@codexhost/cli-darwin-x64 0.9.1 → 0.10.0

package/app/plugins/codebuddy/plugin.mjs

@@ -14519,6 +14519,61 @@ function date4(params) {
 // ../../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// ../../shared-contracts/dist/credential-imports.js
+var credentialSourceSchema = external_exports.object({
+  id: external_exports.string().min(1).max(256),
+  harnessId: external_exports.string().min(1),
+  label: external_exports.string().min(1).max(512),
+  provider: external_exports.enum(["openai-codex", "xai"])
+}).strict();
+var credentialImportNameSchema = external_exports.string().regex(/^[a-z][a-z0-9-]{0,47}$/);
+var credentialImportRecordSchema = external_exports.object({
+  name: credentialImportNameSchema,
+  source: credentialSourceSchema,
+  importedAt: external_exports.string()
+}).strict();
+var credentialImportsRequestSchema = external_exports.discriminatedUnion("action", [
+  external_exports.object({ action: external_exports.literal("list") }).strict(),
+  external_exports.object({
+    action: external_exports.literal("import"),
+    sourceId: external_exports.string().min(1).max(256),
+    name: credentialImportNameSchema,
+    confirmed: external_exports.literal(true)
+  }).strict(),
+  external_exports.object({
+    action: external_exports.literal("reimport"),
+    sourceId: external_exports.string().min(1).max(256),
+    name: credentialImportNameSchema,
+    confirmed: external_exports.literal(true)
+  }).strict(),
+  external_exports.object({
+    action: external_exports.literal("remove"),
+    name: credentialImportNameSchema,
+    confirmed: external_exports.literal(true)
+  }).strict()
+]);
+var credentialOtherLoginSchema = external_exports.object({
+  provider: external_exports.string().min(1).max(128),
+  type: external_exports.enum(["oauth", "api_key", "unknown"]),
+  /** Best-effort account label (e.g. the email in a Codex token), derived locally when present. */
+  label: external_exports.string().min(1).max(512).optional(),
+  /** Recognized credential vendor, derived from the OAuth token issuer. Absent when unknown. */
+  vendor: external_exports.enum(["openai-codex", "xai"]).optional()
+}).strict();
+var credentialImportsResultSchema = external_exports.object({
+  sources: external_exports.array(credentialSourceSchema),
+  targets: external_exports.array(external_exports.object({
+    harnessId: external_exports.string(),
+    providers: external_exports.array(external_exports.enum(["openai-codex", "xai"])),
+    imports: external_exports.array(credentialImportRecordSchema),
+    others: external_exports.array(credentialOtherLoginSchema).default([])
+  }).strict())
+}).strict();
+var credentialImportsParamsSchema = external_exports.object({
+  targetHarnessId: external_exports.string().min(1).max(128).optional(),
+  request: credentialImportsRequestSchema
+}).strict();
+
 // ../../shared-contracts/dist/version.js
 var WORKSPACE_CONTRACT_VERSION = 1;
 
@@ -15222,10 +15277,21 @@ var harnessCommandDescriptorSchema = external_exports.object({
   invocation: commandInvocationSchema,
   label: commandLabelSchema,
   description: commandDescriptionSchema.optional(),
-  argumentMode: external_exports.enum(["none", "text"])
+  argumentMode: external_exports.enum(["none", "text"]),
+  /**
+   * Native distinction reported by the Harness. Omitted when the Harness does
+   * not tell skills and commands apart; consumers treat that as "command".
+   */
+  kind: external_exports.enum(["command", "skill"]).optional()
 }).strict();
 var harnessCommandCatalogSchema = external_exports.object({
-  commands: external_exports.array(harnessCommandDescriptorSchema)
+  commands: external_exports.array(harnessCommandDescriptorSchema),
+  /**
+   * `live` when the catalog includes what a native Session reports for its
+   * workspace (custom commands, skills); `static` for Adapter built-ins only.
+   * Omitted by Adapters; set by the Host on inspection results.
+   */
+  source: external_exports.enum(["live", "static"]).optional()
 }).strict().superRefine((catalog, context) => {
   const ids = /* @__PURE__ */ new Set();
   for (const [index, command] of catalog.commands.entries()) {
@@ -15239,7 +15305,11 @@ var harnessCommandCatalogSchema = external_exports.object({
     ids.add(command.id);
   }
 });
-var harnessCommandsInspectParamsSchema = external_exports.object({ harnessId: harnessIdSchema }).strict();
+var harnessCommandsInspectParamsSchema = external_exports.object({
+  harnessId: harnessIdSchema,
+  /** Workspace of a draft without a Thread, for its live catalog when known. */
+  cwd: external_exports.string().min(1).optional()
+}).strict();
 var threadCommandsInspectParamsSchema = external_exports.object({
   threadId: hostThreadIdSchema
 }).strict();
@@ -15595,6 +15665,82 @@ function parseHostUsage(value) {
   return { ...value };
 }
 
+// ../../harness-adapter/dist/live-command-catalog.js
+var COMMON_EXCLUDED_LIVE_COMMANDS = /* @__PURE__ */ new Set([
+  // Session lifecycle
+  "branch",
+  "clear",
+  "exit",
+  "fork",
+  "fresh",
+  "new",
+  "quit",
+  "rename",
+  "rename-chat",
+  "reset",
+  "resume",
+  "rewind",
+  "session",
+  "sessions",
+  // Desktop-owned configuration
+  "autocompact",
+  "color",
+  "config",
+  "effort",
+  "fast",
+  "keybindings",
+  "model",
+  "models",
+  "output-style",
+  "permissions",
+  "settings",
+  "statusline",
+  "terminal-setup",
+  "theme",
+  "vim",
+  // Trust and approval policy
+  "always-approve",
+  "auto-mode-setup",
+  // Native login
+  "login",
+  "logout",
+  // Work outliving the Turn
+  "autopilot",
+  "background",
+  "bg",
+  "goal",
+  "jobs",
+  "loop",
+  "multitask",
+  "queue",
+  "remote-control",
+  "schedule",
+  "steer",
+  // Native terminal UI
+  "copy",
+  "debug",
+  "feedback",
+  "heapdump",
+  "share",
+  "shell",
+  // Plugin and MCP management
+  "marketplace",
+  "mcp",
+  "plugins",
+  "reload-plugins"
+]);
+var COMMON_EXCLUDED_LIVE_COMMAND_PREFIXES = ["__", "hooks-"];
+function isExcludedLiveCommand(name, kind, extra = {}) {
+  const normalized = name.trim().replace(/^\//u, "");
+  if (new Set(extra.names ?? []).has(normalized))
+    return true;
+  if (extra.prefixes?.some((prefix) => normalized.startsWith(prefix)))
+    return true;
+  if (kind === "skill")
+    return false;
+  return COMMON_EXCLUDED_LIVE_COMMANDS.has(normalized) || COMMON_EXCLUDED_LIVE_COMMAND_PREFIXES.some((prefix) => normalized.startsWith(prefix));
+}
+
 // dist/common.js
 var CODEBUDDY_ID = harnessIdSchema.parse("codebuddy");
 var CODEBUDDY_RUNTIME_PROFILE = {
@@ -15686,7 +15832,8 @@ function commandCatalog(value, profile = CODEBUDDY_RUNTIME_PROFILE) {
   return {
     commands: rows(value).flatMap((entry) => {
       const name = text(entry.name).replace(/^\//u, "");
-      if (excluded.has(name) || seen.has(name))
+      const skill = record2(entry._meta).type === "skill";
+      if (excluded.has(name) || seen.has(name) || isExcludedLiveCommand(name, skill ? "skill" : "command"))
         return [];
       const parsed = harnessCommandCatalogSchema.safeParse({
         commands: [
@@ -15695,7 +15842,8 @@ function commandCatalog(value, profile = CODEBUDDY_RUNTIME_PROFILE) {
             invocation: `/${name}`,
             label: name,
             ...text(entry.description).trim() ? { description: text(entry.description).trim().slice(0, 512) } : {},
-            argumentMode: name === "compact" || record2(entry.input).hint || record2(entry._meta).type === "skill" ? "text" : "none"
+            argumentMode: name === "compact" || record2(entry.input).hint || record2(entry._meta).type === "skill" ? "text" : "none",
+            ...record2(entry._meta).type === "skill" ? { kind: "skill" } : {}
           }
         ]
       });
@@ -22466,7 +22614,7 @@ var CodeBuddyInteractions = class {
       });
     }
     const actions = request.options.flatMap((option) => {
-      const effect = option.kind === "allow_once" ? "allowOnce" : option.kind === "allow_always" ? "allowAlways" : option.kind === "reject_once" || option.kind === "reject_always" ? "deny" : void 0;
+      const effect = option.kind === "allow_once" ? "allowOnce" : option.kind === "allow_always" ? "allowForSession" : option.kind === "reject_once" || option.kind === "reject_always" ? "deny" : void 0;
       return effect ? [{ id: option.optionId, label: option.name, effect }] : [];
     });
     if (!actions.some((action) => action.effect === "deny"))
@@ -23334,6 +23482,7 @@ var CodeBuddyAdapter = class {
   options;
   harnessId;
   commandCatalog;
+  liveCommandCatalog = true;
   subagents = {
     readSnapshot: async ({ parent, nativeSubagentId, cwd }) => {
       try {
@@ -24306,6 +24455,7 @@ var BrokeredHarnessSession = class {
 var BrokeredHarnessAdapter = class {
   #sessions = /* @__PURE__ */ new Set();
   commandCatalog;
+  liveCommandCatalog;
   harnessId;
   #descriptorPath;
   #forwardEnvironment;
@@ -24328,6 +24478,8 @@ var BrokeredHarnessAdapter = class {
     this.#forwardEnvironment = input.forwardDelegationEnvironment === true;
     if (input.commandCatalog)
       this.commandCatalog = input.commandCatalog;
+    if (input.liveCommandCatalog)
+      this.liveCommandCatalog = true;
     this.#descriptorPath = input.descriptorPath ?? defaultHarnessBrokerDescriptorPath(input.environment, this.harnessId);
   }
   async inspectAccount() {
@@ -24422,6 +24574,7 @@ function createHarnessAdapter(context) {
       harnessId: "codebuddy",
       forwardDelegationEnvironment: true,
       commandCatalog: CODEBUDDY_COMMAND_CATALOG,
+      liveCommandCatalog: true,
       environment: { ...context.environment }
     });
   return new CodeBuddyAdapter({ environment: { ...context.environment } });

package/app/plugins/cursor-cli/plugin.mjs

@@ -27208,6 +27208,61 @@ function date4(params) {
 // ../../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// ../../shared-contracts/dist/credential-imports.js
+var credentialSourceSchema = external_exports.object({
+  id: external_exports.string().min(1).max(256),
+  harnessId: external_exports.string().min(1),
+  label: external_exports.string().min(1).max(512),
+  provider: external_exports.enum(["openai-codex", "xai"])
+}).strict();
+var credentialImportNameSchema = external_exports.string().regex(/^[a-z][a-z0-9-]{0,47}$/);
+var credentialImportRecordSchema = external_exports.object({
+  name: credentialImportNameSchema,
+  source: credentialSourceSchema,
+  importedAt: external_exports.string()
+}).strict();
+var credentialImportsRequestSchema = external_exports.discriminatedUnion("action", [
+  external_exports.object({ action: external_exports.literal("list") }).strict(),
+  external_exports.object({
+    action: external_exports.literal("import"),
+    sourceId: external_exports.string().min(1).max(256),
+    name: credentialImportNameSchema,
+    confirmed: external_exports.literal(true)
+  }).strict(),
+  external_exports.object({
+    action: external_exports.literal("reimport"),
+    sourceId: external_exports.string().min(1).max(256),
+    name: credentialImportNameSchema,
+    confirmed: external_exports.literal(true)
+  }).strict(),
+  external_exports.object({
+    action: external_exports.literal("remove"),
+    name: credentialImportNameSchema,
+    confirmed: external_exports.literal(true)
+  }).strict()
+]);
+var credentialOtherLoginSchema = external_exports.object({
+  provider: external_exports.string().min(1).max(128),
+  type: external_exports.enum(["oauth", "api_key", "unknown"]),
+  /** Best-effort account label (e.g. the email in a Codex token), derived locally when present. */
+  label: external_exports.string().min(1).max(512).optional(),
+  /** Recognized credential vendor, derived from the OAuth token issuer. Absent when unknown. */
+  vendor: external_exports.enum(["openai-codex", "xai"]).optional()
+}).strict();
+var credentialImportsResultSchema = external_exports.object({
+  sources: external_exports.array(credentialSourceSchema),
+  targets: external_exports.array(external_exports.object({
+    harnessId: external_exports.string(),
+    providers: external_exports.array(external_exports.enum(["openai-codex", "xai"])),
+    imports: external_exports.array(credentialImportRecordSchema),
+    others: external_exports.array(credentialOtherLoginSchema).default([])
+  }).strict())
+}).strict();
+var credentialImportsParamsSchema = external_exports.object({
+  targetHarnessId: external_exports.string().min(1).max(128).optional(),
+  request: credentialImportsRequestSchema
+}).strict();
+
 // ../../shared-contracts/dist/version.js
 var WORKSPACE_CONTRACT_VERSION = 1;
 
@@ -27911,10 +27966,21 @@ var harnessCommandDescriptorSchema = external_exports.object({
   invocation: commandInvocationSchema,
   label: commandLabelSchema,
   description: commandDescriptionSchema.optional(),
-  argumentMode: external_exports.enum(["none", "text"])
+  argumentMode: external_exports.enum(["none", "text"]),
+  /**
+   * Native distinction reported by the Harness. Omitted when the Harness does
+   * not tell skills and commands apart; consumers treat that as "command".
+   */
+  kind: external_exports.enum(["command", "skill"]).optional()
 }).strict();
 var harnessCommandCatalogSchema = external_exports.object({
-  commands: external_exports.array(harnessCommandDescriptorSchema)
+  commands: external_exports.array(harnessCommandDescriptorSchema),
+  /**
+   * `live` when the catalog includes what a native Session reports for its
+   * workspace (custom commands, skills); `static` for Adapter built-ins only.
+   * Omitted by Adapters; set by the Host on inspection results.
+   */
+  source: external_exports.enum(["live", "static"]).optional()
 }).strict().superRefine((catalog, context) => {
   const ids = /* @__PURE__ */ new Set();
   for (const [index, command] of catalog.commands.entries()) {
@@ -27928,7 +27994,11 @@ var harnessCommandCatalogSchema = external_exports.object({
     ids.add(command.id);
   }
 });
-var harnessCommandsInspectParamsSchema = external_exports.object({ harnessId: harnessIdSchema }).strict();
+var harnessCommandsInspectParamsSchema = external_exports.object({
+  harnessId: harnessIdSchema,
+  /** Workspace of a draft without a Thread, for its live catalog when known. */
+  cwd: external_exports.string().min(1).optional()
+}).strict();
 var threadCommandsInspectParamsSchema = external_exports.object({
   threadId: hostThreadIdSchema
 }).strict();
@@ -28075,56 +28145,6 @@ var updateStatusResultSchema = external_exports.strictObject({
 // ../../shared-contracts/dist/index.js
 var workspaceContractVersionSchema = external_exports.literal(WORKSPACE_CONTRACT_VERSION);
 
-// dist/slash-commands.js
-function cursorCommands(native) {
-  const commands = /* @__PURE__ */ new Map();
-  for (const command of native) {
-    const result = harnessCommandDescriptorSchema.safeParse({
-      id: `cursor.${command.name}`,
-      invocation: `/${command.name}`,
-      label: `/${command.name}`,
-      ...command.description.trim() ? { description: command.description.slice(0, 512) } : {},
-      // Cursor 2026.09.10 omits input metadata for both its administrative command
-      // and custom commands/skills, whose parser still accepts trailing text.
-      // Honor an explicit native no-input declaration without disabling those skills.
-      argumentMode: command.input === null || command.name === "copy-request-id" ? "none" : "text"
-    });
-    if (result.success)
-      commands.set(result.data.id, result.data);
-  }
-  return { commands: [...commands.values()] };
-}
-var CURSOR_COMMAND_CATALOG = cursorCommands([
-  { name: "copy-request-id", description: "Copy the current request ID", input: null }
-]);
-function cursorCommandPrompt(command, catalog) {
-  const descriptor = catalog.commands.find(({ id }) => id === command.commandId);
-  if (!descriptor)
-    return {
-      ok: false,
-      error: {
-        code: "unsupported",
-        message: "Cursor did not advertise this command",
-        retryable: false
-      }
-    };
-  const args = command.arguments;
-  if (args && (Object.keys(args).some((key) => key !== "text") || args.text !== void 0 && typeof args.text !== "string" || descriptor.argumentMode === "none" && Object.keys(args).length))
-    return {
-      ok: false,
-      error: {
-        code: "invalidRequest",
-        message: "Invalid Cursor command arguments",
-        retryable: false
-      }
-    };
-  const text2 = typeof args?.text === "string" ? args.text.trim() : "";
-  return { ok: true, value: `${descriptor.invocation}${text2 ? ` ${text2}` : ""}` };
-}
-
-// dist/adapter.js
-import path7 from "node:path";
-
 // ../../harness-adapter/dist/approval.js
 function invalidRequest(message) {
   return { code: "invalidRequest", message, retryable: false };
@@ -28334,6 +28354,135 @@ function parseHostUsage(value) {
   return { ...value };
 }
 
+// ../../harness-adapter/dist/live-command-catalog.js
+var COMMON_EXCLUDED_LIVE_COMMANDS = /* @__PURE__ */ new Set([
+  // Session lifecycle
+  "branch",
+  "clear",
+  "exit",
+  "fork",
+  "fresh",
+  "new",
+  "quit",
+  "rename",
+  "rename-chat",
+  "reset",
+  "resume",
+  "rewind",
+  "session",
+  "sessions",
+  // Desktop-owned configuration
+  "autocompact",
+  "color",
+  "config",
+  "effort",
+  "fast",
+  "keybindings",
+  "model",
+  "models",
+  "output-style",
+  "permissions",
+  "settings",
+  "statusline",
+  "terminal-setup",
+  "theme",
+  "vim",
+  // Trust and approval policy
+  "always-approve",
+  "auto-mode-setup",
+  // Native login
+  "login",
+  "logout",
+  // Work outliving the Turn
+  "autopilot",
+  "background",
+  "bg",
+  "goal",
+  "jobs",
+  "loop",
+  "multitask",
+  "queue",
+  "remote-control",
+  "schedule",
+  "steer",
+  // Native terminal UI
+  "copy",
+  "debug",
+  "feedback",
+  "heapdump",
+  "share",
+  "shell",
+  // Plugin and MCP management
+  "marketplace",
+  "mcp",
+  "plugins",
+  "reload-plugins"
+]);
+var COMMON_EXCLUDED_LIVE_COMMAND_PREFIXES = ["__", "hooks-"];
+function isExcludedLiveCommand(name, kind, extra = {}) {
+  const normalized = name.trim().replace(/^\//u, "");
+  if (new Set(extra.names ?? []).has(normalized))
+    return true;
+  if (extra.prefixes?.some((prefix) => normalized.startsWith(prefix)))
+    return true;
+  if (kind === "skill")
+    return false;
+  return COMMON_EXCLUDED_LIVE_COMMANDS.has(normalized) || COMMON_EXCLUDED_LIVE_COMMAND_PREFIXES.some((prefix) => normalized.startsWith(prefix));
+}
+
+// dist/slash-commands.js
+var CURSOR_EXCLUSIONS = { names: ["update-cli-config"] };
+function cursorCommands(native) {
+  const commands = /* @__PURE__ */ new Map();
+  for (const command of native) {
+    if (isExcludedLiveCommand(command.name, "command", CURSOR_EXCLUSIONS))
+      continue;
+    const result = harnessCommandDescriptorSchema.safeParse({
+      id: `cursor.${command.name}`,
+      invocation: `/${command.name}`,
+      label: `/${command.name}`,
+      ...command.description.trim() ? { description: command.description.slice(0, 512) } : {},
+      // Cursor 2026.09.10 omits input metadata for both its administrative command
+      // and custom commands/skills, whose parser still accepts trailing text.
+      // Honor an explicit native no-input declaration without disabling those skills.
+      argumentMode: command.input === null || command.name === "copy-request-id" ? "none" : "text"
+    });
+    if (result.success)
+      commands.set(result.data.id, result.data);
+  }
+  return { commands: [...commands.values()] };
+}
+var CURSOR_COMMAND_CATALOG = cursorCommands([
+  { name: "copy-request-id", description: "Copy the current request ID", input: null }
+]);
+function cursorCommandPrompt(command, catalog) {
+  const descriptor = catalog.commands.find(({ id }) => id === command.commandId);
+  if (!descriptor)
+    return {
+      ok: false,
+      error: {
+        code: "unsupported",
+        message: "Cursor did not advertise this command",
+        retryable: false
+      }
+    };
+  const args = command.arguments;
+  if (args && (Object.keys(args).some((key) => key !== "text") || args.text !== void 0 && typeof args.text !== "string" || descriptor.argumentMode === "none" && Object.keys(args).length))
+    return {
+      ok: false,
+      error: {
+        code: "invalidRequest",
+        message: "Invalid Cursor command arguments",
+        retryable: false
+      }
+    };
+  const text2 = typeof args?.text === "string" ? args.text.trim() : "";
+  return { ok: true, value: `${descriptor.invocation}${text2 ? ` ${text2}` : ""}` };
+}
+
+// dist/adapter.js
+import path7 from "node:path";
+
 // dist/thinking.js
 var choices = (option) => option.type === "select" ? option.options.flatMap((entry) => "value" in entry ? [entry] : entry.options) : [];
 function cursorThinking(options) {
@@ -46073,6 +46222,7 @@ function rejected(code, message) {
 var CursorAdapter = class {
   options;
   commandCatalog = CURSOR_COMMAND_CATALOG;
+  liveCommandCatalog = true;
   subagents = {
     readSnapshot: async ({ parent, nativeSubagentId, cwd }) => {
       if (parent.harnessId !== this.harnessId || this.#closed)
@@ -47418,6 +47568,7 @@ var BrokeredHarnessSession = class {
 var BrokeredHarnessAdapter = class {
   #sessions = /* @__PURE__ */ new Set();
   commandCatalog;
+  liveCommandCatalog;
   harnessId;
   #descriptorPath;
   #forwardEnvironment;
@@ -47440,6 +47591,8 @@ var BrokeredHarnessAdapter = class {
     this.#forwardEnvironment = input.forwardDelegationEnvironment === true;
     if (input.commandCatalog)
       this.commandCatalog = input.commandCatalog;
+    if (input.liveCommandCatalog)
+      this.liveCommandCatalog = true;
     this.#descriptorPath = input.descriptorPath ?? defaultHarnessBrokerDescriptorPath(input.environment, this.harnessId);
   }
   async inspectAccount() {
@@ -47534,6 +47687,7 @@ function createHarnessAdapter(context) {
       harnessId: "cursor-cli",
       forwardDelegationEnvironment: true,
       commandCatalog: CURSOR_COMMAND_CATALOG,
+      liveCommandCatalog: true,
       environment: { ...context.environment }
     });
   return new CursorAdapter({ environment: { ...context.environment } });