@assethub/cli 0.1.31 → 0.1.32

package/dist/hooks/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/hooks/command.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IAChB,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5D,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC,CAAA;AA8CD,eAAO,MAAM,eAAe,GAC1B,MAAM,MAAM,EAAE,EACd,OAAM,gBAAqB,KAC1B,OAAO,CAAC,MAAM,CAkIhB,CAAA"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/hooks/command.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IAChB,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5D,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC,CAAA;AA+CD,eAAO,MAAM,eAAe,GAC1B,MAAM,MAAM,EAAE,EACd,OAAM,gBAAqB,KAC1B,OAAO,CAAC,MAAM,CAiIhB,CAAA"}

package/dist/hooks/command.js

@@ -1,11 +1,12 @@
 // `assethub hooks <subcommand>` — the registration in src/index.ts just calls
 // runHooksCommand(argv).
-import { installHooks, SESSION_SAVE_DISCLOSURE, uninstallHooks } from './install.js';
+import { installHooks, sessionSaveDisclosure, uninstallHooks } from './install.js';
 import { listSessionDirs, readMeta } from './paths.js';
 import { saveSession } from './save.js';
 import { canUploadSessions, resolveUploadAuth, uploadPending, uploadSession } from './upload.js';
 const USAGE = 'Usage: assethub hooks <install|uninstall|save|upload|list|status> [--client claude|codex] [--json]\n' +
-    '  save [--transcript <path> --session-id <id>]   (reads hook JSON from stdin without flags)\n' +
+    '  install|uninstall [--global]   (the current folder by default; --global for every project)\n' +
+    '  save [--client codex] [--transcript <path> --session-id <id>]   (reads hook JSON from stdin without flags)\n' +
     '  upload [--session <dir> [--auto] [--sweep <n>]|--pending [--force] [--limit <n>]]\n' +
     '         --auto and --pending wait out earlier failures (1h, 2h, 4h … up to a day); --force retries now';
 const parseFlags = (args) => {
@@ -68,31 +69,32 @@ export const runHooksCommand = async (argv, deps = {}) => {
                     write('--client claude|codex is required\n');
                     return 2;
                 }
+                // Sessions are saved only where the hooks are: this folder, unless --global.
+                const scope = flags.global === true ? {} : { projectDir: deps.cwd ?? process.cwd() };
+                const paths = { home: deps.home, codexHome: (deps.env ?? process.env).CODEX_HOME?.trim() || undefined };
                 if (sub === 'install') {
                     // Only accounts that may upload sessions (internal for now) can turn
                     // session saving on; for anyone else the hooks would only pile up.
-                    if (client === 'claude') {
-                        const auth = await resolveUploadAuth(uploadOptions);
-                        if (!auth || !(await canUploadSessions(auth, deps.fetchImpl))) {
-                            write('Session saving is not available for this account.\n');
-                            return 1;
-                        }
+                    const auth = await resolveUploadAuth(uploadOptions);
+                    if (!auth || !(await canUploadSessions(auth, deps.fetchImpl))) {
+                        write('Session saving is not available for this account.\n');
+                        return 1;
                     }
-                    const result = await installHooks({
-                        client: client,
-                        home: deps.home,
-                        cliPath: deps.cliPath,
-                    });
-                    out(result.installed && client === 'claude'
-                        ? `${result.detail}\n${SESSION_SAVE_DISCLOSURE}`
-                        : result.detail, result);
-                    return result.installed || client === 'codex' ? 0 : 1;
+                    const result = await installHooks({ ...scope, ...paths, client, cliPath: deps.cliPath });
+                    out(result.installed ? `${result.detail}\n${sessionSaveDisclosure(scope, client)}` : result.detail, result);
+                    return result.installed ? 0 : 1;
                 }
-                const result = await uninstallHooks({ client: client, home: deps.home });
+                const result = await uninstallHooks({ ...scope, ...paths, client });
                 out(result.detail, result);
                 return 0;
             }
             case 'save': {
+                // A misspelt client must not be saved as Claude. Exit 1, not 2: a
+                // hook's exit 2 can block the agent.
+                if (flags.client !== undefined && flags.client !== 'claude' && flags.client !== 'codex') {
+                    write('Nothing saved: use --client claude or --client codex.\n');
+                    return 1;
+                }
                 let stdin;
                 let input;
                 if (typeof flags.transcript === 'string') {
@@ -109,6 +111,7 @@ export const runHooksCommand = async (argv, deps = {}) => {
                 const result = await saveSession({
                     stdin,
                     input,
+                    client: flags.client === 'codex' ? 'codex' : 'claude',
                     home: deps.home,
                     env: deps.env,
                     now: deps.now,

package/dist/hooks/graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/hooks/graph.ts"],"names":[],"mappings":"AAkCA,eAAO,MAAM,oBAAoB,iBAAiB,CAAA;AAClD,eAAO,MAAM,iBAAiB,4BAA4B,CAAA;AAC1D,eAAO,MAAM,oBAAoB,yBAAyB,CAAA;AAC1D,sDAAsD;AACtD,eAAO,MAAM,sBAAsB,QAAkB,CAAA;AAIrD;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,QAAoB,CAAA;AAIvD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,IAAI,CAAA;AAGlC,KAAK,MAAM,GAAG;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAC,CAAA;AAC9F,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,KAAG,MAQ7C,CAAA;AA4BD,eAAO,MAAM,cAAc,GAAI,gBAAgB,MAAM,KAAG,MAMvD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,EAAE,YAA4B,KAAG,MAAM,EAanF,CAAA;AAED,eAAO,MAAM,uBAAuB,GAClC,YAAY,MAAM,EAClB,UAAS;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAM,KACpC,OAAO,CAAC,MAAM,CAiLhB,CAAA;AAED,oEAAoE;AACpE,eAAO,MAAM,uBAAuB,GAAU,YAAY,MAAM,KAAG,OAAO,CAAC,IAAI,CAE9E,CAAA"}
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/hooks/graph.ts"],"names":[],"mappings":"AAkCA,eAAO,MAAM,oBAAoB,iBAAiB,CAAA;AAClD,eAAO,MAAM,iBAAiB,4BAA4B,CAAA;AAC1D,eAAO,MAAM,oBAAoB,yBAAyB,CAAA;AAC1D,sDAAsD;AACtD,eAAO,MAAM,sBAAsB,QAAkB,CAAA;AAIrD;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,QAAoB,CAAA;AAIvD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,IAAI,CAAA;AAGlC,KAAK,MAAM,GAAG;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAC,CAAA;AAC9F,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,KAAG,MAQ7C,CAAA;AA4BD,eAAO,MAAM,cAAc,GAAI,gBAAgB,MAAM,KAAG,MAMvD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,EAAE,YAA4B,KAAG,MAAM,EAanF,CAAA;AAED,eAAO,MAAM,uBAAuB,GAClC,YAAY,MAAM,EAClB,UAAS;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAM,KACpC,OAAO,CAAC,MAAM,CAmLhB,CAAA;AAED,oEAAoE;AACpE,eAAO,MAAM,uBAAuB,GAAU,YAAY,MAAM,KAAG,OAAO,CAAC,IAAI,CAE9E,CAAA"}

package/dist/hooks/graph.js

@@ -103,6 +103,8 @@ export const buildSessionGraphFolder = async (sessionDir, options = {}) => {
     if (!meta)
         throw new Error(`No meta.json in ${sessionDir}`);
     const limits = compactLimits(options.compactLevel ?? 0);
+    // A session an older CLI saved has no client: it came from Claude Code.
+    const agentTag = `agent:${meta.client ?? 'claude'}`;
     const transcriptBytes = await readFile(join(sessionDir, 'transcript.jsonl'));
     const transcript = parseTranscript(transcriptBytes.toString('utf8'));
     await resetSessionGraphFolder(sessionDir);
@@ -134,7 +136,7 @@ export const buildSessionGraphFolder = async (sessionDir, options = {}) => {
         const id = `transcript_${pad(index)}`;
         const blobRef = await addBlob(part, TRANSCRIPT_BLOB_MIME, `transcript-${pad(index)}.jsonl`);
         nodes.push({
-            id, artifactKind: 'file', semanticType: 'transcript', tags: ['session', 'agent:claude'],
+            id, artifactKind: 'file', semanticType: 'transcript', tags: ['session', agentTag],
             metadata: { part: index, parts: transcriptParts.length },
             payload: { blobRef },
         });
@@ -155,12 +157,12 @@ export const buildSessionGraphFolder = async (sessionDir, options = {}) => {
             }
             : item.kind === 'assistant'
                 ? {
-                    id, artifactKind: 'text', tags: ['session', 'agent:claude'],
+                    id, artifactKind: 'text', tags: ['session', agentTag],
                     metadata: { role: 'assistant', timestamp: createdAt },
                     payload: clip(redactText(item.text), limits.textChars),
                 }
                 : {
-                    id, artifactKind: 'run', tags: ['session', 'agent:claude', `tool:${item.toolName}`],
+                    id, artifactKind: 'run', tags: ['session', agentTag, `tool:${item.toolName}`],
                     metadata: { toolUseId: item.toolUseId, timestamp: createdAt },
                     payload: { toolName: item.toolName, input: redactedInput(item.input, limits.toolInputBytes) },
                 };
@@ -207,7 +209,7 @@ export const buildSessionGraphFolder = async (sessionDir, options = {}) => {
         const blobRef = await addBlob(bytes, image.mime, image.file.slice(0, 200));
         const id = `image_${pad(index)}`;
         nodes.push({
-            id, artifactKind: 'image', tags: ['session', 'agent:claude'],
+            id, artifactKind: 'image', tags: ['session', agentTag],
             metadata: { sourcePath: redactText(image.original) },
             payload: { blobRef },
         });
@@ -215,7 +217,7 @@ export const buildSessionGraphFolder = async (sessionDir, options = {}) => {
     }
     nodes.push({
         id: sessionNodeId, artifactKind: 'console', semanticType: 'agent-session',
-        tags: ['session', 'agent:claude'],
+        tags: ['session', agentTag],
         metadata: {
             sessionId: meta.sessionId, client: meta.client, lastEvent: meta.lastEvent,
             messageCount: messageNodes.length, skippedImages,

package/dist/hooks/install.d.ts

@@ -7,10 +7,26 @@ export declare const HOOK_TIMEOUT_SECONDS = 30;
  */
 export declare const SESSION_END_TIMEOUT_SECONDS = 10;
 export declare const MAX_SETTINGS_BACKUPS = 3;
+/** Where the hooks go: one project folder, or every project when omitted (--global). */
+export type HookScope = {
+    projectDir?: string;
+};
+/** Where each client keeps its config, per project and for the user. */
+type ClientPaths = {
+    home?: string;
+    codexHome?: string;
+};
 /** What `hooks install` and `setup` must tell the user before recording starts. */
-export declare const SESSION_SAVE_DISCLOSURE: string;
+export declare const sessionSaveDisclosure: (scope: HookScope, client?: HookClient) => string;
 export declare const isOurCommand: (command: unknown) => boolean;
-export declare const hookCommand: (cliPath?: string) => string;
+/** Codex hooks name their client, so the saved session is recorded as Codex. */
+export declare const hookCommand: (cliPath?: string, client?: HookClient) => string;
+/**
+ * A project install in the home folder would land in ~/.claude (or ~/.codex),
+ * which the client also reads for every project, so it is refused rather than
+ * silently global.
+ */
+export declare const hookScopeError: (home: string | undefined, scope: HookScope, client?: HookClient, codexHome?: string) => Promise<string | undefined>;
 type HookEntry = {
     type: 'command';
     command: string;
@@ -19,22 +35,21 @@ type HookEntry = {
 };
 /**
  * SessionStart (sweep and retry), Stop (every turn) and PreCompact only mark or
- * spawn work, and run in the background so they never delay the agent.
+ * spawn work, and run in the background so they never delay Claude Code.
  * SessionEnd stays synchronous, because Claude Code is exiting and a
- * background hook could be cut off.
+ * background hook could be cut off. Codex hooks all run synchronously; the
+ * work is the same few local file writes.
  */
-export declare const hookEntry: (event: (typeof HOOK_EVENTS)[number], command: string) => HookEntry;
-export declare const installHooks: (options: {
+export declare const hookEntry: (event: (typeof HOOK_EVENTS)[number], command: string, client?: HookClient) => HookEntry;
+export declare const installHooks: (options: HookScope & ClientPaths & {
     client: HookClient;
-    home?: string;
     cliPath?: string;
 }) => Promise<{
     installed: boolean;
     detail: string;
 }>;
-export declare const uninstallHooks: (options: {
+export declare const uninstallHooks: (options: HookScope & ClientPaths & {
     client: HookClient;
-    home?: string;
 }) => Promise<{
     removed: boolean;
     detail: string;

package/dist/hooks/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/hooks/install.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,YAAY,CAAA;AAE1C,eAAO,MAAM,WAAW,+DAAgE,CAAA;AACxF,eAAO,MAAM,oBAAoB,KAAK,CAAA;AACtC;;;GAGG;AACH,eAAO,MAAM,2BAA2B,KAAK,CAAA;AAC7C,eAAO,MAAM,oBAAoB,IAAI,CAAA;AAErC,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,QAQ0B,CAAA;AAa9D,eAAO,MAAM,YAAY,GAAI,SAAS,OAAO,KAAG,OACa,CAAA;AAI7D,eAAO,MAAM,WAAW,GAAI,UAAU,MAAM,KAAG,MACO,CAAA;AAiDtD,KAAK,SAAS,GAAG;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,IAAI,CAAA;CAAC,CAAA;AAElF;;;;;GAKG;AACH,eAAO,MAAM,SAAS,GAAI,OAAO,CAAC,OAAO,WAAW,EAAE,MAAM,CAAC,EAAE,SAAS,MAAM,KAAG,SAGL,CAAA;AAE5E,eAAO,MAAM,YAAY,GAAU,SAAS;IAC1C,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,KAAG,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAuC/C,CAAA;AAED,eAAO,MAAM,cAAc,GAAU,SAAS;IAC5C,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,KAAG,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAwC7C,CAAA"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/hooks/install.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,YAAY,CAAA;AAE1C,eAAO,MAAM,WAAW,+DAAgE,CAAA;AACxF,eAAO,MAAM,oBAAoB,KAAK,CAAA;AACtC;;;GAGG;AACH,eAAO,MAAM,2BAA2B,KAAK,CAAA;AAC7C,eAAO,MAAM,oBAAoB,IAAI,CAAA;AAErC,wFAAwF;AACxF,MAAM,MAAM,SAAS,GAAG;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAC,CAAA;AAE7C,wEAAwE;AACxE,KAAK,WAAW,GAAG;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAC,CAAA;AAkBtD,mFAAmF;AACnF,eAAO,MAAM,qBAAqB,GAAI,OAAO,SAAS,EAAE,SAAQ,UAAqB,KAAG,MAmBvF,CAAA;AAWD,eAAO,MAAM,YAAY,GAAI,SAAS,OAAO,KAAG,OACa,CAAA;AAI7D,gFAAgF;AAChF,eAAO,MAAM,WAAW,GAAI,UAAU,MAAM,EAAE,SAAQ,UAAqB,KAAG,MACsB,CAAA;AAMpG;;;;GAIG;AACH,eAAO,MAAM,cAAc,GACzB,MAAM,MAAM,GAAG,SAAS,EACxB,OAAO,SAAS,EAChB,SAAQ,UAAqB,EAC7B,YAAY,MAAM,KACjB,OAAO,CAAC,MAAM,GAAG,SAAS,CAY5B,CAAA;AA6GD,KAAK,SAAS,GAAG;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,IAAI,CAAA;CAAC,CAAA;AAElF;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,GACpB,OAAO,CAAC,OAAO,WAAW,EAAE,MAAM,CAAC,EACnC,SAAS,MAAM,EACf,SAAQ,UAAqB,KAC5B,SAK2E,CAAA;AAE9E,eAAO,MAAM,YAAY,GAAU,SAAS,SAAS,GAAG,WAAW,GAAG;IACpE,MAAM,EAAE,UAAU,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,KAAG,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CA8C/C,CAAA;AAED,eAAO,MAAM,cAAc,GAAU,SAAS,SAAS,GAAG,WAAW,GAAG;IACtE,MAAM,EAAE,UAAU,CAAA;CACnB,KAAG,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAqC7C,CAAA"}

package/dist/hooks/install.js

@@ -1,10 +1,18 @@
-// Register / remove our Claude Code hooks in the user's settings.json.
+// Register / remove our session hooks.
+//
+// Claude Code: one project's .claude/settings.local.json (the default for
+// `hooks install`), or with --global the user's ~/.claude/settings.json.
+// Codex: one project's .codex/hooks.json, or with --global
+// $CODEX_HOME/hooks.json. Codex has no personal per-project file, so the
+// project file is kept out of git (info/exclude) and a tracked one is refused.
 //
 // Merge rules: keep every existing key and hook, identify our entry by its
 // command string (`<assethub> hooks save`), never duplicate it, and back the
 // original file up before any change.
-import { copyFile, mkdir, readFile, readdir, rename, rm, writeFile } from 'node:fs/promises';
-import { basename, dirname, join } from 'node:path';
+import { execFile } from 'node:child_process';
+import { appendFile, copyFile, mkdir, readFile, readdir, realpath, rename, rm, writeFile } from 'node:fs/promises';
+import { basename, dirname, join, relative, resolve, sep } from 'node:path';
+import { promisify } from 'node:util';
 import { resolveHome } from './paths.js';
 export const HOOK_EVENTS = ['SessionStart', 'Stop', 'SessionEnd', 'PreCompact'];
 export const HOOK_TIMEOUT_SECONDS = 30;
@@ -14,26 +22,121 @@ export const HOOK_TIMEOUT_SECONDS = 30;
  */
 export const SESSION_END_TIMEOUT_SECONDS = 10;
 export const MAX_SETTINGS_BACKUPS = 3;
+const CLIENT_NAME = { claude: 'Claude Code', codex: 'Codex' };
+const PROJECT_DIR = { claude: '.claude', codex: '.codex' };
+const PROJECT_FILE = { claude: 'settings.local.json', codex: 'hooks.json' };
+const projectSettingsPath = (projectDir, client = 'claude') => join(resolve(projectDir), PROJECT_DIR[client], PROJECT_FILE[client]);
+/** The client's user-level folder: ~/.claude, or $CODEX_HOME (default ~/.codex). */
+const userConfigDir = (client, paths) => client === 'codex' ? (paths.codexHome ?? join(resolveHome(paths.home), '.codex')) : join(resolveHome(paths.home), '.claude');
+const settingsPath = (client, paths, scope) => scope.projectDir
+    ? projectSettingsPath(scope.projectDir, client)
+    : join(userConfigDir(client, paths), client === 'codex' ? 'hooks.json' : 'settings.json');
 /** What `hooks install` and `setup` must tell the user before recording starts. */
-export const SESSION_SAVE_DISCLOSURE = 'Session saving adds SessionStart, Stop, PreCompact and SessionEnd hooks to ~/.claude/settings.json. ' +
-    'Every Claude Code session on this machine, in any project, is then copied to ~/.assethub/sessions/ when it ends ' +
-    '(the conversation only: your prompts, the agent\'s replies and tool calls, with recognised secrets masked, readable only by you; copies older than 30 days are deleted), ' +
-    'and uploaded to AssetHub as a coding-agent session only you can read (internal accounts only for now): the masked transcript, ' +
-    'your prompts, the agent\'s replies, its tool calls and images from the project. Uploads that fail are retried in the background ' +
-    'when a later session starts or ends. Secret masking is best effort. ' +
-    'Opt a project out with .assethub/no-session-save, or turn it off with ASSETHUB_SESSION_SAVE=off / ASSETHUB_SESSION_UPLOAD=off; ' +
-    'remove it with `assethub hooks uninstall --client claude`.';
-const CODEX_DETAIL = 'Codex: run `assethub hooks save --transcript <path>` manually for now';
+export const sessionSaveDisclosure = (scope, client = 'claude') => {
+    const name = CLIENT_NAME[client];
+    const where = scope.projectDir
+        ? `${projectSettingsPath(scope.projectDir, client)}. ` +
+            `Every ${name} session opened in ${resolve(scope.projectDir)} (and only there)`
+        : `${client === 'codex' ? '$CODEX_HOME/hooks.json' : '~/.claude/settings.json'} (--global). Every ${name} session on this machine, in any project,`;
+    const remove = scope.projectDir
+        ? `\`assethub hooks uninstall --client ${client}\` from that folder`
+        : `\`assethub hooks uninstall --client ${client} --global\``;
+    return (`Session saving adds SessionStart, Stop, PreCompact and SessionEnd hooks to ${where} ` +
+        'is then copied to ~/.assethub/sessions/ when it ends ' +
+        '(the conversation only: your prompts, the agent\'s replies and tool calls, with recognised secrets masked, readable only by you; copies older than 30 days are deleted), ' +
+        'and uploaded to AssetHub as a coding-agent session only you can read (internal accounts only for now): the masked transcript, ' +
+        'your prompts, the agent\'s replies, its tool calls and images from the project. Uploads that fail are retried in the background ' +
+        'when a later session starts or ends. Secret masking is best effort. ' +
+        'Opt a project out with .assethub/no-session-save, or turn it off with ASSETHUB_SESSION_SAVE=off / ASSETHUB_SESSION_UPLOAD=off; ' +
+        `remove it with ${remove}.`);
+};
 const isObject = (value) => value != null && typeof value === 'object' && !Array.isArray(value);
 // Only a command that runs the CLI itself: `assethub hooks save`, optionally a
 // (quoted) path to it. `echo assethub hooks save` is somebody else's hook.
 const OUR_COMMAND_RE = /^\s*(?:"(?:[^"]*[/\\])?assethub(?:\.js)?"|'(?:[^']*[/\\])?assethub(?:\.js)?'|(?:[^\s"']*[/\\])?assethub(?:\.js)?)\s+hooks\s+save(?:\s|$)/;
 export const isOurCommand = (command) => typeof command === 'string' && OUR_COMMAND_RE.test(command);
 const quoteIfNeeded = (value) => (/\s/.test(value) ? JSON.stringify(value) : value);
-export const hookCommand = (cliPath) => `${quoteIfNeeded(cliPath ?? 'assethub')} hooks save`;
-const settingsPath = (home) => join(resolveHome(home), '.claude', 'settings.json');
-const load = async (home) => {
-    const path = settingsPath(home);
+/** Codex hooks name their client, so the saved session is recorded as Codex. */
+export const hookCommand = (cliPath, client = 'claude') => `${quoteIfNeeded(cliPath ?? 'assethub')} hooks save${client === 'codex' ? ' --client codex' : ''}`;
+// Symlinks are followed: a project path or a client folder that leads to the
+// home folder is the home folder. A path that does not exist yet is taken as is.
+const realOrResolved = async (path) => realpath(path).catch(() => resolve(path));
+/**
+ * A project install in the home folder would land in ~/.claude (or ~/.codex),
+ * which the client also reads for every project, so it is refused rather than
+ * silently global.
+ */
+export const hookScopeError = async (home, scope, client = 'claude', codexHome) => {
+    if (!scope.projectDir)
+        return undefined;
+    const homeDir = resolveHome(home);
+    const [project, projectConfig, realHome, userConfig] = await Promise.all([
+        realOrResolved(scope.projectDir),
+        realOrResolved(join(scope.projectDir, PROJECT_DIR[client])),
+        realOrResolved(homeDir),
+        realOrResolved(userConfigDir(client, { home, codexHome })),
+    ]);
+    return project === realHome || projectConfig === userConfig
+        ? 'Run this inside a project folder: in your home folder the hooks would apply to every project. Use --global if that is what you want.'
+        : undefined;
+};
+const run = promisify(execFile);
+const git = async (cwd, ...args) => run('git', ['-C', cwd, ...args]).then(({ stdout }) => stdout, () => undefined);
+/**
+ * Codex reads hooks only from .codex/hooks.json, which a repository may share.
+ * Ours stay personal: a tracked file is refused, an untracked one goes into
+ * the repository's info/exclude (never the shared .gitignore).
+ */
+const keepCodexHooksOutOfGit = async (path) => {
+    const dir = dirname(dirname(path));
+    const found = await git(dir, 'rev-parse', '--show-toplevel', '--git-path', 'info/exclude');
+    if (!found)
+        return undefined; // not a repository, or no git
+    const [top, excludePath] = found.trim().split('\n');
+    const file = relative(await realOrResolved(top), join(await realOrResolved(dir), PROJECT_DIR.codex, PROJECT_FILE.codex));
+    if (file.startsWith('..'))
+        return undefined;
+    if ((await git(top, 'ls-files', '--', file))?.trim())
+        return `${path} is tracked by git, so the hooks would be shared with everyone using the repository; left untouched.`;
+    const exclude = resolve(dir, excludePath);
+    // The file and the backups an install leaves next to it.
+    const pattern = `/${file.split(sep).join('/')}*`;
+    const current = await readFile(exclude, 'utf8').catch(() => '');
+    if (!current.split('\n').includes(pattern)) {
+        await mkdir(dirname(exclude), { recursive: true });
+        await appendFile(exclude, `${current && !current.endsWith('\n') ? '\n' : ''}${pattern}\n`);
+    }
+    return undefined;
+};
+/** `[projects."<path>"]` sections with `trust_level = "trusted"` in Codex's config.toml. */
+const codexTrustedProjects = async (codexDir) => {
+    const toml = await readFile(join(codexDir, 'config.toml'), 'utf8').catch(() => '');
+    const trusted = new Set();
+    const sections = toml.split(/^(?=\[)/m);
+    for (const section of sections) {
+        const header = /^\[projects\."((?:[^"\\]|\\.)*)"\]/.exec(section);
+        if (header && /^\s*trust_level\s*=\s*"trusted"/m.test(section))
+            trusted.add(header[1].replace(/\\(.)/g, '$1'));
+    }
+    return trusted;
+};
+/** What Codex still needs before the hooks run. */
+const codexNotes = async (codexDir, scope) => {
+    const review = ' Codex runs a new or changed hook only after you approve it: open /hooks in Codex.';
+    if (!scope.projectDir)
+        return review;
+    const dir = scope.projectDir;
+    const top = (await git(dir, 'rev-parse', '--show-toplevel'))?.trim();
+    const candidates = [resolve(dir), await realOrResolved(dir), ...(top ? [top, await realOrResolved(top)] : [])];
+    const trusted = await codexTrustedProjects(codexDir);
+    if (candidates.some(path => trusted.has(path)))
+        return review;
+    return (` Codex loads a project's hooks only when the project is trusted: add [projects."${resolve(dir)}"] ` +
+        `with trust_level = "trusted" to ${join(codexDir, 'config.toml')}, or trust the folder when Codex asks.` +
+        review);
+};
+const load = async (client, paths, scope) => {
+    const path = settingsPath(client, paths, scope);
     let raw;
     try {
         raw = await readFile(path, 'utf8');
@@ -56,10 +159,11 @@ const load = async (home) => {
         return { path, error: `${path} is not valid JSON; left untouched.` };
     }
 };
-const BACKUP_RE = /^settings\.json\.bak-\d+$/;
+const escapeRe = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 const pruneBackups = async (path) => {
     const dir = dirname(path);
-    const ours = (await readdir(dir)).filter(name => BACKUP_RE.test(name));
+    const backupRe = new RegExp(`^${escapeRe(basename(path))}\\.bak-\\d+$`);
+    const ours = (await readdir(dir)).filter(name => backupRe.test(name));
     const byAge = ours.sort((a, b) => Number(b.split('-').pop()) - Number(a.split('-').pop()));
     for (const name of byAge.slice(MAX_SETTINGS_BACKUPS))
         await rm(join(dir, name), { force: true });
@@ -78,26 +182,37 @@ const backupAndWrite = async (loaded, next) => {
 };
 /**
  * SessionStart (sweep and retry), Stop (every turn) and PreCompact only mark or
- * spawn work, and run in the background so they never delay the agent.
+ * spawn work, and run in the background so they never delay Claude Code.
  * SessionEnd stays synchronous, because Claude Code is exiting and a
- * background hook could be cut off.
+ * background hook could be cut off. Codex hooks all run synchronously; the
+ * work is the same few local file writes.
  */
-export const hookEntry = (event, command) => event === 'SessionEnd'
+export const hookEntry = (event, command, client = 'claude') => event === 'SessionEnd'
     ? { type: 'command', command, timeout: SESSION_END_TIMEOUT_SECONDS }
-    : { type: 'command', command, timeout: HOOK_TIMEOUT_SECONDS, async: true };
+    : client === 'codex'
+        ? { type: 'command', command, timeout: HOOK_TIMEOUT_SECONDS }
+        : { type: 'command', command, timeout: HOOK_TIMEOUT_SECONDS, async: true };
 export const installHooks = async (options) => {
-    if (options.client === 'codex')
-        return { installed: false, detail: CODEX_DETAIL };
-    const loaded = await load(options.home);
+    const { client } = options;
+    const refused = await hookScopeError(options.home, options, client, options.codexHome);
+    if (refused)
+        return { installed: false, detail: refused };
+    const loaded = await load(client, options, options);
     if ('error' in loaded)
         return { installed: false, detail: loaded.error };
-    const command = hookCommand(options.cliPath);
+    if (client === 'codex' && options.projectDir) {
+        const shared = await keepCodexHooksOutOfGit(loaded.path);
+        if (shared)
+            return { installed: false, detail: shared };
+    }
+    const notes = client === 'codex' ? await codexNotes(userConfigDir(client, options), options) : '';
+    const command = hookCommand(options.cliPath, client);
     const settings = structuredClone(loaded.settings);
     const hooks = isObject(settings.hooks) ? settings.hooks : {};
     let changed = false;
     for (const event of HOOK_EVENTS) {
         const groups = Array.isArray(hooks[event]) ? hooks[event] : [];
-        const wanted = hookEntry(event, command);
+        const wanted = hookEntry(event, command, client);
         let found = false;
         for (const group of groups) {
             if (!isObject(group) || !Array.isArray(group.hooks))
@@ -121,20 +236,17 @@ export const installHooks = async (options) => {
     }
     settings.hooks = hooks;
     if (!changed) {
-        return { installed: true, detail: `Hooks already installed in ${loaded.path}` };
+        return { installed: true, detail: `Hooks already installed in ${loaded.path}.${notes}` };
     }
     await backupAndWrite(loaded, settings);
-    return { installed: true, detail: `Installed ${HOOK_EVENTS.join(', ')} hooks in ${loaded.path}` };
+    return { installed: true, detail: `Installed ${HOOK_EVENTS.join(', ')} hooks in ${loaded.path}.${notes}` };
 };
 export const uninstallHooks = async (options) => {
-    if (options.client === 'codex') {
-        return { removed: false, detail: 'Codex: no hooks were installed by assethub.' };
-    }
-    const loaded = await load(options.home);
+    const loaded = await load(options.client, options, options);
     if ('error' in loaded)
         return { removed: false, detail: loaded.error };
     if (!loaded.exists || !isObject(loaded.settings.hooks)) {
-        return { removed: false, detail: 'No assethub hooks found.' };
+        return { removed: false, detail: `No assethub hooks found in ${loaded.path}.` };
     }
     const settings = structuredClone(loaded.settings);
     const hooks = settings.hooks;
@@ -166,7 +278,7 @@ export const uninstallHooks = async (options) => {
             delete hooks[event];
     }
     if (!changed)
-        return { removed: false, detail: 'No assethub hooks found.' };
+        return { removed: false, detail: `No assethub hooks found in ${loaded.path}.` };
     if (Object.keys(hooks).length === 0)
         delete settings.hooks;
     await backupAndWrite(loaded, settings);

package/dist/hooks/save.d.ts

@@ -1,4 +1,4 @@
-import type { HookInput, SessionMeta } from './types.js';
+import type { HookClient, HookInput, SessionMeta } from './types.js';
 import type { UploadOptions } from './upload.js';
 export declare const MAX_IMAGES = 50;
 export declare const MAX_IMAGE_BYTES: number;
@@ -8,6 +8,8 @@ export type SaveSessionOptions = {
     stdin?: string;
     /** Or the already-parsed fields. */
     input?: HookInput;
+    /** The agent the hook runs in; its hook command says so (`--client codex`). */
+    client?: HookClient;
     home?: string;
     now?: () => Date;
     env?: NodeJS.ProcessEnv;

package/dist/hooks/save.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"save.d.ts","sourceRoot":"","sources":["../../src/hooks/save.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAC,SAAS,EAAgB,WAAW,EAAC,MAAM,YAAY,CAAA;AACpE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,aAAa,CAAA;AAE9C,eAAO,MAAM,UAAU,KAAK,CAAA;AAC5B,eAAO,MAAM,eAAe,QAAmB,CAAA;AAC/C,eAAO,MAAM,sBAAsB,KAAK,CAAA;AASxC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5D,uEAAuE;IACvE,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;CACjC,CAAA;AAYD,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,GAAI,YAAY,MAAM,EAAE,UAAU,MAAM,KAAG,IACgC,CAAA;AAE3G,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,GAAI,UAAU,MAAM,KAAG,IAC+B,CAAA;AAErF,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,CAAC,UAAU,KAAG,MAAM,GAAG,IAM/D,CAAA;AAED,4FAA4F;AAC5F,eAAO,MAAM,aAAa,GACxB,MAAM,MAAM,EACZ,KAAK,IAAI,EACT,MAAM,MAAM,EACZ,MAAM,MAAM,KACX,OAAO,CAAC,MAAM,CAwBhB,CAAA;AAgFD,qGAAqG;AACrG,eAAO,MAAM,kBAAkB,QAAqB,CAAA;AACpD,wEAAwE;AACxE,eAAO,MAAM,WAAW,IAAI,CAAA;AAK5B;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAC7B,YAAY,MAAM,EAClB,UAAS;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAM,KAC/D,OAAO,CAAC,WAAW,GAAG,IAAI,CA6C5B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAM,MAAM,EACZ,KAAK,IAAI,EACT,mBAAmB,MAAM,KACxB,OAAO,CAAC,MAAM,CAmBhB,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,UAAS,kBAAuB,KAAG,OAAO,CAAC,iBAAiB,CAiF7F,CAAA"}
+{"version":3,"file":"save.d.ts","sourceRoot":"","sources":["../../src/hooks/save.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAC,UAAU,EAAE,SAAS,EAAgB,WAAW,EAAC,MAAM,YAAY,CAAA;AAChF,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,aAAa,CAAA;AAE9C,eAAO,MAAM,UAAU,KAAK,CAAA;AAC5B,eAAO,MAAM,eAAe,QAAmB,CAAA;AAC/C,eAAO,MAAM,sBAAsB,KAAK,CAAA;AASxC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5D,uEAAuE;IACvE,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;CACjC,CAAA;AAYD,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,GAAI,YAAY,MAAM,EAAE,UAAU,MAAM,KAAG,IACgC,CAAA;AAE3G,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,GAAI,UAAU,MAAM,KAAG,IAC+B,CAAA;AAErF,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,CAAC,UAAU,KAAG,MAAM,GAAG,IAM/D,CAAA;AAED,4FAA4F;AAC5F,eAAO,MAAM,aAAa,GACxB,MAAM,MAAM,EACZ,KAAK,IAAI,EACT,MAAM,MAAM,EACZ,MAAM,MAAM,KACX,OAAO,CAAC,MAAM,CAwBhB,CAAA;AAgFD,qGAAqG;AACrG,eAAO,MAAM,kBAAkB,QAAqB,CAAA;AACpD,wEAAwE;AACxE,eAAO,MAAM,WAAW,IAAI,CAAA;AAK5B;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAC7B,YAAY,MAAM,EAClB,UAAS;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAM,KAC/D,OAAO,CAAC,WAAW,GAAG,IAAI,CA6C5B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAM,MAAM,EACZ,KAAK,IAAI,EACT,mBAAmB,MAAM,KACxB,OAAO,CAAC,MAAM,CAmBhB,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,UAAS,kBAAuB,KAAG,OAAO,CAAC,iBAAiB,CAkF7F,CAAA"}

package/dist/hooks/save.js

@@ -281,11 +281,12 @@ export const saveSession = async (options = {}) => {
         const canvasId = await readCanvasId(cwd, env);
         const sessionId = input.session_id;
         const transcriptPath = input.transcript_path;
+        const client = options.client ?? 'claude';
         const full = FULL_SAVE_EVENTS.has(event);
         const fresh = {
             sessionId,
             cwd,
-            client: 'claude',
+            client,
             lastEvent: event,
             savedAt: now.toISOString(),
             status: 'saved',
@@ -297,7 +298,7 @@ export const saveSession = async (options = {}) => {
             ...latest,
             sessionId,
             cwd,
-            client: 'claude',
+            client,
             transcriptPath,
             lastEvent: event,
             savedAt: now.toISOString(),

package/dist/hooks/transcript.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../../src/hooks/transcript.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,cAAc,GACtB;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAC,GAClD;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAC,GACrD;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAC,CAAA;AAE3F,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,cAAc,EAAE,CAAA;IACvB,mEAAmE;IACnE,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CACpC,CAAA;AAID,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MAAM,EAGtD,CAAA;AAgBD,eAAO,MAAM,eAAe,GAAI,KAAK,MAAM,KAAG,gBAiD7C,CAAA"}
+{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../../src/hooks/transcript.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,cAAc,GACtB;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAC,GAClD;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAC,GACrD;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAC,CAAA;AAE3F,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,cAAc,EAAE,CAAA;IACvB,mEAAmE;IACnE,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CACpC,CAAA;AAQD,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MAAM,EAGtD,CAAA;AAgBD,eAAO,MAAM,eAAe,GAAI,KAAK,MAAM,KAAG,gBAiD7C,CAAA"}

package/dist/hooks/transcript.js

@@ -1,6 +1,10 @@
 // Parse a Claude Code transcript (JSONL) into the flat sequence the session
 // graph is built from.
-const IMAGE_PATH_RE = /(?<![\w.~-])(?:\/[^\s"'\\<>|:*?`()[\]{}]+)+\.(?:png|jpe?g|webp)\b/gi;
+// One run of path characters (they include `/`), capped at Linux's PATH_MAX
+// (4096) so a long line with no spaces, such as base64, is scanned in linear
+// time. A nested `(?:/…+)+` backtracks exponentially there and hung the save
+// on a Codex rollout.
+const IMAGE_PATH_RE = /(?<![\w.~-])\/[^\s"'\\<>|:*?`()[\]{}]{0,4096}?\.(?:png|jpe?g|webp)\b/gi;
 export const extractImagePaths = (text) => {
     const found = text.match(IMAGE_PATH_RE) ?? [];
     return [...new Set(found)];

package/dist/hooks/trim.d.ts

@@ -7,8 +7,18 @@ type Json = Record<string, unknown>;
 /** One transcript entry reduced to what the conversation needs, or undefined to drop it. */
 export declare const trimTranscriptEntry: (entry: unknown) => Json | undefined;
 /**
- * Trim a JSONL transcript. A file that is not a Claude Code transcript (for
- * example a Codex rollout saved by hand) is returned unchanged.
+ * One Codex rollout record as a conversation entry in the same shape as a
+ * trimmed Claude Code transcript, or undefined to drop it. Kept: the artist's
+ * prompts, the agent's replies, its tool calls and their output, and compaction
+ * summaries. Dropped: session metadata (base instructions, git, cwd), developer
+ * and context messages, reasoning, turn settings and the event stream, which
+ * repeats the messages.
+ */
+export declare const codexEntry: (entry: unknown) => Json | undefined;
+/**
+ * Trim a JSONL transcript: a Claude Code transcript, or a Codex rollout turned
+ * into the same conversation shape. A file in any other format is returned
+ * unchanged.
  */
 export declare const trimTranscript: (raw: string) => string;
 export {};

package/dist/hooks/trim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trim.d.ts","sourceRoot":"","sources":["../../src/hooks/trim.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,oBAAoB,CAAA;AAElD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAuDnC,4FAA4F;AAC5F,eAAO,MAAM,mBAAmB,GAAI,OAAO,OAAO,KAAG,IAAI,GAAG,SAqB3D,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG,MAc5C,CAAA"}
+{"version":3,"file":"trim.d.ts","sourceRoot":"","sources":["../../src/hooks/trim.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,oBAAoB,CAAA;AAElD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAuDnC,4FAA4F;AAC5F,eAAO,MAAM,mBAAmB,GAAI,OAAO,OAAO,KAAG,IAAI,GAAG,SAqB3D,CAAA;AA8DD;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,IAAI,GAAG,SAuClD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG,MAgB5C,CAAA"}

package/dist/hooks/trim.js

@@ -1,4 +1,5 @@
-// Keep only the conversation from a Claude Code transcript before it is saved
+// Keep only the conversation from a Claude Code transcript (or a Codex rollout,
+// converted to the same shape) before it is saved
 // or uploaded: the artist's prompts, the agent's replies, its tool calls and
 // their results, and compaction summaries. Everything else Claude Code writes
 // to the file (skill, tool and agent listings, the system prompt, hook
@@ -85,9 +86,118 @@ export const trimTranscriptEntry = (entry) => {
         },
     };
 };
+/** Top-level record types of a Codex rollout (`~/.codex/sessions/.../rollout-*.jsonl`). */
+const CODEX_LINE_TYPES = new Set(['session_meta', 'response_item', 'event_msg', 'turn_context', 'compacted']);
+// Codex sends its context as user messages: AGENTS.md, and tagged blocks such
+// as <environment_context> or <user_instructions>. They are not the artist's words.
+const CODEX_CONTEXT_BLOCK = /<([A-Za-z][\w-]*(?:context|instructions|plugins))(?:\s[^>]*)?>[\s\S]*?<\/\1>\s*/g;
+const codexUserText = (text) => /^\s*# AGENTS\.md instructions/.test(text) ? '' : cleanText(text.replace(CODEX_CONTEXT_BLOCK, ''));
+const codexText = (content, blockType, clean) => (Array.isArray(content) ? content : [])
+    .map(block => (isObject(block) && block.type === blockType && typeof block.text === 'string' ? clean(block.text) : ''))
+    .filter(text => text.trim())
+    .join('\n');
+// An exec result is JSON text with timing and token bookkeeping around the
+// command's output; only the output is conversation.
+const codexOutputText = (text) => {
+    if (text.trimStart().startsWith('{')) {
+        try {
+            const parsed = JSON.parse(text);
+            if (isObject(parsed) && typeof parsed.output === 'string')
+                return parsed.output;
+        }
+        catch {
+            // plain text that happens to start with a brace
+        }
+    }
+    return text;
+};
+/** Tool output: a string, `{output}`, or a list of `{type, text}` items (images are dropped). */
+const codexToolOutput = (output) => {
+    if (typeof output === 'string')
+        return cleanText(codexOutputText(output));
+    if (Array.isArray(output))
+        return cleanText(output
+            .map(item => (isObject(item) && typeof item.text === 'string' ? codexOutputText(item.text) : ''))
+            .filter(Boolean)
+            .join('\n'));
+    if (isObject(output)) {
+        for (const key of ['output', 'content'])
+            if (typeof output[key] === 'string')
+                return cleanText(output[key]);
+    }
+    return output === undefined ? '' : JSON.stringify(output);
+};
+const codexArguments = (value) => {
+    if (typeof value !== 'string')
+        return value ?? {};
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return { arguments: value };
+    }
+};
+const codexMessage = (type, timestamp, content) => ({
+    type,
+    ...(typeof timestamp === 'string' ? { timestamp } : {}),
+    message: { role: type, content },
+});
+/**
+ * One Codex rollout record as a conversation entry in the same shape as a
+ * trimmed Claude Code transcript, or undefined to drop it. Kept: the artist's
+ * prompts, the agent's replies, its tool calls and their output, and compaction
+ * summaries. Dropped: session metadata (base instructions, git, cwd), developer
+ * and context messages, reasoning, turn settings and the event stream, which
+ * repeats the messages.
+ */
+export const codexEntry = (entry) => {
+    if (!isObject(entry) || !isObject(entry.payload))
+        return undefined;
+    const { payload, timestamp } = entry;
+    if (entry.type === 'compacted')
+        return typeof payload.message === 'string' && payload.message.trim() ? { type: 'summary', summary: payload.message } : undefined;
+    if (entry.type !== 'response_item')
+        return undefined;
+    switch (payload.type) {
+        case 'message': {
+            if (payload.role === 'user') {
+                const text = codexText(payload.content, 'input_text', codexUserText).trim();
+                return text ? codexMessage('user', timestamp, text) : undefined;
+            }
+            if (payload.role !== 'assistant')
+                return undefined;
+            const text = codexText(payload.content, 'output_text', cleanText);
+            return text.trim() ? codexMessage('assistant', timestamp, [{ type: 'text', text }]) : undefined;
+        }
+        case 'function_call':
+        case 'custom_tool_call':
+        case 'local_shell_call': {
+            const id = typeof payload.call_id === 'string' ? payload.call_id : payload.id;
+            if (typeof id !== 'string')
+                return undefined;
+            const name = typeof payload.name === 'string' ? payload.name : payload.type === 'local_shell_call' ? 'shell' : 'unknown';
+            const input = payload.type === 'function_call'
+                ? codexArguments(payload.arguments)
+                : payload.type === 'custom_tool_call'
+                    ? { input: payload.input }
+                    : (payload.action ?? {});
+            return codexMessage('assistant', timestamp, [{ type: 'tool_use', id, name, input }]);
+        }
+        case 'function_call_output':
+        case 'custom_tool_call_output': {
+            if (typeof payload.call_id !== 'string')
+                return undefined;
+            return codexMessage('user', timestamp, [{ type: 'tool_result', tool_use_id: payload.call_id, content: codexToolOutput(payload.output) }]);
+        }
+        default:
+            // reasoning, web search and anything else that is not conversation
+            return undefined;
+    }
+};
 /**
- * Trim a JSONL transcript. A file that is not a Claude Code transcript (for
- * example a Codex rollout saved by hand) is returned unchanged.
+ * Trim a JSONL transcript: a Claude Code transcript, or a Codex rollout turned
+ * into the same conversation shape. A file in any other format is returned
+ * unchanged.
  */
 export const trimTranscript = (raw) => {
     const entries = raw
@@ -101,8 +211,10 @@ export const trimTranscript = (raw) => {
             return undefined;
         }
     });
-    if (!entries.some(entry => isObject(entry) && CLAUDE_LINE_TYPES.has(String(entry.type))))
+    const isClaude = entries.some(entry => isObject(entry) && CLAUDE_LINE_TYPES.has(String(entry.type)));
+    const isCodex = !isClaude && entries.some(entry => isObject(entry) && CODEX_LINE_TYPES.has(String(entry.type)) && isObject(entry.payload));
+    if (!isClaude && !isCodex)
         return raw;
-    const kept = entries.map(trimTranscriptEntry).filter((entry) => entry !== undefined);
+    const kept = entries.map(isCodex ? codexEntry : trimTranscriptEntry).filter((entry) => entry !== undefined);
     return kept.map(entry => `${JSON.stringify(entry)}\n`).join('');
 };

package/dist/hooks/types.d.ts

@@ -15,7 +15,7 @@ export type SessionImage = {
 export type SessionMeta = {
     sessionId: string;
     cwd: string;
-    client: 'claude';
+    client: HookClient;
     lastEvent: string;
     savedAt: string;
     canvasId?: string;

package/dist/hooks/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE3C,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,gBAAgB,GAAG,UAAU,CAAA;AAEnE,MAAM,MAAM,YAAY,GAAG;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,CAAA;AAEvF,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,QAAQ,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gGAAgG;IAChG,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kEAAkE;IAClE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,mEAAmE;IACnE,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,uFAAuF;IACvF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,sFAAsF;IACtF,SAAS,CAAC,EAAE,IAAI,CAAA;CACjB,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE3C,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,gBAAgB,GAAG,UAAU,CAAA;AAEnE,MAAM,MAAM,YAAY,GAAG;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,CAAA;AAEvF,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,UAAU,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gGAAgG;IAChG,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kEAAkE;IAClE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,mEAAmE;IACnE,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,uFAAuF;IACvF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,sFAAsF;IACtF,SAAS,CAAC,EAAE,IAAI,CAAA;CACjB,CAAA"}

package/dist/hooks/upload.js

@@ -177,7 +177,7 @@ const uploadSessionUnlocked = async (sessionDir, options) => {
                     graphId: sessionGraphId(basename(sessionDir)),
                     rev,
                     description: `Agent session ${meta.sessionId}`,
-                    tags: ['session', 'agent:claude'],
+                    tags: ['session', `agent:${meta.client ?? 'claude'}`],
                     now: now(),
                 });
             }

package/dist/setupCommand.d.ts

@@ -53,6 +53,8 @@ type DoctorReport = {
 export type SetupDeps = {
     interactive: boolean;
     installHooks: InstallHooks;
+    /** Session saving is installed for this folder only. */
+    cwd: string;
     codexHome: string;
     now: () => Date;
     hasWorkingKey: () => Promise<boolean>;
@@ -108,6 +110,7 @@ export declare const runProcess: (file: string, args: string[]) => Promise<{
 export declare const defaultFileDeps: () => {
     platform: NodeJS.Platform;
     home: string;
+    cwd: string;
     codexHome: string;
     now: () => Date;
     findBinary: (name: string) => Promise<string | undefined>;

package/dist/setupCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setupCommand.d.ts","sourceRoot":"","sources":["../src/setupCommand.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,WAAW,EAAwE,MAAM,aAAa,CAAA;AAG9G,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,uBAAuB,CAAA;AAEvD,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAAA;AAC/C,MAAM,MAAM,SAAS,GAAG;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAA;AAC1E,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAA;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB,+GAA+G;IAC/G,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;IAC7B,MAAM,EAAE,OAAO,CAAA;IACf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,gFAAgF;IAChF,YAAY,EAAE,OAAO,CAAA;IACrB,MAAM,EAAE,OAAO,CAAA;IACf,GAAG,EAAE,OAAO,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAC,CAAA;AAExD,KAAK,YAAY,GAAG;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAC,EAAE,CAAA;CAAC,CAAA;AAI7F,MAAM,MAAM,SAAS,GAAG;IACtB,WAAW,EAAE,OAAO,CAAA;IACpB,YAAY,EAAE,YAAY,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,IAAI,CAAA;IACf,aAAa,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC,KAAK,EAAE,CAAC,KAAK,EAAE;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,WAAW,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;IACrC,iBAAiB,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IACnE,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,cAAc,EAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/C,aAAa,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3D,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,2CAA2C;IAC3C,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACpD,gGAAgG;IAChG,eAAe,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACtD,QAAQ,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAA;IACrC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IACzD,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAC,CAAC,CAAA;IAC9E,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC/D,oBAAoB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAA;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,6FAA6F;IAC7F,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAC7B,CAAA;AAED,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,KAAG,MAAgC,CAAA;AAkCxE,eAAO,MAAM,iBAAiB,GAAI,UAAU,MAAM,EAAE,SAAS,MAAM,KAAG,MAkCrE,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,KAAG,MASrD,CAAA;AAcD,OAAO,EAAC,WAAW,EAAC,CAAA;AAEpB,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,EAAE,cAAc,MAAM;;;;;;;CAOtE,CAAA;AAEF,eAAO,MAAM,aAAa,GAAI,SAAS,MAAM,EAAE,cAAc,MAAM,KAAG,MAAM,EAE3E,CAAA;AAID,eAAO,MAAM,QAAQ,GAAU,SAAS,YAAY,EAAE,MAAM,SAAS,KAAG,OAAO,CAAC,WAAW,CAyQ1F,CAAA;AA4CD,eAAO,MAAM,kBAAkB,GAAI,QAAQ,WAAW,KAAG,MAIxD,CAAA;AAID,eAAO,MAAM,UAAU,GAAU,MAAM,MAAM,EAAE,kBAAkC,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAY7G,CAAA;AAED,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,EAAE,KAAG,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAM5F,CAAA;AAEJ,eAAO,MAAM,eAAe;;;;;uBAKP,MAAM;gBAbM,MAAM,QAAQ,MAAM,EAAE,KAAG,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAC,CAAC;6BAehE,MAAM;iCAQF,MAAM,WAAW,MAAM;uBAIvC,MAAM,MAAM,MAAM;CACrC,CAAA;AAIF,eAAO,MAAM,UAAU,GAAU,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAQjE,CAAA;AAGD,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAyB1D,CAAA;AAEJ,eAAO,MAAM,YAAY,GAAU,OAAO,cAAc,EAAE,KAAG,OAAO,CAAC,MAAM,CAO1E,CAAA;AAED,eAAO,MAAM,UAAU,GAAU,UAAU,MAAM,KAAG,OAAO,CAAC,OAAO,CACd,CAAA;AAErD,eAAO,MAAM,SAAS,GAAU,UAAU,MAAM,KAAG,OAAO,CAAC,OAAO,CACd,CAAA"}
+{"version":3,"file":"setupCommand.d.ts","sourceRoot":"","sources":["../src/setupCommand.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,WAAW,EAAwE,MAAM,aAAa,CAAA;AAI9G,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,uBAAuB,CAAA;AAEvD,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAAA;AAC/C,MAAM,MAAM,SAAS,GAAG;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAA;AAC1E,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAA;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB,+GAA+G;IAC/G,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;IAC7B,MAAM,EAAE,OAAO,CAAA;IACf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,gFAAgF;IAChF,YAAY,EAAE,OAAO,CAAA;IACrB,MAAM,EAAE,OAAO,CAAA;IACf,GAAG,EAAE,OAAO,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAC,CAAA;AAExD,KAAK,YAAY,GAAG;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAC,EAAE,CAAA;CAAC,CAAA;AAI7F,MAAM,MAAM,SAAS,GAAG;IACtB,WAAW,EAAE,OAAO,CAAA;IACpB,YAAY,EAAE,YAAY,CAAA;IAC1B,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,IAAI,CAAA;IACf,aAAa,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC,KAAK,EAAE,CAAC,KAAK,EAAE;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,WAAW,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;IACrC,iBAAiB,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IACnE,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,cAAc,EAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/C,aAAa,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3D,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,2CAA2C;IAC3C,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACpD,gGAAgG;IAChG,eAAe,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACtD,QAAQ,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAA;IACrC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IACzD,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAC,CAAC,CAAA;IAC9E,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC/D,oBAAoB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAA;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,6FAA6F;IAC7F,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAC7B,CAAA;AAED,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,KAAG,MAAgC,CAAA;AAkCxE,eAAO,MAAM,iBAAiB,GAAI,UAAU,MAAM,EAAE,SAAS,MAAM,KAAG,MAkCrE,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,KAAG,MASrD,CAAA;AAcD,OAAO,EAAC,WAAW,EAAC,CAAA;AAEpB,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,EAAE,cAAc,MAAM;;;;;;;CAOtE,CAAA;AAEF,eAAO,MAAM,aAAa,GAAI,SAAS,MAAM,EAAE,cAAc,MAAM,KAAG,MAAM,EAE3E,CAAA;AAID,eAAO,MAAM,QAAQ,GAAU,SAAS,YAAY,EAAE,MAAM,SAAS,KAAG,OAAO,CAAC,WAAW,CA2S1F,CAAA;AA4CD,eAAO,MAAM,kBAAkB,GAAI,QAAQ,WAAW,KAAG,MAIxD,CAAA;AAID,eAAO,MAAM,UAAU,GAAU,MAAM,MAAM,EAAE,kBAAkC,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAY7G,CAAA;AAED,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,EAAE,KAAG,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAM5F,CAAA;AAEJ,eAAO,MAAM,eAAe;;;;;;uBAMP,MAAM;gBAdM,MAAM,QAAQ,MAAM,EAAE,KAAG,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAC,CAAC;6BAgBhE,MAAM;iCAQF,MAAM,WAAW,MAAM;uBAIvC,MAAM,MAAM,MAAM;CACrC,CAAA;AAIF,eAAO,MAAM,UAAU,GAAU,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAQjE,CAAA;AAGD,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAyB1D,CAAA;AAEJ,eAAO,MAAM,YAAY,GAAU,OAAO,cAAc,EAAE,KAAG,OAAO,CAAC,MAAM,CAO1E,CAAA;AAED,eAAO,MAAM,UAAU,GAAU,UAAU,MAAM,KAAG,OAAO,CAAC,OAAO,CACd,CAAA;AAErD,eAAO,MAAM,SAAS,GAAU,UAAU,MAAM,KAAG,OAAO,CAAC,OAAO,CACd,CAAA"}

package/dist/setupCommand.js

@@ -4,7 +4,7 @@ import { access, copyFile, mkdir, readFile, stat, writeFile } from 'node:fs/prom
 import { homedir } from 'node:os';
 import { delimiter, dirname, join } from 'node:path';
 import { API_KEY_ENV, launchAgentPath, launchAgentPlist, loadKeyIntoLaunchd, readLaunchdKey } from './appEnv.js';
-import { SESSION_SAVE_DISCLOSURE } from './hooks/install.js';
+import { hookScopeError, sessionSaveDisclosure } from './hooks/install.js';
 import { mcpConfig } from './setup.js';
 export const redactKey = (key) => `ah_…${key.slice(-4)}`;
 const scrub = (text, key) => key ? text.split(key).join(redactKey(key)) : text;
@@ -116,6 +116,28 @@ export const runSetup = async (options, deps) => {
     const say = (line) => deps.log(line);
     const wantClaude = options.client !== 'codex';
     const wantCodex = options.client !== 'claude';
+    const hookClients = [...(wantClaude ? ['claude'] : []), ...(wantCodex ? ['codex'] : [])];
+    const hookNames = hookClients.map(client => (client === 'claude' ? 'Claude Code' : 'Codex')).join(' and ');
+    let hookRefusal;
+    for (const client of hookClients) {
+        const refused = await hookScopeError(deps.home, { projectDir: deps.cwd }, client, deps.codexHome);
+        if (refused) {
+            hookRefusal = `${client}: ${refused}`;
+            break;
+        }
+    }
+    // 0. --save-sessions asks for something the home folder cannot have, so stop
+    // before login, MCP or app-env changes rather than half-applying setup.
+    if (hookRefusal && options.saveSessions && !options.noHook) {
+        return {
+            ok: false,
+            dryRun: options.dryRun,
+            profile: '',
+            baseUrl: '',
+            steps: [{ name: 'hook', status: 'fail', detail: hookRefusal }],
+            nextStep: 'Run `assethub setup --save-sessions` inside the project folder whose sessions should be saved, or run it without --save-sessions.',
+        };
+    }
     // 1. Login (reuses the existing `auth login` path through deps.login)
     const explicitKey = options.apiKeySource === 'flag' ? options.apiKey : undefined;
     const hadKey = explicitKey ? false : await deps.hasWorkingKey();
@@ -300,51 +322,63 @@ export const runSetup = async (options, deps) => {
     else if (options.noHook) {
         steps.push({ name: 'hook', status: 'skip', detail: 'skipped (--no-hook)' });
     }
-    else if (!wantClaude) {
-        steps.push({ name: 'hook', status: 'skip', detail: 'Codex session saving is not supported yet' });
+    else if (hookRefusal) {
+        // Not offered: the dry run and the question would promise an install the guard refuses.
+        steps.push({ name: 'hook', status: 'skip', detail: hookRefusal });
     }
     else if (options.dryRun) {
         steps.push({
             name: 'hook',
             status: 'skip',
             detail: options.saveSessions
-                ? 'would install the session-saving hooks (dry run)'
+                ? `would install the ${hookNames} session-saving hooks for ${deps.cwd} only (dry run)`
                 : 'would leave session saving off (enable with --save-sessions)',
         });
     }
     else {
+        const hookScope = { projectDir: deps.cwd };
         let consent = options.saveSessions;
+        const disclose = () => {
+            for (const client of hookClients)
+                say(sessionSaveDisclosure(hookScope, client));
+        };
         if (!consent && deps.interactive && !options.yes) {
-            say(SESSION_SAVE_DISCLOSURE);
-            consent = await deps.confirmOptIn('Save and upload your Claude Code sessions?');
+            disclose();
+            consent = await deps.confirmOptIn(`Save and upload your ${hookNames} sessions?`);
         }
         if (!consent) {
             steps.push({
                 name: 'hook',
                 status: 'skip',
-                detail: 'session saving is off; enable it with `assethub setup --save-sessions` or `assethub hooks install --client claude`',
+                detail: `session saving is off; enable it with \`assethub setup --save-sessions\`, or ${hookClients.map(client => `\`assethub hooks install --client ${client}\``).join(' and ')} inside the project folder`,
             });
         }
         else {
             if (options.saveSessions)
-                say(SESSION_SAVE_DISCLOSURE);
+                disclose();
             const pathNote = (await deps.findBinary('assethub'))
                 ? ''
                 : ' Note: the hooks run `assethub`, which is not on PATH; install the CLI globally.';
-            try {
-                const result = await deps.installHooks({ client: 'claude' });
-                steps.push({
-                    name: 'hook',
-                    status: result.installed ? 'ok' : 'fail',
-                    detail: `claude: ${result.detail}${result.installed ? pathNote : ''}`,
-                });
-            }
-            catch (error) {
-                steps.push({
-                    name: 'hook',
-                    status: 'fail',
-                    detail: `claude: ${scrub(error instanceof Error ? error.message : String(error), key)}`,
-                });
+            for (const client of hookClients) {
+                try {
+                    const result = await deps.installHooks({
+                        client,
+                        ...hookScope,
+                        ...(client === 'codex' ? { codexHome: deps.codexHome } : {}),
+                    });
+                    steps.push({
+                        name: 'hook',
+                        status: result.installed ? 'ok' : 'fail',
+                        detail: `${client}: ${result.detail}${result.installed ? pathNote : ''}`,
+                    });
+                }
+                catch (error) {
+                    steps.push({
+                        name: 'hook',
+                        status: 'fail',
+                        detail: `${client}: ${scrub(error instanceof Error ? error.message : String(error), key)}`,
+                    });
+                }
             }
         }
     }
@@ -459,6 +493,7 @@ export const runProcess = (file, args) => new Promise(done => {
 export const defaultFileDeps = () => ({
     platform: process.platform,
     home: homedir(),
+    cwd: process.cwd(),
     codexHome: process.env.CODEX_HOME?.trim() || join(homedir(), '.codex'),
     now: () => new Date(),
     findBinary: (name) => findOnPath(name),

package/dist/setupHooksBridge.d.ts

@@ -1,5 +1,9 @@
 export type InstallHooks = (opts: {
     client: 'claude' | 'codex';
+    /** The project folder whose .claude/settings.local.json or .codex/hooks.json gets the hooks. */
+    projectDir?: string;
+    /** Codex's user folder ($CODEX_HOME), where Codex records which projects are trusted. */
+    codexHome?: string;
 }) => Promise<{
     installed: boolean;
     detail: string;

package/dist/setupHooksBridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setupHooksBridge.d.ts","sourceRoot":"","sources":["../src/setupHooksBridge.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE;IAChC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAA;CAC3B,KAAK,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAC,CAAA;AAEnD,eAAO,MAAM,mBAAmB,EAAE,YAGhC,CAAA"}
+{"version":3,"file":"setupHooksBridge.d.ts","sourceRoot":"","sources":["../src/setupHooksBridge.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE;IAChC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAA;IAC1B,gGAAgG;IAChG,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,KAAK,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAC,CAAA;AAEnD,eAAO,MAAM,mBAAmB,EAAE,YAGhC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assethub/cli",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "description": "Command line interface for AssetHub.",
   "type": "module",
   "bin": {