@agfpd/iapeer 0.4.133 → 0.4.134

package/docs/12-cli-reference.md

@@ -77,7 +77,7 @@ The full list of `iapeer <command>`. General rules: `--help` / `-h` anywhere in
 |---|---|
 | `enable <plugin> [peer] [--no-setup]` | Install and enable a capability plugin for a peer (across runtimes), run its setup step. |
 | `native-memory <off\|on> (--peer <p> \| --all)` | Turn off/restore a peer's runtimes' native memory. |
-| `trust-hooks <hooks.json> [--check]` | Pre-trust codex hooks from a file (without the modal). `--check` — a divergence report. |
+| `trust-hooks <hooks.json> [--check]` | Pre-trust codex hooks from a file (without the modal). `--check` — a divergence report. The core also re-asserts the trust of `<cwd>/.codex/hooks.json` on EVERY codex launch (idempotent), and `rename` / `approval-mode yolo` restore what must stay trusted — a codex peer boots to its input with no human even after its trust was wiped (18.10). |
 
 ## Agent self-calls
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agfpd/iapeer",
-  "version": "0.4.133",
+  "version": "0.4.134",
   "description": "Run Claude Code and Codex CLI as local background agents that message each other, wake on demand, and share one memory.",
   "license": "Apache-2.0",
   "author": "agfpd",

package/src/approval/install.ts

@@ -161,6 +161,10 @@ export function removeCodexApproval(cwd: string, env: NodeJS.ProcessEnv = proces
     return path
   }
   writeFileAtomic(path, `${JSON.stringify(obj, null, 2)}\n`, 0o644)
+  // The trust wipe above is cwd-wide (codex keys state POSITIONALLY, so removing our group shifts the
+  // others' keys). Re-seed whatever hooks REMAIN — the memory provider's among them — or the next codex
+  // boot stops at «hooks need review» (incident 18.10).
+  preSeedCodexHooksTrust(path, env)
   return path
 }
 

package/src/cli/index.ts

@@ -1439,9 +1439,13 @@ export async function renamePeerCli(
       const { preTrustCodexCwd, removeCodexCwdTrust } = await import('../launch/nativeMemory.ts')
       preTrustCodexCwd(newCwd, env)
       removeCodexCwdTrust(oldCwd, env)
-      const { removeCodexHooksTrustUnder } = await import('../launch/codexHooksTrust.ts')
+      const { removeCodexHooksTrustUnder, preSeedCodexHooksTrust } = await import('../launch/codexHooksTrust.ts')
       removeCodexHooksTrustUnder(oldCwd, env)
-      sideEffects.push('codex-trust: re-trusted new cwd + cleaned old')
+      // Hooks trust is keyed by the hooks.json PATH, so it must move with the cwd — without this a
+      // rename round-trip (a→b→a) wiped it entirely and codex stopped at «hooks need review» (18.10).
+      const newHooks = join(newCwd, '.codex', 'hooks.json')
+      if (existsSync(newHooks)) preSeedCodexHooksTrust(newHooks, env)
+      sideEffects.push('codex-trust: re-trusted new cwd (+ hooks) + cleaned old')
     } catch (e) {
       sideEffects.push(`codex-trust: failed (${e instanceof Error ? e.message : String(e)})`)
     }

package/src/launch/adapters/codex.ts

@@ -41,10 +41,11 @@
 
 import { homedir } from 'os'
 import { join } from 'path'
-import { readdirSync, realpathSync, statSync } from 'fs'
+import { existsSync, readdirSync, realpathSync, statSync } from 'fs'
+import { preSeedCodexHooksTrust } from '../codexHooksTrust.ts'
 import { codexSessionCwd, lastTimestampedEntryMs } from './transcriptTail.ts'
 import { detectNumberedModal } from './modalDetect.ts'
-import type { ApprovalMode, ControlCommand, ControlPlan, LaunchAdapterConfig, LaunchSpec, RuntimeAdapter } from '../types.ts'
+import type { ApprovalMode, ControlCommand, ControlPlan, LaunchAdapterConfig, LaunchSpec, PreparedLaunch, RuntimeAdapter } from '../types.ts'
 
 /**
  * The `/goal` subcommands we will type into a live codex session (see executeControl → 'goal').
@@ -170,6 +171,27 @@ export const codexAdapter: RuntimeAdapter = {
   kind: 'tui',
   usesDoctrine: true,
 
+  /**
+   * Hooks trust, re-asserted on EVERY launch (incident 18.10: oc-test-nemo/codex stopped at «PostToolUse
+   * hooks — 1 hook needs review» after a rename round-trip had wiped its `[hooks.state]` — a fresh codex
+   * that meets an untrusted hook waits for a human forever). The invariant «a codex peer boots to its
+   * input with no human» therefore lives HERE, not only at provision time: whatever erased the trust
+   * (rename, an approval-mode flip, a hand edit of config.toml), the next launch restores it. The peer's
+   * `.codex/hooks.json` is operator/provider-owned configuration, trusted like its `.mcp.json`.
+   * Idempotent (no write when the hashes already match); a failure is a launch WARNING, never a block —
+   * the modal is still better than no session, and the warning names it.
+   */
+  prepareLaunch(spec, _baseEnv, cfg): PreparedLaunch {
+    const env = cfg.env ?? process.env
+    const hooks = join(spec.cwd, '.codex', 'hooks.json')
+    const warnings: string[] = []
+    if (existsSync(hooks)) {
+      const t = preSeedCodexHooksTrust(hooks, env)
+      if (t.state === 'failed') warnings.push(`codex hooks trust not seeded (${t.detail ?? 'unknown'}) — a review modal may block the boot`)
+    }
+    return { env: {}, ...(warnings.length ? { warnings } : {}) }
+  },
+
   /**
    * Delivery markers for submitIntoTui (docs/Рантайм codex "Доставка"):
    *   - promptGlyphs ['›'] — codex's input-row arrow (the same stable invariant as