fix: distinguish owned host cache namespaces from task effects

Author: rockyshi1993

scripts/lib/real-codex-host-probe.js

@@ -1009,6 +1009,7 @@ function partitionInstalledRuntimeEffects(effects, identity) {
   for (const change of effects.unexpectedChanges || []) {
     const name = change.path
     const ordinaryFile = [change.before, change.after].every(value => !value || value.type === 'file')
+    const ordinaryDirectory = [change.before, change.after].every(value => !value || value.type === 'directory')
     const createdDirectory = !change.before && change.after?.type === 'directory'
     let owned = false
     if (change.root === 'addDir') {
@@ -1020,8 +1021,15 @@ function partitionInstalledRuntimeEffects(effects, identity) {
       }
     } else if (change.root === 'globalHome') {
       owned = createdDirectory && ['.codex/devcodex/.runtime-generation-leases', leaseRoot].includes(name)
+      // The host populates and refreshes these cache namespaces independently of
+      // task commands. Preserve their diffs without enumerating plugin versions
+      // or assets; config, credentials and the installed runtime stay protected.
+      const hostCachePath = ['.codex/cache', '.codex/plugins/cache'].some(root => name === root || name.startsWith(root + '/')) &&
+        !name.split('/').some(part => part === '.' || part === '..') && !name.includes('\\')
+      if ((hostCachePath && (ordinaryFile || ordinaryDirectory)) ||
+          (createdDirectory && name === '.codex/plugins')) owned = true
       if (ordinaryFile) {
-        owned = name === '.codex/models_cache.json' ||
+        owned = owned || name === '.codex/models_cache.json' ||
           /^\.codex\/(?:state|goals|logs|memories)_[0-9]+\.sqlite(?:-shm|-wal)?$/u.test(name) ||
           /^AppData\/Local\/Microsoft\/PowerShell\/(?:ModuleAnalysisCache-[A-Fa-f0-9]+|StartupProfileData-NonInteractive)$/u.test(name) ||
           (name.startsWith(leaseRoot + '/') && /^(?:memory|profile)-mcp-[a-f0-9]{8}-[0-9]+\.json$/u.test(name.slice(leaseRoot.length + 1)))

scripts/test-real-codex-host-probe.js

@@ -701,6 +701,9 @@ async function main() {
       [effectHome, '.codex/memories_1.sqlite'],
       [effectHome, '.codex/state_5.sqlite-wal'],
       [effectHome, '.codex/models_cache.json'],
+      [effectHome, '.codex/cache/remote_plugin_catalog/catalog.json'],
+      [effectHome, '.codex/plugins/cache/market/plugin/1.2.3/.codex-plugin/plugin.json'],
+      [effectHome, '.codex/plugins/cache/market/plugin/1.2.3/assets/new-asset.txt'],
       [effectHome, '.codex/devcodex/.runtime-generation-leases/fixture-generation/memory-mcp-24efaa5d-12032.json'],
       [effectHome, 'AppData/Local/Microsoft/PowerShell/ModuleAnalysisCache-0C86AEE9'],
       [effectHome, 'AppData/Local/Microsoft/PowerShell/StartupProfileData-NonInteractive'],
@@ -740,6 +743,8 @@ async function main() {
     for (const [root, name] of [
       ['globalHome', '.codex/config.toml'], ['globalHome', '.codex/auth.json'],
       ['globalHome', '.codex/models_cache.json.backup'], ['addDir', '.codex/models_cache.json'],
+      ['globalHome', '.codex/plugins/config.toml'], ['globalHome', '.codex/plugins/cache-other/asset.txt'],
+      ['globalHome', '.codex/cache/../config.toml'], ['addDir', '.codex/plugins/cache/asset.txt'],
       ['globalHome', '.codex/devcodex/runtime-fixture-generation/mcp/memory-server.js'],
       ['globalHome', '.codex/devcodex/.runtime-generation-leases/other-generation/memory-mcp-24efaa5d-12032.json'],
       ['addDir', '.memory/hooks/another-project/lifecycle-state.json'], ['addDir', 'unexpected.txt'],
@@ -752,6 +757,8 @@ async function main() {
     assert.deepStrictEqual(partitionInstalledRuntimeEffects({ ...rawEffects, unexpectedChanges: [linkEffect] }, effectIdentity).unexpectedChanges, [linkEffect])
     const cacheLinkEffect = { ...linkEffect, path: '.codex/models_cache.json' }
     assert.deepStrictEqual(partitionInstalledRuntimeEffects({ ...rawEffects, unexpectedChanges: [cacheLinkEffect] }, effectIdentity).unexpectedChanges, [cacheLinkEffect])
+    const pluginCacheLink = { ...linkEffect, path: '.codex/plugins/cache/market/plugin/asset' }
+    assert.deepStrictEqual(partitionInstalledRuntimeEffects({ ...rawEffects, unexpectedChanges: [pluginCacheLink] }, effectIdentity).unexpectedChanges, [pluginCacheLink])
     const independentLedger = initializeAttemptLedger({ evidenceRoot, identity: effectIdentity })
     const deniedAttempt = claimAttempt(independentLedger, 'H1')
     const deniedBytes = Buffer.from(JSON.stringify(deniedReceipt) + '\n')