@amsterdamdatalabs/enact-extensions 0.1.42 → 0.1.48

package/dist/internal/extensions-table.js

@@ -0,0 +1,195 @@
+/**
+ * `[extensions]` in the repo-root `enact-config.toml`: the managed-repo marker
+ * AND the declared set of installed extensions.
+ *
+ * HARDCUT replacement for the old `[skills]` marker. Skills belong to an
+ * extension, so a root `skills` table modelled the relationship backwards — an
+ * extension owns its skills, never the reverse.
+ *
+ * The file is SHARED: `version`/`hooks`/`rules`/`repo` belong to enact-hook and
+ * `controls` to enact-repo-controls. Parse-and-reserialise would destroy their
+ * tables and every comment in the document, so every function here is text
+ * surgery on our own table only. Reading is the one place TOML is parsed, and
+ * only to answer "which extensions are declared".
+ *
+ * Shape:
+ *
+ *     version = 1
+ *
+ *     [extensions]
+ *     version = 1
+ *
+ *     [extensions.enact-repo]
+ *     version = "0.1.2"
+ */
+/** The marker table itself, written once when the file gains `[extensions]`. */
+export const EXTENSIONS_BLOCK = "[extensions]\nversion = 1\n";
+/**
+ * The text declaring ONE extension: a bare table, no keys.
+ *
+ * It carried `version = "<bundle version>"` until it was measured to be
+ * write-only — `declaredExtensionsFrom` below and doctor's equivalent both map
+ * the entries to their KEY and drop the value. Installed state belongs in
+ * `.agents/<name>.lock.json`, which is install output; a version sitting in a
+ * hand-authored declaration reads as a pin, and install has never honoured one.
+ */
+export function extensionBlock(name) {
+    return `[extensions.${name}]\n`;
+}
+/**
+ * Declared extension names, from the `[extensions.<name>]` sub-tables.
+ *
+ * `parsed` is the already-parsed document — parsing belongs to the caller, which
+ * owns the error message naming the file and the action being attempted.
+ * `[extensions].version` is the marker's own schema version, not an extension.
+ */
+export function declaredExtensionsFrom(parsed) {
+    const ext = parsed?.extensions;
+    if (!ext || typeof ext !== "object")
+        return [];
+    return Object.entries(ext)
+        .filter(([, v]) => v && typeof v === "object" && !Array.isArray(v))
+        .map(([k]) => k);
+}
+/** Preserve a trailing newline that a slice-and-rejoin would otherwise eat. */
+function keepTrailingNewline(original, out) {
+    return original.endsWith("\n") && !out.endsWith("\n") ? `${out}\n` : out;
+}
+/** Index of the line after a table's last line, given its header index. */
+function tableEnd(lines, headerIndex, isOwnSubTable) {
+    for (let i = headerIndex + 1; i < lines.length; i++) {
+        const t = lines[i].trim();
+        if (!t.startsWith("["))
+            continue;
+        if (isOwnSubTable?.(t))
+            continue;
+        return i;
+    }
+    return lines.length;
+}
+/**
+ * Return `configText` with `[extensions.<name>]` declared, or `null` when there
+ * is nothing to do — no `[extensions]` table to write into, or the extension is
+ * already declared.
+ *
+ * INSERT-ONCE, deliberately. This upserted once, replacing the table's whole
+ * span on every install; the span ran to the next header, so a human's own keys
+ * and comments inside the declaration were silently destroyed by the next run.
+ * `enact-config.toml` is the hand-authored statement of what the repo should
+ * have — install reads it and reconciles the repo to it, and writes to it only
+ * to record an extension that was not declared before. After that first write a
+ * version bump leaves the file byte-identical, so the only diffs a human is
+ * asked to review are ones that actually changed the repo's intent.
+ */
+export function declareExtension(configText, name) {
+    const lines = configText.split("\n");
+    if (!lines.some((l) => l.trim() === "[extensions]"))
+        return null;
+    if (lines.some((l) => l.trim() === `[extensions.${name}]`))
+        return null;
+    const tail = configText.endsWith("\n") ? "" : "\n";
+    return `${configText}${tail}\n${extensionBlock(name)}`;
+}
+/** Return `configText` with `[extensions.<name>]` removed entirely. */
+export function removeExtensionBlock(configText, name) {
+    const lines = configText.split("\n");
+    const at = lines.findIndex((l) => l.trim() === `[extensions.${name}]`);
+    if (at < 0)
+        return configText;
+    // Absorb one blank separator line before the table, so removing it does not
+    // leave a widening gap behind.
+    const from = at > 0 && lines[at - 1].trim() === "" ? at - 1 : at;
+    const out = [...lines.slice(0, from), ...lines.slice(tableEnd(lines, at))].join("\n");
+    return keepTrailingNewline(configText, out);
+}
+/**
+ * Cut our whole `[extensions]` table — marker and every `[extensions.<name>]`
+ * sub-table — out of `text`, for `--purge`.
+ *
+ * Identified by TABLE, not by the exact bytes install appended: `[extensions]`
+ * is mutable by design now (it carries the declared set), so an edited value
+ * inside our own table is still our table. Halting at the first `[` would stop
+ * at our own first sub-table and orphan the rest.
+ *
+ * Falls back to the byte-exact `appended` span for a block that never grew, and
+ * returns null when neither matches — the caller refuses rather than guessing.
+ */
+export function cutExtensionsBlock(text, appended) {
+    const lines = text.split("\n");
+    const start = lines.findIndex((l) => l.trim() === "[extensions]");
+    if (start >= 0) {
+        let end = tableEnd(lines, start, (t) => t === "[extensions]" || t.startsWith("[extensions."));
+        // Trailing blank lines belong to the block being cut, not to what follows.
+        while (end > start + 1 && lines[end - 1].trim() === "")
+            end -= 1;
+        const from = start > 0 && lines[start - 1].trim() === "" ? start - 1 : start;
+        const kept = [...lines.slice(0, from), ...lines.slice(end)].join("\n");
+        return keepTrailingNewline(text, kept);
+    }
+    const candidates = [appended, EXTENSIONS_BLOCK].filter((c) => typeof c === "string" && c.length > 0);
+    for (const span of candidates) {
+        let idx = text.lastIndexOf(span);
+        while (idx >= 0) {
+            const atLineStart = span.startsWith("\n") || idx === 0 || text[idx - 1] === "\n";
+            const rest = text.slice(idx + span.length);
+            const nextLine = rest
+                .split("\n")
+                .map((l) => l.trim())
+                .find((l) => l !== "" && !l.startsWith("#"));
+            if (atLineStart && (nextLine === undefined || nextLine.startsWith("[")))
+                return text.slice(0, idx) + rest;
+            idx = idx === 0 ? -1 : text.lastIndexOf(span, idx - 1);
+        }
+    }
+    return null;
+}
+// ---------------------------------------------------------------------------
+// Legacy `[skills]` — the marker `[extensions]` HARDCUT-replaced.
+//
+// Install appended the new table but nothing ever removed the old one, so a
+// repo installed before the cut and reinstalled after it carries BOTH: two root
+// tables each claiming to be the marker. That is a dual-read surface by
+// accident, which the repo's HARDCUT rule exists to prevent.
+//
+// The cut is bounded by what we ever WROTE. `SKILLS_BLOCK` was
+// `"[skills]\nversion = 1\n"` and nothing else -- no per-skill keys, no
+// sub-tables. Anything beyond that in the table is somebody's hand-authored
+// content, and removing it on their behalf would be a silent drop. So the
+// recogniser is exact and the caller is expected to surface a refusal.
+// ---------------------------------------------------------------------------
+/** Everything install ever wrote inside `[skills]`. */
+const LEGACY_SKILLS_BODY = "version = 1";
+/**
+ * `configText` with the root `[skills]` table removed, or `null` when there is
+ * none (so a caller can tell "cut" from "nothing to cut" without diffing).
+ *
+ * Throws when the table is not the one we wrote — see the note above.
+ *
+ * The span ends at the next table header, which means the blank line that
+ * separated `[skills]` from what follows is removed WITH it while the blank
+ * line that preceded it stays. That keeps exactly one separator either side of
+ * the cut instead of collapsing or widening the gap.
+ */
+export function cutLegacySkillsBlock(configText) {
+    const lines = configText.split("\n");
+    const start = lines.findIndex((l) => l.trim() === "[skills]");
+    const subTable = lines.find((l) => l.trim().startsWith("[skills."));
+    if (start < 0 && subTable === undefined)
+        return null;
+    const refuse = (what) => {
+        throw new Error(`Refusing to cut ${what} from enact-config.toml: install only ever wrote ` +
+            `"[skills]\\nversion = 1". Anything else there is yours, not ours. Move or ` +
+            `remove it by hand, then re-run install.`);
+    };
+    if (subTable !== undefined)
+        refuse(subTable.trim());
+    const end = tableEnd(lines, start);
+    const body = lines
+        .slice(start + 1, end)
+        .map((l) => l.trim())
+        .filter((l) => l !== "");
+    if (body.length !== 1 || body[0] !== LEGACY_SKILLS_BODY)
+        refuse("[skills]");
+    return keepTrailingNewline(configText, [...lines.slice(0, start), ...lines.slice(end)].join("\n"));
+}
+//# sourceMappingURL=extensions-table.js.map

package/dist/internal/extensions-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions-table.js","sourceRoot":"","sources":["../../src/internal/extensions-table.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,eAAe,IAAI,KAAK,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAe;IACpD,MAAM,GAAG,GAAI,MAA+C,EAAE,UAAU,CAAC;IACzE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC;SAClD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SAClE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,+EAA+E;AAC/E,SAAS,mBAAmB,CAAC,QAAgB,EAAE,GAAW;IACxD,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3E,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,KAAwB,EAAE,WAAmB,EAAE,aAAsC;IACrG,KAAK,IAAI,CAAC,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC;YAAE,SAAS;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,IAAY;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,eAAe,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,OAAO,GAAG,UAAU,GAAG,IAAI,KAAK,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,IAAY;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,eAAe,IAAI,GAAG,CAAC,CAAC;IACvE,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAC9B,4EAA4E;IAC5E,+BAA+B;IAC/B,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,OAAO,mBAAmB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAwB;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,cAAc,CAAC,CAAC;IAClE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,IAAI,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9F,2EAA2E;QAC3E,OAAO,GAAG,GAAG,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,GAAG,IAAI,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7E,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClH,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;YAChB,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;YACjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI;iBAClB,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,IAAI,WAAW,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;YAC1G,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,wEAAwE;AACxE,6DAA6D;AAC7D,EAAE;AACF,+DAA+D;AAC/D,wEAAwE;AACxE,4EAA4E;AAC5E,0EAA0E;AAC1E,uEAAuE;AACvE,8EAA8E;AAE9E,uDAAuD;AACvD,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAS,EAAE;QACrC,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,mDAAmD;YACxE,4EAA4E;YAC5E,yCAAyC,CAC5C,CAAC;IACJ,CAAC,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK;SACf,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,kBAAkB;QAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5E,OAAO,mBAAmB,CAAC,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrG,CAAC"}

package/dist/internal/file-ops.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The single funnel for every filesystem MUTATION install and uninstall
+ * perform.
+ *
+ * `--dry-run` is not a separate code path: it runs the identical preflight and
+ * planning, and only the writes here are skipped. That is what makes a dry-run
+ * trustworthy — anything it fails to predict is a bug in this file, not a
+ * divergence between two implementations of the same logic. Every operation
+ * also records `{file, action, reason}`, so a dry-run can print exactly what a
+ * real run would do, and why.
+ *
+ * Reads are unaffected and deliberately not routed through here.
+ */
+export interface FileAction {
+    file: string;
+    action: "create" | "update" | "remove" | "remove-dir" | "skip";
+    reason: string;
+}
+export interface FileOps {
+    /** Write `content`; false when the file already has exactly those bytes. */
+    write(rel: string, content: string | Buffer, reason?: string): boolean;
+    /** Remove a file; false when it is not there. */
+    remove(rel: string, reason?: string): boolean;
+    /** A path deliberately LEFT in place, recorded so dry-run can report it. */
+    skip(rel: string, reason: string): boolean;
+    /** Remove a directory and everything under it. */
+    removeDir(rel: string, reason?: string): boolean;
+    /** Remove a directory only when it is empty. */
+    rmdirIfEmpty(rel: string): void;
+    /** Create or repoint a managed symlink. */
+    symlink(rel: string, target: string, reason?: string): boolean;
+    /** Remove a managed symlink, dangling or not. */
+    removeSymlink(rel: string, reason?: string): boolean;
+}
+export declare function makeFileOps(repo: string, dryRun: boolean, actions: FileAction[]): FileOps;
+//# sourceMappingURL=file-ops.d.ts.map

package/dist/internal/file-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-ops.d.ts","sourceRoot":"","sources":["../../src/internal/file-ops.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC;IAC/D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,OAAO;IACtB,4EAA4E;IAC5E,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACvE,iDAAiD;IACjD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9C,4EAA4E;IAC5E,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3C,kDAAkD;IAClD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACjD,gDAAgD;IAChD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,2CAA2C;IAC3C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/D,iDAAiD;IACjD,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtD;AAMD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CA+EzF"}

package/dist/internal/file-ops.js

@@ -0,0 +1,89 @@
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, readlinkSync, rmdirSync, rmSync, symlinkSync, writeFileSync, } from "node:fs";
+import { dirname, join } from "node:path";
+const abs = (repo, rel) => join(repo, ...rel.split("/"));
+const DEFAULT_REASON = "managed by enact-repo install";
+export function makeFileOps(repo, dryRun, actions) {
+    return {
+        write(rel, content, reason) {
+            const path = abs(repo, rel);
+            const buf = Buffer.isBuffer(content) ? content : Buffer.from(content);
+            const existed = existsSync(path);
+            // Byte-identical is a no-op, so a re-install reports nothing and stays
+            // idempotent rather than churning mtimes and dry-run output.
+            if (existed && readFileSync(path).equals(buf))
+                return false;
+            actions.push({ file: rel, action: existed ? "update" : "create", reason: reason ?? DEFAULT_REASON });
+            if (!dryRun) {
+                mkdirSync(dirname(path), { recursive: true });
+                writeFileSync(path, buf);
+            }
+            return true;
+        },
+        remove(rel, reason) {
+            const path = abs(repo, rel);
+            if (!existsSync(path))
+                return false;
+            actions.push({ file: rel, action: "remove", reason: reason ?? DEFAULT_REASON });
+            if (!dryRun)
+                rmSync(path, { force: true });
+            return true;
+        },
+        // Recorded rather than silently passed over: a retained file that appears
+        // nowhere in the output looks like the uninstall simply missed it.
+        skip(rel, reason) {
+            actions.push({ file: rel, action: "skip", reason });
+            return false;
+        },
+        removeDir(rel, reason) {
+            const path = abs(repo, rel);
+            if (!existsSync(path))
+                return false;
+            actions.push({ file: rel, action: "remove-dir", reason: reason ?? "directory" });
+            if (!dryRun)
+                rmSync(path, { recursive: true, force: true });
+            return true;
+        },
+        rmdirIfEmpty(rel) {
+            const path = abs(repo, rel);
+            if (existsSync(path) && readdirSync(path).length === 0) {
+                actions.push({ file: rel, action: "remove-dir", reason: "empty directory" });
+                if (!dryRun)
+                    rmdirSync(path);
+            }
+        },
+        // Symlinks need lstat, not existsSync: existsSync FOLLOWS a symlink, so it
+        // reports false for a dangling one -- exactly the state a link can be in
+        // mid-uninstall, once its target is already gone.
+        symlink(rel, target, reason) {
+            const path = abs(repo, rel);
+            const st = lstatSync(path, { throwIfNoEntry: false });
+            if (st?.isSymbolicLink() && readlinkSync(path) === target)
+                return false;
+            actions.push({
+                file: rel,
+                action: st ? "update" : "create",
+                reason: reason ?? (st ? "replacing stale entry with managed symlink" : "managed symlink"),
+            });
+            if (!dryRun) {
+                // Whatever is there (a stale real directory from a pre-symlink install,
+                // a wrong-target link, ...) sits inside a path this installer
+                // exclusively generates -- safe to replace outright.
+                if (st)
+                    rmSync(path, { recursive: true, force: true });
+                mkdirSync(dirname(path), { recursive: true });
+                symlinkSync(target, path);
+            }
+            return true;
+        },
+        removeSymlink(rel, reason) {
+            const path = abs(repo, rel);
+            if (!lstatSync(path, { throwIfNoEntry: false }))
+                return false;
+            actions.push({ file: rel, action: "remove", reason: reason ?? "managed symlink" });
+            if (!dryRun)
+                rmSync(path, { recursive: true, force: true });
+            return true;
+        },
+    };
+}
+//# sourceMappingURL=file-ops.js.map

package/dist/internal/file-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-ops.js","sourceRoot":"","sources":["../../src/internal/file-ops.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,MAAM,EACN,WAAW,EACX,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAuC1C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,GAAW,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjF,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAe,EAAE,OAAqB;IAC9E,OAAO;QACL,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM;YACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YACjC,uEAAuE;YACvE,6DAA6D;YAC7D,IAAI,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC;YACrG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,MAAM;YAChB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC,GAAG,EAAE,MAAM;YACd,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,MAAM;YACnB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY,CAAC,GAAG;YACd,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC7E,IAAI,CAAC,MAAM;oBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,kDAAkD;QAClD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM;YACzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBAChC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,iBAAiB,CAAC;aAC1F,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,wEAAwE;gBACxE,8DAA8D;gBAC9D,qDAAqD;gBACrD,IAAI,EAAE;oBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,aAAa,CAAC,GAAG,EAAE,MAAM;YACvB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/internal/hooks.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Append `--host=<host>` to a hook command string, but ONLY when the
+ * command's executable (its first whitespace-delimited token) is EXACTLY
+ * `enact-hook`. Commands belonging to any other tool or bundle are returned
+ * completely unchanged, so a shared hooks.json fixture containing a mix of
+ * `enact-hook` and non-`enact-hook` commands only gets the flag on the
+ * `enact-hook` ones.
+ *
+ * Owner decision (Tarun, 2026-09-14): the hook runtime is a single global
+ * binary `enact-hook` (built separately in enact-vps), with CLI contract:
+ *   enact-hook <kind> [subcommand] --host=<claude|codex|cursor|kimi|opencode>
+ * `--host` tells the runtime which host's output format to render. It is
+ * appended only at PROJECTION time (per-platform derived hook output) — the
+ * canonical `extensions/enact-repo/hooks/hooks.json` source never carries it.
+ */
+export declare function withHostFlag(command: string, host: string): string;
+interface CanonicalHookCommand {
+    type?: string;
+    command?: string;
+    [key: string]: unknown;
+}
+interface CanonicalHookEntry {
+    matcher?: string;
+    hooks?: CanonicalHookCommand[];
+    [key: string]: unknown;
+}
+interface CanonicalHooksDoc {
+    hooks?: Record<string, CanonicalHookEntry[]>;
+    [key: string]: unknown;
+}
+/**
+ * Return a new canonical hooks.json document with `--host=<host>` appended
+ * to every `enact-hook`-owned command. Non-`enact-hook` commands and every
+ * other field (matcher, statusMessage, timeout, type, ...) pass through
+ * unchanged. Does not mutate `doc`.
+ */
+export declare function applyHostFlagToHooksDoc(doc: CanonicalHooksDoc, host: string): CanonicalHooksDoc;
+/**
+ * Return a new canonical hooks.json document with every command's `timeout`
+ * clamped down to `host`'s documented maximum for that event (see
+ * {@link HOST_HOOK_TIMEOUT_MAX_SECONDS}). Keeps the canonical source's
+ * declared intent untouched for any event/host with no documented limit
+ * (including every event for a host absent from the table). Does not
+ * mutate `doc`.
+ */
+export declare function clampHookTimeoutsForHost(doc: CanonicalHooksDoc, host: string): CanonicalHooksDoc;
+/**
+ * Read a canonical `hooks/hooks.json` from `sourcePath`, apply
+ * {@link applyHostFlagToHooksDoc} for `host`, and write the result (still
+ * the nested canonical schema — Claude and Codex read it as-is) to
+ * `targetPath`. Returns true if a file was written, false on a missing or
+ * unparsable source file.
+ */
+export declare function writeHostFlaggedHooksFile(sourcePath: string, targetPath: string, host: string): boolean;
+export {};
+//# sourceMappingURL=hooks.d.ts.map

package/dist/internal/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/internal/hooks.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIlE;AAaD,UAAU,oBAAoB;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,kBAAkB;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,iBAAiB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC7C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAkB/F;AA8BD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAqBhG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAWvG"}

package/dist/internal/hooks.js

@@ -0,0 +1,128 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+/**
+ * Append `--host=<host>` to a hook command string, but ONLY when the
+ * command's executable (its first whitespace-delimited token) is EXACTLY
+ * `enact-hook`. Commands belonging to any other tool or bundle are returned
+ * completely unchanged, so a shared hooks.json fixture containing a mix of
+ * `enact-hook` and non-`enact-hook` commands only gets the flag on the
+ * `enact-hook` ones.
+ *
+ * Owner decision (Tarun, 2026-09-14): the hook runtime is a single global
+ * binary `enact-hook` (built separately in enact-vps), with CLI contract:
+ *   enact-hook <kind> [subcommand] --host=<claude|codex|cursor|kimi|opencode>
+ * `--host` tells the runtime which host's output format to render. It is
+ * appended only at PROJECTION time (per-platform derived hook output) — the
+ * canonical `extensions/enact-repo/hooks/hooks.json` source never carries it.
+ */
+export function withHostFlag(command, host) {
+    const firstToken = command.trimStart().split(/\s+/, 1)[0];
+    if (firstToken !== "enact-hook")
+        return command;
+    return `${command} --host=${host}`;
+}
+/**
+ * Return a new canonical hooks.json document with `--host=<host>` appended
+ * to every `enact-hook`-owned command. Non-`enact-hook` commands and every
+ * other field (matcher, statusMessage, timeout, type, ...) pass through
+ * unchanged. Does not mutate `doc`.
+ */
+export function applyHostFlagToHooksDoc(doc, host) {
+    const hooks = doc && typeof doc.hooks === "object" && doc.hooks && !Array.isArray(doc.hooks) ? doc.hooks : undefined;
+    if (!hooks)
+        return doc;
+    const out = {};
+    for (const [event, entries] of Object.entries(hooks)) {
+        if (!Array.isArray(entries))
+            continue;
+        out[event] = entries.map((entry) => {
+            const inner = Array.isArray(entry?.hooks) ? entry.hooks : undefined;
+            if (!inner)
+                return entry;
+            return {
+                ...entry,
+                hooks: inner.map((h) => h && typeof h.command === "string" ? { ...h, command: withHostFlag(h.command, host) } : h),
+            };
+        });
+    }
+    return { ...doc, hooks: out };
+}
+// ---------------------------------------------------------------------------
+// Per-host documented hook-timeout maximums (projection-time clamp).
+// ---------------------------------------------------------------------------
+/**
+ * Per-host documented hook-timeout maximums, in SECONDS (the canonical
+ * schema's own unit), keyed by host then canonical event name. A command's
+ * `timeout` exceeding the host's max for that event is clamped DOWN to the
+ * max; a `timeout` already within the limit (or an event/host with no
+ * documented limit) is left untouched.
+ *
+ * Codex (source: https://developers.openai.com/codex/hooks, which redirects
+ * to https://learn.chatgpt.com/docs/hooks -- verified 2026-09-14, this
+ * session): most hook events default to 600s with no documented maximum.
+ * `SessionEnd` and `Interrupt` are the one documented exception: default 1s,
+ * MAXIMUM 3s. A configured value above 3s is silently clamped by Codex
+ * itself with an error-labelled warning rather than honored -- so shipping
+ * a canonical `SessionEnd` timeout above 3s in `.codex/hooks.json` is a real
+ * defect even though Codex itself degrades gracefully.
+ *
+ * No other host in this project (Claude Code, Cursor, Kimi, OpenCode) has a
+ * documented per-event hook-timeout maximum as of this verification, so no
+ * other host has an entry here.
+ */
+const HOST_HOOK_TIMEOUT_MAX_SECONDS = {
+    codex: { SessionEnd: 3, Interrupt: 3 },
+};
+/**
+ * Return a new canonical hooks.json document with every command's `timeout`
+ * clamped down to `host`'s documented maximum for that event (see
+ * {@link HOST_HOOK_TIMEOUT_MAX_SECONDS}). Keeps the canonical source's
+ * declared intent untouched for any event/host with no documented limit
+ * (including every event for a host absent from the table). Does not
+ * mutate `doc`.
+ */
+export function clampHookTimeoutsForHost(doc, host) {
+    const hooks = doc && typeof doc.hooks === "object" && doc.hooks && !Array.isArray(doc.hooks) ? doc.hooks : undefined;
+    const limits = HOST_HOOK_TIMEOUT_MAX_SECONDS[host];
+    if (!hooks || !limits)
+        return doc;
+    const out = {};
+    for (const [event, entries] of Object.entries(hooks)) {
+        const max = limits[event];
+        if (!Array.isArray(entries) || max === undefined) {
+            out[event] = entries;
+            continue;
+        }
+        out[event] = entries.map((entry) => {
+            const inner = Array.isArray(entry?.hooks) ? entry.hooks : undefined;
+            if (!inner)
+                return entry;
+            return {
+                ...entry,
+                hooks: inner.map((h) => (h && typeof h.timeout === "number" && h.timeout > max ? { ...h, timeout: max } : h)),
+            };
+        });
+    }
+    return { ...doc, hooks: out };
+}
+/**
+ * Read a canonical `hooks/hooks.json` from `sourcePath`, apply
+ * {@link applyHostFlagToHooksDoc} for `host`, and write the result (still
+ * the nested canonical schema — Claude and Codex read it as-is) to
+ * `targetPath`. Returns true if a file was written, false on a missing or
+ * unparsable source file.
+ */
+export function writeHostFlaggedHooksFile(sourcePath, targetPath, host) {
+    let canonical;
+    try {
+        canonical = JSON.parse(readFileSync(sourcePath, "utf8"));
+    }
+    catch {
+        return false;
+    }
+    const projected = applyHostFlagToHooksDoc(canonical, host);
+    mkdirSync(join(targetPath, ".."), { recursive: true });
+    writeFileSync(targetPath, `${JSON.stringify(projected, null, 2)}\n`, "utf8");
+    return true;
+}
+//# sourceMappingURL=hooks.js.map

package/dist/internal/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/internal/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAY;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,GAAG,OAAO,WAAW,IAAI,EAAE,CAAC;AACrC,CAAC;AA8BD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAsB,EAAE,IAAY;IAC1E,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrH,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,GAAG,GAAyC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrB,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAC1F;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,6BAA6B,GAA2C;IAC5E,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;CACvC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAsB,EAAE,IAAY;IAC3E,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrH,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC;IAClC,MAAM,GAAG,GAAyC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;YACrB,SAAS;QACX,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC9G,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,UAAkB,EAAE,IAAY;IAC5F,IAAI,SAA4B,CAAC;IACjC,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAsB,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3D,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/internal/io.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"io.d.ts","sourceRoot":"","sources":["../../src/internal/io.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGvE,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,cAAc,GACvB,UAAU,CAMZ"}
+{"version":3,"file":"io.d.ts","sourceRoot":"","sources":["../../src/internal/io.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEvE,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,GAAG,UAAU,CAMlH"}

package/dist/internal/io.js.map

@@ -1 +1 @@
-{"version":3,"file":"io.js","sourceRoot":"","sources":["../../src/internal/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,QAAkB,EAClB,QAAwB;IAExB,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAClC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACxD,CAAC"}
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../../src/internal/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,QAAkB,EAAE,QAAwB;IACpG,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAClC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACxD,CAAC"}

package/dist/internal/json-merge.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Merge primitives for the repo-local installer: how our entries are located,
+ * recognised, and removed inside a JSON document a user also owns.
+ *
+ * Shared files (`.claude/settings.json`, `.cursor/mcp.json`, `.codex/hooks.json`
+ * …) are never rewritten wholesale — the installer adds, recognises and removes
+ * individual ENTRIES so a user's own keys survive untouched. These functions are
+ * the whole of that contract, and they are pure: no filesystem, no process
+ * state, fully exercised by the installer's tests.
+ */
+/** A path from the document root, e.g. `["enabledPlugins", "x@y"]`. */
+export type JsonPath = readonly (string | number)[];
+export type JsonMergeEntry = {
+    type: "key";
+    path: JsonPath;
+    sha256: string;
+} | {
+    type: "item";
+    path: JsonPath;
+    sha256: string;
+};
+export interface JsonMergeRecord {
+    entries: readonly JsonMergeEntry[];
+    /** Containers we created; pruned on removal once empty. */
+    containers?: readonly JsonPath[];
+    /** Top-level keys we added as framing; dropped once nothing else remains. */
+    scaffold?: readonly {
+        path: JsonPath;
+    }[];
+}
+type JsonObject = Record<string, unknown>;
+/**
+ * Key-order-independent serialisation, so an entry's identity does not change
+ * when a host or a user rewrites a file and reorders its keys.
+ */
+export declare function stableStringify(value: unknown): string;
+/** Content hash of a JSON value; the identity of a recorded entry. */
+export declare const valueHash: (value: unknown) => string;
+/** Stable string form of a path, used to key displaced-original records. */
+export declare const pathKey: (p: JsonPath) => string;
+/** Value at `path`, or undefined if any segment is missing or not an object. */
+export declare function getAt(doc: unknown, path: JsonPath): unknown;
+/**
+ * Walk to `path`, creating missing containers, and record what was created so
+ * uninstall can prune exactly those. Throws rather than coercing when an
+ * existing value has the wrong shape — silently replacing a user's object with
+ * an array would lose their data.
+ */
+export declare function ensureContainer(doc: JsonObject, path: JsonPath, kind: "object" | "array", created: JsonPath[]): unknown;
+/** Is this recorded entry still present, with the content we recorded? */
+export declare function entryPresent(doc: unknown, entry: JsonMergeEntry): boolean;
+/**
+ * Remove recorded entries, prune containers we created once empty, and drop
+ * scaffold keys once nothing else remains. Returns the entries that were NOT
+ * found — the caller reports those rather than failing silently.
+ *
+ * `displaced` maps `pathKey(entry.path)` to the original value a `--force`
+ * takeover overwrote. When present, that original is RESTORED instead of the
+ * key being deleted, and consumed so it cannot be restored twice.
+ */
+export declare function removeJsonEntries(doc: JsonObject, record: JsonMergeRecord, displaced?: Record<string, unknown>): JsonMergeEntry[];
+export {};
+//# sourceMappingURL=json-merge.d.ts.map

package/dist/internal/json-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-merge.d.ts","sourceRoot":"","sources":["../../src/internal/json-merge.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,uEAAuE;AACvE,MAAM,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;AAEpD,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IACnC,2DAA2D;IAC3D,UAAU,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAC;CAC1C;AAED,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAM1C;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAStD;AAED,sEAAsE;AACtE,eAAO,MAAM,SAAS,UAAW,OAAO,KAAG,MAAwC,CAAC;AAEpF,4EAA4E;AAC5E,eAAO,MAAM,OAAO,MAAO,QAAQ,KAAG,MAA2B,CAAC;AAElE,gFAAgF;AAChF,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAO3D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,QAAQ,GAAG,OAAO,EACxB,OAAO,EAAE,QAAQ,EAAE,GAClB,OAAO,CAkBT;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAOzE;AAOD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,eAAe,EACvB,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACtC,cAAc,EAAE,CAmClB"}