feat(installer): manage owner [tui] status line in system configs

install_system_codex.sh now manages status_line (model with reasoning,
context remainder, five-hour/weekly rate-limit remainder, git branch,
working directory) and status_line_use_colors in config.toml and both
rldyour-yolo/rldyour-safe profile layers while preserving other user
[tui] keys, including inline and root-dotted forms. Covered by new
unit tests and recorded in the surface adoption matrix.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: rldyourmnd

README.md

@@ -134,7 +134,7 @@ Run the full bootstrap smoke flow on a new or resynced machine:
 scripts/bootstrap_check.sh --apply
 ```
 
-The installer writes `~/.codex/AGENTS.md`, managed `~/.codex/agents/*.toml` subagent role configs, installs managed Codex execpolicy rules from `system/rules/*.rules`, registers this marketplace, enables the approved plugins, configures the approved MCP servers, enables Codex hooks and multi-agent support, writes the official Codex config schema hint, applies the owner-standard full-auto permission defaults unless `--safe-mode` is supplied, writes `~/.codex/rldyour-yolo.config.toml` and `~/.codex/rldyour-safe.config.toml` profile layers for current Codex `--profile` semantics, sets the maintainer-selected parent and subagent model defaults, writes approved MCP tool overrides, and synchronizes the versioned local plugin cache at `~/.codex/plugins/cache/rldyour-codex/<plugin>/<version>`. Existing `~/.codex/AGENTS.md`, managed subagent configs, managed rule files, `~/.codex/config.toml`, and managed profile files are backed up before write operations. Credentials and OAuth tokens are never written by this repository.
+The installer writes `~/.codex/AGENTS.md`, managed `~/.codex/agents/*.toml` subagent role configs, installs managed Codex execpolicy rules from `system/rules/*.rules`, registers this marketplace, enables the approved plugins, configures the approved MCP servers, enables Codex hooks and multi-agent support, writes the official Codex config schema hint, applies the owner-standard full-auto permission defaults unless `--safe-mode` is supplied, writes `~/.codex/rldyour-yolo.config.toml` and `~/.codex/rldyour-safe.config.toml` profile layers for current Codex `--profile` semantics, sets the maintainer-selected parent and subagent model defaults, writes approved MCP tool overrides, manages the owner `[tui]` status line (`status_line` with model, context remainder, five-hour/weekly rate-limit remainder, git branch, and working directory plus `status_line_use_colors`) in the main config and both profile layers while preserving other user `[tui]` keys, and synchronizes the versioned local plugin cache at `~/.codex/plugins/cache/rldyour-codex/<plugin>/<version>`. Existing `~/.codex/AGENTS.md`, managed subagent configs, managed rule files, `~/.codex/config.toml`, and managed profile files are backed up before write operations. Credentials and OAuth tokens are never written by this repository.
 
 The Codex adapter contract lives in `config/rldyour-contract.json` and is documented in `docs/contract-matrix.md`. It records the intended Codex surface: 9 plugins, 41 skills, no slash commands by design, 8 managed subagents, command-only plugin hook lifecycle mappings, versioned plugin cache layout, and the owner-standard full-auto profile boundary. Validate it with `python3 scripts/validate_contract.py`.
 

references/codex-surface-adoption.md

@@ -12,6 +12,7 @@ Source of truth:
 | Surface | Introduced | Decision | Implementation | Validator |
 | --- | --- | --- | --- | --- |
 | Codex CLI runtime baseline | 0.138.0 | Adopted | Root contract and adapter runtime pins require `@openai/codex` / `codex-cli` `0.138.0`; local installed runtime must report `codex-cli 0.138.0`. | `python3 scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
+| `[tui].status_line` owner status line | 0.119.0 | Adopted | `scripts/install_system_codex.sh` manages `status_line = ["model-with-reasoning", "context-remaining", "five-hour-limit", "weekly-limit", "git-branch", "current-dir"]` and `status_line_use_colors = true` in `config.toml` and both `rldyour-yolo`/`rldyour-safe` profile configs so every session footer shows model, context remainder, and five-hour/weekly rate-limit remainder. Only these two keys are managed; other user `[tui]` keys are preserved. | `tests/unit/test_install_system_codex_tui_status_line.py` |
 | `/app` desktop handoff and Windows workspace launch | 0.138.0 | Operational | Treat as runtime capability. Repository config does not hard-code Desktop handoff state, but installed-runtime smoke may rely on the `codex` binary being at the 0.138.0 baseline before diagnosing app/server integration behavior. | `scripts/doctor_system_codex.sh --quick --strict-runtime` |
 | Local image file paths exposed to the model | 0.138.0 | Capability-dependent | Local image attachment and generated-image path exposure is runtime behavior. Do not add repository claims about availability unless installed-runtime checks prove the active account/session supports the capability. | n/a |
 | Plugin command JSON and richer plugin metadata | 0.138.0 | Operational | 0.138.0 documents richer plugin JSON surfaces. The adapter already treats JSON plugin inventory as installed-runtime evidence and keeps static validators from inventing runtime plugin state. | root `scripts/ry_repair_sync.py --plan --apply-system --json` |

scripts/install_system_codex.sh

@@ -445,10 +445,14 @@ out: list[str] = [
 skip_managed = False
 in_features = False
 in_memories = False
+in_tui = False
 features_table_seen = False
+tui_table_seen = False
 feature_dotted_lines: list[str] = []
+tui_preserved_lines: list[str] = []
 hooks_written = False
 multi_agent_written = False
+tui_managed_written = False
 memories_external_context_written = "disable_on_external_context" in existing_memories
 current_header: str | None = None
 managed_feature_keys = {
@@ -461,6 +465,15 @@ managed_feature_keys = {
     "web_search_cached",
     "web_search_request",
 }
+# Owner-standard TUI status line (Codex CLI 0.119.0+ [tui].status_line):
+# model + reasoning, context left, five-hour/weekly rate-limit remainder,
+# git branch, and working directory. Only these two keys are managed; any
+# other user [tui] keys (notifications, animations, terminal_title) survive.
+managed_tui_keys = {"status_line", "status_line_use_colors"}
+managed_tui_lines = [
+    'status_line = ["model-with-reasoning", "context-remaining", "five-hour-limit", "weekly-limit", "git-branch", "current-dir"]',
+    "status_line_use_colors = true",
+]
 legacy_hook_feature_keys = {"codex_hooks"}
 deprecated_root_keys = {
     "background_terminal_timeout",
@@ -581,6 +594,20 @@ def append_features_block() -> None:
     append_managed_features()
 
 
+def append_managed_tui() -> None:
+    global tui_managed_written
+    if not tui_managed_written:
+        out.extend(managed_tui_lines)
+        tui_managed_written = True
+
+
+def append_tui_block() -> None:
+    add_blank()
+    out.append("[tui]")
+    out.extend(tui_preserved_lines)
+    append_managed_tui()
+
+
 def is_rldyour_plugin_header(header_path: list[str]) -> bool:
     return (
         len(header_path) == 2
@@ -632,18 +659,24 @@ for raw_line in existing.splitlines():
     if match:
         if in_features:
             append_managed_features()
+        if in_tui:
+            append_managed_tui()
         header = match.group(1)
         header_path = split_toml_key(header)
         if is_managed_header(header, header_path) or is_rldyour_plugin_header(header_path):
             skip_managed = True
             in_features = False
             in_memories = False
+            in_tui = False
             continue
         skip_managed = False
         in_features = header_path == ["features"]
         in_memories = header_path == ["memories"]
+        in_tui = header_path == ["tui"]
         if in_features:
             features_table_seen = True
+        if in_tui:
+            tui_table_seen = True
         current_header = header
         out.append(raw_line)
         continue
@@ -703,6 +736,24 @@ for raw_line in existing.splitlines():
                 continue
             feature_dotted_lines.append(f"{toml_key(feature_key)} = {key_info[1]}")
             continue
+        if len(key_path) == 1 and key_path[0] == "tui":
+            try:
+                inline_tui = tomllib.loads(raw_line).get("tui") or {}
+            except Exception:
+                inline_tui = {}
+            if not isinstance(inline_tui, dict):
+                continue
+            for tui_key, tui_value in inline_tui.items():
+                if tui_key in managed_tui_keys:
+                    continue
+                tui_preserved_lines.append(f"{toml_key(str(tui_key))} = {toml_value(tui_value)}")
+            continue
+        if len(key_path) >= 2 and key_path[0] == "tui":
+            if key_path[1] in managed_tui_keys:
+                continue
+            tui_subkey = ".".join(toml_key(segment) for segment in key_path[1:])
+            tui_preserved_lines.append(f"{tui_subkey} = {key_info[1]}")
+            continue
         if (
             len(key_path) == 2
             and key_path[0] == "memories"
@@ -740,6 +791,12 @@ for raw_line in existing.splitlines():
                 multi_agent_written = True
             continue
 
+    if in_tui:
+        key_info = assignment_key_path(raw_line)
+        key_path = key_info[0] if key_info else []
+        if key_path and key_path[0] in managed_tui_keys:
+            continue
+
     if in_memories:
         key_info = assignment_key_path(raw_line)
         key_path = key_info[0] if key_info else []
@@ -756,13 +813,18 @@ for raw_line in existing.splitlines():
 
 if in_features:
     append_managed_features()
+if in_tui:
+    append_managed_tui()
 
 while out and out[-1] == "":
     out.pop()
 
 if not features_table_seen:
     append_features_block()
 
+if not tui_table_seen:
+    append_tui_block()
+
 add_blank()
 out.extend([
     "[marketplaces.rldyour-codex]",
@@ -837,6 +899,9 @@ def profile_config_text(*, yolo: bool) -> str:
         f"model_reasoning_effort = {json.dumps(managed_reasoning_effort)}",
         "suppress_unstable_features_warning = true",
         "",
+        "[tui]",
+        *managed_tui_lines,
+        "",
     ])
     return "\n".join(lines)
 

tests/unit/test_install_system_codex_tui_status_line.py

@@ -0,0 +1,111 @@
+from __future__ import annotations
+
+import subprocess
+import tomllib
+from pathlib import Path
+
+
+ROOT = Path(__file__).resolve().parents[2]
+DEFAULT_TIMEOUT = 60
+
+MANAGED_STATUS_LINE = [
+    "model-with-reasoning",
+    "context-remaining",
+    "five-hour-limit",
+    "weekly-limit",
+    "git-branch",
+    "current-dir",
+]
+
+
+def run_installer(codex_home: Path) -> None:
+    subprocess.run(
+        ["bash", "scripts/install_system_codex.sh", "--apply", "--codex-home", str(codex_home)],
+        cwd=ROOT,
+        check=True,
+        text=True,
+        capture_output=True,
+        timeout=DEFAULT_TIMEOUT,
+    )
+
+
+def load_toml(path: Path) -> dict:
+    return tomllib.loads(path.read_text(encoding="utf-8"))
+
+
+def assert_managed_tui(data: dict) -> None:
+    tui = data.get("tui")
+    assert isinstance(tui, dict), data
+    assert tui.get("status_line") == MANAGED_STATUS_LINE, tui
+    assert tui.get("status_line_use_colors") is True, tui
+
+
+def test_fresh_install_writes_managed_tui_status_line(tmp_path: Path) -> None:
+    codex_home = tmp_path / "fresh"
+    codex_home.mkdir()
+
+    run_installer(codex_home)
+
+    assert_managed_tui(load_toml(codex_home / "config.toml"))
+    assert_managed_tui(load_toml(codex_home / "rldyour-yolo.config.toml"))
+    assert_managed_tui(load_toml(codex_home / "rldyour-safe.config.toml"))
+
+
+def test_existing_tui_keys_preserved_and_status_line_managed(tmp_path: Path) -> None:
+    codex_home = tmp_path / "keep"
+    codex_home.mkdir()
+    (codex_home / "config.toml").write_text(
+        "\n".join(
+            [
+                "[tui]",
+                "notifications = true",
+                'status_line = ["model"]',
+                "animations = false",
+                "",
+                "[tui.extra]",
+                "custom = 1",
+                "",
+            ]
+        ),
+        encoding="utf-8",
+    )
+
+    run_installer(codex_home)
+
+    data = load_toml(codex_home / "config.toml")
+    assert_managed_tui(data)
+    assert data["tui"]["notifications"] is True
+    assert data["tui"]["animations"] is False
+    assert data["tui"]["extra"] == {"custom": 1}
+
+
+def test_root_dotted_tui_keys_migrate_into_managed_table(tmp_path: Path) -> None:
+    codex_home = tmp_path / "dotted"
+    codex_home.mkdir()
+    (codex_home / "config.toml").write_text(
+        'tui.notifications = true\ntui.status_line = ["model"]\n',
+        encoding="utf-8",
+    )
+
+    run_installer(codex_home)
+
+    data = load_toml(codex_home / "config.toml")
+    assert_managed_tui(data)
+    assert data["tui"]["notifications"] is True
+
+
+def test_reinstall_is_idempotent_for_tui(tmp_path: Path) -> None:
+    # Full-file equality is not asserted because the post-install hook trust
+    # refresh may append [hooks.state] through a live codex app-server.
+    codex_home = tmp_path / "idem"
+    codex_home.mkdir()
+
+    run_installer(codex_home)
+    first = load_toml(codex_home / "config.toml")
+    run_installer(codex_home)
+    second_text = (codex_home / "config.toml").read_text(encoding="utf-8")
+    second = tomllib.loads(second_text)
+
+    assert first["tui"] == second["tui"]
+    assert_managed_tui(second)
+    assert second_text.count("status_line =") == 1