@amsterdamdatalabs/adl-agent-control-darwin-arm64 0.1.4

package/packages/agent-settings/managed/claude-managed-settings.json

@@ -0,0 +1,150 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "allowManagedHooksOnly": false,
+  "permissions": {
+    "deny": ["EnterWorktree", "Agent(isolation:worktree)", "Bash(git worktree add:*)"]
+  },
+  "hooks": {
+    "PreToolUse": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "SessionStart": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "PermissionRequest": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "PostCompact": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "PostToolUseFailure": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "StopFailure": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "SubagentStart": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ],
+    "TeammateIdle": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "sh -c 'h=\"$HOME/.orca/agent-hooks/claude-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'"
+          }
+        ]
+      }
+    ]
+  }
+}

package/packages/agent-settings/managed/codex-requirements.toml

@@ -0,0 +1,105 @@
+# adl items 10/17 — the managed baseline hook (docs/architecture/cli-design.md §2/§3).
+#
+# This is the committed TEMPLATE. `bin/reconcile`
+# (packages/fleet/src/managed-settings.ts, bin/managed-settings) installs it
+# verbatim, unchanged, to /etc/codex/requirements.toml on every
+# reconciliation (both `plan` and `apply` mode) — see README.md in this
+# directory for the full install contract, including the separate,
+# per-device-rendered managed_config.toml that carries
+# shell_environment_policy.set.
+#
+# STATUS.md 12p decision 13 (Tarun, 2026-09-29): "adl is LOCAL REPO FIRST …
+# the repos where adl-config.toml does not exist has no business of running
+# hooks"; setting up Codex hooks globally "is incorrect". `adl hook …` is
+# therefore NOT wired from this machine-global layer any more — Codex's own
+# per-repo `<repo>/.codex/hooks.json` (packages/agent-hooks/deploy-profile.json,
+# written by `adl hooks deploy`) is the only place `adl hook pre-tool-use
+# --host=codex` / `adl hook lean-ctx …` run for this surface. Confirmed from
+# https://learn.chatgpt.com/docs/hooks (developers.openai.com/codex/hooks
+# redirects here, fetched 2026-09-29): Codex supports genuine project-level
+# hooks at `<repo>/.codex/hooks.json`, discovered "next to active config
+# layers", and hook sources are MERGED across layers rather than one
+# replacing another — so this file no longer needs to carry the adl commands
+# itself for them to run in a managed repo. The same page: "Project-local
+# hooks load only when the project `.codex/` layer is trusted" — an
+# untrusted Codex workspace does not run `<repo>/.codex/hooks.json` at all;
+# that is Codex's own trust gate, not something this file can affect either
+# way.
+#
+# `allow_managed_hooks_only` is Codex's fail-closed equivalent of Claude
+# Code's `allowManagedHooksOnly`: set to `true` it made a repository or user
+# Codex config unable to add a hook that overrides or removes ones wired
+# here. Decision 13 sets it to `false`: with no `adl hook` entries left in
+# this file to protect, the lock's only remaining effect was to make a
+# repository's own `.codex/hooks.json` — the carrier `adl hooks deploy`
+# writes — silently not run. Per
+# https://developers.openai.com/codex/enterprise/managed-configuration
+# (fetched 2026-09-27, re-confirmed 2026-09-29): "Admins can set top-level
+# allow_managed_hooks_only = true in requirements.toml" — the admin-set value
+# IS the lock; `false` here is the explicit, committed statement that this
+# layer does not lock hooks, so the per-repo carrier is the one that runs.
+allow_managed_hooks_only = false
+
+# Orca wiring (STATUS.md item 12d, Tarun 2026-09-27: "keep the orca hooks,
+# let orca manage it, orca is allowed for adl" -- the MANAGED layer calls
+# Orca). Orca (/Applications/Orca.app) installs its own user-level hooks
+# calling `~/.orca/agent-hooks/codex-hook.sh`, a report-only script (reads
+# the event JSON on stdin, POSTs it to Orca on 127.0.0.1 with a token,
+# always exits 0; does nothing unless ORCA_PANE_KEY/ORCA_AGENT_HOOK_PORT/
+# ORCA_AGENT_HOOK_TOKEN are set) -- read verbatim as part of this change.
+# This entry is Orca's own global reporting hook, unrelated to
+# `allow_managed_hooks_only`/the adl per-repo carrier above — kept exactly as
+# it was; Tarun decides Orca's own wiring separately (STATUS.md 12p decision
+# 13 report, "remain global"). `$HOME`, never a hard-coded `/Users` path.
+# Does nothing (exit 0, no output) when the script is absent or not
+# executable.
+[[hooks.PreToolUse]]
+hooks = [{ type = "command", command = "sh -c 'h=\"$HOME/.orca/agent-hooks/codex-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'" }]
+
+[[hooks.PostToolUse]]
+hooks = [{ type = "command", command = "sh -c 'h=\"$HOME/.orca/agent-hooks/codex-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'" }]
+
+
+# lean-ctx `observe` hooks: REMOVED (STATUS.md 12p item 13, Tarun,
+# 2026-09-29 — "That's only for observation layer. We don't want to send any
+# data to remote."). These five session-lifecycle hooks (SessionStart,
+# SessionEnd, Stop, PreCompact, UserPromptSubmit), added 2026-09-27 for
+# parity with Tarun's then-live ~/.claude/settings.json, called the
+# host-agnostic `lean-ctx hook observe` subcommand directly with no
+# `adl hook`/`--host` wrapper. `SessionStart`/`Stop`/`UserPromptSubmit` keep
+# their Orca conditional hook below, now the only entry on each; `SessionEnd`
+# and `PreCompact` (Codex's own 8-event Orca list excludes both) carried
+# `observe` alone and now have no `[[hooks.*]]` entry at all — see
+# `packages/agent-settings/tests/managed-artifacts.test.ts`.
+
+[[hooks.SessionStart]]
+matcher = ".*"
+hooks = [{ type = "command", command = "sh -c 'h=\"$HOME/.orca/agent-hooks/codex-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'" }]
+
+[[hooks.Stop]]
+matcher = ".*"
+hooks = [{ type = "command", command = "sh -c 'h=\"$HOME/.orca/agent-hooks/codex-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'" }]
+
+[[hooks.UserPromptSubmit]]
+matcher = ".*"
+hooks = [{ type = "command", command = "sh -c 'h=\"$HOME/.orca/agent-hooks/codex-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'" }]
+
+# Orca events with no prior adl/lean-ctx hook: STATUS.md item 12d names these
+# among Codex's 8 (SessionStart, UserPromptSubmit, PreToolUse,
+# PermissionRequest, PostToolUse, SubagentStart, SubagentStop, Stop) — the
+# Orca entry is simply the sole hook for the event, same conditional
+# $HOME-gated command as above. `PreCompact` and `SessionEnd` are NOT in
+# Tarun's 8-event list and no longer carry a `lean-ctx observe` hook either
+# (STATUS.md 12p item 13, 2026-09-29 — removed), so neither has any
+# `[[hooks.*]]` entry left at all.
+[[hooks.PermissionRequest]]
+matcher = ".*"
+hooks = [{ type = "command", command = "sh -c 'h=\"$HOME/.orca/agent-hooks/codex-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'" }]
+
+[[hooks.SubagentStart]]
+matcher = ".*"
+hooks = [{ type = "command", command = "sh -c 'h=\"$HOME/.orca/agent-hooks/codex-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'" }]
+
+[[hooks.SubagentStop]]
+matcher = ".*"
+hooks = [{ type = "command", command = "sh -c 'h=\"$HOME/.orca/agent-hooks/codex-hook.sh\"; if [ -f \"$h\" ] && [ -r \"$h\" ] && [ -x \"$h\" ]; then exec \"$h\"; else cat >/dev/null 2>&1 || :; fi'" }]