from the active Turn plus
 Session/Driver lifecycle facts.
 
-Global Operator and global Role sessions remain native interactive CLIs:
+Global Operator and global Role sessions remain native interactive CLIs. Codex
+connects that TUI to the default shared App Server, so the same thread can move
+between Yui and Desktop without transferring a rollout writer or losing its
+Global Context entry:
 
 ```sh
 yui session enter <global-role>

package/dist/agent/argumentPolicy.js

@@ -1,7 +1,8 @@
 const OWNED_ARGUMENTS_BY_ADAPTER = {
     codex: [
         "resume", "fork", "exec", "e", "review",
-        "--model", "-m", "--config", "-c", "--sandbox", "-s",
+        "--model", "-m", "--config", "-c", "--remote", "--remote-auth-token-env",
+        "--sandbox", "-s",
         "--ask-for-approval", "-a", "--search", "--profile", "-p",
         "--add-dir", "--cd", "-C", "--full-auto",
         "--dangerously-bypass-approvals-and-sandbox",

package/dist/context/sessionBootstrapManifest.js

@@ -130,7 +130,10 @@ export function materializeSessionBootstrap(input) {
         roleProfileRef: { digest: profileDigest, path: roleProfilePath },
         contextProtocol: input.owner.scope === "global"
             ? {
-                loadCommand: "\"$YUI_SESSION_CLI\" session context \"$YUI_ROLE\" --json"
+                // A Global Session may move between Yui's remote TUI and Desktop.
+                // Carry its read entry in the Thread-visible Manifest instead of
+                // depending on the client process that happened to create it.
+                loadCommand: renderGlobalContextCommand(input.controlPlane, home, input.role.name)
             }
             : {
                 loadCommand: "\"$YUI_SESSION_CLI\" task turn context \"$YUI_TASK_ID/<turn-id>\" --json",
@@ -148,6 +151,20 @@ export function materializeSessionBootstrap(input) {
         descriptorPath
     });
 }
+function renderGlobalContextCommand(controlPlane, home, roleName) {
+    return [
+        `YUI_HOME=${quoteShellWord(home)}`,
+        quoteShellWord(controlPlane.executable),
+        quoteShellWord(controlPlane.cliEntry),
+        "session",
+        "context",
+        quoteShellWord(roleName),
+        "--json"
+    ].join(" ");
+}
+function quoteShellWord(value) {
+    return `'${value.replaceAll("'", "'\"'\"'")}'`;
+}
 /**
  * Retargets known managed wrappers to the current resolved control plane after
  * a compatible update. Only a valid Session Manifest may nominate a wrapper,

package/dist/executor/fileRoleLaunchPlanner.js

@@ -567,7 +567,13 @@ export class FileRoleLaunchPlanner {
         const scopedLaunch = owner.scope === "task"
             ? this.#applyWorkspaceScope(owner.taskId, role, launch, workspaceOverride)
             : launch;
-        const ordinaryConversationLaunch = withCodexThreadEnvironment(scopedLaunch);
+        const sharedDaemonLaunch = owner.scope === "global" && configured.adapterId === "codex"
+            ? {
+                ...scopedLaunch,
+                args: addCodexSharedDaemonRemote(scopedLaunch.args, launchMode, scopedLaunch.env)
+            }
+            : scopedLaunch;
+        const ordinaryConversationLaunch = withCodexThreadEnvironment(sharedDaemonLaunch);
         return {
             role: {
                 name: role.name,
@@ -830,6 +836,34 @@ function addCodexSessionNotify(args, mode, cliPath) {
     }
     return [...args.slice(0, -2), ...managed, ...args.slice(-2)];
 }
+/**
+ * Global Codex keeps its native TUI, but the TUI is only a client attachment
+ * to the user's shared App Server. The daemon owns the Thread and its writer,
+ * so Desktop can open the same Yui-created Thread without a second rollout
+ * writer or a Yui-specific takeover.
+ */
+export function addCodexSharedDaemonRemote(args, mode, environment = {}) {
+    const sessionEnvironment = Object.fromEntries(Object.entries(environment).filter(([name]) => name.startsWith("YUI_")));
+    const remote = [
+        "--remote",
+        "unix://",
+        ...(Object.keys(sessionEnvironment).length === 0
+            ? []
+            : ["--config", codexShellEnvironmentConfig(sessionEnvironment)])
+    ];
+    if (mode === "new")
+        return [...args, ...remote];
+    if (args.length < 2 || args.at(-2) !== "resume") {
+        throw new Error("Codex resume launch shape is invalid.");
+    }
+    return [...args.slice(0, -2), ...remote, ...args.slice(-2)];
+}
+function codexShellEnvironmentConfig(environment) {
+    const entries = Object.entries(environment)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([name, value]) => `${JSON.stringify(name)}=${JSON.stringify(value)}`);
+    return `shell_environment_policy.set={${entries.join(",")}}`;
+}
 /**
  * Codex 0.145 discovers lifecycle hooks from its effective config. Keep Yui's
  * two handlers invocation-local: this avoids mutating CODEX_HOME or the Task

package/i18n/README.zh-CN.md

@@ -519,7 +519,7 @@ yui task role takeover <task-id> <role>
 yui task role release <task-id> <role>
 ```
 
-Codex Role thread 可在 Desktop 中直接查看和操作；Desktop 已有 active Turn 时，Yui 只保留待投递工作并等待，不会失败或重复投递。`view`、`takeover`、`release` 继续作为 Claude 等独立进程 Provider 的人工控制入口。Yui 不写入全局 Hook/config，也不启动、重启或停止共享 daemon；Codex CLI/daemon 故障由 Task 生命周期之外修复。Global Operator 与 global Role 继续使用原生交互式 CLI，不属于受管理 Task Provider 协议。
+Codex Role thread 可在 Desktop 中直接查看和操作；Desktop 已有 active Turn 时，Yui 只保留待投递工作并等待，不会失败或重复投递。`view`、`takeover`、`release` 继续作为 Claude 等独立进程 Provider 的人工控制入口。Yui 不写入全局 Hook/config，也不启动、重启或停止共享 daemon；Codex CLI/daemon 故障由 Task 生命周期之外修复。Global Operator 与 global Role 继续使用原生交互式 CLI，不属于受管理 Task Provider 协议；Yui 在内部将 Codex 的 Global TUI 连接到同一个默认 App Server，用户不能通过 Agent 或 Role 参数覆盖该连接，Session Manifest 自带不依赖启动进程环境的 Global Context 命令，因此同一 thread 可直接切换到 Desktop 继续对话。
 
 当新版本需要离线迁移 Home 时，应等待当前 Turn 完成，然后从普通 shell
 执行 `yui session stop --all`，再重新执行 `yui update`。停止命令会先整体预检：

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zq-silk/yui",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "description": "Local control plane for long-running native agent CLI sessions backed by tmux.",
   "license": "MIT",
   "private": false,

package/skills/yui-runtime/SKILL.md

@@ -43,12 +43,11 @@ The pack's authority view and writable Project IDs are hard boundaries. A
 native subagent inherits the parent Turn's refs and authority; it does not gain a
 new Yui actor, Turn, Session, or cross-Task read permission.
 
-For a global Operator or custom GlobalRole Session, load the stable authorized view
-before routing or acting:
-
-```sh
-"$YUI_SESSION_CLI" session context "$YUI_ROLE" --json
-```
+For a global Operator or custom GlobalRole Session, execute the exact
+`contextProtocol.loadCommand` carried by the current Session Manifest before
+routing or acting. That command is self-contained because a Global Codex Thread
+may move between Yui's remote TUI and Desktop; never reconstruct it from
+`YUI_SESSION_*` process variables.
 
 Global context grants no Task implementation workspace. Read a Task only after
 the Operator has routed to its public/task-authorized context command; never