feat: lock in-app Updates to karlorz/codex-host

[karlorz]

Summary

• Point GitHub latest discovery, Settings update commands, and console NOTICE at karlorz/codex-host / @karlorz/codexhost-cli so in-app Updates cannot treat BytePioneer 0.13.2 as an upgrade over this fork’s hyphen versions.
• Document that hyphenated tags stay undiscoverable unless the GitHub Release is non-prerelease latest, and keep install as an explicit Update and restart.

Related issues

N/A

Test plan

• npx vitest run --config tests/vitest.config.js packages/update-manager/test/github-release.test.ts packages/console-server/test/announcement.test.ts packages/console-server/test/updates.test.ts — 34 passed
• Settings identity test in packages/renderer-extension/test/settings/pages.test.ts
• Native DMG/EXE install path not live-exercised (code review only)

[karlorz]

Opened on the wrong repository. This is a karlorz/codex-host fork-only updater identity lock and must not land on BytePioneer.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: Repository: BytePioneer-AI/codex-host/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: f6721959-a0a2-4424-ba97-29b818b9c494

📥 Commits

Reviewing files that changed from the base of the PR and between 1aa9f65 and f05f4ab.

⛔ Files ignored due to path filters: 2

• Cargo.lock is excluded by !**/*.lock
• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing: 68

• .agents/skills/codexhost-release/SKILL.md
• .agents/skills/codexhost-release/references/release-guide.md
• Cargo.toml
• README.md
• crates/platform/src/desktop_launch.rs
• crates/updater/src/install.rs
• crates/updater/src/remote.rs
• crates/updater/src/ssh.rs
• crates/updater/src/ssh/tests.rs
• docs/NOTICE.md
• docs/PRIVACY.md
• docs/architecture/harness-executable-discovery.md
• docs/index.md
• docs/operations/codexhost-console.md
• docs/operations/cpa-live-voice-desktop-hook.md
• docs/operations/fork-versioning.md
• docs/platforms/linux/linux.md
• docs/platforms/linux/linux.zh-CN.md
• docs/platforms/remote/remote-ssh-host.md
• docs/platforms/remote/remote-ssh-host.zh-CN.md
• docs/project/README.ko.md
• docs/project/README.zh-CN.md
• openspec/specs/github-release-background-update/spec.md
• package.json
• packages/console-server/src/announcement.ts
• packages/console-server/src/diagnostic-report.ts
• packages/console-server/test/announcement.test.ts
• packages/console-server/test/server.test.ts
• packages/console-server/test/updates.test.ts
• packages/desktop-control/src/cpa-live-voice-hook.ts
• packages/desktop-control/src/index.ts
• packages/desktop-control/src/production-controller.ts
• packages/desktop-control/src/renderer-cdp-control-session.ts
• packages/desktop-control/test/cpa-live-voice-hook.test.ts
• packages/desktop-control/test/production-controller.test.ts
• packages/desktop-control/test/renderer-cdp-control-session.test.ts
• packages/host-runtime/test/app-server-host.projection-1.test.ts
• packages/host-runtime/test/runtime-maintenance.test.ts
• packages/host-runtime/test/update-coordinator.test.ts
• packages/renderer-extension/scripts/build.mjs
• packages/renderer-extension/src/cpa-live-voice-entry.ts
• packages/renderer-extension/src/production-entry.ts
• packages/renderer-extension/src/renderer-cpa-live-voice-hook.ts
• packages/renderer-extension/src/renderer-cpa-live-voice-preference.ts
• packages/renderer-extension/src/settings/appearance-page.ts
• packages/renderer-extension/src/settings/connections-page.ts
• packages/renderer-extension/src/settings/localization.ts
• packages/renderer-extension/src/settings/pages.ts
• packages/renderer-extension/test/renderer-cpa-live-voice-hook.test.ts
• packages/renderer-extension/test/renderer-cpa-live-voice-preference.test.ts
• packages/renderer-extension/test/renderer-model-client.test.ts
• packages/renderer-extension/test/settings/localization.test.ts
• packages/renderer-extension/test/settings/pages.test.ts
• packages/renderer-extension/test/settings/release-notes.test.ts
• packages/shared-contracts/src/updates.ts
• packages/shared-contracts/test/updates.test.ts
• packages/update-manager/src/github-cli-release.ts
• packages/update-manager/src/github-release.ts
• packages/update-manager/test/github-release.test.ts
• scripts/release/macos/package.sh
• scripts/release/prepare-npm-meta.mjs
• scripts/release/prepare-npm.mjs
• scripts/release/prepare-payload.mjs
• scripts/release/publish-npm.mjs
• tests/release/npm-package.test.mjs
• tests/release/npm-publish.test.mjs
• tests/release/payload.test.mjs
• tests/release/production-renderer.test.mjs

+------------------------+
| I am the one who bugs. |
+------------------------+
  \
   \     /)/)
        ( '')
        /  |
      o(___)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}