harness-mix 0.1.0

package/output/native-build/desktop-controller.mjs

@@ -0,0 +1,1460 @@
+// src/native-ui/desktop-control/src/production-controller.ts
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+
+// src/native-ui/desktop-control/src/controller-attachment-server.ts
+import { createServer } from "node:net";
+var MAX_REQUEST_BYTES = 96;
+function validPort(value) {
+  return Number.isInteger(value) && value >= 1 && value <= 65535;
+}
+function validNonce(value) {
+  return /^[0-9a-f]{32}$/.test(value);
+}
+function closeServer(server) {
+  return new Promise((resolve, reject) => {
+    server.close((error) => {
+      if (error) reject(error);
+      else resolve();
+    });
+  });
+}
+function respond(socket, value) {
+  socket.end(`${value}
+`);
+}
+async function startControllerAttachmentServer(options) {
+  if (!validPort(options.port)) throw new Error("attachment port must be a valid TCP port");
+  if (!validNonce(options.nonce)) {
+    throw new Error("attachment nonce must be 32 lowercase hexadecimal characters");
+  }
+  const sockets = /* @__PURE__ */ new Set();
+  const server = createServer((socket) => {
+    sockets.add(socket);
+    socket.once("close", () => sockets.delete(socket));
+    socket.setEncoding("utf8");
+    socket.setTimeout(5e3, () => socket.destroy());
+    let request = "";
+    let handled = false;
+    socket.on("data", (chunk) => {
+      if (handled) return;
+      request += chunk;
+      if (request.length > MAX_REQUEST_BYTES) {
+        handled = true;
+        respond(socket, "rejected");
+        return;
+      }
+      const newline = request.indexOf("\n");
+      if (newline < 0) return;
+      handled = true;
+      const line = request.slice(0, newline).replace(/\r$/, "");
+      if (line === `ATTACH ${options.nonce}`) {
+        void options.attach().then(
+          () => respond(socket, "ready"),
+          () => respond(socket, "failed")
+        );
+        return;
+      }
+      respond(socket, "rejected");
+    });
+  });
+  await new Promise((resolve, reject) => {
+    const onError = (error) => reject(error);
+    server.once("error", onError);
+    server.listen(options.port, "127.0.0.1", () => {
+      server.off("error", onError);
+      resolve();
+    });
+  });
+  let closed = false;
+  return {
+    async close() {
+      if (closed) return;
+      closed = true;
+      for (const socket of sockets) socket.destroy();
+      await closeServer(server);
+    }
+  };
+}
+
+// src/native-ui/desktop-control/src/cdp-client.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function nonEmptyString(value, field) {
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(`CDP target '${field}' must be non-empty text`);
+  }
+  return value;
+}
+function loopbackUrl(value, protocols) {
+  const url = new URL(value);
+  if (!protocols.includes(url.protocol)) {
+    throw new Error(`CDP endpoint must use ${protocols.join(" or ")}`);
+  }
+  if (!["127.0.0.1", "localhost", "[::1]"].includes(url.hostname)) {
+    throw new Error("CDP endpoint must use a loopback host");
+  }
+  return url;
+}
+function parseTarget(value) {
+  if (!isRecord(value)) throw new Error("CDP target must be an object");
+  const target = {
+    id: nonEmptyString(value.id, "id"),
+    type: nonEmptyString(value.type, "type"),
+    title: typeof value.title === "string" ? value.title : "",
+    url: nonEmptyString(value.url, "url"),
+    webSocketDebuggerUrl: nonEmptyString(value.webSocketDebuggerUrl, "webSocketDebuggerUrl")
+  };
+  loopbackUrl(target.webSocketDebuggerUrl, ["ws:", "wss:"]);
+  return target;
+}
+function defaultFetch(url) {
+  return fetch(url);
+}
+function defaultSocketFactory(url) {
+  return new WebSocket(url);
+}
+function messageText(value) {
+  if (typeof value === "string") return value;
+  if (value instanceof ArrayBuffer) return new TextDecoder().decode(value);
+  if (ArrayBuffer.isView(value)) {
+    return new TextDecoder().decode(
+      new Uint8Array(value.buffer, value.byteOffset, value.byteLength)
+    );
+  }
+  throw new Error("CDP WebSocket returned a non-text message");
+}
+function parseResponse(value) {
+  if (!isRecord(value) || typeof value.id !== "number") return null;
+  const response = { id: value.id };
+  if ("result" in value) response.result = value.result;
+  if (isRecord(value.error)) {
+    response.error = {
+      ...typeof value.error.code === "number" ? { code: value.error.code } : {},
+      ...typeof value.error.message === "string" ? { message: value.error.message } : {}
+    };
+  }
+  return response;
+}
+async function listCdpTargets(endpoint, fetchImpl = defaultFetch) {
+  const baseUrl = loopbackUrl(endpoint, ["http:", "https:"]);
+  const targetsUrl = new URL("/json/list", baseUrl).toString();
+  const response = await fetchImpl(targetsUrl);
+  if (!response.ok) throw new Error(`CDP target discovery failed with HTTP ${response.status}`);
+  const value = await response.json();
+  if (!Array.isArray(value)) throw new Error("CDP target discovery did not return an array");
+  return value.map(parseTarget);
+}
+var CdpClient = class _CdpClient {
+  #commandTimeoutMs;
+  #socket;
+  #closed = false;
+  #nextId = 1;
+  #pending = /* @__PURE__ */ new Map();
+  #listeners = /* @__PURE__ */ new Map();
+  constructor(socket, commandTimeoutMs) {
+    this.#socket = socket;
+    this.#commandTimeoutMs = commandTimeoutMs;
+    socket.addEventListener("message", (event) => this.#onMessage(event));
+    socket.addEventListener("error", () => this.#fail(new Error("CDP WebSocket failed")));
+    socket.addEventListener("close", () => this.#fail(new Error("CDP WebSocket closed")));
+  }
+  static async connect(url, options = {}) {
+    loopbackUrl(url, ["ws:", "wss:"]);
+    const socketFactory = options.socketFactory ?? defaultSocketFactory;
+    const socket = socketFactory(url);
+    const connectTimeoutMs = options.connectTimeoutMs ?? 1e4;
+    await new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        cleanup();
+        socket.close();
+        reject(new Error("CDP WebSocket connection timed out"));
+      }, connectTimeoutMs);
+      const onOpen = () => {
+        cleanup();
+        resolve();
+      };
+      const onError = () => {
+        cleanup();
+        reject(new Error("CDP WebSocket connection failed"));
+      };
+      const cleanup = () => {
+        clearTimeout(timeout);
+        socket.removeEventListener("open", onOpen);
+        socket.removeEventListener("error", onError);
+      };
+      socket.addEventListener("open", onOpen);
+      socket.addEventListener("error", onError);
+    });
+    return new _CdpClient(socket, options.commandTimeoutMs ?? 1e4);
+  }
+  command(method, params = {}) {
+    return this.#send(method, params);
+  }
+  sessionCommand(sessionId, method, params = {}) {
+    if (sessionId.length === 0) return Promise.reject(new Error("CDP session ID is required"));
+    return this.#send(method, params, sessionId);
+  }
+  on(method, listener) {
+    const listeners = this.#listeners.get(method) ?? /* @__PURE__ */ new Set();
+    listeners.add(listener);
+    this.#listeners.set(method, listeners);
+    return () => {
+      listeners.delete(listener);
+      if (listeners.size === 0) this.#listeners.delete(method);
+    };
+  }
+  #send(method, params, sessionId) {
+    if (this.#closed) return Promise.reject(new Error("CDP client is closed"));
+    const id = this.#nextId++;
+    return new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        this.#pending.delete(id);
+        reject(new Error(`CDP command '${method}' timed out`));
+      }, this.#commandTimeoutMs);
+      this.#pending.set(id, { resolve, reject, timeout });
+      try {
+        this.#socket.send(
+          JSON.stringify({ id, method, params, ...sessionId ? { sessionId } : {} })
+        );
+      } catch (error) {
+        clearTimeout(timeout);
+        this.#pending.delete(id);
+        reject(error instanceof Error ? error : new Error(String(error)));
+      }
+    });
+  }
+  async evaluate(expression) {
+    const response = await this.command("Runtime.evaluate", {
+      expression,
+      awaitPromise: true,
+      returnByValue: true
+    });
+    if (!isRecord(response)) throw new Error("Runtime.evaluate returned an invalid result");
+    if (isRecord(response.exceptionDetails)) {
+      const text = typeof response.exceptionDetails.text === "string" ? response.exceptionDetails.text : "Renderer evaluation failed";
+      throw new Error(text);
+    }
+    if (!isRecord(response.result) || !("value" in response.result)) {
+      throw new Error("Runtime.evaluate did not return a value");
+    }
+    return response.result.value;
+  }
+  close() {
+    if (this.#closed) return;
+    this.#closed = true;
+    this.#fail(new Error("CDP client closed"));
+    this.#listeners.clear();
+    this.#socket.close();
+  }
+  #onMessage(event) {
+    try {
+      const value = JSON.parse(messageText(event.data));
+      const response = parseResponse(value);
+      if (!response) {
+        if (!isRecord(value) || typeof value.method !== "string") return;
+        const sessionId = typeof value.sessionId === "string" ? value.sessionId : void 0;
+        for (const listener of this.#listeners.get(value.method) ?? []) {
+          listener(value.params, sessionId);
+        }
+        return;
+      }
+      const pending = this.#pending.get(response.id);
+      if (!pending) return;
+      clearTimeout(pending.timeout);
+      this.#pending.delete(response.id);
+      if (response.error) {
+        const code = response.error.code === void 0 ? "unknown" : String(response.error.code);
+        pending.reject(
+          new Error(response.error.message ?? `CDP command failed with error ${code}`)
+        );
+      } else {
+        pending.resolve(response.result);
+      }
+    } catch (error) {
+      this.#fail(error instanceof Error ? error : new Error(String(error)));
+    }
+  }
+  #fail(error) {
+    for (const pending of this.#pending.values()) {
+      clearTimeout(pending.timeout);
+      pending.reject(error);
+    }
+    this.#pending.clear();
+  }
+};
+
+// src/native-ui/desktop-control/src/renderer-draft-prewarm-runtime.ts
+function installDraftPrewarmPolicyBridge(manager, bridge, hostId, target, prewarmedThreadManager) {
+  const existing = target.__codexhostDraftPrewarmPolicyV1;
+  if (existing?.owns?.length === 4 && existing.owns(manager, bridge, hostId, prewarmedThreadManager) === true) {
+    return { state: "ready", reason: "owned-request-bridge" };
+  }
+  existing?.dispose?.();
+  const originalSend = bridge.sendRequest;
+  const originalPrewarm = bridge.prewarmThreadStart;
+  const originalOnNotification = manager.onNotification;
+  const originalDispatchAppServerResponse = manager.dispatchAppServerResponse;
+  let selectedModel = null;
+  let selectedCodexAccountId = null;
+  const isRecord4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+  const isRemoteControlHost = hostId.startsWith("remote-control:");
+  const knownExternalThreadIds = /* @__PURE__ */ new Set();
+  const knownOfficialThreadIds = /* @__PURE__ */ new Set();
+  const threadOwnershipResolutions = /* @__PURE__ */ new Map();
+  const createBridgeProcessHandle = () => `codexhost-${typeof crypto?.randomUUID === "function" ? crypto.randomUUID() : `${Date.now()}-${Math.random().toString(16).slice(2)}`}`;
+  let bridgeProcessHandle = createBridgeProcessHandle();
+  const bridgeReadyMethod = "codexhost/remote-control-bridge/ready";
+  const bridgeRequests = /* @__PURE__ */ new Map();
+  const bridgeServerRequestIdPrefix = "codexhost/remote-control-bridge/server-request/";
+  const bridgeServerRequests = /* @__PURE__ */ new Map();
+  let nextBridgeServerRequestOrdinal = 1;
+  let outputDecoders = {
+    stdout: new TextDecoder(),
+    stderr: new TextDecoder()
+  };
+  const outputBuffers = { stdout: "", stderr: "" };
+  let bridgeState = "idle";
+  let bridgeReadyPromise = null;
+  let bridgeReadyResolve = null;
+  let bridgeReadyReject = null;
+  let bridgeReadyTimeout = null;
+  let bridgeInitialization = null;
+  let writeTail = Promise.resolve();
+  const transportError = (message, cause) => {
+    const error = new Error(`codexhost Remote Control bridge: ${message}`);
+    if (cause !== void 0) Object.assign(error, { cause });
+    return error;
+  };
+  const utf8Base64 = (value) => {
+    const bytes = new TextEncoder().encode(value);
+    let binary = "";
+    for (let index = 0; index < bytes.length; index += 32768) {
+      binary += String.fromCharCode(...bytes.subarray(index, index + 32768));
+    }
+    return btoa(binary);
+  };
+  const utf16LeBase64 = (value) => {
+    let binary = "";
+    for (let index = 0; index < value.length; index += 1) {
+      const codeUnit = value.charCodeAt(index);
+      binary += String.fromCharCode(codeUnit & 255, codeUnit >>> 8);
+    }
+    return btoa(binary);
+  };
+  const failBridge = (cause, terminateProcess = true) => {
+    if (bridgeState === "failed" || bridgeState === "disposed") return;
+    const failedProcessHandle = bridgeProcessHandle;
+    const terminate = terminateProcess && (bridgeState === "starting" || bridgeState === "ready");
+    bridgeState = "failed";
+    if (bridgeReadyTimeout !== null) globalThis.clearTimeout(bridgeReadyTimeout);
+    bridgeReadyTimeout = null;
+    const stderr = outputBuffers.stderr.trim().slice(-1e3);
+    const error = transportError(
+      `${cause instanceof Error ? cause.message : String(cause)}${stderr ? `; ${stderr}` : ""}`,
+      cause
+    );
+    bridgeReadyReject?.(error);
+    bridgeReadyReject = null;
+    bridgeReadyResolve = null;
+    for (const requestId of bridgeRequests.keys()) bridge.onError(requestId, error);
+    bridgeRequests.clear();
+    if (isRemoteControlHost && terminate) {
+      void Promise.resolve(
+        originalSend.call(bridge, "process/kill", { processHandle: failedProcessHandle })
+      ).catch(() => void 0);
+    }
+  };
+  const resetFailedBridge = () => {
+    if (bridgeState !== "failed") return;
+    bridgeProcessHandle = createBridgeProcessHandle();
+    outputDecoders = { stdout: new TextDecoder(), stderr: new TextDecoder() };
+    outputBuffers.stdout = "";
+    outputBuffers.stderr = "";
+    bridgeReadyPromise = null;
+    bridgeReadyResolve = null;
+    bridgeReadyReject = null;
+    bridgeInitialization = null;
+    writeTail = Promise.resolve();
+    bridgeServerRequests.clear();
+    nextBridgeServerRequestOrdinal = 1;
+    bridgeState = "idle";
+  };
+  const rememberExternalThread = (value) => {
+    if (!isRecord4(value) || typeof value.id !== "string") return;
+    if (value.modelProvider === "codexhost" || value.cliVersion === "codexhost") {
+      knownExternalThreadIds.add(value.id);
+      knownOfficialThreadIds.delete(value.id);
+    }
+  };
+  const observeBridgeResult = (request, result) => {
+    if (!request || !isRecord4(result)) return;
+    if (request.method === "thread/list" && Array.isArray(result.data)) {
+      for (const thread of result.data) rememberExternalThread(thread);
+      return;
+    }
+    if (request.method === "thread/start" || request.method === "thread/read" || request.method === "thread/resume") {
+      rememberExternalThread(result.thread);
+      return;
+    }
+    if (request.method === "codexhost/thread/inspect" && isRecord4(request.parameters) && typeof request.parameters.threadId === "string") {
+      if (result.owner === "external") {
+        knownExternalThreadIds.add(request.parameters.threadId);
+        knownOfficialThreadIds.delete(request.parameters.threadId);
+      } else if (result.owner === "codex") {
+        knownOfficialThreadIds.add(request.parameters.threadId);
+        knownExternalThreadIds.delete(request.parameters.threadId);
+      }
+      return;
+    }
+    if (request.method === "thread/delete" && isRecord4(request.parameters) && typeof request.parameters.threadId === "string") {
+      knownExternalThreadIds.delete(request.parameters.threadId);
+      knownOfficialThreadIds.delete(request.parameters.threadId);
+    }
+  };
+  const handleBridgeFrame = (value) => {
+    if (!isRecord4(value)) {
+      failBridge("received a non-object app-server frame");
+      return;
+    }
+    if (value.method === bridgeReadyMethod && value.id === void 0) {
+      if (isRecord4(value.params) && value.params.protocolVersion === 1) {
+        bridgeState = "ready";
+        if (bridgeReadyTimeout !== null) globalThis.clearTimeout(bridgeReadyTimeout);
+        bridgeReadyTimeout = null;
+        bridgeReadyResolve?.();
+        bridgeReadyResolve = null;
+        bridgeReadyReject = null;
+      } else {
+        failBridge("reported an unsupported protocol version");
+      }
+      return;
+    }
+    if (typeof value.method === "string" && value.id === void 0) {
+      if (value.method === "thread/started" && isRecord4(value.params)) {
+        rememberExternalThread(value.params.thread);
+      }
+      originalOnNotification.call(manager, value.method, value.params);
+      return;
+    }
+    if (typeof value.method === "string" && value.id !== void 0) {
+      const outerRequestId = `${bridgeServerRequestIdPrefix}${bridgeProcessHandle}/${nextBridgeServerRequestOrdinal}`;
+      nextBridgeServerRequestOrdinal += 1;
+      bridgeServerRequests.set(outerRequestId, value.id);
+      manager.onRequest({ ...value, id: outerRequestId });
+      return;
+    }
+    if (value.id === void 0) {
+      failBridge("received an app-server response without an id");
+      return;
+    }
+    const request = bridgeRequests.get(value.id);
+    bridgeRequests.delete(value.id);
+    if ("error" in value) {
+      bridge.onError(value.id, value.error, value.metrics);
+      return;
+    }
+    observeBridgeResult(request, value.result);
+    bridge.onResult(value.id, value.result, value.metrics);
+  };
+  const consumeBridgeOutput = (stream, base64) => {
+    const binary = atob(base64);
+    const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    outputBuffers[stream] += outputDecoders[stream].decode(bytes, { stream: true });
+    if (stream === "stderr") {
+      outputBuffers.stderr = outputBuffers.stderr.slice(-4e3);
+      return;
+    }
+    while (true) {
+      const newline = outputBuffers.stdout.indexOf("\n");
+      if (newline < 0) break;
+      const line = outputBuffers.stdout.slice(0, newline).trim();
+      outputBuffers.stdout = outputBuffers.stdout.slice(newline + 1);
+      if (!line) continue;
+      try {
+        handleBridgeFrame(JSON.parse(line));
+      } catch (error) {
+        failBridge(
+          `emitted invalid JSON: ${error instanceof Error ? error.message : String(error)}`
+        );
+        return;
+      }
+    }
+  };
+  const handleOuterNotification = (method, parameters) => {
+    if (method === "process/exited" && isRecord4(parameters) && parameters.processHandle === bridgeProcessHandle) {
+      const exitCode = typeof parameters.exitCode === "number" ? parameters.exitCode : "unknown";
+      const stderr = typeof parameters.stderr === "string" ? parameters.stderr.trim() : "";
+      failBridge(
+        `process exited unexpectedly with code ${exitCode}${stderr ? `: ${stderr}` : ""}`,
+        false
+      );
+      return true;
+    }
+    if (method !== "process/outputDelta" || !isRecord4(parameters) || parameters.processHandle !== bridgeProcessHandle || parameters.stream !== "stdout" && parameters.stream !== "stderr" || typeof parameters.deltaBase64 !== "string") {
+      return false;
+    }
+    if (parameters.capReached === true) {
+      failBridge(`${parameters.stream} was truncated`);
+      return true;
+    }
+    consumeBridgeOutput(parameters.stream, parameters.deltaBase64);
+    return true;
+  };
+  const startBridge = () => {
+    if (!isRemoteControlHost) return Promise.resolve();
+    if (bridgeReadyPromise) return bridgeReadyPromise;
+    bridgeState = "starting";
+    bridgeReadyPromise = new Promise((resolve, reject) => {
+      bridgeReadyResolve = resolve;
+      bridgeReadyReject = reject;
+    });
+    bridgeReadyTimeout = globalThis.setTimeout(
+      () => failBridge("startup timed out after 15000ms"),
+      15e3
+    );
+    const powershellScript = "$ErrorActionPreference = 'Stop'; $descriptorPath = Join-Path $env:LOCALAPPDATA 'codexhost\\remote-control-bridge-v1.json'; $descriptor = Get-Content -LiteralPath $descriptorPath -Raw | ConvertFrom-Json; if ($descriptor.schemaVersion -ne 1) { throw 'Unsupported codexhost Remote Control descriptor' }; $nodePath = [string]$descriptor.nodePath; $runtimePath = [string]$descriptor.runtimePath; if (-not [System.IO.Path]::IsPathRooted($nodePath) -or -not [System.IO.Path]::IsPathRooted($runtimePath)) { throw 'Invalid codexhost Remote Control runtime path' }; $owner = Get-Process -Id ([int]$descriptor.ownerPid) -ErrorAction SilentlyContinue; if ($null -eq $owner) { throw 'CodexHost Remote Control runtime is not running' }; $env:CODEXHOST_REMOTE_CONTROL_BRIDGE_PIPE = [string]$descriptor.pipePath; & $nodePath $runtimePath '--codexhost-remote-control-bridge'; exit $LASTEXITCODE";
+    const command = [
+      "powershell.exe",
+      "-NoLogo",
+      "-NoProfile",
+      "-NonInteractive",
+      "-EncodedCommand",
+      utf16LeBase64(powershellScript)
+    ];
+    const startedProcessHandle = bridgeProcessHandle;
+    try {
+      const started = originalSend.call(bridge, "process/spawn", {
+        command,
+        processHandle: startedProcessHandle,
+        cwd: "C:\\",
+        streamStdin: true,
+        streamStdoutStderr: true,
+        outputBytesCap: null,
+        timeoutMs: null
+      });
+      void Promise.resolve(started).catch((error) => {
+        if (bridgeProcessHandle === startedProcessHandle) failBridge(error, false);
+      });
+    } catch (error) {
+      failBridge(error);
+    }
+    return bridgeReadyPromise;
+  };
+  const writeBridgeFrame = (value) => {
+    const operation = async () => {
+      await startBridge();
+      if (bridgeState !== "ready") throw transportError("is not ready");
+      await originalSend.call(bridge, "process/writeStdin", {
+        processHandle: bridgeProcessHandle,
+        deltaBase64: utf8Base64(`${JSON.stringify(value)}
+`)
+      });
+    };
+    const next = writeTail.then(operation, operation);
+    writeTail = next.catch(() => void 0);
+    return next;
+  };
+  const enqueueBridgeRequest = (method, parameters, options) => bridge.enqueueRequest(method, parameters, options, (request) => {
+    bridgeRequests.set(request.id, { method, parameters });
+    void writeBridgeFrame(request).catch((error) => failBridge(error));
+  });
+  const initializeBridgeProtocol = () => {
+    const initialization = enqueueBridgeRequest("initialize", {
+      clientInfo: {
+        name: "codexhost_remote_control_bridge",
+        title: "codexhost Remote Control bridge",
+        version: "1"
+      },
+      capabilities: {
+        experimentalApi: true,
+        mcpServerOpenaiFormElicitation: true
+      }
+    });
+    return new Promise((resolve, reject) => {
+      const timeout = globalThis.setTimeout(() => {
+        const message = "initialization timed out after 15000ms";
+        failBridge(message);
+        reject(transportError(message));
+      }, 15e3);
+      void Promise.resolve(initialization).then(
+        (value) => {
+          globalThis.clearTimeout(timeout);
+          resolve(value);
+        },
+        (error) => {
+          globalThis.clearTimeout(timeout);
+          reject(error);
+        }
+      );
+    });
+  };
+  const initializeBridge = () => {
+    resetFailedBridge();
+    if (bridgeInitialization) return bridgeInitialization;
+    bridgeInitialization = startBridge().then(() => initializeBridgeProtocol()).then(() => writeBridgeFrame({ method: "initialized", params: {} }));
+    return bridgeInitialization;
+  };
+  const threadIdFromParameters = (parameters) => {
+    if (!isRecord4(parameters)) return null;
+    const value = parameters.threadId ?? parameters.conversationId;
+    return typeof value === "string" ? value : null;
+  };
+  const isThreadScopedMethod = (method) => method.startsWith("thread/") || method.startsWith("turn/") || method.startsWith("review/");
+  const resolveThreadOwnership = (threadId) => {
+    if (knownExternalThreadIds.has(threadId)) return Promise.resolve("external");
+    if (knownOfficialThreadIds.has(threadId)) return Promise.resolve("codex");
+    const pending = threadOwnershipResolutions.get(threadId);
+    if (pending) return pending;
+    const resolution = initializeBridge().then(
+      () => enqueueBridgeRequest("codexhost/thread/ownership/list", {
+        threadIds: [threadId]
+      })
+    ).then((value) => {
+      const ownerships = isRecord4(value) && Array.isArray(value.threads) ? value.threads : null;
+      const ownership = ownerships?.[0];
+      if (!ownerships || !isRecord4(ownership) || ownerships.length !== 1 || ownership.threadId !== threadId || ownership.owner !== "external" && ownership.owner !== "codex") {
+        throw transportError("Thread ownership lookup returned an invalid result");
+      }
+      if (ownership.owner === "external") {
+        knownExternalThreadIds.add(threadId);
+        knownOfficialThreadIds.delete(threadId);
+        return "external";
+      }
+      knownOfficialThreadIds.add(threadId);
+      knownExternalThreadIds.delete(threadId);
+      return "codex";
+    });
+    threadOwnershipResolutions.set(threadId, resolution);
+    const clearResolution = () => {
+      if (threadOwnershipResolutions.get(threadId) === resolution) {
+        threadOwnershipResolutions.delete(threadId);
+      }
+    };
+    void resolution.then(clearResolution, clearResolution);
+    return resolution;
+  };
+  const shouldResolveThreadOwnership = (method, parameters) => {
+    if (!isRemoteControlHost || method.startsWith("codexhost/") || !isThreadScopedMethod(method)) {
+      return null;
+    }
+    const threadId = threadIdFromParameters(parameters);
+    if (!threadId || knownExternalThreadIds.has(threadId) || knownOfficialThreadIds.has(threadId)) {
+      return null;
+    }
+    return threadId;
+  };
+  const shouldUseBridge = (method, parameters) => {
+    if (!isRemoteControlHost) return false;
+    if (method.startsWith("codexhost/")) return true;
+    if (method === "thread/list") return true;
+    if (method === "thread/start") {
+      return isRecord4(parameters) && (typeof parameters.model === "string" && parameters.model.startsWith("codexhost/") || typeof parameters.__codexhostAccountId === "string");
+    }
+    const threadId = threadIdFromParameters(parameters);
+    if (threadId && knownExternalThreadIds.has(threadId)) return true;
+    if (threadId && knownOfficialThreadIds.has(threadId)) return false;
+    return selectedModel !== null && (method.startsWith("thread/") || method.startsWith("turn/") || method.startsWith("review/"));
+  };
+  const routeThreadStart = (parameters) => {
+    if (!isRecord4(parameters) || parameters.ephemeral === true) {
+      return parameters;
+    }
+    const routed = {
+      ...parameters,
+      ...selectedModel === null ? {} : { model: selectedModel },
+      ...selectedCodexAccountId === null ? {} : { __codexhostAccountId: selectedCodexAccountId }
+    };
+    selectedCodexAccountId = null;
+    return routed;
+  };
+  const routedSend = (method, parameters, options) => {
+    const routedParameters = method === "thread/start" ? routeThreadStart(parameters) : parameters;
+    const sendBridged = () => initializeBridge().then(
+      () => enqueueBridgeRequest(method, routedParameters, options)
+    );
+    const sendDirect = () => options === void 0 ? originalSend.call(bridge, method, routedParameters) : originalSend.call(bridge, method, routedParameters, options);
+    const unresolvedThreadId = shouldResolveThreadOwnership(method, routedParameters);
+    if (unresolvedThreadId) {
+      return resolveThreadOwnership(unresolvedThreadId).then(
+        (owner) => owner === "external" ? sendBridged() : sendDirect()
+      );
+    }
+    return shouldUseBridge(method, routedParameters) ? sendBridged() : sendDirect();
+  };
+  const routedPrewarm = (parameters, options) => {
+    const routed = routeThreadStart(parameters);
+    const routedParameters = isRecord4(routed) && typeof routed.model === "string" && routed.model.startsWith("codexhost/") ? { ...routed, ephemeral: true } : routed;
+    if (shouldUseBridge("thread/start", routedParameters)) {
+      return routedSend("thread/start", routedParameters, options);
+    }
+    return options === void 0 ? originalPrewarm.call(bridge, routedParameters) : originalPrewarm.call(bridge, routedParameters, options);
+  };
+  bridge.sendRequest = routedSend;
+  bridge.prewarmThreadStart = routedPrewarm;
+  const routedWindowMessage = (event) => {
+    const message = event.data;
+    if (!isRecord4(message) || message.type !== "mcp-notification" || message.hostId !== hostId || typeof message.method !== "string") {
+      return;
+    }
+    handleOuterNotification(message.method, message.params);
+  };
+  const observesWindowNotifications = isRemoteControlHost && typeof target.addEventListener === "function" && typeof target.removeEventListener === "function";
+  if (observesWindowNotifications) target.addEventListener?.("message", routedWindowMessage);
+  const routedOnNotification = (method, parameters) => {
+    if (!handleOuterNotification(method, parameters)) {
+      originalOnNotification.call(manager, method, parameters);
+    }
+  };
+  const routedDispatchAppServerResponse = (method, response) => {
+    if (isRemoteControlHost && typeof response.id === "string") {
+      const innerRequestId = bridgeServerRequests.get(response.id);
+      if (innerRequestId !== void 0 || bridgeServerRequests.has(response.id)) {
+        bridgeServerRequests.delete(response.id);
+        void writeBridgeFrame({ ...response, id: innerRequestId }).catch(
+          (error) => failBridge(error)
+        );
+        return void 0;
+      }
+      if (response.id.startsWith(bridgeServerRequestIdPrefix)) return void 0;
+    }
+    return originalDispatchAppServerResponse.call(manager, method, response);
+  };
+  if (!observesWindowNotifications) manager.onNotification = routedOnNotification;
+  manager.dispatchAppServerResponse = routedDispatchAppServerResponse;
+  const policy = Object.freeze({
+    state: "ready",
+    hostId,
+    owns(candidateManager, candidate, candidateHostId, candidatePrewarmedThreadManager) {
+      return candidateManager === manager && candidate === bridge && candidateHostId === hostId && candidatePrewarmedThreadManager === prewarmedThreadManager;
+    },
+    requestTarget() {
+      return manager;
+    },
+    select(model) {
+      if (model !== null && (typeof model !== "string" || !model.startsWith("codexhost/"))) {
+        throw new Error("Draft route Model must be a codexhost transport carrier");
+      }
+      if (selectedModel === model) return false;
+      selectedModel = model;
+      return true;
+    },
+    selectAccount(accountId) {
+      if (accountId !== null && !/^[A-Za-z0-9._~-]+$/u.test(accountId)) {
+        throw new Error("Draft Codex Account ID must be filename-safe");
+      }
+      if (selectedCodexAccountId === accountId) return false;
+      selectedCodexAccountId = accountId;
+      return true;
+    },
+    clear() {
+      prewarmedThreadManager.discardAllPrewarmedThreads();
+      return Promise.resolve();
+    },
+    dispose() {
+      if (bridge.sendRequest === routedSend) bridge.sendRequest = originalSend;
+      if (bridge.prewarmThreadStart === routedPrewarm) {
+        bridge.prewarmThreadStart = originalPrewarm;
+      }
+      if (observesWindowNotifications) {
+        target.removeEventListener?.("message", routedWindowMessage);
+      } else if (manager.onNotification === routedOnNotification) {
+        manager.onNotification = originalOnNotification;
+      }
+      if (manager.dispatchAppServerResponse === routedDispatchAppServerResponse) {
+        manager.dispatchAppServerResponse = originalDispatchAppServerResponse;
+      }
+      if (bridgeReadyTimeout !== null) globalThis.clearTimeout(bridgeReadyTimeout);
+      bridgeReadyTimeout = null;
+      if (isRemoteControlHost && (bridgeState === "starting" || bridgeState === "ready")) {
+        void Promise.resolve(
+          originalSend.call(bridge, "process/kill", { processHandle: bridgeProcessHandle })
+        ).catch(() => void 0);
+      }
+      bridgeState = "disposed";
+      const disposedError = transportError("was disposed");
+      bridgeReadyReject?.(disposedError);
+      for (const requestId of bridgeRequests.keys()) bridge.onError(requestId, disposedError);
+      bridgeRequests.clear();
+      bridgeServerRequests.clear();
+      knownExternalThreadIds.clear();
+      knownOfficialThreadIds.clear();
+      threadOwnershipResolutions.clear();
+      selectedModel = null;
+      selectedCodexAccountId = null;
+    }
+  });
+  Object.defineProperty(target, "__codexhostDraftPrewarmPolicyV1", {
+    configurable: true,
+    value: policy
+  });
+  if (typeof target.dispatchEvent === "function" && typeof CustomEvent === "function") {
+    target.dispatchEvent(new CustomEvent("codexhost:draft-prewarm-policy-changed"));
+  }
+  return { state: "ready", reason: "owned-request-bridge" };
+}
+
+// src/native-ui/desktop-control/src/renderer-draft-prewarm-policy.ts
+function selectRendererRequestManager(candidates, activeHostIds) {
+  const unique = /* @__PURE__ */ new Map();
+  for (const candidate of candidates) unique.set(candidate.manager, candidate);
+  const hosts = new Set(
+    activeHostIds.filter((value) => typeof value === "string" && value.length > 0)
+  );
+  if (hosts.size > 1) return null;
+  const activeHostId = hosts.values().next().value;
+  const eligible = [...unique.values()].filter(
+    (candidate) => activeHostId === void 0 || candidate.hostId === activeHostId
+  );
+  return eligible.length === 1 ? eligible[0] ?? null : null;
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var FIND_REQUEST_MANAGER_EXPRESSION = `(() => {
+  const editors = [...document.querySelectorAll(
+    '[data-codex-composer], [contenteditable="true"][role="textbox"]',
+  )];
+  if (editors.length !== 1) {
+    return { candidateCount: 0, hostId: null, sendRequest: null };
+  }
+  let element = editors[0];
+  let fiber = null;
+  while (element != null && fiber == null) {
+    const key = Object.getOwnPropertyNames(element).find((name) =>
+      name.startsWith('__reactFiber$'),
+    );
+    if (key != null) fiber = element[key];
+    element = element.parentElement;
+  }
+  const managers = new Set();
+  const activeHostIds = new Set();
+  for (let depth = 0; fiber != null && depth < 200; depth += 1, fiber = fiber.return) {
+    const props = fiber.memoizedProps;
+    if (props != null && typeof props === 'object') {
+      for (const name of ['executionTargetHostId', 'permissionsHostId']) {
+        const value = props[name];
+        if (typeof value === 'string' && value.length > 0) activeHostIds.add(value);
+      }
+    }
+    let hook = fiber.memoizedState;
+    for (let index = 0; hook != null && index < 120; index += 1, hook = hook.next) {
+      const value = hook.memoizedState;
+      if (
+        value != null &&
+        typeof value === 'object' &&
+        value.requestClient != null &&
+        typeof value.requestClient.prewarmThreadStart === 'function' &&
+        typeof value.requestClient.sendRequest === 'function' &&
+        typeof value.requestClient.enqueueRequest === 'function' &&
+        typeof value.prewarmedThreadManager?.discardAllPrewarmedThreads === 'function' &&
+        typeof value.sendRequest === 'function'
+      ) {
+        managers.add(value);
+      }
+    }
+  }
+  const candidates = [...managers].map((manager) => {
+    const requestClient =
+      typeof manager.requestClient?.sendRequest === 'function' &&
+      typeof manager.requestClient?.prewarmThreadStart === 'function' &&
+      typeof manager.requestClient?.enqueueRequest === 'function'
+        ? manager.requestClient
+        : manager;
+    return {
+      manager,
+      requestClient,
+      hostId: manager?.getHostId?.() ?? requestClient?.hostId ?? null,
+      prewarmedThreadManager: manager?.prewarmedThreadManager ?? null,
+    };
+  });
+  const selected = (${selectRendererRequestManager.toString()})(candidates, [...activeHostIds]);
+  return {
+    candidateCount: selected == null ? candidates.length : 1,
+    hostId: selected?.hostId ?? null,
+    manager: selected?.manager ?? null,
+    requestClient: selected?.requestClient ?? null,
+    prewarmedThreadManager: selected?.prewarmedThreadManager ?? null,
+  };
+})()`;
+var INSTALL_RENDERER_POLICY_FUNCTION = `function(requestClient, hostId, prewarmedThreadManager) {
+  return (${installDraftPrewarmPolicyBridge.toString()})(
+    this,
+    requestClient,
+    hostId,
+    window,
+    prewarmedThreadManager,
+  );
+}`;
+var REQUEST_MANAGER_WAIT_TIMEOUT_MS = 6e4;
+var REQUEST_MANAGER_POLL_INTERVAL_MS = 25;
+function directRendererInstaller() {
+  return `(async () => {
+    const selected = ${FIND_REQUEST_MANAGER_EXPRESSION};
+    if (
+      selected.candidateCount !== 1 ||
+      typeof selected.hostId !== 'string' ||
+      selected.hostId.length === 0 ||
+      selected.manager == null ||
+      selected.requestClient == null
+    ) {
+      throw new Error('Renderer request manager is ambiguous');
+    }
+    if (selected.prewarmedThreadManager == null) {
+      throw new Error('Renderer prewarmed Thread manager is unavailable');
+    }
+    return (${installDraftPrewarmPolicyBridge.toString()})(
+      selected.manager,
+      selected.requestClient,
+      selected.hostId,
+      window,
+      selected.prewarmedThreadManager,
+    );
+  })()`;
+}
+async function waitForDraftPrewarmPolicy(evaluate, expression) {
+  const deadline = Date.now() + REQUEST_MANAGER_WAIT_TIMEOUT_MS;
+  while (true) {
+    try {
+      const value = await evaluate(expression);
+      if (!isRecord2(value) || value.state !== "ready" || value.reason !== "owned-request-bridge") {
+        throw new Error("Renderer draft prewarm policy returned an invalid status");
+      }
+      return value;
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      const remaining = deadline - Date.now();
+      if (!message.includes("Renderer request manager is ambiguous") || remaining <= 0) throw error;
+      await new Promise((resolve) => {
+        setTimeout(resolve, Math.min(REQUEST_MANAGER_POLL_INTERVAL_MS, remaining));
+      });
+    }
+  }
+}
+function installRendererDraftPrewarmPolicyDirect(renderer) {
+  return waitForDraftPrewarmPolicy(
+    (expression) => renderer.evaluate(expression),
+    directRendererInstaller()
+  );
+}
+
+// src/native-ui/desktop-control/src/renderer-cdp-control-session.ts
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function sleep(milliseconds) {
+  return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+function sameAgents(actual, expected) {
+  return actual.length === expected.length && actual.every((agent, index) => agent === expected[index]);
+}
+function isPrimaryRendererUrl(value) {
+  try {
+    const url = new URL(value);
+    return url.protocol === "app:" && url.hostname === "-" && url.pathname === "/index.html" && url.search === "" && url.hash === "";
+  } catch {
+    return false;
+  }
+}
+function selectPrimaryRendererTarget(targets, preferredTargetId) {
+  const candidates = targets.filter(
+    (target) => target.type === "page" && isPrimaryRendererUrl(target.url)
+  );
+  return candidates.find((target) => target.id === preferredTargetId) ?? candidates.at(0) ?? null;
+}
+var RendererAdapterReadinessError = class extends Error {
+  constructor(state, reason) {
+    super(`Production Renderer Adapter is ${state}: ${reason}`);
+    this.state = state;
+    this.reason = reason;
+    this.name = "RendererAdapterReadinessError";
+  }
+  state;
+  reason;
+};
+function validateBindingStatus(value, expectedAgents) {
+  if (!isRecord3(value) || value.version !== 2 || !Array.isArray(value.enabledAgents) || value.enabledAgents.some((agent) => typeof agent !== "string") || !sameAgents(value.enabledAgents, expectedAgents) || !isRecord3(value.adapter)) {
+    throw new Error("Production Renderer binding returned an invalid status");
+  }
+  if (value.adapter.state !== "ready" || typeof value.adapter.reason !== "string") {
+    const state = typeof value.adapter.state === "string" ? value.adapter.state : "invalid";
+    const reason = typeof value.adapter.reason === "string" ? value.adapter.reason : "unknown";
+    throw new RendererAdapterReadinessError(state, reason);
+  }
+  return value;
+}
+async function waitForPrimaryTarget(endpoint, operations, timeoutMs, pollIntervalMs, preferredTargetId) {
+  const deadline = Date.now() + timeoutMs;
+  let lastError;
+  while (Date.now() < deadline) {
+    try {
+      const target = selectPrimaryRendererTarget(
+        await operations.listTargets(endpoint),
+        preferredTargetId
+      );
+      if (target) return target;
+      lastError = new Error("Renderer CDP has no primary app://-/index.html page target");
+    } catch (error) {
+      lastError = error;
+    }
+    await sleep(pollIntervalMs);
+  }
+  const detail = lastError instanceof Error ? `: ${lastError.message}` : "";
+  throw new Error(`Primary Codex Renderer CDP target did not become ready${detail}`);
+}
+async function evaluateSource(renderer, source) {
+  const response = await renderer.command("Runtime.evaluate", {
+    expression: source,
+    awaitPromise: true
+  });
+  if (!isRecord3(response)) throw new Error("Renderer source evaluation returned an invalid result");
+  if (isRecord3(response.exceptionDetails)) {
+    const text = typeof response.exceptionDetails.text === "string" ? response.exceptionDetails.text : "Renderer source evaluation failed";
+    throw new Error(text);
+  }
+}
+async function readBinding(renderer) {
+  return renderer.evaluate("window.__codexhostRendererBindingProbeV1?.status() ?? null");
+}
+async function waitForBinding(renderer, enabledAgents, timeoutMs, pollIntervalMs) {
+  const deadline = Date.now() + timeoutMs;
+  let lastError;
+  while (Date.now() < deadline) {
+    try {
+      const value = await readBinding(renderer);
+      if (value !== null) return validateBindingStatus(value, enabledAgents);
+    } catch (error) {
+      lastError = error;
+      if (error instanceof RendererAdapterReadinessError && error.state !== "installing") {
+        throw error;
+      }
+    }
+    await sleep(pollIntervalMs);
+  }
+  const detail = lastError instanceof Error ? `: ${lastError.message}` : "";
+  throw new Error(`Production Renderer binding did not become ready${detail}`);
+}
+async function installTarget(target, rendererSource, enabledAgents, timeoutMs, pollIntervalMs, operations) {
+  const renderer = await operations.connect(target.webSocketDebuggerUrl);
+  try {
+    await renderer.command("Runtime.enable");
+    await renderer.command("Page.enable");
+    await renderer.command("Page.addScriptToEvaluateOnNewDocument", { source: rendererSource });
+    await evaluateSource(renderer, rendererSource);
+    const draftPrewarmPolicy = await operations.installDraftPrewarmPolicy(renderer);
+    const binding = await waitForBinding(renderer, enabledAgents, timeoutMs, pollIntervalMs);
+    return { renderer, snapshot: { target, draftPrewarmPolicy, binding } };
+  } catch (error) {
+    renderer.close();
+    throw error;
+  }
+}
+var InstalledRendererCdpControlSession = class {
+  constructor(renderer, rendererCdpEndpoint2, rendererSource, enabledAgents, timeoutMs, pollIntervalMs, operations, currentSnapshot) {
+    this.renderer = renderer;
+    this.rendererCdpEndpoint = rendererCdpEndpoint2;
+    this.rendererSource = rendererSource;
+    this.enabledAgents = enabledAgents;
+    this.timeoutMs = timeoutMs;
+    this.pollIntervalMs = pollIntervalMs;
+    this.operations = operations;
+    this.currentSnapshot = currentSnapshot;
+  }
+  renderer;
+  rendererCdpEndpoint;
+  rendererSource;
+  enabledAgents;
+  timeoutMs;
+  pollIntervalMs;
+  operations;
+  currentSnapshot;
+  #closed = false;
+  get snapshot() {
+    return this.currentSnapshot;
+  }
+  async ensureInstalled() {
+    if (this.#closed) throw new Error("Renderer CDP Control Session is closed");
+    const target = await waitForPrimaryTarget(
+      this.rendererCdpEndpoint,
+      this.operations,
+      this.timeoutMs,
+      this.pollIntervalMs,
+      this.currentSnapshot.target.id
+    );
+    if (target.id !== this.currentSnapshot.target.id) {
+      const replacement = await installTarget(
+        target,
+        this.rendererSource,
+        this.enabledAgents,
+        this.timeoutMs,
+        this.pollIntervalMs,
+        this.operations
+      );
+      this.renderer.close();
+      this.renderer = replacement.renderer;
+      this.currentSnapshot = replacement.snapshot;
+      return this.currentSnapshot;
+    }
+    try {
+      const existing = await readBinding(this.renderer);
+      if (existing === null) await evaluateSource(this.renderer, this.rendererSource);
+      else validateBindingStatus(existing, this.enabledAgents);
+      const draftPrewarmPolicy = await this.operations.installDraftPrewarmPolicy(this.renderer);
+      const binding = await waitForBinding(
+        this.renderer,
+        this.enabledAgents,
+        this.timeoutMs,
+        this.pollIntervalMs
+      );
+      this.currentSnapshot = { target, draftPrewarmPolicy, binding };
+      return this.currentSnapshot;
+    } catch {
+      const replacement = await installTarget(
+        target,
+        this.rendererSource,
+        this.enabledAgents,
+        this.timeoutMs,
+        this.pollIntervalMs,
+        this.operations
+      );
+      this.renderer.close();
+      this.renderer = replacement.renderer;
+      this.currentSnapshot = replacement.snapshot;
+      return this.currentSnapshot;
+    }
+  }
+  async activateDesktop() {
+    if (this.#closed) throw new Error("Renderer CDP Control Session is closed");
+    await this.renderer.command("Page.bringToFront");
+    return 1;
+  }
+  executeRenderer(expression) {
+    if (this.#closed) return Promise.reject(new Error("Renderer CDP Control Session is closed"));
+    return this.renderer.evaluate(expression);
+  }
+  close() {
+    if (this.#closed) return;
+    this.#closed = true;
+    this.renderer.close();
+  }
+};
+var defaultOperations = {
+  listTargets: (endpoint) => listCdpTargets(endpoint),
+  connect: (webSocketDebuggerUrl) => CdpClient.connect(webSocketDebuggerUrl),
+  installDraftPrewarmPolicy: installRendererDraftPrewarmPolicyDirect
+};
+async function createRendererCdpControlSession(options) {
+  const enabledAgents = options.enabledAgents ?? ["codex", "pi"];
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const pollIntervalMs = options.pollIntervalMs ?? 250;
+  const operations = options.operations ?? defaultOperations;
+  const target = await waitForPrimaryTarget(
+    options.rendererCdpEndpoint,
+    operations,
+    timeoutMs,
+    pollIntervalMs
+  );
+  const installed = await installTarget(
+    target,
+    options.rendererSource,
+    enabledAgents,
+    timeoutMs,
+    pollIntervalMs,
+    operations
+  );
+  return new InstalledRendererCdpControlSession(
+    installed.renderer,
+    options.rendererCdpEndpoint,
+    options.rendererSource,
+    enabledAgents,
+    timeoutMs,
+    pollIntervalMs,
+    operations,
+    installed.snapshot
+  );
+}
+function installRendererCdpControlSession(options) {
+  return createRendererCdpControlSession(options);
+}
+
+// src/native-ui/desktop-control/src/production-controller.ts
+var PRODUCTION_INSTALL_TIMEOUT_MS = 9e4;
+var RENDERER_CSP_BOOTSTRAP = "globalThis.__zod_globalConfig ??= {}; globalThis.__zod_globalConfig.jitless = true;";
+var DESKTOP_CONTROLLER_READINESS_MAX_BYTES = 512;
+var TRANSIENT_INSTALL_ATTEMPTS = 3;
+var TRANSIENT_INSTALL_RETRY_MS = 250;
+var RECOVERY_RETRY_INITIAL_MS = 3e4;
+var RECOVERY_RETRY_MAX_MS = 3e5;
+var startupTraceStartedAt = Date.now();
+function startupTrace(stage, detail) {
+  if (process.env.CODEXHOST_STARTUP_TRACE !== "1") return;
+  const suffix = detail === void 0 ? "" : `: ${detail instanceof Error ? detail.message : String(detail)}`;
+  console.error(
+    `[codexhost startup +${Date.now() - startupTraceStartedAt}ms] controller: ${stage}${suffix}`
+  );
+}
+function serializeDesktopControllerReadiness(readiness) {
+  if (readiness.schemaVersion !== 2 || readiness.state !== "compatible" || !Array.isArray(readiness.issues) || readiness.issues.length !== 0 || Object.keys(readiness).length !== 3) {
+    throw new Error("Desktop Controller readiness is invalid");
+  }
+  const line = JSON.stringify(readiness);
+  if (Buffer.byteLength(line, "utf8") > DESKTOP_CONTROLLER_READINESS_MAX_BYTES) {
+    throw new Error("Desktop Controller readiness exceeds its size limit");
+  }
+  return line;
+}
+var defaultDependencies = {
+  readRenderer: (filePath) => readFile(filePath, "utf8"),
+  install: installRendererCdpControlSession,
+  startAttachmentServer: startControllerAttachmentServer,
+  ready: (readiness) => {
+    process.stdout.write(`${serializeDesktopControllerReadiness(readiness)}
+`);
+  },
+  sleep: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),
+  monitorIntervalMs: 500
+};
+function rendererCdpEndpoint(value) {
+  const url = new URL(value);
+  if (url.protocol !== "http:" || !["127.0.0.1", "localhost", "[::1]"].includes(url.hostname) || !url.port || url.username || url.password || url.pathname !== "/" && url.pathname !== "" || url.search || url.hash) {
+    throw new Error("--renderer-cdp-endpoint must be a loopback HTTP origin with an explicit port");
+  }
+  return url.origin;
+}
+function parseDesktopControllerArguments(arguments_) {
+  let endpoint;
+  let rendererPath;
+  let defaultAgent;
+  let attachmentPort;
+  let attachmentNonce;
+  for (let index = 0; index < arguments_.length; index += 1) {
+    const argument = arguments_[index];
+    const value = arguments_[index + 1];
+    if (argument === "--renderer-cdp-endpoint") {
+      if (endpoint !== void 0) {
+        throw new Error("--renderer-cdp-endpoint may only be provided once");
+      }
+      if (!value) throw new Error("--renderer-cdp-endpoint requires a value");
+      endpoint = rendererCdpEndpoint(value);
+      index += 1;
+      continue;
+    }
+    if (argument === "--renderer") {
+      if (rendererPath !== void 0) throw new Error("--renderer may only be provided once");
+      if (!value) throw new Error("--renderer requires a value");
+      if (!path.isAbsolute(value)) throw new Error("--renderer must be an absolute path");
+      rendererPath = path.normalize(value);
+      index += 1;
+      continue;
+    }
+    if (argument === "--default-agent") {
+      if (defaultAgent !== void 0) throw new Error("--default-agent may only be provided once");
+      if (value !== "codex" && value !== "pi") {
+        throw new Error("--default-agent must be 'codex' or 'pi'");
+      }
+      defaultAgent = value;
+      index += 1;
+      continue;
+    }
+    if (argument === "--attachment-port") {
+      if (attachmentPort !== void 0) {
+        throw new Error("--attachment-port may only be provided once");
+      }
+      const port = Number(value);
+      if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error("--attachment-port must be a valid TCP port");
+      }
+      attachmentPort = port;
+      index += 1;
+      continue;
+    }
+    if (argument === "--attachment-nonce") {
+      if (attachmentNonce !== void 0) {
+        throw new Error("--attachment-nonce may only be provided once");
+      }
+      if (value === void 0 || !/^[0-9a-f]{32}$/.test(value)) {
+        throw new Error("--attachment-nonce must be 32 lowercase hexadecimal characters");
+      }
+      attachmentNonce = value;
+      index += 1;
+      continue;
+    }
+    throw new Error(`unknown Desktop Controller option: ${argument}`);
+  }
+  if (endpoint === void 0) throw new Error("--renderer-cdp-endpoint is required");
+  if (rendererPath === void 0) throw new Error("--renderer is required");
+  if (defaultAgent === void 0) throw new Error("--default-agent is required");
+  if (attachmentPort === void 0) throw new Error("--attachment-port is required");
+  if (attachmentNonce === void 0) throw new Error("--attachment-nonce is required");
+  return {
+    rendererCdpEndpoint: endpoint,
+    rendererPath,
+    defaultAgent,
+    attachmentPort,
+    attachmentNonce
+  };
+}
+function isTransientRendererInstallError(error) {
+  let current = error;
+  for (let depth = 0; depth < 4; depth += 1) {
+    const message = current instanceof Error ? current.message : String(current);
+    if (message.includes("Execution context was destroyed") || message.includes("Promise was collected")) {
+      return true;
+    }
+    current = current instanceof Error ? current.cause : void 0;
+    if (current === void 0) break;
+  }
+  return false;
+}
+async function installProductionSession(options, dependencies) {
+  for (let attempt = 1; attempt <= TRANSIENT_INSTALL_ATTEMPTS; attempt += 1) {
+    try {
+      return await dependencies.install(options);
+    } catch (error) {
+      if (attempt === TRANSIENT_INSTALL_ATTEMPTS || !isTransientRendererInstallError(error)) {
+        throw error;
+      }
+      await dependencies.sleep(TRANSIENT_INSTALL_RETRY_MS);
+    }
+  }
+  throw new Error("Desktop Controller exhausted Renderer installation attempts");
+}
+async function runDesktopController(options, signal, dependencies = defaultDependencies) {
+  const configuration = `Object.defineProperty(window, "__codexhostProductionConfigV1", { configurable: true, value: { defaultAgent: ${JSON.stringify(options.defaultAgent)} } });`;
+  const now = dependencies.now ?? Date.now;
+  let session;
+  let nextRecoveryAt = 0;
+  let recoveryDelayMs = RECOVERY_RETRY_INITIAL_MS;
+  const recordRecoveryFailure = () => {
+    nextRecoveryAt = now() + recoveryDelayMs;
+    recoveryDelayMs = Math.min(recoveryDelayMs * 2, RECOVERY_RETRY_MAX_MS);
+  };
+  const recordRecoverySuccess = () => {
+    nextRecoveryAt = 0;
+    recoveryDelayMs = RECOVERY_RETRY_INITIAL_MS;
+  };
+  const createSession = async () => {
+    startupTrace("reading Renderer bundle");
+    const rendererSource = await dependencies.readRenderer(options.rendererPath);
+    if (rendererSource.trim().length === 0) throw new Error("production Renderer Bundle is empty");
+    startupTrace("installing Renderer Session");
+    const installed = await installProductionSession(
+      {
+        rendererCdpEndpoint: options.rendererCdpEndpoint,
+        rendererSource: `${RENDERER_CSP_BOOTSTRAP}
+${configuration}
+${rendererSource}`,
+        enabledAgents: [
+          "codex",
+          "pi",
+          "claude-code",
+          "deepseek-harness",
+          "omp",
+          "opencode",
+          "grok",
+          "openclaw",
+          "hermes",
+          "antigravity",
+          "qoder",
+          "workbuddy",
+          "zcode",
+          "trae"
+        ],
+        timeoutMs: PRODUCTION_INSTALL_TIMEOUT_MS
+      },
+      dependencies
+    );
+    startupTrace("Renderer Session installed");
+    return installed;
+  };
+  startupTrace("initialization started");
+  try {
+    session = await createSession();
+    recordRecoverySuccess();
+  } catch (error) {
+    startupTrace("initial Renderer Session unavailable", error);
+    session = void 0;
+    recordRecoveryFailure();
+  }
+  let operation = Promise.resolve(void 0);
+  const useSession = (callback) => {
+    const next = operation.then(callback, callback);
+    operation = next.then(
+      () => void 0,
+      () => void 0
+    );
+    return next;
+  };
+  const resetSession = () => {
+    session?.close();
+    session = void 0;
+  };
+  const ensureSession = async () => {
+    if (!session) session = await createSession();
+    else await session.ensureInstalled();
+    return session;
+  };
+  const recoverSession = async () => {
+    try {
+      const current = await ensureSession();
+      recordRecoverySuccess();
+      return current;
+    } catch (error) {
+      resetSession();
+      recordRecoveryFailure();
+      throw error;
+    }
+  };
+  let attachmentServer;
+  try {
+    startupTrace("starting attachment server");
+    attachmentServer = await dependencies.startAttachmentServer({
+      port: options.attachmentPort,
+      nonce: options.attachmentNonce,
+      attach: () => useSession(async () => {
+        const current = await recoverSession();
+        await current.activateDesktop();
+      })
+    });
+    startupTrace("attachment server ready");
+    startupTrace("publishing readiness");
+    dependencies.ready({
+      schemaVersion: 2,
+      state: "compatible",
+      issues: []
+    });
+    while (!signal.aborted) {
+      await dependencies.sleep(dependencies.monitorIntervalMs);
+      if (signal.aborted) continue;
+      await useSession(async () => {
+        if (!session && now() < nextRecoveryAt) return;
+        try {
+          await recoverSession();
+        } catch {
+        }
+      });
+    }
+  } finally {
+    await attachmentServer?.close();
+    await operation;
+    resetSession();
+  }
+}
+
+// src/native-ui/desktop-control/src/release-main.ts
+var abort = new AbortController();
+var stop = () => abort.abort();
+process.once("SIGINT", stop);
+process.once("SIGTERM", stop);
+try {
+  await runDesktopController(parseDesktopControllerArguments(process.argv.slice(2)), abort.signal);
+} catch (error) {
+  console.error(
+    `codexhost Desktop Controller: ${error instanceof Error ? error.message : String(error)}`
+  );
+  process.exitCode = 1;
+} finally {
+  process.removeListener("SIGINT", stop);
+  process.removeListener("SIGTERM", stop);
+}