@amsterdamdatalabs/adl-agent-control-darwin-arm64 0.1.4

package/packages/agent-settings/protected.json

@@ -0,0 +1,470 @@
+{
+  "schema": 1,
+  "paths": [
+    {
+      "path": ".claude/plugins/marketplaces/claude-plugins-official",
+      "reason": "Anthropic's automatically available official plugin marketplace"
+    },
+    {
+      "path": ".codex/cache/bundled_plugin_exclusions/71fc62b601dc012d675f10ed53433cec43c483703fa30014cafc5fe09a9ed58f.json",
+      "reason": "exact Codex application cache file"
+    },
+    {
+      "path": ".codex/cache/codex_app_directory/bd62752e878f1f53fb17fbee043a0d9c9fc783ab.json",
+      "reason": "exact Codex application cache file"
+    },
+    {
+      "path": ".codex/cache/codex_apps_server_info/44f8eaa5fb6fa5ca2183d034be6befd592891316.json",
+      "reason": "exact Codex application cache file"
+    },
+    {
+      "path": ".codex/cache/codex_apps_tools/44f8eaa5fb6fa5ca2183d034be6befd592891316.json",
+      "reason": "exact Codex application cache file"
+    },
+    {
+      "path": ".codex/cache/remote_plugin_catalog/27c443a9dcc324fa.json",
+      "reason": "exact Codex remote catalog cache file"
+    },
+    {
+      "path": ".codex/cache/remote_plugin_catalog/8df7393387453117.json",
+      "reason": "exact Codex remote catalog cache file"
+    },
+    {
+      "path": ".codex/cache/remote_plugin_catalog/dec36ca74cf324c0.json",
+      "reason": "exact Codex remote catalog cache file"
+    },
+    {
+      "path": ".codex/plugins/.plugin-appserver",
+      "reason": "Codex plugin runtime supplied by the application"
+    },
+    {
+      "path": ".codex/plugins/.remote-plugin-install-staging",
+      "reason": "Codex plugin staging directory supplied by the application"
+    },
+    {
+      "path": ".codex/plugins/cache/openai-bundled",
+      "reason": "OpenAI-bundled Codex plugins"
+    },
+    {
+      "path": ".codex/plugins/cache/openai-primary-runtime",
+      "reason": "OpenAI primary runtime plugins"
+    },
+    {
+      "path": ".codex/skills/.system",
+      "reason": "Codex system skills supplied by the application"
+    },
+    {
+      "path": ".codex/vendor_imports/skills",
+      "reason": "Codex vendor skill catalog"
+    },
+    {
+      "path": ".codex/vendor_imports/skills-curated-cache.json",
+      "reason": "exact Codex vendor skill catalog cache file"
+    },
+    {
+      "path": ".cursor/skills-cursor/.sync-manifest.json",
+      "reason": "exact Cursor-bundled skill manifest file"
+    },
+    {
+      "path": ".cursor/skills-cursor/automate",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/autopilot",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/canvas",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/create-hook",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/create-rule",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/create-skill",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/create-subagent",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/loop",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/migrate-to-skills",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/onboard",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/rename-chat",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/review",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/review-bugbot",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/review-security",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/sdk",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/shell",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/split-to-prs",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/statusline",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/update-cli-config",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".cursor/skills-cursor/update-cursor-settings",
+      "reason": "Cursor-bundled skill"
+    },
+    {
+      "path": ".codex/rules/default.rules",
+      "reason": "Codex application's own exec-policy file; Codex persists the user's approved command prefixes here"
+    },
+    {
+      "path": ".config/opencode/plugins/orca-opencode-status.js",
+      "reason": "Orca's own OpenCode status-line plugin, matched by exact path (it carries no .orca/agent-hooks/ content reference to protect it the content-based way); Orca is allowed for adl (Tarun, 2026-09-27) -- the managed layer calls it, this user-level copy is not swept"
+    }
+  ],
+  "json_entries": [
+    {
+      "target": ".claude/plugins/known_marketplaces.json",
+      "selector": "/claude-plugins-official",
+      "reason": "Anthropic's automatically available official plugin marketplace registration"
+    }
+  ],
+  "toml_tables": [
+    {
+      "target": ".codex/config.toml",
+      "header": "[mcp_servers.node_repl]",
+      "reason": "Codex-provided Node REPL runtime"
+    },
+    {
+      "target": ".codex/config.toml",
+      "header": "[mcp_servers.node_repl.env]",
+      "reason": "Codex-provided Node REPL runtime environment"
+    }
+  ],
+  "text_blocks": [
+    {
+      "target": ".zshenv",
+      "name": "enact-os dev secrets (managed)",
+      "reason": "owner's enact-os development secret values, not agent-tool wiring; removing it would destroy credentials"
+    }
+  ],
+  "root_keys": [
+    {
+      "target": ".claude/settings.json",
+      "keys": [
+        "$schema",
+        "advisorModel",
+        "agent",
+        "agentPushNotifEnabled",
+        "allowAllClaudeAiMcps",
+        "allowedChannelPlugins",
+        "allowedHttpHookUrls",
+        "allowedMcpServers",
+        "allowManagedHooksOnly",
+        "allowManagedMcpServersOnly",
+        "allowManagedPermissionRulesOnly",
+        "alwaysThinkingEnabled",
+        "apiKeyHelper",
+        "askUserQuestionTimeout",
+        "attribution",
+        "autoCompactEnabled",
+        "autoCompactWindow",
+        "autoConnectIde",
+        "autoContinueAtUsageLimit",
+        "autoInstallIdeExtension",
+        "autoMemoryDirectory",
+        "autoMemoryEnabled",
+        "autoMode",
+        "autoScrollEnabled",
+        "autoUpdatesChannel",
+        "availableModels",
+        "awaySummaryEnabled",
+        "awsAuthRefresh",
+        "awsCredentialExport",
+        "axScreenReader",
+        "bashOutputMaxChars",
+        "blockedMarketplaces",
+        "browserExternalPageTools",
+        "channelsEnabled",
+        "claudeMd",
+        "claudeMdExcludes",
+        "cleanupPeriodDays",
+        "companyAnnouncements",
+        "copyOnSelect",
+        "crossSessionInbound",
+        "defaultShell",
+        "deniedMcpServers",
+        "desktopSessionCleanupPeriodDays",
+        "dialogExpiry",
+        "diffTool",
+        "disableAgentView",
+        "disableAllHooks",
+        "disableArtifact",
+        "disableAutoMode",
+        "disableBrowserExternalNavigation",
+        "disableBundledSkills",
+        "disableClaudeAiConnectors",
+        "disableCommandPluginSources",
+        "disableDeepLinkRegistration",
+        "disableDesktopLocalSessions",
+        "disabledMcpjsonServers",
+        "disableMobileSimulatorTools",
+        "disableRemoteControl",
+        "disableSideloadFlags",
+        "disableSkillShellExecution",
+        "disableWorkflows",
+        "editorMode",
+        "effortLevel",
+        "emojiCompletionEnabled",
+        "enableAllProjectMcpServers",
+        "enableArtifact",
+        "enabledMcpjsonServers",
+        "enabledPlugins",
+        "enableWorkflows",
+        "enforceAvailableModels",
+        "env",
+        "externalEditorContext",
+        "fallbackModel",
+        "fastMode",
+        "fastModePerSessionOptIn",
+        "feedbackDrafts",
+        "feedbackSurveyRate",
+        "fileCheckpointingEnabled",
+        "fileSuggestion",
+        "footerLinksRegexes",
+        "forceLoginGatewayUrl",
+        "forceLoginMethod",
+        "forceLoginOrgUUID",
+        "forceRemoteSettingsRefresh",
+        "gcpAuthRefresh",
+        "hooks",
+        "httpHookAllowedEnvVars",
+        "includeCoAuthoredBy",
+        "includeGitInstructions",
+        "inputNeededNotifEnabled",
+        "isolatePeerMachines",
+        "keybindingFlavor",
+        "language",
+        "managedMcpServers",
+        "managedSourcesBehavior",
+        "maxEffortLevel",
+        "mcpServers",
+        "minimumVersion",
+        "model",
+        "modelOverrides",
+        "modelPicker",
+        "modelPricing",
+        "modelSettings",
+        "otelHeadersHelper",
+        "outputStyle",
+        "parentSettingsBehavior",
+        "permissionExplainerEnabled",
+        "permissions",
+        "plansDirectory",
+        "pluginConfigs",
+        "pluginSuggestionMarketplaces",
+        "pluginTrustMessage",
+        "policyHelper",
+        "preferredNotifChannel",
+        "prefersReducedMotion",
+        "processWrapper",
+        "promptCacheTtl",
+        "promptSuggestionEnabled",
+        "prUrlTemplate",
+        "remote",
+        "remoteControlAtStartup",
+        "requiredMaximumVersion",
+        "requiredMinimumVersion",
+        "respectGitignore",
+        "respondToBashCommands",
+        "sandbox",
+        "showClearContextOnPlanAccept",
+        "showThinkingSummaries",
+        "showTurnDuration",
+        "skillListingBudgetFraction",
+        "skillListingMaxDescChars",
+        "skillOverrides",
+        "skipAutoPermissionPrompt",
+        "skipDangerousModePermissionPrompt",
+        "skipWebFetchPreflight",
+        "skipWorkflowUsageWarning",
+        "spellcheck",
+        "spinnerTipsEnabled",
+        "spinnerTipsOverride",
+        "spinnerVerbs",
+        "sshConfigs",
+        "sshHostAllowlist",
+        "statusLine",
+        "strictKnownMarketplaces",
+        "strictPluginOnlyCustomization",
+        "syncClaudeAiSkills",
+        "teammateMode",
+        "theme",
+        "tui",
+        "useAutoModeDuringPlan",
+        "verbose",
+        "webSearch",
+        "workspaceTrust"
+      ],
+      "reason": "owner's declared Claude Code user settings baseline, derived from the documented top-level settings.json key reference (https://code.claude.com/docs/en/settings-reference, fetched 2026-09-14) rather than only the keys this Mac's settings.json currently happens to use, so a legitimate Claude Code key this Mac has not yet set is never misclassified as foreign on another fleet device; hooks, mcpServers, enabledPlugins, and permissions allow/deny/ask are containers whose entries are still swept individually. Deliberately excludes the documented key extraKnownMarketplaces: registering a marketplace there is always third-party/global wiring (Anthropic's own marketplace is registered separately, in known_marketplaces.json, protected by its own json_entries identity below), so the whole container is left out of the baseline on purpose and is always a sweep candidate when non-empty. This list needs periodic re-sync against that page as Anthropic ships new settings keys."
+    },
+    {
+      "target": ".codex/config.toml",
+      "keys": [
+        "agents",
+        "allow_login_shell",
+        "analytics",
+        "apps",
+        "approval_policy",
+        "approvals_reviewer",
+        "auto_review",
+        "background_terminal_max_timeout",
+        "browser_use",
+        "chatgpt_base_url",
+        "check_for_update_on_startup",
+        "cli_auth_credentials_store",
+        "compact_prompt",
+        "computer_use",
+        "default_permissions",
+        "desktop",
+        "developer_instructions",
+        "disable_paste_burst",
+        "experimental_compact_prompt_file",
+        "experimental_use_unified_exec_tool",
+        "features",
+        "feedback",
+        "file_opener",
+        "forced_chatgpt_workspace_id",
+        "forced_login_method",
+        "hide_agent_reasoning",
+        "history",
+        "instructions",
+        "log_dir",
+        "marketplaces",
+        "mcp_oauth_callback_port",
+        "mcp_oauth_callback_url",
+        "mcp_oauth_credentials_store",
+        "mcp_servers",
+        "memories",
+        "model",
+        "model_auto_compact_token_limit",
+        "model_auto_compact_token_limit_scope",
+        "model_catalog_json",
+        "model_context_window",
+        "model_instructions_file",
+        "model_providers",
+        "model_reasoning_effort",
+        "model_reasoning_summary",
+        "model_supports_reasoning_summaries",
+        "model_verbosity",
+        "notice",
+        "notify",
+        "openai_base_url",
+        "oss_provider",
+        "otel",
+        "permissions",
+        "personality",
+        "plan_mode_reasoning_effort",
+        "plugins",
+        "project_doc_fallback_filenames",
+        "project_doc_max_bytes",
+        "project_root_markers",
+        "projects",
+        "review_model",
+        "sandbox_mode",
+        "sandbox_workspace_write",
+        "service_tier",
+        "shell_environment_policy",
+        "show_raw_agent_reasoning",
+        "skills",
+        "sqlite_home",
+        "suppress_unstable_features_warning",
+        "tool_output_token_limit",
+        "tool_suggest",
+        "tools",
+        "tui",
+        "web_search",
+        "windows",
+        "windows_wsl_setup_acknowledged"
+      ],
+      "reason": "owner's declared Codex settings baseline plus Codex-application tables, derived from the documented top-level config.toml key reference (https://developers.openai.com/codex/config-reference, fetched 2026-09-14 via its learn.chatgpt.com/docs/config-file/config-reference redirect target) rather than only the keys this Mac's config.toml currently happens to use; mcp_servers and hooks entries are still swept individually. This list needs periodic re-sync against that page as OpenAI ships new config keys."
+    },
+    {
+      "target": ".kimi-code/config.toml",
+      "keys": [
+        "default_model",
+        "default_permission_mode",
+        "services",
+        "providers",
+        "models",
+        "thinking",
+        "hooks"
+      ],
+      "reason": "Kimi Code provider/model settings baseline plus the permission mode surface-policy declares (packages/agent-settings/surface-policy.json) -- without it the sweep strips the posture the cascade just wrote, and the two fight every reconcile; [[hooks]] outside the ADL managed block are still swept individually"
+    },
+    {
+      "target": ".cursor/hooks.json",
+      "keys": [
+        "version",
+        "hooks"
+      ],
+      "reason": "Cursor hooks file schema keys; hook entries are still swept individually"
+    },
+    {
+      "target": ".cursor/mcp.json",
+      "keys": [
+        "mcpServers"
+      ],
+      "reason": "Cursor MCP file schema key; server entries are still swept individually"
+    },
+    {
+      "target": ".codex/hooks.json",
+      "keys": [
+        "hooks"
+      ],
+      "reason": "Codex hooks file schema key; hook entries are still swept individually"
+    },
+    {
+      "target": ".config/opencode/opencode.json",
+      "keys": [
+        "$schema",
+        "mcp",
+        "permission",
+        "plugin"
+      ],
+      "reason": "OpenCode config schema keys; mcp, permission, and plugin entries are still swept individually"
+    }
+  ]
+}

package/packages/agent-settings/src/deploy/agent-render.ts

@@ -0,0 +1,94 @@
+/**
+ * Renders one source AgentDef (agent-toml.ts) into a surface's file text —
+ * generically, from that AgentSurface's own `frontMatter` (md) or
+ * `fields`+`bodyField` (toml) in deploy-profile.json (profile.ts). This
+ * module hard-codes no surface name, no field name, and no constant value:
+ * every key, source, constant, presence gate and nesting comes from the
+ * profile document. See profile.ts's header for exactly what stays in
+ * code instead (the `from` vocabulary's meaning, the `csv-list` split
+ * transform, and the front-matter/TOML text wrapper mechanics below).
+ */
+import type { AgentDef } from "./agent-toml.js";
+import type { AgentFromToken, AgentFrontMatterField, AgentSurface, AgentTomlField } from "./profile.js";
+
+function resolveFrom(token: AgentFromToken, def: AgentDef): string | undefined {
+  switch (token) {
+    case "name":
+      return def.name;
+    case "description":
+      return def.description;
+    case "model":
+      return def.model;
+    case "claude_model":
+      return def.claudeModel;
+    case "cursor_model":
+      return def.cursorModel;
+    case "tools":
+      return def.tools;
+    case "model_reasoning_effort":
+      return def.modelReasoningEffort;
+    case "sandbox_mode":
+      return def.sandboxMode;
+  }
+}
+
+function scalarLine(indent: string, key: string, value: string | boolean | number): string {
+  return `${indent}${key}: ${value}`;
+}
+
+/** Renders one front-matter field (and, recursively, its nested `fields`) as zero or more lines. `[]` when `presentIf` gates it off. */
+function renderFrontMatterField(field: AgentFrontMatterField, def: AgentDef, indent: string): readonly string[] {
+  if (field.presentIf !== undefined && resolveFrom(field.presentIf, def) === undefined) return [];
+
+  if (field.fields !== undefined) {
+    return [`${indent}${field.key}:`, ...field.fields.flatMap((sub) => renderFrontMatterField(sub, def, `${indent}  `))];
+  }
+
+  if (field.const !== undefined) return [scalarLine(indent, field.key, field.const)];
+
+  if (field.from !== undefined) {
+    const raw = resolveFrom(field.from, def);
+    if (raw === undefined) return [];
+    if (field.style === "csv-list") {
+      const items = raw.split(",").map((t) => t.trim());
+      return [`${indent}${field.key}:`, ...items.map((item) => `${indent}  - ${item}`)];
+    }
+    return [scalarLine(indent, field.key, raw)];
+  }
+
+  return [];
+}
+
+/** `---\n<front matter>\n---\n\n<body>` — the YAML front-matter wrapper is structural (inherent to Markdown front matter), not a per-surface value, so it stays here; every LINE inside it comes from `surface.frontMatter`. */
+export function renderAgentMd(surface: AgentSurface, def: AgentDef): string {
+  const lines = (surface.frontMatter ?? []).flatMap((field) => renderFrontMatterField(field, def, ""));
+  return `---\n${lines.join("\n")}\n---\n\n${def.developerInstructions}`;
+}
+
+function tomlBasicString(value: string): string {
+  return JSON.stringify(value);
+}
+
+function resolveTomlField(field: AgentTomlField, def: AgentDef): string {
+  const value = resolveFrom(field.from, def);
+  if (value === undefined) throw new Error(`agent "${def.name}" has no value for TOML field "${field.key}" (from "${field.from}")`);
+  return value;
+}
+
+/** Flat `key = "value"` lines plus one `bodyField = """..."""` block. The `key = value` / triple-quoted-string TEXT FORMAT is structural (inherent to TOML), not a per-surface value; which keys exist and their order come from `surface.fields`. */
+export function renderAgentToml(surface: AgentSurface, def: AgentDef): string {
+  const fields = surface.fields ?? [];
+  const lines = fields.map((field) => `${field.key} = ${tomlBasicString(resolveTomlField(field, def))}`);
+  const bodyKey = surface.bodyField ?? "developer_instructions";
+  const bodyValue = def.developerInstructions;
+  return `${lines.join("\n")}\n${bodyKey} = """\n${bodyValue}"""\n`;
+}
+
+export function renderAgent(surface: AgentSurface, def: AgentDef): string {
+  return surface.format === "toml" ? renderAgentToml(surface, def) : renderAgentMd(surface, def);
+}
+
+/** File extension (without the dot) a given surface's target files use. */
+export function extensionFor(surface: AgentSurface): "md" | "toml" {
+  return surface.format;
+}

package/packages/agent-settings/src/deploy/agent-toml.ts

@@ -0,0 +1,76 @@
+/**
+ * Reads `assets/agents/*.toml` source files into structured AgentDefs,
+ * using `@iarna/toml` (the same library packages/agent-skills already
+ * depends on) rather than a hand-rolled parser.
+ */
+import TOML from "@iarna/toml";
+import { readFileSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+
+export interface AgentDef {
+  readonly name: string;
+  readonly description: string;
+  readonly model: string;
+  readonly claudeModel?: string;
+  readonly cursorModel?: string;
+  readonly modelReasoningEffort: string;
+  readonly sandboxMode: string;
+  /** Comma-separated tool list, e.g. "Read, Grep, Glob, Bash". Absent means "no restriction" (full tool access) on every surface. */
+  readonly tools?: string;
+  readonly developerInstructions: string;
+}
+
+const REQUIRED_STRING_FIELDS = ["name", "description", "model", "model_reasoning_effort", "sandbox_mode", "developer_instructions"] as const;
+
+function requireString(doc: Record<string, unknown>, key: string, sourcePath: string): string {
+  const value = doc[key];
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(`agent source is missing required field "${key}": ${sourcePath}`);
+  }
+  return value;
+}
+
+function optionalString(doc: Record<string, unknown>, key: string): string | undefined {
+  const value = doc[key];
+  return typeof value === "string" ? value : undefined;
+}
+
+/** Parses one source agent TOML file's text. Throws (fails loud) if a required key is missing, developer_instructions isn't a string, or the text is not valid TOML. */
+export function parseAgentToml(text: string, sourcePath: string): AgentDef {
+  let doc: unknown;
+  try {
+    doc = TOML.parse(text);
+  } catch (cause) {
+    throw new Error(`agent source is not valid TOML: ${sourcePath} (${(cause as Error).message})`);
+  }
+  if (typeof doc !== "object" || doc === null) throw new Error(`agent source is not a TOML table: ${sourcePath}`);
+  const record = doc as Record<string, unknown>;
+
+  for (const key of REQUIRED_STRING_FIELDS) requireString(record, key, sourcePath);
+
+  return {
+    name: requireString(record, "name", sourcePath),
+    description: requireString(record, "description", sourcePath),
+    model: requireString(record, "model", sourcePath),
+    ...(optionalString(record, "claude_model") !== undefined ? { claudeModel: optionalString(record, "claude_model") as string } : {}),
+    ...(optionalString(record, "cursor_model") !== undefined ? { cursorModel: optionalString(record, "cursor_model") as string } : {}),
+    modelReasoningEffort: requireString(record, "model_reasoning_effort", sourcePath),
+    sandboxMode: requireString(record, "sandbox_mode", sourcePath),
+    ...(optionalString(record, "tools") !== undefined ? { tools: optionalString(record, "tools") as string } : {}),
+    developerInstructions: requireString(record, "developer_instructions", sourcePath),
+  };
+}
+
+/** Every `<name>.toml` under `assetsDir`, parsed, sorted by name. */
+export function loadAgentSources(assetsDir: string): readonly AgentDef[] {
+  const names = readdirSync(assetsDir, { withFileTypes: true })
+    .filter((entry) => entry.isFile() && entry.name.endsWith(".toml"))
+    .map((entry) => entry.name.slice(0, -".toml".length))
+    .sort();
+  return names.map((name) => {
+    const path = join(assetsDir, `${name}.toml`);
+    const def = parseAgentToml(readFileSync(path, "utf8"), path);
+    if (def.name !== name) throw new Error(`agent source "name" field "${def.name}" does not match file name "${name}": ${path}`);
+    return def;
+  });
+}