feat: ship enterprise control and desktop governance

tests/fixtures/codex-desktop-refresh-runtime.mjs

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+
+const chunks = [];
+for await (const chunk of process.stdin) {
+  chunks.push(typeof chunk === "string" ? chunk : chunk.toString("utf8"));
+}
+
+const payload = JSON.parse(chunks.join("") || "{}");
+process.stdout.write(
+  `${JSON.stringify({
+    status: "completed",
+    targetThreadRef: payload.targetThreadRef,
+    appName: payload.appName,
+    detail: `refresh hint accepted: ${payload.refreshMode}`,
+  })}\n`,
+);