fix(release): repair full-public prerequisites and CLI isolation

.github/workflows/full-public-smokes.yml

@@ -70,6 +70,9 @@ jobs:
         with:
           node-version: "24"
 
+      - name: Install the shell used by launch-agent contract checks
+        run: sudo apt-get update && sudo apt-get install -y zsh
+
       - name: Install smoke runtime dependencies
         run: python -m pip install --disable-pip-version-check "jsonschema>=4.23,<5"
 

loopx/cli.py

@@ -814,12 +814,11 @@ def main(argv: list[str] | None = None) -> int:
             output_format,
         )
 
-    native_child_result = handle_native_child_command(
-        args, registry_path, effective_runtime_root(registry_path, args.runtime_root),
-        print_payload, output_format,
-    )
-    if native_child_result is not None:
-        return native_child_result
+    if args.command == "native-child":
+        return handle_native_child_command(
+            args, registry_path, effective_runtime_root(registry_path, args.runtime_root),
+            print_payload, output_format,
+        )
 
     if args.command == "agent-directory":
         return handle_agent_directory(

loopx/cli_commands/turn.py

@@ -47,7 +47,6 @@
     inspect_loopx_turn_journal,
     selected_turn_todo,
 )
-from ..control_plane.turn_driver.host_binding import managed_executor_binding
 from ..control_plane.operator_provider import operator_provider_environ
 from ..quota import spend_quota_slot
 from ..state_refresh import refresh_state_run
@@ -67,7 +66,7 @@
     render_loopx_turn_execution_markdown as _render_loopx_turn_execution_markdown,
     render_loopx_turn_plan_markdown as _render_loopx_turn_plan_markdown,
 )
-from .turn_selection import resolve_turn_resume_session_binding
+from .turn_selection import managed_executor_cli_binding, resolve_turn_resume_session_binding
 from .turn_todo_writeback import (
     write_turn_repair_update,
     write_turn_validated_completion,
@@ -129,9 +128,7 @@ def handle_turn_command(
             goal_id=args.goal_id,
             planned_goal_ref=goal_ref,
         )
-        strict_goal_admission = (
-            goal_admission if goal_admission.enabled else None
-        )
+        strict_goal_admission = goal_admission if goal_admission.enabled else None
         # Planning and dry-run execution inspect existing admitted intents.
         # Only an executing wake may sync inboxes or reserve a calendar window.
         turn_start_hook_dispatch = {}
@@ -202,46 +199,9 @@ def handle_turn_command(
             iteration_context_policy=args.iteration_context.replace("-", "_"),
             goal_ref=goal_ref,
         )
-        # The executor readback names where this Turn's model work runs and
-        # whether that host can launch here, so a caller never has to infer it
-        # from the host id. The explicit runner hook is the one launchability
-        # fact only this command layer knows.
-        # Goal state and machine authentication have different owners. A Goal
-        # runtime override must not select a different credential store.
+        # Resolve machine authentication once for the readback and host launch.
         operator_environ = operator_provider_environ()
-        payload["managed_executor"] = managed_executor_binding(
-            args.host,
-            # The credential a managed Turn authenticates with is this
-            # machine's resolved pair, not whatever the invoking shell happens
-            # to export: the readback above the launch and the launch itself
-            # have to name the same credential.
-            environ=operator_environ,
-            dsh_runner_configured=bool(getattr(args, "dsh_runner", None)),
-            provider=(
-                getattr(args, "dsh_provider", None)
-                if args.host == "dsh"
-                else None
-            ),
-            model=(
-                getattr(args, "dsh_model", None)
-                if args.host == "dsh"
-                else getattr(args, "codex_model", None)
-                if args.host == "codex-cli"
-                else None
-            ),
-            reasoning_effort=(
-                getattr(args, "dsh_reasoning_effort", None)
-                if args.host == "dsh"
-                else getattr(args, "codex_reasoning_effort", None)
-                if args.host == "codex-cli"
-                else None
-            ),
-            max_tokens=(
-                getattr(args, "dsh_max_tokens", None)
-                if args.host == "dsh"
-                else None
-            ),
-        )
+        payload["managed_executor"] = managed_executor_cli_binding(args, environ=operator_environ)
         if (
             args.turn_command == "run-once"
             and args.execute
@@ -326,9 +286,7 @@ def handle_turn_command(
                     goal_id=args.goal_id,
                     planned_goal_ref=payload.get("goal_ref"),
                 )
-                strict_goal_admission = (
-                    goal_admission if goal_admission.enabled else None
-                )
+                strict_goal_admission = goal_admission if goal_admission.enabled else None
                 if strict_goal_admission is not None:
                     strict_goal_admission.require_current()
             if payload.get("route", {}).get("kind") == "capability_action_required":

loopx/cli_commands/turn_selection.py

@@ -1,9 +1,11 @@
 from __future__ import annotations
 
+import argparse
 from collections.abc import Mapping
 from typing import Any
 
 from ..control_plane.turn_driver import LOOPX_TURN_SESSION_BINDING_SCHEMA_VERSION
+from ..control_plane.turn_driver.host_binding import managed_executor_binding
 
 
 def resolve_turn_resume_session_binding(
@@ -79,3 +81,48 @@ def turn_controller_advisory_primary(
     ):
         raise ValueError("Turn advisory action portfolio has no bindable primary")
     return todo_id, dict(portfolio)
+
+
+def managed_executor_cli_binding(
+    args: argparse.Namespace, *, environ: Mapping[str, str],
+) -> dict[str, Any]:
+    """Adapt parsed CLI host options to the existing executor read-model owner.
+
+    The readback names where model work runs and whether the host can launch.
+    An explicit runner is a launchability fact owned by this CLI adapter.
+    Machine authentication is resolved by the caller independently of any
+    Goal runtime override and shared with the eventual host launch.
+    """
+    return managed_executor_binding(
+        args.host,
+        # The credential a managed Turn authenticates with is this
+        # machine's resolved pair, not whatever the invoking shell happens
+        # to export: the readback above the launch and the launch itself
+        # have to name the same credential.
+        environ=environ,
+        dsh_runner_configured=bool(getattr(args, "dsh_runner", None)),
+        provider=(
+            getattr(args, "dsh_provider", None)
+            if args.host == "dsh"
+            else None
+        ),
+        model=(
+            getattr(args, "dsh_model", None)
+            if args.host == "dsh"
+            else getattr(args, "codex_model", None)
+            if args.host == "codex-cli"
+            else None
+        ),
+        reasoning_effort=(
+            getattr(args, "dsh_reasoning_effort", None)
+            if args.host == "dsh"
+            else getattr(args, "codex_reasoning_effort", None)
+            if args.host == "codex-cli"
+            else None
+        ),
+        max_tokens=(
+            getattr(args, "dsh_max_tokens", None)
+            if args.host == "dsh"
+            else None
+        ),
+    )

loopx/help_surface.py

@@ -370,6 +370,7 @@
         "import-doc-registry-authority",
         "lark-inbox",
         "migrate-state",
+        "native-child",
         "ml-experiment",
         "opencode2-goal-worker",
         "operator-gate",