@agentdeck/hooks 0.2.0 → 1.0.0

package/dist/codex-install.d.ts

@@ -0,0 +1,64 @@
+export declare const DEFAULT_CODEX_CONFIG_PATH: string;
+/** Sidecar script for the Windows notify fallback. Codex execs `notify`
+ *  as a bare argv array (no shell) and appends the JSON payload as the
+ *  last element; `powershell -File` is the only Windows invocation that
+ *  binds trailing argv into `$args` (`-Command` concatenates them into
+ *  the command text and `-EncodedCommand` rejects them outright), and
+ *  `-File` requires a real script on disk. */
+export declare const DEFAULT_WINDOWS_NOTIFY_SCRIPT_PATH: string;
+export interface InstallOptions {
+    /** Override the codex config path (tests + non-default homes). */
+    configPath?: string;
+    /** Daemon HTTP port to bake into the OTel exporter endpoint. If
+     *  omitted, the installer reads `~/.agentdeck/daemon.json`. */
+    daemonHttpPort?: number;
+    /** Override platform for tests. Defaults to process.platform. */
+    platform?: NodeJS.Platform;
+    /** Override the Windows notify sidecar script path (tests). */
+    notifyScriptPath?: string;
+}
+export interface InstallResult {
+    installed: boolean;
+    /** Human-readable reason when `installed === false`. */
+    reason?: string;
+    /** Non-fatal degradation while `installed === true` (e.g. the Windows
+     *  notify sidecar could not be written, so notify was omitted). */
+    warning?: string;
+}
+interface ManagedBlockOptions {
+    includeNotify?: boolean;
+    includeOtel?: boolean;
+    otelEndpoint?: string;
+    daemonHttpPort?: number;
+    platform?: NodeJS.Platform;
+    notifyScriptPath?: string;
+}
+/** Assemble the body of the AgentDeck-managed fence. Tests call this
+ *  directly to assert schema regressions without driving the file
+ *  installer. */
+export declare function managedBlockBody(opts?: ManagedBlockOptions): string;
+/** Body of the Windows notify sidecar script (`-File` execution binds
+ *  Codex's appended payload argv into `$args`; take the last element to
+ *  mirror POSIX `$1`). ASCII-only so PowerShell 5.1's BOM-less ANSI
+ *  fallback reads it identically to UTF-8. Exported for tests. */
+export declare function windowsNotifyScriptContent(event?: string): string;
+/** Install AgentDeck's Codex observation entries into `~/.codex/config.toml`
+ *  unless the user opted out, the user has authored a conflicting top-level
+ *  `[features]` / `[hooks]` table outside the fence, or the file write
+ *  failed. Idempotent: re-running with the same daemon port produces a
+ *  byte-identical file, so safe to call from setup, `agentdeck codex`,
+ *  and `agentdeck daemon install`. */
+export declare function installCodexHooksIfNeeded(opts?: InstallOptions): InstallResult;
+/** Strip the AgentDeck-managed fence. Idempotent — no-op when the fence
+ *  is absent. Does not delete the config file even if it becomes empty
+ *  (Codex may rely on its existence). */
+export declare function uninstallCodexHooks(opts?: {
+    configPath?: string;
+    notifyScriptPath?: string;
+}): void;
+/** Re-apply the managed block when the daemon port (or any other resolved
+ *  field) might have changed. Equivalent to install but renamed for the
+ *  daemon-restart code path so the intent is clearer at the call site. */
+export declare function migrateCodexHooks(opts?: InstallOptions): InstallResult;
+export {};
+//# sourceMappingURL=codex-install.d.ts.map

package/dist/codex-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-install.d.ts","sourceRoot":"","sources":["../src/codex-install.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,yBAAyB,QAA2C,CAAC;AAClF;;;;;8CAK8C;AAC9C,eAAO,MAAM,kCAAkC,QAAoD,CAAC;AAGpG,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;mEAC+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;uEACmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAgCD,UAAU,mBAAmB;IAC3B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;iBAEiB;AACjB,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,mBAAwB,GAAG,MAAM,CAsCvE;AAgHD;;;kEAGkE;AAClE,wBAAgB,0BAA0B,CAAC,KAAK,SAAwB,GAAG,MAAM,CAEhF;AAsED;;;;;sCAKsC;AACtC,wBAAgB,yBAAyB,CAAC,IAAI,GAAE,cAAmB,GAAG,aAAa,CAqDlF;AAED;;yCAEyC;AACzC,wBAAgB,mBAAmB,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,IAAI,CASvG;AAED;;0EAE0E;AAC1E,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,cAAmB,GAAG,aAAa,CAE1E"}

package/dist/codex-install.js

@@ -0,0 +1,342 @@
+// codex-install.ts — Install AgentDeck observation entries into
+// ~/.codex/config.toml so Codex CLI sessions report turn boundaries and
+// tool calls to the daemon via lifecycle hooks.
+//
+// Port of apple/AgentDeck/Daemon/Core/CodexConfigInstaller.swift, with
+// the macOS-specific consent flow (NSAlert / NSOpenPanel / security-
+// scoped bookmarks) stripped — Node CLI runs without sandboxing, so
+// invocation is implicit consent. An opt-out env var
+// `AGENTDECK_NO_CODEX_HOOKS=1` (or the `--no-codex-hooks` CLI flag) is
+// honoured by callers.
+//
+// The fence sentinels and PORT-resolution shell are byte-identical with
+// the Swift installer, so a config installed by either side can be
+// migrated / uninstalled by the other without conflict.
+//
+// MUST stay in sync with apple/AgentDeck/Daemon/Core/CodexConfigInstaller.swift
+// (managedBlockBody schema + lifecycle hook table layout).
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync, unlinkSync } from 'fs';
+import { dirname, join } from 'path';
+import { homedir } from 'os';
+import { applyManagedBlock, removeManagedBlock, hasTopLevelKeyOutsideFence, hasTableOutsideFence, quoted, } from './codex-mini-toml.js';
+export const DEFAULT_CODEX_CONFIG_PATH = join(homedir(), '.codex', 'config.toml');
+/** Sidecar script for the Windows notify fallback. Codex execs `notify`
+ *  as a bare argv array (no shell) and appends the JSON payload as the
+ *  last element; `powershell -File` is the only Windows invocation that
+ *  binds trailing argv into `$args` (`-Command` concatenates them into
+ *  the command text and `-EncodedCommand` rejects them outright), and
+ *  `-File` requires a real script on disk. */
+export const DEFAULT_WINDOWS_NOTIFY_SCRIPT_PATH = join(homedir(), '.agentdeck', 'codex-notify.ps1');
+const DEFAULT_DAEMON_PORT = 9120;
+/** Honour `AGENTDECK_NO_CODEX_HOOKS=1` from the environment. Callers
+ *  should also accept a `--no-codex-hooks` flag and short-circuit before
+ *  calling install. */
+function envOptOut() {
+    return process.env.AGENTDECK_NO_CODEX_HOOKS === '1';
+}
+/** Read `~/.agentdeck/daemon.json` and return the daemon's HTTP port,
+ *  preferring `httpPort` over `port`. The Apple build splits HTTP and
+ *  WebSocket across different ports; the Node CLI uses a single port,
+ *  so this still resolves correctly. Returns null if the file is
+ *  missing or malformed. */
+function currentDaemonHttpPort() {
+    const path = join(homedir(), '.agentdeck', 'daemon.json');
+    if (!existsSync(path))
+        return null;
+    try {
+        const obj = JSON.parse(readFileSync(path, 'utf-8'));
+        if (typeof obj.httpPort === 'number' && obj.httpPort > 0)
+            return obj.httpPort;
+        if (typeof obj.port === 'number' && obj.port > 0)
+            return obj.port;
+    }
+    catch { /* malformed JSON — fall through */ }
+    return null;
+}
+function buildOtelEndpoint(daemonHttpPort) {
+    const port = daemonHttpPort ?? currentDaemonHttpPort() ?? DEFAULT_DAEMON_PORT;
+    return `http://127.0.0.1:${port}/otel/v1/traces`;
+}
+/** Assemble the body of the AgentDeck-managed fence. Tests call this
+ *  directly to assert schema regressions without driving the file
+ *  installer. */
+export function managedBlockBody(opts = {}) {
+    const includeNotify = opts.includeNotify ?? true;
+    const includeOtel = opts.includeOtel ?? true;
+    const platform = opts.platform ?? process.platform;
+    const lines = [
+        '# Codex lifecycle hooks. Command hooks receive JSON on stdin;',
+        '# each snippet forwards that stdin body unchanged to AgentDeck.',
+        '[features]',
+        'hooks = true',
+    ];
+    lines.push('');
+    lines.push(...buildLifecycleHookTables(platform));
+    if (includeNotify) {
+        lines.push('');
+        lines.push('# Optional turn-complete notification fallback.');
+        if (platform === 'win32') {
+            lines.push('# Codex appends the JSON payload as the last argv entry;');
+            lines.push('# powershell -File binds it into $args. (-Command cannot:');
+            lines.push('# it concatenates trailing argv into the command text.)');
+        }
+        else {
+            lines.push('# Codex appends the JSON payload as the last argv entry,');
+            lines.push('# so the 4th array element acts as $0 and payload lands at $1.');
+        }
+        lines.push(buildNotifyAssignment('codex_turn_complete', platform, opts.notifyScriptPath));
+    }
+    if (includeOtel) {
+        lines.push('');
+        lines.push('# OTel trace exporter — best-effort live progress signal.');
+        lines.push('# Schema: [otel.trace_exporter.otlp-http].');
+        lines.push('[otel.trace_exporter.otlp-http]');
+        lines.push(`endpoint = ${quoted(opts.otelEndpoint ?? buildOtelEndpoint(opts.daemonHttpPort))}`);
+        lines.push('protocol = "json"');
+    }
+    return lines.join('\n');
+}
+/** `notify = ["sh", "-c", "<snippet>", "agentdeck-notify"]`. Two design
+ *  choices stacked here:
+ *    1. `"sh"` uses PATH lookup so no absolute shell path lands in the
+ *       installer config.
+ *    2. The trailing `"agentdeck-notify"` is a dummy `$0`. Codex invokes
+ *       `notify` by appending the JSON payload as the last argv entry.
+ *       Without our 4th element, `sh -c "<snippet>" <json>` would assign
+ *       `<json>` to `$0` and leave `$1` empty. With the dummy in place,
+ *       `<json>` lands at `$1` as the snippet expects. */
+function buildNotifyAssignment(event, platform, notifyScriptPath) {
+    if (platform === 'win32') {
+        const scriptPath = notifyScriptPath ?? DEFAULT_WINDOWS_NOTIFY_SCRIPT_PATH;
+        return `notify = ["powershell.exe", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-File", ${quoted(scriptPath)}]`;
+    }
+    return `notify = ["sh", "-c", ${quoted(buildNotifySnippet(event))}, "agentdeck-notify"]`;
+}
+/** Codex notify snippet. PORT-resolution lines are byte-identical with
+ *  `hooks/src/install.ts:buildHookCommand` so the two integrations share
+ *  one canonical port-discovery contract. Only the trailing curl line
+ *  differs: Claude hooks pipe stdin (`-d @-`); Codex notify hands the
+ *  JSON payload as `$1` (`--data-raw "$1"`). */
+function buildNotifySnippet(event) {
+    return [
+        `PORT="\${AGENTDECK_PORT:-}"`,
+        `if [ -z "$PORT" ]; then`,
+        `  for F in "$HOME/.agentdeck/daemon.json" "$HOME/Library/Containers/bound.serendipity.agent.deck/Data/Library/Application Support/AgentDeck/daemon.json" "$HOME/Library/Group Containers/group.bound.serendipity.agent.deck/daemon.json"; do`,
+        `    [ -f "$F" ] || continue`,
+        `    P=$(python3 -c "import json;d=json.load(open('$F'));print(d.get('httpPort') or d.get('port',''))" 2>/dev/null)`,
+        `    [ -n "$P" ] && curl -sf --max-time 0.3 "http://127.0.0.1:$P/health" >/dev/null 2>&1 && { PORT="$P"; break; }`,
+        `  done`,
+        `fi`,
+        `PORT="\${PORT:-9120}"`,
+        `curl -sf --connect-timeout 0.2 --max-time 0.8 -X POST "http://127.0.0.1:$PORT/hooks/${event}" -H 'Content-Type: application/json' --data-raw "$1" 2>/dev/null || true`,
+    ].join('\n');
+}
+const LIFECYCLE_HOOKS = [
+    { codexEvent: 'SessionStart', agentDeckEvent: 'codex_session_start', matcher: 'startup|resume|clear' },
+    { codexEvent: 'UserPromptSubmit', agentDeckEvent: 'codex_user_prompt_submit', matcher: null },
+    { codexEvent: 'PreToolUse', agentDeckEvent: 'codex_tool_start', matcher: '*' },
+    { codexEvent: 'PostToolUse', agentDeckEvent: 'codex_tool_end', matcher: '*' },
+    { codexEvent: 'Stop', agentDeckEvent: 'codex_stop', matcher: null },
+];
+function buildLifecycleHookTables(platform) {
+    const lines = [];
+    for (let idx = 0; idx < LIFECYCLE_HOOKS.length; idx++) {
+        const hook = LIFECYCLE_HOOKS[idx];
+        if (idx > 0)
+            lines.push('');
+        lines.push(`[[hooks.${hook.codexEvent}]]`);
+        if (hook.matcher !== null) {
+            lines.push(`matcher = ${quoted(hook.matcher)}`);
+        }
+        lines.push(`[[hooks.${hook.codexEvent}.hooks]]`);
+        lines.push(`type = "command"`);
+        lines.push(`command = ${quoted(buildLifecycleHookCommand(hook.agentDeckEvent, platform))}`);
+        lines.push(`timeout = 5`);
+    }
+    return lines;
+}
+/** Official Codex lifecycle hooks pass their JSON payload on stdin.
+ *  Keep stdout quiet so Stop / UserPromptSubmit hooks do not accidentally
+ *  feed the daemon's acknowledgement back into Codex as hook output. */
+function buildLifecycleHookCommand(event, platform) {
+    if (platform === 'win32') {
+        return buildWindowsLifecycleHookCommand(event);
+    }
+    return `sh -c ${shellSingleQuoted(buildStdinPostSnippet(event))}`;
+}
+function buildStdinPostSnippet(event) {
+    return [
+        `PORT="\${AGENTDECK_PORT:-}"`,
+        `if [ -z "$PORT" ]; then`,
+        `  for F in "$HOME/.agentdeck/daemon.json" "$HOME/Library/Containers/bound.serendipity.agent.deck/Data/Library/Application Support/AgentDeck/daemon.json" "$HOME/Library/Group Containers/group.bound.serendipity.agent.deck/daemon.json"; do`,
+        `    [ -f "$F" ] || continue`,
+        `    P=$(python3 -c "import json;d=json.load(open('$F'));print(d.get('httpPort') or d.get('port',''))" 2>/dev/null)`,
+        `    [ -n "$P" ] && curl -sf --max-time 0.3 "http://127.0.0.1:$P/health" >/dev/null 2>&1 && { PORT="$P"; break; }`,
+        `  done`,
+        `fi`,
+        `PORT="\${PORT:-9120}"`,
+        `curl -sf --connect-timeout 0.2 --max-time 0.8 -X POST "http://127.0.0.1:$PORT/hooks/${event}" -H 'Content-Type: application/json' -d @- >/dev/null 2>&1 || true`,
+    ].join('\n');
+}
+function shellSingleQuoted(s) {
+    return `'${s.replace(/'/g, "'\"'\"'")}'`;
+}
+function buildWindowsLifecycleHookCommand(event) {
+    return `powershell.exe -NoProfile -NonInteractive -ExecutionPolicy Bypass -EncodedCommand ${windowsEncodedCommand(buildWindowsStdinPostSnippet(event))}`;
+}
+function buildWindowsStdinPostSnippet(event) {
+    // Read raw stdin as UTF-8: [Console]::In decodes with the console's OEM
+    // codepage (e.g. CP949) and would garble non-ASCII payload text.
+    return buildWindowsPostSnippet(event, '(New-Object System.IO.StreamReader([Console]::OpenStandardInput(), [System.Text.Encoding]::UTF8)).ReadToEnd()');
+}
+/** Body of the Windows notify sidecar script (`-File` execution binds
+ *  Codex's appended payload argv into `$args`; take the last element to
+ *  mirror POSIX `$1`). ASCII-only so PowerShell 5.1's BOM-less ANSI
+ *  fallback reads it identically to UTF-8. Exported for tests. */
+export function windowsNotifyScriptContent(event = 'codex_turn_complete') {
+    return buildWindowsPostSnippet(event, `$(if ($args.Count -gt 0) { [string]$args[$args.Count - 1] } else { '' })`) + '\n';
+}
+function buildWindowsPostSnippet(event, bodyExpression) {
+    return [
+        `$ErrorActionPreference = 'SilentlyContinue'`,
+        `$ProgressPreference = 'SilentlyContinue'`,
+        `$port = $env:AGENTDECK_PORT`,
+        `if ([string]::IsNullOrWhiteSpace($port)) {`,
+        `  $daemonFile = Join-Path $env:USERPROFILE '.agentdeck\\daemon.json'`,
+        `  if (Test-Path -LiteralPath $daemonFile) {`,
+        `    try {`,
+        `      $daemon = Get-Content -LiteralPath $daemonFile -Raw | ConvertFrom-Json`,
+        `      $candidate = if ($daemon.httpPort) { $daemon.httpPort } else { $daemon.port }`,
+        `      if ($candidate) {`,
+        `        try { Invoke-WebRequest -UseBasicParsing -TimeoutSec 1 -Uri ('http://127.0.0.1:' + $candidate + '/health') | Out-Null; $port = [string]$candidate } catch {}`,
+        `      }`,
+        `    } catch {}`,
+        `  }`,
+        `}`,
+        `if ([string]::IsNullOrWhiteSpace($port)) { $port = '9120' }`,
+        `$body = ${bodyExpression}`,
+        // Post UTF-8 bytes: Invoke-RestMethod encodes string bodies as
+        // ISO-8859-1 when the content type carries no charset, replacing
+        // non-ASCII payload characters with '?'.
+        `$bytes = [System.Text.Encoding]::UTF8.GetBytes([string]$body)`,
+        `try { Invoke-RestMethod -Method Post -TimeoutSec 1 -Uri ('http://127.0.0.1:' + $port + '/hooks/${event}') -ContentType 'application/json; charset=utf-8' -Body $bytes | Out-Null } catch {}`,
+        `exit 0`,
+    ].join('\n');
+}
+function windowsEncodedCommand(s) {
+    return Buffer.from(s, 'utf16le').toString('base64');
+}
+// ─── File I/O ───────────────────────────────────────────────────────────
+function readText(path) {
+    if (!existsSync(path))
+        return '';
+    try {
+        return readFileSync(path, 'utf-8');
+    }
+    catch {
+        return '';
+    }
+}
+/** Write the notify sidecar only when its content changed, so repeated
+ *  installs stay idempotent (no mtime churn). Returns false when the
+ *  script cannot be guaranteed on disk. */
+function writeScriptIfChanged(content, path) {
+    try {
+        if (existsSync(path) && readFileSync(path, 'utf-8') === content)
+            return true;
+    }
+    catch { /* unreadable — fall through to rewrite */ }
+    return writeTextAtomic(content, path);
+}
+function writeTextAtomic(text, path) {
+    const dir = dirname(path);
+    try {
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+        const tmp = `${path}.agentdeck.tmp`;
+        writeFileSync(tmp, text, 'utf-8');
+        renameSync(tmp, path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// ─── Public install / uninstall / migrate ──────────────────────────────
+/** Install AgentDeck's Codex observation entries into `~/.codex/config.toml`
+ *  unless the user opted out, the user has authored a conflicting top-level
+ *  `[features]` / `[hooks]` table outside the fence, or the file write
+ *  failed. Idempotent: re-running with the same daemon port produces a
+ *  byte-identical file, so safe to call from setup, `agentdeck codex`,
+ *  and `agentdeck daemon install`. */
+export function installCodexHooksIfNeeded(opts = {}) {
+    if (envOptOut())
+        return { installed: false, reason: 'AGENTDECK_NO_CODEX_HOOKS=1' };
+    const path = opts.configPath ?? DEFAULT_CODEX_CONFIG_PATH;
+    const original = readText(path);
+    // Refuse to clobber user-authored lifecycle hook config. This line-mode
+    // editor cannot safely merge existing `[features]` or `[hooks]` tables
+    // without a real TOML parser, and duplicate tables would make Codex
+    // reject config.toml.
+    if (hasTableOutsideFence(original, 'features')) {
+        return { installed: false, reason: 'user-authored [features] present' };
+    }
+    if (hasTableOutsideFence(original, 'hooks')) {
+        return { installed: false, reason: 'user-authored [hooks] present' };
+    }
+    const platform = opts.platform ?? process.platform;
+    let includeNotify = !hasTopLevelKeyOutsideFence(original, 'notify');
+    // OTel exporter stays POSIX-only for now — deliberately omitted on
+    // win32 (unverified there); lifecycle hooks + notify carry the signal.
+    const includeOtel = platform !== 'win32' && !hasTableOutsideFence(original, 'otel');
+    let warning;
+    const notifyScriptPath = opts.notifyScriptPath ?? DEFAULT_WINDOWS_NOTIFY_SCRIPT_PATH;
+    if (includeNotify && platform === 'win32') {
+        // The Stop lifecycle hook already reports turn-complete, so a failed
+        // sidecar write downgrades to lifecycle-only rather than aborting.
+        if (!writeScriptIfChanged(windowsNotifyScriptContent(), notifyScriptPath)) {
+            includeNotify = false;
+            warning = `notify sidecar write failed (${notifyScriptPath}) — notify fallback omitted`;
+        }
+    }
+    const otelEndpoint = includeOtel ? buildOtelEndpoint(opts.daemonHttpPort) : undefined;
+    const body = managedBlockBody({
+        includeNotify,
+        includeOtel,
+        otelEndpoint,
+        daemonHttpPort: opts.daemonHttpPort,
+        platform,
+        notifyScriptPath,
+    });
+    const updated = applyManagedBlock(original, body);
+    if (updated === original) {
+        return { installed: true, warning };
+    }
+    if (writeTextAtomic(updated, path)) {
+        return { installed: true, warning };
+    }
+    return { installed: false, reason: `write failed: ${path}` };
+}
+/** Strip the AgentDeck-managed fence. Idempotent — no-op when the fence
+ *  is absent. Does not delete the config file even if it becomes empty
+ *  (Codex may rely on its existence). */
+export function uninstallCodexHooks(opts = {}) {
+    try {
+        unlinkSync(opts.notifyScriptPath ?? DEFAULT_WINDOWS_NOTIFY_SCRIPT_PATH);
+    }
+    catch { /* absent on POSIX installs — nothing to remove */ }
+    const path = opts.configPath ?? DEFAULT_CODEX_CONFIG_PATH;
+    if (!existsSync(path))
+        return;
+    const original = readText(path);
+    const stripped = removeManagedBlock(original);
+    if (stripped !== original)
+        writeTextAtomic(stripped, path);
+}
+/** Re-apply the managed block when the daemon port (or any other resolved
+ *  field) might have changed. Equivalent to install but renamed for the
+ *  daemon-restart code path so the intent is clearer at the call site. */
+export function migrateCodexHooks(opts = {}) {
+    return installCodexHooksIfNeeded(opts);
+}
+//# sourceMappingURL=codex-install.js.map

package/dist/codex-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-install.js","sourceRoot":"","sources":["../src/codex-install.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,wEAAwE;AACxE,gDAAgD;AAChD,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,oEAAoE;AACpE,qDAAqD;AACrD,uEAAuE;AACvE,uBAAuB;AACvB,EAAE;AACF,wEAAwE;AACxE,mEAAmE;AACnE,wDAAwD;AACxD,EAAE;AACF,gFAAgF;AAChF,2DAA2D;AAE3D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,EAC1B,oBAAoB,EACpB,MAAM,GACP,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAClF;;;;;8CAK8C;AAC9C,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC;AACpG,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAuBjC;;uBAEuB;AACvB,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,CAAC;AACtD,CAAC;AAED;;;;4BAI4B;AAC5B,SAAS,qBAAqB;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,QAAQ,CAAC;QAC9E,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,cAAuB;IAChD,MAAM,IAAI,GAAG,cAAc,IAAI,qBAAqB,EAAE,IAAI,mBAAmB,CAAC;IAC9E,OAAO,oBAAoB,IAAI,iBAAiB,CAAC;AACnD,CAAC;AAaD;;iBAEiB;AACjB,MAAM,UAAU,gBAAgB,CAAC,OAA4B,EAAE;IAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAEnD,MAAM,KAAK,GAAa;QACtB,+DAA+D;QAC/D,iEAAiE;QACjE,YAAY;QACZ,cAAc;KACf,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAElD,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAC9D,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,qBAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;QAChG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;0DAQ0D;AAC1D,SAAS,qBAAqB,CAAC,KAAa,EAAE,QAAyB,EAAE,gBAAyB;IAChG,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,gBAAgB,IAAI,kCAAkC,CAAC;QAC1E,OAAO,uGAAuG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;IACtI,CAAC;IACD,OAAO,yBAAyB,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC;AAC3F,CAAC;AAED;;;;gDAIgD;AAChD,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO;QACL,6BAA6B;QAC7B,yBAAyB;QACzB,8OAA8O;QAC9O,6BAA6B;QAC7B,oHAAoH;QACpH,kHAAkH;QAClH,QAAQ;QACR,IAAI;QACJ,uBAAuB;QACvB,uFAAuF,KAAK,2EAA2E;KACxK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAQD,MAAM,eAAe,GAAoB;IACvC,EAAE,UAAU,EAAE,cAAc,EAAM,cAAc,EAAE,qBAAqB,EAAO,OAAO,EAAE,sBAAsB,EAAE;IAC/G,EAAE,UAAU,EAAE,kBAAkB,EAAE,cAAc,EAAE,0BAA0B,EAAE,OAAO,EAAE,IAAI,EAAE;IAC7F,EAAE,UAAU,EAAE,YAAY,EAAQ,cAAc,EAAE,kBAAkB,EAAU,OAAO,EAAE,GAAG,EAAE;IAC5F,EAAE,UAAU,EAAE,aAAa,EAAO,cAAc,EAAE,gBAAgB,EAAY,OAAO,EAAE,GAAG,EAAE;IAC5F,EAAE,UAAU,EAAE,MAAM,EAAc,cAAc,EAAE,YAAY,EAAgB,OAAO,EAAE,IAAI,EAAE;CAC9F,CAAC;AAEF,SAAS,wBAAwB,CAAC,QAAyB;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,UAAU,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5F,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;wEAEwE;AACxE,SAAS,yBAAyB,CAAC,KAAa,EAAE,QAAyB;IACzE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,iBAAiB,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO;QACL,6BAA6B;QAC7B,yBAAyB;QACzB,8OAA8O;QAC9O,6BAA6B;QAC7B,oHAAoH;QACpH,kHAAkH;QAClH,QAAQ;QACR,IAAI;QACJ,uBAAuB;QACvB,uFAAuF,KAAK,qEAAqE;KAClK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAa;IACrD,OAAO,qFAAqF,qBAAqB,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC3J,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa;IACjD,wEAAwE;IACxE,iEAAiE;IACjE,OAAO,uBAAuB,CAC5B,KAAK,EACL,+GAA+G,CAChH,CAAC;AACJ,CAAC;AAED;;;kEAGkE;AAClE,MAAM,UAAU,0BAA0B,CAAC,KAAK,GAAG,qBAAqB;IACtE,OAAO,uBAAuB,CAAC,KAAK,EAAE,0EAA0E,CAAC,GAAG,IAAI,CAAC;AAC3H,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa,EAAE,cAAsB;IACpE,OAAO;QACL,6CAA6C;QAC7C,0CAA0C;QAC1C,6BAA6B;QAC7B,4CAA4C;QAC5C,sEAAsE;QACtE,6CAA6C;QAC7C,WAAW;QACX,8EAA8E;QAC9E,qFAAqF;QACrF,yBAAyB;QACzB,sKAAsK;QACtK,SAAS;QACT,gBAAgB;QAChB,KAAK;QACL,GAAG;QACH,6DAA6D;QAC7D,WAAW,cAAc,EAAE;QAC3B,+DAA+D;QAC/D,iEAAiE;QACjE,yCAAyC;QACzC,+DAA+D;QAC/D,kGAAkG,KAAK,sFAAsF;QAC7L,QAAQ;KACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAS;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,2EAA2E;AAE3E,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;2CAE2C;AAC3C,SAAS,oBAAoB,CAAC,OAAe,EAAE,IAAY;IACzD,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;IACtD,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,GAAG,IAAI,gBAAgB,CAAC;QACpC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,0EAA0E;AAE1E;;;;;sCAKsC;AACtC,MAAM,UAAU,yBAAyB,CAAC,OAAuB,EAAE;IACjE,IAAI,SAAS,EAAE;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAEnF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,yBAAyB,CAAC;IAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEhC,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,sBAAsB;IACtB,IAAI,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,IAAI,aAAa,GAAG,CAAC,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpE,mEAAmE;IACnE,uEAAuE;IACvE,MAAM,WAAW,GAAG,QAAQ,KAAK,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEpF,IAAI,OAA2B,CAAC;IAChC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,kCAAkC,CAAC;IACrF,IAAI,aAAa,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1C,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,EAAE,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAC1E,aAAa,GAAG,KAAK,CAAC;YACtB,OAAO,GAAG,gCAAgC,gBAAgB,6BAA6B,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,MAAM,IAAI,GAAG,gBAAgB,CAAC;QAC5B,aAAa;QACb,WAAW;QACX,YAAY;QACZ,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ;QACR,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAElD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED;;yCAEyC;AACzC,MAAM,UAAU,mBAAmB,CAAC,OAA2D,EAAE;IAC/F,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,gBAAgB,IAAI,kCAAkC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,yBAAyB,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,QAAQ;QAAE,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED;;0EAE0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,OAAuB,EAAE;IACzD,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC"}

package/dist/codex-mini-toml.d.ts

@@ -0,0 +1,22 @@
+export declare const OPEN_FENCE = "# >>> AgentDeck managed (do not edit) <<<";
+export declare const CLOSE_FENCE = "# <<< AgentDeck managed (do not edit) >>>";
+/** Replace the AgentDeck-managed fenced block (or append one when none
+ *  exists). The body is wrapped between OPEN_FENCE / CLOSE_FENCE so
+ *  removeManagedBlock can strip it cleanly later. Returns the full
+ *  updated TOML text. */
+export declare function applyManagedBlock(text: string, body: string): string;
+/** Strip the AgentDeck-managed block entirely. Idempotent — no-op when
+ *  the fence is absent. */
+export declare function removeManagedBlock(text: string): string;
+/** Detect a top-level `<key> = ...` definition outside the fence. Codex
+ *  `notify` is a top-level key; if the user already wrote one our fenced
+ *  `notify` would be a duplicate-key TOML error. */
+export declare function hasTopLevelKeyOutsideFence(text: string, key: string): boolean;
+/** Detect a `[<table>]`, `[<table>.subkey]`, or matching array-of-table
+ *  header outside the fence. Codex `[otel]` / `[features]` / `[hooks]`
+ *  tables collide with the fence we'd write. */
+export declare function hasTableOutsideFence(text: string, table: string): boolean;
+/** Quote a string as a TOML basic string. Escape backslash, double quote,
+ *  and control characters so the output is always single-line safe. */
+export declare function quoted(s: string): string;
+//# sourceMappingURL=codex-mini-toml.d.ts.map

package/dist/codex-mini-toml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-mini-toml.d.ts","sourceRoot":"","sources":["../src/codex-mini-toml.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,UAAU,8CAA8C,CAAC;AACtE,eAAO,MAAM,WAAW,8CAA8C,CAAC;AAEvE;;;yBAGyB;AACzB,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAwBpE;AAED;2BAC2B;AAC3B,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAcvD;AAED;;oDAEoD;AACpD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAkB7E;AAED;;gDAEgD;AAChD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAczE;AAED;uEACuE;AACvE,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAcxC"}

package/dist/codex-mini-toml.js

@@ -0,0 +1,209 @@
+// codex-mini-toml.ts — minimal lossless TOML editor for ~/.codex/config.toml.
+//
+// Direct port of apple/AgentDeck/Daemon/Core/MiniToml.swift. Must stay
+// byte-compatible: the fence sentinels are shared between the App Store
+// Swift daemon and the Node CLI bridge so a config installed by either
+// side can be uninstalled / re-applied by the other.
+//
+// We deliberately do NOT parse TOML semantically. Codex configs contain
+// user-authored keys, comments, profile tables, and MCP server tables that
+// we have no business round-tripping through a semantic serializer.
+// AgentDeck-managed entries live inside a fenced block:
+//
+//     # >>> AgentDeck managed (do not edit) <<<
+//     <our keys>
+//     # <<< AgentDeck managed (do not edit) >>>
+//
+// applyManagedBlock replaces (or appends) the fence; removeManagedBlock
+// strips it. Everything outside the fence is preserved byte-for-byte.
+export const OPEN_FENCE = '# >>> AgentDeck managed (do not edit) <<<';
+export const CLOSE_FENCE = '# <<< AgentDeck managed (do not edit) >>>';
+/** Replace the AgentDeck-managed fenced block (or append one when none
+ *  exists). The body is wrapped between OPEN_FENCE / CLOSE_FENCE so
+ *  removeManagedBlock can strip it cleanly later. Returns the full
+ *  updated TOML text. */
+export function applyManagedBlock(text, body) {
+    const lines = splitLines(text);
+    const fenceRange = locateFence(lines);
+    const bodyLines = body.length === 0 ? [] : splitLines(body);
+    let replacement = [OPEN_FENCE, ...bodyLines, CLOSE_FENCE];
+    if (fenceRange) {
+        const preservedHookState = extractCodexHookState(lines.slice(fenceRange.start + 1, fenceRange.end - 1));
+        if (preservedHookState.length > 0) {
+            replacement = [...replacement, '', ...preservedHookState];
+        }
+        lines.splice(fenceRange.start, fenceRange.end - fenceRange.start, ...replacement);
+    }
+    else {
+        // Pad with a blank line for readability when appending to a non-empty
+        // file. Avoids glueing our fence onto the user's last key.
+        if (lines.length > 0 && lines[lines.length - 1] !== '') {
+            lines.push('');
+        }
+        lines.push(...replacement);
+    }
+    return lines.join('\n');
+}
+/** Strip the AgentDeck-managed block entirely. Idempotent — no-op when
+ *  the fence is absent. */
+export function removeManagedBlock(text) {
+    const lines = splitLines(text);
+    const fenceRange = locateFence(lines);
+    if (!fenceRange)
+        return text;
+    lines.splice(fenceRange.start, fenceRange.end - fenceRange.start);
+    // Collapse a trailing blank line that we may have inserted in
+    // applyManagedBlock so removeManagedBlock truly returns the file to
+    // its pre-apply shape.
+    while (lines.length > 0 && lines[lines.length - 1] === '') {
+        lines.pop();
+    }
+    // Restore a single trailing newline if the original ended with one.
+    if (text.endsWith('\n'))
+        lines.push('');
+    return lines.join('\n');
+}
+/** Detect a top-level `<key> = ...` definition outside the fence. Codex
+ *  `notify` is a top-level key; if the user already wrote one our fenced
+ *  `notify` would be a duplicate-key TOML error. */
+export function hasTopLevelKeyOutsideFence(text, key) {
+    const escaped = escapeRegex(key);
+    const regex = new RegExp(`^\\s*${escaped}\\s*=`);
+    let insideFence = false;
+    let insideTable = false;
+    for (const line of splitLines(text)) {
+        if (line === OPEN_FENCE) {
+            insideFence = true;
+            continue;
+        }
+        if (line === CLOSE_FENCE) {
+            insideFence = false;
+            continue;
+        }
+        if (insideFence)
+            continue;
+        const trimmed = line.trim();
+        if (trimmed.startsWith('[') && trimmed.endsWith(']')) {
+            insideTable = true;
+            continue;
+        }
+        if (insideTable)
+            continue;
+        if (regex.test(line))
+            return true;
+    }
+    return false;
+}
+/** Detect a `[<table>]`, `[<table>.subkey]`, or matching array-of-table
+ *  header outside the fence. Codex `[otel]` / `[features]` / `[hooks]`
+ *  tables collide with the fence we'd write. */
+export function hasTableOutsideFence(text, table) {
+    const escaped = escapeRegex(table);
+    // Match exactly `[otel]`, `[otel.something]`, `[[otel.something]]`,
+    // but not `[otelfoo]`. Whitespace inside brackets is permissive.
+    const regex = new RegExp(`^\\s*\\[\\[?\\s*${escaped}(\\.[A-Za-z0-9_\\-]+)*\\s*\\]\\]?\\s*$`);
+    let insideFence = false;
+    for (const line of splitLines(text)) {
+        if (line === OPEN_FENCE) {
+            insideFence = true;
+            continue;
+        }
+        if (line === CLOSE_FENCE) {
+            insideFence = false;
+            continue;
+        }
+        if (insideFence)
+            continue;
+        if (table === 'hooks' && isCodexHookStateHeader(line))
+            continue;
+        if (regex.test(line))
+            return true;
+    }
+    return false;
+}
+/** Quote a string as a TOML basic string. Escape backslash, double quote,
+ *  and control characters so the output is always single-line safe. */
+export function quoted(s) {
+    let out = '"';
+    for (const ch of s) {
+        const cp = ch.codePointAt(0);
+        if (ch === '\\')
+            out += '\\\\';
+        else if (ch === '"')
+            out += '\\"';
+        else if (ch === '\n')
+            out += '\\n';
+        else if (ch === '\r')
+            out += '\\r';
+        else if (ch === '\t')
+            out += '\\t';
+        else if (cp < 0x20)
+            out += `\\u${cp.toString(16).padStart(4, '0')}`;
+        else
+            out += ch;
+    }
+    out += '"';
+    return out;
+}
+// ─── internals ──────────────────────────────────────────────────────────
+function splitLines(text) {
+    // String.split('\n') keeps trailing-empty so an input ending in "\n"
+    // round-trips cleanly when re-joined with "\n".
+    return text.split('\n');
+}
+function locateFence(lines) {
+    const start = lines.indexOf(OPEN_FENCE);
+    if (start === -1)
+        return null;
+    // Find first close fence at-or-after start. Defensive against truncated
+    // files: if no close fence is found, treat everything from the open
+    // fence to the end as managed.
+    let end = -1;
+    for (let i = start; i < lines.length; i++) {
+        if (lines[i] === CLOSE_FENCE) {
+            end = i;
+            break;
+        }
+    }
+    if (end === -1)
+        end = lines.length - 1;
+    return { start, end: end + 1 };
+}
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function extractCodexHookState(lines) {
+    const out = [];
+    let capturing = false;
+    for (const line of lines) {
+        const tableHeader = isTableHeader(line);
+        if (isCodexHookStateHeader(line)) {
+            capturing = true;
+            out.push(line);
+            continue;
+        }
+        if (capturing && tableHeader) {
+            break;
+        }
+        if (capturing) {
+            out.push(line);
+        }
+    }
+    while (out.length > 0 && isTrailingNonDataLine(out[out.length - 1])) {
+        out.pop();
+    }
+    return out;
+}
+function isCodexHookStateHeader(line) {
+    const trimmed = line.trim();
+    return trimmed === '[hooks.state]' || (trimmed.startsWith('[hooks.state.') && trimmed.endsWith(']'));
+}
+function isTableHeader(line) {
+    const trimmed = line.trim();
+    return trimmed.startsWith('[') && trimmed.endsWith(']');
+}
+function isTrailingNonDataLine(line) {
+    const trimmed = line.trim();
+    return trimmed.length === 0 || trimmed.startsWith('#');
+}
+//# sourceMappingURL=codex-mini-toml.js.map