@aacombarro89/praxis 0.1.8 → 0.1.10

package/README.md

@@ -4,10 +4,11 @@
 meta-development rules and authoring recipes that make AI coding agents produce
 correct, conformant work.
 
-Praxis is **not** implementation scaffolding and **not** a config-file
-generator. It writes _only_ the methodology layer — agent-instruction files,
-skills, slash commands, and its own manifest. It never touches your application
-code, dependencies, or runtime infrastructure.
+Praxis is **not** implementation scaffolding and **not** an application config
+generator. It writes _only_ the methodology layer — agent instructions,
+native workflows, methodology permissions and plugin metadata, and its own
+manifest. It never touches your application code, dependencies, or runtime
+infrastructure.
 
 ```bash
 npx @aacombarro89/praxis
@@ -22,8 +23,8 @@ Running `praxis` in a project:
    a `react` dependency → both `node` and `react`.
 2. **Offers a first-run fork** — _Quick start_ (recommended defaults, preview
    the diff, confirm) or _Customize_ (choose stacks, packages, and targets).
-3. **Composes the methodology into your repo** — it merges managed blocks into
-   files like `CLAUDE.md` without clobbering your own content, and records what
+3. **Composes the methodology into your repo** — it emits Claude Code rules,
+   Codex skills, and managed `AGENTS.md` blocks without clobbering your own content, and records what
    it did in a visible, committed, hand-editable manifest: `praxis.yaml`.
 
 It always previews a single diff before writing. Git is your undo.
@@ -36,10 +37,13 @@ Other tools _generate_ agent instructions once; Praxis **manages** them:
   packages pinned in `praxis.yaml`, and `praxis check` fails CI when the
   installed files drift — think Renovate/Dependabot, for your agent
   instruction layer.
+- **Peer-native project facts.** When Claude Code and Codex coexist, project-owned
+  shared sections live in both native instruction files. `praxis check` verifies
+  parity and upkeep fixes factual drift; neither tool depends on Praxis at runtime.
 - **A composition / merge step** that folds methodology into an _existing_
   project without overwriting project-specific content.
-- **One neutral source, per-tool outputs** — Claude Code and `AGENTS.md`
-  today, more emitters planned.
+- **One neutral source, per-tool outputs** — first-class Claude Code and OpenAI
+  Codex support, plus a generic `AGENTS.md` target.
 
 The curated methodology — Layer 1 behavioral rules plus Layer 2 stack recipes
 — is the starting payload that rides this machinery.
@@ -67,7 +71,7 @@ sync`**. There is no `add`/`remove` — one obvious way to change things.
 version: 1
 methodology: "0.1.0"                 # pinned; `sync` offers to bump
 stacks: [node, react]                # detection-seeded, user-editable
-targets: [claude-code, agents-md]    # which agent files to emit
+targets: [claude-code, codex]        # which agent tools to support
 packages:
   - karpathy-claude                  # behavioral rules (Layer 1)
   - wiki-memory                      # the knowledge-wiki command (Layer 1)
@@ -86,24 +90,26 @@ pinned version — never behind your back.
 | `praxis sync`  | Reconcile the repo to `praxis.yaml`; offer newer methodology; diff + confirm. |
 | `praxis check` | Dry-run; report drift; non-zero exit for CI.                                  |
 
-`--yes` skips prompts (takes the Quick-start path) for non-interactive/CI use.
+`--yes` skips prompts for non-interactive/CI use. Repeat `--target`, for example
+`praxis --yes --target codex --target agents-md`, to override target detection.
 
 ## Tool-neutral by construction
 
 The methodology source is singular; Praxis _emits_ per-tool variants from it.
-**Claude Code** (`.claude/rules/`, skills, commands, `settings.json`) and the
-**`agents-md`** flat-file convention (`AGENTS.md`) are built today. Cursor is a
+**Claude Code** (`.claude/rules/`, commands, `settings.json`), **OpenAI Codex**
+(`AGENTS.md`, `.agents/skills/`, permission profiles/rules, plugin marketplace), and the
+generic **`agents-md`** flat-file convention are built today. Cursor is a
 planned target; Copilot/Windsurf/Roo are deferred until they land.
 
 ## "Memory" means the agent's memory, not the app's
 
 In Praxis, _memory_ always refers to the **AI coding tool's** curated,
-file-based instruction layer (`CLAUDE.md`, the knowledge wiki, skills, decision
-notes) — not a runtime memory backend for your application (Mem0, Zep, Letta,
-etc.). Wiring a persistence backend into your app is implementation, and out of
-scope. The most Praxis ships on that topic is a Layer 2 _decision recipe_:
-guidance on whether you need runtime memory and how to choose — never the
-backend itself.
+file-based instruction layer (`CLAUDE.md` or `AGENTS.md`, the knowledge wiki,
+skills, decision notes) — not a runtime memory backend for your application
+(Mem0, Zep, Letta, etc.). Wiring a persistence backend into your app is
+implementation, and out of scope. The most Praxis ships on that topic is a
+Layer 2 _decision recipe_: guidance on whether you need runtime memory and how
+to choose — never the backend itself.
 
 ## Developing Praxis
 
@@ -130,4 +136,5 @@ lands on a feature branch and merges via PR — no direct pushes to `main`.
 - `docs/wiki/` — the durable, in-repo knowledge wiki and canonical design doc;
   start at [`docs/wiki/index.md`](docs/wiki/index.md).
 
-See [`CLAUDE.md`](CLAUDE.md) for the project's non-negotiable rails.
+See the peer-native [`CLAUDE.md`](CLAUDE.md) and [`AGENTS.md`](AGENTS.md) for
+the project's non-negotiable rails.

package/dist/codex-marketplace.d.ts

@@ -0,0 +1,19 @@
+export declare const CODEX_MARKETPLACE_PATH = ".agents/plugins/marketplace.json";
+export declare const CODEX_MARKETPLACE_STATE_PATH = ".praxis/codex-marketplace-state.json";
+export interface CodexPluginEntry {
+    name: string;
+    source: Record<string, string>;
+    policy: {
+        installation: string;
+        authentication: string;
+    };
+    category: string;
+}
+export interface MarketplaceReconcileResult {
+    marketplaceText: string;
+    stateText: string;
+    marketplaceChanged: boolean;
+    stateChanged: boolean;
+    conflicts: string[];
+}
+export declare function reconcileCodexMarketplace(marketplaceText: string, stateText: string, desired: CodexPluginEntry[]): MarketplaceReconcileResult;

package/dist/codex-marketplace.js

@@ -0,0 +1,113 @@
+import { createHash } from "node:crypto";
+export const CODEX_MARKETPLACE_PATH = ".agents/plugins/marketplace.json";
+export const CODEX_MARKETPLACE_STATE_PATH = ".praxis/codex-marketplace-state.json";
+/** Deeply sorts object keys so hashing is insensitive to cosmetic key
+ *  reordering (e.g. a formatter running `jq -S` over marketplace.json). */
+function canonicalize(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalize);
+    if (value && typeof value === "object") {
+        const sorted = {};
+        for (const key of Object.keys(value).sort()) {
+            sorted[key] = canonicalize(value[key]);
+        }
+        return sorted;
+    }
+    return value;
+}
+function hashEntry(entry) {
+    return createHash("sha256").update(JSON.stringify(canonicalize(entry))).digest("hex");
+}
+function parseJson(text, label) {
+    if (!text.trim())
+        return {};
+    const parsed = JSON.parse(text);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error(`${label} must contain a JSON object.`);
+    }
+    return parsed;
+}
+function parseState(text) {
+    if (!text.trim())
+        return { version: 1, entries: {} };
+    const parsed = parseJson(text, CODEX_MARKETPLACE_STATE_PATH);
+    if (parsed.version !== 1 || !parsed.entries || typeof parsed.entries !== "object" || Array.isArray(parsed.entries)) {
+        throw new Error(`${CODEX_MARKETPLACE_STATE_PATH} has an unsupported ownership-state shape.`);
+    }
+    const entries = {};
+    for (const [name, value] of Object.entries(parsed.entries)) {
+        if (typeof value !== "string")
+            throw new Error(`${CODEX_MARKETPLACE_STATE_PATH} has a non-string hash for ${name}.`);
+        entries[name] = value;
+    }
+    return { version: 1, entries };
+}
+function render(value) {
+    return `${JSON.stringify(value, null, 2)}\n`;
+}
+export function reconcileCodexMarketplace(marketplaceText, stateText, desired) {
+    const root = parseJson(marketplaceText, CODEX_MARKETPLACE_PATH);
+    const state = parseState(stateText);
+    const rawPlugins = root.plugins ?? [];
+    if (!Array.isArray(rawPlugins))
+        throw new Error(`${CODEX_MARKETPLACE_PATH} field "plugins" must be an array.`);
+    const plugins = [...rawPlugins];
+    const conflicts = [];
+    const desiredByName = new Map(desired.map((entry) => [entry.name, entry]));
+    const nextHashes = {};
+    const findIndex = (name) => plugins.findIndex((entry) => Boolean(entry && typeof entry === "object" && !Array.isArray(entry) && entry.name === name));
+    for (const [name, recordedHash] of Object.entries(state.entries)) {
+        const index = findIndex(name);
+        const wanted = desiredByName.get(name);
+        if (index === -1)
+            continue;
+        if (hashEntry(plugins[index]) !== recordedHash) {
+            conflicts.push(name);
+            nextHashes[name] = recordedHash;
+            desiredByName.delete(name);
+            continue;
+        }
+        if (!wanted) {
+            plugins.splice(index, 1);
+        }
+    }
+    for (const entry of desired) {
+        if (!desiredByName.has(entry.name))
+            continue;
+        const index = findIndex(entry.name);
+        const desiredHash = hashEntry(entry);
+        if (index === -1) {
+            plugins.push(entry);
+            nextHashes[entry.name] = desiredHash;
+            continue;
+        }
+        const recordedHash = state.entries[entry.name];
+        if (recordedHash || hashEntry(plugins[index]) === desiredHash) {
+            plugins[index] = entry;
+            nextHashes[entry.name] = desiredHash;
+        }
+        else {
+            conflicts.push(entry.name);
+        }
+    }
+    for (const [name, recordedHash] of Object.entries(state.entries)) {
+        if (conflicts.includes(name))
+            nextHashes[name] = recordedHash;
+    }
+    if (!("name" in root))
+        root.name = "praxis";
+    if (!("interface" in root))
+        root.interface = { displayName: "Praxis" };
+    root.plugins = plugins;
+    const nextState = { version: 1, entries: nextHashes };
+    const nextMarketplaceText = render(root);
+    const nextStateText = render(nextState);
+    return {
+        marketplaceText: nextMarketplaceText,
+        stateText: nextStateText,
+        marketplaceChanged: nextMarketplaceText !== marketplaceText,
+        stateChanged: nextStateText !== stateText,
+        conflicts,
+    };
+}
+//# sourceMappingURL=codex-marketplace.js.map

package/dist/codex-marketplace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-marketplace.js","sourceRoot":"","sources":["../src/codex-marketplace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AACzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,sCAAsC,CAAC;AAcnF;2EAC2E;AAC3E,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,GAAG,4BAA4B,4CAA4C,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,4BAA4B,8BAA8B,IAAI,GAAG,CAAC,CAAC;QACrH,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAUD,MAAM,UAAU,yBAAyB,CACvC,eAAuB,EACvB,SAAiB,EACjB,OAA2B;IAE3B,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,sBAAsB,oCAAoC,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAc,CAAC;IAC7C,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CACtE,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAK,KAAiC,CAAC,IAAI,KAAK,IAAI,CAAC,CACzH,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAS;QAC3B,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC;YAC/C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;YAChC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;YACrC,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,YAAY,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9D,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YACvB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;QAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;IAC5C,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC;QAAE,IAAI,CAAC,SAAS,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACvE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACvB,MAAM,SAAS,GAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACtE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO;QACL,eAAe,EAAE,mBAAmB;QACpC,SAAS,EAAE,aAAa;QACxB,kBAAkB,EAAE,mBAAmB,KAAK,eAAe;QAC3D,YAAY,EAAE,aAAa,KAAK,SAAS;QACzC,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/codex-security.d.ts

@@ -0,0 +1,11 @@
+import type { Capability, Policy } from "./permissions.js";
+export declare const CODEX_CONFIG_BODY = "default_permissions = \"praxis-safe-permissions\"\n\n[permissions.praxis-safe-permissions]\ndescription = \"Workspace editing with Praxis secret-file protections and no sandbox network access.\"\nextends = \":workspace\"\n\n[permissions.praxis-safe-permissions.filesystem]\nglob_scan_max_depth = 12\n\n[permissions.praxis-safe-permissions.filesystem.\":workspace_roots\"]\n\".env\" = \"deny\"\n\"**/.env*\" = \"deny\"\n\"**/*.pem\" = \"deny\"\n\"**/credentials*\" = \"deny\"\n\n[permissions.praxis-safe-permissions.network]\nenabled = false";
+export declare function reconcileCodexConfig(existing: string, enabled: boolean): {
+    text: string;
+    changed: boolean;
+    conflicts: string[];
+};
+/** Every neutral capability is handled by command rules or explicitly delegated
+ * to the permission profile. Exported as the Codex conformance seam. */
+export declare function codexCapabilityMode(capability: Capability): "profile" | "rules" | undefined;
+export declare function renderCodexRules(policy: Policy): string;

package/dist/codex-security.js

@@ -0,0 +1,144 @@
+import { createHash } from "node:crypto";
+const BLOCK_ID = "safe-permissions";
+const BEGIN = /^# praxis:begin safe-permissions sha256=([a-f0-9]{64})$/m;
+const END = /^# praxis:end safe-permissions$/m;
+function hash(text) {
+    return createHash("sha256").update(text).digest("hex");
+}
+export const CODEX_CONFIG_BODY = `default_permissions = "praxis-safe-permissions"
+
+[permissions.praxis-safe-permissions]
+description = "Workspace editing with Praxis secret-file protections and no sandbox network access."
+extends = ":workspace"
+
+[permissions.praxis-safe-permissions.filesystem]
+glob_scan_max_depth = 12
+
+[permissions.praxis-safe-permissions.filesystem.":workspace_roots"]
+".env" = "deny"
+"**/.env*" = "deny"
+"**/*.pem" = "deny"
+"**/credentials*" = "deny"
+
+[permissions.praxis-safe-permissions.network]
+enabled = false`;
+function managedBlock(body) {
+    return `# praxis:begin ${BLOCK_ID} sha256=${hash(body)}\n${body}\n# praxis:end ${BLOCK_ID}`;
+}
+function locate(text) {
+    const begin = BEGIN.exec(text);
+    if (!begin || begin.index === undefined)
+        return undefined;
+    END.lastIndex = 0;
+    const afterBegin = begin.index + begin[0].length;
+    const end = END.exec(text.slice(afterBegin));
+    if (!end || end.index === undefined)
+        return undefined;
+    const bodyStart = afterBegin + 1;
+    const endStart = afterBegin + end.index;
+    return {
+        start: begin.index,
+        end: endStart + end[0].length,
+        body: text.slice(bodyStart, endStart).replace(/\n$/, ""),
+        recordedHash: begin[1],
+    };
+}
+function withoutBlock(text, block) {
+    if (!block)
+        return text;
+    return `${text.slice(0, block.start)}${text.slice(block.end)}`;
+}
+function externalConflicts(text) {
+    const conflicts = [];
+    if (/^\s*default_permissions\s*=/m.test(text))
+        conflicts.push("default_permissions");
+    if (/^\s*sandbox_mode\s*=/m.test(text))
+        conflicts.push("sandbox_mode");
+    if (/^\s*\[sandbox_workspace_write\]/m.test(text))
+        conflicts.push("sandbox_workspace_write");
+    if (/^\s*\[permissions\.praxis-safe-permissions(?:\.|\])/m.test(text)) {
+        conflicts.push("permissions.praxis-safe-permissions");
+    }
+    return conflicts;
+}
+export function reconcileCodexConfig(existing, enabled) {
+    const block = locate(existing);
+    if (block && hash(block.body) !== block.recordedHash) {
+        return { text: existing, changed: false, conflicts: [BLOCK_ID] };
+    }
+    const outside = withoutBlock(existing, block);
+    if (enabled) {
+        const conflicts = externalConflicts(outside);
+        if (conflicts.length > 0)
+            return { text: existing, changed: false, conflicts };
+        const rest = outside.trim();
+        // Inserted first, not appended: a bare `key = value` line in TOML belongs
+        // to whatever `[table]` precedes it, so placing our block after user
+        // content risks default_permissions being silently absorbed into a table
+        // the user's file happens to end inside. Leading in the file guarantees
+        // root-table scope regardless of what follows.
+        const text = `${managedBlock(CODEX_CONFIG_BODY)}\n${rest ? `\n${rest}\n` : ""}`;
+        return { text, changed: text !== existing, conflicts: [] };
+    }
+    if (!block)
+        return { text: existing, changed: false, conflicts: [] };
+    const rest = outside.trim();
+    const text = rest ? `${rest}\n` : "";
+    return { text, changed: text !== existing, conflicts: [] };
+}
+const COMMAND_PATTERNS = {
+    "run-dev-scripts": [
+        ["npm", "run", "test"],
+        ["npm", "run", "lint"],
+        ["npm", "run", "typecheck"],
+        ["npm", "run", "build"],
+    ],
+    "read-only-git": [["git", "status"], ["git", "diff"], ["git", "log"]],
+    "git-commit": [["git", "commit"]],
+    "git-push": [["git", "push"]],
+    "install-deps": [["npm", "install"], ["npm", "i"], ["npm", "ci"]],
+    "destructive-delete": [["rm", "-rf"]],
+    "force-push": [["git", "push", "--force"], ["git", "push", "-f"]],
+    "global-install": [
+        ["npm", "install", "-g"],
+        ["npm", "install", "--global"],
+        ["npm", "i", "-g"],
+        ["npm", "i", "--global"],
+        ["pnpm", "add", "-g"],
+        ["pnpm", "add", "--global"],
+    ],
+};
+const PROFILE_CAPABILITIES = new Set(["read-repo", "edit-repo", "read-secrets"]);
+/** Every neutral capability is handled by command rules or explicitly delegated
+ * to the permission profile. Exported as the Codex conformance seam. */
+export function codexCapabilityMode(capability) {
+    if (PROFILE_CAPABILITIES.has(capability))
+        return "profile";
+    if (COMMAND_PATTERNS[capability])
+        return "rules";
+    return undefined;
+}
+function starlarkString(value) {
+    return JSON.stringify(value);
+}
+export function renderCodexRules(policy) {
+    const decisions = [
+        ["allow", "allow"],
+        ["ask", "prompt"],
+        ["deny", "forbidden"],
+    ];
+    const lines = [
+        "# Generated by Praxis. Project rules load only after this repository is trusted.",
+        "# Filesystem capabilities are enforced by the praxis-safe-permissions profile in ../config.toml.",
+        "",
+    ];
+    for (const [bucket, decision] of decisions) {
+        for (const capability of policy[bucket]) {
+            for (const pattern of COMMAND_PATTERNS[capability] ?? []) {
+                lines.push(`prefix_rule(pattern = [${pattern.map(starlarkString).join(", ")}], decision = ${starlarkString(decision)}, justification = ${starlarkString(`Praxis capability: ${capability}`)})`);
+            }
+        }
+    }
+    return `${lines.join("\n").trimEnd()}\n`;
+}
+//# sourceMappingURL=codex-security.js.map

package/dist/codex-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-security.js","sourceRoot":"","sources":["../src/codex-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AACpC,MAAM,KAAK,GAAG,0DAA0D,CAAC;AACzE,MAAM,GAAG,GAAG,kCAAkC,CAAC;AAE/C,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;gBAgBjB,CAAC;AAEjB,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,kBAAkB,QAAQ,WAAW,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,kBAAkB,QAAQ,EAAE,CAAC;AAC9F,CAAC;AASD,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1D,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,SAAS,GAAG,UAAU,GAAG,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC;IACxC,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,EAAE,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM;QAC7B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACxD,YAAY,EAAE,KAAK,CAAC,CAAC,CAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAA+B;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrF,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvE,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC7F,IAAI,sDAAsD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,SAAS,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,OAAgB;IAEhB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,qEAAqE;QACrE,yEAAyE;QACzE,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,IAAI,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC7D,CAAC;AAID,MAAM,gBAAgB,GAA4C;IAChE,iBAAiB,EAAE;QACjB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;QACtB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;QACtB,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3B,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC;KACxB;IACD,eAAe,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrE,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7B,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjE,oBAAoB,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjE,gBAAgB,EAAE;QAChB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC;QACxB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC;QAC9B,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC;QAClB,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC;QACxB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC;QACrB,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC;KAC5B;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAa,CAAC,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAE7F;wEACwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,UAAsB;IACxD,IAAI,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,IAAI,gBAAgB,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,SAAS,GAAwC;QACrD,CAAC,OAAO,EAAE,OAAO,CAAC;QAClB,CAAC,KAAK,EAAE,QAAQ,CAAC;QACjB,CAAC,MAAM,EAAE,WAAW,CAAC;KACtB,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,kFAAkF;QAClF,kGAAkG;QAClG,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,KAAK,MAAM,OAAO,IAAI,gBAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CACR,0BAA0B,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,cAAc,CAAC,QAAQ,CAAC,qBAAqB,cAAc,CAAC,sBAAsB,UAAU,EAAE,CAAC,GAAG,CACpL,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC;AAC3C,CAAC"}

package/dist/emit.d.ts

@@ -1,18 +1,20 @@
 import type { Manifest, Target } from "./manifest.js";
 import { type PluginsDesired, type RuleSet } from "./merge-json.js";
+import { CODEX_MARKETPLACE_PATH, CODEX_MARKETPLACE_STATE_PATH, type CodexPluginEntry } from "./codex-marketplace.js";
 export declare const BLOCK_FILE: Partial<Record<Target, string>>;
 /** The neutral methodology source for a content package, or undefined if the
- *  package has no rules.md (e.g. skills, Layer 2 recipes handled by other phases). */
-export declare function loadPackageSource(pkg: string): string | undefined;
-/** A package's slash commands: one file per command, named for the command it
- *  becomes (the filename, sans extension, is what the user types after `/`). */
+ *  package has no rules.md (e.g. skills, Layer 2 recipes handled by other phases).
+ *  `dir` is the package's own directory (`ResolvedPackage.dir`) — shipped or
+ *  project-local, resolved identically either way. */
+export declare function loadPackageSource(dir: string): string | undefined;
+/** A package's workflow sources: one file per workflow, named for its target-native invocation. */
 export interface CommandSource {
     name: string;
     content: string;
 }
 /** A content package's commands, or [] if it has none. Scans
- *  packages/<layer>/<pkg>/commands/*.md — mirrors loadPackageSource. */
-export declare function loadCommandSources(pkg: string): CommandSource[];
+ *  `<dir>/commands/*.md` — mirrors loadPackageSource. */
+export declare function loadCommandSources(dir: string): CommandSource[];
 /** A planned write. "owned" files are placed/replaced wholesale; "block" files
  *  have their managed blocks reconciled into existing text; "settings" carries
  *  whichever of permissions/plugins this target emits — always exactly one op
@@ -34,10 +36,22 @@ export type EmitOp = {
     path: string;
     rules?: RuleSet;
     plugins?: PluginsDesired;
+} | {
+    kind: "codex-config";
+    target: "codex";
+    path: ".codex/config.toml";
+    enabled: boolean;
+} | {
+    kind: "codex-marketplace";
+    target: "codex";
+    path: typeof CODEX_MARKETPLACE_PATH;
+    statePath: typeof CODEX_MARKETPLACE_STATE_PATH;
+    plugins: CodexPluginEntry[];
 };
 /** Build the emit plan from a manifest: the file operations needed to install
- *  the selected methodology for each target. */
-export declare function planEmit(manifest: Manifest): EmitOp[];
+ *  the selected methodology for each target. `cwd` resolves any project-local
+ *  (`./`-prefixed) packages the manifest names; defaults to process.cwd(). */
+export declare function planEmit(manifest: Manifest, cwd?: string): EmitOp[];
 export interface MethodologySize {
     /** Total content lines across the counted rule artifacts. */
     totalLines: number;
@@ -53,7 +67,7 @@ export interface MethodologySize {
  *
  * Counts the claude-code target's owned `.claude/rules/*` files (one per rules
  * package). If claude-code isn't a manifest target, falls back to the
- * agents-md managed block content, one artifact per block, so the two targets'
+ * Codex/agents-md managed block content, one artifact per block, so the targets'
  * shared source is never double-counted. Commands, permissions/plugins JSON,
  * and the wiki are never counted — none are loaded at session start.
  *
@@ -61,7 +75,7 @@ export interface MethodologySize {
  * unknown package) — callers in check mode should catch and omit the line
  * rather than let it mask the sync error (D40's degrade-by-omission model).
  */
-export declare function computeMethodologySize(manifest: Manifest): MethodologySize;
+export declare function computeMethodologySize(manifest: Manifest, cwd?: string): MethodologySize;
 export interface ApplyResult {
     text: string;
     changed: boolean;