Fix macOS proxy autostart durability

Author: gaoguobin

README.md

@@ -193,9 +193,10 @@ Default paths:
 
 - `install --start` starts the local proxy first, health-checks it, then switches Codex config.
 - Enable also sets `features.codex_hooks = true` and adds one user-level `SessionStart` hook. The
-  hook calls `codex-fast-proxy autostart --quiet`, starts or refreshes the proxy only when Codex
-  config still points to the recorded local proxy, and otherwise exits quietly. Codex may run this
-  hook for each new or resumed session; normal no-op checks do not write autostart log entries.
+  hook uses the current Python executable to run `codex_fast_proxy autostart --quiet`, starts or
+  refreshes the proxy only when Codex config still points to the recorded local proxy, and otherwise
+  exits quietly. Codex may run this hook for each new or resumed session; normal no-op checks do not
+  write autostart log entries.
 - Plain `install` refuses to switch config without a running proxy.
 - If startup or config switching fails, the manager restores the backed-up config.
 - Running Codex processes do not hot-switch provider config. Restart Codex App and return to the
@@ -366,8 +367,9 @@ Fetch and follow instructions from https://raw.githubusercontent.com/gaoguobin/c
 - dashboard 只读取最近一次 benchmark 的脱敏摘要，不提供会消耗 quota 的启动按钮。
 - 浏览器打开 `http://127.0.0.1:8787/v1` 时显示只读本地状态页；API 请求仍按原逻辑转发。
 - provider 通用：自动读取当前 active provider 的原始 `base_url` 作为 upstream。
-- 启用后写入 Codex `SessionStart` hook；后续 Codex App/CLI 新建或恢复会话时，如果配置仍指向本地
-  proxy，会自动启动或刷新代理。用户手动改回直连时 hook 会静默跳过，正常 no-op 不写日志。
+- 启用后写入 Codex `SessionStart` hook；hook 使用当前 Python 可执行文件运行 autostart。后续 Codex
+  App/CLI 新建或恢复会话时，如果配置仍指向本地 proxy，会自动启动或刷新代理。用户手动改回直连时
+  hook 会静默跳过，正常 no-op 不写日志。
 
 ### 回滚保护
 

skills/codex-fast-proxy/SKILL.md

@@ -104,7 +104,8 @@ Use `--upstream-base <url>` only when Codex config does not contain a usable pro
 - `install --start` backs up `~/.codex/config.toml`.
 - The selected provider's original `base_url` becomes `upstream_base`.
 - The selected provider's `base_url` becomes `http://127.0.0.1:8787/v1`.
-- A `SessionStart` hook calls `python -m codex_fast_proxy autostart --quiet` on future Codex sessions.
+- A `SessionStart` hook calls the current Python executable with
+  `-m codex_fast_proxy autostart --quiet` on future Codex sessions.
 - The proxy only injects `service_tier="priority"` into `POST /v1/responses` when that field is absent.
 - `benchmark` compares synthetic Codex-style requests with no `service_tier` against
   `service_tier="priority"`. The default `codex-cli` mode is intended to measure real Codex

src/codex_fast_proxy/manager.py

@@ -356,7 +356,7 @@ def restore_hook_feature_flag(config_path: Path, backup_path: str | None, hook_r
 
 def command_for_hook(paths: ProxyPaths) -> str:
     args = [
-        "python",
+        sys.executable,
         "-m",
         "codex_fast_proxy",
         "autostart",
@@ -920,6 +920,7 @@ def launch_background(paths: ProxyPaths, settings: ProxySettings, verbose_proxy:
             stderr=stderr,
             stdin=subprocess.DEVNULL,
             creationflags=creation_flags,
+            start_new_session=(os.name != "nt"),
         )
 
     try:

tests/test_manager.py

@@ -222,6 +222,7 @@ def fake_start_background(paths, settings, verbose_proxy):
         self.assertTrue(config["features"]["codex_hooks"])
         self.assertTrue(has_startup_hook(paths))
         self.assertEqual(session_start[0]["matcher"], "startup|resume")
+        self.assertIn(sys.executable, command)
         self.assertIn("codex_fast_proxy", command)
         self.assertIn("autostart", command)
         self.assertIn("--quiet", command)
@@ -890,6 +891,45 @@ def fake_launch_background(paths, settings, verbose_proxy):
         self.assertEqual(result["reason"], "runtime_changed")
         self.assertEqual(calls, ["stop", "start"])
 
+    def test_launch_background_detaches_process_on_posix(self) -> None:
+        codex_home = self.temp_dir / ".codex"
+        paths = paths_for(codex_home)
+        settings = manager.ProxySettings(
+            provider="acme",
+            host="127.0.0.1",
+            port=18787,
+            proxy_base="/v1",
+            upstream_base="https://api.acme.test/v1",
+            service_tier="priority",
+        )
+        captured: dict[str, object] = {}
+
+        class FakeProcess:
+            pid = 1234
+
+        original_is_port_available = manager.is_port_available
+        original_wait_for_proxy_health = manager.wait_for_proxy_health
+        original_popen = manager.subprocess.Popen
+
+        def fake_popen(command, **kwargs):
+            captured["command"] = command
+            captured["kwargs"] = kwargs
+            return FakeProcess()
+
+        manager.is_port_available = lambda _host, _port: True
+        manager.wait_for_proxy_health = lambda _settings, _process: {"ok": True, "pid": _process.pid}
+        manager.subprocess.Popen = fake_popen
+        try:
+            result = manager.launch_background(paths, settings, verbose_proxy=False)
+        finally:
+            manager.is_port_available = original_is_port_available
+            manager.wait_for_proxy_health = original_wait_for_proxy_health
+            manager.subprocess.Popen = original_popen
+
+        self.assertEqual(result["status"], "started")
+        self.assertEqual(captured["command"][0], sys.executable)
+        self.assertEqual(captured["kwargs"]["start_new_session"], manager.os.name != "nt")
+
     def test_quiet_autostart_does_not_log_noop_events(self) -> None:
         codex_home = self.temp_dir / ".codex"
         paths = paths_for(codex_home)