holycodex 0.12.7 → 0.13.0-dev.203.1

package/dist/cli.js

@@ -1,4 +1,5 @@
 import process$1 from "node:process";
+import { createInterface } from "node:readline/promises";
 import { access, copyFile, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, rename, rm, stat, writeFile } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
 import { delimiter, dirname, join } from "node:path";
@@ -4391,7 +4392,7 @@ function superRefine(fn, params) {
 }
 //#endregion
 //#region packages/cli/src/catalog.ts
-var VERSION = "0.12.7";
+var VERSION = "0.13.0-dev.203.1";
 var SKILLS = [
 	"ast-grep",
 	"babysit-ci",
@@ -4537,12 +4538,16 @@ var LUNA_MAX = {
 	model: "gpt-5.6-luna",
 	reasoningEffort: "max"
 };
+var SOL_HIGH = {
+	model: "gpt-5.6-sol",
+	reasoningEffort: "high"
+};
 function uniformStageRoutes(...routes) {
 	return Object.fromEntries(WORKFLOW_STAGES.map((stage) => [stage, [...routes]]));
 }
 var MODEL_ROUTING_PLANS = ModelRoutingPlansSchema.parse({
 	go: {
-		root: LUNA_HIGH,
+		root: SOL_HIGH,
 		agents: {
 			explorer: LUNA_HIGH,
 			librarian: LUNA_HIGH,
@@ -5071,13 +5076,16 @@ var INSTALL_FLAGS = /* @__PURE__ */ new Set([
 	"--codex-autonomous",
 	"--no-codex-autonomous",
 	"--dangerous-codex-autonomous",
+	"--computer-use",
+	"--no-computer-use",
+	"--no-tui",
 	"--fast",
 	"--fast-all",
 	"--no-fast",
 	"--json",
 	"--verbose"
 ]);
-var SHARED_FLAGS = /* @__PURE__ */ new Set(["--json"]);
+var SHARED_FLAGS = /* @__PURE__ */ new Set(["--json", "--no-tui"]);
 /** Strictly parses command-specific HolyCodex CLI arguments. */
 function parseCliArguments(args) {
 	if (args.length === 0 || args[0] === "--help" || args[0] === "-h") return base("help");
@@ -5130,6 +5138,8 @@ function parseCliArguments(args) {
 		"--no-fast"
 	].filter((flag) => values.has(flag));
 	if (fastFlags.length > 1) throw new Error(`Conflicting Fast flags: ${fastFlags.join(", ")}`);
+	const computerUseFlags = ["--computer-use", "--no-computer-use"].filter((flag) => values.has(flag));
+	if (computerUseFlags.length > 1) throw new Error(`Conflicting Computer Use flags: ${computerUseFlags.join(", ")}`);
 	const planValue = values.get("--plan") ?? "plus-low";
 	const plan = PlanNameSchema.safeParse(planValue);
 	if (!plan.success) throw new Error(`Unknown plan: ${String(planValue)}. Valid plans: ${PLAN_NAMES.join(", ")}.`);
@@ -5146,13 +5156,16 @@ function parseCliArguments(args) {
 		mode: "default"
 	} : { requested: false };
 	const fast = FastModeSchema.parse(values.has("--fast-all") ? "fast-all" : values.has("--fast") ? "fast" : "standard");
+	const computerUse = values.has("--computer-use") ? "enabled" : values.has("--no-computer-use") ? "disabled" : void 0;
 	return {
 		action: "run",
 		command,
 		json: values.has("--json"),
+		noTui: values.has("--no-tui"),
 		plan: plan.data,
 		...maxValue === void 0 ? {} : { maxSubagents: Number(maxValue) },
 		autonomy,
+		...computerUse === void 0 ? {} : { computerUse },
 		fast,
 		verbose: values.has("--verbose")
 	};
@@ -5161,6 +5174,7 @@ function base(action) {
 	return {
 		action,
 		json: false,
+		noTui: false,
 		plan: DEFAULT_PLAN,
 		autonomy: { requested: false },
 		fast: "standard",
@@ -5416,1385 +5430,1491 @@ function errorCode(value) {
 	return typeof code === "string" ? code : void 0;
 }
 //#endregion
-//#region packages/cli/src/toml.ts
-var TOML_TABLE = /^[ \t]*(?:\[[^\]\r\n]+\]|\[\[[^\]\r\n]+\]\])[ \t]*(?:#.*)?$/m;
-/** Reads a root TOML string value. */
-function rootTomlString(input, key) {
-	const table = TOML_TABLE.exec(input);
-	const root = table === null ? input : input.slice(0, table.index);
-	const match = new RegExp(String.raw`^[ \t]*${escapeRegExp$1(key)}[ \t]*=[ \t]*(?:"((?:\\.|[^"\\\r\n])*)"|'([^'\r\n]*)')[ \t]*(?:#.*)?$`, "m").exec(root);
-	if (match === null) return void 0;
-	if (match[2] !== void 0) return match[2];
-	try {
-		return string().safeParse(JSON.parse(`"${match[1] ?? ""}"`)).data;
-	} catch {
-		return;
-	}
-}
-/** Reads a root TOML string array. */
-function rootTomlStringArray(input, key) {
-	return parseRootTomlStringArray(input, key)?.items;
-}
-/** Reads the source text of a root TOML string array. */
-function rootTomlStringArraySource(input, key) {
-	return parseRootTomlStringArray(input, key)?.source;
+//#region packages/cli/src/codex-launcher.ts
+var CODEX_PACKAGE_SPEC = "@openai/codex@latest";
+/** Derives safe process facts for the default installation flow. */
+function defaultCodexLauncherRuntimeFacts(platform = process.platform, env = process.env) {
+	const bun = typeof process.versions.bun === "string";
+	const allowPackageResolution = env.HOLYCODEX_TEST_SKIP_PACKAGE_RESOLUTION !== "1";
+	const npmExecPath = bun ? void 0 : env.npm_execpath;
+	return {
+		allowPackageResolution,
+		platform,
+		execPath: process.execPath,
+		runtime: bun ? "bun" : "node",
+		...npmExecPath === void 0 ? {} : { npmExecPath },
+		availableRunners: ["npm", "pnpm"],
+		npm: platform === "win32" ? "npm.cmd" : "npm",
+		pnpm: platform === "win32" ? "pnpm.cmd" : "pnpm"
+	};
 }
-function parseRootTomlStringArray(input, key) {
-	const table = TOML_TABLE.exec(input);
-	const root = table === null ? input : input.slice(0, table.index);
-	const assignment = new RegExp(String.raw`^[ \t]*${escapeRegExp$1(key)}[ \t]*=`, "m").exec(root);
-	if (assignment === null) return void 0;
-	const start = root.indexOf("[", assignment.index + assignment[0].length);
-	if (start < 0) return void 0;
-	const items = [];
-	let quote;
-	let raw = "";
-	let escaped = false;
-	let comment = false;
-	for (let index = start + 1; index < root.length; index += 1) {
-		const character = root[index];
-		if (comment) {
-			if (character === "\n") comment = false;
-			continue;
-		}
-		if (quote === "\"") {
-			if (escaped) {
-				raw += character;
-				escaped = false;
-			} else if (character === "\\") {
-				raw += character;
-				escaped = true;
-			} else if (character === "\"") {
-				try {
-					const parsed = string().safeParse(JSON.parse(`"${raw}"`));
-					if (!parsed.success) return void 0;
-					items.push(parsed.data);
-				} catch {
-					return;
-				}
-				quote = void 0;
-				raw = "";
-			} else raw += character;
-			continue;
-		}
-		if (quote === "'") {
-			if (character === "'") {
-				items.push(raw);
-				quote = void 0;
-				raw = "";
-			} else raw += character;
-			continue;
-		}
-		if (character === "#") comment = true;
-		else if (character === "\"" || character === "'") quote = character;
-		else if (character === "]") {
-			const suffix = /^[ \t]*(?:#.*)?(?=\r?\n|$)/.exec(root.slice(index + 1))?.[0] ?? "";
-			return {
-				source: root.slice(assignment.index, index + 1 + suffix.length),
-				items
-			};
-		}
+/** Builds ordered Codex launcher candidates once for an installation. */
+function createCodexLauncherCandidates(input = {}) {
+	const facts = input.runtimeFacts ?? {};
+	const candidates = [];
+	const injected = input.injected === void 0 ? [] : toArray(input.injected);
+	for (const candidate of injected) {
+		const launcher = normalizeLauncher(candidate, "injected");
+		if (launcher !== void 0) candidates.push(launcher);
 	}
+	const pathLauncher = normalizeLauncher(facts.pathCodex ?? "codex", "path");
+	if (pathLauncher !== void 0) candidates.push(pathLauncher);
+	if (facts.allowPackageResolution === false) return deduplicate(candidates);
+	if ((facts.runtime ?? (typeof process.versions.bun === "string" ? "bun" : "node")) === "bun") {
+		const bunLauncher = normalizeLauncher({
+			command: facts.execPath ?? process.execPath,
+			argsPrefix: ["x", CODEX_PACKAGE_SPEC],
+			source: "bunx"
+		}, "bunx");
+		if (bunLauncher !== void 0) candidates.push(bunLauncher);
+	}
+	const nodeRunner = facts.nodeRunner ?? activeNodeRunner(facts);
+	if (nodeRunner !== void 0) {
+		const launcher = normalizeLauncher(nodeRunner, nodeRunnerSource(nodeRunner));
+		if (launcher !== void 0) candidates.push(launcher);
+	}
+	const availableRunners = facts.availableRunners ?? [];
+	if (facts.npm !== false && (facts.npm !== void 0 || availableRunners.includes("npm"))) candidates.push(packageLauncher(facts.npm, facts.platform, "npm-exec"));
+	if (facts.pnpm !== false && (facts.pnpm !== void 0 || availableRunners.includes("pnpm"))) candidates.push(packageLauncher(facts.pnpm, facts.platform, "pnpm-exec"));
+	return deduplicate(candidates);
 }
-function escapeRegExp$1(value) {
-	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-//#endregion
-//#region packages/cli/src/permission-selection.ts
-var PERMISSION_KEYS = [
-	"default_permissions",
-	"approval_policy",
-	"approvals_reviewer",
-	"sandbox_mode"
-];
-var AUTONOMY_PREFIX = "# holycodex autonomy: ";
-var ORIGINAL_PERMISSION_PREFIX = "# holycodex original permissions: ";
-/** Normalizes legacy string callers while preserving an omitted request. */
-function normalizeRequestedAutonomy(value) {
-	if (value === void 0) return { requested: false };
-	if (typeof value === "string") return {
-		requested: true,
-		mode: value
-	};
-	return value;
+/** Appends command arguments to a launcher prefix without mutating either array. */
+function codexLauncherArgs(launcher, args) {
+	return [...launcher.argsPrefix, ...args];
 }
-/** Reads the raw root permission selection without filling missing values. */
-function readRawPermissionSelection(input) {
-	const defaultPermissions = rootTomlString(input, "default_permissions");
-	const approvalPolicy = rootTomlString(input, "approval_policy");
-	const approvalsReviewer = rootTomlString(input, "approvals_reviewer");
-	const sandboxMode = rootTomlString(input, "sandbox_mode");
+function activeNodeRunner(facts) {
+	if (facts.npmExecPath === void 0 || facts.execPath === void 0) return void 0;
+	const source = packageRunnerSource(facts.npmExecPath);
+	if (source === void 0) return void 0;
 	return {
-		...defaultPermissions === void 0 ? {} : { defaultPermissions },
-		...approvalPolicy === void 0 ? {} : { approvalPolicy },
-		...approvalsReviewer === void 0 ? {} : { approvalsReviewer },
-		...sandboxMode === void 0 ? {} : { sandboxMode }
+		command: facts.execPath,
+		argsPrefix: source === "npm-exec" ? [
+			facts.npmExecPath,
+			"exec",
+			"--yes",
+			"--package",
+			CODEX_PACKAGE_SPEC,
+			"--",
+			"codex"
+		] : [
+			facts.npmExecPath,
+			"dlx",
+			CODEX_PACKAGE_SPEC
+		],
+		source
 	};
 }
-/** Returns root assignment lines for permission keys in source order. */
-function readPermissionLines(input) {
-	const firstTable = input.search(/^\s*\[/m);
-	const root = firstTable < 0 ? input : input.slice(0, firstTable);
-	const keys = new Set(PERMISSION_KEYS);
-	return root.split(/\r?\n/).filter((line) => {
-		const key = /^\s*([A-Za-z0-9_-]+)\s*=/.exec(line)?.[1];
-		return key !== void 0 && keys.has(key);
-	});
+function packageRunnerSource(path) {
+	const basename = path.replaceAll("\\", "/").split("/").pop()?.toLowerCase() ?? "";
+	if ([
+		"npm",
+		"npm.cmd",
+		"npm-cli.js",
+		"npm-cli.cjs"
+	].includes(basename)) return "npm-exec";
+	if ([
+		"pnpm",
+		"pnpm.cmd",
+		"pnpm.js",
+		"pnpm.cjs"
+	].includes(basename)) return "pnpm-exec";
 }
-/** Removes all root permission assignment lines while preserving other text. */
-function removePermissionLines(input) {
-	const firstTable = input.search(/^\s*\[/m);
-	const root = firstTable < 0 ? input : input.slice(0, firstTable);
-	const tables = firstTable < 0 ? "" : input.slice(firstTable);
-	const keys = PERMISSION_KEYS.map((key) => key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
-	return `${root.split(/\r?\n/).filter((line) => !new RegExp(`^\\s*(?:${keys.join("|")})\\s*=`).test(line)).join("\n").trim()}${tables ? `\n${tables.trimStart()}` : ""}`.trim();
+function nodeRunnerSource(value) {
+	if (typeof value === "object" && value !== null && "source" in value) {
+		if (value.source === "pnpm-exec") return "pnpm-exec";
+		if (value.source === "npm-exec") return "npm-exec";
+	}
+	return "npm-exec";
 }
-/** Returns the exact tuple represented by an explicit autonomy mode. */
-function permissionSelectionForMode(mode) {
-	if (mode === "default") return {
-		approvalPolicy: "on-request",
-		approvalsReviewer: "auto_review",
-		sandboxMode: "workspace-write"
-	};
-	if (mode === "autonomous") return {
-		approvalPolicy: "never",
-		sandboxMode: "workspace-write"
-	};
+function packageLauncher(command, platform, source) {
 	return {
-		approvalPolicy: "never",
-		sandboxMode: "danger-full-access"
+		command: typeof command === "string" ? command : source === "npm-exec" ? platform === "win32" ? "npm.cmd" : "npm" : platform === "win32" ? "pnpm.cmd" : "pnpm",
+		argsPrefix: source === "npm-exec" ? [
+			"exec",
+			"--yes",
+			"--package",
+			CODEX_PACKAGE_SPEC,
+			"--",
+			"codex"
+		] : ["dlx", CODEX_PACKAGE_SPEC],
+		source
 	};
 }
-/** Identifies generated tuples from current and historical installers. */
-function permissionSelectionMatchesMode(selection, mode) {
-	if (permissionSelectionsEqual(selection, permissionSelectionForMode(mode))) return true;
-	return mode === "default" && permissionSelectionsEqual(selection, {
-		approvalPolicy: "on-request",
-		sandboxMode: "workspace-write"
-	});
-}
-/** Compares all raw permission fields, including intentional omissions. */
-function permissionSelectionsEqual(left, right) {
-	return PERMISSION_KEYS.every((key) => {
-		const field = permissionField(key);
-		return left[field] === right[field];
-	});
+function toArray(value) {
+	return Array.isArray(value) ? value : [value];
 }
-/** Identifies a historical generated tuple, if one is exact. */
-function inferAutonomyMode(selection) {
-	for (const mode of [
-		"default",
-		"autonomous",
-		"dangerous"
-	]) if (permissionSelectionMatchesMode(selection, mode)) return mode;
-	return "custom";
-}
-/** Reads deterministic autonomy metadata from a managed block. */
-function readAutonomyMetadata(input) {
-	const value = new RegExp(`^${escapeRegExp(AUTONOMY_PREFIX)}(.+)$`, "m").exec(input)?.[1]?.trim();
-	if (value === "default" || value === "autonomous" || value === "dangerous" || value === "custom") return value;
-}
-/** Encodes durable original root permission assignment provenance. */
-function originalPermissionMetadata(lines) {
-	return `${ORIGINAL_PERMISSION_PREFIX}${lines.length === 0 ? "-" : Buffer.from(lines.join("\n"), "utf8").toString("base64")}\n`;
-}
-/** Reads durable original root permission assignment provenance. */
-function readOriginalPermissionMetadata(input) {
-	const encoded = new RegExp(`^${escapeRegExp(ORIGINAL_PERMISSION_PREFIX)}([A-Za-z0-9+/=_-]+)$`, "m").exec(input)?.[1];
-	if (encoded === void 0) return void 0;
-	if (encoded === "-") return [];
-	return Buffer.from(encoded, "base64").toString("utf8").split(/\r?\n/).filter(Boolean);
-}
-/** Returns a generated tuple for an explicit request or preserves a live omitted selection. */
-function selectPermissionSelection(live, request) {
-	if (request.requested) return permissionSelectionForMode(request.mode);
-	if (Object.keys(live).length > 0) return live;
-	return permissionSelectionForMode("default");
-}
-var AUTONOMY_METADATA_PREFIX = AUTONOMY_PREFIX;
-function permissionField(key) {
-	if (key === "default_permissions") return "defaultPermissions";
-	if (key === "approval_policy") return "approvalPolicy";
-	if (key === "approvals_reviewer") return "approvalsReviewer";
-	return "sandboxMode";
+function normalizeLauncher(value, source) {
+	if (typeof value === "string") {
+		const command = value.trim();
+		return command === "" ? void 0 : {
+			command,
+			argsPrefix: [],
+			source
+		};
+	}
+	if (typeof value !== "object" || value === null || typeof value.command !== "string") return void 0;
+	const command = value.command.trim();
+	if (command === "" || !Array.isArray(value.argsPrefix)) return void 0;
+	if (!value.argsPrefix.every((arg) => typeof arg === "string")) return void 0;
+	return {
+		command,
+		argsPrefix: [...value.argsPrefix],
+		source
+	};
 }
-function escapeRegExp(value) {
-	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function deduplicate(candidates) {
+	const seen = /* @__PURE__ */ new Set();
+	const result = [];
+	for (const candidate of candidates) {
+		const key = JSON.stringify([candidate.command, candidate.argsPrefix]);
+		if (seen.has(key)) continue;
+		seen.add(key);
+		result.push(candidate);
+	}
+	return result;
 }
 //#endregion
-//#region packages/cli/src/config.ts
-var START = "# >>> holycodex managed >>>";
-var END = "# <<< holycodex managed <<<";
-var ORIGINAL_ROOT = "# holycodex original root: ";
-var ORIGINAL_TABLE_KEY = "# holycodex original table key: ";
-var PLAN_PREFIX = "# holycodex plan: ";
-var FAST_MODE_PREFIX = "# holycodex fast: ";
-var WORKFLOW_POLICY_PREFIX = "# holycodex workflow-policy: ";
-var OLD_NAMESPACES = [
-	"marketplaces.sisyphuslabs",
-	"plugins.\"omo@sisyphuslabs\"",
-	"marketplaces.lazycodex",
-	"plugins.\"omo@lazycodex\"",
-	"marketplaces.code-yeongyu-codex-plugins",
-	"plugins.\"omo@code-yeongyu-codex-plugins\"",
-	"agents.plan",
-	"agents.metis",
-	"agents.momus",
-	"agents.oracle",
-	"agents.sisyphus",
-	"agents.prometheus",
-	"agents.atlas",
-	"agents.hephaestus",
-	"hooks.state.\"omo@sisyphuslabs",
-	"hooks.state.\"omo@lazycodex",
-	"hooks.state.\"omo@code-yeongyu-codex-plugins"
-];
-function readOriginalRootMetadata(input) {
-	const encoded = input.match(/^# holycodex original root: ([A-Za-z0-9+/=]+)$/m)?.[1];
-	return encoded === void 0 ? void 0 : Buffer.from(encoded, "base64").toString("utf8");
-}
-function readLegacyGeneratedRoot(input) {
-	const body = input.match(/^# >>> holycodex managed >>>\r?\n([\s\S]*?)^# <<< holycodex managed <<</m)?.[1];
-	if (body === void 0 || readPermissionLines(body).length === 0) return void 0;
-	return inferAutonomyMode(readRawPermissionSelection(body)) === "custom" ? void 0 : body;
-}
-/** Removes managed configuration and restores durable original values. */
-function removeManaged(input, preserveGeneratedPermissions = false) {
-	const escapedStart = START.replaceAll(">", "\\>");
-	const escapedEnd = END.replaceAll("<", "\\<");
-	return input.replace(new RegExp(`${escapedStart}([\\s\\S]*?)${escapedEnd}(?:\\r?\\n){0,2}`, "g"), (_match, body) => {
-		const original = readOriginalRootMetadata(body);
-		const originalPermissions = readOriginalPermissionMetadata(body);
-		const currentPermissions = readPermissionLines(body);
-		const currentSelection = readRawPermissionSelection(body);
-		const metadata = readAutonomyMetadata(body);
-		const expected = metadata === void 0 || metadata === "custom" ? originalPermissions === void 0 ? void 0 : readRawPermissionSelection(originalPermissions.join("\n")) : permissionSelectionForMode(metadata);
-		const generated = metadata !== void 0 && metadata !== "custom" ? permissionSelectionMatchesMode(currentSelection, metadata) : expected !== void 0 ? permissionSelectionsEqual(currentSelection, expected) : metadata === void 0 && [
-			"default",
-			"autonomous",
-			"dangerous"
-		].some((mode) => permissionSelectionMatchesMode(currentSelection, mode));
-		const preserveCurrent = preserveGeneratedPermissions || !generated;
-		if (original !== void 0) return `${preserveCurrent ? `${removePermissionLines(original)}${currentPermissions.length === 0 ? "" : `\n${currentPermissions.join("\n")}`}`.trim() : `${removePermissionLines(original)}${(originalPermissions ?? readPermissionLines(original)).length === 0 ? "" : `\n${(originalPermissions ?? readPermissionLines(original)).join("\n")}`}`.trim()}\n`;
-		if (!preserveCurrent && originalPermissions !== void 0) return `${originalPermissions.join("\n")}\n`;
-		if (preserveCurrent && currentPermissions.length > 0) return `${currentPermissions.join("\n")}\n`;
-		const tableKeys = [...body.matchAll(/^# holycodex original table key: ([A-Za-z0-9+/=]+)$/gm)].flatMap((match) => match[1] === void 0 ? [] : [match[1]]);
-		return tableKeys.length === 0 ? "" : `${tableKeys.map((key) => Buffer.from(key, "base64").toString("utf8")).join("\n")}\n`;
-	}).trim();
-}
-/** Removes legacy omo. */
-function removeLegacyOmo(input) {
-	return input.split(/(?=^\s*\[)/m).filter((section) => {
-		const header = /^\s*\[([^\]]+)]/.exec(section)?.[1];
-		if (header === void 0) return true;
-		if (OLD_NAMESPACES.some((name) => header === name || header.startsWith(`${name}.`) || name.includes("\"omo@") && header.startsWith(name))) return false;
-		return ![
-			"agents.explorer",
-			"agents.librarian",
-			"agents.worker"
-		].some((name) => header === name || header.startsWith(`${name}.`)) || !/(?:sisyphuslabs|omo@|oh-my|code-yeongyu)/i.test(section);
-	}).join("").trimEnd();
-}
-function injectTableKeys(input, table, entries) {
-	const match = new RegExp(`^\\s*\\[${table.replaceAll(".", "\\.")}]\\s*(?:#.*)?$`, "m").exec(input);
-	const tail = match === null ? "" : input.slice(match.index + match[0].length);
-	const tableEnd = nextTableBoundary(tail);
-	const tableBody = tableEnd < 0 ? tail : tail.slice(0, tableEnd);
-	const managed = `${START}\n${entries.map(([key]) => new RegExp(`^[ \\t]*${key}[ \\t]*=.*$`, "m").exec(tableBody)?.[0]).filter((value) => value !== void 0).map((value) => `${ORIGINAL_TABLE_KEY}${Buffer.from(value).toString("base64")}\n`).join("")}${entries.map(([key, value]) => `${key} = ${value}`).join("\n")}\n${END}`;
-	if (match === null) return `${input.trimEnd()}\n\n${START}\n[${table}]\n${entries.map(([key, value]) => `${key} = ${value}`).join("\n")}\n${END}`.trim();
-	const bodyStart = match.index + match[0].length;
-	const next = nextTableBoundary(input.slice(bodyStart));
-	const bodyEnd = next < 0 ? input.length : bodyStart + next;
-	const cleanedBody = entries.reduce((body, [key]) => body.replace(new RegExp(`^\\s*${key}\\s*=.*\\r?\\n?`, "gm"), ""), input.slice(bodyStart, bodyEnd)).trim();
-	const suffix = input.slice(bodyEnd).trimStart();
-	return `${input.slice(0, bodyStart)}\n${cleanedBody ? `${cleanedBody}\n` : ""}${managed}${suffix ? `\n${suffix}` : ""}`.trim();
-}
-function nextTableBoundary(input) {
-	const header = /^\s*\[/m.exec(input)?.index ?? -1;
-	const managedHeader = /^# >>> holycodex managed >>>\r?\n\s*\[/m.exec(input)?.index ?? -1;
-	if (header < 0) return managedHeader;
-	if (managedHeader < 0) return header;
-	return Math.min(header, managedHeader);
-}
-function tableSource(input, table) {
-	const match = new RegExp(`^\\s*\\[${table.replaceAll(".", "\\.")}]\\s*(?:#.*)?$`, "m").exec(input);
-	if (match === null) return void 0;
-	const tail = input.slice(match.index + match[0].length);
-	const end = nextTableBoundary(tail);
-	return end < 0 ? tail : tail.slice(0, end);
+//#region packages/cli/src/codex-security.ts
+var CODEX_SECURITY_PLUGIN = {
+	id: "codex-security@openai-curated",
+	marketplace: "openai-curated"
+};
+var COMPUTER_USE_PLUGIN = {
+	id: "computer-use@openai-bundled",
+	marketplace: "openai-bundled"
+};
+var BUILD_WEB_APPS_PLUGIN = {
+	id: "build-web-apps@openai-curated",
+	marketplace: "openai-curated"
+};
+var CODEX_PLUGIN_OPERATIONAL_TIMEOUT_MS = 15e3;
+var CODEX_PACKAGE_BOOTSTRAP_TIMEOUT_MS = 12e4;
+var MAX_CODEX_CATALOG_DIAGNOSTIC_CHARS = 256 * 1024;
+var MAX_JSON_DOCUMENTS = 16;
+var MAX_MARKETPLACE_ATTEMPTS = 2;
+var SPAWN_UNAVAILABLE_CODES = /* @__PURE__ */ new Set([
+	"EACCES",
+	"ENOENT",
+	"EPERM"
+]);
+var FATAL_AUTH_CODES = /* @__PURE__ */ new Set([
+	"401",
+	"UNAUTHENTICATED",
+	"AUTHENTICATION_REQUIRED"
+]);
+var FATAL_ACCOUNT_CODES = /* @__PURE__ */ new Set(["ACCOUNT_REQUIRED", "ACCOUNT_NOT_FOUND"]);
+var FATAL_MARKETPLACE_CODES = /* @__PURE__ */ new Set([
+	"502",
+	"503",
+	"504",
+	"MARKETPLACE_UNAVAILABLE",
+	"MARKETPLACE_LOAD_FAILED",
+	"CATALOG_UNAVAILABLE"
+]);
+var FATAL_PLUGIN_CODES = /* @__PURE__ */ new Set([
+	"404",
+	"PLUGIN_NOT_FOUND",
+	"PLUGIN_UNAVAILABLE"
+]);
+var FATAL_POLICY_CODES = /* @__PURE__ */ new Set([
+	"403",
+	"ACCOUNT_RESTRICTED",
+	"ACCOUNT_UNAVAILABLE",
+	"ACCOUNT_SUSPENDED",
+	"ACCOUNT_DISABLED",
+	"INSTALLATION_REJECTED",
+	"PERMISSION_DENIED",
+	"POLICY_REJECTED"
+]);
+/** Installs or enables the official Codex Security plugin without failing HolyCodex installation. */
+async function installCodexSecurity(runProcess = runManagedProcess, platform = process.platform, env = process.env, options = {}) {
+	return installOfficialPlugin(CODEX_SECURITY_PLUGIN, runProcess, platform, env, options);
 }
-function rootValue(input, key) {
-	if (key === "status_line") return rootTomlStringArraySource(input, key);
-	return new RegExp(`^\\s*${key}\\s*=.*$`, "m").exec(input)?.[0];
+/** Installs or enables the official Computer Use plugin without failing HolyCodex installation. */
+async function installComputerUse(runProcess = runManagedProcess, platform = process.platform, env = process.env, options = {}) {
+	return installOfficialPlugin(COMPUTER_USE_PLUGIN, runProcess, platform, env, options);
 }
-function removeRootValue(input, value) {
-	return value === void 0 ? input : input.replace(value, "");
+/** Installs or enables the official Build Web Apps plugin without failing HolyCodex installation. */
+async function installBuildWebApps(runProcess = runManagedProcess, platform = process.platform, env = process.env, options = {}) {
+	return installOfficialPlugin(BUILD_WEB_APPS_PLUGIN, runProcess, platform, env, options);
 }
-function removeRootKey(input, key) {
-	let updated = input;
-	for (;;) {
-		const value = rootValue(updated, key);
-		if (value === void 0) return updated;
-		updated = removeRootValue(updated, value);
+/** Verifies one official plugin without installing or enabling it. */
+async function verifyOfficialPlugin(plugin, runProcess = runManagedProcess, platform = process.platform, env = process.env, options = {}) {
+	const runtimeFacts = options.runtimeFacts ?? (runProcess === runManagedProcess ? defaultCodexLauncherRuntimeFacts(platform) : void 0);
+	const candidates = createCodexLauncherCandidates({
+		...options.injected === void 0 ? {} : { injected: options.injected },
+		...runtimeFacts === void 0 ? {} : { runtimeFacts }
+	});
+	const attemptedLaunchers = [];
+	const fallbackReasons = [];
+	for (const launcher of candidates) {
+		attemptedLaunchers.push(launcher.source);
+		const outcome = inspectListResult(await runCodexPlugin(runProcess, launcher, [
+			"plugin",
+			"list",
+			"--json"
+		], platform, env, "list"), launcher);
+		if (outcome.kind === "selected") {
+			const state = findPlugin(outcome.catalog, plugin.id);
+			if (state?.installed === true && state.enabled === true) return {
+				status: "verified",
+				launcherSource: launcher.source
+			};
+			if (state !== void 0) return {
+				status: "missing",
+				attemptedLaunchers
+			};
+			fallbackReasons.push("plugin-unavailable");
+			continue;
+		}
+		if (outcome.kind === "fatal") return {
+			status: "unavailable",
+			reason: outcome.reason,
+			attemptedLaunchers
+		};
+		fallbackReasons.push(outcome.reason);
 	}
+	if (fallbackReasons.length === 0) return {
+		status: "missing",
+		attemptedLaunchers
+	};
+	return {
+		status: "unavailable",
+		reason: finalFallbackReason(fallbackReasons),
+		attemptedLaunchers
+	};
 }
-/** Reads the explicitly recorded model routing plan from managed configuration. */
-function readManagedPlan(input) {
-	const value = new RegExp(`^${PLAN_PREFIX}(.+)$`, "m").exec(input)?.[1]?.trim();
-	return PLAN_NAMES.find((plan) => plan === value);
+/** Installs or enables one official Codex plugin through a verified catalog entry. */
+async function installOfficialPlugin(plugin, runProcess = runManagedProcess, platform = process.platform, env = process.env, options = {}) {
+	const runtimeFacts = options.runtimeFacts ?? (runProcess === runManagedProcess ? defaultCodexLauncherRuntimeFacts(platform) : void 0);
+	const candidates = createCodexLauncherCandidates({
+		...options.injected === void 0 ? {} : { injected: options.injected },
+		...runtimeFacts === void 0 ? {} : { runtimeFacts }
+	});
+	const attemptedLaunchers = [];
+	const fallbackReasons = [];
+	for (const launcher of candidates) {
+		attemptedLaunchers.push(launcher.source);
+		let installedOutcome = inspectListResult(await runCodexPlugin(runProcess, launcher, [
+			"plugin",
+			"list",
+			"--json"
+		], platform, env, "list"), launcher);
+		if (launcher.source === "path" && installedOutcome.kind === "fallback" && installedOutcome.reason === "download-failed") installedOutcome = inspectListResult(await runCodexPlugin(runProcess, launcher, [
+			"plugin",
+			"list",
+			"--json"
+		], platform, env, "list"), launcher);
+		if (installedOutcome.kind === "fallback") {
+			fallbackReasons.push(installedOutcome.reason);
+			continue;
+		}
+		if (installedOutcome.kind === "fatal") return skipped(installedOutcome.reason, attemptedLaunchers);
+		const installedPlugin = findPlugin(installedOutcome.catalog, plugin.id);
+		if (installedPlugin?.installed === true && installedPlugin.enabled === true) return {
+			status: "already-installed",
+			launcherSource: launcher.source
+		};
+		const wasDisabled = installedPlugin?.installed === true;
+		if (!wasDisabled) {
+			const catalogOutcome = inspectListResult(await runCodexPlugin(runProcess, launcher, [
+				"plugin",
+				"list",
+				"--available",
+				"--json"
+			], platform, env, "list"), launcher);
+			if (catalogOutcome.kind === "fallback") {
+				fallbackReasons.push(catalogOutcome.reason);
+				continue;
+			}
+			if (catalogOutcome.kind === "fatal") return skipped(catalogOutcome.reason, attemptedLaunchers);
+			let pluginAvailable = findPlugin(catalogOutcome.catalog, plugin.id) !== void 0;
+			if (!pluginAvailable) {
+				const marketplaceOutcome = await inspectMarketplaceWithRetry(runProcess, launcher, platform, env);
+				if (marketplaceOutcome.kind === "fallback") {
+					fallbackReasons.push(marketplaceOutcome.reason);
+					continue;
+				}
+				if (marketplaceOutcome.kind === "fatal") return skipped(marketplaceOutcome.reason, attemptedLaunchers);
+				if (plugin.id === COMPUTER_USE_PLUGIN.id && !marketplaceOutcome.marketplaces.includes(plugin.marketplace)) {
+					const refreshedCatalog = inspectListResult(await runCodexPlugin(runProcess, launcher, [
+						"plugin",
+						"list",
+						"--available",
+						"--json"
+					], platform, env, "list"), launcher);
+					if (refreshedCatalog.kind === "selected") pluginAvailable = findPlugin(refreshedCatalog.catalog, plugin.id) !== void 0;
+					else fallbackReasons.push(refreshedCatalog.reason);
+				}
+				if (!pluginAvailable) {
+					fallbackReasons.push(marketplaceOutcome.marketplaces.includes(plugin.marketplace) ? "plugin-not-offered" : "marketplace-unavailable");
+					continue;
+				}
+			}
+		}
+		const addOutcome = inspectAddResult(await runCodexPlugin(runProcess, launcher, [
+			"plugin",
+			"add",
+			plugin.id,
+			"--json"
+		], platform, env, "add"), launcher);
+		if (addOutcome.kind === "fallback") {
+			fallbackReasons.push(addOutcome.reason);
+			continue;
+		}
+		if (addOutcome.kind === "fatal") return skipped(addOutcome.reason, attemptedLaunchers);
+		const verification = inspectListResult(await runCodexPlugin(runProcess, launcher, [
+			"plugin",
+			"list",
+			"--json"
+		], platform, env, "list"), launcher);
+		if (verification.kind === "fallback") {
+			fallbackReasons.push(verification.reason);
+			continue;
+		}
+		if (verification.kind === "fatal") return skipped(verification.reason, attemptedLaunchers);
+		const verifiedPlugin = findPlugin(verification.catalog, plugin.id);
+		if (verifiedPlugin?.installed !== true || verifiedPlugin.enabled !== true) {
+			fallbackReasons.push("verification-failed");
+			continue;
+		}
+		return {
+			status: wasDisabled ? "enabled" : "installed",
+			launcherSource: launcher.source
+		};
+	}
+	return skipped(finalFallbackReason(fallbackReasons), attemptedLaunchers);
 }
-/** Reads the explicitly recorded managed Fast mode. */
-function readManagedFastMode(input) {
-	const value = new RegExp(`^${FAST_MODE_PREFIX}(.+)$`, "m").exec(input)?.[1]?.trim();
-	return FastModeSchema.safeParse(value).data;
+async function inspectMarketplaceWithRetry(runProcess, launcher, platform, env) {
+	let outcome = {
+		kind: "fallback",
+		reason: "marketplace-unavailable"
+	};
+	for (let attempt = 0; attempt < MAX_MARKETPLACE_ATTEMPTS; attempt += 1) {
+		outcome = inspectMarketplaceResult(await runCodexPlugin(runProcess, launcher, [
+			"plugin",
+			"marketplace",
+			"list",
+			"--json"
+		], platform, env, "list"), launcher);
+		if (!isRetryableMarketplaceOutcome(outcome) || attempt + 1 === MAX_MARKETPLACE_ATTEMPTS) return outcome;
+		await new Promise((resolve) => setTimeout(resolve, 100 * (attempt + 1)));
+	}
+	return outcome;
 }
-/** Reads the plan-authoritative workflow policy metadata from managed configuration. */
-function readManagedWorkflowPolicy(input) {
-	const raw = new RegExp(`^${WORKFLOW_POLICY_PREFIX.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(.+)$`, "m").exec(input)?.[1];
-	if (raw === void 0) return void 0;
+function isRetryableMarketplaceOutcome(outcome) {
+	return (outcome.kind === "fallback" || outcome.kind === "fatal") && (outcome.reason === "marketplace-unavailable" || outcome.reason === "timeout");
+}
+async function runCodexPlugin(runProcess, launcher, args, platform, env, operation) {
 	try {
-		const value = JSON.parse(raw);
-		if (typeof value !== "object" || value === null) return void 0;
-		const record = value;
-		const plan = PLAN_NAMES.find((name) => name === record.plan);
-		const limits = record.limits;
-		const usage = record.projectedUsage;
-		const size = record.softSizeGuidance;
-		if (plan === void 0 || typeof limits !== "object" || limits === null || typeof usage !== "object" || usage === null || typeof size !== "object" || size === null) return void 0;
+		return await runProcess({
+			command: launcher.command,
+			args: codexLauncherArgs(launcher, args),
+			platform,
+			timeoutMs: timeoutFor(launcher, operation),
+			maxOutputChars: MAX_CODEX_CATALOG_DIAGNOSTIC_CHARS,
+			env
+		});
+	} catch (error) {
+		const code = thrownErrorCode(error);
+		if (!isUnavailableThrownError(error) && !(isPackageLauncher(launcher) && isBootstrapThrownError(error))) throw error;
 		return {
-			plan,
-			limits,
-			projectedUsage: usage,
-			softSizeGuidance: size
+			exitCode: null,
+			stdout: "",
+			stderr: "",
+			timedOut: false,
+			matched: false,
+			outputTruncated: false,
+			error: "Codex launcher could not be started.",
+			...code === void 0 ? {} : { errorCode: code }
 		};
-	} catch {
-		return;
 	}
 }
-/** Identifies explicit Root route overrides preserved from active managed configuration. */
-function readPreservedRootOverrides(input) {
-	const managedRoot = new RegExp(`^${START}\\r?\\n([\\s\\S]*?)^${END}\\r?$`, "m").exec(input)?.[1];
-	if (managedRoot === void 0) return {
-		model: false,
-		reasoningEffort: false,
-		webSearch: false
+function inspectListResult(result, launcher) {
+	if (result.timedOut) return {
+		kind: "fallback",
+		reason: "timeout"
 	};
-	const plan = readManagedPlan(managedRoot);
-	const model = rootTomlString(input, "model");
-	const reasoningEffort = rootTomlString(input, "model_reasoning_effort");
-	if (plan === void 0 || model === void 0 || reasoningEffort === void 0) return {
-		model: false,
-		reasoningEffort: false,
-		webSearch: false
+	if (result.outputTruncated) return {
+		kind: "fallback",
+		reason: "invalid-response"
 	};
-	if (MANAGED_ROOT_MODEL_HISTORY_BY_PLAN[plan].some((route) => route.model === model && route.reasoningEffort === reasoningEffort)) return {
-		model: false,
-		reasoningEffort: false,
-		webSearch: rootTomlString(managedRoot, "web_search") !== "live"
+	const failure = classifyFailure(result, launcher);
+	if (failure !== void 0) return failure;
+	const catalog = parsePluginCatalog(result.stdout);
+	if (catalog === void 0) return {
+		kind: "fallback",
+		reason: "invalid-response"
 	};
-	const preset = MODEL_ROUTING_PLANS[plan].root;
 	return {
-		model: model !== preset.model,
-		reasoningEffort: reasoningEffort !== preset.reasoningEffort,
-		webSearch: rootTomlString(managedRoot, "web_search") !== "live"
+		kind: "selected",
+		catalog
 	};
 }
-function preserveManagedRootPreferences(input, base) {
-	const managedRoot = new RegExp(`^${START}\\r?\\n([\\s\\S]*?)^${END}\\r?$`, "m").exec(input)?.[1];
-	if (managedRoot === void 0) return base;
-	const firstTable = base.search(/^\s*\[/m);
-	const root = firstTable < 0 ? base : base.slice(0, firstTable);
-	const tables = firstTable < 0 ? "" : base.slice(firstTable);
-	let updatedRoot = root.trim();
-	const overrides = readPreservedRootOverrides(input);
-	for (const [key, preserve] of [
-		["model", overrides.model],
-		["model_reasoning_effort", overrides.reasoningEffort],
-		["web_search", overrides.webSearch]
-	]) {
-		const live = rootValue(managedRoot, key)?.trim();
-		if (!preserve || live === void 0) continue;
-		if (rootValue(root, key)?.trim() === live) continue;
-		updatedRoot = removeRootValue(updatedRoot, rootValue(updatedRoot, key)).trim();
-		updatedRoot = `${updatedRoot}${updatedRoot ? "\n" : ""}${live}`;
-	}
-	if (updatedRoot === root.trim()) return base;
-	return `${updatedRoot}${tables ? `\n${tables.trimStart()}` : ""}`;
+function inspectAddResult(result, launcher) {
+	if (result.timedOut) return {
+		kind: "fallback",
+		reason: "timeout"
+	};
+	const failure = classifyFailure(result, launcher);
+	if (failure !== void 0) return failure;
+	return { kind: "added" };
 }
-function mergedStatusLine(original) {
-	if (original === void 0) return "[\"model-with-reasoning\", \"context-remaining\", \"current-dir\"]";
-	const items = rootTomlStringArray(original, "status_line") ?? [];
-	if (!items.includes("context-remaining")) items.push("context-remaining");
-	return `[${items.map((item) => JSON.stringify(item)).join(", ")}]`;
+function inspectMarketplaceResult(result, launcher) {
+	if (result.timedOut) return {
+		kind: "fallback",
+		reason: "timeout"
+	};
+	if (result.outputTruncated) return {
+		kind: "fallback",
+		reason: "invalid-response"
+	};
+	const failure = classifyFailure(result, launcher);
+	if (failure !== void 0) return failure;
+	const marketplaces = parseMarketplaceNames(result.stdout);
+	return marketplaces === void 0 ? {
+		kind: "fallback",
+		reason: "invalid-response"
+	} : {
+		kind: "selected",
+		marketplaces
+	};
 }
-/** Installs config. */
-function installConfig(input, mode, _platform, plan = DEFAULT_PLAN, maxSubagents, fastMode = "standard") {
-	const request = normalizeRequestedAutonomy(mode);
-	const priorAutonomy = readAutonomyMetadata(input);
-	const previousOriginalRoot = readOriginalRootMetadata(input);
-	const legacyGeneratedRoot = readLegacyGeneratedRoot(input);
-	const originalPermissionLines = readOriginalPermissionMetadata(input);
-	const base = preserveManagedRootPreferences(input, removeLegacyOmo(removeManaged(input, !request.requested)));
-	const firstTable = base.search(/^\s*\[/m);
-	const root = firstTable < 0 ? base : base.slice(0, firstTable);
-	const tables = firstTable < 0 ? "" : base.slice(firstTable);
-	const permissions = selectPermissionSelection(readRawPermissionSelection(root), request);
-	const effectiveAutonomy = request.requested ? inferAutonomyMode(permissions) : priorAutonomy ?? inferAutonomyMode(permissions);
-	const rootPermissionLines = [
-		permissions.approvalPolicy === void 0 ? void 0 : `approval_policy = ${JSON.stringify(permissions.approvalPolicy)}`,
-		permissions.approvalsReviewer === void 0 ? void 0 : `approvals_reviewer = ${JSON.stringify(permissions.approvalsReviewer)}`,
-		permissions.sandboxMode === void 0 ? void 0 : `sandbox_mode = ${JSON.stringify(permissions.sandboxMode)}`
-	].filter((line) => line !== void 0);
-	const hadManagedAutonomy = readAutonomyMetadata(input) !== void 0;
-	const hadOriginalRoot = /^# holycodex original root:/m.test(input);
-	const permissionLines = originalPermissionLines ?? (legacyGeneratedRoot !== void 0 && previousOriginalRoot === void 0 ? [] : previousOriginalRoot === void 0 ? hadManagedAutonomy && !hadOriginalRoot ? [] : readPermissionLines(root) : readPermissionLines(previousOriginalRoot));
-	const controlled = [
-		"web_search",
-		"approval_policy",
-		"approvals_reviewer",
-		"sandbox_mode",
-		"max_concurrent_threads_per_session",
-		"status_line",
-		"model_verbosity",
-		"service_tier",
-		...request.requested ? ["default_permissions"] : []
-	].map((key) => rootValue(root, key));
-	const preservedRoot = [
-		"web_search",
-		"approval_policy",
-		"approvals_reviewer",
-		"sandbox_mode",
-		"max_concurrent_threads_per_session",
-		"status_line",
-		"model_verbosity",
-		"service_tier",
-		...request.requested ? ["default_permissions"] : []
-	].reduce(removeRootKey, root).trim();
-	const originalControlled = controlled.filter((value) => value !== void 0).sort((left, right) => root.indexOf(left) - root.indexOf(right)).join("\n");
-	const hasModel = /^\s*model\s*=/m.test(preservedRoot);
-	const hasEffort = /^\s*model_reasoning_effort\s*=/m.test(preservedRoot);
-	const rootRoute = MODEL_ROUTING_PLANS[plan].root;
-	const model = hasModel ? "" : `model = "${rootRoute.model}"\n`;
-	const effort = hasEffort ? "" : `model_reasoning_effort = "${rootRoute.reasoningEffort}"\n`;
-	const originalSource = previousOriginalRoot === void 0 ? priorAutonomy === void 0 && legacyGeneratedRoot === void 0 ? originalControlled : "" : removePermissionLines(previousOriginalRoot);
-	const original = originalSource ? `${ORIGINAL_ROOT}${Buffer.from(originalSource).toString("base64")}\n` : "";
-	const rootServiceTier = fastMode === "fast-all" ? "fast" : "default";
-	const priorManagedRoot = new RegExp(`^${START}\\r?\\n([\\s\\S]*?)^${END}\\r?$`, "m").exec(input)?.[1];
-	const webSearch = readPreservedRootOverrides(input).webSearch ? rootTomlString(priorManagedRoot ?? "", "web_search") ?? "live" : "live";
-	const statusLine = mergedStatusLine(rootValue(root, "status_line") ?? rootTomlStringArraySource(tableSource(base, "tui") ?? "", "status_line"));
-	const workflow = MODEL_ROUTING_PLANS[plan].workflow;
-	const rootBlock = `${START}\n${PLAN_PREFIX}${plan}\n${FAST_MODE_PREFIX}${fastMode}\n${WORKFLOW_POLICY_PREFIX}${JSON.stringify({
-		plan,
-		limits: workflow.limits,
-		projectedUsage: workflow.projectedUsage,
-		softSizeGuidance: workflow.softSizeGuidance
-	})}\n${AUTONOMY_METADATA_PREFIX}${effectiveAutonomy}\n${original}${originalPermissionMetadata(permissionLines)}${model}${effort}web_search = ${JSON.stringify(webSearch)}\nmodel_verbosity = "low"\nservice_tier = "${rootServiceTier}"\n${rootPermissionLines.join("\n")}\n${END}`;
-	let configured = `${preservedRoot ? `${preservedRoot}\n` : ""}${rootBlock}${tables ? `\n\n${tables}` : ""}`;
-	const legacyMultiAgentV2 = /\bmulti_agent_v2\s*=\s*(true|false)/.exec(configured)?.[1];
-	configured = injectTableKeys(configured, "features", [
-		["default_mode_request_user_input", "true"],
-		["multi_agent", "true"],
-		...legacyMultiAgentV2 === void 0 ? [] : [["multi_agent_v2", legacyMultiAgentV2]]
-	]);
-	configured = injectTableKeys(configured, "agents", [["max_concurrent_threads_per_session", String((maxSubagents ?? workflow.limits.concurrency) + 1)]]);
-	configured = injectTableKeys(configured, "tui", [["status_line", statusLine]]);
-	if (effectiveAutonomy !== "dangerous") configured = injectTableKeys(configured, "sandbox_workspace_write", [["network_access", "true"]]);
-	configured = injectTableKeys(configured, "desktop", [["show-context-window-usage", "true"]]);
-	if (_platform === "win32") configured = injectTableKeys(configured, "windows", [["sandbox", "\"unelevated\""]]);
-	for (const agent of AGENTS) configured = injectTableKeys(configured, `agents.${agent}`, [["config_file", `"holycodex/agents/${agent}.toml"`]]);
-	const plugin = `${START}\n[plugins."holycodex@holycodex"]\nenabled = true\n${END}`;
-	return `${configured.trim()}\n\n${plugin}\n`;
-}
-//#endregion
-//#region packages/cli/src/context7.ts
-var RUNNERS = [
-	{
-		executable: "nubx",
-		command: "nubx",
-		prefix: ["-y"]
-	},
-	{
-		executable: "nub",
-		command: "nub",
-		prefix: ["dlx"]
-	},
-	{
-		executable: "bunx",
-		command: "bunx",
-		prefix: []
-	},
-	{
-		executable: "bun",
-		command: "bun",
-		prefix: ["x"]
-	},
-	{
-		executable: "pnpmx",
-		command: "pnpmx",
-		prefix: []
-	},
-	{
-		executable: "pnpm",
-		command: "pnpm",
-		prefix: ["dlx"]
-	},
-	{
-		executable: "npmx",
-		command: "npmx",
-		prefix: ["--yes"]
-	},
-	{
-		executable: "npm",
-		command: "npx",
-		prefix: ["--yes"]
-	},
-	{
-		executable: "yarn",
-		command: "yarn",
-		prefix: ["dlx"]
-	}
-];
-/** Constructs the supported direct Context7 invocation for the first available runner. */
-function context7Command(args, executableExists = executableOnPath, env = process.env) {
-	const runner = RUNNERS.find((candidate) => executableExists(candidate.executable));
-	if (runner === void 0) return void 0;
-	return {
-		command: runner.command,
-		args: [
-			...runner.prefix,
-			"ctx7@latest",
-			...args
-		],
-		env: {
-			...env,
-			CI: env.CI ?? "1"
-		}
-	};
+function findPlugin(catalog, pluginId) {
+	return catalog.plugins.find(({ id }) => id === pluginId);
 }
-/** Reports whether an executable can be resolved from PATH. */
-function executableOnPath(name) {
-	const path = process.env.PATH;
-	if (path === void 0) return false;
-	const extensions = process.platform === "win32" ? [
-		".exe",
-		".cmd",
-		".bat",
-		""
-	] : [""];
-	for (const directory of path.split(delimiter)) for (const extension of extensions) try {
-		if (process.getBuiltinModule("node:fs").existsSync(`${directory}/${name}${extension}`)) return true;
-	} catch {
-		continue;
+function classifyFailure(result, launcher) {
+	if (result.error !== void 0) {
+		if (isUnavailableProcessError(result)) return {
+			kind: "fallback",
+			reason: "codex-unavailable"
+		};
+		return {
+			kind: "fallback",
+			reason: isPackageLauncher(launcher) ? "download-failed" : "invalid-response"
+		};
 	}
-	return false;
-}
-//#endregion
-//#region packages/cli/src/doctor.ts
-var DOCTOR_LSP_IDLE_SHUTDOWN_MS = 1e3;
-var COMPATIBILITY_KEYS = ["desktop.show-context-window-usage"];
-async function runCommand(name, args, env) {
-	const result = await runManagedProcess({
-		command: name,
-		args,
-		platform: process.platform,
-		timeoutMs: 15e3,
-		maxOutputChars: 64 * 1024,
-		...env === void 0 ? {} : { env }
-	});
-	return {
-		ok: result.exitCode === 0 && !result.timedOut && result.error === void 0,
-		output: `${result.stdout}\n${result.stderr}`.trim() || result.error || ""
+	if (result.exitCode === 0) return void 0;
+	const failureReason = classifyFailureReason(structuredErrorCodeFromOutput(result.stderr) ?? structuredErrorCodeFromOutput(result.stdout), sanitizeDiagnostic(result.stderr));
+	if (failureReason === "unauthenticated" || failureReason === "installation-rejected") return {
+		kind: "fatal",
+		reason: failureReason
 	};
-}
-var defaultRuntime$1 = {
-	platform: process.platform,
-	command: runCommand,
-	executable: executableOnPath,
-	gitBash: resolveGitBashForCurrentProcess
-};
-function check(id, status, code, detail, fix) {
 	return {
-		id,
-		status,
-		code,
-		detail,
-		...fix === void 0 ? {} : { fix }
+		kind: "fallback",
+		reason: failureReason
 	};
 }
-async function missingFiles(root, paths) {
-	const missing = [];
-	for (const path of paths) try {
-		await access(join(root, path));
-	} catch {
-		missing.push(path);
+function classifyFailureReason(code, diagnostic) {
+	if (code !== void 0) {
+		if (FATAL_AUTH_CODES.has(code) || FATAL_ACCOUNT_CODES.has(code)) return "unauthenticated";
+		if (FATAL_MARKETPLACE_CODES.has(code)) return "marketplace-unavailable";
+		if (FATAL_PLUGIN_CODES.has(code)) return "plugin-unavailable";
+		if (FATAL_POLICY_CODES.has(code)) return "installation-rejected";
+		if (SPAWN_UNAVAILABLE_CODES.has(code)) return "codex-unavailable";
+		if ([
+			"ETIMEDOUT",
+			"ECONNRESET",
+			"ECONNREFUSED",
+			"EAI_AGAIN",
+			"ENETUNREACH"
+		].includes(code)) return "download-failed";
 	}
-	return missing;
+	const lower = diagnostic.toLowerCase();
+	if (/unknown (?:command|subcommand)|unrecognized (?:command|subcommand)|invalid subcommand/.test(lower)) return "unsupported";
+	if (/not supported on (?:this )?platform|unsupported (?:platform|architecture)|no matching (?:binary|package)|platform package|not compatible/.test(lower)) return "unsupported";
+	if (/unauthenticated|authentication required|not logged in|account (?:required|not found)/.test(lower)) return "unauthenticated";
+	if (/account (?:restricted|unavailable|suspended|disabled)/.test(lower)) return "installation-rejected";
+	if (/marketplace|catalog/.test(lower)) return "marketplace-unavailable";
+	if (/eai_again|enetwork|network|timed out|timeout|download|fetch|resolve package/.test(lower)) return "download-failed";
+	if (/plugin (?:not found|unavailable|missing)/.test(lower)) return "plugin-unavailable";
+	if (/permission denied|policy|rejected|forbidden/.test(lower)) return "installation-rejected";
+	return "invalid-response";
 }
-function tableBody(config, table) {
-	return new RegExp(`^\\s*\\[${table.replaceAll(".", "\\.")}]\\s*$([\\s\\S]*?)(?=^\\s*\\[|(?![\\s\\S]))`, "m").exec(config)?.[1];
+function finalFallbackReason(reasons) {
+	if (reasons.length > 0 && reasons.every((reason) => reason === "plugin-not-offered")) return "all-launchers-lacked-plugin";
+	if (reasons.includes("verification-failed")) return "verification-failed";
+	if (reasons.includes("plugin-not-offered")) return "plugin-not-offered";
+	if (reasons.includes("timeout")) return "timeout";
+	if (reasons.includes("unsupported")) return "unsupported";
+	if (reasons.includes("marketplace-unavailable")) return "marketplace-unavailable";
+	if (reasons.includes("download-failed")) return "download-failed";
+	if (reasons.includes("plugin-unavailable")) return "plugin-unavailable";
+	if (reasons.includes("invalid-response")) return "invalid-response";
+	return "codex-unavailable";
 }
-function tableValue(config, table, key) {
-	const body = tableBody(config, table);
-	return body === void 0 ? void 0 : new RegExp(`^\\s*${key.replaceAll("-", "\\-")}\\s*=\\s*(.+?)\\s*$`, "m").exec(body)?.[1];
+function timeoutFor(launcher, operation) {
+	return operation === "list" && isPackageLauncher(launcher) ? CODEX_PACKAGE_BOOTSTRAP_TIMEOUT_MS : CODEX_PLUGIN_OPERATIONAL_TIMEOUT_MS;
 }
-function autonomy(config) {
-	const approval = rootTomlString(config, "approval_policy");
-	const reviewer = rootTomlString(config, "approvals_reviewer");
-	const sandbox = rootTomlString(config, "sandbox_mode");
-	const network = tableValue(config, "sandbox_workspace_write", "network_access");
-	if (approval === "on-request" && reviewer === "auto_review" && sandbox === "workspace-write" && network === "true") return "safe-workspace";
-	if (approval === "never" && reviewer === void 0 && sandbox === "workspace-write" && network === "true") return "autonomous-workspace";
-	if (approval === "never" && reviewer === void 0 && sandbox === "danger-full-access") return "dangerous";
-	return "unknown";
+function isPackageLauncher(launcher) {
+	return launcher.source === "bunx" || launcher.source === "npm-exec" || launcher.source === "pnpm-exec";
 }
-/** Runs installation, configuration, runtime, and override health checks. */
-async function doctor(home = process.env.CODEX_HOME ?? join(homedir(), ".codex"), runtime = defaultRuntime$1) {
-	const checks = [];
-	const pluginRoot = join(home, "plugins", "cache", "holycodex", "holycodex", VERSION);
-	const agentRoot = join(home, "holycodex", "agents");
-	const configPath = join(home, "config.toml");
-	let config = "";
-	try {
-		config = await readFile(configPath, "utf8");
-	} catch {
-		checks.push(check("config", "error", "config-missing", `Missing ${configPath}.`, "Run holycodex install."));
-	}
-	const missing = await missingFiles(pluginRoot, [
-		".codex-plugin/plugin.json",
-		"hooks/hooks.json",
-		...requiredPackageRuntimes(runtime.platform).map((file) => `runtime/${file}`),
-		...AGENTS.map((name) => `agents/${name}.toml`),
-		...SKILLS.map((name) => `skills/${name}/SKILL.md`)
-	]);
-	checks.push(missing.length === 0 ? check("package", "ok", "package-ready", `Plugin ${VERSION}, runtimes, agents, and ${SKILLS.length} skills are present.`) : check("package", "error", "package-incomplete", `Missing ${missing.join(", ")}.`, "Reinstall HolyCodex."));
-	const webSearchOverride = readPreservedRootOverrides(config).webSearch;
-	checks.push(rootTomlString(config, "web_search") === "live" ? check("web-search", "ok", "live-web-search", "Managed web search defaults to live.") : webSearchOverride ? check("web-search", "ok", "web-search-override", "An intentional user web-search override is preserved.") : check("web-search", "error", "web-search-not-live", "Managed web search is not live.", "Reinstall HolyCodex."));
-	const status = rootTomlStringArray(config, "status_line") ?? rootTomlStringArray(tableBody(config, "tui") ?? "", "status_line");
-	checks.push(status?.includes("context-remaining") ? check("context-visibility", "ok", "context-visible", "Context-window usage remains visible.") : check("context-visibility", "error", "context-hidden", "The status line does not show context remaining.", "Reinstall HolyCodex."));
-	checks.push(check("screenshot", "ok", "screenshot-default-preserved", "HolyCodex does not override the enabled Codex screenshot default."));
-	const context7 = context7Command(["--version"], runtime.executable);
-	if (context7 === void 0) checks.push(check("context7", "error", "context7-runner-missing", "No supported direct Context7 runner is available.", "Install nub, Bun, pnpm, npm, or Yarn."));
-	else checks.push(check("context7", "ok", "context7-cli-ready", `${context7.command} constructs a valid direct ctx7@latest command.`));
-	const lsp = await runtime.command(process.execPath, [
-		join(pluginRoot, "runtime", "lsp.js"),
-		"status",
-		"--json"
-	], {
-		...process.env,
-		HOLYCODEX_LSP_IDLE_SHUTDOWN_MS: String(DOCTOR_LSP_IDLE_SHUTDOWN_MS),
-		HOLYCODEX_LSP_IDLE_CHECK_INTERVAL_MS: "50"
-	});
-	checks.push(lsp.ok ? check("lsp", "ok", "lsp-cli-ready", "The LSP CLI and daemon are reachable.") : check("lsp", "error", "lsp-cli-failed", lsp.output || "LSP CLI failed.", "Reinstall HolyCodex and inspect the reported daemon log."));
-	if (runtime.platform === "win32") {
-		const resolution = runtime.gitBash();
-		checks.push(resolution.found ? check("git-bash", "ok", "git-bash-launcher-ready", `Git Bash resolves at ${resolution.path}; the bundled launcher is present.`) : check("git-bash", "error", "git-bash-unavailable", resolution.installHint, resolution.installHint));
-	}
-	const plan = readManagedPlan(config);
-	const overrides = readPreservedRootOverrides(config);
-	const fast = readManagedFastMode(config);
-	const workflow = readManagedWorkflowPolicy(config);
-	checks.push(plan === void 0 ? check("routes", "error", "route-plan-missing", "Managed route plan metadata is missing.", "Reinstall HolyCodex.") : check("routes", "ok", "routes-ready", `${plan} workflow policy is active with permitted stage routes.`));
-	checks.push(plan === void 0 || workflow === void 0 ? check("workflow", "error", "workflow-settings-missing", "Managed workflow settings are missing or invalid.", "Reinstall HolyCodex.") : JSON.stringify(workflow) === JSON.stringify({
-		plan,
-		limits: MODEL_ROUTING_PLANS[plan].workflow.limits,
-		projectedUsage: MODEL_ROUTING_PLANS[plan].workflow.projectedUsage,
-		softSizeGuidance: MODEL_ROUTING_PLANS[plan].workflow.softSizeGuidance
-	}) ? check("workflow", "ok", "workflow-settings-ready", `${plan} workflow target and maximum limits, projected usage, and size guidance match the catalog.`) : check("workflow", "error", "workflow-settings-drift", `${plan} workflow settings do not match the authoritative catalog.`, "Reinstall HolyCodex."));
-	checks.push(missing.includes("runtime/workflow.js") ? check("workflow-runtime", "error", "workflow-runtime-missing", "The isolated workflow runtime is missing.", "Reinstall HolyCodex.") : check("workflow-runtime", "ok", "workflow-runtime-ready", "The isolated workflow runtime is present."));
-	const manifest = await readFile(join(pluginRoot, ".codex-plugin", "plugin.json"), "utf8").catch(() => "");
-	const mcpManifest = await access(join(pluginRoot, ".mcp.json")).then(() => true).catch(() => false);
-	checks.push(!mcpManifest && !manifest.includes("mcpServers") && !manifest.includes("MCP Tools") ? check("mcp", "ok", "mcp-free", "The installation does not declare MCP servers or tools.") : check("mcp", "error", "mcp-declared", "The installation declares MCP servers or tools.", "Reinstall HolyCodex from a MCP-free package."));
-	checks.push(overrides.model || overrides.reasoningEffort ? check("root-overrides", "ok", "root-overrides-preserved", "Intentional Root model or reasoning overrides are preserved and healthy.") : check("root-overrides", "ok", "root-managed-defaults", "Root uses managed route defaults."));
-	if (plan !== void 0 && fast === void 0) checks.push(check("fast", "warning", "fast-metadata-missing", "Fast metadata is missing; doctor will not guess a service tier.", "Reinstall with an explicit Fast mode."));
-	if (plan !== void 0) for (const agent of AGENTS) {
-		const source = await readFile(join(agentRoot, `${agent}.toml`), "utf8").catch(() => "");
-		const expected = MODEL_ROUTING_PLANS[plan].agents[agent];
-		const overridden = rootTomlString(source, "model") !== expected.model || rootTomlString(source, "model_reasoning_effort") !== expected.reasoningEffort;
-		checks.push(check(`agent-${agent}`, "ok", overridden ? "agent-override-preserved" : "agent-managed-default", overridden ? `${agent} has an intentional healthy route override.` : `${agent} uses managed route defaults.`));
+/** Normalizes supported flat and marketplace-oriented Codex catalogs. */
+function parsePluginCatalog(input) {
+	for (const value of parseJsonDocuments(input) ?? []) {
+		const plugins = parseCatalogValue(value);
+		if (plugins !== void 0) return { plugins };
 	}
-	for (const key of COMPATIBILITY_KEYS) if (config.includes(key.split(".")[1] ?? key)) checks.push(check(`compat-${key}`, "warning", "compatibility-sensitive-key", `${key} is compatibility-sensitive and isolated from supported managed Codex keys.`));
-	return {
-		healthy: checks.every((item) => item.status !== "error"),
-		autonomy: autonomy(config),
-		checks
-	};
-}
-//#endregion
-//#region packages/cli/src/codex-launcher.ts
-var CODEX_PACKAGE_SPEC = "@openai/codex@latest";
-/** Derives safe process facts for the default installation flow. */
-function defaultCodexLauncherRuntimeFacts(platform = process.platform, env = process.env) {
-	const bun = typeof process.versions.bun === "string";
-	const allowPackageResolution = env.HOLYCODEX_TEST_SKIP_PACKAGE_RESOLUTION !== "1";
-	const npmExecPath = bun ? void 0 : env.npm_execpath;
-	return {
-		allowPackageResolution,
-		platform,
-		execPath: process.execPath,
-		runtime: bun ? "bun" : "node",
-		...npmExecPath === void 0 ? {} : { npmExecPath },
-		availableRunners: ["npm", "pnpm"],
-		npm: platform === "win32" ? "npm.cmd" : "npm",
-		pnpm: platform === "win32" ? "pnpm.cmd" : "pnpm"
-	};
 }
-/** Builds ordered Codex launcher candidates once for an installation. */
-function createCodexLauncherCandidates(input = {}) {
-	const facts = input.runtimeFacts ?? {};
-	const candidates = [];
-	const injected = input.injected === void 0 ? [] : toArray(input.injected);
-	for (const candidate of injected) {
-		const launcher = normalizeLauncher(candidate, "injected");
-		if (launcher !== void 0) candidates.push(launcher);
+function parseMarketplaceNames(input) {
+	for (const value of parseJsonDocuments(input) ?? []) {
+		if (!isRecord(value) || !Array.isArray(value.marketplaces)) continue;
+		const names = [];
+		for (const marketplace of value.marketplaces) {
+			if (!isRecord(marketplace)) {
+				names.length = 0;
+				break;
+			}
+			const name = stringField(marketplace, ["name"]);
+			if (name === void 0) {
+				names.length = 0;
+				break;
+			}
+			names.push(name);
+		}
+		if (names.length > 0 || value.marketplaces.length === 0) return names;
 	}
-	const pathLauncher = normalizeLauncher(facts.pathCodex ?? "codex", "path");
-	if (pathLauncher !== void 0) candidates.push(pathLauncher);
-	if (facts.allowPackageResolution === false) return deduplicate(candidates);
-	if ((facts.runtime ?? (typeof process.versions.bun === "string" ? "bun" : "node")) === "bun") {
-		const bunLauncher = normalizeLauncher({
-			command: facts.execPath ?? process.execPath,
-			argsPrefix: ["x", CODEX_PACKAGE_SPEC],
-			source: "bunx"
-		}, "bunx");
-		if (bunLauncher !== void 0) candidates.push(bunLauncher);
+}
+function parseCatalogValue(value) {
+	if (Array.isArray(value)) return parseMarketplaceEntries(value);
+	if (!isRecord(value)) return void 0;
+	if ("installed" in value || "available" in value) {
+		if (!Array.isArray(value.installed) || !Array.isArray(value.available)) return void 0;
+		const installed = parsePluginEntries(value.installed, void 0, true);
+		const available = parsePluginEntries(value.available, void 0, false);
+		return installed === void 0 || available === void 0 ? void 0 : [...installed, ...available];
 	}
-	const nodeRunner = facts.nodeRunner ?? activeNodeRunner(facts);
-	if (nodeRunner !== void 0) {
-		const launcher = normalizeLauncher(nodeRunner, nodeRunnerSource(nodeRunner));
-		if (launcher !== void 0) candidates.push(launcher);
+	if ("marketplaces" in value) return Array.isArray(value.marketplaces) ? parseMarketplaceEntries(value.marketplaces) : void 0;
+	if ("plugins" in value) return parseMarketplaceEntry(value);
+}
+function parseMarketplaceEntries(entries) {
+	const plugins = [];
+	for (const entry of entries) {
+		const parsed = parseMarketplaceEntry(entry);
+		if (parsed === void 0) return void 0;
+		plugins.push(...parsed);
 	}
-	const availableRunners = facts.availableRunners ?? [];
-	if (facts.npm !== false && (facts.npm !== void 0 || availableRunners.includes("npm"))) candidates.push(packageLauncher(facts.npm, facts.platform, "npm-exec"));
-	if (facts.pnpm !== false && (facts.pnpm !== void 0 || availableRunners.includes("pnpm"))) candidates.push(packageLauncher(facts.pnpm, facts.platform, "pnpm-exec"));
-	return deduplicate(candidates);
+	return plugins;
 }
-/** Appends command arguments to a launcher prefix without mutating either array. */
-function codexLauncherArgs(launcher, args) {
-	return [...launcher.argsPrefix, ...args];
+function parseMarketplaceEntry(value) {
+	if (!isRecord(value) || !Array.isArray(value.plugins)) return void 0;
+	const marketplace = stringField(value, [
+		"marketplace",
+		"marketplaceId",
+		"marketplaceName",
+		"id",
+		"name"
+	]);
+	if (marketplace === void 0) return void 0;
+	return parsePluginEntries(value.plugins, marketplace);
 }
-function activeNodeRunner(facts) {
-	if (facts.npmExecPath === void 0 || facts.execPath === void 0) return void 0;
-	const source = packageRunnerSource(facts.npmExecPath);
-	if (source === void 0) return void 0;
+function parsePluginEntries(entries, parentMarketplace, defaultInstalled) {
+	const plugins = [];
+	for (const value of entries) {
+		const plugin = parsePluginEntry(value, parentMarketplace, defaultInstalled);
+		if (plugin === void 0) return void 0;
+		plugins.push(plugin);
+	}
+	return plugins;
+}
+function parsePluginEntry(value, parentMarketplace, defaultInstalled = false) {
+	if (!isRecord(value)) return void 0;
+	const rawId = stringField(value, [
+		"pluginId",
+		"id",
+		"name"
+	]);
+	if (rawId === void 0) return void 0;
+	const marketplace = stringField(value, [
+		"marketplace",
+		"marketplaceId",
+		"marketplaceName"
+	]) ?? parentMarketplace;
+	const id = rawId.includes("@") ? rawId : marketplace === void 0 ? rawId : `${rawId}@${marketplace}`;
+	const state = stringField(value, [
+		"installationState",
+		"installState",
+		"status",
+		"state"
+	]);
+	const policy = isRecord(value.policy) ? stringField(value.policy, ["installation"]) : void 0;
 	return {
-		command: facts.execPath,
-		argsPrefix: source === "npm-exec" ? [
-			facts.npmExecPath,
-			"exec",
-			"--yes",
-			"--package",
-			CODEX_PACKAGE_SPEC,
-			"--",
-			"codex"
-		] : [
-			facts.npmExecPath,
-			"dlx",
-			CODEX_PACKAGE_SPEC
-		],
-		source
+		id,
+		installed: booleanField(value.installed) ?? installedFromState(state ?? policy) ?? defaultInstalled,
+		enabled: booleanField(value.enabled) ?? enabledFromState(state) ?? false
 	};
 }
-function packageRunnerSource(path) {
-	const basename = path.replaceAll("\\", "/").split("/").pop()?.toLowerCase() ?? "";
+function stringField(value, keys) {
+	for (const key of keys) {
+		const candidate = value[key];
+		if (typeof candidate === "string" && candidate.trim() !== "") return candidate.trim();
+	}
+}
+function booleanField(value) {
+	if (typeof value === "boolean") return value;
+	if (typeof value !== "string") return void 0;
+	if (value.toLowerCase() === "true") return true;
+	if (value.toLowerCase() === "false") return false;
+}
+function installedFromState(value) {
+	if (value === void 0) return void 0;
+	const state = value.toLowerCase().replaceAll("-", "_");
 	if ([
-		"npm",
-		"npm.cmd",
-		"npm-cli.js",
-		"npm-cli.cjs"
-	].includes(basename)) return "npm-exec";
+		"installed",
+		"enabled",
+		"disabled",
+		"installed_by_default"
+	].includes(state)) return true;
 	if ([
-		"pnpm",
-		"pnpm.cmd",
-		"pnpm.js",
-		"pnpm.cjs"
-	].includes(basename)) return "pnpm-exec";
+		"available",
+		"not_installed",
+		"uninstalled",
+		"not_available"
+	].includes(state)) return false;
 }
-function nodeRunnerSource(value) {
-	if (typeof value === "object" && value !== null && "source" in value) {
-		if (value.source === "pnpm-exec") return "pnpm-exec";
-		if (value.source === "npm-exec") return "npm-exec";
+function enabledFromState(value) {
+	if (value === void 0) return void 0;
+	const state = value.toLowerCase();
+	if (state === "enabled") return true;
+	if (state === "disabled") return false;
+}
+function parseJsonDocuments(input) {
+	const wholeDocument = tryParseJson(input);
+	if (wholeDocument !== void 0) return [wholeDocument];
+	const lines = input.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+	if (lines.length === 0) return void 0;
+	for (let index = 1; index < lines.length; index += 1) {
+		const document = tryParseJson(lines.slice(index).join("\n"));
+		if (document !== void 0) return [document];
 	}
-	return "npm-exec";
+	const documents = [];
+	let parsedDocument = false;
+	for (const line of lines) {
+		const document = tryParseJson(line);
+		if (document === void 0) {
+			if (parsedDocument) return void 0;
+			continue;
+		}
+		documents.push(document);
+		if (documents.length > MAX_JSON_DOCUMENTS) return void 0;
+		parsedDocument = true;
+	}
+	return documents.length === 0 ? void 0 : documents;
 }
-function packageLauncher(command, platform, source) {
-	return {
-		command: typeof command === "string" ? command : source === "npm-exec" ? platform === "win32" ? "npm.cmd" : "npm" : platform === "win32" ? "pnpm.cmd" : "pnpm",
-		argsPrefix: source === "npm-exec" ? [
-			"exec",
-			"--yes",
-			"--package",
-			CODEX_PACKAGE_SPEC,
-			"--",
-			"codex"
-		] : ["dlx", CODEX_PACKAGE_SPEC],
-		source
-	};
+function tryParseJson(input) {
+	try {
+		return JSON.parse(input);
+	} catch {
+		return;
+	}
 }
-function toArray(value) {
-	return Array.isArray(value) ? value : [value];
+function structuredErrorCodeFromOutput(input) {
+	for (const value of parseJsonDocuments(input) ?? []) {
+		const code = structuredErrorCode(value);
+		if (code !== void 0) return code;
+	}
 }
-function normalizeLauncher(value, source) {
-	if (typeof value === "string") {
-		const command = value.trim();
-		return command === "" ? void 0 : {
-			command,
-			argsPrefix: [],
-			source
-		};
+function structuredErrorCode(value) {
+	if (!isRecord(value)) return void 0;
+	if (value.error !== void 0) {
+		const nestedCode = structuredErrorCode(value.error);
+		if (nestedCode !== void 0) return nestedCode;
 	}
-	if (typeof value !== "object" || value === null || typeof value.command !== "string") return void 0;
-	const command = value.command.trim();
-	if (command === "" || !Array.isArray(value.argsPrefix)) return void 0;
-	if (!value.argsPrefix.every((arg) => typeof arg === "string")) return void 0;
+	for (const key of [
+		"code",
+		"status",
+		"statusCode"
+	]) {
+		const candidate = value[key];
+		if (typeof candidate === "string" || typeof candidate === "number") return String(candidate).trim().toUpperCase();
+	}
+}
+function sanitizeDiagnostic(input) {
+	return input.replaceAll(/(?:[A-Za-z]:)?[\\/][^\s"']+/g, "<path>").replaceAll(/(token|secret|password|authorization)\s*[:=]\s*[^\s,}]+/gi, "$1=<redacted>").slice(0, 2048);
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+function isUnavailableProcessError(result) {
+	if (result.errorCode !== void 0 && SPAWN_UNAVAILABLE_CODES.has(result.errorCode.toUpperCase())) return true;
+	const error = result.error?.toUpperCase() ?? "";
+	return [...SPAWN_UNAVAILABLE_CODES].some((code) => new RegExp(`(?:^|\\s)${code}(?:$|\\s)`).test(error));
+}
+function isUnavailableThrownError(value) {
+	const code = thrownErrorCode(value);
+	return code !== void 0 && SPAWN_UNAVAILABLE_CODES.has(code.toUpperCase());
+}
+function isBootstrapThrownError(value) {
+	const code = thrownErrorCode(value)?.toUpperCase();
+	if (code !== void 0 && [
+		"ETIMEDOUT",
+		"ECONNRESET",
+		"ECONNREFUSED",
+		"EAI_AGAIN",
+		"ENETUNREACH"
+	].includes(code)) return true;
+	if (!(value instanceof Error)) return false;
+	return /bootstrap|network|download|fetch|timeout|timed out/i.test(value.message);
+}
+function thrownErrorCode(value) {
+	if (typeof value !== "object" || value === null || !("code" in value)) return void 0;
+	const code = value.code;
+	return typeof code === "string" ? code : void 0;
+}
+function skipped(reason, attemptedLaunchers) {
 	return {
-		command,
-		argsPrefix: [...value.argsPrefix],
-		source
+		status: "skipped",
+		reason,
+		attemptedLaunchers: [...attemptedLaunchers]
 	};
 }
-function deduplicate(candidates) {
-	const seen = /* @__PURE__ */ new Set();
-	const result = [];
-	for (const candidate of candidates) {
-		const key = JSON.stringify([candidate.command, candidate.argsPrefix]);
-		if (seen.has(key)) continue;
-		seen.add(key);
-		result.push(candidate);
-	}
-	return result;
-}
 //#endregion
-//#region packages/cli/src/codex-security.ts
-var CODEX_SECURITY_PLUGIN = {
-	id: "codex-security@openai-curated",
-	marketplace: "openai-curated"
-};
-var COMPUTER_USE_PLUGIN = {
-	id: "computer-use@openai-bundled",
-	marketplace: "openai-bundled"
-};
-var BUILD_WEB_APPS_PLUGIN = {
-	id: "build-web-apps@openai-curated",
-	marketplace: "openai-curated"
-};
-var CODEX_PLUGIN_OPERATIONAL_TIMEOUT_MS = 15e3;
-var CODEX_PACKAGE_BOOTSTRAP_TIMEOUT_MS = 12e4;
-var MAX_CODEX_CATALOG_DIAGNOSTIC_CHARS = 256 * 1024;
-var MAX_JSON_DOCUMENTS = 16;
-var SPAWN_UNAVAILABLE_CODES = /* @__PURE__ */ new Set([
-	"EACCES",
-	"ENOENT",
-	"EPERM"
-]);
-var FATAL_AUTH_CODES = /* @__PURE__ */ new Set([
-	"401",
-	"UNAUTHENTICATED",
-	"AUTHENTICATION_REQUIRED"
-]);
-var FATAL_ACCOUNT_CODES = /* @__PURE__ */ new Set(["ACCOUNT_REQUIRED", "ACCOUNT_NOT_FOUND"]);
-var FATAL_MARKETPLACE_CODES = /* @__PURE__ */ new Set([
-	"502",
-	"503",
-	"504",
-	"MARKETPLACE_UNAVAILABLE",
-	"MARKETPLACE_LOAD_FAILED",
-	"CATALOG_UNAVAILABLE"
-]);
-var FATAL_PLUGIN_CODES = /* @__PURE__ */ new Set([
-	"404",
-	"PLUGIN_NOT_FOUND",
-	"PLUGIN_UNAVAILABLE"
-]);
-var FATAL_POLICY_CODES = /* @__PURE__ */ new Set([
-	"403",
-	"ACCOUNT_RESTRICTED",
-	"ACCOUNT_UNAVAILABLE",
-	"ACCOUNT_SUSPENDED",
-	"ACCOUNT_DISABLED",
-	"INSTALLATION_REJECTED",
-	"PERMISSION_DENIED",
-	"POLICY_REJECTED"
-]);
-/** Installs or enables the official Codex Security plugin without failing HolyCodex installation. */
-async function installCodexSecurity(runProcess = runManagedProcess, platform = process.platform, env = process.env, options = {}) {
-	return installOfficialPlugin(CODEX_SECURITY_PLUGIN, runProcess, platform, env, options);
+//#region packages/cli/src/toml.ts
+var TOML_TABLE = /^[ \t]*(?:\[[^\]\r\n]+\]|\[\[[^\]\r\n]+\]\])[ \t]*(?:#.*)?$/m;
+/** Reads a root TOML string value. */
+function rootTomlString(input, key) {
+	const table = TOML_TABLE.exec(input);
+	const root = table === null ? input : input.slice(0, table.index);
+	const match = new RegExp(String.raw`^[ \t]*${escapeRegExp$1(key)}[ \t]*=[ \t]*(?:"((?:\\.|[^"\\\r\n])*)"|'([^'\r\n]*)')[ \t]*(?:#.*)?$`, "m").exec(root);
+	if (match === null) return void 0;
+	if (match[2] !== void 0) return match[2];
+	try {
+		return string().safeParse(JSON.parse(`"${match[1] ?? ""}"`)).data;
+	} catch {
+		return;
+	}
 }
-/** Installs or enables the official Computer Use plugin without failing HolyCodex installation. */
-async function installComputerUse(runProcess = runManagedProcess, platform = process.platform, env = process.env, options = {}) {
-	return installOfficialPlugin(COMPUTER_USE_PLUGIN, runProcess, platform, env, options);
+/** Reads a root TOML string array. */
+function rootTomlStringArray(input, key) {
+	return parseRootTomlStringArray(input, key)?.items;
 }
-/** Installs or enables the official Build Web Apps plugin without failing HolyCodex installation. */
-async function installBuildWebApps(runProcess = runManagedProcess, platform = process.platform, env = process.env, options = {}) {
-	return installOfficialPlugin(BUILD_WEB_APPS_PLUGIN, runProcess, platform, env, options);
+/** Reads the source text of a root TOML string array. */
+function rootTomlStringArraySource(input, key) {
+	return parseRootTomlStringArray(input, key)?.source;
 }
-/** Installs or enables one official Codex plugin through a verified catalog entry. */
-async function installOfficialPlugin(plugin, runProcess = runManagedProcess, platform = process.platform, env = process.env, options = {}) {
-	const runtimeFacts = options.runtimeFacts ?? (runProcess === runManagedProcess ? defaultCodexLauncherRuntimeFacts(platform) : void 0);
-	const candidates = createCodexLauncherCandidates({
-		...options.injected === void 0 ? {} : { injected: options.injected },
-		...runtimeFacts === void 0 ? {} : { runtimeFacts }
-	});
-	const attemptedLaunchers = [];
-	const fallbackReasons = [];
-	for (const launcher of candidates) {
-		attemptedLaunchers.push(launcher.source);
-		let installedOutcome = inspectListResult(await runCodexPlugin(runProcess, launcher, [
-			"plugin",
-			"list",
-			"--json"
-		], platform, env, "list"), launcher);
-		if (launcher.source === "path" && installedOutcome.kind === "fallback" && installedOutcome.reason === "download-failed") installedOutcome = inspectListResult(await runCodexPlugin(runProcess, launcher, [
-			"plugin",
-			"list",
-			"--json"
-		], platform, env, "list"), launcher);
-		if (installedOutcome.kind === "fallback") {
-			fallbackReasons.push(installedOutcome.reason);
+function parseRootTomlStringArray(input, key) {
+	const table = TOML_TABLE.exec(input);
+	const root = table === null ? input : input.slice(0, table.index);
+	const assignment = new RegExp(String.raw`^[ \t]*${escapeRegExp$1(key)}[ \t]*=`, "m").exec(root);
+	if (assignment === null) return void 0;
+	const start = root.indexOf("[", assignment.index + assignment[0].length);
+	if (start < 0) return void 0;
+	const items = [];
+	let quote;
+	let raw = "";
+	let escaped = false;
+	let comment = false;
+	for (let index = start + 1; index < root.length; index += 1) {
+		const character = root[index];
+		if (comment) {
+			if (character === "\n") comment = false;
 			continue;
 		}
-		if (installedOutcome.kind === "fatal") return skipped(installedOutcome.reason, attemptedLaunchers);
-		const installedPlugin = findPlugin(installedOutcome.catalog, plugin.id);
-		if (installedPlugin?.installed === true && installedPlugin.enabled === true) return {
-			status: "already-installed",
-			launcherSource: launcher.source
-		};
-		const wasDisabled = installedPlugin?.installed === true;
-		if (!wasDisabled) {
-			const catalogOutcome = inspectListResult(await runCodexPlugin(runProcess, launcher, [
-				"plugin",
-				"list",
-				"--available",
-				"--json"
-			], platform, env, "list"), launcher);
-			if (catalogOutcome.kind === "fallback") {
-				fallbackReasons.push(catalogOutcome.reason);
-				continue;
-			}
-			if (catalogOutcome.kind === "fatal") return skipped(catalogOutcome.reason, attemptedLaunchers);
-			let pluginAvailable = findPlugin(catalogOutcome.catalog, plugin.id) !== void 0;
-			if (!pluginAvailable) {
-				const marketplaceOutcome = inspectMarketplaceResult(await runCodexPlugin(runProcess, launcher, [
-					"plugin",
-					"marketplace",
-					"list",
-					"--json"
-				], platform, env, "list"), launcher);
-				if (marketplaceOutcome.kind === "fallback") {
-					fallbackReasons.push(marketplaceOutcome.reason);
-					continue;
-				}
-				if (marketplaceOutcome.kind === "fatal") return skipped(marketplaceOutcome.reason, attemptedLaunchers);
-				if (plugin.id === COMPUTER_USE_PLUGIN.id && !marketplaceOutcome.marketplaces.includes(plugin.marketplace)) {
-					const refreshedCatalog = inspectListResult(await runCodexPlugin(runProcess, launcher, [
-						"plugin",
-						"list",
-						"--available",
-						"--json"
-					], platform, env, "list"), launcher);
-					if (refreshedCatalog.kind === "selected") pluginAvailable = findPlugin(refreshedCatalog.catalog, plugin.id) !== void 0;
-					else fallbackReasons.push(refreshedCatalog.reason);
-				}
-				if (!pluginAvailable) {
-					fallbackReasons.push(marketplaceOutcome.marketplaces.includes(plugin.marketplace) ? "plugin-not-offered" : "marketplace-unavailable");
-					continue;
+		if (quote === "\"") {
+			if (escaped) {
+				raw += character;
+				escaped = false;
+			} else if (character === "\\") {
+				raw += character;
+				escaped = true;
+			} else if (character === "\"") {
+				try {
+					const parsed = string().safeParse(JSON.parse(`"${raw}"`));
+					if (!parsed.success) return void 0;
+					items.push(parsed.data);
+				} catch {
+					return;
 				}
-			}
-		}
-		const addOutcome = inspectAddResult(await runCodexPlugin(runProcess, launcher, [
-			"plugin",
-			"add",
-			plugin.id,
-			"--json"
-		], platform, env, "add"), launcher);
-		if (addOutcome.kind === "fallback") {
-			fallbackReasons.push(addOutcome.reason);
+				quote = void 0;
+				raw = "";
+			} else raw += character;
 			continue;
 		}
-		if (addOutcome.kind === "fatal") return skipped(addOutcome.reason, attemptedLaunchers);
-		const verification = inspectListResult(await runCodexPlugin(runProcess, launcher, [
-			"plugin",
-			"list",
-			"--json"
-		], platform, env, "list"), launcher);
-		if (verification.kind === "fallback") {
-			fallbackReasons.push(verification.reason);
+		if (quote === "'") {
+			if (character === "'") {
+				items.push(raw);
+				quote = void 0;
+				raw = "";
+			} else raw += character;
 			continue;
 		}
-		if (verification.kind === "fatal") return skipped(verification.reason, attemptedLaunchers);
-		const verifiedPlugin = findPlugin(verification.catalog, plugin.id);
-		if (verifiedPlugin?.installed !== true || verifiedPlugin.enabled !== true) {
-			fallbackReasons.push("verification-failed");
-			continue;
+		if (character === "#") comment = true;
+		else if (character === "\"" || character === "'") quote = character;
+		else if (character === "]") {
+			const suffix = /^[ \t]*(?:#.*)?(?=\r?\n|$)/.exec(root.slice(index + 1))?.[0] ?? "";
+			return {
+				source: root.slice(assignment.index, index + 1 + suffix.length),
+				items
+			};
 		}
-		return {
-			status: wasDisabled ? "enabled" : "installed",
-			launcherSource: launcher.source
-		};
 	}
-	return skipped(finalFallbackReason(fallbackReasons), attemptedLaunchers);
 }
-async function runCodexPlugin(runProcess, launcher, args, platform, env, operation) {
-	try {
-		return await runProcess({
-			command: launcher.command,
-			args: codexLauncherArgs(launcher, args),
-			platform,
-			timeoutMs: timeoutFor(launcher, operation),
-			maxOutputChars: MAX_CODEX_CATALOG_DIAGNOSTIC_CHARS,
-			env
-		});
-	} catch (error) {
-		const code = thrownErrorCode(error);
-		if (!isUnavailableThrownError(error) && !(isPackageLauncher(launcher) && isBootstrapThrownError(error))) throw error;
-		return {
-			exitCode: null,
-			stdout: "",
-			stderr: "",
-			timedOut: false,
-			matched: false,
-			outputTruncated: false,
-			error: "Codex launcher could not be started.",
-			...code === void 0 ? {} : { errorCode: code }
-		};
-	}
+function escapeRegExp$1(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//#endregion
+//#region packages/cli/src/permission-selection.ts
+var PERMISSION_KEYS = [
+	"default_permissions",
+	"approval_policy",
+	"approvals_reviewer",
+	"sandbox_mode"
+];
+var AUTONOMY_PREFIX = "# holycodex autonomy: ";
+var ORIGINAL_PERMISSION_PREFIX = "# holycodex original permissions: ";
+/** Normalizes legacy string callers while preserving an omitted request. */
+function normalizeRequestedAutonomy(value) {
+	if (value === void 0) return { requested: false };
+	if (typeof value === "string") return {
+		requested: true,
+		mode: value
+	};
+	return value;
+}
+/** Reads the raw root permission selection without filling missing values. */
+function readRawPermissionSelection(input) {
+	const defaultPermissions = rootTomlString(input, "default_permissions");
+	const approvalPolicy = rootTomlString(input, "approval_policy");
+	const approvalsReviewer = rootTomlString(input, "approvals_reviewer");
+	const sandboxMode = rootTomlString(input, "sandbox_mode");
+	return {
+		...defaultPermissions === void 0 ? {} : { defaultPermissions },
+		...approvalPolicy === void 0 ? {} : { approvalPolicy },
+		...approvalsReviewer === void 0 ? {} : { approvalsReviewer },
+		...sandboxMode === void 0 ? {} : { sandboxMode }
+	};
+}
+/** Returns root assignment lines for permission keys in source order. */
+function readPermissionLines(input) {
+	const firstTable = input.search(/^\s*\[/m);
+	const root = firstTable < 0 ? input : input.slice(0, firstTable);
+	const keys = new Set(PERMISSION_KEYS);
+	return root.split(/\r?\n/).filter((line) => {
+		const key = /^\s*([A-Za-z0-9_-]+)\s*=/.exec(line)?.[1];
+		return key !== void 0 && keys.has(key);
+	});
+}
+/** Removes all root permission assignment lines while preserving other text. */
+function removePermissionLines(input) {
+	const firstTable = input.search(/^\s*\[/m);
+	const root = firstTable < 0 ? input : input.slice(0, firstTable);
+	const tables = firstTable < 0 ? "" : input.slice(firstTable);
+	const keys = PERMISSION_KEYS.map((key) => key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
+	return `${root.split(/\r?\n/).filter((line) => !new RegExp(`^\\s*(?:${keys.join("|")})\\s*=`).test(line)).join("\n").trim()}${tables ? `\n${tables.trimStart()}` : ""}`.trim();
+}
+/** Returns the exact tuple represented by an explicit autonomy mode. */
+function permissionSelectionForMode(mode) {
+	if (mode === "default") return {
+		approvalPolicy: "on-request",
+		approvalsReviewer: "auto_review",
+		sandboxMode: "workspace-write"
+	};
+	if (mode === "autonomous") return {
+		approvalPolicy: "never",
+		sandboxMode: "workspace-write"
+	};
+	return {
+		approvalPolicy: "never",
+		sandboxMode: "danger-full-access"
+	};
+}
+/** Identifies generated tuples from current and historical installers. */
+function permissionSelectionMatchesMode(selection, mode) {
+	if (permissionSelectionsEqual(selection, permissionSelectionForMode(mode))) return true;
+	return mode === "default" && permissionSelectionsEqual(selection, {
+		approvalPolicy: "on-request",
+		sandboxMode: "workspace-write"
+	});
+}
+/** Compares all raw permission fields, including intentional omissions. */
+function permissionSelectionsEqual(left, right) {
+	return PERMISSION_KEYS.every((key) => {
+		const field = permissionField(key);
+		return left[field] === right[field];
+	});
+}
+/** Identifies a historical generated tuple, if one is exact. */
+function inferAutonomyMode(selection) {
+	for (const mode of [
+		"default",
+		"autonomous",
+		"dangerous"
+	]) if (permissionSelectionMatchesMode(selection, mode)) return mode;
+	return "custom";
+}
+/** Reads deterministic autonomy metadata from a managed block. */
+function readAutonomyMetadata(input) {
+	const value = new RegExp(`^${escapeRegExp(AUTONOMY_PREFIX)}(.+)$`, "m").exec(input)?.[1]?.trim();
+	if (value === "default" || value === "autonomous" || value === "dangerous" || value === "custom") return value;
+}
+/** Encodes durable original root permission assignment provenance. */
+function originalPermissionMetadata(lines) {
+	return `${ORIGINAL_PERMISSION_PREFIX}${lines.length === 0 ? "-" : Buffer.from(lines.join("\n"), "utf8").toString("base64")}\n`;
+}
+/** Reads durable original root permission assignment provenance. */
+function readOriginalPermissionMetadata(input) {
+	const encoded = new RegExp(`^${escapeRegExp(ORIGINAL_PERMISSION_PREFIX)}([A-Za-z0-9+/=_-]+)$`, "m").exec(input)?.[1];
+	if (encoded === void 0) return void 0;
+	if (encoded === "-") return [];
+	return Buffer.from(encoded, "base64").toString("utf8").split(/\r?\n/).filter(Boolean);
+}
+/** Returns a generated tuple for an explicit request or preserves a live omitted selection. */
+function selectPermissionSelection(live, request) {
+	if (request.requested) return permissionSelectionForMode(request.mode);
+	if (Object.keys(live).length > 0) return live;
+	return permissionSelectionForMode("default");
+}
+var AUTONOMY_METADATA_PREFIX = AUTONOMY_PREFIX;
+function permissionField(key) {
+	if (key === "default_permissions") return "defaultPermissions";
+	if (key === "approval_policy") return "approvalPolicy";
+	if (key === "approvals_reviewer") return "approvalsReviewer";
+	return "sandboxMode";
+}
+function escapeRegExp(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//#endregion
+//#region packages/cli/src/config.ts
+var START = "# >>> holycodex managed >>>";
+var END = "# <<< holycodex managed <<<";
+var ORIGINAL_ROOT = "# holycodex original root: ";
+var ORIGINAL_TABLE_KEY = "# holycodex original table key: ";
+var PLAN_PREFIX = "# holycodex plan: ";
+var FAST_MODE_PREFIX = "# holycodex fast: ";
+var WORKFLOW_POLICY_PREFIX = "# holycodex workflow-policy: ";
+var COMPUTER_USE_PREFIX = "# holycodex computer-use: ";
+var OLD_NAMESPACES = [
+	"marketplaces.sisyphuslabs",
+	"plugins.\"omo@sisyphuslabs\"",
+	"marketplaces.lazycodex",
+	"plugins.\"omo@lazycodex\"",
+	"marketplaces.code-yeongyu-codex-plugins",
+	"plugins.\"omo@code-yeongyu-codex-plugins\"",
+	"agents.plan",
+	"agents.metis",
+	"agents.momus",
+	"agents.oracle",
+	"agents.sisyphus",
+	"agents.prometheus",
+	"agents.atlas",
+	"agents.hephaestus",
+	"hooks.state.\"omo@sisyphuslabs",
+	"hooks.state.\"omo@lazycodex",
+	"hooks.state.\"omo@code-yeongyu-codex-plugins"
+];
+function readOriginalRootMetadata(input) {
+	const encoded = input.match(/^# holycodex original root: ([A-Za-z0-9+/=]+)$/m)?.[1];
+	return encoded === void 0 ? void 0 : Buffer.from(encoded, "base64").toString("utf8");
+}
+function readLegacyGeneratedRoot(input) {
+	const body = input.match(/^# >>> holycodex managed >>>\r?\n([\s\S]*?)^# <<< holycodex managed <<</m)?.[1];
+	if (body === void 0 || readPermissionLines(body).length === 0) return void 0;
+	return inferAutonomyMode(readRawPermissionSelection(body)) === "custom" ? void 0 : body;
+}
+/** Removes managed configuration and restores durable original values. */
+function removeManaged(input, preserveGeneratedPermissions = false) {
+	const escapedStart = START.replaceAll(">", "\\>");
+	const escapedEnd = END.replaceAll("<", "\\<");
+	return input.replace(new RegExp(`${escapedStart}([\\s\\S]*?)${escapedEnd}(?:\\r?\\n){0,2}`, "g"), (_match, body) => {
+		const original = readOriginalRootMetadata(body);
+		const originalPermissions = readOriginalPermissionMetadata(body);
+		const currentPermissions = readPermissionLines(body);
+		const currentSelection = readRawPermissionSelection(body);
+		const metadata = readAutonomyMetadata(body);
+		const expected = metadata === void 0 || metadata === "custom" ? originalPermissions === void 0 ? void 0 : readRawPermissionSelection(originalPermissions.join("\n")) : permissionSelectionForMode(metadata);
+		const generated = metadata !== void 0 && metadata !== "custom" ? permissionSelectionMatchesMode(currentSelection, metadata) : expected !== void 0 ? permissionSelectionsEqual(currentSelection, expected) : metadata === void 0 && [
+			"default",
+			"autonomous",
+			"dangerous"
+		].some((mode) => permissionSelectionMatchesMode(currentSelection, mode));
+		const preserveCurrent = preserveGeneratedPermissions || !generated;
+		if (original !== void 0) return `${preserveCurrent ? `${removePermissionLines(original)}${currentPermissions.length === 0 ? "" : `\n${currentPermissions.join("\n")}`}`.trim() : `${removePermissionLines(original)}${(originalPermissions ?? readPermissionLines(original)).length === 0 ? "" : `\n${(originalPermissions ?? readPermissionLines(original)).join("\n")}`}`.trim()}\n`;
+		if (!preserveCurrent && originalPermissions !== void 0) return `${originalPermissions.join("\n")}\n`;
+		if (preserveCurrent && currentPermissions.length > 0) return `${currentPermissions.join("\n")}\n`;
+		const tableKeys = [...body.matchAll(/^# holycodex original table key: ([A-Za-z0-9+/=]+)$/gm)].flatMap((match) => match[1] === void 0 ? [] : [match[1]]);
+		return tableKeys.length === 0 ? "" : `${tableKeys.map((key) => Buffer.from(key, "base64").toString("utf8")).join("\n")}\n`;
+	}).trim();
+}
+/** Removes legacy omo. */
+function removeLegacyOmo(input) {
+	return input.split(/(?=^\s*\[)/m).filter((section) => {
+		const header = /^\s*\[([^\]]+)]/.exec(section)?.[1];
+		if (header === void 0) return true;
+		if (OLD_NAMESPACES.some((name) => header === name || header.startsWith(`${name}.`) || name.includes("\"omo@") && header.startsWith(name))) return false;
+		return ![
+			"agents.explorer",
+			"agents.librarian",
+			"agents.worker"
+		].some((name) => header === name || header.startsWith(`${name}.`)) || !/(?:sisyphuslabs|omo@|oh-my|code-yeongyu)/i.test(section);
+	}).join("").trimEnd();
 }
-function inspectListResult(result, launcher) {
-	if (result.timedOut) return {
-		kind: "fallback",
-		reason: "timeout"
-	};
-	if (result.outputTruncated) return {
-		kind: "fallback",
-		reason: "invalid-response"
-	};
-	const failure = classifyFailure(result, launcher);
-	if (failure !== void 0) return failure;
-	const catalog = parsePluginCatalog(result.stdout);
-	if (catalog === void 0) return {
-		kind: "fallback",
-		reason: "invalid-response"
-	};
-	return {
-		kind: "selected",
-		catalog
-	};
+function injectTableKeys(input, table, entries) {
+	const match = new RegExp(`^\\s*\\[${table.replaceAll(".", "\\.")}]\\s*(?:#.*)?$`, "m").exec(input);
+	const tail = match === null ? "" : input.slice(match.index + match[0].length);
+	const tableEnd = nextTableBoundary(tail);
+	const tableBody = tableEnd < 0 ? tail : tail.slice(0, tableEnd);
+	const managed = `${START}\n${entries.map(([key]) => new RegExp(`^[ \\t]*${key}[ \\t]*=.*$`, "m").exec(tableBody)?.[0]).filter((value) => value !== void 0).map((value) => `${ORIGINAL_TABLE_KEY}${Buffer.from(value).toString("base64")}\n`).join("")}${entries.map(([key, value]) => `${key} = ${value}`).join("\n")}\n${END}`;
+	if (match === null) return `${input.trimEnd()}\n\n${START}\n[${table}]\n${entries.map(([key, value]) => `${key} = ${value}`).join("\n")}\n${END}`.trim();
+	const bodyStart = match.index + match[0].length;
+	const next = nextTableBoundary(input.slice(bodyStart));
+	const bodyEnd = next < 0 ? input.length : bodyStart + next;
+	const cleanedBody = entries.reduce((body, [key]) => body.replace(new RegExp(`^\\s*${key}\\s*=.*\\r?\\n?`, "gm"), ""), input.slice(bodyStart, bodyEnd)).trim();
+	const suffix = input.slice(bodyEnd).trimStart();
+	return `${input.slice(0, bodyStart)}\n${cleanedBody ? `${cleanedBody}\n` : ""}${managed}${suffix ? `\n${suffix}` : ""}`.trim();
 }
-function inspectAddResult(result, launcher) {
-	if (result.timedOut) return {
-		kind: "fallback",
-		reason: "timeout"
-	};
-	const failure = classifyFailure(result, launcher);
-	if (failure !== void 0) return failure;
-	return { kind: "added" };
+function nextTableBoundary(input) {
+	const header = /^\s*\[/m.exec(input)?.index ?? -1;
+	const managedHeader = /^# >>> holycodex managed >>>\r?\n\s*\[/m.exec(input)?.index ?? -1;
+	if (header < 0) return managedHeader;
+	if (managedHeader < 0) return header;
+	return Math.min(header, managedHeader);
 }
-function inspectMarketplaceResult(result, launcher) {
-	if (result.timedOut) return {
-		kind: "fallback",
-		reason: "timeout"
-	};
-	if (result.outputTruncated) return {
-		kind: "fallback",
-		reason: "invalid-response"
-	};
-	const failure = classifyFailure(result, launcher);
-	if (failure !== void 0) return failure;
-	const marketplaces = parseMarketplaceNames(result.stdout);
-	return marketplaces === void 0 ? {
-		kind: "fallback",
-		reason: "invalid-response"
-	} : {
-		kind: "selected",
-		marketplaces
-	};
+function tableSource(input, table) {
+	const match = new RegExp(`^\\s*\\[${table.replaceAll(".", "\\.")}]\\s*(?:#.*)?$`, "m").exec(input);
+	if (match === null) return void 0;
+	const tail = input.slice(match.index + match[0].length);
+	const end = nextTableBoundary(tail);
+	return end < 0 ? tail : tail.slice(0, end);
 }
-function findPlugin(catalog, pluginId) {
-	return catalog.plugins.find(({ id }) => id === pluginId);
+function rootValue(input, key) {
+	if (key === "status_line") return rootTomlStringArraySource(input, key);
+	return new RegExp(`^\\s*${key}\\s*=.*$`, "m").exec(input)?.[0];
 }
-function classifyFailure(result, launcher) {
-	if (result.error !== void 0) {
-		if (isUnavailableProcessError(result)) return {
-			kind: "fallback",
-			reason: "codex-unavailable"
-		};
-		return {
-			kind: "fallback",
-			reason: isPackageLauncher(launcher) ? "download-failed" : "invalid-response"
-		};
-	}
-	if (result.exitCode === 0) return void 0;
-	const failureReason = classifyFailureReason(structuredErrorCodeFromOutput(result.stderr) ?? structuredErrorCodeFromOutput(result.stdout), sanitizeDiagnostic(result.stderr));
-	if (failureReason === "unauthenticated" || failureReason === "installation-rejected") return {
-		kind: "fatal",
-		reason: failureReason
-	};
-	return {
-		kind: "fallback",
-		reason: failureReason
-	};
+function removeRootValue(input, value) {
+	return value === void 0 ? input : input.replace(value, "");
 }
-function classifyFailureReason(code, diagnostic) {
-	if (code !== void 0) {
-		if (FATAL_AUTH_CODES.has(code) || FATAL_ACCOUNT_CODES.has(code)) return "unauthenticated";
-		if (FATAL_MARKETPLACE_CODES.has(code)) return "marketplace-unavailable";
-		if (FATAL_PLUGIN_CODES.has(code)) return "plugin-unavailable";
-		if (FATAL_POLICY_CODES.has(code)) return "installation-rejected";
-		if (SPAWN_UNAVAILABLE_CODES.has(code)) return "codex-unavailable";
-		if ([
-			"ETIMEDOUT",
-			"ECONNRESET",
-			"ECONNREFUSED",
-			"EAI_AGAIN",
-			"ENETUNREACH"
-		].includes(code)) return "download-failed";
+function removeRootKey(input, key) {
+	let updated = input;
+	for (;;) {
+		const value = rootValue(updated, key);
+		if (value === void 0) return updated;
+		updated = removeRootValue(updated, value);
 	}
-	const lower = diagnostic.toLowerCase();
-	if (/unknown (?:command|subcommand)|unrecognized (?:command|subcommand)|invalid subcommand/.test(lower)) return "unsupported";
-	if (/not supported on (?:this )?platform|unsupported (?:platform|architecture)|no matching (?:binary|package)|platform package|not compatible/.test(lower)) return "unsupported";
-	if (/unauthenticated|authentication required|not logged in|account (?:required|not found)/.test(lower)) return "unauthenticated";
-	if (/account (?:restricted|unavailable|suspended|disabled)/.test(lower)) return "installation-rejected";
-	if (/marketplace|catalog/.test(lower)) return "marketplace-unavailable";
-	if (/eai_again|enetwork|network|timed out|timeout|download|fetch|resolve package/.test(lower)) return "download-failed";
-	if (/plugin (?:not found|unavailable|missing)/.test(lower)) return "plugin-unavailable";
-	if (/permission denied|policy|rejected|forbidden/.test(lower)) return "installation-rejected";
-	return "invalid-response";
 }
-function finalFallbackReason(reasons) {
-	if (reasons.length > 0 && reasons.every((reason) => reason === "plugin-not-offered")) return "all-launchers-lacked-plugin";
-	if (reasons.includes("verification-failed")) return "verification-failed";
-	if (reasons.includes("plugin-not-offered")) return "plugin-not-offered";
-	if (reasons.includes("timeout")) return "timeout";
-	if (reasons.includes("unsupported")) return "unsupported";
-	if (reasons.includes("marketplace-unavailable")) return "marketplace-unavailable";
-	if (reasons.includes("download-failed")) return "download-failed";
-	if (reasons.includes("plugin-unavailable")) return "plugin-unavailable";
-	if (reasons.includes("invalid-response")) return "invalid-response";
-	return "codex-unavailable";
+/** Reads the explicitly recorded model routing plan from managed configuration. */
+function readManagedPlan(input) {
+	const value = new RegExp(`^${PLAN_PREFIX}(.+)$`, "m").exec(input)?.[1]?.trim();
+	return PLAN_NAMES.find((plan) => plan === value);
 }
-function timeoutFor(launcher, operation) {
-	return operation === "list" && isPackageLauncher(launcher) ? CODEX_PACKAGE_BOOTSTRAP_TIMEOUT_MS : CODEX_PLUGIN_OPERATIONAL_TIMEOUT_MS;
+/** Reads the explicitly recorded managed Fast mode. */
+function readManagedFastMode(input) {
+	const value = new RegExp(`^${FAST_MODE_PREFIX}(.+)$`, "m").exec(input)?.[1]?.trim();
+	return FastModeSchema.safeParse(value).data;
 }
-function isPackageLauncher(launcher) {
-	return launcher.source === "bunx" || launcher.source === "npm-exec" || launcher.source === "pnpm-exec";
+/** Reads the explicit managed Computer Use choice. */
+function readManagedComputerUse(input) {
+	const value = new RegExp(`^${COMPUTER_USE_PREFIX}(.+)$`, "m").exec(input)?.[1]?.trim();
+	return value === "enabled" || value === "disabled" ? value : void 0;
+}
+/** Reads the plan-authoritative workflow policy metadata from managed configuration. */
+function readManagedWorkflowPolicy(input) {
+	const raw = new RegExp(`^${WORKFLOW_POLICY_PREFIX.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(.+)$`, "m").exec(input)?.[1];
+	if (raw === void 0) return void 0;
+	try {
+		const value = JSON.parse(raw);
+		if (typeof value !== "object" || value === null) return void 0;
+		const record = value;
+		const plan = PLAN_NAMES.find((name) => name === record.plan);
+		const limits = record.limits;
+		const usage = record.projectedUsage;
+		const size = record.softSizeGuidance;
+		if (plan === void 0 || typeof limits !== "object" || limits === null || typeof usage !== "object" || usage === null || typeof size !== "object" || size === null) return void 0;
+		return {
+			plan,
+			limits,
+			projectedUsage: usage,
+			softSizeGuidance: size
+		};
+	} catch {
+		return;
+	}
+}
+/** Identifies explicit Root route overrides preserved from active managed configuration. */
+function readPreservedRootOverrides(input) {
+	const managedRoot = new RegExp(`^${START}\\r?\\n([\\s\\S]*?)^${END}\\r?$`, "m").exec(input)?.[1];
+	if (managedRoot === void 0) return {
+		model: false,
+		reasoningEffort: false,
+		webSearch: false
+	};
+	const plan = readManagedPlan(managedRoot);
+	const model = rootTomlString(input, "model");
+	const reasoningEffort = rootTomlString(input, "model_reasoning_effort");
+	if (plan === void 0 || model === void 0 || reasoningEffort === void 0) return {
+		model: false,
+		reasoningEffort: false,
+		webSearch: false
+	};
+	if (MANAGED_ROOT_MODEL_HISTORY_BY_PLAN[plan].some((route) => route.model === model && route.reasoningEffort === reasoningEffort)) return {
+		model: false,
+		reasoningEffort: false,
+		webSearch: rootTomlString(managedRoot, "web_search") !== "live"
+	};
+	const preset = MODEL_ROUTING_PLANS[plan].root;
+	return {
+		model: model !== preset.model,
+		reasoningEffort: reasoningEffort !== preset.reasoningEffort,
+		webSearch: rootTomlString(managedRoot, "web_search") !== "live"
+	};
 }
-/** Normalizes supported flat and marketplace-oriented Codex catalogs. */
-function parsePluginCatalog(input) {
-	for (const value of parseJsonDocuments(input) ?? []) {
-		const plugins = parseCatalogValue(value);
-		if (plugins !== void 0) return { plugins };
+function preserveManagedRootPreferences(input, base) {
+	const managedRoot = new RegExp(`^${START}\\r?\\n([\\s\\S]*?)^${END}\\r?$`, "m").exec(input)?.[1];
+	if (managedRoot === void 0) return base;
+	const firstTable = base.search(/^\s*\[/m);
+	const root = firstTable < 0 ? base : base.slice(0, firstTable);
+	const tables = firstTable < 0 ? "" : base.slice(firstTable);
+	let updatedRoot = root.trim();
+	const overrides = readPreservedRootOverrides(input);
+	for (const [key, preserve] of [
+		["model", overrides.model],
+		["model_reasoning_effort", overrides.reasoningEffort],
+		["web_search", overrides.webSearch]
+	]) {
+		const live = rootValue(managedRoot, key)?.trim();
+		if (!preserve || live === void 0) continue;
+		if (rootValue(root, key)?.trim() === live) continue;
+		updatedRoot = removeRootValue(updatedRoot, rootValue(updatedRoot, key)).trim();
+		updatedRoot = `${updatedRoot}${updatedRoot ? "\n" : ""}${live}`;
 	}
+	if (updatedRoot === root.trim()) return base;
+	return `${updatedRoot}${tables ? `\n${tables.trimStart()}` : ""}`;
 }
-function parseMarketplaceNames(input) {
-	for (const value of parseJsonDocuments(input) ?? []) {
-		if (!isRecord(value) || !Array.isArray(value.marketplaces)) continue;
-		const names = [];
-		for (const marketplace of value.marketplaces) {
-			if (!isRecord(marketplace)) {
-				names.length = 0;
-				break;
-			}
-			const name = stringField(marketplace, ["name"]);
-			if (name === void 0) {
-				names.length = 0;
-				break;
-			}
-			names.push(name);
-		}
-		if (names.length > 0 || value.marketplaces.length === 0) return names;
-	}
+function mergedStatusLine(original) {
+	if (original === void 0) return "[\"model-with-reasoning\", \"context-remaining\", \"current-dir\"]";
+	const items = rootTomlStringArray(original, "status_line") ?? [];
+	if (!items.includes("context-remaining")) items.push("context-remaining");
+	return `[${items.map((item) => JSON.stringify(item)).join(", ")}]`;
 }
-function parseCatalogValue(value) {
-	if (Array.isArray(value)) return parseMarketplaceEntries(value);
-	if (!isRecord(value)) return void 0;
-	if ("installed" in value || "available" in value) {
-		if (!Array.isArray(value.installed) || !Array.isArray(value.available)) return void 0;
-		const installed = parsePluginEntries(value.installed, void 0, true);
-		const available = parsePluginEntries(value.available, void 0, false);
-		return installed === void 0 || available === void 0 ? void 0 : [...installed, ...available];
+/** Installs config. */
+function installConfig(input, mode, _platform, plan = DEFAULT_PLAN, maxSubagents, fastMode = "standard", computerUse) {
+	const request = normalizeRequestedAutonomy(mode);
+	const effectiveComputerUse = computerUse ?? readManagedComputerUse(input) ?? "disabled";
+	const priorAutonomy = readAutonomyMetadata(input);
+	const previousOriginalRoot = readOriginalRootMetadata(input);
+	const legacyGeneratedRoot = readLegacyGeneratedRoot(input);
+	const originalPermissionLines = readOriginalPermissionMetadata(input);
+	const base = preserveManagedRootPreferences(input, removeLegacyOmo(removeManaged(input, !request.requested)));
+	const firstTable = base.search(/^\s*\[/m);
+	const root = firstTable < 0 ? base : base.slice(0, firstTable);
+	const tables = firstTable < 0 ? "" : base.slice(firstTable);
+	const permissions = selectPermissionSelection(readRawPermissionSelection(root), request);
+	const effectiveAutonomy = request.requested ? inferAutonomyMode(permissions) : priorAutonomy ?? inferAutonomyMode(permissions);
+	const rootPermissionLines = [
+		permissions.approvalPolicy === void 0 ? void 0 : `approval_policy = ${JSON.stringify(permissions.approvalPolicy)}`,
+		permissions.approvalsReviewer === void 0 ? void 0 : `approvals_reviewer = ${JSON.stringify(permissions.approvalsReviewer)}`,
+		permissions.sandboxMode === void 0 ? void 0 : `sandbox_mode = ${JSON.stringify(permissions.sandboxMode)}`
+	].filter((line) => line !== void 0);
+	const hadManagedAutonomy = readAutonomyMetadata(input) !== void 0;
+	const hadOriginalRoot = /^# holycodex original root:/m.test(input);
+	const permissionLines = originalPermissionLines ?? (legacyGeneratedRoot !== void 0 && previousOriginalRoot === void 0 ? [] : previousOriginalRoot === void 0 ? hadManagedAutonomy && !hadOriginalRoot ? [] : readPermissionLines(root) : readPermissionLines(previousOriginalRoot));
+	const controlled = [
+		"web_search",
+		"approval_policy",
+		"approvals_reviewer",
+		"sandbox_mode",
+		"max_concurrent_threads_per_session",
+		"status_line",
+		"model_verbosity",
+		"service_tier",
+		...request.requested ? ["default_permissions"] : []
+	].map((key) => rootValue(root, key));
+	const preservedRoot = [
+		"web_search",
+		"approval_policy",
+		"approvals_reviewer",
+		"sandbox_mode",
+		"max_concurrent_threads_per_session",
+		"status_line",
+		"model_verbosity",
+		"service_tier",
+		...request.requested ? ["default_permissions"] : []
+	].reduce(removeRootKey, root).trim();
+	const originalControlled = controlled.filter((value) => value !== void 0).sort((left, right) => root.indexOf(left) - root.indexOf(right)).join("\n");
+	const hasModel = /^\s*model\s*=/m.test(preservedRoot);
+	const hasEffort = /^\s*model_reasoning_effort\s*=/m.test(preservedRoot);
+	const rootRoute = MODEL_ROUTING_PLANS[plan].root;
+	const model = hasModel ? "" : `model = "${rootRoute.model}"\n`;
+	const effort = hasEffort ? "" : `model_reasoning_effort = "${rootRoute.reasoningEffort}"\n`;
+	const originalSource = previousOriginalRoot === void 0 ? priorAutonomy === void 0 && legacyGeneratedRoot === void 0 ? originalControlled : "" : removePermissionLines(previousOriginalRoot);
+	const original = originalSource ? `${ORIGINAL_ROOT}${Buffer.from(originalSource).toString("base64")}\n` : "";
+	const rootServiceTier = fastMode === "fast-all" ? "fast" : "default";
+	const priorManagedRoot = new RegExp(`^${START}\\r?\\n([\\s\\S]*?)^${END}\\r?$`, "m").exec(input)?.[1];
+	const webSearch = readPreservedRootOverrides(input).webSearch ? rootTomlString(priorManagedRoot ?? "", "web_search") ?? "live" : "live";
+	const statusLine = mergedStatusLine(rootValue(root, "status_line") ?? rootTomlStringArraySource(tableSource(base, "tui") ?? "", "status_line"));
+	const workflow = MODEL_ROUTING_PLANS[plan].workflow;
+	const rootBlock = `${START}\n${PLAN_PREFIX}${plan}\n${FAST_MODE_PREFIX}${fastMode}\n${WORKFLOW_POLICY_PREFIX}${JSON.stringify({
+		plan,
+		limits: workflow.limits,
+		projectedUsage: workflow.projectedUsage,
+		softSizeGuidance: workflow.softSizeGuidance
+	})}\n${AUTONOMY_METADATA_PREFIX}${effectiveAutonomy}\n${COMPUTER_USE_PREFIX}${effectiveComputerUse}\n${original}${originalPermissionMetadata(permissionLines)}${model}${effort}web_search = ${JSON.stringify(webSearch)}\nmodel_verbosity = "low"\nservice_tier = "${rootServiceTier}"\n${rootPermissionLines.join("\n")}\n${END}`;
+	let configured = `${preservedRoot ? `${preservedRoot}\n` : ""}${rootBlock}${tables ? `\n\n${tables}` : ""}`;
+	const legacyMultiAgentV2 = /\bmulti_agent_v2\s*=\s*(true|false)/.exec(configured)?.[1];
+	configured = injectTableKeys(configured, "features", [
+		["default_mode_request_user_input", "true"],
+		["multi_agent", "true"],
+		...legacyMultiAgentV2 === void 0 ? [] : [["multi_agent_v2", legacyMultiAgentV2]]
+	]);
+	configured = injectTableKeys(configured, "agents", [["max_concurrent_threads_per_session", String((maxSubagents ?? workflow.limits.concurrency) + 1)]]);
+	configured = injectTableKeys(configured, "tui", [["status_line", statusLine]]);
+	if (effectiveAutonomy !== "dangerous") configured = injectTableKeys(configured, "sandbox_workspace_write", [["network_access", "true"]]);
+	configured = injectTableKeys(configured, "desktop", [["show-context-window-usage", "true"]]);
+	if (_platform === "win32") configured = injectTableKeys(configured, "windows", [["sandbox", "\"unelevated\""]]);
+	for (const agent of AGENTS) configured = injectTableKeys(configured, `agents.${agent}`, [["config_file", `"holycodex/agents/${agent}.toml"`]]);
+	const plugin = `${START}\n[plugins."holycodex@holycodex"]\nenabled = true\n${END}`;
+	return `${configured.trim()}\n\n${plugin}\n`;
+}
+//#endregion
+//#region packages/cli/src/context7.ts
+var RUNNERS = [
+	{
+		executable: "nubx",
+		command: "nubx",
+		prefix: ["-y"]
+	},
+	{
+		executable: "nub",
+		command: "nub",
+		prefix: ["dlx"]
+	},
+	{
+		executable: "bunx",
+		command: "bunx",
+		prefix: []
+	},
+	{
+		executable: "bun",
+		command: "bun",
+		prefix: ["x"]
+	},
+	{
+		executable: "pnpmx",
+		command: "pnpmx",
+		prefix: []
+	},
+	{
+		executable: "pnpm",
+		command: "pnpm",
+		prefix: ["dlx"]
+	},
+	{
+		executable: "npmx",
+		command: "npmx",
+		prefix: ["--yes"]
+	},
+	{
+		executable: "npm",
+		command: "npx",
+		prefix: ["--yes"]
+	},
+	{
+		executable: "yarn",
+		command: "yarn",
+		prefix: ["dlx"]
 	}
-	if ("marketplaces" in value) return Array.isArray(value.marketplaces) ? parseMarketplaceEntries(value.marketplaces) : void 0;
-	if ("plugins" in value) return parseMarketplaceEntry(value);
+];
+/** Constructs the supported direct Context7 invocation for the first available runner. */
+function context7Command(args, executableExists = executableOnPath, env = process.env) {
+	const runner = RUNNERS.find((candidate) => executableExists(candidate.executable));
+	if (runner === void 0) return void 0;
+	return {
+		command: runner.command,
+		args: [
+			...runner.prefix,
+			"ctx7@latest",
+			...args
+		],
+		env: {
+			...env,
+			CI: env.CI ?? "1"
+		}
+	};
 }
-function parseMarketplaceEntries(entries) {
-	const plugins = [];
-	for (const entry of entries) {
-		const parsed = parseMarketplaceEntry(entry);
-		if (parsed === void 0) return void 0;
-		plugins.push(...parsed);
+/** Reports whether an executable can be resolved from PATH. */
+function executableOnPath(name) {
+	const path = process.env.PATH;
+	if (path === void 0) return false;
+	const extensions = process.platform === "win32" ? [
+		".exe",
+		".cmd",
+		".bat",
+		""
+	] : [""];
+	for (const directory of path.split(delimiter)) for (const extension of extensions) try {
+		if (process.getBuiltinModule("node:fs").existsSync(`${directory}/${name}${extension}`)) return true;
+	} catch {
+		continue;
 	}
-	return plugins;
+	return false;
 }
-function parseMarketplaceEntry(value) {
-	if (!isRecord(value) || !Array.isArray(value.plugins)) return void 0;
-	const marketplace = stringField(value, [
-		"marketplace",
-		"marketplaceId",
-		"marketplaceName",
-		"id",
-		"name"
-	]);
-	if (marketplace === void 0) return void 0;
-	return parsePluginEntries(value.plugins, marketplace);
+//#endregion
+//#region packages/cli/src/core-instructions.ts
+/** Shared HolyCodex root instructions. */
+var CORE_INSTRUCTIONS = "HolyCodex: Root is user-facing. Before updates, classify intent and load required skills. Start with \"I detect [intent] intent — [action].\" Choose the accurate intent naturally; no fixed intent taxonomy applies. `plan` and `plan-review` instead own their exact heading and intent as the first visible block; no other mode prints a heading. Do not conceal orchestration. Give concise updates naming each specialist type and what it will do, such as \"Explorer maps X\", \"Librarian verifies Y\", or \"Worker implements Z\". Do not disclose Root orchestration mechanics or explain why delegation is running unless asked. Skills govern method only. Root owns interaction, intent, scope, architecture, product choices, ambiguity, integration, external state, and final judgment and verification. Root is not another implementation branch: evaluate specialist output against scope, fixed architecture, user decisions, repository conventions, and proof; reject or repair weak output and integrate only accepted work. On every plan other than Go, always delegate at least one bounded task through a CLI workflow. Never skip delegation because direct local work is cheaper or sufficient, and never invoke regular Codex collaboration subagents. If the workflow runtime is unavailable or cannot perform the required operation, report the blocker instead of bypassing delegation. Missing task-child visibility is not a reason to avoid workflows. Go does not support workflows, so Root works directly without specialist subagents. A task may contain multiple sequential workflows. Prefer the smallest useful fan-out, stop discovery when evidence is sufficient, and avoid duplicate investigation. The selected plan is authoritative: enforce its permitted model routes for each agent and stage, low verbosity, Fast as the only service-tier variation, concurrency, soft target calls, hard maximum calls, workflow depth, retries, loop iterations, fan-out, projected usage, and soft-size guidance. Root should remain near target calls and exceed them only when intermediate evidence justifies more work; the hard maximum is only a safety and quota ceiling. Larger plans do not automatically consume larger allowances. Keep explorer, librarian, and worker selectable only where the plan permits. Root owns workflow integration and final proof. After any code or manifest implementation, Root loads `code-review` exactly once before final response; it also loads `code-review` for a user-requested snippet, file, directory, diff, patch, or PR review. That skill owns the final audit, repair, proportional checks and reruns, reinspection, diff, and status. Classify unknowns: delegate facts, ask material decisions, and state and use safe reversible defaults. Whenever Root needs user input or would ask any question, it must use `request_user_input` when that tool is available, in every scenario and mode. Root must never stop or reply with a plain-text question when the tool is available. If the tool is unavailable, use a safe reversible default where possible or report a non-question blocker. Never repeat questions or ask discoverable facts. Root must use `request_user_input` immediately before committing, pushing, creating or moving tags, building or compiling, publishing, deploying, destructive or irreversible actions, permission changes, financial actions, sending, or any other externally visible action. Earlier general authorization does not replace this immediate approval unless the user explicitly authorized that exact action in the current turn. Root controls browser and native desktop UI itself. Explorer is repository-read-only, Librarian research-only, and Worker cannot alter dashboards, accounts, permissions, or external state. Specialists never delegate, broaden, review, or make final judgments.";
+var NATIVE_IO_INSTRUCTIONS = "For `plan` and `plan-review` headings, never print provisionally. Never delegate browser or computer control. For frontend creation, redesign, or visual verification, use installed Build Web Apps `frontend-app-builder` for concept, approval, implementation, and visual verification. For authorized security reviews, audits, scans, threat models, vulnerabilities, or attack paths, use matching installed Codex Security plugin skills. Use these capabilities instead of manual-click instructions, shell-as-GUI, or public research as a substitute for authenticated control. Use Codex native `apply_patch` for workspace file creation, updates, moves, and deletion. Use available native read or shell tools for file inspection and repository search. Do not re-read files only to verify a successful `apply_patch` call.";
+var COMPUTER_USE_INSTRUCTIONS = "For native desktop tasks, use the available Computer Use capability.";
+var CODE_REVIEW_ACTIVATION_POLICY = "After loading `code-review`, its first visible line is **CODE REVIEW MODE ACTIVATED**.";
+/** Gets core instructions with platform and active agent-capacity context. */
+function coreInstructions(platform, capacity, computerUseEnabled = false) {
+	const threads = capacity?.maxThreads;
+	const depth = capacity?.maxDepth;
+	const capacityInstructions = threads === void 0 || depth === void 0 ? "Before delegation, use active collaboration tool instructions as the authoritative agent-capacity limit." : `Host agent capacity: agents.max_concurrent_threads_per_session=${threads} includes Root. The host nesting limit is ${depth}; the active plan's maxCalls is the hard workflow call ceiling and targetCalls is soft planning guidance. Its lower concurrency, depth, and fan-out limits remain authoritative. On plans other than Go, Root always delegates at least one bounded task through a CLI workflow and reports a blocker if that runtime is unavailable or cannot perform the operation. Go does not support workflows, so Root works directly without specialist subagents.`;
+	const platformInstructions = platform === "win32" ? ` ${WINDOWS_SHELL_POLICY}` : "";
+	return `${CORE_INSTRUCTIONS} ${LITE_WRITING_POLICY} ${CONTEXT7_POLICY} ${NATIVE_IO_INSTRUCTIONS}${computerUseEnabled ? ` ${COMPUTER_USE_INSTRUCTIONS}` : ""} ${CODE_REVIEW_ACTIVATION_POLICY} ${capacityInstructions}${platformInstructions}`;
 }
-function parsePluginEntries(entries, parentMarketplace, defaultInstalled) {
-	const plugins = [];
-	for (const value of entries) {
-		const plugin = parsePluginEntry(value, parentMarketplace, defaultInstalled);
-		if (plugin === void 0) return void 0;
-		plugins.push(plugin);
-	}
-	return plugins;
+//#endregion
+//#region packages/cli/src/doctor.ts
+var DOCTOR_LSP_IDLE_SHUTDOWN_MS = 1e3;
+var COMPATIBILITY_KEYS = ["desktop.show-context-window-usage"];
+async function runCommand(name, args, env) {
+	const result = await runManagedProcess({
+		command: name,
+		args,
+		platform: process.platform,
+		timeoutMs: 15e3,
+		maxOutputChars: 64 * 1024,
+		...env === void 0 ? {} : { env }
+	});
+	return {
+		ok: result.exitCode === 0 && !result.timedOut && result.error === void 0,
+		output: `${result.stdout}\n${result.stderr}`.trim() || result.error || ""
+	};
 }
-function parsePluginEntry(value, parentMarketplace, defaultInstalled = false) {
-	if (!isRecord(value)) return void 0;
-	const rawId = stringField(value, [
-		"pluginId",
-		"id",
-		"name"
-	]);
-	if (rawId === void 0) return void 0;
-	const marketplace = stringField(value, [
-		"marketplace",
-		"marketplaceId",
-		"marketplaceName"
-	]) ?? parentMarketplace;
-	const id = rawId.includes("@") ? rawId : marketplace === void 0 ? rawId : `${rawId}@${marketplace}`;
-	const state = stringField(value, [
-		"installationState",
-		"installState",
-		"status",
-		"state"
-	]);
-	const policy = isRecord(value.policy) ? stringField(value.policy, ["installation"]) : void 0;
+var defaultRuntime$1 = {
+	platform: process.platform,
+	command: runCommand,
+	executable: executableOnPath,
+	gitBash: resolveGitBashForCurrentProcess
+};
+function check(id, status, code, detail, fix) {
 	return {
 		id,
-		installed: booleanField(value.installed) ?? installedFromState(state ?? policy) ?? defaultInstalled,
-		enabled: booleanField(value.enabled) ?? enabledFromState(state) ?? false
+		status,
+		code,
+		detail,
+		...fix === void 0 ? {} : { fix }
 	};
 }
-function stringField(value, keys) {
-	for (const key of keys) {
-		const candidate = value[key];
-		if (typeof candidate === "string" && candidate.trim() !== "") return candidate.trim();
+async function missingFiles(root, paths) {
+	const missing = [];
+	for (const path of paths) try {
+		await access(join(root, path));
+	} catch {
+		missing.push(path);
 	}
+	return missing;
 }
-function booleanField(value) {
-	if (typeof value === "boolean") return value;
-	if (typeof value !== "string") return void 0;
-	if (value.toLowerCase() === "true") return true;
-	if (value.toLowerCase() === "false") return false;
-}
-function installedFromState(value) {
-	if (value === void 0) return void 0;
-	const state = value.toLowerCase().replaceAll("-", "_");
-	if ([
-		"installed",
-		"enabled",
-		"disabled",
-		"installed_by_default"
-	].includes(state)) return true;
-	if ([
-		"available",
-		"not_installed",
-		"uninstalled",
-		"not_available"
-	].includes(state)) return false;
+function tableBody(config, table) {
+	return new RegExp(`^\\s*\\[${table.replaceAll(".", "\\.")}]\\s*$([\\s\\S]*?)(?=^\\s*\\[|(?![\\s\\S]))`, "m").exec(config)?.[1];
 }
-function enabledFromState(value) {
-	if (value === void 0) return void 0;
-	const state = value.toLowerCase();
-	if (state === "enabled") return true;
-	if (state === "disabled") return false;
+function tableValue(config, table, key) {
+	const body = tableBody(config, table);
+	return body === void 0 ? void 0 : new RegExp(`^\\s*${key.replaceAll("-", "\\-")}\\s*=\\s*(.+?)\\s*$`, "m").exec(body)?.[1];
 }
-function parseJsonDocuments(input) {
-	const wholeDocument = tryParseJson(input);
-	if (wholeDocument !== void 0) return [wholeDocument];
-	const lines = input.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
-	if (lines.length === 0) return void 0;
-	for (let index = 1; index < lines.length; index += 1) {
-		const document = tryParseJson(lines.slice(index).join("\n"));
-		if (document !== void 0) return [document];
-	}
-	const documents = [];
-	let parsedDocument = false;
-	for (const line of lines) {
-		const document = tryParseJson(line);
-		if (document === void 0) {
-			if (parsedDocument) return void 0;
-			continue;
-		}
-		documents.push(document);
-		if (documents.length > MAX_JSON_DOCUMENTS) return void 0;
-		parsedDocument = true;
-	}
-	return documents.length === 0 ? void 0 : documents;
+function autonomy(config) {
+	const approval = rootTomlString(config, "approval_policy");
+	const reviewer = rootTomlString(config, "approvals_reviewer");
+	const sandbox = rootTomlString(config, "sandbox_mode");
+	const network = tableValue(config, "sandbox_workspace_write", "network_access");
+	if (approval === "on-request" && reviewer === "auto_review" && sandbox === "workspace-write" && network === "true") return "safe-workspace";
+	if (approval === "never" && reviewer === void 0 && sandbox === "workspace-write" && network === "true") return "autonomous-workspace";
+	if (approval === "never" && reviewer === void 0 && sandbox === "danger-full-access") return "dangerous";
+	return "unknown";
 }
-function tryParseJson(input) {
+/** Runs installation, configuration, runtime, and override health checks. */
+async function doctor(home = process.env.CODEX_HOME ?? join(homedir(), ".codex"), runtime = defaultRuntime$1) {
+	const checks = [];
+	const pluginRoot = join(home, "plugins", "cache", "holycodex", "holycodex", VERSION);
+	const agentRoot = join(home, "holycodex", "agents");
+	const configPath = join(home, "config.toml");
+	let config = "";
 	try {
-		return JSON.parse(input);
+		config = await readFile(configPath, "utf8");
 	} catch {
-		return;
-	}
-}
-function structuredErrorCodeFromOutput(input) {
-	for (const value of parseJsonDocuments(input) ?? []) {
-		const code = structuredErrorCode(value);
-		if (code !== void 0) return code;
+		checks.push(check("config", "error", "config-missing", `Missing ${configPath}.`, "Run holycodex install."));
 	}
-}
-function structuredErrorCode(value) {
-	if (!isRecord(value)) return void 0;
-	if (value.error !== void 0) {
-		const nestedCode = structuredErrorCode(value.error);
-		if (nestedCode !== void 0) return nestedCode;
+	const missing = await missingFiles(pluginRoot, [
+		".codex-plugin/plugin.json",
+		"hooks/hooks.json",
+		...requiredPackageRuntimes(runtime.platform).map((file) => `runtime/${file}`),
+		...AGENTS.map((name) => `agents/${name}.toml`),
+		...SKILLS.map((name) => `skills/${name}/SKILL.md`)
+	]);
+	checks.push(missing.length === 0 ? check("package", "ok", "package-ready", `Plugin ${VERSION}, runtimes, agents, and ${SKILLS.length} skills are present.`) : check("package", "error", "package-incomplete", `Missing ${missing.join(", ")}.`, "Reinstall HolyCodex."));
+	const webSearchOverride = readPreservedRootOverrides(config).webSearch;
+	checks.push(rootTomlString(config, "web_search") === "live" ? check("web-search", "ok", "live-web-search", "Managed web search defaults to live.") : webSearchOverride ? check("web-search", "ok", "web-search-override", "An intentional user web-search override is preserved.") : check("web-search", "error", "web-search-not-live", "Managed web search is not live.", "Reinstall HolyCodex."));
+	const computerUse = readManagedComputerUse(config);
+	if (computerUse === void 0) checks.push(check("computer-use", "error", "computer-use-choice-missing", "Computer Use has no explicit managed enabled or disabled choice.", "Run holycodex install --computer-use or holycodex install --no-computer-use."));
+	else if (computerUse === "disabled") checks.push(check("computer-use", "ok", "computer-use-disabled", "Computer Use is explicitly disabled; no Computer Use plugin or Root guidance is required."));
+	else {
+		const instructionsActive = coreInstructions(runtime.platform, void 0, true).includes("For native desktop tasks, use the available Computer Use capability.");
+		const verification = instructionsActive ? await verifyComputerUse(runtime) : { status: "missing" };
+		checks.push(!instructionsActive ? check("computer-use", "error", "computer-use-instructions-missing", "Computer Use is enabled, but Root-only Computer Use guidance is not active.", "Reinstall HolyCodex.") : verification.status === "verified" ? check("computer-use", "ok", "computer-use-ready", `Computer Use is enabled and the official plugin is installed and enabled via ${verification.launcherSource}.`) : verification.status === "missing" ? check("computer-use", "error", "computer-use-plugin-missing", "Computer Use is enabled, but the official plugin is not installed and enabled.", "Run holycodex install --computer-use.") : verification.reason === "unsupported" ? check("computer-use", "error", "computer-use-incompatible", "Computer Use is enabled, but the official plugin is incompatible with this Codex runtime or platform.", "Upgrade Codex or disable Computer Use with holycodex install --no-computer-use.") : verification.reason === "marketplace-unavailable" || verification.reason === "timeout" ? check("computer-use", "error", "computer-use-plugin-unavailable", `Computer Use is enabled, but the official marketplace could not be reached (${verification.reason}).`, "Restore Codex marketplace access and run holycodex install --computer-use.") : check("computer-use", "error", "computer-use-installation-failed", `Computer Use is enabled, but installation or verification failed (${verification.reason}).`, "Resolve the reported Codex authentication, permission, configuration, or verification failure and run holycodex install --computer-use."));
 	}
-	for (const key of [
-		"code",
+	const status = rootTomlStringArray(config, "status_line") ?? rootTomlStringArray(tableBody(config, "tui") ?? "", "status_line");
+	checks.push(status?.includes("context-remaining") ? check("context-visibility", "ok", "context-visible", "Context-window usage remains visible.") : check("context-visibility", "error", "context-hidden", "The status line does not show context remaining.", "Reinstall HolyCodex."));
+	checks.push(check("screenshot", "ok", "screenshot-default-preserved", "HolyCodex does not override the enabled Codex screenshot default."));
+	const context7 = context7Command(["--version"], runtime.executable);
+	if (context7 === void 0) checks.push(check("context7", "error", "context7-runner-missing", "No supported direct Context7 runner is available.", "Install nub, Bun, pnpm, npm, or Yarn."));
+	else checks.push(check("context7", "ok", "context7-cli-ready", `${context7.command} constructs a valid direct ctx7@latest command.`));
+	const lsp = await runtime.command(process.execPath, [
+		join(pluginRoot, "runtime", "lsp.js"),
 		"status",
-		"statusCode"
-	]) {
-		const candidate = value[key];
-		if (typeof candidate === "string" || typeof candidate === "number") return String(candidate).trim().toUpperCase();
+		"--json"
+	], {
+		...process.env,
+		HOLYCODEX_LSP_IDLE_SHUTDOWN_MS: String(DOCTOR_LSP_IDLE_SHUTDOWN_MS),
+		HOLYCODEX_LSP_IDLE_CHECK_INTERVAL_MS: "50"
+	});
+	checks.push(lsp.ok ? check("lsp", "ok", "lsp-cli-ready", "The LSP CLI and daemon are reachable.") : check("lsp", "error", "lsp-cli-failed", lsp.output || "LSP CLI failed.", "Reinstall HolyCodex and inspect the reported daemon log."));
+	if (runtime.platform === "win32") {
+		const resolution = runtime.gitBash();
+		checks.push(resolution.found ? check("git-bash", "ok", "git-bash-launcher-ready", `Git Bash resolves at ${resolution.path}; the bundled launcher is present.`) : check("git-bash", "error", "git-bash-unavailable", resolution.installHint, resolution.installHint));
 	}
-}
-function sanitizeDiagnostic(input) {
-	return input.replaceAll(/(?:[A-Za-z]:)?[\\/][^\s"']+/g, "<path>").replaceAll(/(token|secret|password|authorization)\s*[:=]\s*[^\s,}]+/gi, "$1=<redacted>").slice(0, 2048);
-}
-function isRecord(value) {
-	return typeof value === "object" && value !== null;
-}
-function isUnavailableProcessError(result) {
-	if (result.errorCode !== void 0 && SPAWN_UNAVAILABLE_CODES.has(result.errorCode.toUpperCase())) return true;
-	const error = result.error?.toUpperCase() ?? "";
-	return [...SPAWN_UNAVAILABLE_CODES].some((code) => new RegExp(`(?:^|\\s)${code}(?:$|\\s)`).test(error));
-}
-function isUnavailableThrownError(value) {
-	const code = thrownErrorCode(value);
-	return code !== void 0 && SPAWN_UNAVAILABLE_CODES.has(code.toUpperCase());
-}
-function isBootstrapThrownError(value) {
-	const code = thrownErrorCode(value)?.toUpperCase();
-	if (code !== void 0 && [
-		"ETIMEDOUT",
-		"ECONNRESET",
-		"ECONNREFUSED",
-		"EAI_AGAIN",
-		"ENETUNREACH"
-	].includes(code)) return true;
-	if (!(value instanceof Error)) return false;
-	return /bootstrap|network|download|fetch|timeout|timed out/i.test(value.message);
-}
-function thrownErrorCode(value) {
-	if (typeof value !== "object" || value === null || !("code" in value)) return void 0;
-	const code = value.code;
-	return typeof code === "string" ? code : void 0;
-}
-function skipped(reason, attemptedLaunchers) {
+	const plan = readManagedPlan(config);
+	const overrides = readPreservedRootOverrides(config);
+	const fast = readManagedFastMode(config);
+	const workflow = readManagedWorkflowPolicy(config);
+	checks.push(plan === void 0 ? check("routes", "error", "route-plan-missing", "Managed route plan metadata is missing.", "Reinstall HolyCodex.") : check("routes", "ok", "routes-ready", `${plan} workflow policy is active with permitted stage routes.`));
+	checks.push(plan === void 0 || workflow === void 0 ? check("workflow", "error", "workflow-settings-missing", "Managed workflow settings are missing or invalid.", "Reinstall HolyCodex.") : JSON.stringify(workflow) === JSON.stringify({
+		plan,
+		limits: MODEL_ROUTING_PLANS[plan].workflow.limits,
+		projectedUsage: MODEL_ROUTING_PLANS[plan].workflow.projectedUsage,
+		softSizeGuidance: MODEL_ROUTING_PLANS[plan].workflow.softSizeGuidance
+	}) ? check("workflow", "ok", "workflow-settings-ready", `${plan} workflow target and maximum limits, projected usage, and size guidance match the catalog.`) : check("workflow", "error", "workflow-settings-drift", `${plan} workflow settings do not match the authoritative catalog.`, "Reinstall HolyCodex."));
+	checks.push(missing.includes("runtime/workflow.js") ? check("workflow-runtime", "error", "workflow-runtime-missing", "The isolated workflow runtime is missing.", "Reinstall HolyCodex.") : check("workflow-runtime", "ok", "workflow-runtime-ready", "The isolated workflow runtime is present."));
+	const manifest = await readFile(join(pluginRoot, ".codex-plugin", "plugin.json"), "utf8").catch(() => "");
+	const mcpManifest = await access(join(pluginRoot, ".mcp.json")).then(() => true).catch(() => false);
+	checks.push(!mcpManifest && !manifest.includes("mcpServers") && !manifest.includes("MCP Tools") ? check("mcp", "ok", "mcp-free", "The installation does not declare MCP servers or tools.") : check("mcp", "error", "mcp-declared", "The installation declares MCP servers or tools.", "Reinstall HolyCodex from a MCP-free package."));
+	checks.push(overrides.model || overrides.reasoningEffort ? check("root-overrides", "ok", "root-overrides-preserved", "Intentional Root model or reasoning overrides are preserved and healthy.") : check("root-overrides", "ok", "root-managed-defaults", "Root uses managed route defaults."));
+	if (plan !== void 0 && fast === void 0) checks.push(check("fast", "warning", "fast-metadata-missing", "Fast metadata is missing; doctor will not guess a service tier.", "Reinstall with an explicit Fast mode."));
+	if (plan !== void 0) for (const agent of AGENTS) {
+		const source = await readFile(join(agentRoot, `${agent}.toml`), "utf8").catch(() => "");
+		const expected = MODEL_ROUTING_PLANS[plan].agents[agent];
+		const overridden = rootTomlString(source, "model") !== expected.model || rootTomlString(source, "model_reasoning_effort") !== expected.reasoningEffort;
+		checks.push(check(`agent-${agent}`, "ok", overridden ? "agent-override-preserved" : "agent-managed-default", overridden ? `${agent} has an intentional healthy route override.` : `${agent} uses managed route defaults.`));
+	}
+	for (const key of COMPATIBILITY_KEYS) if (config.includes(key.split(".")[1] ?? key)) checks.push(check(`compat-${key}`, "warning", "compatibility-sensitive-key", `${key} is compatibility-sensitive and isolated from supported managed Codex keys.`));
 	return {
-		status: "skipped",
-		reason,
-		attemptedLaunchers: [...attemptedLaunchers]
+		healthy: checks.every((item) => item.status !== "error"),
+		autonomy: autonomy(config),
+		checks
+	};
+}
+async function verifyComputerUse(runtime) {
+	const runProcess = async (input) => {
+		const result = await runtime.command(input.command, input.args, input.env);
+		return {
+			exitCode: result.ok ? 0 : 1,
+			stdout: result.ok ? result.output : "",
+			stderr: result.ok ? "" : result.output,
+			timedOut: false,
+			matched: false,
+			outputTruncated: false
+		};
 	};
+	return verifyOfficialPlugin(COMPUTER_USE_PLUGIN, runProcess, runtime.platform, process.env);
 }
 //#endregion
 //#region packages/cli/src/files.ts
@@ -6880,6 +7000,8 @@ async function install(options, runtime = defaultRuntime) {
 	notify(options, "prerequisites", "Checking prerequisites", "complete");
 	const plan = options.plan ?? "plus-low";
 	const target = paths();
+	const existingConfig = await readText(target.config);
+	const computerUseChoice = await resolveComputerUseChoice(existingConfig, options);
 	const root = backupRoot();
 	notify(options, "backup", "Backing up existing installation", "running");
 	const configBackup = await backup(target.config, root);
@@ -6893,19 +7015,19 @@ async function install(options, runtime = defaultRuntime) {
 	].filter((path) => path !== void 0);
 	notify(options, "backup", "Backing up existing installation", "complete", `${backups.length} saved`);
 	notify(options, "configuration", "Preparing configuration", "running");
-	const existingConfig = await readText(target.config);
 	const previousPlan = readManagedPlan(existingConfig);
 	const fastMode = options.fast ?? "standard";
-	const config = installConfig(existingConfig, options.autonomy, runtime.platform, plan, options.maxSubagents, fastMode);
+	const config = installConfig(existingConfig, options.autonomy, runtime.platform, plan, options.maxSubagents, fastMode, computerUseChoice);
 	notify(options, "configuration", "Preparing configuration", "complete", plan);
 	notify(options, "staging", "Staging plugin and agent files", "running");
 	const existingAgentPreferences = await readAgentPreferences(target.agents, previousPlan);
 	const staging = await mkdtemp(join(tmpdir(), "holycodex-stage-"));
 	const stagedCache = join(staging, "cache");
 	const stagedAgents = join(staging, "agents");
-	await cp(pluginRoot, stagedCache, { recursive: true });
+	const sourcePluginRoot = runtime.pluginRoot ?? pluginRoot;
+	await cp(sourcePluginRoot, stagedCache, { recursive: true });
 	await writeInstalledAgents(join(stagedCache, "agents"), runtime.platform, plan, fastMode);
-	await cp(join(pluginRoot, "agents"), stagedAgents, { recursive: true });
+	await cp(join(sourcePluginRoot, "agents"), stagedAgents, { recursive: true });
 	await writeInstalledAgents(stagedAgents, runtime.platform, plan, fastMode);
 	await preserveAgentPreferences(stagedAgents, existingAgentPreferences, plan, fastMode);
 	notify(options, "staging", "Staging plugin and agent files", "complete");
@@ -6940,8 +7062,15 @@ async function install(options, runtime = defaultRuntime) {
 		codexSecurity = await installCodexSecurity(runtime.runProcess, runtime.platform, process.env);
 		notify(options, "codex-security", "Installing Codex Security", "complete", pluginProgressDetail(codexSecurity));
 		notify(options, "computer-use", "Installing Computer Use", "running");
-		computerUse = await installComputerUse(runtime.runProcess, runtime.platform, process.env);
-		notify(options, "computer-use", "Installing Computer Use", "complete", pluginProgressDetail(computerUse));
+		if (computerUseChoice === "enabled") {
+			const installed = await installComputerUse(runtime.runProcess, runtime.platform, process.env);
+			if (installed.status === "skipped") throw computerUseFailure(installed);
+			computerUse = installed;
+			notify(options, "computer-use", "Installing Computer Use", "complete", pluginProgressDetail(installed));
+		} else {
+			computerUse = { status: "disabled" };
+			notify(options, "computer-use", "Computer Use disabled", "complete", "disabled");
+		}
 		notify(options, "build-web-apps", "Installing Build Web Apps", "running");
 		buildWebApps = await installBuildWebApps(runtime.runProcess, runtime.platform, process.env);
 		notify(options, "build-web-apps", "Installing Build Web Apps", "complete", pluginProgressDetail(buildWebApps));
@@ -6975,6 +7104,18 @@ async function install(options, runtime = defaultRuntime) {
 		buildWebApps
 	};
 }
+async function resolveComputerUseChoice(existingConfig, options) {
+	if (options.computerUse !== void 0) return options.computerUse;
+	const managed = readManagedComputerUse(existingConfig);
+	if (managed !== void 0) return managed;
+	if (options.promptComputerUse !== void 0) return options.promptComputerUse();
+	if (options.interactive === true) throw new Error("Interactive Computer Use selection is unavailable on this surface.");
+	throw new Error("Computer Use choice is required for a new non-interactive installation. Re-run with --computer-use or --no-computer-use.");
+}
+function computerUseFailure(result) {
+	const reason = result.reason.replaceAll("-", " ");
+	return /* @__PURE__ */ new Error(`Computer Use is enabled, but the official plugin could not be installed or verified (${reason}). Re-run with --computer-use after resolving the Codex launcher or marketplace issue, or choose --no-computer-use.`);
+}
 function notify(options, step, label, status, detail) {
 	options.onProgress?.({
 		step,
@@ -7007,7 +7148,7 @@ async function restoreTarget(target, source) {
 }
 async function removeObsoleteVersionCaches(cacheRoot) {
 	if (!await exists(cacheRoot)) return;
-	for (const entry of await readdir(cacheRoot)) if (entry !== "0.12.7") await rm(join(cacheRoot, entry), {
+	for (const entry of await readdir(cacheRoot)) if (entry !== "0.13.0-dev.203.1") await rm(join(cacheRoot, entry), {
 		recursive: true,
 		force: true
 	});
@@ -7177,12 +7318,12 @@ function renderHelp(version, color) {
 	const section = (text) => paint(color, BOLD, text);
 	const muted = (text) => paint(color, DIM, text);
 	return `${title}\n${muted("Lean Codex toolkit installer and doctor")}\n\n${section("USAGE")}\n  holycodex <command> [options]\n\n${section("COMMANDS")}\n  install                         Install or update HolyCodex\n  cleanup                         Remove HolyCodex-owned state\n  doctor                          Diagnose installation and runtime\n\n${section("OPTIONS")}\n  --plan <plan>                   Model routing plan for install: ${PLAN_HELP}\n                                   Default: ${DEFAULT_PLAN}\n  --max-subagents <count>          Override concurrent direct subagents for install\n  --fast                          Use Fast for generated subagents only\n  --fast-all                      Use Fast for Root and generated subagents\n  --no-fast                       Use Standard for Root and generated subagents\n  -h, --help                      Show help\n  -v, --version                   Show version\n  --no-tui                        Accepted; commands remain noninteractive\n  --codex-autonomous              Never ask; keep workspace sandbox\n  --no-codex-autonomous           Safe interactive defaults\n  --dangerous-codex-autonomous    Never ask; disable filesystem sandbox\n  install --verbose              Show detailed install steps
-  --json                          Print machine-readable output\n`;
+  --json                          Print machine-readable output\n  --computer-use                  Enable and verify the official Computer Use plugin\n  --no-computer-use               Keep Computer Use disabled\n`;
 }
 /** Renders install-specific model plan and option help. */
 function renderInstallHelp(version, color) {
 	const title = paint(color, `${BOLD}${CYAN}`, `HolyCodex ${version}`);
-	const section = (text) => paint(color, BOLD, text);
+	const section = (text) => `${paint(color, BOLD, text)}${text === "Options:" ? "\n  --computer-use                  Enable and verify the official Computer Use plugin\n  --no-computer-use               Keep Computer Use disabled" : ""}`;
 	return `${title}\n\n${section("Usage:")}\n  holycodex install [options]\n\n${section("Options:")}\n  --plan <plan>                   Model routing plan: ${PLAN_HELP}\n                                   Default: ${DEFAULT_PLAN}\n  --max-subagents <count>          Override concurrent direct subagents\n  --fast                          Use Fast for generated subagents only\n  --fast-all                      Use Fast for Root and generated subagents\n  --no-fast                       Use Standard for Root and generated subagents\n  -v, --verbose                   Show detailed install steps
   --json                          Print machine-readable output\n  --no-tui                        Accepted; install remains noninteractive\n  --codex-autonomous              Never ask; keep workspace sandbox\n  --no-codex-autonomous           Safe interactive defaults\n  --dangerous-codex-autonomous    Never ask; disable filesystem sandbox\n  -h, --help                      Show help\n\nPlans provide increasing expected model usage and capability. Fast flags are mutually exclusive.\n\n${section("Examples:")}\n  bunx holycodex install\n  bunx holycodex install --plan go\n  bunx holycodex install --plan plus-low --fast\n  bunx holycodex install --plan plus-high\n  bunx holycodex install --plan pro-5x --fast-all\n  bunx holycodex install --plan pro-20x --no-fast\n`;
 }
@@ -7211,10 +7352,14 @@ function renderRunResult(result, color) {
 function renderOfficialPlugins(result) {
 	return [
 		renderOfficialPlugin("Codex Security", result.codexSecurity),
-		renderOfficialPlugin("Computer Use", result.computerUse),
+		renderComputerUse(result.computerUse),
 		renderOfficialPlugin("Build Web Apps", result.buildWebApps)
 	].join("");
 }
+function renderComputerUse(result) {
+	if (result?.status === "disabled") return "\n  Computer Use is disabled.";
+	return renderOfficialPlugin("Computer Use", result);
+}
 function renderOfficialPlugin(name, plugin) {
 	if (plugin === void 0) return "";
 	if (plugin.status === "installed") return `\n  Installed official ${name} plugin.`;
@@ -7261,8 +7406,14 @@ async function main() {
 		process$1.stdout.write(`${VERSION}\n`);
 		return;
 	}
+	const interactiveInstall = parsed.command === "install" && parsed.noTui === false && parsed.json === false && process$1.stdin.isTTY === true && process$1.stdout.isTTY === true;
 	const options = {
 		autonomy: parsed.autonomy,
+		...parsed.computerUse === void 0 ? {} : { computerUse: parsed.computerUse },
+		...parsed.command === "install" ? {
+			interactive: interactiveInstall,
+			...interactiveInstall ? { promptComputerUse } : {}
+		} : {},
 		fast: parsed.fast,
 		json: parsed.json,
 		plan: parsed.plan,
@@ -7280,6 +7431,18 @@ async function main() {
 	const result = parsed.command === "install" ? await install(options) : await cleanup(options);
 	process$1.stdout.write(parsed.json ? `${JSON.stringify(result)}\n` : renderRunResult(result, stdoutColor));
 }
+async function promptComputerUse() {
+	const readline = createInterface({
+		input: process$1.stdin,
+		output: process$1.stdout
+	});
+	try {
+		const answer = await readline.question("Enable Computer Use? [y/N] ");
+		return /^y(?:es)?$/i.test(answer.trim()) ? "enabled" : "disabled";
+	} finally {
+		readline.close();
+	}
+}
 try {
 	await main();
 } catch (error) {