pennyrouter 0.3.5 → 0.3.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pennyrouter",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "description": "Install and manage PennyRouter local coding-agent integrations.",
   "homepage": "https://pennyrouter.com",
   "bugs": {

package/src/harnesses/codex.js

@@ -37,6 +37,7 @@ export const codexHarness = {
       apiKey,
       gatewayBaseUrl,
       subscriptionAuth,
+      surface: "codex-terminal",
     });
 
     await atomicWrite(CONFIG_PATH, next);
@@ -98,7 +99,10 @@ export async function detectCodexChatgptAuth() {
  * x-pennyrouter-key header authenticates the account to our gateway. In Penny-only mode
  * the pr- key is the provider bearer, matching the isolated probe's existing behavior.
  */
-export function renderCodexConfig(text, { apiKey, gatewayBaseUrl, subscriptionAuth }) {
+export function renderCodexConfig(
+  text,
+  { apiKey, gatewayBaseUrl, subscriptionAuth, surface = "codex-terminal" },
+) {
   const clean = removeManagedCodexConfig(text, { removeRootProvider: true }).trimEnd();
   if (new RegExp(`^\\s*\\[model_providers\\.${escapeRegex(PROVIDER_ID)}\\]\\s*$`, "m").test(clean)) {
     throw new Error(
@@ -111,9 +115,12 @@ export function renderCodexConfig(text, { apiKey, gatewayBaseUrl, subscriptionAu
   const authLines = subscriptionAuth
     ? [
         "requires_openai_auth = true",
-        `http_headers = { "x-pennyrouter-key" = ${escapedKey} }`,
+        `http_headers = { "x-pennyrouter-key" = ${escapedKey}, "x-pennyrouter-harness" = "codex", "x-pennyrouter-surface" = ${tomlString(surface)} }`,
       ]
-    : [`experimental_bearer_token = ${escapedKey}`];
+    : [
+        `experimental_bearer_token = ${escapedKey}`,
+        `http_headers = { "x-pennyrouter-harness" = "codex", "x-pennyrouter-surface" = ${tomlString(surface)} }`,
+      ];
   const block = [
     MANAGED_START,
     `model_provider = "${PROVIDER_ID}"`,

package/src/harnesses/codex.test.js

@@ -29,7 +29,9 @@ function testSubscriptionProviderIsRootSafe() {
   assert.ok(next.includes('[model_providers.pennyrouter]'));
   assert.ok(next.includes('base_url = "http://localhost:8400/v1"'));
   assert.ok(next.includes("requires_openai_auth = true"));
-  assert.ok(next.includes('http_headers = { "x-pennyrouter-key" = "pr-test-secret" }'));
+  assert.ok(next.includes('"x-pennyrouter-key" = "pr-test-secret"'));
+  assert.ok(next.includes('"x-pennyrouter-harness" = "codex"'));
+  assert.ok(next.includes('"x-pennyrouter-surface" = "codex-terminal"'));
   assert.ok(!next.includes("experimental_bearer_token"));
   assert.equal((next.match(/# --- PennyRouter managed Codex provider ---/g) || []).length, 1);
 }
@@ -51,6 +53,7 @@ function testLegacyMigrationAndIdempotence() {
   assert.ok(!once.includes("openai_base_url"));
   assert.ok(!once.includes("openai_api_key"));
   assert.ok(once.includes('experimental_bearer_token = "pr-new"'));
+  assert.ok(once.includes('"x-pennyrouter-surface" = "codex-terminal"'));
   assert.ok(!once.includes("requires_openai_auth"));
 }
 

package/src/launch.js

@@ -295,11 +295,11 @@ export function renderCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth }) {
   const authLines = subscriptionAuth
     ? [
         "requires_openai_auth = true",
-        'env_http_headers = { "x-pennyrouter-key" = "PENNYROUTER_API_KEY", "x-pennyrouter-title-session" = "PENNYROUTER_TITLE_SESSION_ID", "x-pennyrouter-harness" = "codex" }',
+        'env_http_headers = { "x-pennyrouter-key" = "PENNYROUTER_API_KEY", "x-pennyrouter-title-session" = "PENNYROUTER_TITLE_SESSION_ID", "x-pennyrouter-harness" = "codex", "x-pennyrouter-surface" = "codex-terminal" }',
       ]
     : [
         'env_key = "PENNYROUTER_API_KEY"',
-        'http_headers = { "x-pennyrouter-title-session" = "PENNYROUTER_TITLE_SESSION_ID", "x-pennyrouter-harness" = "codex" }',
+        'http_headers = { "x-pennyrouter-title-session" = "PENNYROUTER_TITLE_SESSION_ID", "x-pennyrouter-harness" = "codex", "x-pennyrouter-surface" = "codex-terminal" }',
       ];
   return [
     CODEX_PROFILE_MARKER,
@@ -545,6 +545,7 @@ export async function createCodexDesktopHome({ config, realHome }) {
       apiKey: config.api_key,
       gatewayBaseUrl: config.gateway_base_url,
       subscriptionAuth: Boolean(config.harnesses?.codex?.subscription_auth),
+      surface: "codex-desktop",
     }));
     await privateWrite(join(overlay, "config.toml"), desktopConfig);
     return overlay;
@@ -971,7 +972,9 @@ export async function runPenny(argv = process.argv.slice(2)) {
     stdio: "inherit",
     shell: process.platform === "win32",
   });
-  const stopTerminalTitle = ["claude", "codex", "opencode"].includes(harness)
+  // Claude Code owns its own terminal title updates while a turn is running. Do not
+  // compete with it from the parent process; Codex and OpenCode remain Penny-owned.
+  const stopTerminalTitle = ["codex", "opencode"].includes(harness)
     ? startPennyTerminalTitle({
         gatewayBaseUrl: config.gateway_base_url,
         apiKey: config.api_key,
@@ -1019,7 +1022,10 @@ async function runCodexDesktop(config, { logs = false, mode = "gateway" } = {})
   }
   if (mode === "native") {
     const child = spawn(codexDesktopExecutable(), [], {
-      cwd: process.cwd(),
+      // Desktop launches must not inherit a project directory. When PennyRouter itself is
+      // started from ~/Documents, that makes macOS attribute Codex's access to Documents to
+      // PennyRouter and trigger a protected-folder prompt.
+      cwd: homeDir(),
       env: process.env,
       stdio: logs ? "inherit" : "ignore",
       detached: !logs,
@@ -1042,7 +1048,8 @@ async function runCodexDesktop(config, { logs = false, mode = "gateway" } = {})
       "__codex-desktop-supervisor",
       overlay,
     ], {
-      cwd: process.cwd(),
+      // Keep the detached supervisor out of the caller's protected project directory too.
+      cwd: homeDir(),
       env: process.env,
       stdio: "ignore",
       detached: true,
@@ -1057,7 +1064,7 @@ async function runCodexDesktop(config, { logs = false, mode = "gateway" } = {})
 
 export async function runCodexDesktopSupervisor(overlay) {
   const child = spawn(codexDesktopExecutable(), [], {
-    cwd: process.cwd(),
+    cwd: homeDir(),
     env: { ...process.env, CODEX_HOME: overlay },
     stdio: "inherit",
     shell: process.platform === "win32",

package/src/launch.test.js

@@ -179,7 +179,8 @@ async function main() {
     const desktopConfig = fs.readFileSync(path.join(desktopHome, "config.toml"), "utf8");
     assert.match(desktopConfig, /^model_provider = "pennyrouter"/);
     assert.match(desktopConfig, /\[model_providers\.pennyrouter\]/);
-    assert.match(desktopConfig, /http_headers = \{ "x-pennyrouter-key" = "pr-super-secret" \}/);
+    assert.match(desktopConfig, /"x-pennyrouter-key" = "pr-super-secret"/);
+    assert.match(desktopConfig, /"x-pennyrouter-surface" = "codex-desktop"/);
     assert.equal(fs.readFileSync(path.join(home, ".codex", "config.toml"), "utf8"), nativeCodex);
     fs.rmSync(desktopHome, { recursive: true, force: true });
     const codexProfile = fs.readFileSync(codexLaunchProfilePath(), "utf8");
@@ -187,6 +188,7 @@ async function main() {
     assert.ok(codexProfile.includes("[tui]\nterminal_title = []"));
     assert.ok(codexProfile.includes('"x-pennyrouter-title-session" = "PENNYROUTER_TITLE_SESSION_ID"'));
     assert.ok(codexProfile.includes('"x-pennyrouter-harness" = "codex"'));
+    assert.ok(codexProfile.includes('"x-pennyrouter-surface" = "codex-terminal"'));
     assert.ok(!codexProfile.includes("pr-super-secret"));
     assert.ok(!rc.includes("pr-super-secret"));