@askexenow/exe-os 0.9.365 → 0.9.368

package/dist/hooks/subagent-stop.js

@@ -1,7 +1,7 @@
 import {
   buildSubagentCheckpointEvent,
   recordSubagentCheckpointEventBestEffort
-} from "../chunk-JITNFE4W.js";
+} from "../chunk-ZWONQU5S.js";
 import {
   isSidechainTranscript
 } from "../chunk-6IWLAQ7O.js";
@@ -9,29 +9,30 @@ import "../chunk-SH45SJQW.js";
 import {
   getActiveAgent,
   resolveAgentAttribution
-} from "../chunk-ZNEBZCZR.js";
+} from "../chunk-NNXPIJRB.js";
 import "../chunk-2ADYTOHQ.js";
 import {
   sessionScopeFilter
-} from "../chunk-ORNCMRIX.js";
-import "../chunk-ESTR7QUP.js";
-import "../chunk-FXPAUDCZ.js";
-import "../chunk-QFIVK3G5.js";
+} from "../chunk-Y4AYNLXU.js";
+import "../chunk-BTSWFMEH.js";
+import "../chunk-P3PAD6AA.js";
+import "../chunk-KGPWS4KE.js";
+import "../chunk-KYVIV54Y.js";
 import "../chunk-WT4RI36X.js";
-import "../chunk-C3UAQ3JG.js";
 import "../chunk-KI5PFRG6.js";
+import "../chunk-QAEWWYHL.js";
 import "../chunk-EIKATSE4.js";
 import "../chunk-E23LNUWJ.js";
-import "../chunk-QAEWWYHL.js";
-import "../chunk-EHHMNKOA.js";
+import "../chunk-CSBD7QLZ.js";
 import "../chunk-GBNB4EWD.js";
 import "../chunk-UXLO7VHX.js";
 import "../chunk-DSOQUQTV.js";
-import "../chunk-WR75WUEP.js";
+import "../chunk-BFL3UB77.js";
 import "../chunk-AJIXH5JF.js";
+import "../chunk-PVWM2WMM.js";
 import "../chunk-XTWHNLGD.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-2FYIMTQE.js";
+import "../chunk-PGF5I7EV.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-ZVTKWWLV.js";
 import "../chunk-CDUB5Q6J.js";
@@ -45,20 +46,20 @@ import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
 import {
   canCoordinate
-} from "../chunk-BRLS5OLZ.js";
+} from "../chunk-OBESOWFJ.js";
 import "../chunk-TKDITWDN.js";
 import "../chunk-BBMTVAE3.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-NO3M2AFM.js";
+import "../chunk-JDPV7W2L.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-WNBZJSQT.js";
-import "../chunk-ZDUO6QBH.js";
+import "../chunk-6UZ3DEQI.js";
 import "../chunk-A7XLR3K7.js";
-import "../chunk-VS4LPG66.js";
+import "../chunk-MQ5RUHNZ.js";
 import "../chunk-QILQ5FCG.js";
 import "../chunk-ARX6TAGN.js";
 import "../chunk-QMSEL5YS.js";
@@ -93,7 +94,7 @@ process.on("unhandledRejection", (err) => {
   process.exit(1);
 });
 try {
-  const { verifyOrBlock } = await import("../hook-integrity-SGTKBL6W.js");
+  const { verifyOrBlock } = await import("../hook-integrity-3X2JRLBM.js");
   if (!await verifyOrBlock(new URL(import.meta.url).pathname)) process.exit(2);
 } catch (err) {
   const code = err?.code;
@@ -139,7 +140,7 @@ async function recordSubagentStopCheckpoint(payload, agentId) {
   });
   await Promise.race([
     (async () => {
-      const { fastDbInit } = await import("../fast-db-init-SCXJXOYX.js");
+      const { fastDbInit } = await import("../fast-db-init-FPAPF3GB.js");
       const client = await fastDbInit({ daemonOnly: true });
       await recordSubagentCheckpointEventBestEffort({
         client,
@@ -177,7 +178,7 @@ process.stdin.on("end", async () => {
     if (!failClosedOnTimeout) {
       process.exit(0);
     }
-    const { fastDbInit } = await import("../fast-db-init-SCXJXOYX.js");
+    const { fastDbInit } = await import("../fast-db-init-FPAPF3GB.js");
     const client = await fastDbInit({ caller: "hook" });
     const saScope = sessionScopeFilter();
     const pendingResult = await client.execute({

package/dist/hooks/summary-worker.js

@@ -1,14 +1,14 @@
 import {
   writeContinuityCheckpoint
-} from "../chunk-BY7WWPRM.js";
+} from "../chunk-TKTQRSSD.js";
 import {
   initStore,
   vectorToBlob
-} from "../chunk-4QKKLK3C.js";
-import "../chunk-QYECRPGD.js";
+} from "../chunk-ELY5WBZX.js";
+import "../chunk-FDA45THL.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-7DMCAGSC.js";
+import "../chunk-5U4UJGTW.js";
 import "../chunk-5MOYSU5A.js";
 import "../chunk-4QCFFW2H.js";
 import "../chunk-76CJBM36.js";
@@ -16,25 +16,26 @@ import {
   getCurrentSessionScope,
   sessionScopeFilter,
   writeNotification
-} from "../chunk-ORNCMRIX.js";
-import "../chunk-ESTR7QUP.js";
-import "../chunk-FXPAUDCZ.js";
-import "../chunk-QFIVK3G5.js";
+} from "../chunk-Y4AYNLXU.js";
+import "../chunk-BTSWFMEH.js";
+import "../chunk-P3PAD6AA.js";
+import "../chunk-KGPWS4KE.js";
+import "../chunk-KYVIV54Y.js";
 import "../chunk-WT4RI36X.js";
-import "../chunk-C3UAQ3JG.js";
 import "../chunk-KI5PFRG6.js";
+import "../chunk-QAEWWYHL.js";
 import "../chunk-EIKATSE4.js";
 import "../chunk-E23LNUWJ.js";
-import "../chunk-QAEWWYHL.js";
-import "../chunk-EHHMNKOA.js";
+import "../chunk-CSBD7QLZ.js";
 import "../chunk-GBNB4EWD.js";
 import "../chunk-UXLO7VHX.js";
 import "../chunk-DSOQUQTV.js";
-import "../chunk-WR75WUEP.js";
+import "../chunk-BFL3UB77.js";
 import "../chunk-AJIXH5JF.js";
+import "../chunk-PVWM2WMM.js";
 import "../chunk-XTWHNLGD.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-2FYIMTQE.js";
+import "../chunk-PGF5I7EV.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-ZVTKWWLV.js";
 import "../chunk-CDUB5Q6J.js";
@@ -49,11 +50,11 @@ import "../chunk-MP2AFCGL.js";
 import {
   canCoordinate,
   getClient
-} from "../chunk-BRLS5OLZ.js";
+} from "../chunk-OBESOWFJ.js";
 import "../chunk-TKDITWDN.js";
 import "../chunk-BBMTVAE3.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-NO3M2AFM.js";
+import "../chunk-JDPV7W2L.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
@@ -61,9 +62,9 @@ import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-HPXFKUGU.js";
 import "../chunk-WNBZJSQT.js";
-import "../chunk-ZDUO6QBH.js";
+import "../chunk-6UZ3DEQI.js";
 import "../chunk-A7XLR3K7.js";
-import "../chunk-VS4LPG66.js";
+import "../chunk-MQ5RUHNZ.js";
 import "../chunk-QILQ5FCG.js";
 import "../chunk-ARX6TAGN.js";
 import "../chunk-QMSEL5YS.js";
@@ -84,13 +85,13 @@ process.on("unhandledRejection", (err) => {
   process.exit(1);
 });
 try {
-  const { verifyHookIntegrity } = await import("../hook-integrity-SGTKBL6W.js");
+  const { verifyHookIntegrity } = await import("../hook-integrity-3X2JRLBM.js");
   const check = verifyHookIntegrity(new URL(import.meta.url).pathname);
   if (!check.verified) {
     process.stderr.write(`[SECURITY] Hook tamper detected: summary-worker.js \u2014 ${check.reason} \u2014 refusing to run
 `);
     try {
-      const { pushNotifyAsync } = await import("../push-notifications-GKRPXOGI.js");
+      const { pushNotifyAsync } = await import("../push-notifications-DFSR6P7V.js");
       pushNotifyAsync({
         event: "security_alert",
         title: "Hook tamper detected",
@@ -174,7 +175,7 @@ async function main() {
   let summaryText = "";
   let limitReached = false;
   try {
-    const { assertMemoryLimit } = await import("../plan-limits-QEP32X4W.js");
+    const { assertMemoryLimit } = await import("../plan-limits-MTHRP4WY.js");
     await assertMemoryLimit();
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -248,7 +249,7 @@ async function main() {
       const { backfillKillSwitchEnabled } = await import("../backfill-gate-VX2RZTQV.js");
       const flagPath = path.join(EXE_AI_DIR, "session-cache", "needs-backfill");
       if (existsSync(flagPath) && !backfillKillSwitchEnabled()) {
-        const { tryAcquireWorkerSlot, registerWorkerPid } = await import("../worker-gate-35VZINZG.js");
+        const { tryAcquireWorkerSlot, registerWorkerPid } = await import("../worker-gate-RUM6MLIR.js");
         if (!tryAcquireWorkerSlot()) {
           process.stderr.write("[summary-worker] Backfill needed but worker gate full \u2014 skipping\n");
         } else {
@@ -351,7 +352,7 @@ main().catch((err) => {
   process.stderr.write("[summary-worker] FATAL: " + (err instanceof Error ? err.message : String(err)) + "\n");
 }).finally(async () => {
   try {
-    const { cleanupWorkerPid } = await import("../worker-gate-35VZINZG.js");
+    const { cleanupWorkerPid } = await import("../worker-gate-RUM6MLIR.js");
     cleanupWorkerPid();
   } catch {
   }

package/dist/index.js

@@ -1,51 +1,52 @@
 import {
   runtime_exports
-} from "./chunk-EPNWEOOE.js";
-import "./chunk-JNVQGLPX.js";
-import "./chunk-J6I7X272.js";
+} from "./chunk-VTOO5UB3.js";
+import "./chunk-QT6CNCXO.js";
+import "./chunk-2UGU3V63.js";
 import "./chunk-YZFZDJWZ.js";
-import "./chunk-CMCYL2JC.js";
 import "./chunk-NGVOA6ZQ.js";
-import "./chunk-KSVLBATT.js";
+import "./chunk-CMCYL2JC.js";
+import "./chunk-E5QQZDQN.js";
 import "./chunk-JRLNE3T2.js";
 import "./chunk-2O2UKMUE.js";
 import "./chunk-HF25XPZE.js";
 import "./chunk-O377P7GM.js";
-import "./chunk-CKG6CVKI.js";
+import "./chunk-TTJWPV4G.js";
 import {
   gateway_exports
-} from "./chunk-7C4FUNVO.js";
+} from "./chunk-J77ZIMH5.js";
+import "./chunk-Q3V7K4ME.js";
 import "./chunk-N5RRQOAC.js";
 import "./chunk-ORCCI2VV.js";
 import "./chunk-2SRG3B3D.js";
-import "./chunk-DQ5KHWFD.js";
+import "./chunk-N3CGSO3S.js";
 import "./chunk-WSOA3WMC.js";
 import "./chunk-RJT7H2KR.js";
-import "./chunk-Q3V7K4ME.js";
-import "./chunk-BATQKSLI.js";
-import "./chunk-U373MEF5.js";
-import "./chunk-P47MPWNU.js";
+import "./chunk-V7E37GE3.js";
+import "./chunk-VD3CVNGB.js";
+import "./chunk-CXHRNESJ.js";
 import "./chunk-FWFFZGSC.js";
 import "./chunk-ECGTESAP.js";
-import "./chunk-ORNCMRIX.js";
-import "./chunk-ESTR7QUP.js";
-import "./chunk-FXPAUDCZ.js";
-import "./chunk-QFIVK3G5.js";
+import "./chunk-Y4AYNLXU.js";
+import "./chunk-BTSWFMEH.js";
+import "./chunk-P3PAD6AA.js";
+import "./chunk-KGPWS4KE.js";
+import "./chunk-KYVIV54Y.js";
 import "./chunk-WT4RI36X.js";
-import "./chunk-C3UAQ3JG.js";
 import "./chunk-KI5PFRG6.js";
+import "./chunk-QAEWWYHL.js";
 import "./chunk-EIKATSE4.js";
 import "./chunk-E23LNUWJ.js";
-import "./chunk-QAEWWYHL.js";
-import "./chunk-EHHMNKOA.js";
+import "./chunk-CSBD7QLZ.js";
 import "./chunk-GBNB4EWD.js";
 import "./chunk-UXLO7VHX.js";
 import "./chunk-DSOQUQTV.js";
-import "./chunk-WR75WUEP.js";
+import "./chunk-BFL3UB77.js";
 import "./chunk-AJIXH5JF.js";
+import "./chunk-PVWM2WMM.js";
 import "./chunk-XTWHNLGD.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-2FYIMTQE.js";
+import "./chunk-PGF5I7EV.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-ZVTKWWLV.js";
 import "./chunk-CDUB5Q6J.js";
@@ -57,23 +58,23 @@ import "./chunk-W2IRQJ6R.js";
 import "./chunk-HYZV25LY.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-GL57PO3K.js";
-import "./chunk-UY6HRDB2.js";
+import "./chunk-LBWEAQ6Z.js";
 import "./chunk-ML4S5SHZ.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-BRLS5OLZ.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-NO3M2AFM.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
 import "./chunk-JY5GAZYC.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-WNBZJSQT.js";
-import "./chunk-ZDUO6QBH.js";
+import "./chunk-6UZ3DEQI.js";
 import "./chunk-A7XLR3K7.js";
-import "./chunk-VS4LPG66.js";
+import "./chunk-MQ5RUHNZ.js";
 import "./chunk-QILQ5FCG.js";
 import "./chunk-ARX6TAGN.js";
 import "./chunk-QMSEL5YS.js";

package/dist/{installer-RC2JCKSE.js → installer-B7QYQE56.js}

@@ -4,6 +4,7 @@ import {
   copySlashCommands,
   detectMcpNameCollisions,
   installStatusLine,
+  isLinkedGitWorktree,
   mergeHooks,
   registerMcpServer,
   resolvePackageRoot,
@@ -11,18 +12,18 @@ import {
   setupGhostty,
   setupTmux,
   setupWezterm
-} from "./chunk-EKVTRI3N.js";
+} from "./chunk-CU2OUUSV.js";
 import "./chunk-XBOLFVMD.js";
-import "./chunk-L3TB7CC3.js";
-import "./chunk-EWCEUO65.js";
+import "./chunk-KM6XSFHP.js";
+import "./chunk-QCSAYYL6.js";
 import "./chunk-B6TI3TZT.js";
-import "./chunk-ESTR7QUP.js";
+import "./chunk-P3PAD6AA.js";
 import "./chunk-HYZV25LY.js";
-import "./chunk-BRLS5OLZ.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-NO3M2AFM.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
@@ -38,6 +39,7 @@ export {
   copySlashCommands,
   detectMcpNameCollisions,
   installStatusLine,
+  isLinkedGitWorktree,
   mergeHooks,
   registerMcpServer,
   resolvePackageRoot,

package/dist/{installer-EA7T3PBD.js → installer-EXR25DDG.js}

@@ -1,23 +1,23 @@
 import {
   resolvePackageRoot
-} from "./chunk-EKVTRI3N.js";
+} from "./chunk-CU2OUUSV.js";
 import "./chunk-XBOLFVMD.js";
 import {
   EXE_HOOK_FILES,
   textHasLegacySplitPostToolHook
-} from "./chunk-L3TB7CC3.js";
+} from "./chunk-KM6XSFHP.js";
 import {
   buildMcpHttpHeaders,
   mcpHttpUrl
-} from "./chunk-EWCEUO65.js";
+} from "./chunk-QCSAYYL6.js";
 import "./chunk-B6TI3TZT.js";
-import "./chunk-ESTR7QUP.js";
+import "./chunk-P3PAD6AA.js";
 import "./chunk-HYZV25LY.js";
-import "./chunk-BRLS5OLZ.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-NO3M2AFM.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";

package/dist/{installer-KCEM4RCG.js → installer-TOPA7673.js}

@@ -1,25 +1,25 @@
 import {
   resolvePackageRoot
-} from "./chunk-EKVTRI3N.js";
+} from "./chunk-CU2OUUSV.js";
 import {
   loadPreferences
 } from "./chunk-XBOLFVMD.js";
 import {
   EXE_HOOKS,
   isLegacySplitPostToolCommand
-} from "./chunk-L3TB7CC3.js";
+} from "./chunk-KM6XSFHP.js";
 import {
   buildMcpHttpHeaders,
   mcpHttpUrl
-} from "./chunk-EWCEUO65.js";
+} from "./chunk-QCSAYYL6.js";
 import "./chunk-B6TI3TZT.js";
-import "./chunk-ESTR7QUP.js";
+import "./chunk-P3PAD6AA.js";
 import "./chunk-HYZV25LY.js";
-import "./chunk-BRLS5OLZ.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-NO3M2AFM.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
@@ -32,7 +32,7 @@ import "./chunk-MLKGABMK.js";
 
 // src/adapters/codex/installer.ts
 import { readFile, writeFile, mkdir } from "fs/promises";
-import { existsSync, readFileSync } from "fs";
+import { existsSync, readFileSync, realpathSync } from "fs";
 import path from "path";
 import os from "os";
 async function mergeCodexHooks(packageRoot, homeDir = os.homedir()) {
@@ -108,6 +108,35 @@ async function mergeCodexHooks(packageRoot, homeDir = os.homedir()) {
         ]
       },
       marker: EXE_HOOKS.preToolUse
+    },
+    {
+      // Codex fires PreCompact (0.144.5+). Writes the active-task snapshot and
+      // compaction recovery checkpoint, same as Claude Code.
+      event: "PreCompact",
+      group: {
+        hooks: [
+          {
+            type: "command",
+            command: `node "${path.join(packageRoot, "dist", "hooks", "pre-compact.js")}"${logSuffix}`
+          }
+        ]
+      },
+      marker: EXE_HOOKS.preCompact
+    },
+    {
+      // Forward-registration: inert on Codex < 0.147 (unknown event keys are
+      // ignored without error), live from 0.147 onward. The Stop-hook cadence
+      // covers the gap. See the module header.
+      event: "SessionEnd",
+      group: {
+        hooks: [
+          {
+            type: "command",
+            command: `node "${path.join(packageRoot, "dist", "hooks", "session-end.js")}"${logSuffix}`
+          }
+        ]
+      },
+      marker: EXE_HOOKS.sessionEnd
     }
   ];
   let added = 0;
@@ -157,7 +186,7 @@ function verifyCodexHooks(homeDir = os.homedir()) {
   try {
     const hooksJson = JSON.parse(readFileSync(hooksPath, "utf-8"));
     if (!hooksJson.hooks) return false;
-    const required = ["PostToolUse", "UserPromptSubmit", "Stop", "PreToolUse"];
+    const required = ["PostToolUse", "UserPromptSubmit", "Stop", "PreToolUse", "PreCompact", "SessionEnd"];
     for (const event of required) {
       const groups = hooksJson.hooks[event];
       if (!groups || !groups.some(
@@ -317,6 +346,115 @@ async function ensureCodexHooksFeature(homeDir = os.homedir()) {
   await writeFile(configPath, content);
   return "enabled";
 }
+async function listCodexHooks(codexHome, cwd, timeoutMs) {
+  const { spawn } = await import("child_process");
+  return await new Promise((resolve) => {
+    let child;
+    try {
+      child = spawn("codex", ["app-server"], {
+        env: { ...process.env, CODEX_HOME: codexHome },
+        stdio: ["pipe", "pipe", "ignore"]
+      });
+    } catch {
+      resolve(null);
+      return;
+    }
+    let settled = false;
+    const finish = (value) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      try {
+        child.kill();
+      } catch {
+      }
+      resolve(value);
+    };
+    const timer = setTimeout(() => finish(null), timeoutMs);
+    timer.unref?.();
+    child.on("error", () => finish(null));
+    child.on("exit", () => finish(null));
+    let buffer = "";
+    child.stdout?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
+      buffer += chunk;
+      let newline;
+      while ((newline = buffer.indexOf("\n")) >= 0) {
+        const line = buffer.slice(0, newline);
+        buffer = buffer.slice(newline + 1);
+        if (!line.trim()) continue;
+        let message;
+        try {
+          message = JSON.parse(line);
+        } catch {
+          continue;
+        }
+        if (message.id === 1) {
+          child.stdin?.write(
+            JSON.stringify({ jsonrpc: "2.0", id: 2, method: "hooks/list", params: { cwds: [cwd] } }) + "\n"
+          );
+        } else if (message.id === 2) {
+          const entries = message.result?.data ?? [];
+          finish(entries.flatMap((entry) => entry.hooks ?? []));
+          return;
+        }
+      }
+    });
+    child.stdin?.on("error", () => finish(null));
+    child.stdin?.write(
+      JSON.stringify({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "initialize",
+        params: { clientInfo: { name: "exe-os-installer", version: "1" }, capabilities: { experimentalApi: true } }
+      }) + "\n"
+    );
+  });
+}
+function isSamePath(a, b) {
+  if (a === b) return true;
+  try {
+    return realpathSync(a) === realpathSync(b);
+  } catch {
+    return false;
+  }
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function upsertHookTrustBlock(content, key, hash) {
+  const block = `[hooks.state."${key}"]
+trusted_hash = "${hash}"
+`;
+  const existing = new RegExp(
+    `\\[hooks\\.state\\."${escapeRegExp(key)}"\\]\\n(?:(?!\\[)[^\\n]*\\n?)*`,
+    "g"
+  );
+  if (existing.test(content)) {
+    return content.replace(existing, block);
+  }
+  const separator = content.length === 0 ? "" : content.endsWith("\n") ? "\n" : "\n\n";
+  return content + separator + block;
+}
+async function grantCodexHookTrust(homeDir = os.homedir(), timeoutMs = 2e4) {
+  const codexDir = path.join(homeDir, ".codex");
+  const hooksPath = path.join(codexDir, "hooks.json");
+  const configPath = path.join(codexDir, "config.toml");
+  if (!existsSync(hooksPath)) return { status: "unavailable", trusted: 0 };
+  const hooks = await listCodexHooks(codexDir, homeDir, timeoutMs);
+  if (!hooks) return { status: "unavailable", trusted: 0 };
+  const ours = hooks.filter(
+    (hook) => !hook.isManaged && isSamePath(hook.sourcePath, hooksPath) && typeof hook.command === "string" && hook.command.includes("dist/hooks/") && typeof hook.currentHash === "string" && hook.currentHash.length > 0
+  );
+  const stale = ours.filter((hook) => hook.trustStatus !== "trusted");
+  if (stale.length === 0) return { status: "up-to-date", trusted: 0 };
+  let content = existsSync(configPath) ? await readFile(configPath, "utf-8") : "";
+  for (const hook of stale) {
+    content = upsertHookTrustBlock(content, hook.key, hook.currentHash);
+  }
+  await writeFile(configPath, content);
+  return { status: "granted", trusted: stale.length };
+}
 async function runCodexInstaller(homeDir) {
   const packageRoot = resolvePackageRoot();
   const result = await mergeCodexHooks(packageRoot, homeDir);
@@ -327,6 +465,11 @@ async function runCodexInstaller(homeDir) {
   const featureResult = await ensureCodexHooksFeature(homeDir);
   process.stderr.write(
     `[exe-os] Codex hooks feature: ${featureResult}
+`
+  );
+  const trustResult = await grantCodexHookTrust(homeDir);
+  process.stderr.write(
+    `[exe-os] Codex hook trust: ${trustResult.status}${trustResult.trusted > 0 ? ` (${trustResult.trusted} granted)` : ""}
 `
   );
   const mcpResult = await registerCodexMcpServer(packageRoot, homeDir);
@@ -342,6 +485,7 @@ async function runCodexInstaller(homeDir) {
 }
 export {
   ensureCodexHooksFeature,
+  grantCodexHookTrust,
   installCodexStatusLine,
   mergeCodexHooks,
   registerCodexMcpServer,

package/dist/{intercom-queue-6DZPHHQ2.js → intercom-queue-BZ4M3L4S.js}

@@ -6,25 +6,26 @@ import {
   drainQueueAsync,
   queueIntercom,
   readQueue
-} from "./chunk-ORNCMRIX.js";
-import "./chunk-ESTR7QUP.js";
-import "./chunk-FXPAUDCZ.js";
-import "./chunk-QFIVK3G5.js";
+} from "./chunk-Y4AYNLXU.js";
+import "./chunk-BTSWFMEH.js";
+import "./chunk-P3PAD6AA.js";
+import "./chunk-KGPWS4KE.js";
+import "./chunk-KYVIV54Y.js";
 import "./chunk-WT4RI36X.js";
-import "./chunk-C3UAQ3JG.js";
 import "./chunk-KI5PFRG6.js";
+import "./chunk-QAEWWYHL.js";
 import "./chunk-EIKATSE4.js";
 import "./chunk-E23LNUWJ.js";
-import "./chunk-QAEWWYHL.js";
-import "./chunk-EHHMNKOA.js";
+import "./chunk-CSBD7QLZ.js";
 import "./chunk-GBNB4EWD.js";
 import "./chunk-UXLO7VHX.js";
 import "./chunk-DSOQUQTV.js";
-import "./chunk-WR75WUEP.js";
+import "./chunk-BFL3UB77.js";
 import "./chunk-AJIXH5JF.js";
+import "./chunk-PVWM2WMM.js";
 import "./chunk-XTWHNLGD.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-2FYIMTQE.js";
+import "./chunk-PGF5I7EV.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-ZVTKWWLV.js";
 import "./chunk-CDUB5Q6J.js";
@@ -36,20 +37,20 @@ import "./chunk-W2IRQJ6R.js";
 import "./chunk-HYZV25LY.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-BRLS5OLZ.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-NO3M2AFM.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
 import "./chunk-JY5GAZYC.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-WNBZJSQT.js";
-import "./chunk-ZDUO6QBH.js";
+import "./chunk-6UZ3DEQI.js";
 import "./chunk-A7XLR3K7.js";
-import "./chunk-VS4LPG66.js";
+import "./chunk-MQ5RUHNZ.js";
 import "./chunk-QILQ5FCG.js";
 import "./chunk-ARX6TAGN.js";
 import "./chunk-QMSEL5YS.js";