@codemieai/code 0.0.27 → 0.0.29

package/dist/utils/security.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Security Utilities
+ *
+ * Consolidated security operations including:
+ * - Data sanitization and redaction for logs
+ * - Encrypted credential storage
+ * - Sensitive data detection
+ */
+import { SSOCredentials } from '../providers/core/types.js';
+/**
+ * Sanitize a value for logging
+ */
+export declare function sanitizeValue(value: unknown, key?: string): unknown;
+/**
+ * Sanitize an object for logging
+ */
+export declare function sanitizeObject(obj: Record<string, unknown>): Record<string, unknown>;
+/**
+ * Sanitize cookie object - only show cookie names and count
+ */
+export declare function sanitizeCookies(cookies: Record<string, string> | undefined): string;
+/**
+ * Sanitize authentication token - only show type and prefix
+ */
+export declare function sanitizeAuthToken(token: string | undefined): string;
+/**
+ * Sanitize HTTP headers - special handling for cookie and set-cookie headers
+ */
+export declare function sanitizeHeaders(headers: Record<string, unknown> | undefined): Record<string, unknown>;
+/**
+ * Sanitize log arguments before writing to console or file
+ */
+export declare function sanitizeLogArgs(...args: unknown[]): unknown[];
+/**
+ * Secure credential storage with encryption
+ *
+ * Stores SSO credentials using:
+ * - System keychain (macOS Keychain, Windows Credential Vault) when available
+ * - Encrypted file storage as fallback
+ * - Machine-specific AES-256-CBC encryption
+ */
+export declare class CredentialStore {
+    private static instance;
+    private encryptionKey;
+    private constructor();
+    static getInstance(): CredentialStore;
+    /**
+     * Generate a storage key for a given base URL
+     * @param baseUrl - The base URL to hash
+     * @returns Storage key (e.g., "sso-abc123...")
+     */
+    private getUrlStorageKey;
+    storeSSOCredentials(credentials: SSOCredentials, baseUrl?: string): Promise<void>;
+    retrieveSSOCredentials(baseUrl?: string): Promise<SSOCredentials | null>;
+    clearSSOCredentials(baseUrl?: string): Promise<void>;
+    private encrypt;
+    private decrypt;
+    private getOrCreateEncryptionKey;
+    private storeToFile;
+    private retrieveFromFile;
+}
+//# sourceMappingURL=security.d.ts.map

package/dist/utils/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/utils/security.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AA4D5D;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAqCnE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQpF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,MAAM,CAWnF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAenE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA6DrG;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAgB7D;AA8BD;;;;;;;GAOG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAkB;IACzC,OAAO,CAAC,aAAa,CAAS;IAE9B,OAAO;IAIP,MAAM,CAAC,WAAW,IAAI,eAAe;IAOrC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAMlB,mBAAmB,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBjF,sBAAsB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAmCxE,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB1D,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,wBAAwB;YAMlB,WAAW;YAMX,gBAAgB;CAO/B"}

package/dist/utils/security.js

@@ -0,0 +1,396 @@
+/**
+ * Security Utilities
+ *
+ * Consolidated security operations including:
+ * - Data sanitization and redaction for logs
+ * - Encrypted credential storage
+ * - Sensitive data detection
+ */
+import * as crypto from 'crypto';
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import * as os from 'os';
+import { getCodemiePath } from './paths.js';
+// ============================================================================
+// Data Sanitization and Redaction
+// ============================================================================
+/**
+ * Patterns to identify sensitive keys in objects
+ */
+const SENSITIVE_KEY_PATTERNS = [
+    /api[_-]?key/i,
+    /auth[_-]?token/i,
+    /access[_-]?token/i,
+    /refresh[_-]?token/i,
+    /bearer[_-]?token/i,
+    /password/i,
+    /secret/i,
+    /credential/i,
+    /private[_-]?key/i,
+    /cookie/i,
+    /authorization/i
+];
+/**
+ * Patterns to identify sensitive values (even if key name is not sensitive)
+ */
+const SENSITIVE_VALUE_PATTERNS = [
+    /^sk-[a-zA-Z0-9]{20,}$/, // OpenAI API keys
+    /^sk-ant-[a-zA-Z0-9-_]{95,}$/, // Anthropic API keys
+    /^ya29\.[a-zA-Z0-9-_]{100,}$/, // Google OAuth tokens
+    /^[A-Za-z0-9-_]{20,}\.[A-Za-z0-9-_]{20,}\.[A-Za-z0-9-_]{20,}$/, // JWT tokens
+    /^Bearer\s+[A-Za-z0-9-_.+/=]{20,}$/i, // Bearer tokens
+];
+/**
+ * Check if a key name indicates sensitive data
+ */
+function isSensitiveKey(key) {
+    return SENSITIVE_KEY_PATTERNS.some(pattern => pattern.test(key));
+}
+/**
+ * Check if a value looks like sensitive data
+ */
+function isSensitiveValue(value) {
+    if (value.length < 20)
+        return false; // Short strings unlikely to be secrets
+    return SENSITIVE_VALUE_PATTERNS.some(pattern => pattern.test(value));
+}
+/**
+ * Mask a sensitive string, showing only first and last few characters
+ */
+function maskString(value, showChars = 4) {
+    if (value.length <= showChars * 2) {
+        return '[REDACTED]';
+    }
+    return `${value.slice(0, showChars)}...${value.slice(-showChars)} [REDACTED]`;
+}
+/**
+ * Sanitize a value for logging
+ */
+export function sanitizeValue(value, key) {
+    // Handle null/undefined
+    if (value === null || value === undefined) {
+        return value;
+    }
+    // Check if key name is sensitive
+    if (key && isSensitiveKey(key)) {
+        if (typeof value === 'string') {
+            return maskString(value);
+        }
+        if (typeof value === 'object') {
+            return '[REDACTED OBJECT]';
+        }
+        return '[REDACTED]';
+    }
+    // Handle strings
+    if (typeof value === 'string') {
+        if (isSensitiveValue(value)) {
+            return maskString(value);
+        }
+        return value;
+    }
+    // Handle arrays
+    if (Array.isArray(value)) {
+        return value.map(item => sanitizeValue(item));
+    }
+    // Handle objects
+    if (typeof value === 'object') {
+        return sanitizeObject(value);
+    }
+    // Handle primitives (numbers, booleans, etc.)
+    return value;
+}
+/**
+ * Sanitize an object for logging
+ */
+export function sanitizeObject(obj) {
+    const sanitized = {};
+    for (const [key, value] of Object.entries(obj)) {
+        sanitized[key] = sanitizeValue(value, key);
+    }
+    return sanitized;
+}
+/**
+ * Sanitize cookie object - only show cookie names and count
+ */
+export function sanitizeCookies(cookies) {
+    if (!cookies || typeof cookies !== 'object') {
+        return 'none';
+    }
+    const names = Object.keys(cookies);
+    if (names.length === 0) {
+        return 'none';
+    }
+    return `${names.length} cookie(s): ${names.join(', ')} [values redacted]`;
+}
+/**
+ * Sanitize authentication token - only show type and prefix
+ */
+export function sanitizeAuthToken(token) {
+    if (!token) {
+        return 'none';
+    }
+    if (token === 'sso-authenticated') {
+        return 'sso-authenticated (placeholder)';
+    }
+    // Show only prefix for real tokens
+    if (token.length > 8) {
+        return `${token.slice(0, 8)}... [${token.length} chars, redacted]`;
+    }
+    return '[REDACTED]';
+}
+/**
+ * Sanitize HTTP headers - special handling for cookie and set-cookie headers
+ */
+export function sanitizeHeaders(headers) {
+    if (!headers || typeof headers !== 'object') {
+        return {};
+    }
+    const sanitized = {};
+    for (const [key, value] of Object.entries(headers)) {
+        const lowerKey = key.toLowerCase();
+        // Special handling for cookie headers
+        if (lowerKey === 'cookie') {
+            if (typeof value === 'string') {
+                // Parse cookie string and show names only
+                const cookieNames = value.split(';')
+                    .map(c => c.trim().split('=')[0])
+                    .filter(Boolean);
+                sanitized[key] = `${cookieNames.length} cookie(s): ${cookieNames.join(', ')} [values redacted]`;
+            }
+            else {
+                sanitized[key] = '[REDACTED]';
+            }
+        }
+        // Special handling for set-cookie headers (array of strings)
+        else if (lowerKey === 'set-cookie') {
+            if (Array.isArray(value)) {
+                const cookieNames = value.map(cookie => {
+                    const name = cookie.split('=')[0].trim();
+                    return name;
+                });
+                sanitized[key] = `Setting ${cookieNames.length} cookie(s): ${cookieNames.join(', ')} [values redacted]`;
+            }
+            else if (typeof value === 'string') {
+                const name = value.split('=')[0].trim();
+                sanitized[key] = `Setting cookie: ${name} [value redacted]`;
+            }
+            else {
+                sanitized[key] = '[REDACTED]';
+            }
+        }
+        // Special handling for authorization header
+        else if (lowerKey === 'authorization') {
+            if (typeof value === 'string') {
+                const parts = value.split(' ');
+                if (parts.length === 2) {
+                    sanitized[key] = `${parts[0]} [token redacted]`;
+                }
+                else {
+                    sanitized[key] = '[REDACTED]';
+                }
+            }
+            else {
+                sanitized[key] = '[REDACTED]';
+            }
+        }
+        // Other sensitive headers
+        else if (isSensitiveKey(key)) {
+            sanitized[key] = '[REDACTED]';
+        }
+        // Non-sensitive headers pass through
+        else {
+            sanitized[key] = value;
+        }
+    }
+    return sanitized;
+}
+/**
+ * Sanitize log arguments before writing to console or file
+ */
+export function sanitizeLogArgs(...args) {
+    return args.map(arg => {
+        if (typeof arg === 'string') {
+            // Check if string looks like sensitive data
+            if (isSensitiveValue(arg)) {
+                return maskString(arg);
+            }
+            return arg;
+        }
+        if (typeof arg === 'object' && arg !== null) {
+            return sanitizeValue(arg);
+        }
+        return arg;
+    });
+}
+// ============================================================================
+// Credential Storage
+// ============================================================================
+const SERVICE_NAME = 'codemie-code';
+const ACCOUNT_NAME = 'sso-credentials';
+const FALLBACK_FILE = getCodemiePath('sso-credentials.enc');
+const CREDENTIALS_DIR = getCodemiePath('credentials');
+/**
+ * Lazy load keytar to avoid requiring system dependencies during test imports
+ * Falls back gracefully if keytar is not available (e.g., in CI environments)
+ */
+let keytar = undefined;
+async function getKeytar() {
+    if (keytar !== undefined) {
+        return keytar;
+    }
+    try {
+        keytar = await import('keytar');
+        return keytar;
+    }
+    catch {
+        // Keytar not available (missing system dependencies)
+        keytar = null;
+        return null;
+    }
+}
+/**
+ * Secure credential storage with encryption
+ *
+ * Stores SSO credentials using:
+ * - System keychain (macOS Keychain, Windows Credential Vault) when available
+ * - Encrypted file storage as fallback
+ * - Machine-specific AES-256-CBC encryption
+ */
+export class CredentialStore {
+    static instance;
+    encryptionKey;
+    constructor() {
+        this.encryptionKey = this.getOrCreateEncryptionKey();
+    }
+    static getInstance() {
+        if (!CredentialStore.instance) {
+            CredentialStore.instance = new CredentialStore();
+        }
+        return CredentialStore.instance;
+    }
+    /**
+     * Generate a storage key for a given base URL
+     * @param baseUrl - The base URL to hash
+     * @returns Storage key (e.g., "sso-abc123...")
+     */
+    getUrlStorageKey(baseUrl) {
+        const normalized = baseUrl.replace(/\/$/, '').toLowerCase();
+        const hash = crypto.createHash('sha256').update(normalized).digest('hex');
+        return `sso-${hash}`;
+    }
+    async storeSSOCredentials(credentials, baseUrl) {
+        const encrypted = this.encrypt(JSON.stringify(credentials));
+        // Determine storage key based on whether baseUrl is provided
+        const accountName = baseUrl ? this.getUrlStorageKey(baseUrl) : ACCOUNT_NAME;
+        const filePath = baseUrl
+            ? path.join(CREDENTIALS_DIR, `${this.getUrlStorageKey(baseUrl)}.enc`)
+            : FALLBACK_FILE;
+        // Store to keychain if available (best effort, don't fail if it errors)
+        const keytarModule = await getKeytar();
+        if (keytarModule) {
+            try {
+                await keytarModule.setPassword(SERVICE_NAME, accountName, encrypted);
+            }
+            catch {
+                // Continue to file storage even if keychain fails
+            }
+        }
+        // Always store to file as well for consistency
+        await this.storeToFile(encrypted, filePath);
+    }
+    async retrieveSSOCredentials(baseUrl) {
+        // Determine storage key based on whether baseUrl is provided
+        const accountName = baseUrl ? this.getUrlStorageKey(baseUrl) : ACCOUNT_NAME;
+        const filePath = baseUrl
+            ? path.join(CREDENTIALS_DIR, `${this.getUrlStorageKey(baseUrl)}.enc`)
+            : FALLBACK_FILE;
+        // Try keychain first if available
+        const keytarModule = await getKeytar();
+        if (keytarModule) {
+            try {
+                const encrypted = await keytarModule.getPassword(SERVICE_NAME, accountName);
+                if (encrypted) {
+                    const decrypted = this.decrypt(encrypted);
+                    return JSON.parse(decrypted);
+                }
+            }
+            catch {
+                // Fall through to file storage
+            }
+        }
+        // Always try file storage as fallback
+        try {
+            const encrypted = await this.retrieveFromFile(filePath);
+            if (encrypted) {
+                const decrypted = this.decrypt(encrypted);
+                return JSON.parse(decrypted);
+            }
+        }
+        catch {
+            // Unable to decrypt file storage
+        }
+        return null;
+    }
+    async clearSSOCredentials(baseUrl) {
+        // Determine storage key based on whether baseUrl is provided
+        const accountName = baseUrl ? this.getUrlStorageKey(baseUrl) : ACCOUNT_NAME;
+        const filePath = baseUrl
+            ? path.join(CREDENTIALS_DIR, `${this.getUrlStorageKey(baseUrl)}.enc`)
+            : FALLBACK_FILE;
+        // Clear keychain if available
+        const keytarModule = await getKeytar();
+        if (keytarModule) {
+            try {
+                await keytarModule.deletePassword(SERVICE_NAME, accountName);
+            }
+            catch {
+                // Ignore errors, will try file storage next
+            }
+        }
+        // Also clear file storage
+        try {
+            await fs.unlink(filePath);
+        }
+        catch {
+            // Ignore file not found errors
+        }
+    }
+    encrypt(text) {
+        const iv = crypto.randomBytes(16);
+        // Use a proper 32-byte key by hashing the encryptionKey
+        const key = crypto.createHash('sha256').update(this.encryptionKey).digest();
+        const cipher = crypto.createCipheriv('aes-256-cbc', key, iv);
+        let encrypted = cipher.update(text, 'utf8', 'hex');
+        encrypted += cipher.final('hex');
+        return iv.toString('hex') + ':' + encrypted;
+    }
+    decrypt(text) {
+        const [ivHex, encryptedHex] = text.split(':');
+        const iv = Buffer.from(ivHex, 'hex');
+        // Use a proper 32-byte key by hashing the encryptionKey
+        const key = crypto.createHash('sha256').update(this.encryptionKey).digest();
+        const decipher = crypto.createDecipheriv('aes-256-cbc', key, iv);
+        let decrypted = decipher.update(encryptedHex, 'hex', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+    getOrCreateEncryptionKey() {
+        // Use machine-specific key based on hardware info
+        const machineId = os.hostname() + os.platform() + os.arch();
+        return crypto.createHash('sha256').update(machineId).digest('hex');
+    }
+    async storeToFile(encrypted, filePath) {
+        const dir = path.dirname(filePath);
+        await fs.mkdir(dir, { recursive: true });
+        await fs.writeFile(filePath, encrypted, 'utf8');
+    }
+    async retrieveFromFile(filePath) {
+        try {
+            return await fs.readFile(filePath, 'utf8');
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/utils/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/utils/security.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,sBAAsB,GAAG;IAC7B,cAAc;IACd,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,mBAAmB;IACnB,WAAW;IACX,SAAS;IACT,aAAa;IACb,kBAAkB;IAClB,SAAS;IACT,gBAAgB;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,wBAAwB,GAAG;IAC/B,uBAAuB,EAAE,kBAAkB;IAC3C,6BAA6B,EAAE,qBAAqB;IACpD,6BAA6B,EAAE,sBAAsB;IACrD,8DAA8D,EAAE,aAAa;IAC7E,oCAAoC,EAAE,gBAAgB;CACvD,CAAC;AAEF;;GAEG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC,CAAC,uCAAuC;IAC5E,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,SAAS,GAAG,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,GAAY;IACxD,wBAAwB;IACxB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iCAAiC;IACjC,IAAI,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC,KAAgC,CAAC,CAAC;IAC1D,CAAC;IAED,8CAA8C;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAA4B;IACzD,MAAM,SAAS,GAA4B,EAAE,CAAC;IAE9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,SAAS,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAA2C;IACzE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAClC,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC,MAAM,mBAAmB,CAAC;IACrE,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAA4C;IAC1E,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAA4B,EAAE,CAAC;IAE9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEnC,sCAAsC;QACtC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,0CAA0C;gBAC1C,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;qBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;qBAChC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACnB,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,WAAW,CAAC,MAAM,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;YAClG,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAChC,CAAC;QACH,CAAC;QACD,6DAA6D;aACxD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;oBACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACzC,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,GAAG,WAAW,WAAW,CAAC,MAAM,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;YAC1G,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxC,SAAS,CAAC,GAAG,CAAC,GAAG,mBAAmB,IAAI,mBAAmB,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAChC,CAAC;QACH,CAAC;QACD,4CAA4C;aACvC,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;gBAChC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAChC,CAAC;QACH,CAAC;QACD,0BAA0B;aACrB,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAChC,CAAC;QACD,qCAAqC;aAChC,CAAC;YACJ,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAG,IAAe;IAChD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,4CAA4C;YAC5C,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,aAAa,GAAG,cAAc,CAAC,qBAAqB,CAAC,CAAC;AAC5D,MAAM,eAAe,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;AAEtD;;;GAGG;AACH,IAAI,MAAM,GAA+C,SAAS,CAAC;AACnE,KAAK,UAAU,SAAS;IACtB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;QACrD,MAAM,GAAG,IAAI,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IAClB,MAAM,CAAC,QAAQ,CAAkB;IACjC,aAAa,CAAS;IAE9B;QACE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;YAC9B,eAAe,CAAC,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACnD,CAAC;QACD,OAAO,eAAe,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,OAAe;QACtC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,OAAO,OAAO,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,WAA2B,EAAE,OAAgB;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QAE5D,6DAA6D;QAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAC5E,MAAM,QAAQ,GAAG,OAAO;YACtB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC;YACrE,CAAC,CAAC,aAAa,CAAC;QAElB,wEAAwE;QACxE,MAAM,YAAY,GAAG,MAAM,SAAS,EAAE,CAAC;QACvC,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,WAAW,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,OAAgB;QAC3C,6DAA6D;QAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAC5E,MAAM,QAAQ,GAAG,OAAO;YACtB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC;YACrE,CAAC,CAAC,aAAa,CAAC;QAElB,kCAAkC;QAClC,MAAM,YAAY,GAAG,MAAM,SAAS,EAAE,CAAC;QACvC,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;gBAC5E,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;YACjC,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACxC,6DAA6D;QAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAC5E,MAAM,QAAQ,GAAG,OAAO;YACtB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC;YACrE,CAAC,CAAC,aAAa,CAAC;QAElB,8BAA8B;QAC9B,MAAM,YAAY,GAAG,MAAM,SAAS,EAAE,CAAC;QACvC,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,wDAAwD;QACxD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACnD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC;IAC9C,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,wDAAwD;QACxD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,wBAAwB;QAC9B,kDAAkD;QAClD,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,QAAgB;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@codemieai/code",
-  "version": "0.0.27",
-  "description": "Unified AI coding assistant CLI - Manage Claude Code, Codex, Gemini & custom agents. Multi-provider support (OpenAI, Azure, LiteLLM, SSO). Built-in LangGraph agent with file operations & git integration.",
+  "version": "0.0.29",
+  "description": "Unified AI coding assistant CLI - Manage Claude Code, Gemini & custom agents. Multi-provider support (OpenAI, Azure, LiteLLM, SSO). Built-in LangGraph agent with file operations & git integration.",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -9,9 +9,7 @@
     "codemie": "./bin/codemie.js",
     "codemie-code": "./bin/agent-executor.js",
     "codemie-claude": "./bin/codemie-claude.js",
-    "codemie-codex": "./bin/codemie-codex.js",
-    "codemie-gemini": "./bin/codemie-gemini.js",
-    "codemie-deepagents": "./bin/codemie-deepagents.js"
+    "codemie-gemini": "./bin/codemie-gemini.js"
   },
   "files": [
     "dist",
@@ -22,7 +20,8 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc",
+    "build": "tsc && npm run copy-plugin",
+    "copy-plugin": "node scripts/copy-plugins.js",
     "dev": "tsc --watch",
     "test": "vitest",
     "test:unit": "vitest run src",
@@ -31,12 +30,12 @@
     "test:watch": "vitest --watch",
     "test:ui": "vitest --ui",
     "test:run": "vitest run",
-    "lint": "eslint 'src/**/*.ts' --max-warnings=0",
-    "lint:fix": "eslint 'src/**/*.ts' --fix",
+    "lint": "eslint '{src,tests}/**/*.ts' --max-warnings=0",
+    "lint:fix": "eslint '{src,tests}/**/*.ts' --fix",
     "commitlint": "commitlint --edit",
     "commitlint:last": "commitlint --from HEAD~1 --to HEAD --verbose",
     "validate:secrets": "node scripts/validate-secrets.js",
-    "license-check": "npx license-checker --summary --onlyAllow 'MIT;Apache-2.0;ISC;BSD-2-Clause;BSD-3-Clause;0BSD;CC0-1.0;Unlicense;BlueOak-1.0.0;Python-2.0;CC-BY-4.0;Apache*;(MIT OR CC0-1.0)'",
+    "license-check": "node scripts/license-check.js",
     "ci": "npm run license-check && npm run lint && npm run build && npm run test:unit && npm run test:integration",
     "ci:full": "npm run commitlint:last && npm run ci",
     "prepare": "husky",
@@ -62,7 +61,6 @@
     "claude",
     "claude-code",
     "openai",
-    "codex",
     "gemini",
     "anthropic",
     "gpt",
@@ -116,6 +114,8 @@
     "cors": "^2.8.5",
     "dotenv": "^16.3.1",
     "express": "^5.1.0",
+    "http-proxy-agent": "^7.0.2",
+    "https-proxy-agent": "^7.0.5",
     "inquirer": "^9.2.12",
     "keytar": "^7.9.0",
     "minimatch": "^10.1.1",
@@ -142,6 +142,6 @@
     "vitest": "^4.0.10"
   },
   "engines": {
-    "node": ">=24.0.0"
+    "node": ">=20.0.0"
   }
 }

package/scripts/copy-plugins.js

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+
+/**
+ * Cross-platform script to copy plugin assets from src/ to dist/
+ * Works on Windows, macOS, and Linux
+ */
+
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+import { rmSync, mkdirSync, cpSync, existsSync } from 'fs';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const rootDir = join(__dirname, '..');
+
+const copyConfigs = [
+  {
+    name: 'Claude plugin',
+    src: join(rootDir, 'src/agents/plugins/claude/plugin'),
+    dest: join(rootDir, 'dist/agents/plugins/claude/plugin')
+  },
+  {
+    name: 'Gemini extension',
+    src: join(rootDir, 'src/agents/plugins/gemini/extension'),
+    dest: join(rootDir, 'dist/agents/plugins/gemini/extension')
+  }
+];
+
+console.log('Copying plugin assets...\n');
+
+for (const config of copyConfigs) {
+  console.log(`Processing ${config.name}:`);
+
+  // Remove destination if it exists
+  if (existsSync(config.dest)) {
+    console.log(`  - Removing old ${config.dest}`);
+    rmSync(config.dest, { recursive: true, force: true });
+  }
+
+  // Check if source exists
+  if (!existsSync(config.src)) {
+    console.log(`  - Warning: Source ${config.src} does not exist, skipping...`);
+    continue;
+  }
+
+  // Create parent directories
+  console.log(`  - Creating ${config.dest}`);
+  mkdirSync(config.dest, { recursive: true });
+
+  // Copy recursively
+  console.log(`  - Copying from ${config.src}`);
+  cpSync(config.src, config.dest, { recursive: true });
+
+  console.log(`  ✓ ${config.name} copied successfully\n`);
+}
+
+console.log('Plugin assets copied successfully!');

package/scripts/license-check.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+
+/**
+ * Wrapper script for license-checker that ignores file arguments from lint-staged
+ * lint-staged passes matched files as arguments, but license-checker doesn't need them
+ */
+
+import { spawnSync } from 'child_process';
+import { platform } from 'os';
+
+// Run license-checker without any file arguments
+const allowedLicenses = 'MIT;Apache-2.0;ISC;BSD-2-Clause;BSD-3-Clause;0BSD;CC0-1.0;Unlicense;BlueOak-1.0.0;Python-2.0;CC-BY-4.0;Apache*;(MIT OR CC0-1.0);(MIT OR WTFPL);(BSD-2-Clause OR MIT OR Apache-2.0)';
+
+// On Windows, we need shell: true for npx to work
+// On Unix/Linux, we should NOT use shell: true to avoid semicolon interpretation
+const isWindows = platform() === 'win32';
+
+const result = spawnSync('npx', ['license-checker', '--summary', '--onlyAllow', allowedLicenses], {
+  stdio: 'inherit',
+  shell: isWindows
+});
+
+process.exit(result.status || 0);

package/bin/codemie-codex.js

@@ -1,18 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Codex Agent Entry Point
- * Direct entry point for codemie-codex command
- */
-
-import { AgentCLI } from '../dist/agents/core/AgentCLI.js';
-import { AgentRegistry } from '../dist/agents/registry.js';
-
-const agent = AgentRegistry.getAgent('codex');
-if (!agent) {
-  console.error('✗ Codex agent not found in registry');
-  process.exit(1);
-}
-
-const cli = new AgentCLI(agent);
-await cli.run(process.argv);

package/bin/codemie-deepagents.js

@@ -1,18 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Deep Agents Entry Point
- * Direct entry point for codemie-deepagents command
- */
-
-import { AgentCLI } from '../dist/agents/core/AgentCLI.js';
-import { AgentRegistry } from '../dist/agents/registry.js';
-
-const agent = AgentRegistry.getAgent('deepagents');
-if (!agent) {
-  console.error('✗ Deep Agents not found in registry');
-  process.exit(1);
-}
-
-const cli = new AgentCLI(agent);
-await cli.run(process.argv);