oh-my-codex 0.20.2 → 0.20.5

package/dist/cli/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/cli/setup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiGH,OAAO,EAEN,KAAK,aAAa,EAClB,MAAM,wBAAwB,CAAC;AAUhC,OAAO,EACN,mBAAmB,EACnB,eAAe,EACf,YAAY,EAKZ,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,MAAM,wBAAwB,CAAC;AAiDhC,UAAU,YAAY;IACrB,kBAAkB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACzC,iBAAiB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qBAAqB,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACrE,0BAA0B,CAAC,EAAE,CAC5B,WAAW,EAAE,OAAO,CAAC,mBAAmB,CAAC,KACrC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC3C,iBAAiB,CAAC,EAAE,CACnB,WAAW,EAAE,gBAAgB,KACzB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,kBAAkB,CAAC,EAAE,CACpB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,KACf,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,oBAAoB,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,iCAAiC,CAAC,EAAE,CACnC,UAAU,EAAE,MAAM,KACd,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC/D,0BAA0B,CAAC,EAAE,CAC5B,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,MAAM,EAAE,KACvB,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC9E,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,oBAAoB;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CAChB;AAUD,UAAU,kBAAkB;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAOD,MAAM,WAAW,wBAAwB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACpB;AAsID,KAAK,4BAA4B,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AAgEhE,KAAK,iCAAiC,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAClF,KAAK,iCAAiC,GACnC,qBAAqB,GACrB,eAAe,GACf,mBAAmB,GACnB,eAAe,GACf,+BAA+B,GAC/B,cAAc,GACd,eAAe,GACf,+BAA+B,GAC/B,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,wBAAwB,GACxB,gCAAgC,GAChC,wBAAwB,GACxB,uBAAuB,GACvB,sBAAsB,CAAC;AAG1B,KAAK,6BAA6B,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,UAAU,qCAAqC;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,6BAA6B,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,UAAU,6BAA6B;IACtC,IAAI,EAAE,iCAAiC,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,qCAAqC,CAAC;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,6BAA6B,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC/B;AAED,UAAU,iCAAiC;IAC1C,IAAI,EAAE,iCAAiC,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,qCAAqC,CAAC;CAC9C;AA6CD,gFAAgF;AAChF,wBAAgB,8CAA8C,CAC7D,QAAQ,EACL,CAAC,CACF,KAAK,EAAE,iCAAiC,EACxC,MAAM,EAAE,6BAA6B,GAAG,iCAAiC,KACrE,IAAI,CAAC,GACR,SAAS,GACV,MAAM,IAAI,CAMZ;AAED,yFAAyF;AACzF,wBAAgB,uCAAuC,CACtD,QAAQ,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,GAChC,MAAM,IAAI,CAMZ;AAED,0EAA0E;AAC1E,wBAAgB,uCAAuC,CACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,GACnC,MAAM,IAAI,CAMZ;AAED,wFAAwF;AACxF,wBAAgB,4CAA4C,CAC3D,QAAQ,EACL,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,KAAK,MAAM,CAAC,GACvD,SAAS,GAGV,MAAM,IAAI,CAMZ;AAsTD,KAAK,sCAAsC,GACxC,gBAAgB,GAChB,YAAY,GACZ,WAAW,CAAC;AAsFf;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CACnD,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,QAAQ,EAAE,MAAM,GACd,sCAAsC,CA0CxC;AAohCD,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,SAAa,GACnB,wBAAwB,CA6C1B;AAED,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1E;AAsDD,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,MAAM,GACjB,gBAAgB,CAoBlB;AA88CD,wBAAsB,KAAK,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0mCrE;AAyqBD,wBAAsB,aAAa,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,kBAAkB,EACjC,OAAO,EAAE,YAAY,GACnB,OAAO,CAAC,oBAAoB,CAAC,CA+H/B"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/cli/setup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,OAAO,EAAyB,KAAK,KAAK,EAAE,MAAM,IAAI,CAAC;AAMvD,OAAO,EAQN,KAAK,gCAAgC,EACrC,MAAM,gCAAgC,CAAC;AA0ExC,OAAO,EAEN,KAAK,aAAa,EAClB,MAAM,wBAAwB,CAAC;AAUhC,OAAO,EACN,mBAAmB,EACnB,eAAe,EACf,YAAY,EAKZ,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,MAAM,wBAAwB,CAAC;AAiDhC,UAAU,YAAY;IACrB,kBAAkB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACzC,iBAAiB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qBAAqB,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACrE,0BAA0B,CAAC,EAAE,CAC5B,WAAW,EAAE,OAAO,CAAC,mBAAmB,CAAC,KACrC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC3C,iBAAiB,CAAC,EAAE,CACnB,WAAW,EAAE,gBAAgB,KACzB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,kBAAkB,CAAC,EAAE,CACpB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,KACf,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,oBAAoB,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,iCAAiC,CAAC,EAAE,CACnC,UAAU,EAAE,MAAM,KACd,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC/D,0BAA0B,CAAC,EAAE,CAC5B,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,MAAM,EAAE,KACvB,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC9E,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,oBAAoB;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CAChB;AAUD,UAAU,kBAAkB;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAOD,MAAM,WAAW,wBAAwB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACpB;AAsID,KAAK,4BAA4B,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AAgEhE,KAAK,iCAAiC,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAClF,KAAK,iCAAiC,GACnC,qBAAqB,GACrB,eAAe,GACf,mBAAmB,GACnB,eAAe,GACf,+BAA+B,GAC/B,cAAc,GACd,eAAe,GACf,+BAA+B,GAC/B,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,wBAAwB,GACxB,gCAAgC,GAChC,wBAAwB,GACxB,uBAAuB,GACvB,sBAAsB,CAAC;AAG1B,KAAK,6BAA6B,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,UAAU,qCAAqC;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,6BAA6B,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,UAAU,6BAA6B;IACtC,IAAI,EAAE,iCAAiC,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,qCAAqC,CAAC;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,6BAA6B,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC/B;AAED,UAAU,iCAAiC;IAC1C,IAAI,EAAE,iCAAiC,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,qCAAqC,CAAC;CAC9C;AAkDD,gFAAgF;AAChF,wBAAgB,8CAA8C,CAC7D,QAAQ,EACL,CAAC,CACF,KAAK,EAAE,iCAAiC,EACxC,MAAM,EAAE,6BAA6B,GAAG,iCAAiC,KACrE,IAAI,CAAC,GACR,SAAS,GACV,MAAM,IAAI,CAMZ;AAED,yFAAyF;AACzF,wBAAgB,uCAAuC,CACtD,QAAQ,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,GAChC,MAAM,IAAI,CAMZ;AAED,0EAA0E;AAC1E,wBAAgB,uCAAuC,CACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,GACnC,MAAM,IAAI,CAMZ;AAED,wFAAwF;AACxF,wBAAgB,4CAA4C,CAC3D,QAAQ,EACL,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,KAAK,MAAM,CAAC,GACvD,SAAS,GAGV,MAAM,IAAI,CAMZ;AAED,yEAAyE;AACzE,wBAAgB,8CAA8C,CAC7D,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,GAC9D,MAAM,IAAI,CAMZ;AAED,yEAAyE;AACzE,wBAAgB,4CAA4C,CAC3D,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,GAC3D,MAAM,IAAI,CAMZ;AAED,+EAA+E;AAC/E,wBAAgB,0CAA0C,CACzD,UAAU,EAAE,gCAAgC,GAAG,SAAS,GACtD,MAAM,IAAI,CAMZ;AAmYD,KAAK,sCAAsC,GACxC,gBAAgB,GAChB,YAAY,GACZ,WAAW,CAAC;AAsFf;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CACnD,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,QAAQ,EAAE,MAAM,GACd,sCAAsC,CA0CxC;AA6iCD,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,SAAa,GACnB,wBAAwB,CA6C1B;AAED,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1E;AAsDD,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,MAAM,GACjB,gBAAgB,CAoBlB;AA88CD,wBAAsB,KAAK,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqnCrE;AAyqBD,wBAAsB,aAAa,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,kBAAkB,EACjC,OAAO,EAAE,YAAY,GACnB,OAAO,CAAC,oBAAoB,CAAC,CA+H/B"}

package/dist/cli/setup.js

@@ -10,8 +10,9 @@ import { createInterface } from "readline/promises";
 import { homedir } from "os";
 import TOML from "@iarna/toml";
 import { createHash } from "crypto";
-import { clearNativeHookClaimJournal, persistNativeHookClaimJournal, recoverNativeHookClaimJournal, syncNativeHookClaimParent, restoreNativeHookClaimNoClobber, } from "./native-hook-claim-journal.js";
+import { clearNativeHookClaimJournal as clearNativeHookClaimJournalWithDurability, createNativeHookClaimJournalDurability, persistNativeHookClaimJournal as persistNativeHookClaimJournalWithDurability, recoverNativeHookClaimJournal, syncNativeHookClaimParent as syncNativeHookClaimParentWithDurability, restoreNativeHookClaimNoClobber as restoreNativeHookClaimNoClobberWithDurability, wrapNativeHookClaimJournalDurability, } from "./native-hook-claim-journal.js";
 import { codexHome, codexConfigPath, codexPromptsDir, codexAgentsDir, userSkillsDir, omxStateDir, detectLegacySkillRootOverlap, omxPlansDir, omxLogsDir, } from "../utils/paths.js";
+import { emitDegradedDurabilityWarning, recordRegularFileSyncOutcome, syncRegularFile, } from "../utils/file-durability.js";
 import { buildMergedConfig, getRootModelName, getRootTomlArray, hasLegacyOmxTeamRunTable, isOmxManagedNotifyCommand, sanitizePreviousNotifyCommand, stripExistingOmxBlocks, stripExistingSharedMcpRegistryBlock, mergeSharedMcpRegistryBlock, stripOmxEnvSettings, stripOmxFeatureFlags, stripOmxSeededBehavioralDefaults, upsertPluginModeRuntimeFeatureFlags, upsertManagedCodexHookTrustState, stripManagedCodexHookTrustState, OMX_DEVELOPER_INSTRUCTIONS, OMX_PLUGIN_DEVELOPER_INSTRUCTIONS, hasFirstPartyOmxMcpRegistrations, extractFirstPartyOmxMcpSections, stripFirstPartyOmxMcpSections, } from "../config/generator.js";
 import { buildManagedCodexNativeHookWindowsShimContent, buildManagedCodexNativeHookWindowsShimPath, planManagedCodexHooksMerge, planManagedCodexHooksRemoval, classifyManagedCodexNativeHookWindowsShimOwnership, ManagedCodexHooksPlanError, validateCodexHooksConfigStrict, } from "../config/codex-hooks.js";
 import { getLegacyUnifiedMcpRegistryCandidate, getUnifiedMcpRegistryCandidates, loadUnifiedMcpRegistry, planClaudeCodeMcpSettingsSync, } from "../config/mcp-registry.js";
@@ -208,6 +209,9 @@ let nativeHookTransactionSequence = 0;
 let nativeHookTransactionPlatformOverride;
 let nativeHookTransactionTemporaryPathOverride;
 let setupLatePhaseFailureInjector;
+let nativeHookTransactionRegularFileSyncOverride;
+let nativeHookClaimJournalDurabilityOverride;
+let nativeHookTransactionArtifactLstatOverride;
 /** @internal Test seam for deterministic atomic-write and rollback coverage. */
 export function setNativeHookTransactionFailureInjectorForTest(injector) {
     const previous = nativeHookTransactionFailureInjector;
@@ -240,9 +244,56 @@ export function setNativeHookTransactionTemporaryPathForTest(resolver) {
         nativeHookTransactionTemporaryPathOverride = previous;
     };
 }
+/** @internal Test seam for deterministic regular-file fsync coverage. */
+export function setNativeHookTransactionRegularFileSyncForTest(sync) {
+    const previous = nativeHookTransactionRegularFileSyncOverride;
+    nativeHookTransactionRegularFileSyncOverride = sync;
+    return () => {
+        nativeHookTransactionRegularFileSyncOverride = previous;
+    };
+}
+/** @internal Test seam for deterministic artifact read-back coverage. */
+export function setNativeHookTransactionArtifactLstatForTest(artifactLstat) {
+    const previous = nativeHookTransactionArtifactLstatOverride;
+    nativeHookTransactionArtifactLstatOverride = artifactLstat;
+    return () => {
+        nativeHookTransactionArtifactLstatOverride = previous;
+    };
+}
+/** @internal Test seam for deterministic claim-journal durability coverage. */
+export function setNativeHookClaimJournalDurabilityForTest(durability) {
+    const previous = nativeHookClaimJournalDurabilityOverride;
+    nativeHookClaimJournalDurabilityOverride = durability;
+    return () => {
+        nativeHookClaimJournalDurabilityOverride = previous;
+    };
+}
 function nativeHookPlatform() {
     return nativeHookTransactionPlatformOverride ?? process.platform;
 }
+function nativeHookClaimJournalDurability(tracker) {
+    return wrapNativeHookClaimJournalDurability(nativeHookClaimJournalDurabilityOverride
+        ?? createNativeHookClaimJournalDurability(nativeHookPlatform()), tracker);
+}
+async function clearNativeHookClaimJournal(root, tracker) {
+    return clearNativeHookClaimJournalWithDurability(root, nativeHookClaimJournalDurability(tracker));
+}
+async function persistNativeHookClaimJournal(root, entry, tracker) {
+    return persistNativeHookClaimJournalWithDurability(root, entry, nativeHookClaimJournalDurability(tracker));
+}
+async function restoreNativeHookClaimNoClobber(claimPath, destinationPath, tracker) {
+    return restoreNativeHookClaimNoClobberWithDurability(claimPath, destinationPath, nativeHookClaimJournalDurability(tracker));
+}
+async function syncNativeHookClaimParent(path, tracker) {
+    return syncNativeHookClaimParentWithDurability(path, nativeHookClaimJournalDurability(tracker));
+}
+async function syncNativeHookRegularFile(handle) {
+    const platform = nativeHookPlatform();
+    if (nativeHookTransactionRegularFileSyncOverride) {
+        return syncRegularFile({ sync: () => nativeHookTransactionRegularFileSyncOverride(platform) }, platform);
+    }
+    return syncRegularFile(handle, platform);
+}
 function hookTransactionBytesEqual(left, right) {
     return left === null || right === null ? left === right : left.equals(right);
 }
@@ -251,6 +302,20 @@ function nativeHookTransactionTopologyEqual(left, right) {
         ? left.kind === right.kind
         : left.mode === right.mode;
 }
+function nativeHookTransactionTopologyMatchesDuringReadback(left, right) {
+    if (nativeHookPlatform() === "win32" &&
+        left.kind === "regular_file" &&
+        right.kind === "regular_file" &&
+        left.mode === 0o600 &&
+        right.mode === 0o666) {
+        // Windows can synthesize a requested new-file mode of 0o600 as 0o666
+        // when the same file is reopened for read-back. Accept only that one-way
+        // transition inside a single identity-checked snapshot; later snapshots
+        // remain mode-strict so real permission drift still fails closed.
+        return true;
+    }
+    return nativeHookTransactionTopologyEqual(left, right);
+}
 function isMissingPathError(error) {
     return (typeof error === "object" &&
         error !== null &&
@@ -363,7 +428,7 @@ function decodeNativeHookTransactionUtf8(bytes, label) {
 async function captureNativeHookTransactionArtifact(path, label) {
     let before;
     try {
-        before = await lstat(path);
+        before = await (nativeHookTransactionArtifactLstatOverride?.(path) ?? lstat(path));
     }
     catch (error) {
         if (isMissingPathError(error)) {
@@ -375,7 +440,7 @@ async function captureNativeHookTransactionArtifact(path, label) {
         throw new Error(`Refusing native hook transaction for ${label}: expected a single-link regular file or absence.`);
     }
     const bytes = await readFile(path);
-    const after = await lstat(path);
+    const after = await (nativeHookTransactionArtifactLstatOverride?.(path) ?? lstat(path));
     const beforeTopology = {
         kind: "regular_file",
         mode: before.mode & 0o7777,
@@ -386,7 +451,7 @@ async function captureNativeHookTransactionArtifact(path, label) {
     };
     if (!after.isFile() ||
         after.nlink !== 1 ||
-        !nativeHookTransactionTopologyEqual(beforeTopology, afterTopology) ||
+        !nativeHookTransactionTopologyMatchesDuringReadback(beforeTopology, afterTopology) ||
         before.dev !== after.dev ||
         before.ino !== after.ino ||
         before.nlink !== after.nlink) {
@@ -394,7 +459,7 @@ async function captureNativeHookTransactionArtifact(path, label) {
     }
     return {
         bytes,
-        topology: beforeTopology,
+        topology: afterTopology,
         device: before.dev,
         inode: before.ino,
         links: before.nlink,
@@ -409,7 +474,7 @@ function nativeHookTransactionSnapshotsEqual(left, right) {
 }
 function nativeHookTransactionSnapshotMatchesExpected(snapshot, expected) {
     return (hookTransactionBytesEqual(snapshot.bytes, expected.bytes) &&
-        nativeHookTransactionTopologyEqual(snapshot.topology, expected.topology));
+        nativeHookTransactionTopologyMatchesDuringReadback(expected.topology, snapshot.topology));
 }
 function nativeHookTransactionOutputTopology(before, after) {
     if (after === null)
@@ -579,10 +644,10 @@ function nativeHookTransactionClaimPath(path) {
     nativeHookTransactionSequence += 1;
     return join(dirname(path), `.${basename(path)}.omx-claim-${process.pid}-${nativeHookTransactionSequence}.tmp`);
 }
-async function restoreNativeHookClaim(claimPath, destinationPath) {
-    await restoreNativeHookClaimNoClobber(claimPath, destinationPath);
+async function restoreNativeHookClaim(claimPath, destinationPath, tracker) {
+    recordRegularFileSyncOutcome(tracker, await restoreNativeHookClaimNoClobber(claimPath, destinationPath, tracker));
 }
-async function atomicWriteNativeHookTransactionArtifact(artifact, content, stage, expectedCurrent, ancestorPrecondition, onWriteApplied, onWriteStabilized, assertApplied) {
+async function atomicWriteNativeHookTransactionArtifact(artifact, content, stage, expectedCurrent, ancestorPrecondition, tracker, onWriteApplied, onWriteStabilized, assertApplied) {
     const temporaryPath = nativeHookTransactionTemporaryPath(artifact.path, "write");
     let temporaryCreated = false;
     let temporarySnapshot;
@@ -609,7 +674,7 @@ async function atomicWriteNativeHookTransactionArtifact(artifact, content, stage
         temporaryCreated = true;
         try {
             await handle.writeFile(content);
-            await handle.sync();
+            recordRegularFileSyncOutcome(tracker, await syncNativeHookRegularFile(handle));
         }
         finally {
             await handle.close();
@@ -641,19 +706,19 @@ async function atomicWriteNativeHookTransactionArtifact(artifact, content, stage
             !claimRelativePath.startsWith(`..${sep}`);
         if (expectedCurrent.bytes !== null) {
             if (canJournalClaim) {
-                await persistNativeHookClaimJournal(ancestorPrecondition.controlledRoot, {
+                recordRegularFileSyncOutcome(tracker, await persistNativeHookClaimJournal(ancestorPrecondition.controlledRoot, {
                     canonicalPath: artifact.path,
                     claimPath,
                     before: expectedCurrent.bytes,
                     after: content,
-                });
+                }, tracker));
                 await refreshNativeHookTransactionAncestorPrecondition(ancestorPrecondition, join(ancestorPrecondition.controlledRoot, ".omx", "native-hook-claim-journal.json"));
                 journaledClaim = true;
             }
             await rename(artifact.path, claimPath);
             claimCreated = true;
             if (journaledClaim)
-                await syncNativeHookClaimParent(claimPath);
+                await syncNativeHookClaimParent(claimPath, tracker);
             await assertNativeHookTransactionArtifactSnapshot(claimPath, `${artifact.label} replacement claim`, expectedCurrent, stage === "write" ? "precondition" : "rollback");
         }
         await copyFile(temporaryPath, artifact.path, constants.COPYFILE_EXCL);
@@ -662,20 +727,20 @@ async function atomicWriteNativeHookTransactionArtifact(artifact, content, stage
         }
         const installedHandle = await open(artifact.path, "r");
         try {
-            await installedHandle.sync();
+            recordRegularFileSyncOutcome(tracker, await syncNativeHookRegularFile(installedHandle));
         }
         finally {
             await installedHandle.close();
         }
-        await syncNativeHookClaimParent(artifact.path);
+        await syncNativeHookClaimParent(artifact.path, tracker);
         const installedSnapshot = await assertNativeHookTransactionArtifactState(artifact.path, artifact.label, { bytes: content, topology: artifact.afterTopology }, stage === "write" ? "precondition" : "rollback");
         if (claimCreated && claimPath) {
             await rm(claimPath);
-            await syncNativeHookClaimParent(claimPath);
+            await syncNativeHookClaimParent(claimPath, tracker);
             claimCreated = false;
         }
         if (journaledClaim) {
-            await clearNativeHookClaimJournal(ancestorPrecondition.controlledRoot);
+            await clearNativeHookClaimJournal(ancestorPrecondition.controlledRoot, tracker);
             journaledClaim = false;
         }
         await rm(temporaryPath);
@@ -690,11 +755,11 @@ async function atomicWriteNativeHookTransactionArtifact(artifact, content, stage
     catch (error) {
         if (claimCreated && claimPath) {
             try {
-                await restoreNativeHookClaim(claimPath, artifact.path);
-                await syncNativeHookClaimParent(artifact.path);
+                await restoreNativeHookClaim(claimPath, artifact.path, tracker);
+                await syncNativeHookClaimParent(artifact.path, tracker);
                 claimCreated = false;
                 if (journaledClaim) {
-                    await clearNativeHookClaimJournal(ancestorPrecondition.controlledRoot);
+                    await clearNativeHookClaimJournal(ancestorPrecondition.controlledRoot, tracker);
                     journaledClaim = false;
                 }
             }
@@ -769,12 +834,12 @@ async function assertNativeHookTransactionRollbackState(applied) {
     await assertNativeHookTransactionStagedRecoveryCopies(applied);
     await assertAppliedNativeHookTransactionSnapshots(applied);
 }
-async function applyNativeHookTransactionArtifact(artifact, ancestorPrecondition, applied) {
+async function applyNativeHookTransactionArtifact(artifact, ancestorPrecondition, tracker, applied) {
     await assertNativeHookTransactionArtifactSnapshot(artifact.path, artifact.label, artifact.before, "precondition");
     await assertNativeHookTransactionAncestorPrecondition(ancestorPrecondition);
     if (artifact.after !== null) {
         let entry;
-        await atomicWriteNativeHookTransactionArtifact(artifact, artifact.after, "write", artifact.before, ancestorPrecondition, (appliedSnapshot) => {
+        await atomicWriteNativeHookTransactionArtifact(artifact, artifact.after, "write", artifact.before, ancestorPrecondition, tracker, (appliedSnapshot) => {
             entry = { artifact, appliedSnapshot };
             applied.push(entry);
         }, (stabilizedSnapshot) => {
@@ -803,7 +868,7 @@ async function applyNativeHookTransactionArtifact(artifact, ancestorPrecondition
         stagedDeletionCreated = true;
         try {
             await handle.writeFile(artifact.before.bytes);
-            await handle.sync();
+            recordRegularFileSyncOutcome(tracker, await syncNativeHookRegularFile(handle));
         }
         finally {
             await handle.close();
@@ -825,16 +890,16 @@ async function applyNativeHookTransactionArtifact(artifact, ancestorPrecondition
             claimRelativePath !== ".." &&
             !claimRelativePath.startsWith(`..${sep}`);
         if (journaledClaim) {
-            await persistNativeHookClaimJournal(ancestorPrecondition.controlledRoot, {
+            recordRegularFileSyncOutcome(tracker, await persistNativeHookClaimJournal(ancestorPrecondition.controlledRoot, {
                 canonicalPath: artifact.path,
                 claimPath,
                 before: artifact.before.bytes,
                 after: null,
-            });
+            }, tracker));
         }
         await rename(artifact.path, claimPath);
         if (journaledClaim)
-            await syncNativeHookClaimParent(claimPath);
+            await syncNativeHookClaimParent(claimPath, tracker);
         const entry = {
             artifact,
             appliedSnapshot: { bytes: null, topology: { kind: "absent" } },
@@ -849,11 +914,11 @@ async function applyNativeHookTransactionArtifact(artifact, ancestorPrecondition
         catch (error) {
             try {
                 const claimed = await captureNativeHookTransactionArtifact(claimPath, `${artifact.label} removal claim`);
-                await restoreNativeHookClaim(claimPath, artifact.path);
+                await restoreNativeHookClaim(claimPath, artifact.path, tracker);
                 if (journaledClaim)
-                    await syncNativeHookClaimParent(artifact.path);
+                    await syncNativeHookClaimParent(artifact.path, tracker);
                 if (journaledClaim) {
-                    await clearNativeHookClaimJournal(ancestorPrecondition.controlledRoot);
+                    await clearNativeHookClaimJournal(ancestorPrecondition.controlledRoot, tracker);
                 }
                 await assertNativeHookTransactionArtifactSnapshot(artifact.path, artifact.label, claimed, "precondition");
                 const entryIndex = applied.indexOf(entry);
@@ -867,9 +932,9 @@ async function applyNativeHookTransactionArtifact(artifact, ancestorPrecondition
         }
         await rm(claimPath);
         if (journaledClaim)
-            await syncNativeHookClaimParent(claimPath);
+            await syncNativeHookClaimParent(claimPath, tracker);
         if (journaledClaim) {
-            await clearNativeHookClaimJournal(ancestorPrecondition.controlledRoot);
+            await clearNativeHookClaimJournal(ancestorPrecondition.controlledRoot, tracker);
         }
         originalRemoved = true;
         injectNativeHookTransactionFailure("after_remove", artifact);
@@ -890,7 +955,7 @@ async function applyNativeHookTransactionArtifact(artifact, ancestorPrecondition
                 }
                 catch (claimError) {
                     try {
-                        await restoreNativeHookClaim(claimPath, stagedDeletionPath);
+                        await restoreNativeHookClaim(claimPath, stagedDeletionPath, tracker);
                     }
                     catch (recoveryError) {
                         throw new Error(`Native hook transaction staged deletion cleanup claim failed (${claimError instanceof Error ? claimError.message : String(claimError)}) and preserved ${claimPath} for manual recovery: ${recoveryError instanceof Error ? recoveryError.message : String(recoveryError)}`);
@@ -928,7 +993,7 @@ async function verifyNativeHookTransactionArtifact(applied) {
     if (artifact.kind === "config")
         TOML.parse(content);
 }
-async function restoreNativeHookTransactionArtifact(applied, ancestorPrecondition, assertRollbackState) {
+async function restoreNativeHookTransactionArtifact(applied, ancestorPrecondition, tracker, assertRollbackState) {
     const { artifact } = applied;
     const current = await captureNativeHookTransactionArtifact(artifact.path, artifact.label);
     if (!nativeHookTransactionSnapshotsEqual(current, applied.appliedSnapshot)) {
@@ -950,7 +1015,7 @@ async function restoreNativeHookTransactionArtifact(applied, ancestorPreconditio
         catch (error) {
             try {
                 const claimed = await captureNativeHookTransactionArtifact(claimPath, `${artifact.label} rollback removal claim`);
-                await restoreNativeHookClaim(claimPath, artifact.path);
+                await restoreNativeHookClaim(claimPath, artifact.path, tracker);
                 await assertNativeHookTransactionArtifactSnapshot(artifact.path, artifact.label, claimed, "rollback");
             }
             catch (recoveryError) {
@@ -966,7 +1031,7 @@ async function restoreNativeHookTransactionArtifact(applied, ancestorPreconditio
             after: artifact.before.bytes,
             afterTopology: artifact.before.topology,
         };
-        await atomicWriteNativeHookTransactionArtifact(restoreArtifact, artifact.before.bytes, "rollback", applied.appliedSnapshot, ancestorPrecondition, (restoredSnapshot) => {
+        await atomicWriteNativeHookTransactionArtifact(restoreArtifact, artifact.before.bytes, "rollback", applied.appliedSnapshot, ancestorPrecondition, tracker, (restoredSnapshot) => {
             applied.appliedSnapshot = restoredSnapshot;
         }, (stabilizedSnapshot) => {
             applied.appliedSnapshot = stabilizedSnapshot;
@@ -980,7 +1045,7 @@ async function restoreNativeHookTransactionArtifact(applied, ancestorPreconditio
         throw new Error(`Native hook transaction rollback preserved ${artifact.path} for manual recovery because ${artifact.label} no longer matches the expected restored version.`);
     }
 }
-async function cleanupNativeHookTransactionStagedDeletions(applied, ancestorPrecondition, preconditions, rollbackApplied) {
+async function cleanupNativeHookTransactionStagedDeletions(applied, ancestorPrecondition, tracker, preconditions, rollbackApplied) {
     for (const entry of applied) {
         if (!entry.stagedDeletionPath ||
             !entry.stagedDeletionSnapshot ||
@@ -1006,7 +1071,7 @@ async function cleanupNativeHookTransactionStagedDeletions(applied, ancestorPrec
         }
         catch (error) {
             try {
-                await restoreNativeHookClaim(claimPath, stagedDeletionPath);
+                await restoreNativeHookClaim(claimPath, stagedDeletionPath, tracker);
             }
             catch (recoveryError) {
                 throw new Error(`Native hook transaction staged deletion cleanup claim failed (${error instanceof Error ? error.message : String(error)}) and preserved ${claimPath} for manual recovery: ${recoveryError instanceof Error ? recoveryError.message : String(recoveryError)}`);
@@ -1027,7 +1092,7 @@ function nativeHookTransactionBackupPath(artifactPath, backupContext) {
         : relativePath;
     return join(backupContext.backupRoot, safeRelativePath);
 }
-async function ensureSnapshotBackup(artifact, backupContext, options) {
+async function ensureSnapshotBackup(artifact, backupContext, options, tracker) {
     const bytes = artifact.before.bytes;
     if (bytes === null)
         return false;
@@ -1061,7 +1126,7 @@ async function ensureSnapshotBackup(artifact, backupContext, options) {
         const handle = await open(backupPath, "wx", 0o600);
         try {
             await handle.writeFile(bytes);
-            await handle.sync();
+            recordRegularFileSyncOutcome(tracker, await syncNativeHookRegularFile(handle));
         }
         finally {
             await handle.close();
@@ -1080,7 +1145,7 @@ async function ensureSnapshotBackup(artifact, backupContext, options) {
     }
     return true;
 }
-async function commitNativeHookTransaction(artifacts, preconditions, ancestorPrecondition, backupContext, summary, options) {
+async function commitNativeHookTransaction(artifacts, preconditions, ancestorPrecondition, backupContext, tracker, summary, options) {
     if (options.dryRun)
         return;
     await assertNativeHookTransactionAncestorPrecondition(ancestorPrecondition);
@@ -1092,7 +1157,7 @@ async function commitNativeHookTransaction(artifacts, preconditions, ancestorPre
         return;
     for (const artifact of artifacts) {
         injectNativeHookTransactionFailure("before_backup", artifact);
-        if (await ensureSnapshotBackup(artifact, backupContext, options)) {
+        if (await ensureSnapshotBackup(artifact, backupContext, options, tracker)) {
             summary.backedUp += 1;
         }
     }
@@ -1104,7 +1169,7 @@ async function commitNativeHookTransaction(artifacts, preconditions, ancestorPre
         for (const artifact of artifacts) {
             await assertUnmutatedNativeHookTransactionPreconditions(preconditions, applied);
             await assertAppliedNativeHookTransactionSnapshots(applied);
-            const entry = await applyNativeHookTransactionArtifact(artifact, ancestorPrecondition, applied);
+            const entry = await applyNativeHookTransactionArtifact(artifact, ancestorPrecondition, tracker, applied);
             await verifyNativeHookTransactionArtifact(entry);
             await assertUnmutatedNativeHookTransactionPreconditions(preconditions, applied);
             await assertAppliedNativeHookTransactionSnapshots(applied);
@@ -1112,7 +1177,7 @@ async function commitNativeHookTransaction(artifacts, preconditions, ancestorPre
         await assertUnmutatedNativeHookTransactionPreconditions(preconditions, applied);
         await assertAppliedNativeHookTransactionSnapshots(applied);
         stagedCleanupStarted = true;
-        await cleanupNativeHookTransactionStagedDeletions(applied, ancestorPrecondition, preconditions);
+        await cleanupNativeHookTransactionStagedDeletions(applied, ancestorPrecondition, tracker, preconditions);
         injectNativeHookTransactionFailure("after_staged_cleanup", artifacts[artifacts.length - 1]);
         await assertUnmutatedNativeHookTransactionPreconditions(preconditions, applied);
         await assertNativeHookTransactionAncestorPrecondition(ancestorPrecondition);
@@ -1135,7 +1200,7 @@ async function commitNativeHookTransaction(artifacts, preconditions, ancestorPre
             for (const entry of [...applied].reverse()) {
                 try {
                     await assertNativeHookTransactionRollbackState(applied);
-                    await restoreNativeHookTransactionArtifact(entry, ancestorPrecondition, () => assertNativeHookTransactionRollbackState(applied));
+                    await restoreNativeHookTransactionArtifact(entry, ancestorPrecondition, tracker, () => assertNativeHookTransactionRollbackState(applied));
                     restored.push(entry);
                     await assertNativeHookTransactionRollbackState(applied);
                 }
@@ -1147,7 +1212,7 @@ async function commitNativeHookTransaction(artifacts, preconditions, ancestorPre
         if (rollbackFailures.length === 0) {
             try {
                 await assertNativeHookTransactionRollbackState(applied);
-                await cleanupNativeHookTransactionStagedDeletions(restored, ancestorPrecondition, undefined, applied);
+                await cleanupNativeHookTransactionStagedDeletions(restored, ancestorPrecondition, tracker, undefined, applied);
                 await assertNativeHookTransactionRollbackState(applied);
             }
             catch (cleanupError) {
@@ -2391,7 +2456,12 @@ export async function setup(options = {}) {
         process.env[SKIP_NATIVE_AGENT_REFRESH_ENV] === "1";
     const scopeDirs = resolveScopeDirectories(resolvedScope.scope, projectRoot);
     if (!dryRun) {
-        await recoverNativeHookClaimJournal(scopeDirs.codexHomeDir);
+        const recoveryTracker = { degraded: false };
+        const recovery = await recoverNativeHookClaimJournal(scopeDirs.codexHomeDir, nativeHookClaimJournalDurability(recoveryTracker));
+        recordRegularFileSyncOutcome(recoveryTracker, recovery.outcome);
+        if (recovery.recovered) {
+            emitDegradedDurabilityWarning("native-hook claim-journal recovery", recoveryTracker);
+        }
     }
     const nativeHookTransactionPlatform = nativeHookPlatform();
     let nativeHookTransactionAncestorPrecondition = await captureNativeHookTransactionAncestorPrecondition(scopeDirs.codexHomeDir, [
@@ -3078,7 +3148,9 @@ export async function setup(options = {}) {
     setupLatePhaseFailureInjector?.();
     nativeHookTransactionAncestorPrecondition =
         await captureNativeHookTransactionAncestorPrecondition(scopeDirs.codexHomeDir, nativeHookSetupTransaction.artifacts.map((artifact) => artifact.path));
-    await commitNativeHookTransaction(nativeHookSetupTransaction.artifacts, nativeHookSetupTransaction.preconditions, nativeHookTransactionAncestorPrecondition, backupContext, summary.config, { dryRun, verbose });
+    const nativeHookSetupDurabilityTracker = { degraded: false };
+    await commitNativeHookTransaction(nativeHookSetupTransaction.artifacts, nativeHookSetupTransaction.preconditions, nativeHookTransactionAncestorPrecondition, backupContext, nativeHookSetupDurabilityTracker, summary.config, { dryRun, verbose });
+    emitDegradedDurabilityWarning("native-hook setup", nativeHookSetupDurabilityTracker);
     console.log('Setup complete! Run "omx doctor" to verify installation.');
     console.log("\nNext steps:");
     console.log("  1. Start Codex CLI in your project directory");