@every-env/compound-plugin 0.9.0 → 2.34.2

package/tests/opencode-writer.test.ts

@@ -21,6 +21,7 @@ describe("writeOpenCodeBundle", () => {
       config: { $schema: "https://opencode.ai/config.json" },
       agents: [{ name: "agent-one", content: "Agent content" }],
       plugins: [{ name: "hook.ts", content: "export {}" }],
+      commandFiles: [],
       skillDirs: [
         {
           name: "skill-one",
@@ -44,6 +45,7 @@ describe("writeOpenCodeBundle", () => {
       config: { $schema: "https://opencode.ai/config.json" },
       agents: [{ name: "agent-one", content: "Agent content" }],
       plugins: [],
+      commandFiles: [],
       skillDirs: [
         {
           name: "skill-one",
@@ -68,6 +70,7 @@ describe("writeOpenCodeBundle", () => {
       config: { $schema: "https://opencode.ai/config.json" },
       agents: [{ name: "agent-one", content: "Agent content" }],
       plugins: [],
+      commandFiles: [],
       skillDirs: [
         {
           name: "skill-one",
@@ -85,28 +88,35 @@ describe("writeOpenCodeBundle", () => {
     expect(await exists(path.join(outputRoot, ".opencode"))).toBe(false)
   })
 
-  test("backs up existing opencode.json before overwriting", async () => {
+  test("merges plugin config into existing opencode.json without destroying user keys", async () => {
     const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "opencode-backup-"))
     const outputRoot = path.join(tempRoot, ".opencode")
     const configPath = path.join(outputRoot, "opencode.json")
 
-    // Create existing config
+    // Create existing config with user keys
     await fs.mkdir(outputRoot, { recursive: true })
     const originalConfig = { $schema: "https://opencode.ai/config.json", custom: "value" }
     await fs.writeFile(configPath, JSON.stringify(originalConfig, null, 2))
 
+    // Bundle adds mcp server but keeps user's custom key
     const bundle: OpenCodeBundle = {
-      config: { $schema: "https://opencode.ai/config.json", new: "config" },
+      config: { 
+        $schema: "https://opencode.ai/config.json", 
+        mcp: { "plugin-server": { type: "local", command: "uvx", args: ["plugin-srv"] } } 
+      },
       agents: [],
       plugins: [],
+      commandFiles: [],
       skillDirs: [],
     }
 
     await writeOpenCodeBundle(outputRoot, bundle)
 
-    // New config should be written
+    // Merged config should have both user key and plugin key
     const newConfig = JSON.parse(await fs.readFile(configPath, "utf8"))
-    expect(newConfig.new).toBe("config")
+    expect(newConfig.custom).toBe("value")  // user key preserved
+    expect(newConfig.mcp).toBeDefined()
+    expect(newConfig.mcp["plugin-server"]).toBeDefined()
 
     // Backup should exist with original content
     const files = await fs.readdir(outputRoot)
@@ -116,4 +126,131 @@ describe("writeOpenCodeBundle", () => {
     const backupContent = JSON.parse(await fs.readFile(path.join(outputRoot, backupFileName!), "utf8"))
     expect(backupContent.custom).toBe("value")
   })
+
+  test("merges mcp servers without overwriting user entry", async () => {
+    const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "opencode-merge-mcp-"))
+    const outputRoot = path.join(tempRoot, ".opencode")
+    const configPath = path.join(outputRoot, "opencode.json")
+
+    // Create existing config with user's mcp server
+    await fs.mkdir(outputRoot, { recursive: true })
+    const existingConfig = { 
+      mcp: { "user-server": { type: "local", command: "uvx", args: ["user-srv"] } } 
+    }
+    await fs.writeFile(configPath, JSON.stringify(existingConfig, null, 2))
+
+    // Bundle adds plugin server AND has conflicting user-server with different args
+    const bundle: OpenCodeBundle = {
+      config: { 
+        $schema: "https://opencode.ai/config.json",
+        mcp: { 
+          "plugin-server": { type: "local", command: "uvx", args: ["plugin-srv"] },
+          "user-server": { type: "local", command: "uvx", args: ["plugin-override"] }  // conflict
+        } 
+      },
+      agents: [],
+      plugins: [],
+      commandFiles: [],
+      skillDirs: [],
+    }
+
+    await writeOpenCodeBundle(outputRoot, bundle)
+
+    // Merged config should have both servers, with user-server keeping user's original args
+    const mergedConfig = JSON.parse(await fs.readFile(configPath, "utf8"))
+    expect(mergedConfig.mcp).toBeDefined()
+    expect(mergedConfig.mcp["plugin-server"]).toBeDefined()
+    expect(mergedConfig.mcp["user-server"]).toBeDefined()
+    expect(mergedConfig.mcp["user-server"].args[0]).toBe("user-srv")  // user wins on conflict
+    expect(mergedConfig.mcp["plugin-server"].args[0]).toBe("plugin-srv")  // plugin entry present
+  })
+
+  test("preserves unrelated user keys when merging opencode.json", async () => {
+    const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "opencode-preserve-"))
+    const outputRoot = path.join(tempRoot, ".opencode")
+    const configPath = path.join(outputRoot, "opencode.json")
+
+    // Create existing config with multiple user keys
+    await fs.mkdir(outputRoot, { recursive: true })
+    const existingConfig = { 
+      model: "my-model",
+      theme: "dark",
+      mcp: {}
+    }
+    await fs.writeFile(configPath, JSON.stringify(existingConfig, null, 2))
+
+    // Bundle adds plugin-specific keys
+    const bundle: OpenCodeBundle = {
+      config: { 
+        $schema: "https://opencode.ai/config.json",
+        mcp: { "plugin-server": { type: "local", command: "uvx", args: ["plugin-srv"] } },
+        permission: { "bash": "allow" }
+      },
+      agents: [],
+      plugins: [],
+      commandFiles: [],
+      skillDirs: [],
+    }
+
+    await writeOpenCodeBundle(outputRoot, bundle)
+
+    // All user keys preserved
+    const mergedConfig = JSON.parse(await fs.readFile(configPath, "utf8"))
+    expect(mergedConfig.model).toBe("my-model")
+    expect(mergedConfig.theme).toBe("dark")
+    expect(mergedConfig.mcp["plugin-server"]).toBeDefined()
+    expect(mergedConfig.permission["bash"]).toBe("allow")
+  })
+
+  test("writes command files as .md in commands/ directory", async () => {
+    const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "opencode-cmd-"))
+    const outputRoot = path.join(tempRoot, ".config", "opencode")
+    const bundle: OpenCodeBundle = {
+      config: { $schema: "https://opencode.ai/config.json" },
+      agents: [],
+      plugins: [],
+      commandFiles: [{ name: "my-cmd", content: "---\ndescription: Test\n---\n\nDo something." }],
+      skillDirs: [],
+    }
+
+    await writeOpenCodeBundle(outputRoot, bundle)
+
+    const cmdPath = path.join(outputRoot, "commands", "my-cmd.md")
+    expect(await exists(cmdPath)).toBe(true)
+
+    const content = await fs.readFile(cmdPath, "utf8")
+    expect(content).toBe("---\ndescription: Test\n---\n\nDo something.\n")
+  })
+
+  test("backs up existing command .md file before overwriting", async () => {
+    const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "opencode-cmd-backup-"))
+    const outputRoot = path.join(tempRoot, ".opencode")
+    const commandsDir = path.join(outputRoot, "commands")
+    await fs.mkdir(commandsDir, { recursive: true })
+
+    const cmdPath = path.join(commandsDir, "my-cmd.md")
+    await fs.writeFile(cmdPath, "old content\n")
+
+    const bundle: OpenCodeBundle = {
+      config: { $schema: "https://opencode.ai/config.json" },
+      agents: [],
+      plugins: [],
+      commandFiles: [{ name: "my-cmd", content: "---\ndescription: New\n---\n\nNew content." }],
+      skillDirs: [],
+    }
+
+    await writeOpenCodeBundle(outputRoot, bundle)
+
+    // New content should be written
+    const content = await fs.readFile(cmdPath, "utf8")
+    expect(content).toBe("---\ndescription: New\n---\n\nNew content.\n")
+
+    // Backup should exist
+    const files = await fs.readdir(commandsDir)
+    const backupFileName = files.find((f) => f.startsWith("my-cmd.md.bak."))
+    expect(backupFileName).toBeDefined()
+
+    const backupContent = await fs.readFile(path.join(commandsDir, backupFileName!), "utf8")
+    expect(backupContent).toBe("old content\n")
+  })
 })

package/tests/qwen-converter.test.ts

@@ -0,0 +1,238 @@
+import { describe, expect, test } from "bun:test"
+import { convertClaudeToQwen } from "../src/converters/claude-to-qwen"
+import { parseFrontmatter } from "../src/utils/frontmatter"
+import type { ClaudePlugin } from "../src/types/claude"
+
+const fixturePlugin: ClaudePlugin = {
+  root: "/tmp/plugin",
+  manifest: { name: "compound-engineering", version: "1.2.0", description: "A plugin for engineers" },
+  agents: [
+    {
+      name: "security-sentinel",
+      description: "Security-focused agent",
+      capabilities: ["Threat modeling", "OWASP"],
+      model: "claude-sonnet-4-20250514",
+      body: "Focus on vulnerabilities in ~/.claude/settings.",
+      sourcePath: "/tmp/plugin/agents/security-sentinel.md",
+    },
+    {
+      name: "brainstorm-agent",
+      description: "Creative brainstormer",
+      model: "inherit",
+      body: "Generate ideas.",
+      sourcePath: "/tmp/plugin/agents/brainstorm-agent.md",
+    },
+  ],
+  commands: [
+    {
+      name: "workflows:plan",
+      description: "Planning command",
+      argumentHint: "[FOCUS]",
+      model: "inherit",
+      allowedTools: ["Read"],
+      body: "Plan the work. Config at ~/.claude/settings.",
+      sourcePath: "/tmp/plugin/commands/workflows/plan.md",
+    },
+    {
+      name: "disabled-cmd",
+      description: "Disabled",
+      model: "inherit",
+      allowedTools: [],
+      body: "Should be excluded.",
+      disableModelInvocation: true,
+      sourcePath: "/tmp/plugin/commands/disabled-cmd.md",
+    },
+  ],
+  skills: [
+    {
+      name: "existing-skill",
+      description: "Existing skill",
+      sourceDir: "/tmp/plugin/skills/existing-skill",
+      skillPath: "/tmp/plugin/skills/existing-skill/SKILL.md",
+    },
+  ],
+  hooks: undefined,
+  mcpServers: {
+    local: { command: "npx", args: ["-y", "some-mcp"], env: { API_KEY: "${YOUR_API_KEY}" } },
+    remote: { url: "https://mcp.example.com/api", headers: { Authorization: "Bearer token" } },
+  },
+}
+
+const defaultOptions = {
+  agentMode: "subagent" as const,
+  inferTemperature: false,
+}
+
+describe("convertClaudeToQwen", () => {
+  test("converts agents to yaml format with frontmatter", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+
+    const agent = bundle.agents.find((a) => a.name === "security-sentinel")
+    expect(agent).toBeDefined()
+    expect(agent!.format).toBe("yaml")
+    const parsed = parseFrontmatter(agent!.content)
+    expect(parsed.data.name).toBe("security-sentinel")
+    expect(parsed.data.description).toBe("Security-focused agent")
+    expect(parsed.data.model).toBe("anthropic/claude-sonnet-4-20250514")
+    expect(parsed.body).toContain("Focus on vulnerabilities")
+  })
+
+  test("agent with inherit model has no model field in frontmatter", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+    const agent = bundle.agents.find((a) => a.name === "brainstorm-agent")
+    expect(agent).toBeDefined()
+    const parsed = parseFrontmatter(agent!.content)
+    expect(parsed.data.model).toBeUndefined()
+  })
+
+  test("inferTemperature injects temperature based on agent name/description", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, { ...defaultOptions, inferTemperature: true })
+
+    const sentinel = bundle.agents.find((a) => a.name === "security-sentinel")
+    const parsed = parseFrontmatter(sentinel!.content)
+    expect(parsed.data.temperature).toBe(0.1) // review/security → 0.1
+
+    const brainstorm = bundle.agents.find((a) => a.name === "brainstorm-agent")
+    const bParsed = parseFrontmatter(brainstorm!.content)
+    expect(bParsed.data.temperature).toBe(0.6) // brainstorm → 0.6
+  })
+
+  test("inferTemperature returns undefined for unrecognized agents (no temperature set)", () => {
+    const plugin: ClaudePlugin = {
+      ...fixturePlugin,
+      agents: [{ name: "my-helper", description: "Generic helper", model: "inherit", body: "help", sourcePath: "/tmp/a.md" }],
+    }
+    const bundle = convertClaudeToQwen(plugin, { ...defaultOptions, inferTemperature: true })
+    const agent = bundle.agents[0]
+    const parsed = parseFrontmatter(agent.content)
+    expect(parsed.data.temperature).toBeUndefined()
+  })
+
+  test("converts commands to command files excluding disableModelInvocation", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+
+    const planCmd = bundle.commandFiles.find((c) => c.name === "workflows:plan")
+    expect(planCmd).toBeDefined()
+    const parsed = parseFrontmatter(planCmd!.content)
+    expect(parsed.data.description).toBe("Planning command")
+    expect(parsed.data.allowedTools).toEqual(["Read"])
+
+    const disabled = bundle.commandFiles.find((c) => c.name === "disabled-cmd")
+    expect(disabled).toBeUndefined()
+  })
+
+  test("config uses plugin manifest name and version", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+    expect(bundle.config.name).toBe("compound-engineering")
+    expect(bundle.config.version).toBe("1.2.0")
+    expect(bundle.config.commands).toBe("commands")
+    expect(bundle.config.skills).toBe("skills")
+    expect(bundle.config.agents).toBe("agents")
+  })
+
+  test("stdio MCP servers are included in config", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+    expect(bundle.config.mcpServers).toBeDefined()
+    const local = bundle.config.mcpServers!.local
+    expect(local.command).toBe("npx")
+    expect(local.args).toEqual(["-y", "some-mcp"])
+    // No cwd field
+    expect((local as any).cwd).toBeUndefined()
+  })
+
+  test("remote MCP servers are skipped with a warning (not converted to curl)", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+    // Only local (stdio) server should be present
+    expect(bundle.config.mcpServers).toBeDefined()
+    expect(bundle.config.mcpServers!.remote).toBeUndefined()
+    expect(bundle.config.mcpServers!.local).toBeDefined()
+  })
+
+  test("placeholder env vars are extracted as settings", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+    expect(bundle.config.settings).toBeDefined()
+    const apiKeySetting = bundle.config.settings!.find((s) => s.envVar === "API_KEY")
+    expect(apiKeySetting).toBeDefined()
+    expect(apiKeySetting!.sensitive).toBe(true)
+    expect(apiKeySetting!.name).toBe("Api Key")
+  })
+
+  test("plugin with no MCP servers has no mcpServers in config", () => {
+    const plugin: ClaudePlugin = { ...fixturePlugin, mcpServers: undefined }
+    const bundle = convertClaudeToQwen(plugin, defaultOptions)
+    expect(bundle.config.mcpServers).toBeUndefined()
+  })
+
+  test("context file uses plugin.manifest.name and manifest.description", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+    expect(bundle.contextFile).toContain("# compound-engineering")
+    expect(bundle.contextFile).toContain("A plugin for engineers")
+    expect(bundle.contextFile).toContain("## Agents")
+    expect(bundle.contextFile).toContain("security-sentinel")
+    expect(bundle.contextFile).toContain("## Commands")
+    expect(bundle.contextFile).toContain("/workflows:plan")
+    // Disabled commands excluded
+    expect(bundle.contextFile).not.toContain("disabled-cmd")
+    expect(bundle.contextFile).toContain("## Skills")
+    expect(bundle.contextFile).toContain("existing-skill")
+  })
+
+  test("paths are rewritten from .claude/ to .qwen/ in agent and command content", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+
+    const agent = bundle.agents.find((a) => a.name === "security-sentinel")
+    expect(agent!.content).toContain("~/.qwen/settings")
+    expect(agent!.content).not.toContain("~/.claude/settings")
+
+    const cmd = bundle.commandFiles.find((c) => c.name === "workflows:plan")
+    expect(cmd!.content).toContain("~/.qwen/settings")
+    expect(cmd!.content).not.toContain("~/.claude/settings")
+  })
+
+  test("opencode paths are NOT rewritten (only claude paths)", () => {
+    const plugin: ClaudePlugin = {
+      ...fixturePlugin,
+      agents: [
+        {
+          name: "test-agent",
+          description: "test",
+          model: "inherit",
+          body: "See .opencode/config and ~/.config/opencode/settings",
+          sourcePath: "/tmp/a.md",
+        },
+      ],
+    }
+    const bundle = convertClaudeToQwen(plugin, defaultOptions)
+    const agent = bundle.agents[0]
+    // opencode paths should NOT be rewritten
+    expect(agent.content).toContain(".opencode/config")
+    expect(agent.content).not.toContain(".qwen/config")
+  })
+
+  test("skillDirs passes through original skills", () => {
+    const bundle = convertClaudeToQwen(fixturePlugin, defaultOptions)
+    const skill = bundle.skillDirs.find((s) => s.name === "existing-skill")
+    expect(skill).toBeDefined()
+    expect(skill!.sourceDir).toBe("/tmp/plugin/skills/existing-skill")
+  })
+
+  test("normalizeModel prefixes claude models with anthropic/", () => {
+    const plugin: ClaudePlugin = {
+      ...fixturePlugin,
+      agents: [{ name: "a", description: "d", model: "claude-opus-4-5", body: "b", sourcePath: "/tmp/a.md" }],
+    }
+    const bundle = convertClaudeToQwen(plugin, defaultOptions)
+    const parsed = parseFrontmatter(bundle.agents[0].content)
+    expect(parsed.data.model).toBe("anthropic/claude-opus-4-5")
+  })
+
+  test("normalizeModel passes through already-namespaced models unchanged", () => {
+    const plugin: ClaudePlugin = {
+      ...fixturePlugin,
+      agents: [{ name: "a", description: "d", model: "google/gemini-2.0", body: "b", sourcePath: "/tmp/a.md" }],
+    }
+    const bundle = convertClaudeToQwen(plugin, defaultOptions)
+    const parsed = parseFrontmatter(bundle.agents[0].content)
+    expect(parsed.data.model).toBe("google/gemini-2.0")
+  })
+})

package/tests/resolve-output.test.ts

@@ -0,0 +1,131 @@
+import { describe, expect, test } from "bun:test"
+import os from "os"
+import path from "path"
+import { resolveTargetOutputRoot } from "../src/utils/resolve-output"
+
+const baseOptions = {
+  outputRoot: "/tmp/output",
+  codexHome: path.join(os.homedir(), ".codex"),
+  piHome: path.join(os.homedir(), ".pi", "agent"),
+  hasExplicitOutput: false,
+}
+
+describe("resolveTargetOutputRoot", () => {
+  test("codex returns codexHome", () => {
+    const result = resolveTargetOutputRoot({ ...baseOptions, targetName: "codex" })
+    expect(result).toBe(baseOptions.codexHome)
+  })
+
+  test("pi returns piHome", () => {
+    const result = resolveTargetOutputRoot({ ...baseOptions, targetName: "pi" })
+    expect(result).toBe(baseOptions.piHome)
+  })
+
+  test("droid returns ~/.factory", () => {
+    const result = resolveTargetOutputRoot({ ...baseOptions, targetName: "droid" })
+    expect(result).toBe(path.join(os.homedir(), ".factory"))
+  })
+
+  test("cursor with no explicit output uses cwd", () => {
+    const result = resolveTargetOutputRoot({ ...baseOptions, targetName: "cursor" })
+    expect(result).toBe(path.join(process.cwd(), ".cursor"))
+  })
+
+  test("cursor with explicit output uses outputRoot", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "cursor",
+      hasExplicitOutput: true,
+    })
+    expect(result).toBe(path.join("/tmp/output", ".cursor"))
+  })
+
+  test("windsurf default scope (global) resolves to ~/.codeium/windsurf/", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "windsurf",
+      scope: "global",
+    })
+    expect(result).toBe(path.join(os.homedir(), ".codeium", "windsurf"))
+  })
+
+  test("windsurf workspace scope resolves to cwd/.windsurf/", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "windsurf",
+      scope: "workspace",
+    })
+    expect(result).toBe(path.join(process.cwd(), ".windsurf"))
+  })
+
+  test("windsurf with explicit output overrides global scope", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "windsurf",
+      hasExplicitOutput: true,
+      scope: "global",
+    })
+    expect(result).toBe("/tmp/output")
+  })
+
+  test("windsurf with explicit output overrides workspace scope", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "windsurf",
+      hasExplicitOutput: true,
+      scope: "workspace",
+    })
+    expect(result).toBe("/tmp/output")
+  })
+
+  test("windsurf with no scope and no explicit output uses cwd/.windsurf/", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "windsurf",
+    })
+    expect(result).toBe(path.join(process.cwd(), ".windsurf"))
+  })
+
+  test("opencode returns outputRoot as-is", () => {
+    const result = resolveTargetOutputRoot({ ...baseOptions, targetName: "opencode" })
+    expect(result).toBe("/tmp/output")
+  })
+
+  test("openclaw uses openclawHome + pluginName", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "openclaw",
+      openclawHome: "/custom/openclaw/extensions",
+      pluginName: "my-plugin",
+    })
+    expect(result).toBe("/custom/openclaw/extensions/my-plugin")
+  })
+
+  test("openclaw falls back to default home when not provided", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "openclaw",
+      pluginName: "my-plugin",
+    })
+    expect(result).toBe(path.join(os.homedir(), ".openclaw", "extensions", "my-plugin"))
+  })
+
+  test("qwen uses qwenHome + pluginName", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "qwen",
+      qwenHome: "/custom/qwen/extensions",
+      pluginName: "my-plugin",
+    })
+    expect(result).toBe("/custom/qwen/extensions/my-plugin")
+  })
+
+  test("qwen falls back to default home when not provided", () => {
+    const result = resolveTargetOutputRoot({
+      ...baseOptions,
+      targetName: "qwen",
+      pluginName: "my-plugin",
+    })
+    expect(result).toBe(path.join(os.homedir(), ".qwen", "extensions", "my-plugin"))
+  })
+})

package/tests/sync-codex.test.ts

@@ -0,0 +1,64 @@
+import { describe, expect, test } from "bun:test"
+import { promises as fs } from "fs"
+import os from "os"
+import path from "path"
+import type { ClaudeHomeConfig } from "../src/parsers/claude-home"
+import { syncToCodex } from "../src/sync/codex"
+
+describe("syncToCodex", () => {
+  test("writes stdio and remote MCP servers into a managed block without clobbering user config", async () => {
+    const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "sync-codex-"))
+    const fixtureSkillDir = path.join(import.meta.dir, "fixtures", "sample-plugin", "skills", "skill-one")
+    const configPath = path.join(tempRoot, "config.toml")
+
+    await fs.writeFile(
+      configPath,
+      [
+        "[custom]",
+        "enabled = true",
+        "",
+        "# BEGIN compound-plugin Claude Code MCP",
+        "[mcp_servers.old]",
+        "command = \"old\"",
+        "# END compound-plugin Claude Code MCP",
+        "",
+        "[post]",
+        "value = 2",
+        "",
+      ].join("\n"),
+    )
+
+    const config: ClaudeHomeConfig = {
+      skills: [
+        {
+          name: "skill-one",
+          sourceDir: fixtureSkillDir,
+          skillPath: path.join(fixtureSkillDir, "SKILL.md"),
+        },
+      ],
+      mcpServers: {
+        local: { command: "echo", args: ["hello"], env: { KEY: "VALUE" } },
+        remote: { url: "https://example.com/mcp", headers: { Authorization: "Bearer token" } },
+      },
+    }
+
+    await syncToCodex(config, tempRoot)
+
+    const skillPath = path.join(tempRoot, "skills", "skill-one")
+    expect((await fs.lstat(skillPath)).isSymbolicLink()).toBe(true)
+
+    const content = await fs.readFile(configPath, "utf8")
+    expect(content).toContain("[custom]")
+    expect(content).toContain("[post]")
+    expect(content).not.toContain("[mcp_servers.old]")
+    expect(content).toContain("[mcp_servers.local]")
+    expect(content).toContain("command = \"echo\"")
+    expect(content).toContain("[mcp_servers.remote]")
+    expect(content).toContain("url = \"https://example.com/mcp\"")
+    expect(content).toContain("http_headers")
+    expect(content.match(/# BEGIN compound-plugin Claude Code MCP/g)?.length).toBe(1)
+
+    const perms = (await fs.stat(configPath)).mode & 0o777
+    expect(perms).toBe(0o600)
+  })
+})