pr head: c068ad70957398c66737fe0889b09fb8bf8f6754 main head: f58fad04162165653bf06f0c987bbfb0074a8a4b main: restored real zsh profile; app SSH connect failed: workspace-proxy command not found; no new preferred-shell probe. pr: restored profile; same app process retried real zsh; ProxyCommand reached real sshd; managed remote server and tunnel became ready. real Codex gpt-6.1-sol: created and read ssh-proof.txt; client rendered SSH_PROVIDER_OK. resolved alias after config change: localhost connected target before change: 127.0.0.1 disconnectEnvironment(alias-only target): success preferred-shell probes before/after resolve+disconnect: 5/5 proxy log for cleanup after alias changed: 2026-10-30T02:09:34Z 127.0.0.1 22 reconnect resolved localhost and opened a new managed SSH tunnel. second real Codex gpt-6.1-sol turn read persisted ssh-proof.txt and rendered SSH_RECONNECT_OK. desktop catalog persistence blocked: basic password store disables secure storage. SSH bootstrap and cleanup exercised through actual preload IPC; provider turns exercised through web client on the actual tunnel.