From 65784b4388e0dfae45cb0f037ded55b9a7201122 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=86=B0=E6=9C=94?= <565183519@qq.com>
Date: Thu, 13 Aug 2026 18:47:50 +0800
Subject: [PATCH] fix(zhulan): keep SSH Match directives portable

---
 .../zhulan-remote-cell/deploy/install-codex-remote-ssh.sh        | 1 -
 server-tools/zhulan-remote-cell/tests/test_codex_remote.py       | 1 +
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/server-tools/zhulan-remote-cell/deploy/install-codex-remote-ssh.sh b/server-tools/zhulan-remote-cell/deploy/install-codex-remote-ssh.sh
index f2c2286..ca53de6 100644
--- a/server-tools/zhulan-remote-cell/deploy/install-codex-remote-ssh.sh
+++ b/server-tools/zhulan-remote-cell/deploy/install-codex-remote-ssh.sh
@@ -87,7 +87,6 @@ Match User zhulan-codex
     X11Forwarding no
     PermitTunnel no
     PermitTTY yes
-    PermitUserEnvironment no
 EOF
 chmod 0644 "$SSHD_DROPIN.tmp"
 mv "$SSHD_DROPIN.tmp" "$SSHD_DROPIN"
diff --git a/server-tools/zhulan-remote-cell/tests/test_codex_remote.py b/server-tools/zhulan-remote-cell/tests/test_codex_remote.py
index 71f1c22..ecb8c7c 100644
--- a/server-tools/zhulan-remote-cell/tests/test_codex_remote.py
+++ b/server-tools/zhulan-remote-cell/tests/test_codex_remote.py
@@ -70,6 +70,7 @@ class CodexRemoteContractTest(unittest.TestCase):
         self.assertIn('"$REMOTE_HOME/.codex/AGENTS.md"', installer)
         self.assertIn("'/.zhulan/'", installer)
         self.assertIn("AllowTcpForwarding no", installer)
+        self.assertNotIn("PermitUserEnvironment no", installer)
         self.assertIn("central_push_credentials\": false", installer)
         self.assertNotIn("NOPASSWD", installer)