Windows Desktop bundled CLI doctor reports rg.exe missing even though Codex ships it

Environment

• Codex Desktop: OpenAI.Codex 26.825.5331.0
• Bundled CLI: codex-cli 0.151.0-alpha.7.1
• Windows 11 x64 (10.0.26200)
• Bundled CLI path: %LOCALAPPDATA%\OpenAI\Codex\bin\6ca77c4a9caa4eed\codex.exe

What happens

Running the Desktop-bundled CLI's redacted doctor report returns exit code 0 but warns:

runtime.search
status=warning
summary=search command could not be verified
search command=rg.exe
search command readiness=program not found
search provider=system
remediation=Install ripgrep or repair the bundled Codex package.

At the same time, doctor reports:

installation: ok, install context=other
runtime.provenance: ok, install method=other

The package is not actually missing ripgrep. The same installed Desktop build contains rg.exe at all of these locations:

%LOCALAPPDATA%\OpenAI\Codex\bin\rg.exe
%LOCALAPPDATA%\OpenAI\Codex\bin\3765dd0573e0e3e0\rg.exe
C:\Program Files\WindowsApps\OpenAI.Codex_26.825.5331.0_x64__2p2nqsd0c76g0\app\resources\rg.exe

Get-Command rg.exe does not resolve it from the ordinary process PATH, which appears to be why doctor selects search provider=system instead of the shipped resource.

Reproduction

1. Install/open Codex Desktop 26.825.5331.0 on Windows.
2. Run its bundled CLI directly:

%LOCALAPPDATA%\OpenAI\Codex\bin\6ca77c4a9caa4eed\codex.exe doctor --json

3. Inspect checks.runtime.search.
4. Search the Desktop installation for rg.exe; the files above are present.

No model/provider call is required to reproduce this.

Expected

The Desktop-bundled CLI should identify its own Desktop resource layout and report/use bundled ripgrep, analogous to standalone installations whose doctor output reports search is OK (bundled) with an explicit bundled rg.exe path.

If install method=other is intentional for the Desktop-distributed CLI, search-resource discovery should still include the Desktop bin/app resource locations instead of telling the user to install a second ripgrep copy.

Related observations

The same runtime.search warning appears incidentally in #40313 and #35726, but neither issue is specifically tracking Desktop-bundled rg.exe discovery. This report isolates that diagnostic/runtime packaging mismatch.

Start at the bundled CLI's doctor --json entry point and the checks.runtime.search logic, then trace how the Desktop bin and app resource paths are discovered. Reproduce on Windows with the command shown and verify that the report selects the shipped rg.exe and no longer recommends installing a second copy.