@amsterdamdatalabs/enact-extensions 0.1.37 → 0.1.47

package/dist/internal/file-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-ops.d.ts","sourceRoot":"","sources":["../../src/internal/file-ops.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC;IAC/D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,OAAO;IACtB,4EAA4E;IAC5E,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACvE,iDAAiD;IACjD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9C,4EAA4E;IAC5E,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3C,kDAAkD;IAClD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACjD,gDAAgD;IAChD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,2CAA2C;IAC3C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/D,iDAAiD;IACjD,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtD;AAMD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CA+EzF"}

package/dist/internal/file-ops.js

@@ -0,0 +1,89 @@
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, rmSync, rmdirSync, symlinkSync, writeFileSync, } from "node:fs";
+import { dirname, join } from "node:path";
+const abs = (repo, rel) => join(repo, ...rel.split("/"));
+const DEFAULT_REASON = "managed by enact-repo install";
+export function makeFileOps(repo, dryRun, actions) {
+    return {
+        write(rel, content, reason) {
+            const path = abs(repo, rel);
+            const buf = Buffer.isBuffer(content) ? content : Buffer.from(content);
+            const existed = existsSync(path);
+            // Byte-identical is a no-op, so a re-install reports nothing and stays
+            // idempotent rather than churning mtimes and dry-run output.
+            if (existed && readFileSync(path).equals(buf))
+                return false;
+            actions.push({ file: rel, action: existed ? "update" : "create", reason: reason ?? DEFAULT_REASON });
+            if (!dryRun) {
+                mkdirSync(dirname(path), { recursive: true });
+                writeFileSync(path, buf);
+            }
+            return true;
+        },
+        remove(rel, reason) {
+            const path = abs(repo, rel);
+            if (!existsSync(path))
+                return false;
+            actions.push({ file: rel, action: "remove", reason: reason ?? DEFAULT_REASON });
+            if (!dryRun)
+                rmSync(path, { force: true });
+            return true;
+        },
+        // Recorded rather than silently passed over: a retained file that appears
+        // nowhere in the output looks like the uninstall simply missed it.
+        skip(rel, reason) {
+            actions.push({ file: rel, action: "skip", reason });
+            return false;
+        },
+        removeDir(rel, reason) {
+            const path = abs(repo, rel);
+            if (!existsSync(path))
+                return false;
+            actions.push({ file: rel, action: "remove-dir", reason: reason ?? "directory" });
+            if (!dryRun)
+                rmSync(path, { recursive: true, force: true });
+            return true;
+        },
+        rmdirIfEmpty(rel) {
+            const path = abs(repo, rel);
+            if (existsSync(path) && readdirSync(path).length === 0) {
+                actions.push({ file: rel, action: "remove-dir", reason: "empty directory" });
+                if (!dryRun)
+                    rmdirSync(path);
+            }
+        },
+        // Symlinks need lstat, not existsSync: existsSync FOLLOWS a symlink, so it
+        // reports false for a dangling one -- exactly the state a link can be in
+        // mid-uninstall, once its target is already gone.
+        symlink(rel, target, reason) {
+            const path = abs(repo, rel);
+            const st = lstatSync(path, { throwIfNoEntry: false });
+            if (st?.isSymbolicLink() && readlinkSync(path) === target)
+                return false;
+            actions.push({
+                file: rel,
+                action: st ? "update" : "create",
+                reason: reason ?? (st ? "replacing stale entry with managed symlink" : "managed symlink"),
+            });
+            if (!dryRun) {
+                // Whatever is there (a stale real directory from a pre-symlink install,
+                // a wrong-target link, ...) sits inside a path this installer
+                // exclusively generates -- safe to replace outright.
+                if (st)
+                    rmSync(path, { recursive: true, force: true });
+                mkdirSync(dirname(path), { recursive: true });
+                symlinkSync(target, path);
+            }
+            return true;
+        },
+        removeSymlink(rel, reason) {
+            const path = abs(repo, rel);
+            if (!lstatSync(path, { throwIfNoEntry: false }))
+                return false;
+            actions.push({ file: rel, action: "remove", reason: reason ?? "managed symlink" });
+            if (!dryRun)
+                rmSync(path, { recursive: true, force: true });
+            return true;
+        },
+    };
+}
+//# sourceMappingURL=file-ops.js.map

package/dist/internal/file-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-ops.js","sourceRoot":"","sources":["../../src/internal/file-ops.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,MAAM,EACN,SAAS,EACT,WAAW,EACX,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAuC1C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,GAAW,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjF,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAe,EAAE,OAAqB;IAC9E,OAAO;QACL,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM;YACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YACjC,uEAAuE;YACvE,6DAA6D;YAC7D,IAAI,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC;YACrG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,MAAM;YAChB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC,GAAG,EAAE,MAAM;YACd,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,MAAM;YACnB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY,CAAC,GAAG;YACd,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC7E,IAAI,CAAC,MAAM;oBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,kDAAkD;QAClD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM;YACzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBAChC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,iBAAiB,CAAC;aAC1F,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,wEAAwE;gBACxE,8DAA8D;gBAC9D,qDAAqD;gBACrD,IAAI,EAAE;oBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,aAAa,CAAC,GAAG,EAAE,MAAM;YACvB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/internal/hooks.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Append `--host=<host>` to a hook command string, but ONLY when the
+ * command's executable (its first whitespace-delimited token) is EXACTLY
+ * `enact-hook`. Commands belonging to any other tool or bundle are returned
+ * completely unchanged, so a shared hooks.json fixture containing a mix of
+ * `enact-hook` and non-`enact-hook` commands only gets the flag on the
+ * `enact-hook` ones.
+ *
+ * Owner decision (Tarun, 2026-09-14): the hook runtime is a single global
+ * binary `enact-hook` (built separately in enact-vps), with CLI contract:
+ *   enact-hook <kind> [subcommand] --host=<claude|codex|cursor|kimi|opencode>
+ * `--host` tells the runtime which host's output format to render. It is
+ * appended only at PROJECTION time (per-platform derived hook output) — the
+ * canonical `extensions/enact-repo/hooks/hooks.json` source never carries it.
+ */
+export declare function withHostFlag(command: string, host: string): string;
+interface CanonicalHookCommand {
+    type?: string;
+    command?: string;
+    [key: string]: unknown;
+}
+interface CanonicalHookEntry {
+    matcher?: string;
+    hooks?: CanonicalHookCommand[];
+    [key: string]: unknown;
+}
+interface CanonicalHooksDoc {
+    hooks?: Record<string, CanonicalHookEntry[]>;
+    [key: string]: unknown;
+}
+/**
+ * Return a new canonical hooks.json document with `--host=<host>` appended
+ * to every `enact-hook`-owned command. Non-`enact-hook` commands and every
+ * other field (matcher, statusMessage, timeout, type, ...) pass through
+ * unchanged. Does not mutate `doc`.
+ */
+export declare function applyHostFlagToHooksDoc(doc: CanonicalHooksDoc, host: string): CanonicalHooksDoc;
+/**
+ * Return a new canonical hooks.json document with every command's `timeout`
+ * clamped down to `host`'s documented maximum for that event (see
+ * {@link HOST_HOOK_TIMEOUT_MAX_SECONDS}). Keeps the canonical source's
+ * declared intent untouched for any event/host with no documented limit
+ * (including every event for a host absent from the table). Does not
+ * mutate `doc`.
+ */
+export declare function clampHookTimeoutsForHost(doc: CanonicalHooksDoc, host: string): CanonicalHooksDoc;
+/**
+ * Read a canonical `hooks/hooks.json` from `sourcePath`, apply
+ * {@link applyHostFlagToHooksDoc} for `host`, and write the result (still
+ * the nested canonical schema — Claude and Codex read it as-is) to
+ * `targetPath`. Returns true if a file was written, false on a missing or
+ * unparsable source file.
+ */
+export declare function writeHostFlaggedHooksFile(sourcePath: string, targetPath: string, host: string): boolean;
+export {};
+//# sourceMappingURL=hooks.d.ts.map

package/dist/internal/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/internal/hooks.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIlE;AAaD,UAAU,oBAAoB;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,kBAAkB;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,iBAAiB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC7C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAkB/F;AA8BD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAqBhG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAWvG"}

package/dist/internal/hooks.js

@@ -0,0 +1,128 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+/**
+ * Append `--host=<host>` to a hook command string, but ONLY when the
+ * command's executable (its first whitespace-delimited token) is EXACTLY
+ * `enact-hook`. Commands belonging to any other tool or bundle are returned
+ * completely unchanged, so a shared hooks.json fixture containing a mix of
+ * `enact-hook` and non-`enact-hook` commands only gets the flag on the
+ * `enact-hook` ones.
+ *
+ * Owner decision (Tarun, 2026-09-14): the hook runtime is a single global
+ * binary `enact-hook` (built separately in enact-vps), with CLI contract:
+ *   enact-hook <kind> [subcommand] --host=<claude|codex|cursor|kimi|opencode>
+ * `--host` tells the runtime which host's output format to render. It is
+ * appended only at PROJECTION time (per-platform derived hook output) — the
+ * canonical `extensions/enact-repo/hooks/hooks.json` source never carries it.
+ */
+export function withHostFlag(command, host) {
+    const firstToken = command.trimStart().split(/\s+/, 1)[0];
+    if (firstToken !== "enact-hook")
+        return command;
+    return `${command} --host=${host}`;
+}
+/**
+ * Return a new canonical hooks.json document with `--host=<host>` appended
+ * to every `enact-hook`-owned command. Non-`enact-hook` commands and every
+ * other field (matcher, statusMessage, timeout, type, ...) pass through
+ * unchanged. Does not mutate `doc`.
+ */
+export function applyHostFlagToHooksDoc(doc, host) {
+    const hooks = doc && typeof doc.hooks === "object" && doc.hooks && !Array.isArray(doc.hooks) ? doc.hooks : undefined;
+    if (!hooks)
+        return doc;
+    const out = {};
+    for (const [event, entries] of Object.entries(hooks)) {
+        if (!Array.isArray(entries))
+            continue;
+        out[event] = entries.map((entry) => {
+            const inner = Array.isArray(entry?.hooks) ? entry.hooks : undefined;
+            if (!inner)
+                return entry;
+            return {
+                ...entry,
+                hooks: inner.map((h) => h && typeof h.command === "string" ? { ...h, command: withHostFlag(h.command, host) } : h),
+            };
+        });
+    }
+    return { ...doc, hooks: out };
+}
+// ---------------------------------------------------------------------------
+// Per-host documented hook-timeout maximums (projection-time clamp).
+// ---------------------------------------------------------------------------
+/**
+ * Per-host documented hook-timeout maximums, in SECONDS (the canonical
+ * schema's own unit), keyed by host then canonical event name. A command's
+ * `timeout` exceeding the host's max for that event is clamped DOWN to the
+ * max; a `timeout` already within the limit (or an event/host with no
+ * documented limit) is left untouched.
+ *
+ * Codex (source: https://developers.openai.com/codex/hooks, which redirects
+ * to https://learn.chatgpt.com/docs/hooks -- verified 2026-09-14, this
+ * session): most hook events default to 600s with no documented maximum.
+ * `SessionEnd` and `Interrupt` are the one documented exception: default 1s,
+ * MAXIMUM 3s. A configured value above 3s is silently clamped by Codex
+ * itself with an error-labelled warning rather than honored -- so shipping
+ * a canonical `SessionEnd` timeout above 3s in `.codex/hooks.json` is a real
+ * defect even though Codex itself degrades gracefully.
+ *
+ * No other host in this project (Claude Code, Cursor, Kimi, OpenCode) has a
+ * documented per-event hook-timeout maximum as of this verification, so no
+ * other host has an entry here.
+ */
+const HOST_HOOK_TIMEOUT_MAX_SECONDS = {
+    codex: { SessionEnd: 3, Interrupt: 3 },
+};
+/**
+ * Return a new canonical hooks.json document with every command's `timeout`
+ * clamped down to `host`'s documented maximum for that event (see
+ * {@link HOST_HOOK_TIMEOUT_MAX_SECONDS}). Keeps the canonical source's
+ * declared intent untouched for any event/host with no documented limit
+ * (including every event for a host absent from the table). Does not
+ * mutate `doc`.
+ */
+export function clampHookTimeoutsForHost(doc, host) {
+    const hooks = doc && typeof doc.hooks === "object" && doc.hooks && !Array.isArray(doc.hooks) ? doc.hooks : undefined;
+    const limits = HOST_HOOK_TIMEOUT_MAX_SECONDS[host];
+    if (!hooks || !limits)
+        return doc;
+    const out = {};
+    for (const [event, entries] of Object.entries(hooks)) {
+        const max = limits[event];
+        if (!Array.isArray(entries) || max === undefined) {
+            out[event] = entries;
+            continue;
+        }
+        out[event] = entries.map((entry) => {
+            const inner = Array.isArray(entry?.hooks) ? entry.hooks : undefined;
+            if (!inner)
+                return entry;
+            return {
+                ...entry,
+                hooks: inner.map((h) => (h && typeof h.timeout === "number" && h.timeout > max ? { ...h, timeout: max } : h)),
+            };
+        });
+    }
+    return { ...doc, hooks: out };
+}
+/**
+ * Read a canonical `hooks/hooks.json` from `sourcePath`, apply
+ * {@link applyHostFlagToHooksDoc} for `host`, and write the result (still
+ * the nested canonical schema — Claude and Codex read it as-is) to
+ * `targetPath`. Returns true if a file was written, false on a missing or
+ * unparsable source file.
+ */
+export function writeHostFlaggedHooksFile(sourcePath, targetPath, host) {
+    let canonical;
+    try {
+        canonical = JSON.parse(readFileSync(sourcePath, "utf8"));
+    }
+    catch {
+        return false;
+    }
+    const projected = applyHostFlagToHooksDoc(canonical, host);
+    mkdirSync(join(targetPath, ".."), { recursive: true });
+    writeFileSync(targetPath, `${JSON.stringify(projected, null, 2)}\n`, "utf8");
+    return true;
+}
+//# sourceMappingURL=hooks.js.map

package/dist/internal/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/internal/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAY;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,GAAG,OAAO,WAAW,IAAI,EAAE,CAAC;AACrC,CAAC;AA8BD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAsB,EAAE,IAAY;IAC1E,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrH,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,GAAG,GAAyC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrB,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAC1F;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,6BAA6B,GAA2C;IAC5E,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;CACvC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAsB,EAAE,IAAY;IAC3E,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrH,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC;IAClC,MAAM,GAAG,GAAyC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;YACrB,SAAS;QACX,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC9G,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,UAAkB,EAAE,IAAY;IAC5F,IAAI,SAA4B,CAAC;IACjC,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAsB,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3D,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/internal/json-merge.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Merge primitives for the repo-local installer: how our entries are located,
+ * recognised, and removed inside a JSON document a user also owns.
+ *
+ * Shared files (`.claude/settings.json`, `.cursor/mcp.json`, `.codex/hooks.json`
+ * …) are never rewritten wholesale — the installer adds, recognises and removes
+ * individual ENTRIES so a user's own keys survive untouched. These functions are
+ * the whole of that contract, and they are pure: no filesystem, no process
+ * state, fully exercised by the installer's tests.
+ */
+/** A path from the document root, e.g. `["enabledPlugins", "x@y"]`. */
+export type JsonPath = readonly (string | number)[];
+export type JsonMergeEntry = {
+    type: "key";
+    path: JsonPath;
+    sha256: string;
+} | {
+    type: "item";
+    path: JsonPath;
+    sha256: string;
+};
+export interface JsonMergeRecord {
+    entries: readonly JsonMergeEntry[];
+    /** Containers we created; pruned on removal once empty. */
+    containers?: readonly JsonPath[];
+    /** Top-level keys we added as framing; dropped once nothing else remains. */
+    scaffold?: readonly {
+        path: JsonPath;
+    }[];
+}
+type JsonObject = Record<string, unknown>;
+/**
+ * Key-order-independent serialisation, so an entry's identity does not change
+ * when a host or a user rewrites a file and reorders its keys.
+ */
+export declare function stableStringify(value: unknown): string;
+/** Content hash of a JSON value; the identity of a recorded entry. */
+export declare const valueHash: (value: unknown) => string;
+/** Stable string form of a path, used to key displaced-original records. */
+export declare const pathKey: (p: JsonPath) => string;
+/** Value at `path`, or undefined if any segment is missing or not an object. */
+export declare function getAt(doc: unknown, path: JsonPath): unknown;
+/**
+ * Walk to `path`, creating missing containers, and record what was created so
+ * uninstall can prune exactly those. Throws rather than coercing when an
+ * existing value has the wrong shape — silently replacing a user's object with
+ * an array would lose their data.
+ */
+export declare function ensureContainer(doc: JsonObject, path: JsonPath, kind: "object" | "array", created: JsonPath[]): unknown;
+/** Is this recorded entry still present, with the content we recorded? */
+export declare function entryPresent(doc: unknown, entry: JsonMergeEntry): boolean;
+/**
+ * Remove recorded entries, prune containers we created once empty, and drop
+ * scaffold keys once nothing else remains. Returns the entries that were NOT
+ * found — the caller reports those rather than failing silently.
+ *
+ * `displaced` maps `pathKey(entry.path)` to the original value a `--force`
+ * takeover overwrote. When present, that original is RESTORED instead of the
+ * key being deleted, and consumed so it cannot be restored twice.
+ */
+export declare function removeJsonEntries(doc: JsonObject, record: JsonMergeRecord, displaced?: Record<string, unknown>): JsonMergeEntry[];
+export {};
+//# sourceMappingURL=json-merge.d.ts.map

package/dist/internal/json-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-merge.d.ts","sourceRoot":"","sources":["../../src/internal/json-merge.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,uEAAuE;AACvE,MAAM,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;AAEpD,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IACnC,2DAA2D;IAC3D,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAC;CAC1C;AAED,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAO1C;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAStD;AAED,sEAAsE;AACtE,eAAO,MAAM,SAAS,UAAW,OAAO,KAAG,MAAwC,CAAC;AAEpF,4EAA4E;AAC5E,eAAO,MAAM,OAAO,MAAO,QAAQ,KAAG,MAA2B,CAAC;AAElE,gFAAgF;AAChF,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAO3D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,QAAQ,GAAG,OAAO,EACxB,OAAO,EAAE,QAAQ,EAAE,GAClB,OAAO,CAgBT;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAOzE;AAOD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,eAAe,EACvB,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACtC,cAAc,EAAE,CAmClB"}

package/dist/internal/json-merge.js

@@ -0,0 +1,122 @@
+import { createHash } from "node:crypto";
+const sha256 = (input) => createHash("sha256").update(input).digest("hex");
+const has = (obj, key) => Boolean(obj) && Object.prototype.hasOwnProperty.call(obj, key);
+/**
+ * Key-order-independent serialisation, so an entry's identity does not change
+ * when a host or a user rewrites a file and reorders its keys.
+ */
+export function stableStringify(value) {
+    if (Array.isArray(value))
+        return `[${value.map(stableStringify).join(",")}]`;
+    if (value && typeof value === "object") {
+        return `{${Object.keys(value)
+            .sort()
+            .map((k) => `${JSON.stringify(k)}:${stableStringify(value[k])}`)
+            .join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+/** Content hash of a JSON value; the identity of a recorded entry. */
+export const valueHash = (value) => sha256(stableStringify(value));
+/** Stable string form of a path, used to key displaced-original records. */
+export const pathKey = (p) => JSON.stringify(p);
+/** Value at `path`, or undefined if any segment is missing or not an object. */
+export function getAt(doc, path) {
+    let node = doc;
+    for (const key of path) {
+        if (!node || typeof node !== "object" || !has(node, key))
+            return undefined;
+        node = node[key];
+    }
+    return node;
+}
+/**
+ * Walk to `path`, creating missing containers, and record what was created so
+ * uninstall can prune exactly those. Throws rather than coercing when an
+ * existing value has the wrong shape — silently replacing a user's object with
+ * an array would lose their data.
+ */
+export function ensureContainer(doc, path, kind, created) {
+    let node = doc;
+    for (let i = 0; i < path.length; i++) {
+        const key = path[i];
+        const last = i === path.length - 1;
+        if (!has(node, key)) {
+            node[key] = last && kind === "array" ? [] : {};
+            created.push(path.slice(0, i + 1));
+        }
+        const next = node[key];
+        const okShape = last && kind === "array" ? Array.isArray(next) : Boolean(next) && typeof next === "object" && !Array.isArray(next);
+        if (!okShape)
+            throw new Error(`unexpected value at ${path.slice(0, i + 1).join(".")}`);
+        node = next;
+    }
+    return node;
+}
+/** Is this recorded entry still present, with the content we recorded? */
+export function entryPresent(doc, entry) {
+    if (entry.type === "key") {
+        const value = getAt(doc, entry.path);
+        return value !== undefined && valueHash(value) === entry.sha256;
+    }
+    const arr = getAt(doc, entry.path);
+    return Array.isArray(arr) && arr.some((v) => valueHash(v) === entry.sha256);
+}
+function isEmptyContainer(value) {
+    if (Array.isArray(value))
+        return value.length === 0;
+    return Boolean(value) && typeof value === "object" && Object.keys(value).length === 0;
+}
+/**
+ * Remove recorded entries, prune containers we created once empty, and drop
+ * scaffold keys once nothing else remains. Returns the entries that were NOT
+ * found — the caller reports those rather than failing silently.
+ *
+ * `displaced` maps `pathKey(entry.path)` to the original value a `--force`
+ * takeover overwrote. When present, that original is RESTORED instead of the
+ * key being deleted, and consumed so it cannot be restored twice.
+ */
+export function removeJsonEntries(doc, record, displaced = {}) {
+    const missing = [];
+    for (const entry of record.entries) {
+        if (entry.type === "key") {
+            const parent = getAt(doc, entry.path.slice(0, -1));
+            const key = entry.path[entry.path.length - 1];
+            const dKey = pathKey(entry.path);
+            if (parent && has(parent, key) && valueHash(parent[key]) === entry.sha256) {
+                if (has(displaced, dKey)) {
+                    parent[key] = displaced[dKey];
+                    delete displaced[dKey];
+                }
+                else {
+                    delete parent[key];
+                }
+            }
+            else {
+                missing.push(entry);
+            }
+        }
+        else {
+            const arr = getAt(doc, entry.path);
+            const idx = Array.isArray(arr) ? arr.findIndex((v) => valueHash(v) === entry.sha256) : -1;
+            if (idx >= 0)
+                arr.splice(idx, 1);
+            else
+                missing.push(entry);
+        }
+    }
+    // Deepest first, so pruning a child can empty its parent in the same pass.
+    for (const path of [...(record.containers ?? [])].sort((a, b) => b.length - a.length)) {
+        const parent = (path.length === 1 ? doc : getAt(doc, path.slice(0, -1)));
+        const key = path[path.length - 1];
+        if (parent && has(parent, key) && isEmptyContainer(parent[key]))
+            delete parent[key];
+    }
+    const scaffoldKeys = new Set((record.scaffold ?? []).map((s) => s.path[0]));
+    if (scaffoldKeys.size > 0 && Object.keys(doc).every((k) => scaffoldKeys.has(k))) {
+        for (const k of scaffoldKeys)
+            delete doc[k];
+    }
+    return missing;
+}
+//# sourceMappingURL=json-merge.js.map

package/dist/internal/json-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-merge.js","sourceRoot":"","sources":["../../src/internal/json-merge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA8BzC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3F,MAAM,GAAG,GAAG,CAAC,GAAY,EAAE,GAAoB,EAAW,EAAE,CAC1D,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAa,EAAE,GAAG,CAAC,CAAC;AAE3E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC;aACxC,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAE,KAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAEpF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAW,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAElE,gFAAgF;AAChF,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,IAAc;IAChD,IAAI,IAAI,GAAY,GAAG,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3E,IAAI,GAAI,IAAmB,CAAC,GAAa,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAe,EACf,IAAc,EACd,IAAwB,EACxB,OAAmB;IAEnB,IAAI,IAAI,GAAe,GAAG,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,OAAO,GACX,IAAI,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrH,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,GAAG,IAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,KAAqB;IAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACtG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAe,EACf,MAAuB,EACvB,SAAS,GAA4B,EAAE;IAEvC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAA2B,CAAC;YAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAW,CAAC;YACxD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC1E,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;oBACzB,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC9B,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,IAAI,GAAG,IAAI,CAAC;gBAAG,GAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;;gBAC3C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACtF,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAA2B,CAAC;QACnG,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAW,CAAC;QAC5C,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;IACtF,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,YAAY;YAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/internal/lock-ownership.d.ts

@@ -0,0 +1,41 @@
+import type { JsonMergeEntry } from "./json-merge.js";
+/**
+ * Ownership questions across ALL extensions installed in a repo.
+ *
+ * Every install record is per-extension (`.agents/<name>.lock.json`), and for a
+ * long time ownership was resolved against one of them — the extension doing
+ * the installing. A second extension therefore saw the first's legitimate
+ * output as foreign, refused, and told the user to delete files another
+ * extension depended on.
+ *
+ * "Is this path mine?" is the wrong question. The right one is "does ANY
+ * installed extension own it?", and these predicates are that question.
+ *
+ * Pure: the caller reads the locks, these interpret them.
+ */
+/** One installed extension's lock, as far as ownership is concerned. */
+export interface OwnershipLock {
+    files?: Record<string, unknown>;
+    merged?: Record<string, {
+        entries?: readonly JsonMergeEntry[];
+    } | undefined>;
+}
+export interface SiblingLock {
+    name: string;
+    lock: OwnershipLock;
+}
+/** True when any sibling's lock claims a file at or beneath `dirRel`. */
+export declare function siblingOwnsPrefix(siblings: readonly SiblingLock[], dirRel: string): boolean;
+/** Names of siblings whose lock claims exactly `rel`. */
+export declare function siblingOwnersOf(siblings: readonly SiblingLock[], rel: string): string[];
+/**
+ * True when a sibling's lock records the same merged-JSON entry at `rel`.
+ *
+ * Some entries are genuinely shared because they describe the REPO rather than
+ * one extension — the marketplace registration in `.claude/settings.json`, the
+ * marketplace's own `name`/`owner`. Identity is the entry's PATH, never its
+ * content hash: the question is "does someone else also claim this slot", and
+ * two extensions writing the same value must still both count as owners.
+ */
+export declare function siblingRecordsJsonEntry(siblings: readonly SiblingLock[], rel: string, entry: JsonMergeEntry): boolean;
+//# sourceMappingURL=lock-ownership.d.ts.map

package/dist/internal/lock-ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-ownership.d.ts","sourceRoot":"","sources":["../../src/internal/lock-ownership.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD;;;;;;;;;;;;;GAaG;AAEH,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;CAC9E;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAE3F;AAED,yDAAyD;AACzD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvF;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,SAAS,WAAW,EAAE,EAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,cAAc,GACpB,OAAO,CAIT"}

package/dist/internal/lock-ownership.js

@@ -0,0 +1,24 @@
+import { pathKey } from "./json-merge.js";
+/** True when any sibling's lock claims a file at or beneath `dirRel`. */
+export function siblingOwnsPrefix(siblings, dirRel) {
+    return siblings.some(({ lock }) => Object.keys(lock.files ?? {}).some((f) => f.startsWith(`${dirRel}/`)));
+}
+/** Names of siblings whose lock claims exactly `rel`. */
+export function siblingOwnersOf(siblings, rel) {
+    return siblings.filter(({ lock }) => Object.hasOwn(lock.files ?? {}, rel)).map(({ name }) => name);
+}
+/**
+ * True when a sibling's lock records the same merged-JSON entry at `rel`.
+ *
+ * Some entries are genuinely shared because they describe the REPO rather than
+ * one extension — the marketplace registration in `.claude/settings.json`, the
+ * marketplace's own `name`/`owner`. Identity is the entry's PATH, never its
+ * content hash: the question is "does someone else also claim this slot", and
+ * two extensions writing the same value must still both count as owners.
+ */
+export function siblingRecordsJsonEntry(siblings, rel, entry) {
+    const slot = (e) => `${e.type}${pathKey(e.path)}`;
+    const want = slot(entry);
+    return siblings.some(({ lock }) => (lock.merged?.[rel]?.entries ?? []).some((e) => slot(e) === want));
+}
+//# sourceMappingURL=lock-ownership.js.map

package/dist/internal/lock-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-ownership.js","sourceRoot":"","sources":["../../src/internal/lock-ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AA6B1C,yEAAyE;AACzE,MAAM,UAAU,iBAAiB,CAAC,QAAgC,EAAE,MAAc;IAChF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,QAAgC,EAAE,GAAW;IAC3E,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAgC,EAChC,GAAW,EACX,KAAqB;IAErB,MAAM,IAAI,GAAG,CAAC,CAAiB,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;AACxG,CAAC"}

package/dist/internal/platform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/internal/platform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/E,eAAO,MAAM,QAAQ,SAAS,CAAC;AAE/B,eAAO,MAAM,oBAAoB,EAAE,MAAM,CACvC,QAAQ,EACR;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAsB5D,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CA6E/D,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAuC3E,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,EAA2C,CAAC;AAExF,eAAO,MAAM,0BAA0B,EAAE,kBAAkB,EAAkC,CAAC;AAE9F,eAAO,MAAM,aAAa;;;;;;;CAOhB,CAAC;AA+BX,0EAA0E;AAC1E,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAGlE,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAG1D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAEvE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E"}
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/internal/platform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/E,eAAO,MAAM,QAAQ,SAAS,CAAC;AAE/B,eAAO,MAAM,oBAAoB,EAAE,MAAM,CACvC,QAAQ,EACR;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA2C5D,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAqH/D,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAiD3E,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,EAAmD,CAAC;AAEhG,eAAO,MAAM,0BAA0B,EAAE,kBAAkB,EAA0C,CAAC;AAEtG,eAAO,MAAM,aAAa;aACxB,MAAM,EAAE,WAAW;aACnB,MAAM,EAAE,WAAW;aACnB,QAAQ,EAAE,aAAa;aACvB,KAAK,EAAE,oBAAoB;aAC3B,UAAU,EAAE,aAAa;aACzB,IAAI,EAAE,aAAa;CACX,CAAC;AAqCX,0EAA0E;AAC1E,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAGlE,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAG1D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CASvE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAQ/E"}