oh-my-codex 0.20.0 → 0.20.2

package/dist/cli/__tests__/index.test.js

@@ -1,13 +1,13 @@
 import { afterEach, describe, it, mock } from "node:test";
 import assert from "node:assert/strict";
 import { existsSync, mkdirSync, readFileSync, utimesSync } from "node:fs";
-import { chmod, lstat, mkdir, mkdtemp, readFile, rm, stat, symlink, writeFile } from "node:fs/promises";
+import { chmod, lstat, mkdir, mkdtemp, readFile, readdir as fsReaddir, rm, stat, symlink, writeFile } from "node:fs/promises";
 import { delimiter, dirname, join } from "node:path";
 import { tmpdir } from "node:os";
 import { fileURLToPath } from "node:url";
 import { once } from "node:events";
 import TOML from "@iarna/toml";
-import { HELP, normalizeCodexLaunchArgs, buildTmuxShellCommand, buildTmuxPaneCommand, shouldSourceTmuxPaneShellRc, buildWindowsPromptCommand, buildTmuxSessionName, resolveCliInvocation, resolveUpdateChannelArg, commandOwnsLocalHelp, resolveCodexLaunchPolicy, resolveEffectiveLeaderLaunchPolicyOverride, resolveEnvLaunchPolicyOverride, resolveLeaderLaunchPolicyOverride, classifyCodexExecFailure, resolveSignalExitCode, parseTmuxPaneSnapshot, findHudWatchPaneIds, buildHudPaneCleanupTargets, readTopLevelTomlString, upsertTopLevelTomlString, collectInheritableTeamWorkerArgs, resolveTeamWorkerLaunchArgsEnv, injectModelInstructionsBypassArgs, resolveWorkerSparkModel, resolveSetupInstallModeArg, resolveSetupMcpModeArg, resolveSetupScopeArg, resolveSetupTeamModeArg, resolveLaunchConfigRepairOptions, readPersistedSetupPreferences, readPersistedSetupScope, resolveCodexConfigPathForLaunch, resolveCodexHomeForLaunch, resolveProjectLocalCodexHomeForLaunch, shouldAutoIsolateMadmaxLaunch, createMadmaxIsolatedRoot, buildMadmaxDetachedLaunchContextKey, withMadmaxDetachedContextLock, resolveOmxRootForLaunch, resolveDisposableWorktreeOmxRootForLaunch, prepareCodexHomeForLaunch, captureMadmaxWorktreeRuntimeContext, persistProjectLaunchRuntimeAuthState, persistProjectLaunchRuntimeProjectTrustState, cleanupRuntimeCodexHome, runtimeCodexHomePath, buildDetachedSessionBootstrapSteps, buildDetachedTmuxSessionName, buildDetachedSessionFinalizeSteps, shouldAttachDetachedTmuxSession, buildDetachedSessionRollbackSteps, detectDetachedSessionWindowIndex, resolveNotifyTempContract, buildNotifyTempStartupMessages, buildNotifyFallbackWatcherEnv, shouldEnableNotifyFallbackWatcher, reapStaleNotifyFallbackWatcher, cleanupLaunchOrphanedMcpProcesses, reapPostLaunchOrphanedMcpProcesses, cleanupPostLaunchModeStateFiles, resolveBackgroundHelperLaunchMode, shouldDetachBackgroundHelper, resolveNotifyFallbackWatcherScript, resolveHookDerivedWatcherScript, resolveNotifyHookScript, buildDetachedWindowsBootstrapScript, acquireTmuxExtendedKeysLease, resolveNativeSessionName, releaseTmuxExtendedKeysLease, withTmuxExtendedKeys, serializeDetachedSessionParentEnv, buildInsideTmuxHudHookEnv, registerInsideTmuxHudResizeHook, buildDetachedHudHookEnv, registerDetachedHudLayoutReconcileHook, ensureOmxRuntimeCommandShim, omxRuntimeCommandShimPath, prependOmxRuntimeCommandShimToEnv, CODEX_SQLITE_HOME_ENV, DETACHED_TMUX_HISTORY_LIMIT, isExistingTmuxWindowTooCrampedForLaunchHud, } from "../index.js";
+import { HELP, normalizeCodexLaunchArgs, buildTmuxShellCommand, buildTmuxPaneCommand, shouldSourceTmuxPaneShellRc, buildWindowsPromptCommand, buildTmuxSessionName, resolveCliInvocation, resolveUpdateChannelArg, commandOwnsLocalHelp, resolveCodexLaunchPolicy, resolveEffectiveLeaderLaunchPolicyOverride, resolveEnvLaunchPolicyOverride, resolveLeaderLaunchPolicyOverride, classifyCodexExecFailure, resolveSignalExitCode, parseTmuxPaneSnapshot, findHudWatchPaneIds, buildHudPaneCleanupTargets, readTopLevelTomlString, upsertTopLevelTomlString, collectInheritableTeamWorkerArgs, resolveTeamWorkerLaunchArgsEnv, injectModelInstructionsBypassArgs, resolveWorkerSparkModel, resolveSetupInstallModeArg, resolveSetupMcpModeArg, resolveSetupScopeArg, resolveSetupTeamModeArg, resolveSetupAgentsMergePolicyArg, resolveLaunchConfigRepairOptions, readPersistedSetupPreferences, readPersistedSetupScope, resolveCodexConfigPathForLaunch, resolveCodexHomeForLaunch, resolveProjectLocalCodexHomeForLaunch, shouldAutoIsolateMadmaxLaunch, createMadmaxIsolatedRoot, buildMadmaxDetachedLaunchContextKey, withMadmaxDetachedContextLock, resolveOmxRootForLaunch, resolveDisposableWorktreeOmxRootForLaunch, prepareCodexHomeForLaunch, captureMadmaxWorktreeRuntimeContext, persistProjectLaunchRuntimeAuthState, persistProjectLaunchRuntimeProjectTrustState, cleanupRuntimeCodexHome, runtimeCodexHomePath, buildDetachedSessionBootstrapSteps, buildDetachedTmuxSessionName, buildDetachedSessionFinalizeSteps, shouldAttachDetachedTmuxSession, buildDetachedSessionRollbackSteps, detectDetachedSessionWindowIndex, resolveNotifyTempContract, buildNotifyTempStartupMessages, buildNotifyFallbackWatcherEnv, shouldEnableNotifyFallbackWatcher, reapStaleNotifyFallbackWatcher, cleanupLaunchOrphanedMcpProcesses, reapPostLaunchOrphanedMcpProcesses, cleanupPostLaunchModeStateFiles, resolveBackgroundHelperLaunchMode, shouldDetachBackgroundHelper, resolveNotifyFallbackWatcherScript, resolveHookDerivedWatcherScript, resolveNotifyHookScript, buildDetachedWindowsBootstrapScript, acquireTmuxExtendedKeysLease, resolveNativeSessionName, releaseTmuxExtendedKeysLease, withTmuxExtendedKeys, serializeDetachedSessionParentEnv, buildInsideTmuxHudHookEnv, registerInsideTmuxHudResizeHook, buildDetachedHudHookEnv, registerDetachedHudLayoutReconcileHook, ensureOmxRuntimeCommandShim, omxRuntimeCommandShimPath, prependOmxRuntimeCommandShimToEnv, CODEX_SQLITE_HOME_ENV, DETACHED_TMUX_HISTORY_LIMIT, isExistingTmuxWindowTooCrampedForLaunchHud, } from "../index.js";
 import { mergeConfig, repairConfigIfNeeded } from "../../config/generator.js";
 import { ensureReusableNodeModules } from "../../utils/repo-deps.js";
 import { readAllState } from "../../hud/state.js";
@@ -15,6 +15,7 @@ import { generateOverlay } from "../../hooks/agents-overlay.js";
 import { HUD_TMUX_HEIGHT_LINES, HUD_TMUX_MIN_LAUNCH_WINDOW_HEIGHT_LINES } from "../../hud/constants.js";
 import { createHudWatchPane as createSharedHudWatchPane, listCurrentWindowHudPaneIds } from "../../hud/tmux.js";
 import { DEFAULT_FRONTIER_MODEL, getTeamLowComplexityModel, } from "../../config/models.js";
+import { splitWorkerLaunchArgs } from "../../team/model-contract.js";
 const testDir = dirname(fileURLToPath(import.meta.url));
 const repoRoot = join(testDir, "..", "..", "..");
 function normalizeDarwinTmpPath(value) {
@@ -1154,13 +1155,13 @@ describe("resolveWorkerSparkModel", () => {
 });
 describe("resolveTeamWorkerLaunchArgsEnv (spark)", () => {
     it("injects spark model as worker default when no explicit env model", () => {
-        assert.equal(resolveTeamWorkerLaunchArgsEnv(undefined, [], true, expectedLowComplexityModel()), `--model ${expectedLowComplexityModel()}`);
+        assert.equal(resolveTeamWorkerLaunchArgsEnv(undefined, [], true, expectedLowComplexityModel()), `"--model" "${expectedLowComplexityModel()}"`);
     });
     it("explicit env model overrides spark default", () => {
-        assert.equal(resolveTeamWorkerLaunchArgsEnv("--model gpt-5", [], true, expectedLowComplexityModel()), "--model gpt-5");
+        assert.equal(resolveTeamWorkerLaunchArgsEnv("--model gpt-5", [], true, expectedLowComplexityModel()), '"--model" "gpt-5"');
     });
     it("inherited leader model overrides spark default", () => {
-        assert.equal(resolveTeamWorkerLaunchArgsEnv(undefined, ["--model", "gpt-4.1"], true, expectedLowComplexityModel()), "--model gpt-4.1");
+        assert.equal(resolveTeamWorkerLaunchArgsEnv(undefined, ["--model", "gpt-4.1"], true, expectedLowComplexityModel()), '"--model" "gpt-4.1"');
     });
 });
 describe("commandOwnsLocalHelp", () => {
@@ -1375,6 +1376,29 @@ describe("resolveSetupTeamModeArg", () => {
         assert.throws(() => resolveSetupTeamModeArg(["--team-mode=enabled", "--no-team"]), /Conflicting setup Team mode flags/);
     });
 });
+describe("resolveSetupAgentsMergePolicyArg", () => {
+    it("accepts only the explicit bare set and clear selectors", () => {
+        assert.deepEqual(resolveSetupAgentsMergePolicyArg([]), undefined);
+        assert.deepEqual(resolveSetupAgentsMergePolicyArg(["--merge-agents"]), { kind: "set", value: true });
+        assert.deepEqual(resolveSetupAgentsMergePolicyArg(["--no-merge-agents"]), { kind: "set", value: false });
+        assert.deepEqual(resolveSetupAgentsMergePolicyArg(["--clear-merge-agents-policy"]), { kind: "clear" });
+        assert.deepEqual(resolveSetupAgentsMergePolicyArg(["--merge-agents", "--merge-agents"]), { kind: "set", value: true });
+        assert.deepEqual(resolveSetupAgentsMergePolicyArg(["--clear-merge-agents-policy", "--clear-merge-agents-policy"]), { kind: "clear" });
+    });
+    it("rejects values, equals spellings, and conflicting policy selectors", () => {
+        for (const argv of [
+            ["--merge-agents=true"],
+            ["--no-merge-agents=false"],
+            ["--clear-merge-agents-policy=true"],
+            ["--merge-agents", "true"],
+            ["--no-merge-agents", "false"],
+        ]) {
+            assert.throws(() => resolveSetupAgentsMergePolicyArg(argv), /merge.*policy|merge-agents/i);
+        }
+        assert.throws(() => resolveSetupAgentsMergePolicyArg(["--merge-agents", "--no-merge-agents"]), /Conflicting.*merge.*policy/i);
+        assert.throws(() => resolveSetupAgentsMergePolicyArg(["--clear-merge-agents-policy", "--merge-agents"]), /Conflicting.*merge.*policy/i);
+    });
+});
 describe("resolveSetupScopeArg", () => {
     it("returns undefined when scope is omitted", () => {
         assert.equal(resolveSetupScopeArg(["--dry-run"]), undefined);
@@ -1974,6 +1998,107 @@ describe("project launch scope helpers", () => {
         }
     });
 });
+describe("pointer launch aborts", () => {
+    it("does not launch, tag, or retain a runtime home when a pointer lock is held", async () => {
+        const wd = await mkdtemp(join(tmpdir(), "omx-pointer-lock-launch-"));
+        try {
+            const binDir = join(wd, "bin");
+            const codexLog = join(wd, "codex.log");
+            const tmuxLog = join(wd, "tmux.log");
+            const lockPath = join(wd, ".omx", "state", "session.json.lock");
+            const ownerPath = join(lockPath, "owner.json");
+            const ownerContents = "{malformed-held-lock\n";
+            await mkdir(binDir, { recursive: true });
+            await mkdir(lockPath, { recursive: true });
+            await writeFile(join(wd, ".omx", "setup-scope.json"), JSON.stringify({ scope: "project" }));
+            await writeFile(ownerPath, ownerContents);
+            await writeFile(join(binDir, "codex"), `#!/bin/sh\nprintf 'spawned\\n' >> ${JSON.stringify(codexLog)}\n`);
+            await writeFile(join(binDir, "tmux"), `#!/bin/sh\ncase "$1" in set-option|display-message) printf '%s\\n' "$*" >> ${JSON.stringify(tmuxLog)} ;; esac\n`);
+            await chmod(join(binDir, "codex"), 0o755);
+            await chmod(join(binDir, "tmux"), 0o755);
+            const { spawnSync } = await import("node:child_process");
+            const result = spawnSync(process.execPath, [join(repoRoot, "dist", "cli", "omx.js"), "launch", "--direct"], {
+                cwd: wd,
+                encoding: "utf-8",
+                env: {
+                    ...process.env,
+                    HOME: join(wd, "home"),
+                    PATH: `${binDir}${delimiter}/usr/bin:/bin`,
+                    CODEX_HOME: "",
+                    OMX_ROOT: "",
+                    OMX_STATE_ROOT: "",
+                    OMX_TEAM_STATE_ROOT: "",
+                    OMX_SESSION_ID: "",
+                    OMX_MCP_WORKDIR_ROOTS: "",
+                    OMX_AUTO_UPDATE: "0",
+                    OMX_HOOK_DERIVED_SIGNALS: "0",
+                    OMX_NOTIFY_FALLBACK: "0",
+                    TMUX: "test-socket,1,1",
+                    TMUX_PANE: "%1",
+                },
+            });
+            assert.equal(result.status, 1, result.stderr || result.stdout);
+            assert.match(result.stderr, /session_pointer_lock_recovery_required/);
+            assert.equal(existsSync(codexLog), false);
+            assert.equal(existsSync(tmuxLog), false);
+            assert.equal(await readFile(ownerPath, "utf-8"), ownerContents);
+            assert.equal(existsSync(join(wd, ".omx", "state", "sessions")), false);
+            const runtimeRoot = join(wd, ".omx", "runtime", "codex-home");
+            assert.deepEqual(existsSync(runtimeRoot) ? await fsReaddir(runtimeRoot) : [], []);
+        }
+        finally {
+            await rm(wd, { recursive: true, force: true });
+        }
+    });
+    it("does not exec, tag, or retain a runtime home when pointer context root resolution is rejected", async () => {
+        const allowedRoot = await mkdtemp(join(tmpdir(), "omx-pointer-allowed-root-"));
+        const wd = await mkdtemp(join(tmpdir(), "omx-pointer-root-exec-"));
+        try {
+            const binDir = join(wd, "bin");
+            const codexLog = join(wd, "codex.log");
+            const tmuxLog = join(wd, "tmux.log");
+            await mkdir(binDir, { recursive: true });
+            await mkdir(join(wd, ".omx"), { recursive: true });
+            await writeFile(join(wd, ".omx", "setup-scope.json"), JSON.stringify({ scope: "project" }));
+            await writeFile(join(binDir, "codex"), `#!/bin/sh\nprintf 'spawned\\n' >> ${JSON.stringify(codexLog)}\n`);
+            await writeFile(join(binDir, "tmux"), `#!/bin/sh\ncase "$1" in set-option|display-message) printf '%s\\n' "$*" >> ${JSON.stringify(tmuxLog)} ;; esac\n`);
+            await chmod(join(binDir, "codex"), 0o755);
+            await chmod(join(binDir, "tmux"), 0o755);
+            const { spawnSync } = await import("node:child_process");
+            const result = spawnSync(process.execPath, [join(repoRoot, "dist", "cli", "omx.js"), "exec", "echo", "blocked"], {
+                cwd: wd,
+                encoding: "utf-8",
+                env: {
+                    ...process.env,
+                    HOME: join(wd, "home"),
+                    PATH: `${binDir}${delimiter}/usr/bin:/bin`,
+                    CODEX_HOME: "",
+                    OMX_ROOT: "",
+                    OMX_STATE_ROOT: "",
+                    OMX_TEAM_STATE_ROOT: "",
+                    OMX_SESSION_ID: "",
+                    OMX_AUTO_UPDATE: "0",
+                    OMX_HOOK_DERIVED_SIGNALS: "0",
+                    OMX_NOTIFY_FALLBACK: "0",
+                    OMX_MCP_WORKDIR_ROOTS: allowedRoot,
+                    TMUX: "test-socket,1,1",
+                    TMUX_PANE: "%1",
+                },
+            });
+            assert.equal(result.status, 1, result.stderr || result.stdout);
+            assert.match(result.stderr, /session_pointer_context_failure/);
+            assert.equal(existsSync(codexLog), false);
+            assert.equal(existsSync(tmuxLog), false);
+            assert.equal(existsSync(join(wd, ".omx", "state", "sessions")), false);
+            const runtimeRoot = join(wd, ".omx", "runtime", "codex-home");
+            assert.deepEqual(existsSync(runtimeRoot) ? await fsReaddir(runtimeRoot) : [], []);
+        }
+        finally {
+            await rm(wd, { recursive: true, force: true });
+            await rm(allowedRoot, { recursive: true, force: true });
+        }
+    });
+});
 describe("resolveCodexLaunchPolicy", () => {
     it("uses detached tmux on macOS when outside tmux and tmux is available", () => {
         assert.equal(resolveCodexLaunchPolicy({}, "darwin", true, false, true, true), "detached-tmux");
@@ -2269,6 +2394,49 @@ describe("detached tmux new-session sequencing", () => {
         assert.match(envScript, /export IS_GAJAE_SLOP_GENERATOR='1'/);
         assert.doesNotMatch(envScript, /not-a-shell-name/);
     });
+    it("omits only tmux-owned pane metadata from the detached session env", () => {
+        const envScript = serializeDetachedSessionParentEnv({
+            CUSTOM_LLM_API_KEY: "fake-provider-key",
+            TERM: "xterm-256color",
+            TERM_PROGRAM: "",
+            TERM_PROGRAM_VERSION: undefined,
+            TERMINFO: "/tmp/outer-terminfo",
+            TERMINFO_DIRS: "/tmp/outer-terminfo-dirs",
+            TERMCAP: "outer-termcap",
+            COLORTERM: "truecolor",
+            TMUX: "",
+            TMUX_PANE: undefined,
+            COLUMNS: "200",
+            LINES: "",
+        });
+        assert.match(envScript, /export CUSTOM_LLM_API_KEY='fake-provider-key'/);
+        assert.match(envScript, /export COLORTERM='truecolor'/);
+        assert.match(envScript, /export TERMINFO='\/tmp\/outer-terminfo'/);
+        assert.match(envScript, /export TERMINFO_DIRS='\/tmp\/outer-terminfo-dirs'/);
+        assert.match(envScript, /export TERMCAP='outer-termcap'/);
+        assert.doesNotMatch(envScript, /^unset\b/m);
+        for (const key of [
+            "TERM",
+            "TERM_PROGRAM",
+            "TERM_PROGRAM_VERSION",
+            "TMUX",
+            "TMUX_PANE",
+            "COLUMNS",
+            "LINES",
+        ]) {
+            assert.doesNotMatch(envScript, new RegExp(`^export ${key}=`, "m"));
+        }
+    });
+    it("round-trips shell-sensitive detached parent env values without evaluating them", { skip: process.platform === "win32" }, async () => {
+        const shellSensitiveValue = "literal ' quote $HOME $(printf injected) `printf injected`; \\ slash\nsecond line";
+        const envScript = serializeDetachedSessionParentEnv({
+            CUSTOM_LLM_API_KEY: shellSensitiveValue,
+            EMPTY_PROVIDER_KEY: "",
+        });
+        const result = (await import("node:child_process")).spawnSync("/bin/sh", ["-c", `${envScript}printf '%s\\n<%s>\\n' "$CUSTOM_LLM_API_KEY" "$EMPTY_PROVIDER_KEY"`], { encoding: "utf-8", env: { HOME: "/should-not-expand" } });
+        assert.equal(result.status, 0, result.stderr);
+        assert.equal(result.stdout, `${shellSensitiveValue}\n<>\n`);
+    });
     it("creates a repo-local omx command shim for launched Codex sessions", async () => {
         const cwd = await mkdtemp(join(tmpdir(), "omx-runtime-command-shim-"));
         try {
@@ -3693,26 +3861,63 @@ describe("team worker launch arg inheritance helpers", () => {
             "--dangerously-bypass-approvals-and-sandbox",
             "--model",
             "gpt-5",
-        ], true), '--no-alt-screen --dangerously-bypass-approvals-and-sandbox -c model_reasoning_effort="xhigh" --model old-b');
+        ], true), '"--no-alt-screen" "--dangerously-bypass-approvals-and-sandbox" "-c" "model_reasoning_effort=\\"xhigh\\"" "--model" "old-b"');
     });
     it("resolveTeamWorkerLaunchArgsEnv can opt out of leader inheritance", () => {
         assert.equal(resolveTeamWorkerLaunchArgsEnv("--no-alt-screen", [
             "--dangerously-bypass-approvals-and-sandbox",
             "-c",
             'model_reasoning_effort="xhigh"',
-        ], false), "--no-alt-screen");
+        ], false), '"--no-alt-screen"');
     });
     it("resolveTeamWorkerLaunchArgsEnv uses inherited model when env model is absent", () => {
-        assert.equal(resolveTeamWorkerLaunchArgsEnv("--no-alt-screen", ["--model=gpt-5.6-terra"], true), "--no-alt-screen --model gpt-5.6-terra");
+        assert.equal(resolveTeamWorkerLaunchArgsEnv("--no-alt-screen", ["--model=gpt-5.6-terra"], true), '"--no-alt-screen" "--model" "gpt-5.6-terra"');
     });
     it("resolveTeamWorkerLaunchArgsEnv uses frontier default model when env and inherited models are absent", () => {
-        assert.equal(resolveTeamWorkerLaunchArgsEnv("--no-alt-screen", ["--dangerously-bypass-approvals-and-sandbox"], true, DEFAULT_FRONTIER_MODEL), `--no-alt-screen --dangerously-bypass-approvals-and-sandbox --model ${DEFAULT_FRONTIER_MODEL}`);
+        assert.equal(resolveTeamWorkerLaunchArgsEnv("--no-alt-screen", ["--dangerously-bypass-approvals-and-sandbox"], true, DEFAULT_FRONTIER_MODEL), `"--no-alt-screen" "--dangerously-bypass-approvals-and-sandbox" "--model" "${DEFAULT_FRONTIER_MODEL}"`);
     });
     it("resolveTeamWorkerLaunchArgsEnv keeps exactly one final model with precedence env > inherited > default", () => {
-        assert.equal(resolveTeamWorkerLaunchArgsEnv("--model env-model --model=env-model-final", ["--model", "inherited-model"], true, "fallback-model"), "--model env-model-final");
+        assert.equal(resolveTeamWorkerLaunchArgsEnv("--model env-model --model=env-model-final", ["--model", "inherited-model"], true, "fallback-model"), '"--model" "env-model-final"');
     });
     it("resolveTeamWorkerLaunchArgsEnv prefers inherited model over default when env model is absent", () => {
-        assert.equal(resolveTeamWorkerLaunchArgsEnv("--no-alt-screen", ["--model", "inherited-model"], true, "fallback-model"), "--no-alt-screen --model inherited-model");
+        assert.equal(resolveTeamWorkerLaunchArgsEnv("--no-alt-screen", ["--model", "inherited-model"], true, "fallback-model"), '"--no-alt-screen" "--model" "inherited-model"');
+    });
+});
+describe("team worker launch argument environment serialization", () => {
+    it("round-trips quoted, empty, and literal args while direct policy suppresses inherited bypass", () => {
+        const raw = resolveTeamWorkerLaunchArgsEnv('"" "two words" $VAR --sandbox=workspace-write', [
+            "--dangerously-bypass-approvals-and-sandbox",
+            "--model", "leader-model",
+        ], true);
+        assert.ok(raw);
+        assert.deepEqual(splitWorkerLaunchArgs(raw ?? undefined), [
+            '',
+            'two words',
+            '$VAR',
+            '--sandbox', 'workspace-write',
+            '--model', 'leader-model',
+        ]);
+    });
+    it("round-trips Windows paths, including terminal backslashes, through the environment", () => {
+        const path = "C:\\Users\\alice\\file.txt";
+        const terminalPath = "C:\\Users\\alice\\";
+        const raw = resolveTeamWorkerLaunchArgsEnv([
+            "--add-dir", path,
+            "--add-dir", `"${path}"`,
+            "--add-dir", `'${terminalPath}'`,
+        ].join(" "), [], false);
+        assert.deepEqual(splitWorkerLaunchArgs(raw ?? undefined), [
+            "--add-dir", path,
+            "--add-dir", path,
+            "--add-dir", terminalPath,
+        ]);
+    });
+    it("honors the inheritance gate and rejects an explicitly mixed source before transport", () => {
+        const noInheritance = resolveTeamWorkerLaunchArgsEnv('--ask-for-approval=on-request', ["--dangerously-bypass-approvals-and-sandbox", "--model", "leader-model"], false);
+        assert.deepEqual(splitWorkerLaunchArgs(noInheritance ?? undefined), [
+            '--ask-for-approval', 'on-request',
+        ]);
+        assert.throws(() => resolveTeamWorkerLaunchArgsEnv('--dangerously-bypass-approvals-and-sandbox --sandbox workspace-write', []), /Invalid OMX_TEAM_WORKER_LAUNCH_ARGS: bypass cannot be combined with direct approval or sandbox policy/);
     });
 });
 describe("readTopLevelTomlString", () => {